[GitHub] [cloudstack-www] DaanHoogland commented on pull request #79: update according to issues by apache conculeagues

[GitBox]

DaanHoogland commented on pull request #79:
URL: https://github.com/apache/cloudstack-www/pull/79#issuecomment-796850949


   @GabrielBrascher , I think this is ready for final review



This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [cloudstack-www] DaanHoogland commented on pull request #79: update according to issues by apache conculeagues

[GitBox]

DaanHoogland commented on pull request #79:
URL: https://github.com/apache/cloudstack-www/pull/79#issuecomment-796851297


   cc @sebbASF ^^



This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Secure Live Migration for KVM

[Greg Goodrich]

We have just discovered in our Lab environment that the certificates for 
libvirtd did not auto renew. Thus when we did an update, and restart of the 
agent, it failed to start, due to Libvirtd failing to start from an expired 
certificate. We then checked our production hosts, and their certificates are 
due to expire in 4 days, even though our setting is to auto renew at 15 days. 
Has anyone else encountered a problem with this? It appears to be related to 
this feature - https://github.com/apache/cloudstack/pull/2505.

We are running 4.11.3 in both environments.

--
Greg Goodrich | IP Pathways
Development Manager
3600 109th Street | Urbandale, IA 50322
p. 515.422.9346 | e. ggoodr...@ippathways.com

Re: Secure Live Migration for KVM

[Greg Goodrich]

Further investigation finds this PR which may be related - 
https://github.com/apache/cloudstack/pull/4156. We are investigating if this 
could be the cause.

--
Greg Goodrich | IP Pathways
Development Manager
3600 109th Street | Urbandale, IA 50322
p. 515.422.9346 | e. ggoodr...@ippathways.com

On Mar 11, 2021, at 4:09 PM, Greg Goodrich 
mailto:ggoodr...@ippathways.com>> wrote:

We have just discovered in our Lab environment that the certificates for 
libvirtd did not auto renew. Thus when we did an update, and restart of the 
agent, it failed to start, due to Libvirtd failing to start from an expired 
certificate. We then checked our production hosts, and their certificates are 
due to expire in 4 days, even though our setting is to auto renew at 15 days. 
Has anyone else encountered a problem with this? It appears to be related to 
this feature - https://github.com/apache/cloudstack/pull/2505.

We are running 4.11.3 in both environments.

--
Greg Goodrich | IP Pathways
Development Manager
3600 109th Street | Urbandale, IA 50322
p. 515.422.9346 | e. 
ggoodr...@ippathways.com

[GitHub] [cloudstack-documentation] Hudratronium opened a new pull request #197: Added information of deprecated feature "basic networking" for a zone

[GitBox]

Hudratronium opened a new pull request #197:
URL: https://github.com/apache/cloudstack-documentation/pull/197


   As stated at this issue report 
(https://github.com/apache/cloudstack/issues/4791#issuecomment-796528166) the 
function and concept of "basic networking" are about to be deprecated. Added 
some notes at relevant points, that this option isn't availeable anymore.



This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Re: Secure Live Migration for KVM

[Rohit Yadav]

Hi Greg, I think you're right the 
https://github.com/apache/cloudstack/pull/4156 should fix the auto-renewal 
issue.
In the meanwhile for already connected kvm hosts/agents, you can run the 
provisionCertificate API.


Regards.


From: Greg Goodrich 
Sent: Friday, March 12, 2021 04:00
To: dev@cloudstack.apache.org 
Subject: Re: Secure Live Migration for KVM

Further investigation finds this PR which may be related - 
https://github.com/apache/cloudstack/pull/4156. We are investigating if this 
could be the cause.

--
Greg Goodrich | IP Pathways
Development Manager
3600 109th Street | Urbandale, IA 50322
p. 515.422.9346 | e. ggoodr...@ippathways.com


rohit.ya...@shapeblue.com 
www.shapeblue.com
3 London Bridge Street,  3rd floor, News Building, London  SE1 9SGUK
@shapeblue
  
 

On Mar 11, 2021, at 4:09 PM, Greg Goodrich 
mailto:ggoodr...@ippathways.com>> wrote:

We have just discovered in our Lab environment that the certificates for 
libvirtd did not auto renew. Thus when we did an update, and restart of the 
agent, it failed to start, due to Libvirtd failing to start from an expired 
certificate. We then checked our production hosts, and their certificates are 
due to expire in 4 days, even though our setting is to auto renew at 15 days. 
Has anyone else encountered a problem with this? It appears to be related to 
this feature - https://github.com/apache/cloudstack/pull/2505.

We are running 4.11.3 in both environments.

--
Greg Goodrich | IP Pathways
Development Manager
3600 109th Street | Urbandale, IA 50322
p. 515.422.9346 | e. 
ggoodr...@ippathways.com