Commit Graph

921 Commits

Author SHA1 Message Date
Harikrishna Patnala ca0d2ef8c2 CLOUDSTACK-2085: VM weight on xen remain same as before vmscaleup ;because "Add-To-VCPUs-Params-Live.sh" is not getting copied on xs host
Fixed by updating the patch files that has
 entries to copy scipts on xenserver. Here we added
 Add-To-VCPUs-Params-Live.sh

Added a check on Host params whether host restricts Dynamic memory control(DMC) to able to allow scale up VM.
If DMC is not enabled then static max and min are set to SO.

Signed Off by - Nitin Mehta <nitin.mehta@citrix.com>
2013-05-15 19:41:48 -07:00
Sheng Yang 2d2c0c48cd Merge branch 'pvlan'
Conflicts:
	scripts/vm/hypervisor/xenserver/xenserver60/patch
	server/src/com/cloud/network/NetworkManager.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/NetworkServiceImpl.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManager.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
	server/src/com/cloud/network/vpc/VpcManagerImpl.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	server/test/com/cloud/network/MockNetworkManagerImpl.java
	server/test/com/cloud/vpc/MockNetworkManagerImpl.java
	server/test/com/cloud/vpc/MockVpcVirtualNetworkApplianceManager.java
2013-05-15 16:08:08 -07:00
Harikrishna Patnala ffe90c0059 CLOUDSTACK-2085: VM weight on xen remain same as before vmscaleup ;because "Add-To-VCPUs-Params-Live.sh" is not getting copied on xs host
Fixed by updating the patch files that has
 entries to copy scipts on xenserver. Here we added
 Add-To-VCPUs-Params-Live.sh

Added a check on Host params whether host restricts Dynamic memory control(DMC) to able to allow scale up VM.
If DMC is not enabled then static max and min are set to SO.

Signed Off by - Nitin Mehta <nitin.mehta@citrix.com>
2013-05-15 16:17:21 +05:30
Edison Su a0c3d280b4 merge to master 2013-05-15 00:40:53 -07:00
Anthony Xu 1518e7ee43 CLOUDSTACK-2115: remove the trailing '\n' to get correct XS network mode 2013-05-14 17:52:10 -07:00
Bharat Kumar 052c24c4d1 CLOUDSTACK-702: Multiple ip ranges in different subnets.
This feature enables adding of guest ip ranges (public ips)  form different subnets.

In order to provide the dhcp service to a different subnet we create an ipalias on the router. This allows the router to listen to the dhcp request from the guest vms and respond accordingly. Every time a vm is deployed in the new subnet we configure an ip alias on the router. Cloudstack uses dnsmasq to provide dhcp service. We need to configure the dnsmasq to issue ips on the new subnets. Added a new class dnsmasqconfigurator which generates the dnsmasq confg file, this file replaces the old config in the router.

The details of the alias ips are stored in db in the nic_ip_alias table. Every time a new subnet is added one of the ip from the subnet is used to configure the ip alias.

I have pushed the code to  https://github.com/bvbharatk/cloud-stack/tree/Cloudstack-702 , also rebased the code with master.
I need to test the code for advanced sg enabled network using kvm.

I have added the unit test
Marvin tests are at https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=53e4965

Also accomodated some of the changes suggested by koushik.
corrected the import statements. renamed the IpAlias command to createIpAlias command.

This feature supports only ipv4
2013-05-13 17:06:44 +05:30
Edison Su 492127c035 fix kvm 2013-05-12 18:27:37 -07:00
Alex Huang 3047929367 Merged 2013-05-10 16:21:43 -07:00
Edison Su 5aeca646ae make create template from volume/snapshot work 2013-05-07 20:18:19 -07:00
Sheng Yang 0c7bd0777b PVLAN: Optimize pvlan scripts 2013-05-06 17:51:33 -07:00
Marcus Sorensen 870d21c436 Summary: Release old DHCP entries
Detail: Refresh dnsmasq with updated entries live, no outage

BUG-ID: CLOUDSTACK-2299
Submitted-by: Dennis Lawler <dlawler@gmail.com>
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1367611792 -0600
2013-05-03 14:09:52 -06:00
Sheng Yang 3c3d67769b PVLAN: PvlanSetupCommand for KVM support 2013-05-01 13:23:09 -07:00
Sheng Yang 40386fc4cb PVLAN: Add network label parameter to PvlanSetupCommand
We need it to find the real bridge/switch to program on the OVS.
2013-05-01 13:23:09 -07:00
Sheng Yang 05885457ec PVLAN: Simplify OVS policy
We can resubmit the packet against the flow table to get simplier result.

Now we don't need to check if VM is in the same host as DHCP server or not.
2013-05-01 13:23:08 -07:00
Sheng Yang b64039bafd Implement PVLAN on Xen
Start/stop vm/dhcp server are done. Not done with VM migration.

A new command(PvlanSetupCommand) is sent for setting up PVLAN for vms. Currently
it's focus on OVS implementation. Need to be more abstruct and add vSwitch part.
2013-05-01 13:23:08 -07:00
Edison Su 299cccf779 fix copy/paste bug 2013-04-24 18:32:06 -07:00
Marcus Sorensen f66b9b570f Send only \n rather than \r\n to agent socket when sending cmdline
to system VMS

BUG-ID: CLOUDSTACK-1732
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1365622030 -0600
2013-04-10 13:27:10 -06:00
Jayapal a4a059c043 CLOUDSTACK-779 Egress firewall rules support for Juniper SRX 2013-04-10 10:54:04 -07:00
Hugo Trippaers 6bec37dc04 Detect if we are root based on the effective uid instead of the username. Allows sysadmins to specifiy their own username if they want. 2013-04-10 16:34:31 +02:00
Chiradeep Vittal e7983b25cc QuickCloud: Enable secondary storage daemon to run outside the system vm 2013-04-09 14:45:25 -07:00
Phong Nguyen aa79ccf985 CLOUDSTACK-922: LXC Support in Cloudstack.
Signed-off-by: Edison Su <sudison@gmail.com>
2013-04-01 15:41:42 -07:00
Wido den Hollander 29baacd120 debian: Include jasypt in the cloudstack-common package
This is required for the cloud-install-sys-tmplt installer.

Signed-off-by: Wido den Hollander <wido@42on.com>
2013-03-31 14:16:31 +02:00
Nitin Mehta 3e4430d811 CLOUDSTACK-658 - Scaleup vm support for Xenserver
Added the framweork so that it can be extended for vmware and kvm as well.
Added unitests and marvin tests.
2013-03-28 16:43:37 +05:30
Jayapal Uradi edaa72d0fc CLOUDSTACK-24: mipn feature for basiczone kvmhost
Signed-off-by: Abhinandan Prateek <aprateek@apache.org>
2013-03-15 10:22:56 +05:30
Deepti Dohare d5cb32f159 Multiple Secondary Storage Issue 2013-03-14 21:08:27 -04:00
John Kinsella 08a0788b38 Summary: security_group.py: catch exception when flushing chain
Detail: Added exception handling around iptables chain flushing, along
with a call to default_network_rules() to re-initialize.

Testing:
On agent, ls /var/run/cloud and pick one of the VMs to test with. Make a
backup of it's logfile (eg cp /var/run/cloud/i-2-1722.log /tmp )
Destroy the firewall ruleset for that VM with
/usr/lib64/cloud/common/scripts/vm/network/security_group.py destroy_network_rules_for_vm --vmname i-2-1722-VM --vif vnet10
Now copy the log file back, edit the file and decrement the last field by 1
ACS should notice the out-of-date sequence ID and push a new ruleset for
the VM within 60 seconds.

BUG-ID: CLOUDSTACK-1685
Bugfix-for: John Kinsella
Reviewed-by:
Reported-by:
Signed-off-by: John Kinsella <jlk@stratosec.co> 1363286927 -0700
2013-03-14 11:48:47 -07:00
John Kinsella 1079d63b6f Summary: Prevent deletion of wrong iptables rules
Detail: A grep in security_group.py wasn't defined well enough, could
potentially delete rules for VMs other than intended

BUG-ID: CLOUDSTACK-309
Bugfix-for: master
Reviewed-by:
Reported-by: Francois Scala
Signed-off-by: John Kinsella <jlk@stratosec.co> 1363222521 -0700
2013-03-13 17:55:21 -07:00
John Kinsella 381f737e64 Summary: Fix exception handling in security_group.py
Detail: Code was attempting to concatinate an exception to a string.
Updated to convert to text and concatinate that.

BUG-ID: CLOUDSTACK-1052
Bugfix-for: master
Reported-by: Noa Resare
Signed-off-by: John Kinsella <jlk@stratosec.co> 1363218769 -0700
2013-03-13 16:52:49 -07:00
Jayapal Uradi a49261c3b1 CLOUDSTACK-24: mipn feature for basiczone
Signed-off-by: Abhinandan Prateek <aprateek@apache.org>
2013-03-13 10:24:22 +05:30
Marcus Sorensen 0ca85659a6 CLOUDSTACK-1651 - point agent scripts to correct logging location, due to move
of /var/log/cloud to /var/log/cloudstack

Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1363112422 -0600
2013-03-12 12:20:22 -06:00
Sheng Yang e35ce6587a CLOUDSTACK-1461: Don't set dns server for non-default ipv6 network
The non-default parameter can be used by ipv4 as well in the future.
2013-03-08 17:43:23 -08:00
Marcus Sorensen 9ad54a082c Summary: KVM - use virtio socket to communicate config to system vms
Detail: This gets rid of the patchdisk method of passing cmdline and
authorized_keys to KVM system VMs. It instead passes them to a virtio socket,
which the KVM guest reads from the character device /dev/vport0p1 during
cloud-early-config. Tested to work on CentOS 6.3 and Ubuntu 12.04. Should
work with even older versions of libvirt.

Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1362691685 -0700
2013-03-07 14:28:05 -07:00
Brenn Oosterbaan e8b6f66582 Review 9647: In some storage failure scenario’s the NFS timeout can
cause writing the heartbeat to take longer than expected. By comparing
the last successful heartbeat epoch with the current epoch we check if
the timeout value has been met.
2013-03-05 15:38:54 +01:00
Nitin Mehta b12aebefee Revert "CLOUDSTACK-658 - Adding Scalevm command and XS related changes"
This reverts commit e0019eccd9.
2013-03-04 23:32:52 +05:30
Nitin Mehta e0019eccd9 CLOUDSTACK-658 - Adding Scalevm command and XS related changes 2013-03-04 14:47:55 +05:30
frank 31d6e5465e CloudStack CLOUDSTACK-774
Supporting kickstart in CloudStack baremetal

make kikcstart working with ubuntu
2013-03-01 17:55:49 -08:00
Radoslaw Smigielski 0383803188 scripts: Fix security_group.py handling of args and unknown commands
Checks the args length, doesn't throw IndexError when no args
passed. Also logs to security_group.log when executed with no args or unknown
command.

Review: https://reviews.apache.org/r/9588
Reviewed-by: Rohit Yadav <bhaisaab@apache.org>

Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-02-26 14:12:49 +05:30
Brenn Oosterbaan c30da35811 Commit review 9586
Signed-off-by: Hugo Trippaers <htrippaers@schubergphilis.com>
2013-02-25 14:40:15 +01:00
Mice Xia dae57c1ab2 add missing license header reported by rat 2013-02-22 13:22:14 +08:00
frank 55b77c7c8f CloudStack CLOUDSTACK-774
Supporting kickstart in CloudStack baremetal

adding missing scripts back

Conflicts:

	client/pom.xml
	client/tomcatconf/commands.properties.in
	server/src/com/cloud/server/ManagementServerImpl.java
2013-02-21 15:46:11 -08:00
Mice Xia 9a12756ae4 CLOUDSTACK-684 support vm snapshot 2013-02-14 01:26:30 +08:00
Marcus Sorensen ae2b673e03 Summary: fix cloud-agent KVM calls to cloudstack-agent for centos6.3
BUG-ID: CLOUDSTACK-1234
Bugfix-for: 4.1, master
Reported-by: Rayees Namathponnan
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1360736064 -0700
2013-02-12 23:16:22 -07:00
Wido den Hollander e4b2fe42e0 CLOUDSTACK-1206: Change path from /etc/cloud to /etc/cloudstack
Reported-by: Pradeep Soundararajan <pradeep.soundararajan@citrix.com>
2013-02-08 10:50:48 +01:00
anthony db71d3da36 CLOUDSTACK-1167
remove arptables rules after VM is stopped
2013-02-05 15:07:29 -08:00
Marcus Sorensen 750fb2c31e Summary: Fix improper variable assignment in resizevolume.sh (remove $)
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1360089640 -0700
2013-02-05 11:40:40 -07:00
Kelven Yang 296c20332d Merge javelin into master 2013-02-01 14:40:45 -08:00
Devdeep Singh e162876605 CS-16544: Create Snapshot (2nd time - reccuring) is failing on XenServer 6.1. The issue is that while backing up a snapshot when cloudstack tries to update the parent (of the backed up vhd), vhd-util isn't present at the desired location and setParent function in vmopsSnapshot fails. This issue is observed only on Xenserver 6.1. The reason for this is, when CloudStack connects to a Xenserver and executes the SetupCommand, it copies vhd-util tool to /opt/xensource/bin directory on the host. However, in vmopsSnapshot python file 'VHD_UTIL' is initialized to /usr/sbin/. The issue is not observed on 6.0.2 (and I guess previous versions) because vhd-util is present in /usr/sbin/ directory by default (after a clean install). Whereas, in Xenserver 6.1, vhd-util is present in '/usr/bin'. Fixed the issue by updating VHD_UTIL to point to /opt/xensource/bin/vhd-util in vmopsSnapshot file. 2013-02-01 15:25:26 +05:30
Kelven Yang 7bd8bec68a Sync javelin with master up to 894cb8f7d9 2013-01-31 17:20:19 -08:00
Sheng Yang 5cb9df91a1 Merge branch 'ipv6'
Conflicts:
	api/src/com/cloud/network/NetworkProfile.java
2013-01-31 15:07:33 -08:00
Kelven Yang 1b2b369ecb Merge latest master into javelin 2013-01-31 11:34:49 -08:00
Jayapal b6727e5646 CLOUDSTACK-299: Egress firewall rules feature for guest network on VR 2013-01-31 11:20:47 +05:30
Sheng Yang 8f66d266b3 IPv6: Enable VR's ability to provide DHCPv6 service 2013-01-26 23:14:42 -08:00
Sheng Yang 9300a02ba4 IPv6: Update edithosts.sh accept parameters 2013-01-26 23:14:27 -08:00
Rohit Yadav 356866c72b Merge branch 'master' into javelin
- Fixed new join dao impls as spring components
- Fixed component context xml to load api rate limit checker
- Fixed root pom.xml for duplicate plugin
- Fixed list data centers method
- Fixed following conflicts:
	api/src/org/apache/cloudstack/api/command/admin/network/CreateNetworkOfferingCmd.java
	api/src/org/apache/cloudstack/api/command/user/offering/ListServiceOfferingsCmd.java
	api/src/org/apache/cloudstack/api/command/user/template/DeleteTemplateCmd.java
	api/src/org/apache/cloudstack/api/command/user/template/ExtractTemplateCmd.java
	plugins/api/discovery/src/org/apache/cloudstack/discovery/ApiDiscoveryServiceImpl.java
	server/src/com/cloud/api/ApiDBUtils.java
	server/src/com/cloud/api/ApiServer.java
	server/src/com/cloud/api/query/QueryManagerImpl.java
	server/src/com/cloud/configuration/DefaultComponentLibrary.java
	server/src/com/cloud/server/ManagementServerImpl.java
	server/src/com/cloud/storage/swift/SwiftManagerImpl.java

Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-24 19:18:53 -08:00
Edison Su 189c20b665 umount loop device. If patch disk created from loop, then need to umount it in loop device, otherwise, you can only create 7 routers on one kvm host 2013-01-18 14:27:40 -08:00
Alex Huang 10d9c019a9 All merge conflicts resolved 2013-01-18 12:14:57 -08:00
Marcus Sorensen 8c5b82dfb4 Summary: several scripts are not mode executable
Detail: several scripts in the scripts directory weren't marked executable.
Normally this is handled/fixed in the packaging, but harder to deal with in
development environments, so marking them executable.

Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1358446902 -0700
2013-01-17 11:21:42 -07:00
Marcus Sorensen 1ff7a147bd Revert "Summary: fix ipsectunnel.sh being called as ipsectunnel in KVM S2S vpn"
This reverts commit 1a2e69fb22.
accidentally pushed mode change of sh file as well, need to split this out
2013-01-17 11:17:43 -07:00
Marcus Sorensen 1a2e69fb22 Summary: fix ipsectunnel.sh being called as ipsectunnel in KVM S2S vpn
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1358446410 -0700
2013-01-17 11:13:30 -07:00
Marcus Sorensen 975021dda1 Summary: adding resizeVolume api call
Detail: This merges the resizevolume feature branch, which provides the
ability to migrate a disk between disk offerings, thereby changing its
size, or specifying a new size if current disk offering is custom.

BUG-ID: CLOUDSTACK-644
Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1358358209 -0700
2013-01-16 17:43:35 -07:00
Alex Huang 30f2565d98 Merge branch 'api_refactoring' into javelin 2013-01-08 12:36:04 -08:00
Sheng Yang 3d9dc36463 The other xml license fix 2013-01-04 20:03:16 -08:00
Sheng Yang 51502e9f06 Fix license issue of new added xml files 2013-01-04 19:52:21 -08:00
Sheng Yang 717f9dcd4d CLOUDSTACK-306: Implement SRX firewall
Use SRX firewall filter as SRX firewall. The old security policy mechanism
cannot be used as IP based. This would enable SRX's ability to control traffic
for F5 behind it.
2013-01-04 19:17:50 -08:00
Marcus Sorensen 9c5c626546 Summary: bring up KVM network bridge immediately
Detail: Users can experience long delays during VM migration, because the
linux bridge by default will have a forwarding delay set. This means that the
network will likely miss any gratuitous ARP from qemu notifying the network that
the MAC has moved. This change is a common reccommendation for virtualization
running on Linux bridges.

Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1357259186 -0700
2013-01-03 17:26:26 -07:00
Edison Su 4b2d9f4415 refactor test cases: use testNG instead of junit, as testNG can group test cases and pass parameter to test case 2012-12-22 22:10:39 -08:00
Edison Su ac88c16be6 finaly, finish download template to primary storage 2012-12-20 19:06:02 -08:00
Edison Su c216990e1c trying to add code to download url into devcloud 2012-12-19 18:43:04 -08:00
Edison Su b70c1a5a84 Backs NFS-based secondary storage with an S3-compatible object store. Periodically, a reaper thread synchronizes templates and ISOs stored on a NFS secondary storage mount with a configured S3 object store. It also pushes snapshots to the object store when they are created and downloads them in other zones on-demand. In addition to permitting the use of commodity or IaaS storage solutions for static assets, it provides a means of automatically synchronizing template and ISO assets across multiple zones. 2012-12-13 23:18:37 -08:00
Rohit Yadav 6f29317a84 CLOUDSTACK-591: Fix execute and string processing logic for reboot_vm in security_group
- Since we're always getting the first from the list, use head -1 to get the first
  of the results instead of processing again
- Remove unecessay pop (why was it even there)

Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2012-12-13 15:28:30 -08:00
Bill Rich 1ae2d720a3 CLOUDSTACK-591: Changed bridge name parsing in security_group.py to support bridges named with dashes 2012-12-13 15:28:30 -08:00
Marcus Sorensen 7ce2227108 Summary: master - Copy qcow2 instead of converting if source and dest are qcow2
Detail: If source image is qcow2, and we want a qcow2 image, then doing a
convert strips off compression and any snapshots the user had in that image. If
a backing file exists, we stick with convert so we can pull in both the backing
file and the COW image, otherwise we just cp the qcow2 file. This is also faster

Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1354755241 -0700
2012-12-05 17:54:01 -07:00
Marcus Sorensen a91df8f32d Summary: master - Fix typo in createvolume.sh
Detail: createvolume.sh had '$qemu-img' in one spot instead of '$qemu_img' as it
uses everywhere else

Signed-off-by: Marcus Sorensen <marcus@betterservers.com> 1354754792 -0700
2012-12-05 17:46:32 -07:00
Edison Su a9c81b6f08 fix devcloud: copy router_proxy.sh into correct place 2012-10-21 00:01:47 -07:00
Edison Su 3cd9ba46fb fix devcloud: add router_proxy.sh 2012-10-21 00:01:47 -07:00
Edison Su c5ba6312e7 fix devcloud 2012-10-21 00:01:47 -07:00
Chip Childers 806d033fe3 CLOUDSTACK-330: Correct Citrix information to be Apache in several .py files
Signed-off-by: Chip Childers <chip.childers@gmail.com>
2012-10-12 12:18:56 -04:00
Wido den Hollander 82e57f8f40 Use /tmp as temporary location for injecting SSH keys into systemvm.iso
When starting the management server with 'sudo' the $HOME will be set to the user calling sudo.

This fixes CLOUDSTACK-218
2012-09-27 18:58:31 +02:00
Marcus Sorensen 915babd970 fix kvm traffic labels (guest traffic types on multiple networks don't
work)

Cloudstack seems to let you create guest traffic types on multiple
physical networks. However, when I try this with KVM I end up always
bridging to whatever device is used for guest.network.device. This pulls
the traffic label (NicTO.getName()) and uses that bridge to ensure that
we get on the correct physical network, rather than just always using
the guest.network.device.

This also changes the bridge naming scheme from cloudVirBr + vlanid to
br + physicalinterface + "-" + vlanid. This is because we should be able
to support the same vlan numbers per physical network, and the previous
bridge name would not support this and collide.

Signed-off-by: Edison Su <sudison@gmail.com>
2012-09-26 17:14:57 -07:00
Anthony Xu acaa22003d CLOUDSTACK-184: add createFileInDomr plugin 2012-09-24 16:11:04 -07:00
Edison Su e662790985 CLOUDSTACK-30: remove vhd-util binary, we need to build another rpm/deb for it. As it's only used by xenserver, so mgt server should not depend on it. We can document it, as an extra procedure when install mgt server 2012-09-18 17:47:22 -07:00
Edison Su d068a40fe8 t-templateid-to-bypass-db-access-during-cloud-instal 2012-09-17 11:27:38 -07:00
Manikanta Kattamuri cfc2b85651 Removing eclipse .classpath and .project files as they are configured to ant build and adding the entries into .gitignore to stop further comitting of the files
Signed-off-by: Chip Childers <chip.childers@gmail.com>
2012-09-13 14:18:14 -04:00
Hiroaki Kawai b3d4246a14 typo in cloud-install-sys-tmplt 2012-09-11 18:37:24 -07:00
anthony 541fec8b46 Bug 13734 : after upgrade, dhcp traffic is allowed for all VMs
reviewed-by: kelven
2012-09-07 17:31:11 -07:00
Anthony Xu b58123e075 CS-15921 : in 2.1 timeframe, -untagged string is appended to the end of instance name,
in cleanup_rules function, we need to convert chain name to vm name correclty
2012-09-07 17:25:41 -07:00
Anthony Xu 33fdcf1047 CS-16261:
egress_vmchain doesn't exist in 2.2.*, create it automatically after upgrade
2012-09-07 17:07:10 -07:00
Anthony Xu b52bd1fc5a The file scripts/storage/secondary/cloud-install-sys-tmplt had a syntax error,
provided-by : Marcus Sorensen
2012-09-07 16:36:38 -07:00
Edison Su b88033ff2a fix installation issue 2012-09-07 05:12:27 -07:00
Gavin Lee d3921139ed Patch from Gavin Lee: Change license to ASL2.0 in server and tools
Signed-off-by: Chip Childers <chip.childers@gmail.com>
2012-08-30 10:36:29 -04:00
Edison Su cefc5cbff3 bug CS-16172
Reviewed-by: chiradeep
2012-08-24 16:13:29 -07:00
anthony 2ea876dfd3 in basic zone, allow dhcp traffic by default 2012-08-15 13:11:58 -07:00
Alena Prokharchyk b61468d65c Merge branch 'master' into vpc
Conflicts:
	plugins/hypervisors/kvm/src/com/cloud/hypervisor/kvm/resource/LibvirtComputingResource.java
2012-08-11 18:27:18 -07:00
Edison Su 263216caa5 Adds CLVM as an option for primary storage. It copies most of the RBD bits, in most cases simply adding an 'else if' or similar. In the managesnapshot.sh we add the ability to manipulate snapshots for the CLVM volumes, as well as a few minor fixes like adjusting the usage for the -b option to reflect that it accepts four arguments (note that it already accepted four args, it just wasn't reflected in the usage).
RB: https://reviews.apache.org/r/6470/
Send-by: shadowsor@gmail.com
2012-08-10 13:33:06 -07:00
Alena Prokharchyk 5a72044dc7 Merge branch 'master' into vpc 2012-08-03 14:30:54 -07:00
Chip Childers 09bdd3b6c3 License header updates for the scripts folder. 2012-08-03 09:38:28 -04:00
Alena Prokharchyk 7706a9c32f Merge branch 'master' into vpc
Conflicts:
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/rules/RulesManagerImpl.java
2012-07-31 13:37:28 -07:00
Hugo Trippaers 10e4a5ae48 Disable IPv6 in XenServer if it is enabled. The cloud support pack apparently enables IPv6 support at the moment, but wihtout proper security. 2012-07-30 17:36:29 +02:00
Alena Prokharchyk a39fd61249 Merge branch 'master' into vpc
Conflicts:
	server/src/com/cloud/network/rules/RulesManagerImpl.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	server/src/com/cloud/vm/VirtualMachineGuru.java
2012-07-27 13:47:46 -07:00
Edison Su f497c7c031 Bug: HA takes a lot of time to migrate VMs (trigger HA) to another KVM
host if there are multiple storage pools in a cluster.

The issue is as follows:
1. When CloudStack detects that a host is not responding to ping
requests it'll send a fence command for this host to another host in the
cluster.
2. The agent takes a long time to respond to this check if the storage
is fenced. This is because the agent checks if the first host is writing
to its heartbeat file on all pools in the cluster. It is doing this in a
sequential manner on all storage pool.

Making a fix to get rid of sleep, wait during HA. The behavior is now
similar to Xenserver.

RB: https://reviews.apache.org/r/6133/
Send-by:devdeep.singh@citrix.com
2012-07-25 10:17:09 -07:00
Alena Prokharchyk 353423acec Merge branch 'master' into vpc
Conflicts:
	api/src/com/cloud/api/commands/ListFirewallRulesCmd.java
	api/src/com/cloud/api/response/FirewallResponse.java
	api/src/com/cloud/api/response/IPAddressResponse.java
	server/src/com/cloud/api/ApiDBUtils.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/dao/FirewallRulesDaoImpl.java
	server/src/com/cloud/network/dao/NetworkDaoImpl.java
	server/src/com/cloud/server/ManagementServerImpl.java
2012-07-06 12:04:10 -07:00
Sheng Yang 7349842c42 CS-15116: Add missing scripts for XCP server
Thank for the help from Wilhem Putz(wp@typoheads.at) to identify the issue.
2012-07-06 11:34:36 -07:00
Edison Su 27e9cdbece add console proxy support for devcloud 2012-07-03 23:38:39 -07:00
Sheng Yang 8d4079d477 CS-6840: Add hypervisor commands for site-to-site vpn
Conflicts:

	plugins/hypervisors/xen/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-07-02 16:28:44 -07:00
Alena Prokharchyk 1f01d923ca Merge branch 'master' into vpc 2012-06-28 17:44:08 -07:00
Alena Prokharchyk 634cd78baa Merge branch 'master' into vpc
Conflicts:
	api/src/com/cloud/api/ApiConstants.java
	api/src/com/cloud/api/BaseCmd.java
	api/src/com/cloud/api/ResponseGenerator.java
	api/src/com/cloud/api/commands/ListNetworksCmd.java
	api/src/com/cloud/api/response/NetworkResponse.java
	api/src/com/cloud/event/EventTypes.java
	api/src/com/cloud/network/NetworkService.java
	client/tomcatconf/commands.properties.in
	scripts/network/domr/getDomRVersion.sh
	scripts/network/domr/ipassoc.sh
	scripts/network/domr/l2tp_vpn.sh
	scripts/network/domr/networkUsage.sh
	scripts/network/domr/router_proxy.sh
	server/src/com/cloud/api/ApiDBUtils.java
	server/src/com/cloud/api/ApiResponseHelper.java
	server/src/com/cloud/configuration/DefaultComponentLibrary.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/dao/IPAddressDao.java
	server/src/com/cloud/network/dao/IPAddressDaoImpl.java
	setup/apidoc/gen_toc.py
	setup/db/create-schema.sql
	wscript
2012-06-28 17:41:40 -07:00
Edison Su 80e2a6faa0 add ASF license 2012-06-28 13:28:38 -07:00
Edison Su 5f6387e113 add clouddev 2012-06-27 23:28:34 -07:00
David Nalley d630fa8697 license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
frank 27265597bf make cloud-install-sys-tmplt work without db.properties file
this allows developer setup secondary storage from their development environment
2012-06-20 11:08:33 -07:00
Wido den Hollander bdec29b3dc Create iptable rules for all bridges assigned to a system VM
The default_network_rules_systemvm method in security_group.py only created the appropriate rules for
just one bridge.

This however leads to traffic not being forwarded to the virtual machine in the case of the system VMs
both (console & storage) having different bridges in basic networking.

This patch makes sure rules are generated for all target devices based on their source device/bridge

It however excludes the LinkLocalBridge since no filtering is needed on that bridge.
2012-06-19 12:20:22 +02:00
anthony 418cbe2e17 VPC : fixed get_domr_version 2012-06-15 14:33:43 -07:00
anthony a4d0f91cfe VPC : use routerProxy to call l2tpVpn
Conflicts:

	core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
2012-06-15 14:26:20 -07:00
anthony c75fe80125 VPC : use routerProxy to call networkUsage.sh
Conflicts:

	core/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
2012-06-15 14:25:21 -07:00
anthony 251a91f5b3 VCP : use routerProxy to call checkrouter script 2012-06-15 14:24:18 -07:00
anthony a08c9e7890 VPC : move acl.sh ipassoc.sh to /opt/cloud/bin/ 2012-06-15 14:24:09 -07:00
anthony 337c36d8b9 VPC: typo fix
Conflicts:

	scripts/vm/hypervisor/xenserver/xenserver56fp1/patch
2012-06-15 14:23:41 -07:00
anthony 8c1700a3a4 VPC : introduce router_proxy.sh, resource should use this as a proxy to call scripts inside domr
already did this for ipassoc and getDomRVersion
2012-06-15 14:22:49 -07:00
butanet 2c001bbe21 Fix variable name in createtmplt.sh 2012-05-28 14:18:47 -04:00
butanet f5eefc0493 Fix variable name in createtmplt.sh ($tmplfs -> $tmpltfs) 2012-05-28 14:13:37 -04:00
John Kinsella efe318336a CS-14955: security_group.py only creates ICMP iptables rules for ICMP type -1
Description:
Unindented 3 lines to update logic flow to execute iptables when
passed ICMP type is not -1.
2012-05-27 19:39:56 -04:00
anthony 8581d02ee8 CS-14946, check if it is linux bridge before call ovs 2012-05-23 19:06:35 -07:00
Salvatore Orlando c1539e4e42 CS-14902: Removing files needed for SDN feature from XS 5.6FP1 2012-05-21 15:56:42 +01:00
Nitin Mehta d77af1a96c bug CS-14941: Revert accidental chages to the create template script for KVM 2012-05-21 09:11:40 +05:30
Salvatore Orlando e72b61eccc CS-14900:
CS-14902: Fixing ovs-vif-flows.py for avoiding it kicks in with exp backoff timeouts if ovs is not running

Also removing unnecessary copies of the same script
2012-05-17 16:09:11 +01:00
Edison Su bafc3f2a5a CS-14521
Remove CLVM, due to license issue
2012-05-15 15:13:15 -07:00
anthony e9f339cd14 remove another vnc hack 2012-05-08 11:01:52 -07:00
anthony b7f5dd633d delete vnc hack after upgrade 2012-05-08 10:45:27 -07:00
Edison Su d913e3bdfb security group: exactly match bridge name 2012-05-04 13:56:34 -07:00
Salvatore Orlando b6c2c4c506 CS-14605: OVS cleanup
pep8 fixes to python scripts
removing superflous/unused code from python scripts
2012-04-25 11:32:01 +01:00
Salvatore Orlando 2340ebced3 Now using vnets instead of network id for creating networks
Fixed issues with vif scripts on 5.6FP1
Fixed ipv6 issue on 5.6FP1
Plus other various fixes and improvements

Starting to remove debug code
NOTE: Network is configured correctly but instances do not start. Possibly indefinite wait occuring on some commands
2012-04-23 22:33:18 +01:00
Salvatore Orlando b10ab6b2d0 Adding Missing file to source control 2012-04-23 22:32:52 +01:00
Salvatore Orlando 3eef46f8a9 Open vSwitch tunnel manager
Applying patch with new ovs-tunnel-manager on top of cloudstack oss-master
2012-04-23 22:32:52 +01:00
Salvatore Orlando 5568e95d4c Overwriting ovstunnel 2012-04-23 22:32:52 +01:00
Salvatore Orlando e2cc2c1f6e Fixing remaining issues with per-VIF flow script and removing version-specific scripts.
Now generating XSnetwork names using gre keys

Plus other minor corrections
2012-04-23 22:32:52 +01:00
Salvatore Orlando 8987499cda Now using vnets instead of network id for creating networks
Fixed issues with vif scripts on 5.6FP1
Fixed ipv6 issue on 5.6FP1
Plus other various fixes and improvements

Starting to remove debug code
NOTE: Network is configured correctly but instances do not start. Possibly indefinite wait occuring on some commands
2012-04-23 22:32:52 +01:00
Salvatore Orlando 8268635846 Adding Missing file to source control 2012-04-23 22:32:16 +01:00
Salvatore Orlando 9f321ffeac Open vSwitch tunnel manager
Applying patch with new ovs-tunnel-manager on top of cloudstack oss-master
2012-04-23 22:32:16 +01:00
Salvatore Orlando a1a615e018 Overwriting ovstunnel 2012-04-23 22:32:16 +01:00
Nitin Mehta 4434aa0d2d bug CS-10789: More changes for the imageformat, introdueced new column in db for the format, created scripts for doffernt hypervisors ...and the list goes on. 2012-04-23 13:44:34 +05:30
Nitin Mehta ac2175bdbc bug CS-10789: Adding volume sync and delete functionality. 2012-04-23 12:29:38 +05:30
Nitin Mehta 564cef8ddf More changes for uploadVolume. Create framework for upload volume progress communication between MS and SSVM. 2012-04-23 12:14:35 +05:30
Abhi 6f0890ea3a bug CS-12812: XCP has get_mtime missing from the utils, added it here 2012-04-20 10:43:01 +05:30
Rajesh Battala 327049b5c5 CS-14546: Fixed bug Unable to view console in System and Guest VMs and Added Upgrade script 2012-04-19 21:15:45 +05:30
anthony 88d6562dac typo in cloud-setup-bonding.sh 2012-04-13 15:19:49 -07:00
Rajesh Battala 537914ffae Xenserver Secure Console Proxy. Removing vnc hacks when adding xen host 2012-04-11 17:52:24 +05:30
frank 2f634c0913 Switch to Apache license 2012-04-03 04:50:05 -07:00
Edison Su a6d4a76647 bug 14498: in xenserver 6.0 and openvswitch enabled, reboot xenserver will lost link local bridge; the workaround is if the link local bridge is lost, create a new one; status 14498: resolved fixed; Reviewed-by: frank 2012-03-26 17:15:03 -07:00
Sheng Yang edcf95a6f0 Change KVM's delimiter from "," to "%"
In order not to confuse with commandline parameters
2012-03-13 15:59:09 -07:00
abhi a560ec3001 removing the minor version number for comparisions for Xenserver 6.0 2012-03-13 11:23:27 +05:30
anthony 3a4ee0d486 removed unused files 2012-02-27 13:59:09 -08:00
anthony 6d39e10b76 get fsimage from sp2 for XenServer 5.6 GA 2012-02-24 15:03:34 -08:00
anthony 9159de57fc bug 13603: in XenServer 6.0, qemu-dm-wrapper listens on local host by fault
status 13603: resolved fixed

reviewed-by: edison
2012-02-22 18:41:46 -08:00
Chiradeep Vittal 7008e5a46b bug 13734: allow dhcp requests and responses all the time 2012-02-15 15:34:48 -08:00
Chiradeep Vittal 3a3d096a5c it appears xs 6.0 allows iptables rules across the bridge without csp 2012-02-13 15:53:45 -08:00
kishan 606902ff09 Bug 11931: Add quotes to snapshot name and volume name. Fixed create template from snapshot also by adding quotes
Status 11931: resolved fixed
Reviewed-By: Nitin

Conflicts:

	scripts/storage/qcow2/createtmplt.sh
2012-02-08 17:24:17 +05:30
Edison Su 738a5927a8 quote the snapshot name 2012-01-31 16:23:34 -08:00
Chiradeep Vittal 08636d5802 bug 13060: check for resident vms as xapi will return vms running on other hosts in the cluster 2012-01-17 18:37:59 -08:00
frank 1a3a3f8e0d use /usr/lib/cloud/management/systemvm_mnt instead of /mnt/cloud/systemvm.
We should use home dir of user 'cloud', don't do any assumption of umask of /mnt,
it varies from distribution
2012-01-13 13:28:31 -08:00
Chiradeep Vittal af667d26b7 bug 13033: security rule prevents console access 2012-01-12 15:35:25 -08:00
anthony 5d54a3aef8 bug 13052: check if ebtables exists in can_bridge_firewall
status 13052: resolved fixed
2012-01-12 11:34:31 -08:00
frank 52610ffcb3 add copyright header to shell scripts 2012-01-11 18:41:53 -08:00
anthony 12b7fa60f0 fixed typo 2012-01-11 10:30:31 -08:00
anthony f114ddf471 propagate local_link_network 2012-01-10 19:48:55 -08:00
anthony 9be635367e bug 10363 : cleanup vhd in secondary storage if creating private template fails
status 10363 : resolved fixed

Conflicts:

	core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-01-10 16:45:07 -08:00
anthony fb8364ad0c bug 10363 : cleanup vhd in secondary storage if backsnapshot fails
Conflicts:

	core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
2012-01-10 15:51:13 -08:00
anthony 924953220b bug 10363 : cleanup vhd in secondary storage if copy_vhd_to_secondarystorage fails 2012-01-10 15:07:49 -08:00
anthony f964c4d227 bug 10363 : cleanup vhd in primary storage if download template to primary storage fails
Conflicts:

	core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
	scripts/vm/hypervisor/xenserver/vmops
2012-01-10 13:56:29 -08:00
anthony c25cb29f10 remove nfs.py patch 2012-01-10 13:56:29 -08:00
Sheng Yang 59981f71c1 bug 12883: Fix numerous NETWORK_STAT related rule in iptables
Also use script in the router for the execution.

status 12883: resolved fixed
2012-01-09 20:04:45 -08:00
Naredula Janardhana Reddy 6aa0560d37 bug 12917: security groups - icmp type/code validations. 2012-01-06 19:33:07 +05:30
Chiradeep Vittal 5aba3913bb bug 12854: arp requests can also be used to poison arp caches 2012-01-05 18:01:19 -08:00
Chiradeep Vittal f138d15efb bug 12854: arp and ip antispoof independent of the order of vm start 2012-01-05 18:01:10 -08:00
Chiradeep Vittal 24894e2354 bug 11302: dont allow stuff like BPDUS, don't allow vms to connect to hypervisor 2011-12-29 17:35:24 -08:00
Chiradeep Vittal 4718f194ef bug 12772: typo 2011-12-29 16:01:41 -08:00
Chiradeep Vittal 338aa3e2a8 accidental commit 2011-12-29 16:01:41 -08:00
Chiradeep Vittal a51ee064ee bug 11302: more efficient caching of keyword 2011-12-29 16:01:41 -08:00
Chiradeep Vittal c05903b2d0 bug 11302: support new CSP for SP2.
conditional check : --match-set vs --set
forgot to merge this in from 2.2.y
2011-12-29 16:01:40 -08:00
frank 363aea4aee Bug 12731 - Ebtable rules are blocking all traffic going out of VMs in basic zone
status 12731: resolved fixed

reviewed-by: edison
2011-12-22 15:04:15 -08:00
anthony c00d663df2 use soft mount for secondary storage 2011-12-21 20:31:40 -08:00
anthony 61eab674d2 bug 12328: XenServer 6.0 changes vnc-port path in xenstore
status 12328: resolved fixed
2011-12-21 12:00:27 -08:00
Edison Su c067763075 bug 12604: if there are actually snapshots creating on the volume, then don't move the snapshot
status 12604: resolved fixed
2011-12-20 15:12:31 -08:00
Chiradeep Vittal 5dfa0ed169 remove obsolete file 2011-12-19 10:56:52 -08:00
Chiradeep Vittal 2278477737 add stronger security to defend against attacks originating in the vm 2011-12-19 10:56:52 -08:00
Chiradeep Vittal 5393a44c56 bug 12290: improve antispoofing lgic
handle reboot within vm correctly
iptables -S missing in csp
2011-12-19 10:56:52 -08:00
frank 9c4f009c69 Bug 12241 - document all supported options in routing script: cloud-install-sys-tmplt
status 12241: resolved fixed
2011-12-15 14:49:16 -08:00
anthony 331bd6c103 SWIFT: add error handling code
add swift plugin for XenServer 6.0
2011-12-14 19:53:56 -08:00
Edison Su ee60039404 bug 8489: remove the leading /
status 8489: resolved fixed
2011-12-06 14:14:09 -08:00
kishan 489a1d5738 bug 12365: Read secret key from file for encryption type file. For web type use comman-line option -s.
status 12365 : resolved fixed
reviewed-by: Nitin
2011-12-06 14:52:57 +05:30
Chiradeep Vittal 797836723d bug 10804: add default dns provider 2011-12-05 16:56:31 -08:00
Chiradeep Vittal 89f13ad700 bug 10804 virtual router support for per-vm default network 2011-12-05 14:53:42 -08:00
kishan cdbf5b0db5 bug 12262: Updated jasypt jar path 2011-12-03 08:47:37 +05:30
kishan d64747a657 bug 12262: Added "-s" option. When encryption is used provide mgmt secret key using "-s" option.
status 12262 : resolved fixed
reviewed-by: Prasanna
2011-12-02 21:12:49 +05:30
Naredula Janardhana Reddy c7766ea6c8 bug 10617: kvm related changes. 2011-12-02 17:07:36 +05:30
Naredula Janardhana Reddy 0c1e21ab80 bug 10617: vmops related changes. 2011-12-01 19:32:57 +05:30
Naredula Janardhana Reddy 09905b641b bug 10617: merge code from branch bug10617. 2011-12-01 14:17:52 +05:30
frank 7eddef60fe Bug 11926 - Need parameter check before execution of cloud-install-sys-tmplt
make the check for mount point a litter earlier

status 11926: resolved fixed
2011-11-30 13:50:07 -08:00
Naredula Janardhana Reddy f1b99f4f07 Revert "bug 10617: merging code from branch bug10617"
This reverts commit 8bc33448b9220534ba0ddc6c642ffb1e69d5844e.

Conflicts:

	server/src/com/cloud/api/ApiResponseHelper.java
2011-11-11 20:23:26 +05:30
Naredula Janardhana Reddy 02adbd4bd3 bug 10617: merging code from branch bug10617 2011-11-10 15:23:48 +05:30
anthony 91aa145f5d Upgrade: no error for this statement 2011-11-04 20:39:39 -07:00
anthony de4d5f0397 Upgrade : script fix 2011-11-04 20:39:26 -07:00
anthony 548839e3bb bug 11903: create local link when host is connected
status 11903: resolved fixed
2011-11-04 20:39:05 -07:00
anthony 245cd32281 upgrade : fix script 2011-11-04 20:38:42 -07:00
anthony f30ee3fc91 Upgrade : eject CD 2011-11-04 20:38:15 -07:00
Edison Su 6841e265d3 bug 10330: finally merge Rommer's CLVM patch
status 10330: resolved fixed
2011-11-02 18:03:58 -07:00
anthony 1e86b5e1a6 script fix 2011-11-02 17:05:30 -07:00
anthony f41a9e8b23 propagate local link network 2011-11-02 17:05:05 -07:00
anthony f97b3e5c56 bug 11858: fake pv : use version in host parameter instead, fix XCP override
status 11858: resolved fixed

commit-by: Kevin Brooks

review-by: Anthony Xu
2011-11-01 19:51:06 -07:00
anthony 3067a9d2db Swift : add two new files 2011-10-21 14:26:20 -07:00
anthony c97010a160 BackupSnapshot to Swift 2011-10-18 18:11:09 -07:00
anthony 59b084a867 add swift client from 1.4.3 into SSVM 2011-10-13 15:52:58 -07:00
anthony 6710f09ab4 swift is written in python 2.6
make swift client work in python 2.4
changes:
1. md5 interface changed
2. urlparse interface changed
3. Queue interface changed
2011-10-13 12:07:09 -07:00
anthony 01d38fbb3e add swift client from 1.4.3 2011-10-13 11:47:41 -07:00
anthony 7ba15ce49b remove old swift client 2011-10-12 12:11:46 -07:00
Chiradeep Vittal 1c5adc7714 bug 11336: compression to allow number of cidrs to scale beyond 8k 2011-10-06 17:56:59 -07:00
Chiradeep Vittal 1b3372e1de bug 11625: separate out error paths to enable fine grained error handling and cleanup
status 11625: resolved fixed
2011-10-06 17:55:29 -07:00
Chiradeep Vittal 61fa7d8675 bug 11420: reduce duration of disruption 2011-10-06 17:55:21 -07:00
Sheng Yang 89e45bd671 bug 11130: Add GetDomRVersionCmd 2011-09-29 14:50:11 -07:00
kishan 8ffeddb020 bug 11547: Reset iptables counter when a public interface on domR is removed 2011-09-23 15:43:45 +05:30
anthony 9730160e63 typo 2011-09-14 20:39:57 -07:00
Sheng Yang 9317033a4f Add missing files for redundant router. 2011-09-14 16:25:56 -07:00
Sheng Yang 3549067d55 bug 11307: Add BumpUpPriorityCommand 2011-09-14 16:22:19 -07:00
Sheng Yang b987123daa bug 11307: Let CheckRouterAnswer() parse the return result 2011-09-14 16:21:33 -07:00
anthony d6cbd2b6bc bug 11275:
remove heartbeat entry for this Primary Storage, when put this Primary Storage into maintenance mode
create heartbeat entry for this Primary Storage, when cancal maintenance for this Primary Storage

status 11275: resolved fixed
2011-09-13 22:15:21 -07:00
kishan b7214e6202 bug 10626: Modified install sys tmpl script to get templateId from DB using db.properties
status 10626: resolved fixed
2011-09-14 01:08:07 +05:30
Chiradeep Vittal fae5e84699 if the xenserver host cannot do bridge firewalling do not attempt to retry the security rule updat
change some logs to debug level
2011-09-12 18:20:24 -07:00
Chiradeep Vittal 65fb83035f Enable monitoring over JMX
Add the ability to disable some vms from being scheduled

Add ability to trigger ruleset updates from JMX

added a few more dangerous JMX operations
2011-09-12 18:20:24 -07:00
Chiradeep Vittal 0aeb45fafc if sequence number increases but signature does not change, do not reprogram, but rewrite the rule log 2011-09-12 18:20:23 -07:00
Chiradeep Vittal d817f3c364 Revert "bug 10617: Added Egress rules to Security groups."
revert pending review

This reverts commit a19212703b9734ebd44ebf55cfdd81ebdc9d7fe4.
2011-09-12 14:45:58 -07:00
Chiradeep Vittal 53970c89dc Revert "bug 10617: blocking between security groups for egress rules fixed."
revert pending review

This reverts commit 7d30dfd79e3c4b01492f606333c26e36bcdc5d13.
2011-09-12 14:45:58 -07:00
Chiradeep Vittal e216686029 Revert "bug 10617: Intermediate checking"
revert pending review

This reverts commit 561b27565512d438db3d8896df6f97b644b0b498.
2011-09-12 14:45:58 -07:00
Naredula Janardhana Reddy f9b0962ad9 bug 10617: Intermediate checking
Changes :
         - Fixing API doc +response name + errorMessage
         - Adding seperate events to Egress rules
         - Egress rules Using the same database table as that of ingress with new column type.

   Pending Tasks:
         - db upgrade
         - database table rename from security_ingress_rule to generic name, renaming some of the jave class from ingress to generic name.
         - Retesting on kvm
2011-09-09 18:14:19 +05:30
Naredula Janardhana Reddy 10d2ca8d0a bug 10617: blocking between security groups for egress rules fixed. 2011-09-02 16:17:08 +05:30
Edison Su d18a1ddc28 fix the long time issue that sometimes libvirt reports volume missing 2011-09-02 01:01:27 -07:00
Edison Su 7621dea575 Fix the regression on security group cleanup:
In pre-2.2.10, the cleanup doens't work at all.
In 2.2.10, it works but make a mistake to delete all the rules for vmname ending with "-untagged"
2011-08-31 10:45:52 -07:00
Naredula Janardhana Reddy 854f81962f bug 10617: Added Egress rules to Security groups.
Description :
   API's:
     -  Two new api's authorizeSecurityGroupEgress,revokeSecurityGroupEgressCmd are added. These two API's are similer to ingress rule API's.
           - authorizeSecurityGroupEgress :Authorizes a particular egress rule for this security group . Usageof API is very similer to that of authorizeSecurityGroupIngress except that instead of source cidr  there will be destination cidr. By default like ingress, all the outgoing flows are blocked.
           - revokeSecurityGroupEgress : It is similer to revokeSecurityGroupIngress api, It removes the egress rule.
     -  listSecurityGroup API's response changed. It include's egress list apart from the existing ingress rules in the output of the API.

   Hypervisors :
      - It is implemented in Xen and KVM.

   Pending Tasks :  Blocking using destination security groups.

   Previous commits: c9fda641673df7701f44963ef27e1d488f121219 , 24e4e44b8f0712a37147a3777833de3f9e24829e
2011-08-30 16:28:35 +05:30
frank b3478c377e Full opensource 2011-08-23 19:52:19 -07:00
alena 8a7feb8ec1 Merge branch '2.2.y'
Conflicts:
	agent/src/com/cloud/agent/resource/computing/LibvirtComputingResource.java
	api/src/com/cloud/agent/api/routing/LoadBalancerConfigCommand.java
	api/src/com/cloud/agent/api/to/FirewallRuleTO.java
	api/src/com/cloud/agent/api/to/IpAddressTO.java
	api/src/com/cloud/agent/api/to/PortForwardingRuleTO.java
	api/src/com/cloud/api/ApiConstants.java
	api/src/com/cloud/api/BaseCmd.java
	api/src/com/cloud/api/ResponseGenerator.java
	api/src/com/cloud/api/commands/CreateFirewallRuleCmd.java
	api/src/com/cloud/api/commands/CreateIpForwardingRuleCmd.java
	api/src/com/cloud/api/commands/CreateLoadBalancerRuleCmd.java
	api/src/com/cloud/api/commands/CreatePortForwardingRuleCmd.java
	api/src/com/cloud/api/commands/DeleteLoadBalancerRuleCmd.java
	api/src/com/cloud/api/commands/ListCapabilitiesCmd.java
	api/src/com/cloud/api/commands/UpdateNetworkCmd.java
	api/src/com/cloud/api/response/CapabilitiesResponse.java
	api/src/com/cloud/network/Network.java
	api/src/com/cloud/network/NetworkService.java
	api/src/com/cloud/network/firewall/FirewallService.java
	api/src/com/cloud/network/lb/LoadBalancingRule.java
	api/src/com/cloud/network/lb/LoadBalancingRulesService.java
	api/src/com/cloud/network/rules/FirewallRule.java
	api/src/com/cloud/network/rules/RulesService.java
	api/src/com/cloud/offering/NetworkOffering.java
	client/tomcatconf/commands.properties.in
	cloud.spec
	core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
	core/src/com/cloud/hypervisor/xen/resource/CitrixHelper.java
	core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
	core/src/com/cloud/storage/template/DownloadManagerImpl.java
	core/src/com/cloud/vm/DomainRouterVO.java
	debian/cloud-deps.install
	patches/systemvm/debian/config/etc/init.d/cloud-early-config
	patches/systemvm/debian/config/root/ipassoc.sh
	patches/systemvm/debian/config/root/loadbalancer.sh
	scripts/vm/hypervisor/kvm/rundomrpre.sh
	scripts/vm/hypervisor/xenserver/vmops
	server/src/com/cloud/agent/manager/AgentAttache.java
	server/src/com/cloud/agent/manager/AgentManagerImpl.java
	server/src/com/cloud/agent/manager/AgentMonitor.java
	server/src/com/cloud/agent/manager/ClusteredAgentManagerImpl.java
	server/src/com/cloud/alert/ClusterAlertAdapter.java
	server/src/com/cloud/api/ApiResponseHelper.java
	server/src/com/cloud/api/ApiServer.java
	server/src/com/cloud/cluster/ClusterManagerImpl.java
	server/src/com/cloud/configuration/Config.java
	server/src/com/cloud/configuration/ConfigurationManager.java
	server/src/com/cloud/configuration/ConfigurationManagerImpl.java
	server/src/com/cloud/configuration/DefaultComponentLibrary.java
	server/src/com/cloud/deploy/FirstFitPlanner.java
	server/src/com/cloud/ha/HighAvailabilityManagerImpl.java
	server/src/com/cloud/host/dao/HostDaoImpl.java
	server/src/com/cloud/hypervisor/xen/discoverer/XcpServerDiscoverer.java
	server/src/com/cloud/network/LoadBalancerVO.java
	server/src/com/cloud/network/NetworkManager.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/dao/FirewallRulesDao.java
	server/src/com/cloud/network/dao/FirewallRulesDaoImpl.java
	server/src/com/cloud/network/element/DhcpElement.java
	server/src/com/cloud/network/element/VirtualRouterElement.java
	server/src/com/cloud/network/firewall/FirewallManagerImpl.java
	server/src/com/cloud/network/lb/LoadBalancingRulesManagerImpl.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManager.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
	server/src/com/cloud/network/rules/FirewallManager.java
	server/src/com/cloud/network/rules/FirewallRuleVO.java
	server/src/com/cloud/network/rules/PortForwardingRuleVO.java
	server/src/com/cloud/network/rules/RulesManagerImpl.java
	server/src/com/cloud/network/rules/StaticNatRuleImpl.java
	server/src/com/cloud/network/security/SecurityGroupListener.java
	server/src/com/cloud/network/security/SecurityGroupManagerImpl.java
	server/src/com/cloud/offerings/NetworkOfferingVO.java
	server/src/com/cloud/server/ConfigurationServerImpl.java
	server/src/com/cloud/server/ManagementServerImpl.java
	server/src/com/cloud/storage/StorageManager.java
	server/src/com/cloud/storage/StorageManagerImpl.java
	server/src/com/cloud/storage/dao/VMTemplateHostDaoImpl.java
	server/src/com/cloud/storage/download/DownloadMonitorImpl.java
	server/src/com/cloud/upgrade/DatabaseUpgradeChecker.java
	server/src/com/cloud/upgrade/dao/Upgrade228to229.java
	server/src/com/cloud/upgrade/dao/Upgrade229to2210.java
	server/src/com/cloud/user/AccountManagerImpl.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	server/src/com/cloud/vm/VirtualMachineManagerImpl.java
	server/src/com/cloud/vm/dao/DomainRouterDao.java
	server/src/com/cloud/vm/dao/DomainRouterDaoImpl.java
	setup/db/create-index-fk.sql
	setup/db/create-schema.sql
	setup/db/db/schema-222to224.sql
	setup/db/db/schema-227to228.sql
	setup/db/db/schema-228to229.sql
	setup/db/db/schema-229to2210.sql
	tools/testClient/README
	ui/scripts/cloud.core.instance.js
	utils/src/com/cloud/utils/SerialVersionUID.java
	utils/src/com/cloud/utils/db/ConnectionConcierge.java
	utils/src/com/cloud/utils/db/Merovingian2.java
	utils/src/com/cloud/utils/db/Transaction.java
	utils/src/com/cloud/utils/nio/Link.java
	utils/src/com/cloud/utils/nio/NioConnection.java
	utils/src/com/cloud/utils/time/InaccurateClock.java
2011-08-22 20:28:30 -07:00
Naredula Janardhana Reddy 4369b0ba96 bug 1067:
- covered basic impelementation for xen, need to test corner cases.
      - Not implemneted: kvm, vmware , listing of egress rules.
2011-08-19 11:10:16 +05:30
anthony e4162e5be6 fixed the script 2011-08-16 15:24:34 -07:00
anthony cd57e03e1d fixed the script 2011-08-16 15:23:53 -07:00
anthony 2cea330540 fixed script 2011-08-16 15:19:32 -07:00
anthony 3802426ae3 Revert " fixed script"
This reverts commit 90ac340d39ead1f31c11449671a1aec4fd6f27e2.
2011-08-16 15:18:20 -07:00
anthony 1806ca6364 fixed the script 2011-08-16 15:15:34 -07:00
anthony 20fd2723e9 fixed script 2011-08-16 15:14:54 -07:00
Sheng Yang 9d46de1543 Copy missed getRouterStatus.sh to XenServer FP1 host 2011-08-16 14:21:32 -07:00
Sheng Yang b73861061a Copy missed getRouterStatus.sh to XenServer FP1 host 2011-08-16 14:21:20 -07:00
anthony 6d29cba58c fixed script 2011-08-16 12:26:04 -07:00
Naredula Janardhana Reddy b9183c0840 bug 10561: merging code from 2.2.10 to master 2011-08-16 14:20:51 +05:30
anthony c2dd960405 VLAN patch for XenServer 5.6 2011-08-15 13:55:06 -07:00
anthony 4b3f57fd28 VLAN patch for XenServer 5.6 2011-08-15 13:54:43 -07:00
Chiradeep Vittal 51af0db682 mass merge 2.2.10 2011-08-11 16:41:52 -07:00
Chiradeep Vittal d54c3dab57 fix firewall script. FIXME: make this 2 different scripts 2011-08-11 11:26:45 -07:00
Naredula Janardhana Reddy 7c2395e684 bug 10561: fix: last entry in the firewall rules unable to delete 2011-08-11 19:01:36 +05:30
Naredula Janardhana Reddy 699b197a3c bug 10561: changes to the create/delete firewall rule backend script:
1) changes to the return value
    2) added a FIXME to one the leak.
2011-08-11 16:53:18 +05:30
frank 55ce0f39e8 sync ipmi changes from master 2011-08-10 16:24:18 -07:00
frank 1a1b8d7ad1 sync ipmi changes from master 2011-08-10 16:23:46 -07:00
Naredula Janardhana Reddy a9eb14c42e bug 10561: backend added for CreateFirewallRule and deleteFirewallRule 2011-08-10 17:06:42 +05:30
anthony e5e85d05e9 bug 10695: add XCP 1.0 support
status 10695: resolved fixed

Conflicts:

	core/src/com/cloud/hypervisor/xen/resource/CitrixHelper.java
2011-08-09 19:51:32 -07:00
anthony 33b3e02c17 bug 10695: add XCP 1.0 support
status 10695: resolved fixed
2011-08-09 19:49:12 -07:00
anthony 94861ecf4a For some NFS Servers, mount option tcp is required 2011-08-08 17:58:47 -07:00
anthony ef2802aaed For some NFS Servers, mount option tcp is required 2011-08-08 15:31:18 -07:00
Chiradeep Vittal 8277584b8a merge ELB / nectarine branch 2011-08-08 15:20:56 -07:00
Chiradeep Vittal 736b6cf98e properly clean up rules for nonexistent vms 2011-08-04 22:58:42 -07:00
Chiradeep Vittal 0c408d8da5 handle elb vm restart 2011-08-04 22:05:48 -07:00
alena 8d47c53735 Revert "bug 10435: removed vpn feature"
This reverts commit ea9e1b5d138950e8de49fce7ffdbb12a1c72c560.

Conflicts:

	api/src/com/cloud/api/ResponseGenerator.java
	scripts/vm/hypervisor/xenserver/vmops
	server/src/com/cloud/configuration/Config.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManager.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
2011-08-02 18:12:57 -07:00
Edison Su 0bc6026d6b fix description of addcluster api, and a typo in one script 2011-08-01 14:28:39 -07:00
anthony 7c420a071c use rmdir 2011-08-01 11:55:05 -07:00
anthony 767d4b104a use rmdir 2011-08-01 11:48:56 -07:00
Edison Su 8bcad6960c add rhel6.1 support 2011-07-29 20:05:01 -07:00
Edison Su 22483a9c13 add RHEL 6.1 support 2011-07-29 19:14:15 -07:00
Edison Su 31549b337e bug 10622: use /root/.ssh/id_rsa.cloud instead of ~/.ssh/id_rsa.cloud
status 10622: resolved fixed
2011-07-29 17:06:44 -07:00
Edison Su c3174664de after vm reboot, change the security group if needed 2011-07-29 15:28:16 -07:00
Chiradeep Vittal 29c88787e1 from eip feature:
1. fix ordering of ingress and egress rules so that vms are protected from other vms on the same host in all cases
2. remove dependency on cloud-guest
2011-07-28 16:08:51 -07:00
anthony 6620d39b7e fixed cloud-prepare-upgrade.sh 2011-07-28 15:07:26 -07:00
anthony b63bee2d9a bug 10197: add some scripts which is used in upgrade 2011-07-28 15:07:08 -07:00
anthony fc94196920 fixed cloud-prepare-upgrade.sh 2011-07-28 15:03:39 -07:00
Naredula Janardhana Reddy 15d57cef9f bug 10557: implemented the TODO - opening the stats port using iptable 2011-07-28 17:28:20 +05:30
Naredula Janardhana Reddy 2fc7be14de bug 10557: implemented the TODO - opening the stats port using iptable 2011-07-28 17:24:10 +05:30
Edison Su 5724a016c6 fix security group clean up on centos 5 2011-07-26 16:57:49 -07:00
anthony 5b168f30e0 bug 10197: add some scripts which is used in upgrade 2011-07-26 16:22:54 -07:00
anthony bad0f77659 use the safe way to delete secondary storage directory 2011-07-25 18:16:05 -07:00
anthony a7af9cdae2 use the safe way to delete secondary storage directory 2011-07-22 19:35:46 -07:00
anthony afbadbf223 use the safe way to delete secondary storage directory 2011-07-22 19:29:58 -07:00
anthony e666cf5e77 bug 10743: default local storage is ext in XenServer 6.0, add ext local storage support 2011-07-21 17:31:43 -07:00
anthony c152d1c33f support XenServer 6.0 beta 2011-07-20 16:47:48 -07:00
anthony 9f2eaca6cb Support XenServer 6.0 beta 2011-07-20 16:47:48 -07:00
anthony 7a47a5afcf introduce nfs.py and NFSSR.py from XenServer 6.0 beta 2011-07-20 16:47:48 -07:00
Sheng Yang 44d4113ae6 bug 10429: backport redundant router
Part 2

commit 797839360c65cd348d2eb20630521177ab0919de
    bug 9154: redundant virtual router

commit 8ff7f230204d4d3a7a4adee75523a9a84f4276fe
    bug 9154: Replace domain_router.is_master with domain_router.redundant_state in DB

commit 230b99e9e0b152648f1dd2a5eab6f22315b8e7b4
    bug 9154: Add redundant state to DomainRouterResponse

commit ccefb5ff5e83d713798a347c99bce1a0d04b4317
    bug 9154: Add router fault state report

commit 7a3090378f9785caecf741b70554f6ea17c41764
    bug 9154: Send alert if found two virtual routers in master state

commit 66831056e4bf27665871bccd24e6159071564847
    bug 9154: Code clean up

commit bf3f58a85741fa7118bd848a42d8b21baa4478d4
    bug 9154: Add isRedundantRouter to DomainRouterResponse
2011-07-18 18:30:02 -07:00
Sheng Yang 4bc8686513 bug 10429: Backport redundant virtual router
Part 1

This backport contained:

commit 52317c718c25111c2535657139b541db0c9d1e1f
    bug 9154: Initial check in for enabling redundant virtual router

commit 54199112055d754371bfb141168fb5538bf6d6ea
    Add host verification for CheckRouterCommand

commit cef978a228c90056ead9be10cbc4de74c2b8de76
    Fix CheckRouterAnswer's isMaster report

commit 4072f0a6991ac3b63601a1764fbe14188965f62f
    Some build fixes and code refactoring for redundant router

commit 4d3350b7cd8ee2706a9bace4437fc194e36c8dd5
    Redundant Router: Fix OVS

commit 6a228830e7c46d819fa0c3317e159e041337e887
    Fix findByNetwork()/findByNetworkAndPod()'s return

commit c627777b3d5bdbcd60db4032cebd349a5b1ecd83
    Redundant Router: Fix isVmAlive()

commit e1275d2514adc41f8744f5107d4069c38be195f1
    Only issue CheckRouterCommand to redundant routers

And all modification to the scripts till
commit 4e3942462ed3fde3a3d7011e95839e2128fba514
logging changes

in the master branch.
2011-07-18 18:29:56 -07:00
frank 244de00b65 Bug 9887 - baremetal: support for image operation (create template from guest disk)
Resolved fixed
2011-07-18 13:57:03 -07:00
Edison Su a3da10e9b8 bug 10622: use /root/.ssh/id_rsa.cloud instead of ~/.ssh/id_rsa.cloud
status 10622: resolved fixed
2011-07-13 17:49:43 -07:00
Chiradeep Vittal 7d95efb7c6 fix ipset problem introduced by 58e92bbe84 2011-07-10 12:44:15 -07:00
Edison Su 81475c256b fix user/meta data: if data is empty, return a blank file, not 404 2011-07-08 13:50:27 -07:00
Edison Su 45ea2b2ad6 cleanup ebtables rules if vm is manually deleted 2011-07-08 13:32:41 -07:00
Edison Su 8306bf7ee5 fix ebtable cleanup issue: on ubuntu, it's not got deleted if vm is stopped 2011-07-08 13:31:34 -07:00
Edison Su 04b15b9941 fix ebtable, which should only add a new DNAT rule for dhcp server 2011-07-08 13:02:38 -07:00
frank fa0373b6e9 use soft shutdown/reboot in IPMI 2011-07-07 17:06:19 -07:00
frank 3c1a375978 Bug 9887 - baremetal: support for image operation (create template from guest disk)
Resolved fixed
2011-07-07 15:34:42 -07:00
Edison Su 56bc4f27a9 fix user/meta data: if data is empty, return a blank file, not 404 2011-07-01 12:58:14 -07:00
alena 74f34a0e0c bug 10435: removed vpn feature
status 10435: resolved fixed
2011-06-24 09:18:46 -07:00
David Nalley 6bb0b490ca fixing some typos in error messages 2011-06-20 15:22:33 -04:00
David Nalley fb0dae2ce5 fixing some typos in error messages 2011-06-20 15:18:30 -04:00
Edison Su 1e944a2d86 cleanup ebtables rules if vm is manually deleted 2011-06-20 10:32:05 -04:00
Edison Su ad5162ef86 fix ebtable cleanup issue: on ubuntu, it's not got deleted if vm is stopped 2011-06-16 19:26:24 -04:00
Sheng Yang a492c07e4c bug 9154: redundant virtual router
Add CheckRouterCommand for XenServer

Now VMware/Xen/KVM all support redundant virtual router.
2011-06-14 15:45:29 -07:00
Edison Su 49550aff44 fix ebtable, which should only add a new DNAT rule for dhcp server 2011-06-10 11:39:43 -04:00
Sheng Yang 5db86e6c20 Fix CheckRouterAnswer's isMaster report
If we got invalid/unsuccessed answer from CheckRouterAnswer, set master to
false.

Also add missed scripts.
2011-06-07 14:47:46 -07:00
anthony 5e1bdce052 bug 10081: don't save iptable 2011-06-06 18:19:01 -07:00
anthony 072fd1b1c5 bug 10111: set hidden flag to 0 after copy template from secondary storage to primary storage
status 10111: resolved fixed
2011-06-01 17:44:09 -07:00
Alex Huang 2dbb8eb502 bug 9651: Make same VLAN work on two different nics 2011-06-01 17:07:44 -07:00
Edison Su 8312f1314b remove augtools 2011-05-26 23:19:53 -04:00
alena c2afcdec52 bug 9873: always add default security group to the SG list when deploy vm in 1) Basic zone 2) Advance zone using SG enabled network
status 9873: resolved fixed

Following fixes were made as a part of the checkin:

* When deploy user vm and SG doesn't exist in the DB, create it automatically.
* SecurityGroup enabled use vm start: if map to default group is not present in security_group_vm_map table, create one.
* Added "name" (securityGroupName) parameter back to deleteSecurityGroup/authorizeSecurityGroupIngress/deployVm. Mutually exclusive with security group id parameter.

Conflicts:

	api/src/com/cloud/api/commands/AuthorizeSecurityGroupIngressCmd.java
	api/src/com/cloud/api/commands/DeleteSecurityGroupCmd.java
	api/src/com/cloud/api/commands/DeployVMCmd.java
	server/src/com/cloud/api/ApiDBUtils.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
2011-05-17 15:08:13 -07:00
anthony 384f30101e fixed template download 2011-05-17 14:01:12 -07:00
Frank aad64a5170 Fix in XenServer, when do primarystorage downlaod command, mount secondary storage
as readonly. And umount with options -fl to avoid hang if at that time NFS server down
2011-05-16 13:50:45 -07:00
Edison Su 29c510de28 need to insert iptable rules into FORWARD chain instead of append, as on rhel6, there is a reject rule added at the end of FORWARD 2011-05-13 16:05:20 -04:00
Chiradeep Vittal 46e40cab3f ebtables not programmed in some cases 2011-05-13 14:41:37 -07:00
anthony bf54422b11 bug 9866:
It happens only when the template is not created by XenServer and the virtual disk size is not integer time of 2M.
    fixed in 2.2.4
    status 9866: resolved fixed
2011-05-12 18:28:56 -07:00
Chiradeep Vittal 88b453928c bug 9771: fix metadata url 2011-05-12 15:06:54 -07:00
Edison Su 47380dc20e fix add host 2011-05-12 15:03:15 -04:00
Frank fd24a1e240 Use static IP when PING provisioning 2011-05-06 19:44:01 -07:00
anthony 10c4c14ad5 swift integration checkin 2011-05-05 13:55:29 -07:00
Chiradeep Vittal 4ab68bd44a bug 9689: handle old style vm names 2011-05-04 14:21:49 -07:00
Chiradeep Vittal aecd64e51c bug 9092: consistent naming 2011-05-04 14:21:49 -07:00
Edison Su 58e034fa41 add License header back 2011-05-03 11:47:10 -04:00
David Nalley 74fcb0d06e bug:9702 - fixing ssh key path 2011-05-03 14:21:44 -04:00
Chiradeep Vittal 303e2a7481 Start of zonesfeature / mycloud/cloudkit 2011-05-03 10:40:17 -07:00
Edison Su 1139868af9 fix vm data permission issue, by ssh to domr, chmod to 644 2011-05-02 11:01:19 -04:00
anthony d2e68c2dab bug 9525: empty known_hosts at reconnect
status 9525: resolved fixed
2011-04-29 14:13:25 -07:00
Edison Su 7e8d02defb bug 8955: add umask 022 to make sure we can get read permission for user data
status 8955: resolved fixed
2011-04-27 10:28:23 -04:00
anthony 8271f034ce bug 9541: fix one snapshot DB migrate, one java check and one script typo
status 9541: resolved fixed
2011-04-22 12:57:16 -07:00
anthony 054f6b0199 bug 9472: when get vnc port for a vm, check if the port is really used by this vm for security
status 9472: resolved fixed
2011-04-15 12:47:12 -07:00
Edison Su d8ee7d9fc3 if storage network disconnected, reboot the host 2011-04-14 17:46:54 -04:00
Frank 92155522f2 Add license header to files 2011-04-14 11:23:14 -07:00
Frank 3968a3014b Bug 8208 - bare metal provisioning
mv prepare_ping.sh to prepare_dhcpd.sh
2011-04-13 16:42:55 -07:00
Frank 148a46f629 Bug 8208 - bare metal provisioning
remove PING binary from source
2011-04-12 16:38:34 -07:00
Chiradeep Vittal ae9180d33b bug 9330: add kvm / vmware system vm template definitions 2011-04-11 15:46:37 -07:00
Frank 65dda266f5 Bug 8208 - bare metal provisioning
user lower case for tftp boot file
2011-04-11 14:58:09 -07:00
Frank 105db3b15a Merge branch 'baremetal' to master
modifies:
	api/src/com/cloud/api/ApiConstants.java
	api/src/com/cloud/api/commands/AddHostCmd.java
	api/src/com/cloud/api/commands/CreatePodCmd.java
	api/src/com/cloud/api/commands/DeployVMCmd.java
	api/src/com/cloud/dc/Pod.java
	api/src/com/cloud/network/NetworkService.java
	server/src/com/cloud/agent/manager/AgentManagerImpl.java
	server/src/com/cloud/configuration/ConfigurationManagerImpl.java
	server/src/com/cloud/dc/HostPodVO.java
	server/src/com/cloud/network/NetworkManager.java
	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	setup/db/create-schema.sql
	utils/src/com/cloud/utils/SerialVersionUID.java
2011-04-11 14:21:41 -07:00
Frank 5819e8fee0 Bug 8208 - bare metal provisioning
Work with PING
2011-04-04 19:19:42 -07:00
Frank ab643851c5 Bug 8208 - bare metal provisioning
support dhcpd as external dhcp server
2011-04-02 19:42:27 -07:00
Edison Su 159f52c2ff bug 9242: add vlan dependence for ubuntu, and set name type to DEV_PLUS_VID_NO_PAD, before creating vlan
status 9242: resolved fixed
2011-03-31 19:11:15 -04:00
Frank a7ea3ecae3 Bug 8208 - bare metal provisioning
Better the prepare_linmin.sh
2011-03-24 17:01:25 -07:00
Frank cdaa1edfa5 Bug 8208 - bare metal provisioning
Set dhcp range of linmin DHCPD to empty, so it will not conflict with
our External DHCP
2011-03-24 16:50:23 -07:00
anthony 44678b60bc add VERSION into to scripts 2011-03-23 14:54:31 -07:00
Frank a414d33e12 Bug 8208 - bare metal provisioning
setup name server when prepare external dhcp server
2011-03-21 17:06:17 -07:00
Frank 02cd820645 Bug 8208 - bare metal provisioning
Ingore bootp and pxe boot request in external DHCP server
2011-03-16 17:00:55 -07:00
Frank 1a307faefd Bug 8208 - bare metal provisioning
fix wrong result comparsion in prepare_dnsmasq.sh
2011-03-16 10:15:55 -07:00
anthony 6a0530823b remove the hidden flag in template vhd-file 2011-03-15 16:53:58 -07:00
Frank e872996084 Bug 8208 - bare metal provisioning
get DHCP entry state from DHCP server
2011-03-11 14:09:23 -08:00
Frank 4324efea26 Bug 8208 - bare metal provisioning
able to get IP from external DHCP server
2011-03-11 14:09:23 -08:00
anthony bdcffa2b0d bug 8061: add forcely shutdown 2011-03-09 16:30:11 -08:00
Edison Su c4ac92af3f fix destroy snapshot 2011-03-09 10:20:05 -05:00
Frank 469280866d Bug 8208 - bare metal provisioning
able to add external DHCP server
2011-03-08 17:29:33 -08:00
anthony 5b1a421e62 bug 8712: prepare from snapshot db migration 2011-03-08 17:10:27 -08:00
Frank 6c819c1491 Merge branch 'bareMetal'
Conflicts:
	api/src/com/cloud/api/ApiConstants.java
	api/src/com/cloud/api/commands/DeployVMCmd.java
	api/src/com/cloud/offering/ServiceOffering.java
	api/src/com/cloud/vm/UserVmService.java
	client/tomcatconf/components.xml.in
	server/src/com/cloud/agent/manager/AgentManagerImpl.java
	server/src/com/cloud/configuration/DefaultComponentLibrary.java
	server/src/com/cloud/deploy/FirstFitPlanner.java
	server/src/com/cloud/service/ServiceOfferingVO.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	server/src/com/cloud/vm/VirtualMachineManagerImpl.java
2011-03-08 14:18:11 -08:00
anthony 0c2a639a2d bug 6772: use vhd-util to coalesce snapshots into primary storage
status 6772: resolved fixed
2011-03-07 19:47:29 -08:00
anthony b8e03aca4c script fix 2011-03-07 19:47:29 -08:00
anthony a9c36d7b79 use new vhd-util for xenserver 2011-03-07 19:47:29 -08:00
anthony e01ca05208 copy_vhd_from_secondarystorage implement coalesce 2011-03-07 19:47:29 -08:00
Edison Su 9ad5139fda fix delete security group rule 2011-03-03 13:44:48 -05:00
anthony 5cc7745d9f never set lvm volume unavailable, there may be a conflict with XenServer GC 2011-03-02 19:23:21 -08:00
Edison Su c80335c9df bug 8783: user vm fs is crashed, use O_DIRECT instead of O_DSYNC/O_SYNC in qemu, aka cache=none. Hope we can reduce the possibility of guest vm crashed.
status 8783: resolved fixed
2011-03-01 16:38:23 -05:00
Edison Su d7b7d6bc26 bug 8771: multitenancy on same host in security group
status 8711: resolved fixed
2011-03-01 16:38:06 -05:00
Chiradeep Vittal 697b4f60db bug 8380: use instance name status 8380: resolved fixed 2011-03-01 14:07:30 -08:00
Frank 35b7c26689 Bug 8208 - bare metal provisioning
able to start, stop, reboot, destroy VM
2011-03-01 11:40:40 -08:00
Edison Su a7c6b9f28e fix security group rules 2011-02-28 12:16:40 -05:00
Edison Su 0e90ede56a don't break basic zone mode 2011-02-28 12:16:40 -05:00
Edison Su 2705adb3b1 security group is per bridge 2011-02-28 12:16:40 -05:00
Frank cd676f481d Bug 8208 - bare metal provisioning
Successfully add start entry into LinMin PXE server
2011-02-25 21:08:13 -08:00
Edison Su adbd20ca5a bug 8655: add security group for direct tagged network 2011-02-23 15:53:14 -05:00
Edison Su 0c8b86fc56 add multiple nics support for security group 2011-02-23 15:52:04 -05:00
Edison Su 37cb0ae2c9 add security group for direct tagged vlan 2011-02-23 15:52:04 -05:00
Frank b313b7c852 Add bare metal stuff to addHost command
add ipmi.py
2011-02-22 19:07:07 -08:00
Frank 77fadf5c7f Revert 61a414fb8f
don't dynamically inject premium stuff
2011-02-22 14:39:02 -08:00
Frank 61a414fb8f Inject permium stuff into systemvm.iso when managment server start 2011-02-20 16:13:30 -08:00
anthony 17f5d55459 fix typo 2011-02-18 13:07:57 -08:00
Chiradeep Vittal 10dc1c75d8 bug 8370: pass in original params when calling delete during add
status 8370: resolved fixed
2011-02-08 16:41:27 -08:00
Chiradeep Vittal 711c4eeaae bug 8209,8370,8459: cleanup scripting 2011-02-08 12:10:07 -08:00
anthony 54802c6d49 typo fix 2011-02-07 15:01:30 -08:00
anthony 7a8fcdb611 support lvmohba on copy_from/to_secondary 2011-02-07 14:44:34 -08:00
Kevin Kluge ee3bb01a11 cloud stack to CloudStack 2011-02-05 22:30:06 -08:00
Chiradeep Vittal 4f1342a4dd bug 8380: default chains weren't getting deleted 2011-02-04 12:04:53 -08:00
anthony c26833fb8a remove systemvm-premium.iso 2011-02-03 15:33:19 -08:00
Chiradeep Vittal 58e92bbe84 bug 8347: skip ebtables if kernel doesn't support it 2011-02-03 11:57:31 -08:00
Chiradeep Vittal ca057a43dd bug 8347: skip ebtables if kernel doesn't support it 2011-02-03 11:53:25 -08:00
anthony 294e41392e Console proxy is back 2011-02-03 10:57:19 -08:00
anthony b9e32cceb9 script may return stdout from command, need to add another # to seperate it 2011-02-02 16:29:11 -08:00
anthony 36778f4e3c bug 8291: get physical vdi size before dd
status 8291: resolved fixed
2011-02-02 14:13:59 -08:00
Chiradeep Vittal 6b8024ffaa bug 8302: dont hardcode ebtables path
status 8302: resolved fixed
2011-02-02 12:56:46 -08:00
Chiradeep Vittal 0be687dc09 bug 8302: dont hardcode ebtables path
status 8302: resolved fixed
2011-02-02 12:56:46 -08:00
Frank 735388ed79 Bug 8312 - Too high (10GB) of a free disk requirement for system VM templates
status: resloved fixed
2011-02-01 17:33:34 -08:00
Frank 9ca46b5b56 umount /mnt/cloud/systemvm if injectkey.sh failed or normal exit 2011-02-01 17:21:24 -08:00
Frank b6fc6341fd Bug 8303 - Cant add xen hosts, due to ssh key permission setup failure
status 8303: resloved fixed
2011-02-01 12:49:15 -08:00
Frank 3486995ae7 use sudo when mount systemvm.iso in injectkeys.sh 2011-01-31 12:51:21 -08:00
Frank 4d2d820634 fix injectkeys.sh -- pass systemvm.iso path to scripts 2011-01-31 12:19:32 -08:00
anthony 7ec201bc69 bug 5405: version file is not needed
status 5405: resolved fixed
2011-01-28 20:06:54 -08:00
anthony d838411957 remove unused xen scripts 2011-01-28 19:22:12 -08:00
anthony 19e7387702 build fix 2011-01-28 19:19:53 -08:00
will 153ec6b561 Initial Japanese language support - This one really requires another lookover. 2011-01-28 19:12:33 -08:00
anthony 9e63416da3 merge setupxenserver 2011-01-28 18:58:50 -08:00
Frank ec98a539b4 merge premium xenserver scripts to oss 2011-01-28 17:42:27 -08:00
Chiradeep Vittal 757bd0b5e4 bug 8254: point save password to right location 2011-01-28 16:01:52 -08:00
Chiradeep Vittal 5199167840 bug 8199: always update the keypairs on disk to account for multiple management servers 2011-01-28 13:09:11 -08:00
Chiradeep Vittal cc0ed77fee bug 8199: always update the keypairs on disk to account for multiple management servers 2011-01-28 12:24:22 -08:00
Chiradeep Vittal fd081dc5e7 Bug 8199: only inject if needed 2011-01-28 12:24:21 -08:00
Chiradeep Vittal 8a1ca01f44 Bug 8199: insert generated private key where it is expected 2011-01-28 12:24:20 -08:00
Chiradeep Vittal daa8439c00 Bug 8199: move private key into a more logical place 2011-01-28 12:24:19 -08:00
Chiradeep Vittal 09145efc41 Bug 8199: inject ssh public key into systemvm iso file 2011-01-28 12:24:18 -08:00
Frank 276e37115b open vswitch - Implement gre tunnel based network that doesn't use vlan
it allows cross zone communication and no 4096 limitation introduced by vlan
2011-01-21 17:32:02 -08:00
Edison Su 4b355ca301 bug 8118: add security group back
status 8118: resolved fixed
2011-01-22 04:04:52 -05:00
Chiradeep Vittal 34dc0695c2 Cleanup some scripts 2011-01-19 10:08:30 -08:00
Chiradeep Vittal 37598f182c bug 3981: Add more logs for long running operations, only for systemvm initial install
status 3981: resolved fixed
2011-01-18 17:21:05 -08:00
Chiradeep Vittal 8ca5028430 bug 3981: Add more logs for long running operations 2011-01-18 17:21:05 -08:00
Chiradeep Vittal 6a66fc58c2 bug 4390: check for 10G space in NFS mount and local
status 4390: resolved fixed
2011-01-18 14:29:09 -08:00
Chiradeep Vittal f1880942c3 bug 7288: report errors and bail
status 7288 resolved fixed
2011-01-18 14:29:09 -08:00
Frank e6b0346270 bug 7722: open vswitch -
1. extend gre tunnel creating timeout to 30 secs
2. don't del drop flow since we don't delete gre tunnel
2011-01-14 17:11:37 -08:00
Frank 39f75887b1 bug 7722: open vswitch -
1. add more readable log when tunnel create failed
2. correct drop flow when port number more than 10

other fixs:
return false when vm is null in checkSessionPermision
this avoid null pointer Exception
2011-01-14 13:47:50 -08:00
Frank 9e1c4ba779 bug 7722: open vswitch - set noflood flag to gre port 2011-01-13 19:52:03 -08:00
Chiradeep Vittal dd7f8625cc bug 7380: SNAT rules when there are multiple public interfaces
bug 6854: port from 2.1.x
2011-01-13 16:59:35 -08:00
Chiradeep Vittal 8ba1b2d33a bug 7380: SNAT rules when there are multiple public interfaces 2011-01-13 15:49:23 -08:00
Frank 488dd424aa bug 7722: open vswitch -
fix a race condition, create tunnel sync
correct drop flow, this fix a flooding case which may cause openvswitch hang in kernel
2011-01-13 13:53:35 -08:00
Frank c6683c2eab bug 7722: open vswitch -
refine ovs plugin, create a separate plugin instead of messing with vmops
refine gre tunnel, maintains tunnel in database instead of plugin
fix an arp issue cause by overlap vlan range
2011-01-11 02:55:36 -08:00
Frank c07d1be1aa bug 7722: open vswitch - fix issue that flows un-delete when VM stop 2011-01-10 14:34:31 -08:00
Frank a964494332 bug 7722: open vswitch - align some data type with master branch 2011-01-08 17:31:00 -08:00
Frank e9959d32a9 bug 7722: open vswitch - handle router when schedule a work 2011-01-08 16:28:47 -08:00
Frank ec643c7e59 bug 7722: open vswitch - refine code; add normal flow makes vswitch work as
normal L2/L3, otherwise the output packet cannot find right output port
2011-01-08 16:28:47 -08:00
Frank 6f9f8b145b bug 7722: open vswitch - complete 2011-01-08 16:28:47 -08:00
Frank 9d2916ffcc it works 2011-01-08 16:28:47 -08:00
Frank c94b6acadf bug 7722: open vswitch - works at VM start time, need fullsync() and flow clean in next 2011-01-08 16:22:59 -08:00
Frank 5c01c42ba7 fix bug 7722, code complete basic architecture 2011-01-08 16:20:39 -08:00
Chiradeep Vittal c6b027310d Merge in various security groups fixes from 2.1.x 2011-01-07 15:55:17 -08:00
anthony ad305ff6ac reuse session passed to plugin 2011-01-05 19:30:25 -08:00
anthony 791e14bb5f add more output for cloud-setup-bonding.sh 2011-01-05 19:12:39 -08:00
anthony b4dad6e9cc make the output more readable 2011-01-05 19:02:49 -08:00
anthony b732208c23 change file name 2011-01-04 10:39:05 -08:00
anthony 9249ee199f add setupBonding script 2011-01-03 19:22:07 -08:00
Edison Su c12526d4e0 %s/xen/xenserver 2011-01-04 09:42:11 -05:00
edison 3a143577b9 bug 7659: fix the race condition that agent inside systemvm connecting to mgt server at the head of startcommand returning to mgt server, then got a NPE. and fix bugs in security group of KVM
status 7659: resolved fixed
2010-12-28 15:51:28 -08:00
anthony bcc327cad1 correct path in patch file 2010-12-21 13:38:40 -08:00
edison eebb1021c1 fix security bug for kvm 2010-12-20 16:58:02 -08:00
edison ae4bd0fb70 fix a security group bug: restart mgt server or reconnect xenserver will destroy existing security group, then you can't ping user vm any more 2010-12-20 16:58:02 -08:00
anthony 2be0b45297 support xenserver 5.6 fp1 in oss 2010-12-20 14:18:10 -08:00
anthony baa6666897 create xenserver 5.6 patch file 2010-12-17 20:21:28 -08:00
anthony 44a8fdf918 fixed mount issue 2010-12-17 20:07:09 -08:00
anthony a8a6419bf4 remove scsiutil.py 2010-12-17 16:18:34 -08:00
anthony d35fbad6f5 get 5.6 NFSSR.py 2010-12-17 16:07:37 -08:00
anthony f1bdebb628 remove LUNperVDI.py 2010-12-17 16:02:11 -08:00
anthony 6ff038a9c3 delete ISCSISR.py 2010-12-17 15:53:43 -08:00
anthony c6633f9095 delete cleanup.py 2010-12-17 15:41:47 -08:00