[DISCUSS] Enhancement: Use CA framework to enable secured live KVM VM migration

2018-03-21 Thread Rohit Yadav
All, With the introduction of a native CA framework in CloudStack, with 4.11+ it will be used to secure addition of KVM hosts and agents (cpvm, ssvm). However, the KVM host agent may be secured while it communicates to the management server, the live VM migration still happens on insecure tcp

Re: [DISCUSS] Relax strict requirement of JIRA ID for PRs

2018-03-21 Thread Rohit Yadav
Thanks Rafael for your inputs. You're right about access control limitation on Github. However, I think having another repository to track security stuff can add overhead (and to manage its custom ACLs with INFRA, as all cloudstack* repos are allowed access to all PMC/committers now). Users

Re: [DISCUSS] Enhancement: Use CA framework to enable secured live KVM VM migration

2018-03-21 Thread Wido den Hollander
On 03/21/2018 08:05 AM, Rohit Yadav wrote: > All, > > > With the introduction of a native CA framework in CloudStack, with 4.11+ it > will be used to secure addition of KVM hosts and agents (cpvm, ssvm). > However, the KVM host agent may be secured while it communicates to the > management s

Re: [DISCUSS] Enhancement: Use CA framework to enable secured live KVM VM migration

2018-03-21 Thread Rohit Yadav
Thanks Wido for your comments. Yes, for any changes to libvirtd the proposal is to re-use cloudstack-setup-agent which in fact reconfigures libvirtd config at the time of the addition of host and also configure iptables rule. As part of upgrading a KVM agent, the post-install script (part of d

Re: Notice that Gabriel Bräscher now works at PCextreme

2018-03-21 Thread Daan Hoogland
nice going Gabriel and congratulations to PCextreme! On Tue, Mar 20, 2018 at 8:36 PM, Gabriel Beims Bräscher < gabrasc...@gmail.com> wrote: > Thank you, guys :) > > 2018-03-20 16:23 GMT-03:00 Wei ZHOU : > > > Congratulations Gabriel! > > > > Welcome to NL :) > > > > > > > > 2018-03-20 14:50 GMT+0

Re: [DISCUSS] Relax strict requirement of JIRA ID for PRs

2018-03-21 Thread Rafael Weingärtner
I think that works as well. Let's see what others think about it. On Wed, Mar 21, 2018 at 4:15 AM, Rohit Yadav wrote: > Thanks Rafael for your inputs. You're right about access control > limitation on Github. > > > However, I think having another repository to track security stuff can add > over

Re: New committer: Dag Sonstebo

2018-03-21 Thread Daan Hoogland
hey Dag, keep up the good work, thanks and welcome On Tue, Mar 20, 2018 at 9:21 PM, Simon Weller wrote: > Congrats Dag, much deserved! > > > From: John Kinsella > Sent: Tuesday, March 20, 2018 8:58 AM > To: > Subject: New committer: Dag Sonstebo > > The Project

Re: CFP- Cloudstack collab conference 2018

2018-03-21 Thread Kevin A. McGrail
+planners One thing I would add if Rich thinks it is ok would be a link added to apachecon.com to http://cloudstackcollab.org/? Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/km

Re: CFP- Cloudstack collab conference 2018

2018-03-21 Thread Will Stevens
I don't even see a CloudStack reference on their site right now, so I am not sure where that would go. Are you basically saying that we should ask that the CloudStack Collab be added to their site and pointed to our site? *Will Stevens* Chief Technology Officer c 514.826.0190

Re: Notice that Gabriel Bräscher now works at PCextreme

2018-03-21 Thread Khosrow Moossavi
Congratulations Gabriel! On Wed, Mar 21, 2018 at 5:40 AM, Daan Hoogland wrote: > nice going Gabriel and congratulations to PCextreme! > > On Tue, Mar 20, 2018 at 8:36 PM, Gabriel Beims Bräscher < > gabrasc...@gmail.com> wrote: > > > Thank you, guys :) > > > > 2018-03-20 16:23 GMT-03:00 Wei ZHO

Re: New committer: Dag Sonstebo

2018-03-21 Thread Khosrow Moossavi
Congratulations Dag! On Wed, Mar 21, 2018 at 6:57 AM, Daan Hoogland wrote: > hey Dag, keep up the good work, thanks and welcome > > On Tue, Mar 20, 2018 at 9:21 PM, Simon Weller > wrote: > > > Congrats Dag, much deserved! > > > > > > From: John Kinsella > > S

Re: [DISCUSS] Relax strict requirement of JIRA ID for PRs

2018-03-21 Thread Khosrow Moossavi
Thanks Rohit, that's a really great sum-up of proposition! According to the private issue topic, as far as I understand, we don't have any private issue per se, unless they are security, vulnerability or CVE related and the process of reporting them -being really private until they are fixed- are

Re: [DISCUSS] Relax strict requirement of JIRA ID for PRs

2018-03-21 Thread Syed Ahmed
+1 To Rohit’s suggestion On Wed, Mar 21, 2018 at 11:35 AM Khosrow Moossavi wrote: > Thanks Rohit, that's a really great sum-up of proposition! > > According to the private issue topic, as far as I understand, we don't have > any private issue per se, unless they are security, vulnerability > or C

Re: New committer: Dag Sonstebo

2018-03-21 Thread Syed Ahmed
Welcome Dag On Wed, Mar 21, 2018 at 11:12 AM Khosrow Moossavi wrote: > Congratulations Dag! > > > > On Wed, Mar 21, 2018 at 6:57 AM, Daan Hoogland > wrote: > > > hey Dag, keep up the good work, thanks and welcome > > > > On Tue, Mar 20, 2018 at 9:21 PM, Simon Weller > > wrote: > > > > > Congrat

Re: New committer: Dag Sonstebo

2018-03-21 Thread Ian Rae
Great stuff Dag!! On Wed, Mar 21, 2018 at 3:21 PM, Syed Ahmed wrote: > Welcome Dag > On Wed, Mar 21, 2018 at 11:12 AM Khosrow Moossavi > wrote: > >> Congratulations Dag! >> >> >> >> On Wed, Mar 21, 2018 at 6:57 AM, Daan Hoogland >> wrote: >> >> > hey Dag, keep up the good work, thanks and welco

Re: New committer: Dag Sonstebo

2018-03-21 Thread Jan-Arve Nygård
Well deserved Dag! Gratulerer! ons. 21. mar. 2018 kl. 23:59 skrev Ian Rae : > Great stuff Dag!! > > On Wed, Mar 21, 2018 at 3:21 PM, Syed Ahmed wrote: > > Welcome Dag > > On Wed, Mar 21, 2018 at 11:12 AM Khosrow Moossavi < > kmooss...@cloudops.com> > > wrote: > > > >> Congratulations Dag! > >> >