Re: CoreOS images http://dl.openvm.eu/
Yep. These templates are using SSH keys only. I remember having the same issue and wasting an hour or so figuring out the root password ;) Although, cloud-init works well :) That's the good news I guess! FG On 2015-06-30 10:27 AM, Len Bellemore wrote: Nice one. I'll check this out. Len -Original Message- From: Jeff Moody [mailto:j...@fifthecho.com] Sent: 30 June 2015 15:16 To: users@cloudstack.apache.org Subject: Re: CoreOS images http://dl.openvm.eu/ You would need to register an SSH key and then deploy the VM with the keypair option to have the Router VM offer the SSH key to the instance when it boots. http://cloudstack.apache.org/api/apidocs -4.5/user/deployVirtualMachine.html On Tue, 2015-06-30 at 14:02 +, Len Bellemore wrote: Hi Guys, Has anyone used the CoreOS Cloudstack templates on http://dl.openvm.eu/? It seems like CoreOS access is only via SSH keys, but since these are templates, how do I log in? Am I missing something? Cheers Len -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Re: Windows Template Startup time
Windows instances are usually having a much bigger size than the typical
Linux VM. It's normal to take longer. Even with 10GB network, it can
take up to 5 minutes depending of the load on our SS.
FG
On 2015-06-29 10:28 AM, Timothy Lothering wrote:
Hi Prashant,
There are a couple of questions here:
1. Has your hardware been configured for optimal I/O throughput?
2. Have you installed XenTools on the VM?
Slow VM Template Deployment:
Initial Template download from SS is dependent on the SSVM, CPU, RAM and Network speed. Check
that all of these have been configured to optimal speed size. Initial template
deployment is slow as the template needs to be copied from SS first. Subsequent
deployments should be faster.
Slow VM Reboot:
This is dependent on the hardware configuration and whether PV drivers
(XenTools) have been installed.
Kind Regards,
Timothy Lothering
Timothy Lothering
Solutions Architect
Managed Services
T: +27877415535
F: +27877415100
C: +27824904099
E: tlother...@datacentrix.co.za
DISCLAIMER NOTICE:
Everything in this e-mail and any attachments relating to the official business
of Datacentrix Holdings Ltd. and its subsidiaries
('Datacentrix') is proprietary to Datacentrix. It is confidential, legally
privileged and protected by law. Datacentrix does not
own and endorse any other content. Views and opinions are those of the sender
unless clearly stated as being that of Datacentrix.
The person addressed in the e-mail is the sole authorised recipient. Please
notify the sender immediately if it has unintentionally
reached you and do not read, disclose or use the content in any way.
Datacentrix cannot assure that the integrity of this communication
has been maintained nor that it is free of errors, virus, interception or
interference.
-Original Message-
From: prashant priyam [mailto:prashant_pri...@outlook.com]
Sent: 29 June 2015 04:07 PM
To: d...@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Windows Template Startup time
Hi,
I have create a windows server 2012 R2 64 bit template with 8 vCPU and 16Gbs
RAM and 350Gbs as Root Disk and created template on cloudstack 4.3 and xen
server 6.2 .
Now when I porvision vm with this template it takes around 15 minutes to start
the VM and after creation it again takes around 20 minutes to reboot the VM.
Please help how can I minimize the reboot time .
With warm regards,Prashant
Priyam(+91-8802955489)http://in.linkedin.com/in/prashantpriyam
--
Francois Gaudreault
Gestionnaire de Produit | Product Manager - Cloud Platform Services
t:514-629-6775
CloudOps Votre partenaire infonuagique | Cloud Solutions Experts
420 rue Guy | Montreal | Quebec | H3J 1S6
w: cloudops.com | tw: @CloudOps_
Re: VPC: ACL rule removal
You cannot delete, only replace an ACL rule on a tier. The button is not obvious, and will show under the tier details page. Look for the little + and square button. Highlight them and look for replace acl caption. FG On May 25, 2015 7:34 AM, Vadim Kimlaychuk vadim.kimlayc...@elion.ee wrote: Hello all, I couldn’t find “delete” ACL rule button or link. I am able to create new ACL rules for VPC, but not delete them. Is it supposed to be like that? Regards, Vadim
Dedicate Secondary Storage
Hi, Is dedicating a specific secstor is something possible? We have a weird use case where we want to use object storage as the main store but a customer requires a separate store to do post-snapshot actions on the files. Thanks! Francois
Re: Dedicate Secondary Storage
Ok. Will do that :) Thanks Rajesh! FG On 2015-03-11 11:48 AM, Rajesh Battala wrote: Hi Francois, AFAIK, there is no option/provision to dedicate the secondary store. You can raise feature request for it with use cases. Thanks Rajesh Battala -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Wednesday, March 11, 2015 6:34 PM To: users@cloudstack.apache.org Subject: Dedicate Secondary Storage Hi, Is dedicating a specific secstor is something possible? We have a weird use case where we want to use object storage as the main store but a customer requires a separate store to do post-snapshot actions on the files. Thanks! Francois -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Re: Cancel hung jobs
Thanks for the info. I finally ended up restarting the management servers since there was a DB split-brain issue underneath. FG On 2015-01-06 12:32 PM, ilya musayev wrote: Here are my notes on cleaning up stuck VmWorkJobQueue, i use MySQL workbench to make changes interactively... Messages in log file: (1013,VmWorkJobQueue, 2375) is reaching concurrency limit 1 (1013,VmWorkJobQueue, 2375) is reaching concurrency limit 1 (1433,VmWorkJobQueue, 2470) is reaching concurrency limit 1 (1434,VmWorkJobQueue, 2471) is reaching concurrency limit 1 (1475,VmWorkJobQueue, 2483) is reaching concurrency limit 1 (1477,VmWorkJobQueue, 2484) is reaching concurrency limit 1 (1478,VmWorkJobQueue, 596) is reaching concurrency limit 1 (981,VmWorkJobQueue, 2371) is reaching concurrency limit 1 -- DELETE ALL FROM BELOW - not exact mysql query, i just did select first and then deleted rows via mysql workbench. SELECT * FROM cloud.sync_queue_item where queue_id=981 or queue_id=1478 or queue_id=1477 or queue_id=1475 or queue_id=1434 or queue_id=1433 or queue_id=1013 ; SELECT * FROM cloud.sync_queue where id=1433 or id=1434 or id=1475 or id=1477 or id=1478 or id=981; On 1/6/15 1:27 AM, Prashant Kumar Mishra wrote: Restart MS should work . If you don¹t want to restart clean it manually from db , it seems because of one unfinished job , other jobs is also pending . On 1/6/15, 4:09 AM, Francois Gaudreault fgaudrea...@cloudops.com wrote: These are 60min and 1440min for standard jobs and 600sec for vm related jobs right? I have tasks that are from dec 27 still in there and these are vm jobs. FG On Jan 5, 2015 5:25 PM, Motty Cruz motty.c...@gmail.com wrote: Francois, you can change timeout default settings in global settings, if you have not done so. Thanks, Motty On 01/05/2015 02:09 PM, Francois Gaudreault wrote: Yes. And also tons of job in the async_job table with status 0. FG On 2015-01-05 4:54 PM, ilya musayev wrote: Do you see something along the lines of below? please provide the complete error message. (1434,VmWorkJobQueue, 2471) is reaching concurrency limit 1 (1475,VmWorkJobQueue, 2483) is reaching concurrency limit 1 (1477,VmWorkJobQueue, 2484) is reaching concurrency limit 1 (1478,VmWorkJobQueue, 596) is reaching concurrency limit 1 (981,VmWorkJobQueue, 2371) is reaching concurrency limit 1 On 1/5/15, 1:40 PM, Francois Gaudreault wrote: Hi folks, What would be the best way to cancel jobs that are stuck? I was expecting them to timeout, but for some reasons they are not. Thanks. -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Cancel hung jobs
Hi folks, What would be the best way to cancel jobs that are stuck? I was expecting them to timeout, but for some reasons they are not. Thanks. -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Re: Cancel hung jobs
These are 60min and 1440min for standard jobs and 600sec for vm related jobs right? I have tasks that are from dec 27 still in there and these are vm jobs. FG On Jan 5, 2015 5:25 PM, Motty Cruz motty.c...@gmail.com wrote: Francois, you can change timeout default settings in global settings, if you have not done so. Thanks, Motty On 01/05/2015 02:09 PM, Francois Gaudreault wrote: Yes. And also tons of job in the async_job table with status 0. FG On 2015-01-05 4:54 PM, ilya musayev wrote: Do you see something along the lines of below? please provide the complete error message. (1434,VmWorkJobQueue, 2471) is reaching concurrency limit 1 (1475,VmWorkJobQueue, 2483) is reaching concurrency limit 1 (1477,VmWorkJobQueue, 2484) is reaching concurrency limit 1 (1478,VmWorkJobQueue, 596) is reaching concurrency limit 1 (981,VmWorkJobQueue, 2371) is reaching concurrency limit 1 On 1/5/15, 1:40 PM, Francois Gaudreault wrote: Hi folks, What would be the best way to cancel jobs that are stuck? I was expecting them to timeout, but for some reasons they are not. Thanks.
Re: Cancel hung jobs
Yes. And also tons of job in the async_job table with status 0. FG On 2015-01-05 4:54 PM, ilya musayev wrote: Do you see something along the lines of below? please provide the complete error message. (1434,VmWorkJobQueue, 2471) is reaching concurrency limit 1 (1475,VmWorkJobQueue, 2483) is reaching concurrency limit 1 (1477,VmWorkJobQueue, 2484) is reaching concurrency limit 1 (1478,VmWorkJobQueue, 596) is reaching concurrency limit 1 (981,VmWorkJobQueue, 2371) is reaching concurrency limit 1 On 1/5/15, 1:40 PM, Francois Gaudreault wrote: Hi folks, What would be the best way to cancel jobs that are stuck? I was expecting them to timeout, but for some reasons they are not. Thanks. -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Re: Wasting Time !
One thing I agree for sure, the thread title is right, that discussion is starting to be a waste of time :) (although very entertaining) FG On 2014-11-17 4:36 AM, sebgoa wrote: On Nov 15, 2014, at 8:00 PM, Mohammad Mahdi Raja mr...@shirazu.ac.ir wrote: Thanks for your answers, I installed different version on different infrastructure during the time. It is somehow much more unstable that other competitors. Many non-documented issues and many unpredictable problems. I know that we are all here to help each others to feel good about it, but I think we are wasting our times on solving issues instead of doing business ! Any one disagrees ? Yes, I do, I 100% disagree. Just buy my book and you will be enlightened: http://shop.oreilly.com/product/0636920034377.do Ps: slighlty sarcastic answer :) enjoy On Mon, Nov 10, 2014 12:33 PM, Osay Osman Yuuni oyu...@gmail.com wrote: Hi Mohammed, I'd be interested to know why you think Cloudstack is waiting our time? Do you have any specific issues that need addressing that you could not? By Cloudstack who do you actually mean? The contributors, users, governance? Unless you're able to tell us what makes you think Cloudstack is wasting our times I'm afraid I don't see how we can agree with you. Osay On 10 November 2014 10:54, Vihar vih1...@gmail.com wrote: Was your questions not answered? Or you have issues with setting up cloudstack? Regards Vihar K On Nov 10, 2014 2:19 PM, Erik Weber terbol...@gmail.com wrote: On Mon, Nov 10, 2014 at 9:25 AM, Mohammad Mahdi Raja mr...@shirazu.ac.ir wrote: Dear All, Does every one have the sense that CloudStack is wasting our times ? Unfortunately I think so. It's probably easier to answer your feelings if you describe a bit more why you're feeling that way. Why is CloudStack wasting your time? How can it be improved to not waste your time? etc. -- Erik -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Re: Netscaler VPC and multiple inter tiers LB
Hi Benoit, The limitations that you describes are exactly what the implementation is. Dedicated VPX per VPC, only public LB for one tier. However, there is a reasoning behind this. Since users can control their tier subnets, you may have overlapping. That's why you can't have a shared NetScaler for the VPCs. You can't do inter-tier load balancing using the NetScaler if you have it inside CloudStack. To be honest, we also feel this is a huge problem, and we will likely look at our options. You need to use the Internal LB for that piece. Hope it helps/confirms your thoughts :) Francois On 2014-09-05, 6:03 AM, benoit lair wrote: Hello Folks, I'm testing Netscaler VPX with acs 4.3. I have several VPCs deployed into my cloud. I would like to get my netscaler working with my vpcs. So from what i have tested, it seems that : - i can't share a VPX with more than one VPC ? - in order to get my netscaler working with my vpc, i need to declare it dedicated. So it can't be used both with vpc tiers and isolated networks ? - i can use netscaler with a vpc only with public tier (means external tier) Can you confirm these limitations, or is it due to a misconfiguration of my own networks offerings ? So another question is : How can i achieve ns-lb with several tiers in a vpc ? I have a vpc with web-tier, app-tier and sql-tier : how can i have in the same time, nslb between outside and web-tier, nslb between web-tier and app-tier and nslb between app-tier and sql-tier, having only one VPX ? Thanks four your lights. Regards, Benoit. -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Changing VPC VR system offering
HI, Where can I assign another System Offering to my VPC VR? I can select it for shared networks, but not VRs Thanks! -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Re: Failed Site-to-Site VPN 4.4.0 - Error due semicolon
David, Daan just cherry-picked the fix from master to 4.4.1. Should be fixed in the release ;) FG On 2014-08-29, 4:43 AM, David Amorín wrote: Thanks Erik for your response. My colleagues have resolved this issue in CS 4.4.0 modifying one script in XenServer, at least we have VPN Site-to-Site tunnels with this version. I hope this issue is resolved with CS 4.4.1 Best -Mensaje original- De: Erik Weber [mailto:terbol...@gmail.com] Enviado el: jueves, 28 de agosto de 2014 22:05 Para: users@cloudstack.apache.org Asunto: Re: Failed Site-to-Site VPN 4.4.0 - Error due semicolon On Thu, Aug 28, 2014 at 8:53 PM, David Amorín david.amo...@adderglobal.com wrote: Hi, We are having issues to establish VPN Site-to-Site with our VPC based in CS 4.4.0 We see this issue already identified https://issues.apache.org/jira/browse/CLOUDSTACK-7124 but it says that only affects the version 4.5.0. Can somebody confirm if this issue affects also the version 4.4.0? My experience is that 'Affected version(s)' is entered with the version someone first experience it in. That doesn't mean it doesn't exist in any other release. If you have the same error message and have excluded typos etc. it is very likely that you experience the same bug. -- Erik -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Upgrade VR template
What is the process to upgrade the VR template? Say I have a VR with the OpenSwan bug, and I want to replace it with my own? What is the process? Thanks! FG
Re: Swift as secondary storage
Nobody out there using Swift as secondary storage? :S FG On 2014-07-24, 10:27 AM, Francois Gaudreault wrote: Simple question: Anybody using this is integration in production? What is the UX? Does it require tmp_auth? Thanks! -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Swift as secondary storage
Simple question: Anybody using this is integration in production? What is the UX? Does it require tmp_auth? Thanks! -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services t:514-629-6775 CloudOps Votre partenaire infonuagique | Cloud Solutions Experts 420 rue Guy | Montreal | Quebec | H3J 1S6 w: cloudops.com | tw: @CloudOps_
Realhostip Replacement
Hi all, I understand that this dependency has been fixed in 4.3, but if we require SSL, we need to do our own DNS integration, correct? We were thinking to provide a community-wide service to replace realhostip. Would that be something the community would use? Basically, you provide the SSL cert, we provide the DNS resolution piece for your domain. -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Realhostip Replacement
On 2014-05-01, 3:44 PM, Amogh Vasekar wrote: Hi, On 5/1/14 11:58 AM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Basically, you provide the SSL cert, we provide the DNS resolution piece for your domain. So you provide a DNS for every domain a user might have? Amogh That was the plan, yes. I guess we could have a signup page just to avoid abuse, but at the end it's something easy to do. -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Presentation videos from CloudStack Collab Conference #CCCNA14
Well at least one of the presentation we made is missing. FG On 2014-05-01, 5:48 PM, Amogh Vasekar wrote: Hi, Are some of the videos missing? Amogh On 5/1/14 2:39 PM, Karen Vuong karen.vu...@citrix.com wrote: Hi Adrian, The Linux Foundation is uploading the full video and correcting the typo. It will be up in a few days. Thanks, Karen -Original Message- From: Adrian Lewis [mailto:adr...@alsiconsulting.co.uk] Sent: Thursday, May 01, 2014 3:05 AM To: users@cloudstack.apache.org; fgaudrea...@cloudops.com; market...@cloudstack.apache.org Subject: RE: Presentation videos from CloudStack Collab Conference #CCCNA14 And Integration of Citrex XenDesktop and XenApp with CloudStack - Paul Howard is cut short to about 4 minutes. Is this the right place to report things like this? Would also be nice to correct the typo if it's being uploaded again. Adrian -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: 01 May 2014 02:20 To: users@cloudstack.apache.org; market...@cloudstack.apache.org Subject: Re: Presentation videos from CloudStack Collab Conference #CCCNA14 Looks like some are still missing? Francois On 2014-04-30, 5:03 PM, Tariq Iqbal wrote: Hi, The presentation videos from the CloudStack Collaboration Conference North America 2014 held in Denver earlier this month are now available: https://www.youtube.com/playlist?list=PLU2OcwpQkYCyPx_cwJxyOK0YKSM86Mj 9napp=desktop Best Regards, Tariq Iqbal *Senior Consultant* ** Description: Mail Logo Bottom Align** ** S: +44 20 3603 0540 tel:+442036030540 | M: +447909911600 tel:+447909911600 tariq.iq...@shapeblue.com mailto:tariq.iq...@shapeblue.com | www.shapeblue.com http://www.shapeblue.com/ | Twitter:@shapeBlue https://twitter.com/#%21/shapeblue | Twitter:@TariqIqbal_ https://twitter.com/tariqiqbal_ ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Build http://shapeblue.com/iaas-cloud-design-and-build// CSForge rapid IaaS deployment framework http://shapeblue.com/csforge/ CloudStack Consulting http://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Support http://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courses http://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Presentation videos from CloudStack Collab Conference #CCCNA14
Looks like some are still missing? Francois On 2014-04-30, 5:03 PM, Tariq Iqbal wrote: Hi, The presentation videos from the CloudStack Collaboration Conference North America 2014 held in Denver earlier this month are now available: https://www.youtube.com/playlist?list=PLU2OcwpQkYCyPx_cwJxyOK0YKSM86Mj9napp=desktop Best Regards, Tariq Iqbal *Senior Consultant* ** Description: Mail Logo Bottom Align** ** S: +44 20 3603 0540 tel:+442036030540 | M: +447909911600 tel:+447909911600 tariq.iq...@shapeblue.com mailto:tariq.iq...@shapeblue.com | www.shapeblue.com http://www.shapeblue.com/ | Twitter:@shapeBlue https://twitter.com/#%21/shapeblue | Twitter:@TariqIqbal_ https://twitter.com/tariqiqbal_ ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS Find out more about ShapeBlue and our range of CloudStack related services IaaS Cloud Design Build http://shapeblue.com/iaas-cloud-design-and-build// CSForge – rapid IaaS deployment framework http://shapeblue.com/csforge/ CloudStack Consulting http://shapeblue.com/cloudstack-consultancy/ CloudStack Infrastructure Support http://shapeblue.com/cloudstack-infrastructure-support/ CloudStack Bootcamp Training Courses http://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Gestionnaire de Produit | Product Manager - Cloud Platform Services fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: CloudStack-BIND dns integration
Well done Ihor :) FG On 2014-04-16, 2:25 PM, ilya musayev wrote: This is pretty cool. I’ll give it a try soon, thanks for contributing, I forked your repo on github. -ilya On Wednesday, April 16, 2014, Ihor Kravchuk ingvar...@gmail.com wrote: Hi , I made a small python program that solves DNS integration issues between CloudStack VR's DNS service and BIND DNS. This program assumes that you are using one sub-domain per network(each network has own sub-domain) (IMHO the best way fro naming instances in CloudStack) How it works: This program runs on CloudStack management server and listen for the new vm deployment using CloudStack catalina.out log. On event (new host deployed) program calls CloudStack API and gets list of Networks and list of VM. Using theses lists and preconfigured domain settings it creates the zone file for BIND, push it to server and refresh BIND The source code for the event driven version on GitHub: https://github.com/IhorKravchuk/cloudstack_ingvar/ All parameters load from dns_builder.conf file and local and remote (from CloudStack mgmt server prospective) BIND DNS servers supported. Igor -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: LXC template
Sure! In fact, that was in a blog post that never got released on our side :S I also have the host build piece documented. Where it would be the best to drop that? In the LXC section of the doc or as an annexe or in the wiki? Francois On Sat, Apr 5, 2014 at 4:16 PM, David Nalley da...@gnsa.us wrote: Would you consider adding this as part of the documentation? Or at least as a blog post? --David On Wed, Apr 2, 2014 at 11:07 AM, Francois Gaudreault fgaudrea...@cloudops.com wrote: On 2014-04-02, 1:34 AM, Chinu wrote: Hello all, Please can someone advice how to create an LXC template image in tar format to spawn containers in KVM for Cloudstack version 4.2 or 4.3 Regards, Chinu I have that. This is for a CentOS image. I apologize for the formatting, I am using text emails ;) On your *HOST* run: |mkdir||/var/lib/libvirt/lxc/centos-6-x86_64/etc/yum||.repos.d/ -p | |cat||/etc/yum||.repos.d||/CentOS-Base||.repo |||sed||s/||'$releasever'||/6/g/var/lib/libvirt/lxc/centos-6-x86_64/etc/yum||.repos.d||/CentOS-Base||.repo| |yum groupinstall core --installroot=||/var/lib/libvirt/lxc/centos-6-x86_64/||--nogpgcheck -y| |yum||install||plymouth libselinux-python --installroot=||/var/lib/libvirt/lxc/centos-6-x86_64/||--nogpgcheck -y| On your *CHROOTED* container: |chroot||/var/lib/libvirt/lxc/centos-6-x86_64/| |echo||password |||passwd||root --stdin| |#Fix root login on console| |echo||pts/0/etc/securetty| |sed||-i s/||session required pam_selinux.so close||/||#session required pam_selinux.so close||/g||/etc/pam||.d||/login| |sed||-i s/||session required pam_selinux.so open||/||#session required pam_selinux.so open||/g||/etc/pam||.d||/login| |sed||-i s/||session required pam_loginuid.so||/||#session required pam_loginuid.so||/g||/etc/pam||.d||/login| |#Configuring basic networking| |cat/etc/sysconfig/network|| EOF| |NETWORKING=||yes| |HOSTNAME=lxc1.||test||.centos.org| |EOF| |cat/etc/sysconfig/network-scripts/ifcfg-eth0|| EOF| |DEVICE=eth0| |BOOTPROTO=dhcp| |ONBOOT=||yes| |EOF| |#Enabling sshd| |chkconfig sshd on| |# Fixing root login for sshd| |sed||-i s/||session required pam_selinux.so close||/||#session required pam_selinux.so close||/g||/etc/pam||.d||/sshd| |sed||-i s/||session required pam_loginuid.so||/||#session required pam_loginuid.so||/g||/etc/pam||.d||/sshd| |sed||-i s/||session required pam_selinux.so open env_params||/||#session required pam_selinux.so open env_params||/g||/etc/pam||.d||/sshd| || |cat/etc/fstab|| END| |/dev/root| |/ rootfs defaults0 0| |none ||/dev/shm| |tmpfs nosuid,nodev0 0| |END| || |cat/etc/init/lxc-sysinit||.conf END| |start on startup| |env||container| |pre-start script| |||if||[||x$container||!=||xlxc||-a||x$container||!=||xlibvirt||];||then| |||stop;| |||fi| |||initctl start||tty||TTY=console| |||rm||-f||/var/lock/subsys/||*| |||rm||-f||/var/run/||*.pid| |||telinit 3| |||exit||0;| |end script| |END| || |#Exit the chroot| |exit| Tar it: |cd||/var/lib/libvirt/lxc/centos-6-x86_64| |tar||cvf centos-6-x86_64_lxc.||tar||. Upload to CloudStack and enjoy! | -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: LXC template
You need a real hypervisor to run your SSVM and CPVM (ie. KVM, Xen, etc.) You can't run the SSVM only on LXC. Francois On 2014-04-04, 4:32 PM, chinu shah wrote: Thank you Francois for the information. Please could you tell me which cloudstack template to use for spawning systems VMS on a LXC to spawn containers. I used LXC template found in database which was very old | 10 | SystemVM Template (LXC) | http://download.cloud.com/templates/acton/acton-systemvm-02062012.qcow2.bz2 | SYSTEM | LXC | which did not work as cloudstack release was too old, then I tried with | 3 | SystemVM Template (KVM) | http://download.cloud.com/templates/4.2/systemvmtemplate-2013-06-12-master-kvm.qcow2.bz2 | SYSTEM | KVM. Still my system VMs were rebooting only 1 VM is up at a time. Any Advice would be appreciated Thank you Regards, Chinu On Wed, Apr 2, 2014 at 8:12 AM, Francois Gaudreault fgaudrea...@cloudops.com mailto:fgaudrea...@cloudops.com wrote: On 2014-04-02, 1:34 AM, Chinu wrote: Hello all, Please can someone advice how to create an LXC template image in tar format to spawn containers in KVM for Cloudstack version 4.2 or 4.3 Regards, Chinu Ok, the output was not as good as I though. Use this link instead :) http://pastebin.com/PuZd9gw6 -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com mailto:fgaudrea...@cloudops.com 514-629-6775 tel:514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com http://www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: LXC template
On 2014-04-02, 1:34 AM, Chinu wrote: Hello all, Please can someone advice how to create an LXC template image in tar format to spawn containers in KVM for Cloudstack version 4.2 or 4.3 Regards, Chinu I have that. This is for a CentOS image. I apologize for the formatting, I am using text emails ;) On your *HOST* run: |mkdir||/var/lib/libvirt/lxc/centos-6-x86_64/etc/yum||.repos.d/ -p | |cat||/etc/yum||.repos.d||/CentOS-Base||.repo |||sed||s/||'$releasever'||/6/g/var/lib/libvirt/lxc/centos-6-x86_64/etc/yum||.repos.d||/CentOS-Base||.repo| |yum groupinstall core --installroot=||/var/lib/libvirt/lxc/centos-6-x86_64/||--nogpgcheck -y| |yum||install||plymouth libselinux-python --installroot=||/var/lib/libvirt/lxc/centos-6-x86_64/||--nogpgcheck -y| On your *CHROOTED* container: |chroot||/var/lib/libvirt/lxc/centos-6-x86_64/| |echo||password |||passwd||root --stdin| |#Fix root login on console| |echo||pts/0/etc/securetty| |sed||-i s/||session required pam_selinux.so close||/||#session required pam_selinux.so close||/g||/etc/pam||.d||/login| |sed||-i s/||session required pam_selinux.so open||/||#session required pam_selinux.so open||/g||/etc/pam||.d||/login| |sed||-i s/||session required pam_loginuid.so||/||#session required pam_loginuid.so||/g||/etc/pam||.d||/login| |#Configuring basic networking| |cat/etc/sysconfig/network|| EOF| |NETWORKING=||yes| |HOSTNAME=lxc1.||test||.centos.org| |EOF| |cat/etc/sysconfig/network-scripts/ifcfg-eth0|| EOF| |DEVICE=eth0| |BOOTPROTO=dhcp| |ONBOOT=||yes| |EOF| |#Enabling sshd| |chkconfig sshd on| |# Fixing root login for sshd| |sed||-i s/||session required pam_selinux.so close||/||#session required pam_selinux.so close||/g||/etc/pam||.d||/sshd| |sed||-i s/||session required pam_loginuid.so||/||#session required pam_loginuid.so||/g||/etc/pam||.d||/sshd| |sed||-i s/||session required pam_selinux.so open env_params||/||#session required pam_selinux.so open env_params||/g||/etc/pam||.d||/sshd| || |cat/etc/fstab|| END| |/dev/root| |/ rootfs defaults0 0| |none ||/dev/shm| |tmpfs nosuid,nodev0 0| |END| || |cat/etc/init/lxc-sysinit||.conf END| |start on startup| |env||container| |pre-start script| |||if||[||x$container||!=||xlxc||-a||x$container||!=||xlibvirt||];||then| |||stop;| |||fi| |||initctl start||tty||TTY=console| |||rm||-f||/var/lock/subsys/||*| |||rm||-f||/var/run/||*.pid| |||telinit 3| |||exit||0;| |end script| |END| || |#Exit the chroot| |exit| Tar it: |cd||/var/lib/libvirt/lxc/centos-6-x86_64| |tar||cvf centos-6-x86_64_lxc.||tar||. Upload to CloudStack and enjoy! | -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: LXC template
On 2014-04-02, 1:34 AM, Chinu wrote: Hello all, Please can someone advice how to create an LXC template image in tar format to spawn containers in KVM for Cloudstack version 4.2 or 4.3 Regards, Chinu Ok, the output was not as good as I though. Use this link instead :) http://pastebin.com/PuZd9gw6 -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Cannot add data drive if my VM has a snapshot?
Hi, In 4.2.1, is this an expected behavior for not being able to attach a data drive to a server that has a VM snapshot? It's a little odd that you can't do that especially when I can do it on XenCenter (for instance). Is it the same in 4.3.0? -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Cannot mount ISO on XS6.2 SP1 and CS 4.2.1
Hi, Anyone faced that issue on 4.2.1 where you can't mount ISO to a VM while you can mount the same ISO to another VM? :S This is the stack trace. Any ideas? 2014-02-12 20:13:44,060 DEBUG [agent.manager.DirectAgentAttache] (DirectAgent-454:null) Seq 1-1166937279: Executing request 2014-02-12 20:13:44,182 WARN [xen.resource.CitrixResourceBase] (DirectAgent-454:null) can not getVDIbyLocationandSR 223-2-d0e89fa1-fcaf-3180-ae86-5aeab5d7a8b1.iso 2014-02-12 20:13:44,183 WARN [xen.resource.XenServerStorageProcessor] (DirectAgent-454:null) Failed to attach iso: com.cloud.utils.exception.CloudRuntimeException: Could not find ISO with URL: nfs://10.100.4.110/data/prod_zone/template/tmpl/2/223/223-2-d0e89fa1-fcaf-3180-ae86-5aeab5d7a8b1.iso com.cloud.utils.exception.CloudRuntimeException: Could not find ISO with URL: nfs://10.100.4.110/data/prod_zone/template/tmpl/2/223/223-2-d0e89fa1-fcaf-3180-ae86-5aeab5d7a8b1.iso at com.cloud.hypervisor.xen.resource.CitrixResourceBase.getIsoVDIByURL(CitrixResourceBase.java:7638) at com.cloud.hypervisor.xen.resource.XenServerStorageProcessor.attachIso(XenServerStorageProcessor.java:127) at com.cloud.hypervisor.xen.resource.XenServerStorageProcessor.attachIso(XenServerStorageProcessor.java:86) at com.cloud.storage.resource.StorageSubsystemCommandHandlerBase.execute(StorageSubsystemCommandHandlerBase.java:127) at com.cloud.storage.resource.StorageSubsystemCommandHandlerBase.handleStorageCommands(StorageSubsystemCommandHandlerBase.java:55) at com.cloud.hypervisor.xen.resource.CitrixResourceBase.executeRequest(CitrixResourceBase.java:625) at com.cloud.hypervisor.xen.resource.XenServer56Resource.executeRequest(XenServer56Resource.java:59) at com.cloud.hypervisor.xen.resource.XenServer610Resource.executeRequest(XenServer610Resource.java:106) at com.cloud.agent.manager.DirectAgentAttache$Task.run(DirectAgentAttache.java:186) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$101(ScheduledThreadPoolExecutor.java:165) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:266) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:701) -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: AWS EC2 API Issues
Hi, I am trying to get the EC2 API to work, and I am getting some exceptions from the CloudStack server: Server: org.apache.axis2.databinding.ADBException: Unexpected subelement DescribeAvailabilityZones Anyone has an idea? I have been able to register my user/keys successfully without issues. Francois, which version are you using ? Starting in 4.2 you don't need to register the user anymore. If you use the REST EC2 API that should work out of the box. Are you successful with other calls ? This is a 4.2.0 setup. I am trying to use the EC2 tools. Francois
AWS EC2 API Issues
Hi, I am trying to get the EC2 API to work, and I am getting some exceptions from the CloudStack server: Server: org.apache.axis2.databinding.ADBException: Unexpected subelement DescribeAvailabilityZones Anyone has an idea? I have been able to register my user/keys successfully without issues. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: SSVM/CPVM Agent State Alert
Hi, Yes, the VIP was is in the host field. It seems that if I turn agent.lb.enabled to true, then all the problems are fixed. I believe by turning this flag on, the IP used for the agent are not the VIP, but each member's IP. Correct? Or it was just a coincidence? Thanks! On 1/29/2014, 1:48 AM, Vadim Kimlaychuk wrote: Hi, Can you give more information about your network configuration? Did you run ssvm-check.sh script as described here? https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM,+templates,+Secondary+storage+troubleshooting I guess the reason may be caused by incorrect host setting at your global config. Host should point to VIP and VIP should balance the load and in a case of one node failure forward all traffic to the active node. If host setting shows IP of the server that is down - SSVM will try to connect it directly and obviously fails Vadim. -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Tuesday, January 28, 2014 11:10 PM To: users@cloudstack.apache.org Subject: SSVM/CPVM Agent State Alert Is there any reasons why my SSVM/CPVM agent state would stay in the alert state if I loose one management server from an active/active pair? Unless I restart the agent manually on each System VM, the state will stay to Alert. I tried to search the logs but didn't find clear evidences of the why. Anyone has more thoughts about this? We are on 4.2.1. Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: SSVM/CPVM Agent State Alert
Great, so this explains why it works properly now with that flag on. Thanks Goeff! Francois On 1/29/2014, 7:54 AM, Geoff Higginbottom wrote: agent.lb.enabled deals with the LB of Hosts and System VMs. If running with more than one management server, this should be enabled. Hosts and System VMs have a management server allocated to manage them, as listed in the 'mgmt_server_id' entry in the 'host' table in the DB. When a Management Server goes offline, all Hosts and System VMs which were allocated to the failed Management Server are re-allocated to any remaining servers. Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: 29 January 2014 12:49 To: users@cloudstack.apache.org Subject: Re: SSVM/CPVM Agent State Alert Hi, Yes, the VIP was is in the host field. It seems that if I turn agent.lb.enabled to true, then all the problems are fixed. I believe by turning this flag on, the IP used for the agent are not the VIP, but each member's IP. Correct? Or it was just a coincidence? Thanks! On 1/29/2014, 1:48 AM, Vadim Kimlaychuk wrote: Hi, Can you give more information about your network configuration? Did you run ssvm-check.sh script as described here? https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM,+templates,+Secondary+storage+troubleshooting I guess the reason may be caused by incorrect host setting at your global config. Host should point to VIP and VIP should balance the load and in a case of one node failure forward all traffic to the active node. If host setting shows IP of the server that is down - SSVM will try to connect it directly and obviously fails Vadim. -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Tuesday, January 28, 2014 11:10 PM To: users@cloudstack.apache.org Subject: SSVM/CPVM Agent State Alert Is there any reasons why my SSVM/CPVM agent state would stay in the alert state if I loose one management server from an active/active pair? Unless I restart the agent manually on each System VM, the state will stay to Alert. I tried to search the logs but didn't find clear evidences of the why. Anyone has more thoughts about this? We are on 4.2.1. Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ Need Enterprise Grade Support for Apache CloudStack? Our CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ offers the best 24/7 SLA for CloudStack Environments. Apache CloudStack Bootcamp training courses **NEW!** CloudStack 4.2.1 traininghttp://shapeblue.com/cloudstack-training/ 18th-19th February 2014, Brazil. Classroomhttp://shapeblue.com/cloudstack-training/ 17th-23rd March 2014, Region A. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 24th-28th March 2014, Region B. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 16th-20th June 2014, Region A. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 23rd-27th June 2014, Region B. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
SSVM/CPVM Agent State Alert
Is there any reasons why my SSVM/CPVM agent state would stay in the alert state if I loose one management server from an active/active pair? Unless I restart the agent manually on each System VM, the state will stay to Alert. I tried to search the logs but didn't find clear evidences of the why. Anyone has more thoughts about this? We are on 4.2.1. Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Precision for Storage Motion
I'd like to get some precisions about the Storage XenMotion support. While moving a VM from a shared SR to another shared SR works well, I cannot move a disk from a local storage to another. Is this expected? Cloudstack seems to allow local to local migration. When I try, I get a xen api exception with a VM_REQUIRES_NETWORK error. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Connect to a MySQL Galera Cluster
I just noticed some DB HA parameters in the db.properties.in file. Anyone ever tried them? It looks like CloudStack is able to handle slaves and autoReconnectForPool? Francois I was not able to get much information but Looks like it does not manage sessions across the cluster. So if a node fails, all sessions currently handled by the node will eventually timeout and fail. It is up to the client now to open new connections. One way to work around the session handling issue would be to use a L7 proxy that can talk MySQL. I think mysql-proxy can do that but its alpha(?) s/w. Also, mysql-proxy itself is not HA. The other way would be to make the whole fault tolerance an app problem. If the app could automagically reconfigure itself to do round robin writes across the galera cluster based on health checks, we will get “HA” automatically. A failed node would end up being blacklisted by the app. As of now, I don’t see any other way other than to force a CloudStack restart in response to a galera node failure. Hoping someone with more db-foo can tell us more. -- @shankerbalan M: +91 98860 60539 | O: +91 (80) 67935867 shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, Bangalore - 560 055 Need Enterprise Grade Support for Apache CloudStack? Our CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ offers the best 24/7 SLA for CloudStack Environments. Apache CloudStack Bootcamp training courses **NEW!** CloudStack 4.2.1 traininghttp://shapeblue.com/cloudstack-training/ 18th-19th February 2014, Brazil. Classroomhttp://shapeblue.com/cloudstack-training/ 17th-23rd March 2014, Region A. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 24th-28th March 2014, Region B. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 16th-20th June 2014, Region A. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 23rd-27th June 2014, Region B. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Connect to a MySQL Galera Cluster
On 1/26/2014, 5:34 AM, Shanker Balan wrote: The other way would be to make the whole fault tolerance an app problem. If the app could automagically reconfigure itself to do round robin writes across the galera cluster based on health checks, we will get “HA” automatically. A failed node would end up being blacklisted by the app. JDBC is supposed to be able to do that out of the box. But that means a code recompile. Something like: jdbc:mysql:loadbalance://node1,node2,nodeN/database?loadBalanceBlacklistTimeout=5000 -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Connect to a MySQL Galera Cluster
We are trying to make CloudStack to work with a Galera two node master/master cluster. We have a NetScaler doing DataStream LB in front of the cluster, and we have two CloudStack management servers in active/active. Anyone had success with this kind of scenario? As soon as I shut a MySQL node, the CloudStack JDBC panics, and the management server fence themselves. Why this is happening? Is there any way to handle database failures in HA fashion? Any large cloud providers using CloudStack handle this? Thanks. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Connect to a MySQL Galera Cluster
Yes, we tried with a NetScaler, but as soon as one MySQL dies, both management servers fence themselves on DB exceptions :S Francois On 1/25/2014, 10:08 PM, Nux! wrote: On 26.01.2014 02:33, Francois Gaudreault wrote: We are trying to make CloudStack to work with a Galera two node master/master cluster. We have a NetScaler doing DataStream LB in front of the cluster, and we have two CloudStack management servers in active/active. Anyone had success with this kind of scenario? As soon as I shut a MySQL node, the CloudStack JDBC panics, and the management server fence themselves. Why this is happening? Is there any way to handle database failures in HA fashion? Any large cloud providers using CloudStack handle this? Hello, I know there are people on the ml who are using galera and I'm planning on using it myself for Cloudstack. We already have a 3 node deployment, but it is loadbalanced on virtual IPs and load balancer (we run VIP on each node as well as Haproxy), hopefully this will keep Cloudstack happy, I suggest you do a similar thing. Lucian -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: AW: management server DB timeout
Well, we have the same issue here. Anyone else have other ideas? Is it related to tomcat configs or jdbc? The crontab is a little hackish for us. Francois On 1/21/2014, 11:55 AM, Abu Bashiri wrote: Thx Matty! Appreciate your help! -Ursprüngliche Nachricht- Von: Marty Sweet [mailto:msweet@gmail.com] Gesendet: Dienstag, 21. Januar 2014 17:15 An: users@cloudstack.apache.org Betreff: Re: management server DB timeout Hi, From the managment server point of view (as I see it), it would have to stop all communication to Agents and the like if it wished to do that, as the data would become inconsistent with other Management Servers. I would imagine this is too much work to implement, but I'm sure one of the development guys will provide a better insight. I currently implement the following work around: ___ Root Crontab ___ * * * * * /srv/csmanagement-watchdog ___ /srv/csmanagement-watchdog ___ #!/bin/bash # If Cloudstack Management is not running, start it if [ ! -e /var/run/cloudstack-management.pid ]; then service cloudstack-management start fi Hope this helps, Marty On Tue, Jan 21, 2014 at 4:03 PM, Abu Bashiri abu.bashiri...@gmail.comwrote: Hey Marty, thx for your reply. I mean, in general the self-fence make sense but i was looking for a way to say try to reconnect for 60seconds. Would be cool if you can paste your solution here! Thx -Ursprüngliche Nachricht- Von: Marty Sweet [mailto:msweet@gmail.com] Gesendet: Dienstag, 21. Januar 2014 15:54 An: users@cloudstack.apache.org Betreff: Re: management server DB timeout Hi, I have this problem with my failover setup, I think however it's by design to ensure data consistency and is more that the MySQL connections have disappeared instead of it timing out. I ended up creating a cron watchdog to start CS Management incase it stopped, I'm sure there are more elegant solutions however, maybe using upstart. If you wish I can paste it here. Marty On Tuesday, January 21, 2014, Abu Bashiri abu.bashiri...@gmail.com wrote: Hey Guys, just some short question. Is there a way to increase the DB timeout for the management server? I use mha for mysql master / slave automatic failover. Everything works but everytime I perform a master failover and the virtual IP changes, the management server shows me immediately the following: DB communication problem detected, fence it 2014-01-21 14:19:51,502 DEBUG [cloud.cluster.ClusterManagerImpl] (Cluster-Notification-1:null) Notify management server node isolation to listeners 2014-01-21 14:19:51,503 ERROR [cloud.cluster.ClusterFenceManagerImpl] (Cluster-Notification-1:null) Received node isolation notification, will perform self-fencing and shut myself down Can we avoid that self-fencing? I already had a look at db.properties file but I cannot find a timeout value. thx -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Active-Active CloudStack, what about cloudstack-usage?
Awesome, thanks for the info. Francois On 1/14/2014, 10:38 PM, Dave Dunaway wrote: I'm pretty sure this how we've run it in our shop since day one, and have had no issues. (we are in the 3.0.x stream however, so your mileage may vary) On Tue, Jan 14, 2014 at 5:38 PM, Geoff Higginbottom geoff.higginbot...@shapeblue.com mailto:geoff.higginbot...@shapeblue.com wrote: Pretty sure running on two nodes is not an issue, as all the data gets written into a single 'Cloud Usage' DB and gets de-duped etc. Regards Geoff Higginbottom D: +44 20 3603 0542 tel:%2B44%2020%203603%200542 | S: +44 20 3603 0540 tel:%2B44%2020%203603%200540 | M: +447968161581 tel:%2B447968161581 geoff.higginbot...@shapeblue.com mailto:geoff.higginbot...@shapeblue.com -Original Message- From: David Nalley [mailto:da...@gnsa.us mailto:da...@gnsa.us] Sent: 14 January 2014 21:16 To: users@cloudstack.apache.org mailto:users@cloudstack.apache.org; fgaudrea...@cloudops.com mailto:fgaudrea...@cloudops.com Subject: Re: Active-Active CloudStack, what about cloudstack-usage? Shouldn't be any issue with that. --David On Tue, Jan 14, 2014 at 3:46 PM, Francois Gaudreault fgaudrea...@cloudops.com mailto:fgaudrea...@cloudops.com wrote: OK. Any chance of duplicate entries if we have two usage server running? Francois On 1/14/2014, 2:19 PM, David Nalley wrote: It needs to run only on one node - but I don't think there are any deleterious effects (aside from wasted CPU cycles) from having more than one. --David On Tue, Jan 14, 2014 at 1:14 PM, Francois Gaudreault fgaudrea...@cloudops.com mailto:fgaudrea...@cloudops.com wrote: Quick question, We deployed two management servers for CloudStack, and they are behind a load balancer to be able to use them in active-active. What about the usage service? Does it need to run only on one node or both? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com mailto:fgaudrea...@cloudops.com 514-629-6775 tel:514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com http://www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com mailto:fgaudrea...@cloudops.com 514-629-6775 tel:514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com http://www.cloudops.com @CloudOps_ Need Enterprise Grade Support for Apache CloudStack? Our CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ offers the best 24/7 SLA for CloudStack Environments. Apache CloudStack Bootcamp training courses **NEW!** CloudStack 4.2 traininghttp://shapeblue.com/cloudstack-training/ 08/09 January 2014, Londonhttp://shapeblue.com/cloudstack-training/ 13-17 January 2014, GLOBAL. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 20-24 January 2014, GLOBAL. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Active-Active CloudStack, what about cloudstack-usage?
Quick question, We deployed two management servers for CloudStack, and they are behind a load balancer to be able to use them in active-active. What about the usage service? Does it need to run only on one node or both? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Active-Active CloudStack, what about cloudstack-usage?
OK. Any chance of duplicate entries if we have two usage server running? Francois On 1/14/2014, 2:19 PM, David Nalley wrote: It needs to run only on one node - but I don't think there are any deleterious effects (aside from wasted CPU cycles) from having more than one. --David On Tue, Jan 14, 2014 at 1:14 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Quick question, We deployed two management servers for CloudStack, and they are behind a load balancer to be able to use them in active-active. What about the usage service? Does it need to run only on one node or both? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
XenServer 6.2 SP1
Is XenServer 6.2.0 SP1 certified to work fine with CS 4.2? -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: XenServer 6.2 SP1
Interesting. I'm glad I asked beforehand :P Thanks Prashant (and Shanker) :) On 1/1/2014, 11:11 AM, Shanker Balan wrote: On 01-Jan-2014, at 9:32 pm, Prashant Sreedharan prashant.sreedha...@citrix.com wrote: Hi Francois, XenServer 6.2 is supported only for fresh install of CloudPlatform 4.2. However, XS 6.2 is fully supported from 4.2.1. Hmm, that explains why I ran into issues after upgrading my environment to SP1. I recreated the Zone and its been working well so far. For your reference please find the compatibility matrix below: http://support.citrix.com/cms/kc/cloud-troubleshooting/cloudplatform-compat ibility-matrix/ Thanks. -- @shankerbalan M: +91 98860 60539 | O: +91 (80) 67935867 shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, Bangalore - 560 055 Need Enterprise Grade Support for Apache CloudStack? Our CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ offers the best 24/7 SLA for CloudStack Environments. Apache CloudStack Bootcamp training courses **NEW!** CloudStack 4.2 traininghttp://shapeblue.com/cloudstack-training/ 08/09 January 2014, Londonhttp://shapeblue.com/cloudstack-training/ 13-17 January 2014, GLOBAL. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 20-24 January 2014, GLOBAL. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: XenServer 6.2 SP1
Ok. Will 4.2.1 be tested against SP1 then? Is it safer to stick on XS 6.1 for now? FG On 1/1/2014, 12:19 PM, Chandan Purushothama wrote: Hello Francois, As far as I know, XenServer 6.2 GA is a different from XenServer 6.2 SP1. I know that 4.2 Supports XenServer 6.2 GA. But I don't think 4.2 officially supports XenServer 6.2 SP1. It might work, but I don't think it is tested with 4.2, Thank you, Chandan. -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Wednesday, January 01, 2014 8:16 AM To: users@cloudstack.apache.org Subject: Re: XenServer 6.2 SP1 Interesting. I'm glad I asked beforehand :P Thanks Prashant (and Shanker) :) On 1/1/2014, 11:11 AM, Shanker Balan wrote: On 01-Jan-2014, at 9:32 pm, Prashant Sreedharan prashant.sreedha...@citrix.com wrote: Hi Francois, XenServer 6.2 is supported only for fresh install of CloudPlatform 4.2. However, XS 6.2 is fully supported from 4.2.1. Hmm, that explains why I ran into issues after upgrading my environment to SP1. I recreated the Zone and its been working well so far. For your reference please find the compatibility matrix below: http://support.citrix.com/cms/kc/cloud-troubleshooting/cloudplatform- compat ibility-matrix/ Thanks. -- @shankerbalan M: +91 98860 60539 | O: +91 (80) 67935867 shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, Bangalore - 560 055 Need Enterprise Grade Support for Apache CloudStack? Our CloudStack Infrastructure Supporthttp://shapeblue.com/cloudstack-infrastructure-support/ offers the best 24/7 SLA for CloudStack Environments. Apache CloudStack Bootcamp training courses **NEW!** CloudStack 4.2 traininghttp://shapeblue.com/cloudstack-training/ 08/09 January 2014, Londonhttp://shapeblue.com/cloudstack-training/ 13-17 January 2014, GLOBAL. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ 20-24 January 2014, GLOBAL. Instructor led, On-linehttp://shapeblue.com/cloudstack-training/ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: fail to start system vm in cloudstack with lxc
The SSVM and CPVM won't start on LXC, you need a real hypervisor to run those. (i.e KVM). Then, it will work. Francois On 11/8/2013, 9:51 AM, Du Jun wrote: Hi,all I can add host with lxc hypervisor to cloudstack management server,however I fail to start system vm.Is there any one can provide some clues? -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Missing support for LXC on CS 4.2
This is how I solved this: https://issues.apache.org/jira/browse/CLOUDSTACK-4849 Francois On 10/23/2013, 11:40 AM, Old, Curtis wrote: I installed CS 4.2 from the repo. I went to install an LXC Cluser and got this: Could not find corresponding resource manager for LXC A little digging on the web and found and there is no plugin for LXC in the rpm: [root@lab2-mgt-cloud-1 lib]# rpm -ql cloudstack-management |grep hyperviso /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin-hypervisor-baremetal-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin-hypervisor-kvm-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin-hypervisor-ovm-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin-hypervisor-ucs-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin-hypervisor-vmware-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin-hypervisor-xen-4.2.0.jar I downloaded the source from: http://mirror.symnds.com/software/Apache/cloudstack/releases/4.2.0/apache-cloudstack-4.2.0-src.tar.bz2 Doesn't seem to be in there either, so what's the deal? What is needed to get a CS Cluster to use LXC? -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Missing support for LXC on CS 4.2
I am not sure but, is it possible LXC only works with nonoss builds? If you used community packages, they are oss only. Personally, I didn't try with the oss build, but another user reported the same issue, and he switched to nonoss with my fix and it worked. Francois On 10/23/2013, 12:23 PM, Old, Curtis wrote: So I build it from source? I'M not a developer (lowly SA type) in the source I downloaded the file nonossComponentContext.xml doesn't exists [root@lab2-mgt-cloud-1 apache-cloudstack-4.2.0-src]# find . -name nonossComponentContext.xml [root@lab2-mgt-cloud-1 apache-cloudstack-4.2.0-src]# So do I have to git clone the repo and build from there? Dazed and confusedŠ.. On 10/23/13 11:42 AM, Francois Gaudreault fgaudrea...@cloudops.com wrote: This is how I solved this: https://issues.apache.org/jira/browse/CLOUDSTACK-4849 Francois On 10/23/2013, 11:40 AM, Old, Curtis wrote: I installed CS 4.2 from the repo. I went to install an LXC Cluser and got this: Could not find corresponding resource manager for LXC A little digging on the web and found and there is no plugin for LXC in the rpm: [root@lab2-mgt-cloud-1 lib]# rpm -ql cloudstack-management |grep hyperviso /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin- hypervisor-baremetal-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin- hypervisor-kvm-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin- hypervisor-ovm-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin- hypervisor-ucs-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin- hypervisor-vmware-4.2.0.jar /usr/share/cloudstack-management/webapps/client/WEB-INF/lib/cloud-plugin- hypervisor-xen-4.2.0.jar I downloaded the source from: http://mirror.symnds.com/software/Apache/cloudstack/releases/4.2.0/apache -cloudstack-4.2.0-src.tar.bz2 Doesn't seem to be in there either, so what's the deal? What is needed to get a CS Cluster to use LXC? -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: KVM and openvswitch
Did you blacklist the linux bridge module? You have to blacklist it. FG On 10/23/2013, 12:24 PM, Bjoern Teipel wrote: Yes that's what I followed exactly. My OS is centos 6.4 and brctl bridge namebridge idSTP enabledinterfaces cloud0/sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory /sys/class/net/cloud0/bridge: No such file or directory .ba2d3a409d48no cloudbr0/sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory /sys/class/net/cloudbr0/bridge: No such file or directory .00219ba07885no cloudbr1/sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory /sys/class/net/cloudbr1/bridge: No such file or directory .00219ba07885no But the directories are there so it doesn't make a whole lot of sense /sys/class/net/cloud0/bridge [bteipel@hq-kvmhv-002 bridge]$ ll total 0 -rw-r--r-- 1 root root 4096 Oct 23 00:32 ageing_time -r--r--r-- 1 root root 4096 Oct 23 00:32 bridge_id -rw-r--r-- 1 root root 4096 Oct 23 00:32 forward_delay -r--r--r-- 1 root root 4096 Oct 23 00:32 gc_timer -rw-r--r-- 1 root root 4096 Oct 23 09:23 group_addr -rw-r--r-- 1 root root 4096 Oct 23 00:32 hello_time -r--r--r-- 1 root root 4096 Oct 23 00:32 hello_timer -rw-r--r-- 1 root root 4096 Oct 23 00:32 max_age -rw-r--r-- 1 root root 4096 Oct 23 09:23 priority -r--r--r-- 1 root root 4096 Oct 23 00:32 root_id -r--r--r-- 1 root root 4096 Oct 23 00:32 root_path_cost -r--r--r-- 1 root root 4096 Oct 23 00:32 root_port -rw-r--r-- 1 root root 4096 Oct 23 00:32 stp_state -r--r--r-- 1 root root 4096 Oct 23 00:32 tcn_timer -r--r--r-- 1 root root 4096 Oct 23 00:32 topology_change -r--r--r-- 1 root root 4096 Oct 23 00:32 topology_change_detected -r--r--r-- 1 root root 4096 Oct 23 00:32 topology_change_timer On 10/22/2013 11:42 PM, Nguyen Anh Tu wrote: 2013/10/23 Bjoern Teipel bjoern.tei...@internetbrands.com Is somebody using cloustack = 4.1 and openvswitch ? Hi, take a look here: https://cwiki.apache.org/confluence/display/CLOUDSTACK/KVM+with+OpenVSwitch -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
KVM/LXC System VMs with no IP
Anyone experienced systemvm issues with KVM/LXC images? The SSVM/ConsoleProxy are starting, but there are no IP addresses on the interfaces. I am using CS4.2 and my host runs on CentOS 6.4. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
LXC and Networking
Hi, I do have some questions regarding LXC containers and the networking. First, should I put the LXC clusters on a separate zone or I can use an existing zone (which I built for Xen) and just create a new LXC cluster? Second, I saw in the doc that bridges are manually created... what happens if I have hundreds/thousands of guests VLANs? Will the agent automate that part (planning to use OVS here)? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Missing LXC manager
Another quick question... I just tried to add an LXC cluster to try on 4.2, and I am getting this: INFO [cloud.api.ApiServer] (catalina-exec-8:) Could not find corresponding resource manager for LXC What I am missing? -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Choosing VMWare SCSI Controller Type
We came across the same issue at some point in the past, but we decided to change the templates to reflect to proper controller. There might be a thread on the dev list around that. Let me know the bug id once you create it, one of our customer might need that feature. Francois On 2013-10-02 1:43 PM, Kelven Yang wrote: On 10/2/13 3:00 AM, Chris Sciarrino chris.sciarr...@gmail.com wrote: Hi Sean, I have tried this in 4.1.1 and 4.2. I have tried the HDD adapter type in the register template screen like you also suggested but that did not have an effect. Unless I am mistaken, I think that option will set the disk type to ide or scsi and not change the actual controller type that the scsi disk uses. Please report it as a feature-request bug, choosing controller type is not currently supported yet Kelven Thanks, Chris On Wed, Oct 2, 2013 at 5:16 AM, Sean Hamilton s...@seanhamilton.co.ukwrote: Hey Chris, What version of CS are you running? I've seen a bug in the Register Template screen. If you select the location for the template it should open up more options, one of which is the HDD adapter type. Let me know how it goes. On 2 October 2013 05:12, Chris Sciarrino chris.sciarr...@gmail.com wrote: Hi, I am having an issue where my vmware templates are being deployed with the lsi parallel scsi controller type which is causing them to blue screen. Is there any way to choose which scsi controller type it will be deployed with? Or is there any other way to make it deploy the lsi sas controller? Thanks, Chris -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: 4.1.1 can no longer add shared networks
I don't see the button either :S On 2013-08-12 3:51 PM, Dave Cundiff wrote: Hello, Since the 4.1.1 update I don't seem to be able to add shared guest networks anymore. Going to infrastructure-zone-physical networks-Guest network I no longer have the add network option. Did something change or am I just running into a bug somewhere? Thanks, -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Restrict user to certain zone
Hi, That question might have been asked before, but can you restrict users to access certain zones in CloudStack? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Restrict user to certain zone
Ok, I found the answer. You have to click on public, and then unselect it so the Domain dropbox appears :S Looks like a small UI bug ;) Still interested about the other question tho :P Thanks! On 2013-05-28 12:22 PM, Francois Gaudreault wrote: Cool, but how do you map users to the private zone? The new feature is in 4.1 or 4.2? On 2013-05-28 12:18 PM, Pranav Saxena wrote: Currently , you could create a private zone by unchecking the ispublic checkbox while adding a zone through the zone wizard in the CloudStack UI . Another upcoming feature - Explicit Dedication of resources will allow you to dedicate zone/pod/cluster/host to a domain/sub-domain or an account or both . Thanks, Pranav -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Tuesday, May 28, 2013 9:18 PM To: users@cloudstack.apache.org Subject: Restrict user to certain zone Hi, That question might have been asked before, but can you restrict users to access certain zones in CloudStack? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Restrict user to certain zone
Yep, I tried on chrome.. Thanks Pranav for the infos! Francois On 2013-05-28 12:42 PM, Pranav Saxena wrote: So you might have tried it on Chrome on which there's this issue that the public checkbox is unchecked by default but for all other browsers it's checked which means you'll end up creating a public zone . On unchecking it , It will create a private zone by specifying the domain there . The feature which I was talking about should be merged in 4.2 . It's still under development . Thanks, Pranav -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Tuesday, May 28, 2013 10:09 PM To: Pranav Saxena Cc: users@cloudstack.apache.org Subject: Re: Restrict user to certain zone Ok, I found the answer. You have to click on public, and then unselect it so the Domain dropbox appears :S Looks like a small UI bug ;) Still interested about the other question tho :P Thanks! On 2013-05-28 12:22 PM, Francois Gaudreault wrote: Cool, but how do you map users to the private zone? The new feature is in 4.1 or 4.2? On 2013-05-28 12:18 PM, Pranav Saxena wrote: Currently , you could create a private zone by unchecking the ispublic checkbox while adding a zone through the zone wizard in the CloudStack UI . Another upcoming feature - Explicit Dedication of resources will allow you to dedicate zone/pod/cluster/host to a domain/sub-domain or an account or both . Thanks, Pranav -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Tuesday, May 28, 2013 9:18 PM To: users@cloudstack.apache.org Subject: Restrict user to certain zone Hi, That question might have been asked before, but can you restrict users to access certain zones in CloudStack? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Juniper SRX Configuration
On 2013-05-23 12:50 AM, Jayapal Reddy Uradi wrote: Is your guest network created on the SRX ? Yes. Is your network offering crated correctly with SRX firewall ? Yes. While crating instance/guest network did you select the SRX firewall network offering ? Yes. Thanks. Thanks, Jayapal -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Wednesday, 22 May 2013 8:17 PM To: users@cloudstack.apache.org Cc: Jayapal Reddy Uradi Subject: Re: Juniper SRX Configuration Hi, In network offering if you select ZONE wide source NAT then source rules are not configured by cloudstack. Admin/User has to manually select source NAT ip and configure the source NAT rules. Ok, thanks for the precision. When you configure firewall rules, firewall filter rules on srx get configured. Please try configuring tcp/udp rules. For ICMP there is bug and the fix will be committed soon. I just tried, and it's not working. First, when I acquire another IP, the new IP is not even configured on the SRX. So even if I create firewall rules, they are not created/applied. Anyway, I tried using TCP. I looked in the logs, and CloudStack won't even trigger the SRX code. Thanks! Thanks, Jayapal On 21-May-2013, at 11:48 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Jayapal, I added the SRX now, I can get the basic stuff working (private interface created), but it looks like the source nat rules are not being created. Also, when I create firewall rules, they are not being created on the SRX. However, I can get the destination nat (port-forwarding) working. Any ideas? Thanks! On 2013-05-14 1:15 PM, Jayapal Reddy Uradi wrote: For private interface just enable the vlan tagging. when guest network is created cloudstack will configure the interface with vlan and ip. Minimal config is. 1. set management interface with ip and use this ip for while add ing srx into cloudstack. 2. enable vlan tagging on private interface 3. set the cloudstack public vlan to the srx public interface. 4. add rules to allow traffic from trust to untrust zone. 5. set appropriate routes for the trust and untrust subnets By default guest traffic trust (guest) to untrust (public) is blocked on latest master. Add egress rules once the guest network is created. Let me know if see any issues. Thanks, Jayapal On 14-May-2013, at 10:33 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Hi Jayapal, To add SRX device into cloudstack, you need to preconfigure the srx. SRX needs 3 interfaces to add into cloudstack 1. management interface 2. private/guest network interface 3.public interace. Ok. It confirms what I understood :) Please find the below config. It is bit old cloudstak config on SRX, but it will give you idea. You need to update firewall filter trust/untrust. Which parts actually need to be there for the per-previsioning? I guess some part of that config example has been done by CloudStack... (ie. Do we need to create guest vlan interfaces on the private interface right at the beginning?) In other words, what's the minimal config needed before adding the SRX to CS? Thanks! set version 10.4R6.5 set system time-zone Asia/Calcutta set system root-authentication encrypted-password $1$ucpHjRfH$dNkhOuzKXJxrpAtewvTu.1 set system name-server 208.67.222.222 set system name-server 208.67.220.220 set system name-server 10.147.28.6 set system name-server 4.2.2.2 set system services ssh set system services telnet set system services xnm-clear-text set system services web-management http interface vlan.0 set system services web-management http interface fe-0/0/0.0 set system services web-management https system-generated-certificate set system services web-management https interface vlan.0 set system syslog archive size 100k set system syslog archive files 3 set system syslog user * any emergency set system syslog file messages any critical set system syslog file messages authorization info set system syslog file interactive-commands interactive-commands error set system max-configurations-on-flash 5 set system max-configuration-rollbacks 5 set system license autoupdate url https://ae1.juniper.net/junos/key_retrieval set interfaces fe-0/0/0 description Management Interface set interfaces fe-0/0/0 unit 0 family inet address 10.147.40.3/23 set interfaces fe-0/0/1 description Private network set interfaces fe-0/0/1 vlan-tagging set interfaces fe-0/0/1 unit 929 vlan-id 929 set interfaces fe-0/0/1 unit 929 family inet address 10.0.64.1/20 set interfaces fe-0/0/1 unit 1122 vlan-id 1122 set interfaces fe-0/0/1 unit 1122 family inet address 10.0.32.1/20 set interfaces fe-0/0/4 description Public Network set interfaces fe-0/0/4 vlan-tagging set interfaces fe-0/0/4 unit 52 vlan-id 52 set interfaces fe-0/0/4 unit 52 family inet address 10.147.52.3/24 set interfaces fe-0/0/4 unit 52 family inet address 10.147.52.19/24 set interfaces vlan unit 52 family inet set routing-options static
Re: Juniper SRX Configuration
Hi, In network offering if you select ZONE wide source NAT then source rules are not configured by cloudstack. Admin/User has to manually select source NAT ip and configure the source NAT rules. Ok, thanks for the precision. When you configure firewall rules, firewall filter rules on srx get configured. Please try configuring tcp/udp rules. For ICMP there is bug and the fix will be committed soon. I just tried, and it's not working. First, when I acquire another IP, the new IP is not even configured on the SRX. So even if I create firewall rules, they are not created/applied. Anyway, I tried using TCP. I looked in the logs, and CloudStack won't even trigger the SRX code. Thanks! Thanks, Jayapal On 21-May-2013, at 11:48 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Jayapal, I added the SRX now, I can get the basic stuff working (private interface created), but it looks like the source nat rules are not being created. Also, when I create firewall rules, they are not being created on the SRX. However, I can get the destination nat (port-forwarding) working. Any ideas? Thanks! On 2013-05-14 1:15 PM, Jayapal Reddy Uradi wrote: For private interface just enable the vlan tagging. when guest network is created cloudstack will configure the interface with vlan and ip. Minimal config is. 1. set management interface with ip and use this ip for while add ing srx into cloudstack. 2. enable vlan tagging on private interface 3. set the cloudstack public vlan to the srx public interface. 4. add rules to allow traffic from trust to untrust zone. 5. set appropriate routes for the trust and untrust subnets By default guest traffic trust (guest) to untrust (public) is blocked on latest master. Add egress rules once the guest network is created. Let me know if see any issues. Thanks, Jayapal On 14-May-2013, at 10:33 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Hi Jayapal, To add SRX device into cloudstack, you need to preconfigure the srx. SRX needs 3 interfaces to add into cloudstack 1. management interface 2. private/guest network interface 3.public interace. Ok. It confirms what I understood :) Please find the below config. It is bit old cloudstak config on SRX, but it will give you idea. You need to update firewall filter trust/untrust. Which parts actually need to be there for the per-previsioning? I guess some part of that config example has been done by CloudStack... (ie. Do we need to create guest vlan interfaces on the private interface right at the beginning?) In other words, what's the minimal config needed before adding the SRX to CS? Thanks! set version 10.4R6.5 set system time-zone Asia/Calcutta set system root-authentication encrypted-password $1$ucpHjRfH$dNkhOuzKXJxrpAtewvTu.1 set system name-server 208.67.222.222 set system name-server 208.67.220.220 set system name-server 10.147.28.6 set system name-server 4.2.2.2 set system services ssh set system services telnet set system services xnm-clear-text set system services web-management http interface vlan.0 set system services web-management http interface fe-0/0/0.0 set system services web-management https system-generated-certificate set system services web-management https interface vlan.0 set system syslog archive size 100k set system syslog archive files 3 set system syslog user * any emergency set system syslog file messages any critical set system syslog file messages authorization info set system syslog file interactive-commands interactive-commands error set system max-configurations-on-flash 5 set system max-configuration-rollbacks 5 set system license autoupdate url https://ae1.juniper.net/junos/key_retrieval set interfaces fe-0/0/0 description Management Interface set interfaces fe-0/0/0 unit 0 family inet address 10.147.40.3/23 set interfaces fe-0/0/1 description Private network set interfaces fe-0/0/1 vlan-tagging set interfaces fe-0/0/1 unit 929 vlan-id 929 set interfaces fe-0/0/1 unit 929 family inet address 10.0.64.1/20 set interfaces fe-0/0/1 unit 1122 vlan-id 1122 set interfaces fe-0/0/1 unit 1122 family inet address 10.0.32.1/20 set interfaces fe-0/0/4 description Public Network set interfaces fe-0/0/4 vlan-tagging set interfaces fe-0/0/4 unit 52 vlan-id 52 set interfaces fe-0/0/4 unit 52 family inet address 10.147.52.3/24 set interfaces fe-0/0/4 unit 52 family inet address 10.147.52.19/24 set interfaces vlan unit 52 family inet set routing-options static route 10.147.40.0/23 next-hop 10.147.40.1 set routing-options static route 10.147.40.0/23 install set routing-options static route 10.146.0.0/24 next-hop 10.147.40.1 set routing-options static route 10.146.0.0/24 install set routing-options static route 10.147.52.0/24 next-hop 10.147.52.1 set routing-options static route 10.147.52.0/24 install set routing-options static route 10.147.39.0/24 next-hop 10.147.40.1 set routing-options static route 10.147.29.0/24 next-hop 10.147.40.1 set routing-options static
Re: Juniper SRX Configuration
Jayapal, I added the SRX now, I can get the basic stuff working (private interface created), but it looks like the source nat rules are not being created. Also, when I create firewall rules, they are not being created on the SRX. However, I can get the destination nat (port-forwarding) working. Any ideas? Thanks! On 2013-05-14 1:15 PM, Jayapal Reddy Uradi wrote: For private interface just enable the vlan tagging. when guest network is created cloudstack will configure the interface with vlan and ip. Minimal config is. 1. set management interface with ip and use this ip for while add ing srx into cloudstack. 2. enable vlan tagging on private interface 3. set the cloudstack public vlan to the srx public interface. 4. add rules to allow traffic from trust to untrust zone. 5. set appropriate routes for the trust and untrust subnets By default guest traffic trust (guest) to untrust (public) is blocked on latest master. Add egress rules once the guest network is created. Let me know if see any issues. Thanks, Jayapal On 14-May-2013, at 10:33 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Hi Jayapal, To add SRX device into cloudstack, you need to preconfigure the srx. SRX needs 3 interfaces to add into cloudstack 1. management interface 2. private/guest network interface 3.public interace. Ok. It confirms what I understood :) Please find the below config. It is bit old cloudstak config on SRX, but it will give you idea. You need to update firewall filter trust/untrust. Which parts actually need to be there for the per-previsioning? I guess some part of that config example has been done by CloudStack... (ie. Do we need to create guest vlan interfaces on the private interface right at the beginning?) In other words, what's the minimal config needed before adding the SRX to CS? Thanks! set version 10.4R6.5 set system time-zone Asia/Calcutta set system root-authentication encrypted-password $1$ucpHjRfH$dNkhOuzKXJxrpAtewvTu.1 set system name-server 208.67.222.222 set system name-server 208.67.220.220 set system name-server 10.147.28.6 set system name-server 4.2.2.2 set system services ssh set system services telnet set system services xnm-clear-text set system services web-management http interface vlan.0 set system services web-management http interface fe-0/0/0.0 set system services web-management https system-generated-certificate set system services web-management https interface vlan.0 set system syslog archive size 100k set system syslog archive files 3 set system syslog user * any emergency set system syslog file messages any critical set system syslog file messages authorization info set system syslog file interactive-commands interactive-commands error set system max-configurations-on-flash 5 set system max-configuration-rollbacks 5 set system license autoupdate url https://ae1.juniper.net/junos/key_retrieval set interfaces fe-0/0/0 description Management Interface set interfaces fe-0/0/0 unit 0 family inet address 10.147.40.3/23 set interfaces fe-0/0/1 description Private network set interfaces fe-0/0/1 vlan-tagging set interfaces fe-0/0/1 unit 929 vlan-id 929 set interfaces fe-0/0/1 unit 929 family inet address 10.0.64.1/20 set interfaces fe-0/0/1 unit 1122 vlan-id 1122 set interfaces fe-0/0/1 unit 1122 family inet address 10.0.32.1/20 set interfaces fe-0/0/4 description Public Network set interfaces fe-0/0/4 vlan-tagging set interfaces fe-0/0/4 unit 52 vlan-id 52 set interfaces fe-0/0/4 unit 52 family inet address 10.147.52.3/24 set interfaces fe-0/0/4 unit 52 family inet address 10.147.52.19/24 set interfaces vlan unit 52 family inet set routing-options static route 10.147.40.0/23 next-hop 10.147.40.1 set routing-options static route 10.147.40.0/23 install set routing-options static route 10.146.0.0/24 next-hop 10.147.40.1 set routing-options static route 10.146.0.0/24 install set routing-options static route 10.147.52.0/24 next-hop 10.147.52.1 set routing-options static route 10.147.52.0/24 install set routing-options static route 10.147.39.0/24 next-hop 10.147.40.1 set routing-options static route 10.147.29.0/24 next-hop 10.147.40.1 set routing-options static route 0.0.0.0/0 next-hop 10.147.52.1 set routing-options static route 0.0.0.0/0 install set routing-options static route 10.147.28.6/32 next-hop 10.147.52.1 set routing-options static route 10.147.28.6/32 install set routing-options static route 10.252.248.0/24 next-hop 10.147.52.1 set protocols stp set security nat source pool 10-147-52-113 address 10.147.52.113/32 set security nat source rule-set trust from zone trust set security nat source rule-set trust to zone untrust set security nat source rule-set trust rule 10-147-52-113-10-0-32-0-20 match source-address 10.0.32.0/20 set security nat source rule-set trust rule 10-147-52-113-10-0-32-0-20 then source-nat pool 10-147-52-113 set security nat proxy-arp interface fe-0/0/4.52 address 10.147.52.116/32 set security nat proxy-arp interface fe-0/0
Re: VMWare SCSI Controller Type
Hi, That parameter wil allow only the selection between ide and scsi, not the scsi controller type. Thanks. On 2013-05-17 12:18 AM, Ahmad Emneina aemne...@gmail.com wrote: take a look at the global configuration setting, search for the parameter named: 'vmware.root.disk.controller' On Thu, May 16, 2013 at 5:06 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Hi, We ran into an issue today with a Windows 2008 template. The template has been created in another VMWare 5.1 cluster using LSI SAS as the SCSI controller. We imported that template in CloudStack, and we noticed that CS deploys the VM using the LSI Parallel controller type instead. That results in a Blue Screen. We didn't find anything in CS to change that behavior. Is this something planned for the future? (ie. when we create the template, we can select the controller type if SCSI is selected). Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Juniper SRX Configuration
Hi, I saw in the wiki there is a page for SRX configuration to integrate with CloudStack. However, the steps are not really clear, and the example config link is kinda broken. Does someone have a copy of this example config somewhere? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Juniper SRX Configuration
untrust policy trust-to-untrust match application any set security policies from-zone trust to-zone untrust policy trust-to-untrust then permit set security policies from-zone trust to-zone trust policy accept-all match source-address any set security policies from-zone trust to-zone trust policy accept-all match destination-address any set security policies from-zone trust to-zone trust policy accept-all match application any set security policies from-zone trust to-zone trust policy accept-all then permit set security policies from-zone MGMT to-zone trust policy MGMT-to-trust match source-address any set security policies from-zone MGMT to-zone trust policy MGMT-to-trust match destination-address any set security policies from-zone MGMT to-zone trust policy MGMT-to-trust match application any set security policies from-zone MGMT to-zone trust policy MGMT-to-trust then permit set security policies from-zone MGMT to-zone MGMT policy accept-mgmt match source-address any set security policies from-zone MGMT to-zone MGMT policy accept-mgmt match destination-address any set security policies from-zone MGMT to-zone MGMT policy accept-mgmt match application any set security policies from-zone MGMT to-zone MGMT policy accept-mgmt then permit set firewall filter untrust term 10-147-52-116 from destination-address 10.147.52.116/32 set firewall filter untrust term 10-147-52-116 then count 10-147-52-116 set firewall filter untrust term 10-147-52-116 then accept set firewall filter untrust term 10-147-52-113 from destination-address 10.147.52.113/32 set firewall filter untrust term 10-147-52-113 then count 10-147-52-113 set firewall filter untrust term 10-147-52-113 then accept set firewall filter trust term 10-147-52-113 from source-address 10.0.32.0/20 set firewall filter trust term 10-147-52-113 then count 10-147-52-113 set firewall filter trust term 10-147-52-113 then accept set applications application tcp-22-22 protocol tcp set applications application tcp-22-22 destination-port 22 set vlans test vlan-id 52 set vlans test l3-interface vlan.52 Thanks, Jayapal On 14-May-2013, at 7:36 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Hi, I saw in the wiki there is a page for SRX configuration to integrate with CloudStack. However, the steps are not really clear, and the example config link is kinda broken. Does someone have a copy of this example config somewhere? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Windows 2008 R2 and Console Proxy
Hi list, Anyone ever faced a mouse issue using Windows 2008 R2 and the Console Proxy? For some reason, the mouse is not working properly (just getting a plus pointer). We have to use keyboard to enable RDP. We tried with chrome and firefox, same thing. Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Windows 2008 R2 and Console Proxy
Geoff actually get me some of the details. The thing I don't understand is that it's working fine from vSphere Console without the tools. I always though the Console Proxy was simply redirecting the actual VMWare Console. In any cases, we will try to install VMWare Tools on our template, and see if we have the mouse. Thanks for your help. On 2013-04-08 3:00 PM, Giles Sirett wrote: I *think* I remember a similar issue. It was something to do with the VMware tools being corrupt in the instance. @Geoff, do you remember the details ? Kind Regards Giles D: +44 20 3603 0541 | M: +44 796 111 2055 giles.sir...@shapeblue.com -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: 08 April 2013 15:04 To: Geoff Higginbottom Cc: users@cloudstack.apache.org Subject: Re: Windows 2008 R2 and Console Proxy VMWare 5.1. Console is working fine when using vSphere. We are on CS 4.1. On 2013-04-08 10:02 AM, Geoff Higginbottom wrote: Francois, What hypervisor are you using Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: 08 April 2013 14:57 To: users@cloudstack.apache.org Subject: Windows 2008 R2 and Console Proxy Hi list, Anyone ever faced a mouse issue using Windows 2008 R2 and the Console Proxy? For some reason, the mouse is not working properly (just getting a plus pointer). We have to use keyboard to enable RDP. We tried with chrome and firefox, same thing. Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark. -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Prevent using multiple nics per VM
Is there a way in CloudStack to limit the number of interface per vm (eg. no more than 1 or 2) if we have a context of multiple domain wide shared networks? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: CloudStack and AD
Actually I do :) I ran the API call using our python script, I get a response, but I don't see the settings in the Global Settings within the UI. Is this normal? On 2013-04-01 1:49 PM, Kirk Jantzer wrote: Thanks David! Francois - ping me if you have any questions. Apologies I haven't submitted to have the documentation updated. On Mon, Apr 1, 2013 at 1:45 PM, David Nalley da...@gnsa.us wrote: On Mon, Apr 1, 2013 at 1:42 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Hi, That might be a dumb question, but the documentation is not very verbose about how the integration with AD works in CloudStack. I understand that we need to use the API for doing that, but the exact flow is not documented (or I didn't see it) (e.g do we need to create users in CS first, and then run the API call, etc). Can someone explain what we need to achieved or point us a wiki page with a (kinda) working howto? Thanks!! Hi Francois: Check out Kirk's blog post here: http://kirkjantzer.blogspot.com/2013/03/ldap-authentication-in-cloudstack-v401.html If you are looking for something to automate the adding of users from LDAP to ACS - check out the script in this blog post here: http://sysadminnotebook.blogspot.com/2012/03/cloudstack-ldap.html --David -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: CloudStack and AD
Will do if needed! Thanks for the pointer guys :) You just saved me a lot of time hehe ;) Francois On 2013-04-01 1:49 PM, Kirk Jantzer wrote: Thanks David! Francois - ping me if you have any questions. Apologies I haven't submitted to have the documentation updated. On Mon, Apr 1, 2013 at 1:45 PM, David Nalley da...@gnsa.us wrote: On Mon, Apr 1, 2013 at 1:42 PM, Francois Gaudreault fgaudrea...@cloudops.com wrote: Hi, That might be a dumb question, but the documentation is not very verbose about how the integration with AD works in CloudStack. I understand that we need to use the API for doing that, but the exact flow is not documented (or I didn't see it) (e.g do we need to create users in CS first, and then run the API call, etc). Can someone explain what we need to achieved or point us a wiki page with a (kinda) working howto? Thanks!! Hi Francois: Check out Kirk's blog post here: http://kirkjantzer.blogspot.com/2013/03/ldap-authentication-in-cloudstack-v401.html If you are looking for something to automate the adding of users from LDAP to ACS - check out the script in this blog post here: http://sysadminnotebook.blogspot.com/2012/03/cloudstack-ldap.html --David -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Couple VMWare Issues with 4.1
Hi,
I have other small issues with VMWare and 4.1. Let me know if I should
open tickets for those.
1 - VM Statistics
We keep getting those errors in the log:
INFO [agent.manager.AgentManagerImpl] (AgentTaskPool-6:) Agent is determined
to be up and running
ERROR [vmware.resource.VmwareResource] (DirectAgent-383:yul01vi13.ops.dot)
Unable to execute GetVmStatsCommand due to : Exception:
java.lang.NullPointerException
Message: null
java.lang.NullPointerException
WARN [cloud.vm.UserVmManagerImpl] (StatsCollector-2:) Unable to obtain VM
statistics.
ERROR [vmware.resource.VmwareResource] (DirectAgent-67:yul01vi12.ops.dot)
Unable to execute GetVmStatsCommand due to : Exception:
java.lang.NullPointerException
Message: null
java.lang.NullPointerException
WARN [cloud.vm.UserVmManagerImpl] (StatsCollector-2:) Unable to obtain VM
statistics.
We are not sure tho if it's related to permissions, but the user sees
every performance metrics on vSphere, so I doubt it.
2 - Public VLAN created on vSwitch0 even if we tell to use vSwitch2.
For some reason, CS creates a tagged port-group on the vSwitch0 for the
public interface of the VR even if we told CS to use vSwitch2. In fact,
CS creates and uses the public port-group on the vSwitch2... So why it
creates an unused port-group on vSwitch0? See attached screenshot.
Preparing NIC device on network cloud.public.142.0.1-vSwitch0
INFO [vmware.resource.VmwareResource] (DirectAgent-47:yul01vi13.ops.dot) Prepare NIC device based on NicTO:
{deviceId:4,networkRateMbps:-1,defaultNic:false,ip:0.0.0.0,netmask:255.255.255.255,gateway:10.0.142.1,mac:02:00:3b:5a:00:02,dns1:10.0.31.24,dns2:10.0.31.28,broadcastType:Vlan,type:Public,broadcastUri:vlan://142,isolationUri:vlan://142,isSecurityGroupEnabled:false}
INFO [vmware.resource.VmwareResource] (DirectAgent-47:yul01vi13.ops.dot)
Prepare network on vSwitch: P[vSwitch0:untagged] with name prefix: cloud.public
INFO [vmware.mo.HypervisorHostHelper] (DirectAgent-47:yul01vi13.ops.dot)
Network cloud.public.142.0.1-vSwitch0 is ready on vSwitch vSwitch0
INFO [vmware.mo.HypervisorHostHelper] (DirectAgent-47:yul01vi13.ops.dot)
Network cloud.public.142.0.1-vSwitch0 is ready on vSwitch vSwitch0
INFO [vmware.resource.VmwareResource] (DirectAgent-47:yul01vi13.ops.dot)
Preparing NIC device on network cloud.public.142.0.1-vSwitch0
Thanks!
--
Francois Gaudreault
Architecte de Solution Cloud | Cloud Solutions Architect
fgaudrea...@cloudops.com
514-629-6775
- - -
CloudOps
420 rue Guy
Montréal QC H3J 1S6
www.cloudops.com
@CloudOps_
VMWare 5.1 errors with 4.1
) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:555) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298) at org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.java:889) at org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:721) at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:2274) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:679) The cluster is being created, but we obviously see no hosts enabled. Another interesting issue is about the vmWare network labels. Even if we use vSwitch2 for the Public network, CloudStack wants to use vSwitch0. INFO [vmware.resource.VmwareResource] (catalina-exec-19:) VmwareResource network configuration info. private vSwitch: vSwitch0, public vSwitch: vSwitch0, guest network: vSwitch0 Started Last time we tried this in our lab (1 mth ago) using vCenter 5.1, it was working flawlessly. Any light? Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
Re: Problem installing VMware Cluster in CloudStack 4.0.1
On 2013-03-21 2:55 PM, Musayev, Ilya wrote: Since my employer needed a support for DVS rather urgently, I went ahead and backported the DVS support in to 4.1 branch - which is supposed to be out soon. I'm running it now in my environment and can confirm it works as expected. We would also be quite interested about this hybrid version too if you want to share :) I lack a bit of knowledge (and time) to cherry-pick the proper master commits. Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_
