Cloudstack 4.4 VM启用HA功能后无法切换主机
Dear All, 如标题，环境是所有系统方案、计算方案都启用了HA功能和主机标签。如下图1，现现象是实例无法切换主机，点击迁移到主机没有任何反应，但是系统VM可以迁移。请问实例为什么迁移不了。谢谢!
Re: CephFS vs. GFS2
Officially, CephFS is NOT production ready - that being said by the Intank - you get your answer :) On 4 November 2014 08:21, Stephan Seitz s.se...@secretresearchfacility.com wrote: Am Dienstag, den 04.11.2014, 09:07 +0200 schrieb Vladimir Melnik: Dear colleagues, Did anyone compare CephFS and GFS2 or did anyone read any articles about comparison of CephFS and GFS2 in regard to their performance? Alas, I haven't found anything on this topic. Right now I'm using GFS2 as a primary storage filesystem (it's accessible by iSCSI+multipath), but, of course, I'd like to gain more performance. Should I try CephFS as an alternative? Both techniques are quite different. In short, you shouldn't use CephFS in favor of ceph's native RBD. I'll try to follow up later that day - currently in a hurry. Thanks! -- Andrija Panić -- http://admintweets.com --
Re: Cloudstack Secondary Storage filling up
file system corruption ? do: du -hs /export/secondary/* that will list each subfolder size inside SECONDARY folder. BTW, are you maybe also using /export/PRIMARY for Primary storage - that might take you space - if it is shared space by bith primary and secondary storage... On 4 November 2014 00:41, motty cruz motty.c...@gmail.com wrote: Thanks Abhlsek, I only have one snapshot in the Snapshot directory and is only 40GB. Thanks, Motty On Mon, Nov 3, 2014 at 3:32 PM, abhisek basu abhisekb...@msn.com wrote: Do you have many snapshots for large volumes? Please check snapshot directory in side secondary storage as well. Sent from my iPhone On 4 Nov 2014, at 4:13 am, motty cruz motty.c...@gmail.com wrote: yes that is correct! I only have 6 ISOs but the secondary storage is 79% full out of 1TB I have 200GB of free space. when I execute du -h 16G ./219 but when I execute command ls I don't see anything so I did ls -la I see a hidden file 265]# ls -la total 13134948 drwxrwxrwx 2 root root4096 Sep 30 14:19 . drwxrwxrwx 62 root root4096 Nov 3 14:41 .. -rw-r--r-- 1 root root 13450174464 Sep 30 14:21 .nfs03f400750013 so I am asking if this file is OK to delete. Thanks in advance! Motty On Mon, Nov 3, 2014 at 2:30 PM, Andrija Panic andrija.pa...@gmail.com wrote: If they are completely empty - yes. But what is the point with deleting the empty folders? And dont really understand your original issue ? You said you have only 6 isos but storage is 79%full ? On Nov 3, 2014 11:04 PM, motty cruz motty.c...@gmail.com wrote: Thanks Andrija, some of the folders seem to be empty: 2]# du -h | less 16G ./280 [root@debka 2]# cd 280 [root@debka 280]# ls [root@debka 280]# ls [root@deba 2]# pwd /export/secondary/template/tmpl/2 [root@deba 2]# ls 202 209 214 218 221 225 238 241 244 247 250 254 257 261 264 267 271 278 282 287 292 207 212 216 219 222 227 239 242 245 248 252 255 259 262 265 269 272 280 283 288 293 208 213 217 220 224 230 240 243 246 249 253 256 260 263 266 270 276 281 286 289 294 [root@deba 2]# should I delete them? On Mon, Nov 3, 2014 at 1:45 PM, Andrija Panic andrija.pa...@gmail.com wrote: There is template.properties file inside each template folder - you can read these and get information for each template..,and choose which one to deletethese folders/templates seems like they all belong to different accounts inside same domain - too much folders if you really have only 6 isos... On Nov 3, 2014 10:33 PM, motty cruz motty.c...@gmail.com wrote: Hello, I have a 1TB of secondary Storage which is 79% used but I only have 6 ISOs and 3 templates. I am using XenServer 6.2. Secondary Storage is a NFS server: du -h 16G ./template/tmpl/2/239 16G ./template/tmpl/2/218 7.5G ./template/tmpl/2/282 16G ./template/tmpl/2/245 16G ./template/tmpl/2/246 13G ./template/tmpl/2/271 7.5G ./template/tmpl/2/257 2.5G ./template/tmpl/2/288 399M ./template/tmpl/2/209 12G ./template/tmpl/2/254 16G ./template/tmpl/2/238 16G ./template/tmpl/2/261 16G ./template/tmpl/2/243 12G ./template/tmpl/2/252 16G ./template/tmpl/2/267 13G ./template/tmpl/2/270 12G ./template/tmpl/2/250 13G ./template/tmpl/2/272 16G ./template/tmpl/2/214 16G ./template/tmpl/2/230 13G ./template/tmpl/2/266 16G ./template/tmpl/2/292 16G ./template/tmpl/2/278 16G ./template/tmpl/2/240 16G ./template/tmpl/2/213 13G ./template/tmpl/2/269 7.5G ./template/tmpl/2/256 11G ./template/tmpl/2/264 1.4G ./template/tmpl/2/294 744G ./template/tmpl/2 750G ./template/tmpl 750G ./template 4.0K ./volumes 750G . would it be safe to delete some of this templates manaully? if yes how can I identified a replicated templates and delete them? -- Thanks for your support, Motty -- Thanks for your support, Motty -- Thanks for your support, Motty -- Thanks for your support, Motty -- Andrija Panić -- http://admintweets.com --
RE: Source NAT in Virtual Router Cannot Work
Hi Sun, Make sure you've set the Egress rules for the protocols and ports you're trying to allow out (or ALL). Under Networks, enter the Isolated Network you're interested in and select the Egress rules tab. To configure for allow all out, set Source CIDR to 0.0.0.0/0, Protocol All. Kind regards, Simon Fiddaman Innovation Engineer LeaseWeb Technologies B.V. T: +31 20 316 0235 M: E: s.fidda...@tech.leaseweb.com W: http://www.leaseweb.com Luttenbergweg 8, 1101 EC Amsterdam, Netherlands -Original Message- From: Sun Peng [mailto:sunpeng...@foxmail.com] Sent: Tuesday, November 04, 2014 8:55 AM To: users Subject: Source NAT in Virtual Router Cannot Work Dear All, I am using Cloudstack 4.4.1. When I set up a network with Source NAT, I find that it cannot work. In detail, the virtual router will get a public IP and a private IP. I find that the virtual router could ping Internet with the Public IP. The VM can ping the private IP of virtual router. However, VM cannot access Internet. Hence, I guess NAT cannot work. Is there any suggestions to solve this problem ? I have tried to log to virtual router and add the corresponding Source NAT iptables rules. It cannot work, too. -- Best Regards, Sun Peng
RE: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b)
1. The article is just a reference, but if we use a known security scanner the combination of ssl protocol and cipher suites used identifies these vulnerabilities on a given machine with available TLS lower versions, check for some thing like beast attack. 2. The conf file changes done will not countermeasure the sytemplate vuln issue i believe, we may still wanted to confirm that its indeed the httpd.conf which needs to be changed for apache2 as well for the particular template fix. Regards. Santhosh From: Rohit Yadav [rohit.ya...@shapeblue.com] Sent: Tuesday, November 04, 2014 2:42 AM To: d...@cloudstack.apache.org Cc: users@cloudstack.apache.org Subject: Re: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b) On 04-Nov-2014, at 1:02 pm, Santhosh Edukulla santhosh.eduku...@citrix.com wrote: 2. TLSv1.2 is the latest to be used and suggested default, ssl protocol and the ciphers we use leads to vulnerability, the settings for these as well should be available in similar config file. In our code, search for TLS leads to usage at places, and assumption is that it should negotiate the protocol version from configured and available latest version to least, so if TLSv1.2 is configured on server and client supports it, then it should work. http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118518-technote-esa-00.html Not sure how this applies for us, we use newer openssl version in systemvm templates. This is for some Cisco appliance not related to Debian/openssl. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b)
Hi, On 04-Nov-2014, at 1:49 pm, Santhosh Edukulla santhosh.eduku...@citrix.com wrote: 2. The conf file changes done will not countermeasure the sytemplate vuln issue i believe, we may still wanted to confirm that its indeed the httpd.conf which needs to be changed for apache2 as well for the particular template fix. AFAIK, on SSVM apache2 runs to serve templates/iso/volumes which users download and it uses 443/https and uses a custom SSL certificate if uploaded. If SSL is not enabled then it does not apply. In case of CPVM, the Java based agent uses an in-memory SSL keystore (that mgmt server sends it when it starts) and it implements its own Java based webservice that serves the console proxy over 443/https, again if SSL is enabled and a SSL certificate was uploaded. In both cases, if SSL is not enabled (global settings) for SSVM/CPVM these SSL based attacks don’t apply. Other than these components, it’s the ACS mgmt server (tomcat) or the reverse-proxy/LB in front of it that needs to be fixed either in the server.xml file or in respective reverse-proxy (such as nginx) or the LB (netscaler etc). I’m only aware of these components prone to SSL attacks. If there are other areas, we should find and fix them. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b)
Regarding the configurations in httpd.conf, they don't apply to apache server running in our system vms. We need to put the configuration in “/etc/apache2/mods-enabled/ssl.conf”, if you see apache2.conf it includes ssl.conf “Include mods-enabled/*.conf not httpd.conf. I tried using namp, it worked if we put the configuration in ssl.conf. -Harikrishna On 04-Nov-2014, at 1:49 pm, Santhosh Edukulla santhosh.eduku...@citrix.commailto:santhosh.eduku...@citrix.com wrote: 1. The article is just a reference, but if we use a known security scanner the combination of ssl protocol and cipher suites used identifies these vulnerabilities on a given machine with available TLS lower versions, check for some thing like beast attack. 2. The conf file changes done will not countermeasure the sytemplate vuln issue i believe, we may still wanted to confirm that its indeed the httpd.conf which needs to be changed for apache2 as well for the particular template fix. Regards. Santhosh From: Rohit Yadav [rohit.ya...@shapeblue.commailto:rohit.ya...@shapeblue.com] Sent: Tuesday, November 04, 2014 2:42 AM To: d...@cloudstack.apache.orgmailto:d...@cloudstack.apache.org Cc: users@cloudstack.apache.orgmailto:users@cloudstack.apache.org Subject: Re: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b) On 04-Nov-2014, at 1:02 pm, Santhosh Edukulla santhosh.eduku...@citrix.commailto:santhosh.eduku...@citrix.com wrote: 2. TLSv1.2 is the latest to be used and suggested default, ssl protocol and the ciphers we use leads to vulnerability, the settings for these as well should be available in similar config file. In our code, search for TLS leads to usage at places, and assumption is that it should negotiate the protocol version from configured and available latest version to least, so if TLSv1.2 is configured on server and client supports it, then it should work. http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118518-technote-esa-00.html Not sure how this applies for us, we use newer openssl version in systemvm templates. This is for some Cisco appliance not related to Debian/openssl. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.commailto:rohit.ya...@shapeblue.com Blog: bhaisaab.orghttp://bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: Are openvm.eu Templates Safe?
Hi, The CentOS templates are built using virt-install with the aforementioned kickstarts[1]. Everything is scripted. The FreeBSD and OpenBSD ones are built by hand due to lacking of automation tools. I'm in the process of adding all of the above in a publicly accessible jenkins instance so the whole thing is more transparent. So you can either take my word on it that they're not dodgy or just build your own using the kickstarts as someone said; they are provided especially for this reason. [1] - http://dl.openvm.eu/cloudstack/centos/ks/ -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Ian Duffy i...@ianduffy.ie To: users@cloudstack.apache.org Sent: Tuesday, 4 November, 2014 00:30:16 Subject: Re: Are openvm.eu Templates Safe? Hi Matthew, I can only speak for the Debian ( http://dl.openvm.eu/cloudstack/debian/vanilla/7/x86_64/ ) and Ubuntu ( http://dl.openvm.eu/cloudstack/ubuntu/vanilla/jenkins/ ) ones. (The others are save but talk to Nux for validation).
Re: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5)
+1, works for me in basic tests -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Rohit Yadav rohit.ya...@shapeblue.com To: dev d...@cloudstack.apache.org Cc: users@cloudstack.apache.org Sent: Tuesday, 4 November, 2014 07:35:05 Subject: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5) Hi All, I've created a 5.3.0 release of CloudMonkey, with the following artifacts up for a vote: Git Branch and Commit SH: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=shortlog;h=refs/heads/5.3 Commit: beb369c5913f3c19e2b8132892c1bcd116394ceb List of changes: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=blob_plain;f=CHANGES;hb=5.3 Source release (checksums and signatures are available at the same location): https://dist.apache.org/repos/dist/dev/cloudstack/cloudmonkey-5.3.0/ PGP release keys (signed using 0EE3D884): https://dist.apache.org/repos/dist/release/cloudstack/KEYS Testing procedure: https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudMonkey+Release+test+procedure This release aims to provide better parameter and filter completion, error handling and utf8/unicode support in CloudMonkey and therefore needs testing efforts in these areas. UTF-8 encoded string parameters usage needs to be tested in API calls, shell and piped calls, for example: $ create user account=admin username=रोहित lastname=यादव firstname=रोहित email=bhais...@apache.org password=正體字/繁體字日本人français한국فارسیpassword123” $ list users | grep रोहित The vote will be open till Thursday (72 hours). Please test this release and give your votes. Thanks. For sanity in tallying the vote, can PMC members please be sure to indicate (binding) with their vote? [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b)
Hi Hari, On 04-Nov-2014, at 2:21 pm, Harikrishna Patnala harikrishna.patn...@citrix.com wrote: Regarding the configurations in httpd.conf, they don't apply to apache server running in our system vms. We need to put the configuration in “/etc/apache2/mods-enabled/ssl.conf”, if you see apache2.conf it includes ssl.conf “Include mods-enabled/*.conf not httpd.conf. I tried using namp, it worked if we put the configuration in ssl.conf. Yes, I figured that this morning and have fixed it for 4.3. Doing it for master/4.5 now. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
RE: CephFS vs. GFS2
I am sure you can find a lot of different articles about Gluster/Ceph performance. Here is one of them: http://iopscience.iop.org/1742-6596/513/4/042014/pdf/1742-6596_513_4_042014.pdf I think it is not good to use CephFS with CS as it is FUSE and require additional layer to perform. As Andrija mentioned it is also not recommended to use it, because it is NOT for production. Ceph can use RBD devices and Cloudstack understands RBD storage. I see no need to use CephFS as it is possible to use RBD directly. If you want to create unified storage you are probably interested in S3/Swift interface that Ceph offers as well. So you can have primary storage connected to RBD and secondary - connected to S3/Swift. Vadim. -Original Message- From: Andrija Panic [mailto:andrija.pa...@gmail.com] Sent: Tuesday, November 04, 2014 10:10 AM To: users@cloudstack.apache.org Subject: Re: CephFS vs. GFS2 Officially, CephFS is NOT production ready - that being said by the Intank - you get your answer :) On 4 November 2014 08:21, Stephan Seitz s.se...@secretresearchfacility.com wrote: Am Dienstag, den 04.11.2014, 09:07 +0200 schrieb Vladimir Melnik: Dear colleagues, Did anyone compare CephFS and GFS2 or did anyone read any articles about comparison of CephFS and GFS2 in regard to their performance? Alas, I haven't found anything on this topic. Right now I'm using GFS2 as a primary storage filesystem (it's accessible by iSCSI+multipath), but, of course, I'd like to gain more performance. Should I try CephFS as an alternative? Both techniques are quite different. In short, you shouldn't use CephFS in favor of ceph's native RBD. I'll try to follow up later that day - currently in a hurry. Thanks! -- Andrija Panić -- http://admintweets.com --
RE: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b)
Rohit, As well, we may want to just revert the previous changes done to httpd.conf to keep the configuration of ciphers consistent across files. There we mentioned to support only TLS1...etc through + logic Here, we are excluding few protocols from all. Regards Santhosh From: Rohit Yadav [rohit.ya...@shapeblue.com] Sent: Tuesday, November 04, 2014 4:16 AM To: d...@cloudstack.apache.org Cc: users@cloudstack.apache.org Subject: Re: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b) Hi Hari, On 04-Nov-2014, at 2:21 pm, Harikrishna Patnala harikrishna.patn...@citrix.com wrote: Regarding the configurations in httpd.conf, they don't apply to apache server running in our system vms. We need to put the configuration in “/etc/apache2/mods-enabled/ssl.conf”, if you see apache2.conf it includes ssl.conf “Include mods-enabled/*.conf not httpd.conf. I tried using namp, it worked if we put the configuration in ssl.conf. Yes, I figured that this morning and have fixed it for 4.3. Doing it for master/4.5 now. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: Patched 4.3.1 SystemVMs (was Re: git commit: updated refs/heads/master to 88acc9b)
On 04-Nov-2014, at 2:52 pm, Santhosh Edukulla santhosh.eduku...@citrix.com wrote: As well, we may want to just revert the previous changes done to httpd.conf to keep the configuration of ciphers consistent across files. Sure that was a mistake. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: GRE isolated network: wrong interface?
Hi! Am 30.10.2014 17:04, schrieb Martin Emrich: I wonder why this IP address for the GRE tunnel was chosen? The IP belongs to one of my iSCSI storage networks, and should never be used for guest or public traffic. While thinking about it, I noticed that I never assigned IP addresses to the correct guest interfaces (neither via XenServer nor via cloudstack), as the documentation did not mention it... but of course GRE won't work without IP connectivity between the OpenVSwitch instances on the XenServers. So I wonder why CloudStack (or XenServer?) chose one of the iSCSI networks for GRE traffic instead of e.g. printing an error message or chosing at least the management network... I reinstalled CloudStack, this time it chose my management network for GRE. I confirmed that the guest traffic is really running across the management network instead of the configured guest network. I named my guest network GUEST on the XenServers, I named it GUEST in CloudStack, I even discovered a global option sdn.ovs.controller.default.label and did set it to GUEST, too. I also assigned IP adresses to the GUEST interfaces on the XenServers. Still no luck. What do I miss? Ciao Martin
Re: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5)
+1 from me again. Was able to upgrade to the latest and run some api calls. ~Rajani On Tue, Nov 4, 2014 at 2:45 PM, Nux! n...@li.nux.ro wrote: +1, works for me in basic tests -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Rohit Yadav rohit.ya...@shapeblue.com To: dev d...@cloudstack.apache.org Cc: users@cloudstack.apache.org Sent: Tuesday, 4 November, 2014 07:35:05 Subject: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5) Hi All, I've created a 5.3.0 release of CloudMonkey, with the following artifacts up for a vote: Git Branch and Commit SH: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=shortlog;h=refs/heads/5.3 Commit: beb369c5913f3c19e2b8132892c1bcd116394ceb List of changes: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=blob_plain;f=CHANGES;hb=5.3 Source release (checksums and signatures are available at the same location): https://dist.apache.org/repos/dist/dev/cloudstack/cloudmonkey-5.3.0/ PGP release keys (signed using 0EE3D884): https://dist.apache.org/repos/dist/release/cloudstack/KEYS Testing procedure: https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudMonkey+Release+test+procedure This release aims to provide better parameter and filter completion, error handling and utf8/unicode support in CloudMonkey and therefore needs testing efforts in these areas. UTF-8 encoded string parameters usage needs to be tested in API calls, shell and piped calls, for example: $ create user account=admin username=रोहित lastname=यादव firstname=रोहित email=bhais...@apache.org password=正體字/繁體字日本人français한국فارسیpassword123” $ list users | grep रोहित The vote will be open till Thursday (72 hours). Please test this release and give your votes. Thanks. For sanity in tallying the vote, can PMC members please be sure to indicate (binding) with their vote? [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Build http://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courses http://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: GRE isolated network: wrong interface?
2014.11.04. 10:32 keltezéssel, Martin Emrich írta: I reinstalled CloudStack, this time it chose my management network for GRE You can set it on the first pages of an advanced setup (down, where you see domain also), if i remember well. BTW, I think, you can use this subnet for guests, cause guest GRE tunnels will never connect to storage network... Regards: Peter
Re: GRE isolated network: wrong interface?
Hi! Am 04.11.2014 10:49, schrieb Erdősi Péter: You can set it on the first pages of an advanced setup (down, where you see domain also), if i remember well. BTW, I think, you can use this subnet for guests, cause guest GRE tunnels will never connect to storage network... I do not mean the subnet for the guests (which is assigned to the guest VMs), but the network which is used to carry the GRE tunnels between the guests. By the way, I just created another cluster, and this time it chose one of my storage networks. So the process seems to be random instead of respecting the physical network I chose for guest traffic. Thanks Martin
upgrading cloudstack 4.3.0 to 4.3.1
Hi all, some time ago I installed version 4.3.0 now I have seen that version 4.3.1 is present in the repository. I would like to understand what is the correct upgrade procedure, if it is best to first upgrade the management software or the various agents. I state that I can not stop the virtual machines in a production environment. Thank you in advance for your suggestions -- U g o V a s iugo.v...@procne.it P r o c n e s.r.l) via Cotonificio 45 33010 Tavagnacco IT phone: +390432486523 fax: +390432486523 Le informazioni contenute in questo messaggio sono riservate e confidenziali ed è vietata la diffusione in qualunque modo eseguita. Qualora Lei non fosse la persona a cui il presente messaggio è destinato, La invitiamo ad eliminarlo e a non leggerlo, dandocene gentilmente comunicazione. Per qualsiasi informazione si prega di contattare supp...@procne.it . Rif. D.L. 196/2003
Re: upgrading cloudstack 4.3.0 to 4.3.1
Hi, You should read: http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.3.1/rnotes.html Ideally, it’s a good idea to do a test upgrade on a test infra/setup that is as close to your production deployment. 4.3.1 is a good release, there are no significant upgrade issues reported so far. On 04-Nov-2014, at 4:07 pm, Ugo Vasi ugo.v...@procne.it wrote: Hi all, some time ago I installed version 4.3.0 now I have seen that version 4.3.1 is present in the repository. I would like to understand what is the correct upgrade procedure, if it is best to first upgrade the management software or the various agents. I state that I can not stop the virtual machines in a production environment. Thank you in advance for your suggestions -- U g o V a s iugo.v...@procne.it P r o c n e s.r.l) via Cotonificio 45 33010 Tavagnacco IT phone: +390432486523 fax: +390432486523 Le informazioni contenute in questo messaggio sono riservate e confidenziali ed è vietata la diffusione in qualunque modo eseguita. Qualora Lei non fosse la persona a cui il presente messaggio è destinato, La invitiamo ad eliminarlo e a non leggerlo, dandocene gentilmente comunicazione. Per qualsiasi informazione si prega di contattare supp...@procne.it . Rif. D.L. 196/2003 Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #4)
Hi Rohit, one issue I found is that you are in 5.3.0 using the 'requests.get' method for the API requests, and this implements certificateverification by default. This fails (we think) on my company CloudStack setup because the API server is put behind both a proxy and a load balancer and there is not a continuous https path to the server. (Well, we ought to have that, but right now it hasn't been implemented.) So I got fatal errors of the form: requests.exceptions.SSLError: [Errno 1] _ssl.c:510:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed If I modify requester.py to: requests.get(, verify=False) this fixes the error. So I think you will need to have the certificate verification under an optional switch. Thx Phillip
Re: GRE isolated network: wrong interface?
2014.11.04. 11:04 keltezéssel, Martin Emrich írta: I do not mean the subnet for the guests Hmm.. you mean isolated guest network right? If yes, the IP subnet can be changed, if the user define guest network (not auto, when first vm started) There is an option to: Guest Gateway, and Guest Netmask, and if it filled, the sysvm will use that subnet... Regards, Peter
Re: [ACS43][MGMT Server][Load Balancing]
Do you find any wrong config with this ? Now it seems the 2 mgmt servers are going fine in cluster config (seeing mgmt logs servers) but the problem i have is with the cpvm vm. It seems it keeps a hard link with node02 while trying to access it with the web ui (at this moment using the node01). There is no problem with the cpvm when trying to access to it with the web ui of the node02 (0.11:8080/client) Thanks for your responses. 2014-11-03 17:55 GMT+01:00 benoit lair kurushi4...@gmail.com: Hi Rohit, I have two managements (java) servers : First node called node01 : 192.168.0.10 Second node called node02 : 192.168.0.11 The database is 192.168.0.200 (not vip of a netscaler, but a fully active/active cluster with a ha-ip), the mysql server is well joining from the 192.168.0.10 or from the 192.168.0.11, all of two have the rights privileges onto the mysql-server. For information, my mysql server cluster 192.168.0.200 is replicated on two others slaves. I want to contact my mgmt server with 192.168.0.100 (vip on netscaler vpx) I have this config : 192.168.0.100 port type HTTP 8080 : with LB Methode Least connection and persistence with sourceip, 2 mins of timeout, netmask of 255.255.255.255 192.168.0.100 port type TCP 8250 : with LB Methode Roun-robin and persistence with sourceip, 5 mins of timeout, netmask of 255.255.255.255 192.168.0.100 port type TCP 8096 : with LB Methode Least connections and persistence with sourceip, 5 mins of timeout, netmask of 255.255.255.255 The rule with the port 8096 does not serve for the moment. I have deployed the node01 with : cloudstack-setup-databases user:password@192.168.0.200 --deploy-as=root:password -e file -m mypassphrase -k mypassphrase -i 192.168.0.10 I have deployed the node02 with : cloudstack-setup-databases user:password@192.168.0.200 -e file -m mypassphrase -k mypassphrase -i 192.168.0.11 I executed on node01 the command : /usr/share/cloudstack-common/scripts/storage/secondary/cloud-install-sys-tmplt -m /mnt/secondary -u http://cloudstack.apt-get.eu/systemvm/systemvm64template-2014-01-14-master-xen.vhd.bz2 -h xenserver -s mypassphase -F I changed the global host parameter accessing with http://192.168.0.100:8080/client with the value : 192.168.0.100 I changed the global parameter agent.lb to true with the same way. I restarted my two management servers, using /etc/init.d/cloudstack-management restart, so all of twos seems to well communicate mutually (grepping the logs entries with HeartBeat tag says me the two servers are seing them) Also i created a zone with local storage enabled, a pod, a cluster, a host and some public networks, without activating the zone (for local storage trick). Terminated the wizard of creation of the zone. I went to primary storage of my zone, adding a nfs primary storage server, activating the zone. I see my 2 systems vms spawning : the seconday storage vm is ok, state running and agent running the console proxy vm is not all ok, state running but the agent as a - status. If i try to reboot the ssvm, it is ok, but if i try to reboot the cpvm, the webui says me it is ok, but if i look at xencenter i do not see my cpvm rebooting. Here are my mgmt logs entries about this reboot order : 2014-11-03 17:49:54,187 DEBUG [c.c.a.m.ClusteredAgentAttache] (StatsCollector-2:ctx-9c4fb510) Seq 1-1490813094: Unable to forward null 2014-11-03 17:49:54,187 DEBUG [c.c.s.StorageManagerImpl] (StatsCollector-2:ctx-9c4fb510) Unable to send storage pool command to Pool[2|NetworkFilesystem] via 1 com.cloud.exception.AgentUnavailableException: Resource [Host:1] is unreachable: Host 1: Unable to reach the peer that the agent is connected at com.cloud.agent.manager.ClusteredAgentAttache.send(ClusteredAgentAttache.java:220) at com.cloud.agent.manager.AgentAttache.send(AgentAttache.java:398) at com.cloud.agent.manager.AgentManagerImpl.send(AgentManagerImpl.java:394) at com.cloud.agent.manager.AgentManagerImpl.send(AgentManagerImpl.java:347) at com.cloud.storage.StorageManagerImpl.sendToPool(StorageManagerImpl.java:964) If i connect to http://192.168.0.11:8080/client and go to infrastructuresystems vms, is the 2 systems vms with the same states, but here if i try to reboot the cpvm it is working. I think there is a problem with my 2 management nodes installation (maybe the agent does not communicate well between the two mgmt servers). How can i troubleshoot this ? Thanks for your
Re: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #4)
Dear Rohit, I confirm the new config key 'verifysslcert' is working. Thanks very much, Philip On Tue, Nov 4, 2014 at 11:18 AM, Rohit Yadav rohit.ya...@shapeblue.com wrote: Hi Phillip, On 04-Nov-2014, at 4:16 pm, Phillip Kent phillip.k...@xmlsoup.com wrote: Hi Rohit, one issue I found is that you are in 5.3.0 using the 'requests.get' method for the API requests, and this implements certificate verification by default. In 5.2.0 and before, requests.get is also used in API calls where users are using username/password instead of apikey/secretkey. This fails (we think) on my company CloudStack setup because the API server is put behind both a proxy and a load balancer and there is not a continuous https path to the server. (Well, we ought to have that, but right now it hasn't been implemented.) So I got fatal errors of the form: requests.exceptions.SSLError: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed If I modify requester.py to: requests.get(, verify=False) this fixes the error. I’m not sure if we should put verify=False by default. I think it’s a good idea to give an option in config per server profile whether users want to verify SSL cert or not. I’ve fixed in latest 5.3 branch, can you test it? The config key is called verifysslcert, default set to true, you’ll have to set it to false in your case. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab
How to restore management server from database backup only?
Hypothetically speaking, if someone lost the management server say to a fire or catastrophic RAID failure (no management filesystem backup), but had a complete up to date backup of the management databases (cloud, cloud_usage, cloudbridge), how could one restore the CloudStack management system? Best Regards, Adam Scarcella 44 Avery Street Ipswich, MA 01938 H: (978) 471-4000 M: (781) 367-8015
Re: How to restore management server from database backup only?
Hi Adam, I haven't had to do this yet, but my steps would be: - install cloudstack-management - setup databases - setup management - drop and import db - start services HTH -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Adam adam.scarce...@gmail.com To: users@cloudstack.apache.org Sent: Tuesday, 4 November, 2014 12:11:50 Subject: How to restore management server from database backup only? Hypothetically speaking, if someone lost the management server say to a fire or catastrophic RAID failure (no management filesystem backup), but had a complete up to date backup of the management databases (cloud, cloud_usage, cloudbridge), how could one restore the CloudStack management system? Best Regards, Adam Scarcella 44 Avery Street Ipswich, MA 01938 H: (978) 471-4000 M: (781) 367-8015
Re: GRE isolated network: wrong interface?
Hi!
Am 04.11.2014 12:46, schrieb Erdősi Péter:
Hmm.. you mean isolated guest network right?
If yes, the IP subnet can be changed, if the user define guest network
(not auto, when first vm started)
There is an option to: Guest Gateway, and Guest Netmask, and if it
filled, the sysvm will use that subnet...
No, I do not mean the guest network (which works fine). I mean the
network between the XenServers, where the guest traffic is carried.
My XenServers have the following interfaces:
- MANAGEMENT
- GUEST (which should be used for GRE-encapsulated private traffic)
- PUBLIC
- ISCSI1
- ISCSI2
All except PUBLIC have IP addresses: MANAGEMENT obviously for XenCenter
and XAPI, ISCSI1/2 for the multipathed shared storage, and GUEST
(intended for GRE traffic, although it is nowhere mentioned that the
interface must have IP addresses).
The intended behaviour is that Cloudstack instructs the OpenVSwitches
within the XenServer nodes to build the GRE tunnels between VMs within
the same Cloudstack isolated Network across the GUEST interface.
But CloudStack chooses one of the other interfaces (MANAGEMENT or ISCSI)
to carry the GRE traffic.
You can see this with ovs-vsctl show on one of the XenServers with
currently running instances:
# ovs-vsctl show
...
Bridge xapi4
fail_mode: standalone
Port vif1.0
Interface vif1.0
Port t1074-8-9
Interface t1074-8-9
type: gre
options: {key=1074, remote_ip=10.33.1.5}
Port xapi4
Interface xapi4
type: internal
...
Here you see the remote IP of the other XenServer for the GRE tunnel.
But the IP is wrong, it is on the first ISCSI network.
This works, but of course we want to isolate storage traffic from guest
traffic, so Cloudstack should do as expected and use the GUEST
interface ip of the peer XenServer as remote_ip.
Ciao
Martin
Re: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5)
Thank you everyone for voting/testing. There were two more issues reported and fixed in this round. I did testing from my side after fixing the issues, in this case I’ll have to call of this round again :( and hope the next voting round will be the last one. On 04-Nov-2014, at 3:13 pm, Rajani Karuturi raj...@apache.org wrote: +1 from me again. Was able to upgrade to the latest and run some api calls. ~Rajani On Tue, Nov 4, 2014 at 2:45 PM, Nux! n...@li.nux.ro wrote: +1, works for me in basic tests -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Rohit Yadav rohit.ya...@shapeblue.com To: dev d...@cloudstack.apache.org Cc: users@cloudstack.apache.org Sent: Tuesday, 4 November, 2014 07:35:05 Subject: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5) Hi All, I've created a 5.3.0 release of CloudMonkey, with the following artifacts up for a vote: Git Branch and Commit SH: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=shortlog;h=refs/heads/5.3 Commit: beb369c5913f3c19e2b8132892c1bcd116394ceb List of changes: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=blob_plain;f=CHANGES;hb=5.3 Source release (checksums and signatures are available at the same location): https://dist.apache.org/repos/dist/dev/cloudstack/cloudmonkey-5.3.0/ PGP release keys (signed using 0EE3D884): https://dist.apache.org/repos/dist/release/cloudstack/KEYS Testing procedure: https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudMonkey+Release+test+procedure This release aims to provide better parameter and filter completion, error handling and utf8/unicode support in CloudMonkey and therefore needs testing efforts in these areas. UTF-8 encoded string parameters usage needs to be tested in API calls, shell and piped calls, for example: $ create user account=admin username=रोहित lastname=यादव firstname=रोहित email=bhais...@apache.org password=正體字/繁體字日本人français한국فارسیpassword123” $ list users | grep रोहित The vote will be open till Thursday (72 hours). Please test this release and give your votes. Thanks. For sanity in tallying the vote, can PMC members please be sure to indicate (binding) with their vote? [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Build http://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courses http://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to
Re: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5)
Better thorough than sorry. :-) Good job! -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Rohit Yadav rohit.ya...@shapeblue.com To: d...@cloudstack.apache.org Cc: users@cloudstack.apache.org Sent: Tuesday, 4 November, 2014 13:08:25 Subject: Re: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5) Thank you everyone for voting/testing. There were two more issues reported and fixed in this round. I did testing from my side after fixing the issues, in this case I’ll have to call of this round again :( and hope the next voting round will be the last one. On 04-Nov-2014, at 3:13 pm, Rajani Karuturi raj...@apache.org wrote: +1 from me again. Was able to upgrade to the latest and run some api calls. ~Rajani On Tue, Nov 4, 2014 at 2:45 PM, Nux! n...@li.nux.ro wrote: +1, works for me in basic tests -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Rohit Yadav rohit.ya...@shapeblue.com To: dev d...@cloudstack.apache.org Cc: users@cloudstack.apache.org Sent: Tuesday, 4 November, 2014 07:35:05 Subject: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #5) Hi All, I've created a 5.3.0 release of CloudMonkey, with the following artifacts up for a vote: Git Branch and Commit SH: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=shortlog;h=refs/heads/5.3 Commit: beb369c5913f3c19e2b8132892c1bcd116394ceb List of changes: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=blob_plain;f=CHANGES;hb=5.3 Source release (checksums and signatures are available at the same location): https://dist.apache.org/repos/dist/dev/cloudstack/cloudmonkey-5.3.0/ PGP release keys (signed using 0EE3D884): https://dist.apache.org/repos/dist/release/cloudstack/KEYS Testing procedure: https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudMonkey+Release+test+procedure This release aims to provide better parameter and filter completion, error handling and utf8/unicode support in CloudMonkey and therefore needs testing efforts in these areas. UTF-8 encoded string parameters usage needs to be tested in API calls, shell and piped calls, for example: $ create user account=admin username=रोहित lastname=यादव firstname=रोहित email=bhais...@apache.org password=正體字/繁體字日本人français한국فارسیpassword123” $ list users | grep रोहित The vote will be open till Thursday (72 hours). Please test this release and give your votes. Thanks. For sanity in tallying the vote, can PMC members please be sure to indicate (binding) with their vote? [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Build http://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courses http://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark. Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any
[VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #6)
Hi All, I've created a 5.3.0 release of CloudMonkey, with the following artifacts up for a vote: Git Branch and Commit SH: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=shortlog;h=refs/heads/5.3 Commit: 24faf56d5ab41cef1e9f7fc294f7cf1ab5e3a742 List of changes: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=blob_plain;f=CHANGES;hb=5.3 Source release (checksums and signatures are available at the same location): https://dist.apache.org/repos/dist/dev/cloudstack/cloudmonkey-5.3.0/ PGP release keys (signed using 0EE3D884): https://dist.apache.org/repos/dist/release/cloudstack/KEYS Testing procedure: https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudMonkey+Release+test+procedure This release aims to provide better parameter and filter completion, error handling and utf8/unicode support in CloudMonkey and therefore needs testing efforts in these areas. UTF-8 encoded string parameters usage needs to be tested in API calls, shell and piped calls, for example: $ create user account=admin username=रोहित lastname=यादव firstname=रोहित email=bhais...@apache.org password=正體字/繁體字日本人français한국فارسیpassword123” $ list users | grep रोहित The vote will be open till Thursday EOD (72 hours). Please test this release and give your votes. Thanks. For sanity in tallying the vote, can PMC members please be sure to indicate (binding) with their vote? [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: Cloudstack Secondary Storage filling up
Thanks Andrija, when I first install Cloudstack 4.4.0, XenServer templates did not work for windows, every time I tried to build a template, ACS would allocate in Secondary Storage but the process never completed. That's the reason I had a lot of empty folders in Secondary storage. Since I upgraded to ACS 4.4.1 templates are working fine now. Thanks for your support, -Motty On Tue, Nov 4, 2014 at 12:13 AM, Andrija Panic andrija.pa...@gmail.com wrote: file system corruption ? do: du -hs /export/secondary/* that will list each subfolder size inside SECONDARY folder. BTW, are you maybe also using /export/PRIMARY for Primary storage - that might take you space - if it is shared space by bith primary and secondary storage... On 4 November 2014 00:41, motty cruz motty.c...@gmail.com wrote: Thanks Abhlsek, I only have one snapshot in the Snapshot directory and is only 40GB. Thanks, Motty On Mon, Nov 3, 2014 at 3:32 PM, abhisek basu abhisekb...@msn.com wrote: Do you have many snapshots for large volumes? Please check snapshot directory in side secondary storage as well. Sent from my iPhone On 4 Nov 2014, at 4:13 am, motty cruz motty.c...@gmail.com wrote: yes that is correct! I only have 6 ISOs but the secondary storage is 79% full out of 1TB I have 200GB of free space. when I execute du -h 16G ./219 but when I execute command ls I don't see anything so I did ls -la I see a hidden file 265]# ls -la total 13134948 drwxrwxrwx 2 root root4096 Sep 30 14:19 . drwxrwxrwx 62 root root4096 Nov 3 14:41 .. -rw-r--r-- 1 root root 13450174464 Sep 30 14:21 .nfs03f400750013 so I am asking if this file is OK to delete. Thanks in advance! Motty On Mon, Nov 3, 2014 at 2:30 PM, Andrija Panic andrija.pa...@gmail.com wrote: If they are completely empty - yes. But what is the point with deleting the empty folders? And dont really understand your original issue ? You said you have only 6 isos but storage is 79%full ? On Nov 3, 2014 11:04 PM, motty cruz motty.c...@gmail.com wrote: Thanks Andrija, some of the folders seem to be empty: 2]# du -h | less 16G ./280 [root@debka 2]# cd 280 [root@debka 280]# ls [root@debka 280]# ls [root@deba 2]# pwd /export/secondary/template/tmpl/2 [root@deba 2]# ls 202 209 214 218 221 225 238 241 244 247 250 254 257 261 264 267 271 278 282 287 292 207 212 216 219 222 227 239 242 245 248 252 255 259 262 265 269 272 280 283 288 293 208 213 217 220 224 230 240 243 246 249 253 256 260 263 266 270 276 281 286 289 294 [root@deba 2]# should I delete them? On Mon, Nov 3, 2014 at 1:45 PM, Andrija Panic andrija.pa...@gmail.com wrote: There is template.properties file inside each template folder - you can read these and get information for each template..,and choose which one to deletethese folders/templates seems like they all belong to different accounts inside same domain - too much folders if you really have only 6 isos... On Nov 3, 2014 10:33 PM, motty cruz motty.c...@gmail.com wrote: Hello, I have a 1TB of secondary Storage which is 79% used but I only have 6 ISOs and 3 templates. I am using XenServer 6.2. Secondary Storage is a NFS server: du -h 16G ./template/tmpl/2/239 16G ./template/tmpl/2/218 7.5G ./template/tmpl/2/282 16G ./template/tmpl/2/245 16G ./template/tmpl/2/246 13G ./template/tmpl/2/271 7.5G ./template/tmpl/2/257 2.5G ./template/tmpl/2/288 399M ./template/tmpl/2/209 12G ./template/tmpl/2/254 16G ./template/tmpl/2/238 16G ./template/tmpl/2/261 16G ./template/tmpl/2/243 12G ./template/tmpl/2/252 16G ./template/tmpl/2/267 13G ./template/tmpl/2/270 12G ./template/tmpl/2/250 13G ./template/tmpl/2/272 16G ./template/tmpl/2/214 16G ./template/tmpl/2/230 13G ./template/tmpl/2/266 16G ./template/tmpl/2/292 16G ./template/tmpl/2/278 16G ./template/tmpl/2/240 16G ./template/tmpl/2/213 13G ./template/tmpl/2/269 7.5G ./template/tmpl/2/256 11G ./template/tmpl/2/264 1.4G ./template/tmpl/2/294 744G ./template/tmpl/2 750G ./template/tmpl 750G ./template 4.0K ./volumes 750G . would it be safe to delete some of this templates manaully? if yes how can I identified a replicated templates and delete them? -- Thanks for your support, Motty -- Thanks for your support, Motty -- Thanks for your support, Motty -- Thanks for your support, Motty -- Andrija Panić --
RE: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #6)
+1 All previous issues have been fixed - Well done Rohit Tested the following using scripts: Install CloudMonkey and setup Profile Deploy new complete Advanced Zone Update Global Settings Create Domains and Users Delete default Service Offerings and Add new ones Deploy new Network and VMs, setup Ingress and Egress Rules Deploy new VPC and VMs, setup ACLs and Egress rules Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -Original Message- From: Rohit Yadav [mailto:rohit.ya...@shapeblue.com] Sent: 04 November 2014 13:10 To: dev Cc: users@cloudstack.apache.org Subject: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #6) Hi All, I've created a 5.3.0 release of CloudMonkey, with the following artifacts up for a vote: Git Branch and Commit SH: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=shortlog;h=refs/heads/5.3 Commit: 24faf56d5ab41cef1e9f7fc294f7cf1ab5e3a742 List of changes: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=blob_plain;f=CHANGES;hb=5.3 Source release (checksums and signatures are available at the same location): https://dist.apache.org/repos/dist/dev/cloudstack/cloudmonkey-5.3.0/ PGP release keys (signed using 0EE3D884): https://dist.apache.org/repos/dist/release/cloudstack/KEYS Testing procedure: https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudMonkey+Release+test+procedure This release aims to provide better parameter and filter completion, error handling and utf8/unicode support in CloudMonkey and therefore needs testing efforts in these areas. UTF-8 encoded string parameters usage needs to be tested in API calls, shell and piped calls, for example: $ create user account=admin username=रोहित lastname=यादव firstname=रोहित email=bhais...@apache.org password=正體字/繁體字日本人français한국فارسیpassword123” $ list users | grep रोहित The vote will be open till Thursday EOD (72 hours). Please test this release and give your votes. Thanks. For sanity in tallying the vote, can PMC members please be sure to indicate (binding) with their vote? [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark. Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in
Root disk resize with XEN
Hello! I have a Cloudstack version 4.3 running with XEN and I need to offer disk resizing. Having said that, what is the best solution for root disk resizing? I know I can do this on version 4.4 with KVM but I wouldn't like to use another hypervisor. I know I can also use data disk but it doesn't seem to be the ideal solution. I am really new to Cloudstack and I hope you guys can help me with this one. Thanks! Thiago Costa
Re: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #6)
+1 still works for me, good job -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - From: Geoff Higginbottom geoff.higginbot...@shapeblue.com To: users@cloudstack.apache.org, dev d...@cloudstack.apache.org Sent: Tuesday, 4 November, 2014 14:46:46 Subject: RE: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #6) +1 All previous issues have been fixed - Well done Rohit Tested the following using scripts: Install CloudMonkey and setup Profile Deploy new complete Advanced Zone Update Global Settings Create Domains and Users Delete default Service Offerings and Add new ones Deploy new Network and VMs, setup Ingress and Egress Rules Deploy new VPC and VMs, setup ACLs and Egress rules Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -Original Message- From: Rohit Yadav [mailto:rohit.ya...@shapeblue.com] Sent: 04 November 2014 13:10 To: dev Cc: users@cloudstack.apache.org Subject: [VOTE] Release Apache CloudStack CloudMonkey 5.3.0 (round #6) Hi All, I've created a 5.3.0 release of CloudMonkey, with the following artifacts up for a vote: Git Branch and Commit SH: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=shortlog;h=refs/heads/5.3 Commit: 24faf56d5ab41cef1e9f7fc294f7cf1ab5e3a742 List of changes: https://git-wip-us.apache.org/repos/asf?p=cloudstack-cloudmonkey.git;a=blob_plain;f=CHANGES;hb=5.3 Source release (checksums and signatures are available at the same location): https://dist.apache.org/repos/dist/dev/cloudstack/cloudmonkey-5.3.0/ PGP release keys (signed using 0EE3D884): https://dist.apache.org/repos/dist/release/cloudstack/KEYS Testing procedure: https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudMonkey+Release+test+procedure This release aims to provide better parameter and filter completion, error handling and utf8/unicode support in CloudMonkey and therefore needs testing efforts in these areas. UTF-8 encoded string parameters usage needs to be tested in API calls, shell and piped calls, for example: $ create user account=admin username=रोहित lastname=यादव firstname=रोहित email=bhais...@apache.org password=正體字/繁體字日本人français한국فارسیpassword123” $ list users | grep रोहित The vote will be open till Thursday EOD (72 hours). Please test this release and give your votes. Thanks. For sanity in tallying the vote, can PMC members please be sure to indicate (binding) with their vote? [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Regards, Rohit Yadav Software Architect, ShapeBlue M. +91 88 262 30892 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark. Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Buildhttp://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment frameworkhttp://shapeblue.com/csforge/ CloudStack Consultinghttp://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courseshttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or
Re: HA issue and Xen resets
Update: I've reinstalled everything below just incase I missed something but still no luck with my test instance coming up on my second xen host once the network cable has been yanked. Any recommendations or points will be greatly appreciated. Pulling my hair out here... side note: This recipe here - http://discussions.citrix.com/topic/347884-automatic-applying-patches/ works well for updating Xen hosts from the CLI. - Original Message - From: Garith Dugmore gar...@saao.ac.za To: users@cloudstack.apache.org Sent: Wednesday, October 29, 2014 12:06:27 PM Subject: Re: HA issue and Xen resets After my live migration issues have now been resolved (in another thread) I'm now busy testing the HA capabilities again. Current situation: * ACS 4.4.1 * Centos 6.5 * 2 Xen hosts running 6.2 with sp1 and hotfixes * Ubuntu 14.04 instance running built from an ubuntu server 14.04 iso and using this guide - http://softlit.blogspot.com/2014/05/xenserver-62-and-ubuntu-1404-lts.html with guest additions/PV drivers installed * Each xen host has only one network cable plugged into it * Running a basic zone with my management server as the primary and secondary storage which each xen server can mount correctly * My instances boot up with 10.8.1.x/24 ip's which are not routable on my network currently (incase this has a bearing on anything). I have a temp ip on my laptop to test ping's etc * 'alert.wait' is set to 30 in global settings and cloudstack-management restarted * My instance is using an HA enabled template. ie. Under Details for that instance HA Enabled does show Yes * Both my xen hosts are in the same cluster, the same pod and the same zone * The only virtual router that was auto created during my installation (I guess of the instance) is using a Compute offering of System Offering For Software Router which under Service offerings, System Offerings and then System Offering For Software Router does have Offer HA set to Yes What I've now tried is check the Host that the instance is running on under Details and yank that network cable (the xen host now has no network cables plugged into it at all) and wait for the failover to happen. After 5 minutes the instance is still not reachable (I kept a window open with ping running). Here is the log for 5 minutes - http://pastebin.com/w7AsBqzt What could be the problem? Cheers, -- Garith Dugmore South African Astronomical Observatory and Southern African Large Telescope !DSPAM:5450bc7216026803114569! -- Garith Dugmore South African Astronomical Observatory and Southern African Large Telescope
Could not delete Zone(Cloudstack 4.4)
Hi, When I tried to delete a Zone in the UI, it returns an error as: The zone is not deletable because there are physical networks in this zone. What does this mean and how to delete the Zone? Cheers, Dan
Re: Could not delete Zone(Cloudstack 4.4)
Dan, have you deleted any networks you created? On Tue, Nov 4, 2014 at 7:58 AM, Dan Dong dongda...@gmail.com wrote: Hi, When I tried to delete a Zone in the UI, it returns an error as: The zone is not deletable because there are physical networks in this zone. What does this mean and how to delete the Zone? Cheers, Dan -- Thanks for your support, Motty
Re: How change default System Offering For Software Router?
On Fri, Oct 31, 2014 at 3:31 AM, Andrija Panic andrija.pa...@gmail.com wrote: It should be, yes. BTW the link you sent - it's changing existing VR offering... To make another system offering a DEFAUTL offering, use the stuff explained here: http://cloudstack-administration.readthedocs.org/en/latest/service_offerings.html#changing-the-default-system-offering-for-system-vms Best i try with this manual: http://cloudstack-administration.readthedocs.org/en/latest/service_offerings.html#changing-the-default-system-offering-for-system-vms 1. I replace the default Software Router for my new one: mysql select id,name,unique_name,type from disk_offering; | 7 | System Offering For Software Router| NULL | Service | | 54 | System Offering For Software Router on P2000 | Cloud.Com-SoftwareRouter | Service | then i restart the CS management and finally I tried to remove the the default systema offering ( System Offering For Software Router) but was impossible, i obtainf the error: Default service offerings cannot be deleted any idea ? thanks -- Hollman Eduardo Enciso R. http://algolibre.com @hollman
Upgrade woes from CS 4.3 to 4.4.1
Updated system last night and now I'm getting the following error after about 30 minutes of runtime: java.lang.OutOfMemoryError: unable to create new native thread At that point there's still 1.5GB of RAM in the management system and there's very little load so I'm guessing I need to enable more threads to make this work properly? Or is there something bigger here? # uname -a Linux man01 2.6.32-504.el6.x86_64 #1 SMP Wed Oct 15 04:27:16 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux # ps -L -u cloud | wc -l 1025 # cat /etc/security/limits.conf cloud soft nofile 4096 cloud hard nofile 4096 Thanks for any help, - Ian
Re: Upgrade woes from CS 4.3 to 4.4.1
Also not sure if it has anything to do with it but getting a lot of these messages on the console: Queue (queue id, sync type, sync id) - (811,VmWorkJobQueue, 28) is reaching concurrency limit 1 and vbdmetrics doesn't exist The latter appears to be from VMs that haven't been restarted yet, the line includes vm cpu utilization on some machines. - Ian On Tue, Nov 4, 2014 at 2:33 PM, Ian Service iserv...@ts2.ca wrote: Updated system last night and now I'm getting the following error after about 30 minutes of runtime: java.lang.OutOfMemoryError: unable to create new native thread At that point there's still 1.5GB of RAM in the management system and there's very little load so I'm guessing I need to enable more threads to make this work properly? Or is there something bigger here? # uname -a Linux man01 2.6.32-504.el6.x86_64 #1 SMP Wed Oct 15 04:27:16 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux # ps -L -u cloud | wc -l 1025 # cat /etc/security/limits.conf cloud soft nofile 4096 cloud hard nofile 4096 Thanks for any help, - Ian
Re: Upgrade woes from CS 4.3 to 4.4.1
how much memory does the management server have? Usually it worked best with 8GB. PL, On Tue, Nov 4, 2014 at 2:39 PM, Ian Service iserv...@ts2.ca wrote: Also not sure if it has anything to do with it but getting a lot of these messages on the console: Queue (queue id, sync type, sync id) - (811,VmWorkJobQueue, 28) is reaching concurrency limit 1 and vbdmetrics doesn't exist The latter appears to be from VMs that haven't been restarted yet, the line includes vm cpu utilization on some machines. - Ian On Tue, Nov 4, 2014 at 2:33 PM, Ian Service iserv...@ts2.ca wrote: Updated system last night and now I'm getting the following error after about 30 minutes of runtime: java.lang.OutOfMemoryError: unable to create new native thread At that point there's still 1.5GB of RAM in the management system and there's very little load so I'm guessing I need to enable more threads to make this work properly? Or is there something bigger here? # uname -a Linux man01 2.6.32-504.el6.x86_64 #1 SMP Wed Oct 15 04:27:16 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux # ps -L -u cloud | wc -l 1025 # cat /etc/security/limits.conf cloud soft nofile 4096 cloud hard nofile 4096 Thanks for any help, - Ian
Re: Upgrade woes from CS 4.3 to 4.4.1
It's got 4GB + 4GB of swap. But there's still lots of resources available. I've upped the number of threads to 4096 to see if that helps. Anyone running a functional cloudstack 4.4.1 that could check this number? ps -L -u cloud | wc -l - Ian On Tue, Nov 4, 2014 at 2:54 PM, Pierre-Luc Dion pd...@cloudops.com wrote: how much memory does the management server have? Usually it worked best with 8GB. PL, On Tue, Nov 4, 2014 at 2:39 PM, Ian Service iserv...@ts2.ca wrote: Also not sure if it has anything to do with it but getting a lot of these messages on the console: Queue (queue id, sync type, sync id) - (811,VmWorkJobQueue, 28) is reaching concurrency limit 1 and vbdmetrics doesn't exist The latter appears to be from VMs that haven't been restarted yet, the line includes vm cpu utilization on some machines. - Ian On Tue, Nov 4, 2014 at 2:33 PM, Ian Service iserv...@ts2.ca wrote: Updated system last night and now I'm getting the following error after about 30 minutes of runtime: java.lang.OutOfMemoryError: unable to create new native thread At that point there's still 1.5GB of RAM in the management system and there's very little load so I'm guessing I need to enable more threads to make this work properly? Or is there something bigger here? # uname -a Linux man01 2.6.32-504.el6.x86_64 #1 SMP Wed Oct 15 04:27:16 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux # ps -L -u cloud | wc -l 1025 # cat /etc/security/limits.conf cloud soft nofile 4096 cloud hard nofile 4096 Thanks for any help, - Ian
Re: Could not delete Zone(Cloudstack 4.4)
No, I will try to delete it. Thanks Motty. 2014-11-04 10:20 GMT-06:00 motty cruz motty.c...@gmail.com: Dan, have you deleted any networks you created? On Tue, Nov 4, 2014 at 7:58 AM, Dan Dong dongda...@gmail.com wrote: Hi, When I tried to delete a Zone in the UI, it returns an error as: The zone is not deletable because there are physical networks in this zone. What does this mean and how to delete the Zone? Cheers, Dan -- Thanks for your support, Motty
Instance stuck in Expunging state - can't delete it
Hello All, I have a VM instance in expungning state, I tried to delete it in the DB but I was not successful. mysql DELETE from vm_instance where name='hd01'; ERROR 1451 (23000): Cannot delete or update a parent row: a foreign key constraint fails (`cloud`.`user_ip_address`, CONSTRAINT `fk_user_ip_address__vm_id` FOREIGN KEY (`vm_id`) REFERENCES `vm_instance` (`id`)) mysql am running ACS 4.4.1 XenServer, Thanks for your support, Motty
Could not find My ISOs(openstack 4.4)
Hi, All, On my ubuntu openstack 4.4, after I registered my iso, the Ready status is No, and when I tried to create an instance from this iso, I just could not see it in the My ISOs tab, do you know what's the possible problem? Thanks a lot! Cheers, Dan
Re: Could not find My ISOs(openstack 4.4)
Forgot to mention that the iso image was downloaded manually and put under secondary storage path on the Management Server(192.168.0.5) as: /mnt/secondary/iso/ubuntu-14.04.1-server-amd64.iso. While in the Add ISO screen, for the URL field, I put http://192.168.0.5/mnt/secondary/iso/ubuntu-14.04.1-server-amd64.iso;. 2014-11-04 15:07 GMT-06:00 Dan Dong dongda...@gmail.com: Hi, All, On my ubuntu openstack 4.4, after I registered my iso, the Ready status is No, and when I tried to create an instance from this iso, I just could not see it in the My ISOs tab, do you know what's the possible problem? Thanks a lot! Cheers, Dan
Re: Could not find My ISOs(openstack 4.4)
Op 4 november 2014 om 22:31 schreef Dan Dong dongda...@gmail.com: Forgot to mention that the iso image was downloaded manually and put under secondary storage path on the Management Server(192.168.0.5) as: /mnt/secondary/iso/ubuntu-14.04.1-server-amd64.iso. While in the Add ISO screen, for the URL field, I put http://192.168.0.5/mnt/secondary/iso/ubuntu-14.04.1-server-amd64.iso;. As long as the state is not ready, it will not show up in the list when you want to create the instance. Adding it directly on the secondary storage by yourself will definitely not work, the system will do this work for you. Start digging the management servers logs (/var/log/cloudstack/mangement/), to find out why the ISO isn't correctly added. Please note that you need to put in a http:// URL when adding the ISO, not a directory path. 2014-11-04 15:07 GMT-06:00 Dan Dong dongda...@gmail.com: Hi, All, On my ubuntu openstack 4.4, after I registered my iso, the Ready status is No, and when I tried to create an instance from this iso, I just could not see it in the My ISOs tab, do you know what's the possible problem? Thanks a lot! Cheers, Dan Met vriendelijke groet / Kind regards, Lennert den Teuling
Re: Instance stuck in Expunging state - can't delete it
Hey Motty, I just update the removed field to remove instances stuck in Expunging. UPDATE vm_instance SET removed=NOW() WHERE name=hd01; - Ian On Tue, Nov 4, 2014 at 3:28 PM, motty cruz motty.c...@gmail.com wrote: Hello All, I have a VM instance in expungning state, I tried to delete it in the DB but I was not successful. mysql DELETE from vm_instance where name='hd01'; ERROR 1451 (23000): Cannot delete or update a parent row: a foreign key constraint fails (`cloud`.`user_ip_address`, CONSTRAINT `fk_user_ip_address__vm_id` FOREIGN KEY (`vm_id`) REFERENCES `vm_instance` (`id`)) mysql am running ACS 4.4.1 XenServer, Thanks for your support, Motty
Re: Instance stuck in Expunging state - can't delete it
Thank Ian, That worked perfectly! Thanks, -Motty On Tue, Nov 4, 2014 at 2:44 PM, Ian Service iserv...@ts2.ca wrote: Hey Motty, I just update the removed field to remove instances stuck in Expunging. UPDATE vm_instance SET removed=NOW() WHERE name=hd01; - Ian On Tue, Nov 4, 2014 at 3:28 PM, motty cruz motty.c...@gmail.com wrote: Hello All, I have a VM instance in expungning state, I tried to delete it in the DB but I was not successful. mysql DELETE from vm_instance where name='hd01'; ERROR 1451 (23000): Cannot delete or update a parent row: a foreign key constraint fails (`cloud`.`user_ip_address`, CONSTRAINT `fk_user_ip_address__vm_id` FOREIGN KEY (`vm_id`) REFERENCES `vm_instance` (`id`)) mysql am running ACS 4.4.1 XenServer, Thanks for your support, Motty -- Thanks for your support, Motty
Re: Could not find My ISOs(openstack 4.4)
Yeah but the Agent State doesn't show so definitely the agent hasn't come up which is needed for downloading the iso Troubleshoot using https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM,+templates,+Secondary+storage+troubleshooting Thanks, -Nitin From: Dan Dong dongda...@gmail.commailto:dongda...@gmail.com Reply-To: users@cloudstack.apache.orgmailto:users@cloudstack.apache.org users@cloudstack.apache.orgmailto:users@cloudstack.apache.org Date: Tuesday 4 November 2014 2:22 PM To: users@cloudstack.apache.orgmailto:users@cloudstack.apache.org users@cloudstack.apache.orgmailto:users@cloudstack.apache.org, Lennert den Teuling lenn...@pcextreme.nlmailto:lenn...@pcextreme.nl Subject: Re: Could not find My ISOs(openstack 4.4) Thanks Lennert, I tried also to point the URL to the Ubuntu official download link, but still not works(http://releases.ubuntu.com/14.04.1/ubuntu-14.04.1-server-amd64.iso). In the management-server.log, I did not find clear clues(log file attached), only one line: There is no secondary storage VM for secondary storage host nfs, but I see the SSVM is running there. By the way, is there a way to add the ISO image from a local disk .iso file? Thanks! Cheers, Dan [cid:ii_i23tjose0_1497ce3d5800b89d] 2014-11-04 15:52 GMT-06:00 Lennert den Teuling lenn...@pcextreme.nlmailto:lenn...@pcextreme.nl: Op 4 november 2014 om 22:31 schreef Dan Dong dongda...@gmail.commailto:dongda...@gmail.com: Forgot to mention that the iso image was downloaded manually and put under secondary storage path on the Management Server(192.168.0.5) as: /mnt/secondary/iso/ubuntu-14.04.1-server-amd64.iso. While in the Add ISO screen, for the URL field, I put http://192.168.0.5/mnt/secondary/iso/ubuntu-14.04.1-server-amd64.iso;. As long as the state is not ready, it will not show up in the list when you want to create the instance. Adding it directly on the secondary storage by yourself will definitely not work, the system will do this work for you. Start digging the management servers logs (/var/log/cloudstack/mangement/), to find out why the ISO isn't correctly added. Please note that you need to put in a http:// URL when adding the ISO, not a directory path. 2014-11-04 15:07 GMT-06:00 Dan Dong dongda...@gmail.commailto:dongda...@gmail.com: Hi, All, On my ubuntu openstack 4.4, after I registered my iso, the Ready status is No, and when I tried to create an instance from this iso, I just could not see it in the My ISOs tab, do you know what's the possible problem? Thanks a lot! Cheers, Dan Met vriendelijke groet / Kind regards, Lennert den Teuling
Problem of adding XenServer host with only one NIC
Hello everyone, I am new to CloudStack and recently I am trying add two XenServers to CloudStack. According to document there are three steps: 1. Management Network bonding 2. Add additional server to pool 3. Execute cloud-setup-bonding.sh My question is because that my hosts have only one NIC, do I still need to bond NIC? Thanks, Yan
Re: Problem of adding XenServer host with only one NIC
Hi Yan, That's fine to have only one NIC on XenServer, as long as is name is the same as the XenServer traffic Label in CloudStack. Pierre-Luc On Tue, Nov 4, 2014 at 9:18 PM, Yan Bai baixx...@d.umn.edu wrote: Hello everyone, I am new to CloudStack and recently I am trying add two XenServers to CloudStack. According to document there are three steps: 1. Management Network bonding 2. Add additional server to pool 3. Execute cloud-setup-bonding.sh My question is because that my hosts have only one NIC, do I still need to bond NIC? Thanks, Yan
RE: GRE isolated network: wrong interface?
Hi,
Are you using the proper traffic labels for all the traffic types in the
physical network?
Since you have multiple PIFs on XenServer you must specify traffic labels on
zone's physical network for different traffics(guest,management,public and
storage) to go through the intended PIFs on XenServer.
Please refer to CS admin guides on setting traffic labels.
Thanks,
Sanjeev
-Original Message-
From: Martin Emrich [mailto:martin.emr...@empolis.com]
Sent: Tuesday, November 04, 2014 5:57 PM
To: users@cloudstack.apache.org
Subject: Re: GRE isolated network: wrong interface?
Hi!
Am 04.11.2014 12:46, schrieb Erdősi Péter:
Hmm.. you mean isolated guest network right?
If yes, the IP subnet can be changed, if the user define guest network
(not auto, when first vm started) There is an option to: Guest
Gateway, and Guest Netmask, and if it filled, the sysvm will use that
subnet...
No, I do not mean the guest network (which works fine). I mean the network
between the XenServers, where the guest traffic is carried.
My XenServers have the following interfaces:
- MANAGEMENT
- GUEST (which should be used for GRE-encapsulated private traffic)
- PUBLIC
- ISCSI1
- ISCSI2
All except PUBLIC have IP addresses: MANAGEMENT obviously for XenCenter and
XAPI, ISCSI1/2 for the multipathed shared storage, and GUEST (intended for GRE
traffic, although it is nowhere mentioned that the interface must have IP
addresses).
The intended behaviour is that Cloudstack instructs the OpenVSwitches within
the XenServer nodes to build the GRE tunnels between VMs within the same
Cloudstack isolated Network across the GUEST interface.
But CloudStack chooses one of the other interfaces (MANAGEMENT or ISCSI) to
carry the GRE traffic.
You can see this with ovs-vsctl show on one of the XenServers with currently
running instances:
# ovs-vsctl show
...
Bridge xapi4
fail_mode: standalone
Port vif1.0
Interface vif1.0
Port t1074-8-9
Interface t1074-8-9
type: gre
options: {key=1074, remote_ip=10.33.1.5}
Port xapi4
Interface xapi4
type: internal
...
Here you see the remote IP of the other XenServer for the GRE tunnel.
But the IP is wrong, it is on the first ISCSI network.
This works, but of course we want to isolate storage traffic from guest
traffic, so Cloudstack should do as expected and use the GUEST
interface ip of the peer XenServer as remote_ip.
Ciao
Martin
Re: GRE isolated network: wrong interface?
Hi! Am 05.11.2014 05:20, schrieb Sanjeev Neelarapu: Hi, Are you using the proper traffic labels for all the traffic types in the physical network? Since you have multiple PIFs on XenServer you must specify traffic labels on zone's physical network for different traffics(guest,management,public and storage) to go through the intended PIFs on XenServer. Please refer to CS admin guides on setting traffic labels. Yes, I named the physical network in the Advanced Network assistant GUEST (Both in the field next to the VLAN/GRE dropdown field and in the dialog that opens when I click on the round Guest network bumper). I also named the network on XenServer GUEST and the interface under IP Address Configuration GUEST. So full points for hospitality, as there's GUEST everywhere. After configuration I see XenServer Traffic Label set to GUEST under Zones/My Zone/Physical Network/GUEST/Configure My last idea is to use the dom0 network interface name (xapi1 here) instead of GUEST for sdn.ovs.controller.default.label... Ciao Martin
