Information At A Shortage

[Darryl Adams]

Hey All,

Over the past 3 weeks I've successfully deployed a proof of concept (POC) 
CloudStack 4.13 (CS) in advance mode within a nested hyper-v environment using 
three Ubuntu Server 16.04 VMs (1 management and 2 hypervisor hosts). I was able 
to create Centos, Ubuntu and Windows instances (VMs) within my cloud; all 
appears to be working as expected.

My goal is to transition from my 4 node HP DL360 hyper-v cluster, Cisco 3750 
layer 3 switch with a Freenas iSCSI backend storage to a CloudStack cloud 
running on Ubuntu 16.04 (I tried 18.04 in POC, but after installing 
updates/patches experienced issues). I've read much of the online 
documentation, watched Youtube videos, Google searches and just cannot seem to 
find enough (current) information on designing, building a production ready 
cloud; books are even outdated.

My History:
I've been in IT for 20+ years, worked with VMware, Hyper-V, Azure and Azure 
Stack Dev Kit. In search of the "perfect" on-premise private cloud. CloudStack 
seems to fit the bill, but I'm concerned about the lack of information and 
product training/demonstration videos.

This message is confidential. It may also be privileged or otherwise protected 
by work product immunity or other legal rules. If you have received it by 
mistake, please let us know by e-mail reply and delete it from your system; you 
may not copy this message or disclose its contents to anyone. Please send us by 
fax any message containing deadlines as incoming e-mails are not screened for 
response deadlines. The integrity and security of this message cannot be 
guaranteed on the Internet.

KVM HA fails continuously | Dell R440

[Cloud Udupi]

Hi,

I am facing the same issue mentioned here.
Re: KVM Host HA and power lost to host.


I have configured everything for HA to work and using KVM as hypervisor. We
are using Dell PowerEdge R440 servers. Server has redundant PSU.
The issue mentioned below is only with Dell R440 Servers. On other server
models (PowerEdge R730 & R230) with the same configuration KVM HA works
fine.

*Testing Done:*
1. When host is powered off (server that is hosting the vm)
2. Host state stays in *disconnected **state* and VM never migrates. (
Ideally it should go into maintenance mode and VMs should migrate to
available host as per ACS)
3. When I checked management logs I got this error message .* i.e.- "OOBM
is not configured or enabled for host"*
4. When I clicked on Power ON menu in the idrac dashboard*,* the host goes
into maintenance mode and VM Fencing takes place, but I see that still the
server is not ping-able and the power state in the idrac dashboard is
showing as *OFF*. Then I re-clicked on the power ON menu, and found that
the power state shows *ON.*
5.We have tested the server with one PSU at a time with different power
source and still we see the above issue.
6. Dell team has isolated the issue to ACS being, they were able to execute
the IPMI commands via CLI mode.

On other server models (PowerEdge R730 & R230) with the same configuration
KVM HA works fine.
The issue mentioned above is only with Dell R440 Servers.

*Management server logs:*

2020-02-25 20:25:11,173 DEBUG [o.a.c.o.OutOfBandManagementServiceImpl]
(pool-4-thread-6:ctx-c9e50e03) (logid:5b57b3b3) Out-of-band Management
action (RESET) on host (a295403a-d87e-4294-8c8a-f9085f36248b) *fail*ed with
*error*: Using best available cipher suite 3

*Invalid* completion code received: *Invalid* command

Set Chassis Power Control to reset *fail*ed: Command not supported in
present state

2020-02-25 20:25:11,178 *WARN*  [o.a.c.k.h.KVMHAProvider]
(pool-4-thread-6:ctx-c9e50e03) (logid:5b57b3b3) OOBM service is not
configured or enabled for this host host3.hyclon3.com *error* is
Out-of-band Management action (RESET) on host
(a295403a-d87e-4294-8c8a-f9085f36248b) *fail*ed with *error*: Using best
available cipher suite 3

*Invalid* completion code received: *Invalid* command

Set Chassis Power Control to reset *fail*ed: Command not supported in
present state

2020-02-25 20:25:11,178 *WARN*  [o.a.c.h.t.BaseHATask]
(pool-4-thread-5:null) (logid:5b57b3b3) *Exception* occurred while running
RecoveryTask on a resource: org.apache.cloudstack.ha.provider.HARecovery
*Exception*:  OOBM service is not configured or enabled for this host
host3.hyclon3.com

org.apache.cloudstack.ha.provider.HARecovery*Exception*:  OOBM service is
not configured or enabled for this host host3.hyclon3.com

Caused by: com.cloud.utils.*exception*.CloudRuntime*Exception*: Out-of-band
Management action (RESET) on host (a295403a-d87e-4294-8c8a-f9085f36248b)
*fail*ed with *error*: Using best available cipher suite 3

*Invalid* completion code received: *Invalid* command

Set Chassis Power Control to reset *fail*ed: Command not supported in
present state

2020-02-25 20:25:11,182 *WARN*  [c.c.a.AlertManagerImpl]
(pool-4-thread-5:null) (logid:5b57b3b3) AlertType:: 30 | dataCenterId:: 1 |
podId:: 1 | clusterId:: null | message:: HA Recovery of host id=13, in dc
id=1 performed

2020-02-25 20:25:15,056 DEBUG [o.a.c.o.OutOfBandManagementServiceImpl]
(pool-5-thread-24:ctx-08e29baf) (logid:8e05151d) Out-of-band Management
action (OFF) on host (a295403a-d87e-4294-8c8a-f9085f36248b) *fail*ed with
*error*: Using best available cipher suite 3

*Invalid* completion code received: *Invalid* command

Set Chassis Power Control to down/off *fail*ed: Command not supported in
present state


It will be of great help if anyone can help us to resolve this issue.


Regards,

Mark

Re: SSL and Cloudstack 4.13

[Richard Lawley]

If your console windows are still opening but not in SSL, then I would
first try restarting the management server (I believe this is required
after you change the consoleproxy.sslEnabled settings).  Restart the
consoleproxy after.  If that doesn't work, destroy the consoleproxy and it
will get recreated.

Regards,
Richard

On Mon, 24 Feb 2020 at 20:25, Olivier Guin  wrote:

> Hello,
> I am trying to set up ssl on systemvm.
> I was able to migrate without problem from version 4.10 to version 4.13
> but since impossible to set up the ssl correctly on my ssvm / cpvm?
> I follow the documentation
> (http://docs.cloudstack.apache.org/en/latest/adminguide/systemvm.html)
> as well as (https://www.shapeblue.com/securing-cloudstack-4-11-with-
> https-tls /).
> GUI process: cloudstack indicates that the certificate is OK, the cpvm
> and ssvm restarts correctly but still without ssl?
> How to check where it doesn't work ?
> What would be the points to check ?
> A priori things have changed since 4.11 !
>
> Best regards
> Olivier Guin
>
>