Re: Unable to login to GUI onto second management server
Hi Andrei, If the purpose of the second management server is about migration please ignore the previous reply. You have the right pointer to the procedure and I hope you have followed it. Please try to provide the following information. 1. Is the old management server also in the 4.16.1 version? 2. Which database.properties file you have changed to point to the new database ? 3. Can you check the database table "configuration", what is the value for the configuration with the name "host", is it your new MS host address ? 4. Also, check the "mshost" table in the database if it is pointing to the new management server. Regards, Harikrishna From: Andrei Mikhailovsky Sent: Monday, July 25, 2022 7:46 PM To: users Cc: Harikrishna Patnala Subject: Re: Unable to login to GUI onto second management server Hi Harikrishna, Having read the links that you've sent I am not sure that my issues are related. Perhaps I should have explained my current set up / intensions a bit more. My main reasons for adding the multiple management servers is not to provide the HA / load balancing, but rather to migrate the current management server from old hardware to the new one. I was referring to the post sent by Andrija Panic (https://www.mail-archive.com/users@cloudstack.apache.org/msg32889.html) where Andrija has suggested that one should install the second management server, connect it to the database, move the database to a new server and change the database properties to point the new management server to the new db. In my tests, I have installed the second management server without any proxy/load balancing and I tried to connect and authenticate directly to the IP address of the second management server. I've tried it with the primary management server switched on and off, but I still have the same issues. If I am connecting directly to the new management server IP, I don't see how having nginx proxy settings changes would fix my issue. Also, I have not seen anything in the documentation that explicitly requires having a proxy if you install the second management server. Why do you think my issue relates to CORS? Andrei - Original Message - > From: "Harikrishna Patnala" > To: "users" > Sent: Wednesday, 20 July, 2022 05:10:13 > Subject: Re: Unable to login to GUI onto second management server > Hi Andrei, > > This looks to me like a CORS issue. > > Have you set up any load balancer for these management servers. There is a > section > http://docs.cloudstack.apache.org/en/4.16.1.0/adminguide/reliability.html#management-server-load-balancing > which you need to configure so that you will not face issues with HA and > agents > later on. > > > You may need to consider setting cookies like below. > > If you are using nginx, try with "proxy_cookie_path / "/; Secure; > SameSite=None;";" and a similar thing should work haproxy too. > > I got this reference from a previous discussion on a PR > https://github.com/apache/cloudstack-primate/pull/898#issuecomment-760227366, > please refer to it if it helps solve your problem. > > > Regards, > Harikrishna > > From: Andrei Mikhailovsky > Sent: Tuesday, July 19, 2022 4:06 PM > To: users > Subject: Re: Unable to login to GUI onto second management server > > Bump please > > > > > > > - Original Message - >> From: "Andrei Mikhailovsky" >> To: "users" >> Sent: Monday, 18 July, 2022 11:45:05 >> Subject: Unable to login to GUI onto second management server > >> Hello, >> >> I've recently installed a second management server ACS 4.16.1 following the >> installation instructions in section Additional Management Servers from the >> official documentation ( [ >> http://docs.cloudstack.apache.org/en/4.16.1.0/installguide/management-server/index.html >> | >> http://docs.cloudstack.apache.org/en/4.16.1.0/installguide/management-server/index.html >> ] ). I've installed the Ubuntu package on the second server of the same >> version >> as the primary management server. Configured the database with >> cloudstack-setup-databases command followed by running >> cloudstack-setup-management as per the documentation. There were no errors in >> the process and the cloudstack-management.service seems to have started just >> fine. The second ACS management service connected to the same database as the >> primary one and the login web GUI loaded just fine. The management server >> logs >> seems to show no apparent errors in the startup. The only exceptions I was >> getting in the logs were from the host agents showing status Disconnected. >> >> So, I have tried to login (using domain and ROOT login accounts) to the web >> gui >> of the second management server and the page just hangs after I enter the >> credentials and press the Login button. I've tried several different browsers >> at no avail. Supplying the incorrect login credentials produce the error >> though. The manage
Re: Usage computing removed items
Same here, exactly the same problem with volumes. I've looked in github source for the SQL query that generates the aggregated registries to try to understand but I couldn't find. :/ Appreciate any help too. Em ter., 26 de jul. de 2022 17:31, Matheus Fontes escreveu: > Hi, > Is anyone having problems with usage computing removed items? > We have a user that reported the problem. > The volume was deleted since 2022-05-06 > > mysql> select id,account_id,created,removed,state from volumes where > id=3246; > > +--++-+-+--+ > | id | account_id | created | removed | state > | > > +--++-+-+--+ > | 3246 |545 | 2021-04-08 17:03:16 | 2022-05-06 15:06:52 | Expunged > | > > +--++-+-+--+ > > > In usage process we can see it on parsing volume call: > 2022-07-26 00:18:17,471 DEBUG [usage.parser.VolumeUsageParser] > (Usage-Job-1:null) (logid:) Parsing all Volume usage events for account: 545 > 2022-07-26 00:18:17,472 DEBUG [usage.parser.VolumeUsageParser] > (Usage-Job-1:null) (logid:) Total running time 8640ms > 2022-07-26 00:18:17,472 DEBUG [usage.parser.VolumeUsageParser] > (Usage-Job-1:null) (logid:) Creating Volume usage record for vol: 3246, > usage: 24, startDate: Mon Jul 25 00:00:00 BRT 2022, endDate: Mon Jul 25 > 23:59:59 BRT 2022, for account: 545 > 2022-07-26 00:18:17,484 DEBUG [usage.parser.VolumeUsageParser] > (Usage-Job-1:null) (logid:) Total running time 8640ms > 2022-07-26 00:18:17,484 DEBUG [usage.parser.VolumeUsageParser] > (Usage-Job-1:null) (logid:) Creating Volume usage record for vol: 3246, > usage: 24, startDate: Mon Jul 25 00:00:00 BRT 2022, endDate: Mon Jul 25 > 23:59:59 BRT 2022, for account: 545 > > > And it are being computed to account: > (ascenty) # > list usagerecords domainid=XXX > accountid=d14c8cb9-fd92-43c8-9ddb-f2ed4e9af5a8 type=6 startdate=2022-07-25 > enddate=2022-07-25 filter=account,rawusage,size,startdate,usage,usagetype, > { > "count": 2, > "usagerecord": [ > { > "accountid": "d14c8cb9-fd92-43c8-9ddb-f2ed4e9af5a8", > "rawusage": "24", > "size": 53687091200, > "startdate": "2022-07-25'T'00:00:00-03:00", > "usage": "24 Hrs", > "usagetype": 6 > }, > { > "accountid": "d14c8cb9-fd92-43c8-9ddb-f2ed4e9af5a8", > "rawusage": "24", > "size": 53687091200, > "startdate": "2022-07-25'T'00:00:00-03:00", > "usage": "24 Hrs", > "usagetype": 6 > } > ] > } -- __ Aviso de confidencialidade Esta mensagem da Empresa Brasileira de Pesquisa Agropecuaria (Embrapa), empresa publica federal regida pelo disposto na Lei Federal no. 5.851, de 7 de dezembro de 1972, e enviada exclusivamente a seu destinatario e pode conter informacoes confidenciais, protegidas por sigilo profissional. Sua utilizacao desautorizada e ilegal e sujeita o infrator as penas da lei. Se voce a recebeu indevidamente, queira, por gentileza, reenvia-la ao emitente, esclarecendo o equivoco. Confidentiality note This message from Empresa Brasileira de Pesquisa Agropecuaria (Embrapa), a government company established under Brazilian law (5.851/72), is directed exclusively to its addressee and may contain confidential data, protected under professional secrecy rules. Its unauthorized use is illegal and may subject the transgressor to the law's penalties. If you are not the addressee, please send it back, elucidating the failure.
Permission Denied on Domain Controller on Internal LoadBalancer
Hi all, We use a domain controller user in ACS to deploy the infrastructure, however when we try to CreateLoadBalancer we are receiving a “531 Unable to use network with id= 498611f9-xxx-4030-aa10-e7d7ad062d1a, permission denied” PermissionDenied: Unable to use network with id= 498611f9-xxx-4030-aa10-e7d7ad062d1a, permission denied on objs: [] Is there any configuration missing or is it a bug? It works well when using the admin user. ACS 4.15.2.0 KVM Redundant VPC offering Supported Services on Network Offering SourceNat : VpcVirtualRouter Dhcp : VpcVirtualRouter Lb : InternalLbVm UserData : VpcVirtualRouter Dns : VpcVirtualRouter NetworkACL : VpcVirtualRouter BR, Ricardo
Usage computing removed items
Hi, Is anyone having problems with usage computing removed items? We have a user that reported the problem. The volume was deleted since 2022-05-06 mysql> select id,account_id,created,removed,state from volumes where id=3246; +--++-+-+--+ | id | account_id | created | removed | state| +--++-+-+--+ | 3246 |545 | 2021-04-08 17:03:16 | 2022-05-06 15:06:52 | Expunged | +--++-+-+--+ In usage process we can see it on parsing volume call: 2022-07-26 00:18:17,471 DEBUG [usage.parser.VolumeUsageParser] (Usage-Job-1:null) (logid:) Parsing all Volume usage events for account: 545 2022-07-26 00:18:17,472 DEBUG [usage.parser.VolumeUsageParser] (Usage-Job-1:null) (logid:) Total running time 8640ms 2022-07-26 00:18:17,472 DEBUG [usage.parser.VolumeUsageParser] (Usage-Job-1:null) (logid:) Creating Volume usage record for vol: 3246, usage: 24, startDate: Mon Jul 25 00:00:00 BRT 2022, endDate: Mon Jul 25 23:59:59 BRT 2022, for account: 545 2022-07-26 00:18:17,484 DEBUG [usage.parser.VolumeUsageParser] (Usage-Job-1:null) (logid:) Total running time 8640ms 2022-07-26 00:18:17,484 DEBUG [usage.parser.VolumeUsageParser] (Usage-Job-1:null) (logid:) Creating Volume usage record for vol: 3246, usage: 24, startDate: Mon Jul 25 00:00:00 BRT 2022, endDate: Mon Jul 25 23:59:59 BRT 2022, for account: 545 And it are being computed to account: (ascenty) # > list usagerecords domainid=XXX accountid=d14c8cb9-fd92-43c8-9ddb-f2ed4e9af5a8 type=6 startdate=2022-07-25 enddate=2022-07-25 filter=account,rawusage,size,startdate,usage,usagetype, { "count": 2, "usagerecord": [ { "accountid": "d14c8cb9-fd92-43c8-9ddb-f2ed4e9af5a8", "rawusage": "24", "size": 53687091200, "startdate": "2022-07-25'T'00:00:00-03:00", "usage": "24 Hrs", "usagetype": 6 }, { "accountid": "d14c8cb9-fd92-43c8-9ddb-f2ed4e9af5a8", "rawusage": "24", "size": 53687091200, "startdate": "2022-07-25'T'00:00:00-03:00", "usage": "24 Hrs", "usagetype": 6 } ] }
Re: VM Migrations failures
Hey Curios, Did you find any work around for this issue? Kind regards, Sina --- Original Message --- On Monday, March 28th, 2022 at 19:07, Curious Pandora wrote: > > > Hello, > > We are in the process of migrating some of our VMs to a new zone wide NFS > primary storage. > > Some of the live and offline migrations went smoothly. However, no more > migrations can take place at the moment. > > For an offline migration the host selected to do it by the scheduler > reports in cloudstack agent.log > > 2022-03-28 19:32:08,636 INFO [kvm.storage.LibvirtStorageAdaptor] > (agentRequest-Handler-1:null) (logid:21246b44) Trying to fetch storage pool > e7f12bcd-9fae-388d-bbbe-cf0984e7776d from libvirt > 2022-03-28 19:32:08,696 INFO [kvm.storage.LibvirtStorageAdaptor] > (agentRequest-Handler-1:null) (logid:21246b44) Attempting to create volume > 8f59974a-e5f8-4ba3-9808-3db35f3f3 af1.qcow2 (NetworkFilesystem) in > pool e7f12bcd-9fae-388d-bbbe-cf0984e7776d with size (80.00 GB) 85899345920 > 2022-03-28 19:32:08,841 ERROR [kvm.storage.LibvirtStorageAdaptor] > (agentRequest-Handler-1:null) (logid:21246b44) Failed to create > /mnt/e7f12bcd-9fae-388d-bbbe-cf0984e7776d/8f > 59974a-e5f8-4ba3-9808-3db35f3f3af1.qcow2 due to a failed executing of > qemu-img: qemu-img: > /mnt/e7f12bcd-9fae-388d-bbbe-cf0984e7776d/8f59974a-e5f8-4ba3-9808-3db35f3f3af1.qcow2: > > Image is not in qcow2 formatFormatting > '/mnt/e7f12bcd-9fae-388d-bbbe-cf0984e7776d/8f59974a-e5f8-4ba3-9808-3db35f3f3af1.qcow2', > fmt=qcow2 size=85899345920 cluster_size=65536 preallocation=off > lazy_refcounts=off refcount_bits=16 > 2022-03-28 19:32:08,928 ERROR [kvm.storage.LibvirtStorageAdaptor] > (agentRequest-Handler-1:null) (logid:21246b44) Failed to convert > /san/primary/vm_vol1/2dbd1ee3-9ae7-4e0c-b52 e-c9767ea33208 to > /mnt/e7f12bcd-9fae-388d-bbbe-cf0984e7776d/8f59974a-e5f8-4ba3-9808-3db35f3f3af1.qcow2 > the error was: qemu-img: > /mnt/e7f12bcd-9fae-388d-bbbe-cf0984e7776d/8f59974a-e5f8-4ba3-9808-3db35f3f3af1.qcow2: > error while converting qcow2: Image is not in qcow2 format > 2022-03-28 19:32:08,928 INFO [kvm.storage.LibvirtStorageAdaptor] > (agentRequest-Handler-1:null) (logid:21246b44) Attempting to remove storage > pool e7f12bcd-9fae-388d-bbbe-cf0 984e7776d from libvirt > 2022-03-28 19:32:08,931 INFO [kvm.storage.LibvirtStorageAdaptor] > (agentRequest-Handler-1:null) (logid:21246b44) Storage pool > e7f12bcd-9fae-388d-bbbe-cf0984e7776d has no corr esponding secret. > Not removing any secret. > > Checking the image in question with qemu-img info and is indeed a qcow2 > image. > image: /san/primary/vm_vol1/2dbd1ee3-9ae7-4e0c-b52e-c9767ea33208 > file format: qcow2 > virtual size: 80 GiB (85899345920 bytes) > disk size: 28 GiB > cluster_size: 65536 > Format specific information: > compat: 1.1 > lazy refcounts: false > refcount bits: 16 > corrupt: false > > Online migrations with volumes also fail. The new volumes remain in > "Migrating" state for ever and the job fails. > > The environment is ubuntu 20.04. > > -- > p4nd0ra - the curious signature.asc Description: OpenPGP digital signature
CPVM VNC clipboard character mapping
Hi everyone I’m sure this must have been raised before but I am struggling to find any recent documentation for this issue. We have ACS 4.15.2 on Ubuntu 20.04 for mgmt. and KVM hosts and I am seeing an issue where if I use the console proxy VNC viewer on any of my Windows based instances – certain characters are mapped incorrectly For example if I put the following characters into the clipboard : “@| And then ‘send’ them into a notepad file on the guest – they map to the following characters : @”# However if I type the characters directly into the open notepad file on the guest – they do type correctly. So it appears that the console proxy VNC viewer clipboard is translating the characters as ‘US’ keyboard rather than ‘UK’ keyboard. I have been reading this thread about CPVM non US keyboard support but it seems out of date now : https://cwiki.apache.org/confluence/display/CLOUDSTACK/Support+for+non-US+keyboards+in+Console+Proxy I’m sure there will be a straight forward fix for this issue – as at the mment we have to be careful about what characters we use in passwords – etc as they currently are pasting incorrectly using the vnc viewer clipboard. Any advice would be greatly appreciated BR Gary Dixon Technical Consultant T: 0161 537 4980 W: www.quadris.co.uk [cid:image001.png@01D8A0CC.EBEFE650] The information contained in this e-mail from Quadris may be confidential and privileged for the private use of the named recipient. The contents of this e-mail may not necessarily represent the official views of Quadris. If you have received this information in error you must not copy, distribute or take any action or reliance on its contents. Please destroy any hard copies and delete this message.