Re: Cloudstack 4.11.3 to 4.13.1 SystemVMs Error

2020-10-09 Thread Andrija Panic
Ammad, what's you current status with your issue? In logs I can see that there is some issue with SR: 2020-09-10 22:58:48,374 DEBUG [c.c.h.x.r.w.x.CitrixStartCommandWrapper] (DirectAgent-270:ctx-3468556a) (logid:4cc5809d) 1. The VM s-25505-VM is in Starting state. 2020-09-10 22:58:48,375 D

Re: Using Multiple Public Networks

2020-10-09 Thread Rafael del Valle
Andrija, Thanks for the clarification. I found it confusing at first that "public" refers in reality to external to cloudstack, be it corporate intranet or public internet. I understand that know. What I am still trying to achieve is a way to differentiate/manage external IPs of the differen

KVM hosts transitioned from "up" to "unsecured"

2020-10-09 Thread rvalle
Hi! Yesterday I added more hosts to a cluster, and the ones that were there are now showing as "unsecured". Probably my installation playbook messed something up. Any idea what could have triggered such a thing to happen? ​anybody suffered this also? Rafael

Re: Cloudstack 4.11.3 to 4.13.1 SystemVMs Error

2020-10-09 Thread Andrija Panic
This error is a different zone, as I can see (what I shared above). For the VM which you asked us to check logs - can you see which zone this is in and then: - disable the zone, - destroy the SSVM (if it is showing as startING or stopING state - make sure to destroy the VM on XenCenter first, then

Re: Using Multiple Public Networks

2020-10-09 Thread Andrija Panic
I believe that is true, Rafael. There is a notion of TAGs that can be attached to various resources, but I'm not sure that can be consumed in way you need it. Best, On Fri, 9 Oct 2020 at 09:12, Rafael del Valle wrote: > Andrija, > > Thanks for the clarification. I found it confusing at first t

Re: Letsencrypt SSL and Console Proxy

2020-10-09 Thread Andrija Panic
Please read the first part of https://www.shapeblue.com/securing-cloudstack-4-11-with-https-tls/ (the second part is how to secure tomcat, you don't need it) No matter what is the provider of the SSL, you will need to have 1) server certificate, 2) the corresponding private key in the proper forma

Re: Cloudstack - What Storage you using ?

2020-10-09 Thread Andrija Panic
free advice - try to avoid Clustered File Systems always - due to complexity, and sometimes due to the utter lack of reliability (I had, outside of ACS, an awful experience with GFS2, set by RedHat themself for a former customer), etc - so Shared Mount point is to be skipped, if possible. Local di

Re: KVM hosts transitioned from "up" to "unsecured"

2020-10-09 Thread Rakesh v
You might want to add libvirtd_opts="-l" In /etc/default/libvirt-bin Sent from my iPhone > On 09-Oct-2020, at 9:18 AM, rva...@privaz.io.invalid wrote: > > Hi! > > Yesterday I added more hosts to a cluster, and the ones that were there are > now showing as "unsecured". > > Probably my install

Re: KVM hosts transitioned from "up" to "unsecured"

2020-10-09 Thread Nicolas Vazquez
Hi Rafael, As Rakesh mentions that can be one option, or can also provision a new certificate to the new hosts through the CloudStack UI/API provisionCertificate (the button should be on the hosts details tab). Regards, Nicolas Vazquez From: Rakesh v Sent: F

Re: KVM hosts transitioned from "up" to "unsecured"

2020-10-09 Thread rvalle
Thanks Nicolas, It is not actually the new hosts, but the old hosts that went from "up" to "unsecured". the newly added hosts turned out fine as "up". Regards, Rafael On Fri, 2020-10-09 04:54 PM, Nicolas Vazquez wrote: > Hi Rafael, > > As Rakesh mentions that can be one option, or can also

Re: KVM hosts transitioned from "up" to "unsecured"

2020-10-09 Thread rvalle
Ok, here there seems to be some kind of problem. my playbooks are modifying this file, but so is (presumingly) the agent. I can see other files also changed: related to qemu and libvirt. Is the agent managing libvirt and qemu configuration? or does it need to be configured as described in the

Re: KVM hosts transitioned from "up" to "unsecured"

2020-10-09 Thread rvalle
I think the root cause of this is that ACS is managing the configuration of LIbvirt/KVM but the documentation implies otherwise. https://github.com/apache/cloudstack/issues/4393 Regards, Rafael On Fri, 2020-10-09 06:20 PM, rva...@privaz.io.INVALID wrote: > Ok, > > here there seems to be some k

Re: Letsencrypt SSL and Console Proxy

2020-10-09 Thread Hean Seng
HI Thanks for explanation, it works. On Fri, Oct 9, 2020 at 6:36 PM Andrija Panic wrote: > Please read the first part of > https://www.shapeblue.com/securing-cloudstack-4-11-with-https-tls/ (the > second part is how to secure tomcat, you don't need it) > > No matter what is the provider of the

Unable to login in CloudStack

2020-10-09 Thread pradeep pal
Hi, When i am try to login on CloudStack webpage, I always get below error. Please help me to solve this issue. errorresponse: {uuidList: [], errorcode: 432, cserrorcode: , errortext: "Unknown API command: listIdps"} Thanks

Re: Unable to login in CloudStack

2020-10-09 Thread Nicolas Vazquez
Hi Pradeep, What is the context of the issue, have you upgraded an existing environment to a newer version? Can you please check the error stack trace on the management server logs? Or also paste it here. Regards, Nicolas Vazquez From: pradeep pal Sent: Frid

Re: Cloudstack - What Storage you using ?

2020-10-09 Thread Hean Seng
Hi Andrija I am planning on a high end hypervisor , AMD EYPCv2 7742 CPU that get 64core and 128thread , 384G RAM, etc , and multiple 10G card bnond or 40G card for storage network. On this kind of server, probably get up to 200 VM per hypervisor. I'm just afraid that NFS will create a bottle

Re: Unable to login in CloudStack

2020-10-09 Thread pradeep pal
Hi Nicolas, My one MGMT host got failed, after that, I am not able to login on the portal. We are not upgrading the ACS version. Can i send you mgmt logs? Thanks Pradeep From: Nicolas Vazquez Sent: Saturday, October 10, 2020 4:03 AM To: users@cloudstack.apach