RE: [VOTE] Accept a donation of 'network service support in shared network' from Citrix.

2013-01-18 Thread Sateesh Chodapuneedi
+1

 -Original Message-
 From: Kishan Kavala [mailto:kishan.kav...@citrix.com]
 Sent: 18 January 2013 12:41
 To: CloudStack DeveloperList
 Subject: RE: [VOTE] Accept a donation of 'network service support in shared
 network' from Citrix.
 
 +1 (binding)
 
  -Original Message-
  From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
  Sent: Friday, 18 January 2013 7:28 AM
  To: CloudStack DeveloperList
  Subject: Re: [VOTE] Accept a donation of 'network service support in
  shared network' from Citrix.
 
  +1 (binding)
 
  On 1/17/13 9:35 AM, Animesh Chaturvedi
  animesh.chaturv...@citrix.com
  wrote:
 
  +1
  
   -Original Message-
   From: Kelceydamage@bbits [mailto:kel...@bbits.ca]
   Sent: Thursday, January 17, 2013 9:09 AM
   To: cloudstack-dev@incubator.apache.org
   Subject: Re: [VOTE] Accept a donation of 'network service support
  in shared  network' from Citrix.
  
   +1 (binding)
  
   Sent from my iPhone
  
   On Jan 17, 2013, at 8:49 AM, Prasanna Santhanam t...@apache.org
  wrote:
  
On Thu, Jan 17, 2013 at 04:07:10PM +0530, Murali Reddy wrote:
I would like to call a vote for the Apache CloudStack project to
  accept a
   donation from Citrix to support network services (PF, NAT, LB) in
  shared  networks of advanced zone.
   
The functional specification is available at [1] and has been
  discussed [2]
   with no outstanding issues.
   
Patch [3] and MD5 [4] files are made available at below links
   
[1]
https://cwiki.apache.org/confluence/display/CLOUDSTACK/L4-
  L7+netwo
rk+
services+in+shared+network [2]
http://markmail.org/thread/m522lj7ud7heanlb
[3]
http://people.apache.org/~muralireddy/0001-CLOUDSTACK-312-
  enable-L
4-L 7-network-services-in-the-.patch [4]
http://people.apache.org/~muralireddy/0001-CLOUDSTACK-312-
  enable-L
4-L
7-network-services-in-the-.patch.md5
   
+1 (binding)
   
--
Prasanna.,



RE: [VOTE] Accept a donation of Documentation for various features from Citrix

2013-01-18 Thread Sateesh Chodapuneedi
+1

 -Original Message-
 From: Jessica Tomechak [mailto:jessica.tomec...@gmail.com]
 Sent: 18 January 2013 12:15
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [VOTE] Accept a donation of Documentation for various
 features from Citrix
 
 -Original Message-
 
  From: Chip Childers [mailto:chip.child...@sungard.com]
  Sent: Thursday, January 17, 2013 1:51 PM
  To: cloudstack-dev@incubator.apache.org
  Subject: Re: [VOTE] Accept a donation of Documentation for various
  features from Citrix
 
  On Thu, Jan 17, 2013 at 12:48 PM, Animesh Chaturvedi 
  animesh.chaturv...@citrix.com wrote:
   Reposting with subject line VOTE.
  
   Committers have binding votes for this decision.
  
   Please respond with your vote:
   +1 - Accept the donation and begin the process of bringing this
   +enhancement to CloudStack
   in via the IP clearance process
   +0 - Don't care
   -1 - Do not accept the donation
  
   This vote will remain open for ~72 hours.
  
   Content Location: http://people.apache.org/~jtomechak
  
 
  I think it would be best to have an archive file, and an md5 checksum
  to go along with it.  I'd like to vote for those artifacts instead of
  what's provided please.  It will make the ip clearance process easier.
 
 
 I have provided an archive file and checksum. However I wonder whether it
 would be better to provide separate files for each feature, so they can be
 voted on separately. Please let me know.
 
 Jessica T.
 
 
  
   -Original Message-
   From: Jessica Tomechak [mailto:jessica.tomec...@citrix.com]
   Sent: Tuesday, January 15, 2013 7:05 PM
   To: cloudstack-dev@incubator.apache.org
   Subject: RE: [IP Clearance] Potential issues
  
   On people.apache.org/~jtomechak, I have posted all my docs related
   to the bug items in the IP Clearance list which Animesh provided.
  
   I have made notations in the Doc sub-task of each bug, so that
   anyone reviewing the proposed feature can easily find the
 documentation.
  
   In addition, I made a note for myself of the doc status of each bug
   in that list, and here it is for anyone who is interested!
  
   CLOUDSTACK-774 :
   Code in ACS repo: No
   Functional Spec Posted: Yes
   Community Discussion Done: Yes
   Contribution Size Approx: 5000 lines Contributor : Frank IP
   Clearance needed initial recommendation: Yes
   Docs: None exist. This was not announced or supported as a Citrix
   CP
   3.0.6 feature.
  
  
   CLOUDSTACK-306 :
   Code in ACS repo: Yes
   Functional Spec Posted: Yes
   Community Discussion Done: Yes in October Contribution Size Approx:
   1500 lines Contributor : Sheng IP Clearance needed initial
   recommendation: Yes
   Docs: Already submitted via reviewboard. Link and info in doc subtask.
  
  
   CLOUDSTACK-777/700 :
   Code in ACS repo: Yes
   Functional Spec Posted: No
   Community Discussion Done: Yes
   Contribution Size Approx: 500 lines Contributor :
   Kishan/Jayapal/Rajesh/Murali IP Clearance needed initial
   recommendation: Yes
   Docs: Pending on reviewboard. URL and notations in the doc subtask
   of
  the bug.
  
   CLOUDSTACK-778/319 :
   Code in ACS repo: No
   Functional Spec Posted: No
   Community Discussion Done: Yes
   Contribution Size Approx: should be small Contributor : Vijayendra
   IP Clearance needed initial recommendation: This is a trivial issue
   so may be no
   Docs: Pending on reviewboard. Info is in the doc subtask of the bug.
  
   CLOUDSTACK-299 :
   Code in ACS repo: UI code is there but backend is not Functional
   Spec
  Posted:
   Yes Community Discussion Done: Yes Contribution Size Approx: 1400
   lines Contributor : Jayapal IP Clearance needed initial
   recommendation: Yes
   Docs: Pending on reviewboard. Link is provided in the description
   of
  the bug.
  
   CLOUDSTACK-297 :
   Code in ACS repo: No, but posted on review board Functional Spec
   Posted: Yes Community Discussion Done: Yes Contribution Size Approx:
   350 lines Contributor : Hari IP Clearance needed initial recommendation:
   Docs: One paragraph of new docs on people.a.o. The URL is noted in
   the doc subtask of the bug.
   http://people.apache.org/~jtomechak/CLOUDSTACK-297/
  
  
   CLOUDSTACK-197 :
   Code in ACS repo: Multiple patches posted on review board
   Functional Spec
   Posted: Yes Community Discussion Done: Yes Contribution Size Approx:
   3000 lines Contributor : Likitha IP Clearance needed initial
   recommendation: No, since incremental patches were posted over a
   period
   Docs: Believe docs already exist, authored on the community side by
   Sebastien G.
  
   CLOUDSTACK-192 :
   Code in ACS repo: No
   Functional Spec Posted: Yes
   Community Discussion Done: Yes, but no consensus reached
   Contribution Size
   Approx: 1000 lines Contributor : Sanjay IP Clearance needed initial
   recommendation: Yes, if community agrees to feature inclusion
   Docs: On people.a.o. The URL is noted in the doc subtask of the bug.
   

RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix.

2013-01-18 Thread Rajesh Battala
+1

-Original Message-
From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com] 
Sent: Friday, January 18, 2013 9:43 AM
To: cloudstack-dev@incubator.apache.org
Subject: Re: [VOTE] Accept a donation of 'providing support of optional Public 
IP assignment for EIP with Basic Zone' from Citrix.

+1 (binding)

On 18/01/13 2:34 AM, Rohit Yadav rohit.ya...@citrix.com wrote:

+1 (binding)

From: Animesh Chaturvedi [animesh.chaturv...@citrix.com]
Sent: Thursday, January 17, 2013 11:04 PM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [VOTE] Accept a donation of 'providing support of optional 
Public IP assignment for EIP with Basic Zone' from Citrix.

+1

 -Original Message-
 From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of 
Prasanna  Santhanam
 Sent: Thursday, January 17, 2013 8:50 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [VOTE] Accept a donation of 'providing support of 
optional Public IP  assignment for EIP with Basic Zone' from Citrix.

 On Thu, Jan 17, 2013 at 04:17:58PM +0530, Murali Reddy wrote:
  I would like to call a vote for the Apache CloudStack project to
accept a
 donation from Citrix to provide Optional Public IP assignment for EIP 
with Basic  Zone.
 
  The functional specification is available at [1] and has been
discussed [2] with
 no outstanding issues. Bug 265 [3] opened to track this feature.
 
  Patch [4] and MD5 [5] files are made available at below links
 
  [1]
  https://cwiki.apache.org/confluence/display/CLOUDSTACK/Optional+Pub
  lic
  +IP+assignment+for+EIP+with+Basic+Zone
  [2] http://markmail.org/thread/b2h2cw62qnryk4qh
  [3] https://issues.apache.org/jira/browse/CLOUDSTACK-265
  [4]
  http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-provide-o
  pti on-to-turn-off-automatic-.patch [5] 
  http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-provide-o
  pti
  on-to-turn-off-automatic-.patch.md5

 +1 (binding)

 --
 Prasanna.,



RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix

2013-01-18 Thread Rajesh Battala
+1

-Original Message-
From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com] 
Sent: Friday, January 18, 2013 9:51 AM
To: cloudstack-dev@incubator.apache.org
Subject: Re: [VOTE} Accept a donaiton of support security group enabled 
network in advanced zone from Citrix

+1 (binding)

On 18/01/13 3:32 AM, Chip Childers chip.child...@sungard.com wrote:

On Thu, Jan 17, 2013 at 12:41 PM, Animesh Chaturvedi 
animesh.chaturv...@citrix.com wrote:
 Reposting with subject line VOTE

 Committers have binding votes for this decision.

 Please respond with your vote:
 +1 - Accept the donation and begin the process of bringing this 
 +enhancement to CloudStack
 in via the IP clearance process
 +0 - Don't care
 -1 - Do not accept the donation

 This vote will remain open for ~72 hours.

IMO, this is small enough not to qualify as substantial.  I would be 
OK with this vote being cancelled, and a lazy consensus being reached 
to simply have Anthony commit it (using his ICLA as the contractual 
support for the donation).

That being said, if we progress down the IP clearance path for this 
patch, here's my vote:

+1 (binding)


   -Original Message-
   From: Anthony Xu [mailto:xuefei...@citrix.com]
   Sent: Wednesday, January 16, 2013 4:39 PM
   To: cloudstack-dev@incubator.apache.org
   Subject: [IP Clearance: CLOUDSTACK-737] support security group
  enabled
   network in advanced zone
  
   Hi folks,
  
   I'd like to start the IP clearance process for the Citrix 
   feature -
  support security
   group enabled network in advanced zone
  
   https://issues.apache.org/jira/browse/CLOUDSTACK-737
  
   Citrix would like to donate this feature to Apache CloudStack,
  
   In 4.0, security group is only supported in basic zone, this
feature
  is to add
   security group in advanced zone, then user can isolate VMs in 
   the
  same guest
   network.
  
   Here is FS,
  
  
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+base
d
  +
  on+
   Security+Groups+in+Advance+zone
  
   This donation is a subset of the feature according to the FS 
   Only
  support KVM
   Only support one zone-wide security-enabled shared network
  
   Rest of this feature will be developed in Apache
  
   This is discussion thread
   http://markmail.org/message/cle3d64ci6pobs2i
  
  
   here is patch[Animesh]  http://people.apache.org/~anthonyxu/
   
  
  
   Thanks,
   Anthony
  
  





[jira] [Comment Edited] (CLOUDSTACK-602) Warn of dependency on mkisofs

2013-01-18 Thread Radhika Nair (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13556133#comment-13556133
 ] 

Radhika Nair edited comment on CLOUDSTACK-602 at 1/18/13 8:04 AM:
--

Could we add this item as a troubleshooting tip ?

Is the issue is that user is not able to log in to Management server UI?

  was (Author: radhikap):
Could we add this item as a troubleshooting tip ?
  
 Warn of dependency on mkisofs
 -

 Key: CLOUDSTACK-602
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-602
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Doc
Affects Versions: 4.1.0
 Environment: debian 
Reporter: Mel Davis
Assignee: Radhika Nair
Priority: Trivial

 cloud-setup-management fails quietly if /usr/bin/mkisofs is no found.  
 Failure is indicated only in the 
 /var/log/cloud/management/management-server.log.This results in the 
 inability to log into client via the web interface. 
 The docs should at least note the dependency and, maybe, suggest this 
 workaround: 
 ln -s /usr/bin/genisoimage /usr/bin/mkisofs

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Comment Edited] (CLOUDSTACK-602) Warn of dependency on mkisofs

2013-01-18 Thread Radhika Nair (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13556133#comment-13556133
 ] 

Radhika Nair edited comment on CLOUDSTACK-602 at 1/18/13 8:04 AM:
--

Could we add this item as a troubleshooting tip ?

Is the issue that the user is not able to log in to Management server UI?

  was (Author: radhikap):
Could we add this item as a troubleshooting tip ?

Is the issue is that user is not able to log in to Management server UI?
  
 Warn of dependency on mkisofs
 -

 Key: CLOUDSTACK-602
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-602
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Doc
Affects Versions: 4.1.0
 Environment: debian 
Reporter: Mel Davis
Assignee: Radhika Nair
Priority: Trivial

 cloud-setup-management fails quietly if /usr/bin/mkisofs is no found.  
 Failure is indicated only in the 
 /var/log/cloud/management/management-server.log.This results in the 
 inability to log into client via the web interface. 
 The docs should at least note the dependency and, maybe, suggest this 
 workaround: 
 ln -s /usr/bin/genisoimage /usr/bin/mkisofs

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble

2013-01-18 Thread Marcus Sorensen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557037#comment-13557037
 ] 

Marcus Sorensen commented on CLOUDSTACK-938:


Thanks. I can probably have you a replacement jar soon, you can test and
report back the fix and then we can submit it. Almost there.



You'll want to just run what I sent:

vlanid=$(brctl show |grep cloudVirBr50 |awk '{print $4}' | cut -s -d. -f
2);echo $vlanid

What we expect to respond with is 50. If I run what you have I get no
output as well, even though everything works. I don't really like this
code, there has to be a better way of getting the vlan from the bridge name
without relying on the formatted output of brctl. If it does indeed return
nothing, that will be the culprit of ethnull. But something in one of your
later emails looked like it might be returning 50 504.



Ok, so this might be a better alternative, it at least relies on the linux
sys layout and not brctl's output.




 s2s VPN trouble
 ---

 Key: CLOUDSTACK-938
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Network Controller
Affects Versions: 4.0.0, 4.0.1
 Environment: CentOS 6.3 x86_64
 CS - 4.0.1-0.11
Reporter: Richard Shevel
 Fix For: 4.0.2, 4.1.0

 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, 
 management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, 
 management-server.zip, messages, public.png, r-292-vm_log.tar.gz


 Dear colleagues, the problem is clearly a bug:
 I created a VPC
 Further, in my VPN Customer Gateway to the settings
 Gateway 217.70.20.213
 CIDR list 192.168.10.0/24
 IPsec Preshared-Key blablablablablabla
 IKE Encryption 3des
 IKE Hash md5
 IKE DH None
 ESP Encryption 3des
 ESP Hash md5
 Perfect Forward Secrecy None
 IKE lifetime (second) 86 400
 ESP Lifetime (second) 28 800
 Dead Peer Detection Yes
 In the setting of VPC I create VPN Gateway
 When creating a VPN Connection get the error:
 Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply 
 site-to-site VPN
 catalina.out:
 WARN  [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class 
 com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is 
 unreachable: Failed to apply site-to-site VPN
 WARN  [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to 
 unregister active job 463 from JMX monitoring
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 management-server.log:
 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-4:null) Ping from 5
 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-2:null) Ping from 3
 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] 
 (secstorage-1:null) Zone 1 is ready to launch secondary storage VM
 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] 
 (consoleproxy-1:null) Zone 1 is ready to launch console proxy
 2013-01-09 21:28:18,306 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Found 3 routers.
 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Sending  { Cmd , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 100111, 
 [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}]
  }
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (AgentManager-Handler-3:null) Seq 5-223284290: Processing:  { Ans: , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 110, 
 [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand
  failed,result:false,wait:0}}] }
 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] 
 (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Received:  { Ans: , MgmtId: 
 52239887788, 

RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix.

2013-01-18 Thread Koushik Das
+1

 -Original Message-
 From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com]
 Sent: Friday, January 18, 2013 9:43 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [VOTE] Accept a donation of 'providing support of optional Public
 IP assignment for EIP with Basic Zone' from Citrix.
 
 +1 (binding)
 
 On 18/01/13 2:34 AM, Rohit Yadav rohit.ya...@citrix.com wrote:
 
 +1 (binding)
 
 From: Animesh Chaturvedi [animesh.chaturv...@citrix.com]
 Sent: Thursday, January 17, 2013 11:04 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: RE: [VOTE] Accept a donation of 'providing support of optional
 Public IP assignment for EIP with Basic Zone' from Citrix.
 
 +1
 
  -Original Message-
  From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of
 Prasanna  Santhanam
  Sent: Thursday, January 17, 2013 8:50 AM
  To: cloudstack-dev@incubator.apache.org
  Subject: Re: [VOTE] Accept a donation of 'providing support of
 optional Public IP  assignment for EIP with Basic Zone' from Citrix.
 
  On Thu, Jan 17, 2013 at 04:17:58PM +0530, Murali Reddy wrote:
   I would like to call a vote for the Apache CloudStack project to
 accept a
  donation from Citrix to provide Optional Public IP assignment for EIP
 with Basic  Zone.
  
   The functional specification is available at [1] and has been
 discussed [2] with
  no outstanding issues. Bug 265 [3] opened to track this feature.
  
   Patch [4] and MD5 [5] files are made available at below links
  
   [1]
  
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Optional+Pub
   lic
   +IP+assignment+for+EIP+with+Basic+Zone
   [2] http://markmail.org/thread/b2h2cw62qnryk4qh
   [3] https://issues.apache.org/jira/browse/CLOUDSTACK-265
   [4]
   http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-
 provide-o
   pti on-to-turn-off-automatic-.patch [5]
   http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-
 provide-o
   pti
   on-to-turn-off-automatic-.patch.md5
 
  +1 (binding)
 
  --
  Prasanna.,



[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble

2013-01-18 Thread Marcus Sorensen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557039#comment-13557039
 ] 

Marcus Sorensen commented on CLOUDSTACK-938:


Ok, on the chechbatchs2svpn.sh I'll have to check with the people who put the 
VPN into the system vm, I don't know much about the VPN setup itself, I took 
the existing Xen code that calls into the systemvm and made KVM do it as well. 
So I'm not sure if that is a typo or if the batch one should exist.

I see the error now, and I think my alternate way of pulling the vlan id will 
be more robust. I will get you a jar tomorrow to test. I'll put the other fixes 
in it as well.

 s2s VPN trouble
 ---

 Key: CLOUDSTACK-938
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Network Controller
Affects Versions: 4.0.0, 4.0.1
 Environment: CentOS 6.3 x86_64
 CS - 4.0.1-0.11
Reporter: Richard Shevel
 Fix For: 4.0.2, 4.1.0

 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, 
 management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, 
 management-server.zip, messages, public.png, r-292-vm_log.tar.gz


 Dear colleagues, the problem is clearly a bug:
 I created a VPC
 Further, in my VPN Customer Gateway to the settings
 Gateway 217.70.20.213
 CIDR list 192.168.10.0/24
 IPsec Preshared-Key blablablablablabla
 IKE Encryption 3des
 IKE Hash md5
 IKE DH None
 ESP Encryption 3des
 ESP Hash md5
 Perfect Forward Secrecy None
 IKE lifetime (second) 86 400
 ESP Lifetime (second) 28 800
 Dead Peer Detection Yes
 In the setting of VPC I create VPN Gateway
 When creating a VPN Connection get the error:
 Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply 
 site-to-site VPN
 catalina.out:
 WARN  [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class 
 com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is 
 unreachable: Failed to apply site-to-site VPN
 WARN  [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to 
 unregister active job 463 from JMX monitoring
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 management-server.log:
 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-4:null) Ping from 5
 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-2:null) Ping from 3
 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] 
 (secstorage-1:null) Zone 1 is ready to launch secondary storage VM
 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] 
 (consoleproxy-1:null) Zone 1 is ready to launch console proxy
 2013-01-09 21:28:18,306 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Found 3 routers.
 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Sending  { Cmd , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 100111, 
 [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}]
  }
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (AgentManager-Handler-3:null) Seq 5-223284290: Processing:  { Ans: , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 110, 
 [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand
  failed,result:false,wait:0}}] }
 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] 
 (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Received:  { Ans: , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 110, { CheckS2SVpnConnectionsAnswer } }
 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentManagerImpl] 
 (RouterStatusMonitor-1:null) Details from executing class 
 com.cloud.agent.api.CheckS2SVpnConnectionsCommand: 
 CheckS2SVpnConneciontsCommand failed
 2013-01-09 21:28:18,458 WARN  
 

[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble

2013-01-18 Thread Richard Shevel (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557042#comment-13557042
 ] 

Richard Shevel commented on CLOUDSTACK-938:
---

Tnx Marcus. I will wait for a new jar. 

 s2s VPN trouble
 ---

 Key: CLOUDSTACK-938
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Network Controller
Affects Versions: 4.0.0, 4.0.1
 Environment: CentOS 6.3 x86_64
 CS - 4.0.1-0.11
Reporter: Richard Shevel
 Fix For: 4.0.2, 4.1.0

 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, 
 management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, 
 management-server.zip, messages, public.png, r-292-vm_log.tar.gz


 Dear colleagues, the problem is clearly a bug:
 I created a VPC
 Further, in my VPN Customer Gateway to the settings
 Gateway 217.70.20.213
 CIDR list 192.168.10.0/24
 IPsec Preshared-Key blablablablablabla
 IKE Encryption 3des
 IKE Hash md5
 IKE DH None
 ESP Encryption 3des
 ESP Hash md5
 Perfect Forward Secrecy None
 IKE lifetime (second) 86 400
 ESP Lifetime (second) 28 800
 Dead Peer Detection Yes
 In the setting of VPC I create VPN Gateway
 When creating a VPN Connection get the error:
 Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply 
 site-to-site VPN
 catalina.out:
 WARN  [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class 
 com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is 
 unreachable: Failed to apply site-to-site VPN
 WARN  [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to 
 unregister active job 463 from JMX monitoring
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 management-server.log:
 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-4:null) Ping from 5
 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-2:null) Ping from 3
 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] 
 (secstorage-1:null) Zone 1 is ready to launch secondary storage VM
 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] 
 (consoleproxy-1:null) Zone 1 is ready to launch console proxy
 2013-01-09 21:28:18,306 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Found 3 routers.
 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Sending  { Cmd , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 100111, 
 [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}]
  }
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (AgentManager-Handler-3:null) Seq 5-223284290: Processing:  { Ans: , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 110, 
 [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand
  failed,result:false,wait:0}}] }
 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] 
 (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Received:  { Ans: , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 110, { CheckS2SVpnConnectionsAnswer } }
 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentManagerImpl] 
 (RouterStatusMonitor-1:null) Details from executing class 
 com.cloud.agent.api.CheckS2SVpnConnectionsCommand: 
 CheckS2SVpnConneciontsCommand failed
 2013-01-09 21:28:18,458 WARN  
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Unable to update router r-288-VM's VPN 
 connection status
 2013-01-09 21:28:43,063 DEBUG [cloud.server.StatsCollector] 
 (StatsCollector-2:null) StorageCollector is running...
 2013-01-09 21:28:43,117 DEBUG [agent.transport.Request] 
 (StatsCollector-2:null) Seq 17-292881626: Received:  { Ans: , MgmtId: 
 52239887788, via: 17, Ver: v1, Flags: 10, { 

[jira] [Comment Edited] (CLOUDSTACK-938) s2s VPN trouble

2013-01-18 Thread Marcus Sorensen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557037#comment-13557037
 ] 

Marcus Sorensen edited comment on CLOUDSTACK-938 at 1/18/13 8:15 AM:
-

Thanks. I can probably have you a replacement jar soon, you can test and
report back the fix and then we can submit it. Almost there.

 [root@bh4 agent]#  /bin/bash -c vlanid=$(brctl show |grep cloudVirBr50 |awk 
 '{print $4}' | cut -s -d. -f 2);echo $vlanid

You'll want to just run what I sent:

vlanid=$(brctl show |grep cloudVirBr50 |awk '{print $4}' | cut -s -d. -f
2);echo $vlanid

What we expect to respond with is 50. If I run what you have I get no
output as well, even though everything works. I don't really like this
code, there has to be a better way of getting the vlan from the bridge name
without relying on the formatted output of brctl. If it does indeed return
nothing, that will be the culprit of ethnull. But something in one of your
later emails looked like it might be returning 50 504. Looks like it's 
grabbing
more than the original author expected.

 ls /sys/devices/virtual/net/cloudVirBr50/brif | egrep ^bond|^eth| cut -d . 
 -f2
 50

Ok, so this might be a better alternative, it at least relies on the linux
sys layout and not brctl's output. I'll look for other alternatives as well, but
I think we're pretty much stuck with calling an external command for this.

Edit to add missing relevant info that I quoted via email.

  was (Author: mlsorensen):
Thanks. I can probably have you a replacement jar soon, you can test and
report back the fix and then we can submit it. Almost there.



You'll want to just run what I sent:

vlanid=$(brctl show |grep cloudVirBr50 |awk '{print $4}' | cut -s -d. -f
2);echo $vlanid

What we expect to respond with is 50. If I run what you have I get no
output as well, even though everything works. I don't really like this
code, there has to be a better way of getting the vlan from the bridge name
without relying on the formatted output of brctl. If it does indeed return
nothing, that will be the culprit of ethnull. But something in one of your
later emails looked like it might be returning 50 504.



Ok, so this might be a better alternative, it at least relies on the linux
sys layout and not brctl's output.



  
 s2s VPN trouble
 ---

 Key: CLOUDSTACK-938
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Network Controller
Affects Versions: 4.0.0, 4.0.1
 Environment: CentOS 6.3 x86_64
 CS - 4.0.1-0.11
Reporter: Richard Shevel
 Fix For: 4.0.2, 4.1.0

 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, 
 management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, 
 management-server.zip, messages, public.png, r-292-vm_log.tar.gz


 Dear colleagues, the problem is clearly a bug:
 I created a VPC
 Further, in my VPN Customer Gateway to the settings
 Gateway 217.70.20.213
 CIDR list 192.168.10.0/24
 IPsec Preshared-Key blablablablablabla
 IKE Encryption 3des
 IKE Hash md5
 IKE DH None
 ESP Encryption 3des
 ESP Hash md5
 Perfect Forward Secrecy None
 IKE lifetime (second) 86 400
 ESP Lifetime (second) 28 800
 Dead Peer Detection Yes
 In the setting of VPC I create VPN Gateway
 When creating a VPN Connection get the error:
 Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply 
 site-to-site VPN
 catalina.out:
 WARN  [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class 
 com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is 
 unreachable: Failed to apply site-to-site VPN
 WARN  [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to 
 unregister active job 463 from JMX monitoring
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 management-server.log:
 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-4:null) Ping from 5
 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] 
 

Re: [Discuss] Support for multiple ip ranges.

2013-01-18 Thread Abhinandan Prateek
Bharat,
  Can you update the FS with the relevant feedback provided by the
community and bring it to closure.
-abhi

On 17/01/13 4:31 PM, Sanjeev Neelarapu sanjeev.neelar...@citrix.com
wrote:

Hi,

I have reviews Multiple IP Ranges FS available @
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+Ip+ranges+
FS and below are my review comments:

1.Is there any limit on no.of subnets/IP ranges that can be added for
guest?(since a new nic is added on router vm for every different subnet)

2.Do we support adding multiple subnets in the same vlan incase of Shared
guest network in Advanced zone?

3.Can we shrink the existing IP ranges(Guest/Management)?

4.Can we add non-contiguos guest ip ranges for Basic zone?

5.Do we support tagged IP Network for management traffic?

6.Is not-contiguous management IP ranges supported?

7. Is this supported in upgraded environment?

Thanks,
Sanjeev

-Original Message-
From: Bharat Kumar [mailto:bharat.ku...@citrix.com]
Sent: Tuesday, January 08, 2013 5:27 PM
To: cloudstack-us...@incubator.apache.org;
cloudstack-dev@incubator.apache.org
Subject: [Discuss] Support for multiple ip ranges.

Hi all,

Currently in cloudstack  we can add multiple public ip ranges. we want to
provide  similar flexibility  for management  and guest ip ranges.

Motivation: There may be cases where some part of the subnet is allocated
for some other purpose and the admin wants to use the rest of the ip
range or admin may want to add more ip address  once the old ones are
exhausted. Admin may want to  add the ip ranges form the same subnet or
from different one. Currently in cloudstack there is no flexibility to do
this for management and guest ip ranges (ip ranges from different
subnets). 

This feature allows adding multiple management ip ranges in advanced and
basic zones,  and guest ip ranges in  basic zones.

Regards,
Bharat Kumar.






 



RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix

2013-01-18 Thread Sanjeev Neelarapu
+1

-Original Message-
From: Rajesh Battala [mailto:rajesh.batt...@citrix.com] 
Sent: Friday, January 18, 2013 1:35 PM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [VOTE} Accept a donaiton of support security group enabled 
network in advanced zone from Citrix

+1

-Original Message-
From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com]
Sent: Friday, January 18, 2013 9:51 AM
To: cloudstack-dev@incubator.apache.org
Subject: Re: [VOTE} Accept a donaiton of support security group enabled 
network in advanced zone from Citrix

+1 (binding)

On 18/01/13 3:32 AM, Chip Childers chip.child...@sungard.com wrote:

On Thu, Jan 17, 2013 at 12:41 PM, Animesh Chaturvedi 
animesh.chaturv...@citrix.com wrote:
 Reposting with subject line VOTE

 Committers have binding votes for this decision.

 Please respond with your vote:
 +1 - Accept the donation and begin the process of bringing this 
 +enhancement to CloudStack
 in via the IP clearance process
 +0 - Don't care
 -1 - Do not accept the donation

 This vote will remain open for ~72 hours.

IMO, this is small enough not to qualify as substantial.  I would be 
OK with this vote being cancelled, and a lazy consensus being reached 
to simply have Anthony commit it (using his ICLA as the contractual 
support for the donation).

That being said, if we progress down the IP clearance path for this 
patch, here's my vote:

+1 (binding)


   -Original Message-
   From: Anthony Xu [mailto:xuefei...@citrix.com]
   Sent: Wednesday, January 16, 2013 4:39 PM
   To: cloudstack-dev@incubator.apache.org
   Subject: [IP Clearance: CLOUDSTACK-737] support security group
  enabled
   network in advanced zone
  
   Hi folks,
  
   I'd like to start the IP clearance process for the Citrix 
   feature -
  support security
   group enabled network in advanced zone
  
   https://issues.apache.org/jira/browse/CLOUDSTACK-737
  
   Citrix would like to donate this feature to Apache CloudStack,
  
   In 4.0, security group is only supported in basic zone, this
feature
  is to add
   security group in advanced zone, then user can isolate VMs in 
   the
  same guest
   network.
  
   Here is FS,
  
  
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+base
d
  +
  on+
   Security+Groups+in+Advance+zone
  
   This donation is a subset of the feature according to the FS 
   Only
  support KVM
   Only support one zone-wide security-enabled shared network
  
   Rest of this feature will be developed in Apache
  
   This is discussion thread
   http://markmail.org/message/cle3d64ci6pobs2i
  
  
   here is patch[Animesh]  http://people.apache.org/~anthonyxu/
   
  
  
   Thanks,
   Anthony
  
  





Re: [DISCUSS] Virtual machine's Base Image Updatation Facility

2013-01-18 Thread Abhinandan Prateek

+1 (binding) to start implementation.

I see that all the changes have been incorporated in the FS
https://cwiki.apache.org/CLOUDSTACK/base-image-updation-facility.html.

-abhi 

On 03/01/13 6:00 AM, Hari Kannan hari.kan...@citrix.com wrote:

I wish to restate this a bit differently -

The orchestration being requested here is:
* (possibly) stop vm
* disconnect root disk
* destroy root disk
* create a new disk from (possibly new) template
* attach new disk as root disk to the vm
* (possibly) start vm.

This is something we support for system vms already.
The existing api is restoreVm(vm_id)
The changed api is restoreVm(vm_id, new_template_id)

In addition, I wish to add the following -

A third parameter (a flag) can be specified whether to restart or not (or
we can assume always start after stop).  i.e. have a method that resets a
VM on reboot.   The use cases for this are:
- Secure environments that need a fresh start on every boot
- Desktops that should not retain state

Hari Kannan


-Original Message-
From: Alex Huang [mailto:alex.hu...@citrix.com]
Sent: Friday, December 28, 2012 10:31 AM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [DISCUSS] Virtual machine's Base Image Updatation Facility



 -Original Message-
 From: David Nalley [mailto:da...@gnsa.us]
 Sent: Thursday, December 27, 2012 7:40 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [DISCUSS] Virtual machine's Base Image Updatation
 Facility
 
 On Wed, Dec 26, 2012 at 3:47 PM, Chiradeep Vittal
 chiradeep.vit...@citrix.com wrote:
  Templates should be immutable --if there is a new version created,
  then it is another template.
  The api should just take a reference to the new template and not try
  to deal with trickiness around updating templates. That workflow
  (versioning
  templates) is a different ball of wax entirely.
 
 
 Agreed.
 Templates should be immutable.
 Additionally - the sysadmin side of me doesn't understand why I'd want
 to do this at all. The template exists to get me to JEOS running - not
 to manage updates. I (should) have tools that handle keeping all of my
 deployed VMs in a consistent state, and updated to the proper version.
 Trying to turn CloudStack into a patch management/package management
 service seems a bit too much scope creep IMO.

I would modify that just a little bit.  Deployed templates are immutable.
 So if someone updates a template, only new VMs are deployed with the
update.  Original VMs are still based off the original.  I see a ton of
problems if we try to rebase the VMs to the new template.  To take care
of the corruption case (corruption of the base on the primary storage),
you can rebase but it's to the exact copy of the original template so
that shouldn't be a problem.

I think this feature can only be used for operators who deployed links to
the templates and don't want to keep updating links when they update
templates, which makes sense.  But it can be done with the following
small change.

Feature implementation
- Provide an externally created unique id on vm template.
- Allow access to templates based on externally created ids.
NOTE: In the end that this really means is the uuid column can actually
be set by the caller as long as it's unique.

For the operator
- someone creates the template with an externally created unique id.
- All references to that template is with the externally created unique
id.  So if they put the link to that template on a page, it has to be
with their ids.
- When a template should be updated, just delete the old one and create a
new one with the same externally created id.

Is there any other use case requirements?

--Alex



Re: new storage framework update

2013-01-18 Thread Wido den Hollander

Hi,

On 01/16/2013 02:35 AM, Edison Su wrote:

After a lengthy discussion(more than two hours) with John on Skype, I think we 
figured out the difference between us.  The API proposed by John is more at the 
execution level, that's where input/output stream coming from, which assumes 
that both source and destination object will be operated at the same 
place(either inside ssvm, or on hypervisor host). While the API I proposed is 
more about how to hook up vendor's own storage into cloudstack's mgt server, 
thus can replace the process on how and where to operate on the storage.
Let's talk about the execution model at first, which will have huge impact on 
the design we made. The execution model is about where to execute operations 
issued by mgt server. Currently, there is no universal execution model, it's 
quite different for each hypervisor.
  E.g. for KVM, mgt server will send commands to KVM host, there is a java 
agent running on kvm host, which can execute command send by mgt server.
For xenserver, most of commands will be executed on mgt server, which will call 
xapi, then talking to xenserver host.  But we do put some python code at 
xenserver host, if there are operations not supported by xapi.
For vmware, most of commands will be executed on mgt server, which talking to 
vcenter API, while some of them will be executed inside SSVM.
Due to the different execution models, we'll get into a problem about how and 
where to access storage device. For example, there is a storage box, which has 
its own management API to be accessed. Now I want to create a volume on the 
storage box, where should I call stoage box's create volume api? If we follow 
up above execution models, we need to call the api at different places and even 
worse, you need to write the API call in different languages. For kvm, you may 
need to write java code in kvm agent, for xenserver, you may need to write a 
xapi python plugin, for vmware, you may need to put the java code inside ssvm  
etc.
But if the storage box already has management api, why just call it inside 
cloudstack mgt server, then device vendor should just write java code once, for 
all the different hypervisors? If we don't enforce the execution model, then 
the storage framework should have a hook in management server, device vendor 
can decide where to execute commands send by mgt server.


With this you are assuming that the management server always has access 
to the API of the storage box?


What if the management server is in network X (say Amsterdam) en I have 
a zone in London where my storage box X is in a private network.


The only one that can access the API then is the hypervisor, so the 
calls have to go through there.


I don't want to encourage people to write stupid code where they 
assume that the management server is this thing which is tied up into 
every network.


Wido


That's my datastoredriver layer used for. Take taking snapshot diagram as an 
example: 
https://cwiki.apache.org/confluence/download/attachments/30741569/take+snapshot+sequence.png?version=1modificationDate=1358189965000
Datastoredriver is running inside mgt server, while datastoredriver itself can decide 
where to execute takasnapshot API, driver can send a command to hypervisor 
host, or directly call storage box's API, or directly call hypervisor's own API, or 
another service running outside of cloudstack mgt server. It's all up to the 
implementation of driver.
Does it make sense? If it's true, the device driver should not take input/out 
stream as parameter, as it enforces the execution model, which I don't think 
it's necessary.
BTW, John and I will discuss the matter tomorrow on Skype, if you want to join, 
please let me know.


-Original Message-
From: Edison Su [mailto:edison...@citrix.com]
Sent: Monday, January 14, 2013 3:19 PM
To: cloudstack-dev@incubator.apache.org
Subject: RE: new storage framework update




-Original Message-
From: John Burwell [mailto:jburw...@basho.com]
Sent: Friday, January 11, 2013 12:30 PM
To: cloudstack-dev@incubator.apache.org
Subject: Re: new storage framework update

Edison,

I think we are speaking past each other a bit.  My intention is to
separate logical and physical storage operations in order to simplify
the implementation of new storage providers.  Also, in order to
support the widest range of storage mechanisms, I want to eliminate
all interface assumptions (implied and explicit) that a storage device
supports a file


I think if the nfs secondary storage is optional, then all the inefficient 
related
to object storage will get away?


system.  These two issues make implementation of efficient  storage
drivers extremely difficult.  For example, for object stores, we have
to create polling synchronization threads that add complexity,
overhead, and latency to the system.  If we could connect the
OutputStream of a source (such as an HTTP
upload) to the InputStream of the object store, transfer operations
would 

Re: [DISCUSS] Granular Global Config Parameteres

2013-01-18 Thread Abhinandan Prateek
Hari P/Mannan,
   I think there is a need to make several global parameters to be more
granular. Can we come up with a list of these params that we think require
immediate consideration.
-abhi

On 05/01/13 3:31 AM, Prasanna Santhanam prasanna.santha...@citrix.com
wrote:

On Fri, Jan 04, 2013 at 07:50:57PM +0530, Chip Childers wrote:
 On Fri, Jan 4, 2013 at 8:56 AM, David Nalley da...@gnsa.us wrote:
  On Thu, Jan 3, 2013 at 7:35 PM, Manan Shah manan.s...@citrix.com
wrote:
  Hi,
 
  I would like to propose a new feature for allowing granular Global
Config
  parameters in CS 4.1. I have created a JIRA ticket and provided
  the requirements at the following location.  Please provide feedback
on
  the requirements.
 
  JIRA Ticket: https://issues.apache.org/jira/browse/CLOUDSTACK-741
  Requirements:
  
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Granular+Global+Co
nf
  ig+Parameters
 
 
  Regards,
  Manan Shah
 
 
  I don't know if we can really have a serious omnibus global config 
  granular config discussion. Really each one of those is going to need
  individual discussion, tests, etc
 
  --David
 
 
 +1 to David's comment.  The requirement page lists way too many
 individual config items to be reviewed as a group.
 
 I suggest that we (1) discuss a design for how to manage granular
 settings, and then (2) discuss each setting that you would like to see
 become more granular.
 

I agree - each of these global settings affect the datacenter in a
different way. Encourage this be discussed as a larger more generic
way to group, add and extend config settings.

-- 
Prasanna.,



RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1

2013-01-18 Thread Devdeep Singh
Hi Edison,

Yes wasted space is an issue. But base disk cleanup isn't an issue. The base 
disks are not exposed as VDIs. They are read only base copy and the VM1/VM2 
Root disk parent to them. Deleting the VM root disk also removed the base disk.

Regards,
Devdeep

 -Original Message-
 From: Edison Su [mailto:edison...@citrix.com]
 Sent: Friday, January 18, 2013 6:58 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1
 
 
 
  -Original Message-
  From: Devdeep Singh [mailto:devdeep.si...@citrix.com]
  Sent: Wednesday, January 16, 2013 2:44 AM
  To: cloudstack-dev@incubator.apache.org
  Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1
 
  Hi Anthony,
 
  I tried storage xenmotion for two VMs created from the same template
  and here is what I observed.
 
  Initially, the template and root disks tree looks as follows
__ Template
   |
 Base-Disk.vhd --- VM1 - Root Disk
  |_VM2-Root Disk
 
  After xenmotion of both the volumes of the vm to another primary
  store, the two virtual disks for the two VMs do not share the base disk
Base-Disk1.vhd--VM1 - Root Disk
Base-Disk2.vhd--VM2 - Root Disk
 
  So, after storage xenmotion, each root disk has a copy of the base
  disk in the destination storage pool. Is this an issue?
 Waste space(each disk will have its own base disk, instead of sharing), and
 base disk clean up will be an issue(as there is no cloudstack db entry to 
 track
 this new base disks).
 
 
 
  Regards,
  Devdeep
 
   -Original Message-
   From: Anthony Xu [mailto:xuefei...@citrix.com]
   Sent: Wednesday, January 09, 2013 7:21 AM
   To: cloudstack-dev@incubator.apache.org
   Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1
  
   I assume clone is a kind of snapshot in the term of VHD chain, Does
   XenMotion has same restrictions on clone?
  
   For fast provision, right now , on XenServer, root disk is cloned
   from
  template.
   Before any snapshot, root disk is already a VHD with parent VHD
   which is template, do you know if this has any impact for XenMotion ?
  
  
   Anthony
  
-Original Message-
From: Hari Kannan [mailto:hari.kan...@citrix.com]
Sent: Tuesday, January 08, 2013 5:44 PM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1
   
Hi Devdeep,
   
Can you please elaborate on the restrictions, if any on XenMotion
implementation when a volume has snapshots?
   
Hari
   
-Original Message-
From: Devdeep Singh [mailto:devdeep.si...@citrix.com]
Sent: Wednesday, December 26, 2012 4:44 AM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1
   
I have created an initial draft of the FS here
   
  https://cwiki.apache.org/confluence/display/CLOUDSTACK/Enabling+Stor
ag
e
+XenMotion+for+XenServer. I'll keep updating it based on
+XenMotion+for+discussion and
comments.
   
Regards,
Devdeep
   
 -Original Message-
 From: Devdeep Singh [mailto:devdeep.si...@citrix.com]
 Sent: Tuesday, December 18, 2012 2:10 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: [DISCUSS] Enabling storage xenmotion on xenserver 6.1

 Hi,

 XenServer introduced support for Storage XenMotion in the latest
 version (6.1). Storage XenMotion allows VMs to be moved from one
 host to another, where the VMs are not located on storage shared
 between the two hosts. It provides the option to live migrate a
 VM's disks along with the VM itself. It is now possible to
 migrate a VM from one resource pool to another, or to migrate a
 VM whose disks are on local storage, or even to migrate a VM's
 disks from one storage repository to another, all while the VM is
 running.
 More information on Storage
XenMotion can be found at [1].

 I have filed a jira request [2] to track this feature. I plan to
 extend the migrate vm cloudstack api call to allow migration of
 instances across clusters. Do let me know your comments.

 [1] http://blogs.citrix.com/2012/08/24/storage_xenmotion/
 [2] https://issues.apache.org/jira/browse/CLOUDSTACK-659

 Regards,
 Devdeep


Re: [VOTE] Accept a donation of Reset SSH Key to access a VM in CloudStack from Citrix

2013-01-18 Thread Sebastien Goasguen

On Jan 17, 2013, at 10:59 PM, Chip Childers chip.child...@sungard.com wrote:

 On Thu, Jan 17, 2013 at 12:54 PM, Sebastien Goasguen run...@gmail.com wrote:
 Animesh,
 
 So now I am confused with all those [VOTE] threads…
 Are we voting on each proposed donation separately from the docs or is the 
 docs included within the vote.
 
 Animesh - This vote was only specific to the artifacts referenced in
 the initial call for a vote.  I don't think it's appropriate to add
 material after the fact.
 
 for 297, the docs needs some work…the first sentence makes it sound like 
 this will allow users to log into Cloudstack mgt server using keys.
 
 
 Sebastien - My personal opinion is that we should be OK accepting and
 then improving it as different discussions.  Fair?

Kinda fair. If there is an easy fix to be made in a text file before being 
committed (assuming vote passed) then I think it should be made.
The devs of the features should check the docs proposed 

-Sebastien

 
 So I vote -1 on the 297 docs…but +1 on the feature.
 
 -Sebastien
 
 On Jan 17, 2013, at 6:50 PM, Animesh Chaturvedi 
 animesh.chaturv...@citrix.com wrote:
 
 
 
 -Original Message-
 From: Harikrishna Patnala [mailto:harikrishna.patn...@citrix.com]
 Sent: Thursday, January 17, 2013 6:22 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: [VOTE] Accept a donation of Reset SSH Key to access a VM in
 CloudStack from Citrix
 
 Hi,
 
 I'd like to start the process of IP Clearance for CLOUDSTACK-
 297https://issues.apache.org/jira/browse/CLOUDSTACK-297: Reset SSH key
 to access VM (Similar to reset password)
 
 Citrix would like to donate this code to Apache Cloudstack.
 
 With this new API command resetSSHKeyForVirtualMachine, a user can set or
 reset the SSH keypair assigned to a virtual machine. With the addition of 
 this
 feature, a lost or compromised SSH keypair can be changed, and the user can
 access the VM by using the new keypair. Just create or register a new 
 keypair,
 then call resetSSHKeyForVirtualMachine.
 
 Here are the corresponding links,
 
 The checksum (md5) for the patch is:
 00a99ca408d661154eb22c0268bfcd8f *0001-CLOUDSTACK-297-Reset-SSH-key-
 to-access-VM.patch
 
 The review request link is:
 https://reviews.apache.org/r/8905/
 
 The related Jira ticket at:
 https://issues.apache.org/jira/browse/CLOUDSTACK-297
 
 The function spec is at:
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Reset+SSH+key+Fun
 ctional+Spec?moved=true
 
 The previous discussion happened on:
 http://markmail.org/message/7gmppexnmewjedrw
 
 [Animesh] Doc Link : http://people.apache.org/~jtomechak/CLOUDSTACK-297/
 
 
 Thank you,
 Harikrishna
 
 



[SCREENCAST] request for screencast to demo features

2013-01-18 Thread Sebastien Goasguen
Hi everyone,

With tons of new features being worked on, it would be nice if the developers 
of a particular feature could record a screencast to demo what they have done.
I understand that there is the wiki but more often than not the documentation 
is lagging.

Screencasts would help with writing documentation and also demo those features 
for users.

For instance I would love to see screencasts on:
-nicira
-ceph
-S3 integration
-caringo
-devcloud-kvm

I know it's time consuming but it would really help showcase CloudStack amazing 
feature set.

-sebastien

Re: [SCREENCAST] request for screencast to demo features

2013-01-18 Thread Prasanna Santhanam
On Fri, Jan 18, 2013 at 02:57:46PM +0530, Sebastien Goasguen wrote:
 Hi everyone,
 
 With tons of new features being worked on, it would be nice if the developers 
 of a particular feature could record a screencast to demo what they have done.
 I understand that there is the wiki but more often than not the documentation 
 is lagging.
 
 Screencasts would help with writing documentation and also demo those 
 features for users.
 
 For instance I would love to see screencasts on:
 -nicira
 -ceph
 -S3 integration
 -caringo
 -devcloud-kvm
 
Will include a marvin screencast once I'm done refactoring to show how
tests can be written. Do you have a tips page/tutorial on doing a
screencast? I think we write the transcript before the recording? 

-- 
Prasanna.,


[jira] [Commented] (CLOUDSTACK-1003) Failed to start management server with master build

2013-01-18 Thread Pradeep Soundararajan (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557089#comment-13557089
 ] 

Pradeep Soundararajan commented on CLOUDSTACK-1003:
---

This is a run time exception not found during any build or package. 

I guess, it could be because of API-refactoring. There are some codes have been 
merged to master during that activity. 

I have noticed client/tomcatconf/components.xml.in has been changed recently.  
I guess, the issue could be because of that. Also, I have noticed the file 
StaticRoleBasedAPIAccessChecker.java is touched because of that refactoring.
 adapters key=com.cloud.acl.APIAccessChecker
-adapter name=StaticRoleBasedAPIAccessChecker 
class=com.cloud.acl.StaticRoleBasedAPIAccessChecker/
+adapter name=StaticRoleBasedAPIAccessChecker 
class=org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker/

I am not sure whether the codes has been tested properly before it delivered to 
asf/master.

We should be assigning this defect to the respective developer.

 Failed to start management server with master build
 ---

 Key: CLOUDSTACK-1003
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1003
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, Install and Setup
Affects Versions: 4.1.0
 Environment: Centos 6.0.3
Reporter: Rayees Namathponnan
Assignee: Pradeep Soundararajan
Priority: Blocker
 Attachments: catalina.out


 Observed below error in MS log
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Processing 
 updateSSLKeyStore
 INFO  [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at 
 /etc/cloud/management/cloud.keystore
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Processing updateKeyPairs
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Systemvm keypairs not 
 found in database. Need to store them in the database
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Going to update systemvm 
 iso with generated keypairs if needed
 INFO  [utils.component.ComponentLocator] (main:) Config file found at 
 /etc/cloud/management/components.xml.  Configuring management-server
 INFO  [utils.component.ComponentLocator] (main:) Found component: 
 com.cloud.configuration.dao.ConfigurationDao in 
 com.cloud.configuration.dao.ConfigurationDaoImpl - Configuration 
 configuration server
 ERROR [utils.component.ComponentLocator] (main:) Unable to load configuration 
 for management-server from components.xml
 com.cloud.utils.exception.CloudRuntimeException: Unable to find class: 
 org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker
   at 
 com.cloud.utils.component.ComponentLocator$XmlHandler.fillInfo(ComponentLocator.java:1028)
   at 
 com.cloud.utils.component.ComponentLocator$XmlHandler.startElement(ComponentLocator.java:1089)
   at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown 
 Source)
   at 
 org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown 
 Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown
  Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown
  Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown 
 Source)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Commented] (CLOUDSTACK-1003) Failed to start management server with master build

2013-01-18 Thread Prasanna Santhanam (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557093#comment-13557093
 ] 

Prasanna Santhanam commented on CLOUDSTACK-1003:


a) What is the build/package you are using?
b) StaticRoleBasedAPIAccessChecker is a plugin. Is the plugin appropriately 
packaged?


 Failed to start management server with master build
 ---

 Key: CLOUDSTACK-1003
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1003
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, Install and Setup
Affects Versions: 4.1.0
 Environment: Centos 6.0.3
Reporter: Rayees Namathponnan
Assignee: Pradeep Soundararajan
Priority: Blocker
 Attachments: catalina.out


 Observed below error in MS log
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Processing 
 updateSSLKeyStore
 INFO  [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at 
 /etc/cloud/management/cloud.keystore
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Processing updateKeyPairs
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Systemvm keypairs not 
 found in database. Need to store them in the database
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Going to update systemvm 
 iso with generated keypairs if needed
 INFO  [utils.component.ComponentLocator] (main:) Config file found at 
 /etc/cloud/management/components.xml.  Configuring management-server
 INFO  [utils.component.ComponentLocator] (main:) Found component: 
 com.cloud.configuration.dao.ConfigurationDao in 
 com.cloud.configuration.dao.ConfigurationDaoImpl - Configuration 
 configuration server
 ERROR [utils.component.ComponentLocator] (main:) Unable to load configuration 
 for management-server from components.xml
 com.cloud.utils.exception.CloudRuntimeException: Unable to find class: 
 org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker
   at 
 com.cloud.utils.component.ComponentLocator$XmlHandler.fillInfo(ComponentLocator.java:1028)
   at 
 com.cloud.utils.component.ComponentLocator$XmlHandler.startElement(ComponentLocator.java:1089)
   at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown 
 Source)
   at 
 org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown 
 Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown
  Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown
  Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown 
 Source)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


RE: [MERGE] network refactoring, phase 1

2013-01-18 Thread Pradeep Soundararajan
http://jenkins.cloudstack.org/view/master/job/build-master-nonoss-rhel63/

Yes, it is started breaking from build # 34. 
http://jenkins.cloudstack.org/view/master/job/build-master-nonoss-rhel63/34/console

Till 33, it went fine...

Thanks,
Pradeep S


-Original Message-
From: Min Chen [mailto:min.c...@citrix.com] 
Sent: Friday, January 18, 2013 11:19 AM
To: cloudstack-dev@incubator.apache.org
Subject: Re: [MERGE] network refactoring, phase 1

Nonoss build is broken in master branch, not sure if it is related to this 
merge?

[ERROR] Failed to execute goal
org.apache.maven.plugins:maven-compiler-plugin:2.5.1:compile
(default-compile) on project cloud-plugin-network-f5: Compilation failure 
[ERROR] 
/Users/minc/dev/cloud-asf/plugins/network-elements/f5/src/com/cloud/network
/element/F5ExternalLoadBalancerElement.java:[499,27] cannot find symbol [ERROR] 
symbol  : method isNetworkInlineMode(com.cloud.network.Network)
[ERROR] location: interface com.cloud.network.NetworkModel [ERROR] - [Help 1]

Thanks
-min




On 1/17/13 5:15 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote:

Merge done. Tool issue.

On 1/16/13 11:21 PM, Chiradeep Vittal chiradeep.vit...@citrix.com
wrote:

Having problems with the merge. ETA is Thursday evening PST.

On 1/16/13 3:40 PM, Chiradeep Vittal chiradeep.vit...@citrix.com
wrote:

OK , will re-do the merge and re-test and commit by EOD

On 1/16/13 1:56 PM, Animesh Chaturvedi 
animesh.chaturv...@citrix.com
wrote:

Chiradeep

Are you waiting on revert for 312? Murali reverted it today

Thanks
Animesh

 -Original Message-
 From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
 Sent: Friday, January 11, 2013 1:08 PM
 To: CloudStack DeveloperList
 Subject: Re: [MERGE] network refactoring, phase 1
 
 I'm going to wait on the reverts for CLOUDSTACK-306 and
CLOUDSTACK-312
 
 On 1/11/13 12:15 PM, Alex Huang alex.hu...@citrix.com wrote:
 
  +1 - with an assumption that Alex and others are OK with it 
  +(since
the
  javelin branch merge was proposed first).
 
 +1 We're struggling with the merge right now so one more merge is
not
 going to hurt very much.
 
 --Alex







[jira] [Commented] (CLOUDSTACK-1003) Failed to start management server with master build

2013-01-18 Thread Pradeep Soundararajan (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557098#comment-13557098
 ] 

Pradeep Soundararajan commented on CLOUDSTACK-1003:
---

We are using mvn + waf (temporarily). I did not encounter any issue during both.

Do you think am I missing anything during packaging which are specific to that 
plugin?

 Failed to start management server with master build
 ---

 Key: CLOUDSTACK-1003
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1003
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, Install and Setup
Affects Versions: 4.1.0
 Environment: Centos 6.0.3
Reporter: Rayees Namathponnan
Assignee: Pradeep Soundararajan
Priority: Blocker
 Attachments: catalina.out


 Observed below error in MS log
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Processing 
 updateSSLKeyStore
 INFO  [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at 
 /etc/cloud/management/cloud.keystore
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Processing updateKeyPairs
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Systemvm keypairs not 
 found in database. Need to store them in the database
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Going to update systemvm 
 iso with generated keypairs if needed
 INFO  [utils.component.ComponentLocator] (main:) Config file found at 
 /etc/cloud/management/components.xml.  Configuring management-server
 INFO  [utils.component.ComponentLocator] (main:) Found component: 
 com.cloud.configuration.dao.ConfigurationDao in 
 com.cloud.configuration.dao.ConfigurationDaoImpl - Configuration 
 configuration server
 ERROR [utils.component.ComponentLocator] (main:) Unable to load configuration 
 for management-server from components.xml
 com.cloud.utils.exception.CloudRuntimeException: Unable to find class: 
 org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker
   at 
 com.cloud.utils.component.ComponentLocator$XmlHandler.fillInfo(ComponentLocator.java:1028)
   at 
 com.cloud.utils.component.ComponentLocator$XmlHandler.startElement(ComponentLocator.java:1089)
   at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown 
 Source)
   at 
 org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown 
 Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown
  Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown
  Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown 
 Source)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Re: [SCREENCAST] request for screencast to demo features

2013-01-18 Thread Sebastien Goasguen

On Jan 18, 2013, at 10:38 AM, Prasanna Santhanam t...@apache.org wrote:

 On Fri, Jan 18, 2013 at 02:57:46PM +0530, Sebastien Goasguen wrote:
 Hi everyone,
 
 With tons of new features being worked on, it would be nice if the 
 developers of a particular feature could record a screencast to demo what 
 they have done.
 I understand that there is the wiki but more often than not the 
 documentation is lagging.
 
 Screencasts would help with writing documentation and also demo those 
 features for users.
 
 For instance I would love to see screencasts on:
 -nicira
 -ceph
 -S3 integration
 -caringo
 -devcloud-kvm
 
 Will include a marvin screencast once I'm done refactoring to show how
 tests can be written. Do you have a tips page/tutorial on doing a
 screencast? I think we write the transcript before the recording? 

I use Quicktime on my mac (10.8.2), it does screen recording easily.

What ever works for you in terms of transcript or no transcripts. You can prep 
by putting down a story board on paper.
Including the actual transcripts of what you say, would make it compliant for 
hearing impaired. For now I'd rather see many screencasts than just a few 
compliant ones.

Keep it relatively short 15 minutes.

I am still working on HD resolution.

-Sebastien


 
 -- 
 Prasanna.,



Re: Patches needing review

2013-01-18 Thread Prasanna Santhanam
On Fri, Jan 18, 2013 at 03:49:39AM +0530, Animesh Chaturvedi wrote:
 Folks
 
 There are many patch review request  in review board that have not
 been attended to.  Many of them have been pending for more than a
 month. Please attend to them. Also when submitting a patch remember
 to provide unit tests.
 
 
Rohit hacked up rb tool[1] to list out patch requests pending in
the queue. Here's the list I just pulled up using the tool:

~/workspace/cloudstack/incubator-cloudstack/python/lib(branch:master*) $ 
rbtool-cs -l

Found 41 pending review requests for cloudstack
 #ID | Submitter   | Branch  | Reviewer 
|Upd| Last Review by non-submitter
--
5655 | Spark404| master  |  |   
| rohityadav- Hugo, is this review still applicable? If not c 
7018 | bharatk | | nitin,   |   
| bharatk- Ship It! 
7594 | deeptid | master  | anthonyxu,   |   
| ke4qqq- Can you make sure this is a bug on issues.apache.or 
7660 | deeptid | master  |  |   
| 
7802 | radhikap| MASTER  | ke4qqq,chip.childers,jtomechak,  |   
| jzb- Hi Radhika,  
7827 | koushikd| | murali.reddy,kelveny,|   
| 
7891 | koushikd| | aprateek,alexhu, |   
| 
8180 | radhikap| | chip.childers,vijayendrabvs,jtom | Y 
| jtomechak- Public IP assignment feature is committed (see C 
8293 | kawai   | master  |  |   
| rohityadav- Any update on this one? 
8294 | kawai   | master  |  |   
| 
8307 | kdamage | doc-config-gen  |  |   
| ke4qqq- I tested this and see at least one problem.  
8355 | meghna.kale | master  | chip.childers,tsp,chiradeep,alex |   
| rohityadav- Heads up, going to merge api_refactoring soon s 
8465 | likitha | master  | prachidamle, |   
| 
8466 | likitha | master  | prachidamle, | Y 
| prachidamle- Code looks good. How do we test the query API  
8468 | likitha | master  | prachidamle, |   
| ke4qqq- CLOUDSTACK-197 is the generic Query API bug - but d 
8480 | likitha | master  | prachidamle, |   
| 
8483 | likitha | master  | prachidamle, |   
| 
8492 | likitha | master  | prachidamle, |   
| 
8513 | likitha | master  | prachidamle, |   
| 
8545 | meghna.kale | master  | chip.childers,tsp,mice_xia,chira |   
| rohityadav- Thanks for your patch, but your changes are not 
8547 | likitha | master  | alena1108,   |   
| 
8613 | tsp | master, 4.0 | edison,mlsorensen,   |   
| nitin- I guess we need to take care of migration as well. F 
8623 | devdeep | master  |  |   
| nitin- Dont you have to take care of migration ? Do you thi 
8632 | tsp | master  | nitin,edison,mlsorensen, |   
| 
8636 | radhikap| master  | ke4qqq,chip.childers,jtomechak,j | Y 
| jtomechak- Need someone to test the installation with the c 
8698 | radhikap| | ke4qqq,chip.childers,jtomechak,j | Y 
| jtomechak- [] 
8701 | boul| | Spark404,chiradeep,  |   
| 
8742 | likitha | master  | prachidamle,chiradeep,sebgoa,|   
| 
8813 | radhikap| master  | ke4qqq,chip.childers,jtomechak,  | Y 
| jtomechak- Looks like the code for this feature is still un 
8838 | noa | |  |   
| rohityadav- The problem is mkisofs is not same as genisoima 
8853 | koushikd| | aprateek,alexhu, |   
| 
8859 | Saksham | master  | kishan,  | Y 
| kishan- Looks good to me. 
8876 | likitha | master  | jlkinsel,alena1108,rohityadav,   |   
| rohityadav- Good start indeed, and John would know better a 
8900 | Saksham | master  | devdeep, |   
| nitin- You need to take care of migration as well. Any thou 
8905 | harikrishna.pat | master  | aprateek,| Y 
| ke4qqq- Are you the sole author of this work?  
8970 | radhikap| MASTER  | chip.childers,jtomechak,murali.r | Y 
| 
8971 

Re: [Discuss] Cpu and Ram overcommit.

2013-01-18 Thread Abhinandan Prateek
Bharat,
  
   I guess you can start work on this.

   FS is here 
https://cwiki.apache.org/CLOUDSTACK/cpu-and-ram-overcommit.html

-abhi

On 18/01/13 3:23 PM, Bharat Kumar bharat.ku...@citrix.com wrote:

Hi  All,

I have included  the information form the discussions in the functional
spec  and I think we have sufficient  information  to start the
implementation.

-Original Message-
From: Bharat Kumar [mailto:bharat.ku...@citrix.com]
Sent: Thursday, 17 January 2013 11:01 PM
To: cloudstack-us...@incubator.apache.org
Cc: cloudstack-dev@incubator.apache.org
Subject: Re: [Discuss] Cpu and Ram overcommit.

Alex thank you for your suggestions, I  will add them to the functional
spec.

Bharat.

On Jan 16, 2013, at 4:19 AM, Alex Huang alex.hu...@citrix.com wrote:

 Bharat,
 
 A few comments.
 
 - On your caveats, I think you should deploy 2b.  Accept the change but
not add more VMs anymore.  You can provide a warning.
 
 - As for repeated alerts, that's a problem with the alert mechanism.
It should not repeat alerts.  Fix it there.
 
 On implementation:
 - You need to add something more generic such as a cluster-details to
cluster that allows you retrieve what you want to add to it.  I don't
see any reason to keep adding columns to cluster/pods.  Cluster/pods are
organization units.  We should add a details table (might already there)
to keep component details because no one else will use this detail
information.  I don't see why we need to add database columns for this.
 - How are you planning to handle hypervisors that cannot overcommit cpu
or ram?  To me this needs capabilities added to the hypervisor caps
table.
 - This is a planner specific change.  Make sure the changes are
localized in the planner.  If there's anything you need to change in
CloudStack core/server, please point that out in a subtask for your bug
and let me know.
 
 --Alex
 
 -Original Message-
 From: Bharat Kumar [mailto:bharat.ku...@citrix.com]
 Sent: Tuesday, January 08, 2013 3:16 AM
 To: cloudstack-us...@incubator.apache.org
 Cc: cloudstack-dev@incubator.apache.org
 Subject: Re: [Discuss] Cpu and Ram overcommit.
 
 Hi Hari,
 
 A host can have more than one tag so we need not overwrite the
 inherited cluster  tag of a host, if a host specific tag is added.
 
 Bharat
 
 On Dec 26, 2012, at 11:32 AM, Bharat Kumar bharat.ku...@citrix.com
 wrote:
 
 Hi all,
 
 Presently in Cloudstack  there is a provision for cpu overcommit and
 no
 provision for the ram overcommit. There is no way to configure the
 overcommit ratios on a per cluster basis.
 
 So we propose to add a new feature to allow the ram overcommit and
 to
 specify the overcommit ratios ( cpu/ram ) on a per cluster basis.
 
 Motivation to add the feature:
 Most of the operating systems and applications do not use the
 allocated
 resources to 100%. This makes it possible to allocate more resource
 than what is actually available.  The overcommitting of resources
 allows to run the underutilized VMs in fewer number of hosts, This
saves money and power.
 Currently the cpu overcommit  ratio is a global parameter which means
 there is no way to fine tune or have a granular control over the
overcommit ratios.
 
 This feature will enable
 1.) Configuring the overcommit ratios on a per cluster basis.
 2.) ram overcommit feature in xen and kvm. ( It is there for
 VMware.)
 3.) Updating the overcommit ratios of a cluster.
 
 Regards,
 Bharat Kumar.
 




[jira] [Commented] (CLOUDSTACK-1010) Host count and Secondary storage count always shows 1 in UI

2013-01-18 Thread Kishan Kavala (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1010?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557116#comment-13557116
 ] 

Kishan Kavala commented on CLOUDSTACK-1010:
---

commit 51c1ca7cbe0ed5206ea5844acb71a3f6f53d1959
Author: Kishan Kavala kis...@cloud.com
Date:   Fri Jan 18 16:13:25 2013 +0530

CLOUDSTACK-1010: Fix count issue for listHosts command


 Host count and Secondary storage count always shows 1 in UI
 ---

 Key: CLOUDSTACK-1010
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1010
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, UI
Affects Versions: 4.1.0
 Environment: KVM
Reporter: Rayees Namathponnan
Assignee: Kishan Kavala
 Fix For: 4.1.0


 Steps to reproduce the problem: 
 Step1 - Create Advanced zone with 2 zone, 2 POD, 2 cluster and 2 host in 
 first zone and 1 host in second zone
 Step2 - Add Secondary storage for both zone
 Expected result 
 In Infrastructure UI number host should be 3 and Secondary storage count 
 should 2 
 Actual Result 
 In Infrastructure UI number host and Secondary storage count shows 1 
 Addition information :
 List host count always shows one 
 2013-01-17 11:38:18,819 INFO  [cloud.api.ApiServer] (catalina-exec-18:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listHostsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dtype=SecondaryStoragepage=1pagesize=1_=1358451527529
  200 { listhostsresponse : { count:1 ,host : [  
 {id:6a1deb76-7c6c-47be-b200-b36f84398f4b,name:nfs://10.223.110.232:/export/home/rayees/SC_QA_AUTO4/secondary,state:Alert,type:SecondaryStorage,ipaddress:nfs,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,version:4.1.0.20130116180639,hypervisor:None,disksizetotal:11810778316800,disksizeallocated:6434799058944,lastpinged:1970-01-16T00:30:03-0800,islocalstorageactive:false,created:2013-01-17T08:59:01-0800,events:ShutdownRequested;
  Remove; Ping; AgentDisconnected; ManagementServerDown; 
 AgentConnected,suitableformigration:false,resourcestate:Enabled} ] } }
 2013-01-17 11:38:18,893 INFO  [cloud.api.ApiServer] (catalina-exec-1:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listSystemVmsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dpage=1pagesize=1_=1358451527561
  200 { listsystemvmsresponse : { count:4 ,systemvm : [  
 {id:840eba2d-a51b-4662-8728-48c9f2a562fd,systemvmtype:secondarystoragevm,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,dns1:72.52.126.11,gateway:10.223.122.65,name:s-1-QA,podid:8ea2bb62-075e-43f1-87c1-d1873ff04daf,hostid:0ac3c490-78db-4087-8ff9-6e8cee3a2907,hostname:Rack2Host11.lab.vmops.com,privateip:10.223.50.95,privatemacaddress:06:d2:08:00:00:1e,privatenetmask:255.255.255.192,linklocalip:169.254.3.100,linklocalmacaddress:0e:00:a9:fe:03:64,linklocalnetmask:255.255.0.0,publicip:10.223.122.66,publicmacaddress:06:a7:4e:00:00:3e,publicnetmask:255.255.255.192,templateid:91ebb054-f501-4a21-ae97-0386b80d0b38,created:2013-01-17T11:26:53-0800,state:Running,objectId:1}
  ] } }
 2013-01-17 11:38:18,904 INFO  [cloud.api.ApiServer] (catalina-exec-8:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listRoutersresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dprojectid=-1page=1pagesize=1_=1358451527634
  200 { listroutersresponse : { } }
 2013-01-17 11:38:18,915 INFO  [cloud.api.ApiServer] (catalina-exec-17:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listRoutersresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3DlistAll=truepage=1pagesize=1_=1358451527645
  200 { listroutersresponse : { } }
 2013-01-17 11:38:20,332 INFO  [cloud.api.ApiServer] (catalina-exec-6:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listStoragePoolsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dpage=1pageSize=20listAll=true_=1358451529042
  200 { liststoragepoolsresponse : { count:3 ,storagepool : [  
 {id:fff90cb5-06dd-33b3-8815-d78c08ca01d9,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,podid:8ea2bb62-075e-43f1-87c1-d1873ff04daf,podname:POD01,name:PS0,ipaddress:10.223.110.232,path:/export/home/rayees/SC_QA_AUTO4/primary,created:2013-01-17T11:26:31-0800,type:NetworkFilesystem,clusterid:20867e66-93e5-4d5c-9380-bdcd6a45c851,clustername:KVM_Cluster1,disksizetotal:11810778316800,disksizeallocated:147456,disksizeused:6434799058944,tags:,state:Up},
  
 

[jira] [Resolved] (CLOUDSTACK-810) Make DirectAgent thread pool size configurable

2013-01-18 Thread Koushik Das (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Koushik Das resolved CLOUDSTACK-810.


Resolution: Fixed

Added to master with following commit

commit cd37e22f9baf15f1369e5087197dafbcaf2ad65e
Author: Koushik Das koushik@citrix.com
Date:   Mon Jan 7 13:40:55 2013 +0530

CLOUDSTACK-810: Make DirectAgent thread pool size configurable Removed 
hard-coding of directagent thread pool size and now reading it from 
configuration

Signed-off-by: Chiradeep Vittal chirad...@apache.org


 Make DirectAgent thread pool size configurable
 --

 Key: CLOUDSTACK-810
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-810
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: pre-4.0.0, 4.0.0
Reporter: Koushik Das
Assignee: Koushik Das
 Fix For: 4.0.2


 Cuurently the DirectAgent pool size is hard-coded to 500. One of the factors 
 that can affect this is the number of hosts in a deployment. If there are 
 more than 500 hosts (say around 1K) then this pool can easily get exhausted 
 resulting in delays and undesired behavior.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Resolved] (CLOUDSTACK-1010) Host count and Secondary storage count always shows 1 in UI

2013-01-18 Thread Kishan Kavala (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1010?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Kishan Kavala resolved CLOUDSTACK-1010.
---

Resolution: Fixed

 Host count and Secondary storage count always shows 1 in UI
 ---

 Key: CLOUDSTACK-1010
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1010
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, UI
Affects Versions: 4.1.0
 Environment: KVM
Reporter: Rayees Namathponnan
Assignee: Kishan Kavala
 Fix For: 4.1.0


 Steps to reproduce the problem: 
 Step1 - Create Advanced zone with 2 zone, 2 POD, 2 cluster and 2 host in 
 first zone and 1 host in second zone
 Step2 - Add Secondary storage for both zone
 Expected result 
 In Infrastructure UI number host should be 3 and Secondary storage count 
 should 2 
 Actual Result 
 In Infrastructure UI number host and Secondary storage count shows 1 
 Addition information :
 List host count always shows one 
 2013-01-17 11:38:18,819 INFO  [cloud.api.ApiServer] (catalina-exec-18:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listHostsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dtype=SecondaryStoragepage=1pagesize=1_=1358451527529
  200 { listhostsresponse : { count:1 ,host : [  
 {id:6a1deb76-7c6c-47be-b200-b36f84398f4b,name:nfs://10.223.110.232:/export/home/rayees/SC_QA_AUTO4/secondary,state:Alert,type:SecondaryStorage,ipaddress:nfs,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,version:4.1.0.20130116180639,hypervisor:None,disksizetotal:11810778316800,disksizeallocated:6434799058944,lastpinged:1970-01-16T00:30:03-0800,islocalstorageactive:false,created:2013-01-17T08:59:01-0800,events:ShutdownRequested;
  Remove; Ping; AgentDisconnected; ManagementServerDown; 
 AgentConnected,suitableformigration:false,resourcestate:Enabled} ] } }
 2013-01-17 11:38:18,893 INFO  [cloud.api.ApiServer] (catalina-exec-1:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listSystemVmsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dpage=1pagesize=1_=1358451527561
  200 { listsystemvmsresponse : { count:4 ,systemvm : [  
 {id:840eba2d-a51b-4662-8728-48c9f2a562fd,systemvmtype:secondarystoragevm,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,dns1:72.52.126.11,gateway:10.223.122.65,name:s-1-QA,podid:8ea2bb62-075e-43f1-87c1-d1873ff04daf,hostid:0ac3c490-78db-4087-8ff9-6e8cee3a2907,hostname:Rack2Host11.lab.vmops.com,privateip:10.223.50.95,privatemacaddress:06:d2:08:00:00:1e,privatenetmask:255.255.255.192,linklocalip:169.254.3.100,linklocalmacaddress:0e:00:a9:fe:03:64,linklocalnetmask:255.255.0.0,publicip:10.223.122.66,publicmacaddress:06:a7:4e:00:00:3e,publicnetmask:255.255.255.192,templateid:91ebb054-f501-4a21-ae97-0386b80d0b38,created:2013-01-17T11:26:53-0800,state:Running,objectId:1}
  ] } }
 2013-01-17 11:38:18,904 INFO  [cloud.api.ApiServer] (catalina-exec-8:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listRoutersresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dprojectid=-1page=1pagesize=1_=1358451527634
  200 { listroutersresponse : { } }
 2013-01-17 11:38:18,915 INFO  [cloud.api.ApiServer] (catalina-exec-17:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listRoutersresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3DlistAll=truepage=1pagesize=1_=1358451527645
  200 { listroutersresponse : { } }
 2013-01-17 11:38:20,332 INFO  [cloud.api.ApiServer] (catalina-exec-6:null) 
 (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 
 10.216.133.42 -- GET 
 command=listStoragePoolsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dpage=1pageSize=20listAll=true_=1358451529042
  200 { liststoragepoolsresponse : { count:3 ,storagepool : [  
 {id:fff90cb5-06dd-33b3-8815-d78c08ca01d9,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,podid:8ea2bb62-075e-43f1-87c1-d1873ff04daf,podname:POD01,name:PS0,ipaddress:10.223.110.232,path:/export/home/rayees/SC_QA_AUTO4/primary,created:2013-01-17T11:26:31-0800,type:NetworkFilesystem,clusterid:20867e66-93e5-4d5c-9380-bdcd6a45c851,clustername:KVM_Cluster1,disksizetotal:11810778316800,disksizeallocated:147456,disksizeused:6434799058944,tags:,state:Up},
  
 

RE: Functional Specification for the multiple IPs per NIC

2013-01-18 Thread Jayapal Reddy Uradi
Update the FS with the below discussions.

Please find updated FS below.
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+IP+address+per+NIC

Thanks,
Jayapal

 -Original Message-
 From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
 Sent: Thursday, January 17, 2013 12:51 PM
 To: CloudStack DeveloperList
 Subject: Re: Functional Specification for the multiple IPs per NIC
 
 I hope we consider the case when the ip is removed from the nic while there
 is a PF rule to that ip.
 
 On 1/16/13 9:10 PM, Jayapal Reddy Uradi jayapalreddy.ur...@citrix.com
 wrote:
 
 Hi Chiradeep,
 
 Now the VM NIC will have multiple IPs so for creating PF for secondary
 ip address  we will pass VM id and (optional argument) VM ip address to
 the API.
 When VM ip address is passed it checks the whether the ip belongs to
 the VM or not and configures the PF for the VM IP address.
 
 When VM ip address argument is not passed to the API then it works in
 older way.
 When VM NIC has NO secondary ip address also we can pass VM id and VM
 primary ip address to VM ipaddress argument to API to configure PF.
 
 Thanks,
 Jayapal
 
 
 
  -Original Message-
  From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
  Sent: Thursday, January 17, 2013 1:45 AM
  To: CloudStack DeveloperList
  Subject: Re: Functional Specification for the multiple IPs per NIC
 
  Note also that the createPortForwardingRule API takes a vm id and
 network  id, based on the assumption of a single ip per NIC. This may
 need an  additional parameter of ip (or make the vm id optional).
 
  On 1/15/13 9:35 AM, Anthony Xu xuefei...@citrix.com wrote:
 
  Thanks for bringing this up,
  
  For security group, we may need to handle following things,
  
  As you mentioned,
  Anti-spoofing rules need to be updated, when secondary IP is
  associate/dissociate to NIC.
  
  And
  Security group rule can base on cidr and it can base on
  account/security group, For example a security group rule can allow
  all VMs in another account/security group to access VMs in this
  security group.
  
  In this case,
  
  When secondary IP is associate/dissociate to NIC. The related
  security group rule based on account/security group need to be
  resent to reflect the IP change in this security group.
  
  
  
  Anthony
  
  
  
   -Original Message-
   From: Jayapal Reddy Uradi [mailto:jayapalreddy.ur...@citrix.com]
   Sent: Tuesday, January 15, 2013 5:17 AM
   To: cloudstack-dev@incubator.apache.org
   Subject: RE: Functional Specification for the multiple IPs per NIC
  
   Please find the updated FS in below link.
  
 
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+IP+ad
   dr
   ess+per+NIC
  
   I want to discuss the MIPN case for  shared networks.
  
   I observed VM specific security groups iptables rules in basic
   zone, in which we are allowing  egress traffic from the guest VM
   primary
   (dhcp) address only.
   If we add another IP to the NIC we should update the security
   groups to allow the egress traffic from the new ip.
  
   Example Current  rule:  It allows traffic from the i-2-3 VM's
   10.147.41.239 IP only.
   0 0 i-2-3-TEST-eg  all  --  *  *   10.147.41.239
   0.0.0.0/0   PHYSDEV match --physdev-in vif7.0 --physdev-is-
   bridged
  
   We should update security group rules each time we associate
   secondary IP to NIC.
  
   Please let me know if you have any comments or suggestion for the
   above .
  
   Thanks,
   Jayapal
  
  
  
  
-Original Message-
From: John Kinsella [mailto:j...@stratosec.co]
Sent: Wednesday, December 19, 2012 10:59 PM
To: cloudstack-dev@incubator.apache.org
Subject: Re: Functional Specification for the multiple IPs per
NIC
   
'morning Hari. I can think of at least one use case where
allowing
   the user
to specify the IP would be required - when migrating an IP from
one
   CAP to
ACS or from one VM to another.
   
Anyways - I think what the real answer to your question is would
be
   to have
a granular security model around the API calls. At that point
you
   could specify
what users/groups have the ability to assign specific IPs to a
   specific instance.
So I'd vote to implement for now, and attack a granular api
security
   model
sooner rather than later.
   
John
   
On Dec 18, 2012, at 4:15 PM, Hari Kannan
hari.kan...@citrix.com
 wrote:
   
 Regarding  User can specify the  IP address from the guest
 subnet
   if
 not CS picks the IP from the guest subnet  comment in the FS

 I don't see a need to do this - because, it is a shared
 network,
   how
 does he know what is used up and what is not? So, he could go
   through
 a sequence of steps only to get an error message back that it
 is
   not
 possible (and keep doing this until success)

 One possibility is telling him what is available - it may not

RE: [SCREENCAST] request for screencast to demo features

2013-01-18 Thread Donal Lafferty
Tips?  

I use Camtasia to record.  I suggest flipping back and fore between a 
powerpoint that sets the context for what you're doing, and the CloudStack GUI 
/ shell / tool that you are demonstrating.

 -Original Message-
 From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of
 Prasanna Santhanam
 Sent: 18 January 2013 09:38
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [SCREENCAST] request for screencast to demo features
 
 On Fri, Jan 18, 2013 at 02:57:46PM +0530, Sebastien Goasguen wrote:
  Hi everyone,
 
  With tons of new features being worked on, it would be nice if the
 developers of a particular feature could record a screencast to demo what
 they have done.
  I understand that there is the wiki but more often than not the
 documentation is lagging.
 
  Screencasts would help with writing documentation and also demo those
 features for users.
 
  For instance I would love to see screencasts on:
  -nicira
  -ceph
  -S3 integration
  -caringo
  -devcloud-kvm
 
 Will include a marvin screencast once I'm done refactoring to show how tests
 can be written. Do you have a tips page/tutorial on doing a screencast? I
 think we write the transcript before the recording?
 
 --
 Prasanna.,


Re: Review Request: CLOUDSTACK-988: HV version must be updated in hypervisor_version column of host table

2013-01-18 Thread Abhinandan Prateek

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/8993/#review15484
---

Ship it!


Ship It!

- Abhinandan Prateek


On Jan. 17, 2013, 12:46 p.m., Koushik Das wrote:
 
 ---
 This is an automatically generated e-mail. To reply, visit:
 https://reviews.apache.org/r/8993/
 ---
 
 (Updated Jan. 17, 2013, 12:46 p.m.)
 
 
 Review request for cloudstack, Nitin Mehta and Alex Huang.
 
 
 Description
 ---
 
 HV version is stored in 'hypervisor_version' column in host table wherever 
 present.
 Also correctly populating 'version' column in host table with resource file 
 version.
 
 
 This addresses bug CLOUDSTACK-988.
 
 
 Diffs
 -
 
   core/src/com/cloud/network/resource/TrafficSentinelResource.java a13e080 
   
 plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
  a444cfe 
   
 plugins/network-elements/f5/src/com/cloud/network/resource/F5BigIpResource.java
  c9c3711 
   
 plugins/network-elements/juniper-srx/src/com/cloud/network/resource/JuniperSrxResource.java
  f823ab8 
   
 plugins/network-elements/netscaler/src/com/cloud/network/resource/NetscalerResource.java
  afb0135 
   
 plugins/network-elements/nicira-nvp/src/com/cloud/network/resource/NiciraNvpResource.java
  12ed72a 
   server/src/com/cloud/baremetal/ExternalDhcpResourceBase.java cbfcfd1 
   server/src/com/cloud/baremetal/PxeServerResourceBase.java c307ccf 
   server/src/com/cloud/resource/DummyHostServerResource.java 5144a91 
   server/src/com/cloud/resource/ResourceManagerImpl.java ffc09f0 
 
 Diff: https://reviews.apache.org/r/8993/diff/
 
 
 Testing
 ---
 
 Verified that HV version is correctly updated in host table for XS and Vmware
 
 
 Thanks,
 
 Koushik Das
 




RE: Build SystemVM template

2013-01-18 Thread Donal Lafferty
You might want to check the XenServer support.

I had problems with detaching VDIs on Wheezy on XenServer March/April 2012.  
There was no reason to report the problem at the time, because XenServer didn't 
cite Wheezy as a supported guest OS.  Also, I expect I was using an older build.

DL

 -Original Message-
 From: Rohit Yadav [mailto:rohit.ya...@citrix.com]
 Sent: 18 January 2013 02:47
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: Build SystemVM template
 
 
 On 17-Jan-2013, at 6:10 PM, Sheng Yang sh...@yasker.org wrote:
 
  On Thu, Jan 17, 2013 at 5:07 PM, Rohit Yadav rohit.ya...@citrix.com
 wrote:
  Hi Sheng, we can reuse viewee and vagrant based appliance building code
 for devcloud for systemvm. We can use debian wheezy i386 beta4 for now
 and when it releases in february we can have another round of
 building/testing.
 
  Sure, is there a document for it? Also, I didn't see a release date
  for Wheezy... Do you have reference?
 
 tools/devcloud/README.md (it can have bugs, help fix it wherever you see
 improvement) Once you build systemvm, you can export and convert the
 disk image from vmdk/vhd to qcow2/vhd/vmdk etc.
 Wheezy should release in Feb like the last two releases in 2009 and 2011, but
 it's not confirmed.
 
 Regards.
 
 
  --Sheng
 
  Regards.
 
  On 17-Jan-2013, at 4:18 PM, Sheng Yang sh...@yasker.org wrote:
 
  Hi,
 
  I just found the buildsystemvm.sh won't work, and I need to build a
  new systemvm template for IPv6 support, because we're adding new
  softwares in it.
 
  Apparently due to license issue(I guess),xt_CHECKSUM.ko which is a
  extension of iptables to fix one Debian/Ubuntu DHCP issue. I believe
  the iptables_1.4.8-3local1checksum1_i386.deb(a patched version of
  iptables by us) is also removed, as well as
  xe-guest-utilities_5.6.0-595_i386.deb.
 
  So, what we suppose to do to make systemvm template buildable again?
  I know there are some licenses issues involved, but not quite clear
  on these.
 
  --Sheng
 



regarding Backup DR/VM DR, Volume FS

2013-01-18 Thread Suresh Sadhu
HI All,

Is there any Functional spec available for Backup DR/VM DR, Volume feature. 
Apache CS ID #671

Regards
Sadhu



Re: Functional Specification for the multiple IPs per NIC

2013-01-18 Thread Abhinandan Prateek
Jayapal,
  
   The FS seems to be updated with the feedback received on the forum, I
guess you can start implementation.

-abhi

On 18/01/13 4:33 PM, Jayapal Reddy Uradi jayapalreddy.ur...@citrix.com
wrote:

Update the FS with the below discussions.

Please find updated FS below.
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+IP+address
+per+NIC

Thanks,
Jayapal

 -Original Message-
 From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
 Sent: Thursday, January 17, 2013 12:51 PM
 To: CloudStack DeveloperList
 Subject: Re: Functional Specification for the multiple IPs per NIC
 
 I hope we consider the case when the ip is removed from the nic while
there
 is a PF rule to that ip.
 
 On 1/16/13 9:10 PM, Jayapal Reddy Uradi
jayapalreddy.ur...@citrix.com
 wrote:
 
 Hi Chiradeep,
 
 Now the VM NIC will have multiple IPs so for creating PF for secondary
 ip address  we will pass VM id and (optional argument) VM ip address to
 the API.
 When VM ip address is passed it checks the whether the ip belongs to
 the VM or not and configures the PF for the VM IP address.
 
 When VM ip address argument is not passed to the API then it works in
 older way.
 When VM NIC has NO secondary ip address also we can pass VM id and VM
 primary ip address to VM ipaddress argument to API to configure PF.
 
 Thanks,
 Jayapal
 
 
 
  -Original Message-
  From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
  Sent: Thursday, January 17, 2013 1:45 AM
  To: CloudStack DeveloperList
  Subject: Re: Functional Specification for the multiple IPs per NIC
 
  Note also that the createPortForwardingRule API takes a vm id and
 network  id, based on the assumption of a single ip per NIC. This may
 need an  additional parameter of ip (or make the vm id optional).
 
  On 1/15/13 9:35 AM, Anthony Xu xuefei...@citrix.com wrote:
 
  Thanks for bringing this up,
  
  For security group, we may need to handle following things,
  
  As you mentioned,
  Anti-spoofing rules need to be updated, when secondary IP is
  associate/dissociate to NIC.
  
  And
  Security group rule can base on cidr and it can base on
  account/security group, For example a security group rule can allow
  all VMs in another account/security group to access VMs in this
  security group.
  
  In this case,
  
  When secondary IP is associate/dissociate to NIC. The related
  security group rule based on account/security group need to be
  resent to reflect the IP change in this security group.
  
  
  
  Anthony
  
  
  
   -Original Message-
   From: Jayapal Reddy Uradi [mailto:jayapalreddy.ur...@citrix.com]
   Sent: Tuesday, January 15, 2013 5:17 AM
   To: cloudstack-dev@incubator.apache.org
   Subject: RE: Functional Specification for the multiple IPs per NIC
  
   Please find the updated FS in below link.
  
 
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+IP+ad
   dr
   ess+per+NIC
  
   I want to discuss the MIPN case for  shared networks.
  
   I observed VM specific security groups iptables rules in basic
   zone, in which we are allowing  egress traffic from the guest VM
   primary
   (dhcp) address only.
   If we add another IP to the NIC we should update the security
   groups to allow the egress traffic from the new ip.
  
   Example Current  rule:  It allows traffic from the i-2-3 VM's
   10.147.41.239 IP only.
   0 0 i-2-3-TEST-eg  all  --  *  *   10.147.41.239
   0.0.0.0/0   PHYSDEV match --physdev-in vif7.0
--physdev-is-
   bridged
  
   We should update security group rules each time we associate
   secondary IP to NIC.
  
   Please let me know if you have any comments or suggestion for the
   above .
  
   Thanks,
   Jayapal
  
  
  
  
-Original Message-
From: John Kinsella [mailto:j...@stratosec.co]
Sent: Wednesday, December 19, 2012 10:59 PM
To: cloudstack-dev@incubator.apache.org
Subject: Re: Functional Specification for the multiple IPs per
NIC
   
'morning Hari. I can think of at least one use case where
allowing
   the user
to specify the IP would be required - when migrating an IP from
one
   CAP to
ACS or from one VM to another.
   
Anyways - I think what the real answer to your question is would
be
   to have
a granular security model around the API calls. At that point
you
   could specify
what users/groups have the ability to assign specific IPs to a
   specific instance.
So I'd vote to implement for now, and attack a granular api
security
   model
sooner rather than later.
   
John
   
On Dec 18, 2012, at 4:15 PM, Hari Kannan
hari.kan...@citrix.com
 wrote:
   
 Regarding  User can specify the  IP address from the guest
 subnet
   if
 not CS picks the IP from the guest subnet  comment in the FS

 I don't see a need to do this - because, it is a shared
 network,
   how
 does he know what is used up and what is not? So, he could go
   

RE: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs per Tenant

2013-01-18 Thread Likitha Shetty
In CloudStack we can already reserve the public IP range to an account but not 
release it back to the free pool, so how about we divide this requirement into 
2 parts - 1) Dedicate Public IP range 2) Dedicate Guest VLAN's per tenant.

Since Part 1 has already implemented, we need to only add the enhancement 'Add 
releasing these IP Address range to the free pool'. I will create an 
enhancement ticket to track this?
As for Part 2, I will soon publish an FS based on the requirements.

Any concerns?

Thank you,
Likitha

-Original Message-
From: Likitha Shetty [mailto:likitha.she...@citrix.com]
Sent: Thursday, January 17, 2013 3:55 PM
To: cloudstack-us...@incubator.apache.org; cloudstack-
d...@incubator.apache.org
Subject: RE: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs per
Tenant

Yes, before reserving the public ip range we do verify if the account/domain is
exceeding the limit.

Thank You,
Likitha

-Original Message-
From: Sailaja Mada [mailto:sailaja.m...@citrix.com]
Sent: Thursday, January 17, 2013 3:50 PM
To: cloudstack-us...@incubator.apache.org; cloudstack-
d...@incubator.apache.org
Subject: RE: [DISCUSS] Dedicated Resources: Public IP Addresses and
VLANs per Tenant

Hi Likitha,

Currently we can reserve the public IP range to an account. I would
assume we are cross checking the account/domain limit for the max no of
Public IP addresses  while reserving the Public IP to an account?

Please clarify.

Thanks,
Sailaja.M

-Original Message-
From: Likitha Shetty [mailto:likitha.she...@citrix.com]
Sent: Thursday, January 10, 2013 7:43 PM
To: cloudstack-us...@incubator.apache.org; cloudstack-
d...@incubator.apache.org
Subject: RE: [DISCUSS] Dedicated Resources: Public IP Addresses and
VLANs per Tenant

For CreateVlanIpRange API call, we can set the account parameter to
specify the VLAN owner. If specified, the Public IP's get allocated to
the account and the VLAN get dedicated to it. Could you please clarify
what the difference between this and the mentioned requirement is?

But I couldn't figure out a way to release back the VLAN and the
allocated IP's to the free pool. I achieved it by deleting the VLAN-IP
range and then adding it back to the system account. Is there a better
way to do it or do we need to implement this?

Thank you,
Likitha

-Original Message-
From: Manan Shah [mailto:manan.s...@citrix.com]
Sent: Friday, January 04, 2013 10:11 PM
To: cloudstack-us...@incubator.apache.org
Subject: Re: [DISCUSS] Dedicated Resources: Public IP Addresses and
VLANs per Tenant

Thanks Tamas for bringing up additional requirements. I have updated
the requirements document.

Regards,
Manan Shah




On 1/4/13 6:32 AM, Tamas Monos tam...@veber.co.uk wrote:

+1

Additional to the requirements:
- Usage must reflect if these are assigned to an Account so the admin
can see how many IP is allocated to the account.
- On allocation it needs to check whether the required range is
available (not in use) and conforms with the account limits (cannot
allocate more IPs than maximum IPs per account).

Regards

Tamas Monos   DDI
+44(0)2034687012
Chief Technical Office
+44(0)2034687000
Veber: The Hosting Specialists   Fax +44(0)871 522
7057
http://www.veber.co.uk

Follow us on Twitter: www.twitter.com/veberhost Follow us on Facebook:
www.facebook.com/veberhost


-Original Message-
From: Manan Shah [mailto:manan.s...@citrix.com]
Sent: 22 December 2012 01:03
To: cloudstack-us...@incubator.apache.org
Subject: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs
per Tenant

Hi,

I would like to propose a new feature for dedicating IP Addresses and
VLANs per Tenant. I have created a JIRA ticket and provided the
requirements at the following location.  Please provide feedback on
the requirements.

JIRA Ticket: https://issues.apache.org/jira/browse/CLOUDSTACK-704
Requirements:
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Dedicated+Reso
u
r
ces
+
-+Public+IP+Addresses+and+VLANs+per+Tenant

Regards,
Manan Shah






Re: Review Request: CLOUDSTACK-803: HA gets triggered even when the host investigator is unable to determine the state of the host

2013-01-18 Thread Abhinandan Prateek

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/8853/#review15486
---

Ship it!


Ship It!

- Abhinandan Prateek


On Jan. 7, 2013, 8:26 a.m., Koushik Das wrote:
 
 ---
 This is an automatically generated e-mail. To reply, visit:
 https://reviews.apache.org/r/8853/
 ---
 
 (Updated Jan. 7, 2013, 8:26 a.m.)
 
 
 Review request for cloudstack, Abhinandan Prateek and Alex Huang.
 
 
 Description
 ---
 
 CS tries to do HA on VMs if it finds that the host on which they are running 
 is down. HA should only happen when CS is able to determine (host 
 investigators return status as 'Down') that host is down. Currently due to a 
 bug in code even if the hosts investigators are unable to determine state 
 (returns 'null'), HA gets triggered.
  
 This results in unnecessary HA of VMs.
 
 The fix is to not do HA in case the state of host cannot be determined.
 
 
 This addresses bug CLOUDSTACK-803.
 
 
 Diffs
 -
 
   server/src/com/cloud/agent/manager/AgentManagerImpl.java 8141fdb 
 
 Diff: https://reviews.apache.org/r/8853/diff/
 
 
 Testing
 ---
 
 I did the following manual testing
 
 - Setup advanced zone with XS host
 - Created a VM
 - Pulled out network cable for MS
 - Checked in the debugger that the DisconnectTask is running
 - This calls  handleDisconnectWithInvestigation in AgentManagerImpl
 - In the debugger saw that the following line of code is returning state 
 as null 'final Status determinedState = investigate(attache);'
 - So the warning message added is seen 's_logger.warn(Agent state cannot 
 be determined, do nothing);'
 - The above steps continues in a loop till the time I plug the network 
 cable back after which again the status of the host gets correctly determined 
 by the investigator.
 
 If either the XS host or MS is disconnected from network then investigator 
 cannot determine the state of the host and so based on the fix HA won’t be 
 triggered.
 
 Sowmya from Citrix QA team also did additional testing for this on a private 
 branch.
 
 
 Thanks,
 
 Koushik Das
 




[jira] [Resolved] (CLOUDSTACK-988) HV version must be updated in hypervisor_version column of host table

2013-01-18 Thread Koushik Das (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-988?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Koushik Das resolved CLOUDSTACK-988.


Resolution: Cannot Reproduce

committed to master

commit 070856affd4e5b0baef7730aeb2c245775ee6872
Author: Koushik Das koushik@citrix.com
Date:   Thu Jan 17 18:04:36 2013 +0530

CLOUDSTACK-988: HV version must be updated in hypervisor_version column of 
host table HV version is stored in hypervisor_version column in host table 
wherever present Also correctly populating version column in host table with 
resource file version

Signed-off-by: Koushik Das koushik@citrix.com
Signed-off-by: Abhinandan Prateek aprat...@apache.org


 HV version must be updated in hypervisor_version column of host table
 -

 Key: CLOUDSTACK-988
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-988
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: pre-4.0.0, 4.0.0
Reporter: Koushik Das
Assignee: Koushik Das
 Fix For: 4.0.2


 Currently XS stores host version in host_details table, Vmware in host table 
 but in an incorrect column meant for something else. Haven't checked for KVM 
 and OVM.
 For sake of consistency, HV version must be stored in hypervisor_version 
 column of host table. Individual HVs may also duplicate that info in host 
 details or some other places as well.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Reopened] (CLOUDSTACK-988) HV version must be updated in hypervisor_version column of host table

2013-01-18 Thread Koushik Das (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-988?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Koushik Das reopened CLOUDSTACK-988:



resolution reason was incorrect

 HV version must be updated in hypervisor_version column of host table
 -

 Key: CLOUDSTACK-988
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-988
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: pre-4.0.0, 4.0.0
Reporter: Koushik Das
Assignee: Koushik Das
 Fix For: 4.0.2


 Currently XS stores host version in host_details table, Vmware in host table 
 but in an incorrect column meant for something else. Haven't checked for KVM 
 and OVM.
 For sake of consistency, HV version must be stored in hypervisor_version 
 column of host table. Individual HVs may also duplicate that info in host 
 details or some other places as well.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Updated] (CLOUDSTACK-999) Plugin to provide Hyper-V 2012 support

2013-01-18 Thread Donal Lafferty (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-999?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Donal Lafferty updated CLOUDSTACK-999:
--

Fix Version/s: 4.1.0

 Plugin to provide Hyper-V 2012 support
 --

 Key: CLOUDSTACK-999
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-999
 Project: CloudStack
  Issue Type: New Feature
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server, Template, UI
Affects Versions: 4.1.0
 Environment: Hyper-V 2012 is available on releases of Windows 
 operating system from 2012 onwards.  E.g. Windows Server 2012, and Hyper-V 
 Server 2012.
 The plugin will execute at least in part on the CloudStack management server.
Reporter: Donal Lafferty
Assignee: Donal Lafferty
  Labels: Hyper-V, newbie
 Fix For: 4.1.0


 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Hyper-V+2012+%283.0%29+Support

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Re: Review Request: CLOUDSTACK-988: HV version must be updated in hypervisor_version column of host table

2013-01-18 Thread Nitin Mehta

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/8993/#review15487
---


Is this just for the sake of consistency ? Was something affected because of 
this ? If yes, we need to take care of migration as well.

- Nitin Mehta


On Jan. 17, 2013, 12:46 p.m., Koushik Das wrote:
 
 ---
 This is an automatically generated e-mail. To reply, visit:
 https://reviews.apache.org/r/8993/
 ---
 
 (Updated Jan. 17, 2013, 12:46 p.m.)
 
 
 Review request for cloudstack, Nitin Mehta and Alex Huang.
 
 
 Description
 ---
 
 HV version is stored in 'hypervisor_version' column in host table wherever 
 present.
 Also correctly populating 'version' column in host table with resource file 
 version.
 
 
 This addresses bug CLOUDSTACK-988.
 
 
 Diffs
 -
 
   core/src/com/cloud/network/resource/TrafficSentinelResource.java a13e080 
   
 plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
  a444cfe 
   
 plugins/network-elements/f5/src/com/cloud/network/resource/F5BigIpResource.java
  c9c3711 
   
 plugins/network-elements/juniper-srx/src/com/cloud/network/resource/JuniperSrxResource.java
  f823ab8 
   
 plugins/network-elements/netscaler/src/com/cloud/network/resource/NetscalerResource.java
  afb0135 
   
 plugins/network-elements/nicira-nvp/src/com/cloud/network/resource/NiciraNvpResource.java
  12ed72a 
   server/src/com/cloud/baremetal/ExternalDhcpResourceBase.java cbfcfd1 
   server/src/com/cloud/baremetal/PxeServerResourceBase.java c307ccf 
   server/src/com/cloud/resource/DummyHostServerResource.java 5144a91 
   server/src/com/cloud/resource/ResourceManagerImpl.java ffc09f0 
 
 Diff: https://reviews.apache.org/r/8993/diff/
 
 
 Testing
 ---
 
 Verified that HV version is correctly updated in host table for XS and Vmware
 
 
 Thanks,
 
 Koushik Das
 




RE: Review Request: CLOUDSTACK-988: HV version must be updated in hypervisor_version column of host table

2013-01-18 Thread Koushik Das
I need to read HV version as part of CLOUDSTACK-672. It not just for 
consistency, the HV version was not getting updated in the correct place.

From: Nitin Mehta [mailto:nore...@reviews.apache.org] On Behalf Of Nitin Mehta
Sent: Friday, January 18, 2013 5:21 PM
To: Alex Huang; Nitin Mehta
Cc: cloudstack; Koushik Das
Subject: Re: Review Request: CLOUDSTACK-988: HV version must be updated in 
hypervisor_version column of host table

This is an automatically generated e-mail. To reply, visit: 
https://reviews.apache.org/r/8993/




Is this just for the sake of consistency ? Was something affected because of 
this ? If yes, we need to take care of migration as well.


- Nitin


On January 17th, 2013, 12:46 p.m., Koushik Das wrote:
Review request for cloudstack, Nitin Mehta and Alex Huang.
By Koushik Das.

Updated Jan. 17, 2013, 12:46 p.m.

Description

HV version is stored in 'hypervisor_version' column in host table wherever 
present.

Also correctly populating 'version' column in host table with resource file 
version.


Testing

Verified that HV version is correctly updated in host table for XS and Vmware

Bugs: CLOUDSTACK-988
Diffs

 *   core/src/com/cloud/network/resource/TrafficSentinelResource.java (a13e080)
 *   
plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
 (a444cfe)
 *   
plugins/network-elements/f5/src/com/cloud/network/resource/F5BigIpResource.java 
(c9c3711)
 *   
plugins/network-elements/juniper-srx/src/com/cloud/network/resource/JuniperSrxResource.java
 (f823ab8)
 *   
plugins/network-elements/netscaler/src/com/cloud/network/resource/NetscalerResource.java
 (afb0135)
 *   
plugins/network-elements/nicira-nvp/src/com/cloud/network/resource/NiciraNvpResource.java
 (12ed72a)
 *   server/src/com/cloud/baremetal/ExternalDhcpResourceBase.java (cbfcfd1)
 *   server/src/com/cloud/baremetal/PxeServerResourceBase.java (c307ccf)
 *   server/src/com/cloud/resource/DummyHostServerResource.java (5144a91)
 *   server/src/com/cloud/resource/ResourceManagerImpl.java (ffc09f0)

View Diffhttps://reviews.apache.org/r/8993/diff/




RE: [DISCUSS] Global Server Load Balancing (GSLB) FS Design Document

2013-01-18 Thread Venkata SwamyBabu Budumuru
Hi Murali,

I am planning to take the QA job for this feature. Have reviewed the functional 
spec and have the following questions


1. As per the FS, we are going to have a region and zone level flag for GSLB 
capability. Why do we need a flag to be set at zone level ?
As the cloud admin is going to enable GSLB service provider at physical network 
level, can we use this info to decide whether this physical network is enabled 
and used for GSLB rather at zone level

2. Are we going to use the same cloud. physical_network_service_providers table 
to store the services GSLB offering? Do we have the list of services which GSLB 
is going to offer? Can we add those db changes to FS?

3. Is the createGlobalLoadBalacerRule takes the weight parameter along with lb 
algo? can we update the same to API Changes?

4. Functional Requirements sections says statistics shall be collected for 
each of GSLB virtual server.

a. What kind of statistics? Is it the statistics that give a picture 
about which site has more hits, load etc.. so that user can adjust the weights 
associated with virtual server to balance things?
b. Are we also considering the traffic / bandwidth consumption resulted 
by request redirection from one site to the other (due to proximity or weight 
etc..)? are we recording those usage statistics  for billing ?

5. what is the health monitoring workflow? Like if SLB vserver is down / GSLB 
vserver down. Is the CloudStack aware of this and reacts to it?

6. Can the cloud admin use same device to host GSLB vservers and SLB vservers ?

7. Is the planned design going to accommodate multiple devices (NetScalers) for 
hosting GSLB vservers in single physical network?

8. SLB provider can be anything right? It can be VR, VPC VR, VPX, etc..,?

9. Current design is considering requests going from GSLB virtual server to SLB 
vserver and how about a use case where user want to use GSLB to load balance 
request across zones that goes to  static NAT rule / PF rule? 

10. Is it a requirement in public clouds where tenant would ask for / wants to 
have his own domain name rather using *.xyztelco.com? did we consider such 
usecases in this design?

11. Can you also add all the admin API changes?

Thanks,
SWAMY

-Original Message-
From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] 
Sent: Thursday, January 17, 2013 2:32 AM
To: CloudStack DeveloperList
Subject: Re: [DISCUSS] Global Server Load Balancing (GSLB) FS  Design Document

Thanks. Can you add the actual API parameters? Otherwise, LGTM.

On 1/15/13 3:55 AM, Murali Reddy murali.re...@citrix.com wrote:

I have update the FS [1] as per the review comments. Changes done are 
included in document history section.

I would like to seek comments on one change added in FS. In CloudStak, 
at present there are no operations that require orchestration across zones.
GSLB and EIP across zones [2] are two immediate features that require 
cross-zone orchestration. I would like to introduce notion of 'region'
level services and corresponding service provider in to CloudStack. 
Please share your thoughts.

[1]
https://cwiki.apache.org/confluence/display/CLOUDSTACK/GSLB+(Global+Ser
ver
+
Load+Balancing)+Functional+specification+and+Design+Document

[2] https://issues.apache.org/jira/browse/CLOUDSTACK-652


On 11/01/13 2:32 PM, Murali Reddy murali.re...@citrix.com wrote:

On 11/01/13 2:55 AM, Chiradeep Vittal chiradeep.vit...@citrix.com
wrote:

Thanks for the detailed and enlightening write-up*.

I feel that the GSLB service is not a NetworkElement.
NetworkElements are those that participate in the L2/L3 orchestration 
of VMs.
GSLB providers do not do this.

Thanks for the review Chiradeep. Sure, GSLB service, is indeed 
cross-zone service, does not fit in to NetWorkElement model. I will 
by-pass using NetWorkElement, and let GSLB orchestration send commands 
directly to agent representing the GSLB provider.


It does not even participate in the existing Loadbalancer workflow.

In fact I would assert that this is a completely different 
higher-level orchestration workflow that should not need to touch 
network elements or the network manager.
You could even write this feature by orchestrating it using the 
end-user APIs.

Agreed. GSLB orchestration need not be part of network manager, I will 
restrict it to service layer.

I will update the spec and get back.



*A lot of folks strive to format the document according to the 
template but the template is just to make sure that vital information 
is not missed. What ends up happening is that there's a lot of 
information, but incoherently organized. Nice job.


On 1/8/13 12:52 PM, Murali Reddy murali.re...@citrix.com wrote:

In continuation to my proposal [1], I am brining GSLB support 
separately for discussion. I have put up functional specification 
and design documentation at [2]. Please provide feedback, comments.

Quick abstract of the feature:

Today CloudStack supports load balancing 

Re: [DISCUSS] refactoring the marvin integration library

2013-01-18 Thread Prasanna Santhanam
On Fri, Jan 18, 2013 at 07:17:13AM +0530, Chiradeep Vittal wrote:
 +1. Sounds more like a new feature than a 'refactor'.
 What I'd like is a DSL-kind of experience (which is what cloudmonkey is
 tending to)
 Then we could use Lettuce or Cucumber to write some tests.

Thanks Chiradeep, the marvin integration libraries have the same verbs
that cloudmonkey uses infact. But don't quite provide a DSL
experience. The CLI does this more automatically and better.

While true DSL was not the intention of my proposal, I'll see if that
can be provided.

-- 
Prasanna.,




RE: Review Request: CloudStack-965: When a detailview action is prohibited, the operation dialog box should not show up in the mean time

2013-01-18 Thread Pranav Saxena
Isaac, 
I really appreciate for all your efforts . Your patch looks good just that the 
refactoring of the code seemed to be a point of concern . I tested your patch 
and it seemed to be working fine . Perhaps you could send an updated patch by 
removing the whitespace errors and I can push it to asf/master. 

Thanks,
Pranav

-Original Message-
From: Isaac Chiang [mailto:nore...@reviews.apache.org] On Behalf Of Isaac Chiang
Sent: Thursday, January 17, 2013 7:05 PM
To: Pranav Saxena
Cc: cloudstack; Isaac Chiang
Subject: Re: Review Request: CloudStack-965: When a detailview action is 
prohibited, the operation dialog box should not show up in the mean time



 On Jan. 17, 2013, 10:15 a.m., Pranav Saxena wrote:
  Your code changes look good . However , I have few concerns - 
  
  1) The patch doesn't apply cleanly because of trailing whitespace errors . 
  Hence could you take care of these - 
  
  home/pranav/Downloads/fix-cloudstack-965.patch:25: trailing whitespace.
  // Setup form validation
  /home/pranav/Downloads/fix-cloudstack-965.patch:27: trailing whitespace.
  $formContainer.find('input, select').each(function() {  

  /home/pranav/Downloads/fix-cloudstack-965.patch:31: space before tab in 
  indent.
  else {
  /home/pranav/Downloads/fix-cloudstack-965.patch:32: space before tab in 
  indent.
$(this).rules('add', {});
  /home/pranav/Downloads/fix-cloudstack-965.patch:33: space before tab in 
  indent.
  }
  
  2) Is there any specific reason for moving/reorganizing a section of code 
  in dialog.js from one point to other , though I know it won't affect 
  anything. I believe , you could implement the same without moving the 
  chunks of code here and there , just to maintain the code consistency and 
  ordering. Please let me know if you have any concerns.
  
  Thanks !
 

Hi Pranav:
 The root cause of the issue, as I saw, is when the font-end is 
trying to make a dialog form, it takes fields from from the caller (  
detailview-createForm-fields ). Once the field block contains an ajax call, 
e.g., migrate in  instance.js : 867, It emits it. But it still do the rest of 
the code in createForm and shows the dialog form. I figured out few ways to 
solve the issue, including refactor entire workflow for creating the dialog 
form, but those are more than I can do right now. The patch isn't good but 
merely a tradeoff in my situation, just let you know. No matter what, hope the 
piece of code will help to identify the issue. I'll close the review request if 
it achieves its purpose, thanks :)


- Isaac


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/8992/#review15452
---


On Jan. 17, 2013, 8:09 a.m., Isaac Chiang wrote:
 
 ---
 This is an automatically generated e-mail. To reply, visit:
 https://reviews.apache.org/r/8992/
 ---
 
 (Updated Jan. 17, 2013, 8:09 a.m.)
 
 
 Review request for cloudstack and Pranav Saxena.
 
 
 Description
 ---
 
 The patch is to resolve CLOUDSTACK-965 issue which prevents from showing the 
 error message and dialog form in the mean time.
 
 
 This addresses bug CLOUDSTACK-965.
 
 
 Diffs
 -
 
   ui/scripts/ui/dialog.js 5236bb6 
 
 Diff: https://reviews.apache.org/r/8992/diff/
 
 
 Testing
 ---
 
 
 Thanks,
 
 Isaac Chiang
 




[jira] [Resolved] (CLOUDSTACK-803) HA gets triggered even when the host investigator is unable to determine the state of the host

2013-01-18 Thread Koushik Das (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-803?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Koushik Das resolved CLOUDSTACK-803.


Resolution: Fixed

fixed in master with commit

commit e45a9f3aed3f3ad2295848f2475a4a1ec478ee81
Author: Koushik Das koushik@citrix.com
Date:   Mon Jan 7 11:06:54 2013 +0530

CLOUDSTACK-803: HA gets triggered even when the host investigator is unable 
to determine the state of the host HA won't be triggered in case the host 
investigator is not able to determine the state

Signed-off-by: Koushik Das koushik@citrix.com
Signed-off-by: Abhinandan Prateek aprat...@apache.org


 HA gets triggered even when the host investigator is unable to determine the 
 state of the host
 --

 Key: CLOUDSTACK-803
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-803
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: pre-4.0.0, 4.0.0
Reporter: Koushik Das
Assignee: Koushik Das
 Fix For: 4.0.2


 CS tries to do HA on VMs if it finds that the host on which they are running 
 is down. HA should only happen when CS is able to determine (host 
 investigators return status as 'Down') that host is down. Currently due to a 
 bug in code even if the hosts investigators are unable to determine state 
 (returns 'null'), HA gets triggered.
 This results in unnecessary HA of VMs.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Commented] (CLOUDSTACK-820) Events framework to publish/subscribe to CloudStack events

2013-01-18 Thread Murali Reddy (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-820?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557188#comment-13557188
 ] 

Murali Reddy commented on CLOUDSTACK-820:
-

Quick update:

I have basic publish/subscribe working with AMQP server as MOM. Current events 
(alerts, usage events, action events) are pushed to broker. Also introduced new 
type of events to track the cloud resource state change.

I have added state machine to couple of objects (network, volume etc) and state 
change event generated for each transition. But I need to take care of some of 
the remaining resource object as well.

I will spend time next week to resolve the pending issues and plan to merge 
into master by mid of next week.

 Events framework to publish/subscribe to CloudStack events 
 ---

 Key: CLOUDSTACK-820
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-820
 Project: CloudStack
  Issue Type: New Feature
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
Reporter: Murali Reddy
Assignee: Murali Reddy
 Fix For: 4.1.0


 Opening  a bug to track the proposal [1][2] to provide a mechanism to publish 
 and subscribe to events.
 [1] 
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Event+Notification+Framework+Proposal
 [2]https://cwiki.apache.org/confluence/display/CLOUDSTACK/Event+Notification+with+message+oriented+middleware+Proposal

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[Discuss] FS review-VMWare(Supporting DRS, HA

2013-01-18 Thread Suresh Sadhu
Hi Hari,

am the QA resource for this feature. I have reviewed the Functional spec and 
please find the review comments below:



1.Are we going to implement Cloudstack HA support for VMware or still will 
depend on Native HA.

2.Is the  Cloudstack HA support for VMware is only for DRS enabled cluster.

3.Are we going to address  open vmware vmsync issue as part of this feature 
enhancement.

4.please provide/update the FS with Flow/ implementation details ,like

n  How are we going to handle the power management

n  What happen CS and DRS tries to control the same vm at same time

n  How the CS will query/get info from DRS


n  Earlier  when the DRS enabled ,CS has no idea where the VM moved but it will 
try to query  all the hosts till it finds the moved VM by DRS and it will 
update the  host as  parent host. Now how this behaviour will work with your 
implementation.



n  How the Cloudstack handle VM replacement when after Vm has been started


5.DRS with fully automated will impact host/cluster performance and 
network. Not sure why we added as requirement in FS (CloudStack must be able to 
support HA, load balancing and power management in a DRS cluster that is setup 
in a fully automated fashion )is there any specific reason.

Regards
Sadhu






[jira] [Updated] (CLOUDSTACK-891) QA High Availability: EIP enhancements feature

2013-01-18 Thread Sudha Ponnaganti (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-891?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sudha Ponnaganti updated CLOUDSTACK-891:


Assignee: venkata swamybabu budumuru  (was: Sangeetha Hariharan)

 QA High Availability: EIP enhancements feature
 --

 Key: CLOUDSTACK-891
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-891
 Project: CloudStack
  Issue Type: Sub-task
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Test
Reporter: Chip Childers
Assignee: venkata swamybabu budumuru
 Fix For: 4.1.0




--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Commented] (CLOUDSTACK-1011) KVM host getting disconnected in cluster environment

2013-01-18 Thread Rayees Namathponnan (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557301#comment-13557301
 ] 

Rayees Namathponnan commented on CLOUDSTACK-1011:
-

Hosts are up after upgrading this build, we are testing now 

 KVM host getting disconnected in cluster environment 
 -

 Key: CLOUDSTACK-1011
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1011
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: KVM
Affects Versions: 4.1.0
 Environment: Build from network-refactor
 KVM
Reporter: Rayees Namathponnan
Assignee: Kishan Kavala
 Fix For: 4.1.0

 Attachments: Agent_Log.rar


 Steps to reproduce 
 Create advanced zone with 2 zones 
 First zone :  1 POD, 1 Cluster and 2 hosts
 Second zone : 1 POD, 1 Cluster and 1 host 
  
 Expected result 
 System Vms should  come up successfully, and KVM host should be in connected 
 state always
 Actual Result 
 KVM agent disconnected after some time,  i can see below null pointer 
 exception in KVM agent log; then tried to restart agent and libvert,  but 
 still agent not able to connect with MS 
 2013-01-18 03:21:01,210 WARN  [cloud.agent.Agent] 
 (agentRequest-Handler-1:null) Caught: 
 java.lang.NullPointerException
   at 
 com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStorageAdaptor(KVMStoragePoolManager.java:41)
   at 
 com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStoragePool(KVMStoragePoolManager.java:66)
   at 
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.cleanupDisk(LibvirtComputingResource.java:3153)
   at 
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.execute(LibvirtComputingResource.java:2687)
   at 
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:968)
   at com.cloud.agent.Agent.processRequest(Agent.java:525)
   at com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:852)
   at com.cloud.utils.nio.Task.run(Task.java:83)
   at 
 java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
   at 
 java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
   at java.lang.Thread.run(Thread.java:679)
 2013-01-18 03:21:01,432 WARN  [cloud.agent.Agent] 
 (agentRequest-Handler-1:null) Caught: 
 java.lang.NullPointerException
   at com.cloud.hypervisor.kvm.storage
 Additional information :
 I was looking Zone 1 's (adv-Kvm-Zone1) dashboard - Storage, here storage is 
 Allocated : 0.00 KB / 0.00 KB

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Re: Messaging Subscriber Process - Was: ([Discuss] SNMP Alerts support in CloudStack)

2013-01-18 Thread Chip Childers
On Mon, Jan 7, 2013 at 8:02 AM, Murali Reddy murali.re...@citrix.com wrote:

 On 04/01/13 8:19 PM, Chip Childers chip.child...@sungard.com wrote:

Splitting this out of the SNMP thread, as I think it needs it's own
discussion.

On Thu, Jan 3, 2013 at 6:56 PM, Chiradeep Vittal
chiradeep.vit...@citrix.com wrote:
 Why would CloudStack need an API to register subscribers?
 Wouldn¹t they directly go to the broker?

I agree.  Shouldn't the subscription process be delegated to the broker
itself?

 Do not think message broker by themselves are not necessarily directly
 exposed for subscription. I think you still need a service through which
 to register endpoint (web call back URL or SMS etc) to receive
 notifications. For e.g in public cloud, if tenant's on-premise monitoring
 component wish to receive notification for occurrence of event he can
 register a endpoint with notification service which acts as proxy for
 broker. Though, I agree that notification service it self, need not be
 part of CloudStack.


So if I understand this correctly, the message bus is only used by the
management server as a queue for events to forward to some other
endpoint?

That doesn't jive with the diagram here:
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Event+Notification+with+message+oriented+middleware+Proposal

Sorry If I'm not understanding correctly, but I'm highly interested.



 On 12/20/12 3:46 AM, Murali Reddy murali.re...@citrix.com wrote:



Hey Murali,

Great to hear about where you stand right now.  Is the code (work in
progress obviously) available on one of the branches?  I'd love to
take a look at it.

-chip



Chip

I have been using 'events-framework' branch for this work. Please take a
look at 'framework/events/src/org/apache/cloudstack/framework/events'
for
event bus abstraction and the specific AMQP client implementation and
'plugins/event-bus/rabbitmq/src/org/apache/cloudstack/mom/rabbitmq' for
a
Rabbit AM AMQP client that implements EventBus.

Thanks,
Murali








Fwd: NetScaler lib/sdk jars are apache licensed

2013-01-18 Thread Chip Childers
Hi Vijay,

Any update on this?  If we want to switch the netscaler plugins over
to the OSS build for 4.1.0, we'd need this to be in place pretty soon
(like next week).

On Wed, Jan 9, 2013 at 1:06 PM, Vijay Venkatachalam
vijay.venkatacha...@citrix.com wrote:
 Thanks Prasanna for the link.
 Yes to make Netscaler's plugin / resource code to be part of OSS build is the 
 intent.

 -Vijay

 -Original Message-
 From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of
 Prasanna Santhanam
 Sent: Wednesday, January 09, 2013 5:57 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: NetScaler lib/sdk jars are apache licensed

 On Wed, Jan 09, 2013 at 05:43:38PM +0530, Vijay Venkatachalam wrote:
  Hugo/Chip/David,
  The NetScaler  build team is looking at ways to upload the SDK files
 for each release online. This archive zip file will be uploaded online for 
 each
 release of NetScaler and will contain License, Java src, Java Samples, SDK 
 jars,
 SDK html docs.
  For the second part of uploading the jar files to a maven repository
 what should be done to automate?
  Is there a public repository which can be updated for each release of
 netscaler with its jar files?
  Or Is it good to have Citrix host its own maven repository? How to do
 that? Also, what is the procedure to make CS build refer to this repository 
 as
 well during its build.

 Vijay - you might want to push netscaler jar to maven central. Can you check
 this- http://maven.apache.org/guides/mini/guide-central-repository-
 upload.html

 Once done - we can enable our build on builds.a.o to build netscaler as 
 well. I
 think it's still in the nonoss profile so it's notbuilding by default.

 --
 Prasanna.,



Re: [DISCUSS] Support for Intel TXT technology

2013-01-18 Thread Chip Childers
On Wed, Jan 9, 2013 at 3:37 PM, Animesh Chaturvedi
animesh.chaturv...@citrix.com wrote:
 This came in as I was following up on  action item from IRC today. This 
 feature is something that has already been developed before ACS 4.0 and 
 processes were formalized and also had been demonstrated in public forms such 
 as in Intel Developers Forum last Sept but somehow missed getting filed. Can 
 we consider it as an exception and take it for 4.1.  I understand we are few 
 days past cutoff,  I will ensure we are more diligent in future.

 Animesh

Just to close the loop on this.  I'm not sure that this is even
progressing enough to make it in by out feature freeze date (if it is,
it's not visible to the rest of the community).  Is the request to
include it in 4.1.0 a moot point?

 -Original Message-
 From: David Nalley [mailto:da...@gnsa.us]
 Sent: Wednesday, January 09, 2013 11:46 AM
 To: cloudstack-dev@incubator.apache.org
 Cc: cloudstack-us...@incubator.apache.org
 Subject: Re: [DISCUSS] Support for Intel TXT technology

 On Wed, Jan 9, 2013 at 2:40 PM, Hari Kannan hari.kan...@citrix.com wrote:
 
  Hello All,
 
  I wish to propose Support for Intel TXT for Cloud Use cases - I have
  added some details here
  https://cwiki.apache.org/confluence/display/CLOUDSTACK/Support+for+Int
  el+TXT+Technology
 
  along with a JIRA ticket
  https://issues.apache.org/jira/browse/CLOUDSTACK-939
 
  Please review and comment
 
  Hari Kannan

 I've commented on the ticket. This has come in after our agreed proposal
 deadline, so I've changed the targeted version to Future.

 --David



RE: Build SystemVM template

2013-01-18 Thread Musayev, Ilya
Donal,

Did you have Xen guest tool installed on system VM? 

Thanks
ilya

-Original Message-
From: Donal Lafferty [mailto:donal.laffe...@citrix.com] 
Sent: Friday, January 18, 2013 6:15 AM
To: cloudstack-dev@incubator.apache.org
Subject: RE: Build SystemVM template

You might want to check the XenServer support.

I had problems with detaching VDIs on Wheezy on XenServer March/April 2012.  
There was no reason to report the problem at the time, because XenServer didn't 
cite Wheezy as a supported guest OS.  Also, I expect I was using an older build.

DL

 -Original Message-
 From: Rohit Yadav [mailto:rohit.ya...@citrix.com]
 Sent: 18 January 2013 02:47
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: Build SystemVM template
 
 
 On 17-Jan-2013, at 6:10 PM, Sheng Yang sh...@yasker.org wrote:
 
  On Thu, Jan 17, 2013 at 5:07 PM, Rohit Yadav 
  rohit.ya...@citrix.com
 wrote:
  Hi Sheng, we can reuse viewee and vagrant based appliance building 
  code
 for devcloud for systemvm. We can use debian wheezy i386 beta4 for now 
 and when it releases in february we can have another round of 
 building/testing.
 
  Sure, is there a document for it? Also, I didn't see a release date 
  for Wheezy... Do you have reference?
 
 tools/devcloud/README.md (it can have bugs, help fix it wherever you 
 see
 improvement) Once you build systemvm, you can export and convert the 
 disk image from vmdk/vhd to qcow2/vhd/vmdk etc.
 Wheezy should release in Feb like the last two releases in 2009 and 
 2011, but it's not confirmed.
 
 Regards.
 
 
  --Sheng
 
  Regards.
 
  On 17-Jan-2013, at 4:18 PM, Sheng Yang sh...@yasker.org wrote:
 
  Hi,
 
  I just found the buildsystemvm.sh won't work, and I need to build 
  a new systemvm template for IPv6 support, because we're adding new 
  softwares in it.
 
  Apparently due to license issue(I guess),xt_CHECKSUM.ko which is a 
  extension of iptables to fix one Debian/Ubuntu DHCP issue. I 
  believe the iptables_1.4.8-3local1checksum1_i386.deb(a patched 
  version of iptables by us) is also removed, as well as 
  xe-guest-utilities_5.6.0-595_i386.deb.
 
  So, what we suppose to do to make systemvm template buildable again?
  I know there are some licenses issues involved, but not quite 
  clear on these.
 
  --Sheng
 





RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix.

2013-01-18 Thread Musayev, Ilya
+1

-Original Message-
From: Koushik Das [mailto:koushik@citrix.com] 
Sent: Friday, January 18, 2013 3:09 AM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [VOTE] Accept a donation of 'providing support of optional Public 
IP assignment for EIP with Basic Zone' from Citrix.

+1

 -Original Message-
 From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com]
 Sent: Friday, January 18, 2013 9:43 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [VOTE] Accept a donation of 'providing support of 
 optional Public IP assignment for EIP with Basic Zone' from Citrix.
 
 +1 (binding)
 
 On 18/01/13 2:34 AM, Rohit Yadav rohit.ya...@citrix.com wrote:
 
 +1 (binding)
 
 From: Animesh Chaturvedi [animesh.chaturv...@citrix.com]
 Sent: Thursday, January 17, 2013 11:04 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: RE: [VOTE] Accept a donation of 'providing support of 
 optional Public IP assignment for EIP with Basic Zone' from Citrix.
 
 +1
 
  -Original Message-
  From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of 
 Prasanna  Santhanam
  Sent: Thursday, January 17, 2013 8:50 AM
  To: cloudstack-dev@incubator.apache.org
  Subject: Re: [VOTE] Accept a donation of 'providing support of 
 optional Public IP  assignment for EIP with Basic Zone' from Citrix.
 
  On Thu, Jan 17, 2013 at 04:17:58PM +0530, Murali Reddy wrote:
   I would like to call a vote for the Apache CloudStack project to
 accept a
  donation from Citrix to provide Optional Public IP assignment for 
 EIP with Basic  Zone.
  
   The functional specification is available at [1] and has been
 discussed [2] with
  no outstanding issues. Bug 265 [3] opened to track this feature.
  
   Patch [4] and MD5 [5] files are made available at below links
  
   [1]
  
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Optional+Pub
   lic
   +IP+assignment+for+EIP+with+Basic+Zone
   [2] http://markmail.org/thread/b2h2cw62qnryk4qh
   [3] https://issues.apache.org/jira/browse/CLOUDSTACK-265
   [4]
   http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-
 provide-o
   pti on-to-turn-off-automatic-.patch [5]
   http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-
 provide-o
   pti
   on-to-turn-off-automatic-.patch.md5
 
  +1 (binding)
 
  --
  Prasanna.,





RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix

2013-01-18 Thread Musayev, Ilya
+1

-Original Message-
From: Rajesh Battala [mailto:rajesh.batt...@citrix.com] 
Sent: Friday, January 18, 2013 3:05 AM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [VOTE} Accept a donaiton of support security group enabled 
network in advanced zone from Citrix

+1

-Original Message-
From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com]
Sent: Friday, January 18, 2013 9:51 AM
To: cloudstack-dev@incubator.apache.org
Subject: Re: [VOTE} Accept a donaiton of support security group enabled 
network in advanced zone from Citrix

+1 (binding)

On 18/01/13 3:32 AM, Chip Childers chip.child...@sungard.com wrote:

On Thu, Jan 17, 2013 at 12:41 PM, Animesh Chaturvedi 
animesh.chaturv...@citrix.com wrote:
 Reposting with subject line VOTE

 Committers have binding votes for this decision.

 Please respond with your vote:
 +1 - Accept the donation and begin the process of bringing this 
 +enhancement to CloudStack
 in via the IP clearance process
 +0 - Don't care
 -1 - Do not accept the donation

 This vote will remain open for ~72 hours.

IMO, this is small enough not to qualify as substantial.  I would be 
OK with this vote being cancelled, and a lazy consensus being reached 
to simply have Anthony commit it (using his ICLA as the contractual 
support for the donation).

That being said, if we progress down the IP clearance path for this 
patch, here's my vote:

+1 (binding)


   -Original Message-
   From: Anthony Xu [mailto:xuefei...@citrix.com]
   Sent: Wednesday, January 16, 2013 4:39 PM
   To: cloudstack-dev@incubator.apache.org
   Subject: [IP Clearance: CLOUDSTACK-737] support security group
  enabled
   network in advanced zone
  
   Hi folks,
  
   I'd like to start the IP clearance process for the Citrix 
   feature -
  support security
   group enabled network in advanced zone
  
   https://issues.apache.org/jira/browse/CLOUDSTACK-737
  
   Citrix would like to donate this feature to Apache CloudStack,
  
   In 4.0, security group is only supported in basic zone, this
feature
  is to add
   security group in advanced zone, then user can isolate VMs in 
   the
  same guest
   network.
  
   Here is FS,
  
  
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+base
d
  +
  on+
   Security+Groups+in+Advance+zone
  
   This donation is a subset of the feature according to the FS 
   Only
  support KVM
   Only support one zone-wide security-enabled shared network
  
   Rest of this feature will be developed in Apache
  
   This is discussion thread
   http://markmail.org/message/cle3d64ci6pobs2i
  
  
   here is patch[Animesh]  http://people.apache.org/~anthonyxu/
   
  
  
   Thanks,
   Anthony
  
  







[jira] [Commented] (CLOUDSTACK-602) Warn of dependency on mkisofs

2013-01-18 Thread Radhika Nair (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557368#comment-13557368
 ] 

Radhika Nair commented on CLOUDSTACK-602:
-

After I installed Cloudstack, there was no indication that the installation 
failed.  Then I tried to log into the Management Server UI, it would not let me 
and gave no indication of why.   

Yes, the impact is not being able to log into the UI.
Yes, just running ln -s /usr/bin/genisoimage /usr/bin/mkisofs from the 
management server machine ... and then rerunning the  install management server 
script ... worked

You see, the install script assumes that mkisofs is on the server machine, but 
Debian/Ubuntu install genisoimage instead.   Putting this info in 
Troubleshooting would help a lot of people.   Ideally, the install script would 
simply check to see whether mkisofs or genisoimage is on the system, and use 
which ever one is installed. But in the interim, this info in Troubleshooting 
should help a lot of people wanting to use Cloudstack on Debian based systems. 

Mel.


 Warn of dependency on mkisofs
 -

 Key: CLOUDSTACK-602
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-602
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Doc
Affects Versions: 4.1.0
 Environment: debian 
Reporter: Mel Davis
Assignee: Radhika Nair
Priority: Trivial

 cloud-setup-management fails quietly if /usr/bin/mkisofs is no found.  
 Failure is indicated only in the 
 /var/log/cloud/management/management-server.log.This results in the 
 inability to log into client via the web interface. 
 The docs should at least note the dependency and, maybe, suggest this 
 workaround: 
 ln -s /usr/bin/genisoimage /usr/bin/mkisofs

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


RE: Build SystemVM template

2013-01-18 Thread Donal Lafferty
I was using Xen guest tools, but not for a System VM.  Instead, I was using the 
VM to write disk images to volumes from within my CloudStack account. 

Details of the bug are below.  

Changing from Debian 7.0 to Debian6.0.5 appears to have solved problem.


...


Donal Lafferty  -  6/18/12 6:42:10 PM

os.fsync is not properly supported by the underlying Dom0 drivers.  Problem 
seems to be that they do not advertise the feature-flush-cache capability.  
Instead, they advertise feature-barriers, but they do not implement it.  As a 
result, you get the following messages:

Jun 18 23:53:39 debian70min kernel: [  186.884574] blkfront: barrier: empty 
write xvdc op failed
Jun 18 23:53:39 debian70min kernel: [  186.884587] blkfront: xvdc: barrier or 
flush: disabled
Jun 18 23:53:39 debian70min kernel: [  187.355316] vbd vbd-51744: 16 Device in 
use; refusing to close
Jun 18 23:53:39 debian70min kernel: [  187.414507] block xvdc: releasing disk

See https://bugs.launchpad.net/ubuntu/+source/linux/+bug/824089 a good 
description of the issue is in comment #41.

Other references:  http://www.gossamer-threads.com/lists/xen/users/226266 found 
via 
http://xen.1045712.n5.nabble.com/Xen-block-drivers-and-barrier-support-td5709209.html

Donal Lafferty  -  6/22/12 9:10:55 AM

Updated workerVM O/S to Debian6.0.5.  The messages in /var/log now say:

Jun 22 13:53:35 workerVM kernel: [   51.765136] blkfront: xvdc: barriers enabled

Tested that Attach / Detach errors no longer occur.



 -Original Message-
 From: Musayev, Ilya [mailto:imusa...@webmd.net]
 Sent: 18 January 2013 16:47
 To: cloudstack-dev@incubator.apache.org
 Subject: RE: Build SystemVM template
 
 Donal,
 
 Did you have Xen guest tool installed on system VM?
 
 Thanks
 ilya
 
 -Original Message-
 From: Donal Lafferty [mailto:donal.laffe...@citrix.com]
 Sent: Friday, January 18, 2013 6:15 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: RE: Build SystemVM template
 
 You might want to check the XenServer support.
 
 I had problems with detaching VDIs on Wheezy on XenServer March/April
 2012.  There was no reason to report the problem at the time, because
 XenServer didn't cite Wheezy as a supported guest OS.  Also, I expect I was
 using an older build.
 
 DL
 
  -Original Message-
  From: Rohit Yadav [mailto:rohit.ya...@citrix.com]
  Sent: 18 January 2013 02:47
  To: cloudstack-dev@incubator.apache.org
  Subject: Re: Build SystemVM template
 
 
  On 17-Jan-2013, at 6:10 PM, Sheng Yang sh...@yasker.org wrote:
 
   On Thu, Jan 17, 2013 at 5:07 PM, Rohit Yadav
   rohit.ya...@citrix.com
  wrote:
   Hi Sheng, we can reuse viewee and vagrant based appliance building
   code
  for devcloud for systemvm. We can use debian wheezy i386 beta4 for now
  and when it releases in february we can have another round of
  building/testing.
  
   Sure, is there a document for it? Also, I didn't see a release date
   for Wheezy... Do you have reference?
 
  tools/devcloud/README.md (it can have bugs, help fix it wherever you
  see
  improvement) Once you build systemvm, you can export and convert the
  disk image from vmdk/vhd to qcow2/vhd/vmdk etc.
  Wheezy should release in Feb like the last two releases in 2009 and
  2011, but it's not confirmed.
 
  Regards.
 
  
   --Sheng
  
   Regards.
  
   On 17-Jan-2013, at 4:18 PM, Sheng Yang sh...@yasker.org wrote:
  
   Hi,
  
   I just found the buildsystemvm.sh won't work, and I need to build
   a new systemvm template for IPv6 support, because we're adding
 new
   softwares in it.
  
   Apparently due to license issue(I guess),xt_CHECKSUM.ko which is a
   extension of iptables to fix one Debian/Ubuntu DHCP issue. I
   believe the iptables_1.4.8-3local1checksum1_i386.deb(a patched
   version of iptables by us) is also removed, as well as
   xe-guest-utilities_5.6.0-595_i386.deb.
  
   So, what we suppose to do to make systemvm template buildable
 again?
   I know there are some licenses issues involved, but not quite
   clear on these.
  
   --Sheng
  
 
 



RE: [DISCUSS] Security Groups Isolation in Advanced Zone

2013-01-18 Thread Anthony Xu
Thanks for comments,
It is nice to have security group in NIC level
checked AWS, which is implemented with Elastic Network Interfaces (ENI), but 
when deploy VM , all NICs of the VM are associated with same security groups, 
which is the same as what we did in the FS.

Maybe we can implement NIC-level security group after we have VM NIC hot plug 
feature( something like ENI) in 4.2.

Anthony


 -Original Message-
 From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
 Sent: Thursday, January 17, 2013 5:29 PM
 To: CloudStack DeveloperList
 Subject: Re: [DISCUSS] Security Groups Isolation in Advanced Zone
 
 I don't think that's what Anthony is saying.
 I think he is saying that if a VM is in security groups X,Y,Z, then ALL
 nics of the VM are in security groups X,Y,Z.
 
 The AWS-compatible way is that nics are associated with the security
 group.
 So, VM's eth0 can be in security group Z and eth1 can be in security
 group
 X
 I think we should do it this way.
 
 On 1/16/13 5:35 PM, kdam...@apache.org kdam...@apache.org wrote:
 
 So the VM will determine it's own participation level. A VM can have
 networks with SG and without at the same time. If that's the case this
 feature proposal just got more awesome!
 
 -kd
 
 
 -Original Message-
 From: Anthony Xu [mailto:xuefei...@citrix.com]
 Sent: Wednesday, January 16, 2013 5:21 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone
 
 Correct,
 there are several types of guest shared network, Zone-wide guest
 shared
 network Domain-wide guest shared network Account-specific guest share
 network
 
 One VM can be on multiple networks,
 SG is on VM level, means SG will be applied to all NICs of this VM.
 
 
 Cheers,
 Anthony
 
  -Original Message-
  From: Kelcey Damage (BT) [mailto:kel...@backbonetechnology.com] On
  Behalf Of kdam...@apache.org
  Sent: Wednesday, January 16, 2013 5:17 PM
  To: cloudstack-dev@incubator.apache.org
  Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone
 
  Got it,
 
  So we are still only talking about SG on advanced shared networks.
 
  Thanks.
 
 
  -kd
 
 
  -Original Message-
  From: Anthony Xu [mailto:xuefei...@citrix.com]
  Sent: Wednesday, January 16, 2013 5:11 PM
  To: cloudstack-dev@incubator.apache.org
  Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone
  
  In this spec, security group is only supported in shared guest
  network,
  we
  might add isolated guest network support later. I have a concern
  about
  this,
  normally there is firewall for isolated network, if security group
 is
  added
  to
  isolated network, that means if user wants to allow some kind
 ingress
  traffic ,
  he might need to program both security group and firewall, it
 might
  be inconvenient for user.
  
  As for ACL, are you referring to ACL in VPC? in this spec, VPC is
 not
  supported
  due to the similar reason of isolated guest network, user might
 need
  to
  handle ACL and security group at the same time.
  
  
  Anthony
  
  
   -Original Message-
   From: Kelcey Damage (BT) [mailto:kel...@backbonetechnology.com]
   Sent: Wednesday, January 16, 2013 4:55 PM
   To: cloudstack-dev@incubator.apache.org
   Subject: RE: [DISCUSS] Security Groups Isolation in Advanced
 Zone
  
   So to catch myself up, this will allow functional security group
   isolation/ACLs on both 'shared' and 'isolated' networks?
  
   -kd
  
  
   -Original Message-
   From: Animesh Chaturvedi [mailto:animesh.chaturv...@citrix.com]
   Sent: Wednesday, January 16, 2013 1:36 PM
   To: cloudstack-dev@incubator.apache.org
   Subject: RE: [DISCUSS] Security Groups Isolation in Advanced
 Zone
   
   Folks please pass on comments if any, otherwise it is assumed
 that
   the
   spec
   is
   approved by the community
   
-Original Message-
From: Anthony Xu [mailto:xuefei...@citrix.com]
Sent: Friday, January 11, 2013 3:53 PM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [DISCUSS] Security Groups Isolation in Advanced
Zone
   
   
  
 
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+based
+on+
Security+Groups+in+Advance+zone
   
   
This is upgraded spec ,
Compared to original one, following are major changes
   
1.  SG enabled is zone wide parameter, if this zone is SG
enabled,
   all
guest networks in this zone must be SG enabled.
2.  support all shared network types, includes zone-wide
 shared
network, domain-wide shared networks and account-specific
 share
networks 3.  support multiple SG enabled networks in one SG
  enabled
   zone.
4.  VM can be on multiple SG enabled networks 5.  SG rules
 apply
  to
all NICs for a VM 6.  support both KVM and XenServer.
   
Comments, question, suggestion and flame are welcome!
   
   
Thanks,
Anthony
   
   
 -Original Message-
 From: Dave Cahill 

[jira] [Updated] (CLOUDSTACK-1007) Not able to delete Shared network because of not being able to stop the router.

2013-01-18 Thread Sangeetha Hariharan (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1007?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sangeetha Hariharan updated CLOUDSTACK-1007:


Summary: Not able to delete Shared network because of not being able to 
stop the router.  (was: Not able to delete Shared network.)

 Not able to delete Shared network because of not being able to stop the 
 router.
 ---

 Key: CLOUDSTACK-1007
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1007
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.1.0
 Environment: Build from network-refactor
Reporter: Sangeetha Hariharan
 Fix For: 4.1.0

 Attachments: agent.log, agent.log.2013-01-17.gz, management-server.zip


 Steps to reproduce the problem:
 Set up  - Advanced zone with KVM host.
 Create a Zone wide Shared network.
 Deploy Vm using this network.
 Destroy this Vm.
 Wait for the Vm to get Expunged.
 Delete the network.
 Network deletion fails because we are not able to destroy the router.
 Management server logs:
 2013-01-17 18:05:31,818 DEBUG [cloud.network.NetworkManagerImpl] 
 (Job-Executor-6:job-34) Sending destroy to 
 com.cloud.network.element.VirtualRouterElement$$EnhancerByCGLIB$$d659f5e7@447d4275
 2013-01-17 18:05:31,820 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] (Job-Executor-6:job-34) 
 Attempting to destroy router 10
 2013-01-17 18:05:31,840 DEBUG [cloud.capacity.CapacityManagerImpl] 
 (Job-Executor-6:job-34) VM state transitted from :Running to Stopping with 
 event: StopRequestedvm's original host id: 1 new host id: 1 host id before 
 state transition: 1
 2013-01-17 18:05:31,850 DEBUG [agent.transport.Request] 
 (Job-Executor-6:job-34) Seq 1-772669469: Sending  { Cmd , MgmtId: 
 206915885081428, via: 1, Ver: v1, Flags: 100111, 
 [{StopCommand:{isProxy:false,vmName:r-10-VM,wait:0}}] }
 2013-01-17 18:05:33,284 DEBUG [cloud.server.StatsCollector] 
 (StatsCollector-2:null) HostStatsCollector is running...
 2013-01-17 18:05:33,883 DEBUG [agent.transport.Request] 
 (StatsCollector-2:null) Seq 1-772669470: Received:  { Ans: , MgmtId: 
 206915885081428, via: 1, Ver: v1, Flags: 10, { GetHostStatsAnswer } }
 2013-01-17 18:05:36,715 DEBUG [cloud.api.ApiServlet] (catalina-exec-1:null) 
 ===START===  10.217.252.59 -- GET  
 command=queryAsyncJobResultjobId=82e583fa-7829-4396-a2f7-4358e2abba80response=jsonsessionkey=hd3IkmVY5KODN5MiyOXg%2FapVTb4%3D_=1358464170203
 2013-01-17 18:05:36,746 DEBUG [cloud.api.ApiServlet] (catalina-exec-1:null) 
 ===END===  10.217.252.59 -- GET  
 command=queryAsyncJobResultjobId=82e583fa-7829-4396-a2f7-4358e2abba80response=jsonsessionkey=hd3IkmVY5KODN5MiyOXg%2FapVTb4%3D_=1358464170203
 2013-01-17 18:05:38,232 DEBUG [agent.transport.Request] 
 (AgentManager-Handler-15:null) Seq 1-772669469: Processing:  { Ans: , MgmtId: 
 206915885081428, via: 1, Ver: v1, Flags: 110, 
 [{Answer:{result:false,details:java.lang.NullPointerException\n\tat 
 com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStorageAdaptor(KVMStoragePoolManager.java:41)\n\tat
  
 com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStoragePool(KVMStoragePoolManager.java:66)\n\tat
  
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.cleanupDisk(LibvirtComputingResource.java:3153)\n\tat
  
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.execute(LibvirtComputingResource.java:2687)\n\tat
  
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:968)\n\tat
  com.cloud.agent.Agent.processRequest(Agent.java:525)\n\tat 
 com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:852)\n\tat 
 com.cloud.utils.nio.Task.run(Task.java:83)\n\tat 
 java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)\n\tat
  
 java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)\n\tat
  java.lang.Thread.run(Thread.java:679)\n,wait:0}}] }
 2013-01-17 18:05:38,232 DEBUG [agent.manager.AgentAttache] 
 (AgentManager-Handler-15:null) Seq 1-772669469: No more commands found
 2013-01-17 18:05:38,232 DEBUG [agent.transport.Request] 
 (Job-Executor-6:job-34) Seq 1-772669469: Received:  { Ans: , MgmtId: 
 206915885081428, via: 1, Ver: v1, Flags: 110, { Answer } }
 2013-01-17 18:05:38,232 WARN  [cloud.vm.VirtualMachineManagerImpl] 
 (Job-Executor-6:job-34) Unable to stop vm VM[DomainRouter|r-10-VM]
 2013-01-17 18:05:38,299 DEBUG [cloud.capacity.CapacityManagerImpl] 
 (Job-Executor-6:job-34) VM state transitted from :Stopping to Running with 
 event: OperationFailedvm's original host id: 1 new host id: 1 host id before 
 state transition: 1
 2013-01-17 18:05:38,300 DEBUG 

Re: Messaging Subscriber Process - Was: ([Discuss] SNMP Alerts support in CloudStack)

2013-01-18 Thread Murali Reddy


So if I understand this correctly, the message bus is only used by the
management server as a queue for events to forward to some other
endpoint?

Chip,

Message bus is just abstraction (with publish, subscribe, unsubscribe
semantics), used to push action events, alerts, usage events and resource
state changes to external message broker. Any component (core component or
plugin) in CloudStack can both publish and subscribe to the events.While
one model is for external (non-cloudstack) component to directly get the
notification from message broker directly. An e.g. of this model is vCloud
director-AMQP broker-vCloud orchestrator. Other model is like amazon
SNS[2] suitable for public clouds where users can manage the subscriptions
and endpoints. My intent of the diagram was to convey the possibility of
pluggable service extension in CloudStack which can achieve this.

[1] 
http://www.vcoteam.info/learn-vco/extend-vcloud-director-with-vcenter-orche
strator.html
[2] http://aws.amazon.com/sns/

p.s. Sorry, was busy with other work items, and was not actively working
to give update on progress. I am trying to close the pending issues and
planning to merge mid of next week.


That doesn't jive with the diagram here:
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Event+Notification+
with+message+oriented+middleware+Proposal

Sorry If I'm not understanding correctly, but I'm highly interested.





Re: JVM level cluster deployments

2013-01-18 Thread Chiradeep Vittal
It may help to remove the UI from the model -- the UI does not guarantee a
stateful session.
The UI interacts with the management server using end-user API calls.
Mutating API calls generally have 2 steps:
1. Create / modify the entity in the db
2. Call the backend provisioning steps. This is the orchestration engine.
All backend provisioning happens asynchronously. The asynchronous job
queue is a database table. If a job is incomplete due to a management
server failure, other servers in the cluster are expected to roll the
provisioning forward or roll it back.

On 1/17/13 9:16 PM, Adnan Ashraf mohammad.adnan.ash...@gmail.com wrote:

Thanks for the feedback. so how does CloudStack provide HA/failover
guarantees? (not just the apache CloudStack but also the Citrix enterprise
CloudPlatform and cloudPortal/CPBM)?

A service provider using CloudStack would expect nothing breaks from two
angle: user's perspective and back-end provisioning services. During
provisioning of a VPC (which has many atomic steps) or in the middle of VM
creation process, the application dies (for whatever reason). This case
could easily result in half-baked (bad data) situation and abandoned
workflows loosing the provisioning process.

What workarounds or maybe persistent state based retries or logic is in
place for this situation?

Adnan


On Thu, Jan 17, 2013 at 7:56 PM, Chiradeep Vittal 
chiradeep.vit...@citrix.com wrote:

 As far as I know no one deploys in this manner.

 On 1/17/13 6:30 AM, Adnan Ashraf mohammad.adnan.ash...@gmail.com
 wrote:

 Hi,
 
 I would appreciate if anyone can provide feedback on following
questions:
 
 Roughly what is the number of cloudStack deployments that are in JVM
 (tomcat or other server) cluster mode where all session objects, http
 sessions, beans etc are seamlessly failed over to the other node in
case
 one of the node in the cluster deployment goes out of service and the
user
 sessions carry as if nothing happened in the background.
 
 What percent of customers choose not to deploy cloudstack in a cluster
 mode
 and why?
 
 What is the largest known cluster size in deployment today?
 
 thanks
 
 regards,
 Adnan





Re: [VOTE] Accept a donation of Documentation for various features from Citrix

2013-01-18 Thread Chiradeep Vittal
+1.

On 1/18/13 12:00 AM, Sateesh Chodapuneedi
sateesh.chodapune...@citrix.com wrote:

+1

 -Original Message-
 From: Jessica Tomechak [mailto:jessica.tomec...@gmail.com]
 Sent: 18 January 2013 12:15
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [VOTE] Accept a donation of Documentation for various
 features from Citrix

 -Original Message-

  From: Chip Childers [mailto:chip.child...@sungard.com]
  Sent: Thursday, January 17, 2013 1:51 PM
  To: cloudstack-dev@incubator.apache.org
  Subject: Re: [VOTE] Accept a donation of Documentation for various
  features from Citrix
 
  On Thu, Jan 17, 2013 at 12:48 PM, Animesh Chaturvedi 
  animesh.chaturv...@citrix.com wrote:
   Reposting with subject line VOTE.
  
   Committers have binding votes for this decision.
  
   Please respond with your vote:
   +1 - Accept the donation and begin the process of bringing this
   +enhancement to CloudStack
   in via the IP clearance process
   +0 - Don't care
   -1 - Do not accept the donation
  
   This vote will remain open for ~72 hours.
  
   Content Location: http://people.apache.org/~jtomechak
  
 
  I think it would be best to have an archive file, and an md5 checksum
  to go along with it.  I'd like to vote for those artifacts instead of
  what's provided please.  It will make the ip clearance process easier.
 
 
 I have provided an archive file and checksum. However I wonder whether
it
 would be better to provide separate files for each feature, so they can
be
 voted on separately. Please let me know.

 Jessica T.


  
   -Original Message-
   From: Jessica Tomechak [mailto:jessica.tomec...@citrix.com]
   Sent: Tuesday, January 15, 2013 7:05 PM
   To: cloudstack-dev@incubator.apache.org
   Subject: RE: [IP Clearance] Potential issues
  
   On people.apache.org/~jtomechak, I have posted all my docs related
   to the bug items in the IP Clearance list which Animesh provided.
  
   I have made notations in the Doc sub-task of each bug, so that
   anyone reviewing the proposed feature can easily find the
 documentation.
  
   In addition, I made a note for myself of the doc status of each bug
   in that list, and here it is for anyone who is interested!
  
   CLOUDSTACK-774 :
   Code in ACS repo: No
   Functional Spec Posted: Yes
   Community Discussion Done: Yes
   Contribution Size Approx: 5000 lines Contributor : Frank IP
   Clearance needed initial recommendation: Yes
   Docs: None exist. This was not announced or supported as a Citrix
   CP
   3.0.6 feature.
  
  
   CLOUDSTACK-306 :
   Code in ACS repo: Yes
   Functional Spec Posted: Yes
   Community Discussion Done: Yes in October Contribution Size Approx:
   1500 lines Contributor : Sheng IP Clearance needed initial
   recommendation: Yes
   Docs: Already submitted via reviewboard. Link and info in doc
subtask.
  
  
   CLOUDSTACK-777/700 :
   Code in ACS repo: Yes
   Functional Spec Posted: No
   Community Discussion Done: Yes
   Contribution Size Approx: 500 lines Contributor :
   Kishan/Jayapal/Rajesh/Murali IP Clearance needed initial
   recommendation: Yes
   Docs: Pending on reviewboard. URL and notations in the doc subtask
   of
  the bug.
  
   CLOUDSTACK-778/319 :
   Code in ACS repo: No
   Functional Spec Posted: No
   Community Discussion Done: Yes
   Contribution Size Approx: should be small Contributor : Vijayendra
   IP Clearance needed initial recommendation: This is a trivial issue
   so may be no
   Docs: Pending on reviewboard. Info is in the doc subtask of the
bug.
  
   CLOUDSTACK-299 :
   Code in ACS repo: UI code is there but backend is not Functional
   Spec
  Posted:
   Yes Community Discussion Done: Yes Contribution Size Approx: 1400
   lines Contributor : Jayapal IP Clearance needed initial
   recommendation: Yes
   Docs: Pending on reviewboard. Link is provided in the description
   of
  the bug.
  
   CLOUDSTACK-297 :
   Code in ACS repo: No, but posted on review board Functional Spec
   Posted: Yes Community Discussion Done: Yes Contribution Size
Approx:
   350 lines Contributor : Hari IP Clearance needed initial
recommendation:
   Docs: One paragraph of new docs on people.a.o. The URL is noted in
   the doc subtask of the bug.
   http://people.apache.org/~jtomechak/CLOUDSTACK-297/
  
  
   CLOUDSTACK-197 :
   Code in ACS repo: Multiple patches posted on review board
   Functional Spec
   Posted: Yes Community Discussion Done: Yes Contribution Size
Approx:
   3000 lines Contributor : Likitha IP Clearance needed initial
   recommendation: No, since incremental patches were posted over a
   period
   Docs: Believe docs already exist, authored on the community side by
   Sebastien G.
  
   CLOUDSTACK-192 :
   Code in ACS repo: No
   Functional Spec Posted: Yes
   Community Discussion Done: Yes, but no consensus reached
   Contribution Size
   Approx: 1000 lines Contributor : Sanjay IP Clearance needed initial
   recommendation: Yes, if community agrees to feature inclusion
   Docs: On people.a.o. The 

Re: [MERGE] network refactoring, phase 1

2013-01-18 Thread Chiradeep Vittal
Fixed

On 1/18/13 1:54 AM, Pradeep Soundararajan
pradeep.soundarara...@citrix.com wrote:

http://jenkins.cloudstack.org/view/master/job/build-master-nonoss-rhel63/

Yes, it is started breaking from build # 34.
http://jenkins.cloudstack.org/view/master/job/build-master-nonoss-rhel63/3
4/console

Till 33, it went fine...

Thanks,
Pradeep S


-Original Message-
From: Min Chen [mailto:min.c...@citrix.com]
Sent: Friday, January 18, 2013 11:19 AM
To: cloudstack-dev@incubator.apache.org
Subject: Re: [MERGE] network refactoring, phase 1

Nonoss build is broken in master branch, not sure if it is related to
this merge?

[ERROR] Failed to execute goal
org.apache.maven.plugins:maven-compiler-plugin:2.5.1:compile
(default-compile) on project cloud-plugin-network-f5: Compilation failure
[ERROR] 
/Users/minc/dev/cloud-asf/plugins/network-elements/f5/src/com/cloud/networ
k
/element/F5ExternalLoadBalancerElement.java:[499,27] cannot find symbol
[ERROR] symbol  : method isNetworkInlineMode(com.cloud.network.Network)
[ERROR] location: interface com.cloud.network.NetworkModel [ERROR] -
[Help 1]

Thanks
-min




On 1/17/13 5:15 PM, Chiradeep Vittal chiradeep.vit...@citrix.com
wrote:

Merge done. Tool issue.

On 1/16/13 11:21 PM, Chiradeep Vittal chiradeep.vit...@citrix.com
wrote:

Having problems with the merge. ETA is Thursday evening PST.

On 1/16/13 3:40 PM, Chiradeep Vittal chiradeep.vit...@citrix.com
wrote:

OK , will re-do the merge and re-test and commit by EOD

On 1/16/13 1:56 PM, Animesh Chaturvedi
animesh.chaturv...@citrix.com
wrote:

Chiradeep

Are you waiting on revert for 312? Murali reverted it today

Thanks
Animesh

 -Original Message-
 From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
 Sent: Friday, January 11, 2013 1:08 PM
 To: CloudStack DeveloperList
 Subject: Re: [MERGE] network refactoring, phase 1
 
 I'm going to wait on the reverts for CLOUDSTACK-306 and
CLOUDSTACK-312
 
 On 1/11/13 12:15 PM, Alex Huang alex.hu...@citrix.com wrote:
 
  +1 - with an assumption that Alex and others are OK with it
  +(since
the
  javelin branch merge was proposed first).
 
 +1 We're struggling with the merge right now so one more merge is
not
 going to hurt very much.
 
 --Alex








[jira] [Commented] (CLOUDSTACK-1007) Not able to delete Shared network because of not being able to stop the router.

2013-01-18 Thread Sudha Ponnaganti (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1007?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557432#comment-13557432
 ] 

Sudha Ponnaganti commented on CLOUDSTACK-1007:
--

Marcus, does this have anything to do with the fix you have provided for 1011

 Not able to delete Shared network because of not being able to stop the 
 router.
 ---

 Key: CLOUDSTACK-1007
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1007
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.1.0
 Environment: Build from network-refactor
Reporter: Sangeetha Hariharan
 Fix For: 4.1.0

 Attachments: agent.log, agent.log.2013-01-17.gz, management-server.zip


 Steps to reproduce the problem:
 Set up  - Advanced zone with KVM host.
 Create a Zone wide Shared network.
 Deploy Vm using this network.
 Destroy this Vm.
 Wait for the Vm to get Expunged.
 Delete the network.
 Network deletion fails because we are not able to destroy the router.
 Management server logs:
 2013-01-17 18:05:31,818 DEBUG [cloud.network.NetworkManagerImpl] 
 (Job-Executor-6:job-34) Sending destroy to 
 com.cloud.network.element.VirtualRouterElement$$EnhancerByCGLIB$$d659f5e7@447d4275
 2013-01-17 18:05:31,820 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] (Job-Executor-6:job-34) 
 Attempting to destroy router 10
 2013-01-17 18:05:31,840 DEBUG [cloud.capacity.CapacityManagerImpl] 
 (Job-Executor-6:job-34) VM state transitted from :Running to Stopping with 
 event: StopRequestedvm's original host id: 1 new host id: 1 host id before 
 state transition: 1
 2013-01-17 18:05:31,850 DEBUG [agent.transport.Request] 
 (Job-Executor-6:job-34) Seq 1-772669469: Sending  { Cmd , MgmtId: 
 206915885081428, via: 1, Ver: v1, Flags: 100111, 
 [{StopCommand:{isProxy:false,vmName:r-10-VM,wait:0}}] }
 2013-01-17 18:05:33,284 DEBUG [cloud.server.StatsCollector] 
 (StatsCollector-2:null) HostStatsCollector is running...
 2013-01-17 18:05:33,883 DEBUG [agent.transport.Request] 
 (StatsCollector-2:null) Seq 1-772669470: Received:  { Ans: , MgmtId: 
 206915885081428, via: 1, Ver: v1, Flags: 10, { GetHostStatsAnswer } }
 2013-01-17 18:05:36,715 DEBUG [cloud.api.ApiServlet] (catalina-exec-1:null) 
 ===START===  10.217.252.59 -- GET  
 command=queryAsyncJobResultjobId=82e583fa-7829-4396-a2f7-4358e2abba80response=jsonsessionkey=hd3IkmVY5KODN5MiyOXg%2FapVTb4%3D_=1358464170203
 2013-01-17 18:05:36,746 DEBUG [cloud.api.ApiServlet] (catalina-exec-1:null) 
 ===END===  10.217.252.59 -- GET  
 command=queryAsyncJobResultjobId=82e583fa-7829-4396-a2f7-4358e2abba80response=jsonsessionkey=hd3IkmVY5KODN5MiyOXg%2FapVTb4%3D_=1358464170203
 2013-01-17 18:05:38,232 DEBUG [agent.transport.Request] 
 (AgentManager-Handler-15:null) Seq 1-772669469: Processing:  { Ans: , MgmtId: 
 206915885081428, via: 1, Ver: v1, Flags: 110, 
 [{Answer:{result:false,details:java.lang.NullPointerException\n\tat 
 com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStorageAdaptor(KVMStoragePoolManager.java:41)\n\tat
  
 com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStoragePool(KVMStoragePoolManager.java:66)\n\tat
  
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.cleanupDisk(LibvirtComputingResource.java:3153)\n\tat
  
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.execute(LibvirtComputingResource.java:2687)\n\tat
  
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:968)\n\tat
  com.cloud.agent.Agent.processRequest(Agent.java:525)\n\tat 
 com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:852)\n\tat 
 com.cloud.utils.nio.Task.run(Task.java:83)\n\tat 
 java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)\n\tat
  
 java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)\n\tat
  java.lang.Thread.run(Thread.java:679)\n,wait:0}}] }
 2013-01-17 18:05:38,232 DEBUG [agent.manager.AgentAttache] 
 (AgentManager-Handler-15:null) Seq 1-772669469: No more commands found
 2013-01-17 18:05:38,232 DEBUG [agent.transport.Request] 
 (Job-Executor-6:job-34) Seq 1-772669469: Received:  { Ans: , MgmtId: 
 206915885081428, via: 1, Ver: v1, Flags: 110, { Answer } }
 2013-01-17 18:05:38,232 WARN  [cloud.vm.VirtualMachineManagerImpl] 
 (Job-Executor-6:job-34) Unable to stop vm VM[DomainRouter|r-10-VM]
 2013-01-17 18:05:38,299 DEBUG [cloud.capacity.CapacityManagerImpl] 
 (Job-Executor-6:job-34) VM state transitted from :Stopping to Running with 
 event: OperationFailedvm's original host id: 1 new host id: 1 host id before 
 state transition: 1
 2013-01-17 18:05:38,300 DEBUG 

[ASF41][QA]CLOUDSTACK - 1007

2013-01-18 Thread Sudha Ponnaganti
Marcus/Edison,

Wanted to check if defect [1] has anything to do with the fix done for 
Cloudstack - 1011
[1] https://issues.apache.org/jira/browse/CLOUDSTACK-1007

Thanks
/sudha


[jira] [Resolved] (CLOUDSTACK-1011) KVM host getting disconnected in cluster environment

2013-01-18 Thread Sudha Ponnaganti (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1011?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sudha Ponnaganti resolved CLOUDSTACK-1011.
--

Resolution: Fixed

 KVM host getting disconnected in cluster environment 
 -

 Key: CLOUDSTACK-1011
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1011
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: KVM
Affects Versions: 4.1.0
 Environment: Build from network-refactor
 KVM
Reporter: Rayees Namathponnan
Assignee: Kishan Kavala
 Fix For: 4.1.0

 Attachments: Agent_Log.rar


 Steps to reproduce 
 Create advanced zone with 2 zones 
 First zone :  1 POD, 1 Cluster and 2 hosts
 Second zone : 1 POD, 1 Cluster and 1 host 
  
 Expected result 
 System Vms should  come up successfully, and KVM host should be in connected 
 state always
 Actual Result 
 KVM agent disconnected after some time,  i can see below null pointer 
 exception in KVM agent log; then tried to restart agent and libvert,  but 
 still agent not able to connect with MS 
 2013-01-18 03:21:01,210 WARN  [cloud.agent.Agent] 
 (agentRequest-Handler-1:null) Caught: 
 java.lang.NullPointerException
   at 
 com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStorageAdaptor(KVMStoragePoolManager.java:41)
   at 
 com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStoragePool(KVMStoragePoolManager.java:66)
   at 
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.cleanupDisk(LibvirtComputingResource.java:3153)
   at 
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.execute(LibvirtComputingResource.java:2687)
   at 
 com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:968)
   at com.cloud.agent.Agent.processRequest(Agent.java:525)
   at com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:852)
   at com.cloud.utils.nio.Task.run(Task.java:83)
   at 
 java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
   at 
 java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
   at java.lang.Thread.run(Thread.java:679)
 2013-01-18 03:21:01,432 WARN  [cloud.agent.Agent] 
 (agentRequest-Handler-1:null) Caught: 
 java.lang.NullPointerException
   at com.cloud.hypervisor.kvm.storage
 Additional information :
 I was looking Zone 1 's (adv-Kvm-Zone1) dashboard - Storage, here storage is 
 Allocated : 0.00 KB / 0.00 KB

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Re: Questions related to Regions Feature

2013-01-18 Thread Manan Shah
Hi Kishan,

First of all thanks for responding to my questions. I have some additional
questions / comments below:

Comments:
1. I am assuming you will update FS based on all these answers
2. I am assuming that you will document all the workflows, manual
processes and other items you mentioned below in FS so that the tech pubs
person can update the manuals

Questions:
1. If on a region re-start, CCP can go to other regions and grab the
latest information, why can't we do the same thing on region creation? In
fact, it might be easier as the new region would just have to go to one of
the existing regions and do a bulk copy. Am I missing something here?


Regards,
Manan Shah




On 1/17/13 4:58 AM, Kishan Kavala kishan.kav...@citrix.com wrote:

Manan,
 Please find my answers inline.

 -Original Message-
 From: Manan Shah [mailto:manan.s...@citrix.com]
 Sent: Wednesday, 16 January 2013 1:57 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: FW: Questions related to Regions Feature
 
 Kishan,
 
 I reviewed the FS and I have quite a few questions. I have also reviewed
 questions posted by Sangeetha and tried to cover all of her questions
as well.
 Please see the questions below and let us know your thoughts.
 
 We should try and capture all of these items in the Regions FS / Design
spec if
 possible:
 
 
 1. Assumption is that we will support both NFS as well as ObjectStore
as a
 secondary storage. This also means that all templates stored in NFS
storage
 (Region-wide) should be available for all zones within a region.

[KK] Object store is Region-wide. Secondary storage will remain at the
zone level the way it is now. Migration will be required only when
someone using NFS secondary storage in 4.0 moves to object store in 4.1.
This migration will be manual process which has to be documented along
with some scripts to migrate.

 
 2. Assumption is that we will continue to support NFS as a secondary
storage
 at the zone level as well as add support for NFS as secondary storage
at the
 region level

[KK] NFS secondary storage will be supported at the zone level only.
There will be no NFS secondary storage at Region level. Support for
object store at region level will be added. Using object store is
optional. During upgrade if someone wants to use object store, data in
NFS secondary storage has to be migrated to object store as mentioned
above.

 
 3. Addition of a new Region to a existing Cloud:
 A. New Region Addition:
  * Current functionality is to add a new Region to every existing
region.
 This is undesirable. We should replicate the regions DB table just like
 Domain/Accounts, etc so that end users have to add it only in 1 place

[KK] It is a good to have functionality. Add Region is a one-time
operation and we can live with this limitation for 4.1 release.

  * Please update the FS with the expected admin workflow B. Sync of
 Domain / Account / etc:

[KK]  I'll add these to FS

  * You had mentioned that this would be done only on a as-needed
 basis.
 This seems to be confusing. We need to clearly indicate when would the
DB
 tables be synced. Our expectation was that when a new Region is added,
all
 necessary DB tables will get populated  from sync'd DB Table list C.
Sync of

[KK] When a new Region is added, existing Account/User/Domain details
have to copied to new Region manually. This will be documented in FS with
steps to copy the data. Any changes after adding Region will be
propagated immediately.

 Projects:
  * This is in requirements but seems to be missing in FS
 

[KK]  Projects won't be available across regions.

 4. Sync of Domain / Account when a Region goes down and comes back up:
 * You seem to indicate that this would be done on a on-demand basis. Not
 clear of the use cases. FS needs to document the details.

[KK] It is the responsibility of the source region to ensure that changes
are propagated to all regions. I'm still exploring on how to ensure this.

 
 5. Removal of Region:
 * On Region deletion, what happens to all of the objects that are owned
by
 that Region (Domains/Accounts/Projects)
 
[KK] Ownership of the deleted Region objects has to be manually changed
to another Region. This again will be documented along with scripts to
make this change.

 6. Steps to add / remove Regions:
 * Please document the procedure to add/remove regions.

[KK] Add/Remove will be through addRegion and removeRegion APIs. I'll add
workflows to FS explaining the same.

 
 7. Sync of Global Params:
 * Assuming that account/domain/etc related global configs will be
 propagated. Please list all of the global params that will be
propagated.
 Global Param changes require a re-start of Mgmt servers. So, if a domain
 related global config is changed, would we  display a message for all
regions
 to re-start mgmt servers?
 

[KK] Global configs will be per Region. Configs need not be synced across
regions.

 
 8. Resource Limits at the Global level: For example, if a user is
authorized 

[jira] [Commented] (CLOUDSTACK-1003) Failed to start management server with master build

2013-01-18 Thread Rohit Yadav (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557442#comment-13557442
 ] 

Rohit Yadav commented on CLOUDSTACK-1003:
-

Pradeep, the changes are fine, seems like issue in your packaging can you share 
your build machine?
Looks like there some issue with your components.xml; Unable to load 
configuration for management-server from components.xml
Are you doing this on master and why using waf?

 Failed to start management server with master build
 ---

 Key: CLOUDSTACK-1003
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1003
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, Install and Setup
Affects Versions: 4.1.0
 Environment: Centos 6.0.3
Reporter: Rayees Namathponnan
Assignee: Pradeep Soundararajan
Priority: Blocker
 Attachments: catalina.out


 Observed below error in MS log
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Processing 
 updateSSLKeyStore
 INFO  [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at 
 /etc/cloud/management/cloud.keystore
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Processing updateKeyPairs
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Systemvm keypairs not 
 found in database. Need to store them in the database
 INFO  [cloud.server.ConfigurationServerImpl] (main:) Going to update systemvm 
 iso with generated keypairs if needed
 INFO  [utils.component.ComponentLocator] (main:) Config file found at 
 /etc/cloud/management/components.xml.  Configuring management-server
 INFO  [utils.component.ComponentLocator] (main:) Found component: 
 com.cloud.configuration.dao.ConfigurationDao in 
 com.cloud.configuration.dao.ConfigurationDaoImpl - Configuration 
 configuration server
 ERROR [utils.component.ComponentLocator] (main:) Unable to load configuration 
 for management-server from components.xml
 com.cloud.utils.exception.CloudRuntimeException: Unable to find class: 
 org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker
   at 
 com.cloud.utils.component.ComponentLocator$XmlHandler.fillInfo(ComponentLocator.java:1028)
   at 
 com.cloud.utils.component.ComponentLocator$XmlHandler.startElement(ComponentLocator.java:1089)
   at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown 
 Source)
   at 
 org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown 
 Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown
  Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown
  Source)
   at 
 org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown 
 Source)

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


How can I remove my email from this list?

2013-01-18 Thread Marlon Davids


Kind Regards,
Marlon Davids

..
P: +44 (0)845 619 7444 ext. 200 | M: +44 (0)7956 920 496  E:  
mdav...@umbee.co.ukmailto:mdav...@umbee.co.uk
..
W: www.umbeehosting.co.ukhttp://www.umbeehosting.co.uk/ Managed Hosting 
Specialists.

[Description: Description: Description: Description: small-logo]
..
Umbee Ltd, TMS House, Cray Avenue, Orpington, Kent, BR5 3QB
Company Registration Number. 06954604. VAT Registration Number 977446172

This e-mail and the information it contains are confidential.
If you have received this e-mail in error please notify the sender immediately.
You should not copy it for any purpose or disclose its contents to any other 
person.
The contents of this e-mail do not necessarily reflect the views of the company.
EOE

P Please consider the environment before printing this email



RE: [ASF41][QA]CLOUDSTACK - 1007

2013-01-18 Thread Sudha Ponnaganti
Thanks Sangeetha for confirmation 

-Original Message-
From: Sangeetha Hariharan [mailto:sangeetha.hariha...@citrix.com] 
Sent: Friday, January 18, 2013 10:55 AM
To: cloudstack-dev@incubator.apache.org
Subject: RE: [ASF41][QA]CLOUDSTACK - 1007


Tested with latest build from network-refactor branch:

I am able to successfully delete the Shared network that has no Vms assocaiated 
with it.

We are able to stop the router successfully as part of destroying the router.

management server logs:

2013-01-18 13:32:46,785 DEBUG 
[network.router.VirtualNetworkApplianceManagerImpl] (Job-Executor-2:job-58) 
Attempting to destroy router 10
2013-01-18 13:32:46,803 DEBUG [cloud.capacity.CapacityManagerImpl] 
(Job-Executor-2:job-58) VM state transitted from :Running to Stopping with 
event: StopRequestedvm's original host id: 1 new host id: 1 host id before 
state transition: 1
2013-01-18 13:32:46,821 DEBUG [agent.transport.Request] (Job-Executor-2:job-58) 
Seq 1-386072589: Sending { Cmd , MgmtId: 206915885081428, via: 1, Ver: v1, 
Flags: 100111, [{StopCommand:{isProxy:false,vmName:r-10-VM,wait:0}}] }
2013-01-18 13:32:51,672 DEBUG [cloud.api.ApiServlet] (catalina-exec-2:null) 
===START=== 10.217.252.59 -- GET 
command=queryAsyncJobResultjobId=f38eac22-30aa-4f56-b886-8f9eb3d0a25bresponse=jsonsessionkey=bgGUZzPWiG2VDGjCsU3oUROHbms%3D_=1358534197988
2013-01-18 13:32:51,710 DEBUG [cloud.api.ApiServlet] (catalina-exec-2:null) 
===END=== 10.217.252.59 -- GET 
command=queryAsyncJobResultjobId=f38eac22-30aa-4f56-b886-8f9eb3d0a25bresponse=jsonsessionkey=bgGUZzPWiG2VDGjCsU3oUROHbms%3D_=1358534197988
2013-01-18 13:32:53,398 DEBUG [agent.transport.Request] 
(AgentManager-Handler-13:null) Seq 1-386072589: Processing: { Ans: , MgmtId: 
206915885081428, via: 1, Ver: v1, Flags: 110, 
[{StopAnswer:{vncPort:0,result:true,wait:0}}] }
2013-01-18 13:32:53,399 DEBUG [agent.manager.AgentAttache] 
(AgentManager-Handler-13:null) Seq 1-386072589: No more commands found
2013-01-18 13:32:53,399 DEBUG [agent.transport.Request] (Job-Executor-2:job-58) 
Seq 1-386072589: Received: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, 
Flags: 110, { StopAnswer } }
2013-01-18 13:32:53,409 DEBUG 
[network.router.VirtualNetworkApplianceManagerImpl] (Job-Executor-2:job-58) 
Successfully updated user statistics as a part of domR VM[DomainRouter|r-10-VM] 
reboot/stop
2013-01-18 13:32:53,445 DEBUG [cloud.vm.VirtualMachineManagerImpl] 
(Job-Executor-2:job-58) VM[DomainRouter|r-10-VM] is stopped on the host. 
Proceeding to release resource held.

Agent.log:
2013-01-18 18:36:44,388 DEBUG [cloud.agent.Agent] (agentRequest-Handler-3:null) 
Request:Seq 1-386072589: { Cmd , MgmtId: 206915885081428, via: 1, Ver: v1, 
Flags: 100111, [{StopCommand:{isProxy:false,vmName:r-10-VM,wait:0}}] }
2013-01-18 18:36:44,388 DEBUG [cloud.agent.Agent] (agentRequest-Handler-3:null) 
Processing command: com.cloud.agent.api.StopCommand
2013-01-18 18:36:44,489 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-3:null) Executing: 
/usr/lib64/cloud/common/scripts/vm/network/security_group.py 
destroy_network_rules_for_vm --vmname r-10-VM --vif vnet12
2013-01-18 18:36:44,708 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-3:null) Execution is successful.
2013-01-18 18:36:44,709 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-3:null) Try to stop the vm at first
2013-01-18 18:36:50,956 DEBUG [cloud.agent.Agent] (agentRequest-Handler-3:null) 
Seq 1-386072589: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, 
[{StopAnswer:{vncPort:0,result:true,wait:0}}] }
2013-01-18 18:36:51,307 DEBUG [cloud.agent.Agent] (agentRequest-Handler-4:null) 
Request:Seq 1-386072590: { Cmd , MgmtId: 206915885081428, via: 1, Ver: v1, 
Flags: 100111, 
[{storage.DestroyCommand:{vmName:r-10-VM,volume:{id:10,name:ROOT-10,mountPoint:/export/home/sangeetha/asf/primary,path:bde8865f-aed6-4072-8c2c-43025219cbd7,size:725811200,type:ROOT,storagePoolType:NetworkFilesystem,storagePoolUuid:afcf9136-8f08-3361-8328-fac0f471b3e4,deviceId:0},wait:0}}]
 }
2013-01-18 18:36:51,307 DEBUG [cloud.agent.Agent] (agentRequest-Handler-4:null) 
Processing command: com.cloud.agent.api.storage.DestroyCommand
2013-01-18 18:36:51,663 DEBUG [kvm.storage.LibvirtStorageAdaptor] 
(agentRequest-Handler-4:null) requested delete disk 
/mnt/afcf9136-8f08-3361-8328-fac0f471b3e4/r-10-VM-patchdisk
2013-01-18 18:36:51,672 DEBUG [cloud.agent.Agent] (agentRequest-Handler-4:null) 
Seq 1-386072590: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, 
[{Answer:{result:true,details:Success,wait:0}}] }


I will close this issue after I test the account delete scenario as well.

-Thanks
Sangeetha

-Original Message-
From: Sudha Ponnaganti [mailto:sudha.ponnaga...@citrix.com] 
Sent: Friday, January 18, 2013 10:25 AM
To: cloudstack-dev@incubator.apache.org
Subject: [ASF41][QA]CLOUDSTACK - 1007

Marcus/Edison,

Wanted to check if defect [1] has anything to do with the fix 

RE: new storage framework update

2013-01-18 Thread Edison Su


 -Original Message-
 From: Wido den Hollander [mailto:w...@widodh.nl]
 Sent: Friday, January 18, 2013 12:51 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: new storage framework update

 Hi,

 On 01/16/2013 02:35 AM, Edison Su wrote:
  After a lengthy discussion(more than two hours) with John on Skype, I
 think we figured out the difference between us.  The API proposed by John
 is more at the execution level, that's where input/output stream coming
 from, which assumes that both source and destination object will be
 operated at the same place(either inside ssvm, or on hypervisor host). While
 the API I proposed is more about how to hook up vendor's own storage into
 cloudstack's mgt server, thus can replace the process on how and where to
 operate on the storage.
  Let's talk about the execution model at first, which will have huge impact
 on the design we made. The execution model is about where to execute
 operations issued by mgt server. Currently, there is no universal execution
 model, it's quite different for each hypervisor.
E.g. for KVM, mgt server will send commands to KVM host, there is a java
 agent running on kvm host, which can execute command send by mgt server.
  For xenserver, most of commands will be executed on mgt server, which
 will call xapi, then talking to xenserver host.  But we do put some python
 code at xenserver host, if there are operations not supported by xapi.
  For vmware, most of commands will be executed on mgt server, which
 talking to vcenter API, while some of them will be executed inside SSVM.
  Due to the different execution models, we'll get into a problem about how
 and where to access storage device. For example, there is a storage box,
 which has its own management API to be accessed. Now I want to create a
 volume on the storage box, where should I call stoage box's create volume
 api? If we follow up above execution models, we need to call the api at
 different places and even worse, you need to write the API call in different
 languages. For kvm, you may need to write java code in kvm agent, for
 xenserver, you may need to write a xapi python plugin, for vmware, you may
 need to put the java code inside ssvm  etc.
  But if the storage box already has management api, why just call it inside
 cloudstack mgt server, then device vendor should just write java code once,
 for all the different hypervisors? If we don't enforce the execution model,
 then the storage framework should have a hook in management server,
 device vendor can decide where to execute commands send by mgt server.

 With this you are assuming that the management server always has access to
 the API of the storage box?

 What if the management server is in network X (say Amsterdam) en I have a
 zone in London where my storage box X is in a private network.

 The only one that can access the API then is the hypervisor, so the calls have
 to go through there.

 I don't want to encourage people to write stupid code where they assume
 that the management server is this thing which is tied up into every network.

I think we will change the current mgt server deployment model to cluster of 
mgt servers per zone, instead of a cluster of mgt servers manage the whole 
zones: https://cwiki.apache.org/confluence/display/CLOUDSTACK/AWS-Style+Regions
If above works, then mgt server can assume it can access storage box's API. 
BTW, the mgt server does need to access some private mgt API, such as 
F5/netscaler etc.

 Wido

  That's my datastoredriver layer used for. Take taking snapshot diagram
  as an example:
 
 https://cwiki.apache.org/confluence/download/attachments/30741569/take
  +snapshot+sequence.png?version=1modificationDate=1358189965000
  Datastoredriver is running inside mgt server, while datastoredriver itself
 can decide where to execute takasnapshot API, driver can send a
 command to hypervisor host, or directly call storage box's API, or directly 
 call
 hypervisor's own API, or another service running outside of cloudstack mgt
 server. It's all up to the implementation of driver.
  Does it make sense? If it's true, the device driver should not take 
  input/out
 stream as parameter, as it enforces the execution model, which I don't think
 it's necessary.
  BTW, John and I will discuss the matter tomorrow on Skype, if you want to
 join, please let me know.
 
  -Original Message-
  From: Edison Su [mailto:edison...@citrix.com]
  Sent: Monday, January 14, 2013 3:19 PM
  To: cloudstack-dev@incubator.apache.org
  Subject: RE: new storage framework update
 
 
 
  -Original Message-
  From: John Burwell [mailto:jburw...@basho.com]
  Sent: Friday, January 11, 2013 12:30 PM
  To: cloudstack-dev@incubator.apache.org
  Subject: Re: new storage framework update
 
  Edison,
 
  I think we are speaking past each other a bit.  My intention is to
  separate logical and physical storage operations in order to
  simplify the implementation of new storage providers.  

RE: How can I remove my email from this list?

2013-01-18 Thread Animesh Chaturvedi
Marlon

 You can unsubscribe by sending an email to 
cloudstack-dev-unsubscr...@incubator.apache.org from the email you used to 
register. 


Animesh



From: Marlon Davids [mailto:mdav...@umbee.co.uk] 
Sent: Friday, January 18, 2013 10:36 AM
To: cloudstack-dev@incubator.apache.org
Subject: How can I remove my email from this list?



Kind Regards,
Marlon Davids

..
P: +44 (0)845 619 7444 ext. 200 | M: +44 (0)7956 920 496  E:  
mdav...@umbee.co.uk
..
W: www.umbeehosting.co.uk Managed Hosting Specialists.


..
Umbee Ltd, TMS House, Cray Avenue, Orpington, Kent, BR5 3QB
Company Registration Number. 06954604. VAT Registration Number 977446172 

This e-mail and the information it contains are confidential.
If you have received this e-mail in error please notify the sender immediately.
You should not copy it for any purpose or disclose its contents to any other 
person.
The contents of this e-mail do not necessarily reflect the views of the company.
EOE

 Please consider the environment before printing this email



Re: [DISCUSS] IPv6 support draft functional spec(phase 1)

2013-01-18 Thread Sheng Yang
On Thu, Jan 17, 2013 at 7:05 PM, Chiradeep Vittal
chiradeep.vit...@citrix.com wrote:
 The spec calls for dualstack, so ipv4 would still work?

I think it would be stage 2 of phase 1, after ipv6 stack only.

--Sheng

 On 1/17/13 3:49 PM, Sheng Yang sh...@yasker.org wrote:

On Thu, Jan 17, 2013 at 3:26 PM, Alex Huang alex.hu...@citrix.com wrote:
 We just want to make thing as simple as possible for the phase 1. The
 service other than DNS/DHCP would be supported later, and depends on
 how much time we have.


 How do you present something like this to the end user if it works one
way and not another.  It needs to be consistent.

Let's get the DNS/DHCP part done first...

--Sheng



Re: [MERGE] Merge branch api_limit

2013-01-18 Thread Min Chen
Merged to master.

Thanks
-min

On 1/17/13 9:28 PM, prasanna t...@apache.org wrote:

On 18 January 2013 10:50, Min Chen min.c...@citrix.com wrote:
 This integration test just runs API server responding concurrent api
 calls, but it assumes that there is a demo account (not root admin) in
 the system to test this feature. I just coded this test to save my
manual
 testing efforts:)

 Thanks
 -min

+1 Min - should always save the manual effort when one can. Thanks for
the detailed spec and I'm sure I could figure out if I applied my lazy
head a little on how to setup the integration test. But if you could
detail that under the test plan section I'd be grateful.  :)



[jira] [Created] (CLOUDSTACK-1014) Merge ManagementServer and ManagementServerExt

2013-01-18 Thread Rohit Yadav (JIRA)
Rohit Yadav created CLOUDSTACK-1014:
---

 Summary: Merge ManagementServer and ManagementServerExt
 Key: CLOUDSTACK-1014
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1014
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public (Anyone can view this level - this is the default.)
Reporter: Rohit Yadav
Assignee: Rohit Yadav


Get rid of multiple classes, merge them into one single mgmt server class.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Re: [VOTE] Accept a donation of Enhanced Baremetal Provisioning support from Citrix

2013-01-18 Thread John Kinsella
+1 (binding)

On Jan 15, 2013, at 5:06 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com 
wrote:

 I would like to call a vote for the Apache CloudStack project to accept a 
 donation from Citrix for Enhanced Baremetal Provisioning 
 
 The initial discussion is at [1].
 
 The content has been posted by Frank at [2].
 
 The files would need to be updated to reflect the correct ASF headers prior 
 to commit into our repo.
 
 
 Committers have binding votes for this decision.
 
 Please respond with your vote:
 +1 - Accept the donation and begin the process of bringing this enhancement 
 to CloudStack
 in via the IP clearance process
 +0 - Don't care
 -1 - Do not accept the donation
 
 This vote will remain open for ~72 hours.
 
 [1] http://markmail.org/message/m6tg5nzfgqiwhzre
 [2] http://people.apache.org/~frankzhang/CLOUDSTACK-774-baremetal-support.zip
 
 
 

Stratosec - Secure Infrastructure as a Service
o: 415.315.9385
@johnlkinsella



Re: [VOTE] Accept a donation of SRXF5 inline mode support in CloudStack from Citrix

2013-01-18 Thread John Kinsella
+1 (binding)

On Jan 16, 2013, at 10:53 AM, Animesh Chaturvedi 
animesh.chaturv...@citrix.com wrote:

 Reposting with subject line VOTE
 
 Committers have binding votes for this decision.
 
 Please respond with your vote:
 +1 - Accept the donation and begin the process of bringing this enhancement 
 to CloudStack
 in via the IP clearance process
 +0 - Don't care
 -1 - Do not accept the donation
 
 This vote will remain open for ~72 hours.
 
 
 -Original Message-
 From: Sheng Yang [mailto:sh...@yasker.org]
 Sent: Tuesday, January 15, 2013 5:54 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: [IP Clearance] CLOUDSTACK-306 SRXF5 inline mode
 
 Hi,
 
 I'd like to start the process of IP Clearance for CLOUDSTACK-306:
 SRXF5 inline mode support.
 
 Citrix would like to donate this code to Apache Cloudstack.
 
 This feature extended the support for external network devices for 
 Cloudstack.
 
 In the Cloudstack 4.0 release, it's only able to work with SRX and F5 in 
 side-by-
 side mode, which means all the traffic going through F5 load balancer would
 bypass SRX firewall, and F5 would facing the public network directly. 
 Cloudstack
 4.0 still have some obsolete codes to deal with inline mode back to 2.2.x 
 era,
 but they're not functional after NaaS work in 3.0 release.
 
 After reintroducing this feature, SRX is able to working as the firewall for 
 the
 whole guest network(isolated network), including F5.
 Every load balancing traffic must go through SRX, in order to reach F5.
 
 In order to support inline mode, in the first patch, I had re-implemented the
 firewall part SRX to make it able to filter based on public ip we're using to
 identify the traffic, using firewall filter of SRX.
 
 In the second patch, I've investigated the possibility of using one F5 
 instance in
 site-by-site mode and inline-mode at the same time, and found it doable. So I
 make inline a parameter for network offering, not an option for device(e.g.
 F5).
 
 And I have reimplemented the inline mode feature in the third patch.
 
 The whole patchset mostly deal with external devices related filres, e.g.
 JuniperSrxResource.java, ExternalFirewallDeviceManagerImpl.java,
 F5BigIpResource.java, ExternalLoadBalancerDeviceManagerImpl.java.
 There are also some refactor works regarding NetworkManagerImpl.java.
 
 The patchset is at:
 http://people.apache.org/~yasker/
 
 Since there are three patches, I've checksumed and signed the tar ball.
 
 The related Jira ticket at:
 https://issues.apache.org/jira/browse/CLOUDSTACK-306
 
 The function spec is at:
 https://cwiki.apache.org/CLOUDSTACK/network-inline-mode-functional-
 spec.html
 
 The previous discussion happened on:
 http://markmail.org/message/jnpl5b7b6cqqmrui
 
 There is no objection on this feature at the time of discussion.
 
 Thank you!
 
 --Sheng
 

Stratosec - Secure Infrastructure as a Service
o: 415.315.9385
@johnlkinsella



Re: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix.

2013-01-18 Thread John Kinsella
+1  (binding)

On Jan 17, 2013, at 2:47 AM, Murali Reddy murali.re...@citrix.com wrote:

 I would like to call a vote for the Apache CloudStack project to accept a 
 donation from Citrix to provide Optional Public IP assignment for EIP with 
 Basic Zone.
 
 The functional specification is available at [1] and has been discussed [2] 
 with no outstanding issues. Bug 265 [3] opened to track this feature.
 
 Patch [4] and MD5 [5] files are made available at below links
 
 [1] 
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Optional+Public+IP+assignment+for+EIP+with+Basic+Zone
 [2] http://markmail.org/thread/b2h2cw62qnryk4qh
 [3] https://issues.apache.org/jira/browse/CLOUDSTACK-265
 [4] 
 http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-provide-option-to-turn-off-automatic-.patch
 [5] 
 http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-provide-option-to-turn-off-automatic-.patch.md5

Stratosec - Secure Infrastructure as a Service
o: 415.315.9385
@johnlkinsella



Re: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix

2013-01-18 Thread John Kinsella
+1 (binding)

On Jan 17, 2013, at 9:41 AM, Animesh Chaturvedi animesh.chaturv...@citrix.com 
wrote:

 Reposting with subject line VOTE
 
 Committers have binding votes for this decision.
 
 Please respond with your vote:
 +1 - Accept the donation and begin the process of bringing this 
 +enhancement to CloudStack
 in via the IP clearance process
 +0 - Don't care
 -1 - Do not accept the donation
 
 This vote will remain open for ~72 hours.
 
 -Original Message-
 From: Anthony Xu [mailto:xuefei...@citrix.com]
 Sent: Wednesday, January 16, 2013 4:39 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: [IP Clearance: CLOUDSTACK-737] support security group
 enabled
 network in advanced zone
 
 Hi folks,
 
 I'd like to start the IP clearance process for the Citrix feature -
 support security
 group enabled network in advanced zone
 
 https://issues.apache.org/jira/browse/CLOUDSTACK-737
 
 Citrix would like to donate this feature to Apache CloudStack,
 
 In 4.0, security group is only supported in basic zone, this feature
 is to add
 security group in advanced zone, then user can isolate VMs in the
 same guest
 network.
 
 Here is FS,
 
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+based
 +
 on+
 Security+Groups+in+Advance+zone
 
 This donation is a subset of the feature according to the FS Only
 support KVM
 Only support one zone-wide security-enabled shared network
 
 Rest of this feature will be developed in Apache
 
 This is discussion thread
 http://markmail.org/message/cle3d64ci6pobs2i
 
 
 here is patch[Animesh]  http://people.apache.org/~anthonyxu/
 
 
 
 Thanks,
 Anthony
 
 
 
 

Stratosec - Secure Infrastructure as a Service
o: 415.315.9385
@johnlkinsella



Re: [VOTE] Accept a donation of Documentation for various features from Citrix

2013-01-18 Thread John Kinsella
+1 (binding)

On Jan 17, 2013, at 9:48 AM, Animesh Chaturvedi animesh.chaturv...@citrix.com 
wrote:

 Reposting with subject line VOTE.
 
 Committers have binding votes for this decision.
 
 Please respond with your vote:
 +1 - Accept the donation and begin the process of bringing this 
 +enhancement to CloudStack
 in via the IP clearance process
 +0 - Don't care
 -1 - Do not accept the donation
 
 This vote will remain open for ~72 hours.
 
 Content Location: http://people.apache.org/~jtomechak
 
   
 -Original Message-
 From: Jessica Tomechak [mailto:jessica.tomec...@citrix.com]
 Sent: Tuesday, January 15, 2013 7:05 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: RE: [IP Clearance] Potential issues
 
 On people.apache.org/~jtomechak, I have posted all my docs related to the bug
 items in the IP Clearance list which Animesh provided.
 
 I have made notations in the Doc sub-task of each bug, so that anyone
 reviewing the proposed feature can easily find the documentation.
 
 In addition, I made a note for myself of the doc status of each bug in that 
 list,
 and here it is for anyone who is interested!
 
 CLOUDSTACK-774 :
 Code in ACS repo: No
 Functional Spec Posted: Yes
 Community Discussion Done: Yes
 Contribution Size Approx: 5000 lines
 Contributor : Frank
 IP Clearance needed initial recommendation: Yes
 Docs: None exist. This was not announced or supported as a Citrix CP 3.0.6
 feature.
 
 
 CLOUDSTACK-306 :
 Code in ACS repo: Yes
 Functional Spec Posted: Yes
 Community Discussion Done: Yes in October Contribution Size Approx: 1500
 lines Contributor : Sheng IP Clearance needed initial recommendation: Yes
 Docs: Already submitted via reviewboard. Link and info in doc subtask.
 
 
 CLOUDSTACK-777/700 :
 Code in ACS repo: Yes
 Functional Spec Posted: No
 Community Discussion Done: Yes
 Contribution Size Approx: 500 lines
 Contributor : Kishan/Jayapal/Rajesh/Murali IP Clearance needed initial
 recommendation: Yes
 Docs: Pending on reviewboard. URL and notations in the doc subtask of the 
 bug.
 
 CLOUDSTACK-778/319 :
 Code in ACS repo: No
 Functional Spec Posted: No
 Community Discussion Done: Yes
 Contribution Size Approx: should be small Contributor : Vijayendra IP 
 Clearance
 needed initial recommendation: This is a trivial issue so may be no
 Docs: Pending on reviewboard. Info is in the doc subtask of the bug.
 
 CLOUDSTACK-299 :
 Code in ACS repo: UI code is there but backend is not Functional Spec Posted:
 Yes Community Discussion Done: Yes Contribution Size Approx: 1400 lines
 Contributor : Jayapal IP Clearance needed initial recommendation: Yes
 Docs: Pending on reviewboard. Link is provided in the description of the bug.
 
 CLOUDSTACK-297 :
 Code in ACS repo: No, but posted on review board Functional Spec Posted: Yes
 Community Discussion Done: Yes Contribution Size Approx: 350 lines
 Contributor : Hari IP Clearance needed initial recommendation:
 Docs: One paragraph of new docs on people.a.o. The URL is noted in the doc
 subtask of the bug. http://people.apache.org/~jtomechak/CLOUDSTACK-297/
 
 
 CLOUDSTACK-197 :
 Code in ACS repo: Multiple patches posted on review board Functional Spec
 Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 3000
 lines Contributor : Likitha IP Clearance needed initial recommendation: No,
 since incremental patches were posted over a period
 Docs: Believe docs already exist, authored on the community side by Sebastien
 G.
 
 CLOUDSTACK-192 :
 Code in ACS repo: No
 Functional Spec Posted: Yes
 Community Discussion Done: Yes, but no consensus reached Contribution Size
 Approx: 1000 lines Contributor : Sanjay IP Clearance needed initial
 recommendation: Yes, if community agrees to feature inclusion
 Docs: On people.a.o. The URL is noted in the doc subtask of the bug.
 http://people.apache.org/~jtomechak/CLOUDSTACK-192/
 
 
 CLOUDSTACK-304 / 784 :
 Code in ACS repo: Yes
 Functional Spec Posted: Yes
 Community Discussion Done: Yes
 Contribution Size Approx: 600
 Contributor : Alena
 IP Clearance needed initial recommendation: No, since commits were done
 way back in October over a period of 1 week
 Docs: On people.a.o. The URL is noted in the doc subtask of the bug.
 http://people.apache.org/~jtomechak/CLOUDSTACK-737/
 
 CLOUDSTACK-265 :
 Code in ACS repo: Yes
 Functional Spec Posted: Yes
 Community Discussion Done: Yes
 Contribution Size Approx: 450
 Contributor : Murali
 IP Clearance needed initial recommendation: Yes
 Docs: Pending on reviewboard. URL is noted in the doc subtask of the bug.
 
 CLOUDSTACK-737 :
 Code in ACS repo: No
 Functional Spec Posted: Yes
 Community Discussion Done: Yes
 Contribution Size Approx: 2000
 Contributor : Anthony
 IP Clearance needed initial recommendation: Yes
 Docs: On people.a.o. The URL is noted in the doc subtask of the bug.
 http://people.apache.org/~jtomechak/CLOUDSTACK-737/
 
 
 CLOUDSTACK-177 :
 Code in ACS repo: Yes
 Functional Spec Posted: Yes
 Community Discussion Done: Yes
 

[jira] [Commented] (CLOUDSTACK-602) Warn of dependency on mkisofs

2013-01-18 Thread Rohit Yadav (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557514#comment-13557514
 ] 

Rohit Yadav commented on CLOUDSTACK-602:


mkisofs and genisoimage are different, on Debian mkisofs is not available and 
cannot be used interoperably. In case a developer wants it, for ex. on 
Debian/Arch/Mac they should compile it, mkisofs is provided by cdrtools project.

 Warn of dependency on mkisofs
 -

 Key: CLOUDSTACK-602
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-602
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Doc
Affects Versions: 4.1.0
 Environment: debian 
Reporter: Mel Davis
Assignee: Radhika Nair
Priority: Trivial

 cloud-setup-management fails quietly if /usr/bin/mkisofs is no found.  
 Failure is indicated only in the 
 /var/log/cloud/management/management-server.log.This results in the 
 inability to log into client via the web interface. 
 The docs should at least note the dependency and, maybe, suggest this 
 workaround: 
 ln -s /usr/bin/genisoimage /usr/bin/mkisofs

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix

2013-01-18 Thread Animesh Chaturvedi


 -Original Message-
 From: Chip Childers [mailto:chip.child...@sungard.com]
 Sent: Thursday, January 17, 2013 2:02 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [VOTE} Accept a donaiton of support security group enabled
 network in advanced zone from Citrix
 
 On Thu, Jan 17, 2013 at 12:41 PM, Animesh Chaturvedi
 animesh.chaturv...@citrix.com wrote:
  Reposting with subject line VOTE
 
  Committers have binding votes for this decision.
 
  Please respond with your vote:
  +1 - Accept the donation and begin the process of bringing this
  +enhancement to CloudStack
  in via the IP clearance process
  +0 - Don't care
  -1 - Do not accept the donation
 
  This vote will remain open for ~72 hours.
 
 IMO, this is small enough not to qualify as substantial.  I would be OK with
 this vote being cancelled, and a lazy consensus being reached to simply have
 Anthony commit it (using his ICLA as the contractual support for the
 donation).
 
 That being said, if we progress down the IP clearance path for this patch,
 here's my vote:
 
 +1 (binding)
 
[Animesh] If there is no objection to Chip's assessment as this feature not 
being substantial by Monday, I will like to cancel the VOTE and treat this as 
lazy consensus for commit



 
-Original Message-
From: Anthony Xu [mailto:xuefei...@citrix.com]
Sent: Wednesday, January 16, 2013 4:39 PM
To: cloudstack-dev@incubator.apache.org
Subject: [IP Clearance: CLOUDSTACK-737] support security group
   enabled
network in advanced zone
   
Hi folks,
   
I'd like to start the IP clearance process for the Citrix feature
-
   support security
group enabled network in advanced zone
   
https://issues.apache.org/jira/browse/CLOUDSTACK-737
   
Citrix would like to donate this feature to Apache CloudStack,
   
In 4.0, security group is only supported in basic zone, this
feature
   is to add
security group in advanced zone, then user can isolate VMs in the
   same guest
network.
   
Here is FS,
   
  
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+ba
   sed
   +
   on+
Security+Groups+in+Advance+zone
   
This donation is a subset of the feature according to the FS Only
   support KVM
Only support one zone-wide security-enabled shared network
   
Rest of this feature will be developed in Apache
   
This is discussion thread
http://markmail.org/message/cle3d64ci6pobs2i
   
   
here is patch[Animesh]  http://people.apache.org/~anthonyxu/

   
   
Thanks,
Anthony
   
   
 
 


[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble

2013-01-18 Thread Richard Shevel (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557526#comment-13557526
 ] 

Richard Shevel commented on CLOUDSTACK-938:
---

i updated  both .jar 

agent.log

2013-01-18 23:21:52,605 DEBUG [resource.virtualnetwork.VirtualRoutingResource] 
(agentRequest-Handler-5:null) Trying to connect to 169.254.0.22
2013-01-18 23:21:52,607 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) Ping command port succeeded for vm r-292-VM
2013-01-18 23:21:52,607 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) 
Processing command: com.cloud.agent.api.GetDomRVersionCmd
2013-01-18 23:21:52,607 DEBUG [resource.virtualnetwork.VirtualRoutingResource] 
(agentRequest-Handler-5:null) Executing: 
/usr/lib64/cloud/common/scripts/network/domr/router_proxy.sh 
get_template_version.sh 169.254.0.22
2013-01-18 23:21:52,710 DEBUG [resource.virtualnetwork.VirtualRoutingResource] 
(agentRequest-Handler-5:null) Execution is successful.
2013-01-18 23:21:52,711 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) 
Processing command: com.cloud.agent.api.NetworkUsageCommand
2013-01-18 23:21:52,711 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) Executing: 
/usr/lib64/cloud/common/scripts/network/domr/router_proxy.sh netusage.sh 
169.254.0.22 -c
2013-01-18 23:21:52,820 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) Execution is successful.
2013-01-18 23:21:52,821 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) 
Processing command: com.cloud.agent.api.PlugNicCommand
2013-01-18 23:21:52,899 DEBUG [kvm.resource.BridgeVifDriver] 
(agentRequest-Handler-5:null) nic=[Nic:Public-77.95.133.142-vlan://50]
2013-01-18 23:21:52,899 DEBUG [kvm.resource.BridgeVifDriver] 
(agentRequest-Handler-5:null) Executing: 
/usr/lib64/cloud/common/scripts/vm/network/vnet/modifyvlan.sh -v 50 -p bond2 -o 
add
2013-01-18 23:21:52,931 DEBUG [kvm.resource.BridgeVifDriver] 
(agentRequest-Handler-5:null) Execution is successful.
2013-01-18 23:21:52,932 DEBUG [kvm.resource.BridgeVifDriver] 
(agentRequest-Handler-5:null) Set name-type for VLAN subsystem. Should be 
visible in /proc/net/vlan/config

2013-01-18 23:21:53,104 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) 
Processing command: com.cloud.agent.api.routing.IpAssocVpcCommand
2013-01-18 23:21:53,166 INFO  [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) IpAssocVpcCommand:LinkLocal is on dev eth0
2013-01-18 23:21:53,166 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) matchPifFileInDirectory: file name 'bond2.50'
2013-01-18 23:21:53,166 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) NEWCODE:tested getVlanIdFromBridge
2013-01-18 23:21:53,167 INFO  [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) getVlanIdFromBridge: found vlanId 50 from sysfs 
for bridge cloudVirBr50
2013-01-18 23:21:53,167 INFO  [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) IpAssocVpcCommand:dev eth1 on bridge cloudVirBr50 
is for vlan50
2013-01-18 23:21:53,167 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) matchPifFileInDirectory: file name 'bond2.50'
2013-01-18 23:21:53,167 DEBUG [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) NEWCODE:tested getVlanIdFromBridge
2013-01-18 23:21:53,167 INFO  [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) getVlanIdFromBridge: found vlanId 50 from sysfs 
for bridge cloudVirBr50
2013-01-18 23:21:53,167 INFO  [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) IpAssocVpcCommand: ip 77.95.133.142 is on vlan 50 
according to management server
2013-01-18 23:21:53,167 INFO  [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) IpAssocVpcCommand: nicName for ip 77.95.133.142 
in router is eth1
2013-01-18 23:21:53,168 DEBUG [resource.virtualnetwork.VirtualRoutingResource] 
(agentRequest-Handler-5:null) Executing: 
/usr/lib64/cloud/common/scripts/network/domr/router_proxy.sh vpc_ipassoc.sh 
169.254.0.22  -A  -l 77.95.133.142 -c eth1
-g 77.95.133.129 -m 26 -n 77.95.133.128
2013-01-18 23:21:55,335 DEBUG [resource.virtualnetwork.VirtualRoutingResource] 
(agentRequest-Handler-5:null) Execution is successful.
2013-01-18 23:21:55,335 DEBUG [resource.virtualnetwork.VirtualRoutingResource] 
(agentRequest-Handler-5:null) ARPING 77.95.133.142 from 77.95.133.142 eth1
Sent 3 probes (3 broadcast(s))
Received 0 response(s)

2013-01-18 23:21:55,336 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) 
Processing command: com.cloud.agent.api.routing.SetSourceNatCommand
2013-01-18 23:21:55,346 INFO  [kvm.resource.LibvirtComputingResource] 
(agentRequest-Handler-5:null) pubVlan id is 50 according to the command sent 
from server
2013-01-18 23:21:55,402 INFO  

[jira] [Commented] (CLOUDSTACK-355) Fix count in a bunch of API commands

2013-01-18 Thread Min Chen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531
 ] 

Min Chen commented on CLOUDSTACK-355:
-

Have fixed the following apis:
listHosts
listSecurityGroups
listEvents

 Fix count in a bunch of API commands
 --

 Key: CLOUDSTACK-355
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.1.0
Reporter: Alena Prokharchyk
Assignee: Min Chen
 Fix For: 4.1.0


 Count should be fixed for following list commands (as a part of Search Engine 
 refactoring)
 listResourceLimits
 listIsos
 listTemplates
 listLoadBalancerRuleInstances
 listCapacity
 listHosts
 listSecurityGroups
 listNetworks
 listVPCs
 listTemplatePermissions
 listIsoPermissions
 listServiceOfferings
 listDiskOfferings
 listNetworkDevice
 listVPCOfferings
 listTrafficTypeImplementors
 listSnapshotPolicies
 listLBStickinessPolicies
 listCapabilities
 listZones
 listEventTypes
 listSwifts
 listHypervisors
 listNetworkOfferings
 listSupportedNetworkServices
 listStorageNetworkIpRange
 listEvents 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Comment Edited] (CLOUDSTACK-355) Fix count in a bunch of API commands

2013-01-18 Thread Min Chen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531
 ] 

Min Chen edited comment on CLOUDSTACK-355 at 1/18/13 7:41 PM:
--

Have fixed the following apis:
listHosts
listSecurityGroups
listEvents
listEventTypes (for this command, no pageSize can be provided, so current count 
is correct).

  was (Author: minchen07):
Have fixed the following apis:
listHosts
listSecurityGroups
listEvents
  
 Fix count in a bunch of API commands
 --

 Key: CLOUDSTACK-355
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.1.0
Reporter: Alena Prokharchyk
Assignee: Min Chen
 Fix For: 4.1.0


 Count should be fixed for following list commands (as a part of Search Engine 
 refactoring)
 listResourceLimits
 listIsos
 listTemplates
 listLoadBalancerRuleInstances
 listCapacity
 listHosts
 listSecurityGroups
 listNetworks
 listVPCs
 listTemplatePermissions
 listIsoPermissions
 listServiceOfferings
 listDiskOfferings
 listNetworkDevice
 listVPCOfferings
 listTrafficTypeImplementors
 listSnapshotPolicies
 listLBStickinessPolicies
 listCapabilities
 listZones
 listEventTypes
 listSwifts
 listHypervisors
 listNetworkOfferings
 listSupportedNetworkServices
 listStorageNetworkIpRange
 listEvents 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble

2013-01-18 Thread Sheng Yang (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557537#comment-13557537
 ] 

Sheng Yang commented on CLOUDSTACK-938:
---

The missing checkbatchs2svpn.sh won't affect the status of VPN connection, but 
it would disable the detection VPN connection state update feature(e.g. when 
you lost connection on VPN, the feature would change the VPN connection state 
to Disconnect).

 s2s VPN trouble
 ---

 Key: CLOUDSTACK-938
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Network Controller
Affects Versions: 4.0.0, 4.0.1
 Environment: CentOS 6.3 x86_64
 CS - 4.0.1-0.11
Reporter: Richard Shevel
 Fix For: 4.0.2, 4.1.0

 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, 
 management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, 
 management-server.zip, messages, public.png, r-292-vm_log.tar.gz


 Dear colleagues, the problem is clearly a bug:
 I created a VPC
 Further, in my VPN Customer Gateway to the settings
 Gateway 217.70.20.213
 CIDR list 192.168.10.0/24
 IPsec Preshared-Key blablablablablabla
 IKE Encryption 3des
 IKE Hash md5
 IKE DH None
 ESP Encryption 3des
 ESP Hash md5
 Perfect Forward Secrecy None
 IKE lifetime (second) 86 400
 ESP Lifetime (second) 28 800
 Dead Peer Detection Yes
 In the setting of VPC I create VPN Gateway
 When creating a VPN Connection get the error:
 Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply 
 site-to-site VPN
 catalina.out:
 WARN  [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class 
 com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is 
 unreachable: Failed to apply site-to-site VPN
 WARN  [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to 
 unregister active job 463 from JMX monitoring
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 management-server.log:
 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-4:null) Ping from 5
 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-2:null) Ping from 3
 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] 
 (secstorage-1:null) Zone 1 is ready to launch secondary storage VM
 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] 
 (consoleproxy-1:null) Zone 1 is ready to launch console proxy
 2013-01-09 21:28:18,306 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Found 3 routers.
 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Sending  { Cmd , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 100111, 
 [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}]
  }
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (AgentManager-Handler-3:null) Seq 5-223284290: Processing:  { Ans: , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 110, 
 [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand
  failed,result:false,wait:0}}] }
 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] 
 (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Received:  { Ans: , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 110, { CheckS2SVpnConnectionsAnswer } }
 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentManagerImpl] 
 (RouterStatusMonitor-1:null) Details from executing class 
 com.cloud.agent.api.CheckS2SVpnConnectionsCommand: 
 CheckS2SVpnConneciontsCommand failed
 2013-01-09 21:28:18,458 WARN  
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Unable to update router r-288-VM's VPN 
 connection status
 2013-01-09 21:28:43,063 DEBUG [cloud.server.StatsCollector] 
 (StatsCollector-2:null) StorageCollector is 

RE: [DISCUSS] IPv6 support draft functional spec(phase 1)

2013-01-18 Thread Anthony Xu
Dual stack in user VM or router VM?
router VM must have dual stack because link-local is still ipv4, right?


Anthony

 -Original Message-
 From: Sheng Yang [mailto:sh...@yasker.org]
 Sent: Friday, January 18, 2013 11:13 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [DISCUSS] IPv6 support draft functional spec(phase 1)
 
 On Thu, Jan 17, 2013 at 7:05 PM, Chiradeep Vittal
 chiradeep.vit...@citrix.com wrote:
  The spec calls for dualstack, so ipv4 would still work?
 
 I think it would be stage 2 of phase 1, after ipv6 stack only.
 
 --Sheng
 
  On 1/17/13 3:49 PM, Sheng Yang sh...@yasker.org wrote:
 
 On Thu, Jan 17, 2013 at 3:26 PM, Alex Huang alex.hu...@citrix.com
 wrote:
  We just want to make thing as simple as possible for the phase 1.
 The
  service other than DNS/DHCP would be supported later, and depends
 on
  how much time we have.
 
 
  How do you present something like this to the end user if it works
 one
 way and not another.  It needs to be consistent.
 
 Let's get the DNS/DHCP part done first...
 
 --Sheng
 


[jira] [Comment Edited] (CLOUDSTACK-355) Fix count in a bunch of API commands

2013-01-18 Thread Min Chen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531
 ] 

Min Chen edited comment on CLOUDSTACK-355 at 1/18/13 7:48 PM:
--

Have fixed the following apis:
listHosts
listSecurityGroups
listEvents
listEventTypes (for this command, no pageSize can be provided, so current count 
is correct).
listTemplatePermissionCmd (for this command, response is not ListResponse, so 
we are not returning Count)

  was (Author: minchen07):
Have fixed the following apis:
listHosts
listSecurityGroups
listEvents
listEventTypes (for this command, no pageSize can be provided, so current count 
is correct).
  
 Fix count in a bunch of API commands
 --

 Key: CLOUDSTACK-355
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.1.0
Reporter: Alena Prokharchyk
Assignee: Min Chen
 Fix For: 4.1.0


 Count should be fixed for following list commands (as a part of Search Engine 
 refactoring)
 listResourceLimits
 listIsos
 listTemplates
 listLoadBalancerRuleInstances
 listCapacity
 listHosts
 listSecurityGroups
 listNetworks
 listVPCs
 listTemplatePermissions
 listIsoPermissions
 listServiceOfferings
 listDiskOfferings
 listNetworkDevice
 listVPCOfferings
 listTrafficTypeImplementors
 listSnapshotPolicies
 listLBStickinessPolicies
 listCapabilities
 listZones
 listEventTypes
 listSwifts
 listHypervisors
 listNetworkOfferings
 listSupportedNetworkServices
 listStorageNetworkIpRange
 listEvents 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Comment Edited] (CLOUDSTACK-355) Fix count in a bunch of API commands

2013-01-18 Thread Min Chen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531
 ] 

Min Chen edited comment on CLOUDSTACK-355 at 1/18/13 7:49 PM:
--

Have fixed the following apis:
listHosts
listSecurityGroups
listEvents
listEventTypes (for this command, no pageSize can be provided, so current count 
is correct)
listHypervisors (for this command, no pageSize can be provided, so current 
count is correct)
listTemplatePermissionCmd (for this command, response is not ListResponse, so 
we are not returning Count)

  was (Author: minchen07):
Have fixed the following apis:
listHosts
listSecurityGroups
listEvents
listEventTypes (for this command, no pageSize can be provided, so current count 
is correct).
listTemplatePermissionCmd (for this command, response is not ListResponse, so 
we are not returning Count)
  
 Fix count in a bunch of API commands
 --

 Key: CLOUDSTACK-355
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.1.0
Reporter: Alena Prokharchyk
Assignee: Min Chen
 Fix For: 4.1.0


 Count should be fixed for following list commands (as a part of Search Engine 
 refactoring)
 listResourceLimits
 listIsos
 listTemplates
 listLoadBalancerRuleInstances
 listCapacity
 listHosts
 listSecurityGroups
 listNetworks
 listVPCs
 listTemplatePermissions
 listIsoPermissions
 listServiceOfferings
 listDiskOfferings
 listNetworkDevice
 listVPCOfferings
 listTrafficTypeImplementors
 listSnapshotPolicies
 listLBStickinessPolicies
 listCapabilities
 listZones
 listEventTypes
 listSwifts
 listHypervisors
 listNetworkOfferings
 listSupportedNetworkServices
 listStorageNetworkIpRange
 listEvents 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Re: [DISCUSS] Integrate Cisco ASA 1000v into CloudStack

2013-01-18 Thread Chiradeep Vittal
Take a look here:
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Cisco+VNMC+integrati
on


This is something I had been prototyping without any real enthusiasm.

There's 3 ways to control the ASA1000v:
1. By logging in via the CLI. Strongly against this.
2. By using VNMC
3. Via Cisco's Network Services Manager (NSM)[1]

The NSM is comprehensive, covers a large range of physical and virtual
devices and has an easy northbound API. This would be my preferred
solution.

However as of now (NSM v5.0.2), the ASA1000v  is not supported.
It may also be the case that using VNMC may be a cheaper (albeit less
supported) option

[1] http://www.cisco.com/en/US/products/ps11636/index.html

On 1/17/13 9:26 PM, Koushik Das koushik@citrix.com wrote:

Manan,
Can you answer the questions that Chiradeep has raised?

Chiradeep,
I saw that you have started working on asa/vnmc here
(https://git-wip-us.apache.org/repos/asf/incubator-cloudstack/repo?p=incub
ator-cloudstack.git;a=shortlog;h=refs/heads/cisco-vnmc-api-integration).
I would like to understand the functionalities that you are planning to
cover and what is the overlap between your work and the feature that
Manan has proposed (supporting asa1000v as an external firewall).

Thanks,
Koushik

 -Original Message-
 From: Alex Huang [mailto:alex.hu...@citrix.com]
 Sent: Sunday, January 06, 2013 2:18 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: RE: [DISCUSS] Integrate Cisco ASA 1000v into CloudStack
 
 Manan,
 
 Can you address the issues that Chiradeep has brought up?  I think for a
 requirements discussion it is just as important to indicate what we
will not do
 or what is considered a feature of a later release.
 
 --Alex
 
  -Original Message-
  From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com]
  Sent: Thursday, January 03, 2013 6:16 PM
  To: CloudStack DeveloperList
  Subject: Re: [DISCUSS] Integrate Cisco ASA 1000v into CloudStack
 
  There cannot be feature parity since the ASA1000v is only supported on
  VMWare.
 
  Should the ASA1000v be created on demand, or do we expect the admin to
  provision a pool of virtual ASAs?
 
  Should we support VXLAN as the isolation technology or VLANs?
 
 
  On 1/3/13 5:08 PM, Manan Shah manan.s...@citrix.com wrote:
 
  Hi,
  
  I would like to propose a new feature for integrating Cisco ASA 1000v
  in CS 4.1. I have created a JIRA ticket and provided the requirements
  at the following location.  Please provide feedback on the
requirements.
  
  JIRA Ticket: https://issues.apache.org/jira/browse/CLOUDSTACK-742
  Requirements:
 
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Integrate+Cisc
  o
  +ASA
  +
  1000v+as+a+FW+for+CloudStack
  
  Additional details would be provided in the FS.
  
  Regards,
  Manan Shah
  




[jira] [Created] (CLOUDSTACK-1015) [UNIT TEST] failure

2013-01-18 Thread David Nalley (JIRA)
David Nalley created CLOUDSTACK-1015:


 Summary: [UNIT TEST] failure 
 Key: CLOUDSTACK-1015
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1015
 Project: CloudStack
  Issue Type: Bug
  Components: Test
Reporter: David Nalley
Priority: Blocker


Unit test failing. It appears that this depends on mysql - which by default 
sounds like it isn't a unit test IMO 

com.cloud.utils.exception.CloudRuntimeException: DB Exception on: null
at 
com.cloud.utils.db.GenericDaoBase.searchIncludingRemoved(GenericDaoBase.java:410)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.CGLIB$searchIncludingRemoved$54(generated)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031$$FastClassByCGLIB$$25a19157.invoke(generated)
at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228)
at 
com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.searchIncludingRemoved(generated)
at 
com.cloud.utils.db.GenericDaoBase.searchIncludingRemoved(GenericDaoBase.java:345)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.CGLIB$searchIncludingRemoved$53(generated)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031$$FastClassByCGLIB$$25a19157.invoke(generated)
at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228)
at 
com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.searchIncludingRemoved(generated)
at 
com.cloud.utils.db.GenericDaoBase.listIncludingRemovedBy(GenericDaoBase.java:897)
at 
com.cloud.utils.db.GenericDaoBase.listIncludingRemovedBy(GenericDaoBase.java:902)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl.getConfiguration(ConfigurationDaoImpl.java:71)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.CGLIB$getConfiguration$4(generated)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031$$FastClassByCGLIB$$25a19157.invoke(generated)
at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228)
at 
com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.getConfiguration(generated)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl.getConfiguration(ConfigurationDaoImpl.java:99)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.CGLIB$getConfiguration$5(generated)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031$$FastClassByCGLIB$$25a19157.invoke(generated)
at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228)
at 
com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34)
at 
com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.getConfiguration(generated)
at 
com.cloud.network.vpn.RemoteAccessVpnManagerImpl.configure(RemoteAccessVpnManagerImpl.java:590)
at 
com.cloud.network.vpn.RemoteAccessVpnTest.testInjected(RemoteAccessVpnTest.java:102)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at 
org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:45)
at 
org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:15)
at 
org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:42)
at 
org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:20)
at 
org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:28)
at 
org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:30)
at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:263)
at 
org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:68)
at 
org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:47)
at org.junit.runners.ParentRunner$3.run(ParentRunner.java:231)
at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:60)
at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:229)
at org.junit.runners.ParentRunner.access$000(ParentRunner.java:50)
at 

[jira] [Comment Edited] (CLOUDSTACK-355) Fix count in a bunch of API commands

2013-01-18 Thread Min Chen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531
 ] 

Min Chen edited comment on CLOUDSTACK-355 at 1/18/13 8:01 PM:
--

Have fixed the following apis:
listHosts
listSecurityGroups
listEvents
listEventTypes (for this command, no pageSize can be provided, so current count 
is correct)
listHypervisors (for this command, no pageSize can be provided, so current 
count is correct)
listTemplatePermissionCmd (for this command, response is not ListResponse, so 
we are not returning Count)
listLBStickinessPolicies (for this command, the return list only contains at 
most one response, so count is correct)

  was (Author: minchen07):
Have fixed the following apis:
listHosts
listSecurityGroups
listEvents
listEventTypes (for this command, no pageSize can be provided, so current count 
is correct)
listHypervisors (for this command, no pageSize can be provided, so current 
count is correct)
listTemplatePermissionCmd (for this command, response is not ListResponse, so 
we are not returning Count)
  
 Fix count in a bunch of API commands
 --

 Key: CLOUDSTACK-355
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.1.0
Reporter: Alena Prokharchyk
Assignee: Min Chen
 Fix For: 4.1.0


 Count should be fixed for following list commands (as a part of Search Engine 
 refactoring)
 listResourceLimits
 listIsos
 listTemplates
 listLoadBalancerRuleInstances
 listCapacity
 listHosts
 listSecurityGroups
 listNetworks
 listVPCs
 listTemplatePermissions
 listIsoPermissions
 listServiceOfferings
 listDiskOfferings
 listNetworkDevice
 listVPCOfferings
 listTrafficTypeImplementors
 listSnapshotPolicies
 listLBStickinessPolicies
 listCapabilities
 listZones
 listEventTypes
 listSwifts
 listHypervisors
 listNetworkOfferings
 listSupportedNetworkServices
 listStorageNetworkIpRange
 listEvents 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Reopened] (CLOUDSTACK-995) Not able to add the KVM host.

2013-01-18 Thread Sangeetha Hariharan (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sangeetha Hariharan reopened CLOUDSTACK-995:



Edison,

With your fixes , I assume we should be able to add the host with out having to 
do any workarounds to cgconfig.conf.

Was the check in done for “network-refractor” build ?
 
With the latest “network-refractor” build , I am still not able to add the host 
successfully  with no changes made to cgconfig.conf .

Following error seen in agent.log
exiting.
DEBUG:root:execute:hostname -f
DEBUG:root:execute:selinuxenabled
DEBUG:root:execute:setenforce 0
DEBUG:root:execute:service libvirtd status
DEBUG:root:Failed to execute:libvirtd is stopped
DEBUG:root:execute:service libvirtd status
DEBUG:root:Failed to execute:libvirtd is stopped
DEBUG:root:execute:service libvirtd start
DEBUG:root:Failed to execute:libcgroup initialization failed: Cgroup is not 
mounted
DEBUG:root:execute:setenforce 1
DEBUG:root:execute:service network restart
DEBUG:root:Failed to execute:dhclient(26209) is already running - exiting.

This version of ISC DHCP is based on the release available
on ftp.isc.org.  Features have been added and other changes
have been made to the base software release in order to make
it work better with this distribution.

Please report for this software via the Red Hat Bugzilla site:
http://bugzilla.redhat.com

exiting.




 Not able to add the KVM host.
 -

 Key: CLOUDSTACK-995
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-995
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.1.0
 Environment: Build from network-refactor branch.
Reporter: Sangeetha Hariharan
Assignee: edison su
Priority: Critical
 Fix For: 4.1.0

 Attachments: management-server.zip, setup.log


 Set up:
 Installed management server.
 Tried to configure an advanced zone with KVM hypervisor - Centos 6.2.
 I am NOT able to add the KVM host successfully.
  
 I get the following error in management server logs :
  
 2013-01-16 21:02:32,794 INFO  [cloud.resource.ResourceManagerImpl] 
 (catalina-exec-7:null) Trying to add a new host at http://10.223.59.4 in data 
 center 1
 2013-01-16 21:02:33,038 DEBUG [utils.ssh.SSHCmdHelper] (catalina-exec-7:null) 
 Executing cmd: lsmod|grep kvm
 2013-01-16 21:02:34,168 DEBUG [utils.ssh.SSHCmdHelper] (catalina-exec-7:null) 
 lsmod|grep kvm output:kvm_intel  50380  0
 kvm   305081  1 kvm_intel
  
 …..
 2013-01-16 21:02:35,176 DEBUG [utils.ssh.SSHCmdHelper] (catalina-exec-7:null) 
 Executing cmd: cloud-setup-agent  -m 10.223.59.3 -z 1 -p 1 -c 1 -g 
 01481220-7c8d-3d22-aa72-80d909038f98 -a --pubNic=cloudbr0 --prvNic=cloudbr0 
 --guestNic=cloudbr0
 2013-01-16 21:02:58,319 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] 
 (consoleproxy-1:null) Skip capacity scan due to there is no Primary Storage 
 UPintenance mode
 2013-01-16 21:02:58,726 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Found 0 routers.
 2013-01-16 21:03:13,078 DEBUG [cloud.server.StatsCollector] 
 (StatsCollector-2:null) HostStatsCollector is running...
 2013-01-16 21:03:13,078 DEBUG [cloud.server.StatsCollector] 
 (StatsCollector-1:null) VmStatsCollector is running...
 2013-01-16 21:03:13,175 DEBUG [cloud.server.StatsCollector] 
 (StatsCollector-2:null) StorageCollector is running...
 2013-01-16 21:03:28,319 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] 
 (consoleproxy-1:null) Skip capacity scan due to there is no Primary Storage 
 UPintenance mode
 2013-01-16 21:03:28,727 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Found 0 routers.
 2013-01-16 21:03:41,434 DEBUG [utils.ssh.SSHCmdHelper] (catalina-exec-7:null) 
 cloud-setup-agent  -m 10.223.59.3 -z 1 -p 1 -c 1 -g 
 01481220-7c8d-3d22-aa72-80d909038f98 -a --pubNic=cloudbr0 --prvNic=cloudbr0 
 --guestNic=cloudbr0 output:[Failed]
 ibvirt ...bvirt
 Try to restore your system:
 Restore SElinux ...

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Re: [DISCUSS] IPv6 support draft functional spec(phase 1)

2013-01-18 Thread Sheng Yang
On Fri, Jan 18, 2013 at 11:48 AM, Anthony Xu xuefei...@citrix.com wrote:
 Dual stack in user VM or router VM?
 router VM must have dual stack because link-local is still ipv4, right?

Dual-stack is one interface has both IPv4 and IPv6 addresses.

If there is dual-stack, it must be at both user VM and router VM, at
public interface.

Link-local interface of router is still there even it's IPv6 only on
public interface.

--Sheng


 Anthony

 -Original Message-
 From: Sheng Yang [mailto:sh...@yasker.org]
 Sent: Friday, January 18, 2013 11:13 AM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [DISCUSS] IPv6 support draft functional spec(phase 1)

 On Thu, Jan 17, 2013 at 7:05 PM, Chiradeep Vittal
 chiradeep.vit...@citrix.com wrote:
  The spec calls for dualstack, so ipv4 would still work?

 I think it would be stage 2 of phase 1, after ipv6 stack only.

 --Sheng
 
  On 1/17/13 3:49 PM, Sheng Yang sh...@yasker.org wrote:
 
 On Thu, Jan 17, 2013 at 3:26 PM, Alex Huang alex.hu...@citrix.com
 wrote:
  We just want to make thing as simple as possible for the phase 1.
 The
  service other than DNS/DHCP would be supported later, and depends
 on
  how much time we have.
 
 
  How do you present something like this to the end user if it works
 one
 way and not another.  It needs to be consistent.
 
 Let's get the DNS/DHCP part done first...
 
 --Sheng
 


Re: Austin Devops Days

2013-01-18 Thread Chip Childers
On Mon, Jan 14, 2013 at 7:31 PM, Mark Hinkle mark.hin...@citrix.com wrote:
 I secured the Lanyard sponsorship for DevOps Days 
 Austinhttp://devopsdays.org/events/2013-austin/ for Citrix but would much 
 rather donate the sponsorship to the Apache CloudStack community and give the 
 project the publicity if no one objects. It also involves the inclusion of 
 two tickets to the event (worth $180 each). I can draw randomly if we have 
 folks that want them.   Any objections?

Hey Mark - no objection from me, but I'm not sure if this has to go
through trademarks@ or not.  I think it's a wonderful donation though!


 Also the Call for Proposals is open it would be cool to see some Devops 
 proposals from folks using CloudStack to be on the program:

 http://devopsdays.org/events/2013-austin/propose/

 Mark


 Mark R. Hinkle
 Senior Director, Cloud Computing Community
 Citrix Systems
 p: 919.228.8049
 e: mark.hin...@citrix.com
 twitter: @mrhinkle








[jira] [Updated] (CLOUDSTACK-976) unable to start cloudstack (error: java.lang.NoSuchMethodError: org.apache.commons.codec.binary.Base64.encodeBase64URLSafeString([B)Ljava/lang/String;)

2013-01-18 Thread Joe Brockmeier (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-976?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Joe Brockmeier updated CLOUDSTACK-976:
--

Fix Version/s: (was: 4.0.1)
   4.0.2

 unable to start cloudstack (error: java.lang.NoSuchMethodError: 
 org.apache.commons.codec.binary.Base64.encodeBase64URLSafeString([B)Ljava/lang/String;)
 -

 Key: CLOUDSTACK-976
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-976
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
Affects Versions: 4.0.1
Reporter: Jessica Wang
 Fix For: 4.0.2

 Attachments: awsapi.log, vmops.log


 steps:
 (1) get latest code from apache 4.0 branch 
 (2) run mvn -P deps
 (3) run ant clean-all build-all deploy-server deploydb
 (4) run ant debug:
 error:
[java] Jan 14, 2013 2:32:21 PM org.apache.catalina.core.StandardContext 
 loadOnStartup
[java] SEVERE: Servlet /client threw load() exception
[java] java.lang.NoSuchMethodError: 
 org.apache.commons.codec.binary.Base64.encodeBase64URLSafeString([B)Ljava/lang/String;
[java] at 
 com.cloud.server.ConfigurationServerImpl.updateSSOKey(ConfigurationServerImpl.java:773)
[java] at 
 com.cloud.server.ConfigurationServerImpl.persistDefaultValues(ConfigurationServerImpl.java:223)
[java] at 
 com.cloud.server.ConfigurationServerImpl$$EnhancerByCGLIB$$46a32077.CGLIB$persistDefaultValues$0(generated)
[java] at 
 com.cloud.server.ConfigurationServerImpl$$EnhancerByCGLIB$$46a32077$$FastClassByCGLIB$$f92a33e4.invoke(generated)
[java] at 
 net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228)
[java] at 
 com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34)
[java] at 
 com.cloud.server.ConfigurationServerImpl$$EnhancerByCGLIB$$46a32077.persistDefaultValues(generated)
[java] at 
 com.cloud.servlet.CloudStartupServlet.init(CloudStartupServlet.java:47)
[java] at javax.servlet.GenericServlet.init(GenericServlet.java:215)
[java] at 
 org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1172)
[java] at 
 org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:992)
[java] at 
 org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4058)
[java] at 
 org.apache.catalina.core.StandardContext.start(StandardContext.java:4371)
[java] at 
 org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
[java] at 
 org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
[java] at 
 org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525)
[java] at 
 org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:926)
[java] at 
 org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:889)
[java] at 
 org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:492)
[java] at 
 org.apache.catalina.startup.HostConfig.start(HostConfig.java:1149)
[java] at 
 org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311)
[java] at 
 org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
[java] at 
 org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
[java] at 
 org.apache.catalina.core.StandardHost.start(StandardHost.java:719)
[java] at 
 org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
[java] at 
 org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
[java] at 
 org.apache.catalina.core.StandardService.start(StandardService.java:516)
[java] at 
 org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
[java] at org.apache.catalina.startup.Catalina.start(Catalina.java:578)
[java] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[java] at 
 sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
[java] at 
 sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
[java] at java.lang.reflect.Method.invoke(Method.java:597)
[java] at 
 org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
[java] at 
 org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
[java] Jan 14, 2013 2:32:22 PM org.apache.coyote.http11.Http11NioProtocol 
 start
[java] INFO: Starting Coyote HTTP/1.1 on http-8080

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact 

RE: [DISCUSS] IPv6 support draft functional spec(phase 1)

2013-01-18 Thread Anthony Xu
I see

 -Original Message-
 From: Sheng Yang [mailto:sh...@yasker.org]
 Sent: Friday, January 18, 2013 12:17 PM
 To: cloudstack-dev@incubator.apache.org
 Subject: Re: [DISCUSS] IPv6 support draft functional spec(phase 1)
 
 On Fri, Jan 18, 2013 at 11:48 AM, Anthony Xu xuefei...@citrix.com
 wrote:
  Dual stack in user VM or router VM?
  router VM must have dual stack because link-local is still ipv4,
 right?
 
 Dual-stack is one interface has both IPv4 and IPv6 addresses.
 
 If there is dual-stack, it must be at both user VM and router VM, at
 public interface.
 
 Link-local interface of router is still there even it's IPv6 only on
 public interface.
 
 --Sheng
 
 
  Anthony
 
  -Original Message-
  From: Sheng Yang [mailto:sh...@yasker.org]
  Sent: Friday, January 18, 2013 11:13 AM
  To: cloudstack-dev@incubator.apache.org
  Subject: Re: [DISCUSS] IPv6 support draft functional spec(phase 1)
 
  On Thu, Jan 17, 2013 at 7:05 PM, Chiradeep Vittal
  chiradeep.vit...@citrix.com wrote:
   The spec calls for dualstack, so ipv4 would still work?
 
  I think it would be stage 2 of phase 1, after ipv6 stack only.
 
  --Sheng
  
   On 1/17/13 3:49 PM, Sheng Yang sh...@yasker.org wrote:
  
  On Thu, Jan 17, 2013 at 3:26 PM, Alex Huang alex.hu...@citrix.com
  wrote:
   We just want to make thing as simple as possible for the phase
 1.
  The
   service other than DNS/DHCP would be supported later, and
 depends
  on
   how much time we have.
  
  
   How do you present something like this to the end user if it
 works
  one
  way and not another.  It needs to be consistent.
  
  Let's get the DNS/DHCP part done first...
  
  --Sheng
  


[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble

2013-01-18 Thread Marcus Sorensen (JIRA)

[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557593#comment-13557593
 ] 

Marcus Sorensen commented on CLOUDSTACK-938:


Thanks for testing this Richard. I will push these changes into master (minus 
the debug code), and maybe we should push this bug report back into 4.0.2 as 
target.

The bad rule could mean a few things (maybe it already exists), looks like it 
was maybe the result of running the: 

2013-01-18 23:21:55,403 DEBUG [resource.virtualnetwork.VirtualRoutingResource] 
(agentRequest-Handler-5:null) Executing: 
/usr/lib64/cloud/common/scripts/network/domr/router_proxy.sh vpc_snat.sh 
169.254.0.22 -A -l 77.95.133.142 -c eth1

It looks like Anthony created that script. If you could iptables -L -v -n and 
iptables -t nat -L -v -n before and after that might tell us what's going on.

Looking at the script it might mean nothing, because they attempt to delete the 
rule before adding it (presumably a safety measure to avoid duplication), and 
this error might get spit out due to that if the rule doesn't exist, even 
though the script succeeds in its duty.

 s2s VPN trouble
 ---

 Key: CLOUDSTACK-938
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Network Controller
Affects Versions: 4.0.0, 4.0.1
 Environment: CentOS 6.3 x86_64
 CS - 4.0.1-0.11
Reporter: Richard Shevel
 Fix For: 4.0.2, 4.1.0

 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, 
 management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, 
 management-server.zip, messages, public.png, r-292-vm_log.tar.gz


 Dear colleagues, the problem is clearly a bug:
 I created a VPC
 Further, in my VPN Customer Gateway to the settings
 Gateway 217.70.20.213
 CIDR list 192.168.10.0/24
 IPsec Preshared-Key blablablablablabla
 IKE Encryption 3des
 IKE Hash md5
 IKE DH None
 ESP Encryption 3des
 ESP Hash md5
 Perfect Forward Secrecy None
 IKE lifetime (second) 86 400
 ESP Lifetime (second) 28 800
 Dead Peer Detection Yes
 In the setting of VPC I create VPN Gateway
 When creating a VPN Connection get the error:
 Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply 
 site-to-site VPN
 catalina.out:
 WARN  [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class 
 com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is 
 unreachable: Failed to apply site-to-site VPN
 WARN  [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to 
 unregister active job 463 from JMX monitoring
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 WARN  [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection 
 status
 management-server.log:
 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-4:null) Ping from 5
 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] 
 (AgentManager-Handler-2:null) Ping from 3
 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] 
 (secstorage-1:null) Zone 1 is ready to launch secondary storage VM
 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] 
 (consoleproxy-1:null) Zone 1 is ready to launch console proxy
 2013-01-09 21:28:18,306 DEBUG 
 [network.router.VirtualNetworkApplianceManagerImpl] 
 (RouterStatusMonitor-1:null) Found 3 routers.
 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] 
 (RouterStatusMonitor-1:null) Seq 5-223284290: Sending  { Cmd , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 100111, 
 [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}]
  }
 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] 
 (AgentManager-Handler-3:null) Seq 5-223284290: Processing:  { Ans: , MgmtId: 
 52239887788, via: 5, Ver: v1, Flags: 110, 
 [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand
  failed,result:false,wait:0}}] }
 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] 
 (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found

  1   2   >