Commit Graph

26255 Commits

Author SHA1 Message Date
Rohit Yadav 375e998eaf CLOUDSTACK-8272: Python based file-lock free password server implementation
- VRs are single CPU, so Threading based implementation favoured than Forking based
- Implements a Python based password server that does not use file based locks
- Saving password mechanism is provided by using secure token only to VR (localhost)
- Old serve_password implementation is removed
- Runs with Python 2.6+ with no external dependencies
- Locks used within threads for extra safety

This closes #106

(cherry picked from commit 4b45d25152)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-12 13:57:49 +05:30
Rohit Yadav 74f9adbe3e engine: Add Upgrade path from 4.5.0 to 4.5.1
Encrypts:
- Remote access vpn preshared key
- StoragePool's user info
- Keystore's key

This closes #112

(cherry picked from commit cfd4573335)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>

Conflicts:
	engine/schema/src/com/cloud/upgrade/DatabaseUpgradeChecker.java
2015-03-12 13:02:45 +05:30
Likitha Shetty d30d5644bb CLOUDSTACK-8320. Upon a failed migration, a dummy volume is created which remains in 'Expunging' state.
Set destination volume path as NULL while duplicating volume during migration.
If migration fails, destination volume will be marked as removed. And if migration succeeds, volume path will be rightly updated.
2015-03-12 11:57:02 +05:30
Likitha Shetty bdd28a45ed CLOUDSTACK-8319. For both 'MigrateVolume' and 'MigrateVMWithVolumes, ensure VM's vconfiguration files are migrated along with VM's root volume. 2015-03-12 11:57:02 +05:30
Likitha Shetty adc836cc5e CLOUDSTACK-8318. Storage vMotion support for VMFS.
MigrateVMWithVolumes-
1. If ESXi host version is below 5.1, ensure destination datastore(s) is mounted on the source host, then migrate the storage and then finally migrate the VM.
If destination storage(s) is not mounted on the source host,
- In case of NFS storage mount the storage(s).
- In case of VMFS storage fail the request for migration.
2. If EXi host version is 5.1 or above, simultaneously migrate the VM and its storage to the destination host and storage(s) respectively for both NFS and VMFS storage.
2015-03-12 11:57:01 +05:30
Funs c27c69438b hypervisors: add OVM3 plugin that supports OVM 3.2.1/3.3.x
This is a plugin that puts in ovm3 support ranging from 3.3.1 to 3.3.2. Basic
functionality is in here, advanced networking etc..

Snapshots only work when a VM is stopped now due to the semantics of OVM's raw
image implementation (so snapshots should work on a storage level underneath the
hypervisor shrug)

This closes #113

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-12 11:33:42 +05:30
Gaurav Aradhye ff9ab5caa9 CLOUDSTACK-8290: Adding BVT to verofy product issue
Signed-off-by: SrikanteswaraRao Talluri <talluri@apache.org>
2015-03-12 11:20:48 +05:30
SrikanteswaraRao Talluri cd66844e9c fixed license header 2015-03-12 11:13:21 +05:30
Gaurav Aradhye d8bb1fad5e CLOUDSTACK-8286: Adding Basic validation test case to test deploying VM from ISO and correcting old regression test case to test HA VM from ISO
Signed-off-by: SrikanteswaraRao Talluri <talluri@apache.org>
2015-03-12 11:10:08 +05:30
Ashutosh K 891b597606 CLOUDSTACK-8236: Automation for storage migration test path
Signed-off-by: SrikanteswaraRao Talluri <talluri@apache.org>
2015-03-12 10:55:46 +05:30
Pierre-Yves Ritschard 54d44eb844 compatibility with HEAD on master
This closes #109

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 21:41:03 +05:30
Pierre-Yves Ritschard dd77fdf6c6 make topic configurable, provide default serializers
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 21:40:49 +05:30
Pierre-Yves Ritschard 04b30e0e66 Add Apache Kafka event-bus support - producing only.
This commit produces event bus messages to a "cloudstack" topic
in Apache Kafka. Configuration is expected to be found in
/etc/cloudstack/management/kafka.producer.properties and will
generally be of the form:

    bootstrap.servers=kafka-host1:9092,kafka-host2:9092
    key.serializer=org.apache.kafka.common.serialization.StringSerializer
    value.serializer=org.apache.kafka.common.serialization.StringSerializer

There is no way to parameterize the topic yet, and the consuming
code is just place-holder. I think adding a consumer within cloudstack
is very debatable and likely not needed.

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 21:40:49 +05:30
Rohit Yadav 05d2b0a707 server: remove unused import in ImageStoreJoinDaoImpl
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 17:28:32 +05:30
Star Guo b108648f65 CLOUDSTACK-7951: Limit amount of memory used by cloudstack-agent jsvc
This closes #111

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 16:45:05 +05:30
Rohit Yadav 40f343ff4c api: avoid sending sensitive data in api response
- UI: use post when updating user
- S3: don't send s3 key in the response
- VPN: don't send preshared key in remoteaccessvpn api response
- Snapshot response should set zone id not volume's device id

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit 02cadc3fb3)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-11 16:34:56 +05:30
Sanjay Tripathi 182d770f9f CLOUDSTACK-8315: CS API listVMSnapshot doesn't have tags ‘project’ and ‘projectid’. 2015-03-11 14:38:57 +05:30
Star Guo 555c432946 fix yum install require java => 1.7.0 when build management agent and usage rpm package
Signed-off-by: Rajani Karuturi <rajanikaruturi@gmail.com>

This closes #108
2015-03-11 09:35:00 +05:30
Laszlo Hornyak 9a38b2f7de CLOUDSTACK-8304: disable snapshots from non-snapshot repositories
Signed-off-by: Laszlo Hornyak <laszlo.hornyak@gmail.com>
Signed-off-by: Rajani Karuturi <rajanikaruturi@gmail.com>

This closes #100
2015-03-10 17:19:09 +05:30
Sanjay Tripathi 520d96724a CLOUDSTACK-8312: The storage usage of "Primary Storage Allocated" is incorrect. 2015-03-10 16:52:25 +05:30
Gaurav Aradhye 1fd401ff43 CLOUDSTACK-8299: Adding additional test case to test ingress rules with two security groups together
This closes #102

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-10 10:20:46 +05:30
Star Guo 8ed833a13b scripts: add ip set interface up because in CentOS7 the interface will not auto up
This closes #97

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-10 10:19:04 +05:30
René Moser 47de4a12f4 systemvm: correct sftp subsystem path of debian wheezy
This closes #104

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-10 10:15:05 +05:30
René Moser 37b4d9c308 systemvm: use Debian http redirector for apt repositories
* No offline mirrors
* No out of date mirrors
* New mirrors are used
* Load-balancing
* Faster downloads (when APT is used, via parallel downloads)
* Great on mobility

Also see http://http.debian.net/ for more information.

This closes #103

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-10 10:11:08 +05:30
Rohit Yadav ebcad34d33 systemvm: avoid tcp responses with timestamp
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit f3f47f25ba)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 17:12:22 +05:30
Rohit Yadav 9b669f0648 CLOUDSTACK-7639: make cidr updation more efficient
check and update only when required

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit b879916f5c)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 16:30:08 +05:30
Rohit Yadav e1cbe6d18a CLOUDSTACK-7639: make cidrlist update when updateNetworkAclItem is called
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit b2b9de7fa3)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 16:30:08 +05:30
ramamurtis 8591383bcc CLOUDSTACK-8307: UI not showing all Domains, if there are more than 24 domains then the last domain gets cut off on firefox and IE. Added a flag in treeview widget and based on the flag adding css class which will make overflow as scroll instead of the default auto.
Fixes #101

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 14:26:29 +05:30
Rohit Yadav 5256b0205a systemvm: have apache2 use secure SSL cipher suite
Created using Mozilla's ssl config generator:
https://mozilla.github.io/server-side-tls/ssl-config-generator/

Intermediate setting was used, with apache version 2.2.22 and openssl 1.0.1e
Oldest compatible clients:
Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1, Windows XP IE8, Android 2.3, Java 7

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit ab8f367850)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-09 12:45:06 +05:30
Pierre-Luc Dion e86c7a2a9a CLOUDSTACK-1359: add UI information about GB definition 2015-03-08 22:48:28 -04:00
Pierre-Luc Dion d38b6f5f1e CLOUDSTACK-4719: update API description for details, example for xenserver tools 2015-03-08 22:17:45 -04:00
Pierre-Luc Dion 25c83c7d48 dummy commit to for PR close #95 2015-03-08 11:47:29 -04:00
Pierre-Luc Dion baf526cee2 update 4.5.0 bugfix list, add Update this file quick howto at the end using jira-changes.py 2015-03-08 11:46:29 -04:00
Gaurav Aradhye 6da65eca88 CLOUDSTACK-8299: Adding test case to test security group ingress rules for a specific IP set
Signed-off-by: Pierre-Luc Dion <pdion891@apache.org>
2015-03-08 11:12:12 -04:00
Pierre-Luc Dion 002236e489 CLOUDSTACK-2100: vm snapshot tooltips 2015-03-07 23:59:27 -05:00
Pierre-Luc Dion 4c0ed3d85d CLOUDSTACK-1359: added (1GB = 1,073,741,824 bytes) 2015-03-07 15:24:04 -05:00
Daan Hoogland d14a994689 findbugs: make use of default charset explicit 2015-03-07 20:14:24 +01:00
Rohit Yadav ec2639e8fb CLOUDSTACK-8248: loadCidrs before sending response
Fixes regression from CLOUDSTACK-6582

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
(cherry picked from commit f9090eacd6)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-06 21:44:28 +05:30
Rohit Yadav 25b0bd620a server: last cherry-picked commit failed to remove code
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2015-03-06 21:44:24 +05:30
punith-cloudbyte ff7ef985f1 NFS support for VMware-managed storage
Signed-off-by: Mike Tutkowski <mike.tutkowski@solidfire.com>
2015-03-05 17:39:10 -07:00
Wido den Hollander 8e5fefc66c Fix Python path for Debian installer
This closes #96
2015-03-05 16:25:17 +01:00
Felix Geyer bb16d48f0c Register the init scripts.
Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:39:55 +01:00
Felix Geyer b77198def5 Use invoke-rc.d instead of service to stop tomcat.
Debian policy requires that invoke-rc.d is used.

Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:39:54 +01:00
Felix Geyer 705af84141 Remove dependencies on essential packages.
They are guaranteed to be present on Debian systems.

Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:39:54 +01:00
Felix Geyer b482766c61 Add dependency on ${misc:Depends} to all packages.
Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:39:54 +01:00
Felix Geyer 05f865ffd5 Add adduser dependency to cloudstack-management.
Used in the postinst script.

Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:39:54 +01:00
Felix Geyer b338e88e40 Add proper python dependencies.
Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:39:54 +01:00
Felix Geyer 465b3e9d1a Install python files into the correct path.
Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:39:54 +01:00
Felix Geyer 71b42e266f Use /bin/sh and set -e uniformly in maintainer scripts.
Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:35:53 +01:00
Felix Geyer 6ce9729580 Add DEBHELPER tokens to maintainer script.
dh_* tools insert their scripts there.

Signed-off-by: Wido den Hollander <wido@widodh.nl>
2015-03-05 14:35:53 +01:00