Re: [DISCUSS] Move from OpenSSL to LibreSSL
John, Can CS community decide that? From my point of view this is OS distribution owner who does. OpenSSL is system package and you probably can't skip it, unless you create your own Linux distribution. Vadim. On 2016-02-03 17:48, John Kinsella wrote: Folks - another OpenSSL vulnerability was announced last week[1]. I believe our current SSVMs are running Wheezy, so they should be OK according to [2]. This makes me ponder, though: Should we consider moving to LibreSSL[3] in the future? For those not familiar, it's a fork of OpenSSL with more emphasis on cleaning up the code and improving the security of the codebase. From what I've seen so far, it should be a "drop in" replacement for OpenSSL, but I haven't tested that theory out yet. I originally brought this up on security@, but it was quickly pointed out as it's not an actual vulnerability in ACS we should discuss in public, so here we are. Looking for thoughts, maybe somebody has experience moving from OpenSSL to LibreSSL in another project? John 1: https://www.openssl.org/news/secadv/20160128.txt 2: https://security-tracker.debian.org/tracker/CVE-2016-0701 3: http://www.libressl.org/
Re: Fwd: [DISCUSS] Move from OpenSSL to LibreSSL
John, I think you touched up serious problem that should be cosidered by security team to judge how this may influence product development cycle and make a decision. Big players (like Google https://www.imperialviolet.org/2015/10/17/boringssl.html) has already made this. To broaden the scope I will suggest to consider several candidates for this position : LibreSSL, BoringSSL (or more). Vadim. On 2016-02-05 19:25, John Kinsella wrote: (whoops - accidentally replied privately, bringing back to mailing list - hope Vadim's OK with that) Realize the SSVM and VR provide "public" services - https is open on the console proxy, vpn services are open on the virtual router. And unfortunately yes, people usually only think about improving security after issues are found - that's why security geeks like me are around. :) I'll see if I can drop in libressl in the next week or two and see what happens John Begin forwarded message: FROM: Vadim SUBJECT: RE: [DISCUSS] MOVE FROM OPENSSL TO LIBRESSL DATE: February 4, 2016 at 11:43:07 PM PST TO: John Kinsella Thank you for explanation, John. I am not involved into CS security assessment, but existing architecture makes me feel safe, because SSVM and VR and any other system VM is accessible (by SSH) only from hypervisor host due to link-local address limitation. I don't know other ways, but it doesn't mean they do not exist. I do share your worries about OpenSSL library vulnerabilities, especially after "heartbleed", but replacing it everywhere seems to be very hard task. I don't think you will have discussion in this list on the subject unless next "heartbleed" happens. Vadim. On 2016-02-04 18:01, John Kinsella wrote: Hey Vadim - I should have clarified, sorry... SSL libraries are used in several areas in an ACS installation: 1) On management server, for secure communication with management UI, APIs, etc. 2) On system VMs - console proxies, secondary storage VMs, and possibly virtual routers (this is off top of my head, need to confirm). On management servers, whoever's building the system can choose whatever they want - you are correct here. What I was originally referring to was the second bullet - these are usually pre-built VM images downloaded into a CloudStack environment. That build is generated by ACS code, which currently uses OpenSSL. That's where I'm asking should we consider using LibreSSL instead. John On Feb 4, 2016, at 7:47 AM, Vadim wrote: John, Can CS community decide that? From my point of view this is OS distribution owner who does. OpenSSL is system package and you probably can't skip it, unless you create your own Linux distribution. Vadim. On 2016-02-03 17:48, John Kinsella wrote: Folks - another OpenSSL vulnerability was announced last week[1]. I believe our current SSVMs are running Wheezy, so they should be OK according to [2]. This makes me ponder, though: Should we consider moving to LibreSSL[3] in the future? For those not familiar, it's a fork of OpenSSL with more emphasis on cleaning up the code and improving the security of the codebase. From what I've seen so far, it should be a "drop in" replacement for OpenSSL, but I haven't tested that theory out yet. I originally brought this up on security@, but it was quickly pointed out as it's not an actual vulnerability in ACS we should discuss in public, so here we are. Looking for thoughts, maybe somebody has experience moving from OpenSSL to LibreSSL in another project? John 1: https://www.openssl.org/news/secadv/20160128.txt 2: https://security-tracker.debian.org/tracker/CVE-2016-0701 3: http://www.libressl.org/
Re: Fwd: [DISCUSS] Move from OpenSSL to LibreSSL
John, I think you touched up serious problem that should be cosidered by security team to judge how this may influence product development cycle and make a decision. Big players (like Google https://www.imperialviolet.org/2015/10/17/boringssl.html) has already made this. To broaden the scope I will suggest to consider several candidates for this position : LibreSSL, BoringSSL (or more). Vadim. On 2016-02-05 19:25, John Kinsella wrote: (whoops - accidentally replied privately, bringing back to mailing list - hope Vadim's OK with that) Realize the SSVM and VR provide "public" services - https is open on the console proxy, vpn services are open on the virtual router. And unfortunately yes, people usually only think about improving security after issues are found - that's why security geeks like me are around. :) I'll see if I can drop in libressl in the next week or two and see what happens John Begin forwarded message: FROM: Vadim SUBJECT: RE: [DISCUSS] MOVE FROM OPENSSL TO LIBRESSL DATE: February 4, 2016 at 11:43:07 PM PST TO: John Kinsella Thank you for explanation, John. I am not involved into CS security assessment, but existing architecture makes me feel safe, because SSVM and VR and any other system VM is accessible (by SSH) only from hypervisor host due to link-local address limitation. I don't know other ways, but it doesn't mean they do not exist. I do share your worries about OpenSSL library vulnerabilities, especially after "heartbleed", but replacing it everywhere seems to be very hard task. I don't think you will have discussion in this list on the subject unless next "heartbleed" happens. Vadim. On 2016-02-04 18:01, John Kinsella wrote: Hey Vadim - I should have clarified, sorry... SSL libraries are used in several areas in an ACS installation: 1) On management server, for secure communication with management UI, APIs, etc. 2) On system VMs - console proxies, secondary storage VMs, and possibly virtual routers (this is off top of my head, need to confirm). On management servers, whoever's building the system can choose whatever they want - you are correct here. What I was originally referring to was the second bullet - these are usually pre-built VM images downloaded into a CloudStack environment. That build is generated by ACS code, which currently uses OpenSSL. That's where I'm asking should we consider using LibreSSL instead. John On Feb 4, 2016, at 7:47 AM, Vadim wrote: John, Can CS community decide that? From my point of view this is OS distribution owner who does. OpenSSL is system package and you probably can't skip it, unless you create your own Linux distribution. Vadim. On 2016-02-03 17:48, John Kinsella wrote: Folks - another OpenSSL vulnerability was announced last week[1]. I believe our current SSVMs are running Wheezy, so they should be OK according to [2]. This makes me ponder, though: Should we consider moving to LibreSSL[3] in the future? For those not familiar, it's a fork of OpenSSL with more emphasis on cleaning up the code and improving the security of the codebase. From what I've seen so far, it should be a "drop in" replacement for OpenSSL, but I haven't tested that theory out yet. I originally brought this up on security@, but it was quickly pointed out as it's not an actual vulnerability in ACS we should discuss in public, so here we are. Looking for thoughts, maybe somebody has experience moving from OpenSSL to LibreSSL in another project? John 1: https://www.openssl.org/news/secadv/20160128.txt 2: https://security-tracker.debian.org/tracker/CVE-2016-0701 3: http://www.libressl.org/
Re: [DISCUSS] Move from OpenSSL to LibreSSL
John, I think you touched up serious problem that should be cosidered by security team to judge how this may influence product development cycle and make a decision. Big players (like Google https://www.imperialviolet.org/2015/10/17/boringssl.html) has already made this. To broaden the scope I will suggest to consider several candidates for this position : LibreSSL, BoringSSL (or more). Vadim. On 2016-02-05 19:25, John Kinsella wrote: (whoops - accidentally replied privately, bringing back to mailing list - hope Vadim's OK with that) Realize the SSVM and VR provide "public" services - https is open on the console proxy, vpn services are open on the virtual router. And unfortunately yes, people usually only think about improving security after issues are found - that's why security geeks like me are around. :) I'll see if I can drop in libressl in the next week or two and see what happens John Begin forwarded message: FROM: Vadim SUBJECT: RE: [DISCUSS] MOVE FROM OPENSSL TO LIBRESSL DATE: February 4, 2016 at 11:43:07 PM PST TO: John Kinsella Thank you for explanation, John. I am not involved into CS security assessment, but existing architecture makes me feel safe, because SSVM and VR and any other system VM is accessible (by SSH) only from hypervisor host due to link-local address limitation. I don't know other ways, but it doesn't mean they do not exist. I do share your worries about OpenSSL library vulnerabilities, especially after "heartbleed", but replacing it everywhere seems to be very hard task. I don't think you will have discussion in this list on the subject unless next "heartbleed" happens. Vadim. On 2016-02-04 18:01, John Kinsella wrote: Hey Vadim - I should have clarified, sorry... SSL libraries are used in several areas in an ACS installation: 1) On management server, for secure communication with management UI, APIs, etc. 2) On system VMs - console proxies, secondary storage VMs, and possibly virtual routers (this is off top of my head, need to confirm). On management servers, whoever's building the system can choose whatever they want - you are correct here. What I was originally referring to was the second bullet - these are usually pre-built VM images downloaded into a CloudStack environment. That build is generated by ACS code, which currently uses OpenSSL. That's where I'm asking should we consider using LibreSSL instead. John On Feb 4, 2016, at 7:47 AM, Vadim wrote: John, Can CS community decide that? From my point of view this is OS distribution owner who does. OpenSSL is system package and you probably can't skip it, unless you create your own Linux distribution. Vadim. On 2016-02-03 17:48, John Kinsella wrote: Folks - another OpenSSL vulnerability was announced last week[1]. I believe our current SSVMs are running Wheezy, so they should be OK according to [2]. This makes me ponder, though: Should we consider moving to LibreSSL[3] in the future? For those not familiar, it's a fork of OpenSSL with more emphasis on cleaning up the code and improving the security of the codebase. From what I've seen so far, it should be a "drop in" replacement for OpenSSL, but I haven't tested that theory out yet. I originally brought this up on security@, but it was quickly pointed out as it's not an actual vulnerability in ACS we should discuss in public, so here we are. Looking for thoughts, maybe somebody has experience moving from OpenSSL to LibreSSL in another project? John 1: https://www.openssl.org/news/secadv/20160128.txt 2: https://security-tracker.debian.org/tracker/CVE-2016-0701 3: http://www.libressl.org/
RE: [ANNOUNCE] New PMC Member: Lucian (Nux)
Nux, my best wishes to you ! Yours respectfully, Vadim. -Original Message- From: Paul Angus [mailto:paul.an...@shapeblue.com] Sent: Thursday, March 26, 2015 8:51 AM To: dev@cloudstack.apache.org Subject: RE: [ANNOUNCE] New PMC Member: Lucian (Nux) Congratulations Lucian! Regards Paul Angus Cloud Architect S: +44 20 3603 0540 | M: +447711418784 | T: CloudyAngus paul.an...@shapeblue.com -Original Message- From: Mike Tutkowski [mailto:mike.tutkow...@solidfire.com] Sent: 26 March 2015 04:36 To: dev@cloudstack.apache.org Subject: Re: [ANNOUNCE] New PMC Member: Lucian (Nux) Congratulations! On Wednesday, March 25, 2015, Rajani Karuturi wrote: > The Project Management Committee (PMC) for Apache CloudStack has asked > Lucian to join the PMC and we are pleased to announce that he has accepted. > > Join me in congratulating Lucian! > > On behalf of the Apache CloudStack PMC > > ~Rajani > -- *Mike Tutkowski* *Senior CloudStack Developer, SolidFire Inc.* e: mike.tutkow...@solidfire.com o: 303.746.7302 Advancing the way the world uses the cloud <http://solidfire.com/solution/overview/?video=play>*™* Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> CloudStack Software Engineering<http://shapeblue.com/cloudstack-software-engineering/> CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infrastructure-support/> CloudStack Bootcamp Training Courses<http://shapeblue.com/cloudstack-training/> This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
RE: [DISCUSS] LTS Releases
I do prefer 4.4 as well because it has GPU sharing and we actively test it. Other bugs are not so important for us right now. Vadim. -Original Message- From: Nux! [mailto:n...@li.nux.ro] Sent: Tuesday, November 25, 2014 4:48 PM To: dev@cloudstack.apache.org Cc: us...@cloudstack.apache.org Subject: Re: [DISCUSS] LTS Releases Daan, I like 4.4 better than 4.3 for my use case and despite the bugs I hit it does its job. If I were to deploy today it would still be with 4.4. Hope this makes you feel better. :-) Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Daan Hoogland" > To: "dev" > Cc: us...@cloudstack.apache.org > Sent: Tuesday, 25 November, 2014 13:56:12 > Subject: Re: [DISCUSS] LTS Releases > On Tue, Nov 25, 2014 at 2:40 PM, Rohit Yadav > wrote: >> The 4.4 branch does not contain many bugfixes which are in 4.3 and on >> master/4.5. > > > That is worrying, Rohit. As the rest of your mail is already a vote of > distrust, this part says we should not release 4.4.2 as it contains > regressions. This is a very bad signal to users and the rest of the > community. What you are saying is (you in transitive form), 'we won't > port fixes to 4.4 but only to 4.3 so upgrade to newer 4.3 versions and > not to a 4.4 version. You have the right to do so but I don't like it. > Fortunately, I met people at CCCEU stating that 4.4 was working > perfectly for them. Unfortunately an incompatibility seldom is just > for- or backward. Most of the time it is two way. Will you support > transitioning from 4.4 to 4.5 as rigorously as you now discourage the > transition to 4.4? I think you will need to. > > -- > Daan
RE: root resize support in the UI
Nux, Can you give more information about this functionality? I am particularly interesting to show to the user this field, but don't know how it will work. Particularly is interesting: 1. Does it work for all hypervisors or just KVM? 2. Does it depend on the template root partition (i.e. I have 10G root at template and put 5G to desired. Will it work?) 3. This is just UI patch, shouldn't it be activated at the backend as well ? Thanks, Vadim From: Nux! [n...@li.nux.ro] Sent: Saturday, November 29, 2014 12:37 To: dev@cloudstack.apache.org Cc: Brian Federle Subject: Re: root resize support in the UI BTW, the code needed to enable custom root size during instance creation is very small, functionality is already there. This patch is needed https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=commit;h=8fec09ba481fbd3b8c2a9e4d31ef06f113b037cb , I tested it and it works fine. And this is the result: https://i.imgur.com/xrs0mu4.png -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Nux!" > To: dev@cloudstack.apache.org > Cc: "Brian Federle" > Sent: Saturday, 29 November, 2014 00:57:37 > Subject: Re: root resize support in the UI > Yes, you have a point. > > Opened https://issues.apache.org/jira/browse/CLOUDSTACK-7992 > > -- > Sent from the Delta quadrant using Borg technology! > > Nux! > www.nux.ro > > - Original Message - >> From: "Mike Tutkowski" >> To: dev@cloudstack.apache.org >> Cc: "Brian Federle" >> Sent: Saturday, 29 November, 2014 00:48:03 >> Subject: Re: root resize support in the UI > >> Well...I don't know...we kind of have features all over the place that work >> for one hypervisor and not for another. >> >> If we're cool with that approach, this would be just one more area where we >> have this kind of hypervisor-specific behavior (perhaps all hypervisors >> support such an action in the future). >> >> On Fri, Nov 28, 2014 at 5:41 PM, Nux! wrote: >> >>> Was thinking to just patch my local installation. Devs might not go too >>> crazy over this idea since root resize is not supported across all >>> hypervisors (KVM only atm). >>> >>> But if you think this has a chance to go official, I will open an issue. >>> >>> Thanks, >>> Lucian >>> >>> -- >>> Sent from the Delta quadrant using Borg technology! >>> >>> Nux! >>> www.nux.ro >>> >>> - Original Message - >>> > From: "Mike Tutkowski" >>> > To: dev@cloudstack.apache.org, "Brian Federle" >> > >>> > Sent: Saturday, 29 November, 2014 00:27:14 >>> > Subject: Re: root resize support in the UI >>> >>> > Have you logged a JIRA ticket for this? >>> > >>> > Maybe Brian or one of the GUI people could pick up on it. >>> > >>> > On Fri, Nov 28, 2014 at 4:32 PM, Nux! wrote: >>> > >>> >> Yeah, I was thinking of that, if it works for DATA, it should work for >>> >> ROOT. But I am not a dev. >>> >> >>> >> Thoughts? >>> >> >>> >> -- >>> >> Sent from the Delta quadrant using Borg technology! >>> >> >>> >> Nux! >>> >> www.nux.ro >>> >> >>> >> - Original Message - >>> >> > From: "Mike Tutkowski" >>> >> > To: dev@cloudstack.apache.org >>> >> > Sent: Friday, 28 November, 2014 19:57:27 >>> >> > Subject: Re: root resize support in the UI >>> >> >>> >> > For root disks, is it possible to just follow the existing resize >>> pattern >>> >> > we have established in the UI for data disks? >>> >> > >>> >> > On Friday, November 28, 2014, Nux! wrote: >>> >> > >>> >> >> Hello, >>> >> >> >>> >> >> Wonder if someone can help me with the $subject. >>> >> >> >>> >> >> I remember at some point (4.2?) a new feature showed up accidentally >>> in >>> >> >> the UI instance creation dialogues, it was concerning "root size", >>> had a >>> >> >> small box where the number in GB would be introduced. >>> >> >> I'd like to take advantage of that now that this feature actuall
RE: root resize support in the UI
Lucian, I have seen CS 4.3 installation made by Citrix at our parnter and they have the same feature enabled for XenServer and VmWare. I wonder how does it work ? They have their own team of developers to make some extra features they need (like plugin for statistics and billing), but did they implement particularly this feature or Citrix did it - I don't know. It seems this part of code is not contributed back to community anyway. It would be nice to have it, especially together with "slieders" which are quite popular right now as I understood. Vadim. -Original Message- From: Nux! [mailto:n...@li.nux.ro] Sent: Saturday, November 29, 2014 9:48 PM To: dev@cloudstack.apache.org Subject: Re: root resize support in the UI Vadim, 1. Only KVM for now, due to lack of interest I guess 2. The root disk value needs to be equal or larger than that of the template, otherwise you end up with a broken disk, obviously. So go for minimal (say under 10G) templates that can resize themselves, such as the ones at http://dl.openvm.eu ;) 3. The backend API has been supporting this since 4.4.0, it's the UI that is lagging behind More details here https://issues.apache.org/jira/browse/CLOUDSTACK-6181 Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Vadim Kimlaychuk" > To: dev@cloudstack.apache.org > Sent: Saturday, 29 November, 2014 15:17:16 > Subject: RE: root resize support in the UI > Nux, > > Can you give more information about this functionality? I am > particularly > interesting to show to the user this field, but don't know how it > will work. > Particularly is interesting: > 1. Does it work for all hypervisors or just KVM? > 2. Does it depend on the template root partition (i.e. I have 10G root > at template and put 5G to desired. Will it work?) 3. This is just UI > patch, shouldn't it be activated at the backend as well ? > > Thanks, > Vadim > > From: Nux! [n...@li.nux.ro] > Sent: Saturday, November 29, 2014 12:37 > To: dev@cloudstack.apache.org > Cc: Brian Federle > Subject: Re: root resize support in the UI > > BTW, the code needed to enable custom root size during instance > creation is very small, functionality is already there. > This patch is needed > https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=commit;h=8f > ec09ba481fbd3b8c2a9e4d31ef06f113b037cb > , I tested it and it works fine. > > And this is the result: https://i.imgur.com/xrs0mu4.png > > -- > Sent from the Delta quadrant using Borg technology! > > Nux! > www.nux.ro > > - Original Message - >> From: "Nux!" >> To: dev@cloudstack.apache.org >> Cc: "Brian Federle" >> Sent: Saturday, 29 November, 2014 00:57:37 >> Subject: Re: root resize support in the UI > >> Yes, you have a point. >> >> Opened https://issues.apache.org/jira/browse/CLOUDSTACK-7992 >> >> -- >> Sent from the Delta quadrant using Borg technology! >> >> Nux! >> www.nux.ro >> >> - Original Message - >>> From: "Mike Tutkowski" >>> To: dev@cloudstack.apache.org >>> Cc: "Brian Federle" >>> Sent: Saturday, 29 November, 2014 00:48:03 >>> Subject: Re: root resize support in the UI >> >>> Well...I don't know...we kind of have features all over the place >>> that work for one hypervisor and not for another. >>> >>> If we're cool with that approach, this would be just one more area >>> where we have this kind of hypervisor-specific behavior (perhaps all >>> hypervisors support such an action in the future). >>> >>> On Fri, Nov 28, 2014 at 5:41 PM, Nux! wrote: >>> >>>> Was thinking to just patch my local installation. Devs might not go >>>> too crazy over this idea since root resize is not supported across >>>> all hypervisors (KVM only atm). >>>> >>>> But if you think this has a chance to go official, I will open an issue. >>>> >>>> Thanks, >>>> Lucian >>>> >>>> -- >>>> Sent from the Delta quadrant using Borg technology! >>>> >>>> Nux! >>>> www.nux.ro >>>> >>>> - Original Message - >>>> > From: "Mike Tutkowski" >>>> > To: dev@cloudstack.apache.org, "Brian Federle" >>>> > >>> > >>>> > Sent: Saturday, 29 November, 2014 00:27:14 >>>> >
RE: root resize support in the UI
It is interesting how, in genereal, this works for XenServer (for exmaple)? I do understand, that entire logic of CS is built around hypervisor capabilities. It does not do more than each specific hypervisor can offer. KVM do have "virt-resize" tool that can resize Linux partitions, but it will probably not work for Windows hosts anyway. So, to be honest, this UI feature should only be visible for Linux guests. I don't know whether different approach to build and resize root partitions for all hypervisors exist? If it is not possible to do on hypervisor level, how does CS do this? Vadim. -Original Message- From: Nux! [mailto:n...@li.nux.ro] Sent: Sunday, November 30, 2014 2:03 PM To: dev@cloudstack.apache.org Subject: Re: root resize support in the UI It's very possible Citrix customised that installation, what they do for their own customers is their own business. It was certainly possible to do it with 4.3, Marcus wrote some patches at some point to enable this functionality (KVM only, again). The UI has always been considered more of a proof of concept, though it's a very much needed part of ACS, as such everyone is encouraged to use the API and build their own interfaces. I missed some important options and customers because I thought GreenQloud, Exoscale etc will give you some credit as a new customer so you can check out their UI. They don't have as many options as the ACS one, but I found this to be a feature, customers shouldn't be exposed to too many options, they'll just get their noses caught in them. :) Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ----- Original Message - > From: "Vadim Kimlaychuk" > To: dev@cloudstack.apache.org > Sent: Sunday, 30 November, 2014 10:53:56 > Subject: RE: root resize support in the UI > Lucian, > > I have seen CS 4.3 installation made by Citrix at our parnter and they > have the > same feature enabled for XenServer and VmWare. I wonder how does it > work ? > They have their own team of developers to make some extra features they > need > (like plugin for statistics and billing), but did they implement > particularly > this feature or Citrix did it - I don't know. It seems this part of > code is > not contributed back to community anyway. It would be nice to have it, > especially together with "slieders" which are quite popular right now > as I > understood. > > Vadim. > > -Original Message- > From: Nux! [mailto:n...@li.nux.ro] > Sent: Saturday, November 29, 2014 9:48 PM > To: dev@cloudstack.apache.org > Subject: Re: root resize support in the UI > > Vadim, > > 1. Only KVM for now, due to lack of interest I guess 2. The root disk > value needs to be equal or larger than that of the template, otherwise > you end up with a broken disk, obviously. So go for minimal (say under > 10G) templates that can resize themselves, such as the ones at > http://dl.openvm.eu ;) 3. The backend API has been supporting this > since 4.4.0, it's the UI that is lagging behind More details here > https://issues.apache.org/jira/browse/CLOUDSTACK-6181 > > Lucian > > -- > Sent from the Delta quadrant using Borg technology! > > Nux! > www.nux.ro > > - Original Message - >> From: "Vadim Kimlaychuk" >> To: dev@cloudstack.apache.org >> Sent: Saturday, 29 November, 2014 15:17:16 >> Subject: RE: root resize support in the UI > >> Nux, >> >> Can you give more information about this functionality? I am >> particularly >> interesting to show to the user this field, but don't know how it >> will work. >> Particularly is interesting: >> 1. Does it work for all hypervisors or just KVM? >> 2. Does it depend on the template root partition (i.e. I have 10G >> root at template and put 5G to desired. Will it work?) 3. This is >> just UI patch, shouldn't it be activated at the backend as well ? >> >> Thanks, >> Vadim >> >> From: Nux! [n...@li.nux.ro] >> Sent: Saturday, November 29, 2014 12:37 >> To: dev@cloudstack.apache.org >> Cc: Brian Federle >> Subject: Re: root resize support in the UI >> >> BTW, the code needed to enable custom root size during instance >> creation is very small, functionality is already there. >> This patch is needed >> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=commit;h=8 >> f ec09ba481fbd3b8c2a9e4d31ef06f113b037cb >> , I tested it and it works fine. >> >> And this is the result: https://i.imgur.com
RE: root resize support in the UI
I have done root partition resize under XenServer exactly as you described - resized drive and then using system tools on guest VM like fdisk, lvextend and ext2resize changed the size of the root. It seems that drive resize on hypervisor level is all that is needed, because it is far too complicated for hypervisor to be aware of all different types of partition layouts and file systems that might exist. Then upper layer (like CS) may take role of implementing different actions according to guest type and file system that have being used for particular guest. While OS type can be taken from template, FS type and partition type is information that is not stored in the database. Without it implementation is not feasible. Vadim. -Original Message- From: Andrija Panic [mailto:andrija.pa...@gmail.com] Sent: Monday, December 01, 2014 10:02 AM To: dev@cloudstack.apache.org Subject: Re: root resize support in the UI I think it would be usefull to have that resize feature for all guests (Linux, Windows, etc) - but perhaps customizes the Resize function to perform partition resize inside Linux (if we are deploying new VM from Linux template) - or simply do not do anything inside guest OS, just resize the drive - and let the client handle partition and file system resize...it might be more clean implementation I guess...? On 1 December 2014 at 08:48, Vadim Kimlaychuk wrote: > It is interesting how, in genereal, this works for XenServer (for > exmaple)? I do understand, that entire logic of CS is built around > hypervisor capabilities. It does not do more than each specific > hypervisor can offer. KVM do have "virt-resize" tool that can resize > Linux partitions, but it will probably not work for Windows hosts > anyway. So, to be honest, this UI feature should only be visible for Linux > guests. > > I don't know whether different approach to build and resize root > partitions for all hypervisors exist? If it is not possible to do on > hypervisor level, how does CS do this? > > Vadim. > > -Original Message- > From: Nux! [mailto:n...@li.nux.ro] > Sent: Sunday, November 30, 2014 2:03 PM > To: dev@cloudstack.apache.org > Subject: Re: root resize support in the UI > > It's very possible Citrix customised that installation, what they do > for their own customers is their own business. It was certainly > possible to do it with 4.3, Marcus wrote some patches at some point to > enable this functionality (KVM only, again). > > The UI has always been considered more of a proof of concept, though > it's a very much needed part of ACS, as such everyone is encouraged to > use the API and build their own interfaces. I missed some important > options and customers because I thought > > GreenQloud, Exoscale etc will give you some credit as a new customer > so you can check out their UI. They don't have as many options as the > ACS one, but I found this to be a feature, customers shouldn't be > exposed to too many options, they'll just get their noses caught in > them. :) > > Lucian > > -- > Sent from the Delta quadrant using Borg technology! > > Nux! > www.nux.ro > > - Original Message - > > From: "Vadim Kimlaychuk" > > To: dev@cloudstack.apache.org > > Sent: Sunday, 30 November, 2014 10:53:56 > > Subject: RE: root resize support in the UI > > > Lucian, > > > > I have seen CS 4.3 installation made by Citrix at our parnter > > and > they have the > > same feature enabled for XenServer and VmWare. I wonder how > > does > it work ? > > They have their own team of developers to make some extra > > features > they need > > (like plugin for statistics and billing), but did they > > implement > particularly > > this feature or Citrix did it - I don't know. It seems this > > part > of code is > > not contributed back to community anyway. It would be nice to > > have > it, > > especially together with "slieders" which are quite popular > > right > now as I > > understood. > > > > Vadim. > > > > -Original Message- > > From: Nux! [mailto:n...@li.nux.ro] > > Sent: Saturday, November 29, 2014 9:48 PM > > To: dev@cloudstack.apache.org > > Subject: Re: root resize support in the UI > > > > Vadim, > > > > 1. Only KVM for now, due to lack of interest I guess 2. The root > > disk value needs to be equal or larger than that of the template, > > otherwise you end up with a broken disk, obviously. So go for > > minimal (say under > > 10G) templates that can resize themselve
RE: root resize support in the UI
But that means user can not create desired volume during instance set-up. If we would like to have, for example, VM with disk offers from 5-100Gb I need to create dozen of same templates that differ only at root size. Vadim. -Original Message- From: Andrija Panic [mailto:andrija.pa...@gmail.com] Sent: Monday, December 01, 2014 11:06 AM To: dev@cloudstack.apache.org Subject: Re: root resize support in the UI Exactly, there may be more than 1 partion on that 1 drive.. So just increase disk size, and let administaror handle the "inside VM" job On 1 December 2014 at 09:34, Erik Weber wrote: > On Mon, Dec 1, 2014 at 9:23 AM, Vadim Kimlaychuk < > vadim.kimlayc...@elion.ee> > wrote: > > > I have done root partition resize under XenServer exactly as you > described > > - resized drive and then using system tools on guest VM like fdisk, > > lvextend and ext2resize changed the size of the root. It seems that > drive > > resize on hypervisor level is all that is needed, because it is far > > too complicated for hypervisor to be aware of all different types of > partition > > layouts and file systems that might exist. Then upper layer (like > > CS) may take role of implementing different actions according to > > guest type and file system that have being used for particular > > guest. While OS type can be taken from template, FS type and > > partition type is information that is not stored in the database. Without > > it implementation is not feasible. > > > > It's not given that you want to resize a partition or which one, just > because you resize the disk. > > Thus it's not feasible to assume that the orchestration layer should > be capable of doing it. > > -- > Erik > -- Andrija Panić
Cloudstack repos
Hello Dev-s I am looking closer to the CS development process and if possible wish to contribute. I have found there are at least 2 repos for CS. One, I suppose, is official : git://git.apache.org/cloudstack.git another one is https://github.com/shapeblue/cloudstack.git Where does development take place? Are these 2 repos in sync with each other? Are there more repos where developers do their work? What is the purpose to have more of them ? Thanks for expaination, Vadim Kimlaychuk
RE: root resize support in the UI
Andrija, You did understand me correctly. I wish that for the customer disk offer could be customizable. And not just for KVM hypervisor. Particularly now I am interested in Xen and VmWare. CS admin should not have set of templates that differs only on root partition size. Swap partition can be (theoretically) located as another DATA disk and be re-sizable with existing functionality. How hard is to achieve such a requirement? Are these requirements something unusual and I should do it other way? For example we say to the customer, that you have unallocated space if you select different size and extend partition by yourself? Vadim. -Original Message- From: Andrija Panic [mailto:andrija.pa...@gmail.com] Sent: Monday, December 01, 2014 12:06 PM To: dev@cloudstack.apache.org Subject: Re: root resize support in the UI Vadim, not sure if I understand corrrectly - but you have i.e. 10GB template. you provision new VM with different size i.e. 50GB, and then after the instance is UP and running - there is just 40GB of additional unalocated space inside VM/disk, so admin need to resize partition and resize FS... ? I have been manually using qemu-img to resize some volumes (update the size inside DB) and then boot VM and do "inside VM" work of resizing stuff... If we only increase disk by qemu-img and update the DB - than no more admin-manual hacks needed - and we have consistent solution, that works across all platforms. And to support resize inside differente OS-es by ACS (partitions and FS) - seems pretty impossible for me, except for basic templates that have 1 partition, and i.e. no swap partition, etc...we loose consistency here completely... On 1 December 2014 at 10:33, Vadim Kimlaychuk wrote: > But that means user can not create desired volume during instance set-up. > If we would like to have, for example, VM with disk offers from > 5-100Gb I need to create dozen of same templates that differ only at root > size. > > Vadim. > > -Original Message- > From: Andrija Panic [mailto:andrija.pa...@gmail.com] > Sent: Monday, December 01, 2014 11:06 AM > To: dev@cloudstack.apache.org > Subject: Re: root resize support in the UI > > Exactly, there may be more than 1 partion on that 1 drive.. So just > increase disk size, and let administaror handle the "inside VM" job > > On 1 December 2014 at 09:34, Erik Weber wrote: > > > On Mon, Dec 1, 2014 at 9:23 AM, Vadim Kimlaychuk < > > vadim.kimlayc...@elion.ee> > > wrote: > > > > > I have done root partition resize under XenServer exactly as you > > described > > > - resized drive and then using system tools on guest VM like > > > fdisk, lvextend and ext2resize changed the size of the root. It > > > seems that > > drive > > > resize on hypervisor level is all that is needed, because it is > > > far too complicated for hypervisor to be aware of all different > > > types of > > partition > > > layouts and file systems that might exist. Then upper layer (like > > > CS) may take role of implementing different actions according to > > > guest type and file system that have being used for particular > > > guest. While OS type can be taken from template, FS type and > > > partition type is information that is not stored in the database. > Without it implementation is not feasible. > > > > > > > It's not given that you want to resize a partition or which one, > > just because you resize the disk. > > > > Thus it's not feasible to assume that the orchestration layer should > > be capable of doing it. > > > > -- > > Erik > > > > > > -- > > Andrija Panić > -- Andrija Panić
RE: Cloudstack repos
Thank you all ! Not it is clear Vadim. -Original Message- From: Rohit Yadav [mailto:rohit.ya...@shapeblue.com] Sent: Monday, December 01, 2014 1:18 PM To: dev@cloudstack.apache.org Subject: Re: Cloudstack repos Hi ChunFeng, I've updated the repository description here: https://github.com/shapeblue/cloudstack I've update on the README file the links to official Repo and something about the Github mirror to avoid confusion, since there are so many Github forks anyone could host CloudStack repo with their github account. I think people who are coming to Apache CloudStack would/should go to github.com/apache/cloudstack. On Monday 01 December 2014 04:29 PM, ChunFeng wrote: > Hi Rohit, > > > For end user , even for developers , two repos may raise some mix-up. > > > Could you please modify the README.md file in ShapeBlue's repo by add some > statements for explaination ? > > > -- > Regards, > > > ChunFeng > > > > > > > > > > -- Original -- > From: "Rohit Yadav"; > Date: Mon, Dec 1, 2014 07:05 PM > To: "dev"; > > Subject: Re: Cloudstack repos > > > Hi Vadim, > > The official repository is at > https://git-wip-us.apache.org/repos/asf/cloudstack.git > > A mirror is available on Github which is more easy to work with, to > get started I would recommend you fork the Github repository, work on > it and pull/rebase using the above official repository, and send us > Github Pull Requests for any code contributions: > github.com/apache/cloudstack > > Our (ShapeBlue's) CloudStack repo on github is public for transparency > purposes and to host release notes and tags of our patches. We think > of our repo as a backup of CloudStack repository (that syncs faster > than the github mirror using a cronjob) and we also note in its > description that they should be considered as our backup only. > > On Monday 01 December 2014 03:42 PM, Vadim Kimlaychuk wrote: >> Hello Dev-s >> >> I am looking closer to the CS development process and if >> possible wish to contribute. I have found there are at least 2 repos for CS. >> One, I suppose, is official : git://git.apache.org/cloudstack.git another >> one is https://github.com/shapeblue/cloudstack.git >> Where does development take place? Are these 2 repos in sync >> with each other? Are there more repos where developers do their work? What >> is the purpose to have more of them ? >> >> Thanks for expaination, >> >> Vadim Kimlaychuk >> > > -- > Regards, > Rohit Yadav > Software Architect, ShapeBlue > M. +41 779015219 | rohit.ya...@shapeblue.com > Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue > and our range of CloudStack related services > > IaaS Cloud Design & > Build<http://shapeblue.com/iaas-cloud-design-and-build//> > CSForge – rapid IaaS deployment > framework<http://shapeblue.com/csforge/> > CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > CloudStack Software > Engineering<http://shapeblue.com/cloudstack-software-engineering/> > CloudStack Infrastructure > Support<http://shapeblue.com/cloudstack-infrastructure-support/> > CloudStack Bootcamp Training > Courses<http://shapeblue.com/cloudstack-training/> > > This email and any attachments to it may be confidential and are intended > solely for the use of the individual to whom it is addressed. Any views or > opinions expressed are solely those of the author and do not necessarily > represent those of Shape Blue Ltd or related companies. If you are not the > intended recipient of this email, you must neither take any action based upon > its contents, nor copy or show it to anyone. Please contact the sender if you > believe you have received this email in error. Shape Blue Ltd is a company > incorporated in England & Wales. ShapeBlue Services India LLP is a company > incorporated in India and is operated under license from Shape Blue Ltd. > Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is > operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company > registered by The Republic of South Africa and is traded under license from > Shape Blue Ltd. ShapeBlue is a registered trademark. > -- Regards, Rohit Yadav Software Architect, ShapeBlue M. +41 779015219 | rohit.ya...@shapeblue.com Blog: bhaisaab.org | Twitter: @_bhaisaab Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//> CS
RE: KVM - VM snapshot (round 2)
CS does not support memory snapshots for XenServer. Disk snapshots are working. Not sure about VmWare, but I guess it should be the same. I thought the reachest feature-set is developed for KVM. But if it does not support memory snapshots - I wonder wich hypervisor does it ? This option at user interface exists, but I didn't see it worked. Vadim. -Original Message- From: Andrija Panic [mailto:andrija.pa...@gmail.com] Sent: Monday, December 08, 2014 12:51 PM To: dev@cloudstack.apache.org; us...@cloudstack.apache.org Subject: KVM - VM snapshot (round 2) Hi guys, still wondering is there any interest into imlementing the VM snapshoot for KVM ? We desperately need it, so will try to contribute anyway we can (not me obviosuly, not a developer, but my colegues will). Can you give some guidance on this subject - I'm aware of the design documents here https://cwiki.apache.org/confluence/display/CLOUDSTACK/VM+Snapshots but any more input would be very much appriciated. I understand, that VMware/Xen natively support this, and that it might have bigger user-base for Xen VS KVM - but this is one of the major KVM missing features... Any input greatly appreciated... -- Andrija Panić
RE: [VOTE] Apache Cloudstack 4.5.1
Hi, I am sorry for not being authorized to vote for release, but it seems VPC is not working at 4.5.1. I have 4.5-RC20150407T1726 at production and using VPC is very limited. I am not able to use 2 NICs from different tiers at the same VM. Look for detatiled problem desctiption at user list under subject "VPC usage scenario" Regards, Vadim. -Original Message- From: Geoff Higginbottom [mailto:geoff.higginbot...@shapeblue.com] Sent: Wednesday, May 06, 2015 10:21 AM To: dev@cloudstack.apache.org Subject: Re: [VOTE] Apache Cloudstack 4.5.1 I¹m a -0 for now (testing still on going) I have upgraded a 4.3.1 Adv XenServer build, and a 4.4.2 Adv XenServer build. In both cases the upgrade was successful, all System VMs and VRs upgraded OK, however I was not able to create any new VRs or System VMs. We are still analysing the logs and this may well turn out to be a -1, but it could simply be an issue with the system vm template etc hence the -0 for now Still need to test a local storage build, and a Basic with Security Groups build, in for a busy week! Regards Geoff Higginbottom CTO / Cloud Architect D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com | www.shapeblue.com | Twitter:@cloudstackguru <https://twitter.com/#!/cloudstackguru> ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS On 06/05/2015 05:57, "Marcus" wrote: >+1 (binding) >On May 5, 2015 10:26 AM, "David Nalley" wrote: > >> Thanks for running with this Rohit. >> >> +1 (binding) >> >> On Mon, May 4, 2015 at 7:20 AM, Rohit Yadav wrote: >> > Hi All, >> > >> > I've created a 4.5.1 release, with the following artifacts up for a >>vote: >> > >> > Git Branch and Commit SH: >> > >> >>https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h= >>ref >>s/heads/4.5 >> > Commit: 0eb4eb23701f0c6fec8bd5461cd9aa9f92c9576d >> > >> > List of changes: >> > >> >>https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain; >>f=C >>HANGES.md;hb=4.5 >> > https://github.com/apache/cloudstack/commits/4.5-RC20150504T1217 >> > >> > Source release (checksums and signatures are available at the same >> > location): >> > https://dist.apache.org/repos/dist/dev/cloudstack/4.5.1/ >> > >> > PGP release keys (signed using 0EE3D884): >> > https://dist.apache.org/repos/dist/release/cloudstack/KEYS >> > >> > Vote will be open for 72 hours. >> > >> > For sanity in tallying the vote, can PMC members please be sure to >> > indicate "(binding)" with their vote? >> > >> > [ ] +1 approve >> > [ ] +0 no opinion >> > [ ] -1 disapprove (and reason why) >> > >> > For convenience of testing, you may use the following repositories >> > and location to download systemvm templates: >> > >> > http://packages.shapeblue.com/cloudstack/testing/ >> > http://packages.shapeblue.com/systemvmtemplate/4.5/ >> > >> > Regards. >> Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> CloudStack Software Engineering<http://shapeblue.com/cloudstack-software-engineering/> CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infrastructure-support/> CloudStack Bootcamp Training Courses<http://shapeblue.com/cloudstack-training/> This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company registered by The Republic of South Africa and is traded under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
RE: [VOTE] Apache Cloudstack 4.5.1
I didn't report a bug yet. I don't know if it works at 4.5.0, but I know that it worked at 4.0 -- last stable relase I was able to test. I wish to troubleshoot VR to get more information about why its happening, but don't know where to start. Vadim. -Original Message- From: sebgoa [mailto:run...@gmail.com] Sent: Wednesday, May 06, 2015 10:49 AM To: dev@cloudstack.apache.org Subject: Re: [VOTE] Apache Cloudstack 4.5.1 On May 6, 2015, at 9:38 AM, Vadim Kimlaychuk wrote: > Hi, > > I am sorry for not being authorized to vote for release, Everyone can VOTE on a release, you don't need to be a committer. The entire community can vote and chime in on the VOTE threads and help test This is very important . > but it seems VPC is not working at 4.5.1. I have 4.5-RC20150407T1726 at > production and using VPC is very limited. I am not able to use 2 NICs from > different tiers at the same VM. Look for detatiled problem desctiption at > user list under subject "VPC usage scenario" > Did you report bugs ? > Regards, > > Vadim. > > -Original Message- > From: Geoff Higginbottom [mailto:geoff.higginbot...@shapeblue.com] > Sent: Wednesday, May 06, 2015 10:21 AM > To: dev@cloudstack.apache.org > Subject: Re: [VOTE] Apache Cloudstack 4.5.1 > > I¹m a -0 for now (testing still on going) > > I have upgraded a 4.3.1 Adv XenServer build, and a 4.4.2 Adv XenServer build. > In both cases the upgrade was successful, all System VMs and VRs upgraded > OK, however I was not able to create any new VRs or System VMs. > > We are still analysing the logs and this may well turn out to be a -1, > but it could simply be an issue with the system vm template etc hence > the -0 for now > > Still need to test a local storage build, and a Basic with Security Groups > build, in for a busy week! > > Regards > > Geoff Higginbottom > CTO / Cloud Architect > > D: +44 20 3603 0542 | S: +44 20 3603 0540 > | M: +447968161581 > > geoff.higginbot...@shapeblue.com | www.shapeblue.com > | Twitter:@cloudstackguru > <https://twitter.com/#!/cloudstackguru> > > ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS > > > > > > On 06/05/2015 05:57, "Marcus" wrote: > >> +1 (binding) >> On May 5, 2015 10:26 AM, "David Nalley" wrote: >> >>> Thanks for running with this Rohit. >>> >>> +1 (binding) >>> >>> On Mon, May 4, 2015 at 7:20 AM, Rohit Yadav wrote: >>>> Hi All, >>>> >>>> I've created a 4.5.1 release, with the following artifacts up for a >>> vote: >>>> >>>> Git Branch and Commit SH: >>>> >>> >>> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog; >>> h= >>> ref >>> s/heads/4.5 >>>> Commit: 0eb4eb23701f0c6fec8bd5461cd9aa9f92c9576d >>>> >>>> List of changes: >>>> >>> >>> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=blob_plai >>> n; >>> f=C >>> HANGES.md;hb=4.5 >>>> https://github.com/apache/cloudstack/commits/4.5-RC20150504T1217 >>>> >>>> Source release (checksums and signatures are available at the same >>>> location): >>>> https://dist.apache.org/repos/dist/dev/cloudstack/4.5.1/ >>>> >>>> PGP release keys (signed using 0EE3D884): >>>> https://dist.apache.org/repos/dist/release/cloudstack/KEYS >>>> >>>> Vote will be open for 72 hours. >>>> >>>> For sanity in tallying the vote, can PMC members please be sure to >>>> indicate "(binding)" with their vote? >>>> >>>> [ ] +1 approve >>>> [ ] +0 no opinion >>>> [ ] -1 disapprove (and reason why) >>>> >>>> For convenience of testing, you may use the following repositories >>>> and location to download systemvm templates: >>>> >>>> http://packages.shapeblue.com/cloudstack/testing/ >>>> http://packages.shapeblue.com/systemvmtemplate/4.5/ >>>> >>>> Regards. >>> > > Find out more about ShapeBlue and our range of CloudStack related > services > > IaaS Cloud Design & > Build<http://shapeblue.com/iaas-cloud-design-and-build//> > CSForge – rapid IaaS deployment > framework<http://shapeblue.com/csforge/> > CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/> > CloudStack Software > Engineering<http://sha
RE: [VOTE] Apache Cloudstack 4.5.1
Geoff, Thank you for explaination. Basically the idea behind that was to have (for instance) database tier and web-app tier. Web-apps-tier servers have to communicate with databases, but databases are closed for outside world. The easiest way is to have 2 NICs at web-tier VMs and route inside VM without need to send all the requests to VPC router. Don't know if it does any benefit in a term of "VR load". I do agree that isolation model of VPC is more strict and clean. Prevents from such "backdors" to happen. I just got wrong feeling, that such scenario is also supported, because it works unless I reboot. I also agree with your comments and will not consider this as an issue anymore. Thank you for detailed explaination - this is what I have been looking for. I have no issues for 4.5.1 to happen. Regards, Vadim. -Original Message- From: Daan Hoogland [mailto:daan.hoogl...@gmail.com] Sent: Wednesday, May 06, 2015 12:04 PM To: dev@cloudstack.apache.org Subject: Re: [VOTE] Apache Cloudstack 4.5.1 Geoff, Vadim, I think the concept of a vpc private gateway is for this purpose. Of course more then one road leads to Rome (sorry for the Dutchism) Op wo 6 mei 2015 om 11:01 schreef Geoff Higginbottom < geoff.higginbot...@shapeblue.com>: > Hi Vadim, > > My first question is why would you want to? > > The concept of a VPC is to isolate the VMs on the different Tiers and > use ACLs to pass only the traffic which needs to pass between the Tiers. > > However, I have just tested this on 4.4.2 (never tried it before) by > taking a VPC with two tiers with one VM on each, and then adding a NIC > to each VM on the other tier. > > It appears to work with the VMs both having NICs on each Tier, and > both getting DHCP info correctly, even after a reboot of VMs and VR. > > However the default route is not set correctly and is transposed for > each VM, with the default gateway being allocated on eth1 and not eth0. > > Now all that said, whilst CloudStack allows you to do this, in my > opinion it 'breaks' the VPC model as you are no longer isolating the > VMs on each Tier. > > If you really must interconnect the VMs on a VPC bypassing the ACLs > then consider adding a 2nd NIC to each VM linked to an isolated or > shared network. I have tested this in the past, and have just tested > again on > 4.4.2 and this works as expected, but why not just configure the ACLs > to allow the VMs to communicate over the required protocols etc. > > Whilst it looks the behaviour may have changed in 4.5.1, I do not see > this as a regression as I would consider it an unsupported > configuration in the first place. > > Regards > > Geoff Higginbottom > > D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 > > geoff.higginbot...@shapeblue.com > > -Original Message- > From: Vadim Kimlaychuk [mailto:vadim.kimlayc...@elion.ee] > Sent: 06 May 2015 09:09 > To: dev@cloudstack.apache.org > Subject: RE: [VOTE] Apache Cloudstack 4.5.1 > > I didn't report a bug yet. I don't know if it works at 4.5.0, but I know > that it worked at 4.0 -- last stable relase I was able to test. I wish to > troubleshoot VR to get more information about why its happening, but > don't know where to start. > > Vadim. > > -----Original Message- > From: sebgoa [mailto:run...@gmail.com] > Sent: Wednesday, May 06, 2015 10:49 AM > To: dev@cloudstack.apache.org > Subject: Re: [VOTE] Apache Cloudstack 4.5.1 > > > On May 6, 2015, at 9:38 AM, Vadim Kimlaychuk > > wrote: > > > Hi, > > > > I am sorry for not being authorized to vote for release, > > > Everyone can VOTE on a release, you don't need to be a committer. > The entire community can vote and chime in on the VOTE threads and > help test This is very important . > > > but it seems VPC is not working at 4.5.1. I have > > 4.5-RC20150407T1726 at > production and using VPC is very limited. I am not able to use 2 NICs > from different tiers at the same VM. Look for detatiled problem > desctiption at user list under subject "VPC usage scenario" > > > > Did you report bugs ? > > > Regards, > > > > Vadim. > > > > -Original Message- > > From: Geoff Higginbottom [mailto:geoff.higginbot...@shapeblue.com] > > Sent: Wednesday, May 06, 2015 10:21 AM > > To: dev@cloudstack.apache.org > > Subject: Re: [VOTE] Apache Cloudstack 4.5.1 > > > > I¹m a -0 for now (testing still on going) > > > > I have upgraded a 4.3.1 Adv XenServer build, and a 4.4.2 Adv > > XenServer > build. In both cases the upgrade was successful, all System VMs and &
[WWW] Cloudstack 4.5 repo for Ubuntu trusty Packages file = 0
Hello, There is a mistake in official 4.5.1 distribution. According to documentation update should be done from: deb http://cloudstack.apt-get.eu/ubuntu precise 4<http://cloudstack.apt-get.eu/ubuntu%20precise%204>.5 If you go there you’ll find that primary file has 0 length Packages 2015-04-30 12:23 0 Ubuntu users can’t update, because there is no packages specified. Shapeblue repo works good. Regards, Vadim
RE: [GitHub] cloudstack pull request: CLOUDSTACK-8231: fixed merge conflicts wi...
Rohit, I have merged my local branch with master and resolved conflicts. Pull request showed modifications that I have made precisely. But when I created the request it contains multiple files (not just those I have changed). Please review this. I think I have done something wrong again. Vadim. -Original Message- From: vadimkim [mailto:g...@git.apache.org] Sent: Tuesday, May 26, 2015 12:10 PM To: dev@cloudstack.apache.org Subject: [GitHub] cloudstack pull request: CLOUDSTACK-8231: fixed merge conflicts wi... GitHub user vadimkim opened a pull request: https://github.com/apache/cloudstack/pull/302 CLOUDSTACK-8231: fixed merge conflicts with previous patch We need to port this update to 4.5 branch as well. You can merge this pull request into a Git repository by running: $ git pull https://github.com/vadimkim/cloudstack master Alternatively you can review and apply these changes as the patch at: https://github.com/apache/cloudstack/pull/302.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #302 commit 7ee9b1042f35a2998217d973b5ee447ca68497fb Author: Vadim Kimlaychuk Date: 2015-05-20T19:08:29Z CLOUDSTACK-8231: Fixed UI empty drop-down list for LB rules commit a064911d440170185b69001deb28b8b2173b4d05 Author: Vadim Kimlaychuk Date: 2015-05-21T07:18:41Z CLOUDSTACK-8231: fixed call to getLbAlgorithms() function in order to merge results from static and dynamic data commit 7abf21f9c8a80dd9bf42c564f9eb56f0a6f9d7cf Author: Vadim Kimlaychuk Date: 2015-05-21T07:44:20Z CLOUDSTACK-8231: reverted 7ee9b1042 commit logic commit ff31d1f20bc2ef05c82ab10556ee8cf274a39a84 Author: Vadim Kimlaychuk Date: 2015-05-26T09:06:27Z Merge remote-tracking branch 'upstream/master' Conflicts: ui/scripts/network.js --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastruct...@apache.org or file a JIRA ticket with INFRA. ---
RE: refresh browser - logged out from ACS ?
Is it possible to fix? It seems such a behaviour was always be like this. Vadim. -Original Message- From: Andrija Panic [mailto:andrija.pa...@gmail.com] Sent: Wednesday, May 27, 2015 12:17 PM To: dev@cloudstack.apache.org Subject: Re: refresh browser - logged out from ACS ? openign a new windows/tab with same address/URL also break things... On 27 May 2015 at 11:11, Stephen Turner wrote: > Agreed, I thought it was on opening a new window (maybe a new tab > too?) rather than refresh. But maybe refresh broke too as a side effect. > > -- > Stephen Turner > > > -Original Message- > From: ilya [mailto:ilya.mailing.li...@gmail.com] > Sent: 27 May 2015 04:28 > To: dev@cloudstack.apache.org > Subject: Re: refresh browser - logged out from ACS ? > > But it was not refresh - to best of my recollection.. > > On 5/26/15 8:27 PM, ilya wrote: > > I vaguely recall Rohit mentioned it was some sort of security fix > > that was causing this side effect due to the way sessionids were handled.. > > > > On 5/26/15 8:15 AM, Andrija Panic wrote: > >> Thx Rafael, as usuall :) > >> > >> I remember there was some thread on this topic, but cant really > >> find it... > >> > >> On 26 May 2015 at 17:14, Rafael Fonseca wrote: > >> > >>> Hi Andrija, > >>> > >>> I noticed the same is also happening on the 4.6.0-SNAPSHOT .. it's > >>> a bit annoying. > >>> > >>> I'll have a closer look later today if i can find the time for it > >>> :) > >>> > >>> > >>> On Tue, May 26, 2015 at 4:11 PM, Andrija Panic > >>> > >>> wrote: > >>> > >>>> Hi guys, > >>>> > >>>> just wondering - when I refresh browser/UI I get logged out of > >>>> ACS > >>>> - > >>> 4.4.3 > >>>> (testing with 4.5.1 in few minutes...). > >>>> > >>>> I remember there was some thread on this, but can't really find > >>>> it > >>> anywhere > >>>> This behaviour is not present in 4.3 and prior AFAIK. > >>>> > >>>> Any tips ? > >>>> -- > >>>> > >>>> Andrija Panić > >>>> > >> > >> > > > > -- Andrija Panić
VHD root disks and VM start-up process at XenServer
Hello friends, I would like to understand how CloudStack creates/runs VM on XenServer host? What source files contain process of VM start-up? I want to repeat this process manually on dedicated host, but it seems XAPI does not work with VHD disk images. I can’t start VM from existing VHD file manually. Converting it to XVA is not the case I suppose. I have tried to create empty VM from XenServer template and replace root disk by my VHD file, but VM fails to start-up. Who can shed the light on this process? Thanks, Vadim Kimlaychuk
Re: Doubt about xen-pv-drv-iso
On 2015-10-08 10:52, Vadim Kimlaychuk wrote: Hello Rafael, I have done it : ACS 4.5.2, XenServer 6.5 SP1 -- no problems with that. I can see .msi and .exe programs in root and Linux folder. Vadim. On 2015-10-08 05:17, Rafael Weingärtner wrote: Hi folks, I was debugging a problem today, and I hit something kind of weird. Can somebody test something to me? Can someone out there that has an ACS environment with Xenserver hosts try to plug the xen-pv-drv-iso into an instance and try to use it? I mean, try to mount and list the contents of that ISO. Did that work for you?
Re: Service Offering documentation
Dear Ron, I suggest you to read this document: https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs. I have tested pass-through mode with XenServer 6.2 and can give probably a bit more information if you need. The reference document is good indeed, so you probably do not need my comments :) Regards, Vadim. On 2015-10-26 22:47, Ron Wheeler wrote: The GPU section on page http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html [1] seems to be lacking some information (at least as far as I can tell). 1) What does the GPU do? It says to select a card that I want to use. No hint about the basis on which I should make the selection or if there are any restrictions on the choice (based on hardware?) 2) It mentions support for 2 NVIDIA cards and says that if you want to use another card "make the createServiceOffering API call". How is this done on a UI screen? 3) The Type selection is worded in an odd way with 3 selections explicitly named and a "so on" thrown in. Then it goes on to talk about a passthrough vGPU type in a separate paragraph. Perhaps there should be links to external web sites to clarify the definitions of these cards and types. If someone can explain what this section actually means, I will try to write it in a clearer fashion. Ron Links: -- [1] http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html
Re: Service Offering documentation
Dear Ron, I suggest you to read this document: https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs [1]. I have tested pass-through mode with XenServer 6.2 and can give probably a bit more information if you need. The reference document is good indeed, so you probably do not need my comments :) Regards, Vadim. On 2015-10-26 22:47, Ron Wheeler wrote: The GPU section on page http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html [2] [1 [2]] seems to be lacking some information (at least as far as I can tell). 1) What does the GPU do? It says to select a card that I want to use. No hint about the basis on which I should make the selection or if there are any restrictions on the choice (based on hardware?) 2) It mentions support for 2 NVIDIA cards and says that if you want to use another card "make the createServiceOffering API call". How is this done on a UI screen? 3) The Type selection is worded in an odd way with 3 selections explicitly named and a "so on" thrown in. Then it goes on to talk about a passthrough vGPU type in a separate paragraph. Perhaps there should be links to external web sites to clarify the definitions of these cards and types. If someone can explain what this section actually means, I will try to write it in a clearer fashion. Ron Links: ------ [1] http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html [2] Links: -- [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs [2] http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html
Re: Service Offering documentation - GPU
New vGPU types K160Q, K180Q, K280Q were added to UI at 4.5 version, but this is already reflected in the cwiki article. Vadim. On 2015-10-27 14:50, Ron Wheeler wrote: Looks very complete and seems to answer many of my questions (and probably some that I have not thought of yet). This is in the 4.4 Design docs but did not make it into the 4.5 Design docs section. Should it be in 4.5 as well? Ron On 27/10/2015 3:53 AM, Vadim Kimlaychuk wrote: Dear Ron, I suggest you to read this document: https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs [1]. I have tested pass-through mode with XenServer 6.2 and can give probably a bit more information if you need. The reference document is good indeed, so you probably do not need my comments :) Regards, Vadim. On 2015-10-26 22:47, Ron Wheeler wrote: The GPU section on page http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html [2] [1 [2]] seems to be lacking some information (at least as far as I can tell). 1) What does the GPU do? It says to select a card that I want to use. No hint about the basis on which I should make the selection or if there are any restrictions on the choice (based on hardware?) 2) It mentions support for 2 NVIDIA cards and says that if you want to use another card "make the createServiceOffering API call". How is this done on a UI screen? 3) The Type selection is worded in an odd way with 3 selections explicitly named and a "so on" thrown in. Then it goes on to talk about a passthrough vGPU type in a separate paragraph. Perhaps there should be links to external web sites to clarify the definitions of these cards and types. If someone can explain what this section actually means, I will try to write it in a clearer fashion. Ron Links: ------ [1] http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html [2] Links: -- [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs [2] http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html
Re: Service Offering documentation - GPU
I don't know what is a best way to present such kind of information. From one side each version should contain its own copy of the chapter, but this is probably hard to maintain. From the other side - having just one wiki document with history of versions is probably simpler. Vadim. On 2015-10-27 15:29, Ron Wheeler wrote: My question was whether this page needs to be in the 4.5 Design docs. Currently the new GPU types are in the 4.4 Design Docs which you seem to be saying is wrong (K160Q, K180Q, K280Q were added to 4.5 not 4.4) It looks like someone updated the 4.4 docs rather than adding the page to the 4.5 doc set. If I am not mistaken, the current 4.4 page should be copied to 4.5 and then the changes made to the 4.4 page should be reverted to an earlier version where the new GPUs are not included. Ron On 27/10/2015 9:18 AM, Vadim Kimlaychuk wrote: New vGPU types K160Q, K180Q, K280Q were added to UI at 4.5 version, but this is already reflected in the cwiki article. Vadim. On 2015-10-27 14:50, Ron Wheeler wrote: Looks very complete and seems to answer many of my questions (and probably some that I have not thought of yet). This is in the 4.4 Design docs but did not make it into the 4.5 Design docs section. Should it be in 4.5 as well? Ron On 27/10/2015 3:53 AM, Vadim Kimlaychuk wrote: Dear Ron, I suggest you to read this document: https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs [1] [1 [1]]. I have tested pass-through mode with XenServer 6.2 and can give probably a bit more information if you need. The reference document is good indeed, so you probably do not need my comments :) Regards, Vadim. On 2015-10-26 22:47, Ron Wheeler wrote: The GPU section on page http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html [2] [2 [2]] [1 [2]] seems to be lacking some information (at least as far as I can tell). 1) What does the GPU do? It says to select a card that I want to use. No hint about the basis on which I should make the selection or if there are any restrictions on the choice (based on hardware?) 2) It mentions support for 2 NVIDIA cards and says that if you want to use another card "make the createServiceOffering API call". How is this done on a UI screen? 3) The Type selection is worded in an odd way with 3 selections explicitly named and a "so on" thrown in. Then it goes on to talk about a passthrough vGPU type in a separate paragraph. Perhaps there should be links to external web sites to clarify the definitions of these cards and types. If someone can explain what this section actually means, I will try to write it in a clearer fashion. Ron Links: ------ [1] http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html [2] [2 [2]] Links: ------ [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs [1] [2] http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html [2] Links: -- [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs [2] http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.5/service_offerings.html
Re: UI customization
From my opinion better way is to write a plugin:
http://docs.cloudstack.apache.org/en/latest/plugins.html#how-to-write-a-plugin-overview
and follow UI customization guide:
http://support.citrix.com/servlet/KbServlet/download/38315-102-714564/CloudPlatform_4.5_User_Interface_Customization.pdf
Doing direct changes to cloudStack.js that are not contributed back to
community is guaranteed way to have problems after updates. You will
have to merge your code with mainstream all the time.
Another way is to implement your own interface based on CS REST API.
Doing that for just 1 button is overkill for sure, but such changes will
never end as soon as you start to customize. Think about it. The easiest
way is not always the best one.
Vadim.
On 2015-11-09 13:58, Kshitij Kansal wrote:
Hi,
You can find the scripts at the location
"client/target/generated-webapp/scripts/". Make changes to
cloudstack.js
here.
*Note: *First remove the corresponding gz file(in your case
cloudstack.js.gz) otherwise the changes won't reflect.
*The changes in generated-webapps are not saved and tracked in git. So
make
sure to copy your changes to actual scripts (in ui/scripts) before
finally
rebuilding the project. *The changes made this way are directly
reflected
by refreshing the page.
PS: Not sure if its the correct way to develop but it works :). Once
again,
make sure to copy your changes back to correct scripts before building
the
project.
Regards,
Kshitij
On Mon, Nov 9, 2015 at 12:34 PM, Wei ZHOU
wrote:
I guess you worked on old version before.
in 4.6, something changed. you might compress cloudStack.js to get
cloudStack.js.gz as well.
2015-11-08 15:05 GMT+01:00 Илья Толстихин :
Hi all,
Could please help with the process of UI customization:
I have CloudStack 4.6.0 built from the source.
I want to add a custom button to the WebUI menu.
In file ui/scripts/cloudStack.js I added my button into sections array
*sections: {*
* /***
* * Dashboard*
* */*
* dashboard: {},*
* instances: {},*
* affinityGroups: {},*
* storage: {},*
* network: {},*
* templates: {},*
* events: {},*
* projects: {},*
* accounts: {},*
* domains: {}, //domain-admin and root-admin only*
* regions: {}, //root-admin only*
* system: {}, //root-admin only*
* 'global-settings': {}, //root-admin only*
* configuration: {}, //root-admin only*
* plugins: {},*
* test: {*
* title: 'TestSection',*
* id: 'TestSection',*
* show: function(args){*
* var div = document.createElement('div');*
* div.innerHTML = "Test section";*
* return div;*
* }*
* }*
* }*
and in sectionPreFilter array
*sectionPreFilter: function(args) {*
* var sections = [];*
* if (isAdmin()) {*
* sections = ["dashboard", "instances", "storage",
"network", "templates", "accounts", "domains", "events", "system",
"global-settings", "configuration", "projects", "regions",
"affinityGroups", "test"];*
After building the project, the button was added to the menu, but when
I
edit cloudStack.js and restart jetty UI doesn't change, any changes are
applied only after the full project rebuild with command mvn
-Pdeveloper,systemvm -DskipTests clean install.
Jetty version 6.1.26
How to apply changes without rebuilding project?
And is it possible to apply it without restart Jetty?
Re: What SDN are you using?
I don't know if applicable, but I had very good impression from VyOS (http://vyos.net/wiki/Main_Page). Vadim. On 2015-11-29 20:56, Nux! wrote: Hello, So besides the folks using Nicira, can anyone recommend any other SDN thing or should I stay with v(x)lans? I'm kind of removed from this side of things since my deployments tend to be with Security Grups in a single or few VLANs, any suggestions welcome, preferably free/foss. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro [1] Links: -- [1] http://www.nux.ro
Re: What SDN are you using?
We have been using it at our DEV cloud around year ago. Now we are out or resources so dev- environment is destroyed. Vadim. On 2015-11-30 12:24, Frank Louwers wrote: Hi Vadim, Are you using VyOS in a Cloudstack environment? On 30 Nov 2015, at 11:20, Vadim Kimlaychuk wrote: I don't know if applicable, but I had very good impression from VyOS (http://vyos.net/wiki/Main_Page [1]). Vadim. On 2015-11-29 20:56, Nux! wrote: Hello, So besides the folks using Nicira, can anyone recommend any other SDN thing or should I stay with v(x)lans? I'm kind of removed from this side of things since my deployments tend to be with Security Grups in a single or few VLANs, any suggestions welcome, preferably free/foss. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro [2] [1 [2]] Links: -- [1] http://www.nux.ro [2] Links: -- [1] http://vyos.net/wiki/Main_Page [2] http://www.nux.ro
Re: What SDN are you using?
We mostly use it as external (to Cloudstack) intelligent switch/router, but also installed it as guest VM within cloud to provide customized SDN functionality. Vadim. On 2015-11-30 13:10, Nux! wrote: Hello Vadim, How exactly are you integrating VyOS in Cloudstack? We're also using it internally, but not sure how it would help us, especially with regards to SDN. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro [1] - Original Message - From: "Vadim Kimlaychuk" To: dev@cloudstack.apache.org Cc: us...@cloudstack.apache.org, "Nux!" Sent: Monday, 30 November, 2015 11:09:18 Subject: Re: What SDN are you using? We have been using it at our DEV cloud around year ago. Now we are out or resources so dev- environment is destroyed. Vadim. On 2015-11-30 12:24, Frank Louwers wrote: Hi Vadim, Are you using VyOS in a Cloudstack environment? On 30 Nov 2015, at 11:20, Vadim Kimlaychuk wrote: I don't know if applicable, but I had very good impression from VyOS (http://vyos.net/wiki/Main_Page [2] [1 [2]]). Vadim. On 2015-11-29 20:56, Nux! wrote: Hello, So besides the folks using Nicira, can anyone recommend any other SDN thing or should I stay with v(x)lans? I'm kind of removed from this side of things since my deployments tend to be with Security Grups in a single or few VLANs, any suggestions welcome, preferably free/foss. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro [1] [2 [1]] [1 [2]] Links: -- [1] http://www.nux.ro [1] [2 [1]] Links: -- [1] http://vyos.net/wiki/Main_Page [2] [2] http://www.nux.ro [1] Links: -- [1] http://www.nux.ro [2] http://vyos.net/wiki/Main_Page
Re: Lists admin, please unsubscribe/remove andrewlore...@gmx.com
I see them as well. When posting. Sebastian, may be you have good spam-filter and they went into junk automatically? :) Vadim. On 2015-12-09 11:43, Sebastien Goasguen wrote: That's weird, I am not seeing any bounced messages. @David, might be able to do it Otherwise @Nux can you file a JIRA with Infra ? thanks On Dec 8, 2015, at 8:48 PM, Nux! wrote: Hi, Whoever is list admin, please remove andrewlore...@gmx.com from the user/dev MLs, his inbox has reached quota and it's generating bouncebacks. This has been going on for a while, at least a few weeks. Thanks! -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro [1] Links: -- [1] http://www.nux.ro
Re: Feedback of my Phd work in Cloudstack Project
Do I understand correctly that purpose of this work is to find tightly coupled classes automatically in order to inverse dependency later on? Vadim. On 2015-12-10 01:31, Igor Wiese wrote: Hi, Cloudstack Community. My name is Igor Wiese, phd Student from Brazil. In my research, I am investigating two important questions: What makes two files change together? Can we predict when they are going to co-change again? I've tried to investigate this question on the Cloudstack project. I've collected data from issue reports, discussions and commits and using some machine learning techniques to build a prediction model. I collected a total of 141 commits in which a pair of files changed together and could correctly predict 60% commits. These were the most useful information for predicting co-changes of files: - sum of number of lines of code added, modified and removed, - number of words used to describe and discuss the issues, - number of comments in each issue, - median value of closeness, a social network measure obtained from issue comments, and - median value of constraint, a social network measure obtained from issue comments. To illustrate, consider the following example from our analysis. For release 4.4, the files "cloud/hypervisor/XenServerGuru.java" and "cloud/hypervisor/guru/VMwareGuru.java " changed together in 3 commits. In another 2 commits, only the first file changed, but not the second. Collecting contextual information for each commit made to first file in the previous release (4.3), we were able to predict all 3 commits in which both files changed together in release 4.4, and we only issued 0 false positives. For this pair of files, the most important contextual information was the number of lines of code added, removed and modified in each commit,the number of comments in each issue, and social network measures (closeness, density, constraint, hierarchy) obtained from issue comments. - Do these results surprise you? Can you think in any explanation for the results? - Do you think that our rate of prediction is good enough to be used for building tool support for the software community? - Do you have any suggestion on what can be done to improve the change recommendation? You can visit our webpage to inspect the results in details: http://flosscoach.com/index.php/17-cochanges/67-cloudstack [1] All the best, Igor Wiese Phd Candidate Links: -- [1] http://flosscoach.com/index.php/17-cochanges/67-cloudstack
CS 4.5.2: all hosts reboot after 3 days at production
Hello all, I have experienced accidental cluster reboot 3 days after update to CS 4.5.2. Cluster is XenServer 6.5 with SP1. Reboot has been started from slave node and then - master. Syslog on slave shows only this: Sep 6 00:47:05 xcp2 last message repeated 3 times Sep 6 00:47:15 xcp2 xenstored: D12 write data/meminfo_free 713732 Sep 6 00:47:15 xcp2 xenstored: A1564203 w event /local/domain/12/data/meminfo_free /local/domain/12/data/meminfo_free Sep 6 00:47:15 xcp2 xenstored: D12 write data/updated Sun Sep 6 00:48:55 EEST 2015 Sep 6 00:47:15 xcp2 xenstored: A6 w event /local/domain/12/data/updated /local/domain/12/data/updated Sep 6 00:47:15 xcp2 xenstored: A10 w event /local/domain/12/data/updated /local/domain/12/data/updated Sep 6 00:47:26 xcp2 dhclient: DHCPREQUEST on xenbr0 to 172.17.0.1 port 67 (xid=0x304ae9dc) Sep 6 00:47:27 xcp2 xapi: [ info|xcp2|462044 INET 0.0.0.0:80|dispatch:host.call_plugin D:7593b578fada|taskhelper] task host.call_plugin R:ddd3cc399f86 forwarded (trackid=407f6adaa118a34f19eb1e29cd68a0e8) Sep 6 00:47:36 xcp2 dhclient: DHCPREQUEST on xenbr0 to 172.17.0.1 port 67 (xid=0x304ae9dc) Sep 6 00:48:18 xcp2 last message repeated 4 times Sep 6 00:48:25 xcp2 xenstored: D1 write data/meminfo_free 1740496 Sep 6 00:48:25 xcp2 xenstored: A1564203 w event /local/domain/1/data/meminfo_free /local/domain/1/data/meminfo_free Sep 6 00:48:25 xcp2 xenstored: D1 write data/updated Sat Sep 5 21:50:07 EEST 2015 Sep 6 00:48:25 xcp2 xenstored: A6 w event /local/domain/1/data/updated /local/domain/1/data/updated Sep 6 00:48:25 xcp2 xenstored: A10 w event /local/domain/1/data/updated /local/domain/1/data/updated Sep 6 00:48:26 xcp2 dhclient: DHCPREQUEST on xenbr0 to 172.17.0.1 port 67 (xid=0x304ae9dc) Sep 6 00:48:27 xcp2 xapi: [ info|xcp2|462044 INET 0.0.0.0:80|dispatch:host.call_plugin D:f2c8987bc0ff|taskhelper] task host.call_plugin R:b62d2d4f58eb forwarded (trackid=e3d4ea00c96194830a7dbbfc35563a3c) Sep 6 00:48:38 xcp2 dhclient: DHCPREQUEST on xenbr0 to 172.17.0.1 port 67 (xid=0x304ae9dc) Sep 06 00:48:48 xcp2 syslogd 1.4.1: restart. Sep 6 00:48:48 xcp2 kernel: klogd 1.4.1, log source = /proc/kmsg started. Sep 6 00:48:48 xcp2 kernel: [0.00] Initializing cgroup subsys cpuset Sep 6 00:48:48 xcp2 kernel: [0.00] Initializing cgroup subsys cpu Sep 6 00:48:48 xcp2 kernel: [0.00] Initializing cgroup subsys cpuacct Sep 6 00:48:48 xcp2 kernel: [0.00] Linux version 3.10.0+2 Can anyone help with diagnostics ? Thank you, Vadim.
Re: Dynamic Scalable Template issue
Todd, Have you tried to do the following manual tests on the cluster where you have problem: 1. Dynamically scalable with CentOS ? 2. Dynamically scalable with Windows ? What do they show as available RAM? Regards, On 2015-09-08 19:44, Todd Pigram wrote: Vadium, After installing XS62ESP1028 via CLI (no reboot on hosts yet) and building an Centos65 instance w/o 'Dynamic Scalable' option checked, it showed right in XenCenter. I installed the new tools from (XS62ESP1028) and still good. I created a template from this instance. Deployed said template, and the memory is still good in XenCenter. I tested on a Windows VM and it is the same with the new tools, however, as this particular tenant bypasses the virtual router, I have to reboot twice and reset networking as the new XenTools reset the networking stack. Todd Pigram http://about.me/ToddPigram [1] www.linkedin.com/in/toddpigram/ [2] @pigram86 on twitter https://plus.google.com/+ToddPigram86 [3] Mobile - 216-224-5769 PGP Public Key [4] On Sep 6, 2015, at 4:57 AM, Vadim Kimlaychuk wrote: Todd, Can you try Linux template with same dynamic scale option on the same pool? I wonder if there is a problem with Windows or any guest OS. Regards, Vadim. On 2015-09-05 21:04, Todd Pigram wrote: Vadium That makes sense. I will see if I can replicate the issue in a lab. But given the holiday weekend, might not be until next week On Saturday, September 5, 2015, Vadim Kimlaychuk wrote: Todd, I have seeing similar problem with Xen 4.1 (not XenServer). Linux guests were able to see (and use) entire host resources on any guest VM. That was a bug of configuration. If you think about what could be different after CS update - it could be VM registration procedure. Still guest VM should not be able to see static max. Your XenCenter shows that effective dynamic VM memory size is 8Gb while maximium is 32Gb. So CS configured VM guest correctly. This is problem of hypervisor <-> guest VM communitcation. That is why I asked you to try to register VM manually. I believe you will have the same result. Than means your server pool of XS62ESP1027 is broken. 3 other pools are not. I see no reason to update to 4.5.1, because I think this is not the problem of CS, but particularly this XenServer pool + this type of Windows guest (if other templates with dynamic offer are good). Vadim. On 2015-09-05 14:45, Todd Pigram wrote: Vadim I have 3 other pools (1 XS6.2sp1 and 2x xs65sp1) I have no issue with these. Based on the Design doc, what i was experiencing is by design. Ok I will turn it off. But now my question is, why on 4.3 I didn't have this issue but after installing 4.3.0.2 it changed. Was 4.3 broken or is 4.3.0.2? Will upgrading to CCP 4.5.1 will be better? If this is truely by design, I will not be able to use dynamic scalable for my windows instances On Saturday, September 5, 2015, Vadim Kimlaychuk wrote: Todd, You may try to create VM at XenServer without CloudStack just using XE tool (or XenCenter). If your manually created VM with static max <> dynamic max will be OK, then there is a problem with Cloudstack. Vadim. On 2015-09-04 21:51, Todd Pigram wrote: Latest as of XS62ESP1027. I know XS62ESP1028 comes with new XenTools. On Friday, September 4, 2015, Vadim Kimlaychuk wrote: I am afraid this issue has nothing to do with Cloudstack. If VM "sees" maximum memory size available instead of effective -- this is problem of hypervisor and/or guest utilities. Do you have guest utilities that come with XenServer version or older in your template? Vadim. On 2015-09-04 19:34, Todd Pigram wrote: Ok. After rebooting the instance still no change after disabling globally. I modified all my templates to remove 'Dynamic Scalable', then I have to shutdown every instance and unselect 'Dynamic Scalable', then restart for it to be correct. This may need to be looked at closer for a Windows/XenDesktop(XenApp) environment as MS SQL will consume all the RAM windows sees. My other question is why CCP 4.3 (which is certified for Citrix Ready for IaaS for XD) didn't have this issue until I upgraded to 4.3.0.2 in July. This feature was released in 4.2. Thanks for all the help. Todd Pigram http://about.me/ToddPigram [1] [1] [1] [1] [1 [1]] <http://about.me/ToddPigram [1] [1] [1] [1 [1]] [5]> www.linkedin.com/in/toddpigram/ [2] [2] [2] [2] [2 [2]] < http://www.linkedin.com/in/toddpigram/ [2] [2] [2] [2] [2 [2]]> @pigram86 on twitter https://plus.google.com/+ToddPigram86 [3] [3] [3] [3] [3 [3]] < https://plus.google.com/+ToddPigram86 [3] [3] [3] [3] [3 [3]]> Mobile - 216-224-5769 PGP Public Key < http://pgp.mit.edu/pks/lookup?op=get&search=0x96B7B0F0C55933BB [4] [4] [4] [4] [4 [5]]> On Sep 4, 2015, at 12:04 PM, Todd Pigram wrote: Thanks. Just funny that on CCP 4.3 it wasn't an issue and only after upgrading to 4.3.0
