RE: [DISCUSS] Pluggable VM snapshot related operations?

2013-10-08 Thread Edison Su
> -Original Message- > From: Darren Shepherd [mailto:darren.s.sheph...@gmail.com] > Sent: Tuesday, October 08, 2013 2:54 PM > To: dev@cloudstack.apache.org > Subject: Re: [DISCUSS] Pluggable VM snapshot related operations? > > A hypervisor snapshot will snapshot memory also. So determin

RE: [New Feature FS] SSL Offload Support for Cloudstack

2013-10-08 Thread Edison Su
There is command in ACS, UploadCustomCertificateCmd, which can receive ssl cert, key can chain as input. Maybe can share some code? > -Original Message- > From: Darren Shepherd [mailto:darren.s.sheph...@gmail.com] > Sent: Tuesday, October 08, 2013 1:54 PM > To: dev@cloudstack.apache.org >

Re: [DISCUSS] make commands.properties the exception, not the rule

2013-10-08 Thread Alena Prokharchyk
On 10/8/13 3:23 PM, "Darren Shepherd" wrote: >I would like to largely remove commands.properties. I think most API >commands naturally have a default ACL that should be applied. I think >it makes sense to add to the @APICommand flags for user, domain, >admin. Then, as an override mechanism, pe

RE: [DISCUSS] make commands.properties the exception, not the rule

2013-10-08 Thread Prachi Damle
I think commands.properties is not just providing ACL on the API - but it also serves as a whitelist of APIs available on the deployment. It can be a one-step configuration option to disable certain functionality. Prachi -Original Message- From: Darren Shepherd [mailto:darren.s.sheph..

Re: Typo in KVM docs

2013-10-08 Thread Travis Graham
That's what I get for not fact checking. Dagnabbit. On Tuesday, October 8, 2013, Francois Gaudreault wrote: > Ok great, I wasn't sure since Travis kinda made the same typo like the > docs ;P > > Thanks! > > Francois > > On 10/8/2013, 4:27 PM, Mike Tutkowski wrote: > >> We decided it is 16509 (whi

[DISCUSS] listAll and recursive parameters for BaseListDomainResourceCmd should have default value as TRUE

2013-10-08 Thread Min Chen
Hi there, In working with RBAC design, I am really puzzled by the two query parameter "listAll" and "recursive" for all BaseListDomainResourceCmd. @Parameter(name = ApiConstants.LIST_ALL, type = CommandType.BOOLEAN, description = "If set to false, " + "list only resources belo

Re: [DISCUSS] listAll and recursive parameters for BaseListDomainResourceCmd should have default value as TRUE

2013-10-08 Thread Alena Prokharchyk
On 10/8/13 4:28 PM, "Min Chen" wrote: >Hi there, > >In working with RBAC design, I am really puzzled by the two query >parameter "listAll" and "recursive" for all BaseListDomainResourceCmd. > > >@Parameter(name = ApiConstants.LIST_ALL, type = CommandType.BOOLEAN, >description = "If set to fal

Re: [New Feature FS] SSL Offload Support for Cloudstack

2013-10-08 Thread Syed Ahmed
Thanks Edison for the reply. I see that there is already an implementation of KeystoreManager which does certificate validation and saves it in the keystore table. Also, the API (UploadCustomCertificate) is only callable from admin. I could add functionality to this class for handling certif

Review Request 14549: Rename net.juniper.contrail to org.apache.cloudstack.network.contrail

2013-10-08 Thread Pedro Marques
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/14549/ --- Review request for cloudstack. Repository: cloudstack-git Description ---

questions about registerIso API and updateIsoPermissions API

2013-10-08 Thread Jessica Wang
Hi, I have questions about registerIso API and updateIsoPermissions API. (1) A normal user is allowed to specify isextractable property when registering an ISO (through registerIso API), but NOT allowed to update isextractable property when updating an ISO (through updateIsoPermissions API). Is

Re: questions about registerIso API and updateIsoPermissions API

2013-10-08 Thread Alena Prokharchyk
On 10/8/13 5:10 PM, "Jessica Wang" wrote: >Hi, > >I have questions about registerIso API and updateIsoPermissions API. > >(1) A normal user is allowed to specify isextractable property when >registering an ISO (through registerIso API), > >but NOT allowed to update isextractable property when u

Re: questions about registerIso API and updateIsoPermissions API

2013-10-08 Thread Nitin Mehta
Answers inline. From: Jessica Wang mailto:jessica.w...@citrix.com>> Date: Tuesday 8 October 2013 5:10 PM To: "mailto:dev@cloudstack.apache.org>>" mailto:dev@cloudstack.apache.org>> Cc: Alena Prokharchyk mailto:alena.prokharc...@citrix.com>>, Nitin Mehta mailto:nitin.me...@citrix.com>>, Shweta A

Re: Latest Master DB issue

2013-10-08 Thread Kelven Yang
The problem seems to me is whether or not a background job that touches with database respects the bootstrap initialization order. As of VmwareContextPool itself, its background job does something fully within its own territory (no database, no reference outside). and vmware-base package was origin

Re: Contrail plugin

2013-10-08 Thread Pedro Roque Marques
Darren, Using ActionEvents is not desirable for the plugin either... today CloudStack lacks the ability for a component/plugin to associate itself to the life-cycle of an object. It would be ideal if there was a generic way to accomplish that... The contrail plugin wants to know about project cre

Re: [DISCUSS] make commands.properties the exception, not the rule

2013-10-08 Thread SuichII, Christopher
Maybe we could consider switching from a whitelist to a blacklist, then. A whitelist is certainly easier in terms of a one-step configuration, but a blacklist would allow for much easier plugin development, installation and removal. Perhaps we could find write a script that generates the complet

Re: [DISCUSS] listAll and recursive parameters for BaseListDomainResourceCmd should have default value as TRUE

2013-10-08 Thread Min Chen
Thanks Alena for the clarification. If you try ListVMsCmd as a domain admin, if I pass listAll=false, what should be the expected behavior? Should he be able to see VMs under his domain but not owned by him? The current CloudStack behavior will show all VMs under his domain. This seems contradicto

Re: [DISCUSS] listAll and recursive parameters for BaseListDomainResourceCmd should have default value as TRUE

2013-10-08 Thread Alena Prokharchyk
On 10/8/13 5:48 PM, "Min Chen" wrote: >Thanks Alena for the clarification. > >If you try ListVMsCmd as a domain admin, if I pass listAll=false, what >should be the expected behavior? The same as if you don't pass anything. The domain admin will see his own resources (the ones that belong to his

Re: [DISCUSS] listAll and recursive parameters for BaseListDomainResourceCmd should have default value as TRUE

2013-10-08 Thread Min Chen
Just simple listVMsCmd with page information, passing listAll=true or not passing listAll returns the same set of data. Thanks -min On 10/8/13 5:55 PM, "Alena Prokharchyk" wrote: >On 10/8/13 5:48 PM, "Min Chen" wrote: > >>Thanks Alena for the clarification. >> >>If you try ListVMsCmd as a dom

Re: [DISCUSS] listAll and recursive parameters for BaseListDomainResourceCmd should have default value as TRUE

2013-10-08 Thread Alena Prokharchyk
This is a bug. =Alena. On 10/8/13 6:12 PM, "Min Chen" wrote: >Just simple listVMsCmd with page information, passing listAll=true or not >passing listAll returns the same set of data. > > >Thanks >-min > >On 10/8/13 5:55 PM, "Alena Prokharchyk" >wrote: > >>On 10/8/13 5:48 PM, "Min Chen" wrote:

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Mike Tutkowski
Doh! I didn't restart the necessary service after exporting my NFS share. The system VMs come up now; however, SSVM has a dash (-) for its Agent State and the CS MS console keeps printing out the following: INFO [o.a.c.s.e.DefaultEndPointSelector] (StatsCollector-3:ctx-018adc41) No running ssvm

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Marcus Sorensen
You may just have to wait a bit. That means the VMS are started but the services aren't up. Usually takes 5-10 min to get both up in my fusion vm. If that doesn't get better you may have to log into the system VMS and see what's going on. On Oct 8, 2013 7:25 PM, "Mike Tutkowski" wrote: > Doh! I d

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Mike Tutkowski
Looks like I'll have to dig up that doc on debugging SSVM...it's been about 30 mins since the VMs came up. On Tue, Oct 8, 2013 at 7:29 PM, Marcus Sorensen wrote: > You may just have to wait a bit. That means the VMS are started but the > services aren't up. Usually takes 5-10 min to get both up

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Marcus Sorensen
You could start by trying to ping them from mgmt server, or trying to VNC to them if the OS isn't up. I'm assuming you prepped a current system vm template (maybe you're even reusing a secondary storage). If you can ping their 169.254 addresses, you can "cloudstack-ssh 169.254.x.x" as root on the k

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Mike Tutkowski
CS MS can ping the SSVM's public IP address. SSVM can ping CS MS. I think we had a nice debug document for SSVM mentioned on a CS e-mail...I'll try to find it. On Tue, Oct 8, 2013 at 8:29 PM, Marcus Sorensen wrote: > You could start by trying to ping them from mgmt server, or trying to VNC >

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Mike Tutkowski
Found it. As an FYI, this is the doc I was referring to: https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting On Tue, Oct 8, 2013 at 9:04 PM, Mike Tutkowski wrote: > CS MS can ping the SSVM's public IP address. > > SSVM can ping CS MS.

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Travis Graham
Might be this one: * https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM,+templates,+Secondary+storage+troubleshooting Travis On Oct 8, 2013, at 11:04 PM, Mike Tutkowski wrote: > CS MS can ping the SSVM's public IP address. > > SSVM can ping CS MS. > > I think we had a nice debug d

RE: System VM template caching

2013-10-08 Thread Soheil Eizadi
This seems similar to a problem I had on 4.3 Master with System VM creation. If it is the same problem you can check from API command ListTemplateCommand(), from CloudMonkey and see if it returns a bogus cached value. Then you know it is the same problem. -Soheil http://mail-archives.apache.or

Re: [New Feature FS] SSL Offload Support for Cloudstack

2013-10-08 Thread Darren Shepherd
I'm not too sure that its going to be worth it to reuse KeyStoreManager. That code is for storage of certs for the systemvm. So you need to ensure that your changes don't overlap with the systemvm code. Additionally, I don't see that the code handles the chain also. I could be wrong, but just fr

Re: [MERGE] spring-modularization to master - Spring Modularization

2013-10-08 Thread Chiradeep Vittal
I'm personally +1. Simulator seems to work On 10/8/13 3:12 PM, "Darren Shepherd" wrote: >So what's the verdict? What would it take for everyone to feel warm >and fuzzy about this merge, given the troubled past this community has >had with Spring. I'm not saying the code is perfect, but so far

Re: [DISCUSS] make commands.properties the exception, not the rule

2013-10-08 Thread Darren Shepherd
So I'm saying if you want to disable a command you put myBadCmd=0 in the commands.properties. So yes, a blacklist over a whitelist. For people paranoid about maybe some command exists that they don't know about, we can even add a "blacklist=false to the command properties. Then the commands.prope

Re: Which DevCloud2 Usage Mode is good for Development and Debugging ????

2013-10-08 Thread Punith s
it was the /etc/hosts script i had to modify, i had change my ip from dhcp to static, so had to include my ip in the hosts file. On Mon, Oct 7, 2013 at 11:25 PM, Mike Tutkowski < mike.tutkow...@solidfire.com> wrote: > Interesting...I see you have another e-mail out on this, as well. > > I'd be c

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Mike Tutkowski
Perhaps you might know something about this, Marcus. My instance suffers a Kernel panic while booting up. I'm just using the built-in KVM template (CentOS 5.5(64-bit) no GUI (KVM)) with 1 CPU and 512 MB memory. http://i.imgur.com/QuPH2Ub.png I tried to just use an ISO instead, but apparently th

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Marcus Sorensen
Use my tiny centos image. I'm not sure what's up with that crufty old default centos template. Register this qcow2 template: http://marcus.mlsorensen.com/cloudstack-extras/tiny-centos-63.qcow2 Needs a service offering with at least 192MB to run. On Oct 8, 2013 11:36 PM, "Mike Tutkowski" wrote:

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Mike Tutkowski
Great - thanks! On Tue, Oct 8, 2013 at 11:38 PM, Marcus Sorensen wrote: > Use my tiny centos image. I'm not sure what's up with that crufty old > default centos template. > > Register this qcow2 template: > http://marcus.mlsorensen.com/cloudstack-extras/tiny-centos-63.qcow2 > > Needs a service o

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Marcus Sorensen
Not password enabled, root password is just 'password'. I mainly just use it for devcloud-kvm testing. On Oct 8, 2013 11:45 PM, "Mike Tutkowski" wrote: > Great - thanks! > > > On Tue, Oct 8, 2013 at 11:38 PM, Marcus Sorensen wrote: > >> Use my tiny centos image. I'm not sure what's up with that c

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Mike Tutkowski
Perfect Almost done downloading...I'll give it a try in a moment. On Tue, Oct 8, 2013 at 11:47 PM, Marcus Sorensen wrote: > Not password enabled, root password is just 'password'. I mainly just use > it for devcloud-kvm testing. > On Oct 8, 2013 11:45 PM, "Mike Tutkowski" > wrote: > >> Great -

Re: Review Request 14381: KVM: add connect/disconnect capabilities to StorageAdaptors so that external storage services can attach/detach devices on-demand

2013-10-08 Thread Mike Tutkowski
Excellent...that template worked like a charm. Thanks! On Tue, Oct 8, 2013 at 11:50 PM, Mike Tutkowski < mike.tutkow...@solidfire.com> wrote: > Perfect > > Almost done downloading...I'll give it a try in a moment. > > > On Tue, Oct 8, 2013 at 11:47 PM, Marcus Sorensen wrote: > >> Not password e

what's the reason for the placeholder nic in VPC/VR?

2013-10-08 Thread Darren Shepherd
Why is a placeholder nic created before the VRs for the VPC are created? Darren

RE: Call for 4.3 and 4.2.1 Release Managers!

2013-10-08 Thread Animesh Chaturvedi
> -Original Message- > From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] > Sent: Tuesday, October 08, 2013 11:21 AM > To: dev@cloudstack.apache.org > Subject: Re: Call for 4.3 and 4.2.1 Release Managers! > > +1. > We should get a call out to the community to see who is expectin

Re: High CPU utilization on KVM hosts while doing RBD snapshot - was Re: snapshot caused host disconnected

2013-10-08 Thread Indra Pramana
Hi Wido and all, Good day to you, and thank you for your e-mail reply. Yes, from the agent logs I can see that the RBD snapshot was created. However, it seems that CPU utilisation goes up drastically during the copying over of the snapshot from primary storage to the secondary storage. === 2013-

[ACS4.2.1] bugs triaging

2013-10-08 Thread Abhinandan Prateek
Team, Will be looking for inputs from you all in prioritising the tickets for 4.2.1. Do write back if you think some bug is must fix for the maintenance release. -abhi

<    1   2