RE: Advanced Zone with Security Groups

2018-07-16 Thread Paul Angus
Yes, it should probably be hidden in a security group based zone. Kind regards, Paul Angus paul.an...@shapeblue.com  www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue -Original Message- From: S. Reddit Sent: 16 July 2018 14:33 To: users@cloudstack

Secure Live KVM VM Migration with CloudStack 4.11.1

2018-07-16 Thread Steve Roles
Hi all - if you're interested in the topic, Rohit has written a blog about it here: https://www.shapeblue.com/secure-live-kvm-vm-migration-with-cloudstack-4-11-1/ Best regards, steve.ro...@shapeblue.com  www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue

Re: Advanced Zone with Security Groups

2018-07-16 Thread S. Reddit
Hi Paul, Yes, a VM should have access to a private network. Yes, one possibility would be to have a second, private network per customer, which is routable to the default public guest network. Thanks for the hint. What wouldn't work though is, when customers try to dualhome VMs, which CloudStack a

Re: Unable to upload volumes 4.11.0

2018-07-16 Thread Andrija Panic
HttpS links were not supported (at least up to 4.8 release - I have to always use plain HTTP). Cheers On Mon, Jul 16, 2018, 12:43 Paul Angus wrote: > Hi Adam, > Have you tried this with 4.11.1? > > > Kind regards, > > Paul Angus > > paul.an...@shapeblue.com > www.shapeblue.com > 53 Chandos Plac

RE: Advanced Zone with Security Groups

2018-07-16 Thread Paul Angus
Hi Adrian, Is the requirement 'just' that a VM can access a private network? Can you not make the private network routable from the network that the VM is on? Or apply a secondary IP and configure it manually for the private network (VLANs permitting). Kind regards, Paul Angus paul.an...@sha

RE: Unable to upload volumes 4.11.0

2018-07-16 Thread Paul Angus
Hi Adam, Have you tried this with 4.11.1? Kind regards, Paul Angus paul.an...@shapeblue.com  www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue -Original Message- From: Adam Witwicki Sent: 16 July 2018 11:22 To: users@cloudstack.apache.org Subject:

RE: Unable to upload volumes 4.11.0

2018-07-16 Thread Adam Witwicki
Hi Paul That was accepted but returned this error, cert issue. Failed to upload volume: e6638e70-f346-4a98-aab7-91046e9fcfc7 with error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certif

Re: Advanced Zone with Security Groups

2018-07-16 Thread S. Reddit
Thanks for your answer, Paul! VPC would be nice, but it's not working together with security groups, correct me if I'm wrong... Regards, Adrian On Fri, Jul 13, 2018 at 9:21 PM Paul Angus wrote: > Hi Adrian, > > An advanced zone with security groups is similar to a basic network in > that it do

RE: Unable to upload volumes 4.11.0

2018-07-16 Thread Paul Angus
Full disclosure - I used 4.11.1 but I uploaded a 'volume' from centos without a problem. Could you test the same link? https://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2 Kind regards, Paul Angus paul.an...@shapeblue.com  www.shapeblue.com 53 Chandos Place, Covent Garde

RE: Unable to upload volumes 4.11.0

2018-07-16 Thread Adam Witwicki
Hi Paul, The SSVM can curl the file, and the template import (add) works without issue, it’s the volume import (add) that fails Thanks Adam -Original Message- From: Paul Angus Sent: 14 July 2018 07:36 To: users@cloudstack.apache.org Subject: RE: Unable to upload volumes 4.11.0 ** Thi