[one-users] blacklist ports with openvswitch

2014-11-21 Thread Madko
Hi, I'm using OpenNebula 4.10 on CentOS 7 and I'm trying to use some network filtering. I'm following the documentation found here: http://docs.opennebula.org/4.10/administration/networking/openvswitch.html#openvswitch Here is my VM network definition: NIC=[ AR_ID="0", BLACK_PORTS_TCP="80",

[one-users] problem when attachin volatile disks

2014-11-26 Thread Madko
Hi, When I add a new disk to a running instance, I type raw (or anything else) in the FS format, qcow2 in the driver field and choose vd as device prefix. I then have an error that the disk.2 is not a qcow2 format. Qemu-img shows that in fact it's a raw format image that have been created. So I r

Re: [one-users] blacklist ports with openvswitch

2014-11-26 Thread Madko
e=819, priority=39000,in_port=3 actions=drop Only the icmp drop rule is added. Is it normal? Is there anyone here using OpenNebula with OpenVswitch? 2014-11-21 9:33 GMT+01:00 Madko : > Hi, > > I'm using OpenNebula 4.10 on CentOS 7 and I'm trying to use some network > fil

Re: [one-users] blacklist ports with openvswitch

2014-11-26 Thread Madko
witch. AFAIK OpenStack does this > by sending the traffic to an ad-hoc linux bridge, running iptables rules on > it, and sending it back to Open vSwitch. Which is something we would like > to avoid at all costs! > > With regard to your first message, it's very strange, the rules

Re: [one-users] problem when attachin volatile disks

2014-11-26 Thread Madko
qcow2 > - Driver: qcow2 > - Device prefix: vd > > On Wed, Nov 26, 2014 at 3:35 PM, Madko wrote: > >> Hi, >> >> When I add a new disk to a running instance, I type raw (or anything >> else) in the FS format, qcow2 in the driver field and choose vd as device >>

Re: [one-users] blacklist ports with openvswitch

2014-11-26 Thread Madko
r help > On Wed, Nov 26, 2014 at 4:59 PM, Madko wrote: > >> Thanks Jaime for this explaination. Right now openflow is not really a >> top priority for us and OpenNebula 4.12 seems quite interesting. So we >> could wait for this release. We will certainly switch from OpenSt

Re: [one-users] blacklist ports with openvswitch

2014-11-27 Thread Madko
I will check that to be sure. 2014-11-26 17:32 GMT+01:00 Madko : > 2014-11-26 17:12 GMT+01:00 Jaime Melis : > >> It would be great if we could figure out a way to provide this >> functionality for Open vSwitch. It is a top priority in OpenNebula's >> roadmap, so any

Re: [one-users] Network contextualization VM

2014-12-03 Thread Madko
I had a similar problem on CentOS 5, and perhaps 6 too. What do you have in /dev/disk/by-label/ ? Do you have the link to the cd iso labeled CONTEXT? Not sure it's the same bug, here is a patch http://dev.opennebula.org/issues/3365 best regards Le Wed Dec 03 2014 at 15:02:08, Manuel Alfonso López

[one-users] ip not correctly freed in AR

2014-12-05 Thread Madko
Hi, Here is my use case: I have 2 groups (a and b) of VM. 5 VMs in each group. Each group uses 3 vnet (admin, appli, data). Each vnet has it's own VLAN_ID (openvswitch) but can have the same AR. The problem is that after deploying my VMs and deleting them. 2 IP get stuck in the leases. They are s

Re: [one-users] After upgrade to 4.10.2 unable to login using any users including oneadmin

2015-01-21 Thread Madko
Hi, Had the same problem about conf files renamed to .rpmsave, and therefor opennebula was enable to start. Hopefully I saw this thread ;) Is it possible to change this behavior and have .rpmnew instead, to prevent breaking everything after an upgrade? %config(noreplace) in the spec file should d

[one-users] how to overload context for one specific vm in oneflow template

2015-01-21 Thread Madko
Hi, is there a way to overload the vm_template_contents of only one specific VM in a role? I'd like to fix the hostnames. I only manage to overload the context of all the VMs in one role. best regards, ___ Users mailing list Users@lists.opennebula.org h

Re: [one-users] After upgrade to 4.10.2 unable to login using any users including oneadmin

2015-01-21 Thread Madko
Here is the documentation on this point: http://fedoraproject.org/wiki/Packaging:Guidelines#Configuration_files Should be great to have this on 4.12, thanks :) Le Wed Jan 21 2015 at 17:53:42, Jaime Melis a écrit : > Hi Madko, > > I think we could do that for 4.12. > > Anyone e

Re: [one-users] After upgrade to 4.10.2 unable to login using any users including oneadmin

2015-01-22 Thread Madko
done :) http://dev.opennebula.org/issues/3520 Le Wed Jan 21 2015 at 23:19:07, Jaime Melis a écrit : > Can you open a feature request? > > On Wed, Jan 21, 2015 at 6:48 PM, Madko wrote: > >> Here is the documentation on this point: >> http://fedoraproject.org/w

Re: [one-users] how to overload context for one specific vm in oneflow template

2015-01-22 Thread Madko
t hostname to VMs inside roles when you can't use numeric hostname (ie hostname%i)? best regards Le Thu Jan 22 2015 at 11:25:29, Carlos Martín Sánchez < cmar...@opennebula.org> a écrit : > Hi, > > On Wed, Jan 21, 2015 at 3:29 PM, Madko wrote: > >> H

Re: [one-users] how to overload context for one specific vm in oneflow template

2015-01-23 Thread Madko
vm-name-a, obfuscated-vm-name-b and obfuscated-vm-name-ab) how do I set each hostname in the service template? Le Fri Jan 23 2015 at 12:11:07, Carlos Martín Sánchez < cmar...@opennebula.org> a écrit : > Hi there, > > On Thu, Jan 22, 2015 at 2:18 PM, Madko wrote: > > How do

Re: [one-users] how to overload context for one specific vm in oneflow template

2015-01-26 Thread Madko
lt; cmar...@opennebula.org> a écrit : > Hi, > > On Fri, Jan 23, 2015 at 2:06 PM, Madko wrote: > >> >> We'd like to have 4 VMs >> >> 1 VM with role "LVS", no problem here, using a lvs VM template >> 3 VM with role "WEB", using a

[one-users] about firewall

2015-02-06 Thread Madko
Hi, Is there any documentation about the ports and network traffic in use with OpenNebula? To go in production we need to have a firewall between our oned admin server and the hypervisors nodes. So I need to know if there is any network traffic to be initiated (state NEW) from the hypervisor node

[one-users] wrong gateway detected by vm-context

2015-02-13 Thread Madko
Hi, It seems vmcontext scripts try to guess the gateway IP as soon as any interface has a gateway set. Here is my case: one vm with eth0 to internal admin network, and eth1 to wan. Only eth1 has a gateway set. When init script vmcontext start, it found out that there is a gateway (but on eth1), a

Re: [one-users] wrong gateway detected by vm-context

2015-02-13 Thread Madko
I have found the solution. GATEWAY_IFACE must be set, but in upper case. I don't know why. Any idea? If I put GATEWAY_IFACE=eth1 (eth1 is the real name) it doesn't work, but GATEWAY_IFACE=ETH1 works... Le Fri Feb 13 2015 at 10:03:33, Madko a écrit : > Hi, > > It seems vmcon

[one-users] nodes in onegate service json are empty

2015-02-13 Thread Madko
Hi, here is my use case: 1) VM has a gateway role. So it needs to be ready/deployed first. 2) Others VMs that depends on the gateway, so they have the Gateway VM has parent node checked. If the gateway is not ready, other VMs won't have access to some network resources and therefor can't finish

Re: [one-users] CentOS 7 image from marketplace.

2015-02-26 Thread Madko
Similar problem here. It works better if you disable NetworkManager. The vmcontext rpm used in this image is still using basic network service. You are free to adapt it. Le Thu Feb 26 2015 at 13:19:09, Leszek Master a écrit : > I've downloaded CentOS 7 image from market place and i noticed that