You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Paul Angus <pa...@shapeblue.com> on 2019/06/11 09:57:29 UTC

[VOTE] 4.11.3.0 RC1

Hi All,

I've created a 4.11.3.0 release (RC1), with the following artefacts up for testing and a vote:


Git Branch and Commit SH:
https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.3.0-RC20190610T1615
Commit: 51124b7b35f47089b2e51a93b2094ea93dd15302

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.3.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open until end of 16 June 2019.

For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 51124b7b35f47089b2e51a93b2094ea93dd15302 and published RC1 repository here:
http://packages.shapeblue.com/testing/41130rc1/

The release notes are still work-in-progress, but the systemvm template upgrade section has been updated. You may refer the following for systemvm template upgrade testing:
http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html

4.11.3.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41130rc1/



PRs in 4.11.3.0:
+==============+

+-------------------------+----------+------------------------------------------------------------+
| Version                 | Github   | Description                                                |
+=========================+==========+============================================================+
| 4.11.3.0                | `#3381`_ | schema: add 4.11.2 to 4.11.3 systemvmtemplate upgrade path |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3075`_ | KVM: Prevent regenerating keystore on provisionCertificate |
|                         |          | API                                                        |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3373`_ | router: support multi-homed VMs in VPC                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3366`_ | Fix rule duplication with static NAT rules                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3194`_ | Suspending a VM before snapshot deletion (see PR #3193)    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3370`_ | ssvm: apply MTU value on storage/management nic if         |
|                         |          | available                                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2995`_ | KVM: Improvements on upload direct download certificates   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3351`_ | Have persistent DHCP leases file on VRs and cleanup        |
|                         |          | /etc/hosts on VM deletion                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3310`_ | Fix removing static NAT rules with Juniper SRX             |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3361`_ | Fix 4.11 VR Issues with Multiple Public Subnets            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3206`_ | server: allow dedicate ip range to a domain if ips are     |
|                         |          | used by an account in the domain                           |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3205`_ | server: update dhcp configurations in vrs while update     |
|                         |          | default nic of running vms                                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3362`_ | vmware: fix potential NPE when memory hotplug capability   |
|                         |          | is checked                                                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3338`_ | ui: fix enable static nat only towards first nic and not   |
|                         |          | on any other interface                                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3359`_ | Ui: Reset multiselect actions when refreshing listView in  |
|                         |          | Instance page                                              |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3342`_ | VPC: Fail to restart VPC with cleanup if there are         |
|                         |          | multiple public IPs in different subnets                   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3348`_ | fix duplicate tag exception as CloudRuntimeException       |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3333`_ | server: ssh-keygen in PEM format and reduce main systemvm  |
|                         |          | patching script                                            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3239`_ | KVM: Fix agents dont reconnect post maintenance            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3278`_ | systemvm: new qemu-guest-agent based patching for KVM      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3276`_ | Allow VM that has never started to have volumes attached   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3204`_ | server: Fix exception while update domain resource count   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3269`_ | packaging: systemctl daemon-reload after agent install or  |
|                         |          | upgrade                                                    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3266`_ | packaging: don't skip unit tests while building packages   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3238`_ | client: don't disable TLSv1, TLSv1.1 by default that       |
|                         |          | breaks VMware env                                          |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2869`_ | Fix some Marvin smoke tests                                |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3158`_ | Allow users of all types to create L2 networks             |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3210`_ | systemd: Fix -Dpid arg passing to systemd usage service    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3163`_ | systemd: fix services to allow TLS configurations via      |
|                         |          | java.security.ciphers                                      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3122`_ | Add back ability to disable backup of snapshot to          |
|                         |          | secondary                                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3139`_ | packaging: management default file cleanup                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3134`_ | keystore: don't restart systemvm cloud.service post cert   |
|                         |          | import                                                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3105`_ | VmwareStorageLayoutHelper throws StackOverflowError fix    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3095`_ | Prevent corner case for infinite PrepareForMaintenance     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3106`_ | marvin: add missing test data for test_migration smoketest |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3098`_ | Add support for keyword in listSSHKeyPairs command search  |
|                         |          | (#2920)                                                    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2894`_ | api: don't throttle api discovery for listApis command     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3024`_ | travis: fail fast if --with-marvin fails with nose         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3005`_ | Discover tags field on superclass of API responses         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3076`_ | security: increase keystore setup/import timeout           |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3030`_ | correct permissions in spec file and fix class path        |
|                         |          | specified variable                                         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3066`_ | API: move ostypeid from DB id to DB uuid, backports #2528  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3037`_ | kvm: when untagged vxlan is used, use the default          |
|                         |          | guest/public bridge                                        |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2990`_ | Security Group: add secondary ips to the correct ipset     |
|                         |          | based on ip family (4.11)                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3055`_ | marvin: add missing default test data                      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3038`_ | surefire: ignore system classloader to make tests run      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3021`_ | Skip network migration tests for not supported hypervisors |
|                         |          | instead of failing                                         |
+-------------------------+----------+------------------------------------------------------------+

47 Issues listed

.. _`#3381`: https://github.com/apache/cloudstack/pull/3381
.. _`#3075`: https://github.com/apache/cloudstack/pull/3075
.. _`#3373`: https://github.com/apache/cloudstack/pull/3373
.. _`#3366`: https://github.com/apache/cloudstack/pull/3366
.. _`#3194`: https://github.com/apache/cloudstack/pull/3194
.. _`#3370`: https://github.com/apache/cloudstack/pull/3370
.. _`#2995`: https://github.com/apache/cloudstack/pull/2995
.. _`#3351`: https://github.com/apache/cloudstack/pull/3351
.. _`#3310`: https://github.com/apache/cloudstack/pull/3310
.. _`#3361`: https://github.com/apache/cloudstack/pull/3361
.. _`#3206`: https://github.com/apache/cloudstack/pull/3206
.. _`#3205`: https://github.com/apache/cloudstack/pull/3205
.. _`#3362`: https://github.com/apache/cloudstack/pull/3362
.. _`#3338`: https://github.com/apache/cloudstack/pull/3338
.. _`#3359`: https://github.com/apache/cloudstack/pull/3359
.. _`#3342`: https://github.com/apache/cloudstack/pull/3342
.. _`#3348`: https://github.com/apache/cloudstack/pull/3348
.. _`#3333`: https://github.com/apache/cloudstack/pull/3333
.. _`#3239`: https://github.com/apache/cloudstack/pull/3239
.. _`#3278`: https://github.com/apache/cloudstack/pull/3278
.. _`#3276`: https://github.com/apache/cloudstack/pull/3276
.. _`#3204`: https://github.com/apache/cloudstack/pull/3204
.. _`#3269`: https://github.com/apache/cloudstack/pull/3269
.. _`#3266`: https://github.com/apache/cloudstack/pull/3266
.. _`#3238`: https://github.com/apache/cloudstack/pull/3238
.. _`#2869`: https://github.com/apache/cloudstack/pull/2869
.. _`#3158`: https://github.com/apache/cloudstack/pull/3158
.. _`#3210`: https://github.com/apache/cloudstack/pull/3210
.. _`#3163`: https://github.com/apache/cloudstack/pull/3163
.. _`#3122`: https://github.com/apache/cloudstack/pull/3122
.. _`#3139`: https://github.com/apache/cloudstack/pull/3139
.. _`#3134`: https://github.com/apache/cloudstack/pull/3134
.. _`#3105`: https://github.com/apache/cloudstack/pull/3105
.. _`#3095`: https://github.com/apache/cloudstack/pull/3095
.. _`#3106`: https://github.com/apache/cloudstack/pull/3106
.. _`#3098`: https://github.com/apache/cloudstack/pull/3098
.. _`#2894`: https://github.com/apache/cloudstack/pull/2894
.. _`#3024`: https://github.com/apache/cloudstack/pull/3024
.. _`#3005`: https://github.com/apache/cloudstack/pull/3005
.. _`#3076`: https://github.com/apache/cloudstack/pull/3076
.. _`#3030`: https://github.com/apache/cloudstack/pull/3030
.. _`#3066`: https://github.com/apache/cloudstack/pull/3066
.. _`#3037`: https://github.com/apache/cloudstack/pull/3037
.. _`#2990`: https://github.com/apache/cloudstack/pull/2990
.. _`#3055`: https://github.com/apache/cloudstack/pull/3055
.. _`#3038`: https://github.com/apache/cloudstack/pull/3038
.. _`#3021`: https://github.com/apache/cloudstack/pull/3021


paul.angus@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


Re: [VOTE] 4.11.3.0 RC1

Posted by Nux! <nu...@li.nux.ro>.
+1 (binding)

KVM, CentOS7, local storage.

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

----- Original Message -----
> From: "Milamber" <mi...@apache.org>
> To: "dev" <de...@cloudstack.apache.org>
> Sent: Wednesday, 19 June, 2019 22:35:50
> Subject: Re: [VOTE] 4.11.3.0 RC1

> Hello,
> 
> +1 (binding)
> 
> 
> Tested on KVM + NFS installation
> 
> 
> Milamber
> 
> On 11/06/2019 10:57, Paul Angus wrote:
>> Hi All,
>>
>> I've created a 4.11.3.0 release (RC1), with the following artefacts up for
>> testing and a vote:
>>
>>
>> Git Branch and Commit SH:
>> https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.3.0-RC20190610T1615
>> Commit: 51124b7b35f47089b2e51a93b2094ea93dd15302
>>
>> Source release (checksums and signatures are available at the same
>> location):
>> https://dist.apache.org/repos/dist/dev/cloudstack/4.11.3.0/
>>
>> PGP release keys (signed using 51EE0BC8):
>> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>>
>> The vote will be open until end of 16 June 2019.
>>
>> For sanity in tallying the vote, can PMC members please be sure to indicate
>> "(binding)" with their vote?
>>
>> [ ] +1 approve
>> [ ] +0 no opinion
>> [ ] -1 disapprove (and reason why)
>>
>> Additional information:
>>
>> For users' convenience, I've built packages from
>> 51124b7b35f47089b2e51a93b2094ea93dd15302 and published RC1 repository here:
>> http://packages.shapeblue.com/testing/41130rc1/
>>
>> The release notes are still work-in-progress, but the systemvm template upgrade
>> section has been updated. You may refer the following for systemvm template
>> upgrade testing:
>> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>>
>> 4.11.3.0 systemvm templates are available from here:
>> http://packages.shapeblue.com/testing/systemvm/41130rc1/
>>
>>
>>
>> PRs in 4.11.3.0:
>> +==============+
>>
>> +-------------------------+----------+------------------------------------------------------------+
>> | Version                 | Github   | Description
>> | |
>> +=========================+==========+============================================================+
>> | 4.11.3.0                | `#3381`_ | schema: add 4.11.2 to 4.11.3
>> | systemvmtemplate upgrade path |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3075`_ | KVM: Prevent regenerating keystore on
>> | provisionCertificate |
>> |                         |          | API                                                        |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3373`_ | router: support multi-homed VMs in VPC
>> | |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3366`_ | Fix rule duplication with static NAT rules
>> | |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3194`_ | Suspending a VM before snapshot deletion
>> | (see PR #3193)    |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3370`_ | ssvm: apply MTU value on storage/management
>> | nic if         |
>> |                         |          | available                                                  |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#2995`_ | KVM: Improvements on upload direct download
>> | certificates   |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3351`_ | Have persistent DHCP leases file on VRs and
>> | cleanup        |
>> |                         |          | /etc/hosts on VM deletion                                  |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3310`_ | Fix removing static NAT rules with Juniper
>> | SRX             |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3361`_ | Fix 4.11 VR Issues with Multiple Public
>> | Subnets            |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3206`_ | server: allow dedicate ip range to a domain
>> | if ips are     |
>> |                         |          | used by an account in the domain                           |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3205`_ | server: update dhcp configurations in vrs
>> | while update     |
>> |                         |          | default nic of running vms                                 |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3362`_ | vmware: fix potential NPE when memory
>> | hotplug capability   |
>> |                         |          | is checked                                                 |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3338`_ | ui: fix enable static nat only towards
>> | first nic and not   |
>> |                         |          | on any other interface                                     |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3359`_ | Ui: Reset multiselect actions when
>> | refreshing listView in  |
>> |                         |          | Instance page                                              |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3342`_ | VPC: Fail to restart VPC with cleanup if
>> | there are         |
>> |                         |          | multiple public IPs in different subnets                   |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3348`_ | fix duplicate tag exception as
>> | CloudRuntimeException       |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3333`_ | server: ssh-keygen in PEM format and reduce
>> | main systemvm  |
>> |                         |          | patching script                                            |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3239`_ | KVM: Fix agents dont reconnect post
>> | maintenance            |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3278`_ | systemvm: new qemu-guest-agent based
>> | patching for KVM      |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3276`_ | Allow VM that has never started to have
>> | volumes attached   |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3204`_ | server: Fix exception while update domain
>> | resource count   |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3269`_ | packaging: systemctl daemon-reload after
>> | agent install or  |
>> |                         |          | upgrade                                                    |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3266`_ | packaging: don't skip unit tests while
>> | building packages   |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3238`_ | client: don't disable TLSv1, TLSv1.1 by
>> | default that       |
>> |                         |          | breaks VMware env                                          |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#2869`_ | Fix some Marvin smoke tests
>> | |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3158`_ | Allow users of all types to create L2
>> | networks             |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3210`_ | systemd: Fix -Dpid arg passing to systemd
>> | usage service    |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3163`_ | systemd: fix services to allow TLS
>> | configurations via      |
>> |                         |          | java.security.ciphers                                      |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3122`_ | Add back ability to disable backup of
>> | snapshot to          |
>> |                         |          | secondary                                                  |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3139`_ | packaging: management default file cleanup
>> | |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3134`_ | keystore: don't restart systemvm
>> | cloud.service post cert   |
>> |                         |          | import                                                     |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3105`_ | VmwareStorageLayoutHelper throws
>> | StackOverflowError fix    |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3095`_ | Prevent corner case for infinite
>> | PrepareForMaintenance     |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3106`_ | marvin: add missing test data for
>> | test_migration smoketest |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3098`_ | Add support for keyword in listSSHKeyPairs
>> | command search  |
>> |                         |          | (#2920)                                                    |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#2894`_ | api: don't throttle api discovery for
>> | listApis command     |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3024`_ | travis: fail fast if --with-marvin fails
>> | with nose         |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3005`_ | Discover tags field on superclass of API
>> | responses         |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3076`_ | security: increase keystore setup/import
>> | timeout           |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3030`_ | correct permissions in spec file and fix
>> | class path        |
>> |                         |          | specified variable                                         |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3066`_ | API: move ostypeid from DB id to DB uuid,
>> | backports #2528  |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3037`_ | kvm: when untagged vxlan is used, use the
>> | default          |
>> |                         |          | guest/public bridge                                        |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#2990`_ | Security Group: add secondary ips to the
>> | correct ipset     |
>> |                         |          | based on ip family (4.11)                                  |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3055`_ | marvin: add missing default test data
>> | |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3038`_ | surefire: ignore system classloader to make
>> | tests run      |
>> +-------------------------+----------+------------------------------------------------------------+
>> | 4.11.3.0                | `#3021`_ | Skip network migration tests for not
>> | supported hypervisors |
>> |                         |          | instead of failing                                         |
>> +-------------------------+----------+------------------------------------------------------------+
>>
>> 47 Issues listed
>>
>> .. _`#3381`: https://github.com/apache/cloudstack/pull/3381
>> .. _`#3075`: https://github.com/apache/cloudstack/pull/3075
>> .. _`#3373`: https://github.com/apache/cloudstack/pull/3373
>> .. _`#3366`: https://github.com/apache/cloudstack/pull/3366
>> .. _`#3194`: https://github.com/apache/cloudstack/pull/3194
>> .. _`#3370`: https://github.com/apache/cloudstack/pull/3370
>> .. _`#2995`: https://github.com/apache/cloudstack/pull/2995
>> .. _`#3351`: https://github.com/apache/cloudstack/pull/3351
>> .. _`#3310`: https://github.com/apache/cloudstack/pull/3310
>> .. _`#3361`: https://github.com/apache/cloudstack/pull/3361
>> .. _`#3206`: https://github.com/apache/cloudstack/pull/3206
>> .. _`#3205`: https://github.com/apache/cloudstack/pull/3205
>> .. _`#3362`: https://github.com/apache/cloudstack/pull/3362
>> .. _`#3338`: https://github.com/apache/cloudstack/pull/3338
>> .. _`#3359`: https://github.com/apache/cloudstack/pull/3359
>> .. _`#3342`: https://github.com/apache/cloudstack/pull/3342
>> .. _`#3348`: https://github.com/apache/cloudstack/pull/3348
>> .. _`#3333`: https://github.com/apache/cloudstack/pull/3333
>> .. _`#3239`: https://github.com/apache/cloudstack/pull/3239
>> .. _`#3278`: https://github.com/apache/cloudstack/pull/3278
>> .. _`#3276`: https://github.com/apache/cloudstack/pull/3276
>> .. _`#3204`: https://github.com/apache/cloudstack/pull/3204
>> .. _`#3269`: https://github.com/apache/cloudstack/pull/3269
>> .. _`#3266`: https://github.com/apache/cloudstack/pull/3266
>> .. _`#3238`: https://github.com/apache/cloudstack/pull/3238
>> .. _`#2869`: https://github.com/apache/cloudstack/pull/2869
>> .. _`#3158`: https://github.com/apache/cloudstack/pull/3158
>> .. _`#3210`: https://github.com/apache/cloudstack/pull/3210
>> .. _`#3163`: https://github.com/apache/cloudstack/pull/3163
>> .. _`#3122`: https://github.com/apache/cloudstack/pull/3122
>> .. _`#3139`: https://github.com/apache/cloudstack/pull/3139
>> .. _`#3134`: https://github.com/apache/cloudstack/pull/3134
>> .. _`#3105`: https://github.com/apache/cloudstack/pull/3105
>> .. _`#3095`: https://github.com/apache/cloudstack/pull/3095
>> .. _`#3106`: https://github.com/apache/cloudstack/pull/3106
>> .. _`#3098`: https://github.com/apache/cloudstack/pull/3098
>> .. _`#2894`: https://github.com/apache/cloudstack/pull/2894
>> .. _`#3024`: https://github.com/apache/cloudstack/pull/3024
>> .. _`#3005`: https://github.com/apache/cloudstack/pull/3005
>> .. _`#3076`: https://github.com/apache/cloudstack/pull/3076
>> .. _`#3030`: https://github.com/apache/cloudstack/pull/3030
>> .. _`#3066`: https://github.com/apache/cloudstack/pull/3066
>> .. _`#3037`: https://github.com/apache/cloudstack/pull/3037
>> .. _`#2990`: https://github.com/apache/cloudstack/pull/2990
>> .. _`#3055`: https://github.com/apache/cloudstack/pull/3055
>> .. _`#3038`: https://github.com/apache/cloudstack/pull/3038
>> .. _`#3021`: https://github.com/apache/cloudstack/pull/3021
>>
>>
>> paul.angus@shapeblue.com
>> www.shapeblue.com
>> Amadeus House, Floral Street, London  WC2E 9DPUK
>> @shapeblue
>>    
>>   

Re: [VOTE] 4.11.3.0 RC1

Posted by Milamber <mi...@apache.org>.
Hello,

+1 (binding)


Tested on KVM + NFS installation


Milamber

On 11/06/2019 10:57, Paul Angus wrote:
> Hi All,
>
> I've created a 4.11.3.0 release (RC1), with the following artefacts up for testing and a vote:
>
>
> Git Branch and Commit SH:
> https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.3.0-RC20190610T1615
> Commit: 51124b7b35f47089b2e51a93b2094ea93dd15302
>
> Source release (checksums and signatures are available at the same
> location):
> https://dist.apache.org/repos/dist/dev/cloudstack/4.11.3.0/
>
> PGP release keys (signed using 51EE0BC8):
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>
> The vote will be open until end of 16 June 2019.
>
> For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove (and reason why)
>
> Additional information:
>
> For users' convenience, I've built packages from 51124b7b35f47089b2e51a93b2094ea93dd15302 and published RC1 repository here:
> http://packages.shapeblue.com/testing/41130rc1/
>
> The release notes are still work-in-progress, but the systemvm template upgrade section has been updated. You may refer the following for systemvm template upgrade testing:
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>
> 4.11.3.0 systemvm templates are available from here:
> http://packages.shapeblue.com/testing/systemvm/41130rc1/
>
>
>
> PRs in 4.11.3.0:
> +==============+
>
> +-------------------------+----------+------------------------------------------------------------+
> | Version                 | Github   | Description                                                |
> +=========================+==========+============================================================+
> | 4.11.3.0                | `#3381`_ | schema: add 4.11.2 to 4.11.3 systemvmtemplate upgrade path |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3075`_ | KVM: Prevent regenerating keystore on provisionCertificate |
> |                         |          | API                                                        |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3373`_ | router: support multi-homed VMs in VPC                     |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3366`_ | Fix rule duplication with static NAT rules                 |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3194`_ | Suspending a VM before snapshot deletion (see PR #3193)    |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3370`_ | ssvm: apply MTU value on storage/management nic if         |
> |                         |          | available                                                  |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#2995`_ | KVM: Improvements on upload direct download certificates   |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3351`_ | Have persistent DHCP leases file on VRs and cleanup        |
> |                         |          | /etc/hosts on VM deletion                                  |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3310`_ | Fix removing static NAT rules with Juniper SRX             |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3361`_ | Fix 4.11 VR Issues with Multiple Public Subnets            |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3206`_ | server: allow dedicate ip range to a domain if ips are     |
> |                         |          | used by an account in the domain                           |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3205`_ | server: update dhcp configurations in vrs while update     |
> |                         |          | default nic of running vms                                 |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3362`_ | vmware: fix potential NPE when memory hotplug capability   |
> |                         |          | is checked                                                 |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3338`_ | ui: fix enable static nat only towards first nic and not   |
> |                         |          | on any other interface                                     |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3359`_ | Ui: Reset multiselect actions when refreshing listView in  |
> |                         |          | Instance page                                              |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3342`_ | VPC: Fail to restart VPC with cleanup if there are         |
> |                         |          | multiple public IPs in different subnets                   |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3348`_ | fix duplicate tag exception as CloudRuntimeException       |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3333`_ | server: ssh-keygen in PEM format and reduce main systemvm  |
> |                         |          | patching script                                            |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3239`_ | KVM: Fix agents dont reconnect post maintenance            |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3278`_ | systemvm: new qemu-guest-agent based patching for KVM      |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3276`_ | Allow VM that has never started to have volumes attached   |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3204`_ | server: Fix exception while update domain resource count   |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3269`_ | packaging: systemctl daemon-reload after agent install or  |
> |                         |          | upgrade                                                    |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3266`_ | packaging: don't skip unit tests while building packages   |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3238`_ | client: don't disable TLSv1, TLSv1.1 by default that       |
> |                         |          | breaks VMware env                                          |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#2869`_ | Fix some Marvin smoke tests                                |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3158`_ | Allow users of all types to create L2 networks             |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3210`_ | systemd: Fix -Dpid arg passing to systemd usage service    |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3163`_ | systemd: fix services to allow TLS configurations via      |
> |                         |          | java.security.ciphers                                      |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3122`_ | Add back ability to disable backup of snapshot to          |
> |                         |          | secondary                                                  |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3139`_ | packaging: management default file cleanup                 |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3134`_ | keystore: don't restart systemvm cloud.service post cert   |
> |                         |          | import                                                     |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3105`_ | VmwareStorageLayoutHelper throws StackOverflowError fix    |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3095`_ | Prevent corner case for infinite PrepareForMaintenance     |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3106`_ | marvin: add missing test data for test_migration smoketest |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3098`_ | Add support for keyword in listSSHKeyPairs command search  |
> |                         |          | (#2920)                                                    |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#2894`_ | api: don't throttle api discovery for listApis command     |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3024`_ | travis: fail fast if --with-marvin fails with nose         |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3005`_ | Discover tags field on superclass of API responses         |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3076`_ | security: increase keystore setup/import timeout           |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3030`_ | correct permissions in spec file and fix class path        |
> |                         |          | specified variable                                         |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3066`_ | API: move ostypeid from DB id to DB uuid, backports #2528  |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3037`_ | kvm: when untagged vxlan is used, use the default          |
> |                         |          | guest/public bridge                                        |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#2990`_ | Security Group: add secondary ips to the correct ipset     |
> |                         |          | based on ip family (4.11)                                  |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3055`_ | marvin: add missing default test data                      |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3038`_ | surefire: ignore system classloader to make tests run      |
> +-------------------------+----------+------------------------------------------------------------+
> | 4.11.3.0                | `#3021`_ | Skip network migration tests for not supported hypervisors |
> |                         |          | instead of failing                                         |
> +-------------------------+----------+------------------------------------------------------------+
>
> 47 Issues listed
>
> .. _`#3381`: https://github.com/apache/cloudstack/pull/3381
> .. _`#3075`: https://github.com/apache/cloudstack/pull/3075
> .. _`#3373`: https://github.com/apache/cloudstack/pull/3373
> .. _`#3366`: https://github.com/apache/cloudstack/pull/3366
> .. _`#3194`: https://github.com/apache/cloudstack/pull/3194
> .. _`#3370`: https://github.com/apache/cloudstack/pull/3370
> .. _`#2995`: https://github.com/apache/cloudstack/pull/2995
> .. _`#3351`: https://github.com/apache/cloudstack/pull/3351
> .. _`#3310`: https://github.com/apache/cloudstack/pull/3310
> .. _`#3361`: https://github.com/apache/cloudstack/pull/3361
> .. _`#3206`: https://github.com/apache/cloudstack/pull/3206
> .. _`#3205`: https://github.com/apache/cloudstack/pull/3205
> .. _`#3362`: https://github.com/apache/cloudstack/pull/3362
> .. _`#3338`: https://github.com/apache/cloudstack/pull/3338
> .. _`#3359`: https://github.com/apache/cloudstack/pull/3359
> .. _`#3342`: https://github.com/apache/cloudstack/pull/3342
> .. _`#3348`: https://github.com/apache/cloudstack/pull/3348
> .. _`#3333`: https://github.com/apache/cloudstack/pull/3333
> .. _`#3239`: https://github.com/apache/cloudstack/pull/3239
> .. _`#3278`: https://github.com/apache/cloudstack/pull/3278
> .. _`#3276`: https://github.com/apache/cloudstack/pull/3276
> .. _`#3204`: https://github.com/apache/cloudstack/pull/3204
> .. _`#3269`: https://github.com/apache/cloudstack/pull/3269
> .. _`#3266`: https://github.com/apache/cloudstack/pull/3266
> .. _`#3238`: https://github.com/apache/cloudstack/pull/3238
> .. _`#2869`: https://github.com/apache/cloudstack/pull/2869
> .. _`#3158`: https://github.com/apache/cloudstack/pull/3158
> .. _`#3210`: https://github.com/apache/cloudstack/pull/3210
> .. _`#3163`: https://github.com/apache/cloudstack/pull/3163
> .. _`#3122`: https://github.com/apache/cloudstack/pull/3122
> .. _`#3139`: https://github.com/apache/cloudstack/pull/3139
> .. _`#3134`: https://github.com/apache/cloudstack/pull/3134
> .. _`#3105`: https://github.com/apache/cloudstack/pull/3105
> .. _`#3095`: https://github.com/apache/cloudstack/pull/3095
> .. _`#3106`: https://github.com/apache/cloudstack/pull/3106
> .. _`#3098`: https://github.com/apache/cloudstack/pull/3098
> .. _`#2894`: https://github.com/apache/cloudstack/pull/2894
> .. _`#3024`: https://github.com/apache/cloudstack/pull/3024
> .. _`#3005`: https://github.com/apache/cloudstack/pull/3005
> .. _`#3076`: https://github.com/apache/cloudstack/pull/3076
> .. _`#3030`: https://github.com/apache/cloudstack/pull/3030
> .. _`#3066`: https://github.com/apache/cloudstack/pull/3066
> .. _`#3037`: https://github.com/apache/cloudstack/pull/3037
> .. _`#2990`: https://github.com/apache/cloudstack/pull/2990
> .. _`#3055`: https://github.com/apache/cloudstack/pull/3055
> .. _`#3038`: https://github.com/apache/cloudstack/pull/3038
> .. _`#3021`: https://github.com/apache/cloudstack/pull/3021
>
>
> paul.angus@shapeblue.com
> www.shapeblue.com
> Amadeus House, Floral Street, London  WC2E 9DPUK
> @shapeblue
>    
>   
>


Re: [VOTE] 4.11.3.0 RC1

Posted by "Riepl, Gregor (SWISS TXT)" <Gr...@swisstxt.ch>.
Hi Andrija + Rohit,


Yes, as far as I can tell, we followed the upgrade instructions to the letter - except for the version.

The instructions still mention systemvm-vmware-4.11.2, we named the new template systemvm-vmware-4.11.3 instead.


After upgrading the packages, my colleague checked, and systemvm-vmware-4.11.3 was still a USER template.

The mentioned global settings were also unchanged.


We ran into the same problem when we upgraded our staging cloud to 4.11.2 a few weeks ago, by the way.


Regards,

Gregor

________________________________
From: Rohit Yadav <ro...@shapeblue.com>
Sent: 13 June 2019 12:49:40
To: dev; users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Gregor,


Please follow the following guide, but use the systemvmtemplate URL from the mirror shared on this thread and register the template with the name as "systemvm-<hypervisor>-4.11.3" before upgrading to 4.11.3.0-rc1:

http://docs.cloudstack.apache.org/en/4.11.2.0/upgrading/upgrade/upgrade-4.11.html



Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Andrija Panic <an...@gmail.com>
Sent: Thursday, June 13, 2019 2:45:50 AM
To: dev
Cc: users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Gregor,

can you confirm if you followed the steps exactly in regards to template
flags and more importantly the actual name - I believe in the code, during
upgrading, it will search for specific template name (i.e.
systemvm-vmware-4.11.3) and update it's DB values so it becomes a "SYSTEM"
instead of "USER" type that it was initially.

Andrija

On Wed, 12 Jun 2019 at 16:46, Riepl, Gregor (SWISS TXT) <
Gregor.Riepl@swisstxt.ch> wrote:

> Hi Paul,
>
> > The release notes are still work-in-progress, but the systemvm
> > template upgrade section has been updated. You may refer the
> > following for systemvm template upgrade testing:
> >
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>
> Thanks!
>
> We're doing our own tests right now, but ran into problems when
> updating the system VMs.
>
> For one, after registering the new VMware systemvm template, it is
> shown as a "USER" template. I'm not sure if this is correct. Is there
> an additional step to ensure it is considered a "SYSTEM" template?
> I believe this is important so the SSVM and Console Proxy get upgraded.
>
> Secondly, the upgrade instructions do not mention updating
> minreq.sysvmtemplate.version
> and
> router.template.<hypervisor>
> to the
> version/name of the new template.
>
> Without this step, routers won't be upgraded to the new template.
> IMHO, it should be mentioned in all upgrade instructions.
>
> Should I prepare a PR against the documentation?
>
> Best regards,
> Gregor
>


--

Andrija Panić

rohit.yadav@shapeblue.com
www.shapeblue.com<http://www.shapeblue.com>
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




Re: [VOTE] 4.11.3.0 RC1

Posted by "Riepl, Gregor (SWISS TXT)" <Gr...@swisstxt.ch>.
So, I think it's ok to leave this issue aside.

I have a suspicion why the templates don't get upgraded, but since we know how to fix them manually, it's not release critical.

We'll open a ticket later.


________________________________
From: Rohit Yadav <ro...@shapeblue.com>
Sent: 13 June 2019 12:49:40
To: dev; users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Gregor,


Please follow the following guide, but use the systemvmtemplate URL from the mirror shared on this thread and register the template with the name as "systemvm-<hypervisor>-4.11.3" before upgrading to 4.11.3.0-rc1:

http://docs.cloudstack.apache.org/en/4.11.2.0/upgrading/upgrade/upgrade-4.11.html



Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Andrija Panic <an...@gmail.com>
Sent: Thursday, June 13, 2019 2:45:50 AM
To: dev
Cc: users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Gregor,

can you confirm if you followed the steps exactly in regards to template
flags and more importantly the actual name - I believe in the code, during
upgrading, it will search for specific template name (i.e.
systemvm-vmware-4.11.3) and update it's DB values so it becomes a "SYSTEM"
instead of "USER" type that it was initially.

Andrija

On Wed, 12 Jun 2019 at 16:46, Riepl, Gregor (SWISS TXT) <
Gregor.Riepl@swisstxt.ch> wrote:

> Hi Paul,
>
> > The release notes are still work-in-progress, but the systemvm
> > template upgrade section has been updated. You may refer the
> > following for systemvm template upgrade testing:
> >
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>
> Thanks!
>
> We're doing our own tests right now, but ran into problems when
> updating the system VMs.
>
> For one, after registering the new VMware systemvm template, it is
> shown as a "USER" template. I'm not sure if this is correct. Is there
> an additional step to ensure it is considered a "SYSTEM" template?
> I believe this is important so the SSVM and Console Proxy get upgraded.
>
> Secondly, the upgrade instructions do not mention updating
> minreq.sysvmtemplate.version
> and
> router.template.<hypervisor>
> to the
> version/name of the new template.
>
> Without this step, routers won't be upgraded to the new template.
> IMHO, it should be mentioned in all upgrade instructions.
>
> Should I prepare a PR against the documentation?
>
> Best regards,
> Gregor
>


--

Andrija Panić

rohit.yadav@shapeblue.com
www.shapeblue.com<http://www.shapeblue.com>
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




Re: [VOTE] 4.11.3.0 RC1

Posted by "Riepl, Gregor (SWISS TXT)" <Gr...@swisstxt.ch>.
So, I think it's ok to leave this issue aside.

I have a suspicion why the templates don't get upgraded, but since we know how to fix them manually, it's not release critical.

We'll open a ticket later.


________________________________
From: Rohit Yadav <ro...@shapeblue.com>
Sent: 13 June 2019 12:49:40
To: dev; users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Gregor,


Please follow the following guide, but use the systemvmtemplate URL from the mirror shared on this thread and register the template with the name as "systemvm-<hypervisor>-4.11.3" before upgrading to 4.11.3.0-rc1:

http://docs.cloudstack.apache.org/en/4.11.2.0/upgrading/upgrade/upgrade-4.11.html



Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Andrija Panic <an...@gmail.com>
Sent: Thursday, June 13, 2019 2:45:50 AM
To: dev
Cc: users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Gregor,

can you confirm if you followed the steps exactly in regards to template
flags and more importantly the actual name - I believe in the code, during
upgrading, it will search for specific template name (i.e.
systemvm-vmware-4.11.3) and update it's DB values so it becomes a "SYSTEM"
instead of "USER" type that it was initially.

Andrija

On Wed, 12 Jun 2019 at 16:46, Riepl, Gregor (SWISS TXT) <
Gregor.Riepl@swisstxt.ch> wrote:

> Hi Paul,
>
> > The release notes are still work-in-progress, but the systemvm
> > template upgrade section has been updated. You may refer the
> > following for systemvm template upgrade testing:
> >
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>
> Thanks!
>
> We're doing our own tests right now, but ran into problems when
> updating the system VMs.
>
> For one, after registering the new VMware systemvm template, it is
> shown as a "USER" template. I'm not sure if this is correct. Is there
> an additional step to ensure it is considered a "SYSTEM" template?
> I believe this is important so the SSVM and Console Proxy get upgraded.
>
> Secondly, the upgrade instructions do not mention updating
> minreq.sysvmtemplate.version
> and
> router.template.<hypervisor>
> to the
> version/name of the new template.
>
> Without this step, routers won't be upgraded to the new template.
> IMHO, it should be mentioned in all upgrade instructions.
>
> Should I prepare a PR against the documentation?
>
> Best regards,
> Gregor
>


--

Andrija Panić

rohit.yadav@shapeblue.com
www.shapeblue.com<http://www.shapeblue.com>
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




Re: [VOTE] 4.11.3.0 RC1

Posted by Rohit Yadav <ro...@shapeblue.com>.
Gregor,


Please follow the following guide, but use the systemvmtemplate URL from the mirror shared on this thread and register the template with the name as "systemvm-<hypervisor>-4.11.3" before upgrading to 4.11.3.0-rc1:

http://docs.cloudstack.apache.org/en/4.11.2.0/upgrading/upgrade/upgrade-4.11.html



Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Andrija Panic <an...@gmail.com>
Sent: Thursday, June 13, 2019 2:45:50 AM
To: dev
Cc: users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Gregor,

can you confirm if you followed the steps exactly in regards to template
flags and more importantly the actual name - I believe in the code, during
upgrading, it will search for specific template name (i.e.
systemvm-vmware-4.11.3) and update it's DB values so it becomes a "SYSTEM"
instead of "USER" type that it was initially.

Andrija

On Wed, 12 Jun 2019 at 16:46, Riepl, Gregor (SWISS TXT) <
Gregor.Riepl@swisstxt.ch> wrote:

> Hi Paul,
>
> > The release notes are still work-in-progress, but the systemvm
> > template upgrade section has been updated. You may refer the
> > following for systemvm template upgrade testing:
> >
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>
> Thanks!
>
> We're doing our own tests right now, but ran into problems when
> updating the system VMs.
>
> For one, after registering the new VMware systemvm template, it is
> shown as a "USER" template. I'm not sure if this is correct. Is there
> an additional step to ensure it is considered a "SYSTEM" template?
> I believe this is important so the SSVM and Console Proxy get upgraded.
>
> Secondly, the upgrade instructions do not mention updating
> minreq.sysvmtemplate.version
> and
> router.template.<hypervisor>
> to the
> version/name of the new template.
>
> Without this step, routers won't be upgraded to the new template.
> IMHO, it should be mentioned in all upgrade instructions.
>
> Should I prepare a PR against the documentation?
>
> Best regards,
> Gregor
>


--

Andrija Panić

rohit.yadav@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


Re: [VOTE] 4.11.3.0 RC1

Posted by Rohit Yadav <ro...@shapeblue.com>.
Gregor,


Please follow the following guide, but use the systemvmtemplate URL from the mirror shared on this thread and register the template with the name as "systemvm-<hypervisor>-4.11.3" before upgrading to 4.11.3.0-rc1:

http://docs.cloudstack.apache.org/en/4.11.2.0/upgrading/upgrade/upgrade-4.11.html



Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Andrija Panic <an...@gmail.com>
Sent: Thursday, June 13, 2019 2:45:50 AM
To: dev
Cc: users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Gregor,

can you confirm if you followed the steps exactly in regards to template
flags and more importantly the actual name - I believe in the code, during
upgrading, it will search for specific template name (i.e.
systemvm-vmware-4.11.3) and update it's DB values so it becomes a "SYSTEM"
instead of "USER" type that it was initially.

Andrija

On Wed, 12 Jun 2019 at 16:46, Riepl, Gregor (SWISS TXT) <
Gregor.Riepl@swisstxt.ch> wrote:

> Hi Paul,
>
> > The release notes are still work-in-progress, but the systemvm
> > template upgrade section has been updated. You may refer the
> > following for systemvm template upgrade testing:
> >
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>
> Thanks!
>
> We're doing our own tests right now, but ran into problems when
> updating the system VMs.
>
> For one, after registering the new VMware systemvm template, it is
> shown as a "USER" template. I'm not sure if this is correct. Is there
> an additional step to ensure it is considered a "SYSTEM" template?
> I believe this is important so the SSVM and Console Proxy get upgraded.
>
> Secondly, the upgrade instructions do not mention updating
> minreq.sysvmtemplate.version
> and
> router.template.<hypervisor>
> to the
> version/name of the new template.
>
> Without this step, routers won't be upgraded to the new template.
> IMHO, it should be mentioned in all upgrade instructions.
>
> Should I prepare a PR against the documentation?
>
> Best regards,
> Gregor
>


--

Andrija Panić

rohit.yadav@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


Re: [VOTE] 4.11.3.0 RC1

Posted by Andrija Panic <an...@gmail.com>.
Gregor,

can you confirm if you followed the steps exactly in regards to template
flags and more importantly the actual name - I believe in the code, during
upgrading, it will search for specific template name (i.e.
systemvm-vmware-4.11.3) and update it's DB values so it becomes a "SYSTEM"
instead of "USER" type that it was initially.

Andrija

On Wed, 12 Jun 2019 at 16:46, Riepl, Gregor (SWISS TXT) <
Gregor.Riepl@swisstxt.ch> wrote:

> Hi Paul,
>
> > The release notes are still work-in-progress, but the systemvm
> > template upgrade section has been updated. You may refer the
> > following for systemvm template upgrade testing:
> >
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>
> Thanks!
>
> We're doing our own tests right now, but ran into problems when
> updating the system VMs.
>
> For one, after registering the new VMware systemvm template, it is
> shown as a "USER" template. I'm not sure if this is correct. Is there
> an additional step to ensure it is considered a "SYSTEM" template?
> I believe this is important so the SSVM and Console Proxy get upgraded.
>
> Secondly, the upgrade instructions do not mention updating
> minreq.sysvmtemplate.version
> and
> router.template.<hypervisor>
> to the
> version/name of the new template.
>
> Without this step, routers won't be upgraded to the new template.
> IMHO, it should be mentioned in all upgrade instructions.
>
> Should I prepare a PR against the documentation?
>
> Best regards,
> Gregor
>


-- 

Andrija Panić

Re: [VOTE] 4.11.3.0 RC1

Posted by Andrija Panic <an...@gmail.com>.
Gregor,

can you confirm if you followed the steps exactly in regards to template
flags and more importantly the actual name - I believe in the code, during
upgrading, it will search for specific template name (i.e.
systemvm-vmware-4.11.3) and update it's DB values so it becomes a "SYSTEM"
instead of "USER" type that it was initially.

Andrija

On Wed, 12 Jun 2019 at 16:46, Riepl, Gregor (SWISS TXT) <
Gregor.Riepl@swisstxt.ch> wrote:

> Hi Paul,
>
> > The release notes are still work-in-progress, but the systemvm
> > template upgrade section has been updated. You may refer the
> > following for systemvm template upgrade testing:
> >
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html
>
> Thanks!
>
> We're doing our own tests right now, but ran into problems when
> updating the system VMs.
>
> For one, after registering the new VMware systemvm template, it is
> shown as a "USER" template. I'm not sure if this is correct. Is there
> an additional step to ensure it is considered a "SYSTEM" template?
> I believe this is important so the SSVM and Console Proxy get upgraded.
>
> Secondly, the upgrade instructions do not mention updating
> minreq.sysvmtemplate.version
> and
> router.template.<hypervisor>
> to the
> version/name of the new template.
>
> Without this step, routers won't be upgraded to the new template.
> IMHO, it should be mentioned in all upgrade instructions.
>
> Should I prepare a PR against the documentation?
>
> Best regards,
> Gregor
>


-- 

Andrija Panić

Re: [VOTE] 4.11.3.0 RC1

Posted by "Riepl, Gregor (SWISS TXT)" <Gr...@swisstxt.ch>.
Hi Paul,

> The release notes are still work-in-progress, but the systemvm
> template upgrade section has been updated. You may refer the
> following for systemvm template upgrade testing:
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html

Thanks!

We're doing our own tests right now, but ran into problems when
updating the system VMs.

For one, after registering the new VMware systemvm template, it is
shown as a "USER" template. I'm not sure if this is correct. Is there
an additional step to ensure it is considered a "SYSTEM" template?
I believe this is important so the SSVM and Console Proxy get upgraded.

Secondly, the upgrade instructions do not mention updating 
minreq.sysvmtemplate.version
and
router.template.<hypervisor>
to the
version/name of the new template.

Without this step, routers won't be upgraded to the new template.
IMHO, it should be mentioned in all upgrade instructions.

Should I prepare a PR against the documentation?

Best regards,
Gregor

Re: [VOTE] 4.11.3.0 RC1

Posted by Sven Vogel <S....@ewerk.com>.
Hi Wei,

Sounds good.

Maybe we should add the fist option to ssvm and csvm too.


Option #1
Disable selective acknowledgments system wide for all newly established TCP connections.

# echo 0 > /proc/sys/net/ipv4/tcp_sack

or

# sysctl -w net.ipv4.tcp_sack=0


...

Sven


Von meinem iPhone gesendet


__

Sven Vogel
Teamlead Platform

EWERK RZ GmbH
Bruhl 24, D-04109 Leipzig
P +49 341 42649 - 11
F +49 341 42649 - 18
S.Vogel@ewerk.com
www.ewerk.com

Geschaftsfuhrer:
Dr. Erik Wende, Hendrik Schubert, Frank Richter
Registergericht: Leipzig HRB 17023

Zertifiziert nach:
ISO/IEC 27001:2013
DIN EN ISO 9001:2015
DIN ISO/IEC 20000-1:2011

EWERK-Blog<https://blog.ewerk.com/> | LinkedIn<https://www.linkedin.com/company/ewerk-group> | Xing<https://www.xing.com/company/ewerk> | Twitter<https://twitter.com/EWERK_Group> | Facebook<https://de-de.facebook.com/EWERK.IT/>

Auskunfte und Angebote per Mail sind freibleibend und unverbindlich.

Disclaimer Privacy:
Der Inhalt dieser E-Mail (einschlieslich etwaiger beigefugter Dateien) ist vertraulich und nur fur den Empfanger bestimmt. Sollten Sie nicht der bestimmungsgemase Empfanger sein, ist Ihnen jegliche Offenlegung, Vervielfaltigung, Weitergabe oder Nutzung des Inhalts untersagt. Bitte informieren Sie in diesem Fall unverzuglich den Absender und loschen Sie die E-Mail (einschlieslich etwaiger beigefugter Dateien) von Ihrem System. Vielen Dank.

The contents of this e-mail (including any attachments) are confidential and may be legally privileged. If you are not the intended recipient of this e-mail, any disclosure, copying, distribution or use of its contents is strictly prohibited, and you should please notify the sender immediately and then delete it (including any attachments) from your system. Thank you.

Am 18.06.2019 um 20:33 schrieb Wei ZHOU <us...@gmail.com>>:

Hi Rohit,

Do we need to change default iptable tables for cpvm and ssvm ?

# iptables -I INPUT -p tcp --tcp-flags SYN SYN -m tcpmss --mss 1:500 -j DROP
# ip6tables -I INPUT -p tcp --tcp-flags SYN SYN -m tcpmss --mss 1:500 -j
DROP
(see https://access.redhat.com/security/vulnerabilities/tcpsack)

-Wei


Rohit Yadav <ro...@shapeblue.com>> 于2019年6月18日周二 上午11:57写道:

All,


Due to recently disclosed and fixed tcp/SACK vulnerability and other
security issues (refer https://www.debian.org/security/2019/dsa-4465),
I've rebuilt and synced new 4.11.3.0 systemvmtemplates which has linux
4.9.168-1+deb9u3 (2019-06-16):


http://download.cloudstack.org/systemvm/testing/4.11.3-rc

http://packages.shapeblue.com/testing/systemvm/41130rc1


Kindly continue testing 4.11.3.0 RC1 using above systemvmtemplates. Thanks.


Build log for reference:
http://download.cloudstack.org/systemvm/testing/4.11.3-rc/build.log


Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Riepl, Gregor (SWISS TXT) <Gr...@swisstxt.ch>>
Sent: Friday, June 14, 2019 7:45:58 PM
To: dev@cloudstack.apache.org<ma...@cloudstack.apache.org>; users@cloudstack.apache.org<ma...@cloudstack.apache.org>
Subject: Re: [VOTE] 4.11.3.0 RC1

+1

Based on:
- Packages from http://packages.shapeblue.com/testing/41130rc1/ and
http://packages.shapeblue.com/testing/systemvm/41130rc1/
- Upgrade of our test cloud from 4.11.2 to 4.11.3 worked without problems
(aside from the mentioned template issue)
- Our internal smoke test stack ran successfully

The only thing I'm a bit unhappy about is the backported ostype API fix:
https://github.com/apache/cloudstack/pull/3066
Since this is a breaking API change, I don't think it should be included
in a minor release, even if it fixes an API bug.
It triggers an error in Packer, which we use to create templates.
However, a fix was already commited and will be in the next Packer
release, so I'm ok'ing it: https://github.com/hashicorp/packer/pull/7694

rohit.yadav@shapeblue.com<ma...@shapeblue.com>
www.shapeblue.com<http://www.shapeblue.com>
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue





Re: [VOTE] 4.11.3.0 RC1

Posted by Rohit Yadav <ro...@shapeblue.com>.
Hi Wei, the workaround is only necessary when kernel security patch cannot be applied and afterwards the host cannot be rebooted. For 4.11.3.0 rc1, the new systemvmtemplate has the latest kernel security patch.

Regards.

Regards,
Rohit Yadav

________________________________
From: Wei ZHOU <us...@gmail.com>
Sent: Wednesday, June 19, 2019 12:02:46 AM
To: dev@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

Hi Rohit,

Do we need to change default iptable tables for cpvm and ssvm ?

# iptables -I INPUT -p tcp --tcp-flags SYN SYN -m tcpmss --mss 1:500 -j DROP
# ip6tables -I INPUT -p tcp --tcp-flags SYN SYN -m tcpmss --mss 1:500 -j
DROP
(see https://access.redhat.com/security/vulnerabilities/tcpsack)

-Wei


Rohit Yadav <ro...@shapeblue.com> 于2019年6月18日周二 上午11:57写道:

> All,
>
>
> Due to recently disclosed and fixed tcp/SACK vulnerability and other
> security issues (refer https://www.debian.org/security/2019/dsa-4465),
> I've rebuilt and synced new 4.11.3.0 systemvmtemplates which has linux
> 4.9.168-1+deb9u3 (2019-06-16):
>
>
> http://download.cloudstack.org/systemvm/testing/4.11.3-rc
>
> http://packages.shapeblue.com/testing/systemvm/41130rc1
>
>
> Kindly continue testing 4.11.3.0 RC1 using above systemvmtemplates. Thanks.
>
>
> Build log for reference:
> http://download.cloudstack.org/systemvm/testing/4.11.3-rc/build.log
>
>
> Regards,
>
> Rohit Yadav
>
> Software Architect, ShapeBlue
>
> https://www.shapeblue.com
>
> ________________________________
> From: Riepl, Gregor (SWISS TXT) <Gr...@swisstxt.ch>
> Sent: Friday, June 14, 2019 7:45:58 PM
> To: dev@cloudstack.apache.org; users@cloudstack.apache.org
> Subject: Re: [VOTE] 4.11.3.0 RC1
>
> +1
>
> Based on:
> - Packages from http://packages.shapeblue.com/testing/41130rc1/ and
> http://packages.shapeblue.com/testing/systemvm/41130rc1/
> - Upgrade of our test cloud from 4.11.2 to 4.11.3 worked without problems
> (aside from the mentioned template issue)
> - Our internal smoke test stack ran successfully
>
> The only thing I'm a bit unhappy about is the backported ostype API fix:
> https://github.com/apache/cloudstack/pull/3066
> Since this is a breaking API change, I don't think it should be included
> in a minor release, even if it fixes an API bug.
> It triggers an error in Packer, which we use to create templates.
> However, a fix was already commited and will be in the next Packer
> release, so I'm ok'ing it: https://github.com/hashicorp/packer/pull/7694
>
> rohit.yadav@shapeblue.com
> www.shapeblue.com<http://www.shapeblue.com>
> Amadeus House, Floral Street, London  WC2E 9DPUK
> @shapeblue
>
>
>
>

rohit.yadav@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


Re: [VOTE] 4.11.3.0 RC1

Posted by Wei ZHOU <us...@gmail.com>.
Hi Rohit,

Do we need to change default iptable tables for cpvm and ssvm ?

# iptables -I INPUT -p tcp --tcp-flags SYN SYN -m tcpmss --mss 1:500 -j DROP
# ip6tables -I INPUT -p tcp --tcp-flags SYN SYN -m tcpmss --mss 1:500 -j
DROP
(see https://access.redhat.com/security/vulnerabilities/tcpsack)

-Wei


Rohit Yadav <ro...@shapeblue.com> 于2019年6月18日周二 上午11:57写道:

> All,
>
>
> Due to recently disclosed and fixed tcp/SACK vulnerability and other
> security issues (refer https://www.debian.org/security/2019/dsa-4465),
> I've rebuilt and synced new 4.11.3.0 systemvmtemplates which has linux
> 4.9.168-1+deb9u3 (2019-06-16):
>
>
> http://download.cloudstack.org/systemvm/testing/4.11.3-rc
>
> http://packages.shapeblue.com/testing/systemvm/41130rc1
>
>
> Kindly continue testing 4.11.3.0 RC1 using above systemvmtemplates. Thanks.
>
>
> Build log for reference:
> http://download.cloudstack.org/systemvm/testing/4.11.3-rc/build.log
>
>
> Regards,
>
> Rohit Yadav
>
> Software Architect, ShapeBlue
>
> https://www.shapeblue.com
>
> ________________________________
> From: Riepl, Gregor (SWISS TXT) <Gr...@swisstxt.ch>
> Sent: Friday, June 14, 2019 7:45:58 PM
> To: dev@cloudstack.apache.org; users@cloudstack.apache.org
> Subject: Re: [VOTE] 4.11.3.0 RC1
>
> +1
>
> Based on:
> - Packages from http://packages.shapeblue.com/testing/41130rc1/ and
> http://packages.shapeblue.com/testing/systemvm/41130rc1/
> - Upgrade of our test cloud from 4.11.2 to 4.11.3 worked without problems
> (aside from the mentioned template issue)
> - Our internal smoke test stack ran successfully
>
> The only thing I'm a bit unhappy about is the backported ostype API fix:
> https://github.com/apache/cloudstack/pull/3066
> Since this is a breaking API change, I don't think it should be included
> in a minor release, even if it fixes an API bug.
> It triggers an error in Packer, which we use to create templates.
> However, a fix was already commited and will be in the next Packer
> release, so I'm ok'ing it: https://github.com/hashicorp/packer/pull/7694
>
> rohit.yadav@shapeblue.com
> www.shapeblue.com
> Amadeus House, Floral Street, London  WC2E 9DPUK
> @shapeblue
>
>
>
>

Re: [VOTE] 4.11.3.0 RC1

Posted by Rohit Yadav <ro...@shapeblue.com>.
All,


Due to recently disclosed and fixed tcp/SACK vulnerability and other security issues (refer https://www.debian.org/security/2019/dsa-4465), I've rebuilt and synced new 4.11.3.0 systemvmtemplates which has linux 4.9.168-1+deb9u3 (2019-06-16):


http://download.cloudstack.org/systemvm/testing/4.11.3-rc

http://packages.shapeblue.com/testing/systemvm/41130rc1


Kindly continue testing 4.11.3.0 RC1 using above systemvmtemplates. Thanks.


Build log for reference: http://download.cloudstack.org/systemvm/testing/4.11.3-rc/build.log


Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Riepl, Gregor (SWISS TXT) <Gr...@swisstxt.ch>
Sent: Friday, June 14, 2019 7:45:58 PM
To: dev@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

+1

Based on:
- Packages from http://packages.shapeblue.com/testing/41130rc1/ and http://packages.shapeblue.com/testing/systemvm/41130rc1/
- Upgrade of our test cloud from 4.11.2 to 4.11.3 worked without problems (aside from the mentioned template issue)
- Our internal smoke test stack ran successfully

The only thing I'm a bit unhappy about is the backported ostype API fix: https://github.com/apache/cloudstack/pull/3066
Since this is a breaking API change, I don't think it should be included in a minor release, even if it fixes an API bug.
It triggers an error in Packer, which we use to create templates.
However, a fix was already commited and will be in the next Packer release, so I'm ok'ing it: https://github.com/hashicorp/packer/pull/7694

rohit.yadav@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


Re: [VOTE] 4.11.3.0 RC1

Posted by Rohit Yadav <ro...@shapeblue.com>.
All,


Due to recently disclosed and fixed tcp/SACK vulnerability and other security issues (refer https://www.debian.org/security/2019/dsa-4465), I've rebuilt and synced new 4.11.3.0 systemvmtemplates which has linux 4.9.168-1+deb9u3 (2019-06-16):


http://download.cloudstack.org/systemvm/testing/4.11.3-rc

http://packages.shapeblue.com/testing/systemvm/41130rc1


Kindly continue testing 4.11.3.0 RC1 using above systemvmtemplates. Thanks.


Build log for reference: http://download.cloudstack.org/systemvm/testing/4.11.3-rc/build.log


Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Riepl, Gregor (SWISS TXT) <Gr...@swisstxt.ch>
Sent: Friday, June 14, 2019 7:45:58 PM
To: dev@cloudstack.apache.org; users@cloudstack.apache.org
Subject: Re: [VOTE] 4.11.3.0 RC1

+1

Based on:
- Packages from http://packages.shapeblue.com/testing/41130rc1/ and http://packages.shapeblue.com/testing/systemvm/41130rc1/
- Upgrade of our test cloud from 4.11.2 to 4.11.3 worked without problems (aside from the mentioned template issue)
- Our internal smoke test stack ran successfully

The only thing I'm a bit unhappy about is the backported ostype API fix: https://github.com/apache/cloudstack/pull/3066
Since this is a breaking API change, I don't think it should be included in a minor release, even if it fixes an API bug.
It triggers an error in Packer, which we use to create templates.
However, a fix was already commited and will be in the next Packer release, so I'm ok'ing it: https://github.com/hashicorp/packer/pull/7694

rohit.yadav@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


Re: [VOTE] 4.11.3.0 RC1

Posted by "Riepl, Gregor (SWISS TXT)" <Gr...@swisstxt.ch>.
+1

Based on:
- Packages from http://packages.shapeblue.com/testing/41130rc1/ and http://packages.shapeblue.com/testing/systemvm/41130rc1/
- Upgrade of our test cloud from 4.11.2 to 4.11.3 worked without problems (aside from the mentioned template issue)
- Our internal smoke test stack ran successfully

The only thing I'm a bit unhappy about is the backported ostype API fix: https://github.com/apache/cloudstack/pull/3066
Since this is a breaking API change, I don't think it should be included in a minor release, even if it fixes an API bug.
It triggers an error in Packer, which we use to create templates.
However, a fix was already commited and will be in the next Packer release, so I'm ok'ing it: https://github.com/hashicorp/packer/pull/7694

Re: [VOTE] 4.11.3.0 RC1

Posted by "Riepl, Gregor (SWISS TXT)" <Gr...@swisstxt.ch>.
+1

Based on:
- Packages from http://packages.shapeblue.com/testing/41130rc1/ and http://packages.shapeblue.com/testing/systemvm/41130rc1/
- Upgrade of our test cloud from 4.11.2 to 4.11.3 worked without problems (aside from the mentioned template issue)
- Our internal smoke test stack ran successfully

The only thing I'm a bit unhappy about is the backported ostype API fix: https://github.com/apache/cloudstack/pull/3066
Since this is a breaking API change, I don't think it should be included in a minor release, even if it fixes an API bug.
It triggers an error in Packer, which we use to create templates.
However, a fix was already commited and will be in the next Packer release, so I'm ok'ing it: https://github.com/hashicorp/packer/pull/7694

Re: [VOTE] 4.11.3.0 RC1

Posted by Rohit Yadav <ro...@shapeblue.com>.
+1 (binding)


Based on;


> gpg --verify apache-cloudstack-4.11.3.0-src.tar.bz2.asc
gpg: assuming signed data in 'apache-cloudstack-4.11.3.0-src.tar.bz2'
gpg: Signature made Mon 10 Jun 2019 08:45:16 PM IST
gpg:                using RSA key 8B309F7251EE0BC8
gpg: Good signature from "Paul Angus (apache) <pa...@apache.org>"
Primary key fingerprint: 70F0 17ED 6DB6 7AC9 2681  66C1 8B30 9F72 51EE 0BC8

Smoketest ~100% pass on kvm, xenserver, vmware, and simulator/Travis:

https://github.com/apache/cloudstack/pull/3376

https://github.com/apache/cloudstack/pull/3381


4.11.3 systemvmtemplates location verified, OK;

http://download.cloudstack.org/systemvm/testing/4.11.3-rc/

http://packages.shapeblue.com/testing/systemvm/41130rc1/ (templates syncing now)


Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Paul Angus <pa...@shapeblue.com>
Sent: Tuesday, June 11, 2019 3:27:29 PM
To: dev@cloudstack.apache.org; users@cloudstack.apache.org
Subject: [VOTE] 4.11.3.0 RC1


Hi All,

I've created a 4.11.3.0 release (RC1), with the following artefacts up for testing and a vote:


Git Branch and Commit SH:
https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.3.0-RC20190610T1615
Commit: 51124b7b35f47089b2e51a93b2094ea93dd15302

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.3.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open until end of 16 June 2019.

For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 51124b7b35f47089b2e51a93b2094ea93dd15302 and published RC1 repository here:
http://packages.shapeblue.com/testing/41130rc1/

The release notes are still work-in-progress, but the systemvm template upgrade section has been updated. You may refer the following for systemvm template upgrade testing:
http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html

4.11.3.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41130rc1/



PRs in 4.11.3.0:
+==============+

+-------------------------+----------+------------------------------------------------------------+
| Version                 | Github   | Description                                                |
+=========================+==========+============================================================+
| 4.11.3.0                | `#3381`_ | schema: add 4.11.2 to 4.11.3 systemvmtemplate upgrade path |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3075`_ | KVM: Prevent regenerating keystore on provisionCertificate |
|                         |          | API                                                        |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3373`_ | router: support multi-homed VMs in VPC                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3366`_ | Fix rule duplication with static NAT rules                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3194`_ | Suspending a VM before snapshot deletion (see PR #3193)    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3370`_ | ssvm: apply MTU value on storage/management nic if         |
|                         |          | available                                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2995`_ | KVM: Improvements on upload direct download certificates   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3351`_ | Have persistent DHCP leases file on VRs and cleanup        |
|                         |          | /etc/hosts on VM deletion                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3310`_ | Fix removing static NAT rules with Juniper SRX             |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3361`_ | Fix 4.11 VR Issues with Multiple Public Subnets            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3206`_ | server: allow dedicate ip range to a domain if ips are     |
|                         |          | used by an account in the domain                           |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3205`_ | server: update dhcp configurations in vrs while update     |
|                         |          | default nic of running vms                                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3362`_ | vmware: fix potential NPE when memory hotplug capability   |
|                         |          | is checked                                                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3338`_ | ui: fix enable static nat only towards first nic and not   |
|                         |          | on any other interface                                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3359`_ | Ui: Reset multiselect actions when refreshing listView in  |
|                         |          | Instance page                                              |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3342`_ | VPC: Fail to restart VPC with cleanup if there are         |
|                         |          | multiple public IPs in different subnets                   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3348`_ | fix duplicate tag exception as CloudRuntimeException       |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3333`_ | server: ssh-keygen in PEM format and reduce main systemvm  |
|                         |          | patching script                                            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3239`_ | KVM: Fix agents dont reconnect post maintenance            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3278`_ | systemvm: new qemu-guest-agent based patching for KVM      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3276`_ | Allow VM that has never started to have volumes attached   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3204`_ | server: Fix exception while update domain resource count   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3269`_ | packaging: systemctl daemon-reload after agent install or  |
|                         |          | upgrade                                                    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3266`_ | packaging: don't skip unit tests while building packages   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3238`_ | client: don't disable TLSv1, TLSv1.1 by default that       |
|                         |          | breaks VMware env                                          |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2869`_ | Fix some Marvin smoke tests                                |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3158`_ | Allow users of all types to create L2 networks             |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3210`_ | systemd: Fix -Dpid arg passing to systemd usage service    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3163`_ | systemd: fix services to allow TLS configurations via      |
|                         |          | java.security.ciphers                                      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3122`_ | Add back ability to disable backup of snapshot to          |
|                         |          | secondary                                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3139`_ | packaging: management default file cleanup                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3134`_ | keystore: don't restart systemvm cloud.service post cert   |
|                         |          | import                                                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3105`_ | VmwareStorageLayoutHelper throws StackOverflowError fix    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3095`_ | Prevent corner case for infinite PrepareForMaintenance     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3106`_ | marvin: add missing test data for test_migration smoketest |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3098`_ | Add support for keyword in listSSHKeyPairs command search  |
|                         |          | (#2920)                                                    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2894`_ | api: don't throttle api discovery for listApis command     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3024`_ | travis: fail fast if --with-marvin fails with nose         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3005`_ | Discover tags field on superclass of API responses         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3076`_ | security: increase keystore setup/import timeout           |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3030`_ | correct permissions in spec file and fix class path        |
|                         |          | specified variable                                         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3066`_ | API: move ostypeid from DB id to DB uuid, backports #2528  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3037`_ | kvm: when untagged vxlan is used, use the default          |
|                         |          | guest/public bridge                                        |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2990`_ | Security Group: add secondary ips to the correct ipset     |
|                         |          | based on ip family (4.11)                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3055`_ | marvin: add missing default test data                      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3038`_ | surefire: ignore system classloader to make tests run      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3021`_ | Skip network migration tests for not supported hypervisors |
|                         |          | instead of failing                                         |
+-------------------------+----------+------------------------------------------------------------+

47 Issues listed

.. _`#3381`: https://github.com/apache/cloudstack/pull/3381
.. _`#3075`: https://github.com/apache/cloudstack/pull/3075
.. _`#3373`: https://github.com/apache/cloudstack/pull/3373
.. _`#3366`: https://github.com/apache/cloudstack/pull/3366
.. _`#3194`: https://github.com/apache/cloudstack/pull/3194
.. _`#3370`: https://github.com/apache/cloudstack/pull/3370
.. _`#2995`: https://github.com/apache/cloudstack/pull/2995
.. _`#3351`: https://github.com/apache/cloudstack/pull/3351
.. _`#3310`: https://github.com/apache/cloudstack/pull/3310
.. _`#3361`: https://github.com/apache/cloudstack/pull/3361
.. _`#3206`: https://github.com/apache/cloudstack/pull/3206
.. _`#3205`: https://github.com/apache/cloudstack/pull/3205
.. _`#3362`: https://github.com/apache/cloudstack/pull/3362
.. _`#3338`: https://github.com/apache/cloudstack/pull/3338
.. _`#3359`: https://github.com/apache/cloudstack/pull/3359
.. _`#3342`: https://github.com/apache/cloudstack/pull/3342
.. _`#3348`: https://github.com/apache/cloudstack/pull/3348
.. _`#3333`: https://github.com/apache/cloudstack/pull/3333
.. _`#3239`: https://github.com/apache/cloudstack/pull/3239
.. _`#3278`: https://github.com/apache/cloudstack/pull/3278
.. _`#3276`: https://github.com/apache/cloudstack/pull/3276
.. _`#3204`: https://github.com/apache/cloudstack/pull/3204
.. _`#3269`: https://github.com/apache/cloudstack/pull/3269
.. _`#3266`: https://github.com/apache/cloudstack/pull/3266
.. _`#3238`: https://github.com/apache/cloudstack/pull/3238
.. _`#2869`: https://github.com/apache/cloudstack/pull/2869
.. _`#3158`: https://github.com/apache/cloudstack/pull/3158
.. _`#3210`: https://github.com/apache/cloudstack/pull/3210
.. _`#3163`: https://github.com/apache/cloudstack/pull/3163
.. _`#3122`: https://github.com/apache/cloudstack/pull/3122
.. _`#3139`: https://github.com/apache/cloudstack/pull/3139
.. _`#3134`: https://github.com/apache/cloudstack/pull/3134
.. _`#3105`: https://github.com/apache/cloudstack/pull/3105
.. _`#3095`: https://github.com/apache/cloudstack/pull/3095
.. _`#3106`: https://github.com/apache/cloudstack/pull/3106
.. _`#3098`: https://github.com/apache/cloudstack/pull/3098
.. _`#2894`: https://github.com/apache/cloudstack/pull/2894
.. _`#3024`: https://github.com/apache/cloudstack/pull/3024
.. _`#3005`: https://github.com/apache/cloudstack/pull/3005
.. _`#3076`: https://github.com/apache/cloudstack/pull/3076
.. _`#3030`: https://github.com/apache/cloudstack/pull/3030
.. _`#3066`: https://github.com/apache/cloudstack/pull/3066
.. _`#3037`: https://github.com/apache/cloudstack/pull/3037
.. _`#2990`: https://github.com/apache/cloudstack/pull/2990
.. _`#3055`: https://github.com/apache/cloudstack/pull/3055
.. _`#3038`: https://github.com/apache/cloudstack/pull/3038
.. _`#3021`: https://github.com/apache/cloudstack/pull/3021


paul.angus@shapeblue.com
www.shapeblue.com<http://www.shapeblue.com>
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




rohit.yadav@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


Re: [VOTE] 4.11.3.0 RC1

Posted by Rohit Yadav <ro...@shapeblue.com>.
+1 (binding)


Based on;


> gpg --verify apache-cloudstack-4.11.3.0-src.tar.bz2.asc
gpg: assuming signed data in 'apache-cloudstack-4.11.3.0-src.tar.bz2'
gpg: Signature made Mon 10 Jun 2019 08:45:16 PM IST
gpg:                using RSA key 8B309F7251EE0BC8
gpg: Good signature from "Paul Angus (apache) <pa...@apache.org>"
Primary key fingerprint: 70F0 17ED 6DB6 7AC9 2681  66C1 8B30 9F72 51EE 0BC8

Smoketest ~100% pass on kvm, xenserver, vmware, and simulator/Travis:

https://github.com/apache/cloudstack/pull/3376

https://github.com/apache/cloudstack/pull/3381


4.11.3 systemvmtemplates location verified, OK;

http://download.cloudstack.org/systemvm/testing/4.11.3-rc/

http://packages.shapeblue.com/testing/systemvm/41130rc1/ (templates syncing now)


Regards,

Rohit Yadav

Software Architect, ShapeBlue

https://www.shapeblue.com

________________________________
From: Paul Angus <pa...@shapeblue.com>
Sent: Tuesday, June 11, 2019 3:27:29 PM
To: dev@cloudstack.apache.org; users@cloudstack.apache.org
Subject: [VOTE] 4.11.3.0 RC1


Hi All,

I've created a 4.11.3.0 release (RC1), with the following artefacts up for testing and a vote:


Git Branch and Commit SH:
https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.11.3.0-RC20190610T1615
Commit: 51124b7b35f47089b2e51a93b2094ea93dd15302

Source release (checksums and signatures are available at the same
location):
https://dist.apache.org/repos/dist/dev/cloudstack/4.11.3.0/

PGP release keys (signed using 51EE0BC8):
https://dist.apache.org/repos/dist/release/cloudstack/KEYS

The vote will be open until end of 16 June 2019.

For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Additional information:

For users' convenience, I've built packages from 51124b7b35f47089b2e51a93b2094ea93dd15302 and published RC1 repository here:
http://packages.shapeblue.com/testing/41130rc1/

The release notes are still work-in-progress, but the systemvm template upgrade section has been updated. You may refer the following for systemvm template upgrade testing:
http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html

4.11.3.0 systemvm templates are available from here:
http://packages.shapeblue.com/testing/systemvm/41130rc1/



PRs in 4.11.3.0:
+==============+

+-------------------------+----------+------------------------------------------------------------+
| Version                 | Github   | Description                                                |
+=========================+==========+============================================================+
| 4.11.3.0                | `#3381`_ | schema: add 4.11.2 to 4.11.3 systemvmtemplate upgrade path |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3075`_ | KVM: Prevent regenerating keystore on provisionCertificate |
|                         |          | API                                                        |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3373`_ | router: support multi-homed VMs in VPC                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3366`_ | Fix rule duplication with static NAT rules                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3194`_ | Suspending a VM before snapshot deletion (see PR #3193)    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3370`_ | ssvm: apply MTU value on storage/management nic if         |
|                         |          | available                                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2995`_ | KVM: Improvements on upload direct download certificates   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3351`_ | Have persistent DHCP leases file on VRs and cleanup        |
|                         |          | /etc/hosts on VM deletion                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3310`_ | Fix removing static NAT rules with Juniper SRX             |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3361`_ | Fix 4.11 VR Issues with Multiple Public Subnets            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3206`_ | server: allow dedicate ip range to a domain if ips are     |
|                         |          | used by an account in the domain                           |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3205`_ | server: update dhcp configurations in vrs while update     |
|                         |          | default nic of running vms                                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3362`_ | vmware: fix potential NPE when memory hotplug capability   |
|                         |          | is checked                                                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3338`_ | ui: fix enable static nat only towards first nic and not   |
|                         |          | on any other interface                                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3359`_ | Ui: Reset multiselect actions when refreshing listView in  |
|                         |          | Instance page                                              |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3342`_ | VPC: Fail to restart VPC with cleanup if there are         |
|                         |          | multiple public IPs in different subnets                   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3348`_ | fix duplicate tag exception as CloudRuntimeException       |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3333`_ | server: ssh-keygen in PEM format and reduce main systemvm  |
|                         |          | patching script                                            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3239`_ | KVM: Fix agents dont reconnect post maintenance            |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3278`_ | systemvm: new qemu-guest-agent based patching for KVM      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3276`_ | Allow VM that has never started to have volumes attached   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3204`_ | server: Fix exception while update domain resource count   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3269`_ | packaging: systemctl daemon-reload after agent install or  |
|                         |          | upgrade                                                    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3266`_ | packaging: don't skip unit tests while building packages   |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3238`_ | client: don't disable TLSv1, TLSv1.1 by default that       |
|                         |          | breaks VMware env                                          |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2869`_ | Fix some Marvin smoke tests                                |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3158`_ | Allow users of all types to create L2 networks             |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3210`_ | systemd: Fix -Dpid arg passing to systemd usage service    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3163`_ | systemd: fix services to allow TLS configurations via      |
|                         |          | java.security.ciphers                                      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3122`_ | Add back ability to disable backup of snapshot to          |
|                         |          | secondary                                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3139`_ | packaging: management default file cleanup                 |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3134`_ | keystore: don't restart systemvm cloud.service post cert   |
|                         |          | import                                                     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3105`_ | VmwareStorageLayoutHelper throws StackOverflowError fix    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3095`_ | Prevent corner case for infinite PrepareForMaintenance     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3106`_ | marvin: add missing test data for test_migration smoketest |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3098`_ | Add support for keyword in listSSHKeyPairs command search  |
|                         |          | (#2920)                                                    |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2894`_ | api: don't throttle api discovery for listApis command     |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3024`_ | travis: fail fast if --with-marvin fails with nose         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3005`_ | Discover tags field on superclass of API responses         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3076`_ | security: increase keystore setup/import timeout           |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3030`_ | correct permissions in spec file and fix class path        |
|                         |          | specified variable                                         |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3066`_ | API: move ostypeid from DB id to DB uuid, backports #2528  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3037`_ | kvm: when untagged vxlan is used, use the default          |
|                         |          | guest/public bridge                                        |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#2990`_ | Security Group: add secondary ips to the correct ipset     |
|                         |          | based on ip family (4.11)                                  |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3055`_ | marvin: add missing default test data                      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3038`_ | surefire: ignore system classloader to make tests run      |
+-------------------------+----------+------------------------------------------------------------+
| 4.11.3.0                | `#3021`_ | Skip network migration tests for not supported hypervisors |
|                         |          | instead of failing                                         |
+-------------------------+----------+------------------------------------------------------------+

47 Issues listed

.. _`#3381`: https://github.com/apache/cloudstack/pull/3381
.. _`#3075`: https://github.com/apache/cloudstack/pull/3075
.. _`#3373`: https://github.com/apache/cloudstack/pull/3373
.. _`#3366`: https://github.com/apache/cloudstack/pull/3366
.. _`#3194`: https://github.com/apache/cloudstack/pull/3194
.. _`#3370`: https://github.com/apache/cloudstack/pull/3370
.. _`#2995`: https://github.com/apache/cloudstack/pull/2995
.. _`#3351`: https://github.com/apache/cloudstack/pull/3351
.. _`#3310`: https://github.com/apache/cloudstack/pull/3310
.. _`#3361`: https://github.com/apache/cloudstack/pull/3361
.. _`#3206`: https://github.com/apache/cloudstack/pull/3206
.. _`#3205`: https://github.com/apache/cloudstack/pull/3205
.. _`#3362`: https://github.com/apache/cloudstack/pull/3362
.. _`#3338`: https://github.com/apache/cloudstack/pull/3338
.. _`#3359`: https://github.com/apache/cloudstack/pull/3359
.. _`#3342`: https://github.com/apache/cloudstack/pull/3342
.. _`#3348`: https://github.com/apache/cloudstack/pull/3348
.. _`#3333`: https://github.com/apache/cloudstack/pull/3333
.. _`#3239`: https://github.com/apache/cloudstack/pull/3239
.. _`#3278`: https://github.com/apache/cloudstack/pull/3278
.. _`#3276`: https://github.com/apache/cloudstack/pull/3276
.. _`#3204`: https://github.com/apache/cloudstack/pull/3204
.. _`#3269`: https://github.com/apache/cloudstack/pull/3269
.. _`#3266`: https://github.com/apache/cloudstack/pull/3266
.. _`#3238`: https://github.com/apache/cloudstack/pull/3238
.. _`#2869`: https://github.com/apache/cloudstack/pull/2869
.. _`#3158`: https://github.com/apache/cloudstack/pull/3158
.. _`#3210`: https://github.com/apache/cloudstack/pull/3210
.. _`#3163`: https://github.com/apache/cloudstack/pull/3163
.. _`#3122`: https://github.com/apache/cloudstack/pull/3122
.. _`#3139`: https://github.com/apache/cloudstack/pull/3139
.. _`#3134`: https://github.com/apache/cloudstack/pull/3134
.. _`#3105`: https://github.com/apache/cloudstack/pull/3105
.. _`#3095`: https://github.com/apache/cloudstack/pull/3095
.. _`#3106`: https://github.com/apache/cloudstack/pull/3106
.. _`#3098`: https://github.com/apache/cloudstack/pull/3098
.. _`#2894`: https://github.com/apache/cloudstack/pull/2894
.. _`#3024`: https://github.com/apache/cloudstack/pull/3024
.. _`#3005`: https://github.com/apache/cloudstack/pull/3005
.. _`#3076`: https://github.com/apache/cloudstack/pull/3076
.. _`#3030`: https://github.com/apache/cloudstack/pull/3030
.. _`#3066`: https://github.com/apache/cloudstack/pull/3066
.. _`#3037`: https://github.com/apache/cloudstack/pull/3037
.. _`#2990`: https://github.com/apache/cloudstack/pull/2990
.. _`#3055`: https://github.com/apache/cloudstack/pull/3055
.. _`#3038`: https://github.com/apache/cloudstack/pull/3038
.. _`#3021`: https://github.com/apache/cloudstack/pull/3021


paul.angus@shapeblue.com
www.shapeblue.com<http://www.shapeblue.com>
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue




rohit.yadav@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 


Re: [VOTE] 4.11.3.0 RC1

Posted by "Riepl, Gregor (SWISS TXT)" <Gr...@swisstxt.ch>.
Hi Paul,

> The release notes are still work-in-progress, but the systemvm
> template upgrade section has been updated. You may refer the
> following for systemvm template upgrade testing:
> http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/latest/index.html

Thanks!

We're doing our own tests right now, but ran into problems when
updating the system VMs.

For one, after registering the new VMware systemvm template, it is
shown as a "USER" template. I'm not sure if this is correct. Is there
an additional step to ensure it is considered a "SYSTEM" template?
I believe this is important so the SSVM and Console Proxy get upgraded.

Secondly, the upgrade instructions do not mention updating 
minreq.sysvmtemplate.version
and
router.template.<hypervisor>
to the
version/name of the new template.

Without this step, routers won't be upgraded to the new template.
IMHO, it should be mentioned in all upgrade instructions.

Should I prepare a PR against the documentation?

Best regards,
Gregor