Re: Failed to authenticate Veeam API service due to:Connection reset - Veeam 12

[Cristian Ciobanu]

Hi Wei,

   I see. I will try to test it.

Thank you.
Cristian



On Fri, Jan 19, 2024, 17:01 Wei ZHOU  wrote:

> Hi,
>
> As Daan mentioned, veeam 11/12 is not supported yet.
> The issue has been addressed by PR #8241
>
> Please feel free to test it. (It has been verified by our QAs)
>
> -Wei
>
> On Fri, 19 Jan 2024 at 12:53,  wrote:
>
> > Hello,
> >
> >
> >
> > I'm struggling to link CloudStack with Veeam 12 and I keep encountering
> the
> > same issue: "Failed to authenticate Veeam API service due to: Connection
> > reset."
> >
> > My question is, should I be connecting to the API on the Veeam Enterprise
> > Manager or the Backup and Replication server? I'm asking because the
> > instructions aren't clear on this point.
> >
> >
> >   - Veeam B server URL. Default: http://
> >  :9398/api/
> >  but
> > B API does not run on 9398 it is on 9419, only the Veeam Backup Ent
> > Manager API runs on 9398 and 9399.
> >
> >
> >
> > Anyone using with Veeam 12.
> >
> >
> >
> > Thank you,
> >
> > Cristian
> >
> >
>

Re: Upload ISO from local using SSL Offloading

[Wei ZHOU]

If your SSVM is running in a local network, you need to set up a reserve
proxy , otherwise uploading template/iso from local will not work.

-Wei

On Fri, 19 Jan 2024 at 15:45, Daan Hoogland  wrote:

> Wilken,
>
> by ssl-offloading do you mean you have a proxy in front of your
> MS(ses) and your MS running on an http port in a trusted network?
> Pretty sure this won't work, a work around would be to upload to a url
> and register from there.
> did the ms log give you any more information before that message?
>
> On Wed, Jan 17, 2024 at 5:53 PM W. Verleger - proIO GmbH
>  wrote:
> >
> > Hi,
> >
> > Is there anyone using SSL offloading and able to use "Images" `a "upload
> ISO from local" in CS 4.18.1.0 ?
> >
> > I receive the following error message in CS:
> >
> > Network Error
> > Unable to reach the management server or a browser extension may be
> blocking the network request.
> >
> > And MGMT server log:
> >
> > 024-01-17 17:27:01,611 DEBUG [o.a.c.s.e.DefaultEndPointSelector]
> (Upload-Monitor-1:ctx-87ab24ff) (logid:2ed291e7) Coudn't find ssvm for
> urlhttp://my.domain.com/upload/f63853e9-d9bc-46aa-b04c-6de181a939c2
> >
> > (my.domain.com as placeholder)
> >
> > Can anyone help how to achieve ISO upload from local?
> > Thank  you!
> >
> >
> > Best regards,
> > Wilken
> >
> >
> > - proIO GmbH -
> > Geschäftsführer: Swen Brüseke
> > Sitz der Gesellschaft: Frankfurt am Main
> >
> > USt-IdNr. DE 267 075 918
> > Registergericht: Frankfurt am Main - HRB 86239
> >
> > Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte
> Informationen.
> > Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich
> erhalten haben,
> > informieren Sie bitte sofort den Absender und vernichten Sie diese Mail.
> > Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail sind
> nicht gestattet.
> >
> > This e-mail may contain confidential and/or privileged information.
> > If you are not the intended recipient (or have received this e-mail in
> error) please notify
> > the sender immediately and destroy this e-mail.
> > Any unauthorized copying, disclosure or distribution of the material in
> this e-mail is strictly forbidden.
> >
>
>
> --
> Daan
>

Re: Failed to authenticate Veeam API service due to:Connection reset - Veeam 12

[Wei ZHOU]

Hi,

As Daan mentioned, veeam 11/12 is not supported yet.
The issue has been addressed by PR #8241

Please feel free to test it. (It has been verified by our QAs)

-Wei

On Fri, 19 Jan 2024 at 12:53,  wrote:

> Hello,
>
>
>
> I'm struggling to link CloudStack with Veeam 12 and I keep encountering the
> same issue: "Failed to authenticate Veeam API service due to: Connection
> reset."
>
> My question is, should I be connecting to the API on the Veeam Enterprise
> Manager or the Backup and Replication server? I'm asking because the
> instructions aren't clear on this point.
>
>
>   - Veeam B server URL. Default: http://
>  :9398/api/
>  but
> B API does not run on 9398 it is on 9419, only the Veeam Backup Ent
> Manager API runs on 9398 and 9399.
>
>
>
> Anyone using with Veeam 12.
>
>
>
> Thank you,
>
> Cristian
>
>

Re: Failed to authenticate Veeam API service due to:Connection reset - Veeam 12

[Daan Hoogland]

I think Veeam 11 and up are not yet supported Cristian. there is a PR
out for that: https://github.com/apache/cloudstack/pull/8241

On Fri, Jan 19, 2024 at 12:53 PM  wrote:
>
> Hello,
>
>
>
> I'm struggling to link CloudStack with Veeam 12 and I keep encountering the
> same issue: "Failed to authenticate Veeam API service due to: Connection
> reset."
>
> My question is, should I be connecting to the API on the Veeam Enterprise
> Manager or the Backup and Replication server? I'm asking because the
> instructions aren't clear on this point.
>
>
>   - Veeam B server URL. Default: http://
>  :9398/api/ but
> B API does not run on 9398 it is on 9419, only the Veeam Backup Ent
> Manager API runs on 9398 and 9399.
>
>
>
> Anyone using with Veeam 12.
>
>
>
> Thank you,
>
> Cristian
>


-- 
Daan

Re: new website design

[Daan Hoogland]

As we get no major issues on it and we already voted to have this
design applied, is it alright to deploy this in the coming weeks?

On Wed, Jan 17, 2024 at 8:31 PM Daan Hoogland  wrote:
>
> devs and users,
>
> back in august we had a small discussion about a new website design,
> led by Ivet [1]. In the meanwhile Rohit had investigated using
> docusaurus as a publishing mechanism for the site. After the last few
> weeks I have been working on integrating the two. The result so far
> can be viewed on the staging site [2]
>
> Please all have a look and give me any feedback you may have, so we
> can move this forward.
>
> [1] https://lists.apache.org/thread/fopjc3r4hjkp9nbkj9xzoxv406rowkso
> [2] https://cloudstack.staged.apache.org/
>
> --
> Daan



-- 
Daan

Re: Unable To Delete Secondary Storage

[Daan Hoogland]

when all volumes templates and snapshots are removed you should be able to
remove a sector, but it can be very troublesome indeed. when removing a
zone, also removing physical network can block it because of IP addresses
in use and such. Hope you got your job done ;)

On Thu, Jan 18, 2024 at 4:47 AM Bryan Tiang 
wrote:

> Morning All,
>
> Just to update, we managed to resolve the issue, but it had to be done
> manually from the db.
>
> Manually alter DB to remove templates from old zone
>
> Successfully removed old templates > Old Secondary Storage > Old Zone
>
> Changed "state" to "inactive" and added date & time to "removed"
>
>
> Regards,
> Bryan
> On 16 Jan 2024 at 12:53 PM +0800, Bryan Tiang ,
> wrote:
>
> Hi Community,
>
> We're trying to remove secondary storage but we need to delete the
> existing templates first
> However, we're receiving this error Failed to delete template
>
> Error message from management server
> Jan 16 11:23:49 N2NCLOUDMY1MG01 java[87629]: ERROR
> [o.a.c.s.i.BaseImageStoreDriverImpl] (API-Job-Executor-1:ctx-259f8594
> job-9377 ctx-9f923096) (logid:c104e949) No remote endpoint to send command,
> check if host or ssvm is down?
>
> Ultimately we're trying to remove the zone, therefore we've also removed
> hosts associated to this zone
>
> 
>
> Regards,
> Bryan
>
>

-- 
Daan

Re: Upload ISO from local using SSL Offloading

[Daan Hoogland]

Wilken,

by ssl-offloading do you mean you have a proxy in front of your
MS(ses) and your MS running on an http port in a trusted network?
Pretty sure this won't work, a work around would be to upload to a url
and register from there.
did the ms log give you any more information before that message?

On Wed, Jan 17, 2024 at 5:53 PM W. Verleger - proIO GmbH
 wrote:
>
> Hi,
>
> Is there anyone using SSL offloading and able to use "Images" `a "upload ISO 
> from local" in CS 4.18.1.0 ?
>
> I receive the following error message in CS:
>
> Network Error
> Unable to reach the management server or a browser extension may be blocking 
> the network request.
>
> And MGMT server log:
>
> 024-01-17 17:27:01,611 DEBUG [o.a.c.s.e.DefaultEndPointSelector] 
> (Upload-Monitor-1:ctx-87ab24ff) (logid:2ed291e7) Coudn't find ssvm for 
> urlhttp://my.domain.com/upload/f63853e9-d9bc-46aa-b04c-6de181a939c2
>
> (my.domain.com as placeholder)
>
> Can anyone help how to achieve ISO upload from local?
> Thank  you!
>
>
> Best regards,
> Wilken
>
>
> - proIO GmbH -
> Geschäftsführer: Swen Brüseke
> Sitz der Gesellschaft: Frankfurt am Main
>
> USt-IdNr. DE 267 075 918
> Registergericht: Frankfurt am Main - HRB 86239
>
> Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen.
> Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich 
> erhalten haben,
> informieren Sie bitte sofort den Absender und vernichten Sie diese Mail.
> Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail sind nicht 
> gestattet.
>
> This e-mail may contain confidential and/or privileged information.
> If you are not the intended recipient (or have received this e-mail in error) 
> please notify
> the sender immediately and destroy this e-mail.
> Any unauthorized copying, disclosure or distribution of the material in this 
> e-mail is strictly forbidden.
>


-- 
Daan

Re: Specify Primary Storage location for snapshots

[Daan Hoogland]

Granwille,
to my knowledge creating a snapshot always takes place on the storage the
volume is on and only after created can it be moved. I am not sure if this
is a "law of physics" or a rule like guideline.

On Wed, Jan 17, 2024 at 12:36 PM Granwille Strauss
 wrote:

> Good Day
>
> When making snapshots, the snapshot first stores the file in primary
> storage and then transports it to secondary storage and afterwards deletes
> it from primary leaving the copy on secondary storage. We currently use
> local kvm server as the primary storage for our VM instances. This means
> that the KVM host has limited disk space left to temporarily save that
> snapshot. Is it possible for us to specify a primary path where snapshot
> can temporarily store snapshots before moving it to secondary storage? We
> have an extra NFS server, which we cant to use as primary, because it has
> enough space for this purpose. Please let me know?
> --
> Regards / Groete
>
>  Granwille Strauss  //  Senior Systems Admin
>
> *e:* granwi...@namhost.com
> *m:* +264 81 323 1260 <+264813231260>
> *w:* www.namhost.com
>
>  
> 
> 
> 
>
>
> 
>
> Namhost Internet Services (Pty) Ltd,
>
> 24 Black Eagle Rd, Hermanus, 7210, RSA
>
>
>
> The content of this message is confidential. If you have received it by
> mistake, please inform us by email reply and then delete the message. It is
> forbidden to copy, forward, or in any way reveal the contents of this
> message to anyone without our explicit consent. The integrity and security
> of this email cannot be guaranteed over the Internet. Therefore, the sender
> will not be held liable for any damage caused by the message. For our full
> privacy policy and disclaimers, please go to
> https://www.namhost.com/privacy-policy
>
> [image: Powered by AdSigner]
> 
>


-- 
Daan

Re: Unable to Setup Private Gateway

[Daan Hoogland]

Bryan,
Did you follow this:
http://docs.cloudstack.apache.org/en/4.18.1.0/adminguide/networking/virtual_private_cloud_config.html#adding-a-private-gateway-to-a-vpc?
what tools did you use to test it?

On Wed, Jan 17, 2024 at 9:49 AM Bryan Tiang  wrote:
>
> Hi All,
>
> We're setting up Private Gateway on VPC but not able to get the connection to 
> work. The connection is successful from switch to Private Gateway IP using 
> VLAN 995.
>
> However when Private Gateway is created in VPC, the connection failed when 
> tested from Virtual Router.
>
> Physical Network 3 is also used for Management & Public Network
>
> Is there any other config that we could have missed?
>
> Regards,
> Hunter



-- 
Daan

Re: Backing up Cloudstack and KVM Hosts

[Daan Hoogland]

Granwille,

There are Networker and BackRoll. Both have a ACS plugging, though the
BackRoll one isn't yet merged. These are VM level solutions though. For
server I would not recommend trying to restore servers but just remove
faulty ones and add replacements to your zone/pods/clusters.

makes sense?


On Tue, Jan 16, 2024 at 3:48 PM Granwille Strauss
 wrote:

> Hi Guys
>
> Compliments of the new year! I would like to confirm what's the best way
> to backup a cloudstack and KVM server? Or what is the approach that most
> use? Do you guys make full server Image backups of the Cloudstack server
> with tools such as Veam or Acronis for example?
>
> Then, for a KVM host where VMs use local primary storage, what's the
> recommended way to backup your KVM servers in the event of hardware
> failure? I basically want to confirm what's the best way to backup the
> dedicated KVM and Cloudstack servers in case of *hardware* failures.
>
> What recommended solutions work best that have been tried and tested?
> --
> Regards / Groete
>
>  Granwille Strauss  //  Senior Systems Admin
>
> *e:* granwi...@namhost.com
> *m:* +264 81 323 1260 <+264813231260>
> *w:* www.namhost.com
>
>  
> 
> 
> 
>
>
> 
>
> Namhost Internet Services (Pty) Ltd,
>
> 24 Black Eagle Rd, Hermanus, 7210, RSA
>
>
>
> The content of this message is confidential. If you have received it by
> mistake, please inform us by email reply and then delete the message. It is
> forbidden to copy, forward, or in any way reveal the contents of this
> message to anyone without our explicit consent. The integrity and security
> of this email cannot be guaranteed over the Internet. Therefore, the sender
> will not be held liable for any damage caused by the message. For our full
> privacy policy and disclaimers, please go to
> https://www.namhost.com/privacy-policy
>
> [image: Powered by AdSigner]
> 
>


-- 
Daan

Re: Change isolation method

[Daan Hoogland]

did somemore digging and asking around. better not do it. just
redefine your zone.

On Fri, Jan 19, 2024 at 2:45 PM Daan Hoogland  wrote:
>
> Francisco, I am not sure if you can. The API doesn't support it so it
> would be rather ugly to do so. Let us know if you get any further with
> this.
>
> On Fri, Dec 29, 2023 at 10:12 AM Francisco Arencibia Quesada
>  wrote:
> >
> > Good morning guys,
> >
> > I need to change a zone's isolation method from VLAN to VXLAN. I can't find
> > an option for this. Is this possible? Do I  need to create a new zone from
> > scratch?
> >
> > Kind regards
> >
> > --
> > *Francisco Arencibia Quesada.*
> > *DevOps Engineer*
>
>
>
> --
> Daan



-- 
Daan

Re: I need to force delete primary storage definition

[Daan Hoogland]

Jimmy,
did you try this
https://cloudstack.apache.org/api/apidocs-4.18/apis/deleteStoragePool.html
(with force=true) ?

On Sat, Jan 13, 2024 at 9:34 AM Jeremy Hansen  wrote:
>
> Is there a way I can delete a primary storage configuration if the storage no 
> longer exists?  This is a test cluster but I’d like to understand how to 
> recover from this situation.  The volumes that were left behind on this 
> storage isn’t important.  How can I force delete this storage or the two 
> volumes left behind?  4.18.0.0.
>
> Thank you
> -jeremy
>
>
>


-- 
Daan

Re: Apache CloudStack and Ceph Day - February 22, Amsterdam

[Daan Hoogland]

I live in his backyard, will there as well.

On Tue, Jan 9, 2024 at 3:58 PM Wido den Hollander
 wrote:
>
>
>
> Op 09/01/2024 om 13:45 schreef Ivet Petrova:
> > Dear community members,
> >
> > We managed to finalised the date for our joint event with the Ceph 
> > community.
> > I am happy to share that we are doing it on February 22nd, in Amsterdam, 
> > Netherlands.
> > The event will be hosted by Adyen, the address is: Rokin 49, 1012 KK 
> > Amsterdam, The Netherlands
> >
> > Two things at this stage:
> >
> > 1. We still have a few speaking slots free (actually 2 slots only). If you 
> > are interested to present at the event, please submit your talk proposal 
> > now.
> > https://forms.gle/TnBfxS2cKWfe28CS6
> >
> > 2. We would be happy if we can see more people from the community, so 
> > register as an attendee here:
> > https://www.eventbrite.nl/e/cloudstack-and-ceph-day-netherlands-2024-tickets-700177167757
> >
> > Look forward to meeting you in Amsterdam!
>
> Yes! That's like my backyard. I'll be there!
>
> Wido
>
> >
> > Best regards,
> >
> >
> >
> >
> >



-- 
Daan

Re: Issue with GRE Tunnel between a VM and outside server

[Daan Hoogland]

Friborz, any progress?
not a gre expert but glad to see you get on with your problem.

On Sat, Jan 6, 2024 at 10:39 PM Fariborz Navidan  wrote:
>
> Hi Dear Experts,
>
> We are running Cs 4.15.0.0 with 2 KVM hosts having security groups enabled
> zone. We have a VM which a GRE tunnel has been setup between it and a
> server outside our network. Both hosts had been rebooted a few days ago due
> to power interruption. Before the reboot happens, the GRE tunnel was
> working properly on the mentioned VM. However after the reboot, GRE tunnel
> can be established but machines cannot reach each other via the tunnel's
> private IP address. All ports and protocols are already added to ingress
> rule set of security group which VM belongs to.
>
> Below is output of "ip a" and "ip r" commands on the VM running on our CS
> infrastructure.
>
> root@cdn-fr-1-kajgana-net:~# ip a
> 1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group
> default qlen 1000
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> inet 127.0.0.1/8 scope host lo
>valid_lft forever preferred_lft forever
> inet6 ::1/128 scope host
>valid_lft forever preferred_lft forever
> 2: ens3:  mtu 1500 qdisc pfifo_fast state
> UP group default qlen 1000
> link/ether 1e:00:85:00:02:4d brd ff:ff:ff:ff:ff:ff
> inet 164.132.223.34/28 brd 164.132.223.47 scope global ens3
>valid_lft forever preferred_lft forever
> inet6 fe80::1c00:85ff:fe00:24d/64 scope link
>valid_lft forever preferred_lft forever
> 3: gre0@NONE:  mtu 1476 qdisc noop state DOWN group default qlen 1000
> link/gre 0.0.0.0 brd 0.0.0.0
> 4: gretap0@NONE:  mtu 1462 qdisc noop state DOWN group
> default qlen 1000
> link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
> 5: erspan0@NONE:  mtu 1450 qdisc noop state DOWN group
> default qlen 1000
> link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
> 6: gre1@NONE:  mtu 1476 qdisc noqueue state
> UNKNOWN group default qlen 1000
> link/gre 164.132.223.34 peer 89.205.123.34
> inet 192.168.169.1/30 scope global gre1
>valid_lft forever preferred_lft forever
> inet6 fe80::200:5efe:a484:df22/64 scope link
>valid_lft forever preferred_lft forever
>
> root@cdn-fr-1-kajgana-net:~# ip r
> default via 164.132.223.46 dev ens3
> 164.132.223.32/28 dev ens3 proto kernel scope link src 164.132.223.34
> 192.168.169.0/30 dev gre1 proto kernel scope link src 192.168.169.1
>
> IP address of tunnel's other endpoint is 192.168.169.2 which is unreachable
> from the VM. It looks like GRE tunnel has been established but traffic
> cannot be p[assed through.
>
> Is there something we need to do with iptables rules on the hosts to allow
> GRE traffic or is there anything else we can do to address this issue?
>
> Thanks in advance.
> Regards.



-- 
Daan

Re: Cloudstack 4.18.1.0 new feature (local volume snapshot changed)

[Daan Hoogland]

mikko, you can set the option to true. I would recommend against the
mounting hack you propose as it may conflict when things get copied to
and from primary <-> secondary

On Fri, Dec 29, 2023 at 4:56 PM Mikko Kaipila  wrote:
>
> I noticed that already. But why this changed to primary storage and
> hopefully there is a option to change this back to secondary. If not I
> consider to mount secondary to primary suitable but this is a dirty trick.
>
> pe 29. jouluk. 2023 klo 16.20 João Jandre Paraquetti 
> kirjoitti:
>
> > Hello, Mikko
> >
> > The snapshot.backup.to.secondary global configuration dictates whether
> > snapshots will stay on primary storage or will be backed up to secondary
> > storage.
> >
> > Best regards,
> > João Jandre
> >
> > On 12/29/23 10:50, Mikko Kaipila wrote:
> > > Hi,
> > >
> > > It seems that volume snapshot changed into primary storage instead of
> > secondary storage.
> > >
> > > Is there somewhere option to change this (back) to secondary storage? I
> > havent find option in global settings .
> > >
> > > There is only option to copy snapshot from primary to secondary.
> > >
> > > Regards
> > > Mikko
> > >
> >



-- 
Daan

Re: Change isolation method

[Daan Hoogland]

Francisco, I am not sure if you can. The API doesn't support it so it
would be rather ugly to do so. Let us know if you get any further with
this.

On Fri, Dec 29, 2023 at 10:12 AM Francisco Arencibia Quesada
 wrote:
>
> Good morning guys,
>
> I need to change a zone's isolation method from VLAN to VXLAN. I can't find
> an option for this. Is this possible? Do I  need to create a new zone from
> scratch?
>
> Kind regards
>
> --
> *Francisco Arencibia Quesada.*
> *DevOps Engineer*



-- 
Daan

Re: RHEL 8 hosts not recognized as UEFI enabled

[Daan Hoogland]

Medcludin, did you try adding the details? also did you check on the
hosts whether it is supported and somehow the configuration isn't
different?

On Thu, Nov 23, 2023 at 5:35 PM Mevludin Blazevic
 wrote:
>
> Hi all,
>
> for some reason, only 4 out of 20 hosts are enabled in the database as
> UEFI enabled, although all of them were installed identically (RHEL 8,
> cloudstack-agent and corresponding ovmf packages). In the DB, there are
> only 4 entries in host_details with host.uefi.enable = true. However,
> there are no entries with host.uefi.enable = false. Is there any quick
> workaround without removing and adding the host again?
>
> Best,
>
> Mevludin
>


-- 
Daan

Re: Cloudstack VM HA with 2 primary storage

[Daan Hoogland]

Yu Huang,
I guess nobody has done this (as you are not getting any responses)
Did you do further experiments ? how did you fare?

On Thu, Nov 23, 2023 at 7:50 AM Yu Huang Chan  wrote:
>
> Hi All,
>
> According to the CloudStock documentation, HA for hosts and HA-enabled KVM
> VMs only work with primary storage and must have iSCSI or NFS storage.
> In our current setup, the primary storage is Linstor raw block storage.
> To enable HA for hosts and HA-enabled KVM VM features, is it possible that
> we create another primary storage NFS with a capacity of only 200 MB for
> the heartbeat file?
>
> Hence, our setup will have two primary storages: the first is raw block
> storage, and the second is a small NFS with 200MB. Is it workable in this
> scenario?
>
> Any recommendations and best practices for production setup?
>
> Regards,
> Yu Huang



-- 
Daan

Failed to authenticate Veeam API service due to:Connection reset - Veeam 12

[cristian.c]

Hello,

 

I'm struggling to link CloudStack with Veeam 12 and I keep encountering the
same issue: "Failed to authenticate Veeam API service due to: Connection
reset."

My question is, should I be connecting to the API on the Veeam Enterprise
Manager or the Backup and Replication server? I'm asking because the
instructions aren't clear on this point.


  - Veeam B server URL. Default: http://
 :9398/api/ but
B API does not run on 9398 it is on 9419, only the Veeam Backup Ent
Manager API runs on 9398 and 9399. 

 

Anyone using with Veeam 12.

 

Thank you,

Cristian

Re: Unable to upload ISO

[Bharat Bhushan Saini]

Hi Wei,

I give the public ip to the vm’s, they are connecting outside but the public ip 
of the vm’s are not pingable.
Can you pls help in this?

Thanks and Regards,
Bharat Saini

[signature_2275147253]

From: Wei ZHOU 
Date: Friday, 19 January 2024 at 1:46 PM
To: users@cloudstack.apache.org 
Subject: Re: Unable to upload ISO
EXTERNAL EMAIL: Please verify the sender email address before taking any 
action, replying, clicking any link or opening any attachment.


Hi,

The public IP of SSVM and CPVM should be publicly accessible. Otherwise,
the upload template/ISO from local and vm console will not work.

You can try template registration from URL (instead of from local). (there
are some templates for testing on
http://download.cloudstack.org/templates/builtin/)

You can also set up a reverse proxy for CPVM or SSVM.


-Wei

On Fri, 19 Jan 2024 at 07:41, Bharat Bhushan Saini
 wrote:

> Hi Jithin,
>
>
>
> Subject change to Unable to upload ISO.
>
>
>
> It is working. But unable to upload ISO from local as SSL certificate for
> server and VM’s are update.
>
> Some more info as below from inside the vm,
>
> root@s-2220-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh
>
> 
>
> First DNS server is  10.x.x.254
>
> PING 10.x.x.254 (10.x.x.254): 56 data bytes
>
> 64 bytes from 10.x.x.254: icmp_seq=0 ttl=64 time=0.522 ms
>
> 64 bytes from 10.x.x.254: icmp_seq=1 ttl=64 time=0.416 ms
>
> --- 10.x.x.254 ping statistics ---
>
> 2 packets transmitted, 2 packets received, 0% packet loss
>
> round-trip min/avg/max/stddev = 0.416/0.469/0.522/0.053 ms
>
> Good: Can ping DNS server
>
> 
>
> Good: DNS resolves cloudstack.apache.org
>
> 
>
> nfs is currently mounted
>
> Mount point is /mnt/SecStorage/70a135bc-777b-3e33-b85e-9fea4abb1b72
>
> Good: Can write to mount point
>
> 
>
> Management server is 10.x.x.244. Checking connectivity.
>
> Good: Can connect to management server 10.x.x.244 port 8250
>
> 
>
> Good: Java process is running
>
> 
>
> Tests Complete. Look for ERROR or WARNING above.
>
>
>
> root@s-2220-VM:~# /usr/local/cloud/systemvm/run.sh
>
> cat: /usr/local/cloud/systemvm/user_request: No such file or directory
>
> cat: /usr/local/cloud/systemvm/user_request: No such file or directory
>
> ^C
>
> root@s-2220-VM:~#
>
>
>
>
>
>
>
> Thanks and Regards,
>
> Bharat Saini
>
>
>
> [image: signature_3644880933]
>
>
>
> *From: *Jithin Raju 
> *Date: *Friday, 19 January 2024 at 11:00 AM
> *To: *users@cloudstack.apache.org 
> *Subject: *Re: External IP Taken
>
> EXTERNAL EMAIL: Please verify the sender email address before taking any
> action, replying, clicking any link or opening any attachment.
>
>
> Hi Bharat,
>
> Your Management server DNS seems to have resolved the hostname
> cstack.internal.com to its public IP? Is this
> the correct hostname for your host?
>
> -Jithin
>
> From: Bharat Bhushan Saini 
> Date: Friday, 19 January 2024 at 10:31 AM
> To: users@cloudstack.apache.org 
> Subject: External IP Taken
> Hi All,
>
> When adding a new host with zone why it system is taken the public ip
> which is not in the scope. Please refer the logs below,
>
> Could not add host at [http://cstack.internal.com] with zone [9], pod [9]
> and cluster [9] due to: [ can't setup agent, due to java.io.IOException:
> There was a problem while connecting to 106.51.88.195:22 - There was a
> problem while connecting to 106.51.88.195:22].
>
>
>
> Thanks and Regards,
> Bharat Saini
>
> [signature_815284987]
>
> --- Disclaimer: --
> This message and its contents are intended solely for the designated
> addressee and are proprietary to Kloudspot. The information in this email
> is meant exclusively for Kloudspot business use. Any use by individuals
> other than the addressee constitutes misuse and an infringement of
> Kloudspot's proprietary rights. If you are not the intended recipient,
> please return this email to the sender. Kloudspot cannot guarantee the
> security or error-free transmission of e-mail communications. Information
> could be intercepted, corrupted, lost, destroyed, arrive late or
> incomplete, or contain viruses. Therefore, Kloudspot shall not be liable
> for any issues arising from the transmission of this email.
>
>
> --- Disclaimer: --
> This message and its contents are intended solely for the designated
> addressee and are proprietary to Kloudspot. The information in this email
> is meant exclusively for Kloudspot business use. Any use by individuals
> other than the addressee constitutes misuse and an infringement of
> Kloudspot's proprietary rights. If you are not the intended recipient,
> please return this 

Re: Issues migrating primary storage

[Jeremy Hansen]

I’m still having issues. Is it unreasonable to migrate 1TB images over a 10G 
network? Any other ideas of things to try would be much appreciated.

-jeremy

> On Wednesday, Jan 17, 2024 at 12:49 PM, Jeremy Hansen  (mailto:jer...@skidrow.la)> wrote:
> Extending these timeouts in the “wait” configs seems to have helped. One of 
> my 1TB volumes is finally migrating.
>
> WHat’s I’ve noticed is if I allocate a new 1TB volume, I can migrate this 
> between NFS and Ceph and it takes only about a 1 minute. I assume this is 
> because it’s “thin provisioned” and there’s no actual data on the volume.
>
> But these other volumes I’m trying to move are also “thin provisioned” but 
> they’re a part of a LVM group. Does making a thin provisioned device part of 
> a LVM group defeat the thin provisioning? I know these volumes weren’t full, 
> but I thought perhaps there’s a chance that since it’s a pv in a LVM config, 
> that maybe that defeats the thin provisioning and it counts it as a full 1TB 
> volume? I’m just spitballing but I’m trying to understand how this works so 
> we can do the right thing when provisioning additional volumes.
>
> Also, the behavior I’m seeing is it takes a very long time before I see the 
> block image show up on the Ceph side. Perhaps it preallocated a image before 
> copying the data? But it seemed strange that I wouldn’t immidiately see the 
> image appear on the Ceph side after initiating a migration. It’s hard to see 
> what’s actually going on from the logs and the interface.
>
> Thanks
> -jeremy
>
>
>
> > On Tuesday, Jan 16, 2024 at 11:29 PM, Jeremy Hansen  > (mailto:jer...@skidrow.la)> wrote:
> > I changed copy.volume.wait to 72000
> >
> > But I just noticed:
> >
> > kvm.storage.online.migration.wait and kvm.storage.offline.migration.wait. 
> > Worth changing this?
> >
> > Thanks
> > -jeremy
> >
> >
> > > On Tuesday, Jan 16, 2024 at 11:01 PM, Jithin Raju 
> > > mailto:jithin.r...@shapeblue.com)> wrote:
> > > Hi Jeremy,
> > >
> > > Have you checked the ‘wait’ parameter? Used as wait * 2 timeout.
> > >
> > > -Jithin
> > >
> > > From: Jeremy Hansen 
> > > Date: Wednesday, 17 January 2024 at 12:14 PM
> > > To: users@cloudstack.apache.org 
> > > Subject: Re: Issues migrating primary storage
> > > Unfortunately the upgrade didn’t help:
> > >
> > > Resource [StoragePool:3] is unreachable: Volume 
> > > [{"name”:”bigdisk","uuid":"8f24b8a6-229a-4311-9ddc-d6c6acb89aca"}] 
> > > migration failed due to [com.cloud.utils.exception.CloudRuntimeException: 
> > > Failed to copy 
> > > /mnt/11cd19d0-f207-3d01-880f-8d01d4b15020/8f24b8a6-229a-4311-9ddc-d6c6acb89aca
> > >  to 5837f4e6-9307-43a9-a50c-8c9c885f25e8.qcow2].
> > >
> > >
> > >
> > > Anything else I can try? I’m trying to move away from NFS completely.
> > >
> > > -jeremy
> > >
> > >
> > >
> > >
> > >
> > >
> > > On Tuesday, Jan 16, 2024 at 7:06 AM, Suresh Kumar Anaparti 
> > > mailto:sureshkumar.anapa...@gmail.com>> 
> > > wrote:
> > > Hi Jeremy,
> > >
> > > Can you extend with the config 'migratewait' and check.
> > >
> > > Regards,
> > > Suresh
> > >
> > > On Tue, Jan 16, 2024 at 1:45 PM Jeremy Hansen 
> > > wrote:
> > >
> > >
> > > I have some large volumes I’m trying to migrate from NFS to Ceph/RBD. 1TB
> > > volumes. These inevitably times out. I extended these configs:
> > >
> > > copy.volume.wait=72000
> > > job.cancel.threshold.minutes=480
> > > job.expire.minutes=1440
> > >
> > > This helped with smaller volumes but large once still eventually fail.
> > >
> > > 2024-01-16 07:50:25,929 DEBUG [c.c.a.t.Request]
> > > (AgentManager-Handler-8:null) (logid:) Seq 1-5583619113009291196:
> > > Processing: { Ans: , MgmtId: 20558852646968, via: 1, Ver: v1, Flags: 10,
> > > [{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":"false","details":"com.cloud.utils.exception.CloudRuntimeException:
> > > Failed to copy
> > > /mnt/11cd19d0-f207-3d01-880f-8d01d4b15020/861a6692-e746-4401-9cda-bd791b7d3b5e
> > > to
> > > b7acadc8-34a1-4d7a-8040-26368dafc21d.qcow2","wait":"0","bypassHostMaintenance":"false"}}]
> > > }
> > >
> > > 2024-01-16 07:50:26,698 DEBUG [c.c.s.VolumeApiServiceImpl]
> > > (Work-Job-Executor-41:ctx-e5baf6dc job-1175/job-1176 ctx-bc7b188b)
> > > (logid:d7d98b81) Failed to migrate volume
> > > com.cloud.exception.StorageUnavailableException: Resource [StoragePool:3]
> > > is unreachable: Volume
> > > [{"name":"sequencingdata","uuid":"861a6692-e746-4401-9cda-bd791b7d3b5e"}]
> > > migration failed due to [com.cloud.utils.exception.CloudRuntimeException:
> > > Failed to copy
> > > /mnt/11cd19d0-f207-3d01-880f-8d01d4b15020/861a6692-e746-4401-9cda-bd791b7d3b5e
> > > to b7acadc8-34a1-4d7a-8040-26368dafc21d.qcow2].
> > > at
> > > org.apache.cloudstack.engine.orchestration.VolumeOrchestrator.migrateVolume(VolumeOrchestrator.java:1348)
> > > at jdk.internal.reflect.GeneratedMethodAccessor672.invoke(Unknown
> > > Source)
> > > at
> > > 

Re: Unable to upload ISO

[Wei ZHOU]

Hi,

The public IP of SSVM and CPVM should be publicly accessible. Otherwise,
the upload template/ISO from local and vm console will not work.

You can try template registration from URL (instead of from local). (there
are some templates for testing on
http://download.cloudstack.org/templates/builtin/)

You can also set up a reverse proxy for CPVM or SSVM.


-Wei

On Fri, 19 Jan 2024 at 07:41, Bharat Bhushan Saini
 wrote:

> Hi Jithin,
>
>
>
> Subject change to Unable to upload ISO.
>
>
>
> It is working. But unable to upload ISO from local as SSL certificate for
> server and VM’s are update.
>
> Some more info as below from inside the vm,
>
> root@s-2220-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh
>
> 
>
> First DNS server is  10.x.x.254
>
> PING 10.x.x.254 (10.x.x.254): 56 data bytes
>
> 64 bytes from 10.x.x.254: icmp_seq=0 ttl=64 time=0.522 ms
>
> 64 bytes from 10.x.x.254: icmp_seq=1 ttl=64 time=0.416 ms
>
> --- 10.x.x.254 ping statistics ---
>
> 2 packets transmitted, 2 packets received, 0% packet loss
>
> round-trip min/avg/max/stddev = 0.416/0.469/0.522/0.053 ms
>
> Good: Can ping DNS server
>
> 
>
> Good: DNS resolves cloudstack.apache.org
>
> 
>
> nfs is currently mounted
>
> Mount point is /mnt/SecStorage/70a135bc-777b-3e33-b85e-9fea4abb1b72
>
> Good: Can write to mount point
>
> 
>
> Management server is 10.x.x.244. Checking connectivity.
>
> Good: Can connect to management server 10.x.x.244 port 8250
>
> 
>
> Good: Java process is running
>
> 
>
> Tests Complete. Look for ERROR or WARNING above.
>
>
>
> root@s-2220-VM:~# /usr/local/cloud/systemvm/run.sh
>
> cat: /usr/local/cloud/systemvm/user_request: No such file or directory
>
> cat: /usr/local/cloud/systemvm/user_request: No such file or directory
>
> ^C
>
> root@s-2220-VM:~#
>
>
>
>
>
>
>
> Thanks and Regards,
>
> Bharat Saini
>
>
>
> [image: signature_3644880933]
>
>
>
> *From: *Jithin Raju 
> *Date: *Friday, 19 January 2024 at 11:00 AM
> *To: *users@cloudstack.apache.org 
> *Subject: *Re: External IP Taken
>
> EXTERNAL EMAIL: Please verify the sender email address before taking any
> action, replying, clicking any link or opening any attachment.
>
>
> Hi Bharat,
>
> Your Management server DNS seems to have resolved the hostname
> cstack.internal.com to its public IP? Is this
> the correct hostname for your host?
>
> -Jithin
>
> From: Bharat Bhushan Saini 
> Date: Friday, 19 January 2024 at 10:31 AM
> To: users@cloudstack.apache.org 
> Subject: External IP Taken
> Hi All,
>
> When adding a new host with zone why it system is taken the public ip
> which is not in the scope. Please refer the logs below,
>
> Could not add host at [http://cstack.internal.com] with zone [9], pod [9]
> and cluster [9] due to: [ can't setup agent, due to java.io.IOException:
> There was a problem while connecting to 106.51.88.195:22 - There was a
> problem while connecting to 106.51.88.195:22].
>
>
>
> Thanks and Regards,
> Bharat Saini
>
> [signature_815284987]
>
> --- Disclaimer: --
> This message and its contents are intended solely for the designated
> addressee and are proprietary to Kloudspot. The information in this email
> is meant exclusively for Kloudspot business use. Any use by individuals
> other than the addressee constitutes misuse and an infringement of
> Kloudspot's proprietary rights. If you are not the intended recipient,
> please return this email to the sender. Kloudspot cannot guarantee the
> security or error-free transmission of e-mail communications. Information
> could be intercepted, corrupted, lost, destroyed, arrive late or
> incomplete, or contain viruses. Therefore, Kloudspot shall not be liable
> for any issues arising from the transmission of this email.
>
>
> --- Disclaimer: --
> This message and its contents are intended solely for the designated
> addressee and are proprietary to Kloudspot. The information in this email
> is meant exclusively for Kloudspot business use. Any use by individuals
> other than the addressee constitutes misuse and an infringement of
> Kloudspot's proprietary rights. If you are not the intended recipient,
> please return this email to the sender. Kloudspot cannot guarantee the
> security or error-free transmission of e-mail communications. Information
> could be intercepted, corrupted, lost, destroyed, arrive late or
> incomplete, or contain viruses. Therefore, Kloudspot shall not be liable
> for any issues arising from the transmission of this email.
>

Re: External IP Taken

[Bharat Bhushan Saini]

Hi wei,

Thanks for the suggestion but it is resolved.

Now I am unable to upload iso from local. An another mail is running and i 
shared some stats there as well. Could you looked out?


From: Wei ZHOU 
Sent: 19 January 2024 13:37
To: users@cloudstack.apache.org 
Subject: Re: External IP Taken

EXTERNAL EMAIL: Please verify the sender email address before taking any 
action, replying, clicking any link or opening any attachment.


same question as Jithin
It looks like the host name is resolved as is 106.51.88.195.
If it is not correct, add an entry in /etc/hosts for it and retry.

-Wei


On Fri, 19 Jan 2024 at 06:30, Jithin Raju  wrote:

> Hi Bharat,
>
> Your Management server DNS seems to have resolved the hostname
> cstack.internal.com to its public IP? Is this
> the correct hostname for your host?
>
> -Jithin
>
> From: Bharat Bhushan Saini 
> Date: Friday, 19 January 2024 at 10:31 AM
> To: users@cloudstack.apache.org 
> Subject: External IP Taken
> Hi All,
>
> When adding a new host with zone why it system is taken the public ip
> which is not in the scope. Please refer the logs below,
>
> Could not add host at [http://cstack.internal.com] with zone [9], pod [9]
> and cluster [9] due to: [ can't setup agent, due to java.io.IOException:
> There was a problem while connecting to 106.51.88.195:22 - There was a
> problem while connecting to 106.51.88.195:22].
>
>
>
> Thanks and Regards,
> Bharat Saini
>
> [signature_815284987]
>
> --- Disclaimer: --
> This message and its contents are intended solely for the designated
> addressee and are proprietary to Kloudspot. The information in this email
> is meant exclusively for Kloudspot business use. Any use by individuals
> other than the addressee constitutes misuse and an infringement of
> Kloudspot's proprietary rights. If you are not the intended recipient,
> please return this email to the sender. Kloudspot cannot guarantee the
> security or error-free transmission of e-mail communications. Information
> could be intercepted, corrupted, lost, destroyed, arrive late or
> incomplete, or contain viruses. Therefore, Kloudspot shall not be liable
> for any issues arising from the transmission of this email.
>
>
>
>

--- Disclaimer: --
This message and its contents are intended solely for the designated addressee 
and are proprietary to Kloudspot. The information in this email is meant 
exclusively for Kloudspot business use. Any use by individuals other than the 
addressee constitutes misuse and an infringement of Kloudspot's proprietary 
rights. If you are not the intended recipient, please return this email to the 
sender. Kloudspot cannot guarantee the security or error-free transmission of 
e-mail communications. Information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or contain viruses. Therefore, Kloudspot 
shall not be liable for any issues arising from the transmission of this email.

Re: External IP Taken

[Wei ZHOU]

same question as Jithin
It looks like the host name is resolved as is 106.51.88.195.
If it is not correct, add an entry in /etc/hosts for it and retry.

-Wei


On Fri, 19 Jan 2024 at 06:30, Jithin Raju  wrote:

> Hi Bharat,
>
> Your Management server DNS seems to have resolved the hostname
> cstack.internal.com to its public IP? Is this
> the correct hostname for your host?
>
> -Jithin
>
> From: Bharat Bhushan Saini 
> Date: Friday, 19 January 2024 at 10:31 AM
> To: users@cloudstack.apache.org 
> Subject: External IP Taken
> Hi All,
>
> When adding a new host with zone why it system is taken the public ip
> which is not in the scope. Please refer the logs below,
>
> Could not add host at [http://cstack.internal.com] with zone [9], pod [9]
> and cluster [9] due to: [ can't setup agent, due to java.io.IOException:
> There was a problem while connecting to 106.51.88.195:22 - There was a
> problem while connecting to 106.51.88.195:22].
>
>
>
> Thanks and Regards,
> Bharat Saini
>
> [signature_815284987]
>
> --- Disclaimer: --
> This message and its contents are intended solely for the designated
> addressee and are proprietary to Kloudspot. The information in this email
> is meant exclusively for Kloudspot business use. Any use by individuals
> other than the addressee constitutes misuse and an infringement of
> Kloudspot's proprietary rights. If you are not the intended recipient,
> please return this email to the sender. Kloudspot cannot guarantee the
> security or error-free transmission of e-mail communications. Information
> could be intercepted, corrupted, lost, destroyed, arrive late or
> incomplete, or contain viruses. Therefore, Kloudspot shall not be liable
> for any issues arising from the transmission of this email.
>
>
>
>

Re: Unable to upload ISO

[Bharat Bhushan Saini]

Hi All,

Any suggestions on that?


From: Bharat Bhushan Saini 
Sent: 19 January 2024 12:10
To: users@cloudstack.apache.org 
Subject: Re: Unable to upload ISO

EXTERNAL EMAIL: Please verify the sender email address before taking any 
action, replying, clicking any link or opening any attachment.


Hi Jithin,



Subject change to Unable to upload ISO.



It is working. But unable to upload ISO from local as SSL certificate for 
server and VM’s are update.

Some more info as below from inside the vm,

root@s-2220-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh



First DNS server is  10.x.x.254

PING 10.x.x.254 (10.x.x.254): 56 data bytes

64 bytes from 10.x.x.254: icmp_seq=0 ttl=64 time=0.522 ms

64 bytes from 10.x.x.254: icmp_seq=1 ttl=64 time=0.416 ms

--- 10.x.x.254 ping statistics ---

2 packets transmitted, 2 packets received, 0% packet loss

round-trip min/avg/max/stddev = 0.416/0.469/0.522/0.053 ms

Good: Can ping DNS server



Good: DNS resolves cloudstack.apache.org



nfs is currently mounted

Mount point is /mnt/SecStorage/70a135bc-777b-3e33-b85e-9fea4abb1b72

Good: Can write to mount point



Management server is 10.x.x.244. Checking connectivity.

Good: Can connect to management server 10.x.x.244 port 8250



Good: Java process is running



Tests Complete. Look for ERROR or WARNING above.



root@s-2220-VM:~# /usr/local/cloud/systemvm/run.sh

cat: /usr/local/cloud/systemvm/user_request: No such file or directory

cat: /usr/local/cloud/systemvm/user_request: No such file or directory

^C

root@s-2220-VM:~#







Thanks and Regards,

Bharat Saini



[signature_3644880933]



From: Jithin Raju 
Date: Friday, 19 January 2024 at 11:00 AM
To: users@cloudstack.apache.org 
Subject: Re: External IP Taken

EXTERNAL EMAIL: Please verify the sender email address before taking any 
action, replying, clicking any link or opening any attachment.


Hi Bharat,

Your Management server DNS seems to have resolved the hostname 
cstack.internal.com to its public IP? Is this the 
correct hostname for your host?

-Jithin

From: Bharat Bhushan Saini 
Date: Friday, 19 January 2024 at 10:31 AM
To: users@cloudstack.apache.org 
Subject: External IP Taken
Hi All,

When adding a new host with zone why it system is taken the public ip which is 
not in the scope. Please refer the logs below,

Could not add host at [http://cstack.internal.com] with zone [9], pod [9] and 
cluster [9] due to: [ can't setup agent, due to java.io.IOException: There was 
a problem while connecting to 106.51.88.195:22 - There was a problem while 
connecting to 106.51.88.195:22].



Thanks and Regards,
Bharat Saini

[signature_815284987]

--- Disclaimer: --
This message and its contents are intended solely for the designated addressee 
and are proprietary to Kloudspot. The information in this email is meant 
exclusively for Kloudspot business use. Any use by individuals other than the 
addressee constitutes misuse and an infringement of Kloudspot's proprietary 
rights. If you are not the intended recipient, please return this email to the 
sender. Kloudspot cannot guarantee the security or error-free transmission of 
e-mail communications. Information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or contain viruses. Therefore, Kloudspot 
shall not be liable for any issues arising from the transmission of this email.



--- Disclaimer: --
This message and its contents are intended solely for the designated addressee 
and are proprietary to Kloudspot. The information in this email is meant 
exclusively for Kloudspot business use. Any use by individuals other than the 
addressee constitutes misuse and an infringement of Kloudspot's proprietary 
rights. If you are not the intended recipient, please return this email to the 
sender. Kloudspot cannot guarantee the security or error-free transmission of 
e-mail communications. Information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or contain viruses. Therefore, Kloudspot 
shall not be liable for any issues arising from the transmission of this email.

--- Disclaimer: --
This message and its contents are intended solely for the designated addressee 
and are proprietary to Kloudspot. The information in this email is meant 
exclusively for Kloudspot business use. Any use by individuals other than the 
addressee constitutes misuse and an infringement of Kloudspot's proprietary 
rights. If you are not the intended recipient, please return this email to