Re: KVM FC shared storage

2024-05-20 Thread Kristian Liivak
Indeed, Xenserver is good and our primary choice. We allready have it up and running.. Why i ask KVM cluster its cloudstack lacks kubernetes csi driver support for xenserver. And we want to use kubernetes. My idea is just make one kvm cluster for kubernetes users. Of cource we will check

Re: KVM FC shared storage

2024-05-20 Thread Vivek Kumar
We once tried to setup PCS cluster with GFS2 In production, and it required a lot of expertise to manage PCS cluster and our experience was very bad with that too, after a year we had to move to NFS due to so many issue. FC works better XenServer, We had almost for 5-6 year with Xenserver And

Re: Let's Encrypt

2024-05-20 Thread Jayanth Babu A
Hi Ian, Yes. In this case, the ACS management server doesn’t need any additional configuration but you’ll have to take care of CPVM and SSVM (optionally) like Ruben suggested. Also see [1] where you should have a CA signed one instead. [1] https://github.com/apache/cloudstack/discussions/9013

RE: BGP EVPN with CloudStack

2024-05-20 Thread Hanis Irfan
Hi Wido, I'm currently running Rocky Linux 9 for the HV. > Why are you setting anything on cloudbr0? There is no need to create cloudbr0 > with VXLAN. cloudbr0 is just a naming choice on my end. Is it okay for me to use something like NetworkManager to create the bridge? So, no need to

RE: Let's Encrypt

2024-05-20 Thread Ian Tobin
Hi Ruben, Thanks for the info, do you mean running ACME on the reverse proxy? Anything needing to be configured on the ACS management server? Thanks Ian -Original Message- From: Ruben Bosch Sent: 20 May 2024 23:38 To: users@cloudstack.apache.org Subject: Re: Let's Encrypt

Re: Let's Encrypt

2024-05-20 Thread Ruben Bosch
Ian, this is easily achievable by means of an ACME client (Certbot) and running ACS management behind a reverse proxy. You can write a hook to upload a certificate to the CPVM as well. ( https://cloudstack.apache.org/api/apidocs-4.16/apis/uploadCustomCertificate.html) Just be mindful that the CPVM

Re: Ubuntu templates CloudStack

2024-05-20 Thread Ruben Bosch
Take a look here https://github.com/CLDIN/packer-templates/ :) On Mon, May 20, 2024 at 2:32 PM Francisco Arencibia Quesada < arencibia.franci...@gmail.com> wrote: > Thank you very much Alex > > Regards > > *Francisco Arencibia Quesada.* > *DevOps Engineer* > > > On Mon, 20 May 2024 at 14:30,

Re: BGP EVPN with CloudStack

2024-05-20 Thread Wido den Hollander
Hi Hanis, See my reply inline. Op 17/05/2024 om 12:38 schreef Hanis Irfan: I think this is more about BGP EVPN than CloudStack but would appreciate anyone that could help. So basically, I’ve tried the Advanced Networking with VLAN isolation for my POC and now want to migrate to VXLAN. I

Re: Dynamic routing for routed mode IPv6 and IPv4 Isolated and VPC networks

2024-05-20 Thread Wido den Hollander
Op 20/05/2024 om 14:45 schreef Alex Mattioli: Hi Alex, In this scenario: I think adding the ability to add network specific peers as mentioned in one of >your prior replies would still allow the level of control some operators (myself >included) may desire. How do you propose network

Re: KVM FC shared storage

2024-05-20 Thread Andreas S. Kerber
We're running FC with OCFS2 (OS: Oracle Linux 9) on a demo 2 node cluster. Works kind of nice, but of course is not the same as ESXi. For now it works well enough but expanding that to a actual >10 node setup with hundreds of VMs doesn't feel right. Am Mon, May 20, 2024 at 03:48:12PM +0300

Re: debian iso download

2024-05-20 Thread Embedded Devel
Welp, that did it, fixed... its in a lab we own so 3 people have access. thanks On Monday 20 May 2024 09:18:46 PM (+07:00), Wei ZHOU wrote: > If you use 4.19.0.1/4.18.2.0/4.18.1.1, URL redirection is disabled by > default due to security reasons. > > Please search global setting by keyword

RE: debian iso download

2024-05-20 Thread Fabricio Duarte
Hello, You should be able to upload an ISO via CLI using CloudMonkey and cURL: 1. Via CloudMonkey, call the `getUploadParamsForIso` API in order to obtain the parameters that will be used for upload. ``` (admin)  > get uploadparamsforiso name= displaytext= format="iso" zoneid= ``` The

Re: debian iso download

2024-05-20 Thread Wei ZHOU
If you use 4.19.0.1/4.18.2.0/4.18.1.1, URL redirection is disabled by default due to security reasons. Please search global setting by keyword "follow.redirect" and update the value to true then retry. -Wei On Monday, May 20, 2024, Embedded Devel wrote: > trying to download debian iso from

RE: KVM FC shared storage

2024-05-20 Thread Alex Mattioli
If you are 100% FC/NVME then OCFS2 is probably the best (or least bad) option. I personally always tried to stick to NFS for KVM, it just works. Reliability wise, I personally consider CEPH to be more reliable (and supportable) than OCFS2. Regards Alex From: Kristian Liivak Sent: Monday, May

debian iso download

2024-05-20 Thread Embedded Devel
trying to download debian iso from https://cdimage.debian.org/debian-cd/12.5.0/amd64/iso-cd/debian-12.5.0-amd64-netinst.iso via the register iso button fails with Failed to download https://cdimage.debian.org/debian-cd/12.5.0/amd64/iso-cd/debian-12.5.0-amd64-netinst.iso due to redirection,

Re: KVM FC shared storage

2024-05-20 Thread Dietrich, Alex
Hello Kristian, Take this perspective with a grain of salt given our time spent on this was in a proof-of-concept deployment. We tested iSCSI connectivity with OCFS2 as the underlying technology to provide the shared mount point. We found that throughout the course of host reboots, the

Let's Encrypt

2024-05-20 Thread Ian Tobin
Hi, Are there any plans to implement Let's Encrypt with CS? More so securing the Management console and Proxy. Thanks Ian

KVM FC shared storage

2024-05-20 Thread Kristian Liivak
Hi All Currently, we can see from the documentation that KVM supports Fiber Channel via shared mountpoints. Can someone recommend or share their experience with usable solutions for shared mountpoint technical solutions? It seems there are quite a few options, such as shared/clustered file

RE: Dynamic routing for routed mode IPv6 and IPv4 Isolated and VPC networks

2024-05-20 Thread Alex Mattioli
Hi Alex, In this scenario: >I think adding the ability to add network specific peers as mentioned in one >of >your prior replies would still allow the level of control some operators >(myself >included) may desire. How do you propose network specific peers to be implemented? Regards Alex

Re: Ubuntu templates CloudStack

2024-05-20 Thread Francisco Arencibia Quesada
Thank you very much Alex Regards *Francisco Arencibia Quesada.* *DevOps Engineer* On Mon, 20 May 2024 at 14:30, Dietrich, Alex wrote: > Hi Francisco, > > I have found the existing Linux template guides as still valid for Ubuntu > 22.04 LTS template creation. > > There are some broken links

Re: Ubuntu templates CloudStack

2024-05-20 Thread Dietrich, Alex
Hi Francisco, I have found the existing Linux template guides as still valid for Ubuntu 22.04 LTS template creation. There are some broken links in the documentation provided by CloudStack, but I essentially completed it with the following articles: *

Re: Dynamic routing for routed mode IPv6 and IPv4 Isolated and VPC networks

2024-05-20 Thread Dietrich, Alex
Hi Alex, This may be a difference in perspective in implementation of BGP at the tenant level. I see the ability this would provide to seamlessly establishing those peering relationships with minimal intervention (helping scalability). I think adding the ability to add network specific peers

RE: Dynamic routing for routed mode IPv6 and IPv4 Isolated and VPC networks

2024-05-20 Thread Alex Mattioli
Hi Alex, > I am not convinced that specifying BGP peers at the zone level is a good idea > given the impacts BGP can have on a given network. I would much rather see > both peer and AS specification handled at the >network configuration, or > another more specific level. I don't see how else

Ubuntu templates CloudStack

2024-05-20 Thread Francisco Arencibia Quesada
Good morning guys, Do you have any updated guide to create ubuntu templates for cloudstack? I'm testing some, but I can't find an updated one for 22.04TLS Regards Thanks in advance -- *Francisco Arencibia Quesada.* *DevOps Engineer*

RE: Dynamic routing for routed mode IPv6 and IPv4 Isolated and VPC networks

2024-05-20 Thread Alex Mattioli
Hi Wido, Thanks for the feedback, comments below: > I would suggest that the upstream router (Juniper, Frr, etc) should then use > Dynamic BGP neihbors. That's the plan. > I do suggest we add BGP passwords/encryption from the start for safety > reasons. That's very likely to be there from

Re: Create untagged guest VMs

2024-05-20 Thread Alex K
On Mon, May 20, 2024 at 10:47 AM Wei ZHOU wrote: > What type of zone and network do you use ? > I have tried both edge and core/advanced zones with KVM as hypervisor and OVS switching as the underlying network stack. Now testing with core-advanced zone. I have configured several traffic types

Re: Create untagged guest VMs

2024-05-20 Thread Wei ZHOU
What type of zone and network do you use ? Try network with vlan = "vlan://untagged" On Friday, May 17, 2024, Alex K wrote: > Hi All, > > Is it possible to create untagged guest networks in cloudstack and have > them assigned to different OVS bridges? > > I have created several OVS bridges

Re: Create untagged guest VMs

2024-05-20 Thread Alex K
I understand this is not possible in cloudstack? On Fri, May 17, 2024 at 3:57 PM Alex K wrote: > Hi All, > > Is it possible to create untagged guest networks in cloudstack and have > them assigned to different OVS bridges? > > I have created several OVS bridges at the KVM host and then tried to