Re: iso not downloading from local path

[Swastik Mittal]

Hey

A correction, I do see secondary storage and it shows only 1% utilized so
my secondary storage does have enough memory.The issue seems to be mostly
because of SSVM memory.

Regards
Swastik

On Thu, Feb 8, 2018 at 1:20 PM, Swastik Mittal <mittal.swas...@gmail.com>
wrote:

> Hey Dag and Glenn,
>
> On entering the local http server url, UI gives status that only ports 80,
> 8080 and 443 are supported .
> So as my management server runs on 8080 and 443 would be for ssl so I
> hosted my iso on port 80.
> On logging into my ssvm and using wget to download it downloads upto 35%
> and then stops it displaying not enough space on my terminal. So definetly
> now there is no issue of credentials. And the broken pipe error on
> intiating download from local http from UI might be becuase I am running
> short on space in my SSVM.
>
> But isn't the iso stored in secondary storage which is the management
> server itself? My secondary storage is up as shown in infrastructure and
> even my system vm template was downloaded in /mnt/secondary. But my
> dashboard does not show secondary storage infact shows primary storage
> having 1 TB of memory which is the complete memory of the system. Do I need
> to increase the SSVM storage and if yes how do I do that?
>
> Regards
> Swastik
>
> On Wed, Feb 7, 2018 at 8:43 PM, Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
>> Hey,
>>
>> Thanks Dag and Glen for reply.
>>
>> I'll try changing the port and check.
>>
>> Regards
>> Swastik
>>
>>
>> <https://mailtrack.io/> Sent with Mailtrack
>> <https://chrome.google.com/webstore/detail/mailtrack-for-gmail-inbox/ndnaehgpjlnokgebbaldlmgkapkpjkkb?utm_source=gmail_medium=signature_campaign=signaturevirality>
>>
>> On Wed, Feb 7, 2018 at 5:57 PM, Glenn Wagner <glenn.wag...@shapeblue.com>
>> wrote:
>>
>>> Hi
>>>
>>> As Dag pointed out (the errors) when using the simpleHTTP server its
>>> better to use either port 8080 or 8000 so you don't have to setup SSL on
>>> port 443
>>>
>>>  Example
>>> python -m SimpleHTTPServer 8080
>>>
>>> Now try the wget or Curl from the SSVM to download the ISO use http not
>>> https
>>>
>>> Regards
>>> Glenn
>>>
>>>
>>> glenn.wag...@shapeblue.com
>>> www.shapeblue.com
>>> Winter Suite, 1st Floor, The Avenues, Drama Street, Somerset West, Cape
>>> Town  7129South Africa
>>> @shapeblue
>>>
>>>
>>>
>>>
>>> -Original Message-
>>> From: Dag Sonstebo [mailto:dag.sonst...@shapeblue.com]
>>> Sent: Wednesday, 07 February 2018 2:13 PM
>>> To: users@cloudstack.apache.org
>>> Subject: Re: iso not downloading from local path
>>>
>>> Hi Swastik,
>>>
>>> Moving discussion to this thread.
>>>
>>> The simple test here is to log in to the SSVM from console or over ssh
>>> and do a “wget” or “curl” against your download URL and see if this starts.
>>>
>>> I think your issue is with either your simpleHTTP server asking for
>>> credentials, or your proxy configuration asking for credentials – “No
>>> credentials configured for host ” seems fairly
>>> conclusive.
>>>
>>>
>>> Regards,
>>> Dag Sonstebo
>>> Cloud Architect
>>> ShapeBlue
>>>
>>> On 07/02/2018, 06:36, "Swastik Mittal" <mittal.swas...@gmail.com> wrote:
>>>
>>> I checked my cloud.log in my SSVM. After the URL request it mentions
>>>
>>> [storage.template.HttpTemplateDownloader]
>>> (agentRequest-Handler-3:null) No
>>> credentials configured for host 
>>>
>>> On Wed, Feb 7, 2018 at 11:32 AM, Swastik Mittal <
>>> mittal.swas...@gmail.com>
>>> wrote:
>>>
>>> > Hey,
>>> >
>>> > I do not have internet on management server and host so to upload
>>> an iso I
>>> > set secstorage.allowed.internal.sites to my CIDR. I used
>>> >
>>> > $ python -m SimpleHTTPServer 443
>>> >
>>> > to host my directory on http server where I had kept my downloaded
>>> iso. By
>>> > manually visiting the local http server I am able to download the
>>> file. But
>>> > on mentioning the same url in registering the iso it shows
>>> registered
>>> > successfully but does not get downloaded.
>>&

iso not downloading from local path

[Swastik Mittal]

Hey,

I do not have internet on management server and host so to upload an iso I
set secstorage.allowed.internal.sites to my CIDR. I used

$ python -m SimpleHTTPServer 443

to host my directory on http server where I had kept my downloaded iso. By
manually visiting the local http server I am able to download the file. But
on mentioning the same url in registering the iso it shows registered
successfully but does not get downloaded.

In the zone section in the iso it mentions not ready. I receive a broken
pipe error at the initial stage in my local file server log but then it
again shows processing request. Even the iso status in management shows
nothing and when I stop the local file server the status of iso shows 0%
downloaded and then partial get request cannot be served. I believe
management server keeps on pinging the local file server but the connection
is not getting established.

I even refreshed my server again and again and also did wait for a long
enough time to see if the process is slow. logging into system VM and
running ./run.sh does not show any error and cloud services are running
fine. I am pretty sure about the CIDR I have mentioned in
secstorage.allowed.internal.sites.
Any idea?

Regards
Swastik

Re: iso not downloading from local path

[Swastik Mittal]

I checked my cloud.log in my SSVM. After the URL request it mentions

[storage.template.HttpTemplateDownloader] (agentRequest-Handler-3:null) No
credentials configured for host 

On Wed, Feb 7, 2018 at 11:32 AM, Swastik Mittal <mittal.swas...@gmail.com>
wrote:

> Hey,
>
> I do not have internet on management server and host so to upload an iso I
> set secstorage.allowed.internal.sites to my CIDR. I used
>
> $ python -m SimpleHTTPServer 443
>
> to host my directory on http server where I had kept my downloaded iso. By
> manually visiting the local http server I am able to download the file. But
> on mentioning the same url in registering the iso it shows registered
> successfully but does not get downloaded.
>
> In the zone section in the iso it mentions not ready. I receive a broken
> pipe error at the initial stage in my local file server log but then it
> again shows processing request. Even the iso status in management shows
> nothing and when I stop the local file server the status of iso shows 0%
> downloaded and then partial get request cannot be served. I believe
> management server keeps on pinging the local file server but the connection
> is not getting established.
>
> I even refreshed my server again and again and also did wait for a long
> enough time to see if the process is slow. logging into system VM and
> running ./run.sh does not show any error and cloud services are running
> fine. I am pretty sure about the CIDR I have mentioned in
> secstorage.allowed.internal.sites. Any idea?
>
> Regards
> Swastik
>

Re: iso not downloading from local path

[Swastik Mittal]

Hey Dag,

It was not an issue of ACL's. I had done a very foolish mistake of not
installing openssh becuase of which I did not have sshd service in my
management. So because of default ssh_config, management was able to
connect to SSVM but SSVM could connect to management server which also is
the secondary storage. I could not see this because SSVM was able to
download from manamgent hosted http server. That might be because of
enabling it from secstorage option in global settings.

Cheers
Swastik

On Fri, Feb 9, 2018 at 5:43 PM, Dag Sonstebo <dag.sonst...@shapeblue.com>
wrote:

> Check the ACL on your NFS share – remember your SSVM is using an IP
> address in the management range of your zone to access NFS, so we sometimes
> see issues where hypervisors are on the ACL, but not the management IP
> range.
>
> Regards,
> Dag Sonstebo
> Cloud Architect
> ShapeBlue
>
> On 09/02/2018, 11:15, "Swastik Mittal" <mittal.swas...@gmail.com> wrote:
>
> Hey,
>
> I checked accessing nfs server from my ssvm. I tried the following
>
> root@s-1-VM:~# rpcinfo -p
>program vers proto   port  service
> 104   tcp111  portmapper
> 103   tcp111  portmapper
> 102   tcp111  portmapper
> 104   udp111  portmapper
> 103   udp111  portmapper
> 102   udp111  portmapper
> 1000241   udp  58883  status
> 1000241   tcp  48454  status
>
> I have only portmapper running. Thats it. No nfs ports found.
>
> root@s-1-VM:~# mount -t nfs
>
> above gives no result.
>
> I manually mounted ssvm to /export/secondary of secondary storage nfs
> server. But again all the above commands give the same result.
>
> root@s-1-VM:~# df -k
> Filesystem 1K-blocks
>  Used
> Available Use% Mounted on
> rootfs472036
> 160666286999  36% /
> udev   10240
> 0 10240   0% /dev
> tmpfs  50896
> 256 50640   1% /run
> /dev/disk/by-uuid/30c81d3d-ee9f-4a88-81c1-5f349b22ba1d472036
> 160666286999  36% /
> tmpfs   5120
> 0  5120   0% /run/lock
> tmpfs 211960
> 0211960   0% /run/shm
> /dev/vda1  74367
> 22706 47821  33% /boot
> /dev/vda6  93207
> 5654 82741   7% /home
> /dev/vda8 188403
> 6091172584   4% /opt
> /dev/vda11 93207
> 5679 82716   7% /tmp
> /dev/vda7 768016
> 565696163308  78% /usr
> /dev/vda9 575500
> 235564310704  44% /var
> /dev/vda10188403
> 10441168234   6% /var/log
> 10.1.0.77:/export/secondary708019200
> 12345344
> 659686400   2% /mnt/SecStorage/15b578c2-972f-3178-ac74-acc61e05ec25
> 10.1.0.77:/export/secondary708019200
> 12345344
> 659686400   2% /mnt/SecStorage/15b578c2-972f-3178-ac74-acc61e05ec25
> root@s-1-VM:~#
>
> (10.1.0.77 - management server and also secondary and primary storage
> server)
>
> I checked cloud.out and it states "no credentials for host found".
>
> I cannot ssh into management from ssvm. I tried adding management
> server
> (also my storage server) in known_host of ssvm but it din't work.
> @Dag I guess you were right about SSVM not able to access Secondary
> Storage. I tried mounting SSVM manually to Secondary storage server
> but it
> din't work.
> Any idea?
>
> cheers
> Swastik
>
>
> On Fri, Feb 9, 2018 at 11:56 AM, Swastik Mittal <
> mittal.swas...@gmail.com>
> wrote:
>
> > Hey,
> >
> > I took a lookat my NFS storage.
> >
> > root@MY-PC:~# mount -t nfs
> > 10.1.0.77:/export/primary on /mnt/9ebaae44-dc8f-33d5-8fb6-
> 90c193e69a22
> > type nfs (rw,vers=4,addr=10.1.0.77,clientaddr=10.1.0.77)
> > 10.1.0.77:/export/secondary on /mnt/secondary type nfs
> > (rw,rsize=8192,wsize=8192,timeo=14,intr,vers=3,addr=10.1.0.

Re: iso not downloading from local path

[Swastik Mittal]

Hey,

I checked accessing nfs server from my ssvm. I tried the following

root@s-1-VM:~# rpcinfo -p
   program vers proto   port  service
104   tcp111  portmapper
103   tcp111  portmapper
102   tcp111  portmapper
104   udp111  portmapper
103   udp111  portmapper
102   udp111  portmapper
1000241   udp  58883  status
1000241   tcp  48454  status

I have only portmapper running. Thats it. No nfs ports found.

root@s-1-VM:~# mount -t nfs

above gives no result.

I manually mounted ssvm to /export/secondary of secondary storage nfs
server. But again all the above commands give the same result.

root@s-1-VM:~# df -k
Filesystem 1K-blocks Used
Available Use% Mounted on
rootfs472036
160666286999  36% /
udev   10240
0 10240   0% /dev
tmpfs  50896
256 50640   1% /run
/dev/disk/by-uuid/30c81d3d-ee9f-4a88-81c1-5f349b22ba1d472036
160666286999  36% /
tmpfs   5120
0  5120   0% /run/lock
tmpfs 211960
0211960   0% /run/shm
/dev/vda1  74367
22706 47821  33% /boot
/dev/vda6  93207
5654 82741   7% /home
/dev/vda8 188403
6091172584   4% /opt
/dev/vda11 93207
5679 82716   7% /tmp
/dev/vda7 768016
565696163308  78% /usr
/dev/vda9 575500
235564310704  44% /var
/dev/vda10188403
10441168234   6% /var/log
10.1.0.77:/export/secondary708019200 12345344
659686400   2% /mnt/SecStorage/15b578c2-972f-3178-ac74-acc61e05ec25
10.1.0.77:/export/secondary708019200 12345344
659686400   2% /mnt/SecStorage/15b578c2-972f-3178-ac74-acc61e05ec25
root@s-1-VM:~#

(10.1.0.77 - management server and also secondary and primary storage
server)

I checked cloud.out and it states "no credentials for host found".

I cannot ssh into management from ssvm. I tried adding management server
(also my storage server) in known_host of ssvm but it din't work.
@Dag I guess you were right about SSVM not able to access Secondary
Storage. I tried mounting SSVM manually to Secondary storage server but it
din't work.
Any idea?

cheers
Swastik


On Fri, Feb 9, 2018 at 11:56 AM, Swastik Mittal <mittal.swas...@gmail.com>
wrote:

> Hey,
>
> I took a lookat my NFS storage.
>
> root@MY-PC:~# mount -t nfs
> 10.1.0.77:/export/primary on /mnt/9ebaae44-dc8f-33d5-8fb6-90c193e69a22
> type nfs (rw,vers=4,addr=10.1.0.77,clientaddr=10.1.0.77)
> 10.1.0.77:/export/secondary on /mnt/secondary type nfs
> (rw,rsize=8192,wsize=8192,timeo=14,intr,vers=3,addr=10.1.0.77)
> 10.1.0.77:/export/primary on /mnt/primary type nfs
> (rw,rsize=8192,wsize=8192,timeo=14,intr,vers=3,addr=10.1.0.77)
> root@MY-PC:~# df -h
> Filesystem  Size  Used  Avail  Use%   Mounted on
> /dev/sda4   676G   12G  630G2%  /
> none   4.0K 0 4.0K0%  /sys/fs/cgroup
> udev   7.8G  4.0K   7.8G1% /dev
> tmpfs  1.6G  1.9M  1.6G1% /run
> none   5.0M 0 5.0M   0%  /run/lock
> none   7.9G  208K  7.9G1%  /run/shm
> none   100M   48K  100M   1%/run/user
> 10.1.0.77:/export/primary  676G   12G  630G   2%
> /mnt/9ebaae44-dc8f-33d5-8fb6-90c193e69a22
> 10.1.0.77:/export/primary  676G   12G  630G   2% /mnt/primary
>
> My secondary storage is mounted as /mnt/secondary but it does not show as
> the diskspace available like the primary memory.
>
> Cheers
> Swastik
>
>
> On Fri, Feb 9, 2018 at 9:23 AM, Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
>> Hey Dag,
>>
>> On running ssvm-check I got :
>>
>> root@s-1-VM:/usr/local/cloud/systemvm# ./ssvm-check.sh
>> 
>> First DNS server is  8.8.8.8
>> PING 8.8.8.8 (8.8.8.8): 48 data bytes
>> --- 8.8.8.8 ping statistics ---
>> 2 packets transmitted, 0 packets received, 100% packet loss
>> WARNING: cannot ping DNS server
>> route follows
>> Kernel IP routing table
>> Destination Gateway Genmask Flags Metric RefUse
>> Iface
>> 0.0.0.0   10.1.0.2 

Re: iso not downloading from local path

[Swastik Mittal]

Hey Dag,

On running ssvm-check I got :

root@s-1-VM:/usr/local/cloud/systemvm# ./ssvm-check.sh

First DNS server is  8.8.8.8
PING 8.8.8.8 (8.8.8.8): 48 data bytes
--- 8.8.8.8 ping statistics ---
2 packets transmitted, 0 packets received, 100% packet loss
WARNING: cannot ping DNS server
route follows
Kernel IP routing table
Destination Gateway Genmask Flags Metric RefUse
Iface
0.0.0.0   10.1.0.20.0.0.0 UG0  00
eth2
8.8.8.8   10.1.0.2255.255.255.255 UGH   0  00
eth1
10.1.0.0  0.0.0.0 255.255.255.0   U 0  00
eth1
10.1.0.0  0.0.0.0 255.255.255.0   U 0  00
eth2
169.254.0.0 0.0.0.0 255.255.0.0 U 0  00 eth0
192.168.1.1 10.1.0.2255.255.255.255 UGH   0  00 eth1

Good: DNS resolves download.cloud.com

nfs is currently mounted
Mount point is /mnt/SecStorage/15b578c2-972f-3178-ac74-acc61e05ec25
Good: Can write to mount point

Management server is 10.1.0.77. Checking connectivity.
Good: Can connect to management server port 8250

Good: Java process is running

Tests Complete. Look for ERROR or WARNING above.
root@s-1-VM:/usr/local/cloud/systemvm#

It doesn't show any connection to secondary storage though. I has
connection to management server and my secondary storage currently is on
the same server.

On Thu, Feb 8, 2018 at 10:44 PM, Dag Sonstebo <dag.sonst...@shapeblue.com>
wrote:

> Swastik,
>
> Are you confident your SSVM can write to your secondary storage?
>
> Can you try to run /usr/local/cloud/systemvm/ssvm-check.sh and see what
> this comes back with?
>
> Regards,
> Dag Sonstebo
> Cloud Architect
> ShapeBlue
>
> On 08/02/2018, 11:06, "Swastik Mittal" <mittal.swas...@gmail.com> wrote:
>
> Hey Dag,
>
> As I start the downloading of iso I get a broken pipe error on my
> terminal
> logging http local file server details. But I checked the cloud.log
> and it
> showed processing and downloadStatus="NOT_DOWNLOADED".
> Downloadpath="/mnt/SecStorage" but NO ERROR untill after waiting for a
> while I myself turned off the http server. Till that time even the iso
> status din't show anything as no error string was generated and when I
> turned off the server it displayed partial http get request not
> supported.
> I don't think downloading from a local server would take time. I did
> allow
> it around 20 minutes. I think that broken pipe is connection to http
> server
> being suddenly stopped due to something. Not able to figure out how:).
>
> The download path shows /mnt/SecStorage which is in SSVM.
>
>
> Regards
> Swastik
>
> On Thu, Feb 8, 2018 at 2:59 PM, Dag Sonstebo <
> dag.sonst...@shapeblue.com>
> wrote:
>
> > Hi Swastik,
> >
> > Don’t worry about this – you were just doing a test where you were
> trying
> > to wget to the local SSVM filesystem as a test. The SSVM is just a
> small VM
> > with not a lot of disk space – so you are just checking connectivity
> here,
> > you should delete the partially downloaded file thereafter.
> >
> > When you do the template download from CloudStack the SSVM will write
> > straight to secondary storage, not to it’s own filesystem.
> >
> > Regards,
> > Dag Sonstebo
> > Cloud Architect
> > ShapeBlue
> >
> > On 08/02/2018, 08:41, "Swastik Mittal" <mittal.swas...@gmail.com>
> wrote:
> >
> > Hey
> >
> > A correction, I do see secondary storage and it shows only 1%
> utilized
> > so
> > my secondary storage does have enough memory.The issue seems to
> be
> > mostly
> > because of SSVM memory.
> >
> > Regards
> > Swastik
> >
> > On Thu, Feb 8, 2018 at 1:20 PM, Swastik Mittal <
> > mittal.swas...@gmail.com>
> > wrote:
> >
> > > Hey Dag and Glenn,
> > >
> > > On entering the local http server url, UI gives status that
> only
> > ports 80,
> > > 8080 and 443 are supported .
> > > So as my management server runs on 8080 and 443 would be for
> s

Re: Issues with downloading iso from URL

[Swastik Mittal]

Hey Jagdish Patil,

Yes, it does require network proxy to connect to internet.

Regards
Swastik

On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <jagdishpatil...@gmail.com>
wrote:

> Hey Swastik Mittal,
>
> Does your network require proxy?
>
> On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
> > Hey,
> >
> > I have a basic network setup and both the system VM's up and running. But
> > the default vm template of centos or incase any other iso I register do
> get
> > successfully registered but shows not ready as failed to download. I root
> > logged in to SSVM and checked for internet connectivity and it doesn't
> > work. I do have DNS servers as 8.8.8.8 registered and pinging directly to
> > google's ip address also does not give any result.
> > I am using same server as my management and host with KVM hypervisor.
> > Below is my host configuration.
> > Any idea how to fix it?
> >
> > Regards
> > Swastik
> >
>

Issues with downloading iso from URL

[Swastik Mittal]

Hey,

I have a basic network setup and both the system VM's up and running. But
the default vm template of centos or incase any other iso I register do get
successfully registered but shows not ready as failed to download. I root
logged in to SSVM and checked for internet connectivity and it doesn't
work. I do have DNS servers as 8.8.8.8 registered and pinging directly to
google's ip address also does not give any result.
I am using same server as my management and host with KVM hypervisor. Below
is my host configuration.
Any idea how to fix it?

Regards
Swastik

Re: iso not downloading from local path

[Swastik Mittal]

Hey Dag,

As I start the downloading of iso I get a broken pipe error on my terminal
logging http local file server details. But I checked the cloud.log and it
showed processing and downloadStatus="NOT_DOWNLOADED".
Downloadpath="/mnt/SecStorage" but NO ERROR untill after waiting for a
while I myself turned off the http server. Till that time even the iso
status din't show anything as no error string was generated and when I
turned off the server it displayed partial http get request not supported.
I don't think downloading from a local server would take time. I did allow
it around 20 minutes. I think that broken pipe is connection to http server
being suddenly stopped due to something. Not able to figure out how:).

The download path shows /mnt/SecStorage which is in SSVM.


Regards
Swastik

On Thu, Feb 8, 2018 at 2:59 PM, Dag Sonstebo <dag.sonst...@shapeblue.com>
wrote:

> Hi Swastik,
>
> Don’t worry about this – you were just doing a test where you were trying
> to wget to the local SSVM filesystem as a test. The SSVM is just a small VM
> with not a lot of disk space – so you are just checking connectivity here,
> you should delete the partially downloaded file thereafter.
>
> When you do the template download from CloudStack the SSVM will write
> straight to secondary storage, not to it’s own filesystem.
>
> Regards,
> Dag Sonstebo
> Cloud Architect
> ShapeBlue
>
> On 08/02/2018, 08:41, "Swastik Mittal" <mittal.swas...@gmail.com> wrote:
>
> Hey
>
> A correction, I do see secondary storage and it shows only 1% utilized
> so
> my secondary storage does have enough memory.The issue seems to be
> mostly
> because of SSVM memory.
>
> Regards
> Swastik
>
> On Thu, Feb 8, 2018 at 1:20 PM, Swastik Mittal <
> mittal.swas...@gmail.com>
> wrote:
>
> > Hey Dag and Glenn,
> >
> > On entering the local http server url, UI gives status that only
> ports 80,
> > 8080 and 443 are supported .
> > So as my management server runs on 8080 and 443 would be for ssl so I
> > hosted my iso on port 80.
> > On logging into my ssvm and using wget to download it downloads upto
> 35%
> > and then stops it displaying not enough space on my terminal. So
> definetly
> > now there is no issue of credentials. And the broken pipe error on
> > intiating download from local http from UI might be becuase I am
> running
> > short on space in my SSVM.
> >
> > But isn't the iso stored in secondary storage which is the management
> > server itself? My secondary storage is up as shown in infrastructure
> and
> > even my system vm template was downloaded in /mnt/secondary. But my
> > dashboard does not show secondary storage infact shows primary
> storage
> > having 1 TB of memory which is the complete memory of the system. Do
> I need
> > to increase the SSVM storage and if yes how do I do that?
> >
> > Regards
> > Swastik
> >
> > On Wed, Feb 7, 2018 at 8:43 PM, Swastik Mittal <
> mittal.swas...@gmail.com>
> > wrote:
> >
> >> Hey,
> >>
> >> Thanks Dag and Glen for reply.
> >>
> >> I'll try changing the port and check.
> >>
> >> Regards
> >> Swastik
> >>
> >>
> >> <https://mailtrack.io/> Sent with Mailtrack
> >> <https://chrome.google.com/webstore/detail/mailtrack-for-
> gmail-inbox/ndnaehgpjlnokgebbaldlmgkapkpjkkb?utm_source=gmail_
> medium=signature_campaign=signaturevirality>
> >>
> >> On Wed, Feb 7, 2018 at 5:57 PM, Glenn Wagner <
> glenn.wag...@shapeblue.com>
> >> wrote:
> >>
> >>> Hi
> >>>
> >>> As Dag pointed out (the errors) when using the simpleHTTP server
> its
> >>> better to use either port 8080 or 8000 so you don't have to setup
> SSL on
> >>> port 443
> >>>
> >>>  Example
> >>> python -m SimpleHTTPServer 8080
> >>>
> >>> Now try the wget or Curl from the SSVM to download the ISO use
> http not
> >>> https
> >>>
> >>> Regards
> >>> Glenn
> >>>
> >>>
> >>> glenn.wag...@shapeblue.com
> >>> www.shapeblue.com
> >>> Winter Suite, 1st Floor, The Avenues, Drama Street, Somerset West,
> Cape
> >>> Town  7129South Afri

Re: Issues with downloading iso from URL

[Swastik Mittal]

Hey Jagdish Patil,

Thanks for suggestion.

Could not understand the second part of the solution to add credentials.
But I tried that by mentioning it in secstorage.proxy in global settings.
It shows status as http instead of failed to download. In management server
log it mentions not_downloaded.

I do not want my management server and host to be connected to internet
though. So I am trying to upload iso to management server by hosting local
files on http server.

Regards
Swastik

On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil <jagdishpatil...@gmail.com>
wrote:

> Hey Swastik Mittal,
>
> If your network requires proxy then you will need to login to both SSVM
> i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command: *ssh -i
> /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@ of
> SSVM>*, then if your network has a proxy server then follow this link in
> *both
> SSVM's
> LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> network-on-centos-7-and-configuring-web-proxy/
> <https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> network-on-centos-7-and-configuring-web-proxy/>
> *and
> if your network only requires authentication then you will need to download
> the .deb file of lynx or Elinks with dependencies and then you will need to
> copy those RPM's in both SSVM's using command *scp
> root@:
>  *and after copying those
> rpm's you can install them using command: *dpkg -i . *Then in
> a terminal, you can give credentials using command: *lynx google.com
> <http://google.com/>*
>
>
> On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
> > Hey Jagdish Patil,
> >
> > Yes, it does require network proxy to connect to internet.
> >
> > Regards
> > Swastik
> >
> > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <jagdishpatil...@gmail.com
> >
> > wrote:
> >
> > > Hey Swastik Mittal,
> > >
> > > Does your network require proxy?
> > >
> > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
> mittal.swas...@gmail.com
> > >
> > > wrote:
> > >
> > > > Hey,
> > > >
> > > > I have a basic network setup and both the system VM's up and running.
> > But
> > > > the default vm template of centos or incase any other iso I register
> do
> > > get
> > > > successfully registered but shows not ready as failed to download. I
> > root
> > > > logged in to SSVM and checked for internet connectivity and it
> doesn't
> > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
> directly
> > to
> > > > google's ip address also does not give any result.
> > > > I am using same server as my management and host with KVM hypervisor.
> > > > Below is my host configuration.
> > > > Any idea how to fix it?
> > > >
> > > > Regards
> > > > Swastik
> > > >
> > >
> >
>

Re: Issues with downloading iso from URL

[Swastik Mittal]

Hey Dag,

Yes I have done that. But still facing some issues.

I have listed it in "
http://mail-archives.apache.org/mod_mbox/cloudstack-users/201802.mbox/browser
"



‌
<https://mailtrack.io/> Sent with Mailtrack
<https://chrome.google.com/webstore/detail/mailtrack-for-gmail-inbox/ndnaehgpjlnokgebbaldlmgkapkpjkkb?utm_source=gmail_medium=signature_campaign=signaturevirality>

On Wed, Feb 7, 2018 at 4:59 PM, Dag Sonstebo <dag.sonst...@shapeblue.com>
wrote:

> HI Swastik,
>
> Just a quick note on internal hosting – you may need to update the global
> setting “secstorage.allowed.internal.sites” with the IP range where you
> are hosting the download URLs.
>
> Regards,
> Dag Sonstebo
> Cloud Architect
> ShapeBlue
>
> On 07/02/2018, 11:00, "Swastik Mittal" <mittal.swas...@gmail.com> wrote:
>
> Hey Jagdish Patil,
>
> Thanks for suggestion.
>
> Could not understand the second part of the solution to add
> credentials.
> But I tried that by mentioning it in secstorage.proxy in global
> settings.
> It shows status as http instead of failed to download. In management
> server
> log it mentions not_downloaded.
>
> I do not want my management server and host to be connected to internet
> though. So I am trying to upload iso to management server by hosting
> local
> files on http server.
>
>     Regards
> Swastik
>
> On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil <
> jagdishpatil...@gmail.com>
> wrote:
>
> > Hey Swastik Mittal,
> >
> > If your network requires proxy then you will need to login to both
> SSVM
> > i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command:
> *ssh -i
> > /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@ address
> > of
> > SSVM>*, then if your network has a proxy server then follow this
> link in
> > *both
> > SSVM's
> > LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> > network-on-centos-7-and-configuring-web-proxy/
> > <https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> > network-on-centos-7-and-configuring-web-proxy/>
> > *and
> > if your network only requires authentication then you will need to
> download
> > the .deb file of lynx or Elinks with dependencies and then you will
> need to
> > copy those RPM's in both SSVM's using command *scp
> > root@: lynx-or-elinks-rpm->
> >  *and after copying
> those
> > rpm's you can install them using command: *dpkg -i .
> *Then in
> > a terminal, you can give credentials using command: *lynx google.com
> > <http://google.com/>*
> >
> >
> > On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal <
> mittal.swas...@gmail.com>
> > wrote:
> >
> > > Hey Jagdish Patil,
> > >
> > > Yes, it does require network proxy to connect to internet.
> > >
> > > Regards
> > > Swastik
> > >
> > > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <
> jagdishpatil...@gmail.com
> > >
> > > wrote:
> > >
> > > > Hey Swastik Mittal,
> > > >
> > > > Does your network require proxy?
> > > >
> > > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
> > mittal.swas...@gmail.com
> > > >
> > > > wrote:
> > > >
> > > > > Hey,
> > > > >
> > > > > I have a basic network setup and both the system VM's up and
> running.
> > > But
> > > > > the default vm template of centos or incase any other iso I
> register
> > do
> > > > get
> > > > > successfully registered but shows not ready as failed to
> download. I
> > > root
> > > > > logged in to SSVM and checked for internet connectivity and it
> > doesn't
> > > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
> > directly
> > > to
> > > > > google's ip address also does not give any result.
> > > > > I am using same server as my management and host with KVM
> hypervisor.
> > > > > Below is my host configuration.
> > > > > Any idea how to fix it?
> > > > >
> > > > > Regards
> > > > > Swastik
> > > > >
> > > >
> > >
> >
>
>
>
> dag.sonst...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
> @shapeblue
>
>
>
>

Re: iso not downloading from local path

[Swastik Mittal]

Hey,

Thanks Dag and Glen for reply.

I'll try changing the port and check.

Regards
Swastik


<https://mailtrack.io/> Sent with Mailtrack
<https://chrome.google.com/webstore/detail/mailtrack-for-gmail-inbox/ndnaehgpjlnokgebbaldlmgkapkpjkkb?utm_source=gmail_medium=signature_campaign=signaturevirality>

On Wed, Feb 7, 2018 at 5:57 PM, Glenn Wagner <glenn.wag...@shapeblue.com>
wrote:

> Hi
>
> As Dag pointed out (the errors) when using the simpleHTTP server its
> better to use either port 8080 or 8000 so you don't have to setup SSL on
> port 443
>
>  Example
> python -m SimpleHTTPServer 8080
>
> Now try the wget or Curl from the SSVM to download the ISO use http not
> https
>
> Regards
> Glenn
>
>
> glenn.wag...@shapeblue.com
> www.shapeblue.com
> Winter Suite, 1st Floor, The Avenues, Drama Street, Somerset West, Cape
> Town  7129South Africa
> @shapeblue
>
>
>
>
> -Original Message-
> From: Dag Sonstebo [mailto:dag.sonst...@shapeblue.com]
> Sent: Wednesday, 07 February 2018 2:13 PM
> To: users@cloudstack.apache.org
> Subject: Re: iso not downloading from local path
>
> Hi Swastik,
>
> Moving discussion to this thread.
>
> The simple test here is to log in to the SSVM from console or over ssh and
> do a “wget” or “curl” against your download URL and see if this starts.
>
> I think your issue is with either your simpleHTTP server asking for
> credentials, or your proxy configuration asking for credentials – “No
> credentials configured for host ” seems fairly
> conclusive.
>
>
> Regards,
> Dag Sonstebo
> Cloud Architect
> ShapeBlue
>
> On 07/02/2018, 06:36, "Swastik Mittal" <mittal.swas...@gmail.com> wrote:
>
> I checked my cloud.log in my SSVM. After the URL request it mentions
>
> [storage.template.HttpTemplateDownloader]
> (agentRequest-Handler-3:null) No
> credentials configured for host 
>
> On Wed, Feb 7, 2018 at 11:32 AM, Swastik Mittal <
> mittal.swas...@gmail.com>
> wrote:
>
> > Hey,
> >
> > I do not have internet on management server and host so to upload an
> iso I
> > set secstorage.allowed.internal.sites to my CIDR. I used
> >
> > $ python -m SimpleHTTPServer 443
> >
> > to host my directory on http server where I had kept my downloaded
> iso. By
> > manually visiting the local http server I am able to download the
> file. But
> > on mentioning the same url in registering the iso it shows registered
> > successfully but does not get downloaded.
> >
> > In the zone section in the iso it mentions not ready. I receive a
> broken
> > pipe error at the initial stage in my local file server log but then
> it
> > again shows processing request. Even the iso status in management
> shows
> > nothing and when I stop the local file server the status of iso
> shows 0%
> > downloaded and then partial get request cannot be served. I believe
> > management server keeps on pinging the local file server but the
> connection
> > is not getting established.
> >
> > I even refreshed my server again and again and also did wait for a
> long
> > enough time to see if the process is slow. logging into system VM and
> > running ./run.sh does not show any error and cloud services are
> running
> > fine. I am pretty sure about the CIDR I have mentioned in
> > secstorage.allowed.internal.sites. Any idea?
> >
> > Regards
> > Swastik
> >
>
>
>
> dag.sonst...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
>
>
>
>

Re: Issues with downloading iso from URL

[Swastik Mittal]

Hey Jagdish,

Well I am facing some issues locally as well. Listed it here

http://mail-archives.apache.org/mod_mbox/cloudstack-users/201802.mbox/browser

Regards
Swastik



‌
<https://mailtrack.io/> Sent with Mailtrack
<https://chrome.google.com/webstore/detail/mailtrack-for-gmail-inbox/ndnaehgpjlnokgebbaldlmgkapkpjkkb?utm_source=gmail_medium=signature_campaign=signaturevirality>

On Wed, Feb 7, 2018 at 5:07 PM, Jagdish Patil <jagdishpatil...@gmail.com>
wrote:

> Hey Swastik,
>
> Welcome.
>
> httpd works for me for registering and installing ISO's locally. Give it a
> try.
>
> On Wed, Feb 7, 2018 at 4:30 PM Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
> > Hey Jagdish Patil,
> >
> > Thanks for suggestion.
> >
> > Could not understand the second part of the solution to add credentials.
> > But I tried that by mentioning it in secstorage.proxy in global settings.
> > It shows status as http instead of failed to download. In management
> server
> > log it mentions not_downloaded.
> >
> > I do not want my management server and host to be connected to internet
> > though. So I am trying to upload iso to management server by hosting
> local
> > files on http server.
> >
> > Regards
> > Swastik
> >
> > On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil <jagdishpatil...@gmail.com
> >
> > wrote:
> >
> > > Hey Swastik Mittal,
> > >
> > > If your network requires proxy then you will need to login to both SSVM
> > > i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command: *ssh
> > -i
> > > /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@ address
> > > of
> > > SSVM>*, then if your network has a proxy server then follow this link
> in
> > > *both
> > > SSVM's
> > > LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> > > network-on-centos-7-and-configuring-web-proxy/
> > > <https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
> > > network-on-centos-7-and-configuring-web-proxy/>
> > > *and
> > > if your network only requires authentication then you will need to
> > download
> > > the .deb file of lynx or Elinks with dependencies and then you will
> need
> > to
> > > copy those RPM's in both SSVM's using command *scp
> > > root@
> > :
> > >  *and after copying
> those
> > > rpm's you can install them using command: *dpkg -i . *Then
> > in
> > > a terminal, you can give credentials using command: *lynx google.com
> > > <http://google.com/>*
> > >
> > >
> > > On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal <
> mittal.swas...@gmail.com>
> > > wrote:
> > >
> > > > Hey Jagdish Patil,
> > > >
> > > > Yes, it does require network proxy to connect to internet.
> > > >
> > > > Regards
> > > > Swastik
> > > >
> > > > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <
> > jagdishpatil...@gmail.com
> > > >
> > > > wrote:
> > > >
> > > > > Hey Swastik Mittal,
> > > > >
> > > > > Does your network require proxy?
> > > > >
> > > > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
> > > mittal.swas...@gmail.com
> > > > >
> > > > > wrote:
> > > > >
> > > > > > Hey,
> > > > > >
> > > > > > I have a basic network setup and both the system VM's up and
> > running.
> > > > But
> > > > > > the default vm template of centos or incase any other iso I
> > register
> > > do
> > > > > get
> > > > > > successfully registered but shows not ready as failed to
> download.
> > I
> > > > root
> > > > > > logged in to SSVM and checked for internet connectivity and it
> > > doesn't
> > > > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
> > > directly
> > > > to
> > > > > > google's ip address also does not give any result.
> > > > > > I am using same server as my management and host with KVM
> > hypervisor.
> > > > > > Below is my host configuration.
> > > > > > Any idea how to fix it?
> > > > > >
> > > > > > Regards
> > > > > > Swastik
> > > > > >
> > > > >
> > > >
> > >
> >
>

Re: Issues with downloading iso from URL

[Swastik Mittal]

Sorry, copied wrong link.

http://mail-archives.apache.org/mod_mbox/cloudstack-users/201802.mbox/%3CCAAM1hT0%2ByQickpS8zE4cJ-meu6Zuy29GexbfXhvMAAYbH%3DqFAA%40mail.gmail.com%3E

Regards
Swastik

‌
<https://mailtrack.io/> Sent with Mailtrack
<https://chrome.google.com/webstore/detail/mailtrack-for-gmail-inbox/ndnaehgpjlnokgebbaldlmgkapkpjkkb?utm_source=gmail_medium=signature_campaign=signaturevirality>

On Wed, Feb 7, 2018 at 5:33 PM, Swastik Mittal <mittal.swas...@gmail.com>
wrote:

> Hey Jagdish,
>
> Well I am facing some issues locally as well. Listed it here
>
> http://mail-archives.apache.org/mod_mbox/cloudstack-users/
> 201802.mbox/browser
>
> Regards
> Swastik
>
>
>
> ‌
> <https://mailtrack.io/> Sent with Mailtrack
> <https://chrome.google.com/webstore/detail/mailtrack-for-gmail-inbox/ndnaehgpjlnokgebbaldlmgkapkpjkkb?utm_source=gmail_medium=signature_campaign=signaturevirality>
>
> On Wed, Feb 7, 2018 at 5:07 PM, Jagdish Patil <jagdishpatil...@gmail.com>
> wrote:
>
>> Hey Swastik,
>>
>> Welcome.
>>
>> httpd works for me for registering and installing ISO's locally. Give it a
>> try.
>>
>> On Wed, Feb 7, 2018 at 4:30 PM Swastik Mittal <mittal.swas...@gmail.com>
>> wrote:
>>
>> > Hey Jagdish Patil,
>> >
>> > Thanks for suggestion.
>> >
>> > Could not understand the second part of the solution to add credentials.
>> > But I tried that by mentioning it in secstorage.proxy in global
>> settings.
>> > It shows status as http instead of failed to download. In management
>> server
>> > log it mentions not_downloaded.
>> >
>> > I do not want my management server and host to be connected to internet
>> > though. So I am trying to upload iso to management server by hosting
>> local
>> > files on http server.
>> >
>> > Regards
>> > Swastik
>> >
>> > On Tue, Feb 6, 2018 at 2:37 PM, Jagdish Patil <
>> jagdishpatil...@gmail.com>
>> > wrote:
>> >
>> > > Hey Swastik Mittal,
>> > >
>> > > If your network requires proxy then you will need to login to both
>> SSVM
>> > > i.e. *Console Proxy VM, *as well *Storage Proxy VM *using command:
>> *ssh
>> > -i
>> > > /var/cloudstack/management/.ssh/id_rsa  -p 3922 root@> address
>> > > of
>> > > SSVM>*, then if your network has a proxy server then follow this link
>> in
>> > > *both
>> > > SSVM's
>> > > LINK: https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
>> > > network-on-centos-7-and-configuring-web-proxy/
>> > > <https://nazimkuet.wordpress.com/2015/08/26/how-to-setup-
>> > > network-on-centos-7-and-configuring-web-proxy/>
>> > > *and
>> > > if your network only requires authentication then you will need to
>> > download
>> > > the .deb file of lynx or Elinks with dependencies and then you will
>> need
>> > to
>> > > copy those RPM's in both SSVM's using command *scp
>> > > root@
>> > :
>> > >  *and after copying
>> those
>> > > rpm's you can install them using command: *dpkg -i .
>> *Then
>> > in
>> > > a terminal, you can give credentials using command: *lynx google.com
>> > > <http://google.com/>*
>> > >
>> > >
>> > > On Tue, Feb 6, 2018 at 2:09 PM Swastik Mittal <
>> mittal.swas...@gmail.com>
>> > > wrote:
>> > >
>> > > > Hey Jagdish Patil,
>> > > >
>> > > > Yes, it does require network proxy to connect to internet.
>> > > >
>> > > > Regards
>> > > > Swastik
>> > > >
>> > > > On Tue, Feb 6, 2018 at 1:33 PM, Jagdish Patil <
>> > jagdishpatil...@gmail.com
>> > > >
>> > > > wrote:
>> > > >
>> > > > > Hey Swastik Mittal,
>> > > > >
>> > > > > Does your network require proxy?
>> > > > >
>> > > > > On Tue, Feb 6, 2018 at 12:53 PM Swastik Mittal <
>> > > mittal.swas...@gmail.com
>> > > > >
>> > > > > wrote:
>> > > > >
>> > > > > > Hey,
>> > > > > >
>> > > > > > I have a basic network setup and both the system VM's up and
>> > running.
>> > > > But
>> > > > > > the default vm template of centos or incase any other iso I
>> > register
>> > > do
>> > > > > get
>> > > > > > successfully registered but shows not ready as failed to
>> download.
>> > I
>> > > > root
>> > > > > > logged in to SSVM and checked for internet connectivity and it
>> > > doesn't
>> > > > > > work. I do have DNS servers as 8.8.8.8 registered and pinging
>> > > directly
>> > > > to
>> > > > > > google's ip address also does not give any result.
>> > > > > > I am using same server as my management and host with KVM
>> > hypervisor.
>> > > > > > Below is my host configuration.
>> > > > > > Any idea how to fix it?
>> > > > > >
>> > > > > > Regards
>> > > > > > Swastik
>> > > > > >
>> > > > >
>> > > >
>> > >
>> >
>>
>
>

Re: downloading iso to secondary storage

[Swastik Mittal]

Hey Andrija,

Yes, I was using firefox to access console. Also my iso was downloaded
successfully after waiting for it for around 2 hrs (don't know why). It
din't show any status update till then. I closed the http server which
hosted the iso and the refreshed management server and Bang!! it shows
successfully installed. Till that time it din't show any progress.
(strange).

Regards
Swastik

On Tue, Feb 20, 2018 at 9:16 PM, Andrija Panic <andrija.pa...@gmail.com>
wrote:

> Hi Swastik,
>
> last issue (enter = reboot) = you are using Firefox ? there is some combo
> cobination, where you will very easily restart VR (into unusable state), so
> don't use firefox (or make sure to understand what happens, but effectively
> something will put focus on the ctrl + alt +del BUTTON and once you hit
> enter, miracle happens :) )
>
> I can't help for the original issue, normally there should be percentage of
> download, later it moves into "installig template" state afaik, and that
> can last for few (tens) of seconds.
> What ACS version are you using, can you try "normal" ISO from other sources
> ?
> HTTPS links are not supported for now.
>
> Cheers
>
> On 19 February 2018 at 08:28, Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
> > hey,
> >
> > I tried with system VM template version 4.4 and it works fine. Earlier I
> > was using system VM template 4.6. Also when I used console to access SSVM
> > installed from 4.6 system VM template, each time I pressed enter after
> > entering the password machine used to reboot by itself. I used to access
> > SSVM through ssh from my local system and not console of management
> server.
> >
> > Regards
> > Swastik
> >
> > On Mon, Feb 19, 2018 at 10:52 AM, Swastik Mittal <
> mittal.swas...@gmail.com
> > >
> > wrote:
> >
> > > Hey,
> > >
> > > I am downloading iso from local http server to secondary storage. Iso
> > gets
> > > registered succesfully but it does not show any status and is not
> > > downloaded. After some time (~5-6 hrs) iso displays successfully
> > installed.
> > > Initially I was facing this error but that time iso was not getting
> > > downloaded at all and it was because sshd service was not enabled on
> > > secondary storage server. Generally status shows downloading percentage
> > > when getting downloaded but my management server shows nothing. My
> > > cloud.out does show no credentials configured for host but I can
> connect
> > to
> > > management and secondary storage from ssvm using ssh and in case of the
> > iso
> > > successfully installed same status "no credentials configured for host"
> > was
> > > shown. I am not able to identify whether iso is really getting
> installed
> > or
> > > there has been some connection problem because of which I have to wait
> > for
> > > hours. My secondary storage is mounted and the mounted directory have
> 777
> > > permission. Any idea?
> > >
> >
>
>
>
> --
>
> Andrija Panić
>

Virtual machines do not detect keyboard short cuts

[Swastik Mittal]

Hey,

In my virtual machine whenever I use keyboard short cuts for instance
ctrl+alt+t to open terminal, it executes on host and not on my VM. How do I
enable hot keys in cloudstack VM?

Regards
Swastik

Re: downloading iso to secondary storage

[Swastik Mittal]

hey,

I tried with system VM template version 4.4 and it works fine. Earlier I
was using system VM template 4.6. Also when I used console to access SSVM
installed from 4.6 system VM template, each time I pressed enter after
entering the password machine used to reboot by itself. I used to access
SSVM through ssh from my local system and not console of management server.

Regards
Swastik

On Mon, Feb 19, 2018 at 10:52 AM, Swastik Mittal <mittal.swas...@gmail.com>
wrote:

> Hey,
>
> I am downloading iso from local http server to secondary storage. Iso gets
> registered succesfully but it does not show any status and is not
> downloaded. After some time (~5-6 hrs) iso displays successfully installed.
> Initially I was facing this error but that time iso was not getting
> downloaded at all and it was because sshd service was not enabled on
> secondary storage server. Generally status shows downloading percentage
> when getting downloaded but my management server shows nothing. My
> cloud.out does show no credentials configured for host but I can connect to
> management and secondary storage from ssvm using ssh and in case of the iso
> successfully installed same status "no credentials configured for host" was
> shown. I am not able to identify whether iso is really getting installed or
> there has been some connection problem because of which I have to wait for
> hours. My secondary storage is mounted and the mounted directory have 777
> permission. Any idea?
>

downloading iso to secondary storage

[Swastik Mittal]

Hey,

I am downloading iso from local http server to secondary storage. Iso gets
registered succesfully but it does not show any status and is not
downloaded. After some time (~5-6 hrs) iso displays successfully installed.
Initially I was facing this error but that time iso was not getting
downloaded at all and it was because sshd service was not enabled on
secondary storage server. Generally status shows downloading percentage
when getting downloaded but my management server shows nothing. My
cloud.out does show no credentials configured for host but I can connect to
management and secondary storage from ssvm using ssh and in case of the iso
successfully installed same status "no credentials configured for host" was
shown. I am not able to identify whether iso is really getting installed or
there has been some connection problem because of which I have to wait for
hours. My secondary storage is mounted and the mounted directory have 777
permission. Any idea?

Re: Edit Public Range

[Swastik Mittal]

Hey Matheus,

You can edit your range of IP's by going into infrastructure->pod->edit.
There change the end ip to whatever you want. It will not allow, if your
guest ip range overlaps with your management ip range being on the basic
network. So make sure you take care of that.

Regards
Swastik

On Thu, Mar 15, 2018 at 9:45 AM, Matheus Fontes  wrote:

> Hi,
> Can I change/edit a Zone’s Public IP Range?
> Ex:
> my conf
> start 200.0.0.1 end 200.0.0.20 netmask 255.255.240.0
> desired conf
> start 200.0.0.1 end 200.0.10.254 netmask 255.255.240.0
>
> I need more Public IPs but on initial config I set only 0.1 to 0.20 range.
>
> Thanks
> Matheus Fontes

Re: Not able to import template from internal network

[Swastik Mittal]

Soundar

Do you have your sshd services available on your internal network.

On 3 Apr 2018 3:47 p.m., "soundar rajan"  wrote:

> Further debugging found the below errors
>
> INFO [Storage.template.httptemplatedownloader] No credentials configured
> for host=172.xx.xx.xx:80
> Starting download from http://172.xx.xx.xx/SVR.qcow2  to
> /mnt/SecStorage/0d869-xx-xx-xxx-xx/template/2/245/dndlxxtmp_
> remotesize-27839829 max size-32232323
> Download completion for job id xxx  status=unrecoverable_error
>
> The above log is fron SSVM
>
> Regards
> Shyam
>
> On Tue, Apr 3, 2018 at 3:29 PM, soundar rajan 
> wrote:
>
> > i logged in to the SSVM from management console login in using root and
> > able to download the QCow2 file using wget
> >
> > @ Swastik
> >
> > The error message it says as stream closed (its a qcow2 format not an
> iso)
> >
> > On Tue, Apr 3, 2018 at 3:21 PM, Dag Sonstebo  >
> > wrote:
> >
> >> Soundar,
> >>
> >> The first step in troubleshooting is to simply log on to the SSVM, then
> >> try to do a wget against the internal URL.
> >>
> >> Regards,
> >> Dag Sonstebo
> >> Cloud Architect
> >> ShapeBlue
> >>
> >> On 03/04/2018, 10:49, "soundar rajan"  wrote:
> >>
> >> But the same works from the template downloaded from internet  for
> >> eg..
> >>
> >> http://cloud.centos.org/Centos7.xx.qcow2 ( Works fine)
> >> http://172.xx.xx.xx/SVR.qcow2 (says stream closed not working)
> >>
> >> secstorage.allowed.internal.sites: 172.xx.0.0/16
> >>
> >> On Tue, Apr 3, 2018 at 3:14 PM, soundar rajan <
> bsoundara...@gmail.com
> >> >
> >> wrote:
> >>
> >> > Hi,
> >> >
> >> > I am not able to import template from internal network. I haved
> >> added the
> >> > ip in the global config and configured the same.
> >> >
> >> > Please find the error message
> >> >
> >> > 2018-04-03 15:12:29,323 DEBUG [c.c.a.t.Request]
> >> > (AgentManager-Handler-7:null) (logid:) Seq 2-4749608757015609350:
> >> > Processing:  { Ans: , MgmtId: 2887018115, via: 2, Ver: v1, Flags:
> >> 10,
> >> > [{"com.cloud.agent.api.storage.DownloadAnswer":{"
> >> > jobId":"37d6c445-25b2-4d0c-9c5e-264152ff76bc","
> >> > downloadPct":0,"errorString":"Stream closed","downloadStatus":"
> >> > DOWNLOAD_ERROR","downloadPath":"/mnt/SecStorage/0d869cc4-
> >> > 6763-391b-83ef-4b686f2ac7a2/template/tmpl/2/243/
> >> > dnld7748993734774922951tmp_","installPath":"template/tmpl/2/
> >> > 243","templateSize":0,"templatePhySicalSize":0,"
> >> > checkSum":"","result":true,"details":"Stream closed","wait":0}}]
> }
> >> >
> >> > Regards
> >> > Shyam
> >> >
> >>
> >>
> >>
> >> dag.sonst...@shapeblue.com
> >> www.shapeblue.com
> >> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
> >> @shapeblue
> >>
> >>
> >>
> >>
> >
>

system VM's agent state is not detected

[Swastik Mittal]

Hey,

I have installed cloudstack 4.11 (shifted to legacy mode). I am running
management and agent on same machine. My host is added successfully and
shows up in its state. My system vm's shows running but agent state is not
detected. The console view shows unable to connect. I can ssh into system
VM's from management and from ssvm to management as well. But wget to local
server hosted on management is not able to establish connection. Also I
have disabled out of band management for zone cluster and my host.
"Check.sh" file is also not available in my vm.

I checked my agent log and it keeps showing:
trying to fetch storage pool  from libvirt..
asking libvirt to refresh storage pool 

I checked with $virsh pool-list and it does show the same id as active.
Also the I manually added this id to agent.props and still agent.log
mentions above.

Not exactly sure why my system-vm's do not detect agent and still shows
running.

Any ideas?

Regards
Swastik

Re: Not able to import template from internal network

[Swastik Mittal]

Hey Soundar

What error does it show in the status when you select your iso?

Regards
Swastik

On Tue, Apr 3, 2018 at 3:14 PM, soundar rajan 
wrote:

> Hi,
>
> I am not able to import template from internal network. I haved added the
> ip in the global config and configured the same.
>
> Please find the error message
>
> 2018-04-03 15:12:29,323 DEBUG [c.c.a.t.Request]
> (AgentManager-Handler-7:null) (logid:) Seq 2-4749608757015609350:
> Processing:  { Ans: , MgmtId: 2887018115, via: 2, Ver: v1, Flags: 10,
> [{"com.cloud.agent.api.storage.DownloadAnswer":{"
> jobId":"37d6c445-25b2-4d0c-9c5e-264152ff76bc","
> downloadPct":0,"errorString":"Stream
> closed","downloadStatus":"DOWNLOAD_ERROR","downloadPath"
> :"/mnt/SecStorage/0d869cc4-6763-391b-83ef-4b686f2ac7a2/
> template/tmpl/2/243/dnld7748993734774922951tmp_","
> installPath":"template/tmpl/2/243","templateSize":0,"
> templatePhySicalSize":0,"checkSum":"","result":true,"details":"Stream
> closed","wait":0}}] }
>
> Regards
> Shyam
>

Re: systemvm

[Swastik Mittal]

Hey @Stephen

I am able to ping my management from ssvm. Also wget to internal
server works fine, it took some time to establish connection
initially.

I don't have any ssvm-check.sh file. I forgot to mention it on this thread.

Outputs:

root@s-1-VM:~# ip a s
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
state UP qlen 1000
link/ether 0e:00:a9:fe:02:2a brd ff:ff:ff:ff:ff:ff
inet 169.254.2.42/16 brd 169.254.255.255 scope global eth0
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
state UP qlen 1000
link/ether 1e:00:ce:00:00:0e brd ff:ff:ff:ff:ff:ff
inet 10.1.0.43/24 brd 10.1.0.255 scope global eth1
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
state UP qlen 1000
link/ether 1e:00:a1:00:00:a2 brd ff:ff:ff:ff:ff:ff
inet 10.1.0.191/24 brd 10.1.0.255 scope global eth2


root@s-1-VM:~# ip r s
default via 10.1.0.2 dev eth2
10.1.0.0/24 dev eth1  proto kernel  scope link  src 10.1.0.43
10.1.0.0/24 dev eth2  proto kernel  scope link  src 10.1.0.191
169.254.0.0/16 dev eth0  proto kernel  scope link  src 169.254.2.42

Yes, my storage and management are the same.

root@s-1-VM:~# route -n
Kernel IP routing table
Destination Gateway Genmask Flags  Metric RefUse Iface
0.0.0.0   10.1.0.2   0.0.0.0UG  0
00eth2
10.1.0.0  0.0.0.0   255.255.255.0U   0  0
  0eth1
10.1.0.0  0.0.0.0   255.255.255.0U   0  0
  0eth2
169.254.0.0 0.0.0.0   255.255.0.0   U   0  0
 0eth0







On 4/4/18, Stephan Seitz <s.se...@heinlein-support.de> wrote:
> Hu!
>
> I'ld recommend to log in to your ssvm and check if everything is able
> to connect.
>
> I second dag's suggestion to double check your network setup.
>
> Inside your ssvm I'ld run
>
> /usr/local/cloud/systemvm/ssvm-check.sh
>
> also
>
> ip a s
> ip r s
>
>
> As an educated guess: did you setup your storage-network to the same
> cidr as your management-network?
>
> if yes, maybe the default route inside your ssvm is setup wrong (on the
> wrong NIC or errenously set up twice on two NICs)
>
>
> cheers,
>
> - Stephan
>
>
>
>
> Am Mittwoch, den 04.04.2018, 13:53 +0530 schrieb Swastik Mittal:
>> @Dag
>>
>> By legacy I meant one way ssl. I have set ca strictness for client as
>> false.
>>
>> I am using 1 nic common for all the network, that is one bridge
>> serving
>> both public and private network.
>>
>> I am setting up a basic zone so I set my management within ip range
>> of 10
>> and guest within a range of 100, and my statement vms get ip assigned
>> within those ranges successfully.
>>
>> I used these similar configuration with ACL 4.6 and was able to run
>> vm's
>> successfully.
>>
>> Regards
>> Swastik
>>
>> On 4 Apr 2018 1:44 p.m., "Dag Sonstebo" <dag.sonst...@shapeblue.com>
>> wrote:
>>
>> >
>> > Swastik,
>> >
>> > Your issue is most likely with your network configuration rather
>> > than
>> > anything to do with firewalls or system VM templates.
>> >
>> > First of all – what do you mean by legacy mode? Are you referring
>> > to
>> > advanced or basic zone?
>> >
>> > Secondly – can you tell us how you have configured your networking?
>> >
>> > - How many NICs you are using and how have you configured them
>> > - What management vs public IP ranges you are using
>> > - How you have mapped your networking in CloudStack against the
>> > underlying
>> > hardware NICs
>> > - Can you also check what your “host” global setting is set to
>> >
>> > Regards,
>> > Dag Sonstebo
>> > Cloud Architect
>> > ShapeBlue
>> >
>> > On 04/04/2018, 09:07, "Swastik Mittal" <mittal.swas...@gmail.com>
>> > wrote:
>> >
>> > @jagdish
>> >
>> > Yes I was using the same link.
>> >
>> >
>> > dag.sonst...@shapeblue.com
>> > www.shapeblue.com
>> > 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
>> > @shapeblue
>> >
>> >
>> >
>> > On 4 Apr 2018 1:07 p.m., "Jagdish Patil" <jagdishpatil...@gmail.com
>> > >
>> > wrote:
>> >
>> > > Hey Swastik,
>> > >
>>

Re: systemvm

[Swastik Mittal]

@Stephen

Request to internal server mentioned in the global sec.storage.. after
registering the iso successfully, get's stuck on HEAD request. As you
mentioned there is an issue in route path from SSVM. Not able to
figure out how do I find it.

regards
Swastik

On 4/4/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
> Hey @Stephen
>
> I am able to ping my management from ssvm. Also wget to internal
> server works fine, it took some time to establish connection
> initially.
>
> I don't have any ssvm-check.sh file. I forgot to mention it on this thread.
>
> Outputs:
>
> root@s-1-VM:~# ip a s
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> inet 127.0.0.1/8 scope host lo
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP qlen 1000
> link/ether 0e:00:a9:fe:02:2a brd ff:ff:ff:ff:ff:ff
> inet 169.254.2.42/16 brd 169.254.255.255 scope global eth0
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP qlen 1000
> link/ether 1e:00:ce:00:00:0e brd ff:ff:ff:ff:ff:ff
> inet 10.1.0.43/24 brd 10.1.0.255 scope global eth1
> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP qlen 1000
> link/ether 1e:00:a1:00:00:a2 brd ff:ff:ff:ff:ff:ff
> inet 10.1.0.191/24 brd 10.1.0.255 scope global eth2
>
>
> root@s-1-VM:~# ip r s
> default via 10.1.0.2 dev eth2
> 10.1.0.0/24 dev eth1  proto kernel  scope link  src 10.1.0.43
> 10.1.0.0/24 dev eth2  proto kernel  scope link  src 10.1.0.191
> 169.254.0.0/16 dev eth0  proto kernel  scope link  src 169.254.2.42
>
> Yes, my storage and management are the same.
>
> root@s-1-VM:~# route -n
> Kernel IP routing table
> Destination Gateway Genmask Flags  Metric RefUse
> Iface
> 0.0.0.0   10.1.0.2   0.0.0.0UG  0
> 00eth2
> 10.1.0.0  0.0.0.0   255.255.255.0U   0  0
>   0eth1
> 10.1.0.0  0.0.0.0   255.255.255.0U   0  0
>   0eth2
> 169.254.0.0 0.0.0.0   255.255.0.0   U   0  0
>  0eth0
>
>
>
>
>
>
>
> On 4/4/18, Stephan Seitz <s.se...@heinlein-support.de> wrote:
>> Hu!
>>
>> I'ld recommend to log in to your ssvm and check if everything is able
>> to connect.
>>
>> I second dag's suggestion to double check your network setup.
>>
>> Inside your ssvm I'ld run
>>
>> /usr/local/cloud/systemvm/ssvm-check.sh
>>
>> also
>>
>> ip a s
>> ip r s
>>
>>
>> As an educated guess: did you setup your storage-network to the same
>> cidr as your management-network?
>>
>> if yes, maybe the default route inside your ssvm is setup wrong (on the
>> wrong NIC or errenously set up twice on two NICs)
>>
>>
>> cheers,
>>
>> - Stephan
>>
>>
>>
>>
>> Am Mittwoch, den 04.04.2018, 13:53 +0530 schrieb Swastik Mittal:
>>> @Dag
>>>
>>> By legacy I meant one way ssl. I have set ca strictness for client as
>>> false.
>>>
>>> I am using 1 nic common for all the network, that is one bridge
>>> serving
>>> both public and private network.
>>>
>>> I am setting up a basic zone so I set my management within ip range
>>> of 10
>>> and guest within a range of 100, and my statement vms get ip assigned
>>> within those ranges successfully.
>>>
>>> I used these similar configuration with ACL 4.6 and was able to run
>>> vm's
>>> successfully.
>>>
>>> Regards
>>> Swastik
>>>
>>> On 4 Apr 2018 1:44 p.m., "Dag Sonstebo" <dag.sonst...@shapeblue.com>
>>> wrote:
>>>
>>> >
>>> > Swastik,
>>> >
>>> > Your issue is most likely with your network configuration rather
>>> > than
>>> > anything to do with firewalls or system VM templates.
>>> >
>>> > First of all – what do you mean by legacy mode? Are you referring
>>> > to
>>> > advanced or basic zone?
>>> >
>>> > Secondly – can you tell us how you have configured your networking?
>>> >
>>> > - How many NICs you are using and how have you configured them
>>> > - What management vs public IP ranges you are using
>>> > - How you have mapped your networking in CloudStack against the
>>> > underlying
>>&

Re: systemvm

[Swastik Mittal]

@Stephen

"host" in global settings is set to 10.1.0.15 which is the ip address
of the management server.
Yes, I'll work on getting ssvm-check file.

Thanks
Swastik

On 4/4/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
> @Stephen
>
> Request to internal server mentioned in the global sec.storage.. after
> registering the iso successfully, get's stuck on HEAD request. As you
> mentioned there is an issue in route path from SSVM. Not able to
> figure out how do I find it.
>
> regards
> Swastik
>
> On 4/4/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
>> Hey @Stephen
>>
>> I am able to ping my management from ssvm. Also wget to internal
>> server works fine, it took some time to establish connection
>> initially.
>>
>> I don't have any ssvm-check.sh file. I forgot to mention it on this
>> thread.
>>
>> Outputs:
>>
>> root@s-1-VM:~# ip a s
>> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
>> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>> inet 127.0.0.1/8 scope host lo
>> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
>> state UP qlen 1000
>> link/ether 0e:00:a9:fe:02:2a brd ff:ff:ff:ff:ff:ff
>> inet 169.254.2.42/16 brd 169.254.255.255 scope global eth0
>> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
>> state UP qlen 1000
>> link/ether 1e:00:ce:00:00:0e brd ff:ff:ff:ff:ff:ff
>> inet 10.1.0.43/24 brd 10.1.0.255 scope global eth1
>> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
>> state UP qlen 1000
>> link/ether 1e:00:a1:00:00:a2 brd ff:ff:ff:ff:ff:ff
>> inet 10.1.0.191/24 brd 10.1.0.255 scope global eth2
>>
>>
>> root@s-1-VM:~# ip r s
>> default via 10.1.0.2 dev eth2
>> 10.1.0.0/24 dev eth1  proto kernel  scope link  src 10.1.0.43
>> 10.1.0.0/24 dev eth2  proto kernel  scope link  src 10.1.0.191
>> 169.254.0.0/16 dev eth0  proto kernel  scope link  src 169.254.2.42
>>
>> Yes, my storage and management are the same.
>>
>> root@s-1-VM:~# route -n
>> Kernel IP routing table
>> Destination Gateway Genmask Flags  Metric RefUse
>> Iface
>> 0.0.0.0   10.1.0.2   0.0.0.0UG  0
>> 00eth2
>> 10.1.0.0  0.0.0.0   255.255.255.0U   0  0
>>   0eth1
>> 10.1.0.0  0.0.0.0   255.255.255.0U   0  0
>>   0eth2
>> 169.254.0.0 0.0.0.0   255.255.0.0   U   0  0
>>  0eth0
>>
>>
>>
>>
>>
>>
>>
>> On 4/4/18, Stephan Seitz <s.se...@heinlein-support.de> wrote:
>>> Hu!
>>>
>>> I'ld recommend to log in to your ssvm and check if everything is able
>>> to connect.
>>>
>>> I second dag's suggestion to double check your network setup.
>>>
>>> Inside your ssvm I'ld run
>>>
>>> /usr/local/cloud/systemvm/ssvm-check.sh
>>>
>>> also
>>>
>>> ip a s
>>> ip r s
>>>
>>>
>>> As an educated guess: did you setup your storage-network to the same
>>> cidr as your management-network?
>>>
>>> if yes, maybe the default route inside your ssvm is setup wrong (on the
>>> wrong NIC or errenously set up twice on two NICs)
>>>
>>>
>>> cheers,
>>>
>>> - Stephan
>>>
>>>
>>>
>>>
>>> Am Mittwoch, den 04.04.2018, 13:53 +0530 schrieb Swastik Mittal:
>>>> @Dag
>>>>
>>>> By legacy I meant one way ssl. I have set ca strictness for client as
>>>> false.
>>>>
>>>> I am using 1 nic common for all the network, that is one bridge
>>>> serving
>>>> both public and private network.
>>>>
>>>> I am setting up a basic zone so I set my management within ip range
>>>> of 10
>>>> and guest within a range of 100, and my statement vms get ip assigned
>>>> within those ranges successfully.
>>>>
>>>> I used these similar configuration with ACL 4.6 and was able to run
>>>> vm's
>>>> successfully.
>>>>
>>>> Regards
>>>> Swastik
>>>>
>>>> On 4 Apr 2018 1:44 p.m., "Dag Sonstebo" <dag.sonst...@shapeblue.com>
>>>> wrote:
>>>>
>>>> >
>>>> > Swastik,
>&g

RE: systemvm

[Swastik Mittal]

@paul

My cloud.log file:

Thu Apr  5 04:24:51 UTC 2018 enable_fwding = 0
Thu Apr  5 04:24:51 UTC 2018 Enable service haproxy = 0
Thu Apr  5 04:24:51 UTC 2018 Processors = 1  Enable service  = 0
Thu Apr  5 04:24:51 UTC 2018 Enable service dnsmasq = 0
Thu Apr  5 04:24:51 UTC 2018 Enable service cloud-passwd-srvr = 0
Thu Apr  5 04:24:51 UTC 2018 Enable service cloud = 1
Thu Apr  5 06:00:04 UTC 2018 Executing cloud-early-config
Thu Apr  5 06:00:04 UTC 2018 Detected that we are running inside kvm guest
Thu Apr  5 06:00:04 UTC 2018 Found a non empty cmdline file. Will now
exit the loop and proceed with configuration.
Thu Apr  5 06:00:04 UTC 2018 Patching  cloud service
Thu Apr  5 06:00:05 UTC 2018 Updating log4j-cloud.xml
Thu Apr  5 06:00:05 UTC 2018 Setting up secondary storage system vm
Thu Apr  5 06:00:05 UTC 2018 checking that eth0 has IP
Thu Apr  5 06:00:06 UTC 2018 waiting for eth0 interface setup with ip
timer=0
Thu Apr  5 06:00:06 UTC 2018 checking that eth1 has IP
Thu Apr  5 06:00:06 UTC 2018 checking that eth2 has IP
Thu Apr  5 06:00:15 UTC 2018 Incompleted parameters STORAGE_IP:,
STORAGE_NETMASK:, STORAGE_CIDR:. Cannot setup storage network
Thu Apr  5 06:00:15 UTC 2018 Setting up apache web server
Thu Apr  5 06:00:15 UTC 2018 setting up apache2 for post upload of
volume/template
Thu Apr  5 06:00:15 UTC 2018 rewrite rules already exist in file
/etc/apache2/sites-available/default-ssl
Thu Apr  5 06:00:15 UTC 2018 adding cors rules to file:
/etc/apache2/sites-available/default-ssl
Thu Apr  5 06:00:16 UTC 2018 cloud: disable rp_filter
Thu Apr  5 06:00:16 UTC 2018 disable rpfilter
Thu Apr  5 06:00:16 UTC 2018 cloud: enable_fwding = 0
Thu Apr  5 06:00:16 UTC 2018 enable_fwding = 0
Thu Apr  5 06:00:16 UTC 2018 Enable service haproxy = 0
Thu Apr  5 06:00:16 UTC 2018 Processors = 1  Enable service  = 0
Thu Apr  5 06:00:16 UTC 2018 Enable service dnsmasq = 0
Thu Apr  5 06:00:16 UTC 2018 Enable service cloud-passwd-srvr = 0
Thu Apr  5 06:00:16 UTC 2018 Enable service cloud =1

On 5 Apr 2018 12:46 a.m., "Paul Angus" <paul.an...@shapeblue.com> wrote:

Hi Swastik,

Have you tried running:

sh /usr/local/cloud/systemvm/ssvm-check.sh

on the ssvm?  It's (almost) impossible for the script not to be there.

Can you paste the contents of /var/log/cloud.log  to pastebin or something.

paul.an...@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London  WC2N 4HSUK
@shapeblue




-Original Message-----
From: Swastik Mittal <mittal.swas...@gmail.com>
Sent: 04 April 2018 18:40
To: users@cloudstack.apache.org
Subject: RE: systemvm

@Paul

Yes, I explicitly created it like normal nfs share, and gave the path of
the exported directory in cloudstack.

I ain't getting any ssvm-check file in my ssvm. I did try changing the
system vm template from 4.11 to 4.6 but the result was the same.

I was successfully able to launch a vm though with similar configurations
but with ACS 4.6 and 4.4 .

On 4 Apr 2018 11:05 p.m., "Paul Angus" <paul.an...@shapeblue.com> wrote:

> Did you explicitly create it or just let cloudstack sort itself out?
>
> FYI, ssvm-check is at:
> /usr/local/cloud/systemvm/ssvm-check.sh
>
> In the ssvm itself
>
>
>
> paul.an...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
>
>
>
>
> -Original Message-
> From: Swastik Mittal <mittal.swas...@gmail.com>
> Sent: 04 April 2018 18:25
> To: users@cloudstack.apache.org
> Subject: RE: systemvm
>
> Hey Paul
>
> Yes, I have my management working as the storage as well.
>
> Regards
> Swastik
>
> On 4 Apr 2018 10:39 p.m., "Paul Angus" <paul.an...@shapeblue.com> wrote:
>
> > Have you configured a storage network on the same subnet as the
> > management network?  You have two interfaces on the same subnet.
> >
> > paul.an...@shapeblue.com
> > www.shapeblue.com
> > 53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
> >
> >
> >
> >
> > -Original Message-
> > From: Swastik Mittal <mittal.swas...@gmail.com>
> > Sent: 04 April 2018 11:46
> > To: users@cloudstack.apache.org
> > Subject: Re: systemvm
> >
> > @Stephen
> >
> > "host" in global settings is set to 10.1.0.15 which is the ip address of
> > the management server.
> > Yes, I'll work on getting ssvm-check file.
> >
> > Thanks
> > Swastik
> >
> > On 4/4/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
> > > @Stephen
> > >
> > > Request to internal server mentioned in the global sec.storage.. after
> > > registering the iso successfully, get's stuck on HEAD request. As you
> > > mentioned there is an issue in route path from SSVM. Not able to
> > > figur

RE: systemvm

[Swastik Mittal]

@Paul

Yes, I explicitly created it like normal nfs share, and gave the path of
the exported directory in cloudstack.

I ain't getting any ssvm-check file in my ssvm. I did try changing the
system vm template from 4.11 to 4.6 but the result was the same.

I was successfully able to launch a vm though with similar configurations
but with ACS 4.6 and 4.4 .

On 4 Apr 2018 11:05 p.m., "Paul Angus" <paul.an...@shapeblue.com> wrote:

> Did you explicitly create it or just let cloudstack sort itself out?
>
> FYI, ssvm-check is at:
> /usr/local/cloud/systemvm/ssvm-check.sh
>
> In the ssvm itself
>
>
>
> paul.an...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
> @shapeblue
>
>
>
>
> -Original Message-
> From: Swastik Mittal <mittal.swas...@gmail.com>
> Sent: 04 April 2018 18:25
> To: users@cloudstack.apache.org
> Subject: RE: systemvm
>
> Hey Paul
>
> Yes, I have my management working as the storage as well.
>
> Regards
> Swastik
>
> On 4 Apr 2018 10:39 p.m., "Paul Angus" <paul.an...@shapeblue.com> wrote:
>
> > Have you configured a storage network on the same subnet as the
> > management network?  You have two interfaces on the same subnet.
> >
> > paul.an...@shapeblue.com
> > www.shapeblue.com
> > 53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
> >
> >
> >
> >
> > -Original Message-
> > From: Swastik Mittal <mittal.swas...@gmail.com>
> > Sent: 04 April 2018 11:46
> > To: users@cloudstack.apache.org
> > Subject: Re: systemvm
> >
> > @Stephen
> >
> > "host" in global settings is set to 10.1.0.15 which is the ip address of
> > the management server.
> > Yes, I'll work on getting ssvm-check file.
> >
> > Thanks
> > Swastik
> >
> > On 4/4/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
> > > @Stephen
> > >
> > > Request to internal server mentioned in the global sec.storage.. after
> > > registering the iso successfully, get's stuck on HEAD request. As you
> > > mentioned there is an issue in route path from SSVM. Not able to
> > > figure out how do I find it.
> > >
> > > regards
> > > Swastik
> > >
> > > On 4/4/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
> > >> Hey @Stephen
> > >>
> > >> I am able to ping my management from ssvm. Also wget to internal
> > >> server works fine, it took some time to establish connection
> > >> initially.
> > >>
> > >> I don't have any ssvm-check.sh file. I forgot to mention it on this
> > >> thread.
> > >>
> > >> Outputs:
> > >>
> > >> root@s-1-VM:~# ip a s
> > >> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
> > >> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> > >> inet 127.0.0.1/8 scope host lo
> > >> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > >> state UP qlen 1000
> > >> link/ether 0e:00:a9:fe:02:2a brd ff:ff:ff:ff:ff:ff
> > >> inet 169.254.2.42/16 brd 169.254.255.255 scope global eth0
> > >> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > >> state UP qlen 1000
> > >> link/ether 1e:00:ce:00:00:0e brd ff:ff:ff:ff:ff:ff
> > >> inet 10.1.0.43/24 brd 10.1.0.255 scope global eth1
> > >> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> > >> state UP qlen 1000
> > >> link/ether 1e:00:a1:00:00:a2 brd ff:ff:ff:ff:ff:ff
> > >> inet 10.1.0.191/24 brd 10.1.0.255 scope global eth2
> > >>
> > >>
> > >> root@s-1-VM:~# ip r s
> > >> default via 10.1.0.2 dev eth2
> > >> 10.1.0.0/24 dev eth1  proto kernel  scope link  src 10.1.0.43
> > >> 10.1.0.0/24 dev eth2  proto kernel  scope link  src 10.1.0.191
> > >> 169.254.0.0/16 dev eth0  proto kernel  scope link  src 169.254.2.42
> > >>
> > >> Yes, my storage and management are the same.
> > >>
> > >> root@s-1-VM:~# route -n
> > >> Kernel IP routing table
> > >> Destination Gateway Genmask Flags  Metric Ref
> Use
> > >> Iface
> > >> 0.0.0.0   10.1.0.2   0.0.0.0UG  0
> > >> 00eth2
> > >> 10.1.0.0  0.0.0.0

RE: systemvm

[Swastik Mittal]

Hey Paul

Yes, I have my management working as the storage as well.

Regards
Swastik

On 4 Apr 2018 10:39 p.m., "Paul Angus" <paul.an...@shapeblue.com> wrote:

> Have you configured a storage network on the same subnet as the management
> network?  You have two interfaces on the same subnet.
>
> paul.an...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
> @shapeblue
>
>
>
>
> -Original Message-
> From: Swastik Mittal <mittal.swas...@gmail.com>
> Sent: 04 April 2018 11:46
> To: users@cloudstack.apache.org
> Subject: Re: systemvm
>
> @Stephen
>
> "host" in global settings is set to 10.1.0.15 which is the ip address of
> the management server.
> Yes, I'll work on getting ssvm-check file.
>
> Thanks
> Swastik
>
> On 4/4/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
> > @Stephen
> >
> > Request to internal server mentioned in the global sec.storage.. after
> > registering the iso successfully, get's stuck on HEAD request. As you
> > mentioned there is an issue in route path from SSVM. Not able to
> > figure out how do I find it.
> >
> > regards
> > Swastik
> >
> > On 4/4/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
> >> Hey @Stephen
> >>
> >> I am able to ping my management from ssvm. Also wget to internal
> >> server works fine, it took some time to establish connection
> >> initially.
> >>
> >> I don't have any ssvm-check.sh file. I forgot to mention it on this
> >> thread.
> >>
> >> Outputs:
> >>
> >> root@s-1-VM:~# ip a s
> >> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
> >> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> >> inet 127.0.0.1/8 scope host lo
> >> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> >> state UP qlen 1000
> >> link/ether 0e:00:a9:fe:02:2a brd ff:ff:ff:ff:ff:ff
> >> inet 169.254.2.42/16 brd 169.254.255.255 scope global eth0
> >> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> >> state UP qlen 1000
> >> link/ether 1e:00:ce:00:00:0e brd ff:ff:ff:ff:ff:ff
> >> inet 10.1.0.43/24 brd 10.1.0.255 scope global eth1
> >> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> >> state UP qlen 1000
> >> link/ether 1e:00:a1:00:00:a2 brd ff:ff:ff:ff:ff:ff
> >> inet 10.1.0.191/24 brd 10.1.0.255 scope global eth2
> >>
> >>
> >> root@s-1-VM:~# ip r s
> >> default via 10.1.0.2 dev eth2
> >> 10.1.0.0/24 dev eth1  proto kernel  scope link  src 10.1.0.43
> >> 10.1.0.0/24 dev eth2  proto kernel  scope link  src 10.1.0.191
> >> 169.254.0.0/16 dev eth0  proto kernel  scope link  src 169.254.2.42
> >>
> >> Yes, my storage and management are the same.
> >>
> >> root@s-1-VM:~# route -n
> >> Kernel IP routing table
> >> Destination Gateway Genmask Flags  Metric RefUse
> >> Iface
> >> 0.0.0.0   10.1.0.2   0.0.0.0UG  0
> >> 00eth2
> >> 10.1.0.0  0.0.0.0   255.255.255.0U   0  0
> >>   0eth1
> >> 10.1.0.0  0.0.0.0   255.255.255.0U   0  0
> >>   0eth2
> >> 169.254.0.0 0.0.0.0   255.255.0.0   U   0  0
> >>  0eth0
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >> On 4/4/18, Stephan Seitz <s.se...@heinlein-support.de> wrote:
> >>> Hu!
> >>>
> >>> I'ld recommend to log in to your ssvm and check if everything is
> >>> able to connect.
> >>>
> >>> I second dag's suggestion to double check your network setup.
> >>>
> >>> Inside your ssvm I'ld run
> >>>
> >>> /usr/local/cloud/systemvm/ssvm-check.sh
> >>>
> >>> also
> >>>
> >>> ip a s
> >>> ip r s
> >>>
> >>>
> >>> As an educated guess: did you setup your storage-network to the same
> >>> cidr as your management-network?
> >>>
> >>> if yes, maybe the default route inside your ssvm is setup wrong (on
> >>> the wrong NIC or errenously set up twice on two NICs)
> >>>
> >>>
> >>> cheers,
> >>>
> >>&

Re: ssvm NFS public ip

[Swastik Mittal]

Hey Nicolas,

Can you mention the urls's you used finally to get everything working.

Regards
Swastik
 Sent with Mailtrack


On Thu, Apr 12, 2018 at 3:10 PM, Nicolas Bouige  wrote:

> Hello All,
>
> With this new deployement my ssvm is now okay.
> I saw my mistake...the URLs were good for mgmt and systemvm template...but
> not for the cloudstack-agent installed on KVM...
>
> Best regards,
>
> N.B
>
> -Message d'origine-
> De : Nicolas Bouige [mailto:n.bou...@dimsi.fr]
> Envoyé : jeudi 12 avril 2018 09:56
> À : users@cloudstack.apache.org
> Objet : RE: ssvm NFS public ip
>
> Hi Paul,
>
> I used repository from shapeblue for mgmt-server and systemvm-template.
> Im going to make a new fresh install (again :/) and double check the URL.
>
> Thanks,
>
> Best regards,
> N.B
>
>
> -Message d'origine-
> De : Paul Angus [mailto:paul.an...@shapeblue.com] Envoyé : jeudi 12 avril
> 2018 09:12 À : users@cloudstack.apache.org Objet : RE: ssvm NFS public ip
>
> Hi Nicolas, this usually happens if you mix redist and noredist builds of
> mgmt. server and system vm code.
>
> What URLs did you use for the management server repo and the system VM
> templates?
>
>
>
> paul.an...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
>
>
>
>
> -Original Message-
> From: Nicolas Bouige 
> Sent: 11 April 2018 19:44
> To: users@cloudstack.apache.org
> Subject: RE: ssvm NFS public ip
>
> Hi ilya,
>
>
> Thanks for your answer
>
> Yes i did it already with no effect :/
>
>
> Best regards,
>
> N.B
>
> 
> De : ilya musayev  Envoyé : mercredi 11
> avril 2018 20:26:34 À : users@cloudstack.apache.org Objet : Re: ssvm NFS
> public ip
>
> There is a global setting you have to set to use internal non public IP.
>
> Try setting sec.storage.allow.internal.site to an internal network cidr.
>
> You may need to destroy ssvm for settings to take effect. In my case there
> is some sort of minor bug where it takes upward of 5 minutes for ssvm to
> program the internal routes, but since this is onetime operation - I just
> live with it.
>
> On Wed, Apr 11, 2018 at 10:50 AM Nicolas Bouige  wrote:
>
> > a small update about my problem.
> >
> > I 've recreated the zone from scratch this morning and  one of my
> > "cloudbr" used for the secondary storage was misconfigured.
> >
> > So Now, I can ping the secondary storage from KVM host, CS-MGMT,  SSVM
> > and mount the nfs on them...but...the agent still not going up and the
> > ssvm_check.sh give me an ip public for the nfs instead of the private.
> >
> >
> > i got only this error in /var/log:cloud.log :
> >
> > 17:30:22,600 ERROR AgentShell:477 - Unable to start agent: Resource
> > class not found: com.cloud.storage.resource.
> PremiumSecondaryStorageResource due
> > to: java.lang.ClassNotFoundException:
> > com.cloud.storage.resource.PremiumSecondaryStorageReso
> >   urce
> > Unable to start agent: Resource class not found:
> > com.cloud.storage.resource.Prem
> > iumSecondaryStorageResource due to: java.lang.ClassNotFoundException:
> > com.cloud.
> > storage.resource.PremiumSecondaryStorageResource
> >
> > i've tried to update a differente systemvm template with no success...
> > I 've compared the configuration of the ssvm with one of our
> > deployment and i juste noticed the "resource"
> > (org.apache.cloudstack.storage.resource.NfsSecondaryResource) was not
> > the same.
> > i changed it but still the same error...
> >
> > There is a way to find java binaries/script and  upload them on the ssvm
> ?
> >
> > If one of you have an idea, it would be appreciate.
> >
> > Thanks !
> >
> > Best regards,
> > N.B
> >
> >
>
>

SSL authentication failure

[Swastik Mittal]

Hey,

I was using cloudstack version 4.6 earlier and was able to
configure/add host to my datacenter. On installing version 4.11 on
setting up host, host is unable to connect to management on port 8250
because management immediately closes the connection and does not
allow connection on that port. (Getting this error in agent log)

The management server log gives,

SSL error caught during wrap data: null cert chain, for local
address=/127.0.0.1:8250, remote address=/127.0.0.1:46029.

I was also not able to ssh into management on port 8250 even though
setting SSHD to all in hosts.allow.
I also tried allowing policies on port 8250 through ufw command but it
din't work.

How do I update policies in 4.11?

Any help?

Reagrds
Swastik

Re: SSL authentication failure

[Swastik Mittal]

Hey Rohit,

(in one-way ssl mode)

The host has been added but the power state is disabled as out of band
management is disabled. On enabling I get unknown state, but system vm's
still show status running and agent state is marked by '-'.

Where are the system VM's running if no agent state is detected?

Also my console does not run but I can ssh into my ssvm. There is no
ssvm-check file available. I think it is because system VM's are not
correctly configured. So how do I power ON my host so that I get an agent
state in system VM?

regards
Swastik

On Tue, Apr 3, 2018 at 10:32 AM, Swastik Mittal <mittal.swas...@gmail.com>
wrote:

> Hey Rohit,
>
> I set my ca.plugin.root.auth.strictness to false and restarted all the
> services and one way ssl works fine. But how do I solve the bug in case I
> need to enable two way ssl.
>
> regards
> Swastik
>
> On Tue, Apr 3, 2018 at 9:21 AM, Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
>> Hey Rohit
>>
>> I was installing a fresh enviroment. Added the host through command
>> cloudstack-setup-agent, here it mentions everything done correctly but
>> the host doesn't get added. (KVM host)
>>
>> Agent log file gives:
>>
>> 2018-04-03 09:12:14,584 INFO  [cloud.agent.Agent] (main:null) (logid:)
>> Connecting to host:localhost
>> 2018-04-03 09:12:14,584 INFO  [utils.nio.NioClient] (main:null)
>> (logid:) Connecting to localhost:8250
>> 2018-04-03 09:12:14,585 INFO  [utils.nio.Link] (main:null) (logid:)
>> Conf file found: /etc/cloudstack/agent/agent.properties
>> 2018-04-03 09:12:14,585 WARN  [utils.nio.Link] (main:null) (logid:)
>> Failed to load keystore, using trust all manager
>> 2018-04-03 09:12:14,589 ERROR [utils.nio.Link] (main:null) (logid:)
>> SSL error caught during unwrap data: Unrecognized SSL message,
>> plaintext connection?, for local address=/127.0.0.1:39863, remote
>> address=localhost/127.0.0.1:8250. The client may have invalid
>> ca-certificates.
>> 2018-04-03 09:12:14,589 ERROR [utils.nio.NioClient] (main:null)
>> (logid:) SSL Handshake failed while connecting to host: localhost
>> port: 8250
>> 2018-04-03 09:12:14,589 ERROR [utils.nio.NioConnection] (main:null)
>> (logid:) Unable to initialize the threads.
>> java.io.IOException: SSL Handshake failed while connecting to host:
>> localhost port: 8250
>> at com.cloud.utils.nio.NioClient.init(NioClient.java:67)
>> at com.cloud.utils.nio.NioConnection.start(NioConnection.java:95)
>> at com.cloud.agent.Agent.start(Agent.java:263)
>> at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:410)
>> at com.cloud.agent.AgentShell.launchAgentFromClassInfo(AgentShe
>> ll.java:378)
>> at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:362)
>> at com.cloud.agent.AgentShell.start(AgentShell.java:467)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAcce
>> ssorImpl.java:62)
>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMe
>> thodAccessorImpl.java:43)
>> at java.lang.reflect.Method.invoke(Method.java:498)
>> at org.apache.commons.daemon.support.DaemonLoader.start(DaemonL
>> oader.java:243)
>> 2018-04-03 09:12:14,590 INFO  [utils.exception.CSExceptionErrorCode]
>> (main:null) (logid:) Could not find exception:
>> com.cloud.utils.exception.NioConnectionException in error code list
>> for exceptions
>> 2018-04-03 09:12:14,590 WARN  [cloud.agent.Agent] (main:null) (logid:)
>> NIO Connection Exception
>> com.cloud.utils.exception.NioConnectionException: SSL Handshake failed
>> while connecting to host: localhost port: 8250
>> 2018-04-03 09:12:14,590 INFO  [cloud.agent.Agent] (main:null) (logid:)
>> Attempted to connect to the server, but received an unexpected
>> exception, trying again...
>>
>> While connecting through UI it gives authentication error.
>>
>> I also set ssh and sshd ports to 8250 and was able to ssh into
>> management from host through it but still getting the same error while
>> adding it in cloudstack. Management generates a key(.pem) file in the
>> UI, do we need to add that file in the host settings for connection?
>>
>> Also my ca.plugin.root.auth.strictness settings was set to true. On
>> setting it to false gives the same.
>>
>> Regards
>> Swastik
>>
>> On 4/2/18, Rohit Yadav <rohit.ya...@shapeblue.com> wrote:
>> > Swastik,
>> >
>> > Did you try to upgrade the env or installed a fresh env? How did y

Re: SSL authentication failure

[Swastik Mittal]

Forget to mention. On issuing an action for out of band management I get:

Out-of-band Management action (RESET) on host
(b7a92936-1ce9-4c90-aca3-6ea492bf028d) failed with error: Get Auth
Capabilities error Error issuing Get Channel Authentication Capabilies
request Error: Unable to establish IPMI v2 / RMCP+ session

On 4/3/18, Swastik Mittal <mittal.swas...@gmail.com> wrote:
> Hey Rohit,
>
> (in one-way ssl mode)
>
> The host has been added but the power state is disabled as out of band
> management is disabled. On enabling I get unknown state, but system vm's
> still show status running and agent state is marked by '-'.
>
> Where are the system VM's running if no agent state is detected?
>
> Also my console does not run but I can ssh into my ssvm. There is no
> ssvm-check file available. I think it is because system VM's are not
> correctly configured. So how do I power ON my host so that I get an agent
> state in system VM?
>
> regards
> Swastik
>
> On Tue, Apr 3, 2018 at 10:32 AM, Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
>> Hey Rohit,
>>
>> I set my ca.plugin.root.auth.strictness to false and restarted all the
>> services and one way ssl works fine. But how do I solve the bug in case I
>> need to enable two way ssl.
>>
>> regards
>> Swastik
>>
>> On Tue, Apr 3, 2018 at 9:21 AM, Swastik Mittal <mittal.swas...@gmail.com>
>> wrote:
>>
>>> Hey Rohit
>>>
>>> I was installing a fresh enviroment. Added the host through command
>>> cloudstack-setup-agent, here it mentions everything done correctly but
>>> the host doesn't get added. (KVM host)
>>>
>>> Agent log file gives:
>>>
>>> 2018-04-03 09:12:14,584 INFO  [cloud.agent.Agent] (main:null) (logid:)
>>> Connecting to host:localhost
>>> 2018-04-03 09:12:14,584 INFO  [utils.nio.NioClient] (main:null)
>>> (logid:) Connecting to localhost:8250
>>> 2018-04-03 09:12:14,585 INFO  [utils.nio.Link] (main:null) (logid:)
>>> Conf file found: /etc/cloudstack/agent/agent.properties
>>> 2018-04-03 09:12:14,585 WARN  [utils.nio.Link] (main:null) (logid:)
>>> Failed to load keystore, using trust all manager
>>> 2018-04-03 09:12:14,589 ERROR [utils.nio.Link] (main:null) (logid:)
>>> SSL error caught during unwrap data: Unrecognized SSL message,
>>> plaintext connection?, for local address=/127.0.0.1:39863, remote
>>> address=localhost/127.0.0.1:8250. The client may have invalid
>>> ca-certificates.
>>> 2018-04-03 09:12:14,589 ERROR [utils.nio.NioClient] (main:null)
>>> (logid:) SSL Handshake failed while connecting to host: localhost
>>> port: 8250
>>> 2018-04-03 09:12:14,589 ERROR [utils.nio.NioConnection] (main:null)
>>> (logid:) Unable to initialize the threads.
>>> java.io.IOException: SSL Handshake failed while connecting to host:
>>> localhost port: 8250
>>> at com.cloud.utils.nio.NioClient.init(NioClient.java:67)
>>> at
>>> com.cloud.utils.nio.NioConnection.start(NioConnection.java:95)
>>> at com.cloud.agent.Agent.start(Agent.java:263)
>>> at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:410)
>>> at com.cloud.agent.AgentShell.launchAgentFromClassInfo(AgentShe
>>> ll.java:378)
>>> at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:362)
>>> at com.cloud.agent.AgentShell.start(AgentShell.java:467)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAcce
>>> ssorImpl.java:62)
>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMe
>>> thodAccessorImpl.java:43)
>>> at java.lang.reflect.Method.invoke(Method.java:498)
>>> at org.apache.commons.daemon.support.DaemonLoader.start(DaemonL
>>> oader.java:243)
>>> 2018-04-03 09:12:14,590 INFO  [utils.exception.CSExceptionErrorCode]
>>> (main:null) (logid:) Could not find exception:
>>> com.cloud.utils.exception.NioConnectionException in error code list
>>> for exceptions
>>> 2018-04-03 09:12:14,590 WARN  [cloud.agent.Agent] (main:null) (logid:)
>>> NIO Connection Exception
>>> com.cloud.utils.exception.NioConnectionException: SSL Handshake failed
>>> while connecting to host: localhost port: 8250
>>> 2018-04-03 09:12:14,590 INFO  [cloud.agent.Agent] (main:null) (logid:)
>>> Attempted to connect to the server, but received an unexpected
>>> exception, trying again...
>>

Re: SSL authentication failure

[Swastik Mittal]

Hey Rohit

I was installing a fresh enviroment. Added the host through command
cloudstack-setup-agent, here it mentions everything done correctly but
the host doesn't get added. (KVM host)

Agent log file gives:

2018-04-03 09:12:14,584 INFO  [cloud.agent.Agent] (main:null) (logid:)
Connecting to host:localhost
2018-04-03 09:12:14,584 INFO  [utils.nio.NioClient] (main:null)
(logid:) Connecting to localhost:8250
2018-04-03 09:12:14,585 INFO  [utils.nio.Link] (main:null) (logid:)
Conf file found: /etc/cloudstack/agent/agent.properties
2018-04-03 09:12:14,585 WARN  [utils.nio.Link] (main:null) (logid:)
Failed to load keystore, using trust all manager
2018-04-03 09:12:14,589 ERROR [utils.nio.Link] (main:null) (logid:)
SSL error caught during unwrap data: Unrecognized SSL message,
plaintext connection?, for local address=/127.0.0.1:39863, remote
address=localhost/127.0.0.1:8250. The client may have invalid
ca-certificates.
2018-04-03 09:12:14,589 ERROR [utils.nio.NioClient] (main:null)
(logid:) SSL Handshake failed while connecting to host: localhost
port: 8250
2018-04-03 09:12:14,589 ERROR [utils.nio.NioConnection] (main:null)
(logid:) Unable to initialize the threads.
java.io.IOException: SSL Handshake failed while connecting to host:
localhost port: 8250
at com.cloud.utils.nio.NioClient.init(NioClient.java:67)
at com.cloud.utils.nio.NioConnection.start(NioConnection.java:95)
at com.cloud.agent.Agent.start(Agent.java:263)
at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:410)
at 
com.cloud.agent.AgentShell.launchAgentFromClassInfo(AgentShell.java:378)
at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:362)
at com.cloud.agent.AgentShell.start(AgentShell.java:467)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at 
org.apache.commons.daemon.support.DaemonLoader.start(DaemonLoader.java:243)
2018-04-03 09:12:14,590 INFO  [utils.exception.CSExceptionErrorCode]
(main:null) (logid:) Could not find exception:
com.cloud.utils.exception.NioConnectionException in error code list
for exceptions
2018-04-03 09:12:14,590 WARN  [cloud.agent.Agent] (main:null) (logid:)
NIO Connection Exception
com.cloud.utils.exception.NioConnectionException: SSL Handshake failed
while connecting to host: localhost port: 8250
2018-04-03 09:12:14,590 INFO  [cloud.agent.Agent] (main:null) (logid:)
Attempted to connect to the server, but received an unexpected
exception, trying again...

While connecting through UI it gives authentication error.

I also set ssh and sshd ports to 8250 and was able to ssh into
management from host through it but still getting the same error while
adding it in cloudstack. Management generates a key(.pem) file in the
UI, do we need to add that file in the host settings for connection?

Also my ca.plugin.root.auth.strictness settings was set to true. On
setting it to false gives the same.

Regards
Swastik

On 4/2/18, Rohit Yadav <rohit.ya...@shapeblue.com> wrote:
> Swastik,
>
> Did you try to upgrade the env or installed a fresh env? How did you add the
> host? Was it a kvm host or something else? Instead of localhost, can you use
> an IP for the mgmt server? Also check and share your ca auth strictness
> global setting. Setting that to false will enforce legacy behavior.
>
> Regards.
>
> Get Outlook for Android<https://aka.ms/ghei36>
>
>
>
> From: Swastik Mittal
> Sent: Monday, 2 April, 4:58 PM
> Subject: SSL authentication failure
> To: users@cloudstack.apache.org
>
>
> Hey, I was using cloudstack version 4.6 earlier and was able to
> configure/add host to my datacenter. On installing version 4.11 on setting
> up host, host is unable to connect to management on port 8250 because
> management immediately closes the connection and does not allow connection
> on that port. (Getting this error in agent log) The management server log
> gives, SSL error caught during wrap data: null cert chain, for local
> address=/127.0.0.1:8250, remote address=/127.0.0.1:46029. I was also not
> able to ssh into management on port 8250 even though setting SSHD to all in
> hosts.allow. I also tried allowing policies on port 8250 through ufw command
> but it din't work. How do I update policies in 4.11? Any help? Reagrds
> Swastik
>
>
> rohit.ya...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
> @shapeblue
>
>
>
>

Re: SSL authentication failure

[Swastik Mittal]

Hey Rohit,

I set my ca.plugin.root.auth.strictness to false and restarted all the
services and one way ssl works fine. But how do I solve the bug in case I
need to enable two way ssl.

regards
Swastik

On Tue, Apr 3, 2018 at 9:21 AM, Swastik Mittal <mittal.swas...@gmail.com>
wrote:

> Hey Rohit
>
> I was installing a fresh enviroment. Added the host through command
> cloudstack-setup-agent, here it mentions everything done correctly but
> the host doesn't get added. (KVM host)
>
> Agent log file gives:
>
> 2018-04-03 09:12:14,584 INFO  [cloud.agent.Agent] (main:null) (logid:)
> Connecting to host:localhost
> 2018-04-03 09:12:14,584 INFO  [utils.nio.NioClient] (main:null)
> (logid:) Connecting to localhost:8250
> 2018-04-03 09:12:14,585 INFO  [utils.nio.Link] (main:null) (logid:)
> Conf file found: /etc/cloudstack/agent/agent.properties
> 2018-04-03 09:12:14,585 WARN  [utils.nio.Link] (main:null) (logid:)
> Failed to load keystore, using trust all manager
> 2018-04-03 09:12:14,589 ERROR [utils.nio.Link] (main:null) (logid:)
> SSL error caught during unwrap data: Unrecognized SSL message,
> plaintext connection?, for local address=/127.0.0.1:39863, remote
> address=localhost/127.0.0.1:8250. The client may have invalid
> ca-certificates.
> 2018-04-03 09:12:14,589 ERROR [utils.nio.NioClient] (main:null)
> (logid:) SSL Handshake failed while connecting to host: localhost
> port: 8250
> 2018-04-03 09:12:14,589 ERROR [utils.nio.NioConnection] (main:null)
> (logid:) Unable to initialize the threads.
> java.io.IOException: SSL Handshake failed while connecting to host:
> localhost port: 8250
> at com.cloud.utils.nio.NioClient.init(NioClient.java:67)
> at com.cloud.utils.nio.NioConnection.start(NioConnection.java:95)
> at com.cloud.agent.Agent.start(Agent.java:263)
> at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:410)
> at com.cloud.agent.AgentShell.launchAgentFromClassInfo(
> AgentShell.java:378)
> at com.cloud.agent.AgentShell.launchAgent(AgentShell.java:362)
> at com.cloud.agent.AgentShell.start(AgentShell.java:467)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(
> NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> at org.apache.commons.daemon.support.DaemonLoader.start(
> DaemonLoader.java:243)
> 2018-04-03 09:12:14,590 INFO  [utils.exception.CSExceptionErrorCode]
> (main:null) (logid:) Could not find exception:
> com.cloud.utils.exception.NioConnectionException in error code list
> for exceptions
> 2018-04-03 09:12:14,590 WARN  [cloud.agent.Agent] (main:null) (logid:)
> NIO Connection Exception
> com.cloud.utils.exception.NioConnectionException: SSL Handshake failed
> while connecting to host: localhost port: 8250
> 2018-04-03 09:12:14,590 INFO  [cloud.agent.Agent] (main:null) (logid:)
> Attempted to connect to the server, but received an unexpected
> exception, trying again...
>
> While connecting through UI it gives authentication error.
>
> I also set ssh and sshd ports to 8250 and was able to ssh into
> management from host through it but still getting the same error while
> adding it in cloudstack. Management generates a key(.pem) file in the
> UI, do we need to add that file in the host settings for connection?
>
> Also my ca.plugin.root.auth.strictness settings was set to true. On
> setting it to false gives the same.
>
> Regards
> Swastik
>
> On 4/2/18, Rohit Yadav <rohit.ya...@shapeblue.com> wrote:
> > Swastik,
> >
> > Did you try to upgrade the env or installed a fresh env? How did you add
> the
> > host? Was it a kvm host or something else? Instead of localhost, can you
> use
> > an IP for the mgmt server? Also check and share your ca auth strictness
> > global setting. Setting that to false will enforce legacy behavior.
> >
> > Regards.
> >
> > Get Outlook for Android<https://aka.ms/ghei36>
> >
> >
> >
> > From: Swastik Mittal
> > Sent: Monday, 2 April, 4:58 PM
> > Subject: SSL authentication failure
> > To: users@cloudstack.apache.org
> >
> >
> > Hey, I was using cloudstack version 4.6 earlier and was able to
> > configure/add host to my datacenter. On installing version 4.11 on
> setting
> > up host, host is unable to connect to management on port 8250 because
> > management immediately closes the connection and does not allow
> connection
> > on that port. (Getting this error in agent log) The management server 

systemvm

[Swastik Mittal]

Hey,

I am installing ACS 4.11 (legacy mode), with management and host on same
server and out-of-band management disabled. My host is enabled and up and
ssvm successfully running. Though agent state column shows only '-'.

CPVM is also running successfully but when I open console window I get
unable to connect. Also I din't find check file in SSVM (accessed through
terminal using ssh).

>From SSVM I can ssh into management but wget command to management local
host ain't working (is stuck at connecting but is not able to connect.).

Agent log does not show any error, just mentions "trying to fetch storage
pool from libvirt" all the time. I checked my storage pool through "virsh
pool-list" and it shows the storage pool mentioned in local storage under
agent.properties.

Any ideas?

Regards
Swastik

Re: systemvm

[Swastik Mittal]

@Dag

By legacy I meant one way ssl. I have set ca strictness for client as false.

I am using 1 nic common for all the network, that is one bridge serving
both public and private network.

I am setting up a basic zone so I set my management within ip range of 10
and guest within a range of 100, and my statement vms get ip assigned
within those ranges successfully.

I used these similar configuration with ACL 4.6 and was able to run vm's
successfully.

Regards
Swastik

On 4 Apr 2018 1:44 p.m., "Dag Sonstebo" <dag.sonst...@shapeblue.com> wrote:

> Swastik,
>
> Your issue is most likely with your network configuration rather than
> anything to do with firewalls or system VM templates.
>
> First of all – what do you mean by legacy mode? Are you referring to
> advanced or basic zone?
>
> Secondly – can you tell us how you have configured your networking?
>
> - How many NICs you are using and how have you configured them
> - What management vs public IP ranges you are using
> - How you have mapped your networking in CloudStack against the underlying
> hardware NICs
> - Can you also check what your “host” global setting is set to
>
> Regards,
> Dag Sonstebo
> Cloud Architect
> ShapeBlue
>
> On 04/04/2018, 09:07, "Swastik Mittal" <mittal.swas...@gmail.com> wrote:
>
> @jagdish
>
> Yes I was using the same link.
>
>
> dag.sonst...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
> @shapeblue
>
>
>
> On 4 Apr 2018 1:07 p.m., "Jagdish Patil" <jagdishpatil...@gmail.com>
> wrote:
>
> > Hey Swastik,
> >
> > download.cloudstack.org link doesn't look like an issue, but which
> version
> > and which hypervisor are you using?
> >
> > For KVM, download this:
> > http://download.cloudstack.org/systemvm/4.11/systemvmtemplat
> e-4.11.0-kvm.
> > qcow2.bz2
> >
> > Regards,
> > Jagdish Patil
> >
> > On Wed, Apr 4, 2018 at 1:00 PM Swastik Mittal <
> mittal.swas...@gmail.com>
> > wrote:
> >
> > > Hey @jagdish
> > >
> > > I was using download.cloudstack.org to download systemVM. Is
> there any
> > > bug within the template uploaded here?
> > >
> > > @Soundar
> > >
> > > I did disable firewall services but din't work. I'll check it again
> > though.
> > >
> > > On 4/4/18, soundar rajan <bsoundara...@gmail.com> wrote:
> > > > disabled firewalld service on the hostname and check. you should
> able
> > to
> > > > access using console window.
> > > >
> > > > On Wed, Apr 4, 2018 at 10:07 AM, Swastik Mittal <
> > > mittal.swas...@gmail.com>
> > > > wrote:
> > > >
> > > >> Hey,
> > > >>
> > > >> I am installing ACS 4.11 (legacy mode), with management and
> host on
> > same
> > > >> server and out-of-band management disabled. My host is enabled
> and up
> > > and
> > > >> ssvm successfully running. Though agent state column shows only
> '-'.
> > > >>
> > > >> CPVM is also running successfully but when I open console
> window I get
> > > >> unable to connect. Also I din't find check file in SSVM
> (accessed
> > > through
> > > >> terminal using ssh).
> > > >>
> > > >> From SSVM I can ssh into management but wget command to
> management
> > local
> > > >> host ain't working (is stuck at connecting but is not able to
> > connect.).
> > > >>
> > > >> Agent log does not show any error, just mentions "trying to
> fetch
> > > storage
> > > >> pool from libvirt" all the time. I checked my storage pool
> through
> > > "virsh
> > > >> pool-list" and it shows the storage pool mentioned in local
> storage
> > > under
> > > >> agent.properties.
> > > >>
> > > >> Any ideas?
> > > >>
> > > >> Regards
> > > >> Swastik
> > > >>
> > > >
> > >
> >
>
>
>

Re: systemvm

[Swastik Mittal]

@jagdish

Yes I was using the same link.

On 4 Apr 2018 1:07 p.m., "Jagdish Patil" <jagdishpatil...@gmail.com> wrote:

> Hey Swastik,
>
> download.cloudstack.org link doesn't look like an issue, but which version
> and which hypervisor are you using?
>
> For KVM, download this:
> http://download.cloudstack.org/systemvm/4.11/systemvmtemplate-4.11.0-kvm.
> qcow2.bz2
>
> Regards,
> Jagdish Patil
>
> On Wed, Apr 4, 2018 at 1:00 PM Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
> > Hey @jagdish
> >
> > I was using download.cloudstack.org to download systemVM. Is there any
> > bug within the template uploaded here?
> >
> > @Soundar
> >
> > I did disable firewall services but din't work. I'll check it again
> though.
> >
> > On 4/4/18, soundar rajan <bsoundara...@gmail.com> wrote:
> > > disabled firewalld service on the hostname and check. you should able
> to
> > > access using console window.
> > >
> > > On Wed, Apr 4, 2018 at 10:07 AM, Swastik Mittal <
> > mittal.swas...@gmail.com>
> > > wrote:
> > >
> > >> Hey,
> > >>
> > >> I am installing ACS 4.11 (legacy mode), with management and host on
> same
> > >> server and out-of-band management disabled. My host is enabled and up
> > and
> > >> ssvm successfully running. Though agent state column shows only '-'.
> > >>
> > >> CPVM is also running successfully but when I open console window I get
> > >> unable to connect. Also I din't find check file in SSVM (accessed
> > through
> > >> terminal using ssh).
> > >>
> > >> From SSVM I can ssh into management but wget command to management
> local
> > >> host ain't working (is stuck at connecting but is not able to
> connect.).
> > >>
> > >> Agent log does not show any error, just mentions "trying to fetch
> > storage
> > >> pool from libvirt" all the time. I checked my storage pool through
> > "virsh
> > >> pool-list" and it shows the storage pool mentioned in local storage
> > under
> > >> agent.properties.
> > >>
> > >> Any ideas?
> > >>
> > >> Regards
> > >> Swastik
> > >>
> > >
> >
>

Re: systemvm

[Swastik Mittal]

Hey @jagdish

I was using download.cloudstack.org to download systemVM. Is there any
bug within the template uploaded here?

@Soundar

I did disable firewall services but din't work. I'll check it again though.

On 4/4/18, soundar rajan <bsoundara...@gmail.com> wrote:
> disabled firewalld service on the hostname and check. you should able to
> access using console window.
>
> On Wed, Apr 4, 2018 at 10:07 AM, Swastik Mittal <mittal.swas...@gmail.com>
> wrote:
>
>> Hey,
>>
>> I am installing ACS 4.11 (legacy mode), with management and host on same
>> server and out-of-band management disabled. My host is enabled and up and
>> ssvm successfully running. Though agent state column shows only '-'.
>>
>> CPVM is also running successfully but when I open console window I get
>> unable to connect. Also I din't find check file in SSVM (accessed through
>> terminal using ssh).
>>
>> From SSVM I can ssh into management but wget command to management local
>> host ain't working (is stuck at connecting but is not able to connect.).
>>
>> Agent log does not show any error, just mentions "trying to fetch storage
>> pool from libvirt" all the time. I checked my storage pool through "virsh
>> pool-list" and it shows the storage pool mentioned in local storage under
>> agent.properties.
>>
>> Any ideas?
>>
>> Regards
>> Swastik
>>
>