RE: [VOTE] Accept a donation of 'network service support in shared network' from Citrix.
+1 -Original Message- From: Kishan Kavala [mailto:kishan.kav...@citrix.com] Sent: 18 January 2013 12:41 To: CloudStack DeveloperList Subject: RE: [VOTE] Accept a donation of 'network service support in shared network' from Citrix. +1 (binding) -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Friday, 18 January 2013 7:28 AM To: CloudStack DeveloperList Subject: Re: [VOTE] Accept a donation of 'network service support in shared network' from Citrix. +1 (binding) On 1/17/13 9:35 AM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: +1 -Original Message- From: Kelceydamage@bbits [mailto:kel...@bbits.ca] Sent: Thursday, January 17, 2013 9:09 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of 'network service support in shared network' from Citrix. +1 (binding) Sent from my iPhone On Jan 17, 2013, at 8:49 AM, Prasanna Santhanam t...@apache.org wrote: On Thu, Jan 17, 2013 at 04:07:10PM +0530, Murali Reddy wrote: I would like to call a vote for the Apache CloudStack project to accept a donation from Citrix to support network services (PF, NAT, LB) in shared networks of advanced zone. The functional specification is available at [1] and has been discussed [2] with no outstanding issues. Patch [3] and MD5 [4] files are made available at below links [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/L4- L7+netwo rk+ services+in+shared+network [2] http://markmail.org/thread/m522lj7ud7heanlb [3] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-312- enable-L 4-L 7-network-services-in-the-.patch [4] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-312- enable-L 4-L 7-network-services-in-the-.patch.md5 +1 (binding) -- Prasanna.,
RE: [VOTE] Accept a donation of Documentation for various features from Citrix
+1 -Original Message- From: Jessica Tomechak [mailto:jessica.tomec...@gmail.com] Sent: 18 January 2013 12:15 To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of Documentation for various features from Citrix -Original Message- From: Chip Childers [mailto:chip.child...@sungard.com] Sent: Thursday, January 17, 2013 1:51 PM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of Documentation for various features from Citrix On Thu, Jan 17, 2013 at 12:48 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE. Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this +enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. Content Location: http://people.apache.org/~jtomechak I think it would be best to have an archive file, and an md5 checksum to go along with it. I'd like to vote for those artifacts instead of what's provided please. It will make the ip clearance process easier. I have provided an archive file and checksum. However I wonder whether it would be better to provide separate files for each feature, so they can be voted on separately. Please let me know. Jessica T. -Original Message- From: Jessica Tomechak [mailto:jessica.tomec...@citrix.com] Sent: Tuesday, January 15, 2013 7:05 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [IP Clearance] Potential issues On people.apache.org/~jtomechak, I have posted all my docs related to the bug items in the IP Clearance list which Animesh provided. I have made notations in the Doc sub-task of each bug, so that anyone reviewing the proposed feature can easily find the documentation. In addition, I made a note for myself of the doc status of each bug in that list, and here it is for anyone who is interested! CLOUDSTACK-774 : Code in ACS repo: No Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 5000 lines Contributor : Frank IP Clearance needed initial recommendation: Yes Docs: None exist. This was not announced or supported as a Citrix CP 3.0.6 feature. CLOUDSTACK-306 : Code in ACS repo: Yes Functional Spec Posted: Yes Community Discussion Done: Yes in October Contribution Size Approx: 1500 lines Contributor : Sheng IP Clearance needed initial recommendation: Yes Docs: Already submitted via reviewboard. Link and info in doc subtask. CLOUDSTACK-777/700 : Code in ACS repo: Yes Functional Spec Posted: No Community Discussion Done: Yes Contribution Size Approx: 500 lines Contributor : Kishan/Jayapal/Rajesh/Murali IP Clearance needed initial recommendation: Yes Docs: Pending on reviewboard. URL and notations in the doc subtask of the bug. CLOUDSTACK-778/319 : Code in ACS repo: No Functional Spec Posted: No Community Discussion Done: Yes Contribution Size Approx: should be small Contributor : Vijayendra IP Clearance needed initial recommendation: This is a trivial issue so may be no Docs: Pending on reviewboard. Info is in the doc subtask of the bug. CLOUDSTACK-299 : Code in ACS repo: UI code is there but backend is not Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 1400 lines Contributor : Jayapal IP Clearance needed initial recommendation: Yes Docs: Pending on reviewboard. Link is provided in the description of the bug. CLOUDSTACK-297 : Code in ACS repo: No, but posted on review board Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 350 lines Contributor : Hari IP Clearance needed initial recommendation: Docs: One paragraph of new docs on people.a.o. The URL is noted in the doc subtask of the bug. http://people.apache.org/~jtomechak/CLOUDSTACK-297/ CLOUDSTACK-197 : Code in ACS repo: Multiple patches posted on review board Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 3000 lines Contributor : Likitha IP Clearance needed initial recommendation: No, since incremental patches were posted over a period Docs: Believe docs already exist, authored on the community side by Sebastien G. CLOUDSTACK-192 : Code in ACS repo: No Functional Spec Posted: Yes Community Discussion Done: Yes, but no consensus reached Contribution Size Approx: 1000 lines Contributor : Sanjay IP Clearance needed initial recommendation: Yes, if community agrees to feature inclusion Docs: On people.a.o. The URL is noted in the doc subtask of the bug.
RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix.
+1 -Original Message- From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com] Sent: Friday, January 18, 2013 9:43 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. +1 (binding) On 18/01/13 2:34 AM, Rohit Yadav rohit.ya...@citrix.com wrote: +1 (binding) From: Animesh Chaturvedi [animesh.chaturv...@citrix.com] Sent: Thursday, January 17, 2013 11:04 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. +1 -Original Message- From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of Prasanna Santhanam Sent: Thursday, January 17, 2013 8:50 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. On Thu, Jan 17, 2013 at 04:17:58PM +0530, Murali Reddy wrote: I would like to call a vote for the Apache CloudStack project to accept a donation from Citrix to provide Optional Public IP assignment for EIP with Basic Zone. The functional specification is available at [1] and has been discussed [2] with no outstanding issues. Bug 265 [3] opened to track this feature. Patch [4] and MD5 [5] files are made available at below links [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/Optional+Pub lic +IP+assignment+for+EIP+with+Basic+Zone [2] http://markmail.org/thread/b2h2cw62qnryk4qh [3] https://issues.apache.org/jira/browse/CLOUDSTACK-265 [4] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-provide-o pti on-to-turn-off-automatic-.patch [5] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-provide-o pti on-to-turn-off-automatic-.patch.md5 +1 (binding) -- Prasanna.,
RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix
+1 -Original Message- From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com] Sent: Friday, January 18, 2013 9:51 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix +1 (binding) On 18/01/13 3:32 AM, Chip Childers chip.child...@sungard.com wrote: On Thu, Jan 17, 2013 at 12:41 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this +enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. IMO, this is small enough not to qualify as substantial. I would be OK with this vote being cancelled, and a lazy consensus being reached to simply have Anthony commit it (using his ICLA as the contractual support for the donation). That being said, if we progress down the IP clearance path for this patch, here's my vote: +1 (binding) -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Wednesday, January 16, 2013 4:39 PM To: cloudstack-dev@incubator.apache.org Subject: [IP Clearance: CLOUDSTACK-737] support security group enabled network in advanced zone Hi folks, I'd like to start the IP clearance process for the Citrix feature - support security group enabled network in advanced zone https://issues.apache.org/jira/browse/CLOUDSTACK-737 Citrix would like to donate this feature to Apache CloudStack, In 4.0, security group is only supported in basic zone, this feature is to add security group in advanced zone, then user can isolate VMs in the same guest network. Here is FS, https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+base d + on+ Security+Groups+in+Advance+zone This donation is a subset of the feature according to the FS Only support KVM Only support one zone-wide security-enabled shared network Rest of this feature will be developed in Apache This is discussion thread http://markmail.org/message/cle3d64ci6pobs2i here is patch[Animesh] http://people.apache.org/~anthonyxu/ Thanks, Anthony
[jira] [Comment Edited] (CLOUDSTACK-602) Warn of dependency on mkisofs
[ https://issues.apache.org/jira/browse/CLOUDSTACK-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13556133#comment-13556133 ] Radhika Nair edited comment on CLOUDSTACK-602 at 1/18/13 8:04 AM: -- Could we add this item as a troubleshooting tip ? Is the issue is that user is not able to log in to Management server UI? was (Author: radhikap): Could we add this item as a troubleshooting tip ? Warn of dependency on mkisofs - Key: CLOUDSTACK-602 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-602 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Doc Affects Versions: 4.1.0 Environment: debian Reporter: Mel Davis Assignee: Radhika Nair Priority: Trivial cloud-setup-management fails quietly if /usr/bin/mkisofs is no found. Failure is indicated only in the /var/log/cloud/management/management-server.log.This results in the inability to log into client via the web interface. The docs should at least note the dependency and, maybe, suggest this workaround: ln -s /usr/bin/genisoimage /usr/bin/mkisofs -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Comment Edited] (CLOUDSTACK-602) Warn of dependency on mkisofs
[ https://issues.apache.org/jira/browse/CLOUDSTACK-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13556133#comment-13556133 ] Radhika Nair edited comment on CLOUDSTACK-602 at 1/18/13 8:04 AM: -- Could we add this item as a troubleshooting tip ? Is the issue that the user is not able to log in to Management server UI? was (Author: radhikap): Could we add this item as a troubleshooting tip ? Is the issue is that user is not able to log in to Management server UI? Warn of dependency on mkisofs - Key: CLOUDSTACK-602 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-602 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Doc Affects Versions: 4.1.0 Environment: debian Reporter: Mel Davis Assignee: Radhika Nair Priority: Trivial cloud-setup-management fails quietly if /usr/bin/mkisofs is no found. Failure is indicated only in the /var/log/cloud/management/management-server.log.This results in the inability to log into client via the web interface. The docs should at least note the dependency and, maybe, suggest this workaround: ln -s /usr/bin/genisoimage /usr/bin/mkisofs -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble
[ https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557037#comment-13557037 ] Marcus Sorensen commented on CLOUDSTACK-938: Thanks. I can probably have you a replacement jar soon, you can test and report back the fix and then we can submit it. Almost there. You'll want to just run what I sent: vlanid=$(brctl show |grep cloudVirBr50 |awk '{print $4}' | cut -s -d. -f 2);echo $vlanid What we expect to respond with is 50. If I run what you have I get no output as well, even though everything works. I don't really like this code, there has to be a better way of getting the vlan from the bridge name without relying on the formatted output of brctl. If it does indeed return nothing, that will be the culprit of ethnull. But something in one of your later emails looked like it might be returning 50 504. Ok, so this might be a better alternative, it at least relies on the linux sys layout and not brctl's output. s2s VPN trouble --- Key: CLOUDSTACK-938 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Network Controller Affects Versions: 4.0.0, 4.0.1 Environment: CentOS 6.3 x86_64 CS - 4.0.1-0.11 Reporter: Richard Shevel Fix For: 4.0.2, 4.1.0 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, management-server.zip, messages, public.png, r-292-vm_log.tar.gz Dear colleagues, the problem is clearly a bug: I created a VPC Further, in my VPN Customer Gateway to the settings Gateway 217.70.20.213 CIDR list 192.168.10.0/24 IPsec Preshared-Key blablablablablabla IKE Encryption 3des IKE Hash md5 IKE DH None ESP Encryption 3des ESP Hash md5 Perfect Forward Secrecy None IKE lifetime (second) 86 400 ESP Lifetime (second) 28 800 Dead Peer Detection Yes In the setting of VPC I create VPN Gateway When creating a VPN Connection get the error: Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN catalina.out: WARN [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN WARN [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to unregister active job 463 from JMX monitoring WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status management-server.log: 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-4:null) Ping from 5 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-2:null) Ping from 3 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] (secstorage-1:null) Zone 1 is ready to launch secondary storage VM 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] (consoleproxy-1:null) Zone 1 is ready to launch console proxy 2013-01-09 21:28:18,306 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Found 3 routers. 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Sending { Cmd , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 100111, [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}] } 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (AgentManager-Handler-3:null) Seq 5-223284290: Processing: { Ans: , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 110, [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand failed,result:false,wait:0}}] } 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Received: { Ans: , MgmtId: 52239887788,
RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix.
+1 -Original Message- From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com] Sent: Friday, January 18, 2013 9:43 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. +1 (binding) On 18/01/13 2:34 AM, Rohit Yadav rohit.ya...@citrix.com wrote: +1 (binding) From: Animesh Chaturvedi [animesh.chaturv...@citrix.com] Sent: Thursday, January 17, 2013 11:04 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. +1 -Original Message- From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of Prasanna Santhanam Sent: Thursday, January 17, 2013 8:50 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. On Thu, Jan 17, 2013 at 04:17:58PM +0530, Murali Reddy wrote: I would like to call a vote for the Apache CloudStack project to accept a donation from Citrix to provide Optional Public IP assignment for EIP with Basic Zone. The functional specification is available at [1] and has been discussed [2] with no outstanding issues. Bug 265 [3] opened to track this feature. Patch [4] and MD5 [5] files are made available at below links [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/Optional+Pub lic +IP+assignment+for+EIP+with+Basic+Zone [2] http://markmail.org/thread/b2h2cw62qnryk4qh [3] https://issues.apache.org/jira/browse/CLOUDSTACK-265 [4] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265- provide-o pti on-to-turn-off-automatic-.patch [5] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265- provide-o pti on-to-turn-off-automatic-.patch.md5 +1 (binding) -- Prasanna.,
[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble
[ https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557039#comment-13557039 ] Marcus Sorensen commented on CLOUDSTACK-938: Ok, on the chechbatchs2svpn.sh I'll have to check with the people who put the VPN into the system vm, I don't know much about the VPN setup itself, I took the existing Xen code that calls into the systemvm and made KVM do it as well. So I'm not sure if that is a typo or if the batch one should exist. I see the error now, and I think my alternate way of pulling the vlan id will be more robust. I will get you a jar tomorrow to test. I'll put the other fixes in it as well. s2s VPN trouble --- Key: CLOUDSTACK-938 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Network Controller Affects Versions: 4.0.0, 4.0.1 Environment: CentOS 6.3 x86_64 CS - 4.0.1-0.11 Reporter: Richard Shevel Fix For: 4.0.2, 4.1.0 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, management-server.zip, messages, public.png, r-292-vm_log.tar.gz Dear colleagues, the problem is clearly a bug: I created a VPC Further, in my VPN Customer Gateway to the settings Gateway 217.70.20.213 CIDR list 192.168.10.0/24 IPsec Preshared-Key blablablablablabla IKE Encryption 3des IKE Hash md5 IKE DH None ESP Encryption 3des ESP Hash md5 Perfect Forward Secrecy None IKE lifetime (second) 86 400 ESP Lifetime (second) 28 800 Dead Peer Detection Yes In the setting of VPC I create VPN Gateway When creating a VPN Connection get the error: Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN catalina.out: WARN [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN WARN [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to unregister active job 463 from JMX monitoring WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status management-server.log: 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-4:null) Ping from 5 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-2:null) Ping from 3 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] (secstorage-1:null) Zone 1 is ready to launch secondary storage VM 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] (consoleproxy-1:null) Zone 1 is ready to launch console proxy 2013-01-09 21:28:18,306 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Found 3 routers. 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Sending { Cmd , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 100111, [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}] } 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (AgentManager-Handler-3:null) Seq 5-223284290: Processing: { Ans: , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 110, [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand failed,result:false,wait:0}}] } 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Received: { Ans: , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 110, { CheckS2SVpnConnectionsAnswer } } 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentManagerImpl] (RouterStatusMonitor-1:null) Details from executing class com.cloud.agent.api.CheckS2SVpnConnectionsCommand: CheckS2SVpnConneciontsCommand failed 2013-01-09 21:28:18,458 WARN
[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble
[ https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557042#comment-13557042 ] Richard Shevel commented on CLOUDSTACK-938: --- Tnx Marcus. I will wait for a new jar. s2s VPN trouble --- Key: CLOUDSTACK-938 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Network Controller Affects Versions: 4.0.0, 4.0.1 Environment: CentOS 6.3 x86_64 CS - 4.0.1-0.11 Reporter: Richard Shevel Fix For: 4.0.2, 4.1.0 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, management-server.zip, messages, public.png, r-292-vm_log.tar.gz Dear colleagues, the problem is clearly a bug: I created a VPC Further, in my VPN Customer Gateway to the settings Gateway 217.70.20.213 CIDR list 192.168.10.0/24 IPsec Preshared-Key blablablablablabla IKE Encryption 3des IKE Hash md5 IKE DH None ESP Encryption 3des ESP Hash md5 Perfect Forward Secrecy None IKE lifetime (second) 86 400 ESP Lifetime (second) 28 800 Dead Peer Detection Yes In the setting of VPC I create VPN Gateway When creating a VPN Connection get the error: Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN catalina.out: WARN [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN WARN [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to unregister active job 463 from JMX monitoring WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status management-server.log: 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-4:null) Ping from 5 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-2:null) Ping from 3 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] (secstorage-1:null) Zone 1 is ready to launch secondary storage VM 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] (consoleproxy-1:null) Zone 1 is ready to launch console proxy 2013-01-09 21:28:18,306 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Found 3 routers. 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Sending { Cmd , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 100111, [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}] } 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (AgentManager-Handler-3:null) Seq 5-223284290: Processing: { Ans: , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 110, [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand failed,result:false,wait:0}}] } 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Received: { Ans: , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 110, { CheckS2SVpnConnectionsAnswer } } 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentManagerImpl] (RouterStatusMonitor-1:null) Details from executing class com.cloud.agent.api.CheckS2SVpnConnectionsCommand: CheckS2SVpnConneciontsCommand failed 2013-01-09 21:28:18,458 WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Unable to update router r-288-VM's VPN connection status 2013-01-09 21:28:43,063 DEBUG [cloud.server.StatsCollector] (StatsCollector-2:null) StorageCollector is running... 2013-01-09 21:28:43,117 DEBUG [agent.transport.Request] (StatsCollector-2:null) Seq 17-292881626: Received: { Ans: , MgmtId: 52239887788, via: 17, Ver: v1, Flags: 10, {
[jira] [Comment Edited] (CLOUDSTACK-938) s2s VPN trouble
[ https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557037#comment-13557037 ] Marcus Sorensen edited comment on CLOUDSTACK-938 at 1/18/13 8:15 AM: - Thanks. I can probably have you a replacement jar soon, you can test and report back the fix and then we can submit it. Almost there. [root@bh4 agent]# /bin/bash -c vlanid=$(brctl show |grep cloudVirBr50 |awk '{print $4}' | cut -s -d. -f 2);echo $vlanid You'll want to just run what I sent: vlanid=$(brctl show |grep cloudVirBr50 |awk '{print $4}' | cut -s -d. -f 2);echo $vlanid What we expect to respond with is 50. If I run what you have I get no output as well, even though everything works. I don't really like this code, there has to be a better way of getting the vlan from the bridge name without relying on the formatted output of brctl. If it does indeed return nothing, that will be the culprit of ethnull. But something in one of your later emails looked like it might be returning 50 504. Looks like it's grabbing more than the original author expected. ls /sys/devices/virtual/net/cloudVirBr50/brif | egrep ^bond|^eth| cut -d . -f2 50 Ok, so this might be a better alternative, it at least relies on the linux sys layout and not brctl's output. I'll look for other alternatives as well, but I think we're pretty much stuck with calling an external command for this. Edit to add missing relevant info that I quoted via email. was (Author: mlsorensen): Thanks. I can probably have you a replacement jar soon, you can test and report back the fix and then we can submit it. Almost there. You'll want to just run what I sent: vlanid=$(brctl show |grep cloudVirBr50 |awk '{print $4}' | cut -s -d. -f 2);echo $vlanid What we expect to respond with is 50. If I run what you have I get no output as well, even though everything works. I don't really like this code, there has to be a better way of getting the vlan from the bridge name without relying on the formatted output of brctl. If it does indeed return nothing, that will be the culprit of ethnull. But something in one of your later emails looked like it might be returning 50 504. Ok, so this might be a better alternative, it at least relies on the linux sys layout and not brctl's output. s2s VPN trouble --- Key: CLOUDSTACK-938 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Network Controller Affects Versions: 4.0.0, 4.0.1 Environment: CentOS 6.3 x86_64 CS - 4.0.1-0.11 Reporter: Richard Shevel Fix For: 4.0.2, 4.1.0 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, management-server.zip, messages, public.png, r-292-vm_log.tar.gz Dear colleagues, the problem is clearly a bug: I created a VPC Further, in my VPN Customer Gateway to the settings Gateway 217.70.20.213 CIDR list 192.168.10.0/24 IPsec Preshared-Key blablablablablabla IKE Encryption 3des IKE Hash md5 IKE DH None ESP Encryption 3des ESP Hash md5 Perfect Forward Secrecy None IKE lifetime (second) 86 400 ESP Lifetime (second) 28 800 Dead Peer Detection Yes In the setting of VPC I create VPN Gateway When creating a VPN Connection get the error: Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN catalina.out: WARN [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN WARN [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to unregister active job 463 from JMX monitoring WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status management-server.log: 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-4:null) Ping from 5 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl]
Re: [Discuss] Support for multiple ip ranges.
Bharat, Can you update the FS with the relevant feedback provided by the community and bring it to closure. -abhi On 17/01/13 4:31 PM, Sanjeev Neelarapu sanjeev.neelar...@citrix.com wrote: Hi, I have reviews Multiple IP Ranges FS available @ https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+Ip+ranges+ FS and below are my review comments: 1.Is there any limit on no.of subnets/IP ranges that can be added for guest?(since a new nic is added on router vm for every different subnet) 2.Do we support adding multiple subnets in the same vlan incase of Shared guest network in Advanced zone? 3.Can we shrink the existing IP ranges(Guest/Management)? 4.Can we add non-contiguos guest ip ranges for Basic zone? 5.Do we support tagged IP Network for management traffic? 6.Is not-contiguous management IP ranges supported? 7. Is this supported in upgraded environment? Thanks, Sanjeev -Original Message- From: Bharat Kumar [mailto:bharat.ku...@citrix.com] Sent: Tuesday, January 08, 2013 5:27 PM To: cloudstack-us...@incubator.apache.org; cloudstack-dev@incubator.apache.org Subject: [Discuss] Support for multiple ip ranges. Hi all, Currently in cloudstack we can add multiple public ip ranges. we want to provide similar flexibility for management and guest ip ranges. Motivation: There may be cases where some part of the subnet is allocated for some other purpose and the admin wants to use the rest of the ip range or admin may want to add more ip address once the old ones are exhausted. Admin may want to add the ip ranges form the same subnet or from different one. Currently in cloudstack there is no flexibility to do this for management and guest ip ranges (ip ranges from different subnets). This feature allows adding multiple management ip ranges in advanced and basic zones, and guest ip ranges in basic zones. Regards, Bharat Kumar.
RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix
+1 -Original Message- From: Rajesh Battala [mailto:rajesh.batt...@citrix.com] Sent: Friday, January 18, 2013 1:35 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix +1 -Original Message- From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com] Sent: Friday, January 18, 2013 9:51 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix +1 (binding) On 18/01/13 3:32 AM, Chip Childers chip.child...@sungard.com wrote: On Thu, Jan 17, 2013 at 12:41 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this +enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. IMO, this is small enough not to qualify as substantial. I would be OK with this vote being cancelled, and a lazy consensus being reached to simply have Anthony commit it (using his ICLA as the contractual support for the donation). That being said, if we progress down the IP clearance path for this patch, here's my vote: +1 (binding) -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Wednesday, January 16, 2013 4:39 PM To: cloudstack-dev@incubator.apache.org Subject: [IP Clearance: CLOUDSTACK-737] support security group enabled network in advanced zone Hi folks, I'd like to start the IP clearance process for the Citrix feature - support security group enabled network in advanced zone https://issues.apache.org/jira/browse/CLOUDSTACK-737 Citrix would like to donate this feature to Apache CloudStack, In 4.0, security group is only supported in basic zone, this feature is to add security group in advanced zone, then user can isolate VMs in the same guest network. Here is FS, https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+base d + on+ Security+Groups+in+Advance+zone This donation is a subset of the feature according to the FS Only support KVM Only support one zone-wide security-enabled shared network Rest of this feature will be developed in Apache This is discussion thread http://markmail.org/message/cle3d64ci6pobs2i here is patch[Animesh] http://people.apache.org/~anthonyxu/ Thanks, Anthony
Re: [DISCUSS] Virtual machine's Base Image Updatation Facility
+1 (binding) to start implementation. I see that all the changes have been incorporated in the FS https://cwiki.apache.org/CLOUDSTACK/base-image-updation-facility.html. -abhi On 03/01/13 6:00 AM, Hari Kannan hari.kan...@citrix.com wrote: I wish to restate this a bit differently - The orchestration being requested here is: * (possibly) stop vm * disconnect root disk * destroy root disk * create a new disk from (possibly new) template * attach new disk as root disk to the vm * (possibly) start vm. This is something we support for system vms already. The existing api is restoreVm(vm_id) The changed api is restoreVm(vm_id, new_template_id) In addition, I wish to add the following - A third parameter (a flag) can be specified whether to restart or not (or we can assume always start after stop). i.e. have a method that resets a VM on reboot. The use cases for this are: - Secure environments that need a fresh start on every boot - Desktops that should not retain state Hari Kannan -Original Message- From: Alex Huang [mailto:alex.hu...@citrix.com] Sent: Friday, December 28, 2012 10:31 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Virtual machine's Base Image Updatation Facility -Original Message- From: David Nalley [mailto:da...@gnsa.us] Sent: Thursday, December 27, 2012 7:40 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [DISCUSS] Virtual machine's Base Image Updatation Facility On Wed, Dec 26, 2012 at 3:47 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: Templates should be immutable --if there is a new version created, then it is another template. The api should just take a reference to the new template and not try to deal with trickiness around updating templates. That workflow (versioning templates) is a different ball of wax entirely. Agreed. Templates should be immutable. Additionally - the sysadmin side of me doesn't understand why I'd want to do this at all. The template exists to get me to JEOS running - not to manage updates. I (should) have tools that handle keeping all of my deployed VMs in a consistent state, and updated to the proper version. Trying to turn CloudStack into a patch management/package management service seems a bit too much scope creep IMO. I would modify that just a little bit. Deployed templates are immutable. So if someone updates a template, only new VMs are deployed with the update. Original VMs are still based off the original. I see a ton of problems if we try to rebase the VMs to the new template. To take care of the corruption case (corruption of the base on the primary storage), you can rebase but it's to the exact copy of the original template so that shouldn't be a problem. I think this feature can only be used for operators who deployed links to the templates and don't want to keep updating links when they update templates, which makes sense. But it can be done with the following small change. Feature implementation - Provide an externally created unique id on vm template. - Allow access to templates based on externally created ids. NOTE: In the end that this really means is the uuid column can actually be set by the caller as long as it's unique. For the operator - someone creates the template with an externally created unique id. - All references to that template is with the externally created unique id. So if they put the link to that template on a page, it has to be with their ids. - When a template should be updated, just delete the old one and create a new one with the same externally created id. Is there any other use case requirements? --Alex
Re: new storage framework update
Hi, On 01/16/2013 02:35 AM, Edison Su wrote: After a lengthy discussion(more than two hours) with John on Skype, I think we figured out the difference between us. The API proposed by John is more at the execution level, that's where input/output stream coming from, which assumes that both source and destination object will be operated at the same place(either inside ssvm, or on hypervisor host). While the API I proposed is more about how to hook up vendor's own storage into cloudstack's mgt server, thus can replace the process on how and where to operate on the storage. Let's talk about the execution model at first, which will have huge impact on the design we made. The execution model is about where to execute operations issued by mgt server. Currently, there is no universal execution model, it's quite different for each hypervisor. E.g. for KVM, mgt server will send commands to KVM host, there is a java agent running on kvm host, which can execute command send by mgt server. For xenserver, most of commands will be executed on mgt server, which will call xapi, then talking to xenserver host. But we do put some python code at xenserver host, if there are operations not supported by xapi. For vmware, most of commands will be executed on mgt server, which talking to vcenter API, while some of them will be executed inside SSVM. Due to the different execution models, we'll get into a problem about how and where to access storage device. For example, there is a storage box, which has its own management API to be accessed. Now I want to create a volume on the storage box, where should I call stoage box's create volume api? If we follow up above execution models, we need to call the api at different places and even worse, you need to write the API call in different languages. For kvm, you may need to write java code in kvm agent, for xenserver, you may need to write a xapi python plugin, for vmware, you may need to put the java code inside ssvm etc. But if the storage box already has management api, why just call it inside cloudstack mgt server, then device vendor should just write java code once, for all the different hypervisors? If we don't enforce the execution model, then the storage framework should have a hook in management server, device vendor can decide where to execute commands send by mgt server. With this you are assuming that the management server always has access to the API of the storage box? What if the management server is in network X (say Amsterdam) en I have a zone in London where my storage box X is in a private network. The only one that can access the API then is the hypervisor, so the calls have to go through there. I don't want to encourage people to write stupid code where they assume that the management server is this thing which is tied up into every network. Wido That's my datastoredriver layer used for. Take taking snapshot diagram as an example: https://cwiki.apache.org/confluence/download/attachments/30741569/take+snapshot+sequence.png?version=1modificationDate=1358189965000 Datastoredriver is running inside mgt server, while datastoredriver itself can decide where to execute takasnapshot API, driver can send a command to hypervisor host, or directly call storage box's API, or directly call hypervisor's own API, or another service running outside of cloudstack mgt server. It's all up to the implementation of driver. Does it make sense? If it's true, the device driver should not take input/out stream as parameter, as it enforces the execution model, which I don't think it's necessary. BTW, John and I will discuss the matter tomorrow on Skype, if you want to join, please let me know. -Original Message- From: Edison Su [mailto:edison...@citrix.com] Sent: Monday, January 14, 2013 3:19 PM To: cloudstack-dev@incubator.apache.org Subject: RE: new storage framework update -Original Message- From: John Burwell [mailto:jburw...@basho.com] Sent: Friday, January 11, 2013 12:30 PM To: cloudstack-dev@incubator.apache.org Subject: Re: new storage framework update Edison, I think we are speaking past each other a bit. My intention is to separate logical and physical storage operations in order to simplify the implementation of new storage providers. Also, in order to support the widest range of storage mechanisms, I want to eliminate all interface assumptions (implied and explicit) that a storage device supports a file I think if the nfs secondary storage is optional, then all the inefficient related to object storage will get away? system. These two issues make implementation of efficient storage drivers extremely difficult. For example, for object stores, we have to create polling synchronization threads that add complexity, overhead, and latency to the system. If we could connect the OutputStream of a source (such as an HTTP upload) to the InputStream of the object store, transfer operations would
Re: [DISCUSS] Granular Global Config Parameteres
Hari P/Mannan, I think there is a need to make several global parameters to be more granular. Can we come up with a list of these params that we think require immediate consideration. -abhi On 05/01/13 3:31 AM, Prasanna Santhanam prasanna.santha...@citrix.com wrote: On Fri, Jan 04, 2013 at 07:50:57PM +0530, Chip Childers wrote: On Fri, Jan 4, 2013 at 8:56 AM, David Nalley da...@gnsa.us wrote: On Thu, Jan 3, 2013 at 7:35 PM, Manan Shah manan.s...@citrix.com wrote: Hi, I would like to propose a new feature for allowing granular Global Config parameters in CS 4.1. I have created a JIRA ticket and provided the requirements at the following location. Please provide feedback on the requirements. JIRA Ticket: https://issues.apache.org/jira/browse/CLOUDSTACK-741 Requirements: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Granular+Global+Co nf ig+Parameters Regards, Manan Shah I don't know if we can really have a serious omnibus global config granular config discussion. Really each one of those is going to need individual discussion, tests, etc --David +1 to David's comment. The requirement page lists way too many individual config items to be reviewed as a group. I suggest that we (1) discuss a design for how to manage granular settings, and then (2) discuss each setting that you would like to see become more granular. I agree - each of these global settings affect the datacenter in a different way. Encourage this be discussed as a larger more generic way to group, add and extend config settings. -- Prasanna.,
RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1
Hi Edison, Yes wasted space is an issue. But base disk cleanup isn't an issue. The base disks are not exposed as VDIs. They are read only base copy and the VM1/VM2 Root disk parent to them. Deleting the VM root disk also removed the base disk. Regards, Devdeep -Original Message- From: Edison Su [mailto:edison...@citrix.com] Sent: Friday, January 18, 2013 6:58 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1 -Original Message- From: Devdeep Singh [mailto:devdeep.si...@citrix.com] Sent: Wednesday, January 16, 2013 2:44 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1 Hi Anthony, I tried storage xenmotion for two VMs created from the same template and here is what I observed. Initially, the template and root disks tree looks as follows __ Template | Base-Disk.vhd --- VM1 - Root Disk |_VM2-Root Disk After xenmotion of both the volumes of the vm to another primary store, the two virtual disks for the two VMs do not share the base disk Base-Disk1.vhd--VM1 - Root Disk Base-Disk2.vhd--VM2 - Root Disk So, after storage xenmotion, each root disk has a copy of the base disk in the destination storage pool. Is this an issue? Waste space(each disk will have its own base disk, instead of sharing), and base disk clean up will be an issue(as there is no cloudstack db entry to track this new base disks). Regards, Devdeep -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Wednesday, January 09, 2013 7:21 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1 I assume clone is a kind of snapshot in the term of VHD chain, Does XenMotion has same restrictions on clone? For fast provision, right now , on XenServer, root disk is cloned from template. Before any snapshot, root disk is already a VHD with parent VHD which is template, do you know if this has any impact for XenMotion ? Anthony -Original Message- From: Hari Kannan [mailto:hari.kan...@citrix.com] Sent: Tuesday, January 08, 2013 5:44 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1 Hi Devdeep, Can you please elaborate on the restrictions, if any on XenMotion implementation when a volume has snapshots? Hari -Original Message- From: Devdeep Singh [mailto:devdeep.si...@citrix.com] Sent: Wednesday, December 26, 2012 4:44 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Enabling storage xenmotion on xenserver 6.1 I have created an initial draft of the FS here https://cwiki.apache.org/confluence/display/CLOUDSTACK/Enabling+Stor ag e +XenMotion+for+XenServer. I'll keep updating it based on +XenMotion+for+discussion and comments. Regards, Devdeep -Original Message- From: Devdeep Singh [mailto:devdeep.si...@citrix.com] Sent: Tuesday, December 18, 2012 2:10 PM To: cloudstack-dev@incubator.apache.org Subject: [DISCUSS] Enabling storage xenmotion on xenserver 6.1 Hi, XenServer introduced support for Storage XenMotion in the latest version (6.1). Storage XenMotion allows VMs to be moved from one host to another, where the VMs are not located on storage shared between the two hosts. It provides the option to live migrate a VM's disks along with the VM itself. It is now possible to migrate a VM from one resource pool to another, or to migrate a VM whose disks are on local storage, or even to migrate a VM's disks from one storage repository to another, all while the VM is running. More information on Storage XenMotion can be found at [1]. I have filed a jira request [2] to track this feature. I plan to extend the migrate vm cloudstack api call to allow migration of instances across clusters. Do let me know your comments. [1] http://blogs.citrix.com/2012/08/24/storage_xenmotion/ [2] https://issues.apache.org/jira/browse/CLOUDSTACK-659 Regards, Devdeep
Re: [VOTE] Accept a donation of Reset SSH Key to access a VM in CloudStack from Citrix
On Jan 17, 2013, at 10:59 PM, Chip Childers chip.child...@sungard.com wrote: On Thu, Jan 17, 2013 at 12:54 PM, Sebastien Goasguen run...@gmail.com wrote: Animesh, So now I am confused with all those [VOTE] threads… Are we voting on each proposed donation separately from the docs or is the docs included within the vote. Animesh - This vote was only specific to the artifacts referenced in the initial call for a vote. I don't think it's appropriate to add material after the fact. for 297, the docs needs some work…the first sentence makes it sound like this will allow users to log into Cloudstack mgt server using keys. Sebastien - My personal opinion is that we should be OK accepting and then improving it as different discussions. Fair? Kinda fair. If there is an easy fix to be made in a text file before being committed (assuming vote passed) then I think it should be made. The devs of the features should check the docs proposed -Sebastien So I vote -1 on the 297 docs…but +1 on the feature. -Sebastien On Jan 17, 2013, at 6:50 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: -Original Message- From: Harikrishna Patnala [mailto:harikrishna.patn...@citrix.com] Sent: Thursday, January 17, 2013 6:22 AM To: cloudstack-dev@incubator.apache.org Subject: [VOTE] Accept a donation of Reset SSH Key to access a VM in CloudStack from Citrix Hi, I'd like to start the process of IP Clearance for CLOUDSTACK- 297https://issues.apache.org/jira/browse/CLOUDSTACK-297: Reset SSH key to access VM (Similar to reset password) Citrix would like to donate this code to Apache Cloudstack. With this new API command resetSSHKeyForVirtualMachine, a user can set or reset the SSH keypair assigned to a virtual machine. With the addition of this feature, a lost or compromised SSH keypair can be changed, and the user can access the VM by using the new keypair. Just create or register a new keypair, then call resetSSHKeyForVirtualMachine. Here are the corresponding links, The checksum (md5) for the patch is: 00a99ca408d661154eb22c0268bfcd8f *0001-CLOUDSTACK-297-Reset-SSH-key- to-access-VM.patch The review request link is: https://reviews.apache.org/r/8905/ The related Jira ticket at: https://issues.apache.org/jira/browse/CLOUDSTACK-297 The function spec is at: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Reset+SSH+key+Fun ctional+Spec?moved=true The previous discussion happened on: http://markmail.org/message/7gmppexnmewjedrw [Animesh] Doc Link : http://people.apache.org/~jtomechak/CLOUDSTACK-297/ Thank you, Harikrishna
[SCREENCAST] request for screencast to demo features
Hi everyone, With tons of new features being worked on, it would be nice if the developers of a particular feature could record a screencast to demo what they have done. I understand that there is the wiki but more often than not the documentation is lagging. Screencasts would help with writing documentation and also demo those features for users. For instance I would love to see screencasts on: -nicira -ceph -S3 integration -caringo -devcloud-kvm I know it's time consuming but it would really help showcase CloudStack amazing feature set. -sebastien
Re: [SCREENCAST] request for screencast to demo features
On Fri, Jan 18, 2013 at 02:57:46PM +0530, Sebastien Goasguen wrote: Hi everyone, With tons of new features being worked on, it would be nice if the developers of a particular feature could record a screencast to demo what they have done. I understand that there is the wiki but more often than not the documentation is lagging. Screencasts would help with writing documentation and also demo those features for users. For instance I would love to see screencasts on: -nicira -ceph -S3 integration -caringo -devcloud-kvm Will include a marvin screencast once I'm done refactoring to show how tests can be written. Do you have a tips page/tutorial on doing a screencast? I think we write the transcript before the recording? -- Prasanna.,
[jira] [Commented] (CLOUDSTACK-1003) Failed to start management server with master build
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557089#comment-13557089 ] Pradeep Soundararajan commented on CLOUDSTACK-1003: --- This is a run time exception not found during any build or package. I guess, it could be because of API-refactoring. There are some codes have been merged to master during that activity. I have noticed client/tomcatconf/components.xml.in has been changed recently. I guess, the issue could be because of that. Also, I have noticed the file StaticRoleBasedAPIAccessChecker.java is touched because of that refactoring. adapters key=com.cloud.acl.APIAccessChecker -adapter name=StaticRoleBasedAPIAccessChecker class=com.cloud.acl.StaticRoleBasedAPIAccessChecker/ +adapter name=StaticRoleBasedAPIAccessChecker class=org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker/ I am not sure whether the codes has been tested properly before it delivered to asf/master. We should be assigning this defect to the respective developer. Failed to start management server with master build --- Key: CLOUDSTACK-1003 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1003 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: API, Install and Setup Affects Versions: 4.1.0 Environment: Centos 6.0.3 Reporter: Rayees Namathponnan Assignee: Pradeep Soundararajan Priority: Blocker Attachments: catalina.out Observed below error in MS log INFO [cloud.server.ConfigurationServerImpl] (main:) Processing updateSSLKeyStore INFO [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at /etc/cloud/management/cloud.keystore INFO [cloud.server.ConfigurationServerImpl] (main:) Processing updateKeyPairs INFO [cloud.server.ConfigurationServerImpl] (main:) Systemvm keypairs not found in database. Need to store them in the database INFO [cloud.server.ConfigurationServerImpl] (main:) Going to update systemvm iso with generated keypairs if needed INFO [utils.component.ComponentLocator] (main:) Config file found at /etc/cloud/management/components.xml. Configuring management-server INFO [utils.component.ComponentLocator] (main:) Found component: com.cloud.configuration.dao.ConfigurationDao in com.cloud.configuration.dao.ConfigurationDaoImpl - Configuration configuration server ERROR [utils.component.ComponentLocator] (main:) Unable to load configuration for management-server from components.xml com.cloud.utils.exception.CloudRuntimeException: Unable to find class: org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker at com.cloud.utils.component.ComponentLocator$XmlHandler.fillInfo(ComponentLocator.java:1028) at com.cloud.utils.component.ComponentLocator$XmlHandler.startElement(ComponentLocator.java:1089) at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown Source) at org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CLOUDSTACK-1003) Failed to start management server with master build
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557093#comment-13557093 ] Prasanna Santhanam commented on CLOUDSTACK-1003: a) What is the build/package you are using? b) StaticRoleBasedAPIAccessChecker is a plugin. Is the plugin appropriately packaged? Failed to start management server with master build --- Key: CLOUDSTACK-1003 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1003 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: API, Install and Setup Affects Versions: 4.1.0 Environment: Centos 6.0.3 Reporter: Rayees Namathponnan Assignee: Pradeep Soundararajan Priority: Blocker Attachments: catalina.out Observed below error in MS log INFO [cloud.server.ConfigurationServerImpl] (main:) Processing updateSSLKeyStore INFO [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at /etc/cloud/management/cloud.keystore INFO [cloud.server.ConfigurationServerImpl] (main:) Processing updateKeyPairs INFO [cloud.server.ConfigurationServerImpl] (main:) Systemvm keypairs not found in database. Need to store them in the database INFO [cloud.server.ConfigurationServerImpl] (main:) Going to update systemvm iso with generated keypairs if needed INFO [utils.component.ComponentLocator] (main:) Config file found at /etc/cloud/management/components.xml. Configuring management-server INFO [utils.component.ComponentLocator] (main:) Found component: com.cloud.configuration.dao.ConfigurationDao in com.cloud.configuration.dao.ConfigurationDaoImpl - Configuration configuration server ERROR [utils.component.ComponentLocator] (main:) Unable to load configuration for management-server from components.xml com.cloud.utils.exception.CloudRuntimeException: Unable to find class: org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker at com.cloud.utils.component.ComponentLocator$XmlHandler.fillInfo(ComponentLocator.java:1028) at com.cloud.utils.component.ComponentLocator$XmlHandler.startElement(ComponentLocator.java:1089) at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown Source) at org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
RE: [MERGE] network refactoring, phase 1
http://jenkins.cloudstack.org/view/master/job/build-master-nonoss-rhel63/ Yes, it is started breaking from build # 34. http://jenkins.cloudstack.org/view/master/job/build-master-nonoss-rhel63/34/console Till 33, it went fine... Thanks, Pradeep S -Original Message- From: Min Chen [mailto:min.c...@citrix.com] Sent: Friday, January 18, 2013 11:19 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [MERGE] network refactoring, phase 1 Nonoss build is broken in master branch, not sure if it is related to this merge? [ERROR] Failed to execute goal org.apache.maven.plugins:maven-compiler-plugin:2.5.1:compile (default-compile) on project cloud-plugin-network-f5: Compilation failure [ERROR] /Users/minc/dev/cloud-asf/plugins/network-elements/f5/src/com/cloud/network /element/F5ExternalLoadBalancerElement.java:[499,27] cannot find symbol [ERROR] symbol : method isNetworkInlineMode(com.cloud.network.Network) [ERROR] location: interface com.cloud.network.NetworkModel [ERROR] - [Help 1] Thanks -min On 1/17/13 5:15 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: Merge done. Tool issue. On 1/16/13 11:21 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: Having problems with the merge. ETA is Thursday evening PST. On 1/16/13 3:40 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: OK , will re-do the merge and re-test and commit by EOD On 1/16/13 1:56 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Chiradeep Are you waiting on revert for 312? Murali reverted it today Thanks Animesh -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Friday, January 11, 2013 1:08 PM To: CloudStack DeveloperList Subject: Re: [MERGE] network refactoring, phase 1 I'm going to wait on the reverts for CLOUDSTACK-306 and CLOUDSTACK-312 On 1/11/13 12:15 PM, Alex Huang alex.hu...@citrix.com wrote: +1 - with an assumption that Alex and others are OK with it +(since the javelin branch merge was proposed first). +1 We're struggling with the merge right now so one more merge is not going to hurt very much. --Alex
[jira] [Commented] (CLOUDSTACK-1003) Failed to start management server with master build
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557098#comment-13557098 ] Pradeep Soundararajan commented on CLOUDSTACK-1003: --- We are using mvn + waf (temporarily). I did not encounter any issue during both. Do you think am I missing anything during packaging which are specific to that plugin? Failed to start management server with master build --- Key: CLOUDSTACK-1003 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1003 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: API, Install and Setup Affects Versions: 4.1.0 Environment: Centos 6.0.3 Reporter: Rayees Namathponnan Assignee: Pradeep Soundararajan Priority: Blocker Attachments: catalina.out Observed below error in MS log INFO [cloud.server.ConfigurationServerImpl] (main:) Processing updateSSLKeyStore INFO [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at /etc/cloud/management/cloud.keystore INFO [cloud.server.ConfigurationServerImpl] (main:) Processing updateKeyPairs INFO [cloud.server.ConfigurationServerImpl] (main:) Systemvm keypairs not found in database. Need to store them in the database INFO [cloud.server.ConfigurationServerImpl] (main:) Going to update systemvm iso with generated keypairs if needed INFO [utils.component.ComponentLocator] (main:) Config file found at /etc/cloud/management/components.xml. Configuring management-server INFO [utils.component.ComponentLocator] (main:) Found component: com.cloud.configuration.dao.ConfigurationDao in com.cloud.configuration.dao.ConfigurationDaoImpl - Configuration configuration server ERROR [utils.component.ComponentLocator] (main:) Unable to load configuration for management-server from components.xml com.cloud.utils.exception.CloudRuntimeException: Unable to find class: org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker at com.cloud.utils.component.ComponentLocator$XmlHandler.fillInfo(ComponentLocator.java:1028) at com.cloud.utils.component.ComponentLocator$XmlHandler.startElement(ComponentLocator.java:1089) at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown Source) at org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [SCREENCAST] request for screencast to demo features
On Jan 18, 2013, at 10:38 AM, Prasanna Santhanam t...@apache.org wrote: On Fri, Jan 18, 2013 at 02:57:46PM +0530, Sebastien Goasguen wrote: Hi everyone, With tons of new features being worked on, it would be nice if the developers of a particular feature could record a screencast to demo what they have done. I understand that there is the wiki but more often than not the documentation is lagging. Screencasts would help with writing documentation and also demo those features for users. For instance I would love to see screencasts on: -nicira -ceph -S3 integration -caringo -devcloud-kvm Will include a marvin screencast once I'm done refactoring to show how tests can be written. Do you have a tips page/tutorial on doing a screencast? I think we write the transcript before the recording? I use Quicktime on my mac (10.8.2), it does screen recording easily. What ever works for you in terms of transcript or no transcripts. You can prep by putting down a story board on paper. Including the actual transcripts of what you say, would make it compliant for hearing impaired. For now I'd rather see many screencasts than just a few compliant ones. Keep it relatively short 15 minutes. I am still working on HD resolution. -Sebastien -- Prasanna.,
Re: Patches needing review
On Fri, Jan 18, 2013 at 03:49:39AM +0530, Animesh Chaturvedi wrote: Folks There are many patch review request in review board that have not been attended to. Many of them have been pending for more than a month. Please attend to them. Also when submitting a patch remember to provide unit tests. Rohit hacked up rb tool[1] to list out patch requests pending in the queue. Here's the list I just pulled up using the tool: ~/workspace/cloudstack/incubator-cloudstack/python/lib(branch:master*) $ rbtool-cs -l Found 41 pending review requests for cloudstack #ID | Submitter | Branch | Reviewer |Upd| Last Review by non-submitter -- 5655 | Spark404| master | | | rohityadav- Hugo, is this review still applicable? If not c 7018 | bharatk | | nitin, | | bharatk- Ship It! 7594 | deeptid | master | anthonyxu, | | ke4qqq- Can you make sure this is a bug on issues.apache.or 7660 | deeptid | master | | | 7802 | radhikap| MASTER | ke4qqq,chip.childers,jtomechak, | | jzb- Hi Radhika, 7827 | koushikd| | murali.reddy,kelveny,| | 7891 | koushikd| | aprateek,alexhu, | | 8180 | radhikap| | chip.childers,vijayendrabvs,jtom | Y | jtomechak- Public IP assignment feature is committed (see C 8293 | kawai | master | | | rohityadav- Any update on this one? 8294 | kawai | master | | | 8307 | kdamage | doc-config-gen | | | ke4qqq- I tested this and see at least one problem. 8355 | meghna.kale | master | chip.childers,tsp,chiradeep,alex | | rohityadav- Heads up, going to merge api_refactoring soon s 8465 | likitha | master | prachidamle, | | 8466 | likitha | master | prachidamle, | Y | prachidamle- Code looks good. How do we test the query API 8468 | likitha | master | prachidamle, | | ke4qqq- CLOUDSTACK-197 is the generic Query API bug - but d 8480 | likitha | master | prachidamle, | | 8483 | likitha | master | prachidamle, | | 8492 | likitha | master | prachidamle, | | 8513 | likitha | master | prachidamle, | | 8545 | meghna.kale | master | chip.childers,tsp,mice_xia,chira | | rohityadav- Thanks for your patch, but your changes are not 8547 | likitha | master | alena1108, | | 8613 | tsp | master, 4.0 | edison,mlsorensen, | | nitin- I guess we need to take care of migration as well. F 8623 | devdeep | master | | | nitin- Dont you have to take care of migration ? Do you thi 8632 | tsp | master | nitin,edison,mlsorensen, | | 8636 | radhikap| master | ke4qqq,chip.childers,jtomechak,j | Y | jtomechak- Need someone to test the installation with the c 8698 | radhikap| | ke4qqq,chip.childers,jtomechak,j | Y | jtomechak- [] 8701 | boul| | Spark404,chiradeep, | | 8742 | likitha | master | prachidamle,chiradeep,sebgoa,| | 8813 | radhikap| master | ke4qqq,chip.childers,jtomechak, | Y | jtomechak- Looks like the code for this feature is still un 8838 | noa | | | | rohityadav- The problem is mkisofs is not same as genisoima 8853 | koushikd| | aprateek,alexhu, | | 8859 | Saksham | master | kishan, | Y | kishan- Looks good to me. 8876 | likitha | master | jlkinsel,alena1108,rohityadav, | | rohityadav- Good start indeed, and John would know better a 8900 | Saksham | master | devdeep, | | nitin- You need to take care of migration as well. Any thou 8905 | harikrishna.pat | master | aprateek,| Y | ke4qqq- Are you the sole author of this work? 8970 | radhikap| MASTER | chip.childers,jtomechak,murali.r | Y | 8971
Re: [Discuss] Cpu and Ram overcommit.
Bharat, I guess you can start work on this. FS is here https://cwiki.apache.org/CLOUDSTACK/cpu-and-ram-overcommit.html -abhi On 18/01/13 3:23 PM, Bharat Kumar bharat.ku...@citrix.com wrote: Hi All, I have included the information form the discussions in the functional spec and I think we have sufficient information to start the implementation. -Original Message- From: Bharat Kumar [mailto:bharat.ku...@citrix.com] Sent: Thursday, 17 January 2013 11:01 PM To: cloudstack-us...@incubator.apache.org Cc: cloudstack-dev@incubator.apache.org Subject: Re: [Discuss] Cpu and Ram overcommit. Alex thank you for your suggestions, I will add them to the functional spec. Bharat. On Jan 16, 2013, at 4:19 AM, Alex Huang alex.hu...@citrix.com wrote: Bharat, A few comments. - On your caveats, I think you should deploy 2b. Accept the change but not add more VMs anymore. You can provide a warning. - As for repeated alerts, that's a problem with the alert mechanism. It should not repeat alerts. Fix it there. On implementation: - You need to add something more generic such as a cluster-details to cluster that allows you retrieve what you want to add to it. I don't see any reason to keep adding columns to cluster/pods. Cluster/pods are organization units. We should add a details table (might already there) to keep component details because no one else will use this detail information. I don't see why we need to add database columns for this. - How are you planning to handle hypervisors that cannot overcommit cpu or ram? To me this needs capabilities added to the hypervisor caps table. - This is a planner specific change. Make sure the changes are localized in the planner. If there's anything you need to change in CloudStack core/server, please point that out in a subtask for your bug and let me know. --Alex -Original Message- From: Bharat Kumar [mailto:bharat.ku...@citrix.com] Sent: Tuesday, January 08, 2013 3:16 AM To: cloudstack-us...@incubator.apache.org Cc: cloudstack-dev@incubator.apache.org Subject: Re: [Discuss] Cpu and Ram overcommit. Hi Hari, A host can have more than one tag so we need not overwrite the inherited cluster tag of a host, if a host specific tag is added. Bharat On Dec 26, 2012, at 11:32 AM, Bharat Kumar bharat.ku...@citrix.com wrote: Hi all, Presently in Cloudstack there is a provision for cpu overcommit and no provision for the ram overcommit. There is no way to configure the overcommit ratios on a per cluster basis. So we propose to add a new feature to allow the ram overcommit and to specify the overcommit ratios ( cpu/ram ) on a per cluster basis. Motivation to add the feature: Most of the operating systems and applications do not use the allocated resources to 100%. This makes it possible to allocate more resource than what is actually available. The overcommitting of resources allows to run the underutilized VMs in fewer number of hosts, This saves money and power. Currently the cpu overcommit ratio is a global parameter which means there is no way to fine tune or have a granular control over the overcommit ratios. This feature will enable 1.) Configuring the overcommit ratios on a per cluster basis. 2.) ram overcommit feature in xen and kvm. ( It is there for VMware.) 3.) Updating the overcommit ratios of a cluster. Regards, Bharat Kumar.
[jira] [Commented] (CLOUDSTACK-1010) Host count and Secondary storage count always shows 1 in UI
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1010?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557116#comment-13557116 ] Kishan Kavala commented on CLOUDSTACK-1010: --- commit 51c1ca7cbe0ed5206ea5844acb71a3f6f53d1959 Author: Kishan Kavala kis...@cloud.com Date: Fri Jan 18 16:13:25 2013 +0530 CLOUDSTACK-1010: Fix count issue for listHosts command Host count and Secondary storage count always shows 1 in UI --- Key: CLOUDSTACK-1010 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1010 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: API, UI Affects Versions: 4.1.0 Environment: KVM Reporter: Rayees Namathponnan Assignee: Kishan Kavala Fix For: 4.1.0 Steps to reproduce the problem: Step1 - Create Advanced zone with 2 zone, 2 POD, 2 cluster and 2 host in first zone and 1 host in second zone Step2 - Add Secondary storage for both zone Expected result In Infrastructure UI number host should be 3 and Secondary storage count should 2 Actual Result In Infrastructure UI number host and Secondary storage count shows 1 Addition information : List host count always shows one 2013-01-17 11:38:18,819 INFO [cloud.api.ApiServer] (catalina-exec-18:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listHostsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dtype=SecondaryStoragepage=1pagesize=1_=1358451527529 200 { listhostsresponse : { count:1 ,host : [ {id:6a1deb76-7c6c-47be-b200-b36f84398f4b,name:nfs://10.223.110.232:/export/home/rayees/SC_QA_AUTO4/secondary,state:Alert,type:SecondaryStorage,ipaddress:nfs,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,version:4.1.0.20130116180639,hypervisor:None,disksizetotal:11810778316800,disksizeallocated:6434799058944,lastpinged:1970-01-16T00:30:03-0800,islocalstorageactive:false,created:2013-01-17T08:59:01-0800,events:ShutdownRequested; Remove; Ping; AgentDisconnected; ManagementServerDown; AgentConnected,suitableformigration:false,resourcestate:Enabled} ] } } 2013-01-17 11:38:18,893 INFO [cloud.api.ApiServer] (catalina-exec-1:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listSystemVmsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dpage=1pagesize=1_=1358451527561 200 { listsystemvmsresponse : { count:4 ,systemvm : [ {id:840eba2d-a51b-4662-8728-48c9f2a562fd,systemvmtype:secondarystoragevm,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,dns1:72.52.126.11,gateway:10.223.122.65,name:s-1-QA,podid:8ea2bb62-075e-43f1-87c1-d1873ff04daf,hostid:0ac3c490-78db-4087-8ff9-6e8cee3a2907,hostname:Rack2Host11.lab.vmops.com,privateip:10.223.50.95,privatemacaddress:06:d2:08:00:00:1e,privatenetmask:255.255.255.192,linklocalip:169.254.3.100,linklocalmacaddress:0e:00:a9:fe:03:64,linklocalnetmask:255.255.0.0,publicip:10.223.122.66,publicmacaddress:06:a7:4e:00:00:3e,publicnetmask:255.255.255.192,templateid:91ebb054-f501-4a21-ae97-0386b80d0b38,created:2013-01-17T11:26:53-0800,state:Running,objectId:1} ] } } 2013-01-17 11:38:18,904 INFO [cloud.api.ApiServer] (catalina-exec-8:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listRoutersresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dprojectid=-1page=1pagesize=1_=1358451527634 200 { listroutersresponse : { } } 2013-01-17 11:38:18,915 INFO [cloud.api.ApiServer] (catalina-exec-17:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listRoutersresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3DlistAll=truepage=1pagesize=1_=1358451527645 200 { listroutersresponse : { } } 2013-01-17 11:38:20,332 INFO [cloud.api.ApiServer] (catalina-exec-6:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listStoragePoolsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dpage=1pageSize=20listAll=true_=1358451529042 200 { liststoragepoolsresponse : { count:3 ,storagepool : [ {id:fff90cb5-06dd-33b3-8815-d78c08ca01d9,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,podid:8ea2bb62-075e-43f1-87c1-d1873ff04daf,podname:POD01,name:PS0,ipaddress:10.223.110.232,path:/export/home/rayees/SC_QA_AUTO4/primary,created:2013-01-17T11:26:31-0800,type:NetworkFilesystem,clusterid:20867e66-93e5-4d5c-9380-bdcd6a45c851,clustername:KVM_Cluster1,disksizetotal:11810778316800,disksizeallocated:147456,disksizeused:6434799058944,tags:,state:Up},
[jira] [Resolved] (CLOUDSTACK-810) Make DirectAgent thread pool size configurable
[ https://issues.apache.org/jira/browse/CLOUDSTACK-810?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Koushik Das resolved CLOUDSTACK-810. Resolution: Fixed Added to master with following commit commit cd37e22f9baf15f1369e5087197dafbcaf2ad65e Author: Koushik Das koushik@citrix.com Date: Mon Jan 7 13:40:55 2013 +0530 CLOUDSTACK-810: Make DirectAgent thread pool size configurable Removed hard-coding of directagent thread pool size and now reading it from configuration Signed-off-by: Chiradeep Vittal chirad...@apache.org Make DirectAgent thread pool size configurable -- Key: CLOUDSTACK-810 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-810 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: pre-4.0.0, 4.0.0 Reporter: Koushik Das Assignee: Koushik Das Fix For: 4.0.2 Cuurently the DirectAgent pool size is hard-coded to 500. One of the factors that can affect this is the number of hosts in a deployment. If there are more than 500 hosts (say around 1K) then this pool can easily get exhausted resulting in delays and undesired behavior. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (CLOUDSTACK-1010) Host count and Secondary storage count always shows 1 in UI
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1010?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kishan Kavala resolved CLOUDSTACK-1010. --- Resolution: Fixed Host count and Secondary storage count always shows 1 in UI --- Key: CLOUDSTACK-1010 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1010 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: API, UI Affects Versions: 4.1.0 Environment: KVM Reporter: Rayees Namathponnan Assignee: Kishan Kavala Fix For: 4.1.0 Steps to reproduce the problem: Step1 - Create Advanced zone with 2 zone, 2 POD, 2 cluster and 2 host in first zone and 1 host in second zone Step2 - Add Secondary storage for both zone Expected result In Infrastructure UI number host should be 3 and Secondary storage count should 2 Actual Result In Infrastructure UI number host and Secondary storage count shows 1 Addition information : List host count always shows one 2013-01-17 11:38:18,819 INFO [cloud.api.ApiServer] (catalina-exec-18:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listHostsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dtype=SecondaryStoragepage=1pagesize=1_=1358451527529 200 { listhostsresponse : { count:1 ,host : [ {id:6a1deb76-7c6c-47be-b200-b36f84398f4b,name:nfs://10.223.110.232:/export/home/rayees/SC_QA_AUTO4/secondary,state:Alert,type:SecondaryStorage,ipaddress:nfs,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,version:4.1.0.20130116180639,hypervisor:None,disksizetotal:11810778316800,disksizeallocated:6434799058944,lastpinged:1970-01-16T00:30:03-0800,islocalstorageactive:false,created:2013-01-17T08:59:01-0800,events:ShutdownRequested; Remove; Ping; AgentDisconnected; ManagementServerDown; AgentConnected,suitableformigration:false,resourcestate:Enabled} ] } } 2013-01-17 11:38:18,893 INFO [cloud.api.ApiServer] (catalina-exec-1:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listSystemVmsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dpage=1pagesize=1_=1358451527561 200 { listsystemvmsresponse : { count:4 ,systemvm : [ {id:840eba2d-a51b-4662-8728-48c9f2a562fd,systemvmtype:secondarystoragevm,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,dns1:72.52.126.11,gateway:10.223.122.65,name:s-1-QA,podid:8ea2bb62-075e-43f1-87c1-d1873ff04daf,hostid:0ac3c490-78db-4087-8ff9-6e8cee3a2907,hostname:Rack2Host11.lab.vmops.com,privateip:10.223.50.95,privatemacaddress:06:d2:08:00:00:1e,privatenetmask:255.255.255.192,linklocalip:169.254.3.100,linklocalmacaddress:0e:00:a9:fe:03:64,linklocalnetmask:255.255.0.0,publicip:10.223.122.66,publicmacaddress:06:a7:4e:00:00:3e,publicnetmask:255.255.255.192,templateid:91ebb054-f501-4a21-ae97-0386b80d0b38,created:2013-01-17T11:26:53-0800,state:Running,objectId:1} ] } } 2013-01-17 11:38:18,904 INFO [cloud.api.ApiServer] (catalina-exec-8:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listRoutersresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dprojectid=-1page=1pagesize=1_=1358451527634 200 { listroutersresponse : { } } 2013-01-17 11:38:18,915 INFO [cloud.api.ApiServer] (catalina-exec-17:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listRoutersresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3DlistAll=truepage=1pagesize=1_=1358451527645 200 { listroutersresponse : { } } 2013-01-17 11:38:20,332 INFO [cloud.api.ApiServer] (catalina-exec-6:null) (userId=2 accountId=2 sessionId=C34EAC8B33A6CDA76525F44E518EB94D) 10.216.133.42 -- GET command=listStoragePoolsresponse=jsonsessionkey=3IFMlr8PP0whLZrAnDjSxwBEIDA%3Dpage=1pageSize=20listAll=true_=1358451529042 200 { liststoragepoolsresponse : { count:3 ,storagepool : [ {id:fff90cb5-06dd-33b3-8815-d78c08ca01d9,zoneid:49686851-5225-4b28-9096-19a4730b07cc,zonename:Adv-KVM-Zone1,podid:8ea2bb62-075e-43f1-87c1-d1873ff04daf,podname:POD01,name:PS0,ipaddress:10.223.110.232,path:/export/home/rayees/SC_QA_AUTO4/primary,created:2013-01-17T11:26:31-0800,type:NetworkFilesystem,clusterid:20867e66-93e5-4d5c-9380-bdcd6a45c851,clustername:KVM_Cluster1,disksizetotal:11810778316800,disksizeallocated:147456,disksizeused:6434799058944,tags:,state:Up},
RE: Functional Specification for the multiple IPs per NIC
Update the FS with the below discussions. Please find updated FS below. https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+IP+address+per+NIC Thanks, Jayapal -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Thursday, January 17, 2013 12:51 PM To: CloudStack DeveloperList Subject: Re: Functional Specification for the multiple IPs per NIC I hope we consider the case when the ip is removed from the nic while there is a PF rule to that ip. On 1/16/13 9:10 PM, Jayapal Reddy Uradi jayapalreddy.ur...@citrix.com wrote: Hi Chiradeep, Now the VM NIC will have multiple IPs so for creating PF for secondary ip address we will pass VM id and (optional argument) VM ip address to the API. When VM ip address is passed it checks the whether the ip belongs to the VM or not and configures the PF for the VM IP address. When VM ip address argument is not passed to the API then it works in older way. When VM NIC has NO secondary ip address also we can pass VM id and VM primary ip address to VM ipaddress argument to API to configure PF. Thanks, Jayapal -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Thursday, January 17, 2013 1:45 AM To: CloudStack DeveloperList Subject: Re: Functional Specification for the multiple IPs per NIC Note also that the createPortForwardingRule API takes a vm id and network id, based on the assumption of a single ip per NIC. This may need an additional parameter of ip (or make the vm id optional). On 1/15/13 9:35 AM, Anthony Xu xuefei...@citrix.com wrote: Thanks for bringing this up, For security group, we may need to handle following things, As you mentioned, Anti-spoofing rules need to be updated, when secondary IP is associate/dissociate to NIC. And Security group rule can base on cidr and it can base on account/security group, For example a security group rule can allow all VMs in another account/security group to access VMs in this security group. In this case, When secondary IP is associate/dissociate to NIC. The related security group rule based on account/security group need to be resent to reflect the IP change in this security group. Anthony -Original Message- From: Jayapal Reddy Uradi [mailto:jayapalreddy.ur...@citrix.com] Sent: Tuesday, January 15, 2013 5:17 AM To: cloudstack-dev@incubator.apache.org Subject: RE: Functional Specification for the multiple IPs per NIC Please find the updated FS in below link. https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+IP+ad dr ess+per+NIC I want to discuss the MIPN case for shared networks. I observed VM specific security groups iptables rules in basic zone, in which we are allowing egress traffic from the guest VM primary (dhcp) address only. If we add another IP to the NIC we should update the security groups to allow the egress traffic from the new ip. Example Current rule: It allows traffic from the i-2-3 VM's 10.147.41.239 IP only. 0 0 i-2-3-TEST-eg all -- * * 10.147.41.239 0.0.0.0/0 PHYSDEV match --physdev-in vif7.0 --physdev-is- bridged We should update security group rules each time we associate secondary IP to NIC. Please let me know if you have any comments or suggestion for the above . Thanks, Jayapal -Original Message- From: John Kinsella [mailto:j...@stratosec.co] Sent: Wednesday, December 19, 2012 10:59 PM To: cloudstack-dev@incubator.apache.org Subject: Re: Functional Specification for the multiple IPs per NIC 'morning Hari. I can think of at least one use case where allowing the user to specify the IP would be required - when migrating an IP from one CAP to ACS or from one VM to another. Anyways - I think what the real answer to your question is would be to have a granular security model around the API calls. At that point you could specify what users/groups have the ability to assign specific IPs to a specific instance. So I'd vote to implement for now, and attack a granular api security model sooner rather than later. John On Dec 18, 2012, at 4:15 PM, Hari Kannan hari.kan...@citrix.com wrote: Regarding User can specify the IP address from the guest subnet if not CS picks the IP from the guest subnet comment in the FS I don't see a need to do this - because, it is a shared network, how does he know what is used up and what is not? So, he could go through a sequence of steps only to get an error message back that it is not possible (and keep doing this until success) One possibility is telling him what is available - it may not
RE: [SCREENCAST] request for screencast to demo features
Tips? I use Camtasia to record. I suggest flipping back and fore between a powerpoint that sets the context for what you're doing, and the CloudStack GUI / shell / tool that you are demonstrating. -Original Message- From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of Prasanna Santhanam Sent: 18 January 2013 09:38 To: cloudstack-dev@incubator.apache.org Subject: Re: [SCREENCAST] request for screencast to demo features On Fri, Jan 18, 2013 at 02:57:46PM +0530, Sebastien Goasguen wrote: Hi everyone, With tons of new features being worked on, it would be nice if the developers of a particular feature could record a screencast to demo what they have done. I understand that there is the wiki but more often than not the documentation is lagging. Screencasts would help with writing documentation and also demo those features for users. For instance I would love to see screencasts on: -nicira -ceph -S3 integration -caringo -devcloud-kvm Will include a marvin screencast once I'm done refactoring to show how tests can be written. Do you have a tips page/tutorial on doing a screencast? I think we write the transcript before the recording? -- Prasanna.,
Re: Review Request: CLOUDSTACK-988: HV version must be updated in hypervisor_version column of host table
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8993/#review15484 --- Ship it! Ship It! - Abhinandan Prateek On Jan. 17, 2013, 12:46 p.m., Koushik Das wrote: --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8993/ --- (Updated Jan. 17, 2013, 12:46 p.m.) Review request for cloudstack, Nitin Mehta and Alex Huang. Description --- HV version is stored in 'hypervisor_version' column in host table wherever present. Also correctly populating 'version' column in host table with resource file version. This addresses bug CLOUDSTACK-988. Diffs - core/src/com/cloud/network/resource/TrafficSentinelResource.java a13e080 plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java a444cfe plugins/network-elements/f5/src/com/cloud/network/resource/F5BigIpResource.java c9c3711 plugins/network-elements/juniper-srx/src/com/cloud/network/resource/JuniperSrxResource.java f823ab8 plugins/network-elements/netscaler/src/com/cloud/network/resource/NetscalerResource.java afb0135 plugins/network-elements/nicira-nvp/src/com/cloud/network/resource/NiciraNvpResource.java 12ed72a server/src/com/cloud/baremetal/ExternalDhcpResourceBase.java cbfcfd1 server/src/com/cloud/baremetal/PxeServerResourceBase.java c307ccf server/src/com/cloud/resource/DummyHostServerResource.java 5144a91 server/src/com/cloud/resource/ResourceManagerImpl.java ffc09f0 Diff: https://reviews.apache.org/r/8993/diff/ Testing --- Verified that HV version is correctly updated in host table for XS and Vmware Thanks, Koushik Das
RE: Build SystemVM template
You might want to check the XenServer support. I had problems with detaching VDIs on Wheezy on XenServer March/April 2012. There was no reason to report the problem at the time, because XenServer didn't cite Wheezy as a supported guest OS. Also, I expect I was using an older build. DL -Original Message- From: Rohit Yadav [mailto:rohit.ya...@citrix.com] Sent: 18 January 2013 02:47 To: cloudstack-dev@incubator.apache.org Subject: Re: Build SystemVM template On 17-Jan-2013, at 6:10 PM, Sheng Yang sh...@yasker.org wrote: On Thu, Jan 17, 2013 at 5:07 PM, Rohit Yadav rohit.ya...@citrix.com wrote: Hi Sheng, we can reuse viewee and vagrant based appliance building code for devcloud for systemvm. We can use debian wheezy i386 beta4 for now and when it releases in february we can have another round of building/testing. Sure, is there a document for it? Also, I didn't see a release date for Wheezy... Do you have reference? tools/devcloud/README.md (it can have bugs, help fix it wherever you see improvement) Once you build systemvm, you can export and convert the disk image from vmdk/vhd to qcow2/vhd/vmdk etc. Wheezy should release in Feb like the last two releases in 2009 and 2011, but it's not confirmed. Regards. --Sheng Regards. On 17-Jan-2013, at 4:18 PM, Sheng Yang sh...@yasker.org wrote: Hi, I just found the buildsystemvm.sh won't work, and I need to build a new systemvm template for IPv6 support, because we're adding new softwares in it. Apparently due to license issue(I guess),xt_CHECKSUM.ko which is a extension of iptables to fix one Debian/Ubuntu DHCP issue. I believe the iptables_1.4.8-3local1checksum1_i386.deb(a patched version of iptables by us) is also removed, as well as xe-guest-utilities_5.6.0-595_i386.deb. So, what we suppose to do to make systemvm template buildable again? I know there are some licenses issues involved, but not quite clear on these. --Sheng
regarding Backup DR/VM DR, Volume FS
HI All, Is there any Functional spec available for Backup DR/VM DR, Volume feature. Apache CS ID #671 Regards Sadhu
Re: Functional Specification for the multiple IPs per NIC
Jayapal, The FS seems to be updated with the feedback received on the forum, I guess you can start implementation. -abhi On 18/01/13 4:33 PM, Jayapal Reddy Uradi jayapalreddy.ur...@citrix.com wrote: Update the FS with the below discussions. Please find updated FS below. https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+IP+address +per+NIC Thanks, Jayapal -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Thursday, January 17, 2013 12:51 PM To: CloudStack DeveloperList Subject: Re: Functional Specification for the multiple IPs per NIC I hope we consider the case when the ip is removed from the nic while there is a PF rule to that ip. On 1/16/13 9:10 PM, Jayapal Reddy Uradi jayapalreddy.ur...@citrix.com wrote: Hi Chiradeep, Now the VM NIC will have multiple IPs so for creating PF for secondary ip address we will pass VM id and (optional argument) VM ip address to the API. When VM ip address is passed it checks the whether the ip belongs to the VM or not and configures the PF for the VM IP address. When VM ip address argument is not passed to the API then it works in older way. When VM NIC has NO secondary ip address also we can pass VM id and VM primary ip address to VM ipaddress argument to API to configure PF. Thanks, Jayapal -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Thursday, January 17, 2013 1:45 AM To: CloudStack DeveloperList Subject: Re: Functional Specification for the multiple IPs per NIC Note also that the createPortForwardingRule API takes a vm id and network id, based on the assumption of a single ip per NIC. This may need an additional parameter of ip (or make the vm id optional). On 1/15/13 9:35 AM, Anthony Xu xuefei...@citrix.com wrote: Thanks for bringing this up, For security group, we may need to handle following things, As you mentioned, Anti-spoofing rules need to be updated, when secondary IP is associate/dissociate to NIC. And Security group rule can base on cidr and it can base on account/security group, For example a security group rule can allow all VMs in another account/security group to access VMs in this security group. In this case, When secondary IP is associate/dissociate to NIC. The related security group rule based on account/security group need to be resent to reflect the IP change in this security group. Anthony -Original Message- From: Jayapal Reddy Uradi [mailto:jayapalreddy.ur...@citrix.com] Sent: Tuesday, January 15, 2013 5:17 AM To: cloudstack-dev@incubator.apache.org Subject: RE: Functional Specification for the multiple IPs per NIC Please find the updated FS in below link. https://cwiki.apache.org/confluence/display/CLOUDSTACK/Multiple+IP+ad dr ess+per+NIC I want to discuss the MIPN case for shared networks. I observed VM specific security groups iptables rules in basic zone, in which we are allowing egress traffic from the guest VM primary (dhcp) address only. If we add another IP to the NIC we should update the security groups to allow the egress traffic from the new ip. Example Current rule: It allows traffic from the i-2-3 VM's 10.147.41.239 IP only. 0 0 i-2-3-TEST-eg all -- * * 10.147.41.239 0.0.0.0/0 PHYSDEV match --physdev-in vif7.0 --physdev-is- bridged We should update security group rules each time we associate secondary IP to NIC. Please let me know if you have any comments or suggestion for the above . Thanks, Jayapal -Original Message- From: John Kinsella [mailto:j...@stratosec.co] Sent: Wednesday, December 19, 2012 10:59 PM To: cloudstack-dev@incubator.apache.org Subject: Re: Functional Specification for the multiple IPs per NIC 'morning Hari. I can think of at least one use case where allowing the user to specify the IP would be required - when migrating an IP from one CAP to ACS or from one VM to another. Anyways - I think what the real answer to your question is would be to have a granular security model around the API calls. At that point you could specify what users/groups have the ability to assign specific IPs to a specific instance. So I'd vote to implement for now, and attack a granular api security model sooner rather than later. John On Dec 18, 2012, at 4:15 PM, Hari Kannan hari.kan...@citrix.com wrote: Regarding User can specify the IP address from the guest subnet if not CS picks the IP from the guest subnet comment in the FS I don't see a need to do this - because, it is a shared network, how does he know what is used up and what is not? So, he could go
RE: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs per Tenant
In CloudStack we can already reserve the public IP range to an account but not release it back to the free pool, so how about we divide this requirement into 2 parts - 1) Dedicate Public IP range 2) Dedicate Guest VLAN's per tenant. Since Part 1 has already implemented, we need to only add the enhancement 'Add releasing these IP Address range to the free pool'. I will create an enhancement ticket to track this? As for Part 2, I will soon publish an FS based on the requirements. Any concerns? Thank you, Likitha -Original Message- From: Likitha Shetty [mailto:likitha.she...@citrix.com] Sent: Thursday, January 17, 2013 3:55 PM To: cloudstack-us...@incubator.apache.org; cloudstack- d...@incubator.apache.org Subject: RE: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs per Tenant Yes, before reserving the public ip range we do verify if the account/domain is exceeding the limit. Thank You, Likitha -Original Message- From: Sailaja Mada [mailto:sailaja.m...@citrix.com] Sent: Thursday, January 17, 2013 3:50 PM To: cloudstack-us...@incubator.apache.org; cloudstack- d...@incubator.apache.org Subject: RE: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs per Tenant Hi Likitha, Currently we can reserve the public IP range to an account. I would assume we are cross checking the account/domain limit for the max no of Public IP addresses while reserving the Public IP to an account? Please clarify. Thanks, Sailaja.M -Original Message- From: Likitha Shetty [mailto:likitha.she...@citrix.com] Sent: Thursday, January 10, 2013 7:43 PM To: cloudstack-us...@incubator.apache.org; cloudstack- d...@incubator.apache.org Subject: RE: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs per Tenant For CreateVlanIpRange API call, we can set the account parameter to specify the VLAN owner. If specified, the Public IP's get allocated to the account and the VLAN get dedicated to it. Could you please clarify what the difference between this and the mentioned requirement is? But I couldn't figure out a way to release back the VLAN and the allocated IP's to the free pool. I achieved it by deleting the VLAN-IP range and then adding it back to the system account. Is there a better way to do it or do we need to implement this? Thank you, Likitha -Original Message- From: Manan Shah [mailto:manan.s...@citrix.com] Sent: Friday, January 04, 2013 10:11 PM To: cloudstack-us...@incubator.apache.org Subject: Re: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs per Tenant Thanks Tamas for bringing up additional requirements. I have updated the requirements document. Regards, Manan Shah On 1/4/13 6:32 AM, Tamas Monos tam...@veber.co.uk wrote: +1 Additional to the requirements: - Usage must reflect if these are assigned to an Account so the admin can see how many IP is allocated to the account. - On allocation it needs to check whether the required range is available (not in use) and conforms with the account limits (cannot allocate more IPs than maximum IPs per account). Regards Tamas Monos DDI +44(0)2034687012 Chief Technical Office +44(0)2034687000 Veber: The Hosting Specialists Fax +44(0)871 522 7057 http://www.veber.co.uk Follow us on Twitter: www.twitter.com/veberhost Follow us on Facebook: www.facebook.com/veberhost -Original Message- From: Manan Shah [mailto:manan.s...@citrix.com] Sent: 22 December 2012 01:03 To: cloudstack-us...@incubator.apache.org Subject: [DISCUSS] Dedicated Resources: Public IP Addresses and VLANs per Tenant Hi, I would like to propose a new feature for dedicating IP Addresses and VLANs per Tenant. I have created a JIRA ticket and provided the requirements at the following location. Please provide feedback on the requirements. JIRA Ticket: https://issues.apache.org/jira/browse/CLOUDSTACK-704 Requirements: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Dedicated+Reso u r ces + -+Public+IP+Addresses+and+VLANs+per+Tenant Regards, Manan Shah
Re: Review Request: CLOUDSTACK-803: HA gets triggered even when the host investigator is unable to determine the state of the host
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8853/#review15486 --- Ship it! Ship It! - Abhinandan Prateek On Jan. 7, 2013, 8:26 a.m., Koushik Das wrote: --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8853/ --- (Updated Jan. 7, 2013, 8:26 a.m.) Review request for cloudstack, Abhinandan Prateek and Alex Huang. Description --- CS tries to do HA on VMs if it finds that the host on which they are running is down. HA should only happen when CS is able to determine (host investigators return status as 'Down') that host is down. Currently due to a bug in code even if the hosts investigators are unable to determine state (returns 'null'), HA gets triggered. This results in unnecessary HA of VMs. The fix is to not do HA in case the state of host cannot be determined. This addresses bug CLOUDSTACK-803. Diffs - server/src/com/cloud/agent/manager/AgentManagerImpl.java 8141fdb Diff: https://reviews.apache.org/r/8853/diff/ Testing --- I did the following manual testing - Setup advanced zone with XS host - Created a VM - Pulled out network cable for MS - Checked in the debugger that the DisconnectTask is running - This calls handleDisconnectWithInvestigation in AgentManagerImpl - In the debugger saw that the following line of code is returning state as null 'final Status determinedState = investigate(attache);' - So the warning message added is seen 's_logger.warn(Agent state cannot be determined, do nothing);' - The above steps continues in a loop till the time I plug the network cable back after which again the status of the host gets correctly determined by the investigator. If either the XS host or MS is disconnected from network then investigator cannot determine the state of the host and so based on the fix HA won’t be triggered. Sowmya from Citrix QA team also did additional testing for this on a private branch. Thanks, Koushik Das
[jira] [Resolved] (CLOUDSTACK-988) HV version must be updated in hypervisor_version column of host table
[ https://issues.apache.org/jira/browse/CLOUDSTACK-988?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Koushik Das resolved CLOUDSTACK-988. Resolution: Cannot Reproduce committed to master commit 070856affd4e5b0baef7730aeb2c245775ee6872 Author: Koushik Das koushik@citrix.com Date: Thu Jan 17 18:04:36 2013 +0530 CLOUDSTACK-988: HV version must be updated in hypervisor_version column of host table HV version is stored in hypervisor_version column in host table wherever present Also correctly populating version column in host table with resource file version Signed-off-by: Koushik Das koushik@citrix.com Signed-off-by: Abhinandan Prateek aprat...@apache.org HV version must be updated in hypervisor_version column of host table - Key: CLOUDSTACK-988 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-988 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: pre-4.0.0, 4.0.0 Reporter: Koushik Das Assignee: Koushik Das Fix For: 4.0.2 Currently XS stores host version in host_details table, Vmware in host table but in an incorrect column meant for something else. Haven't checked for KVM and OVM. For sake of consistency, HV version must be stored in hypervisor_version column of host table. Individual HVs may also duplicate that info in host details or some other places as well. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Reopened] (CLOUDSTACK-988) HV version must be updated in hypervisor_version column of host table
[ https://issues.apache.org/jira/browse/CLOUDSTACK-988?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Koushik Das reopened CLOUDSTACK-988: resolution reason was incorrect HV version must be updated in hypervisor_version column of host table - Key: CLOUDSTACK-988 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-988 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: pre-4.0.0, 4.0.0 Reporter: Koushik Das Assignee: Koushik Das Fix For: 4.0.2 Currently XS stores host version in host_details table, Vmware in host table but in an incorrect column meant for something else. Haven't checked for KVM and OVM. For sake of consistency, HV version must be stored in hypervisor_version column of host table. Individual HVs may also duplicate that info in host details or some other places as well. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (CLOUDSTACK-999) Plugin to provide Hyper-V 2012 support
[ https://issues.apache.org/jira/browse/CLOUDSTACK-999?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Donal Lafferty updated CLOUDSTACK-999: -- Fix Version/s: 4.1.0 Plugin to provide Hyper-V 2012 support -- Key: CLOUDSTACK-999 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-999 Project: CloudStack Issue Type: New Feature Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server, Template, UI Affects Versions: 4.1.0 Environment: Hyper-V 2012 is available on releases of Windows operating system from 2012 onwards. E.g. Windows Server 2012, and Hyper-V Server 2012. The plugin will execute at least in part on the CloudStack management server. Reporter: Donal Lafferty Assignee: Donal Lafferty Labels: Hyper-V, newbie Fix For: 4.1.0 https://cwiki.apache.org/confluence/display/CLOUDSTACK/Hyper-V+2012+%283.0%29+Support -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: Review Request: CLOUDSTACK-988: HV version must be updated in hypervisor_version column of host table
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8993/#review15487 --- Is this just for the sake of consistency ? Was something affected because of this ? If yes, we need to take care of migration as well. - Nitin Mehta On Jan. 17, 2013, 12:46 p.m., Koushik Das wrote: --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8993/ --- (Updated Jan. 17, 2013, 12:46 p.m.) Review request for cloudstack, Nitin Mehta and Alex Huang. Description --- HV version is stored in 'hypervisor_version' column in host table wherever present. Also correctly populating 'version' column in host table with resource file version. This addresses bug CLOUDSTACK-988. Diffs - core/src/com/cloud/network/resource/TrafficSentinelResource.java a13e080 plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java a444cfe plugins/network-elements/f5/src/com/cloud/network/resource/F5BigIpResource.java c9c3711 plugins/network-elements/juniper-srx/src/com/cloud/network/resource/JuniperSrxResource.java f823ab8 plugins/network-elements/netscaler/src/com/cloud/network/resource/NetscalerResource.java afb0135 plugins/network-elements/nicira-nvp/src/com/cloud/network/resource/NiciraNvpResource.java 12ed72a server/src/com/cloud/baremetal/ExternalDhcpResourceBase.java cbfcfd1 server/src/com/cloud/baremetal/PxeServerResourceBase.java c307ccf server/src/com/cloud/resource/DummyHostServerResource.java 5144a91 server/src/com/cloud/resource/ResourceManagerImpl.java ffc09f0 Diff: https://reviews.apache.org/r/8993/diff/ Testing --- Verified that HV version is correctly updated in host table for XS and Vmware Thanks, Koushik Das
RE: Review Request: CLOUDSTACK-988: HV version must be updated in hypervisor_version column of host table
I need to read HV version as part of CLOUDSTACK-672. It not just for consistency, the HV version was not getting updated in the correct place. From: Nitin Mehta [mailto:nore...@reviews.apache.org] On Behalf Of Nitin Mehta Sent: Friday, January 18, 2013 5:21 PM To: Alex Huang; Nitin Mehta Cc: cloudstack; Koushik Das Subject: Re: Review Request: CLOUDSTACK-988: HV version must be updated in hypervisor_version column of host table This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8993/ Is this just for the sake of consistency ? Was something affected because of this ? If yes, we need to take care of migration as well. - Nitin On January 17th, 2013, 12:46 p.m., Koushik Das wrote: Review request for cloudstack, Nitin Mehta and Alex Huang. By Koushik Das. Updated Jan. 17, 2013, 12:46 p.m. Description HV version is stored in 'hypervisor_version' column in host table wherever present. Also correctly populating 'version' column in host table with resource file version. Testing Verified that HV version is correctly updated in host table for XS and Vmware Bugs: CLOUDSTACK-988 Diffs * core/src/com/cloud/network/resource/TrafficSentinelResource.java (a13e080) * plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java (a444cfe) * plugins/network-elements/f5/src/com/cloud/network/resource/F5BigIpResource.java (c9c3711) * plugins/network-elements/juniper-srx/src/com/cloud/network/resource/JuniperSrxResource.java (f823ab8) * plugins/network-elements/netscaler/src/com/cloud/network/resource/NetscalerResource.java (afb0135) * plugins/network-elements/nicira-nvp/src/com/cloud/network/resource/NiciraNvpResource.java (12ed72a) * server/src/com/cloud/baremetal/ExternalDhcpResourceBase.java (cbfcfd1) * server/src/com/cloud/baremetal/PxeServerResourceBase.java (c307ccf) * server/src/com/cloud/resource/DummyHostServerResource.java (5144a91) * server/src/com/cloud/resource/ResourceManagerImpl.java (ffc09f0) View Diffhttps://reviews.apache.org/r/8993/diff/
RE: [DISCUSS] Global Server Load Balancing (GSLB) FS Design Document
Hi Murali, I am planning to take the QA job for this feature. Have reviewed the functional spec and have the following questions 1. As per the FS, we are going to have a region and zone level flag for GSLB capability. Why do we need a flag to be set at zone level ? As the cloud admin is going to enable GSLB service provider at physical network level, can we use this info to decide whether this physical network is enabled and used for GSLB rather at zone level 2. Are we going to use the same cloud. physical_network_service_providers table to store the services GSLB offering? Do we have the list of services which GSLB is going to offer? Can we add those db changes to FS? 3. Is the createGlobalLoadBalacerRule takes the weight parameter along with lb algo? can we update the same to API Changes? 4. Functional Requirements sections says statistics shall be collected for each of GSLB virtual server. a. What kind of statistics? Is it the statistics that give a picture about which site has more hits, load etc.. so that user can adjust the weights associated with virtual server to balance things? b. Are we also considering the traffic / bandwidth consumption resulted by request redirection from one site to the other (due to proximity or weight etc..)? are we recording those usage statistics for billing ? 5. what is the health monitoring workflow? Like if SLB vserver is down / GSLB vserver down. Is the CloudStack aware of this and reacts to it? 6. Can the cloud admin use same device to host GSLB vservers and SLB vservers ? 7. Is the planned design going to accommodate multiple devices (NetScalers) for hosting GSLB vservers in single physical network? 8. SLB provider can be anything right? It can be VR, VPC VR, VPX, etc..,? 9. Current design is considering requests going from GSLB virtual server to SLB vserver and how about a use case where user want to use GSLB to load balance request across zones that goes to static NAT rule / PF rule? 10. Is it a requirement in public clouds where tenant would ask for / wants to have his own domain name rather using *.xyztelco.com? did we consider such usecases in this design? 11. Can you also add all the admin API changes? Thanks, SWAMY -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Thursday, January 17, 2013 2:32 AM To: CloudStack DeveloperList Subject: Re: [DISCUSS] Global Server Load Balancing (GSLB) FS Design Document Thanks. Can you add the actual API parameters? Otherwise, LGTM. On 1/15/13 3:55 AM, Murali Reddy murali.re...@citrix.com wrote: I have update the FS [1] as per the review comments. Changes done are included in document history section. I would like to seek comments on one change added in FS. In CloudStak, at present there are no operations that require orchestration across zones. GSLB and EIP across zones [2] are two immediate features that require cross-zone orchestration. I would like to introduce notion of 'region' level services and corresponding service provider in to CloudStack. Please share your thoughts. [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/GSLB+(Global+Ser ver + Load+Balancing)+Functional+specification+and+Design+Document [2] https://issues.apache.org/jira/browse/CLOUDSTACK-652 On 11/01/13 2:32 PM, Murali Reddy murali.re...@citrix.com wrote: On 11/01/13 2:55 AM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: Thanks for the detailed and enlightening write-up*. I feel that the GSLB service is not a NetworkElement. NetworkElements are those that participate in the L2/L3 orchestration of VMs. GSLB providers do not do this. Thanks for the review Chiradeep. Sure, GSLB service, is indeed cross-zone service, does not fit in to NetWorkElement model. I will by-pass using NetWorkElement, and let GSLB orchestration send commands directly to agent representing the GSLB provider. It does not even participate in the existing Loadbalancer workflow. In fact I would assert that this is a completely different higher-level orchestration workflow that should not need to touch network elements or the network manager. You could even write this feature by orchestrating it using the end-user APIs. Agreed. GSLB orchestration need not be part of network manager, I will restrict it to service layer. I will update the spec and get back. *A lot of folks strive to format the document according to the template but the template is just to make sure that vital information is not missed. What ends up happening is that there's a lot of information, but incoherently organized. Nice job. On 1/8/13 12:52 PM, Murali Reddy murali.re...@citrix.com wrote: In continuation to my proposal [1], I am brining GSLB support separately for discussion. I have put up functional specification and design documentation at [2]. Please provide feedback, comments. Quick abstract of the feature: Today CloudStack supports load balancing
Re: [DISCUSS] refactoring the marvin integration library
On Fri, Jan 18, 2013 at 07:17:13AM +0530, Chiradeep Vittal wrote: +1. Sounds more like a new feature than a 'refactor'. What I'd like is a DSL-kind of experience (which is what cloudmonkey is tending to) Then we could use Lettuce or Cucumber to write some tests. Thanks Chiradeep, the marvin integration libraries have the same verbs that cloudmonkey uses infact. But don't quite provide a DSL experience. The CLI does this more automatically and better. While true DSL was not the intention of my proposal, I'll see if that can be provided. -- Prasanna.,
RE: Review Request: CloudStack-965: When a detailview action is prohibited, the operation dialog box should not show up in the mean time
Isaac, I really appreciate for all your efforts . Your patch looks good just that the refactoring of the code seemed to be a point of concern . I tested your patch and it seemed to be working fine . Perhaps you could send an updated patch by removing the whitespace errors and I can push it to asf/master. Thanks, Pranav -Original Message- From: Isaac Chiang [mailto:nore...@reviews.apache.org] On Behalf Of Isaac Chiang Sent: Thursday, January 17, 2013 7:05 PM To: Pranav Saxena Cc: cloudstack; Isaac Chiang Subject: Re: Review Request: CloudStack-965: When a detailview action is prohibited, the operation dialog box should not show up in the mean time On Jan. 17, 2013, 10:15 a.m., Pranav Saxena wrote: Your code changes look good . However , I have few concerns - 1) The patch doesn't apply cleanly because of trailing whitespace errors . Hence could you take care of these - home/pranav/Downloads/fix-cloudstack-965.patch:25: trailing whitespace. // Setup form validation /home/pranav/Downloads/fix-cloudstack-965.patch:27: trailing whitespace. $formContainer.find('input, select').each(function() { /home/pranav/Downloads/fix-cloudstack-965.patch:31: space before tab in indent. else { /home/pranav/Downloads/fix-cloudstack-965.patch:32: space before tab in indent. $(this).rules('add', {}); /home/pranav/Downloads/fix-cloudstack-965.patch:33: space before tab in indent. } 2) Is there any specific reason for moving/reorganizing a section of code in dialog.js from one point to other , though I know it won't affect anything. I believe , you could implement the same without moving the chunks of code here and there , just to maintain the code consistency and ordering. Please let me know if you have any concerns. Thanks ! Hi Pranav: The root cause of the issue, as I saw, is when the font-end is trying to make a dialog form, it takes fields from from the caller ( detailview-createForm-fields ). Once the field block contains an ajax call, e.g., migrate in instance.js : 867, It emits it. But it still do the rest of the code in createForm and shows the dialog form. I figured out few ways to solve the issue, including refactor entire workflow for creating the dialog form, but those are more than I can do right now. The patch isn't good but merely a tradeoff in my situation, just let you know. No matter what, hope the piece of code will help to identify the issue. I'll close the review request if it achieves its purpose, thanks :) - Isaac --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8992/#review15452 --- On Jan. 17, 2013, 8:09 a.m., Isaac Chiang wrote: --- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/8992/ --- (Updated Jan. 17, 2013, 8:09 a.m.) Review request for cloudstack and Pranav Saxena. Description --- The patch is to resolve CLOUDSTACK-965 issue which prevents from showing the error message and dialog form in the mean time. This addresses bug CLOUDSTACK-965. Diffs - ui/scripts/ui/dialog.js 5236bb6 Diff: https://reviews.apache.org/r/8992/diff/ Testing --- Thanks, Isaac Chiang
[jira] [Resolved] (CLOUDSTACK-803) HA gets triggered even when the host investigator is unable to determine the state of the host
[ https://issues.apache.org/jira/browse/CLOUDSTACK-803?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Koushik Das resolved CLOUDSTACK-803. Resolution: Fixed fixed in master with commit commit e45a9f3aed3f3ad2295848f2475a4a1ec478ee81 Author: Koushik Das koushik@citrix.com Date: Mon Jan 7 11:06:54 2013 +0530 CLOUDSTACK-803: HA gets triggered even when the host investigator is unable to determine the state of the host HA won't be triggered in case the host investigator is not able to determine the state Signed-off-by: Koushik Das koushik@citrix.com Signed-off-by: Abhinandan Prateek aprat...@apache.org HA gets triggered even when the host investigator is unable to determine the state of the host -- Key: CLOUDSTACK-803 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-803 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: pre-4.0.0, 4.0.0 Reporter: Koushik Das Assignee: Koushik Das Fix For: 4.0.2 CS tries to do HA on VMs if it finds that the host on which they are running is down. HA should only happen when CS is able to determine (host investigators return status as 'Down') that host is down. Currently due to a bug in code even if the hosts investigators are unable to determine state (returns 'null'), HA gets triggered. This results in unnecessary HA of VMs. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CLOUDSTACK-820) Events framework to publish/subscribe to CloudStack events
[ https://issues.apache.org/jira/browse/CLOUDSTACK-820?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557188#comment-13557188 ] Murali Reddy commented on CLOUDSTACK-820: - Quick update: I have basic publish/subscribe working with AMQP server as MOM. Current events (alerts, usage events, action events) are pushed to broker. Also introduced new type of events to track the cloud resource state change. I have added state machine to couple of objects (network, volume etc) and state change event generated for each transition. But I need to take care of some of the remaining resource object as well. I will spend time next week to resolve the pending issues and plan to merge into master by mid of next week. Events framework to publish/subscribe to CloudStack events --- Key: CLOUDSTACK-820 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-820 Project: CloudStack Issue Type: New Feature Security Level: Public(Anyone can view this level - this is the default.) Reporter: Murali Reddy Assignee: Murali Reddy Fix For: 4.1.0 Opening a bug to track the proposal [1][2] to provide a mechanism to publish and subscribe to events. [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/Event+Notification+Framework+Proposal [2]https://cwiki.apache.org/confluence/display/CLOUDSTACK/Event+Notification+with+message+oriented+middleware+Proposal -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[Discuss] FS review-VMWare(Supporting DRS, HA
Hi Hari, am the QA resource for this feature. I have reviewed the Functional spec and please find the review comments below: 1.Are we going to implement Cloudstack HA support for VMware or still will depend on Native HA. 2.Is the Cloudstack HA support for VMware is only for DRS enabled cluster. 3.Are we going to address open vmware vmsync issue as part of this feature enhancement. 4.please provide/update the FS with Flow/ implementation details ,like n How are we going to handle the power management n What happen CS and DRS tries to control the same vm at same time n How the CS will query/get info from DRS n Earlier when the DRS enabled ,CS has no idea where the VM moved but it will try to query all the hosts till it finds the moved VM by DRS and it will update the host as parent host. Now how this behaviour will work with your implementation. n How the Cloudstack handle VM replacement when after Vm has been started 5.DRS with fully automated will impact host/cluster performance and network. Not sure why we added as requirement in FS (CloudStack must be able to support HA, load balancing and power management in a DRS cluster that is setup in a fully automated fashion )is there any specific reason. Regards Sadhu
[jira] [Updated] (CLOUDSTACK-891) QA High Availability: EIP enhancements feature
[ https://issues.apache.org/jira/browse/CLOUDSTACK-891?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sudha Ponnaganti updated CLOUDSTACK-891: Assignee: venkata swamybabu budumuru (was: Sangeetha Hariharan) QA High Availability: EIP enhancements feature -- Key: CLOUDSTACK-891 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-891 Project: CloudStack Issue Type: Sub-task Security Level: Public(Anyone can view this level - this is the default.) Components: Test Reporter: Chip Childers Assignee: venkata swamybabu budumuru Fix For: 4.1.0 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CLOUDSTACK-1011) KVM host getting disconnected in cluster environment
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557301#comment-13557301 ] Rayees Namathponnan commented on CLOUDSTACK-1011: - Hosts are up after upgrading this build, we are testing now KVM host getting disconnected in cluster environment - Key: CLOUDSTACK-1011 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1011 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: KVM Affects Versions: 4.1.0 Environment: Build from network-refactor KVM Reporter: Rayees Namathponnan Assignee: Kishan Kavala Fix For: 4.1.0 Attachments: Agent_Log.rar Steps to reproduce Create advanced zone with 2 zones First zone : 1 POD, 1 Cluster and 2 hosts Second zone : 1 POD, 1 Cluster and 1 host Expected result System Vms should come up successfully, and KVM host should be in connected state always Actual Result KVM agent disconnected after some time, i can see below null pointer exception in KVM agent log; then tried to restart agent and libvert, but still agent not able to connect with MS 2013-01-18 03:21:01,210 WARN [cloud.agent.Agent] (agentRequest-Handler-1:null) Caught: java.lang.NullPointerException at com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStorageAdaptor(KVMStoragePoolManager.java:41) at com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStoragePool(KVMStoragePoolManager.java:66) at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.cleanupDisk(LibvirtComputingResource.java:3153) at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.execute(LibvirtComputingResource.java:2687) at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:968) at com.cloud.agent.Agent.processRequest(Agent.java:525) at com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:852) at com.cloud.utils.nio.Task.run(Task.java:83) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) at java.lang.Thread.run(Thread.java:679) 2013-01-18 03:21:01,432 WARN [cloud.agent.Agent] (agentRequest-Handler-1:null) Caught: java.lang.NullPointerException at com.cloud.hypervisor.kvm.storage Additional information : I was looking Zone 1 's (adv-Kvm-Zone1) dashboard - Storage, here storage is Allocated : 0.00 KB / 0.00 KB -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: Messaging Subscriber Process - Was: ([Discuss] SNMP Alerts support in CloudStack)
On Mon, Jan 7, 2013 at 8:02 AM, Murali Reddy murali.re...@citrix.com wrote: On 04/01/13 8:19 PM, Chip Childers chip.child...@sungard.com wrote: Splitting this out of the SNMP thread, as I think it needs it's own discussion. On Thu, Jan 3, 2013 at 6:56 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: Why would CloudStack need an API to register subscribers? Wouldn¹t they directly go to the broker? I agree. Shouldn't the subscription process be delegated to the broker itself? Do not think message broker by themselves are not necessarily directly exposed for subscription. I think you still need a service through which to register endpoint (web call back URL or SMS etc) to receive notifications. For e.g in public cloud, if tenant's on-premise monitoring component wish to receive notification for occurrence of event he can register a endpoint with notification service which acts as proxy for broker. Though, I agree that notification service it self, need not be part of CloudStack. So if I understand this correctly, the message bus is only used by the management server as a queue for events to forward to some other endpoint? That doesn't jive with the diagram here: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Event+Notification+with+message+oriented+middleware+Proposal Sorry If I'm not understanding correctly, but I'm highly interested. On 12/20/12 3:46 AM, Murali Reddy murali.re...@citrix.com wrote: Hey Murali, Great to hear about where you stand right now. Is the code (work in progress obviously) available on one of the branches? I'd love to take a look at it. -chip Chip I have been using 'events-framework' branch for this work. Please take a look at 'framework/events/src/org/apache/cloudstack/framework/events' for event bus abstraction and the specific AMQP client implementation and 'plugins/event-bus/rabbitmq/src/org/apache/cloudstack/mom/rabbitmq' for a Rabbit AM AMQP client that implements EventBus. Thanks, Murali
Fwd: NetScaler lib/sdk jars are apache licensed
Hi Vijay, Any update on this? If we want to switch the netscaler plugins over to the OSS build for 4.1.0, we'd need this to be in place pretty soon (like next week). On Wed, Jan 9, 2013 at 1:06 PM, Vijay Venkatachalam vijay.venkatacha...@citrix.com wrote: Thanks Prasanna for the link. Yes to make Netscaler's plugin / resource code to be part of OSS build is the intent. -Vijay -Original Message- From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of Prasanna Santhanam Sent: Wednesday, January 09, 2013 5:57 PM To: cloudstack-dev@incubator.apache.org Subject: Re: NetScaler lib/sdk jars are apache licensed On Wed, Jan 09, 2013 at 05:43:38PM +0530, Vijay Venkatachalam wrote: Hugo/Chip/David, The NetScaler build team is looking at ways to upload the SDK files for each release online. This archive zip file will be uploaded online for each release of NetScaler and will contain License, Java src, Java Samples, SDK jars, SDK html docs. For the second part of uploading the jar files to a maven repository what should be done to automate? Is there a public repository which can be updated for each release of netscaler with its jar files? Or Is it good to have Citrix host its own maven repository? How to do that? Also, what is the procedure to make CS build refer to this repository as well during its build. Vijay - you might want to push netscaler jar to maven central. Can you check this- http://maven.apache.org/guides/mini/guide-central-repository- upload.html Once done - we can enable our build on builds.a.o to build netscaler as well. I think it's still in the nonoss profile so it's notbuilding by default. -- Prasanna.,
Re: [DISCUSS] Support for Intel TXT technology
On Wed, Jan 9, 2013 at 3:37 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: This came in as I was following up on action item from IRC today. This feature is something that has already been developed before ACS 4.0 and processes were formalized and also had been demonstrated in public forms such as in Intel Developers Forum last Sept but somehow missed getting filed. Can we consider it as an exception and take it for 4.1. I understand we are few days past cutoff, I will ensure we are more diligent in future. Animesh Just to close the loop on this. I'm not sure that this is even progressing enough to make it in by out feature freeze date (if it is, it's not visible to the rest of the community). Is the request to include it in 4.1.0 a moot point? -Original Message- From: David Nalley [mailto:da...@gnsa.us] Sent: Wednesday, January 09, 2013 11:46 AM To: cloudstack-dev@incubator.apache.org Cc: cloudstack-us...@incubator.apache.org Subject: Re: [DISCUSS] Support for Intel TXT technology On Wed, Jan 9, 2013 at 2:40 PM, Hari Kannan hari.kan...@citrix.com wrote: Hello All, I wish to propose Support for Intel TXT for Cloud Use cases - I have added some details here https://cwiki.apache.org/confluence/display/CLOUDSTACK/Support+for+Int el+TXT+Technology along with a JIRA ticket https://issues.apache.org/jira/browse/CLOUDSTACK-939 Please review and comment Hari Kannan I've commented on the ticket. This has come in after our agreed proposal deadline, so I've changed the targeted version to Future. --David
RE: Build SystemVM template
Donal, Did you have Xen guest tool installed on system VM? Thanks ilya -Original Message- From: Donal Lafferty [mailto:donal.laffe...@citrix.com] Sent: Friday, January 18, 2013 6:15 AM To: cloudstack-dev@incubator.apache.org Subject: RE: Build SystemVM template You might want to check the XenServer support. I had problems with detaching VDIs on Wheezy on XenServer March/April 2012. There was no reason to report the problem at the time, because XenServer didn't cite Wheezy as a supported guest OS. Also, I expect I was using an older build. DL -Original Message- From: Rohit Yadav [mailto:rohit.ya...@citrix.com] Sent: 18 January 2013 02:47 To: cloudstack-dev@incubator.apache.org Subject: Re: Build SystemVM template On 17-Jan-2013, at 6:10 PM, Sheng Yang sh...@yasker.org wrote: On Thu, Jan 17, 2013 at 5:07 PM, Rohit Yadav rohit.ya...@citrix.com wrote: Hi Sheng, we can reuse viewee and vagrant based appliance building code for devcloud for systemvm. We can use debian wheezy i386 beta4 for now and when it releases in february we can have another round of building/testing. Sure, is there a document for it? Also, I didn't see a release date for Wheezy... Do you have reference? tools/devcloud/README.md (it can have bugs, help fix it wherever you see improvement) Once you build systemvm, you can export and convert the disk image from vmdk/vhd to qcow2/vhd/vmdk etc. Wheezy should release in Feb like the last two releases in 2009 and 2011, but it's not confirmed. Regards. --Sheng Regards. On 17-Jan-2013, at 4:18 PM, Sheng Yang sh...@yasker.org wrote: Hi, I just found the buildsystemvm.sh won't work, and I need to build a new systemvm template for IPv6 support, because we're adding new softwares in it. Apparently due to license issue(I guess),xt_CHECKSUM.ko which is a extension of iptables to fix one Debian/Ubuntu DHCP issue. I believe the iptables_1.4.8-3local1checksum1_i386.deb(a patched version of iptables by us) is also removed, as well as xe-guest-utilities_5.6.0-595_i386.deb. So, what we suppose to do to make systemvm template buildable again? I know there are some licenses issues involved, but not quite clear on these. --Sheng
RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix.
+1 -Original Message- From: Koushik Das [mailto:koushik@citrix.com] Sent: Friday, January 18, 2013 3:09 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. +1 -Original Message- From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com] Sent: Friday, January 18, 2013 9:43 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. +1 (binding) On 18/01/13 2:34 AM, Rohit Yadav rohit.ya...@citrix.com wrote: +1 (binding) From: Animesh Chaturvedi [animesh.chaturv...@citrix.com] Sent: Thursday, January 17, 2013 11:04 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. +1 -Original Message- From: prasanna [mailto:srivatsav.prasa...@gmail.com] On Behalf Of Prasanna Santhanam Sent: Thursday, January 17, 2013 8:50 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix. On Thu, Jan 17, 2013 at 04:17:58PM +0530, Murali Reddy wrote: I would like to call a vote for the Apache CloudStack project to accept a donation from Citrix to provide Optional Public IP assignment for EIP with Basic Zone. The functional specification is available at [1] and has been discussed [2] with no outstanding issues. Bug 265 [3] opened to track this feature. Patch [4] and MD5 [5] files are made available at below links [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/Optional+Pub lic +IP+assignment+for+EIP+with+Basic+Zone [2] http://markmail.org/thread/b2h2cw62qnryk4qh [3] https://issues.apache.org/jira/browse/CLOUDSTACK-265 [4] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265- provide-o pti on-to-turn-off-automatic-.patch [5] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265- provide-o pti on-to-turn-off-automatic-.patch.md5 +1 (binding) -- Prasanna.,
RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix
+1 -Original Message- From: Rajesh Battala [mailto:rajesh.batt...@citrix.com] Sent: Friday, January 18, 2013 3:05 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix +1 -Original Message- From: Abhinandan Prateek [mailto:abhinandan.prat...@citrix.com] Sent: Friday, January 18, 2013 9:51 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix +1 (binding) On 18/01/13 3:32 AM, Chip Childers chip.child...@sungard.com wrote: On Thu, Jan 17, 2013 at 12:41 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this +enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. IMO, this is small enough not to qualify as substantial. I would be OK with this vote being cancelled, and a lazy consensus being reached to simply have Anthony commit it (using his ICLA as the contractual support for the donation). That being said, if we progress down the IP clearance path for this patch, here's my vote: +1 (binding) -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Wednesday, January 16, 2013 4:39 PM To: cloudstack-dev@incubator.apache.org Subject: [IP Clearance: CLOUDSTACK-737] support security group enabled network in advanced zone Hi folks, I'd like to start the IP clearance process for the Citrix feature - support security group enabled network in advanced zone https://issues.apache.org/jira/browse/CLOUDSTACK-737 Citrix would like to donate this feature to Apache CloudStack, In 4.0, security group is only supported in basic zone, this feature is to add security group in advanced zone, then user can isolate VMs in the same guest network. Here is FS, https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+base d + on+ Security+Groups+in+Advance+zone This donation is a subset of the feature according to the FS Only support KVM Only support one zone-wide security-enabled shared network Rest of this feature will be developed in Apache This is discussion thread http://markmail.org/message/cle3d64ci6pobs2i here is patch[Animesh] http://people.apache.org/~anthonyxu/ Thanks, Anthony
[jira] [Commented] (CLOUDSTACK-602) Warn of dependency on mkisofs
[ https://issues.apache.org/jira/browse/CLOUDSTACK-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557368#comment-13557368 ] Radhika Nair commented on CLOUDSTACK-602: - After I installed Cloudstack, there was no indication that the installation failed. Then I tried to log into the Management Server UI, it would not let me and gave no indication of why. Yes, the impact is not being able to log into the UI. Yes, just running ln -s /usr/bin/genisoimage /usr/bin/mkisofs from the management server machine ... and then rerunning the install management server script ... worked You see, the install script assumes that mkisofs is on the server machine, but Debian/Ubuntu install genisoimage instead. Putting this info in Troubleshooting would help a lot of people. Ideally, the install script would simply check to see whether mkisofs or genisoimage is on the system, and use which ever one is installed. But in the interim, this info in Troubleshooting should help a lot of people wanting to use Cloudstack on Debian based systems. Mel. Warn of dependency on mkisofs - Key: CLOUDSTACK-602 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-602 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Doc Affects Versions: 4.1.0 Environment: debian Reporter: Mel Davis Assignee: Radhika Nair Priority: Trivial cloud-setup-management fails quietly if /usr/bin/mkisofs is no found. Failure is indicated only in the /var/log/cloud/management/management-server.log.This results in the inability to log into client via the web interface. The docs should at least note the dependency and, maybe, suggest this workaround: ln -s /usr/bin/genisoimage /usr/bin/mkisofs -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
RE: Build SystemVM template
I was using Xen guest tools, but not for a System VM. Instead, I was using the VM to write disk images to volumes from within my CloudStack account. Details of the bug are below. Changing from Debian 7.0 to Debian6.0.5 appears to have solved problem. ... Donal Lafferty - 6/18/12 6:42:10 PM os.fsync is not properly supported by the underlying Dom0 drivers. Problem seems to be that they do not advertise the feature-flush-cache capability. Instead, they advertise feature-barriers, but they do not implement it. As a result, you get the following messages: Jun 18 23:53:39 debian70min kernel: [ 186.884574] blkfront: barrier: empty write xvdc op failed Jun 18 23:53:39 debian70min kernel: [ 186.884587] blkfront: xvdc: barrier or flush: disabled Jun 18 23:53:39 debian70min kernel: [ 187.355316] vbd vbd-51744: 16 Device in use; refusing to close Jun 18 23:53:39 debian70min kernel: [ 187.414507] block xvdc: releasing disk See https://bugs.launchpad.net/ubuntu/+source/linux/+bug/824089 a good description of the issue is in comment #41. Other references: http://www.gossamer-threads.com/lists/xen/users/226266 found via http://xen.1045712.n5.nabble.com/Xen-block-drivers-and-barrier-support-td5709209.html Donal Lafferty - 6/22/12 9:10:55 AM Updated workerVM O/S to Debian6.0.5. The messages in /var/log now say: Jun 22 13:53:35 workerVM kernel: [ 51.765136] blkfront: xvdc: barriers enabled Tested that Attach / Detach errors no longer occur. -Original Message- From: Musayev, Ilya [mailto:imusa...@webmd.net] Sent: 18 January 2013 16:47 To: cloudstack-dev@incubator.apache.org Subject: RE: Build SystemVM template Donal, Did you have Xen guest tool installed on system VM? Thanks ilya -Original Message- From: Donal Lafferty [mailto:donal.laffe...@citrix.com] Sent: Friday, January 18, 2013 6:15 AM To: cloudstack-dev@incubator.apache.org Subject: RE: Build SystemVM template You might want to check the XenServer support. I had problems with detaching VDIs on Wheezy on XenServer March/April 2012. There was no reason to report the problem at the time, because XenServer didn't cite Wheezy as a supported guest OS. Also, I expect I was using an older build. DL -Original Message- From: Rohit Yadav [mailto:rohit.ya...@citrix.com] Sent: 18 January 2013 02:47 To: cloudstack-dev@incubator.apache.org Subject: Re: Build SystemVM template On 17-Jan-2013, at 6:10 PM, Sheng Yang sh...@yasker.org wrote: On Thu, Jan 17, 2013 at 5:07 PM, Rohit Yadav rohit.ya...@citrix.com wrote: Hi Sheng, we can reuse viewee and vagrant based appliance building code for devcloud for systemvm. We can use debian wheezy i386 beta4 for now and when it releases in february we can have another round of building/testing. Sure, is there a document for it? Also, I didn't see a release date for Wheezy... Do you have reference? tools/devcloud/README.md (it can have bugs, help fix it wherever you see improvement) Once you build systemvm, you can export and convert the disk image from vmdk/vhd to qcow2/vhd/vmdk etc. Wheezy should release in Feb like the last two releases in 2009 and 2011, but it's not confirmed. Regards. --Sheng Regards. On 17-Jan-2013, at 4:18 PM, Sheng Yang sh...@yasker.org wrote: Hi, I just found the buildsystemvm.sh won't work, and I need to build a new systemvm template for IPv6 support, because we're adding new softwares in it. Apparently due to license issue(I guess),xt_CHECKSUM.ko which is a extension of iptables to fix one Debian/Ubuntu DHCP issue. I believe the iptables_1.4.8-3local1checksum1_i386.deb(a patched version of iptables by us) is also removed, as well as xe-guest-utilities_5.6.0-595_i386.deb. So, what we suppose to do to make systemvm template buildable again? I know there are some licenses issues involved, but not quite clear on these. --Sheng
RE: [DISCUSS] Security Groups Isolation in Advanced Zone
Thanks for comments, It is nice to have security group in NIC level checked AWS, which is implemented with Elastic Network Interfaces (ENI), but when deploy VM , all NICs of the VM are associated with same security groups, which is the same as what we did in the FS. Maybe we can implement NIC-level security group after we have VM NIC hot plug feature( something like ENI) in 4.2. Anthony -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Thursday, January 17, 2013 5:29 PM To: CloudStack DeveloperList Subject: Re: [DISCUSS] Security Groups Isolation in Advanced Zone I don't think that's what Anthony is saying. I think he is saying that if a VM is in security groups X,Y,Z, then ALL nics of the VM are in security groups X,Y,Z. The AWS-compatible way is that nics are associated with the security group. So, VM's eth0 can be in security group Z and eth1 can be in security group X I think we should do it this way. On 1/16/13 5:35 PM, kdam...@apache.org kdam...@apache.org wrote: So the VM will determine it's own participation level. A VM can have networks with SG and without at the same time. If that's the case this feature proposal just got more awesome! -kd -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Wednesday, January 16, 2013 5:21 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone Correct, there are several types of guest shared network, Zone-wide guest shared network Domain-wide guest shared network Account-specific guest share network One VM can be on multiple networks, SG is on VM level, means SG will be applied to all NICs of this VM. Cheers, Anthony -Original Message- From: Kelcey Damage (BT) [mailto:kel...@backbonetechnology.com] On Behalf Of kdam...@apache.org Sent: Wednesday, January 16, 2013 5:17 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone Got it, So we are still only talking about SG on advanced shared networks. Thanks. -kd -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Wednesday, January 16, 2013 5:11 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone In this spec, security group is only supported in shared guest network, we might add isolated guest network support later. I have a concern about this, normally there is firewall for isolated network, if security group is added to isolated network, that means if user wants to allow some kind ingress traffic , he might need to program both security group and firewall, it might be inconvenient for user. As for ACL, are you referring to ACL in VPC? in this spec, VPC is not supported due to the similar reason of isolated guest network, user might need to handle ACL and security group at the same time. Anthony -Original Message- From: Kelcey Damage (BT) [mailto:kel...@backbonetechnology.com] Sent: Wednesday, January 16, 2013 4:55 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone So to catch myself up, this will allow functional security group isolation/ACLs on both 'shared' and 'isolated' networks? -kd -Original Message- From: Animesh Chaturvedi [mailto:animesh.chaturv...@citrix.com] Sent: Wednesday, January 16, 2013 1:36 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone Folks please pass on comments if any, otherwise it is assumed that the spec is approved by the community -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Friday, January 11, 2013 3:53 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Security Groups Isolation in Advanced Zone https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+based +on+ Security+Groups+in+Advance+zone This is upgraded spec , Compared to original one, following are major changes 1. SG enabled is zone wide parameter, if this zone is SG enabled, all guest networks in this zone must be SG enabled. 2. support all shared network types, includes zone-wide shared network, domain-wide shared networks and account-specific share networks 3. support multiple SG enabled networks in one SG enabled zone. 4. VM can be on multiple SG enabled networks 5. SG rules apply to all NICs for a VM 6. support both KVM and XenServer. Comments, question, suggestion and flame are welcome! Thanks, Anthony -Original Message- From: Dave Cahill
[jira] [Updated] (CLOUDSTACK-1007) Not able to delete Shared network because of not being able to stop the router.
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1007?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sangeetha Hariharan updated CLOUDSTACK-1007: Summary: Not able to delete Shared network because of not being able to stop the router. (was: Not able to delete Shared network.) Not able to delete Shared network because of not being able to stop the router. --- Key: CLOUDSTACK-1007 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1007 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: 4.1.0 Environment: Build from network-refactor Reporter: Sangeetha Hariharan Fix For: 4.1.0 Attachments: agent.log, agent.log.2013-01-17.gz, management-server.zip Steps to reproduce the problem: Set up - Advanced zone with KVM host. Create a Zone wide Shared network. Deploy Vm using this network. Destroy this Vm. Wait for the Vm to get Expunged. Delete the network. Network deletion fails because we are not able to destroy the router. Management server logs: 2013-01-17 18:05:31,818 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-6:job-34) Sending destroy to com.cloud.network.element.VirtualRouterElement$$EnhancerByCGLIB$$d659f5e7@447d4275 2013-01-17 18:05:31,820 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (Job-Executor-6:job-34) Attempting to destroy router 10 2013-01-17 18:05:31,840 DEBUG [cloud.capacity.CapacityManagerImpl] (Job-Executor-6:job-34) VM state transitted from :Running to Stopping with event: StopRequestedvm's original host id: 1 new host id: 1 host id before state transition: 1 2013-01-17 18:05:31,850 DEBUG [agent.transport.Request] (Job-Executor-6:job-34) Seq 1-772669469: Sending { Cmd , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 100111, [{StopCommand:{isProxy:false,vmName:r-10-VM,wait:0}}] } 2013-01-17 18:05:33,284 DEBUG [cloud.server.StatsCollector] (StatsCollector-2:null) HostStatsCollector is running... 2013-01-17 18:05:33,883 DEBUG [agent.transport.Request] (StatsCollector-2:null) Seq 1-772669470: Received: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 10, { GetHostStatsAnswer } } 2013-01-17 18:05:36,715 DEBUG [cloud.api.ApiServlet] (catalina-exec-1:null) ===START=== 10.217.252.59 -- GET command=queryAsyncJobResultjobId=82e583fa-7829-4396-a2f7-4358e2abba80response=jsonsessionkey=hd3IkmVY5KODN5MiyOXg%2FapVTb4%3D_=1358464170203 2013-01-17 18:05:36,746 DEBUG [cloud.api.ApiServlet] (catalina-exec-1:null) ===END=== 10.217.252.59 -- GET command=queryAsyncJobResultjobId=82e583fa-7829-4396-a2f7-4358e2abba80response=jsonsessionkey=hd3IkmVY5KODN5MiyOXg%2FapVTb4%3D_=1358464170203 2013-01-17 18:05:38,232 DEBUG [agent.transport.Request] (AgentManager-Handler-15:null) Seq 1-772669469: Processing: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, [{Answer:{result:false,details:java.lang.NullPointerException\n\tat com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStorageAdaptor(KVMStoragePoolManager.java:41)\n\tat com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStoragePool(KVMStoragePoolManager.java:66)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.cleanupDisk(LibvirtComputingResource.java:3153)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.execute(LibvirtComputingResource.java:2687)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:968)\n\tat com.cloud.agent.Agent.processRequest(Agent.java:525)\n\tat com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:852)\n\tat com.cloud.utils.nio.Task.run(Task.java:83)\n\tat java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)\n\tat java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)\n\tat java.lang.Thread.run(Thread.java:679)\n,wait:0}}] } 2013-01-17 18:05:38,232 DEBUG [agent.manager.AgentAttache] (AgentManager-Handler-15:null) Seq 1-772669469: No more commands found 2013-01-17 18:05:38,232 DEBUG [agent.transport.Request] (Job-Executor-6:job-34) Seq 1-772669469: Received: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, { Answer } } 2013-01-17 18:05:38,232 WARN [cloud.vm.VirtualMachineManagerImpl] (Job-Executor-6:job-34) Unable to stop vm VM[DomainRouter|r-10-VM] 2013-01-17 18:05:38,299 DEBUG [cloud.capacity.CapacityManagerImpl] (Job-Executor-6:job-34) VM state transitted from :Stopping to Running with event: OperationFailedvm's original host id: 1 new host id: 1 host id before state transition: 1 2013-01-17 18:05:38,300 DEBUG
Re: Messaging Subscriber Process - Was: ([Discuss] SNMP Alerts support in CloudStack)
So if I understand this correctly, the message bus is only used by the management server as a queue for events to forward to some other endpoint? Chip, Message bus is just abstraction (with publish, subscribe, unsubscribe semantics), used to push action events, alerts, usage events and resource state changes to external message broker. Any component (core component or plugin) in CloudStack can both publish and subscribe to the events.While one model is for external (non-cloudstack) component to directly get the notification from message broker directly. An e.g. of this model is vCloud director-AMQP broker-vCloud orchestrator. Other model is like amazon SNS[2] suitable for public clouds where users can manage the subscriptions and endpoints. My intent of the diagram was to convey the possibility of pluggable service extension in CloudStack which can achieve this. [1] http://www.vcoteam.info/learn-vco/extend-vcloud-director-with-vcenter-orche strator.html [2] http://aws.amazon.com/sns/ p.s. Sorry, was busy with other work items, and was not actively working to give update on progress. I am trying to close the pending issues and planning to merge mid of next week. That doesn't jive with the diagram here: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Event+Notification+ with+message+oriented+middleware+Proposal Sorry If I'm not understanding correctly, but I'm highly interested.
Re: JVM level cluster deployments
It may help to remove the UI from the model -- the UI does not guarantee a stateful session. The UI interacts with the management server using end-user API calls. Mutating API calls generally have 2 steps: 1. Create / modify the entity in the db 2. Call the backend provisioning steps. This is the orchestration engine. All backend provisioning happens asynchronously. The asynchronous job queue is a database table. If a job is incomplete due to a management server failure, other servers in the cluster are expected to roll the provisioning forward or roll it back. On 1/17/13 9:16 PM, Adnan Ashraf mohammad.adnan.ash...@gmail.com wrote: Thanks for the feedback. so how does CloudStack provide HA/failover guarantees? (not just the apache CloudStack but also the Citrix enterprise CloudPlatform and cloudPortal/CPBM)? A service provider using CloudStack would expect nothing breaks from two angle: user's perspective and back-end provisioning services. During provisioning of a VPC (which has many atomic steps) or in the middle of VM creation process, the application dies (for whatever reason). This case could easily result in half-baked (bad data) situation and abandoned workflows loosing the provisioning process. What workarounds or maybe persistent state based retries or logic is in place for this situation? Adnan On Thu, Jan 17, 2013 at 7:56 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: As far as I know no one deploys in this manner. On 1/17/13 6:30 AM, Adnan Ashraf mohammad.adnan.ash...@gmail.com wrote: Hi, I would appreciate if anyone can provide feedback on following questions: Roughly what is the number of cloudStack deployments that are in JVM (tomcat or other server) cluster mode where all session objects, http sessions, beans etc are seamlessly failed over to the other node in case one of the node in the cluster deployment goes out of service and the user sessions carry as if nothing happened in the background. What percent of customers choose not to deploy cloudstack in a cluster mode and why? What is the largest known cluster size in deployment today? thanks regards, Adnan
Re: [VOTE] Accept a donation of Documentation for various features from Citrix
+1. On 1/18/13 12:00 AM, Sateesh Chodapuneedi sateesh.chodapune...@citrix.com wrote: +1 -Original Message- From: Jessica Tomechak [mailto:jessica.tomec...@gmail.com] Sent: 18 January 2013 12:15 To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of Documentation for various features from Citrix -Original Message- From: Chip Childers [mailto:chip.child...@sungard.com] Sent: Thursday, January 17, 2013 1:51 PM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE] Accept a donation of Documentation for various features from Citrix On Thu, Jan 17, 2013 at 12:48 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE. Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this +enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. Content Location: http://people.apache.org/~jtomechak I think it would be best to have an archive file, and an md5 checksum to go along with it. I'd like to vote for those artifacts instead of what's provided please. It will make the ip clearance process easier. I have provided an archive file and checksum. However I wonder whether it would be better to provide separate files for each feature, so they can be voted on separately. Please let me know. Jessica T. -Original Message- From: Jessica Tomechak [mailto:jessica.tomec...@citrix.com] Sent: Tuesday, January 15, 2013 7:05 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [IP Clearance] Potential issues On people.apache.org/~jtomechak, I have posted all my docs related to the bug items in the IP Clearance list which Animesh provided. I have made notations in the Doc sub-task of each bug, so that anyone reviewing the proposed feature can easily find the documentation. In addition, I made a note for myself of the doc status of each bug in that list, and here it is for anyone who is interested! CLOUDSTACK-774 : Code in ACS repo: No Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 5000 lines Contributor : Frank IP Clearance needed initial recommendation: Yes Docs: None exist. This was not announced or supported as a Citrix CP 3.0.6 feature. CLOUDSTACK-306 : Code in ACS repo: Yes Functional Spec Posted: Yes Community Discussion Done: Yes in October Contribution Size Approx: 1500 lines Contributor : Sheng IP Clearance needed initial recommendation: Yes Docs: Already submitted via reviewboard. Link and info in doc subtask. CLOUDSTACK-777/700 : Code in ACS repo: Yes Functional Spec Posted: No Community Discussion Done: Yes Contribution Size Approx: 500 lines Contributor : Kishan/Jayapal/Rajesh/Murali IP Clearance needed initial recommendation: Yes Docs: Pending on reviewboard. URL and notations in the doc subtask of the bug. CLOUDSTACK-778/319 : Code in ACS repo: No Functional Spec Posted: No Community Discussion Done: Yes Contribution Size Approx: should be small Contributor : Vijayendra IP Clearance needed initial recommendation: This is a trivial issue so may be no Docs: Pending on reviewboard. Info is in the doc subtask of the bug. CLOUDSTACK-299 : Code in ACS repo: UI code is there but backend is not Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 1400 lines Contributor : Jayapal IP Clearance needed initial recommendation: Yes Docs: Pending on reviewboard. Link is provided in the description of the bug. CLOUDSTACK-297 : Code in ACS repo: No, but posted on review board Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 350 lines Contributor : Hari IP Clearance needed initial recommendation: Docs: One paragraph of new docs on people.a.o. The URL is noted in the doc subtask of the bug. http://people.apache.org/~jtomechak/CLOUDSTACK-297/ CLOUDSTACK-197 : Code in ACS repo: Multiple patches posted on review board Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 3000 lines Contributor : Likitha IP Clearance needed initial recommendation: No, since incremental patches were posted over a period Docs: Believe docs already exist, authored on the community side by Sebastien G. CLOUDSTACK-192 : Code in ACS repo: No Functional Spec Posted: Yes Community Discussion Done: Yes, but no consensus reached Contribution Size Approx: 1000 lines Contributor : Sanjay IP Clearance needed initial recommendation: Yes, if community agrees to feature inclusion Docs: On people.a.o. The
Re: [MERGE] network refactoring, phase 1
Fixed On 1/18/13 1:54 AM, Pradeep Soundararajan pradeep.soundarara...@citrix.com wrote: http://jenkins.cloudstack.org/view/master/job/build-master-nonoss-rhel63/ Yes, it is started breaking from build # 34. http://jenkins.cloudstack.org/view/master/job/build-master-nonoss-rhel63/3 4/console Till 33, it went fine... Thanks, Pradeep S -Original Message- From: Min Chen [mailto:min.c...@citrix.com] Sent: Friday, January 18, 2013 11:19 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [MERGE] network refactoring, phase 1 Nonoss build is broken in master branch, not sure if it is related to this merge? [ERROR] Failed to execute goal org.apache.maven.plugins:maven-compiler-plugin:2.5.1:compile (default-compile) on project cloud-plugin-network-f5: Compilation failure [ERROR] /Users/minc/dev/cloud-asf/plugins/network-elements/f5/src/com/cloud/networ k /element/F5ExternalLoadBalancerElement.java:[499,27] cannot find symbol [ERROR] symbol : method isNetworkInlineMode(com.cloud.network.Network) [ERROR] location: interface com.cloud.network.NetworkModel [ERROR] - [Help 1] Thanks -min On 1/17/13 5:15 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: Merge done. Tool issue. On 1/16/13 11:21 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: Having problems with the merge. ETA is Thursday evening PST. On 1/16/13 3:40 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: OK , will re-do the merge and re-test and commit by EOD On 1/16/13 1:56 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Chiradeep Are you waiting on revert for 312? Murali reverted it today Thanks Animesh -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Friday, January 11, 2013 1:08 PM To: CloudStack DeveloperList Subject: Re: [MERGE] network refactoring, phase 1 I'm going to wait on the reverts for CLOUDSTACK-306 and CLOUDSTACK-312 On 1/11/13 12:15 PM, Alex Huang alex.hu...@citrix.com wrote: +1 - with an assumption that Alex and others are OK with it +(since the javelin branch merge was proposed first). +1 We're struggling with the merge right now so one more merge is not going to hurt very much. --Alex
[jira] [Commented] (CLOUDSTACK-1007) Not able to delete Shared network because of not being able to stop the router.
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1007?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557432#comment-13557432 ] Sudha Ponnaganti commented on CLOUDSTACK-1007: -- Marcus, does this have anything to do with the fix you have provided for 1011 Not able to delete Shared network because of not being able to stop the router. --- Key: CLOUDSTACK-1007 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1007 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: 4.1.0 Environment: Build from network-refactor Reporter: Sangeetha Hariharan Fix For: 4.1.0 Attachments: agent.log, agent.log.2013-01-17.gz, management-server.zip Steps to reproduce the problem: Set up - Advanced zone with KVM host. Create a Zone wide Shared network. Deploy Vm using this network. Destroy this Vm. Wait for the Vm to get Expunged. Delete the network. Network deletion fails because we are not able to destroy the router. Management server logs: 2013-01-17 18:05:31,818 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-6:job-34) Sending destroy to com.cloud.network.element.VirtualRouterElement$$EnhancerByCGLIB$$d659f5e7@447d4275 2013-01-17 18:05:31,820 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (Job-Executor-6:job-34) Attempting to destroy router 10 2013-01-17 18:05:31,840 DEBUG [cloud.capacity.CapacityManagerImpl] (Job-Executor-6:job-34) VM state transitted from :Running to Stopping with event: StopRequestedvm's original host id: 1 new host id: 1 host id before state transition: 1 2013-01-17 18:05:31,850 DEBUG [agent.transport.Request] (Job-Executor-6:job-34) Seq 1-772669469: Sending { Cmd , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 100111, [{StopCommand:{isProxy:false,vmName:r-10-VM,wait:0}}] } 2013-01-17 18:05:33,284 DEBUG [cloud.server.StatsCollector] (StatsCollector-2:null) HostStatsCollector is running... 2013-01-17 18:05:33,883 DEBUG [agent.transport.Request] (StatsCollector-2:null) Seq 1-772669470: Received: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 10, { GetHostStatsAnswer } } 2013-01-17 18:05:36,715 DEBUG [cloud.api.ApiServlet] (catalina-exec-1:null) ===START=== 10.217.252.59 -- GET command=queryAsyncJobResultjobId=82e583fa-7829-4396-a2f7-4358e2abba80response=jsonsessionkey=hd3IkmVY5KODN5MiyOXg%2FapVTb4%3D_=1358464170203 2013-01-17 18:05:36,746 DEBUG [cloud.api.ApiServlet] (catalina-exec-1:null) ===END=== 10.217.252.59 -- GET command=queryAsyncJobResultjobId=82e583fa-7829-4396-a2f7-4358e2abba80response=jsonsessionkey=hd3IkmVY5KODN5MiyOXg%2FapVTb4%3D_=1358464170203 2013-01-17 18:05:38,232 DEBUG [agent.transport.Request] (AgentManager-Handler-15:null) Seq 1-772669469: Processing: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, [{Answer:{result:false,details:java.lang.NullPointerException\n\tat com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStorageAdaptor(KVMStoragePoolManager.java:41)\n\tat com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStoragePool(KVMStoragePoolManager.java:66)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.cleanupDisk(LibvirtComputingResource.java:3153)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.execute(LibvirtComputingResource.java:2687)\n\tat com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:968)\n\tat com.cloud.agent.Agent.processRequest(Agent.java:525)\n\tat com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:852)\n\tat com.cloud.utils.nio.Task.run(Task.java:83)\n\tat java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)\n\tat java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)\n\tat java.lang.Thread.run(Thread.java:679)\n,wait:0}}] } 2013-01-17 18:05:38,232 DEBUG [agent.manager.AgentAttache] (AgentManager-Handler-15:null) Seq 1-772669469: No more commands found 2013-01-17 18:05:38,232 DEBUG [agent.transport.Request] (Job-Executor-6:job-34) Seq 1-772669469: Received: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, { Answer } } 2013-01-17 18:05:38,232 WARN [cloud.vm.VirtualMachineManagerImpl] (Job-Executor-6:job-34) Unable to stop vm VM[DomainRouter|r-10-VM] 2013-01-17 18:05:38,299 DEBUG [cloud.capacity.CapacityManagerImpl] (Job-Executor-6:job-34) VM state transitted from :Stopping to Running with event: OperationFailedvm's original host id: 1 new host id: 1 host id before state transition: 1 2013-01-17 18:05:38,300 DEBUG
[ASF41][QA]CLOUDSTACK - 1007
Marcus/Edison, Wanted to check if defect [1] has anything to do with the fix done for Cloudstack - 1011 [1] https://issues.apache.org/jira/browse/CLOUDSTACK-1007 Thanks /sudha
[jira] [Resolved] (CLOUDSTACK-1011) KVM host getting disconnected in cluster environment
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1011?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sudha Ponnaganti resolved CLOUDSTACK-1011. -- Resolution: Fixed KVM host getting disconnected in cluster environment - Key: CLOUDSTACK-1011 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1011 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: KVM Affects Versions: 4.1.0 Environment: Build from network-refactor KVM Reporter: Rayees Namathponnan Assignee: Kishan Kavala Fix For: 4.1.0 Attachments: Agent_Log.rar Steps to reproduce Create advanced zone with 2 zones First zone : 1 POD, 1 Cluster and 2 hosts Second zone : 1 POD, 1 Cluster and 1 host Expected result System Vms should come up successfully, and KVM host should be in connected state always Actual Result KVM agent disconnected after some time, i can see below null pointer exception in KVM agent log; then tried to restart agent and libvert, but still agent not able to connect with MS 2013-01-18 03:21:01,210 WARN [cloud.agent.Agent] (agentRequest-Handler-1:null) Caught: java.lang.NullPointerException at com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStorageAdaptor(KVMStoragePoolManager.java:41) at com.cloud.hypervisor.kvm.storage.KVMStoragePoolManager.getStoragePool(KVMStoragePoolManager.java:66) at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.cleanupDisk(LibvirtComputingResource.java:3153) at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.execute(LibvirtComputingResource.java:2687) at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:968) at com.cloud.agent.Agent.processRequest(Agent.java:525) at com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:852) at com.cloud.utils.nio.Task.run(Task.java:83) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) at java.lang.Thread.run(Thread.java:679) 2013-01-18 03:21:01,432 WARN [cloud.agent.Agent] (agentRequest-Handler-1:null) Caught: java.lang.NullPointerException at com.cloud.hypervisor.kvm.storage Additional information : I was looking Zone 1 's (adv-Kvm-Zone1) dashboard - Storage, here storage is Allocated : 0.00 KB / 0.00 KB -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: Questions related to Regions Feature
Hi Kishan, First of all thanks for responding to my questions. I have some additional questions / comments below: Comments: 1. I am assuming you will update FS based on all these answers 2. I am assuming that you will document all the workflows, manual processes and other items you mentioned below in FS so that the tech pubs person can update the manuals Questions: 1. If on a region re-start, CCP can go to other regions and grab the latest information, why can't we do the same thing on region creation? In fact, it might be easier as the new region would just have to go to one of the existing regions and do a bulk copy. Am I missing something here? Regards, Manan Shah On 1/17/13 4:58 AM, Kishan Kavala kishan.kav...@citrix.com wrote: Manan, Please find my answers inline. -Original Message- From: Manan Shah [mailto:manan.s...@citrix.com] Sent: Wednesday, 16 January 2013 1:57 AM To: cloudstack-dev@incubator.apache.org Subject: FW: Questions related to Regions Feature Kishan, I reviewed the FS and I have quite a few questions. I have also reviewed questions posted by Sangeetha and tried to cover all of her questions as well. Please see the questions below and let us know your thoughts. We should try and capture all of these items in the Regions FS / Design spec if possible: 1. Assumption is that we will support both NFS as well as ObjectStore as a secondary storage. This also means that all templates stored in NFS storage (Region-wide) should be available for all zones within a region. [KK] Object store is Region-wide. Secondary storage will remain at the zone level the way it is now. Migration will be required only when someone using NFS secondary storage in 4.0 moves to object store in 4.1. This migration will be manual process which has to be documented along with some scripts to migrate. 2. Assumption is that we will continue to support NFS as a secondary storage at the zone level as well as add support for NFS as secondary storage at the region level [KK] NFS secondary storage will be supported at the zone level only. There will be no NFS secondary storage at Region level. Support for object store at region level will be added. Using object store is optional. During upgrade if someone wants to use object store, data in NFS secondary storage has to be migrated to object store as mentioned above. 3. Addition of a new Region to a existing Cloud: A. New Region Addition: * Current functionality is to add a new Region to every existing region. This is undesirable. We should replicate the regions DB table just like Domain/Accounts, etc so that end users have to add it only in 1 place [KK] It is a good to have functionality. Add Region is a one-time operation and we can live with this limitation for 4.1 release. * Please update the FS with the expected admin workflow B. Sync of Domain / Account / etc: [KK] I'll add these to FS * You had mentioned that this would be done only on a as-needed basis. This seems to be confusing. We need to clearly indicate when would the DB tables be synced. Our expectation was that when a new Region is added, all necessary DB tables will get populated from sync'd DB Table list C. Sync of [KK] When a new Region is added, existing Account/User/Domain details have to copied to new Region manually. This will be documented in FS with steps to copy the data. Any changes after adding Region will be propagated immediately. Projects: * This is in requirements but seems to be missing in FS [KK] Projects won't be available across regions. 4. Sync of Domain / Account when a Region goes down and comes back up: * You seem to indicate that this would be done on a on-demand basis. Not clear of the use cases. FS needs to document the details. [KK] It is the responsibility of the source region to ensure that changes are propagated to all regions. I'm still exploring on how to ensure this. 5. Removal of Region: * On Region deletion, what happens to all of the objects that are owned by that Region (Domains/Accounts/Projects) [KK] Ownership of the deleted Region objects has to be manually changed to another Region. This again will be documented along with scripts to make this change. 6. Steps to add / remove Regions: * Please document the procedure to add/remove regions. [KK] Add/Remove will be through addRegion and removeRegion APIs. I'll add workflows to FS explaining the same. 7. Sync of Global Params: * Assuming that account/domain/etc related global configs will be propagated. Please list all of the global params that will be propagated. Global Param changes require a re-start of Mgmt servers. So, if a domain related global config is changed, would we display a message for all regions to re-start mgmt servers? [KK] Global configs will be per Region. Configs need not be synced across regions. 8. Resource Limits at the Global level: For example, if a user is authorized
[jira] [Commented] (CLOUDSTACK-1003) Failed to start management server with master build
[ https://issues.apache.org/jira/browse/CLOUDSTACK-1003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557442#comment-13557442 ] Rohit Yadav commented on CLOUDSTACK-1003: - Pradeep, the changes are fine, seems like issue in your packaging can you share your build machine? Looks like there some issue with your components.xml; Unable to load configuration for management-server from components.xml Are you doing this on master and why using waf? Failed to start management server with master build --- Key: CLOUDSTACK-1003 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1003 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: API, Install and Setup Affects Versions: 4.1.0 Environment: Centos 6.0.3 Reporter: Rayees Namathponnan Assignee: Pradeep Soundararajan Priority: Blocker Attachments: catalina.out Observed below error in MS log INFO [cloud.server.ConfigurationServerImpl] (main:) Processing updateSSLKeyStore INFO [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at /etc/cloud/management/cloud.keystore INFO [cloud.server.ConfigurationServerImpl] (main:) Processing updateKeyPairs INFO [cloud.server.ConfigurationServerImpl] (main:) Systemvm keypairs not found in database. Need to store them in the database INFO [cloud.server.ConfigurationServerImpl] (main:) Going to update systemvm iso with generated keypairs if needed INFO [utils.component.ComponentLocator] (main:) Config file found at /etc/cloud/management/components.xml. Configuring management-server INFO [utils.component.ComponentLocator] (main:) Found component: com.cloud.configuration.dao.ConfigurationDao in com.cloud.configuration.dao.ConfigurationDaoImpl - Configuration configuration server ERROR [utils.component.ComponentLocator] (main:) Unable to load configuration for management-server from components.xml com.cloud.utils.exception.CloudRuntimeException: Unable to find class: org.apache.cloudstack.acl.StaticRoleBasedAPIAccessChecker at com.cloud.utils.component.ComponentLocator$XmlHandler.fillInfo(ComponentLocator.java:1028) at com.cloud.utils.component.ComponentLocator$XmlHandler.startElement(ComponentLocator.java:1089) at org.apache.xerces.parsers.AbstractSAXParser.startElement(Unknown Source) at org.apache.xerces.parsers.AbstractXMLDocumentParser.emptyElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanStartElement(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown Source) at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
How can I remove my email from this list?
Kind Regards, Marlon Davids .. P: +44 (0)845 619 7444 ext. 200 | M: +44 (0)7956 920 496 E: mdav...@umbee.co.ukmailto:mdav...@umbee.co.uk .. W: www.umbeehosting.co.ukhttp://www.umbeehosting.co.uk/ Managed Hosting Specialists. [Description: Description: Description: Description: small-logo] .. Umbee Ltd, TMS House, Cray Avenue, Orpington, Kent, BR5 3QB Company Registration Number. 06954604. VAT Registration Number 977446172 This e-mail and the information it contains are confidential. If you have received this e-mail in error please notify the sender immediately. You should not copy it for any purpose or disclose its contents to any other person. The contents of this e-mail do not necessarily reflect the views of the company. EOE P Please consider the environment before printing this email
RE: [ASF41][QA]CLOUDSTACK - 1007
Thanks Sangeetha for confirmation -Original Message- From: Sangeetha Hariharan [mailto:sangeetha.hariha...@citrix.com] Sent: Friday, January 18, 2013 10:55 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [ASF41][QA]CLOUDSTACK - 1007 Tested with latest build from network-refactor branch: I am able to successfully delete the Shared network that has no Vms assocaiated with it. We are able to stop the router successfully as part of destroying the router. management server logs: 2013-01-18 13:32:46,785 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (Job-Executor-2:job-58) Attempting to destroy router 10 2013-01-18 13:32:46,803 DEBUG [cloud.capacity.CapacityManagerImpl] (Job-Executor-2:job-58) VM state transitted from :Running to Stopping with event: StopRequestedvm's original host id: 1 new host id: 1 host id before state transition: 1 2013-01-18 13:32:46,821 DEBUG [agent.transport.Request] (Job-Executor-2:job-58) Seq 1-386072589: Sending { Cmd , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 100111, [{StopCommand:{isProxy:false,vmName:r-10-VM,wait:0}}] } 2013-01-18 13:32:51,672 DEBUG [cloud.api.ApiServlet] (catalina-exec-2:null) ===START=== 10.217.252.59 -- GET command=queryAsyncJobResultjobId=f38eac22-30aa-4f56-b886-8f9eb3d0a25bresponse=jsonsessionkey=bgGUZzPWiG2VDGjCsU3oUROHbms%3D_=1358534197988 2013-01-18 13:32:51,710 DEBUG [cloud.api.ApiServlet] (catalina-exec-2:null) ===END=== 10.217.252.59 -- GET command=queryAsyncJobResultjobId=f38eac22-30aa-4f56-b886-8f9eb3d0a25bresponse=jsonsessionkey=bgGUZzPWiG2VDGjCsU3oUROHbms%3D_=1358534197988 2013-01-18 13:32:53,398 DEBUG [agent.transport.Request] (AgentManager-Handler-13:null) Seq 1-386072589: Processing: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, [{StopAnswer:{vncPort:0,result:true,wait:0}}] } 2013-01-18 13:32:53,399 DEBUG [agent.manager.AgentAttache] (AgentManager-Handler-13:null) Seq 1-386072589: No more commands found 2013-01-18 13:32:53,399 DEBUG [agent.transport.Request] (Job-Executor-2:job-58) Seq 1-386072589: Received: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, { StopAnswer } } 2013-01-18 13:32:53,409 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (Job-Executor-2:job-58) Successfully updated user statistics as a part of domR VM[DomainRouter|r-10-VM] reboot/stop 2013-01-18 13:32:53,445 DEBUG [cloud.vm.VirtualMachineManagerImpl] (Job-Executor-2:job-58) VM[DomainRouter|r-10-VM] is stopped on the host. Proceeding to release resource held. Agent.log: 2013-01-18 18:36:44,388 DEBUG [cloud.agent.Agent] (agentRequest-Handler-3:null) Request:Seq 1-386072589: { Cmd , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 100111, [{StopCommand:{isProxy:false,vmName:r-10-VM,wait:0}}] } 2013-01-18 18:36:44,388 DEBUG [cloud.agent.Agent] (agentRequest-Handler-3:null) Processing command: com.cloud.agent.api.StopCommand 2013-01-18 18:36:44,489 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-3:null) Executing: /usr/lib64/cloud/common/scripts/vm/network/security_group.py destroy_network_rules_for_vm --vmname r-10-VM --vif vnet12 2013-01-18 18:36:44,708 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-3:null) Execution is successful. 2013-01-18 18:36:44,709 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-3:null) Try to stop the vm at first 2013-01-18 18:36:50,956 DEBUG [cloud.agent.Agent] (agentRequest-Handler-3:null) Seq 1-386072589: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, [{StopAnswer:{vncPort:0,result:true,wait:0}}] } 2013-01-18 18:36:51,307 DEBUG [cloud.agent.Agent] (agentRequest-Handler-4:null) Request:Seq 1-386072590: { Cmd , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 100111, [{storage.DestroyCommand:{vmName:r-10-VM,volume:{id:10,name:ROOT-10,mountPoint:/export/home/sangeetha/asf/primary,path:bde8865f-aed6-4072-8c2c-43025219cbd7,size:725811200,type:ROOT,storagePoolType:NetworkFilesystem,storagePoolUuid:afcf9136-8f08-3361-8328-fac0f471b3e4,deviceId:0},wait:0}}] } 2013-01-18 18:36:51,307 DEBUG [cloud.agent.Agent] (agentRequest-Handler-4:null) Processing command: com.cloud.agent.api.storage.DestroyCommand 2013-01-18 18:36:51,663 DEBUG [kvm.storage.LibvirtStorageAdaptor] (agentRequest-Handler-4:null) requested delete disk /mnt/afcf9136-8f08-3361-8328-fac0f471b3e4/r-10-VM-patchdisk 2013-01-18 18:36:51,672 DEBUG [cloud.agent.Agent] (agentRequest-Handler-4:null) Seq 1-386072590: { Ans: , MgmtId: 206915885081428, via: 1, Ver: v1, Flags: 110, [{Answer:{result:true,details:Success,wait:0}}] } I will close this issue after I test the account delete scenario as well. -Thanks Sangeetha -Original Message- From: Sudha Ponnaganti [mailto:sudha.ponnaga...@citrix.com] Sent: Friday, January 18, 2013 10:25 AM To: cloudstack-dev@incubator.apache.org Subject: [ASF41][QA]CLOUDSTACK - 1007 Marcus/Edison, Wanted to check if defect [1] has anything to do with the fix
RE: new storage framework update
-Original Message- From: Wido den Hollander [mailto:w...@widodh.nl] Sent: Friday, January 18, 2013 12:51 AM To: cloudstack-dev@incubator.apache.org Subject: Re: new storage framework update Hi, On 01/16/2013 02:35 AM, Edison Su wrote: After a lengthy discussion(more than two hours) with John on Skype, I think we figured out the difference between us. The API proposed by John is more at the execution level, that's where input/output stream coming from, which assumes that both source and destination object will be operated at the same place(either inside ssvm, or on hypervisor host). While the API I proposed is more about how to hook up vendor's own storage into cloudstack's mgt server, thus can replace the process on how and where to operate on the storage. Let's talk about the execution model at first, which will have huge impact on the design we made. The execution model is about where to execute operations issued by mgt server. Currently, there is no universal execution model, it's quite different for each hypervisor. E.g. for KVM, mgt server will send commands to KVM host, there is a java agent running on kvm host, which can execute command send by mgt server. For xenserver, most of commands will be executed on mgt server, which will call xapi, then talking to xenserver host. But we do put some python code at xenserver host, if there are operations not supported by xapi. For vmware, most of commands will be executed on mgt server, which talking to vcenter API, while some of them will be executed inside SSVM. Due to the different execution models, we'll get into a problem about how and where to access storage device. For example, there is a storage box, which has its own management API to be accessed. Now I want to create a volume on the storage box, where should I call stoage box's create volume api? If we follow up above execution models, we need to call the api at different places and even worse, you need to write the API call in different languages. For kvm, you may need to write java code in kvm agent, for xenserver, you may need to write a xapi python plugin, for vmware, you may need to put the java code inside ssvm etc. But if the storage box already has management api, why just call it inside cloudstack mgt server, then device vendor should just write java code once, for all the different hypervisors? If we don't enforce the execution model, then the storage framework should have a hook in management server, device vendor can decide where to execute commands send by mgt server. With this you are assuming that the management server always has access to the API of the storage box? What if the management server is in network X (say Amsterdam) en I have a zone in London where my storage box X is in a private network. The only one that can access the API then is the hypervisor, so the calls have to go through there. I don't want to encourage people to write stupid code where they assume that the management server is this thing which is tied up into every network. I think we will change the current mgt server deployment model to cluster of mgt servers per zone, instead of a cluster of mgt servers manage the whole zones: https://cwiki.apache.org/confluence/display/CLOUDSTACK/AWS-Style+Regions If above works, then mgt server can assume it can access storage box's API. BTW, the mgt server does need to access some private mgt API, such as F5/netscaler etc. Wido That's my datastoredriver layer used for. Take taking snapshot diagram as an example: https://cwiki.apache.org/confluence/download/attachments/30741569/take +snapshot+sequence.png?version=1modificationDate=1358189965000 Datastoredriver is running inside mgt server, while datastoredriver itself can decide where to execute takasnapshot API, driver can send a command to hypervisor host, or directly call storage box's API, or directly call hypervisor's own API, or another service running outside of cloudstack mgt server. It's all up to the implementation of driver. Does it make sense? If it's true, the device driver should not take input/out stream as parameter, as it enforces the execution model, which I don't think it's necessary. BTW, John and I will discuss the matter tomorrow on Skype, if you want to join, please let me know. -Original Message- From: Edison Su [mailto:edison...@citrix.com] Sent: Monday, January 14, 2013 3:19 PM To: cloudstack-dev@incubator.apache.org Subject: RE: new storage framework update -Original Message- From: John Burwell [mailto:jburw...@basho.com] Sent: Friday, January 11, 2013 12:30 PM To: cloudstack-dev@incubator.apache.org Subject: Re: new storage framework update Edison, I think we are speaking past each other a bit. My intention is to separate logical and physical storage operations in order to simplify the implementation of new storage providers.
RE: How can I remove my email from this list?
Marlon You can unsubscribe by sending an email to cloudstack-dev-unsubscr...@incubator.apache.org from the email you used to register. Animesh From: Marlon Davids [mailto:mdav...@umbee.co.uk] Sent: Friday, January 18, 2013 10:36 AM To: cloudstack-dev@incubator.apache.org Subject: How can I remove my email from this list? Kind Regards, Marlon Davids .. P: +44 (0)845 619 7444 ext. 200 | M: +44 (0)7956 920 496 E: mdav...@umbee.co.uk .. W: www.umbeehosting.co.uk Managed Hosting Specialists. .. Umbee Ltd, TMS House, Cray Avenue, Orpington, Kent, BR5 3QB Company Registration Number. 06954604. VAT Registration Number 977446172 This e-mail and the information it contains are confidential. If you have received this e-mail in error please notify the sender immediately. You should not copy it for any purpose or disclose its contents to any other person. The contents of this e-mail do not necessarily reflect the views of the company. EOE Please consider the environment before printing this email
Re: [DISCUSS] IPv6 support draft functional spec(phase 1)
On Thu, Jan 17, 2013 at 7:05 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: The spec calls for dualstack, so ipv4 would still work? I think it would be stage 2 of phase 1, after ipv6 stack only. --Sheng On 1/17/13 3:49 PM, Sheng Yang sh...@yasker.org wrote: On Thu, Jan 17, 2013 at 3:26 PM, Alex Huang alex.hu...@citrix.com wrote: We just want to make thing as simple as possible for the phase 1. The service other than DNS/DHCP would be supported later, and depends on how much time we have. How do you present something like this to the end user if it works one way and not another. It needs to be consistent. Let's get the DNS/DHCP part done first... --Sheng
Re: [MERGE] Merge branch api_limit
Merged to master. Thanks -min On 1/17/13 9:28 PM, prasanna t...@apache.org wrote: On 18 January 2013 10:50, Min Chen min.c...@citrix.com wrote: This integration test just runs API server responding concurrent api calls, but it assumes that there is a demo account (not root admin) in the system to test this feature. I just coded this test to save my manual testing efforts:) Thanks -min +1 Min - should always save the manual effort when one can. Thanks for the detailed spec and I'm sure I could figure out if I applied my lazy head a little on how to setup the integration test. But if you could detail that under the test plan section I'd be grateful. :)
[jira] [Created] (CLOUDSTACK-1014) Merge ManagementServer and ManagementServerExt
Rohit Yadav created CLOUDSTACK-1014: --- Summary: Merge ManagementServer and ManagementServerExt Key: CLOUDSTACK-1014 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1014 Project: CloudStack Issue Type: Bug Security Level: Public (Anyone can view this level - this is the default.) Reporter: Rohit Yadav Assignee: Rohit Yadav Get rid of multiple classes, merge them into one single mgmt server class. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [VOTE] Accept a donation of Enhanced Baremetal Provisioning support from Citrix
+1 (binding) On Jan 15, 2013, at 5:06 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: I would like to call a vote for the Apache CloudStack project to accept a donation from Citrix for Enhanced Baremetal Provisioning The initial discussion is at [1]. The content has been posted by Frank at [2]. The files would need to be updated to reflect the correct ASF headers prior to commit into our repo. Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. [1] http://markmail.org/message/m6tg5nzfgqiwhzre [2] http://people.apache.org/~frankzhang/CLOUDSTACK-774-baremetal-support.zip Stratosec - Secure Infrastructure as a Service o: 415.315.9385 @johnlkinsella
Re: [VOTE] Accept a donation of SRXF5 inline mode support in CloudStack from Citrix
+1 (binding) On Jan 16, 2013, at 10:53 AM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. -Original Message- From: Sheng Yang [mailto:sh...@yasker.org] Sent: Tuesday, January 15, 2013 5:54 PM To: cloudstack-dev@incubator.apache.org Subject: [IP Clearance] CLOUDSTACK-306 SRXF5 inline mode Hi, I'd like to start the process of IP Clearance for CLOUDSTACK-306: SRXF5 inline mode support. Citrix would like to donate this code to Apache Cloudstack. This feature extended the support for external network devices for Cloudstack. In the Cloudstack 4.0 release, it's only able to work with SRX and F5 in side-by- side mode, which means all the traffic going through F5 load balancer would bypass SRX firewall, and F5 would facing the public network directly. Cloudstack 4.0 still have some obsolete codes to deal with inline mode back to 2.2.x era, but they're not functional after NaaS work in 3.0 release. After reintroducing this feature, SRX is able to working as the firewall for the whole guest network(isolated network), including F5. Every load balancing traffic must go through SRX, in order to reach F5. In order to support inline mode, in the first patch, I had re-implemented the firewall part SRX to make it able to filter based on public ip we're using to identify the traffic, using firewall filter of SRX. In the second patch, I've investigated the possibility of using one F5 instance in site-by-site mode and inline-mode at the same time, and found it doable. So I make inline a parameter for network offering, not an option for device(e.g. F5). And I have reimplemented the inline mode feature in the third patch. The whole patchset mostly deal with external devices related filres, e.g. JuniperSrxResource.java, ExternalFirewallDeviceManagerImpl.java, F5BigIpResource.java, ExternalLoadBalancerDeviceManagerImpl.java. There are also some refactor works regarding NetworkManagerImpl.java. The patchset is at: http://people.apache.org/~yasker/ Since there are three patches, I've checksumed and signed the tar ball. The related Jira ticket at: https://issues.apache.org/jira/browse/CLOUDSTACK-306 The function spec is at: https://cwiki.apache.org/CLOUDSTACK/network-inline-mode-functional- spec.html The previous discussion happened on: http://markmail.org/message/jnpl5b7b6cqqmrui There is no objection on this feature at the time of discussion. Thank you! --Sheng Stratosec - Secure Infrastructure as a Service o: 415.315.9385 @johnlkinsella
Re: [VOTE] Accept a donation of 'providing support of optional Public IP assignment for EIP with Basic Zone' from Citrix.
+1 (binding) On Jan 17, 2013, at 2:47 AM, Murali Reddy murali.re...@citrix.com wrote: I would like to call a vote for the Apache CloudStack project to accept a donation from Citrix to provide Optional Public IP assignment for EIP with Basic Zone. The functional specification is available at [1] and has been discussed [2] with no outstanding issues. Bug 265 [3] opened to track this feature. Patch [4] and MD5 [5] files are made available at below links [1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/Optional+Public+IP+assignment+for+EIP+with+Basic+Zone [2] http://markmail.org/thread/b2h2cw62qnryk4qh [3] https://issues.apache.org/jira/browse/CLOUDSTACK-265 [4] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-provide-option-to-turn-off-automatic-.patch [5] http://people.apache.org/~muralireddy/0001-CLOUDSTACK-265-provide-option-to-turn-off-automatic-.patch.md5 Stratosec - Secure Infrastructure as a Service o: 415.315.9385 @johnlkinsella
Re: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix
+1 (binding) On Jan 17, 2013, at 9:41 AM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this +enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Wednesday, January 16, 2013 4:39 PM To: cloudstack-dev@incubator.apache.org Subject: [IP Clearance: CLOUDSTACK-737] support security group enabled network in advanced zone Hi folks, I'd like to start the IP clearance process for the Citrix feature - support security group enabled network in advanced zone https://issues.apache.org/jira/browse/CLOUDSTACK-737 Citrix would like to donate this feature to Apache CloudStack, In 4.0, security group is only supported in basic zone, this feature is to add security group in advanced zone, then user can isolate VMs in the same guest network. Here is FS, https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+based + on+ Security+Groups+in+Advance+zone This donation is a subset of the feature according to the FS Only support KVM Only support one zone-wide security-enabled shared network Rest of this feature will be developed in Apache This is discussion thread http://markmail.org/message/cle3d64ci6pobs2i here is patch[Animesh] http://people.apache.org/~anthonyxu/ Thanks, Anthony Stratosec - Secure Infrastructure as a Service o: 415.315.9385 @johnlkinsella
Re: [VOTE] Accept a donation of Documentation for various features from Citrix
+1 (binding) On Jan 17, 2013, at 9:48 AM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE. Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this +enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. Content Location: http://people.apache.org/~jtomechak -Original Message- From: Jessica Tomechak [mailto:jessica.tomec...@citrix.com] Sent: Tuesday, January 15, 2013 7:05 PM To: cloudstack-dev@incubator.apache.org Subject: RE: [IP Clearance] Potential issues On people.apache.org/~jtomechak, I have posted all my docs related to the bug items in the IP Clearance list which Animesh provided. I have made notations in the Doc sub-task of each bug, so that anyone reviewing the proposed feature can easily find the documentation. In addition, I made a note for myself of the doc status of each bug in that list, and here it is for anyone who is interested! CLOUDSTACK-774 : Code in ACS repo: No Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 5000 lines Contributor : Frank IP Clearance needed initial recommendation: Yes Docs: None exist. This was not announced or supported as a Citrix CP 3.0.6 feature. CLOUDSTACK-306 : Code in ACS repo: Yes Functional Spec Posted: Yes Community Discussion Done: Yes in October Contribution Size Approx: 1500 lines Contributor : Sheng IP Clearance needed initial recommendation: Yes Docs: Already submitted via reviewboard. Link and info in doc subtask. CLOUDSTACK-777/700 : Code in ACS repo: Yes Functional Spec Posted: No Community Discussion Done: Yes Contribution Size Approx: 500 lines Contributor : Kishan/Jayapal/Rajesh/Murali IP Clearance needed initial recommendation: Yes Docs: Pending on reviewboard. URL and notations in the doc subtask of the bug. CLOUDSTACK-778/319 : Code in ACS repo: No Functional Spec Posted: No Community Discussion Done: Yes Contribution Size Approx: should be small Contributor : Vijayendra IP Clearance needed initial recommendation: This is a trivial issue so may be no Docs: Pending on reviewboard. Info is in the doc subtask of the bug. CLOUDSTACK-299 : Code in ACS repo: UI code is there but backend is not Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 1400 lines Contributor : Jayapal IP Clearance needed initial recommendation: Yes Docs: Pending on reviewboard. Link is provided in the description of the bug. CLOUDSTACK-297 : Code in ACS repo: No, but posted on review board Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 350 lines Contributor : Hari IP Clearance needed initial recommendation: Docs: One paragraph of new docs on people.a.o. The URL is noted in the doc subtask of the bug. http://people.apache.org/~jtomechak/CLOUDSTACK-297/ CLOUDSTACK-197 : Code in ACS repo: Multiple patches posted on review board Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 3000 lines Contributor : Likitha IP Clearance needed initial recommendation: No, since incremental patches were posted over a period Docs: Believe docs already exist, authored on the community side by Sebastien G. CLOUDSTACK-192 : Code in ACS repo: No Functional Spec Posted: Yes Community Discussion Done: Yes, but no consensus reached Contribution Size Approx: 1000 lines Contributor : Sanjay IP Clearance needed initial recommendation: Yes, if community agrees to feature inclusion Docs: On people.a.o. The URL is noted in the doc subtask of the bug. http://people.apache.org/~jtomechak/CLOUDSTACK-192/ CLOUDSTACK-304 / 784 : Code in ACS repo: Yes Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 600 Contributor : Alena IP Clearance needed initial recommendation: No, since commits were done way back in October over a period of 1 week Docs: On people.a.o. The URL is noted in the doc subtask of the bug. http://people.apache.org/~jtomechak/CLOUDSTACK-737/ CLOUDSTACK-265 : Code in ACS repo: Yes Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 450 Contributor : Murali IP Clearance needed initial recommendation: Yes Docs: Pending on reviewboard. URL is noted in the doc subtask of the bug. CLOUDSTACK-737 : Code in ACS repo: No Functional Spec Posted: Yes Community Discussion Done: Yes Contribution Size Approx: 2000 Contributor : Anthony IP Clearance needed initial recommendation: Yes Docs: On people.a.o. The URL is noted in the doc subtask of the bug. http://people.apache.org/~jtomechak/CLOUDSTACK-737/ CLOUDSTACK-177 : Code in ACS repo: Yes Functional Spec Posted: Yes Community Discussion Done: Yes
[jira] [Commented] (CLOUDSTACK-602) Warn of dependency on mkisofs
[ https://issues.apache.org/jira/browse/CLOUDSTACK-602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557514#comment-13557514 ] Rohit Yadav commented on CLOUDSTACK-602: mkisofs and genisoimage are different, on Debian mkisofs is not available and cannot be used interoperably. In case a developer wants it, for ex. on Debian/Arch/Mac they should compile it, mkisofs is provided by cdrtools project. Warn of dependency on mkisofs - Key: CLOUDSTACK-602 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-602 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Doc Affects Versions: 4.1.0 Environment: debian Reporter: Mel Davis Assignee: Radhika Nair Priority: Trivial cloud-setup-management fails quietly if /usr/bin/mkisofs is no found. Failure is indicated only in the /var/log/cloud/management/management-server.log.This results in the inability to log into client via the web interface. The docs should at least note the dependency and, maybe, suggest this workaround: ln -s /usr/bin/genisoimage /usr/bin/mkisofs -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
RE: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix
-Original Message- From: Chip Childers [mailto:chip.child...@sungard.com] Sent: Thursday, January 17, 2013 2:02 PM To: cloudstack-dev@incubator.apache.org Subject: Re: [VOTE} Accept a donaiton of support security group enabled network in advanced zone from Citrix On Thu, Jan 17, 2013 at 12:41 PM, Animesh Chaturvedi animesh.chaturv...@citrix.com wrote: Reposting with subject line VOTE Committers have binding votes for this decision. Please respond with your vote: +1 - Accept the donation and begin the process of bringing this +enhancement to CloudStack in via the IP clearance process +0 - Don't care -1 - Do not accept the donation This vote will remain open for ~72 hours. IMO, this is small enough not to qualify as substantial. I would be OK with this vote being cancelled, and a lazy consensus being reached to simply have Anthony commit it (using his ICLA as the contractual support for the donation). That being said, if we progress down the IP clearance path for this patch, here's my vote: +1 (binding) [Animesh] If there is no objection to Chip's assessment as this feature not being substantial by Monday, I will like to cancel the VOTE and treat this as lazy consensus for commit -Original Message- From: Anthony Xu [mailto:xuefei...@citrix.com] Sent: Wednesday, January 16, 2013 4:39 PM To: cloudstack-dev@incubator.apache.org Subject: [IP Clearance: CLOUDSTACK-737] support security group enabled network in advanced zone Hi folks, I'd like to start the IP clearance process for the Citrix feature - support security group enabled network in advanced zone https://issues.apache.org/jira/browse/CLOUDSTACK-737 Citrix would like to donate this feature to Apache CloudStack, In 4.0, security group is only supported in basic zone, this feature is to add security group in advanced zone, then user can isolate VMs in the same guest network. Here is FS, https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+ba sed + on+ Security+Groups+in+Advance+zone This donation is a subset of the feature according to the FS Only support KVM Only support one zone-wide security-enabled shared network Rest of this feature will be developed in Apache This is discussion thread http://markmail.org/message/cle3d64ci6pobs2i here is patch[Animesh] http://people.apache.org/~anthonyxu/ Thanks, Anthony
[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble
[ https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557526#comment-13557526 ] Richard Shevel commented on CLOUDSTACK-938: --- i updated both .jar agent.log 2013-01-18 23:21:52,605 DEBUG [resource.virtualnetwork.VirtualRoutingResource] (agentRequest-Handler-5:null) Trying to connect to 169.254.0.22 2013-01-18 23:21:52,607 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) Ping command port succeeded for vm r-292-VM 2013-01-18 23:21:52,607 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) Processing command: com.cloud.agent.api.GetDomRVersionCmd 2013-01-18 23:21:52,607 DEBUG [resource.virtualnetwork.VirtualRoutingResource] (agentRequest-Handler-5:null) Executing: /usr/lib64/cloud/common/scripts/network/domr/router_proxy.sh get_template_version.sh 169.254.0.22 2013-01-18 23:21:52,710 DEBUG [resource.virtualnetwork.VirtualRoutingResource] (agentRequest-Handler-5:null) Execution is successful. 2013-01-18 23:21:52,711 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) Processing command: com.cloud.agent.api.NetworkUsageCommand 2013-01-18 23:21:52,711 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) Executing: /usr/lib64/cloud/common/scripts/network/domr/router_proxy.sh netusage.sh 169.254.0.22 -c 2013-01-18 23:21:52,820 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) Execution is successful. 2013-01-18 23:21:52,821 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) Processing command: com.cloud.agent.api.PlugNicCommand 2013-01-18 23:21:52,899 DEBUG [kvm.resource.BridgeVifDriver] (agentRequest-Handler-5:null) nic=[Nic:Public-77.95.133.142-vlan://50] 2013-01-18 23:21:52,899 DEBUG [kvm.resource.BridgeVifDriver] (agentRequest-Handler-5:null) Executing: /usr/lib64/cloud/common/scripts/vm/network/vnet/modifyvlan.sh -v 50 -p bond2 -o add 2013-01-18 23:21:52,931 DEBUG [kvm.resource.BridgeVifDriver] (agentRequest-Handler-5:null) Execution is successful. 2013-01-18 23:21:52,932 DEBUG [kvm.resource.BridgeVifDriver] (agentRequest-Handler-5:null) Set name-type for VLAN subsystem. Should be visible in /proc/net/vlan/config 2013-01-18 23:21:53,104 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) Processing command: com.cloud.agent.api.routing.IpAssocVpcCommand 2013-01-18 23:21:53,166 INFO [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) IpAssocVpcCommand:LinkLocal is on dev eth0 2013-01-18 23:21:53,166 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) matchPifFileInDirectory: file name 'bond2.50' 2013-01-18 23:21:53,166 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) NEWCODE:tested getVlanIdFromBridge 2013-01-18 23:21:53,167 INFO [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) getVlanIdFromBridge: found vlanId 50 from sysfs for bridge cloudVirBr50 2013-01-18 23:21:53,167 INFO [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) IpAssocVpcCommand:dev eth1 on bridge cloudVirBr50 is for vlan50 2013-01-18 23:21:53,167 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) matchPifFileInDirectory: file name 'bond2.50' 2013-01-18 23:21:53,167 DEBUG [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) NEWCODE:tested getVlanIdFromBridge 2013-01-18 23:21:53,167 INFO [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) getVlanIdFromBridge: found vlanId 50 from sysfs for bridge cloudVirBr50 2013-01-18 23:21:53,167 INFO [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) IpAssocVpcCommand: ip 77.95.133.142 is on vlan 50 according to management server 2013-01-18 23:21:53,167 INFO [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) IpAssocVpcCommand: nicName for ip 77.95.133.142 in router is eth1 2013-01-18 23:21:53,168 DEBUG [resource.virtualnetwork.VirtualRoutingResource] (agentRequest-Handler-5:null) Executing: /usr/lib64/cloud/common/scripts/network/domr/router_proxy.sh vpc_ipassoc.sh 169.254.0.22 -A -l 77.95.133.142 -c eth1 -g 77.95.133.129 -m 26 -n 77.95.133.128 2013-01-18 23:21:55,335 DEBUG [resource.virtualnetwork.VirtualRoutingResource] (agentRequest-Handler-5:null) Execution is successful. 2013-01-18 23:21:55,335 DEBUG [resource.virtualnetwork.VirtualRoutingResource] (agentRequest-Handler-5:null) ARPING 77.95.133.142 from 77.95.133.142 eth1 Sent 3 probes (3 broadcast(s)) Received 0 response(s) 2013-01-18 23:21:55,336 DEBUG [cloud.agent.Agent] (agentRequest-Handler-5:null) Processing command: com.cloud.agent.api.routing.SetSourceNatCommand 2013-01-18 23:21:55,346 INFO [kvm.resource.LibvirtComputingResource] (agentRequest-Handler-5:null) pubVlan id is 50 according to the command sent from server 2013-01-18 23:21:55,402 INFO
[jira] [Commented] (CLOUDSTACK-355) Fix count in a bunch of API commands
[ https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531 ] Min Chen commented on CLOUDSTACK-355: - Have fixed the following apis: listHosts listSecurityGroups listEvents Fix count in a bunch of API commands -- Key: CLOUDSTACK-355 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: 4.1.0 Reporter: Alena Prokharchyk Assignee: Min Chen Fix For: 4.1.0 Count should be fixed for following list commands (as a part of Search Engine refactoring) listResourceLimits listIsos listTemplates listLoadBalancerRuleInstances listCapacity listHosts listSecurityGroups listNetworks listVPCs listTemplatePermissions listIsoPermissions listServiceOfferings listDiskOfferings listNetworkDevice listVPCOfferings listTrafficTypeImplementors listSnapshotPolicies listLBStickinessPolicies listCapabilities listZones listEventTypes listSwifts listHypervisors listNetworkOfferings listSupportedNetworkServices listStorageNetworkIpRange listEvents -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Comment Edited] (CLOUDSTACK-355) Fix count in a bunch of API commands
[ https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531 ] Min Chen edited comment on CLOUDSTACK-355 at 1/18/13 7:41 PM: -- Have fixed the following apis: listHosts listSecurityGroups listEvents listEventTypes (for this command, no pageSize can be provided, so current count is correct). was (Author: minchen07): Have fixed the following apis: listHosts listSecurityGroups listEvents Fix count in a bunch of API commands -- Key: CLOUDSTACK-355 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: 4.1.0 Reporter: Alena Prokharchyk Assignee: Min Chen Fix For: 4.1.0 Count should be fixed for following list commands (as a part of Search Engine refactoring) listResourceLimits listIsos listTemplates listLoadBalancerRuleInstances listCapacity listHosts listSecurityGroups listNetworks listVPCs listTemplatePermissions listIsoPermissions listServiceOfferings listDiskOfferings listNetworkDevice listVPCOfferings listTrafficTypeImplementors listSnapshotPolicies listLBStickinessPolicies listCapabilities listZones listEventTypes listSwifts listHypervisors listNetworkOfferings listSupportedNetworkServices listStorageNetworkIpRange listEvents -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble
[ https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557537#comment-13557537 ] Sheng Yang commented on CLOUDSTACK-938: --- The missing checkbatchs2svpn.sh won't affect the status of VPN connection, but it would disable the detection VPN connection state update feature(e.g. when you lost connection on VPN, the feature would change the VPN connection state to Disconnect). s2s VPN trouble --- Key: CLOUDSTACK-938 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Network Controller Affects Versions: 4.0.0, 4.0.1 Environment: CentOS 6.3 x86_64 CS - 4.0.1-0.11 Reporter: Richard Shevel Fix For: 4.0.2, 4.1.0 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, management-server.zip, messages, public.png, r-292-vm_log.tar.gz Dear colleagues, the problem is clearly a bug: I created a VPC Further, in my VPN Customer Gateway to the settings Gateway 217.70.20.213 CIDR list 192.168.10.0/24 IPsec Preshared-Key blablablablablabla IKE Encryption 3des IKE Hash md5 IKE DH None ESP Encryption 3des ESP Hash md5 Perfect Forward Secrecy None IKE lifetime (second) 86 400 ESP Lifetime (second) 28 800 Dead Peer Detection Yes In the setting of VPC I create VPN Gateway When creating a VPN Connection get the error: Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN catalina.out: WARN [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN WARN [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to unregister active job 463 from JMX monitoring WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status management-server.log: 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-4:null) Ping from 5 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-2:null) Ping from 3 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] (secstorage-1:null) Zone 1 is ready to launch secondary storage VM 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] (consoleproxy-1:null) Zone 1 is ready to launch console proxy 2013-01-09 21:28:18,306 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Found 3 routers. 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Sending { Cmd , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 100111, [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}] } 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (AgentManager-Handler-3:null) Seq 5-223284290: Processing: { Ans: , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 110, [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand failed,result:false,wait:0}}] } 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Received: { Ans: , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 110, { CheckS2SVpnConnectionsAnswer } } 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentManagerImpl] (RouterStatusMonitor-1:null) Details from executing class com.cloud.agent.api.CheckS2SVpnConnectionsCommand: CheckS2SVpnConneciontsCommand failed 2013-01-09 21:28:18,458 WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Unable to update router r-288-VM's VPN connection status 2013-01-09 21:28:43,063 DEBUG [cloud.server.StatsCollector] (StatsCollector-2:null) StorageCollector is
RE: [DISCUSS] IPv6 support draft functional spec(phase 1)
Dual stack in user VM or router VM? router VM must have dual stack because link-local is still ipv4, right? Anthony -Original Message- From: Sheng Yang [mailto:sh...@yasker.org] Sent: Friday, January 18, 2013 11:13 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [DISCUSS] IPv6 support draft functional spec(phase 1) On Thu, Jan 17, 2013 at 7:05 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: The spec calls for dualstack, so ipv4 would still work? I think it would be stage 2 of phase 1, after ipv6 stack only. --Sheng On 1/17/13 3:49 PM, Sheng Yang sh...@yasker.org wrote: On Thu, Jan 17, 2013 at 3:26 PM, Alex Huang alex.hu...@citrix.com wrote: We just want to make thing as simple as possible for the phase 1. The service other than DNS/DHCP would be supported later, and depends on how much time we have. How do you present something like this to the end user if it works one way and not another. It needs to be consistent. Let's get the DNS/DHCP part done first... --Sheng
[jira] [Comment Edited] (CLOUDSTACK-355) Fix count in a bunch of API commands
[ https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531 ] Min Chen edited comment on CLOUDSTACK-355 at 1/18/13 7:48 PM: -- Have fixed the following apis: listHosts listSecurityGroups listEvents listEventTypes (for this command, no pageSize can be provided, so current count is correct). listTemplatePermissionCmd (for this command, response is not ListResponse, so we are not returning Count) was (Author: minchen07): Have fixed the following apis: listHosts listSecurityGroups listEvents listEventTypes (for this command, no pageSize can be provided, so current count is correct). Fix count in a bunch of API commands -- Key: CLOUDSTACK-355 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: 4.1.0 Reporter: Alena Prokharchyk Assignee: Min Chen Fix For: 4.1.0 Count should be fixed for following list commands (as a part of Search Engine refactoring) listResourceLimits listIsos listTemplates listLoadBalancerRuleInstances listCapacity listHosts listSecurityGroups listNetworks listVPCs listTemplatePermissions listIsoPermissions listServiceOfferings listDiskOfferings listNetworkDevice listVPCOfferings listTrafficTypeImplementors listSnapshotPolicies listLBStickinessPolicies listCapabilities listZones listEventTypes listSwifts listHypervisors listNetworkOfferings listSupportedNetworkServices listStorageNetworkIpRange listEvents -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Comment Edited] (CLOUDSTACK-355) Fix count in a bunch of API commands
[ https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531 ] Min Chen edited comment on CLOUDSTACK-355 at 1/18/13 7:49 PM: -- Have fixed the following apis: listHosts listSecurityGroups listEvents listEventTypes (for this command, no pageSize can be provided, so current count is correct) listHypervisors (for this command, no pageSize can be provided, so current count is correct) listTemplatePermissionCmd (for this command, response is not ListResponse, so we are not returning Count) was (Author: minchen07): Have fixed the following apis: listHosts listSecurityGroups listEvents listEventTypes (for this command, no pageSize can be provided, so current count is correct). listTemplatePermissionCmd (for this command, response is not ListResponse, so we are not returning Count) Fix count in a bunch of API commands -- Key: CLOUDSTACK-355 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: 4.1.0 Reporter: Alena Prokharchyk Assignee: Min Chen Fix For: 4.1.0 Count should be fixed for following list commands (as a part of Search Engine refactoring) listResourceLimits listIsos listTemplates listLoadBalancerRuleInstances listCapacity listHosts listSecurityGroups listNetworks listVPCs listTemplatePermissions listIsoPermissions listServiceOfferings listDiskOfferings listNetworkDevice listVPCOfferings listTrafficTypeImplementors listSnapshotPolicies listLBStickinessPolicies listCapabilities listZones listEventTypes listSwifts listHypervisors listNetworkOfferings listSupportedNetworkServices listStorageNetworkIpRange listEvents -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [DISCUSS] Integrate Cisco ASA 1000v into CloudStack
Take a look here: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Cisco+VNMC+integrati on This is something I had been prototyping without any real enthusiasm. There's 3 ways to control the ASA1000v: 1. By logging in via the CLI. Strongly against this. 2. By using VNMC 3. Via Cisco's Network Services Manager (NSM)[1] The NSM is comprehensive, covers a large range of physical and virtual devices and has an easy northbound API. This would be my preferred solution. However as of now (NSM v5.0.2), the ASA1000v is not supported. It may also be the case that using VNMC may be a cheaper (albeit less supported) option [1] http://www.cisco.com/en/US/products/ps11636/index.html On 1/17/13 9:26 PM, Koushik Das koushik@citrix.com wrote: Manan, Can you answer the questions that Chiradeep has raised? Chiradeep, I saw that you have started working on asa/vnmc here (https://git-wip-us.apache.org/repos/asf/incubator-cloudstack/repo?p=incub ator-cloudstack.git;a=shortlog;h=refs/heads/cisco-vnmc-api-integration). I would like to understand the functionalities that you are planning to cover and what is the overlap between your work and the feature that Manan has proposed (supporting asa1000v as an external firewall). Thanks, Koushik -Original Message- From: Alex Huang [mailto:alex.hu...@citrix.com] Sent: Sunday, January 06, 2013 2:18 AM To: cloudstack-dev@incubator.apache.org Subject: RE: [DISCUSS] Integrate Cisco ASA 1000v into CloudStack Manan, Can you address the issues that Chiradeep has brought up? I think for a requirements discussion it is just as important to indicate what we will not do or what is considered a feature of a later release. --Alex -Original Message- From: Chiradeep Vittal [mailto:chiradeep.vit...@citrix.com] Sent: Thursday, January 03, 2013 6:16 PM To: CloudStack DeveloperList Subject: Re: [DISCUSS] Integrate Cisco ASA 1000v into CloudStack There cannot be feature parity since the ASA1000v is only supported on VMWare. Should the ASA1000v be created on demand, or do we expect the admin to provision a pool of virtual ASAs? Should we support VXLAN as the isolation technology or VLANs? On 1/3/13 5:08 PM, Manan Shah manan.s...@citrix.com wrote: Hi, I would like to propose a new feature for integrating Cisco ASA 1000v in CS 4.1. I have created a JIRA ticket and provided the requirements at the following location. Please provide feedback on the requirements. JIRA Ticket: https://issues.apache.org/jira/browse/CLOUDSTACK-742 Requirements: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Integrate+Cisc o +ASA + 1000v+as+a+FW+for+CloudStack Additional details would be provided in the FS. Regards, Manan Shah
[jira] [Created] (CLOUDSTACK-1015) [UNIT TEST] failure
David Nalley created CLOUDSTACK-1015: Summary: [UNIT TEST] failure Key: CLOUDSTACK-1015 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1015 Project: CloudStack Issue Type: Bug Components: Test Reporter: David Nalley Priority: Blocker Unit test failing. It appears that this depends on mysql - which by default sounds like it isn't a unit test IMO com.cloud.utils.exception.CloudRuntimeException: DB Exception on: null at com.cloud.utils.db.GenericDaoBase.searchIncludingRemoved(GenericDaoBase.java:410) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.CGLIB$searchIncludingRemoved$54(generated) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031$$FastClassByCGLIB$$25a19157.invoke(generated) at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228) at com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.searchIncludingRemoved(generated) at com.cloud.utils.db.GenericDaoBase.searchIncludingRemoved(GenericDaoBase.java:345) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.CGLIB$searchIncludingRemoved$53(generated) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031$$FastClassByCGLIB$$25a19157.invoke(generated) at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228) at com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.searchIncludingRemoved(generated) at com.cloud.utils.db.GenericDaoBase.listIncludingRemovedBy(GenericDaoBase.java:897) at com.cloud.utils.db.GenericDaoBase.listIncludingRemovedBy(GenericDaoBase.java:902) at com.cloud.configuration.dao.ConfigurationDaoImpl.getConfiguration(ConfigurationDaoImpl.java:71) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.CGLIB$getConfiguration$4(generated) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031$$FastClassByCGLIB$$25a19157.invoke(generated) at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228) at com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.getConfiguration(generated) at com.cloud.configuration.dao.ConfigurationDaoImpl.getConfiguration(ConfigurationDaoImpl.java:99) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.CGLIB$getConfiguration$5(generated) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031$$FastClassByCGLIB$$25a19157.invoke(generated) at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228) at com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34) at com.cloud.configuration.dao.ConfigurationDaoImpl$$EnhancerByCGLIB$$a8916031.getConfiguration(generated) at com.cloud.network.vpn.RemoteAccessVpnManagerImpl.configure(RemoteAccessVpnManagerImpl.java:590) at com.cloud.network.vpn.RemoteAccessVpnTest.testInjected(RemoteAccessVpnTest.java:102) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:45) at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:15) at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:42) at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:20) at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:28) at org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:30) at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:263) at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:68) at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:47) at org.junit.runners.ParentRunner$3.run(ParentRunner.java:231) at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:60) at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:229) at org.junit.runners.ParentRunner.access$000(ParentRunner.java:50) at
[jira] [Comment Edited] (CLOUDSTACK-355) Fix count in a bunch of API commands
[ https://issues.apache.org/jira/browse/CLOUDSTACK-355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557531#comment-13557531 ] Min Chen edited comment on CLOUDSTACK-355 at 1/18/13 8:01 PM: -- Have fixed the following apis: listHosts listSecurityGroups listEvents listEventTypes (for this command, no pageSize can be provided, so current count is correct) listHypervisors (for this command, no pageSize can be provided, so current count is correct) listTemplatePermissionCmd (for this command, response is not ListResponse, so we are not returning Count) listLBStickinessPolicies (for this command, the return list only contains at most one response, so count is correct) was (Author: minchen07): Have fixed the following apis: listHosts listSecurityGroups listEvents listEventTypes (for this command, no pageSize can be provided, so current count is correct) listHypervisors (for this command, no pageSize can be provided, so current count is correct) listTemplatePermissionCmd (for this command, response is not ListResponse, so we are not returning Count) Fix count in a bunch of API commands -- Key: CLOUDSTACK-355 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-355 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: 4.1.0 Reporter: Alena Prokharchyk Assignee: Min Chen Fix For: 4.1.0 Count should be fixed for following list commands (as a part of Search Engine refactoring) listResourceLimits listIsos listTemplates listLoadBalancerRuleInstances listCapacity listHosts listSecurityGroups listNetworks listVPCs listTemplatePermissions listIsoPermissions listServiceOfferings listDiskOfferings listNetworkDevice listVPCOfferings listTrafficTypeImplementors listSnapshotPolicies listLBStickinessPolicies listCapabilities listZones listEventTypes listSwifts listHypervisors listNetworkOfferings listSupportedNetworkServices listStorageNetworkIpRange listEvents -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Reopened] (CLOUDSTACK-995) Not able to add the KVM host.
[ https://issues.apache.org/jira/browse/CLOUDSTACK-995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sangeetha Hariharan reopened CLOUDSTACK-995: Edison, With your fixes , I assume we should be able to add the host with out having to do any workarounds to cgconfig.conf. Was the check in done for “network-refractor” build ? With the latest “network-refractor” build , I am still not able to add the host successfully with no changes made to cgconfig.conf . Following error seen in agent.log exiting. DEBUG:root:execute:hostname -f DEBUG:root:execute:selinuxenabled DEBUG:root:execute:setenforce 0 DEBUG:root:execute:service libvirtd status DEBUG:root:Failed to execute:libvirtd is stopped DEBUG:root:execute:service libvirtd status DEBUG:root:Failed to execute:libvirtd is stopped DEBUG:root:execute:service libvirtd start DEBUG:root:Failed to execute:libcgroup initialization failed: Cgroup is not mounted DEBUG:root:execute:setenforce 1 DEBUG:root:execute:service network restart DEBUG:root:Failed to execute:dhclient(26209) is already running - exiting. This version of ISC DHCP is based on the release available on ftp.isc.org. Features have been added and other changes have been made to the base software release in order to make it work better with this distribution. Please report for this software via the Red Hat Bugzilla site: http://bugzilla.redhat.com exiting. Not able to add the KVM host. - Key: CLOUDSTACK-995 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-995 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Management Server Affects Versions: 4.1.0 Environment: Build from network-refactor branch. Reporter: Sangeetha Hariharan Assignee: edison su Priority: Critical Fix For: 4.1.0 Attachments: management-server.zip, setup.log Set up: Installed management server. Tried to configure an advanced zone with KVM hypervisor - Centos 6.2. I am NOT able to add the KVM host successfully. I get the following error in management server logs : 2013-01-16 21:02:32,794 INFO [cloud.resource.ResourceManagerImpl] (catalina-exec-7:null) Trying to add a new host at http://10.223.59.4 in data center 1 2013-01-16 21:02:33,038 DEBUG [utils.ssh.SSHCmdHelper] (catalina-exec-7:null) Executing cmd: lsmod|grep kvm 2013-01-16 21:02:34,168 DEBUG [utils.ssh.SSHCmdHelper] (catalina-exec-7:null) lsmod|grep kvm output:kvm_intel 50380 0 kvm 305081 1 kvm_intel ….. 2013-01-16 21:02:35,176 DEBUG [utils.ssh.SSHCmdHelper] (catalina-exec-7:null) Executing cmd: cloud-setup-agent -m 10.223.59.3 -z 1 -p 1 -c 1 -g 01481220-7c8d-3d22-aa72-80d909038f98 -a --pubNic=cloudbr0 --prvNic=cloudbr0 --guestNic=cloudbr0 2013-01-16 21:02:58,319 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] (consoleproxy-1:null) Skip capacity scan due to there is no Primary Storage UPintenance mode 2013-01-16 21:02:58,726 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Found 0 routers. 2013-01-16 21:03:13,078 DEBUG [cloud.server.StatsCollector] (StatsCollector-2:null) HostStatsCollector is running... 2013-01-16 21:03:13,078 DEBUG [cloud.server.StatsCollector] (StatsCollector-1:null) VmStatsCollector is running... 2013-01-16 21:03:13,175 DEBUG [cloud.server.StatsCollector] (StatsCollector-2:null) StorageCollector is running... 2013-01-16 21:03:28,319 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] (consoleproxy-1:null) Skip capacity scan due to there is no Primary Storage UPintenance mode 2013-01-16 21:03:28,727 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Found 0 routers. 2013-01-16 21:03:41,434 DEBUG [utils.ssh.SSHCmdHelper] (catalina-exec-7:null) cloud-setup-agent -m 10.223.59.3 -z 1 -p 1 -c 1 -g 01481220-7c8d-3d22-aa72-80d909038f98 -a --pubNic=cloudbr0 --prvNic=cloudbr0 --guestNic=cloudbr0 output:[Failed] ibvirt ...bvirt Try to restore your system: Restore SElinux ... -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [DISCUSS] IPv6 support draft functional spec(phase 1)
On Fri, Jan 18, 2013 at 11:48 AM, Anthony Xu xuefei...@citrix.com wrote: Dual stack in user VM or router VM? router VM must have dual stack because link-local is still ipv4, right? Dual-stack is one interface has both IPv4 and IPv6 addresses. If there is dual-stack, it must be at both user VM and router VM, at public interface. Link-local interface of router is still there even it's IPv6 only on public interface. --Sheng Anthony -Original Message- From: Sheng Yang [mailto:sh...@yasker.org] Sent: Friday, January 18, 2013 11:13 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [DISCUSS] IPv6 support draft functional spec(phase 1) On Thu, Jan 17, 2013 at 7:05 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: The spec calls for dualstack, so ipv4 would still work? I think it would be stage 2 of phase 1, after ipv6 stack only. --Sheng On 1/17/13 3:49 PM, Sheng Yang sh...@yasker.org wrote: On Thu, Jan 17, 2013 at 3:26 PM, Alex Huang alex.hu...@citrix.com wrote: We just want to make thing as simple as possible for the phase 1. The service other than DNS/DHCP would be supported later, and depends on how much time we have. How do you present something like this to the end user if it works one way and not another. It needs to be consistent. Let's get the DNS/DHCP part done first... --Sheng
Re: Austin Devops Days
On Mon, Jan 14, 2013 at 7:31 PM, Mark Hinkle mark.hin...@citrix.com wrote: I secured the Lanyard sponsorship for DevOps Days Austinhttp://devopsdays.org/events/2013-austin/ for Citrix but would much rather donate the sponsorship to the Apache CloudStack community and give the project the publicity if no one objects. It also involves the inclusion of two tickets to the event (worth $180 each). I can draw randomly if we have folks that want them. Any objections? Hey Mark - no objection from me, but I'm not sure if this has to go through trademarks@ or not. I think it's a wonderful donation though! Also the Call for Proposals is open it would be cool to see some Devops proposals from folks using CloudStack to be on the program: http://devopsdays.org/events/2013-austin/propose/ Mark Mark R. Hinkle Senior Director, Cloud Computing Community Citrix Systems p: 919.228.8049 e: mark.hin...@citrix.com twitter: @mrhinkle
[jira] [Updated] (CLOUDSTACK-976) unable to start cloudstack (error: java.lang.NoSuchMethodError: org.apache.commons.codec.binary.Base64.encodeBase64URLSafeString([B)Ljava/lang/String;)
[ https://issues.apache.org/jira/browse/CLOUDSTACK-976?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Joe Brockmeier updated CLOUDSTACK-976: -- Fix Version/s: (was: 4.0.1) 4.0.2 unable to start cloudstack (error: java.lang.NoSuchMethodError: org.apache.commons.codec.binary.Base64.encodeBase64URLSafeString([B)Ljava/lang/String;) - Key: CLOUDSTACK-976 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-976 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Affects Versions: 4.0.1 Reporter: Jessica Wang Fix For: 4.0.2 Attachments: awsapi.log, vmops.log steps: (1) get latest code from apache 4.0 branch (2) run mvn -P deps (3) run ant clean-all build-all deploy-server deploydb (4) run ant debug: error: [java] Jan 14, 2013 2:32:21 PM org.apache.catalina.core.StandardContext loadOnStartup [java] SEVERE: Servlet /client threw load() exception [java] java.lang.NoSuchMethodError: org.apache.commons.codec.binary.Base64.encodeBase64URLSafeString([B)Ljava/lang/String; [java] at com.cloud.server.ConfigurationServerImpl.updateSSOKey(ConfigurationServerImpl.java:773) [java] at com.cloud.server.ConfigurationServerImpl.persistDefaultValues(ConfigurationServerImpl.java:223) [java] at com.cloud.server.ConfigurationServerImpl$$EnhancerByCGLIB$$46a32077.CGLIB$persistDefaultValues$0(generated) [java] at com.cloud.server.ConfigurationServerImpl$$EnhancerByCGLIB$$46a32077$$FastClassByCGLIB$$f92a33e4.invoke(generated) [java] at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:228) [java] at com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34) [java] at com.cloud.server.ConfigurationServerImpl$$EnhancerByCGLIB$$46a32077.persistDefaultValues(generated) [java] at com.cloud.servlet.CloudStartupServlet.init(CloudStartupServlet.java:47) [java] at javax.servlet.GenericServlet.init(GenericServlet.java:215) [java] at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1172) [java] at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:992) [java] at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4058) [java] at org.apache.catalina.core.StandardContext.start(StandardContext.java:4371) [java] at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791) [java] at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771) [java] at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525) [java] at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:926) [java] at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:889) [java] at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:492) [java] at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1149) [java] at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311) [java] at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117) [java] at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053) [java] at org.apache.catalina.core.StandardHost.start(StandardHost.java:719) [java] at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045) [java] at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443) [java] at org.apache.catalina.core.StandardService.start(StandardService.java:516) [java] at org.apache.catalina.core.StandardServer.start(StandardServer.java:710) [java] at org.apache.catalina.startup.Catalina.start(Catalina.java:578) [java] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [java] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) [java] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) [java] at java.lang.reflect.Method.invoke(Method.java:597) [java] at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288) [java] at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413) [java] Jan 14, 2013 2:32:22 PM org.apache.coyote.http11.Http11NioProtocol start [java] INFO: Starting Coyote HTTP/1.1 on http-8080 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact
RE: [DISCUSS] IPv6 support draft functional spec(phase 1)
I see -Original Message- From: Sheng Yang [mailto:sh...@yasker.org] Sent: Friday, January 18, 2013 12:17 PM To: cloudstack-dev@incubator.apache.org Subject: Re: [DISCUSS] IPv6 support draft functional spec(phase 1) On Fri, Jan 18, 2013 at 11:48 AM, Anthony Xu xuefei...@citrix.com wrote: Dual stack in user VM or router VM? router VM must have dual stack because link-local is still ipv4, right? Dual-stack is one interface has both IPv4 and IPv6 addresses. If there is dual-stack, it must be at both user VM and router VM, at public interface. Link-local interface of router is still there even it's IPv6 only on public interface. --Sheng Anthony -Original Message- From: Sheng Yang [mailto:sh...@yasker.org] Sent: Friday, January 18, 2013 11:13 AM To: cloudstack-dev@incubator.apache.org Subject: Re: [DISCUSS] IPv6 support draft functional spec(phase 1) On Thu, Jan 17, 2013 at 7:05 PM, Chiradeep Vittal chiradeep.vit...@citrix.com wrote: The spec calls for dualstack, so ipv4 would still work? I think it would be stage 2 of phase 1, after ipv6 stack only. --Sheng On 1/17/13 3:49 PM, Sheng Yang sh...@yasker.org wrote: On Thu, Jan 17, 2013 at 3:26 PM, Alex Huang alex.hu...@citrix.com wrote: We just want to make thing as simple as possible for the phase 1. The service other than DNS/DHCP would be supported later, and depends on how much time we have. How do you present something like this to the end user if it works one way and not another. It needs to be consistent. Let's get the DNS/DHCP part done first... --Sheng
[jira] [Commented] (CLOUDSTACK-938) s2s VPN trouble
[ https://issues.apache.org/jira/browse/CLOUDSTACK-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13557593#comment-13557593 ] Marcus Sorensen commented on CLOUDSTACK-938: Thanks for testing this Richard. I will push these changes into master (minus the debug code), and maybe we should push this bug report back into 4.0.2 as target. The bad rule could mean a few things (maybe it already exists), looks like it was maybe the result of running the: 2013-01-18 23:21:55,403 DEBUG [resource.virtualnetwork.VirtualRoutingResource] (agentRequest-Handler-5:null) Executing: /usr/lib64/cloud/common/scripts/network/domr/router_proxy.sh vpc_snat.sh 169.254.0.22 -A -l 77.95.133.142 -c eth1 It looks like Anthony created that script. If you could iptables -L -v -n and iptables -t nat -L -v -n before and after that might tell us what's going on. Looking at the script it might mean nothing, because they attempt to delete the rule before adding it (presumably a safety measure to avoid duplication), and this error might get spit out due to that if the rule doesn't exist, even though the script succeeds in its duty. s2s VPN trouble --- Key: CLOUDSTACK-938 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-938 Project: CloudStack Issue Type: Bug Security Level: Public(Anyone can view this level - this is the default.) Components: Network Controller Affects Versions: 4.0.0, 4.0.1 Environment: CentOS 6.3 x86_64 CS - 4.0.1-0.11 Reporter: Richard Shevel Fix For: 4.0.2, 4.1.0 Attachments: after_restart_VPC.zip, auth.log, catalina.zip, management-server_afer_upgrade2.zip, management-server_after_upgrade.zip, management-server.zip, messages, public.png, r-292-vm_log.tar.gz Dear colleagues, the problem is clearly a bug: I created a VPC Further, in my VPN Customer Gateway to the settings Gateway 217.70.20.213 CIDR list 192.168.10.0/24 IPsec Preshared-Key blablablablablabla IKE Encryption 3des IKE Hash md5 IKE DH None ESP Encryption 3des ESP Hash md5 Perfect Forward Secrecy None IKE lifetime (second) 86 400 ESP Lifetime (second) 28 800 Dead Peer Detection Yes In the setting of VPC I create VPN Gateway When creating a VPN Connection get the error: Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN catalina.out: WARN [cloud.api.ApiDispatcher] (Job-Executor-11:job-463) class com.cloud.api.ServerApiException : Resource [Site2SiteVpnConnection:15] is unreachable: Failed to apply site-to-site VPN WARN [cloud.async.AsyncJobManagerImpl] (Job-Executor-11:job-463) Unable to unregister active job 463 from JMX monitoring WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status WARN [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:) Unable to update router r-288-VM's VPN connection status management-server.log: 2013-01-09 21:27:54,587 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-4:null) Ping from 5 2013-01-09 21:27:54,623 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-2:null) Ping from 3 2013-01-09 21:28:17,546 DEBUG [storage.secondary.SecondaryStorageManagerImpl] (secstorage-1:null) Zone 1 is ready to launch secondary storage VM 2013-01-09 21:28:17,656 DEBUG [cloud.consoleproxy.ConsoleProxyManagerImpl] (consoleproxy-1:null) Zone 1 is ready to launch console proxy 2013-01-09 21:28:18,306 DEBUG [network.router.VirtualNetworkApplianceManagerImpl] (RouterStatusMonitor-1:null) Found 3 routers. 2013-01-09 21:28:18,316 DEBUG [agent.transport.Request] (RouterStatusMonitor-1:null) Seq 5-223284290: Sending { Cmd , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 100111, [{CheckS2SVpnConnectionsCommand:{vpnIps:[],accessDetails:{router.ip:169.254.1.232,router.name:r-288-VM},wait:30}}] } 2013-01-09 21:28:18,458 DEBUG [agent.transport.Request] (AgentManager-Handler-3:null) Seq 5-223284290: Processing: { Ans: , MgmtId: 52239887788, via: 5, Ver: v1, Flags: 110, [{CheckS2SVpnConnectionsAnswer:{ipToConnected:{},ipToDetail:{},details:CheckS2SVpnConneciontsCommand failed,result:false,wait:0}}] } 2013-01-09 21:28:18,458 DEBUG [agent.manager.AgentAttache] (AgentManager-Handler-3:null) Seq 5-223284290: No more commands found