Re: SystemVM not starting after updating console SSL cert

[Amit Dalia]

Thanks Andrija.


Will try this and get back to all further update.


Regards,


Amit


From: Andrija Panic 
Sent: Thursday, February 8, 2018 2:14:11 AM
To: users
Subject: Re: SystemVM not starting after updating console SSL cert

Hi Amit,

you should be able to login to host and check logs as Dan said.

On the other hand, I see there is arround 30sec before agent is connected
and the time it receives the kill command - so this should be enough for
you to do one line ssh/scp command that will rsync/scp/copy logs from
inside the VM to local host (where the VM is running) - you would be doing
ssh to loopback address (169.x.x.x) i.e.  ssh -p 3922 -i
.ssh/id_rsa.cloud root@169.254.x.y

Worst case restore the table and restat mgmt server.

Note one thing, that on previous ACS version (up to 4.5 or 4.3 or so...),
there was a need to convert keys and ssl via special tools to some specific
format (I can remember some CWIKI page with instructions for this using
some Google tools etc) - but in 4.8 version (if not previously) there is
full GUI support for all this and made my life easier :)

During MGMT server start (reboot) check for message similar to "invalid
trust chain", or "failed to build trust chain" or similar - I got this
ones, when improperly uploading new SSL...

Best

On 7 February 2018 at 11:23, Amit Dalia  wrote:

> Not sure, but I found version details from below:
>
>
> select * from version;
> ++--+-+--+
> | id | version  | updated | step |
> ++--+-+--+
> |  1 | 3.0.2.20120506223416 | 2012-07-02 13:03:10 | Complete |
> ++--+-+--+
>
> Let me check hypervisor logs.
>
> 
> From: Daan Hoogland 
> Sent: Wednesday, February 7, 2018 3:46:54 PM
> To: users@cloudstack.apache.org
> Subject: Re: SystemVM not starting after updating console SSL cert
>
> Omit,
>
> On Wed, Feb 7, 2018 at 10:48 AM, Amit Dalia  wrote:
>
> > Hi Dan,
> >
>
>
>
>
> >
> > When you say this is an old query, do you mean it is an old version of
> > CloudStack?
> >
> > >> Nope. I mean this might be an old question already discussed in the
> > group.
> >
> ​ah, well it resambles a lot but might not be the same, not much to go on
> here.
> ​
>
>
> >
> >
> > Which version is it?
> >
> > >> 3.0.2.20120506223416
> >
> > Note: This is old deployment.
> >
> ​Yes it is, it is also not a apache version, It looks to be a former
> citrix, now accelerite version. I'd contact their support site.
> ​
>
>
> >
> >
> > During your install of the new certificates, did you destroy the
> systemvms
> > and let cloudstack recreate them?
> >
> > >> Nope. But now I deleted 1 console VM and it is not recreated yet.
> > Storage vms are in running state.
> >
> >
> > And can you get to the hosts that run the console proxy to do an
> > investigation there, as to why the consoleproxy stops again?
> >
> > >> How can I get there if the machine is not running.
> >
> ​not to the machine itself but to the hypervisor it runs on, it might have
> logs with usefull infromation.
> ​
>
>
> >
> >
> > Regards,
> >
> >
> > Amit
> >
> > 
> > From: Daan Hoogland 
> > Sent: Wednesday, February 7, 2018 2:02:29 PM
> > To: users@cloudstack.apache.org
> > Subject: Re: SystemVM not starting after updating console SSL cert
> >
> > Amit, couple of questions as I am not sure what you are asking for.
> >
> > When you say this is an old query, do you mean it is an old version of
> > CloudStack?
> > Which version is it?
> > During your install of the new certificates, did you destroy the
> systemvms
> > and let cloudstack recreate them?
> > And can you get to the hosts that runs the console proxy to do
> > investigation there, as to why the consoleproxy stops again?
> >
> > regards,
> >
> > On Wed, Feb 7, 2018 at 7:01 AM, Amit Dalia 
> wrote:
> >
> > > Hi All,
> > >
> > >
> > > I'm new to cloudstack and our production environment is having
> cloudstack
> > > as an in-house cloud. The first task was given to me to update expiring
> > > console SSL certificate.
> > >
> > >
> > > I went through all the wiki pages on how to upload cert, private key,
> > root
> > > CA & intermediate CA. (Note: before uploading the same I had taken old
> > > keystore table backup.)
> > >
> > >
> > > Restarted cloud management service.
> > >
> > > But now console system VM is in the stopped state and when I try to
> start
> > > then it goes to running state and then back to the stopped state.
> > >
> > > I had done grep on log file for this VM and same is attached to the
> > email.
> > >
> > >
> > > I know this might be an old query, but it will be helpful if someone
> > guide
> > > me further or 

Re: SystemVM not starting after updating console SSL cert

[Andrija Panic]

Hi Amit,

you should be able to login to host and check logs as Dan said.

On the other hand, I see there is arround 30sec before agent is connected
and the time it receives the kill command - so this should be enough for
you to do one line ssh/scp command that will rsync/scp/copy logs from
inside the VM to local host (where the VM is running) - you would be doing
ssh to loopback address (169.x.x.x) i.e.  ssh -p 3922 -i
.ssh/id_rsa.cloud root@169.254.x.y

Worst case restore the table and restat mgmt server.

Note one thing, that on previous ACS version (up to 4.5 or 4.3 or so...),
there was a need to convert keys and ssl via special tools to some specific
format (I can remember some CWIKI page with instructions for this using
some Google tools etc) - but in 4.8 version (if not previously) there is
full GUI support for all this and made my life easier :)

During MGMT server start (reboot) check for message similar to "invalid
trust chain", or "failed to build trust chain" or similar - I got this
ones, when improperly uploading new SSL...

Best

On 7 February 2018 at 11:23, Amit Dalia  wrote:

> Not sure, but I found version details from below:
>
>
> select * from version;
> ++--+-+--+
> | id | version  | updated | step |
> ++--+-+--+
> |  1 | 3.0.2.20120506223416 | 2012-07-02 13:03:10 | Complete |
> ++--+-+--+
>
> Let me check hypervisor logs.
>
> 
> From: Daan Hoogland 
> Sent: Wednesday, February 7, 2018 3:46:54 PM
> To: users@cloudstack.apache.org
> Subject: Re: SystemVM not starting after updating console SSL cert
>
> Omit,
>
> On Wed, Feb 7, 2018 at 10:48 AM, Amit Dalia  wrote:
>
> > Hi Dan,
> >
>
>
>
>
> >
> > When you say this is an old query, do you mean it is an old version of
> > CloudStack?
> >
> > >> Nope. I mean this might be an old question already discussed in the
> > group.
> >
> ​ah, well it resambles a lot but might not be the same, not much to go on
> here.
> ​
>
>
> >
> >
> > Which version is it?
> >
> > >> 3.0.2.20120506223416
> >
> > Note: This is old deployment.
> >
> ​Yes it is, it is also not a apache version, It looks to be a former
> citrix, now accelerite version. I'd contact their support site.
> ​
>
>
> >
> >
> > During your install of the new certificates, did you destroy the
> systemvms
> > and let cloudstack recreate them?
> >
> > >> Nope. But now I deleted 1 console VM and it is not recreated yet.
> > Storage vms are in running state.
> >
> >
> > And can you get to the hosts that run the console proxy to do an
> > investigation there, as to why the consoleproxy stops again?
> >
> > >> How can I get there if the machine is not running.
> >
> ​not to the machine itself but to the hypervisor it runs on, it might have
> logs with usefull infromation.
> ​
>
>
> >
> >
> > Regards,
> >
> >
> > Amit
> >
> > 
> > From: Daan Hoogland 
> > Sent: Wednesday, February 7, 2018 2:02:29 PM
> > To: users@cloudstack.apache.org
> > Subject: Re: SystemVM not starting after updating console SSL cert
> >
> > Amit, couple of questions as I am not sure what you are asking for.
> >
> > When you say this is an old query, do you mean it is an old version of
> > CloudStack?
> > Which version is it?
> > During your install of the new certificates, did you destroy the
> systemvms
> > and let cloudstack recreate them?
> > And can you get to the hosts that runs the console proxy to do
> > investigation there, as to why the consoleproxy stops again?
> >
> > regards,
> >
> > On Wed, Feb 7, 2018 at 7:01 AM, Amit Dalia 
> wrote:
> >
> > > Hi All,
> > >
> > >
> > > I'm new to cloudstack and our production environment is having
> cloudstack
> > > as an in-house cloud. The first task was given to me to update expiring
> > > console SSL certificate.
> > >
> > >
> > > I went through all the wiki pages on how to upload cert, private key,
> > root
> > > CA & intermediate CA. (Note: before uploading the same I had taken old
> > > keystore table backup.)
> > >
> > >
> > > Restarted cloud management service.
> > >
> > > But now console system VM is in the stopped state and when I try to
> start
> > > then it goes to running state and then back to the stopped state.
> > >
> > > I had done grep on log file for this VM and same is attached to the
> > email.
> > >
> > >
> > > I know this might be an old query, but it will be helpful if someone
> > guide
> > > me further or point me to old archive.
> > >
> > >
> > > Thanks & Regards,
> > >
> > >
> > > Amit Dalia
> > >
> >
> >
> >
> > --
> > Daan
> >
>
>
>
> --
> Daan
>



-- 

Andrija Panić

Re: Migrate system VMs volumes to new storage

[Andrija Panic]

Hi Ugo,

I dont know if you have multiple SSVM (and other system) offerings, but we
have 2 default ones for every role (SSVM on local and on shared storage,
then CPVM on local and shared, then VR for both also...) -  and we just
edit the "shared one" i.e. System Offering For Secondary Storage VM and set
tag here, which was previously also set on new storage.

They way tagging works for volumes (descriptive) as following, assuming you
have setup "TAG1" as the tag on the storage side:
- list all storages that have tag "TAG1" on them and then ACS will list
all storages (if you have multiple storages) that have this flag, and
usually the first one (or randomly, not sure) is choosen for volume
deployment...

This doesn't stop UNTAGGED offerings, to also "deploy" volumes on this
TAGGED storages, since then ACS list all storages (with no TAG
filters/limit) and then choose from the list...

If you do this for VRs also, make sure to restart VPC (new VR with new name
crated, taking into account Offering), while simple VR reboot (translates
to destroy and create) will result on VR recreated with same name on same
storage where it was originally (my experience).

Not sure if this helps.



On 6 February 2018 at 16:26, Ugo Vasi  wrote:

> Hi Andrija,
> do I have to eliminate other system offers that do not have storage tag
> before destroy the SVM?
>
>
> Il 02/02/2018 17:32, Andrija Panic ha scritto:
>
>> If you can afford using (Storage) Tags, then you can  do it that way also.
>>
>> we have 3 different storages (had) and all 3 were having at some time
>> different TAGs - you edit existing System Offering for the CPVM, SSVM, VR
>> (and/or Compute and Data disk offerings)  i.e. //Service Offerings ->
>> System Offerings -> System Offering For Secondary Storage VM... and define
>> storage tag.
>> just make sure you put same tag on offering as you put on new storage, and
>> than go and destroy systemVMs - and they will be automatically recreated
>> after 1-2 minutes, but since tagging is present they will be created on
>> the
>> proper storage.
>>
>>
>>
>>
>>
>>
>> On 24 January 2018 at 16:35, Dag Sonstebo 
>> wrote:
>>
>> Hi Ugo,
>>>
>>> If all you are worried about is the system VMs then the easiest and risk
>>> free option is:
>>>
>>> - Configured new primary storage pool.
>>> - Disable the old one (you will have to do this with cloudmonkey, it is
>>> not available through the GUI – something like update storagepool
>>> enabled=false id=50848ff7-c6aa-3fdd-b487-27899bf2129c)
>>> - Destroy your system VMs and watch them come back online on new primary
>>> storage.
>>> - If for some reason it doesn't work then just re-enable the old storage
>>> and do some troubleshooting.
>>>
>>> Regards,
>>> Dag Sonstebo
>>> Cloud Architect
>>> ShapeBlue
>>>
>>> From: Özhan Rüzgar Karaman 
>>> Date: Wednesday, 24 January 2018 at 14:25
>>> To: Ugo Vasi 
>>> Cc: "users@cloudstack.apache.org" , Dag
>>> Sonstebo 
>>> Subject: Re: Migrate system VMs volumes to new storage
>>>
>>> Hi Ugo;
>>> If you have running other vm's over it then you could not remove primary
>>> storage. If you want to remove primary storage then you need to migrate
>>> vm's to other storage first then make it empty and you could disable &
>>> remove.
>>>
>>> So maybe updating system offerings could help you to change reprovisioned
>>> SSVM's disk location.
>>>
>>> Thanks
>>> Özhan
>>>
>>> 2018-01-24 17:15 GMT+03:00 Ugo Vasi >> .v...@procne.it>>:
>>> Hi Özhan,
>>> can I disable the zone and remove primary storage with running VM on it?
>>>
>>>
>>>
>>>
>>> On 24/01/2018 14:56, Özhan Rüzgar Karaman wrote:
>>> Hi Ugo;
>>> When you destroy systemvm's, disable zone, disable and remove primary
>>> storage and add new primary storage and enable zone, new system vms will
>>> automatically provision on new primary storage.
>>>
>>> Thanks
>>> Özhan
>>>
>>> 2018-01-24 16:50 GMT+03:00 Ugo Vasi >> .v...@procne.it>>:
>>> Hi Dag,
>>> I have to dismiss a primary storage, not the secondary. Do I have to
>>> create or modify a system offering with a storage tag and destroy the
>>> system-vm? In this case, how can I be sure that the SVM will be recreated
>>> using just that system offering?
>>>
>>>
>>>
>>> On 24/01/2018 14:40, Dag Sonstebo wrote:
>>> Hi Ugo,
>>>
>>> If this is just system VMs you can just make sure the system VM template
>>> has been copied and is present on your new secondary storage, then
>>> disable
>>> the old secondary storage and destroy the system VMs – they should start
>>> again (they are stateless so you don’t need to worry about copying image
>>> files etc.)
>>>
>>> Regards,
>>> Dag Sonstebo
>>> Cloud Architect
>>> ShapeBlue
>>>
>>> On 24/01/2018, 09:56, "Ugo Vasi" >> .v...@procne.it>> wrote:
>>>
>>>Hi 

Re: iso not downloading from local path

[Swastik Mittal]

Hey,

Thanks Dag and Glen for reply.

I'll try changing the port and check.

Regards
Swastik


 Sent with Mailtrack


On Wed, Feb 7, 2018 at 5:57 PM, Glenn Wagner 
wrote:

> Hi
>
> As Dag pointed out (the errors) when using the simpleHTTP server its
> better to use either port 8080 or 8000 so you don't have to setup SSL on
> port 443
>
>  Example
> python -m SimpleHTTPServer 8080
>
> Now try the wget or Curl from the SSVM to download the ISO use http not
> https
>
> Regards
> Glenn
>
>
> glenn.wag...@shapeblue.com
> www.shapeblue.com
> Winter Suite, 1st Floor, The Avenues, Drama Street, Somerset West, Cape
> Town  7129South Africa
> @shapeblue
>
>
>
>
> -Original Message-
> From: Dag Sonstebo [mailto:dag.sonst...@shapeblue.com]
> Sent: Wednesday, 07 February 2018 2:13 PM
> To: users@cloudstack.apache.org
> Subject: Re: iso not downloading from local path
>
> Hi Swastik,
>
> Moving discussion to this thread.
>
> The simple test here is to log in to the SSVM from console or over ssh and
> do a “wget” or “curl” against your download URL and see if this starts.
>
> I think your issue is with either your simpleHTTP server asking for
> credentials, or your proxy configuration asking for credentials – “No
> credentials configured for host ” seems fairly
> conclusive.
>
>
> Regards,
> Dag Sonstebo
> Cloud Architect
> ShapeBlue
>
> On 07/02/2018, 06:36, "Swastik Mittal"  wrote:
>
> I checked my cloud.log in my SSVM. After the URL request it mentions
>
> [storage.template.HttpTemplateDownloader]
> (agentRequest-Handler-3:null) No
> credentials configured for host 
>
> On Wed, Feb 7, 2018 at 11:32 AM, Swastik Mittal <
> mittal.swas...@gmail.com>
> wrote:
>
> > Hey,
> >
> > I do not have internet on management server and host so to upload an
> iso I
> > set secstorage.allowed.internal.sites to my CIDR. I used
> >
> > $ python -m SimpleHTTPServer 443
> >
> > to host my directory on http server where I had kept my downloaded
> iso. By
> > manually visiting the local http server I am able to download the
> file. But
> > on mentioning the same url in registering the iso it shows registered
> > successfully but does not get downloaded.
> >
> > In the zone section in the iso it mentions not ready. I receive a
> broken
> > pipe error at the initial stage in my local file server log but then
> it
> > again shows processing request. Even the iso status in management
> shows
> > nothing and when I stop the local file server the status of iso
> shows 0%
> > downloaded and then partial get request cannot be served. I believe
> > management server keeps on pinging the local file server but the
> connection
> > is not getting established.
> >
> > I even refreshed my server again and again and also did wait for a
> long
> > enough time to see if the process is slow. logging into system VM and
> > running ./run.sh does not show any error and cloud services are
> running
> > fine. I am pretty sure about the CIDR I have mentioned in
> > secstorage.allowed.internal.sites. Any idea?
> >
> > Regards
> > Swastik
> >
>
>
>
> dag.sonst...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
>
>
>
>

Customer Backup with CS 4.7 and VMWare

[daniel.herrmann]

Hi All,

We are using CS 4.7.1 with VMWare Hypervisor and advanced networking in a 
private cloud environment. Currently, most of our (internal) customers hosting 
internal services within this environment are using volume snapshots to 
facilitate backups of their virtual machines. Besides the obvious downsides of 
this approach (consistent snapshots of multiple volumes, …) we encounter 
serious problems using this features. In ~10% of the cases, snapshots get stuck 
in the BackingUp state, which sometimes causes the whole snapshot queue to 
stale. In some other cases, recurring snapshots are correctly configured, but 
CS does not try even try to create this snapshot, there is no entry in the 
database.

In summary, we are currently evaluating different options, hence my questions 
here:


  *   Are we the only ones encountering that massive problems with volume 
snapshots? Or is this a known problem? Anything we could look at or a hint 
where we could start troubleshooting?
  *   How are you actually providing backup services to the customer? Are there 
other solutions or products that integrate with CS?

When using another option than the volume snapshots in CS, the most important 
factor would be to keep the ability for the customer to configure everything in 
self-service.

Thanks and regards
Daniel

Re: Configure cisco switch for advance networking

[daniel.herrmann]

Hi Shyam,

I have no idea what a CISCO WSC456 switch might be, I've never heard of it.

In general: cisco switches can send tagged/untagged frames, but the logic is 
quite a bit different.

Let's say you've created three VLANs:

--- snip ---
vlan 10
  name vlan-10
vlan 20
  name vlan-20
vlan 30
  name vlan-30
--- snap ---

You can send one VLAN untagged (In Cisco terms, this is an access port). The 
following example sends VLAN 10 untagged

--- snip ---
Interface GigabitEthernet 0/0
 switchport mode access
 switchport access vlan 10
--- snap ---

You can send many VLANs (they need to be tagged)

--- snip ---
Interface GigabitEthernet 0/0
  switchport trunk encapsulation dot1q ! Optional on newer switches, in 
early days there was a second option isl
  switchport mode trunk! enable VLAN 
tagging. By default, ALL VLANs are sent tagged, except VLAN 1, which is sent 
untagged
  switchport trunk allowed vlan 10,20! only allow VLANs 10 and 20 
on the trunk, both are tagged
  switchport trunk native vlan 10 ! make VLAN 10 the native 
VLAN, which means, VLAN 10 is untagged
--- snap ---

In short:
- access port: send one VLAN, untagged
- trunk port: send many VLANs, all tagged, except the native VLAN
   - native VLAN defaults to VLAN 1 which is sent untagged, but can be changed.
 
For completeness: you can turn of the native VLAN feature using the following 
(global config) command:

 - vlan dot1q tag native

Now, also the native VLAN is tagged, there are no untagged frames on the wire. 
Please be aware that this affects the entire switch, hence all configured 
trunks and should only be configured if you know what you're doing, as you'll 
probably need to configure the other side as well.

Regards
Daniel

-- 
Daniel Herrmann
Network Engineer – Fraunhofer Private Cloud
CCIE #55056 (Routing and Switching)
Cisco CCDP, CCIP; Fluke CCTT
 
 
On 07.02.18, 10:30, "soundar rajan"  wrote:

Hi

Could you please let me know the steps for configuring advance network in
CISCO WSC456 switches to support cloudstack in advance mode


I see there is no tagging/untagging concept in CISCO switch

Regards
Shyam

RE: iso not downloading from local path

[Glenn Wagner]

Hi 

As Dag pointed out (the errors) when using the simpleHTTP server its better to 
use either port 8080 or 8000 so you don't have to setup SSL on port 443

 Example 
python -m SimpleHTTPServer 8080

Now try the wget or Curl from the SSVM to download the ISO use http not https  

Regards
Glenn


glenn.wag...@shapeblue.com 
www.shapeblue.com
Winter Suite, 1st Floor, The Avenues, Drama Street, Somerset West, Cape Town  
7129South Africa
@shapeblue
  
 


-Original Message-
From: Dag Sonstebo [mailto:dag.sonst...@shapeblue.com] 
Sent: Wednesday, 07 February 2018 2:13 PM
To: users@cloudstack.apache.org
Subject: Re: iso not downloading from local path

Hi Swastik,

Moving discussion to this thread.

The simple test here is to log in to the SSVM from console or over ssh and do a 
“wget” or “curl” against your download URL and see if this starts. 

I think your issue is with either your simpleHTTP server asking for 
credentials, or your proxy configuration asking for credentials – “No 
credentials configured for host ” seems fairly 
conclusive.  


Regards,
Dag Sonstebo
Cloud Architect
ShapeBlue

On 07/02/2018, 06:36, "Swastik Mittal"  wrote:

I checked my cloud.log in my SSVM. After the URL request it mentions

[storage.template.HttpTemplateDownloader] (agentRequest-Handler-3:null) No
credentials configured for host 

On Wed, Feb 7, 2018 at 11:32 AM, Swastik Mittal 
wrote:

> Hey,
>
> I do not have internet on management server and host so to upload an iso I
> set secstorage.allowed.internal.sites to my CIDR. I used
>
> $ python -m SimpleHTTPServer 443
>
> to host my directory on http server where I had kept my downloaded iso. By
> manually visiting the local http server I am able to download the file. 
But
> on mentioning the same url in registering the iso it shows registered
> successfully but does not get downloaded.
>
> In the zone section in the iso it mentions not ready. I receive a broken
> pipe error at the initial stage in my local file server log but then it
> again shows processing request. Even the iso status in management shows
> nothing and when I stop the local file server the status of iso shows 0%
> downloaded and then partial get request cannot be served. I believe
> management server keeps on pinging the local file server but the 
connection
> is not getting established.
>
> I even refreshed my server again and again and also did wait for a long
> enough time to see if the process is slow. logging into system VM and
> running ./run.sh does not show any error and cloud services are running
> fine. I am pretty sure about the CIDR I have mentioned in
> secstorage.allowed.internal.sites. Any idea?
>
> Regards
> Swastik
>



dag.sonst...@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
  
 

Re: iso not downloading from local path

[Dag Sonstebo]

Hi Swastik,

Moving discussion to this thread.

The simple test here is to log in to the SSVM from console or over ssh and do a 
“wget” or “curl” against your download URL and see if this starts. 

I think your issue is with either your simpleHTTP server asking for 
credentials, or your proxy configuration asking for credentials – “No 
credentials configured for host ” seems fairly 
conclusive.  


Regards,
Dag Sonstebo
Cloud Architect
ShapeBlue

On 07/02/2018, 06:36, "Swastik Mittal"  wrote:

I checked my cloud.log in my SSVM. After the URL request it mentions

[storage.template.HttpTemplateDownloader] (agentRequest-Handler-3:null) No
credentials configured for host 

On Wed, Feb 7, 2018 at 11:32 AM, Swastik Mittal 
wrote:

> Hey,
>
> I do not have internet on management server and host so to upload an iso I
> set secstorage.allowed.internal.sites to my CIDR. I used
>
> $ python -m SimpleHTTPServer 443
>
> to host my directory on http server where I had kept my downloaded iso. By
> manually visiting the local http server I am able to download the file. 
But
> on mentioning the same url in registering the iso it shows registered
> successfully but does not get downloaded.
>
> In the zone section in the iso it mentions not ready. I receive a broken
> pipe error at the initial stage in my local file server log but then it
> again shows processing request. Even the iso status in management shows
> nothing and when I stop the local file server the status of iso shows 0%
> downloaded and then partial get request cannot be served. I believe
> management server keeps on pinging the local file server but the 
connection
> is not getting established.
>
> I even refreshed my server again and again and also did wait for a long
> enough time to see if the process is slow. logging into system VM and
> running ./run.sh does not show any error and cloud services are running
> fine. I am pretty sure about the CIDR I have mentioned in
> secstorage.allowed.internal.sites. Any idea?
>
> Regards
> Swastik
>



dag.sonst...@shapeblue.com 
www.shapeblue.com
53 Chandos Place, Covent Garden, London  WC2N 4HSUK
@shapeblue
  
 

Re: Issues with downloading iso from URL

[Swastik Mittal]

Sorry, copied wrong link.

http://mail-archives.apache.org/mod_mbox/cloudstack-users/201802.mbox/%3CCAAM1hT0%2ByQickpS8zE4cJ-meu6Zuy29GexbfXhvMAAYbH%3DqFAA%40mail.gmail.com%3E

Regards
Swastik

‌
 Sent with Mailtrack


On Wed, Feb 7, 2018 at 5:33 PM, Swastik Mittal 
wrote:

> Hey Jagdish,
>
> Well I am facing some issues locally as well. Listed it here
>
> http://mail-archives.apache.org/mod_mbox/cloudstack-users/
> 201802.mbox/browser
>
> Regards
> Swastik
>
>
>
> ‌
>  Sent with Mailtrack
> 
>
> On Wed, Feb 7, 2018 at 5:07 PM, Jagdish Patil 
> wrote:
>
>> Hey Swastik,
>>
>> Welcome.
>>
>> httpd works for me for registering and installing ISO's locally. Give it a
>> try.
>>
>> On Wed, Feb 7, 2018 at 4:30 PM Swastik Mittal 
>> wrote:
>>
>> > Hey Jagdish Patil,
>> >
>> > Thanks for suggestion.
>> >
>> > Could not understand the second part of the solution to add credentials.
>> > But I tried that by mentioning it in secstorage.proxy in global
>> settings.
>> > It shows status as http instead of failed to download. In management
>> server
>> > log it mentions not_downloaded.
>> >
>> > I do not want my management server and host to be connected to internet
>> > though. So I am trying to upload iso to management server by hosting
>> local
>> > files on http server.
>> >
>> > Regards
>> > Swastik
>> >
>> > On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil <
>> jagdishpatil...@gmail.com>
>> > wrote:
>> >
>> > > Hey Swastik Mittal,
>> > >
>> > > If your network requires proxy then you will need to login to both
>> SSVM
>> > > i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command:
>> *ssh
>> > -i
>> > > /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@> address
>> > > of
>> > > SSVM>*, then if your network has a proxy server then follow this link
>> in
>> > > *both
>> > > SSVM's
>> > > LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
>> > > network-on-centos-7-and-configuring-web-proxy/
>> > > > > > network-on-centos-7-and-configuring-web-proxy/>
>> > > *and
>> > > if your network only requires authentication then you will need to
>> > download
>> > > the .deb file of lynx or Elinks with dependencies and then you will
>> need
>> > to
>> > > copy those RPM's in both SSVM's using command *scp
>> > > root@
>> > :
>> > >  *and after copying
>> those
>> > > rpm's you can install them using command: *dpkg -i .
>> *Then
>> > in
>> > > a terminal, you can give credentials using command: *lynx google.com
>> > > *
>> > >
>> > >
>> > > On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal <
>> mittal.swas...@gmail.com>
>> > > wrote:
>> > >
>> > > > Hey Jagdish Patil,
>> > > >
>> > > > Yes, it does require network proxy to connect to internet.
>> > > >
>> > > > Regards
>> > > > Swastik
>> > > >
>> > > > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <
>> > jagdishpatil...@gmail.com
>> > > >
>> > > > wrote:
>> > > >
>> > > > > Hey Swastik Mittal,
>> > > > >
>> > > > > Does your network require proxy?
>> > > > >
>> > > > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
>> > > mittal.swas...@gmail.com
>> > > > >
>> > > > > wrote:
>> > > > >
>> > > > > > Hey,
>> > > > > >
>> > > > > > I have a basic network setup and both the system VM's up and
>> > running.
>> > > > But
>> > > > > > the default vm template of centos or incase any other iso I
>> > register
>> > > do
>> > > > > get
>> > > > > > successfully registered but shows not ready as failed to
>> download.
>> > I
>> > > > root
>> > > > > > logged in to SSVM and checked for internet connectivity and it
>> > > doesn't
>> > > > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
>> > > directly
>> > > > to
>> > > > > > google's ip address also does not give any result.
>> > > > > > I am using same server as my management and host with KVM
>> > hypervisor.
>> > > > > > Below is my host configuration.
>> > > > > > Any idea how to fix it?
>> > > > > >
>> > > > > > Regards
>> > > > > > Swastik
>> > > > > >
>> > > > >
>> > > >
>> > >
>> >
>>
>
>

Re: Issues with downloading iso from URL

[Swastik Mittal]

Hey Jagdish,

Well I am facing some issues locally as well. Listed it here

http://mail-archives.apache.org/mod_mbox/cloudstack-users/201802.mbox/browser

Regards
Swastik



‌
 Sent with Mailtrack


On Wed, Feb 7, 2018 at 5:07 PM, Jagdish Patil 
wrote:

> Hey Swastik,
>
> Welcome.
>
> httpd works for me for registering and installing ISO's locally. Give it a
> try.
>
> On Wed, Feb 7, 2018 at 4:30 PM Swastik Mittal 
> wrote:
>
> > Hey Jagdish Patil,
> >
> > Thanks for suggestion.
> >
> > Could not understand the second part of the solution to add credentials.
> > But I tried that by mentioning it in secstorage.proxy in global settings.
> > It shows status as http instead of failed to download. In management
> server
> > log it mentions not_downloaded.
> >
> > I do not want my management server and host to be connected to internet
> > though. So I am trying to upload iso to management server by hosting
> local
> > files on http server.
> >
> > Regards
> > Swastik
> >
> > On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil  >
> > wrote:
> >
> > > Hey Swastik Mittal,
> > >
> > > If your network requires proxy then you will need to login to both SSVM
> > > i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command: *ssh
> > -i
> > > /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@ address
> > > of
> > > SSVM>*, then if your network has a proxy server then follow this link
> in
> > > *both
> > > SSVM's
> > > LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> > > network-on-centos-7-and-configuring-web-proxy/
> > >  > > network-on-centos-7-and-configuring-web-proxy/>
> > > *and
> > > if your network only requires authentication then you will need to
> > download
> > > the .deb file of lynx or Elinks with dependencies and then you will
> need
> > to
> > > copy those RPM's in both SSVM's using command *scp
> > > root@
> > :
> > >  *and after copying
> those
> > > rpm's you can install them using command: *dpkg -i . *Then
> > in
> > > a terminal, you can give credentials using command: *lynx google.com
> > > *
> > >
> > >
> > > On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal <
> mittal.swas...@gmail.com>
> > > wrote:
> > >
> > > > Hey Jagdish Patil,
> > > >
> > > > Yes, it does require network proxy to connect to internet.
> > > >
> > > > Regards
> > > > Swastik
> > > >
> > > > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <
> > jagdishpatil...@gmail.com
> > > >
> > > > wrote:
> > > >
> > > > > Hey Swastik Mittal,
> > > > >
> > > > > Does your network require proxy?
> > > > >
> > > > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
> > > mittal.swas...@gmail.com
> > > > >
> > > > > wrote:
> > > > >
> > > > > > Hey,
> > > > > >
> > > > > > I have a basic network setup and both the system VM's up and
> > running.
> > > > But
> > > > > > the default vm template of centos or incase any other iso I
> > register
> > > do
> > > > > get
> > > > > > successfully registered but shows not ready as failed to
> download.
> > I
> > > > root
> > > > > > logged in to SSVM and checked for internet connectivity and it
> > > doesn't
> > > > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
> > > directly
> > > > to
> > > > > > google's ip address also does not give any result.
> > > > > > I am using same server as my management and host with KVM
> > hypervisor.
> > > > > > Below is my host configuration.
> > > > > > Any idea how to fix it?
> > > > > >
> > > > > > Regards
> > > > > > Swastik
> > > > > >
> > > > >
> > > >
> > >
> >
>

Re: Issues with downloading iso from URL

[Swastik Mittal]

Hey Dag,

Yes I have done that. But still facing some issues.

I have listed it in "
http://mail-archives.apache.org/mod_mbox/cloudstack-users/201802.mbox/browser
"



‌
 Sent with Mailtrack


On Wed, Feb 7, 2018 at 4:59 PM, Dag Sonstebo 
wrote:

> HI Swastik,
>
> Just a quick note on internal hosting – you may need to update the global
> setting “secstorage.allowed.internal.sites” with the IP range where you
> are hosting the download URLs.
>
> Regards,
> Dag Sonstebo
> Cloud Architect
> ShapeBlue
>
> On 07/02/2018, 11:00, "Swastik Mittal"  wrote:
>
> Hey Jagdish Patil,
>
> Thanks for suggestion.
>
> Could not understand the second part of the solution to add
> credentials.
> But I tried that by mentioning it in secstorage.proxy in global
> settings.
> It shows status as http instead of failed to download. In management
> server
> log it mentions not_downloaded.
>
> I do not want my management server and host to be connected to internet
> though. So I am trying to upload iso to management server by hosting
> local
> files on http server.
>
> Regards
> Swastik
>
> On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil <
> jagdishpatil...@gmail.com>
> wrote:
>
> > Hey Swastik Mittal,
> >
> > If your network requires proxy then you will need to login to both
> SSVM
> > i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command:
> *ssh -i
> > /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@ address
> > of
> > SSVM>*, then if your network has a proxy server then follow this
> link in
> > *both
> > SSVM's
> > LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> > network-on-centos-7-and-configuring-web-proxy/
> >  > network-on-centos-7-and-configuring-web-proxy/>
> > *and
> > if your network only requires authentication then you will need to
> download
> > the .deb file of lynx or Elinks with dependencies and then you will
> need to
> > copy those RPM's in both SSVM's using command *scp
> > root@: lynx-or-elinks-rpm->
> >  *and after copying
> those
> > rpm's you can install them using command: *dpkg -i .
> *Then in
> > a terminal, you can give credentials using command: *lynx google.com
> > *
> >
> >
> > On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal <
> mittal.swas...@gmail.com>
> > wrote:
> >
> > > Hey Jagdish Patil,
> > >
> > > Yes, it does require network proxy to connect to internet.
> > >
> > > Regards
> > > Swastik
> > >
> > > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <
> jagdishpatil...@gmail.com
> > >
> > > wrote:
> > >
> > > > Hey Swastik Mittal,
> > > >
> > > > Does your network require proxy?
> > > >
> > > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
> > mittal.swas...@gmail.com
> > > >
> > > > wrote:
> > > >
> > > > > Hey,
> > > > >
> > > > > I have a basic network setup and both the system VM's up and
> running.
> > > But
> > > > > the default vm template of centos or incase any other iso I
> register
> > do
> > > > get
> > > > > successfully registered but shows not ready as failed to
> download. I
> > > root
> > > > > logged in to SSVM and checked for internet connectivity and it
> > doesn't
> > > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
> > directly
> > > to
> > > > > google's ip address also does not give any result.
> > > > > I am using same server as my management and host with KVM
> hypervisor.
> > > > > Below is my host configuration.
> > > > > Any idea how to fix it?
> > > > >
> > > > > Regards
> > > > > Swastik
> > > > >
> > > >
> > >
> >
>
>
>
> dag.sonst...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
> @shapeblue
>
>
>
>

Re: Issues with downloading iso from URL

[Jagdish Patil]

Hey Swastik,

Welcome.

httpd works for me for registering and installing ISO's locally. Give it a
try.

On Wed, Feb 7, 2018 at 4:30 PM Swastik Mittal 
wrote:

> Hey Jagdish Patil,
>
> Thanks for suggestion.
>
> Could not understand the second part of the solution to add credentials.
> But I tried that by mentioning it in secstorage.proxy in global settings.
> It shows status as http instead of failed to download. In management server
> log it mentions not_downloaded.
>
> I do not want my management server and host to be connected to internet
> though. So I am trying to upload iso to management server by hosting local
> files on http server.
>
> Regards
> Swastik
>
> On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil 
> wrote:
>
> > Hey Swastik Mittal,
> >
> > If your network requires proxy then you will need to login to both SSVM
> > i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command: *ssh
> -i
> > /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@ > of
> > SSVM>*, then if your network has a proxy server then follow this link in
> > *both
> > SSVM's
> > LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> > network-on-centos-7-and-configuring-web-proxy/
> >  > network-on-centos-7-and-configuring-web-proxy/>
> > *and
> > if your network only requires authentication then you will need to
> download
> > the .deb file of lynx or Elinks with dependencies and then you will need
> to
> > copy those RPM's in both SSVM's using command *scp
> > root@
> :
> >  *and after copying those
> > rpm's you can install them using command: *dpkg -i . *Then
> in
> > a terminal, you can give credentials using command: *lynx google.com
> > *
> >
> >
> > On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal 
> > wrote:
> >
> > > Hey Jagdish Patil,
> > >
> > > Yes, it does require network proxy to connect to internet.
> > >
> > > Regards
> > > Swastik
> > >
> > > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <
> jagdishpatil...@gmail.com
> > >
> > > wrote:
> > >
> > > > Hey Swastik Mittal,
> > > >
> > > > Does your network require proxy?
> > > >
> > > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
> > mittal.swas...@gmail.com
> > > >
> > > > wrote:
> > > >
> > > > > Hey,
> > > > >
> > > > > I have a basic network setup and both the system VM's up and
> running.
> > > But
> > > > > the default vm template of centos or incase any other iso I
> register
> > do
> > > > get
> > > > > successfully registered but shows not ready as failed to download.
> I
> > > root
> > > > > logged in to SSVM and checked for internet connectivity and it
> > doesn't
> > > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
> > directly
> > > to
> > > > > google's ip address also does not give any result.
> > > > > I am using same server as my management and host with KVM
> hypervisor.
> > > > > Below is my host configuration.
> > > > > Any idea how to fix it?
> > > > >
> > > > > Regards
> > > > > Swastik
> > > > >
> > > >
> > >
> >
>

Re: Issues with downloading iso from URL

[Dag Sonstebo]

HI Swastik,

Just a quick note on internal hosting – you may need to update the global 
setting “secstorage.allowed.internal.sites” with the IP range where you are 
hosting the download URLs.

Regards,
Dag Sonstebo
Cloud Architect
ShapeBlue

On 07/02/2018, 11:00, "Swastik Mittal"  wrote:

Hey Jagdish Patil,

Thanks for suggestion.

Could not understand the second part of the solution to add credentials.
But I tried that by mentioning it in secstorage.proxy in global settings.
It shows status as http instead of failed to download. In management server
log it mentions not_downloaded.

I do not want my management server and host to be connected to internet
though. So I am trying to upload iso to management server by hosting local
files on http server.

Regards
Swastik

On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil 
wrote:

> Hey Swastik Mittal,
>
> If your network requires proxy then you will need to login to both SSVM
> i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command: *ssh -i
> /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@ of
> SSVM>*, then if your network has a proxy server then follow this link in
> *both
> SSVM's
> LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> network-on-centos-7-and-configuring-web-proxy/
>  network-on-centos-7-and-configuring-web-proxy/>
> *and
> if your network only requires authentication then you will need to 
download
> the .deb file of lynx or Elinks with dependencies and then you will need 
to
> copy those RPM's in both SSVM's using command *scp
> root@:
>  *and after copying those
> rpm's you can install them using command: *dpkg -i . *Then in
> a terminal, you can give credentials using command: *lynx google.com
> *
>
>
> On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal 
> wrote:
>
> > Hey Jagdish Patil,
> >
> > Yes, it does require network proxy to connect to internet.
> >
> > Regards
> > Swastik
> >
> > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil  >
> > wrote:
> >
> > > Hey Swastik Mittal,
> > >
> > > Does your network require proxy?
> > >
> > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
> mittal.swas...@gmail.com
> > >
> > > wrote:
> > >
> > > > Hey,
> > > >
> > > > I have a basic network setup and both the system VM's up and 
running.
> > But
> > > > the default vm template of centos or incase any other iso I register
> do
> > > get
> > > > successfully registered but shows not ready as failed to download. I
> > root
> > > > logged in to SSVM and checked for internet connectivity and it
> doesn't
> > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
> directly
> > to
> > > > google's ip address also does not give any result.
> > > > I am using same server as my management and host with KVM 
hypervisor.
> > > > Below is my host configuration.
> > > > Any idea how to fix it?
> > > >
> > > > Regards
> > > > Swastik
> > > >
> > >
> >
>



dag.sonst...@shapeblue.com 
www.shapeblue.com
53 Chandos Place, Covent Garden, London  WC2N 4HSUK
@shapeblue
  
 

Re: Issues with downloading iso from URL

[Swastik Mittal]

Hey Jagdish Patil,

Thanks for suggestion.

Could not understand the second part of the solution to add credentials.
But I tried that by mentioning it in secstorage.proxy in global settings.
It shows status as http instead of failed to download. In management server
log it mentions not_downloaded.

I do not want my management server and host to be connected to internet
though. So I am trying to upload iso to management server by hosting local
files on http server.

Regards
Swastik

On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil 
wrote:

> Hey Swastik Mittal,
>
> If your network requires proxy then you will need to login to both SSVM
> i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command: *ssh -i
> /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@ of
> SSVM>*, then if your network has a proxy server then follow this link in
> *both
> SSVM's
> LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> network-on-centos-7-and-configuring-web-proxy/
>  network-on-centos-7-and-configuring-web-proxy/>
> *and
> if your network only requires authentication then you will need to download
> the .deb file of lynx or Elinks with dependencies and then you will need to
> copy those RPM's in both SSVM's using command *scp
> root@:
>  *and after copying those
> rpm's you can install them using command: *dpkg -i . *Then in
> a terminal, you can give credentials using command: *lynx google.com
> *
>
>
> On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal 
> wrote:
>
> > Hey Jagdish Patil,
> >
> > Yes, it does require network proxy to connect to internet.
> >
> > Regards
> > Swastik
> >
> > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil  >
> > wrote:
> >
> > > Hey Swastik Mittal,
> > >
> > > Does your network require proxy?
> > >
> > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
> mittal.swas...@gmail.com
> > >
> > > wrote:
> > >
> > > > Hey,
> > > >
> > > > I have a basic network setup and both the system VM's up and running.
> > But
> > > > the default vm template of centos or incase any other iso I register
> do
> > > get
> > > > successfully registered but shows not ready as failed to download. I
> > root
> > > > logged in to SSVM and checked for internet connectivity and it
> doesn't
> > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
> directly
> > to
> > > > google's ip address also does not give any result.
> > > > I am using same server as my management and host with KVM hypervisor.
> > > > Below is my host configuration.
> > > > Any idea how to fix it?
> > > >
> > > > Regards
> > > > Swastik
> > > >
> > >
> >
>

Re: SystemVM not starting after updating console SSL cert

[Amit Dalia]

Not sure, but I found version details from below:


select * from version;
++--+-+--+
| id | version  | updated | step |
++--+-+--+
|  1 | 3.0.2.20120506223416 | 2012-07-02 13:03:10 | Complete |
++--+-+--+

Let me check hypervisor logs.


From: Daan Hoogland 
Sent: Wednesday, February 7, 2018 3:46:54 PM
To: users@cloudstack.apache.org
Subject: Re: SystemVM not starting after updating console SSL cert

Omit,

On Wed, Feb 7, 2018 at 10:48 AM, Amit Dalia  wrote:

> Hi Dan,
>




>
> When you say this is an old query, do you mean it is an old version of
> CloudStack?
>
> >> Nope. I mean this might be an old question already discussed in the
> group.
>
​ah, well it resambles a lot but might not be the same, not much to go on
here.
​


>
>
> Which version is it?
>
> >> 3.0.2.20120506223416
>
> Note: This is old deployment.
>
​Yes it is, it is also not a apache version, It looks to be a former
citrix, now accelerite version. I'd contact their support site.
​


>
>
> During your install of the new certificates, did you destroy the systemvms
> and let cloudstack recreate them?
>
> >> Nope. But now I deleted 1 console VM and it is not recreated yet.
> Storage vms are in running state.
>
>
> And can you get to the hosts that run the console proxy to do an
> investigation there, as to why the consoleproxy stops again?
>
> >> How can I get there if the machine is not running.
>
​not to the machine itself but to the hypervisor it runs on, it might have
logs with usefull infromation.
​


>
>
> Regards,
>
>
> Amit
>
> 
> From: Daan Hoogland 
> Sent: Wednesday, February 7, 2018 2:02:29 PM
> To: users@cloudstack.apache.org
> Subject: Re: SystemVM not starting after updating console SSL cert
>
> Amit, couple of questions as I am not sure what you are asking for.
>
> When you say this is an old query, do you mean it is an old version of
> CloudStack?
> Which version is it?
> During your install of the new certificates, did you destroy the systemvms
> and let cloudstack recreate them?
> And can you get to the hosts that runs the console proxy to do
> investigation there, as to why the consoleproxy stops again?
>
> regards,
>
> On Wed, Feb 7, 2018 at 7:01 AM, Amit Dalia  wrote:
>
> > Hi All,
> >
> >
> > I'm new to cloudstack and our production environment is having cloudstack
> > as an in-house cloud. The first task was given to me to update expiring
> > console SSL certificate.
> >
> >
> > I went through all the wiki pages on how to upload cert, private key,
> root
> > CA & intermediate CA. (Note: before uploading the same I had taken old
> > keystore table backup.)
> >
> >
> > Restarted cloud management service.
> >
> > But now console system VM is in the stopped state and when I try to start
> > then it goes to running state and then back to the stopped state.
> >
> > I had done grep on log file for this VM and same is attached to the
> email.
> >
> >
> > I know this might be an old query, but it will be helpful if someone
> guide
> > me further or point me to old archive.
> >
> >
> > Thanks & Regards,
> >
> >
> > Amit Dalia
> >
>
>
>
> --
> Daan
>



--
Daan

Re: SystemVM not starting after updating console SSL cert

[Daan Hoogland]

Omit,

On Wed, Feb 7, 2018 at 10:48 AM, Amit Dalia  wrote:

> Hi Dan,
>




>
> When you say this is an old query, do you mean it is an old version of
> CloudStack?
>
> >> Nope. I mean this might be an old question already discussed in the
> group.
>
​ah, well it resambles a lot but might not be the same, not much to go on
here.
​


>
>
> Which version is it?
>
> >> 3.0.2.20120506223416
>
> Note: This is old deployment.
>
​Yes it is, it is also not a apache version, It looks to be a former
citrix, now accelerite version. I'd contact their support site.
​


>
>
> During your install of the new certificates, did you destroy the systemvms
> and let cloudstack recreate them?
>
> >> Nope. But now I deleted 1 console VM and it is not recreated yet.
> Storage vms are in running state.
>
>
> And can you get to the hosts that run the console proxy to do an
> investigation there, as to why the consoleproxy stops again?
>
> >> How can I get there if the machine is not running.
>
​not to the machine itself but to the hypervisor it runs on, it might have
logs with usefull infromation.
​


>
>
> Regards,
>
>
> Amit
>
> 
> From: Daan Hoogland 
> Sent: Wednesday, February 7, 2018 2:02:29 PM
> To: users@cloudstack.apache.org
> Subject: Re: SystemVM not starting after updating console SSL cert
>
> Amit, couple of questions as I am not sure what you are asking for.
>
> When you say this is an old query, do you mean it is an old version of
> CloudStack?
> Which version is it?
> During your install of the new certificates, did you destroy the systemvms
> and let cloudstack recreate them?
> And can you get to the hosts that runs the console proxy to do
> investigation there, as to why the consoleproxy stops again?
>
> regards,
>
> On Wed, Feb 7, 2018 at 7:01 AM, Amit Dalia  wrote:
>
> > Hi All,
> >
> >
> > I'm new to cloudstack and our production environment is having cloudstack
> > as an in-house cloud. The first task was given to me to update expiring
> > console SSL certificate.
> >
> >
> > I went through all the wiki pages on how to upload cert, private key,
> root
> > CA & intermediate CA. (Note: before uploading the same I had taken old
> > keystore table backup.)
> >
> >
> > Restarted cloud management service.
> >
> > But now console system VM is in the stopped state and when I try to start
> > then it goes to running state and then back to the stopped state.
> >
> > I had done grep on log file for this VM and same is attached to the
> email.
> >
> >
> > I know this might be an old query, but it will be helpful if someone
> guide
> > me further or point me to old archive.
> >
> >
> > Thanks & Regards,
> >
> >
> > Amit Dalia
> >
>
>
>
> --
> Daan
>



-- 
Daan

Re: SystemVM not starting after updating console SSL cert

[Amit Dalia]

Hi Dan,


When you say this is an old query, do you mean it is an old version of 
CloudStack?

>> Nope. I mean this might be an old question already discussed in the group.


Which version is it?

>> 3.0.2.20120506223416

Note: This is old deployment.


During your install of the new certificates, did you destroy the systemvms and 
let cloudstack recreate them?

>> Nope. But now I deleted 1 console VM and it is not recreated yet. Storage 
>> vms are in running state.


And can you get to the hosts that run the console proxy to do an investigation 
there, as to why the consoleproxy stops again?

>> How can I get there if the machine is not running.


Regards,


Amit


From: Daan Hoogland 
Sent: Wednesday, February 7, 2018 2:02:29 PM
To: users@cloudstack.apache.org
Subject: Re: SystemVM not starting after updating console SSL cert

Amit, couple of questions as I am not sure what you are asking for.

When you say this is an old query, do you mean it is an old version of
CloudStack?
Which version is it?
During your install of the new certificates, did you destroy the systemvms
and let cloudstack recreate them?
And can you get to the hosts that runs the console proxy to do
investigation there, as to why the consoleproxy stops again?

regards,

On Wed, Feb 7, 2018 at 7:01 AM, Amit Dalia  wrote:

> Hi All,
>
>
> I'm new to cloudstack and our production environment is having cloudstack
> as an in-house cloud. The first task was given to me to update expiring
> console SSL certificate.
>
>
> I went through all the wiki pages on how to upload cert, private key, root
> CA & intermediate CA. (Note: before uploading the same I had taken old
> keystore table backup.)
>
>
> Restarted cloud management service.
>
> But now console system VM is in the stopped state and when I try to start
> then it goes to running state and then back to the stopped state.
>
> I had done grep on log file for this VM and same is attached to the email.
>
>
> I know this might be an old query, but it will be helpful if someone guide
> me further or point me to old archive.
>
>
> Thanks & Regards,
>
>
> Amit Dalia
>



--
Daan

Configure cisco switch for advance networking

[soundar rajan]

Hi

Could you please let me know the steps for configuring advance network in
CISCO WSC456 switches to support cloudstack in advance mode


I see there is no tagging/untagging concept in CISCO switch

Regards
Shyam

RE: host KVM unable to find cloudbr0

[Grégoire Lamodière]

Hi Nicolas / Dag, 

Well done !

I think this has already been mentioned in this list, but maybe we should 
update the install doc with up-to-date informations and advisories / tips, such 
as "if you use team, be sure to name them teamXXX", and probably a lot more.

I don't know if this work is currently handled by anyone ? 
If not, we will be more than happy to contribute.

Regards
---
Grégoire Lamodière
T/ + 33 6 76 27 03 31
F/ + 33 1 75 43 89 71

-Message d'origine-
De : Dag Sonstebo [mailto:dag.sonst...@shapeblue.com] 
Envoyé : mardi 6 février 2018 16:30
À : users@cloudstack.apache.org
Objet : Re: host KVM unable to find cloudbr0

Hi Nicolas,

Excellent, well done finding that - keep us in the loop on how you get on.

Regards,
Dag Sonstebo
Cloud Architect
ShapeBlue

On 06/02/2018, 15:14, "Nicolas Bouige"  wrote:

Hello,


We finally found the solution.


We have checked the source code to know exactly how the network settings 
are detected by cloudstack.


##

String [] _ifNamePatterns = {
   "^eth",
   "^bond",
   "^vlan",
   "^vx",
   "^em",
   "^ens",
   "^eno",
   "^enp",
   "^team",
   "^enx",
   "^p\\d+p\\d+"
   };
   /**
* @param fname
* @return
*/
   boolean isInterface(final String fname) {
   StringBuffer commonPattern = new StringBuffer();
   for (final String ifNamePattern : _ifNamePatterns) {
   commonPattern.append("|(").append(ifNamePattern).append(".*)");
   }
   if(fname.matches(commonPattern.toString())) {
   return true;
   }
  return false;
   }



As you can see cloudstack check only the list above of name so if your 
device name doesn't match it fails.


our device team name were MGMT and TRUNK, we just added team.

MGMT --> teamMGMT

TRUNK --> teamTRUNK


(team must be in minus and in first)


now KVM host is up on cloudstack GUI.


So,for the moment,  KVM works fine with teamed NIC configured with nmcli


Best regards,
N.B



De : Dag Sonstebo 
Envoyé : mardi 6 février 2018 13:55:28
À : users@cloudstack.apache.org
Objet : Re: host KVM unable to find cloudbr0

Hi Nicolas,

Yes I would do a double test with both bonding and teaming and see if the 
agent simply doesn’t like teaming at all.
You can obviously also change the agent logs to trace and see if that sheds 
more light on it.

With regards to naming convention I know this is a contested issue – we do 
the same as you and change it back to the legacy ethX naming convention to 
simplify our build scripts, but overall I would expect it to work with the new 
world naming convention.

Regards,
Dag Sonstebo
Cloud Architect
ShapeBlue

On 06/02/2018, 12:47, "Nicolas Bouige"  wrote:

Dag,


okay, i got it, thanks a lot for the details and your help.
As im  stuck with the current configuration with nmcli, im going to try 
without on an another host see if i have more success.


Do you know if someone success to set up KVM networking with the new 
naming convention on centOS7 ? (ensX, enpX..etc)


because i renamed the NICs with ethX but don't know if it was really 
necessary.


Best regards,


N.B

De : Dag Sonstebo 
Envoyé : mardi 6 février 2018 12:40:19
À : users@cloudstack.apache.org
Objet : Re: host KVM unable to find cloudbr0

Hi Nicolas

These two settings are mutually exclusive – you are controlling your 
networking with NetworkManager (NM) through nmcli. My personal preference is to 
leave NM out of the equation and do all configuration manually (or with 
Ansible, Chef or whatever tool you choose) – hence I mark the different 
interfaces with "NM_CONTROLLED=no" to stop NM ever trying to interfere if 
someone starts the NM service up.

So – if you want to use nmcli then remove "NM_CONTROLLED=no" from your 
config files.

As I said – this is a personal preference only though – you will 
probably manage to get it to work with NM, I just find it too intrusive.

Regards,
Dag Sonstebo
Cloud Architect
ShapeBlue

On 06/02/2018, 11:15, "Nicolas Bouige"  wrote:

Hi Dag,


You are right, and i did it, it was not clear enought on my 

Re: SystemVM not starting after updating console SSL cert

[Daan Hoogland]

Amit, couple of questions as I am not sure what you are asking for.

When you say this is an old query, do you mean it is an old version of
CloudStack?
Which version is it?
During your install of the new certificates, did you destroy the systemvms
and let cloudstack recreate them?
And can you get to the hosts that runs the console proxy to do
investigation there, as to why the consoleproxy stops again?

regards,

On Wed, Feb 7, 2018 at 7:01 AM, Amit Dalia  wrote:

> Hi All,
>
>
> I'm new to cloudstack and our production environment is having cloudstack
> as an in-house cloud. The first task was given to me to update expiring
> console SSL certificate.
>
>
> I went through all the wiki pages on how to upload cert, private key, root
> CA & intermediate CA. (Note: before uploading the same I had taken old
> keystore table backup.)
>
>
> Restarted cloud management service.
>
> But now console system VM is in the stopped state and when I try to start
> then it goes to running state and then back to the stopped state.
>
> I had done grep on log file for this VM and same is attached to the email.
>
>
> I know this might be an old query, but it will be helpful if someone guide
> me further or point me to old archive.
>
>
> Thanks & Regards,
>
>
> Amit Dalia
>



-- 
Daan