Re: [jira] [Updated] (CLOUDSTACK-10447) GSoC 2022: More granularity on affinity/anti-affinity groups

[joy]

The zone,pod,cluster is running on the same server.
All adding is successful(add primary ,add secondary, add pod, add zone all
successful).But only add hosts failed.
Also I tried to remove cloudstack and reinstall to fix the problem.But it
does not work.
I also tried to set ca.plugin.root.auth.strictness to false but still not
work.

Nicolás Vázquez (Jira) 於 2022年3月14日 週一，下午7:30寫道：

>
>  [
> https://issues.apache.org/jira/browse/CLOUDSTACK-10447?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
> ]
>
> Nicolás Vázquez updated CLOUDSTACK-10447:
> -
> Labels: gsoc2022 mentor  (was: gsoc2022)
>
> > GSoC 2022: More granularity on affinity/anti-affinity groups
> > 
> >
> > Key: CLOUDSTACK-10447
> > URL:
> https://issues.apache.org/jira/browse/CLOUDSTACK-10447
> > Project: CloudStack
> >  Issue Type: New Feature
> >  Security Level: Public(Anyone can view this level - this is the
> default.)
> >  Components: API, Management Server
> >Reporter: Nicolás Vázquez
> >Priority: Major
> >  Labels: gsoc2022, mentor
> >
> > Currently, defining an affinity or anti-affinity rule works only at
> hosts level. I would like to have more detail on the affinity group,
> extending it at different levels (cluster, pod, zone,..) and also within
> the same level, being able to add or remove resources from the group.
> > For hosts and storage pools, administrators can make use of host tags or
> storage tags to get a similar result. However, the extension of
> affinity/anti-affinity groups would make the administration easier.
> > Size of the project: Medium (~175hs)
>
>
>
> --
> This message was sent by Atlassian Jira
> (v8.20.1#820001)
>

[GitHub] [cloudstack-documentation] shwstppr removed a comment on pull request #262: ipv6: support for isolated nw, vpc tiers

[GitBox]

shwstppr removed a comment on pull request #262:
URL: 
https://github.com/apache/cloudstack-documentation/pull/262#issuecomment-1066732486


   @blueorangutan docbuild


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [cloudstack-documentation] blueorangutan removed a comment on pull request #262: ipv6: support for isolated nw, vpc tiers

[GitBox]

blueorangutan removed a comment on pull request #262:
URL: 
https://github.com/apache/cloudstack-documentation/pull/262#issuecomment-1066733786






-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [cloudstack-documentation] shwstppr commented on pull request #262: ipv6: support for isolated nw, vpc tiers

[GitBox]

shwstppr commented on pull request #262:
URL: 
https://github.com/apache/cloudstack-documentation/pull/262#issuecomment-1067726153


   @blueorangutan docbuild


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [cloudstack-documentation] blueorangutan commented on pull request #262: ipv6: support for isolated nw, vpc tiers

[GitBox]

blueorangutan commented on pull request #262:
URL: 
https://github.com/apache/cloudstack-documentation/pull/262#issuecomment-1067726610


   @shwstppr a Jenkins job has been kicked to build the document. I'll keep you 
posted as I make progress.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [cloudstack-documentation] blueorangutan commented on pull request #262: ipv6: support for isolated nw, vpc tiers

[GitBox]

blueorangutan commented on pull request #262:
URL: 
https://github.com/apache/cloudstack-documentation/pull/262#issuecomment-1067727555


   Doc build preview: http://qa.cloudstack.cloud/docs/WIP-PROOFING/pr/262. 
(SL-JID 206)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Re: [PROPOSE] RM for 4.17

[Nicolas Vazquez]

Hi all,

Given the proximity with the version 4.16.1 released this month, I would like 
to propose some changes to the original timeline, by extending it for a few 
weeks:

- (3-4 weeks) Ongoing – First weeks April 2022: Accept all bugs, issues, 
improvements allowed in LTS [1]
- (1 week) Stabilise the 4.17 branch, accept only critical/blocker issues (if 
any)
- Mid-April 2022 and onwards: Cut 4.17.0.0 RC1 and further RCs if necessary, 
start/conclude vote, and finish release work

Please let me know if any objections.

[1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/LTS

Regards,
Nicolas Vazquez


From: Nicolas Vazquez 
Date: Tuesday, 1 February 2022 at 11:20
To: us...@cloudstack.apache.org , dev 

Cc: us...@cloudstack.apache.org 
Subject: Re: [PROPOSE] RM for 4.17
Thanks all for your support!

I propose the following timelines for the 4.17.0.0 release, which is targeted 
for Q1/Q2 2022.

- (7-8 weeks) Ongoing – Mid March 2022: Accept all bugs, issues, improvements 
allowed in LTS [1]
- (1 week) Stabilise the 4.17 branch, accept only critical/blocker issues (if 
any)
- End March 2022 and onwards: Cut 4.17.0.0 RC1 and further RCs if necessary, 
start/conclude vote, and finish release work

My colleague Boris will assist me during the process for 
reviewing/testing/merging the PRs. You can find the open issues and PRs at the 
4.17.0.0 Github milestone [2]. Ping me (@nvazquez) or Boris (@borisstoyanov) on 
your issues and PRs, that are to be included in 4.17.0.0.

Looking forward for your support on bug fixes, reviews, tests, etc. Thanks.

[1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/LTS
[2] https://github.com/apache/cloudstack/milestone/21

Regards,
Nicolas Vazquez


From: Suresh Kumar Anaparti 
Date: Tuesday, 1 February 2022 at 08:07
To: dev 
Cc: us...@cloudstack.apache.org 
Subject: Re: [PROPOSE] RM for 4.17
+1

Thanks for volunteering again, good luck Nicolas!

Regards,
Suresh

On Tue, Feb 1, 2022 at 2:02 AM Gabriel Beims Bräscher 
wrote:

> Sounds good.
> Thaks, Nicolas.
>
> On Mon, Jan 31, 2022, 19:42 Rohit Yadav  wrote:
>
> > Sounds good to me, thanks for volunteering Nicolas.
> >
> >
> > Regards.
> >
> > 
> > From: Boris Stoyanov 
> > Sent: Monday, January 31, 2022 13:58
> > To: dev@cloudstack.apache.org ;
> > us...@cloudstack.apache.org 
> > Cc: dev@cloudstack.apache.org 
> > Subject: Re: [PROPOSE] RM for 4.17
> >
> > +1, I can help with triage/testing and any other business Nicolas, let me
> > know if you need any additional hands.
> >
> > Bobby.
> >
> > From: Ivet Petrova 
> > Date: Friday, 28 January 2022, 16:11
> > To: us...@cloudstack.apache.org 
> > Cc: dev@cloudstack.apache.org 
> > Subject: Re: [PROPOSE] RM for 4.17
> > Nicolas,
> > Just to mention you did a great job last time!
> >
> > Kind regards,
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > On 28 Jan 2022, at 16:05, Nicolas Vazquez  > > wrote:
> >
> > Dear All,
> >
> > I would like to put myself forward as the release manager for 4.17.0.0.
> >
> > I propose we have a window of at least 6 weeks to allow the community and
> > users to test and report issues, I will propose the timeline details
> soon.
> >
> > I hope to have your support. Please let me know if you have any thoughts
> /
> > comments.
> >
> > Regards,
> > Nicolas Vazquez
> >
> >
> >
> >
>



 

Re: [PROPOSE] RM for 4.17

[Rohit Yadav]

Sounds good to me, thanks for sharing Nicolas.


Regards.


From: Nicolas Vazquez 
Sent: Tuesday, March 15, 2022 16:26
To: dev@cloudstack.apache.org ; 
us...@cloudstack.apache.org 
Cc: us...@cloudstack.apache.org 
Subject: Re: [PROPOSE] RM for 4.17

Hi all,

Given the proximity with the version 4.16.1 released this month, I would like 
to propose some changes to the original timeline, by extending it for a few 
weeks:

- (3-4 weeks) Ongoing – First weeks April 2022: Accept all bugs, issues, 
improvements allowed in LTS [1]
- (1 week) Stabilise the 4.17 branch, accept only critical/blocker issues (if 
any)
- Mid-April 2022 and onwards: Cut 4.17.0.0 RC1 and further RCs if necessary, 
start/conclude vote, and finish release work

Please let me know if any objections.

[1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/LTS

Regards,
Nicolas Vazquez


From: Nicolas Vazquez 
Date: Tuesday, 1 February 2022 at 11:20
To: us...@cloudstack.apache.org , dev 

Cc: us...@cloudstack.apache.org 
Subject: Re: [PROPOSE] RM for 4.17
Thanks all for your support!

I propose the following timelines for the 4.17.0.0 release, which is targeted 
for Q1/Q2 2022.

- (7-8 weeks) Ongoing – Mid March 2022: Accept all bugs, issues, improvements 
allowed in LTS [1]
- (1 week) Stabilise the 4.17 branch, accept only critical/blocker issues (if 
any)
- End March 2022 and onwards: Cut 4.17.0.0 RC1 and further RCs if necessary, 
start/conclude vote, and finish release work

My colleague Boris will assist me during the process for 
reviewing/testing/merging the PRs. You can find the open issues and PRs at the 
4.17.0.0 Github milestone [2]. Ping me (@nvazquez) or Boris (@borisstoyanov) on 
your issues and PRs, that are to be included in 4.17.0.0.

Looking forward for your support on bug fixes, reviews, tests, etc. Thanks.

[1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/LTS
[2] https://github.com/apache/cloudstack/milestone/21

Regards,
Nicolas Vazquez


From: Suresh Kumar Anaparti 
Date: Tuesday, 1 February 2022 at 08:07
To: dev 
Cc: us...@cloudstack.apache.org 
Subject: Re: [PROPOSE] RM for 4.17
+1

Thanks for volunteering again, good luck Nicolas!

Regards,
Suresh

On Tue, Feb 1, 2022 at 2:02 AM Gabriel Beims Bräscher 
wrote:

> Sounds good.
> Thaks, Nicolas.
>
> On Mon, Jan 31, 2022, 19:42 Rohit Yadav  wrote:
>
> > Sounds good to me, thanks for volunteering Nicolas.
> >
> >
> > Regards.
> >
> > 
> > From: Boris Stoyanov 
> > Sent: Monday, January 31, 2022 13:58
> > To: dev@cloudstack.apache.org ;
> > us...@cloudstack.apache.org 
> > Cc: dev@cloudstack.apache.org 
> > Subject: Re: [PROPOSE] RM for 4.17
> >
> > +1, I can help with triage/testing and any other business Nicolas, let me
> > know if you need any additional hands.
> >
> > Bobby.
> >
> > From: Ivet Petrova 
> > Date: Friday, 28 January 2022, 16:11
> > To: us...@cloudstack.apache.org 
> > Cc: dev@cloudstack.apache.org 
> > Subject: Re: [PROPOSE] RM for 4.17
> > Nicolas,
> > Just to mention you did a great job last time!
> >
> > Kind regards,
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > On 28 Jan 2022, at 16:05, Nicolas Vazquez  > > wrote:
> >
> > Dear All,
> >
> > I would like to put myself forward as the release manager for 4.17.0.0.
> >
> > I propose we have a window of at least 6 weeks to allow the community and
> > users to test and report issues, I will propose the timeline details
> soon.
> >
> > I hope to have your support. Please let me know if you have any thoughts
> /
> > comments.
> >
> > Regards,
> > Nicolas Vazquez
> >
> >
> >
> >
>






 

Re: Window 2016 2019 will BSOD After live migraiton between Hosts

[Andrija Panic]

Try updating VirtIO drivers for scsi and network controllers - the BSOD
dump should be analysed, there are some online/offline tools which you can
use to upload/analyse the BSOD mini-dump

I've seen regular issues with Win2019/2016 in past which suddenly
disappeared after updating to the latest VirtIO drives (this was few years
ago).

Best,

On Mon, 7 Mar 2022 at 15:59, haven <382829...@qq.com.invalid> wrote:

> hi developers
> We experienced a frequent failure，Window 2016 2019 BSOD After live
> migraiton between  Hosts . BSOD occurs within 1 hour after
> migration is complete.Has anyone encountered the same situation?
>
>
>
>
>
> ENV:
> Cloudstack： 4.13.1.0
> Host OS：ubuntu 14.04  kernel 4.4.0-119 --> 4.4.0-219
> libvirtd (libvirt) 1.2.18.3
> kvm:  2.0.0+dfsg-2ubuntu1.30 --> 2.0.0+dfsg-2ubuntu1.47+esm1
> Guest OS: Windows Server 2019 or Windows Server 2016



-- 

Andrija Panić

CVE-2022-26779: Apache Cloudstack insecure random number generation affects project email invitation

[Daan]

Severity: low

Description:

Apache CloudStack prior to 4.16.1.0 used insecure random number generation for 
project invitation tokens. If a project invite is created based only on an 
email address, a random token is generated. An attacker with knowledge of the 
project ID and the fact that the invite is sent, could generate time 
deterministic tokens and brute force attempt to use them prior to the 
legitimate receiver accepting the invite. This feature is not enabled by 
default, the attacker is required to know or guess the project ID for the 
invite in addition to the invitation token, and the attacker would need to be 
an existing authorized user of CloudStack.

Credit:

This issue was reported by Jonathan Leitschuh

References:

https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-vpcc-9rh2-8jfp