[GitHub] cloudstack issue #1692: Fix Smoke Test Failures

2016-10-07 Thread blueorangutan
Github user blueorangutan commented on the issue:

https://github.com/apache/cloudstack/pull/1692
  
Trillian test result (tid-132)
Environment: vmware-55u3 (x2), Advanced Networking
Total time taken: 35553 seconds
Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr1692-t132-vmware-55u3.zip
Tested twice for intermitten failure: 
/marvin/tests/smoke/test_routers_network_ops.py
Tested twice for intermitten failure: /marvin/tests/smoke/test_templates.py
Tested twice for intermitten failure: /marvin/tests/smoke/test_volumes.py
Tested twice for intermitten failure: /marvin/tests/smoke/test_vpc_vpn.py
Test completed. 41 look ok, 2 have error(s)


Test | Result | Time (s)
--- | --- | ---
test_CreateTemplateWithDuplicateName | `Error` | 181.209
test_01_vpc_site2site_vpn | `Error` | 431.015
test_01_redundant_vpc_site2site_vpn | `Error` | 687.758
test_01_create_template | `Error` | 15.167
ContextSuite context=TestTemplates>:setup | `Error` | 542.176
test_router_dhcphosts | Success | 168.740
test_releaseIP | Success | 268.327
test_reboot_router | Success | 554.663
test_public_ip_user_account | Success | 10.179
test_public_ip_admin_account | Success | 40.377
test_nic_secondaryip_add_remove | Success | 253.017
test_network_rules_acquired_public_ip_3_Load_Balancer_Rule | Success | 
66.659
test_network_rules_acquired_public_ip_2_nat_rule | Success | 61.597
test_network_rules_acquired_public_ip_1_static_nat_rule | Success | 124.001
test_isolate_network_password_server | Success | 94.711
test_extendPhysicalNetworkVlan | Success | 15.397
test_deployvm_userdispersing | Success | 50.718
test_deployvm_userdata_post | Success | 55.514
test_deployvm_userdata | Success | 136.703
test_deployvm_userconcentrated | Success | 96.194
test_deployvm_firstfit | Success | 156.582
test_deploy_vm_multiple | Success | 232.634
test_deploy_vm_from_iso | Success | 252.757
test_deploy_vm | Success | 0.020
test_delete_account | Success | 262.809
test_dedicatePublicIpRange | Success | 0.284
test_dedicateGuestVlanRange | Success | 10.178
test_create_pvlan_network | Success | 5.148
test_createRegion | Success | 0.024
test_createPortablePublicIPRange | Success | 15.139
test_createPortablePublicIPAcquire | Success | 15.730
test_assign_and_removal_lb | Success | 133.809
test_advZoneVirtualRouter | Success | 0.015
test_UpdateStorageOverProvisioningFactor | Success | 0.100
test_UpdateConfigParamWithScope | Success | 0.096
test_DeployVmAntiAffinityGroup | Success | 166.300
test_10_destroy_cpvm | Success | 231.595
test_10_attachAndDetach_iso | Success | 46.823
test_09_reboot_router | Success | 130.871
test_09_expunge_vm | Success | 125.286
test_09_destroy_ssvm | Success | 268.824
test_09_delete_detached_volume | Success | 25.782
test_08_start_router | Success | 110.778
test_08_reboot_cpvm | Success | 156.445
test_08_migrate_vm | Success | 71.116
test_07_stop_router | Success | 20.154
test_07_restore_vm | Success | 0.067
test_07_reboot_ssvm | Success | 188.250
test_07_list_default_iso | Success | 0.037
test_06_stop_cpvm | Success | 201.609
test_06_router_advanced | Success | 0.035
test_06_download_detached_volume | Success | 60.613
test_06_destroy_vm | Success | 10.154
test_05_stop_ssvm | Success | 203.653
test_05_rvpc_multi_tiers | Success | 531.706
test_05_router_basic | Success | 0.026
test_05_iso_permissions | Success | 0.040
test_05_detach_volume | Success | 110.334
test_04_rvpc_privategw_static_routes | Success | 823.263
test_04_rvpc_network_garbage_collector_nics | Success | 1516.887
test_04_rvpc_internallb_haproxy_stats_on_all_interfaces | Success | 556.043
test_04_restart_network_wo_cleanup | Success | 5.561
test_04_extract_Iso | Success | 5.189
test_04_delete_attached_volume | Success | 10.143
test_04_create_fat_type_disk_offering | Success | 0.053
test_04_cpvm_internals | Success | 1.089
test_04_change_offering_small | Success | 96.933
test_03_vpc_privategw_restart_vpc_cleanup | Success | 841.963
test_03_vpc_internallb_haproxy_stats_on_all_interfaces | Success | 418.759
test_03_ssvm_internals | Success | 3.171
test_03_restart_network_cleanup | Success | 150.911
test_03_reboot_vm | Success | 5.113
test_03_download_attached_volume | Success | 20.336
test_03_delete_vm_snapshots | Success | 275.147
test_03_delete_service_offering | Success | 0.025
test_03_delete_iso | Success | 95.186
test_03_delete_disk_offering | Success | 0.028
test_03_create_redundant_VPC_1tier_2VMs_2IPs_2PF_ACL_reboot_routers | 
Success | 624.588
test_02_vpc_privategw_static_routes | Success | 566.609
test_02_sys_template_ready | Success | 0.082
test_02_start_vm | Success | 

[GitHub] cloudstack issue #1692: Fix Smoke Test Failures

2016-10-07 Thread blueorangutan
Github user blueorangutan commented on the issue:

https://github.com/apache/cloudstack/pull/1692
  
Trillian test result (tid-131)
Environment: xenserver-65sp1 (x2), Advanced Networking
Total time taken: 38763 seconds
Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr1692-t131-xenserver-65sp1.zip
Tested twice for intermitten failure: 
/marvin/tests/smoke/test_privategw_acl.py
Tested twice for intermitten failure: 
/marvin/tests/smoke/test_routers_network_ops.py
Tested twice for intermitten failure: 
/marvin/tests/smoke/test_vpc_redundant.py
Test completed. 41 look ok, 2 have error(s)


Test | Result | Time (s)
--- | --- | ---
test_05_rvpc_multi_tiers | `Failure` | 488.075
test_04_rvpc_privategw_static_routes | `Failure` | 1273.453
test_04_rvpc_network_garbage_collector_nics | `Failure` | 1342.588
test_02_vpc_privategw_static_routes | `Failure` | 439.296
test_01_create_redundant_VPC_2tiers_4VMs_4IPs_4PF_ACL | `Failure` | 454.733
test_router_dhcphosts | Success | 103.527
test_releaseIP | Success | 270.071
test_reboot_router | Success | 486.058
test_public_ip_user_account | Success | 10.373
test_public_ip_admin_account | Success | 40.680
test_nic_secondaryip_add_remove | Success | 154.018
test_network_rules_acquired_public_ip_3_Load_Balancer_Rule | Success | 
77.474
test_network_rules_acquired_public_ip_2_nat_rule | Success | 61.668
test_network_rules_acquired_public_ip_1_static_nat_rule | Success | 92.442
test_isolate_network_password_server | Success | 36.404
test_extendPhysicalNetworkVlan | Success | 15.578
test_deployvm_userdispersing | Success | 101.307
test_deployvm_userdata_post | Success | 15.796
test_deployvm_userdata | Success | 121.676
test_deployvm_userconcentrated | Success | 41.136
test_deployvm_firstfit | Success | 166.984
test_deploy_vm_multiple | Success | 244.149
test_deploy_vm_from_iso | Success | 159.486
test_deploy_vm | Success | 0.028
test_delete_account | Success | 218.605
test_dedicatePublicIpRange | Success | 0.906
test_dedicateGuestVlanRange | Success | 10.339
test_create_pvlan_network | Success | 5.307
test_createRegion | Success | 0.036
test_createPortablePublicIPRange | Success | 15.387
test_createPortablePublicIPAcquire | Success | 15.498
test_assign_and_removal_lb | Success | 149.256
test_advZoneVirtualRouter | Success | 0.022
test_UpdateStorageOverProvisioningFactor | Success | 0.133
test_UpdateConfigParamWithScope | Success | 0.129
test_DeployVmAntiAffinityGroup | Success | 191.889
test_CreateTemplateWithDuplicateName | Success | 95.934
test_10_destroy_cpvm | Success | 196.985
test_10_attachAndDetach_iso | Success | 31.909
test_09_reboot_router | Success | 60.511
test_09_expunge_vm | Success | 125.262
test_09_destroy_ssvm | Success | 198.908
test_09_delete_detached_volume | Success | 16.053
test_08_start_router | Success | 50.465
test_08_resize_volume | Success | 91.072
test_08_reboot_cpvm | Success | 121.662
test_08_migrate_vm | Success | 61.469
test_08_list_system_templates | Success | 0.040
test_07_stop_router | Success | 15.426
test_07_restore_vm | Success | 0.091
test_07_resize_fail | Success | 95.907
test_07_reboot_ssvm | Success | 143.857
test_07_list_public_templates | Success | 0.041
test_07_list_default_iso | Success | 0.055
test_06_stop_cpvm | Success | 166.680
test_06_router_advanced | Success | 0.051
test_06_download_detached_volume | Success | 35.418
test_06_destroy_vm | Success | 10.181
test_05_template_permissions | Success | 0.084
test_05_stop_ssvm | Success | 138.953
test_05_router_basic | Success | 0.036
test_05_iso_permissions | Success | 0.066
test_05_detach_volume | Success | 100.260
test_04_rvpc_internallb_haproxy_stats_on_all_interfaces | Success | 446.389
test_04_restart_network_wo_cleanup | Success | 5.529
test_04_extract_template | Success | 5.147
test_04_extract_Iso | Success | 5.147
test_04_delete_attached_volume | Success | 10.238
test_04_create_fat_type_disk_offering | Success | 0.063
test_04_cpvm_internals | Success | 1.120
test_04_change_offering_small | Success | 79.297
test_03_vpc_privategw_restart_vpc_cleanup | Success | 770.184
test_03_vpc_internallb_haproxy_stats_on_all_interfaces | Success | 324.886
test_03_ssvm_internals | Success | 3.401
test_03_restart_network_cleanup | Success | 121.076
test_03_reboot_vm | Success | 15.372
test_03_download_attached_volume | Success | 15.341
test_03_delete_vm_snapshots | Success | 280.219
test_03_delete_template | Success | 5.159
test_03_delete_service_offering | Success | 0.049
test_03_delete_iso | Success | 95.201
test_03_delete_disk_offering | Success | 0.038

[GitHub] cloudstack issue #1703: Trillian testrun on PR-1692 fwd-merged on 4.9 branch

2016-10-07 Thread blueorangutan
Github user blueorangutan commented on the issue:

https://github.com/apache/cloudstack/pull/1703
  
Trillian test result (tid-129)
Environment: vmware-55u3 (x2), Advanced Networking
Total time taken: 41336 seconds
Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr1703-t129-vmware-55u3.zip
Tested twice for intermitten failure: 
/marvin/tests/smoke/test_internal_lb.py
Tested twice for intermitten failure: 
/marvin/tests/smoke/test_outofbandmanagement.py
Tested twice for intermitten failure: 
/marvin/tests/smoke/test_routers_network_ops.py
Tested twice for intermitten failure: /marvin/tests/smoke/test_snapshots.py
Tested twice for intermitten failure: /marvin/tests/smoke/test_vpc_vpn.py
Test completed. 47 look ok, 1 have error(s)


Test | Result | Time (s)
--- | --- | ---
test_01_vpc_site2site_vpn | `Error` | 501.997
test_01_redundant_vpc_site2site_vpn | `Error` | 729.340
test_router_dns_guestipquery | Success | 76.742
test_router_dns_externalipquery | Success | 0.075
test_router_dhcphosts | Success | 143.973
test_rolepermission_lifecycle_update | Success | 7.089
test_rolepermission_lifecycle_list | Success | 6.880
test_rolepermission_lifecycle_delete | Success | 6.725
test_rolepermission_lifecycle_create | Success | 6.762
test_rolepermission_lifecycle_concurrent_updates | Success | 6.887
test_role_lifecycle_update_role_inuse | Success | 6.923
test_role_lifecycle_update | Success | 11.889
test_role_lifecycle_list | Success | 6.778
test_role_lifecycle_delete | Success | 11.828
test_role_lifecycle_create | Success | 6.778
test_role_inuse_deletion | Success | 6.750
test_role_account_acls_multiple_mgmt_servers | Success | 9.096
test_role_account_acls | Success | 9.226
test_releaseIP | Success | 288.976
test_reboot_router | Success | 620.832
test_public_ip_user_account | Success | 10.298
test_public_ip_admin_account | Success | 40.290
test_oobm_zchange_password | Success | 20.609
test_oobm_multiple_mgmt_server_ownership | Success | 14.573
test_oobm_issue_power_status | Success | 10.558
test_oobm_issue_power_soft | Success | 15.586
test_oobm_issue_power_reset | Success | 15.583
test_oobm_issue_power_on | Success | 15.588
test_oobm_issue_power_off | Success | 15.631
test_oobm_issue_power_cycle | Success | 15.585
test_oobm_enabledisable_across_clusterzones | Success | 58.519
test_oobm_enable_feature_valid | Success | 5.171
test_oobm_enable_feature_invalid | Success | 0.112
test_oobm_disable_feature_valid | Success | 5.195
test_oobm_disable_feature_invalid | Success | 0.110
test_oobm_configure_invalid_driver | Success | 0.099
test_oobm_configure_default_driver | Success | 0.096
test_oobm_background_powerstate_sync | Success | 11.504
test_nic_secondaryip_add_remove | Success | 248.859
test_network_rules_acquired_public_ip_3_Load_Balancer_Rule | Success | 
76.932
test_network_rules_acquired_public_ip_2_nat_rule | Success | 61.652
test_network_rules_acquired_public_ip_1_static_nat_rule | Success | 125.277
test_isolate_network_password_server | Success | 95.472
test_extendPhysicalNetworkVlan | Success | 15.354
test_deployvm_userdispersing | Success | 55.825
test_deployvm_userdata_post | Success | 30.501
test_deployvm_userdata | Success | 146.377
test_deployvm_userconcentrated | Success | 101.090
test_deployvm_firstfit | Success | 171.433
test_deploy_vm_multiple | Success | 248.391
test_deploy_vm_from_iso | Success | 198.296
test_deploy_vm | Success | 0.031
test_delete_account | Success | 303.900
test_default_role_deletion | Success | 6.854
test_dedicatePublicIpRange | Success | 0.574
test_dedicateGuestVlanRange | Success | 10.270
test_create_pvlan_network | Success | 5.271
test_createRegion | Success | 0.039
test_createPortablePublicIPRange | Success | 15.191
test_createPortablePublicIPAcquire | Success | 15.572
test_assign_and_removal_lb | Success | 148.787
test_advZoneVirtualRouter | Success | 0.023
test_UpdateStorageOverProvisioningFactor | Success | 0.161
test_UpdateConfigParamWithScope | Success | 0.141
test_DeployVmAntiAffinityGroup | Success | 201.892
test_CreateTemplateWithDuplicateName | Success | 221.672
test_10_destroy_cpvm | Success | 231.839
test_10_attachAndDetach_iso | Success | 26.881
test_09_reboot_router | Success | 176.199
test_09_expunge_vm | Success | 125.190
test_09_destroy_ssvm | Success | 233.777
test_09_delete_detached_volume | Success | 30.862
test_08_start_router | Success | 115.836
test_08_reboot_cpvm | Success | 156.598
test_08_migrate_vm | Success | 76.161
test_08_list_system_templates | Success | 0.031
test_07_stop_router | Success | 25.247
test_07_restore_vm | Success | 0.101

[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread swill
Github user swill commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
@serg38 if you respond from email, can you remove the quoted text so it 
does not add a full page of text to the GitHub issue.  :P  Maybe edit your 
above response to remove the extra text since this page is already crazy long.  
Thanks for looking at this and helping...  👍


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread swill
Github user swill commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
@serg38 Inline...

`plutostart=no` will do nothing.  I need to remove that, I just have not 
gotten around to cleaning that up.  That config option no longer is even picked 
up: https://wiki.strongswan.org/projects/strongswan/wiki/CharonPlutoIKEv1

`keyexchange=ikev2` I have tried this, but that has much bigger 
implications because ACS uses PSK and we don't have the corresponding UI or API 
to configure the details for `IKEv2`.  If we want to support `IKEv2`, we need 
to do a more complete overhaul of how ACS configures IPSec on the VR.

Note that I have been able to get the config working with Windows as per my 
post above...


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread serg38
Github user serg38 commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
@swill Can you try changing in ipsec.conf

plutostart=no
keyexchange=ikev2

and adding

ike=aes256-sha1-modp1024!
esp=aes256-sha1!

From: Will Stevens 
Reply-To: apache/cloudstack 
Date: Friday, October 7, 2016 at 12:27 PM
To: apache/cloudstack 
Cc: Sergey Levitskiy , Mention 

Subject: Re: [apache/cloudstack] Strongswan vpn feature (#872)


At @serg38's request, here are the current 
configs...

# cat /etc/strongswan.conf

# strongswan.conf - strongSwan configuration file

#

# Refer to the strongswan.conf(5) manpage for details

#

# Configuration changes should be made in the included files



charon {

load_modular = yes

plugins {

include strongswan.d/charon/*.conf

}

}



include strongswan.d/*.conf

# cat /etc/strongswan.d/charon/*.conf

addrblock {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



aes {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



af-alg {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



# Section to specify arbitrary attributes that are assigned to a peer via

# configuration payload (CP).

attr {



#  is an attribute name or an integer, values can be an IP 
address,

# subnet or arbitrary value.

#  =



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



ccm {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



certexpire {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



csv {



# Cron style string specifying CSV export times.

# cron =



# String to use in empty intermediate CA fields.

# empty_string =



# Use a fixed intermediate CA field count.

# fixed_fields = yes



# Force export of all trustchains we have a private key for.

# force = yes



# strftime(3) format string to export expiration dates as.

# format = %d:%m:%Y



# strftime(3) format string for the CSV file name to export local

# certificates to.

# local =



# strftime(3) format string for the CSV file name to export remote

# certificates to.

# remote =



# CSV field separator.

# separator = ,



}



}



cmac {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



constraints {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



ctr {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



curl {



# Whether to load the plugin. Can also be an integer to increase the

# priority of this plugin.

load = yes



}



dhcp {



# Always use the configured server address.

# force_server_address = no



# Derive user-defined MAC address from hash of IKE identity.

# identity_lease = no



# Interface name the plugin uses for address allocation.

# interface =



# Whether to load the plugin. Can also be an 

[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread swill
Github user swill commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
Thanks to @kiwiflyer for finding this link: 
https://support.microsoft.com/en-us/kb/926179

We have been able to create a connection by setting the registry for 
`AssumeUDPEncapsulationContextOnSendRule` to `2` (for the record `1` does not 
work).  This is a good start.  With some documentation, it looks like we have a 
working solution for Mac and Windows.

Will be doing some more testing to confirm everything is working as 
expected, but as a first pass, we seem to be moving in the right direction...


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread swill
Github user swill commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
At @serg38's request, here are the current configs...

```
# cat /etc/strongswan.conf 
# strongswan.conf - strongSwan configuration file
#
# Refer to the strongswan.conf(5) manpage for details
#
# Configuration changes should be made in the included files

charon {
load_modular = yes
plugins {
include strongswan.d/charon/*.conf
}
}

include strongswan.d/*.conf
```

```
# cat /etc/strongswan.d/charon/*.conf
addrblock {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

aes {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

af-alg {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

# Section to specify arbitrary attributes that are assigned to a peer via
# configuration payload (CP).
attr {

#  is an attribute name or an integer, values can be an IP 
address,
# subnet or arbitrary value.
#  =

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

ccm {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

certexpire {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

csv {

# Cron style string specifying CSV export times.
# cron =

# String to use in empty intermediate CA fields.
# empty_string =

# Use a fixed intermediate CA field count.
# fixed_fields = yes

# Force export of all trustchains we have a private key for.
# force = yes

# strftime(3) format string to export expiration dates as.
# format = %d:%m:%Y

# strftime(3) format string for the CSV file name to export local
# certificates to.
# local =

# strftime(3) format string for the CSV file name to export remote
# certificates to.
# remote =

# CSV field separator.
# separator = ,

}

}

cmac {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

constraints {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

ctr {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

curl {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

dhcp {

# Always use the configured server address.
# force_server_address = no

# Derive user-defined MAC address from hash of IKE identity.
# identity_lease = no

# Interface name the plugin uses for address allocation.
# interface =

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

# DHCP server unicast or broadcast IP address.
# server = 255.255.255.255

}

dnskey {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

eap-aka {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

# request_identity = yes

}

eap-gtc {

# XAuth backend to be used for credential verification.
# backend = pam

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

eap-identity {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

eap-md5 {

# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes

}

eap-mschapv2 {

# Whether to load the plugin. Can also be an integer to increase the
# 

Re: [GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread Sergey Levitskiy
@swill I believe windows natively support "L2TP” . And I see they negotiated 
both encryption and integrity . looks like the difference is this:

On OSX
   xl2tpd[2263]: control_finish: Peer requested tunnel 32 twice, ignoring 
second one.

On windows it seems it trying to establish ‘child’ session.

   charon: 16[IKE] IKE_SA L2TP-PSK[39] state change: CONNECTING => ESTABLISHED
charon: 16[ENC] generating ID_PROT response 0 [ ID HASH ]
charon: 16[NET] sending packet: from 74.121.ff.gg[4500] to 
74.121.xx.yy[64916] (76 bytes)
charon: 08[NET] sending packet: from 74.121.ff.gg[4500] to 
74.121.xx.yy[64916]
charon: 11[NET] received packet: from 74.121.xx.yy[64916] to 
74.121.ff.gg[4500]
charon: 11[NET] waiting for data on sockets
charon: 04[NET] received packet: from 74.121.xx.yy[64916] to 
74.121.ff.gg[4500] (444 bytes)
charon: 04[ENC] parsed QUICK_MODE request 1 [ HASH SA No ID ID NAT-OA 
NAT-OA ]
charon: 04[IKE] changing received traffic selectors 
172.16.11.171/32[udp/l2f]=== 74.121.ff.gg/32[udp/l2f] due to NAT
charon: 04[CFG] looking for a child config for 74.121.ff.gg/32[udp/l2f] 
=== 74.121.xx.yy/32[udp/l2f] 
charon: 04[CFG] proposing traffic selectors for us:


Can you post strongSwan configs : ipsec.conf, striongswan.cof, ipsec.secrets ?


On 10/7/16, 10:46 AM, "swill"  wrote:

Github user swill commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
If anyone has experience with Remote Access VPN on Windows and has any 
insight into why the following is failing, please let me know. 

**FAILING WINDOWS LOG:**
```
charon: 11[NET] received packet: from 74.121.xx.yy[1011] to 
74.121.ff.gg[500]
charon: 11[NET] waiting for data on sockets
charon: 02[NET] received packet: from 74.121.xx.yy[1011] to 
74.121.ff.gg[500] (408 bytes)
charon: 02[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V ]
charon: 02[CFG] looking for an ike config for 
74.121.ff.gg...74.121.xx.yy
charon: 02[CFG]   candidate: 74.121.ff.gg...%any, prio 1052
charon: 02[CFG] found matching ike config: 74.121.ff.gg...%any with 
prio 1052
charon: 02[ENC] received unknown vendor ID: 
01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:01
charon: 02[IKE] received MS NT5 ISAKMPOAKLEY vendor ID
charon: 02[IKE] received NAT-T (RFC 3947) vendor ID
charon: 02[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
charon: 02[IKE] received FRAGMENTATION vendor ID
charon: 02[ENC] received unknown vendor ID: 
fb:1d:e3:cd:f3:41:b7:ea:16:b7:e5:be:08:55:f1:20
charon: 02[ENC] received unknown vendor ID: 
26:24:4d:38:ed:db:61:b3:17:2a:36:e3:d0:cf:b8:19
charon: 02[ENC] received unknown vendor ID: 
e3:a5:96:6a:76:37:9f:e7:07:22:82:31:e5:ce:86:52
charon: 02[IKE] 74.121.xx.yy is initiating a Main Mode IKE_SA
charon: 02[IKE] IKE_SA (unnamed)[39] state change: CREATED => CONNECTING
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   proposal matches
charon: 02[CFG] received proposals: 
IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/ECP_384, 
IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/ECP_256, 
IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, 
IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, 
IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
charon: 02[CFG] configured proposals: 
IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, 
IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1536, 

[GitHub] cloudstack issue #1703: Trillian testrun on PR-1692 fwd-merged on 4.9 branch

2016-10-07 Thread blueorangutan
Github user blueorangutan commented on the issue:

https://github.com/apache/cloudstack/pull/1703
  
Trillian test result (tid-127)
Environment: kvm-centos7 (x2), Advanced Networking
Total time taken: 22766 seconds
Marvin logs: 
https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr1703-t127-kvm-centos7.zip
Test completed. 48 look ok, 0 have error(s)


Test | Result | Time (s)
--- | --- | ---
test_router_dns_guestipquery | Success | 74.685
test_router_dns_externalipquery | Success | 0.059
test_router_dhcphosts | Success | 241.441
test_rolepermission_lifecycle_update | Success | 7.077
test_rolepermission_lifecycle_list | Success | 6.938
test_rolepermission_lifecycle_delete | Success | 6.876
test_rolepermission_lifecycle_create | Success | 6.767
test_rolepermission_lifecycle_concurrent_updates | Success | 6.900
test_role_lifecycle_update_role_inuse | Success | 6.923
test_role_lifecycle_update | Success | 11.879
test_role_lifecycle_list | Success | 6.787
test_role_lifecycle_delete | Success | 11.817
test_role_lifecycle_create | Success | 6.798
test_role_inuse_deletion | Success | 6.794
test_role_account_acls_multiple_mgmt_servers | Success | 9.063
test_role_account_acls | Success | 9.294
test_releaseIP | Success | 153.417
test_reboot_router | Success | 389.419
test_public_ip_user_account | Success | 10.309
test_public_ip_admin_account | Success | 40.283
test_oobm_zchange_password | Success | 20.611
test_oobm_multiple_mgmt_server_ownership | Success | 16.582
test_oobm_issue_power_status | Success | 10.564
test_oobm_issue_power_soft | Success | 15.585
test_oobm_issue_power_reset | Success | 15.608
test_oobm_issue_power_on | Success | 15.589
test_oobm_issue_power_off | Success | 10.584
test_oobm_issue_power_cycle | Success | 10.564
test_oobm_enabledisable_across_clusterzones | Success | 58.790
test_oobm_enable_feature_valid | Success | 5.214
test_oobm_enable_feature_invalid | Success | 0.142
test_oobm_disable_feature_valid | Success | 5.226
test_oobm_disable_feature_invalid | Success | 0.154
test_oobm_configure_invalid_driver | Success | 0.115
test_oobm_configure_default_driver | Success | 0.142
test_oobm_background_powerstate_sync | Success | 20.117
test_nic_secondaryip_add_remove | Success | 188.350
test_network_rules_acquired_public_ip_3_Load_Balancer_Rule | Success | 
66.717
test_network_rules_acquired_public_ip_2_nat_rule | Success | 61.650
test_network_rules_acquired_public_ip_1_static_nat_rule | Success | 121.732
test_isolate_network_password_server | Success | 56.264
test_extendPhysicalNetworkVlan | Success | 15.336
test_deployvm_userdispersing | Success | 20.586
test_deployvm_userdata_post | Success | 25.480
test_deployvm_userdata | Success | 40.780
test_deployvm_userconcentrated | Success | 35.707
test_deployvm_firstfit | Success | 45.598
test_deploy_vm_multiple | Success | 223.415
test_deploy_vm_from_iso | Success | 193.537
test_deploy_vm | Success | 0.036
test_delete_account | Success | 278.648
test_default_role_deletion | Success | 6.866
test_dedicatePublicIpRange | Success | 0.450
test_dedicateGuestVlanRange | Success | 10.276
test_create_pvlan_network | Success | 5.213
test_createRegion | Success | 0.042
test_createPortablePublicIPRange | Success | 15.214
test_createPortablePublicIPAcquire | Success | 15.523
test_assign_and_removal_lb | Success | 133.398
test_advZoneVirtualRouter | Success | 0.024
test_UpdateStorageOverProvisioningFactor | Success | 0.158
test_UpdateConfigParamWithScope | Success | 0.143
test_DeployVmAntiAffinityGroup | Success | 56.066
test_CreateTemplateWithDuplicateName | Success | 60.613
test_10_destroy_cpvm | Success | 131.491
test_10_attachAndDetach_iso | Success | 26.562
test_09_reboot_router | Success | 35.310
test_09_expunge_vm | Success | 185.220
test_09_destroy_ssvm | Success | 133.136
test_09_delete_detached_volume | Success | 15.540
test_08_start_router | Success | 25.274
test_08_resize_volume | Success | 15.423
test_08_reboot_cpvm | Success | 101.390
test_08_migrate_vm | Success | 36.051
test_08_list_system_templates | Success | 0.031
test_07_stop_router | Success | 10.160
test_07_restore_vm | Success | 0.147
test_07_resize_fail | Success | 20.467
test_07_reboot_ssvm | Success | 133.855
test_07_list_public_templates | Success | 0.039
test_07_list_default_iso | Success | 0.062
test_06_stop_cpvm | Success | 131.600
test_06_router_advanced | Success | 0.060
test_06_download_detached_volume | Success | 15.317
test_06_destroy_vm | Success | 125.831
test_05_template_permissions | Success | 0.064
test_05_stop_ssvm | Success | 103.267
test_05_rvpc_multi_tiers | Success | 

[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread swill
Github user swill commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
@murali-reddy, @jburwell mentioned to ping you regarding the above.  Not 
sure if you have any ideas or suggestions, but I am open to any thoughts.  
Thanks...  :)


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread swill
Github user swill commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
If anyone has experience with Remote Access VPN on Windows and has any 
insight into why the following is failing, please let me know. 

**FAILING WINDOWS LOG:**
```
charon: 11[NET] received packet: from 74.121.xx.yy[1011] to 
74.121.ff.gg[500]
charon: 11[NET] waiting for data on sockets
charon: 02[NET] received packet: from 74.121.xx.yy[1011] to 
74.121.ff.gg[500] (408 bytes)
charon: 02[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V ]
charon: 02[CFG] looking for an ike config for 74.121.ff.gg...74.121.xx.yy
charon: 02[CFG]   candidate: 74.121.ff.gg...%any, prio 1052
charon: 02[CFG] found matching ike config: 74.121.ff.gg...%any with prio 
1052
charon: 02[ENC] received unknown vendor ID: 
01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:01
charon: 02[IKE] received MS NT5 ISAKMPOAKLEY vendor ID
charon: 02[IKE] received NAT-T (RFC 3947) vendor ID
charon: 02[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
charon: 02[IKE] received FRAGMENTATION vendor ID
charon: 02[ENC] received unknown vendor ID: 
fb:1d:e3:cd:f3:41:b7:ea:16:b7:e5:be:08:55:f1:20
charon: 02[ENC] received unknown vendor ID: 
26:24:4d:38:ed:db:61:b3:17:2a:36:e3:d0:cf:b8:19
charon: 02[ENC] received unknown vendor ID: 
e3:a5:96:6a:76:37:9f:e7:07:22:82:31:e5:ce:86:52
charon: 02[IKE] 74.121.xx.yy is initiating a Main Mode IKE_SA
charon: 02[IKE] IKE_SA (unnamed)[39] state change: CREATED => CONNECTING
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable ENCRYPTION_ALGORITHM found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   no acceptable DIFFIE_HELLMAN_GROUP found
charon: 02[CFG] selecting proposal:
charon: 02[CFG]   proposal matches
charon: 02[CFG] received proposals: 
IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/ECP_384, 
IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/ECP_256, 
IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, 
IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, 
IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
charon: 02[CFG] configured proposals: 
IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, 
IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1536, 
IKE:AES_CBC_128/AES_CBC_192/AES_CBC_256/3DES_CBC/AES_CTR_128/AES_CTR_192/AES_CTR_256/CAMELLIA_CTR_128/CAMELLIA_CTR_192/CAMELLIA_CTR_256/CAMELLIA_CBC_128/CAMELLIA_CBC_192/CAMELLIA_CBC_256/HMAC_SHA1_96/HMAC_SHA2_256_128/HMAC_MD5_96/HMAC_SHA2_384_192/HMAC_SHA2_512_256/AES_XCBC_96/AES_CMAC_96/PRF_HMAC_SHA1/PRF_HMAC_SHA2_256/PRF_HMAC_MD5/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_AES128_CMAC/MODP_2048/MODP_2048_224/MODP_2048_256/MODP_1536/MODP_3072/MODP_4096/MODP_8192/MODP_1024/MODP_1024_160,
 
IKE:AES_CCM_8_128/AES_CCM_8_192/AES_CCM_8_256/AES_CCM_12_128/AES_CCM_12_192/AES_CCM_12_256/AES_CCM_16_128/AES_CCM_16_192/AES_CCM_16_256/CAMELLIA_CCM_8_128/CAMELLIA_CCM_8_192/CAMELLIA_CCM_8_256/CAMELLIA_CCM_12_128/CAMELLIA_CCM_12_192/CAMELLIA_CCM_12_256/CAMELLIA_CCM_16_128/CAMELLIA_CCM_16_192/CAMELLIA_CCM_16_256/PRF_HMAC_SHA1/PRF_HMAC_SHA2_256/
 
PRF_HMAC_MD5/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_AES128_CMAC/MODP_2048/MODP_2048_224/MODP_2048_256/MODP_1536/MODP_3072/MODP_4096/MODP_8192/MODP_1024/MODP_1024_160
charon: 02[CFG] selected proposal: 
IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
charon: 02[IKE] sending XAuth vendor ID
charon: 02[IKE] sending DPD vendor ID
charon: 02[IKE] sending NAT-T (RFC 3947) vendor ID
charon: 02[ENC] generating ID_PROT response 0 [ SA V V V ]
charon: 02[NET] sending packet: from 74.121.ff.gg[500] to 
74.121.xx.yy[1011] (136 bytes)
charon: 08[NET] sending packet: from 74.121.ff.gg[500] to 74.121.xx.yy[1011]
charon: 11[NET] received packet: from 74.121.xx.yy[1011] to 
74.121.ff.gg[500]
charon: 11[NET] waiting for data on sockets

[GitHub] cloudstack issue #1702: CLOUDSTACK-9535: [API] listVMSnapshots improvement

2016-10-07 Thread rhtyd
Github user rhtyd commented on the issue:

https://github.com/apache/cloudstack/pull/1702
  
LGTM. Since, the changes to the api response are additive (no response keys 
were removed), we can accept this change. /cc @jburwell 


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1559: CLOUDSTACK-9280: System VM volumes can be expunged i...

2016-10-07 Thread ProjectMoon
Github user ProjectMoon commented on the issue:

https://github.com/apache/cloudstack/pull/1559
  
This pull request has been updated with another commit that fixes a bug 
where volumes cannot be expunged because the loading of the volume fails to 
find a primary data store (despite the expunger being able to handle this 
scenario). Will be working on some unit tests for this.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


Re: 4.8, 4.9, and master Testing Status

2016-10-07 Thread Will Stevens
Great work everyone.  Don't worry about the sporadic updates, that is just
the nature of the beast when working through stuff like this.  Well done so
far...

*Will STEVENS*
Lead Developer

*CloudOps* *| *Cloud Solutions Experts
420 rue Guy *|* Montreal *|* Quebec *|* H3J 1S6
w cloudops.com *|* tw @CloudOps_

On Fri, Oct 7, 2016 at 9:53 AM, John Burwell 
wrote:

> All,
>
> Thank you Ilya and Haijao for your words of encouragement.  In addition to
> the efforts of Paul, Rohit, Murali, Abhi, and Bobby, Sergey Levitskiy has
> been providing great help testing VMware.
>
> I apologize for my sporadic status updates.  We have made significant
> progress in getting smoke tests to pass on KVM, XenServer, and VMware.
> Currently, we have the following number of failures and errors:
>
> * KVM: 0
> * VMware: 4
> * XenServer: 8
>
> The outstanding failures and errors seem to be the caused by the following
> issues:
>
> 1. On VMware and XenServer, guest VMs in VPCs start but don’t
> acquire IP addresses causing tests relying on SSH connectivity tests to
> fail.  The issue occurs does not occur on KVM, intermittently on VMware,
> and consistently on XenServer.  This issue affects the test_vpc_redundant,
> test_privategw_acl, and test_vpc_vpn test suites.   We believe that this
> issue may be caused by either the guest VMs startup/DHCP wait period
> winning the race with the VPC VR configuration or there is a problem on the
> VPC VR assigning IP addresses.  We are currently investigating and expect
> to identify the root cause shortly.
> 2. SSVM downloads str being restarted due to ping timeouts on
> XenServer and VMware.  We are seeing the following messages such as the
> following in the Management Server logs:
>
> com.cloud.utils.exception.CloudRuntimeException: Failed
> to send command, due to 
> Agent:5,com.cloud.exception.OperationTimedoutException:
> Commands
> 9042102151853113352 to Host 5 timed out after 2400
>
>   Our initial investigation discovered different timezones being
> used by the system VM templates and Management Server.  This discrepancy We
> have modified Trillian to ensure consistent configuration of time zones
> across a cluster, and are preparing another run for XenServer and VMware.
> KVM is not affected by this time zone issue because KVM hosts use the same
> CentOS template as CentOS based Management Servers -- creating time zone
> consistency by side effect.
>
> Reports of each test run are available on PR #1692 [1].  We have kicked a
> new round of tests on KVM, VMware, and XenServer with the time zone fix and
> additional instrumentation to run down the VPC VR race condition.
>
> Instead of directly forward merging these changes, we plan to open a PR
> for each forward merge.  Since we are very close to having 4.8 resolved,
> Rohit has open PR 1703 [2] for the 4.9 forward merge and kicked off a test
> run.  While we cannot close this PR until 1692 is complete, we are hoping
> to get a head start on any issues in the 4.9 branch.
>
> Thank you again for your patience,
> -John
>
> [1]: https://github.com/apache/cloudstack/pull/1692
> [2]: https://github.com/apache/cloudstack/pull/1703
>
> > On Oct 5, 2016, at 4:32 AM, Haijiao <18602198...@163.com> wrote:
> >
> > Though I am one of the silent majority, I would thank John the dev team
> for your continuous effort, you keep ACS alive and better !
> >
> >
> > Just heard one of biggest finance company in China running 10,000+ VMs
> on ACS 4.4 for production/dev/QAS,  you guys should be proud of that.
> > Salute to you!
> >
> >
> >
> >
> >
> >
> >
> > 在2016年10月05 03时09分, "ilya"写道:
> >
> > John and Team
> >
> > Thanks for amazing work and contributing back.
> >
> > Regards,
> > ilya
> >
> > On 10/3/16 9:48 PM, John Burwell wrote:
> >> All,
> >>
> >> A quick update on our progress to pass all smoke tests aka super
> green.  We have reduced the failures and errors for XenServer from 93 to 9
> and for VMware from 51 to 14.  A CentOS 6/CentOS 6 KVM run is currently
> executing.  Based on manual tests/fixes, we are expecting to be the first
> super green configuration.  We have also found the following additional
> defects:
> >>
> >>  * CLOUDSTACK-9528 [2]: SSVM Downloads (built-in) Template Multiple
> Times
> >>  * CLOUDSTACK-9529 [3]: Marvin Tests Do Not Clean Up Properly
> >>
> >> 9528 is causing XenServer environments to fail to install and startup
> cleanly.  A lack of cleanup described in 9529 is causing XenServer to
> exhaust available resources before a test run completes.  We believe that
> resolution of these issues will address most, if not all, of the XenServer
> issues.
> >>
> >> Thanks,
> >> -John
> >>
> >> [1]: https://cwiki.apache.org/confluence/pages/viewpage.
> action?pageId=65873020
> >> [2]: https://issues.apache.org/jira/browse/CLOUDSTACK-9528
> >> [3]: 

Re: [ANNOUNCE] New committer: Syed Ahmed

2016-10-07 Thread John Burwell
Congratulations, Syed.

Thanks,
-John

> 
john.burw...@shapeblue.com 
www.shapeblue.com
53 Chandos Place, Covent Garden, London VA WC2N 4HSUK
@shapeblue
  
 

On Oct 7, 2016, at 6:30 AM, Paul Angus  wrote:
> 
> Congrats Syed.!
> 
> 
> Kind regards,
> 
> Paul Angus
> 
> paul.an...@shapeblue.com 
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
> @shapeblue
> 
> 
> 
> 
> -Original Message-
> From: Rafael Weingärtner [mailto:rafaelweingart...@gmail.com] 
> Sent: 06 October 2016 16:59
> To: dev@cloudstack.apache.org
> Subject: Re: [ANNOUNCE] New committer: Syed Ahmed
> 
> Congratulations Syed!
> 
> Welcome to the club ;)
> 
> On Thu, Oct 6, 2016 at 12:56 PM, Nicolás Vázquez 
> wrote:
> 
>> Congratulations Syed!
>> 
>> 2016-10-06 11:21 GMT-03:00 Syed Ahmed :
>> 
>>> Thank you all :)
>>> 
>>> On Thu, Oct 6, 2016 at 6:17 AM, Wei ZHOU  wrote:
>>> 
 Congratulations, Syed!!
 
 2016-10-05 22:07 GMT+02:00 Will Stevens :
 
> The Project Management Committee (PMC) for Apache CloudStack has 
> asked Syed Ahmed to become a committer and we are pleased to 
> announce that he has accepted.
> 
> Being a committer allows many contributors to contribute more 
> autonomously. For developers, it makes it easier to submit 
> changes
>> and
> eliminates the need to have contributions reviewed via the patch 
> submission process. Whether contributions are 
> development-related or otherwise, it is a recognition of a 
> contributor's participation in
>> the
> project and commitment to the project and the Apache Way.
> 
> Please join me in congratulating Syed!
> 
> Will Stevens
> on behalf of the CloudStack PMC
> 
 
>>> 
>> 
> 
> 
> 
> --
> Rafael Weingärtner



Re: 4.8, 4.9, and master Testing Status

2016-10-07 Thread John Burwell
All,

Thank you Ilya and Haijao for your words of encouragement.  In addition to the 
efforts of Paul, Rohit, Murali, Abhi, and Bobby, Sergey Levitskiy has been 
providing great help testing VMware.  

I apologize for my sporadic status updates.  We have made significant progress 
in getting smoke tests to pass on KVM, XenServer, and VMware.  Currently, we 
have the following number of failures and errors:

* KVM: 0
* VMware: 4
* XenServer: 8

The outstanding failures and errors seem to be the caused by the following 
issues:

1. On VMware and XenServer, guest VMs in VPCs start but don’t acquire 
IP addresses causing tests relying on SSH connectivity tests to fail.  The 
issue occurs does not occur on KVM, intermittently on VMware, and consistently 
on XenServer.  This issue affects the test_vpc_redundant, test_privategw_acl, 
and test_vpc_vpn test suites.   We believe that this issue may be caused by 
either the guest VMs startup/DHCP wait period winning the race with the VPC VR 
configuration or there is a problem on the VPC VR assigning IP addresses.  We 
are currently investigating and expect to identify the root cause shortly.
2. SSVM downloads str being restarted due to ping timeouts on XenServer 
and VMware.  We are seeing the following messages such as the following in the 
Management Server logs:

com.cloud.utils.exception.CloudRuntimeException: Failed to send 
command, due to Agent:5,com.cloud.exception.OperationTimedoutException: 
Commands 
9042102151853113352 to Host 5 timed out after 2400

  Our initial investigation discovered different timezones being used 
by the system VM templates and Management Server.  This discrepancy We have 
modified Trillian to ensure consistent configuration of time zones across a 
cluster, and are preparing another run for XenServer and VMware.  KVM is not 
affected by this time zone issue because KVM hosts use the same CentOS template 
as CentOS based Management Servers -- creating time zone consistency by side 
effect.

Reports of each test run are available on PR #1692 [1].  We have kicked a new 
round of tests on KVM, VMware, and XenServer with the time zone fix and 
additional instrumentation to run down the VPC VR race condition.

Instead of directly forward merging these changes, we plan to open a PR for 
each forward merge.  Since we are very close to having 4.8 resolved, Rohit has 
open PR 1703 [2] for the 4.9 forward merge and kicked off a test run.  While we 
cannot close this PR until 1692 is complete, we are hoping to get a head start 
on any issues in the 4.9 branch.

Thank you again for your patience,
-John

[1]: https://github.com/apache/cloudstack/pull/1692
[2]: https://github.com/apache/cloudstack/pull/1703

> On Oct 5, 2016, at 4:32 AM, Haijiao <18602198...@163.com> wrote:
> 
> Though I am one of the silent majority, I would thank John the dev team for 
> your continuous effort, you keep ACS alive and better !
> 
> 
> Just heard one of biggest finance company in China running 10,000+ VMs on ACS 
> 4.4 for production/dev/QAS,  you guys should be proud of that.
> Salute to you!
> 
> 
> 
> 
> 
> 
> 
> 在2016年10月05 03时09分, "ilya"写道:
> 
> John and Team
> 
> Thanks for amazing work and contributing back.
> 
> Regards,
> ilya
> 
> On 10/3/16 9:48 PM, John Burwell wrote:
>> All,
>> 
>> A quick update on our progress to pass all smoke tests aka super green.  We 
>> have reduced the failures and errors for XenServer from 93 to 9 and for 
>> VMware from 51 to 14.  A CentOS 6/CentOS 6 KVM run is currently executing.  
>> Based on manual tests/fixes, we are expecting to be the first super green 
>> configuration.  We have also found the following additional defects:
>> 
>>  * CLOUDSTACK-9528 [2]: SSVM Downloads (built-in) Template Multiple Times
>>  * CLOUDSTACK-9529 [3]: Marvin Tests Do Not Clean Up Properly
>> 
>> 9528 is causing XenServer environments to fail to install and startup 
>> cleanly.  A lack of cleanup described in 9529 is causing XenServer to 
>> exhaust available resources before a test run completes.  We believe that 
>> resolution of these issues will address most, if not all, of the XenServer 
>> issues.
>> 
>> Thanks,
>> -John
>> 
>> [1]: 
>> https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=65873020
>> [2]: https://issues.apache.org/jira/browse/CLOUDSTACK-9528
>> [3]: https://issues.apache.org/jira/browse/CLOUDSTACK-9529
>> 
>>> 
>> john.burw...@shapeblue.com
>> www.shapeblue.com
>> 53 Chandos Place, Covent Garden, London VA WC2N 4HSUK
>> @shapeblue
>> 
>> 
>> 
>> On Sep 30, 2016, at 2:40 AM, John Burwell  wrote:
>>> 
>>> All,
>>> 
>>> Using blueorganutan, Rohit, Murali, Boris, Paul, Abhi, and I are executing 
>>> the smoke tests for the 4.8, 4.9, and master branches against the following 
>>> environments:
>>> 
>>>* CentOS 7.2 Management Server + VMware 5.5u3 + NFS Primary/Secondary 

[GitHub] cloudstack issue #1702: CLOUDSTACK-9535: [API] listVMSnapshots improvement

2016-10-07 Thread serg38
Github user serg38 commented on the issue:

https://github.com/apache/cloudstack/pull/1702
  
Testing LGTM. Vmware 5.5. and 6.0 , advanced networking, RHEL 6 management 
servers
```
test DeployVM in anti-affinity groups for project ... === TestName: 
test_DeployVmAntiAffinityGroup_in_project | Status : SUCCESS ===
test DeployVM in anti-affinity groups ... === TestName: 
test_DeployVmAntiAffinityGroup | Status : SUCCESS ===
Test Deploy Virtual Machine ... SKIP: Skipping test because suitable 
hypervisor/host notpresent
Test Deploy Virtual Machine from ISO ... === TestName: 
test_deploy_vm_from_iso | Status : SUCCESS ===
Test deploy virtual machine with root resize ... === TestName: 
test_00_deploy_vm_root_resize | Status : SUCCESS ===
Test proper failure to deploy virtual machine with rootdisksize of 0 ... 
=== TestName: test_01_deploy_vm_root_resize | Status : SUCCESS ===
Test proper failure to deploy virtual machine with rootdisksize less than 
template size ... === TestName: test_02_deploy_vm_root_resize | Status : 
SUCCESS ===
Test to deploy vm with a first fit offering ... === TestName: 
test_deployvm_firstfit | Status : SUCCESS ===
Test deploy VMs using user concentrated planner ... === TestName: 
test_deployvm_userconcentrated | Status : SUCCESS ===
Test deploy VMs using user dispersion planner ... === TestName: 
test_deployvm_userdispersing | Status : SUCCESS ===
Test userdata as GET, size > 2k ... === TestName: test_deployvm_userdata | 
Status : SUCCESS ===
Test userdata as POST, size > 2k ... === TestName: 
test_deployvm_userdata_post | Status : SUCCESS ===
Test to create disk offering ... === TestName: test_01_create_disk_offering 
| Status : SUCCESS ===
Test to create  a sparse type disk offering ... === TestName: 
test_02_create_sparse_type_disk_offering | Status : SUCCESS ===
Test to create  a sparse type disk offering ... === TestName: 
test_04_create_fat_type_disk_offering | Status : SUCCESS ===
Test to update existing disk offering ... === TestName: 
test_02_edit_disk_offering | Status : SUCCESS ===
Test to delete disk offering ... === TestName: test_03_delete_disk_offering 
| Status : SUCCESS ===
Test to ensure 4 default roles cannot be deleted ... SKIP: Dynamic 
Role-Based API checker not enabled, skipping test
Test to check role, role permissions and account life cycles ... SKIP: 
Dynamic Role-Based API checker not enabled, skipping test
Test for role-rule enforcement in case of multiple mgmt servers ... SKIP: 
Dynamic Role-Based API checker not enabled, skipping test
Test to ensure role in use cannot be deleted ... SKIP: Dynamic Role-Based 
API checker not enabled, skipping test
Tests normal lifecycle operations for roles ... SKIP: Dynamic Role-Based 
API checker not enabled, skipping test
Tests role update ... SKIP: Dynamic Role-Based API checker not enabled, 
skipping test
Tests that default four roles exist ... SKIP: Dynamic Role-Based API 
checker not enabled, skipping test
Tests role update ... SKIP: Dynamic Role-Based API checker not enabled, 
skipping test
Tests role update when role is in use by an account ... SKIP: Dynamic 
Role-Based API checker not enabled, skipping test
Tests concurrent order updation of role permission ... SKIP: Dynamic 
Role-Based API checker not enabled, skipping test
Tests creation of role permission ... SKIP: Dynamic Role-Based API checker 
not enabled, skipping test
Tests deletion of role permission ... SKIP: Dynamic Role-Based API checker 
not enabled, skipping test
Tests listing of default role's permission ... SKIP: Dynamic Role-Based API 
checker not enabled, skipping test
Tests order updation of role permission ... SKIP: Dynamic Role-Based API 
checker not enabled, skipping test
test update configuration setting at zone level scope ... === TestName: 
test_UpdateConfigParamWithScope | Status : SUCCESS ===
Test guest vlan range dedication ... === TestName: 
test_dedicateGuestVlanRange | Status : SUCCESS ===
Test create public & private ISO ... === TestName: test_01_create_iso | 
Status : SUCCESS ===
Test Edit ISO ... === TestName: test_02_edit_iso | Status : SUCCESS ===
Test delete ISO ... === TestName: test_03_delete_iso | Status : SUCCESS ===
Test for extract ISO ... === TestName: test_04_extract_Iso | Status : 
SUCCESS ===
Update & Test for ISO permissions ... === TestName: test_05_iso_permissions 
| Status : SUCCESS ===
Test for copy ISO from one zone to another ... SKIP: Not enough zones 
available to perform copy template
Test delete ISO ... === TestName: test_07_list_default_iso | Status : 
SUCCESS ===
Test listing Volumes using 'ids' parameter ... === TestName: 
test_01_list_volumes | Status : SUCCESS ===
Test listing Templates using 'ids' parameter ... === TestName: 
test_02_list_templates | Status : SUCCESS ===
Test listing Snapshots 

[GitHub] cloudstack issue #1692: Fix Smoke Test Failures

2016-10-07 Thread serg38
Github user serg38 commented on the issue:

https://github.com/apache/cloudstack/pull/1692
  
@rhtyd Vmsnapshot tests fail on vmware 6.0 due to issue resolved in PR1677. 
1677 is targeted for 4.9 so I  agree on removing that test for ACS 4.8  


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1703: Trillian testrun on PR-1692 fwd-merged on 4.9 branch

2016-10-07 Thread blueorangutan
Github user blueorangutan commented on the issue:

https://github.com/apache/cloudstack/pull/1703
  
Packaging result: ✔centos6 ✔centos7 ✔debian. JID-59


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread swill
Github user swill commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
@rhtyd ya I am trying to get it working with all. It is a lot of trial and 
error, more research, then more trial and error. 

Right now I have it working on Mac. On Windows, phase 1 is working, but is 
failing on phase 2. Hopefully I can figure it out today.

Once I have remote access VPN working, I will automate the testing of the 
500+ different site to site vpn configurations. Once I have a red / green 
matrix of site to site configurations, we will have a better idea where we are 
at. 


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1703: Trillian testrun on PR-1692 fwd-merged on 4.9 branch

2016-10-07 Thread blueorangutan
Github user blueorangutan commented on the issue:

https://github.com/apache/cloudstack/pull/1703
  
@rhtyd a Jenkins job has been kicked to build packages. I'll keep you 
posted as I make progress.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack pull request #1703: Trillian testrun on PR-1692 merged on 4.9 bra...

2016-10-07 Thread rhtyd
GitHub user rhtyd opened a pull request:

https://github.com/apache/cloudstack/pull/1703

Trillian testrun on PR-1692 merged on 4.9 branch

@blueorangutan package
The aim of the PR is to see how marvin tests perform on 4.9 branch with 
recent list of fixes from PR #1692 
/cc @jburwell 

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/shapeblue/cloudstack 4.9-marvintestfixes

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/cloudstack/pull/1703.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #1703


commit 47104cf2b359800be55b34a546a7085a67add86b
Author: Paul Angus 
Date:   2016-09-26T11:08:41Z

fix ping tests to properly recognise successful ping test

commit 7a1efd687e31e26f5b687d43c320751610a0aeab
Author: Boris 
Date:   2016-09-29T15:57:58Z

CLOUDSTACK-9514: Making the credentials of the host to be picked up from the

Use config file, instead of hardcoded crendentials

Signed-off-by: Rohit Yadav 

commit 052a9af0235134ea0256993345662a21a7d4e809
Author: Murali Reddy 
Date:   2016-09-29T16:17:15Z

CLOUDSTACK-9515: internal LB vm is not handled when parsing cmd_line.json,
resulting in internal LB vm not come up

parsing cmd_line to create 'ips' data bag, never handled internal lb vm, 
but still
worked due to another bug. support for internal lb vm is added with this fix

commit fcdc2cc52979e74c6a67c765251c429bf354e90f
Author: Murali Reddy 
Date:   2016-09-29T17:11:34Z

CLOUDSTACK-9511: fix test_privategw_acl.py to handle multiple physical 
networks

modified script to handle case where there can be multple physical networks
in the zone

Signed-off-by: Rohit Yadav 

commit 99da5338ff0b36be8cb139927e00782c15d1a235
Author: Paul Angus 
Date:   2016-09-30T07:46:29Z

fix macchinina template specificied for vmware in Marvin tests

- Fix macchnina template url
- Fix a variable scope issue

Signed-off-by: Rohit Yadav 

commit 79f0adf3974e45ad416a50e0fc24ae6f529eff62
Author: Paul Angus 
Date:   2016-09-30T07:47:30Z

Marvin Tests: Fix VPC network offering selection

Signed-off-by: Rohit Yadav 

commit 0eb4fae8b7e6f48a961d424b1f168c277bc82c78
Author: Rohit Yadav 
Date:   2016-09-30T09:42:37Z

CLOUDSTACK-9161: move quota test to plugins

The quota integration test requires special setup and is moved to plugins
directory as in 4.9 and master branch.

Signed-off-by: Rohit Yadav 

commit 1f27874eaf0d1d8cb793527bd5b12cd262e3de2e
Author: Murali Reddy 
Date:   2016-09-30T11:29:12Z

CLOUDSTACK-9522: Check for available attribute in marvin response

- Handle case where physical network instance does not have vlan attribute
- Handle case where listIso response may not have status attribute

Signed-off-by: Rohit Yadav 

commit d4f0bf1ca92205f1838d68ec022d62450675a669
Author: Boris 
Date:   2016-10-03T10:57:15Z

CLOUDSTACK-9526: Marvin test_deploy_vgpu_enabled_vm.py - Fix a hardcoded 
username and password

Signed-off-by: Rohit Yadav 

commit dc932687888aa068ff4d4e657a76c07cff26cd90
Author: Rohit Yadav 
Date:   2016-10-03T10:30:05Z

CLOUDSTACK-9524: Check router hypervisor before ssh to VR

SSH to VR for vmware, goes via the mgmt server and uses ssh keys at
/var/cloudstack path. Add suitable checks to tests failing on vmware.

Signed-off-by: Rohit Yadav 

commit 394f2e359f2af9de6c7e586659fed47051f44146
Author: Boris 
Date:   2016-10-03T14:53:51Z

CLOUDSTACK-9527: Skip tests not supported for hypervisor

- test_01_test_vm_volume_snapshot not supported for Xen, tests keep failing
- Skip snapshot tests for centos6/kvm as snapshot is not supported by older
  qemu-img versions

Signed-off-by: Rohit Yadav 

commit 5545bcaa9de9ddcc2e4842dc5d2bb073897ebef2
Author: Rohit Yadav 
Date:   2016-10-04T12:12:53Z

CLOUDSTACK-9531: Try template teardown without failure

As per previous discussions and ticket, a template deletion may result in 
failure
(exception thrown) for templates that are not properly downloaded. The 
tearDown
method, a template may be tried for deletion but on failure we may ignore it
as account deletion/tearDown would 

RE: [ANNOUNCE] New committer: Syed Ahmed

2016-10-07 Thread Paul Angus
Congrats Syed.!


Kind regards,

Paul Angus

paul.an...@shapeblue.com 
www.shapeblue.com
53 Chandos Place, Covent Garden, London  WC2N 4HSUK
@shapeblue
  
 


-Original Message-
From: Rafael Weingärtner [mailto:rafaelweingart...@gmail.com] 
Sent: 06 October 2016 16:59
To: dev@cloudstack.apache.org
Subject: Re: [ANNOUNCE] New committer: Syed Ahmed

Congratulations Syed!

Welcome to the club ;)

On Thu, Oct 6, 2016 at 12:56 PM, Nicolás Vázquez 
wrote:

> Congratulations Syed!
>
> 2016-10-06 11:21 GMT-03:00 Syed Ahmed :
>
> > Thank you all :)
> >
> > On Thu, Oct 6, 2016 at 6:17 AM, Wei ZHOU  wrote:
> >
> > > Congratulations, Syed!!
> > >
> > > 2016-10-05 22:07 GMT+02:00 Will Stevens :
> > >
> > > > The Project Management Committee (PMC) for Apache CloudStack has 
> > > > asked Syed Ahmed to become a committer and we are pleased to 
> > > > announce that he has accepted.
> > > >
> > > > Being a committer allows many contributors to contribute more 
> > > > autonomously. For developers, it makes it easier to submit 
> > > > changes
> and
> > > > eliminates the need to have contributions reviewed via the patch 
> > > > submission process. Whether contributions are 
> > > > development-related or otherwise, it is a recognition of a 
> > > > contributor's participation in
> the
> > > > project and commitment to the project and the Apache Way.
> > > >
> > > > Please join me in congratulating Syed!
> > > >
> > > > Will Stevens
> > > > on behalf of the CloudStack PMC
> > > >
> > >
> >
>



--
Rafael Weingärtner


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread rhtyd
Github user rhtyd commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
@koushik-das I actually have appended the two translated messages in the 
conditional, as destroy router would stop the VR first.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread koushik-das
Github user koushik-das commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
LGTM. Small comment on the message for running VR. "Please confirm... " is 
appearing twice, only one would suffice.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1692: Fix Smoke Test Failures

2016-10-07 Thread rhtyd
Github user rhtyd commented on the issue:

https://github.com/apache/cloudstack/pull/1692
  
Common intermittent failure issues: (1) unable to contact ssvm/agent, times 
out, (2) unable to ssh into guest VM possibly due to vm's nic not up/available:

1. Re-ran tests on `pr1692-t120-xenserver-65sp1`:

Test | Result | Time (s)
--- | --- | ---
test_01_snapshot_root_disk | Success | 21.040

We're investigating redundant vpc/vr related failures on the xenserver 
environment.

2. I'm re-running tests on vmware 5.5 u3, the failures are thought as 
intermittent issues.

3. All vm_snapshot related tests on vmware 6.0 are failing, since vmware 
6.0 is not supported on 4.8, I'll skip them to reduce testing scope but we 
should consider vmware 6.0 env for 4.9/lts+.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread rhtyd
Github user rhtyd commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
@koushik-das alright I've fixed the message. It shows as follows:

1. When router is in running state:
![screenshot from 2016-10-07 
15-11-40](https://cloud.githubusercontent.com/assets/95203/19185852/1593a5dc-8ca1-11e6-9444-bf44eb121acd.png)

2. When router is in stopped state:
![screenshot from 2016-10-07 
15-17-25](https://cloud.githubusercontent.com/assets/95203/19185896/3f6865aa-8ca1-11e6-891e-263bcd2f1f30.png)



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread rhtyd
Github user rhtyd commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
@koushik-das I'll see if I can add a conditional in the pop-up :)


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread koushik-das
Github user koushik-das commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
@rhtyd You are right, the message only makes sense for destroying running 
VR. So some conditional check needs to be there for displaying the proper 
message.

Based on the discussion it appears that may be destroy option was 
intentionally not shown earlier to avoid the effort of showing conditional 
messages :)


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread rhtyd
Github user rhtyd commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
@koushik-das this is available/shown only to the admin, can we assume admin 
would know that it may cause network disruption for guest vms? The translation 
can be fixed, though in case the VR is stopped -- the message won't make sense 
when destroy router action is performed.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread koushik-das
Github user koushik-das commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
Since services are disrupted when VR is destroyed, I think it would be 
useful to provide a message similar to stop VR. Earlier only destroying a 
stopped VR was possible from UI so caller was already aware.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread rhtyd
Github user rhtyd commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
@koushik-das it'll display whatever message is currently displayed for 
destroy router action, which is not same as stop router action:

![screenshot from 2016-10-07 
14-12-10](https://cloud.githubusercontent.com/assets/95203/19183907/24e3b47c-8c98-11e6-8442-2ff8d2aa8513.png)





---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1698: CLOUDSTACK-9525 add support for windows 10 guest os ...

2016-10-07 Thread koushik-das
Github user koushik-das commented on the issue:

https://github.com/apache/cloudstack/pull/1698
  
Sql changes LGTM


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1701: CLOUDSTACK-9534: Allow VR to be destroy in UI when i...

2016-10-07 Thread koushik-das
Github user koushik-das commented on the issue:

https://github.com/apache/cloudstack/pull/1701
  
@rhtyd Will destroy router show a similar message as stop router in UI?
All services provided by this virtual router will be interrupted. Please 
confirm that you want to stop this router.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #872: Strongswan vpn feature

2016-10-07 Thread rhtyd
Github user rhtyd commented on the issue:

https://github.com/apache/cloudstack/pull/872
  
@swill thanks for sharing your progress, last time I hit the issue -- when 
I fixed it to make it work with osx, it won't work with windows and vice-versa 
so we need to test that vpn works on all three -- windows, osx and on 
Linux(Ubuntu/Fedora etc).


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1692: Fix Smoke Test Failures

2016-10-07 Thread blueorangutan
Github user blueorangutan commented on the issue:

https://github.com/apache/cloudstack/pull/1692
  
Packaging result: ✔centos6 ✔centos7 ✔debian. JID-58


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1702: CLOUDSTACK-9535: [API] listVMSnapshots improvement

2016-10-07 Thread koushik-das
Github user koushik-das commented on the issue:

https://github.com/apache/cloudstack/pull/1702
  
Code changes LGTM


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1642: CLOUDSTACK-9504: System VMs on Managed Storage

2016-10-07 Thread koushik-das
Github user koushik-das commented on the issue:

https://github.com/apache/cloudstack/pull/1642
  
@mike-tutkowski If the LGTMs are there, this can get merged. There are lot 
of comments so difficult to go through all of them.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] cloudstack issue #1615: CLOUDSTACK-9438: Fix for CLOUDSTACK-9252 - Make NFS ...

2016-10-07 Thread koushik-das
Github user koushik-das commented on the issue:

https://github.com/apache/cloudstack/pull/1615
  
I think this has all the necessary LGTMs.
@karuturi @jburwell Should I go ahead and merge this?

I thing fixing #1692 is fine but I see no reason to delay other PRs for 
that when there is no definite timeline to close #1692.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---