[pve-devel] problems with detect-zeroes

2014-10-28 Thread Dietmar Maurer
Hi Alexandre, see: http://forum.proxmox.com/threads/20165-After-upgrading-from-3-2-to-3-3-old-pve-qemu-kvm-ceph-vm-doesnt-start but you wrote in the commit: > No impact if the block driver don't support it yet (like rbd) So what is wrong? ___ pve-deve

Re: [pve-devel] problems with detect-zeroes

2014-10-28 Thread Alexandre DERUMIER
>>id=drive-virtio0,discard=on,aio=native,cache=none,detect-zeroes=unmap I think this is because virtio-blk don't support discard if discard=on detect-zeroes=unmap else detect-zeroes=on I'll retest right now, I'll keep you in touch - Mail original - De: "Dietmar Maurer" À: "Alexandr

Re: [pve-devel] problems with detect-zeroes

2014-10-28 Thread Alexandre DERUMIER
Oh, in the forum post: #apt-mark hold pve-qemu-kvm So, user is using an old version of qemu-kvm without detect-zeroes support - Mail original - De: "Alexandre DERUMIER" À: "Dietmar Maurer" Cc: pve-devel@pve.proxmox.com Envoyé: Mardi 28 Octobre 2014 11:18:36 Objet: Re: [pve-de

Re: [pve-devel] problems with detect-zeroes

2014-10-28 Thread Alexandre DERUMIER
maybe,could we add kvm_user_version() detection before enable this feature ? (I have checked with discard or not on virtio-blk, it's working fine with last qemu) - Mail original - De: "Alexandre DERUMIER" À: "Dietmar Maurer" Cc: pve-devel@pve.proxmox.com Envoyé: Mardi 28 Octobr

Re: [pve-devel] problems with detect-zeroes

2014-10-28 Thread Dietmar Maurer
> maybe,could we add kvm_user_version() detection before enable this feature ? I guess that is not necessary. We always use the newest features, so users need to update all packages. ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxm

Re: [pve-devel] problems with detect-zeroes

2014-10-28 Thread Dietmar Maurer
> (I have checked with discard or not on virtio-blk, it's working fine with > last qemu) Many thanks for testing! I have answered the forum post now. - Dietmar ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/

Re: [pve-devel] Guest UEFI support

2014-10-28 Thread Dietmar Maurer
> I was wondering if support for UEFI in VM's could be added to PVE. > > See http://www.linux-kvm.org/page/OVMF > > It looks to be an alternative firmware image that is loaded instead of the > usual > bios.bin I would like to add EFI support, but those howtos are highly confusing for me. __

[pve-devel] pve-firewall[636118]: status update error: command '/usr/sbin/ipset restore' failed: exit code 1

2014-10-28 Thread Detlef Bracker
Dear, I have now the same problem on one host! When I restart the pve-firewall, in log-File I have this: pve-firewall[636118]: status update error: command '/usr/sbin/ipset restore' failed: exit code 1 I have make an ipset list, their is this in: Name: PVEFW-0-blacklist Type: hash:net Header:

[pve-devel] pve-firewall[636118]: status update error: command '/usr/sbin/ipset restore' failed: exit code 1

2014-10-28 Thread Detlef Bracker
Dear, can been, that the problems comes with to much containers? I have now mv many *.fw to other folder and behind a restart the pve-firewall works! So, now I will step by step move the container settings of *.fw in /etc/pve/firewall back and we will see later, whats happen! Regards Detlef

Re: [pve-devel] Creating of a 2nd blacklist with many blocked IPs

2014-10-28 Thread Dietmar Maurer
> I must do every 1 minutes this, why proxmox delete the iptable rules in > beetween of work: Please never touch rules inside pvefw generated ipset chains! I already posted a script to show how it can work. ___ pve-devel mailing list pve-devel@pve.p

[pve-devel] URGEND: pve-firewall stops with IPv6 !!!

2014-10-28 Thread Detlef Bracker
Dear, so, when one Container is set to firewalled mode and they has an IPv6, then the firewall cant work anymore! pve-firewall stop pve-firewall start ipvtables -L is then empty! In log-File, I get then the error-message: pve-firewall[598770]: status update error: command '/usr/sbin/ipset restor

Re: [pve-devel] URGEND: pve-firewall stops with IPv6 !!!

2014-10-28 Thread Alexandre DERUMIER
Hi, I think this is because we try to add the ipv6 address in ipv4 ipset. BTW, ipv6 is not yet supported by proxmox firewall, so as workaround you can disable the firewall. But I think we should add a parsing on ipv6 address to avoid that. - Mail original - De: "Detlef Bracker" À:

Re: [pve-devel] URGEND: pve-firewall stops with IPv6 !!!

2014-10-28 Thread Detlef Bracker
And this is the same for containers, they use IPv4 and IPv6! So when proxmox not handle IPv6, what is in our time absolute bad, then this must been min. filtered! More as 60 % of users in germany, now have an IPv6 internet connection! Software must been created for IPv4 and IPv6 ! Or what is that

Re: [pve-devel] URGEND: pve-firewall stops with IPv6 !!!

2014-10-28 Thread Detlef Bracker
And this is the same for containers, they use IPv4 and IPv6! So when proxmox not handle IPv6, what is in our time absolute bad, then this must been min. filtered! More as 60 % of users in germany, now have an IPv6 internet connection! Software must been created for IPv4 and IPv6 ! Or what is that

Re: [pve-devel] URGEND: pve-firewall stops with IPv6 !!!

2014-10-28 Thread Stefan Priebe - Profihost AG
Alexandre what's about your IPv6 and brfilter patches? I think they can get integrated into pve test? Greets, Stefan Stefan Excuse my typo sent from my mobile phone. > Am 28.10.2014 um 18:40 schrieb Detlef Bracker : > > And this is the same for containers, they use IPv4 and IPv6! > So when pr

Re: [pve-devel] Creating of a 2nd blacklist with many blocked IPs

2014-10-28 Thread Dietmar Maurer
> I fill only a 2nd iplist! This make all the function, what we need! > In this 2nd IP-List you can fill many thousend address and the check is very > fast! > This works finde to with the pve-firewall, when a container is set to > firewalled, > then the 2nd iplist is included! The same too for th

Re: [pve-devel] Guest UEFI support

2014-10-28 Thread Andrew Thrift
Hi Dietmar, It is a replacement for the bios. You can load ovmf.fd with the -L option for QEMU. You can download binary copies of ovmf.fd from: http://tianocore.github.io/ovmf/ On Wed, Oct 29, 2014 at 12:22 AM, Dietmar Maurer wrote: > > I was wondering if support for UEFI in VM's could be a