4eedfe53fc
CLOUDSTACK-2823: pass cmdline info to system vms for 30 times
2014-12-08 15:45:29 +01:00
4722fa3de9
Merge branch '4.5'
...
Conflicts:
client/WEB-INF/classes/resources/messages_ja_JP.properties
client/WEB-INF/classes/resources/messages_zh_CN.properties
engine/orchestration/src/com/cloud/vm/VirtualMachineManagerImpl.java
engine/schema/src/com/cloud/upgrade/DatabaseUpgradeChecker.java
engine/schema/src/com/cloud/upgrade/dao/Upgrade442to450.java
engine/storage/volume/src/org/apache/cloudstack/storage/volume/VolumeServiceImpl.java
plugins/event-bus/rabbitmq/pom.xml
plugins/hypervisors/kvm/src/com/cloud/hypervisor/kvm/storage/LibvirtStorageAdaptor.java
server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
server/src/com/cloud/storage/VolumeApiServiceImpl.java
server/src/com/cloud/vm/UserVmManagerImpl.java
setup/db/db/schema-442to450.sql
test/integration/component/test_persistent_networks.py
This closes #53
2014-12-08 15:27:53 +05:30
8f8e311110
CLOUDSTACK-8030: Updated router to come up egress default ALLOW
...
On default iptables rules are updated to add ACCEPT egress traffic.
If the network egress default policy is false, CS remove ACCEPT and adds the DROP rule which
is egress default rule when there are no other egress rules.
If the CS network egress default policy is true, CS won't configure any default rule for egress because
router already came up to accept egress traffic. If there are already egress rules for network then the
egress rules get applied on VR.
For isolated network with out firewall service, VR default allows egress traffic (guestnetwork --> public network)
2014-12-08 11:32:01 +05:30
18b230db74
Revert "Occasionally the while loop can exit with no data (Probably recieving an EOF) before receiveing CMDline data from the certial port. Continue looping until cmdline is populated"
...
This reverts commit 83656a6ea8
2014-12-05 15:17:55 +01:00
83656a6ea8
Occasionally the while loop can exit with no data (Probably recieving an EOF) before receiveing CMDline data from the certial port. Continue looping until cmdline is populated
...
Signed-off-by: Edison Su <sudison@gmail.com>
2014-11-20 11:00:09 -08:00
50d756e87d
Occasionally the while loop can exit with no data (Probably recieving an EOF) before receiveing CMDline data from the certial port. Continue looping until cmdline is populated
...
Signed-off-by: Edison Su <sudison@gmail.com>
2014-11-20 10:58:35 -08:00
50b262e02a
CLOUDSTACK-7944: Ensure ipv6 is enabled in sysctl.conf
...
The booting sequence result in change of IPv6 related sysctl options was
overrided by sysctl.conf which is loaded later.
So this patch would patch sysctl.conf in VR as well, ensure IPv6 would be
enabled during booting period otherwise the network setup may not work, result
in IPv6 VM deployment failure.
2014-11-19 14:50:03 -08:00
bb352da302
CLOUDSTACK-7944: Ensure ipv6 is enabled in sysctl.conf
...
The booting sequence result in change of IPv6 related sysctl options was
overrided by sysctl.conf which is loaded later.
So this patch would patch sysctl.conf in VR as well, ensure IPv6 would be
enabled during booting period otherwise the network setup may not work, result
in IPv6 VM deployment failure.
2014-11-19 14:49:18 -08:00
1cc733bfd5
Logrotate is called from crontab. Debian crontab does not include everything in it's path. Therefore reference to these bins need to be absoluut.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-11-09 13:18:08 +01:00
1e1cc11d9a
Logrotate is called from crontab. Debian crontab does not include everything in it's path. Therefore reference to these bins need to be absoluut.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-11-09 13:13:56 +01:00
a014617085
CLOUDSTACK-7855: NIC3 should set MTU and not NIC1 for storage network nic
...
The fix also persists the configuration in /etc/network/interfaces
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2014-11-06 18:21:32 +05:30
c8ad4d15fd
CLOUDSTACK-7855: NIC3 should set MTU and not NIC1 for storage network nic
...
The fix also persists the configuration in /etc/network/interfaces
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2014-11-06 18:19:11 +05:30
84e44a4dba
systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVE20143566)
...
Just prefer TLS over SSL in apache configuration in systemvm
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit 88acc9bd53
2014-11-04 01:50:06 +05:30
88acc9bd53
systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVE20143566)
...
Just prefer TLS over SSL in apache configuration in systemvm
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2014-11-04 01:43:55 +05:30
9d5b7b73a2
MTU should be put on storage network: eth3, instead of eth1 Reviewed-by: Frank
2014-10-30 02:45:46 -07:00
1de0cb7094
restore barematel work after merge
2014-10-17 10:24:01 +02:00
148efbb73f
Merge remote-tracking branch 'origin/4.5' into merge-master
...
Conflicts:
engine/schema/src/com/cloud/upgrade/dao/Upgrade441to450.java
plugins/hypervisors/baremetal/src/com/cloud/baremetal/manager/BaremetalManagerImpl.java
plugins/hypervisors/baremetal/src/com/cloud/baremetal/manager/BaremetalVlanManager.java
plugins/hypervisors/baremetal/src/com/cloud/baremetal/manager/BaremetalVlanManagerImpl.java
plugins/hypervisors/baremetal/src/com/cloud/baremetal/networkservice/BaremetalKickStartServiceImpl.java
plugins/hypervisors/vmware/src/com/cloud/storage/resource/VmwareStorageProcessor.java
server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
server/src/com/cloud/network/router/VpcVirtualNetworkApplianceManagerImpl.java
setup/db/db/schema-441to450.sql
test/integration/component/test_deploy_vgpu_vm.py
tools/marvin/marvin/config/test_data.py
2014-10-16 12:29:37 +02:00
b29d075108
CLOUDSTACK-7657: cloud.log is being rotated by multiple rotation policies on SSVM and CPVM
...
(cherry picked from commit 3e02bfa74f
2014-10-13 00:13:25 -04:00
cd3df842f2
CLOUDSTACK-7631: Log rotate on VR may fail as /etc/init.d/rsyslog does not anymore support reload option on debian wheezy
...
(cherry picked from commit 3a8c450890
2014-10-12 23:55:42 -04:00
ac48aa8e0c
cleaning up some from a revert
2014-10-12 23:30:04 -04:00
01dada100a
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
2014-10-06 16:03:19 -07:00
3e02bfa74f
CLOUDSTACK-7657: cloud.log is being rotated by multiple rotation policies on SSVM and CPVM
2014-10-01 13:39:09 +05:30
3a8c450890
CLOUDSTACK-7631: Log rotate on VR may fail as /etc/init.d/rsyslog does not anymore support reload option on debian wheezy
2014-09-25 15:59:08 +05:30
3e6817c878
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
add missing license header to systemvm/patches/debian/config/etc/rc.local
2014-09-22 14:44:14 -07:00
6155d3ecaa
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
2014-09-22 13:57:32 -07:00
8b89494a35
CLOUDSTACK-6278
...
Baremetal Advanced Networking support
2014-09-18 16:54:37 -07:00
b4f03a1339
CLOUDSTACK-7517: loading ftp modules in VR
2014-09-10 14:10:14 +05:30
c90bf1231f
sysctl improvements. 1. ip_nonlocal_bind for smooth transition in case of a keepalived failover. 2. panic settings so that a vm dies in a way that ACS understands it's down. 3. also up the nf_conntrack limits.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 45deade1dfc4d1bf7f24
2014-08-14 14:11:33 +02:00
2ff7b846fd
CLOUDSTACK-7185: Change Apache2 log rotation policy to avoid memory leak
2014-07-25 14:02:44 -07:00
1ad1883b74
Add virtualbox support to cloud-early-config so we can use virtualbox for testing
2014-07-14 15:34:14 +02:00
e0d4af5062
CLOUDSTACK-7092: Disabled icmp redirects in VR
2014-07-10 15:17:50 +05:30
2f1b40d2e8
CLOUDSTACK-7028: Fixed adding route for additional public nic on fail over
2014-07-01 15:16:27 +05:30
d5e686f2ec
CLOUDSTACK-6997: Increase proc ip_conntrack_max
2014-07-01 10:29:46 +05:30
c181485ae5
CLOUDSTACK-6908: Enable IPv6 in sysctl when only necessary
...
This new way would only enable IPv6 when VR is created in IPv6 shared network.
Otherwise IPv6 sysctl options remain disable.
2014-06-13 11:08:32 -07:00
66816827cb
Cosmetic fixed. three in total. 1. Only run hv_kvp_daemon if it exists. 2. add the -f argument to the rm to make is silent if it doesn't exist. 3. by using log_action_msg instead of log_action_begin_msg the screen output looks way better.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-12 14:56:11 +02:00
b85dd956f8
rats
2014-06-10 16:21:06 +02:00
c54ce3cafb
If for some reason dnsmasq.log does not exist anymore logrotate will create it with nobody as owner. This will prevent dnsmasq deamon from logging to that file.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-10 15:51:03 +02:00
11f532bbec
blacklist pcspkr as cosmetic improvement. aesni_intel blacklisting was not working because the include only works if the file ends with .conf.
...
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-10 15:45:15 +02:00
96b1c6bf3c
CLOUDSTACK-6328: run.sh check if an existing java process is running, before spawining new ones
...
Signed-off-by: Jayapal <jayapal@apache.org>
2014-05-27 15:56:25 +05:30
42d48fe9ab
cloudstack-6258: Log file will be set to cloud.out only if CLOUD_DEBUG is enabled
2014-04-25 05:50:57 +05:30
74fe010db3
CLOUDSTACK-6434: Make RvR advert_int configurable
...
In some network environment, 1*3 seconds by default make RvR setup too
sensitive. A configurable parameter would be better for fitting different
network environments.
2014-04-16 20:13:16 -07:00
a554ebdf75
CLOUDSTACK-6432: Blocking DHCP server to service DNS outside network
...
This would cover only DHCP only network since in basic and shared network, the
private IP used by VR and network may expose to outside.
2014-04-16 19:13:23 -07:00
2a0236931a
Ensure that min_free_kbytes in secstorage vm is set such that heavy nfs load will not cause page allocation failures
2014-04-14 00:00:47 -06:00
6b7f91d770
add conntrackd logrotate for systemvms, dont start conntrackd on logrotate if it isnt running
2014-04-05 00:30:28 -06:00
8937434fce
CLOUDSTACK-5986: Fix dnsmasq lease for VPC
2014-03-11 16:14:33 -07:00
540d020aa5
CLOUDSTACK-6179 Execute VR commands on Virtual Resource when commands received to Hyper-V
2014-03-11 13:10:13 +05:30
986813d973
Prevent DHCPACK for DHCPINFORM in the DHCP server
...
The orignal "dhcp-range=xxx,static" would only prohibit DHCPREQUEST from unknown
hosts, but not DHCPINFORM which can request routing information. This caused
trouble for some bridged networks outside CloudStack.
This patch would fix the issue, prevent dnsmasq from acking any unknown request.
Signed-off-by: Sheng Yang <sheng.yang@citrix.com>
2014-02-25 14:55:24 -08:00
66989a9364
CLOUDSTACK-6018: Increase dnsmasq dhcp-lease-max to 2100
...
Would able to accomodate one /21 network then.
2014-02-03 14:52:42 -08:00
121d88743a
CLOUDSTACK-5986: Make dnsmasq handle dnsmasq.leases when dhcp_release is available
...
The original issue has been exposed due to CloudStack VR would modify the
dnsmasq.leases, thus make it unsync with dnsmasq's memory lease.
Make the modification to let dnsmasq handle the lease file if dhcp_release is
available.
2014-01-29 18:02:11 -08:00
7ac48934f7
CLOUDSTACK-5821 systemvmiso is locked by systevmvm in hyperv
2014-01-28 07:03:08 +05:30
Wei Zhou
Rajani Karuturi
Jayapal
David Bierce
Sheng Yang
Joris van Lieshout
Rohit Yadav
Edison Su
Daan Hoogland
Saksham Srivastava
David Nalley
Frank Zhang
Hugo Trippaers
Saurav Lahiri
Marcus Sorensen
Rajesh Battala