Hy,

 

whats best practice to secure the web ui or management server when public access to the web ui is needed ?

Management Server -> DMZ ?

MYSQL Server -> LAN ?

Is Netscaler AAA possible ?

 

thanks

regards

Alex

 

Does anyone know what the default KVM write cache is for cloudstack 4.2.1.

I can't seem to find documentation on how to access the XML file to check.  I'm using KVM with Cloudstack 4.2.1.

 

Help would be appreciated.

Hi,

 

I am new to cloudstack. As i read on cloudstack's documentation, Guest network is used when there is trafic generated betwwen VMs and Public network is used when VM tries to access internet.

 

But then why there is no option to assign Public network to VMs. The only way i found is adding new guest network with A range of IP addresses that are accessible from the Internet.

 

So then When exactly public network will be used apart from system VMs? Isnt there any other way i can assign Public IP addresses to my VMs, so they can be accessible from internet?

 

 

 

 

 

 

 

When setting up a separate storage network in apache cloudstack 4 , does mgmt server has to be able to mount the secondary nfs storage? Another words I can understand template upload from a website, mgmt server makes the request to ssvm and ssvm downloads it directly from a web server locally or on the internet for templates or isos but how is downloading templates to your pc works from mgmt website if we are not mounting nfs on the mgmt server? Unfortunately very few resources available in detail about setting up storage network in Cloudstack 4, ty sam

If I create a VM template it will work great for a few days.  Eventually it starts to error out with "Unable to Deploy VM".

 

The logs indicate it can no longer find the volume with the qcow2.

 

Any suggestions?

 

 

 

 

Hi all,

I followed this https://github.com/imduffy15/GSoC-2014/ and installed apache cloudstack with basic networking in my local machine, and every thing worked smoothly.

?I can add instances from the built in tiny linux template(cent-os 5.6 64bit) without having any issue.

I got a snapshot of the running instance volume and created a template from it. When I try to add an instance using that template I always get InsufficientServerCapacityException.

According to my dashboard there are enough capacity to add the instance. Any ideas?

console:

?WARN [o.a.c.alerts] (API-Job-Executor-5:ctx-4692c763 job-166 ctx-b141500e) alertType:: 8 // dataCenterId:: 1 // podId:: null // clusterId:: null // message:: Failed to deploy Vm with Id: 29, on Host with Id: null
INFO [o.a.c.a.c.a.v.DeployVMCmdByAdmin] (API-Job-Executor-5:ctx-4692c763 job-166 ctx-b141500e) com.cloud.exception.InsufficientServerCapacityException: Unable to create a deployment for VM[User|i-2-29-VM]Scope=interface com.cloud.dc.DataCenter; id=1
INFO [o.a.c.a.c.a.v.DeployVMCmdByAdmin] (API-Job-Executor-5:ctx-4692c763 job-166 ctx-b141500e) Unable to create a deployment for VM[User|i-2-29-VM]
com.cloud.exception.InsufficientServerCapacityException: Unable to create a deployment for VM[User|i-2-29-VM]Scope=interface com.cloud.dc.DataCenter; id=1
at org.apache.cloudstack.engine.cloud.entity.api.VMEntityManagerImpl.reserveVirtualMachine(VMEntityManagerImpl.java:214)
at org.apache.cloudstack.engine.cloud.entity.api.VirtualMachineEntityImpl.reserve(VirtualMachineEntityImpl.java:200)
at com.cloud.vm.UserVmManagerImpl.startVirtualMachine(UserVmManagerImpl.java:3515)
at com.cloud.vm.UserVmManagerImpl.startVirtualMachine(UserVmManagerImpl.java:3166)
at com.cloud.vm.UserVmManagerImpl.startVirtualMachine(UserVmManagerImpl.java:3154)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:317)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)
at org.apache.cloudstack.network.contrail.management.EventUtils$EventInterceptor.invoke(EventUtils.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161)
at com.cloud.event.ActionEventInterceptor.invoke(ActionEventInterceptor.java:51)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161)
at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:91)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at com.sun.proxy.$Proxy224.startVirtualMachine(Unknown Source)
at org.apache.cloudstack.api.command.admin.vm.DeployVMCmdByAdmin.execute(DeployVMCmdByAdmin.java:48)
at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:141)
at com.cloud.api.ApiAsyncJobDispatcher.runJob(ApiAsyncJobDispatcher.java:108)
at org.apache.cloudstack.framework.jobs.impl.AsyncJobManagerImpl$5.runInContext(AsyncJobManagerImpl.java:503)
at org.apache.cloudstack.managed.context.ManagedContextRunnable$1.run(ManagedContextRunnable.java:49)
at org.apache.cloudstack.managed.context.impl.DefaultManagedContext$1.call(DefaultManagedContext.java:56)
at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.callWithContext(DefaultManagedContext.java:103)
at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.runWithContext(DefaultManagedContext.java:53)
at org.apache.cloudstack.managed.context.ManagedContextRunnable.run(ManagedContextRunnable.java:46)
at org.apache.cloudstack.framework.jobs.impl.AsyncJobManagerImpl$5.run(AsyncJobManagerImpl.java:460)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
at java.util.concurrent.FutureTask.run(FutureTask.java:262)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)

 

I see with CloudStack Ubuntu is supported for the management and KVM.  Will CloudPlatform officially support this?

 

https://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html/Installation_Guide/minimum-system-requirements.html

 

https://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html/Installation_Guide/hypervisor-kvm-install-flow.html

HI,all:

     Today I use cloudplatform4.3.0.1  integration  with  vmware5.5?The switch use vmware   Distributed  switch but it don't working,the vr always   auto  reboot?

Here is my step?

1.set the vmware.use.dvswitch  Parameters is "true"

2.then I create a stand switch name "vSwitch0" to as "manager and storage" traffic  and create  a  Distributed  switch  name "public"  to as "public and guest" graffic.

3.then I add the  vmware cluster,t set the manager traffic type is "vSwitch0" ;set the guest and public traffic type is "public",vswitch type is "Distributed  switch"

 

4.after I  integration the vmware,the ssvm and cpvm can working success?

 

6.then i create the instance,but it can work,the VR always auto reboot.(the vr have 5 NICS)

 

who can hep me,Thank you very much.

 

 

 

 

 

 

 

 

 

 

 

 

 

Hello,

 

I install cloudstack management 4.4 on centos 6.5. Its working. I install Xen on Debian and cannot add host.

Error on management www: Unable to add the host

 

/var/log/cloudstack/management/management-server.log:

 

2014-08-07 08:42:07,981 DEBUG [c.c.a.ApiServlet] (catalina-exec-12:ctx-b52ef4b9) ===START===  192.168.11.36 -- POST  command=addHost&response=json&sessionkey=TDBVfu9JqLq5WqAg8Lhvoe1TBGA%3D
2014-08-07 08:42:07,987 WARN  [c.c.a.d.ParamGenericValidationWorker] (catalina-exec-12:ctx-b52ef4b9 ctx-e70cd28d) Received unknown parameters for command addHost. Unknown parameters : clustertype
2014-08-07 08:42:07,989 INFO  [c.c.r.ResourceManagerImpl] (catalina-exec-12:ctx-b52ef4b9 ctx-e70cd28d) Trying to add a new host at http://192.168.1.3 in data center 1
2014-08-07 08:42:07,992 DEBUG [c.c.h.x.r.XenServerConnectionPool] (catalina-exec-12:ctx-b52ef4b9 ctx-e70cd28d) Unable to create master connection to host(192.168.1.3) , due to org.apache.xmlrpc.XmlRpcException: Failed to read server's response: Connection refused
2014-08-07 08:42:07,993 DEBUG [c.c.h.x.d.XcpServerDiscoverer] (catalina-exec-12:ctx-b52ef4b9 ctx-e70cd28d) other exceptions: com.cloud.utils.exception.CloudRuntimeException: Unable to create master connection to host(192.168.1.3) , due to org.apache.xmlrpc.XmlRpcException: Failed to read server's response: Connection refused
com.cloud.utils.exception.CloudRuntimeException: Unable to create master connection to host(192.168.1.3) , due to org.apache.xmlrpc.XmlRpcException: Failed to read server's response: Connection refused
    at com.cloud.hypervisor.xen.resource.XenServerConnectionPool.getConnect(XenServerConnectionPool.java:168)
    at com.cloud.hypervisor.xen.discoverer.XcpServerDiscoverer.find(XcpServerDiscoverer.java:215)
.................

 

I install cloadstack 4.4 management: http://thehyperadvisor.com/2013/05/30/cloudstack-management-server-installation-4-0-2/ (change baseurl to 4.4)

Xen install: http://wiki.xenproject.org/wiki/Xen_Project_Beginners_Guide#Download_and_Burn_the_Debian_Installer_CD

 

Can help me ? How to add Xen host to cloudstack management

 

Hi community !

 

I use cloudstack 4.4 on centos with xenserver 6.2.

I created a advanced zone without security group. I have 3 nics :

- nics 1 for guest network and administration network.

- nics 2 for public network

- nics 3 for storage network.

 

I have a primary storage iscsi and my secondary storage locate on NFS server.

I followed installation instruction (vhd-utils, cloud-install-sys-tmplt ...)

 

When I working my zone, two vm created (secondary storage and console proxy) but agent state none (attach file 1)

 

I logged in Secondary Storage VM i try "ping 8.8.8.8" = ok but "ping www.google.fr" failed with DNS 8.8.8.8 of course.

 

When I created a advanced zone WITH security group. I don't have problems with System'vm. Agents of system'vm work normaly. I can download iso, template, to create VM ....

The only difference is to add the nic public network.

 

Where I can look for to help ?

 

Thanks for your help !

Hi there, 

 

I have a Cloudstack instance running v4.3.

 

On a separate server, I have setup RabbitMQ, running on CentOS 6.5 by following the steps below:

 

rpm -ivh http://download.fedoraproject.org/pub/epel/6/$(arch)/epel-release-6-8.noarch.rpm

sudo yum install -y erlang

rpm --import http://www.rabbitmq.com/rabbitmq-signing-key-public.asc
sudo yum install -y rabbitmq-server.noarch

sudo chkconfig rabbitmq-server on

 

I've opened port 5672 through the firewall solely to the Cloudstack instance.

 

I have permitted remote users to connect with the following configuration:

 

cat /etc/rabbitmq/rabbitmq.config

[

  {rabbit, [{loopback_users, []}]}

].

 

I have removed the guest user, created a new user, provided that user with administrator privileges and allowed that user permissions over the default zone '/'

 

rabbitmqctl add_user rabbituser password123

rabbitmqctl set_user_tags rabbituser administrator

set_permissions -p / rabbituser ".*" ".*" ".*"

 

I have setup the following file on my Cloudstack instance and restarted Cloudstack:

 

cat /etc/cloudstack/management/componentContext.xml

<beans xmlns="http://www.springframework.org/schema/beans";

       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";

       xmlns:context="http://www.springframework.org/schema/context";

       xmlns:aop="http://www.springframework.org/schema/aop";

       xsi:schemaLocation="http://www.springframework.org/schema/beans

                           http://www.springframework.org/schema/beans/spring-beans-3.0.xsd

                           http://www.springframework.org/schema/aop

                           http://www.springframework.org/schema/aop/spring-aop-3.0.xsd

                           http://www.springframework.org/schema/context

                           http://www.springframework.org/schema/context/spring-context-3.0.xsd";>

    <bean id="eventNotificationBus" class="org.apache.cloudstack.mom.rabbitmq.RabbitMQEventBus">

        <property name="name" value="eventNotificationBus"/>

        <property name="server" value="192.168.1.12"/>

        <property name="port" value="5672"/>

        <property name="username" value="rabbituser"/>

        <property name="password" value="password123"/>

        <property name="exchange" value="cloudstack-events"/>

    </bean>

</beans>  

 

sudo /etc/init.d/cloudstack-management stop && sudo /etc/init.d/cloudstack-management start

 

I can telnet from the Cloudstack instance to the RabbitMQ instance on port 5672 successfully.

 

I have then used tcpdump on both the Cloudstack instance and the RabbitMQ instance to look for traffic on port 5672 but there is none. Nothing is initiated by the Cloudstack instance.

 

Is /etc/cloudstack/management/componentContext.xml the correct location for this file? I cannot see anything erroneous in the cloudstack-management log file that shows it being picked up at all. 

 

Have I missed something or is there a more verbose guide available than those detailed at http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.1.1/html/Admin_Guide/events.html ?

 

Thanks

 

Hi all,

 

I following the quick install guide to test out Citrix CloudPlatform.

 

I am up to box/step 9 where it says to do the following:

 

/usr/share/cloudstack-common/scripts/storage/secondary/cloud-install-sys-tmplt -m /mnt/secondary/ -u http://download.cloud.com/templates/4.2/systemvmtemplate-2013-07-12-master-xen.vhd.bz2 -h xenserver -F

 

 

Once I issue that, it then results in this error after a few seconds:

 

rm: cannot remove `/mnt/secondary/template/tmpl/1/1//a0bd9d62-8fdb-46e8-a9c2-7e8a4b189a39.vhd': Permission denied
rm: cannot remove `/mnt/secondary/template/tmpl/1/1//template.properties': Permission denied
Failed to clean up template directory /mnt/secondary/template/tmpl/1/1/ -- check permissions?
Installation failed

 

 

I have tried manually deleting them as well but no go. Would appreciate any help anyone can give. Willing to pay for support as well.

 

Thanks

Jake

Hi,

 

I have a question regarding the XD7.5's integration with Cloudplatform.

 

Suppose I have an on-premise VDI infrastructure with XD7.5 (including Controller/StoreFront) and Vsphere. All the virtual desktops were deployed using MCS in the site.

 

Now if I installed a CloudPlatform farm, adding the same vsphere hosts into Cloudplatform as the compute resouce. Then, can I create a new host connection with Cloudplatform type, to that Cloudplatform farm?

 

If so, will the existing desktops (independant of Cloudplatform) continued to be accessible  afterwards?

 

The idea is to understand how much effort is required to migrate existing on-premise VDI infrastructure to Cloudplatform, and whether it's worth a complete tear down and rebuild.

 

 

 

Thanks

 

Silvester

Hello,

I seem to have an issue with snapshots not being moved to secondary storage, they stay in Primary on the host node. I have also noticed a couple of templates in Primary also. Everything seems to be set up correctly and there are actually one or two recent snapshots in Secondary storage (there are roughly 40 VMs within cloudstack) taken by clients. Has anybody happened to come across this issue before?

 

Cheers!

Hi All,

 

I’ve encountered a strange issue whereby egress firewall rules don’t seem to apply to any CloudPlatform VRs that are running on our VMware cluster, whereas any CloudPlatform VRs running on our XenServer cluster work as expected (these are in the same and only zone). Even more strangely, port forwarding and ingress firewall rules do apply correctly in either scenario.

 

Has anyone encountered anything similar or has any troubleshooting tips for this? I have confirmed WAN connectivity, etc. from the VRs console and can see that there’s no matching entry in the iptables.

 

We are running Citrix CloudPlatform 4.3.0.1.

 

Any pointers would be greatly appreciated!

Thanks,

Eric

Hello,

I seem to have an issue where 'Home > Network > Guest networks > defaultGuestNetwork > View IP Addresses' always shows 'No Data to Show'. Would anybody have any ideas on how to get the section to be populated by IPs in use? The usage software seems to be working correctly.

 

Can anyone clarify what the deletion process in terms of stages...

 

Basically when i run a "select * from volumes"

 

Some are set in a Destroy state (inc all recent ones) and some are "Expunged". Which shpould they be ? i thought it was expunged, so could the Destroy ones be taking up space unnecessarily ?

 

Thanks

Hello!

I am writing a new authentication adapter as well as new encryptor for the passwords.

What version of CloudStack the adapter should be compactible with? As in CS version 4.3 it includes "ActionOnFailedAuthentication" parameter added, and I am not sure if CloudPlatform 4.3 includes this feature.

A.

I'm trying to found a solution that allow me to import an xenserver host running several virtual machine in a cloudplatform based on cloudstack orchestrator.

is there any advices ,

 

thanks