Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Tutkowski, Mike]

Thanks, Rohit!



From: Rohit Yadav 
Sent: Wednesday, November 14, 2018 9:07 PM
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

NetApp Security WARNING: This is an external email. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.




Hi Mike, Paul, everyone,


I tested the same on a 4.9.3.1 based VMware 5.5u3 + svs + basic zone and could 
see the same behaviour. Therefore, it's not a regression but a limitation from 
the past. Basic zone provides L3 isolation by means of security group 
(host-level firewall) which is not supported for VMware. I think nobody 
reported this in the past because nobody uses VMware+basic zone, I've opened an 
issue for this issue: https://github.com/apache/cloudstack/issues/3031


Let's continue testing and voting for RC5, and let's aim to fix for this 
limitation in future 4.11.3+, 4.12.0+.


- Rohit






From: Tutkowski, Mike 
Sent: Thursday, November 15, 2018 4:24:46 AM
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I should note that I’m running vSphere 5.5, by the way. I believe that’s still 
supported in CS 4.11.

On 11/14/18, 3:52 PM, "Tutkowski, Mike"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.




The VR doesn’t show as having an IP address.

On 11/14/18, 3:50 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.




Mgmt. server should ssh into VR.
I'll fire a similar build in out lab.


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 22:41
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

Right, I’ve compiled and run with –Dnoredist. The SSVM and CPVM come up fine. 
They both show the VM and agent running. The VR boots up. I can see it at the 
login prompt in vSphere Client. I don’t see any obvious errors in cloud.log. 
Maybe a port is blocked and it can’t talk to the management server?

On 11/14/18, 3:10 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.




I've tested in an ubuntu16 basic zone but not vmware basic zone - I guess that 
it goes without say that you know to use build nonoss from vmware... have you 
used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok? If you go on the VR through the vCenter 
console what do you see?

paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up successfully.

I built the code from source (the specified commit) and am using the system VM 
template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR in the GUI, 
it says Requires Upgrade is Yes. When I click the button to upgrade the 
template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following artefacts up for 
testing and a vote:


Git Branch and Commit SH:
https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 16th Nov.

For sanity in tallying the vote, can PMC members please be sure to indicate 
"(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but 

CloudStack-UI: Release 1.411.24 Overview

[Ivan Kudryavtsev]

Dear community, we released a new version of CSUI 1.411.24. If the e-mail
is not displayed correctly, please use following links to read announcement
on GitHub.

EN: https://github.com/bwsw/cloudstack-ui/wiki/1.411.24-ReleaseNotes-En
RU: https://github.com/bwsw/cloudstack-ui/wiki/1.411.24-ReleaseNotes-Ru


Release 1.411.24 Overview

On November 9, 2018 we released Cloudstack-UI 1.411.24. In this iteration,
we continued developing the Log View UI-plugin and added such features for
it as viewing logs in a real-time mode, the search of log entries. Besides,
we enhanced naming for new virtual machines and the disk offering selection
component, fixed a number of interface bugs. Below you can find the
detailed description for main enhancements and fixes.
Log
View features added

Last release we presented the new UI-plugin - Log View
 - that allows
viewing virtual machine logs.

In the current release, we added such features as:

   - Viewing logs in real-time mode and configuring parameters for the
   real-time mode (maximum messages to display, the period to view the logs
   for);
   - Search logs.

Let’s consider every feature in detail.

Viewing logs in real-time mode. Users may face situations when it is
necessary to watch the machine state during the operation. For such cases,
we implemented a feature allowing users to view machine logs in a real-time
mode. To enable this mode a user can click on “Follow log” in the
bottom-right corner. When sorting a list by the “Newest first” option the
button moves to the upper-right corner. In this case, the latest logs
appear at the beginning of the list.

The “Follow log” button is available after selecting a virtual machine in
the filtering parameters as well as at viewing logs in a regular mode. When
the “Follow log” option is enabled the list of logs refreshes with a
defined frequency. For displaying many log messages we implemented dynamic
loading at scrolling the list down.

The following default parameters are used for viewing logs in a real-time
mode:

   - List refresh interval - once per a second.
   - A user views logs for the last minute.
   - Maximum messages in the list - 1000.

A user can change default parameters in the “Log View (real-time mode)”
section in Settings. The following parameters can be customized:

   - the time period to display the latest logs for,
   - the maximum number of messages to display.

The settings are saved to user tags.

Search logs. For convenient filtering of logs, a user can apply the search
tool above the list and enter a word or a phrase there. Then refresh the
list by clicking on “Show logs”.

The
naming of virtual machines changed

For better usability and avoiding VM name collision, we added a feature
allowing a user to define a VM display name that is not required to be
unique in the zone.

In earlier product versions a user defined a virtual machine name that
corresponded to the Hostname attribute. That could cause VM creation
failure if the specified name was not unique. In the current version, a
user can define both an arbitrary non-unique name (Display name) and an
optional name corresponding to Hostname that should be unique in the zone.
Thus, now a user can define two names for a machine:

   1. A VM display name - Must be defined in the “General” tab of the VM
   creation form. This can be any name. It will display for the VM in the
   machine list and in any place of the UI. The field is required to be filled
   in.


   1. VM host name - Should be defined in the “Advanced” tab of the VM
   creation form. It should be unique within the zone. A hostname displays in
   the VM details sidebar only.

The field is not required to be filled in. If empty, a hostname will be
auto-generated for a VM in the format of vm-.

Disk
offering selector improvements

The list of disk offerings now include all options available to a user
instead of previously containing only those that a user can create. When
selecting a disk offering the system checks the available account resources
required to create a VM with the selected option. If a user selects an
offering that does not fit the available account resources, a warning
message appears and the selected option cannot be applied to the VM. This
enhancement makes the disk offering selection more clear and convenient to
a user.

Bug
fixes

During the iteration out team fixed interface bugs that improved the
following interface components:

   - Notifications on pending operations;
   - Color picker for a virtual machine;
   - Service offering 

Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Rohit Yadav]

Hi Mike, Paul, everyone,


I tested the same on a 4.9.3.1 based VMware 5.5u3 + svs + basic zone and could 
see the same behaviour. Therefore, it's not a regression but a limitation from 
the past. Basic zone provides L3 isolation by means of security group 
(host-level firewall) which is not supported for VMware. I think nobody 
reported this in the past because nobody uses VMware+basic zone, I've opened an 
issue for this issue: https://github.com/apache/cloudstack/issues/3031


Let's continue testing and voting for RC5, and let's aim to fix for this 
limitation in future 4.11.3+, 4.12.0+.


- Rohit






From: Tutkowski, Mike 
Sent: Thursday, November 15, 2018 4:24:46 AM
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I should note that I’m running vSphere 5.5, by the way. I believe that’s still 
supported in CS 4.11.

On 11/14/18, 3:52 PM, "Tutkowski, Mike"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




The VR doesn’t show as having an IP address.

On 11/14/18, 3:50 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links 
or open attachments unless you recognize the sender and know the content is 
safe.




Mgmt. server should ssh into VR.
I'll fire a similar build in out lab.


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 22:41
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

Right, I’ve compiled and run with –Dnoredist. The SSVM and CPVM come up 
fine. They both show the VM and agent running. The VR boots up. I can see it at 
the login prompt in vSphere Client. I don’t see any obvious errors in 
cloud.log. Maybe a port is blocked and it can’t talk to the management server?

On 11/14/18, 3:10 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click 
links or open attachments unless you recognize the sender and know the content 
is safe.




I've tested in an ubuntu16 basic zone but not vmware basic zone - I 
guess that it goes without say that you know to use build nonoss from vmware... 
have you used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok?  If you go on the VR through 
the vCenter console what do you see?

paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up 
successfully.

I built the code from source (the specified commit) and am using 
the system VM template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR 
in the GUI, it says Requires Upgrade is Yes. When I click the button to upgrade 
the template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not 
click links or open attachments unless you recognize the sender and know the 
content is safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following 
artefacts up for testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the 
same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 
16th Nov.

For sanity in tallying the vote, can PMC members please be sure 
to indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional 

RE: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Paul Angus]

I'm seeing the same thing.  VR has a guest IP, but no management IP.
If I cat /var/cache/cloud/cmdline I can see that the eth1 ip=0.0.0.0 and 
eth1mask=0.0.0.0 which is nonsense...

I'll get someone to look into it.

Thanks mike

paul.an...@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


-Original Message-
From: Tutkowski, Mike  
Sent: 14 November 2018 22:58
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

The VR’s IP address was not being reported on the main GUI window, but I found 
it in the VR details (and also via ifconfig on the VR itself).

I can ping both ways successfully: From the management server to the VR and 
vice versa.

On 11/14/18, 3:52 PM, "Tutkowski, Mike"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




The VR doesn’t show as having an IP address.

On 11/14/18, 3:50 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links 
or open attachments unless you recognize the sender and know the content is 
safe.




Mgmt. server should ssh into VR.
I'll fire a similar build in out lab.


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 22:41
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

Right, I’ve compiled and run with –Dnoredist. The SSVM and CPVM come up 
fine. They both show the VM and agent running. The VR boots up. I can see it at 
the login prompt in vSphere Client. I don’t see any obvious errors in 
cloud.log. Maybe a port is blocked and it can’t talk to the management server?

On 11/14/18, 3:10 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click 
links or open attachments unless you recognize the sender and know the content 
is safe.




I've tested in an ubuntu16 basic zone but not vmware basic zone - I 
guess that it goes without say that you know to use build nonoss from vmware... 
have you used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok?  If you go on the VR through 
the vCenter console what do you see?

paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up 
successfully.

I built the code from source (the specified commit) and am using 
the system VM template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR 
in the GUI, it says Requires Upgrade is Yes. When I click the button to upgrade 
the template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not 
click links or open attachments unless you recognize the sender and know the 
content is safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following 
artefacts up for testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the 
same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 
16th Nov.

For sanity in tallying the vote, can PMC members please be sure 
to indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' 

Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Tutkowski, Mike]

I should note that I’m running vSphere 5.5, by the way. I believe that’s still 
supported in CS 4.11.

On 11/14/18, 3:52 PM, "Tutkowski, Mike"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




The VR doesn’t show as having an IP address.

On 11/14/18, 3:50 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links 
or open attachments unless you recognize the sender and know the content is 
safe.




Mgmt. server should ssh into VR.
I'll fire a similar build in out lab.


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 22:41
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

Right, I’ve compiled and run with –Dnoredist. The SSVM and CPVM come up 
fine. They both show the VM and agent running. The VR boots up. I can see it at 
the login prompt in vSphere Client. I don’t see any obvious errors in 
cloud.log. Maybe a port is blocked and it can’t talk to the management server?

On 11/14/18, 3:10 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click 
links or open attachments unless you recognize the sender and know the content 
is safe.




I've tested in an ubuntu16 basic zone but not vmware basic zone - I 
guess that it goes without say that you know to use build nonoss from vmware... 
have you used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok?  If you go on the VR through 
the vCenter console what do you see?

paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up 
successfully.

I built the code from source (the specified commit) and am using 
the system VM template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR 
in the GUI, it says Requires Upgrade is Yes. When I click the button to upgrade 
the template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not 
click links or open attachments unless you recognize the sender and know the 
content is safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following 
artefacts up for testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the 
same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 
16th Nov.

For sanity in tallying the vote, can PMC members please be sure 
to indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but the systemvm 
template upgrade section has been updated.

4.11.2.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41120rc5/

Only the following changes have been added to RC5:


+-+--+---+--++
 

Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Tutkowski, Mike]

The VR’s IP address was not being reported on the main GUI window, but I found 
it in the VR details (and also via ifconfig on the VR itself).

I can ping both ways successfully: From the management server to the VR and 
vice versa.

On 11/14/18, 3:52 PM, "Tutkowski, Mike"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




The VR doesn’t show as having an IP address.

On 11/14/18, 3:50 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links 
or open attachments unless you recognize the sender and know the content is 
safe.




Mgmt. server should ssh into VR.
I'll fire a similar build in out lab.


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 22:41
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

Right, I’ve compiled and run with –Dnoredist. The SSVM and CPVM come up 
fine. They both show the VM and agent running. The VR boots up. I can see it at 
the login prompt in vSphere Client. I don’t see any obvious errors in 
cloud.log. Maybe a port is blocked and it can’t talk to the management server?

On 11/14/18, 3:10 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click 
links or open attachments unless you recognize the sender and know the content 
is safe.




I've tested in an ubuntu16 basic zone but not vmware basic zone - I 
guess that it goes without say that you know to use build nonoss from vmware... 
have you used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok?  If you go on the VR through 
the vCenter console what do you see?

paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up 
successfully.

I built the code from source (the specified commit) and am using 
the system VM template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR 
in the GUI, it says Requires Upgrade is Yes. When I click the button to upgrade 
the template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not 
click links or open attachments unless you recognize the sender and know the 
content is safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following 
artefacts up for testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the 
same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 
16th Nov.

For sanity in tallying the vote, can PMC members please be sure 
to indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but the systemvm 
template upgrade section has been updated.

4.11.2.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41120rc5/

Only the following changes have been added to RC5:

  

Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Tutkowski, Mike]

The VR doesn’t show as having an IP address.

On 11/14/18, 3:50 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




Mgmt. server should ssh into VR.
I'll fire a similar build in out lab.


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 22:41
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

Right, I’ve compiled and run with –Dnoredist. The SSVM and CPVM come up 
fine. They both show the VM and agent running. The VR boots up. I can see it at 
the login prompt in vSphere Client. I don’t see any obvious errors in 
cloud.log. Maybe a port is blocked and it can’t talk to the management server?

On 11/14/18, 3:10 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links 
or open attachments unless you recognize the sender and know the content is 
safe.




I've tested in an ubuntu16 basic zone but not vmware basic zone - I 
guess that it goes without say that you know to use build nonoss from vmware... 
have you used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok?  If you go on the VR through the 
vCenter console what do you see?

paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up 
successfully.

I built the code from source (the specified commit) and am using the 
system VM template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR in 
the GUI, it says Requires Upgrade is Yes. When I click the button to upgrade 
the template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click 
links or open attachments unless you recognize the sender and know the content 
is safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following artefacts 
up for testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 16th 
Nov.

For sanity in tallying the vote, can PMC members please be sure to 
indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but the systemvm 
template upgrade section has been updated.

4.11.2.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41120rc5/

Only the following changes have been added to RC5:


+-+--+---+--++
| Version | Github   | Type  | Priority | 
Description|

+=+==+===+==++
| 4.11.2.0| `#3018`_ |   |  | 
Prevent error on GroupAnswers on VR creation   |

+-+--+---+--++

RE: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Paul Angus]

Mgmt. server should ssh into VR.
I'll fire a similar build in out lab.


paul.an...@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


-Original Message-
From: Tutkowski, Mike  
Sent: 14 November 2018 22:41
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

Right, I’ve compiled and run with –Dnoredist. The SSVM and CPVM come up fine. 
They both show the VM and agent running. The VR boots up. I can see it at the 
login prompt in vSphere Client. I don’t see any obvious errors in cloud.log. 
Maybe a port is blocked and it can’t talk to the management server?

On 11/14/18, 3:10 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




I've tested in an ubuntu16 basic zone but not vmware basic zone - I guess 
that it goes without say that you know to use build nonoss from vmware... have 
you used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok?  If you go on the VR through the 
vCenter console what do you see?

paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up successfully.

I built the code from source (the specified commit) and am using the system 
VM template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR in the 
GUI, it says Requires Upgrade is Yes. When I click the button to upgrade the 
template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links 
or open attachments unless you recognize the sender and know the content is 
safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following artefacts up 
for testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 16th Nov.

For sanity in tallying the vote, can PMC members please be sure to 
indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but the systemvm template 
upgrade section has been updated.

4.11.2.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41120rc5/

Only the following changes have been added to RC5:


+-+--+---+--++
| Version | Github   | Type  | Priority | 
Description|

+=+==+===+==++
| 4.11.2.0| `#3018`_ |   |  | 
Prevent error on GroupAnswers on VR creation   |

+-+--+---+--++
| 4.11.2.0| `#3007`_ |   |  | Add 
missing ConfigDrive entries on existing zones after|
| |  |   |  | 
upgrade|

+-+--+---+--++
| 4.11.2.0| `#2980`_ |   |  | 
[4.11] Fix set initial reservation on public IP ranges |
   

Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Tutkowski, Mike]

Right, I’ve compiled and run with –Dnoredist. The SSVM and CPVM come up fine. 
They both show the VM and agent running. The VR boots up. I can see it at the 
login prompt in vSphere Client. I don’t see any obvious errors in cloud.log. 
Maybe a port is blocked and it can’t talk to the management server?

On 11/14/18, 3:10 PM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




I've tested in an ubuntu16 basic zone but not vmware basic zone - I guess 
that it goes without say that you know to use build nonoss from vmware... have 
you used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok?  If you go on the VR through the 
vCenter console what do you see?

paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




-Original Message-
From: Tutkowski, Mike 
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up successfully.

I built the code from source (the specified commit) and am using the system 
VM template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR in the 
GUI, it says Requires Upgrade is Yes. When I click the button to upgrade the 
template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links 
or open attachments unless you recognize the sender and know the content is 
safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following artefacts up 
for testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 16th Nov.

For sanity in tallying the vote, can PMC members please be sure to 
indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but the systemvm template 
upgrade section has been updated.

4.11.2.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41120rc5/

Only the following changes have been added to RC5:


+-+--+---+--++
| Version | Github   | Type  | Priority | 
Description|

+=+==+===+==++
| 4.11.2.0| `#3018`_ |   |  | 
Prevent error on GroupAnswers on VR creation   |

+-+--+---+--++
| 4.11.2.0| `#3007`_ |   |  | Add 
missing ConfigDrive entries on existing zones after|
| |  |   |  | 
upgrade|

+-+--+---+--++
| 4.11.2.0| `#2980`_ |   |  | 
[4.11] Fix set initial reservation on public IP ranges |

+-+--+---+--++
| 4.11.2.0| `#3010`_ |   |  | Fix 
DirectNetworkGuru canHandle checks for lowercase   |
| |  |   |  | 
isolation methods   

RE: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Paul Angus]

I've tested in an ubuntu16 basic zone but not vmware basic zone - I guess that 
it goes without say that you know to use build nonoss from vmware... have you 
used the 6.5 sdk ?
I think that it always says requires upgrade until the VR checks in.
Have the SSVM and CPVM checked in ok?  If you go on the VR through the vCenter 
console what do you see? 

paul.an...@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


-Original Message-
From: Tutkowski, Mike  
Sent: 14 November 2018 21:16
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

I’m having a hard time getting the VR with vSphere to come up successfully.

I built the code from source (the specified commit) and am using the system VM 
template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR in the GUI, 
it says Requires Upgrade is Yes. When I click the button to upgrade the 
template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following artefacts up for 
testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 16th Nov.

For sanity in tallying the vote, can PMC members please be sure to indicate 
"(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but the systemvm template 
upgrade section has been updated.

4.11.2.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41120rc5/

Only the following changes have been added to RC5:


+-+--+---+--++
| Version | Github   | Type  | Priority | 
Description|

+=+==+===+==++
| 4.11.2.0| `#3018`_ |   |  | Prevent 
error on GroupAnswers on VR creation   |

+-+--+---+--++
| 4.11.2.0| `#3007`_ |   |  | Add 
missing ConfigDrive entries on existing zones after|
| |  |   |  | upgrade   
 |

+-+--+---+--++
| 4.11.2.0| `#2980`_ |   |  | [4.11] 
Fix set initial reservation on public IP ranges |

+-+--+---+--++
| 4.11.2.0| `#3010`_ |   |  | Fix 
DirectNetworkGuru canHandle checks for lowercase   |
| |  |   |  | isolation 
methods  |

+-+--+---+--++

.. _`#3012`: https://github.com/apache/cloudstack/pull/3012
.. _`#3018`: https://github.com/apache/cloudstack/pull/3018
.. _`#3007`: https://github.com/apache/cloudstack/pull/3007
.. _`#2980`: https://github.com/apache/cloudstack/pull/2980
.. _`#3010`: https://github.com/apache/cloudstack/pull/3010



Kind regards,

Paul Angus


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue

Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Tutkowski, Mike]

I’m having a hard time getting the VR with vSphere to come up successfully.

I built the code from source (the specified commit) and am using the system VM 
template specified in this e-mail chain.

I’m running in a Basic Zone. When I look at the details for the VR in the GUI, 
it says Requires Upgrade is Yes. When I click the button to upgrade the 
template, the operation fails.

Thoughts?

On 11/13/18, 6:59 AM, "Paul Angus"  wrote:

NetApp Security WARNING: This is an external email. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.




Hi All,

I've created a 4.11.2.0 release (RC5), with the following artefacts up for 
testing and a vote:


Git Branch and Commit SH:

https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 16th Nov.

For sanity in tallying the vote, can PMC members please be sure to indicate 
"(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but the systemvm template 
upgrade section has been updated.

4.11.2.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41120rc5/

Only the following changes have been added to RC5:


+-+--+---+--++
| Version | Github   | Type  | Priority | 
Description|

+=+==+===+==++
| 4.11.2.0| `#3018`_ |   |  | Prevent 
error on GroupAnswers on VR creation   |

+-+--+---+--++
| 4.11.2.0| `#3007`_ |   |  | Add 
missing ConfigDrive entries on existing zones after|
| |  |   |  | upgrade   
 |

+-+--+---+--++
| 4.11.2.0| `#2980`_ |   |  | [4.11] 
Fix set initial reservation on public IP ranges |

+-+--+---+--++
| 4.11.2.0| `#3010`_ |   |  | Fix 
DirectNetworkGuru canHandle checks for lowercase   |
| |  |   |  | isolation 
methods  |

+-+--+---+--++

.. _`#3012`: https://github.com/apache/cloudstack/pull/3012
.. _`#3018`: https://github.com/apache/cloudstack/pull/3018
.. _`#3007`: https://github.com/apache/cloudstack/pull/3007
.. _`#2980`: https://github.com/apache/cloudstack/pull/2980
.. _`#3010`: https://github.com/apache/cloudstack/pull/3010



Kind regards,

Paul Angus


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue

Re: Information on VXLAN implementations (and other guest isolation methods)

[Andrija Panic]

Im aware of his blog :) good stuff really...

On Wed, 14 Nov 2018 at 20:54, Ivan Kudryavtsev 
wrote:

> Vincent Bernat wrote a good article about that. Highly recommend. Would be
> great if CloudStack will support that:
> https://vincent.bernat.ch/en/blog/2017-vxlan-bgp-evpn
>
> ср, 14 нояб. 2018 г. в 14:37, Andrija Panic :
>
> > I have just single pod/subnet in a Zone so it's regular stuff,
> multicast...
> >
> > I'm also curious how this would span to multiple subnets in production -
> I
> > did have a chat with my networking colleague back in the days...
> >
> > Cheers
> >
> > On Wed, 14 Nov 2018 at 19:45, Ivan Kudryavtsev  >
> > wrote:
> >
> > > Andrija, cool stuff.
> > >
> > > Do you run it with multicast or BGP EVPN? Looks like multicast is not
> the
> > > best approach for large-scale deployments.
> > >
> > > ср, 14 нояб. 2018 г. в 13:38, Andrija Panic :
> > >
> > > > Simon just explained it well - and a few additions from my side, in
> > case
> > > it
> > > > helps
> > > >
> > > > Read details in this page, in order to avoid some hard issues during
> > > later
> > > > production (beside MTU, check the max_igmp_membership etc...)
> > > > http://docs.cloudstack.apache.org/en/4.11.1.0/plugins/vxlan.html
> > > >
> > > > Here is example from one of my dev setups, if that helps - but it
> boils
> > > > down to what Simon shared.
> > > >
> > > > bond0.150 is the vlan 150 that is dedicated to carry all VXLAN
> > "tunnels"
> > > > (it HAS to have the IP, it serves as VTEP basically) - you would
> > probably
> > > > want to define this as separate PHYSICAL NETWORK during zone
> > provisioning
> > > > (because other networks i.e. management, storage, public doesn't
> > support
> > > > vxlan as isolation method) - so you define "bond.150" as the KVM
> > traffic
> > > > label for Guest Network
> > > >
> > > > (FYI: you could also create bridge cloudXYZ that has bond0.150 as
> > member
> > > > and use this as KMV traffic label, but cloudstack will just extract
> > child
> > > > interface, bond0.150 and create later the structure on its own -
> while
> > > > cloudXYZ bridge is NOT used anywhere else)
> > > >
> > > >
> > > > So my setup, bond0.150. Cloudstack needs to create i.e. vxlan
> structure
> > > > with vxlan id , so it will take bond0.150 and create VXLAN
> > interface
> > > on
> > > > top of it (ip -d link show vxlan, to see it's properties )
> > > >
> > > > After cloudstack has created a vxlan interface (on top of you vlan
> > > > interface), it will then create a bridge (brvx-) and finally join
> > > vm's
> > > > NIC to this bridge so both vxlan interface and VMs vNIC will be part
> of
> > > > bridge.
> > > >
> > > > That's it - works well as Simon said, last 4 years in production with
> > > > vxlan.
> > > >
> > > > Here is any UGLY but informative drawing from my side :)
> > > >
> > > >
> > >
> >
> https://docs.google.com/drawings/d/1oPWU5p_wUd9UPhXGZg7j4acu5XYPbkLWzmihi6Qbwl8/edit?usp=sharing
> > > >
> > > > So you can see tunnels etc. On the picture are also some other
> networks
> > > > like public network on vlan 160 etc...
> > > > (images on Simon's link are excellent, just old bridge names)
> > > >
> > > >
> > > > In case you use VXLAN for Guest networks (VPC networks, isolated,
> etc)
> > -
> > > > make sure to understand that Private Gateway network only supports
> > VLAN,
> > > > not VXLAN, it's usefull to know, since I later had to add new
> physical
> > > > networks to support Private Gateway (didn't plan originally for it).
> > > >
> > > >
> > > > CHeers
> > > >
> > > > On Wed, 14 Nov 2018 at 18:29, Simon Weller 
> > > > wrote:
> > > >
> > > > > Hi Alexandre,
> > > > >
> > > > >
> > > > > VXLAN on KVM works very well and we've had it in production for a
> > > number
> > > > > of years now.
> > > > >
> > > > >
> > > > > Please see this document on how it is implemented:
> > > > >
> > > >
> > >
> >
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Linux+native+VXLAN+support+on+KVM+hypervisor
> > > > >
> > > > > Cloudstack does create all the VXLAN configuration for each new
> > > network,
> > > > > you  just need to have a working underlay that supports multicast
> > (e.g.
> > > > an
> > > > > IP on the VXLAN interface and iptables rules rules that allow
> > multicast
> > > > > traffic).
> > > > > We place our VXLANs into a VLAN and expose that VLAN via a KVM
> > traffic
> > > > > label to the VXLAN guest network.
> > > > >
> > > > > - Si
> > > > >
> > > > >
> > > > >
> > > > > 
> > > > > From: Alexandre Bruyere 
> > > > > Sent: Wednesday, November 14, 2018 10:32 AM
> > > > > To: users@cloudstack.apache.org
> > > > > Subject: Information on VXLAN implementations (and other guest
> > > isolation
> > > > > methods)
> > > > >
> > > > > Hello.
> > > > >
> > > > > I'm currently investigating guest isolation methods for a project.
> > The
> > > > idea
> > > > > was thrown about to use VXLANs, but it's rather fuzzy on how it
> > > actually
> > 

Re: Information on VXLAN implementations (and other guest isolation methods)

[Ivan Kudryavtsev]

Vincent Bernat wrote a good article about that. Highly recommend. Would be
great if CloudStack will support that:
https://vincent.bernat.ch/en/blog/2017-vxlan-bgp-evpn

ср, 14 нояб. 2018 г. в 14:37, Andrija Panic :

> I have just single pod/subnet in a Zone so it's regular stuff, multicast...
>
> I'm also curious how this would span to multiple subnets in production - I
> did have a chat with my networking colleague back in the days...
>
> Cheers
>
> On Wed, 14 Nov 2018 at 19:45, Ivan Kudryavtsev 
> wrote:
>
> > Andrija, cool stuff.
> >
> > Do you run it with multicast or BGP EVPN? Looks like multicast is not the
> > best approach for large-scale deployments.
> >
> > ср, 14 нояб. 2018 г. в 13:38, Andrija Panic :
> >
> > > Simon just explained it well - and a few additions from my side, in
> case
> > it
> > > helps
> > >
> > > Read details in this page, in order to avoid some hard issues during
> > later
> > > production (beside MTU, check the max_igmp_membership etc...)
> > > http://docs.cloudstack.apache.org/en/4.11.1.0/plugins/vxlan.html
> > >
> > > Here is example from one of my dev setups, if that helps - but it boils
> > > down to what Simon shared.
> > >
> > > bond0.150 is the vlan 150 that is dedicated to carry all VXLAN
> "tunnels"
> > > (it HAS to have the IP, it serves as VTEP basically) - you would
> probably
> > > want to define this as separate PHYSICAL NETWORK during zone
> provisioning
> > > (because other networks i.e. management, storage, public doesn't
> support
> > > vxlan as isolation method) - so you define "bond.150" as the KVM
> traffic
> > > label for Guest Network
> > >
> > > (FYI: you could also create bridge cloudXYZ that has bond0.150 as
> member
> > > and use this as KMV traffic label, but cloudstack will just extract
> child
> > > interface, bond0.150 and create later the structure on its own - while
> > > cloudXYZ bridge is NOT used anywhere else)
> > >
> > >
> > > So my setup, bond0.150. Cloudstack needs to create i.e. vxlan structure
> > > with vxlan id , so it will take bond0.150 and create VXLAN
> interface
> > on
> > > top of it (ip -d link show vxlan, to see it's properties )
> > >
> > > After cloudstack has created a vxlan interface (on top of you vlan
> > > interface), it will then create a bridge (brvx-) and finally join
> > vm's
> > > NIC to this bridge so both vxlan interface and VMs vNIC will be part of
> > > bridge.
> > >
> > > That's it - works well as Simon said, last 4 years in production with
> > > vxlan.
> > >
> > > Here is any UGLY but informative drawing from my side :)
> > >
> > >
> >
> https://docs.google.com/drawings/d/1oPWU5p_wUd9UPhXGZg7j4acu5XYPbkLWzmihi6Qbwl8/edit?usp=sharing
> > >
> > > So you can see tunnels etc. On the picture are also some other networks
> > > like public network on vlan 160 etc...
> > > (images on Simon's link are excellent, just old bridge names)
> > >
> > >
> > > In case you use VXLAN for Guest networks (VPC networks, isolated, etc)
> -
> > > make sure to understand that Private Gateway network only supports
> VLAN,
> > > not VXLAN, it's usefull to know, since I later had to add new physical
> > > networks to support Private Gateway (didn't plan originally for it).
> > >
> > >
> > > CHeers
> > >
> > > On Wed, 14 Nov 2018 at 18:29, Simon Weller 
> > > wrote:
> > >
> > > > Hi Alexandre,
> > > >
> > > >
> > > > VXLAN on KVM works very well and we've had it in production for a
> > number
> > > > of years now.
> > > >
> > > >
> > > > Please see this document on how it is implemented:
> > > >
> > >
> >
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Linux+native+VXLAN+support+on+KVM+hypervisor
> > > >
> > > > Cloudstack does create all the VXLAN configuration for each new
> > network,
> > > > you  just need to have a working underlay that supports multicast
> (e.g.
> > > an
> > > > IP on the VXLAN interface and iptables rules rules that allow
> multicast
> > > > traffic).
> > > > We place our VXLANs into a VLAN and expose that VLAN via a KVM
> traffic
> > > > label to the VXLAN guest network.
> > > >
> > > > - Si
> > > >
> > > >
> > > >
> > > > 
> > > > From: Alexandre Bruyere 
> > > > Sent: Wednesday, November 14, 2018 10:32 AM
> > > > To: users@cloudstack.apache.org
> > > > Subject: Information on VXLAN implementations (and other guest
> > isolation
> > > > methods)
> > > >
> > > > Hello.
> > > >
> > > > I'm currently investigating guest isolation methods for a project.
> The
> > > idea
> > > > was thrown about to use VXLANs, but it's rather fuzzy on how it
> > actually
> > > is
> > > > implemented.
> > > >
> > > > Does Cloudstack automatically create and maintain VXLAN connections,
> or
> > > > does it ride off an already-implemented VXLAN system configured under
> > the
> > > > hood?
> > > >
> > > > And what would be the use cases for VXLANs? Would it be appropriate
> to
> > > use
> > > > in a small-scale network for hybrid clusters? If not, what would the
> > > > 

Re: Information on VXLAN implementations (and other guest isolation methods)

[Andrija Panic]

I have just single pod/subnet in a Zone so it's regular stuff, multicast...

I'm also curious how this would span to multiple subnets in production - I
did have a chat with my networking colleague back in the days...

Cheers

On Wed, 14 Nov 2018 at 19:45, Ivan Kudryavtsev 
wrote:

> Andrija, cool stuff.
>
> Do you run it with multicast or BGP EVPN? Looks like multicast is not the
> best approach for large-scale deployments.
>
> ср, 14 нояб. 2018 г. в 13:38, Andrija Panic :
>
> > Simon just explained it well - and a few additions from my side, in case
> it
> > helps
> >
> > Read details in this page, in order to avoid some hard issues during
> later
> > production (beside MTU, check the max_igmp_membership etc...)
> > http://docs.cloudstack.apache.org/en/4.11.1.0/plugins/vxlan.html
> >
> > Here is example from one of my dev setups, if that helps - but it boils
> > down to what Simon shared.
> >
> > bond0.150 is the vlan 150 that is dedicated to carry all VXLAN "tunnels"
> > (it HAS to have the IP, it serves as VTEP basically) - you would probably
> > want to define this as separate PHYSICAL NETWORK during zone provisioning
> > (because other networks i.e. management, storage, public doesn't support
> > vxlan as isolation method) - so you define "bond.150" as the KVM traffic
> > label for Guest Network
> >
> > (FYI: you could also create bridge cloudXYZ that has bond0.150 as member
> > and use this as KMV traffic label, but cloudstack will just extract child
> > interface, bond0.150 and create later the structure on its own - while
> > cloudXYZ bridge is NOT used anywhere else)
> >
> >
> > So my setup, bond0.150. Cloudstack needs to create i.e. vxlan structure
> > with vxlan id , so it will take bond0.150 and create VXLAN interface
> on
> > top of it (ip -d link show vxlan, to see it's properties )
> >
> > After cloudstack has created a vxlan interface (on top of you vlan
> > interface), it will then create a bridge (brvx-) and finally join
> vm's
> > NIC to this bridge so both vxlan interface and VMs vNIC will be part of
> > bridge.
> >
> > That's it - works well as Simon said, last 4 years in production with
> > vxlan.
> >
> > Here is any UGLY but informative drawing from my side :)
> >
> >
> https://docs.google.com/drawings/d/1oPWU5p_wUd9UPhXGZg7j4acu5XYPbkLWzmihi6Qbwl8/edit?usp=sharing
> >
> > So you can see tunnels etc. On the picture are also some other networks
> > like public network on vlan 160 etc...
> > (images on Simon's link are excellent, just old bridge names)
> >
> >
> > In case you use VXLAN for Guest networks (VPC networks, isolated, etc) -
> > make sure to understand that Private Gateway network only supports VLAN,
> > not VXLAN, it's usefull to know, since I later had to add new physical
> > networks to support Private Gateway (didn't plan originally for it).
> >
> >
> > CHeers
> >
> > On Wed, 14 Nov 2018 at 18:29, Simon Weller 
> > wrote:
> >
> > > Hi Alexandre,
> > >
> > >
> > > VXLAN on KVM works very well and we've had it in production for a
> number
> > > of years now.
> > >
> > >
> > > Please see this document on how it is implemented:
> > >
> >
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Linux+native+VXLAN+support+on+KVM+hypervisor
> > >
> > > Cloudstack does create all the VXLAN configuration for each new
> network,
> > > you  just need to have a working underlay that supports multicast (e.g.
> > an
> > > IP on the VXLAN interface and iptables rules rules that allow multicast
> > > traffic).
> > > We place our VXLANs into a VLAN and expose that VLAN via a KVM traffic
> > > label to the VXLAN guest network.
> > >
> > > - Si
> > >
> > >
> > >
> > > 
> > > From: Alexandre Bruyere 
> > > Sent: Wednesday, November 14, 2018 10:32 AM
> > > To: users@cloudstack.apache.org
> > > Subject: Information on VXLAN implementations (and other guest
> isolation
> > > methods)
> > >
> > > Hello.
> > >
> > > I'm currently investigating guest isolation methods for a project. The
> > idea
> > > was thrown about to use VXLANs, but it's rather fuzzy on how it
> actually
> > is
> > > implemented.
> > >
> > > Does Cloudstack automatically create and maintain VXLAN connections, or
> > > does it ride off an already-implemented VXLAN system configured under
> the
> > > hood?
> > >
> > > And what would be the use cases for VXLANs? Would it be appropriate to
> > use
> > > in a small-scale network for hybrid clusters? If not, what would the
> > > Cloudstack community recommend?
> > >
> > > Thanks for your time!
> > >
> >
> >
> > --
> >
> > Andrija Panić
> >
>
>
> --
> With best regards, Ivan Kudryavtsev
> Bitworks LLC
> Cell RU: +7-923-414-1515
> Cell USA: +1-201-257-1512
> WWW: http://bitworks.software/ 
>


-- 

Andrija Panić

Re: Information on VXLAN implementations (and other guest isolation methods)

[Ivan Kudryavtsev]

Andrija, cool stuff.

Do you run it with multicast or BGP EVPN? Looks like multicast is not the
best approach for large-scale deployments.

ср, 14 нояб. 2018 г. в 13:38, Andrija Panic :

> Simon just explained it well - and a few additions from my side, in case it
> helps
>
> Read details in this page, in order to avoid some hard issues during later
> production (beside MTU, check the max_igmp_membership etc...)
> http://docs.cloudstack.apache.org/en/4.11.1.0/plugins/vxlan.html
>
> Here is example from one of my dev setups, if that helps - but it boils
> down to what Simon shared.
>
> bond0.150 is the vlan 150 that is dedicated to carry all VXLAN "tunnels"
> (it HAS to have the IP, it serves as VTEP basically) - you would probably
> want to define this as separate PHYSICAL NETWORK during zone provisioning
> (because other networks i.e. management, storage, public doesn't support
> vxlan as isolation method) - so you define "bond.150" as the KVM traffic
> label for Guest Network
>
> (FYI: you could also create bridge cloudXYZ that has bond0.150 as member
> and use this as KMV traffic label, but cloudstack will just extract child
> interface, bond0.150 and create later the structure on its own - while
> cloudXYZ bridge is NOT used anywhere else)
>
>
> So my setup, bond0.150. Cloudstack needs to create i.e. vxlan structure
> with vxlan id , so it will take bond0.150 and create VXLAN interface on
> top of it (ip -d link show vxlan, to see it's properties )
>
> After cloudstack has created a vxlan interface (on top of you vlan
> interface), it will then create a bridge (brvx-) and finally join vm's
> NIC to this bridge so both vxlan interface and VMs vNIC will be part of
> bridge.
>
> That's it - works well as Simon said, last 4 years in production with
> vxlan.
>
> Here is any UGLY but informative drawing from my side :)
>
> https://docs.google.com/drawings/d/1oPWU5p_wUd9UPhXGZg7j4acu5XYPbkLWzmihi6Qbwl8/edit?usp=sharing
>
> So you can see tunnels etc. On the picture are also some other networks
> like public network on vlan 160 etc...
> (images on Simon's link are excellent, just old bridge names)
>
>
> In case you use VXLAN for Guest networks (VPC networks, isolated, etc) -
> make sure to understand that Private Gateway network only supports VLAN,
> not VXLAN, it's usefull to know, since I later had to add new physical
> networks to support Private Gateway (didn't plan originally for it).
>
>
> CHeers
>
> On Wed, 14 Nov 2018 at 18:29, Simon Weller 
> wrote:
>
> > Hi Alexandre,
> >
> >
> > VXLAN on KVM works very well and we've had it in production for a number
> > of years now.
> >
> >
> > Please see this document on how it is implemented:
> >
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Linux+native+VXLAN+support+on+KVM+hypervisor
> >
> > Cloudstack does create all the VXLAN configuration for each new network,
> > you  just need to have a working underlay that supports multicast (e.g.
> an
> > IP on the VXLAN interface and iptables rules rules that allow multicast
> > traffic).
> > We place our VXLANs into a VLAN and expose that VLAN via a KVM traffic
> > label to the VXLAN guest network.
> >
> > - Si
> >
> >
> >
> > 
> > From: Alexandre Bruyere 
> > Sent: Wednesday, November 14, 2018 10:32 AM
> > To: users@cloudstack.apache.org
> > Subject: Information on VXLAN implementations (and other guest isolation
> > methods)
> >
> > Hello.
> >
> > I'm currently investigating guest isolation methods for a project. The
> idea
> > was thrown about to use VXLANs, but it's rather fuzzy on how it actually
> is
> > implemented.
> >
> > Does Cloudstack automatically create and maintain VXLAN connections, or
> > does it ride off an already-implemented VXLAN system configured under the
> > hood?
> >
> > And what would be the use cases for VXLANs? Would it be appropriate to
> use
> > in a small-scale network for hybrid clusters? If not, what would the
> > Cloudstack community recommend?
> >
> > Thanks for your time!
> >
>
>
> --
>
> Andrija Panić
>


-- 
With best regards, Ivan Kudryavtsev
Bitworks LLC
Cell RU: +7-923-414-1515
Cell USA: +1-201-257-1512
WWW: http://bitworks.software/ 

Re: Information on VXLAN implementations (and other guest isolation methods)

[Andrija Panic]

Simon just explained it well - and a few additions from my side, in case it
helps

Read details in this page, in order to avoid some hard issues during later
production (beside MTU, check the max_igmp_membership etc...)
http://docs.cloudstack.apache.org/en/4.11.1.0/plugins/vxlan.html

Here is example from one of my dev setups, if that helps - but it boils
down to what Simon shared.

bond0.150 is the vlan 150 that is dedicated to carry all VXLAN "tunnels"
(it HAS to have the IP, it serves as VTEP basically) - you would probably
want to define this as separate PHYSICAL NETWORK during zone provisioning
(because other networks i.e. management, storage, public doesn't support
vxlan as isolation method) - so you define "bond.150" as the KVM traffic
label for Guest Network

(FYI: you could also create bridge cloudXYZ that has bond0.150 as member
and use this as KMV traffic label, but cloudstack will just extract child
interface, bond0.150 and create later the structure on its own - while
cloudXYZ bridge is NOT used anywhere else)


So my setup, bond0.150. Cloudstack needs to create i.e. vxlan structure
with vxlan id , so it will take bond0.150 and create VXLAN interface on
top of it (ip -d link show vxlan, to see it's properties )

After cloudstack has created a vxlan interface (on top of you vlan
interface), it will then create a bridge (brvx-) and finally join vm's
NIC to this bridge so both vxlan interface and VMs vNIC will be part of
bridge.

That's it - works well as Simon said, last 4 years in production with vxlan.

Here is any UGLY but informative drawing from my side :)
https://docs.google.com/drawings/d/1oPWU5p_wUd9UPhXGZg7j4acu5XYPbkLWzmihi6Qbwl8/edit?usp=sharing

So you can see tunnels etc. On the picture are also some other networks
like public network on vlan 160 etc...
(images on Simon's link are excellent, just old bridge names)


In case you use VXLAN for Guest networks (VPC networks, isolated, etc) -
make sure to understand that Private Gateway network only supports VLAN,
not VXLAN, it's usefull to know, since I later had to add new physical
networks to support Private Gateway (didn't plan originally for it).


CHeers

On Wed, 14 Nov 2018 at 18:29, Simon Weller  wrote:

> Hi Alexandre,
>
>
> VXLAN on KVM works very well and we've had it in production for a number
> of years now.
>
>
> Please see this document on how it is implemented:
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Linux+native+VXLAN+support+on+KVM+hypervisor
>
> Cloudstack does create all the VXLAN configuration for each new network,
> you  just need to have a working underlay that supports multicast (e.g. an
> IP on the VXLAN interface and iptables rules rules that allow multicast
> traffic).
> We place our VXLANs into a VLAN and expose that VLAN via a KVM traffic
> label to the VXLAN guest network.
>
> - Si
>
>
>
> 
> From: Alexandre Bruyere 
> Sent: Wednesday, November 14, 2018 10:32 AM
> To: users@cloudstack.apache.org
> Subject: Information on VXLAN implementations (and other guest isolation
> methods)
>
> Hello.
>
> I'm currently investigating guest isolation methods for a project. The idea
> was thrown about to use VXLANs, but it's rather fuzzy on how it actually is
> implemented.
>
> Does Cloudstack automatically create and maintain VXLAN connections, or
> does it ride off an already-implemented VXLAN system configured under the
> hood?
>
> And what would be the use cases for VXLANs? Would it be appropriate to use
> in a small-scale network for hybrid clusters? If not, what would the
> Cloudstack community recommend?
>
> Thanks for your time!
>


-- 

Andrija Panić

Re: Information on VXLAN implementations (and other guest isolation methods)

[Simon Weller]

Hi Alexandre,


VXLAN on KVM works very well and we've had it in production for a number of 
years now.


Please see this document on how it is implemented: 
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Linux+native+VXLAN+support+on+KVM+hypervisor

Cloudstack does create all the VXLAN configuration for each new network, you  
just need to have a working underlay that supports multicast (e.g. an IP on the 
VXLAN interface and iptables rules rules that allow multicast traffic).
We place our VXLANs into a VLAN and expose that VLAN via a KVM traffic label to 
the VXLAN guest network.

- Si




From: Alexandre Bruyere 
Sent: Wednesday, November 14, 2018 10:32 AM
To: users@cloudstack.apache.org
Subject: Information on VXLAN implementations (and other guest isolation 
methods)

Hello.

I'm currently investigating guest isolation methods for a project. The idea
was thrown about to use VXLANs, but it's rather fuzzy on how it actually is
implemented.

Does Cloudstack automatically create and maintain VXLAN connections, or
does it ride off an already-implemented VXLAN system configured under the
hood?

And what would be the use cases for VXLANs? Would it be appropriate to use
in a small-scale network for hybrid clusters? If not, what would the
Cloudstack community recommend?

Thanks for your time!

Information on VXLAN implementations (and other guest isolation methods)

[Alexandre Bruyere]

Hello.

I'm currently investigating guest isolation methods for a project. The idea
was thrown about to use VXLANs, but it's rather fuzzy on how it actually is
implemented.

Does Cloudstack automatically create and maintain VXLAN connections, or
does it ride off an already-implemented VXLAN system configured under the
hood?

And what would be the use cases for VXLANs? Would it be appropriate to use
in a small-scale network for hybrid clusters? If not, what would the
Cloudstack community recommend?

Thanks for your time!

Re: Build CloudStack 4.10.0 Error

[Khosrow Moossavi]

As Rafael mentioned this was a known issue and fixed (the commit he sent).

You can check the version of java running in the build tools like:

docker run -it --entrypoint environment-info.sh
khos2ow/cloudstack-deb-builder:ubuntu1404

java version: openjdk version "1.8.0_171" OpenJDK Runtime Environment
(build 1.8.0_171-8u171-b11-2~14.04-b11) OpenJDK 64-Bit Server VM (build
25.171-b11, mixed mode)


On Tue, Nov 13, 2018 at 11:18 AM li jerry  wrote:

> Think Rafael Weingärtner
>
>
>
> I have already passed the build after the change. Is this because the
> openssl version of my build machine is too low?
>
>
>
> Root@59e9a8871fe8:/mnt/build# openssl version -a
>
> OpenSSL 1.0.1f 6 Jan 2014
>
> Built on: Wed Apr 18 18:30:39 UTC 2018
>
> Platform: debian-amd64
>
> Options: bn(64,64) rc4(16x,int) des(idx,cisc,16,int) blowfish(idx)
>
> Compiler: cc -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT
> -DDSO_DLFCN -DHAVE_DLFCN_H -m64 -DL_ENDIAN -DTERMIO -g -O2
> -fstack-protector --param=ssp-buffer-size=4 -Wformat
> -Werror=format-security -D_FORTIFY_SOURCE = 2 -Wl, -Bsymbolic-functions
> -Wl, -z, relro -Wa, - noexecstack -Wall -DMD32_REG_T = int
> -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
> -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM
> -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
>
> OPENSSLDIR: "/usr/lib/ssl"
>
>
>
> 
> 发件人: Rafael Weingärtner 
> 发送时间: Tuesday, November 13, 2018 11:44:37 PM
> 收件人: dev
> 抄送: users
> 主题: Re: Build CloudStack 4.10.0 Error
>
> This is a known problem, and it is fixed with:
> https://github.com/apache/cloudstack/pull/2674
>
> On Tue, Nov 13, 2018 at 1:42 PM Rohit Yadav 
> wrote:
>
> > Can you try with 4.11 branch or latest master? 4.10 is not a maintained
> > branch and likely have env caused errors due to supported ciphers and tls
> > versions in jre/jdk.
> >
> > Regards.
> >
> >
> > Regards,
> > Rohit Yadav
> >
> > 
> > From: li jerry 
> > Sent: Tuesday, November 13, 2018 9:04:34 PM
> > To: users@cloudstack.apache.org; d...@cloudstack.apache.org
> > Subject: Build CloudStack 4.10.0 Error
> >
> > Hi All
> >
> >I made a mistake in compiling cloudstack 4.10.0 through docker
> > image (khos2ow/cloudstack-deb-builder: 14.04).
> >
> > Please help me. Thank you!
> >
> > ---
> > T E S T S
> > ---
> > Running streamer.BaseElementTest
> > Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.103 sec
> > - in streamer.BaseElementTest
> > Running streamer.ByteBufferTest
> > Tests run: 400, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.091
> > sec - in streamer.ByteBufferTest
> > Running rdpclient.MockServerTest
> > Error in mock server: Received fatal alert: handshake_failure
> > javax.net.ssl.SSLHandshakeException: Received fatal alert:
> > handshake_failure
> >at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
> >at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
> >at
> sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2038)
> >at
> > sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1135)
> >at
> >
> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
> >at
> > sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
> >at
> > sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
> >at streamer.debug.MockServer.run(MockServer.java:122)
> >at java.lang.Thread.run(Thread.java:748)
> > Tests run: 2, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 0.186 sec
> > <<< FAILURE! - in rdpclient.MockServerTest
> > testIsMockServerCanUpgradeConnectionToSsl(rdpclient.MockServerTest)  Time
> > elapsed: 0.18 sec  <<< ERROR!
> > javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is
> > disabled or cipher suites are inappropriate)
> >at sun.security.ssl.Handshaker.activate(Handshaker.java:529)
> >at
> >
> sun.security.ssl.SSLSocketImpl.kickstartHandshake(SSLSocketImpl.java:1492)
> >at
> >
> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1361)
> >at
> > sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
> >at
> > sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
> >at
> >
> rdpclient.MockServerTest.testIsMockServerCanUpgradeConnectionToSsl(MockServerTest.java:166)
> >
> > Running common.ClientTest
> > Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.262 sec
> > - in common.ClientTest
> >
> > Results :
> >
> > Tests in error:
> >   MockServerTest.testIsMockServerCanUpgradeConnectionToSsl:166 ?
> > SSLHandshake No...
> >
> > Tests run: 404, Failures: 0, Errors: 1, Skipped: 0
> >
> >
> >
> > 

can't enable autoscaling options

[Alvarez Fernando]

Hi there!

Some time ago I am trying to enable the "autoscaling" function on my cloudstack 
platform without success.
The idea is to enable the function without netscaler for a kind of POC, however 
and beyond to meet the prerequisites (enable the function from global settings, 
create a template with xen-tools, etc), I can not visualize the function from 
the balancing options.
My current version of cloudstack installed is 4.9.3.0.
Any ideas about where I would be failing?


Regards,


Fernando.

Re: [VOTE] Apache CloudStack 4.11.2.0 RC5

[Rohit Yadav]

+1 (binding)


Verified signed source tarball, deployed a local kvm based env in advanced zone 
and was able to validate vm, volume and network lifecycles tests.


- Rohit






From: Paul Angus 
Sent: Tuesday, November 13, 2018 7:29:33 PM
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: [VOTE] Apache CloudStack 4.11.2.0 RC5

Hi All,

I've created a 4.11.2.0 release (RC5), with the following artefacts up for 
testing and a vote:


Git Branch and Commit SH:
https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.2.0-RC20181113T0924
Commit: 5aae410dfce2bef5cc21a0892370cb5d0628f681

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open for 72 hours - until 14:00 GMT on Friday 16th Nov.

For sanity in tallying the vote, can PMC members please be sure to indicate 
"(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 
5aae410dfce2bef5cc21a0892370cb5d0628f681 and published RC5 repository here:
http://packages.shapeblue.com/testing/41120rc5/

The release notes are still work-in-progress, but the systemvm template upgrade 
section has been updated.

4.11.2.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41120rc5/

Only the following changes have been added to RC5:

+-+--+---+--++
| Version | Github   | Type  | Priority | Description   
 |
+=+==+===+==++
| 4.11.2.0| `#3018`_ |   |  | Prevent error 
on GroupAnswers on VR creation   |
+-+--+---+--++
| 4.11.2.0| `#3007`_ |   |  | Add missing 
ConfigDrive entries on existing zones after|
| |  |   |  | upgrade   
 |
+-+--+---+--++
| 4.11.2.0| `#2980`_ |   |  | [4.11] Fix 
set initial reservation on public IP ranges |
+-+--+---+--++
| 4.11.2.0| `#3010`_ |   |  | Fix 
DirectNetworkGuru canHandle checks for lowercase   |
| |  |   |  | isolation 
methods  |
+-+--+---+--++

.. _`#3012`: https://github.com/apache/cloudstack/pull/3012
.. _`#3018`: https://github.com/apache/cloudstack/pull/3018
.. _`#3007`: https://github.com/apache/cloudstack/pull/3007
.. _`#2980`: https://github.com/apache/cloudstack/pull/2980
.. _`#3010`: https://github.com/apache/cloudstack/pull/3010



Kind regards,

Paul Angus


paul.an...@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




rohit.ya...@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue