Commit Graph

82 Commits

Author SHA1 Message Date
Daan Hoogland 8db506b536 Updating pom.xml version numbers for release 4.4.1
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-10-14 23:16:38 +02:00
Daan Hoogland 4d065b9a3a CLOUDSTACK-7184: xenheartbeat gets passed timeout and interval 2014-09-16 12:25:07 +02:00
Fred Clift 54e9a92d24 make virtual router /latest/.htaccess file be static - no longer dynamically generate it, remove code that managed the file previously
Signed-off-by: Sebastien Goasguen <runseb@gmail.com>
2014-09-04 04:24:16 -04:00
Wido den Hollander 4f494f708b CLOUDSTACK-7405: Make the trailing slash conditional for meta-data requests
This should fix the cloud-init issues described in this issue.
2014-08-25 14:31:58 +02:00
Joris van Lieshout c4d1bf7f24 sysctl improvements. 1. ip_nonlocal_bind for smooth transition in case of a keepalived failover. 2. panic settings so that a vm dies in a way that ACS understands it's down. 3. also up the nf_conntrack limits.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 45deade1df)

Conflicts:
	systemvm/patches/debian/config/etc/sysctl.conf
2014-08-14 14:00:23 +02:00
Sheng Yang 446899d887 CLOUDSTACK-6989: Add 3 strikes rule for RvR freezing detection
Sometime in VR ntpd would move time backward to keep sync with NTP server, which
can result in false alarm of keepalived monitering process.

This patch adds 3 strikes for keepalived process dead detection to avoid falsely
shutdown keepalived process due to time adjustment for only once.

(cherry picked from commit a6381f5809)
2014-07-28 16:02:44 +02:00
Daan Hoogland c9383c441e Updating pom.xml version numbers for release 4.4.1-SNAPSHOT
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-07-23 16:55:31 +02:00
Jayapal 7703b2fab3 CLOUDSTACK-7092: Disabled icmp redirects in VR
(cherry picked from commit e0d4af5062)
2014-07-15 22:13:32 +02:00
Jayapal d5a92454fd CLOUDSTACK-7028: Fixed adding route for additional public nic on fail over
(cherry picked from commit e336796cd5)
2014-07-01 14:36:27 +02:00
Jayapal d4a903fd6e CLOUDSTACK-6997: Increase proc ip_conntrack_max
(cherry picked from commit 004d616322)
2014-06-30 19:52:42 +02:00
Sheng Yang 8db1b21cc8 CLOUDSTACK-3540: Fix edithosts.sh on matching tag
(cherry picked from commit 46f2b61374)
2014-06-29 11:15:04 +02:00
Sheng Yang 1369a0dacb CLOUDSTACK-6908: Enable IPv6 in sysctl when only necessary
This new way would only enable IPv6 when VR is created in IPv6 shared network.
Otherwise IPv6 sysctl options remain disable.

(cherry picked from commit 60e4629323)
2014-06-14 02:31:55 +02:00
Joris van Lieshout f26b6d0a78 Cosmetic fixed. three in total. 1. Only run hv_kvp_daemon if it exists. 2. add the -f argument to the rm to make is silent if it doesn't exist. 3. by using log_action_msg instead of log_action_begin_msg the screen output looks way better.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 66816827cb)
2014-06-12 14:58:24 +02:00
Joris van Lieshout 99aa7a096a xenstore-utils on debian wheezy does not have /usr/sbin/xenstore so these commands file. It does have xenstore-write and xenstore-rm so by adding a - this is fixed easily.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 2e83baaca2)
(cherry picked from commit ed330d4dcd)
2014-06-10 16:29:01 +02:00
Joris van Lieshout 8ff5ca0b2f If for some reason dnsmasq.log does not exist anymore logrotate will create it with nobody as owner. This will prevent dnsmasq deamon from logging to that file.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit c54ce3cafb)
(cherry picked from commit 94bb5c29b2)
2014-06-10 16:28:51 +02:00
Daan Hoogland 4262080ba4 rats
(cherry picked from commit b85dd956f8)

(cherry picked from commit 5eb0265349)
2014-06-10 16:28:41 +02:00
Joris van Lieshout 3394d3c4f5 blacklist pcspkr as cosmetic improvement. aesni_intel blacklisting was not working because the include only works if the file ends with .conf.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 11f532bbec)
(cherry picked from commit f94ff4ad04)
2014-06-10 16:28:34 +02:00
Jayapal c83e90b008 CLOUDSTACK-6328: added license header and removed white space 2014-05-27 11:26:56 +02:00
Saurav Lahiri d298546ccc CLOUDSTACK-6328: run.sh check if an existing java process is running, before spawining new ones
Signed-off-by: Jayapal <jayapal@apache.org>
2014-05-27 10:42:23 +02:00
Joris van Lieshout 8326428bb8 A slightly more reliable way of extracting the device name. Thanks John.
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-05-20 12:33:48 +02:00
Joris van Lieshout 1c88ea51e5 releasing dhcp leases on vpcs failes because the network tier of the tennant aren't behinbd eth0. Here we make interface selection dynamic.
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-05-20 12:33:44 +02:00
Jayapal c4ae789e8b CLOUDSTACK-6714: monitor script echo service command is added with quotes 2014-05-20 10:24:18 +02:00
Jayapal adcc21ef3b Fixed vpc private gateway backend issues 2014-05-15 20:09:26 +02:00
Sheng Yang d00d28105e CLOUDSTACK-6241: Fix default route for IPv6 network when IPv4 not used
(cherry picked from commit e406adc081)
2014-05-14 09:02:40 +02:00
Nitin Mehta 2f96d430c8 CLOUDSTACK-6499:
Made changes so that uploading custom certificate works for ssvm.
    1. Reboot ssvm only when private key is passed meaning the server cert is passed. This is because while uploading the server cert is the last to be uploaded. And we want to propagate the entire chain once uploading is done.
    2. Change the SecStorageSetupCommand sent to ssvm so that it also carries the root cert apart from having the chain and the server cert and key.
    3. Change ssvm agent code to be able to configure root cert to the java key store.
    4. Change ssvm configure ssl script to insert the chain certs correctly.
    5. Fix order of chain certificates for apache webserver in SSVM
    6. Remove double encoding and decoding for uploadCustomCertificate API from UI and server code respectively, so that API call without UI works fine
    7. Java 1.7 - disable using SNI since copyTemplate doesnt work for SSL.
2014-04-25 22:03:46 +02:00
Sanjay Tripathi 8b56182e0f CLOUDSTACK-6494: Typing a pipe '|' character in VM console returns a question mark and pipe '?|'. 2014-04-25 21:44:37 +02:00
Sheng Yang dcb0db6084 CLOUDSTACK-6434: Make RvR advert_int configurable
In some network environment, 1*3 seconds by default make RvR setup too
sensitive. A configurable parameter would be better for fitting different
network environments.
2014-04-16 20:15:56 -07:00
Sheng Yang 94a146a43e CLOUDSTACK-6432: Blocking DHCP server to service DNS outside network
This would cover only DHCP only network since in basic and shared network, the
private IP used by VR and network may expose to outside.
2014-04-16 19:12:59 -07:00
Marcus Sorensen b89765ab19 Ensure that min_free_kbytes in secstorage vm is set such that heavy nfs load will not cause page allocation failures 2014-04-14 00:02:22 -06:00
Harikrishna Patnala 68c80e28c0 CLOUDSTACK-6253: Optimizing VR alerts getting algorithm In addition to this a new configuration parameter is added router.alerts.check.interval defaulted to 30minutes to check for alerts in Virtual Router 2014-04-09 18:11:24 +05:30
Marcus Sorensen df4a21ae3d add conntrackd logrotate for systemvms, dont start conntrackd on logrotate if it isnt running 2014-04-05 00:34:09 -06:00
Sheng Yang f16dc3fd9f CLOUDSTACK-6285: Fix savepassword.sh script for clear out old entries 2014-03-25 15:56:38 -07:00
Harikrishna Patnala f7337527cf CLOUDSTACK-6090: Virtual Router Service Failure Alerting
Signed-off-by: Koushik Das <koushik@apache.org>
2014-03-14 15:14:15 +05:30
Sheng Yang 8937434fce CLOUDSTACK-5986: Fix dnsmasq lease for VPC 2014-03-11 16:14:33 -07:00
Rajesh Battala 540d020aa5 CLOUDSTACK-6179 Execute VR commands on Virtual Resource when commands received to Hyper-V 2014-03-11 13:10:13 +05:30
Marcus Sorensen a4d3ec476f CLOUDSTACK-6220: Take 2, Fix cloudstack init scripts so that they
don't use fully qualified path as script name. Fix for
    commit 9dd57c22b0
2014-03-10 16:11:52 -06:00
Marcus Sorensen d033ca486b CLOUDSTACK-6220: Fix cloudstack init scripts so that they
don't use fully qualified path as script name. Fix for
commit 9dd57c22b0
2014-03-10 15:34:55 -06:00
John Kinsella 09c375379d CLOUDSTACK-6204: removing realhostip dependency
Moving default transport for console proxy, SSVM to http.

See
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Realhost+IP+changes
for more info.

jlk ported Amogh's patch for 4.3 to master - code base is different
enough that patch has multiple issues.

Author: Amogh Vasekar <Amogh Vasekar <amogh.vasekar@citrix.com>
Signed-off-by: John Kinsella <jlk@stratosec.co> 1394398017 -0700
2014-03-09 13:46:57 -07:00
Sheng Yang ccea5703df CLOUDSTACK-6047: Add testing for VR aggregation commands 2014-03-06 16:22:23 -08:00
Sheng Yang 60dc25450a CLOUDSTACK-6047: Introduce Aggregated commands queue to VR 2014-03-06 16:22:01 -08:00
Joris van Lieshout 986813d973 Prevent DHCPACK for DHCPINFORM in the DHCP server
The orignal "dhcp-range=xxx,static" would only prohibit DHCPREQUEST from unknown
hosts, but not DHCPINFORM which can request routing information. This caused
trouble for some bridged networks outside CloudStack.

This patch would fix the issue, prevent dnsmasq from acking any unknown request.

Signed-off-by: Sheng Yang <sheng.yang@citrix.com>
2014-02-25 14:55:24 -08:00
Sheng Yang c0ed0b7819 CLOUDSTACK-6047: Make VR LB script accept a file name
Rather than default filename everytime since in aggregated commands the file
would be overrided if the filename is same.
2014-02-21 18:26:42 -08:00
John Kinsella 9dd57c22b0 CLOUDSTACK-6129: removing hard-coded script names
Replacing whatami with $0 which is how UNIX shell scripts should get the
script's name.

BUG-ID: CLOUDSTACK-6129
Bugfix-for:
Reviewed-by:
Reported-by:
Signed-off-by: John Kinsella <jlk@stratosec.co> 1392660036 -0800
2014-02-17 10:00:36 -08:00
Jayapal 11c5574b05 CLOUDSTACK-5966 enable/disable global setting for service monitor in VR 2014-02-11 15:35:02 +05:30
Marcus Sorensen c39ec1eb8f CLOUDSTACK-6062: nic device ids don't always correspond to
'eth' device numbers, but vpc scripts require it. Now we match
based on mac.
2014-02-07 14:59:40 -07:00
Sheng Yang 66989a9364 CLOUDSTACK-6018: Increase dnsmasq dhcp-lease-max to 2100
Would able to accomodate one /21 network then.
2014-02-03 14:52:42 -08:00
Koushik Das f2f605dfda CLOUDSTACK-5993: Cloud agent fails to start on 32-bit system vms (cpvm and ssvm) created with 4GB RAM offering
Capped the max heap size of the JVM at 2600M for 32-bit system VMs. For 64-bit, existing logic works fine.
2014-01-31 10:39:30 +05:30
Sheng Yang 121d88743a CLOUDSTACK-5986: Make dnsmasq handle dnsmasq.leases when dhcp_release is available
The original issue has been exposed due to CloudStack VR would modify the
dnsmasq.leases, thus make it unsync with dnsmasq's memory lease.

Make the modification to let dnsmasq handle the lease file if dhcp_release is
available.
2014-01-29 18:02:11 -08:00
Rajesh Battala 7ac48934f7 CLOUDSTACK-5821 systemvmiso is locked by systevmvm in hyperv 2014-01-28 07:03:08 +05:30
Rajesh Battala 807dc09138 CLOUDSTACK-5561 Support of multiple public vlans on VR running in HyperV 2014-01-28 07:03:08 +05:30