You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Animesh Chaturvedi <an...@citrix.com> on 2014/03/13 01:26:47 UTC

[VOTE] Apache CloudStack 4.3.0 (eighth round)

Hi All,



I've created a 4.3.0 release, with the following artifacts up for a

vote:





Git Branch and Commit SH:

https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
Commit: 6a6ec648099553a42f830dcd566eab2452428908



List of changes:

New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248

Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249

Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161

Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162







Source release (checksums and signatures are available at the same

location):

https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



PGP release keys (signed using 94BE0D7C):

https://dist.apache.org/repos/dist/release/cloudstack/KEYS



Testing instructions are here:

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure



Vote will be open for 72 hours (Monday evening PST 5:30 PM)



For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?



[ ] +1  approve

[ ] +0  no opinion

[ ] -1  disapprove (and reason why)



Thanks

Animesh


RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 13.03.2014 21:24, Animesh Chaturvedi wrote:
>> [Animesh] Did you see this with prior RC too?
> [Animesh] Nux, security group support for advanced zone is limited
> and that too was developed in 4.2. I don’t think any changes have been
> made to that support since then. Can you call out what specific issue
> are you seeing? Most likely it is pre-existing issue or not supported.

I have not tested for this feature in the last RCs, I remember it was 
working fine with RC3 or so.
It is possible my setups have been polluted from so many tests, I 
really hope it's this, I'll try again tomorrow on clean servers.

As for the feature itself it was working beautifully, ie no access to 
the VMs until specified so in the SG and so on. As it is there is no 
firewall and all the VMs are exposed to the internet.
Yesterday a colleague tried this feature with RC7 and Xenserver 6.2 and 
it worked great. I'll ask if it still works well with RC8.

Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
> Sent: Friday, March 14, 2014 2:28 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> 
> 
> > -----Original Message-----
> > From: Edison Su [mailto:Edison.su@citrix.com]
> > Sent: Friday, March 14, 2014 1:59 PM
> > To: dev@cloudstack.apache.org
> > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > The following change will the be root cause:
> >
> > -        refs = execute("iptables -n -L " + brfw + " |grep " + brfw + " | cut -d \( -
> f2
> > | awk '{print $1}'").strip()
> > +        refs = execute("""iptables -n -L " + brfw + " | awk
> > + '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % brfw).strip()
> >
> > In commit: 052bff15c6603877e7a0767993eb4675e9bd9ca8
> >
> > The code should be
> > +        refs = execute("""iptables -n -L " + %s + " | awk
> > + '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % (brfw,
> > + brfw)).strip()
> 
> [Animesh]  Edison thanks for finding the root cause. Looking at the commit
> https://git-wip-
> us.apache.org/repos/asf?p=cloudstack.git;a=commit;h=052bff15c6603877e7a
> 0767993eb4675e9bd9ca8
> It has been broken since July last year and we did not run into it. Nux thanks
> for catching it. Commit message simply says "Replaced multiple
> grep/awk/head commands by one awk command" and the effects is pretty
> bad. There is no bug id associated with commit. Why did we have to change
> it?
> 
[Animesh] Can someone add a test case for this issue?
> 
> 
> 
> >
> > > -----Original Message-----
> > > From: Nux! [mailto:nux@li.nux.ro]
> > > Sent: Friday, March 14, 2014 1:13 PM
> > > To: dev@cloudstack.apache.org
> > > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> > >
> > > On 14.03.2014 19:36, Edison Su wrote:
> > > >> -----Original Message-----
> > > >> From: Nux! [mailto:nux@li.nux.ro]
> > > >> Sent: Friday, March 14, 2014 12:19 PM
> > > >> To: dev@cloudstack.apache.org
> > > >> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> > > >>
> > > >> On 14.03.2014 19:14, Edison Su wrote:
> > > >>> Hi Nux,
> > > >>>    Could you post security group log file on your 4.3 kvm host?
> > > >>> The file is @/var/log/cloudstack/agent/security_group.log
> > > >>
> > > >> Thanks Edison, but the problem went away once I replaced that
> > > >> python script with
> > > >> https://git-wip-
> > > >> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/v
> > > >> m/
> > > >> ne
> > > >> two
> > > >>
> > >
> >
> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> > > >> 898a264a5463b85c4cab3033f9c3161c5ef83f8
> > > >
> > > > But the code is not for 4.3, right?
> > > > I want to figure out, why 4.3 security group is broken.
> > >
> > > I think this is the key difference:
> > >
> > > -A FORWARD -o brbond0-540 -m physdev --physdev-is-bridged -j
> > > BF-brbond0-540
> > > -A FORWARD -i brbond0-540 -m physdev --physdev-is-bridged -j
> > > BF-brbond0-540
> > > -A FORWARD -o brbond0-540 -j DROP
> > > -A FORWARD -i brbond0-540 -j DROP
> > >
> > > It's missing in the 4.3 and since FORWARD chain defaults to ACCEPT ...
> > > I'll try to rollback to old script and send you the logs.
> > >
> > > Lucian
> > >
> > > --
> > > Sent from the Delta quadrant using Borg technology!
> > >
> > > Nux!
> > > www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Edison Su [mailto:Edison.su@citrix.com]
> Sent: Friday, March 14, 2014 1:59 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> The following change will the be root cause:
> 
> -        refs = execute("iptables -n -L " + brfw + " |grep " + brfw + " | cut -d \( -f2
> | awk '{print $1}'").strip()
> +        refs = execute("""iptables -n -L " + brfw + " | awk
> + '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % brfw).strip()
> 
> In commit: 052bff15c6603877e7a0767993eb4675e9bd9ca8
> 
> The code should be
> +        refs = execute("""iptables -n -L " + %s + " | awk
> + '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % (brfw,
> + brfw)).strip()

[Animesh]  Edison thanks for finding the root cause. Looking at the commit https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=commit;h=052bff15c6603877e7a0767993eb4675e9bd9ca8
It has been broken since July last year and we did not run into it. Nux thanks for catching it. Commit message simply says "Replaced multiple grep/awk/head commands by one awk command" and the effects is pretty bad. There is no bug id associated with commit. Why did we have to change it?




> 
> > -----Original Message-----
> > From: Nux! [mailto:nux@li.nux.ro]
> > Sent: Friday, March 14, 2014 1:13 PM
> > To: dev@cloudstack.apache.org
> > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > On 14.03.2014 19:36, Edison Su wrote:
> > >> -----Original Message-----
> > >> From: Nux! [mailto:nux@li.nux.ro]
> > >> Sent: Friday, March 14, 2014 12:19 PM
> > >> To: dev@cloudstack.apache.org
> > >> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> > >>
> > >> On 14.03.2014 19:14, Edison Su wrote:
> > >>> Hi Nux,
> > >>>    Could you post security group log file on your 4.3 kvm host?
> > >>> The file is @/var/log/cloudstack/agent/security_group.log
> > >>
> > >> Thanks Edison, but the problem went away once I replaced that
> > >> python script with
> > >> https://git-wip-
> > >> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/
> > >> ne
> > >> two
> > >>
> >
> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> > >> 898a264a5463b85c4cab3033f9c3161c5ef83f8
> > >
> > > But the code is not for 4.3, right?
> > > I want to figure out, why 4.3 security group is broken.
> >
> > I think this is the key difference:
> >
> > -A FORWARD -o brbond0-540 -m physdev --physdev-is-bridged -j
> > BF-brbond0-540
> > -A FORWARD -i brbond0-540 -m physdev --physdev-is-bridged -j
> > BF-brbond0-540
> > -A FORWARD -o brbond0-540 -j DROP
> > -A FORWARD -i brbond0-540 -j DROP
> >
> > It's missing in the 4.3 and since FORWARD chain defaults to ACCEPT ...
> > I'll try to rollback to old script and send you the logs.
> >
> > Lucian
> >
> > --
> > Sent from the Delta quadrant using Borg technology!
> >
> > Nux!
> > www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Edison Su [mailto:Edison.su@citrix.com]
> Sent: Friday, March 14, 2014 2:57 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> Add a fix: e5c391fcf3852e50ebd99d4a72fd51d1753b05eb on 4.3-forward
> branch.
> I do see the rule coming on the kvm host:
> 
> -A FORWARD -o cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0 -A
> FORWARD -i cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0 -A
> FORWARD -o cloudbr0 -j DROP -A FORWARD -i cloudbr0 -j DROP
> 
> Animesh, could you cherry-pick it into 4.3?


[Animesh] Edison thanks for the fix. Can you also add tracking bug in JIRA for this issue. Nux do you mind pulling in Edison's commit and confirm the fix?


> > -----Original Message-----
> > From: Edison Su [mailto:Edison.su@citrix.com]
> > Sent: Friday, March 14, 2014 1:59 PM
> > To: dev@cloudstack.apache.org
> > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > The following change will the be root cause:
> >
> > -        refs = execute("iptables -n -L " + brfw + " |grep " + brfw + " | cut -d \( -
> f2
> > | awk '{print $1}'").strip()
> > +        refs = execute("""iptables -n -L " + brfw + " | awk
> > + '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % brfw).strip()
> >
> > In commit: 052bff15c6603877e7a0767993eb4675e9bd9ca8
> >
> > The code should be
> > +        refs = execute("""iptables -n -L " + %s + " | awk
> > + '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % (brfw,
> > + brfw)).strip()
> >
> > > -----Original Message-----
> > > From: Nux! [mailto:nux@li.nux.ro]
> > > Sent: Friday, March 14, 2014 1:13 PM
> > > To: dev@cloudstack.apache.org
> > > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> > >
> > > On 14.03.2014 19:36, Edison Su wrote:
> > > >> -----Original Message-----
> > > >> From: Nux! [mailto:nux@li.nux.ro]
> > > >> Sent: Friday, March 14, 2014 12:19 PM
> > > >> To: dev@cloudstack.apache.org
> > > >> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> > > >>
> > > >> On 14.03.2014 19:14, Edison Su wrote:
> > > >>> Hi Nux,
> > > >>>    Could you post security group log file on your 4.3 kvm host?
> > > >>> The file is @/var/log/cloudstack/agent/security_group.log
> > > >>
> > > >> Thanks Edison, but the problem went away once I replaced that
> > > >> python script with
> > > >> https://git-wip-
> > > >> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/v
> > > >> m/
> > > >> ne
> > > >> two
> > > >>
> > >
> >
> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> > > >> 898a264a5463b85c4cab3033f9c3161c5ef83f8
> > > >
> > > > But the code is not for 4.3, right?
> > > > I want to figure out, why 4.3 security group is broken.
> > >
> > > I think this is the key difference:
> > >
> > > -A FORWARD -o brbond0-540 -m physdev --physdev-is-bridged -j
> > > BF-brbond0-540
> > > -A FORWARD -i brbond0-540 -m physdev --physdev-is-bridged -j
> > > BF-brbond0-540
> > > -A FORWARD -o brbond0-540 -j DROP
> > > -A FORWARD -i brbond0-540 -j DROP
> > >
> > > It's missing in the 4.3 and since FORWARD chain defaults to ACCEPT ...
> > > I'll try to rollback to old script and send you the logs.
> > >
> > > Lucian
> > >
> > > --
> > > Sent from the Delta quadrant using Borg technology!
> > >
> > > Nux!
> > > www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Monday, March 17, 2014 3:57 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 17.03.2014 22:39, Animesh Chaturvedi wrote:
> > Edison
> >
> > Thanks for taking care of this issue. Nux can you try with this fix
> > and I will go off building RC
> 
> Animesh,
> 
> First thing tomorrow morning (gmt).
[Animesh] Thanks I rebuilt the RC but have not published it yet. The link and details are same as RC8 except for the commitId 0810029f274878eca8fd74b44ab1117054e929a5

Here is the link anyway
https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 17.03.2014 22:39, Animesh Chaturvedi wrote:
> Edison
> 
> Thanks for taking care of this issue. Nux can you try with this fix
> and I will go off building RC

Animesh,

First thing tomorrow morning (gmt).

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Tuesday, March 18, 2014 7:04 AM
> To: Animesh Chaturvedi
> Cc: dev@cloudstack.apache.org; Edison Su
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 17.03.2014 22:39, Animesh Chaturvedi wrote:
> > Edison
> >
> > Thanks for taking care of this issue. Nux can you try with this fix
> > and I will go off building RC
> 
> Animesh, can you also pull in the patches Jayapal wrote to fix the ipset issue?
> 
> https://issues.apache.org/jira/browse/CLOUDSTACK-6240
[Animesh] Looks like that will need more work and given that there is a workaround we can track this for maintenance release
> 
> Thanks!
> Lucian
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 17.03.2014 22:39, Animesh Chaturvedi wrote:
> Edison
> 
> Thanks for taking care of this issue. Nux can you try with this fix
> and I will go off building RC

Animesh, can you also pull in the patches Jayapal wrote to fix the 
ipset issue?

https://issues.apache.org/jira/browse/CLOUDSTACK-6240

Thanks!
Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 17.03.2014 22:39, Animesh Chaturvedi wrote:
> Edison
> 
> Thanks for taking care of this issue. Nux can you try with this fix
> and I will go off building RC

Works for me! Thanks!

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.
Edison

Thanks for taking care of this issue. Nux can you try with this fix and I will go off building RC

> -----Original Message-----
> From: Edison Su [mailto:Edison.su@citrix.com]
> Sent: Monday, March 17, 2014 2:52 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> I added another commit: d4fdc184fe9c6717d2ed4e4fe4c39d9759a90608,
> which will fix a race condition during security group programming.
> It's sort of a timing issue, the behavior will look like this:
> 1. add a security group rule, but the rule is not send to hypervisor 2. add a
> new rule, only the 1st rule added in the above step is send to hypervisor
> host, 3. and so on, the rules in hypervisor host is always lagging behind the
> rules in DB.
> 
> CLOUDSTACK-6245 has more info about this issue.
> 
> 
> > -----Original Message-----
> > From: Nux! [mailto:nux@li.nux.ro]
> > Sent: Saturday, March 15, 2014 2:27 PM
> > To: dev@cloudstack.apache.org
> > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > On 15.03.2014 21:18, Sangeetha Hariharan wrote:
> > >>> In this case , is it possible that when you tried to ping the
> > >>> instance , the instance had not booted completely?
> >
> > No, I made sure it's fully booted first.
> >
> > --
> > Sent from the Delta quadrant using Borg technology!
> >
> > Nux!
> > www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Edison Su <Ed...@citrix.com>.
I added another commit: d4fdc184fe9c6717d2ed4e4fe4c39d9759a90608, which will fix a race condition during security group programming.
It's sort of a timing issue, the behavior will look like this:
1. add a security group rule, but the rule is not send to hypervisor
2. add a new rule, only the 1st rule added in the above step is send to hypervisor host,
3. and so on, the rules in hypervisor host is always lagging behind the rules in DB.

CLOUDSTACK-6245 has more info about this issue. 


> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Saturday, March 15, 2014 2:27 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 15.03.2014 21:18, Sangeetha Hariharan wrote:
> >>> In this case , is it possible that when you tried to ping the
> >>> instance , the instance had not booted completely?
> 
> No, I made sure it's fully booted first.
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 15.03.2014 21:18, Sangeetha Hariharan wrote:
>>> In this case , is it possible that when you tried to ping the 
>>> instance , the instance had not booted completely?

No, I made sure it's fully booted first.

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Sangeetha Hariharan <Sa...@citrix.com>.
Nux,

- I created an instance
- I added a rule (ping) in the otherwise untouched default security group
- I added a rule (ping) in the otherwise untouched default security group
Result: I could not ping the instance
>> In this case , is it possible that when you tried to ping the instance , the instance had not booted completely? 

Thanks
Sangeetha

-----Original Message-----
From: Nux! [mailto:nux@li.nux.ro] 
Sent: Saturday, March 15, 2014 4:02 AM
To: dev@cloudstack.apache.org
Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

On 15.03.2014 00:42, Edison Su wrote:
> From my test, all the rules got applied. If you stop/start vm, will 
> the first rule get applied?
> Let's for QA team's testing.

Hi Edison,

So I've found out when the first rule doesn't get applied.
Test 1:

I started with
- cloudstack-agent freshly restarted
- I created an instance
- I added a rule (ping) in the otherwise untouched default security group
Result: I could not ping the instance

Once I added another rule the ping rule also got applied.

Test 2:
- deleted the above instance and cleared the default security group
- created new instance
- added a rule for ping again
Result: I could ping the instance

So this is an issue that happens just after cloudstack-agent was started, once the security groups have processed a couple of rules then all goes as expected.
I don't know what to make of this..

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 15.03.2014 00:42, Edison Su wrote:
> From my test, all the rules got applied. If you stop/start vm, will
> the first rule get applied?
> Let's for QA team's testing.

Hi Edison,

So I've found out when the first rule doesn't get applied.
Test 1:

I started with
- cloudstack-agent freshly restarted
- I created an instance
- I added a rule (ping) in the otherwise untouched default security 
group
Result: I could not ping the instance

Once I added another rule the ping rule also got applied.

Test 2:
- deleted the above instance and cleared the default security group
- created new instance
- added a rule for ping again
Result: I could ping the instance

So this is an issue that happens just after cloudstack-agent was 
started, once the security groups have processed a couple of rules then 
all goes as expected.
I don't know what to make of this..

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Edison Su <Ed...@citrix.com>.

> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Friday, March 14, 2014 4:15 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 14.03.2014 21:57, Edison Su wrote:
> > Add a fix: e5c391fcf3852e50ebd99d4a72fd51d1753b05eb on 4.3-forward
> > branch.
> > I do see the rule coming on the kvm host:
> >
> > -A FORWARD -o cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0
> > -A FORWARD -i cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0
> > -A FORWARD -o cloudbr0 -j DROP -A FORWARD -i cloudbr0 -j DROP
> 
> There seems to be a problem with the fixed script, too. The first rule applied
> to a SG doesn't really get applied on the hypervisor, once you add more rules
> the first rule get activated as well. I have replaced your script with the one

From my test, all the rules got applied. If you stop/start vm, will the first rule get applied?
Let's for QA team's testing.

> from 4.2.1 and that one works as expected.
> 
> I'll do more testing tomorrow.
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 21:57, Edison Su wrote:
> Add a fix: e5c391fcf3852e50ebd99d4a72fd51d1753b05eb on 4.3-forward 
> branch.
> I do see the rule coming on the kvm host:
> 
> -A FORWARD -o cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0
> -A FORWARD -i cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0
> -A FORWARD -o cloudbr0 -j DROP
> -A FORWARD -i cloudbr0 -j DROP

There seems to be a problem with the fixed script, too. The first rule 
applied to a SG doesn't really get applied on the hypervisor, once you 
add more rules the first rule get activated as well. I have replaced 
your script with the one from 4.2.1 and that one works as expected.

I'll do more testing tomorrow.

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 21:57, Edison Su wrote:
> Add a fix: e5c391fcf3852e50ebd99d4a72fd51d1753b05eb on 4.3-forward 
> branch.
> I do see the rule coming on the kvm host:
> 
> -A FORWARD -o cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0
> -A FORWARD -i cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0
> -A FORWARD -o cloudbr0 -j DROP
> -A FORWARD -i cloudbr0 -j DROP

Here are the promised logs, if still needed, I'll try your fix shortly.

http://paste.fedoraproject.org/85554/94835334/raw/

Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Edison Su <Ed...@citrix.com>.
Add a fix: e5c391fcf3852e50ebd99d4a72fd51d1753b05eb on 4.3-forward branch.
I do see the rule coming on the kvm host:

-A FORWARD -o cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0 
-A FORWARD -i cloudbr0 -m physdev --physdev-is-bridged -j BF-cloudbr0 
-A FORWARD -o cloudbr0 -j DROP 
-A FORWARD -i cloudbr0 -j DROP

Animesh, could you cherry-pick it into 4.3?
> -----Original Message-----
> From: Edison Su [mailto:Edison.su@citrix.com]
> Sent: Friday, March 14, 2014 1:59 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> The following change will the be root cause:
> 
> -        refs = execute("iptables -n -L " + brfw + " |grep " + brfw + " | cut -d \( -f2
> | awk '{print $1}'").strip()
> +        refs = execute("""iptables -n -L " + brfw + " | awk
> + '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % brfw).strip()
> 
> In commit: 052bff15c6603877e7a0767993eb4675e9bd9ca8
> 
> The code should be
> +        refs = execute("""iptables -n -L " + %s + " | awk
> + '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % (brfw,
> + brfw)).strip()
> 
> > -----Original Message-----
> > From: Nux! [mailto:nux@li.nux.ro]
> > Sent: Friday, March 14, 2014 1:13 PM
> > To: dev@cloudstack.apache.org
> > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > On 14.03.2014 19:36, Edison Su wrote:
> > >> -----Original Message-----
> > >> From: Nux! [mailto:nux@li.nux.ro]
> > >> Sent: Friday, March 14, 2014 12:19 PM
> > >> To: dev@cloudstack.apache.org
> > >> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> > >>
> > >> On 14.03.2014 19:14, Edison Su wrote:
> > >>> Hi Nux,
> > >>>    Could you post security group log file on your 4.3 kvm host?
> > >>> The file is @/var/log/cloudstack/agent/security_group.log
> > >>
> > >> Thanks Edison, but the problem went away once I replaced that
> > >> python script with
> > >> https://git-wip-
> > >> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/
> > >> ne
> > >> two
> > >>
> >
> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> > >> 898a264a5463b85c4cab3033f9c3161c5ef83f8
> > >
> > > But the code is not for 4.3, right?
> > > I want to figure out, why 4.3 security group is broken.
> >
> > I think this is the key difference:
> >
> > -A FORWARD -o brbond0-540 -m physdev --physdev-is-bridged -j
> > BF-brbond0-540
> > -A FORWARD -i brbond0-540 -m physdev --physdev-is-bridged -j
> > BF-brbond0-540
> > -A FORWARD -o brbond0-540 -j DROP
> > -A FORWARD -i brbond0-540 -j DROP
> >
> > It's missing in the 4.3 and since FORWARD chain defaults to ACCEPT ...
> > I'll try to rollback to old script and send you the logs.
> >
> > Lucian
> >
> > --
> > Sent from the Delta quadrant using Borg technology!
> >
> > Nux!
> > www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Stephen Turner <St...@citrix.com>.
I see that there are a bunch of similar-looking changes in the original changeset. Maybe someone with awk-fu should check that the others are sound?

-- 
Stephen Turner


-----Original Message-----
From: Edison Su [mailto:Edison.su@citrix.com] 
Sent: 14 March 2014 20:59
To: dev@cloudstack.apache.org
Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

The following change will the be root cause:

-        refs = execute("iptables -n -L " + brfw + " |grep " + brfw + " | cut -d \( -f2 | awk '{print $1}'").strip()
+        refs = execute("""iptables -n -L " + brfw + " | awk 
+ '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % brfw).strip()

In commit: 052bff15c6603877e7a0767993eb4675e9bd9ca8

The code should be 
+        refs = execute("""iptables -n -L " + %s + " | awk 
+ '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % (brfw, 
+ brfw)).strip()

> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Friday, March 14, 2014 1:13 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 14.03.2014 19:36, Edison Su wrote:
> >> -----Original Message-----
> >> From: Nux! [mailto:nux@li.nux.ro]
> >> Sent: Friday, March 14, 2014 12:19 PM
> >> To: dev@cloudstack.apache.org
> >> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >>
> >> On 14.03.2014 19:14, Edison Su wrote:
> >>> Hi Nux,
> >>>    Could you post security group log file on your 4.3 kvm host? 
> >>> The file is @/var/log/cloudstack/agent/security_group.log
> >>
> >> Thanks Edison, but the problem went away once I replaced that 
> >> python script with
> >> https://git-wip-
> >> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/
> >> ne
> >> two
> >>
> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> >> 898a264a5463b85c4cab3033f9c3161c5ef83f8
> >
> > But the code is not for 4.3, right?
> > I want to figure out, why 4.3 security group is broken.
> 
> I think this is the key difference:
> 
> -A FORWARD -o brbond0-540 -m physdev --physdev-is-bridged -j
> BF-brbond0-540
> -A FORWARD -i brbond0-540 -m physdev --physdev-is-bridged -j
> BF-brbond0-540
> -A FORWARD -o brbond0-540 -j DROP
> -A FORWARD -i brbond0-540 -j DROP
> 
> It's missing in the 4.3 and since FORWARD chain defaults to ACCEPT ...
> I'll try to rollback to old script and send you the logs.
> 
> Lucian
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Mike Tutkowski <mi...@solidfire.com>.
Nice job, Edison! :)


On Fri, Mar 14, 2014 at 2:58 PM, Edison Su <Ed...@citrix.com> wrote:

> The following change will the be root cause:
>
> -        refs = execute("iptables -n -L " + brfw + " |grep " + brfw + " |
> cut -d \( -f2 | awk '{print $1}'").strip()
> +        refs = execute("""iptables -n -L " + brfw + " | awk
> '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % brfw).strip()
>
> In commit: 052bff15c6603877e7a0767993eb4675e9bd9ca8
>
> The code should be
> +        refs = execute("""iptables -n -L " + %s + " | awk
> '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % (brfw, brfw)).strip()
>
> > -----Original Message-----
> > From: Nux! [mailto:nux@li.nux.ro]
> > Sent: Friday, March 14, 2014 1:13 PM
> > To: dev@cloudstack.apache.org
> > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > On 14.03.2014 19:36, Edison Su wrote:
> > >> -----Original Message-----
> > >> From: Nux! [mailto:nux@li.nux.ro]
> > >> Sent: Friday, March 14, 2014 12:19 PM
> > >> To: dev@cloudstack.apache.org
> > >> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> > >>
> > >> On 14.03.2014 19:14, Edison Su wrote:
> > >>> Hi Nux,
> > >>>    Could you post security group log file on your 4.3 kvm host? The
> > >>> file is @/var/log/cloudstack/agent/security_group.log
> > >>
> > >> Thanks Edison, but the problem went away once I replaced that python
> > >> script with
> > >> https://git-wip-
> > >> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/ne
> > >> two
> > >>
> > rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> > >> 898a264a5463b85c4cab3033f9c3161c5ef83f8
> > >
> > > But the code is not for 4.3, right?
> > > I want to figure out, why 4.3 security group is broken.
> >
> > I think this is the key difference:
> >
> > -A FORWARD -o brbond0-540 -m physdev --physdev-is-bridged -j
> > BF-brbond0-540
> > -A FORWARD -i brbond0-540 -m physdev --physdev-is-bridged -j
> > BF-brbond0-540
> > -A FORWARD -o brbond0-540 -j DROP
> > -A FORWARD -i brbond0-540 -j DROP
> >
> > It's missing in the 4.3 and since FORWARD chain defaults to ACCEPT ...
> > I'll try to rollback to old script and send you the logs.
> >
> > Lucian
> >
> > --
> > Sent from the Delta quadrant using Borg technology!
> >
> > Nux!
> > www.nux.ro
>



-- 
*Mike Tutkowski*
*Senior CloudStack Developer, SolidFire Inc.*
e: mike.tutkowski@solidfire.com
o: 303.746.7302
Advancing the way the world uses the
cloud<http://solidfire.com/solution/overview/?video=play>
*(tm)*

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Edison Su <Ed...@citrix.com>.
The following change will the be root cause:

-        refs = execute("iptables -n -L " + brfw + " |grep " + brfw + " | cut -d \( -f2 | awk '{print $1}'").strip()
+        refs = execute("""iptables -n -L " + brfw + " | awk '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % brfw).strip()

In commit: 052bff15c6603877e7a0767993eb4675e9bd9ca8

The code should be 
+        refs = execute("""iptables -n -L " + %s + " | awk '/%s(.*)references/ {gsub(/\(/, "") ;print $3}'""" % (brfw, brfw)).strip()

> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Friday, March 14, 2014 1:13 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 14.03.2014 19:36, Edison Su wrote:
> >> -----Original Message-----
> >> From: Nux! [mailto:nux@li.nux.ro]
> >> Sent: Friday, March 14, 2014 12:19 PM
> >> To: dev@cloudstack.apache.org
> >> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >>
> >> On 14.03.2014 19:14, Edison Su wrote:
> >>> Hi Nux,
> >>>    Could you post security group log file on your 4.3 kvm host? The
> >>> file is @/var/log/cloudstack/agent/security_group.log
> >>
> >> Thanks Edison, but the problem went away once I replaced that python
> >> script with
> >> https://git-wip-
> >> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/ne
> >> two
> >>
> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> >> 898a264a5463b85c4cab3033f9c3161c5ef83f8
> >
> > But the code is not for 4.3, right?
> > I want to figure out, why 4.3 security group is broken.
> 
> I think this is the key difference:
> 
> -A FORWARD -o brbond0-540 -m physdev --physdev-is-bridged -j
> BF-brbond0-540
> -A FORWARD -i brbond0-540 -m physdev --physdev-is-bridged -j
> BF-brbond0-540
> -A FORWARD -o brbond0-540 -j DROP
> -A FORWARD -i brbond0-540 -j DROP
> 
> It's missing in the 4.3 and since FORWARD chain defaults to ACCEPT ...
> I'll try to rollback to old script and send you the logs.
> 
> Lucian
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 19:36, Edison Su wrote:
>> -----Original Message-----
>> From: Nux! [mailto:nux@li.nux.ro]
>> Sent: Friday, March 14, 2014 12:19 PM
>> To: dev@cloudstack.apache.org
>> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>> 
>> On 14.03.2014 19:14, Edison Su wrote:
>>> Hi Nux,
>>>    Could you post security group log file on your 4.3 kvm host? The
>>> file is @/var/log/cloudstack/agent/security_group.log
>> 
>> Thanks Edison, but the problem went away once I replaced that python 
>> script
>> with
>> https://git-wip-
>> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/netwo
>> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
>> 898a264a5463b85c4cab3033f9c3161c5ef83f8
> 
> But the code is not for 4.3, right?
> I want to figure out, why 4.3 security group is broken.

I think this is the key difference:

-A FORWARD -o brbond0-540 -m physdev --physdev-is-bridged -j 
BF-brbond0-540
-A FORWARD -i brbond0-540 -m physdev --physdev-is-bridged -j 
BF-brbond0-540
-A FORWARD -o brbond0-540 -j DROP
-A FORWARD -i brbond0-540 -j DROP

It's missing in the 4.3 and since FORWARD chain defaults to ACCEPT ...
I'll try to rollback to old script and send you the logs.

Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Edison Su [mailto:Edison.su@citrix.com]
> Sent: Friday, March 14, 2014 12:37 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> 
> 
> > -----Original Message-----
> > From: Nux! [mailto:nux@li.nux.ro]
> > Sent: Friday, March 14, 2014 12:19 PM
> > To: dev@cloudstack.apache.org
> > Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > On 14.03.2014 19:14, Edison Su wrote:
> > > Hi Nux,
> > >    Could you post security group log file on your 4.3 kvm host? The
> > > file is @/var/log/cloudstack/agent/security_group.log
> >
> > Thanks Edison, but the problem went away once I replaced that python
> > script with
> > https://git-wip-
> > us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/net
> > wo
> >
> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> > 898a264a5463b85c4cab3033f9c3161c5ef83f8
> 
> But the code is not for 4.3, right?
> I want to figure out, why 4.3 security group is broken.
> 
[Animesh] Yes I am curious too as there was no planned change for 4.3 and how it regressed?

> >
> > Do you still require the log file?
> 
> 
> Yes, it's better to find out why.
> 
> >
> > Lucian
> >
> > --
> > Sent from the Delta quadrant using Borg technology!
> >
> > Nux!
> > www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Edison Su <Ed...@citrix.com>.

> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Friday, March 14, 2014 12:19 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 14.03.2014 19:14, Edison Su wrote:
> > Hi Nux,
> >    Could you post security group log file on your 4.3 kvm host? The
> > file is @/var/log/cloudstack/agent/security_group.log
> 
> Thanks Edison, but the problem went away once I replaced that python script
> with
> https://git-wip-
> us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/netwo
> rk/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0
> 898a264a5463b85c4cab3033f9c3161c5ef83f8

But the code is not for 4.3, right?
I want to figure out, why 4.3 security group is broken.

> 
> Do you still require the log file?


Yes, it's better to find out why.

> 
> Lucian
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 19:14, Edison Su wrote:
> Hi Nux,
>    Could you post security group log file on your 4.3 kvm host? The
> file is @/var/log/cloudstack/agent/security_group.log

Thanks Edison, but the problem went away once I replaced that python 
script with 
https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/network/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0898a264a5463b85c4cab3033f9c3161c5ef83f8

Do you still require the log file?

Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Edison Su <Ed...@citrix.com>.
Hi Nux,
   Could you post security group log file on your 4.3 kvm host? The file is @/var/log/cloudstack/agent/security_group.log 

> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Friday, March 14, 2014 5:06 AM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 13.03.2014 21:24, Animesh Chaturvedi wrote:
> >> [Animesh] Did you see this with prior RC too?
> > [Animesh] Nux, security group support for advanced zone is limited and
> > that too was developed in 4.2. I don’t think any changes have been
> > made to that support since then. Can you call out what specific issue
> > are you seeing? Most likely it is pre-existing issue or not supported.
> >
> >
> > The functional spec from 4.2 is at [1] and I don’t know if all that is
> > called out is implemented or not, adding Anthony and Chiradeep to the
> > thread for further comments
> >
> > [1]
> >
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+based
> > +on+Security+Groups+in+Advance+zone
> 
> I could replicate this problem on a clean hypervisor. The security groups
> seem broken on KVM/CentOS.
> 
> It looks like the traffic doesn't go in the right chains, all traffic is accepted as
> FORWARD is set to ACCEPT.
> There are zero packets going through BF-breth0-109.
> 
> Here's outputs from:
> iptables-save: http://paste.fedoraproject.org/85337/47982321/raw/
> ebatables-save: http://paste.fedoraproject.org/85338/79831713/raw/
> ipset -L: http://paste.fedoraproject.org/85339/79832613/raw/
> 
> I will install 4.2.1 as that one was working and try to compare the outputs.
> 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Ove Ewerlid <Ov...@oracle.com>.
On 03/14/2014 03:29 PM, Wei ZHOU wrote:
> Nux and Ove,
>
> Did you test on fresh 4.2.1 platform?

Yes, fresh 4.2.1.

/Ove


> -Wei
>
>
> 2014-03-14 15:07 GMT+01:00 Nux! <nu...@li.nux.ro>:
>
>> On 14.03.2014 13:59, Wei ZHOU wrote:
>>
>>> Is this similar to CLOUDSTACK-5144?
>>>
>>
>> Yes, but it's only exhibited on KVM.
>> My colleague who is testing 4.3 with Xenserver is reporting the SG rules
>> work as expected (though ipset update still requires VM stop/start).
>>
>>
>> Lucian
>>
>> --
>> Sent from the Delta quadrant using Borg technology!
>>
>> Nux!
>> www.nux.ro
>>
>


-- 
Ove Everlid
System Administrator / Architect / SDN- & Automation- & Linux-hacker
Mobile: +46706662363 (dedicated work mobile)
Country: Sweden, timezone; Middle Europan Time (MET or GMT+1)

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Wei ZHOU <us...@gmail.com>.
OK, then ignore my previous email. it looks no issue with  security_group.py


2014-03-14 15:43 GMT+01:00 Nux! <nu...@li.nux.ro>:

> On 14.03.2014 14:29, Wei ZHOU wrote:
>
>> Nux and Ove,
>>
>> Did you test on fresh 4.2.1 platform?
>>
>>
> Yes. Fresh 4.2.1 doesn't have the problem, fresh 4.3 RC8 has the problem.
>
> HTH
>
> Lucian
>
> --
> Sent from the Delta quadrant using Borg technology!
>
> Nux!
> www.nux.ro
>

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 14:29, Wei ZHOU wrote:
> Nux and Ove,
> 
> Did you test on fresh 4.2.1 platform?
> 

Yes. Fresh 4.2.1 doesn't have the problem, fresh 4.3 RC8 has the 
problem.

HTH
Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Wei ZHOU <us...@gmail.com>.
Nux and Ove,

Did you test on fresh 4.2.1 platform?

-Wei


2014-03-14 15:07 GMT+01:00 Nux! <nu...@li.nux.ro>:

> On 14.03.2014 13:59, Wei ZHOU wrote:
>
>> Is this similar to CLOUDSTACK-5144?
>>
>
> Yes, but it's only exhibited on KVM.
> My colleague who is testing 4.3 with Xenserver is reporting the SG rules
> work as expected (though ipset update still requires VM stop/start).
>
>
> Lucian
>
> --
> Sent from the Delta quadrant using Borg technology!
>
> Nux!
> www.nux.ro
>

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 14:43, Wei ZHOU wrote:
> Can you try to revert commit 175549f3ab952bbd39318c16c269c16526255475
> on ./scripts/vm/network/security_group.py ?
> 
> git checkout
> 0898a264a5463b85c4cab3033f9c3161c5ef83f8 
> ./scripts/vm/network/security_group.py
> scp to all hosts, and try again.

Do you happen to have an HTTP url for that? I do not have git atm.

Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 14:43, Wei ZHOU wrote:
> Can you try to revert commit 175549f3ab952bbd39318c16c269c16526255475
> on ./scripts/vm/network/security_group.py ?
> 
> git checkout
> 0898a264a5463b85c4cab3033f9c3161c5ef83f8 
> ./scripts/vm/network/security_group.py
> scp to all hosts, and try again.
> 

I got it from here:
https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=blob_plain;f=scripts/vm/network/security_group.py;h=0ac8b74a872d46b5def69be8df35e4fc49eb52b3;hb=0898a264a5463b85c4cab3033f9c3161c5ef83f8

And yes, it works with this one, ingress and egress rules seem to apply 
fine. Thanks!

Is there anything you can do for the ipset problem? 
https://issues.apache.org/jira/browse/CLOUDSTACK-6240

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Wei ZHOU <us...@gmail.com>.
Can you try to revert commit 175549f3ab952bbd39318c16c269c16526255475
on ./scripts/vm/network/security_group.py ?

git checkout
0898a264a5463b85c4cab3033f9c3161c5ef83f8 ./scripts/vm/network/security_group.py
scp to all hosts, and try again.

-Wei


2014-03-14 15:07 GMT+01:00 Nux! <nu...@li.nux.ro>:

> On 14.03.2014 13:59, Wei ZHOU wrote:
>
>> Is this similar to CLOUDSTACK-5144?
>>
>
> Yes, but it's only exhibited on KVM.
> My colleague who is testing 4.3 with Xenserver is reporting the SG rules
> work as expected (though ipset update still requires VM stop/start).
>
>
> Lucian
>
> --
> Sent from the Delta quadrant using Borg technology!
>
> Nux!
> www.nux.ro
>

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 13:59, Wei ZHOU wrote:
> Is this similar to CLOUDSTACK-5144?

Yes, but it's only exhibited on KVM.
My colleague who is testing 4.3 with Xenserver is reporting the SG 
rules work as expected (though ipset update still requires VM 
stop/start).

Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Wei ZHOU <us...@gmail.com>.
Is this similar to CLOUDSTACK-5144?


2014-03-14 14:57 GMT+01:00 Wei ZHOU <us...@gmail.com>:

> Did you test on fresh 4.2.1, or upgraded platform?
>
>

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Wei ZHOU <us...@gmail.com>.
Did you test on fresh 4.2.1, or upgraded platform?


2014-03-14 14:51 GMT+01:00 Ove Ewerlid <Ov...@oracle.com>:

> It should be noted that my tests use a single IP per VM.
> I believe NUX mentioned using multiple IP's.
> When SG in advanced zone is enabled, only one NIC can be assigned per VM.
> /Ove
>
>
> On 03/14/2014 02:41 PM, Ove Ewerlid wrote:
>
>> On 03/14/2014 01:57 PM, Nux! wrote:
>>
>>> On 14.03.2014 12:06, Nux! wrote:
>>>
>>>> It looks like the traffic doesn't go in the right chains, all traffic
>>>> is accepted as FORWARD is set to ACCEPT.
>>>> There are zero packets going through BF-breth0-109.
>>>>
>>>> Here's outputs from:
>>>> iptables-save: http://paste.fedoraproject.org/85337/47982321/raw/
>>>> ebatables-save: http://paste.fedoraproject.org/85338/79831713/raw/
>>>> ipset -L: http://paste.fedoraproject.org/85339/79832613/raw/
>>>>
>>>> I will install 4.2.1 as that one was working and try to compare the
>>>> outputs.
>>>>
>>>
>>> Ok, reinstalled with 4.2.1 and this one works as expected, all ingress
>>> is blocked unless stated otherwise. Here's the same outputs as earlier:
>>> iptables http://paste.fedoraproject.org/85350/1356139/raw/
>>> ebtables http://paste.fedoraproject.org/85351/80136613/raw/
>>> ipset -L http://paste.fedoraproject.org/85352/13948013/raw/
>>>
>>> Kindly look into this, it breaks a major feature.
>>>
>>> Lucian
>>>
>>>
>> I can confirm this observation.
>> The test was to install ACS42 and ACS43 in the same environment;
>>
>>    - OEL65 (Oracle's variant of CentOS v65)
>>    - KVM hypervisor
>>    - Advanced with 3 shared networks (3 VLAN's)
>>    - ACS421; official KVM system VM template
>>    - ACS43; latest 64 bit KVM system VM template
>>    - 24 hypervisors; 144Gbyte RAM / 24 Cores / 4TB local disk
>>
>> SG works as expected in ACS42.
>> In ACS43, the iptables forward chain on hypervisors is empty and in
>> policy ACCEPT, hence all traffic goes through.
>>
>> The same set of automated install scripts were used in both cases so the
>> installs are virtually identical.
>>
>> /Ove
>>
>>
>>
>
> --
> Ove Everlid
> System Administrator / Architect / SDN- & Automation- & Linux-hacker
> Mobile: +46706662363 (dedicated work mobile)
> Country: Sweden, timezone; Middle Europan Time (MET or GMT+1)
>

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Ove Ewerlid <Ov...@oracle.com>.
It should be noted that my tests use a single IP per VM.
I believe NUX mentioned using multiple IP's.
When SG in advanced zone is enabled, only one NIC can be assigned per VM.
/Ove

On 03/14/2014 02:41 PM, Ove Ewerlid wrote:
> On 03/14/2014 01:57 PM, Nux! wrote:
>> On 14.03.2014 12:06, Nux! wrote:
>>> It looks like the traffic doesn't go in the right chains, all traffic
>>> is accepted as FORWARD is set to ACCEPT.
>>> There are zero packets going through BF-breth0-109.
>>>
>>> Here's outputs from:
>>> iptables-save: http://paste.fedoraproject.org/85337/47982321/raw/
>>> ebatables-save: http://paste.fedoraproject.org/85338/79831713/raw/
>>> ipset -L: http://paste.fedoraproject.org/85339/79832613/raw/
>>>
>>> I will install 4.2.1 as that one was working and try to compare the
>>> outputs.
>>
>> Ok, reinstalled with 4.2.1 and this one works as expected, all ingress
>> is blocked unless stated otherwise. Here's the same outputs as earlier:
>> iptables http://paste.fedoraproject.org/85350/1356139/raw/
>> ebtables http://paste.fedoraproject.org/85351/80136613/raw/
>> ipset -L http://paste.fedoraproject.org/85352/13948013/raw/
>>
>> Kindly look into this, it breaks a major feature.
>>
>> Lucian
>>
>
> I can confirm this observation.
> The test was to install ACS42 and ACS43 in the same environment;
>
>    - OEL65 (Oracle's variant of CentOS v65)
>    - KVM hypervisor
>    - Advanced with 3 shared networks (3 VLAN's)
>    - ACS421; official KVM system VM template
>    - ACS43; latest 64 bit KVM system VM template
>    - 24 hypervisors; 144Gbyte RAM / 24 Cores / 4TB local disk
>
> SG works as expected in ACS42.
> In ACS43, the iptables forward chain on hypervisors is empty and in
> policy ACCEPT, hence all traffic goes through.
>
> The same set of automated install scripts were used in both cases so the
> installs are virtually identical.
>
> /Ove
>
>


-- 
Ove Everlid
System Administrator / Architect / SDN- & Automation- & Linux-hacker
Mobile: +46706662363 (dedicated work mobile)
Country: Sweden, timezone; Middle Europan Time (MET or GMT+1)

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Ove Ewerlid <Ov...@oracle.com>.
On 03/14/2014 01:57 PM, Nux! wrote:
> On 14.03.2014 12:06, Nux! wrote:
>> It looks like the traffic doesn't go in the right chains, all traffic
>> is accepted as FORWARD is set to ACCEPT.
>> There are zero packets going through BF-breth0-109.
>>
>> Here's outputs from:
>> iptables-save: http://paste.fedoraproject.org/85337/47982321/raw/
>> ebatables-save: http://paste.fedoraproject.org/85338/79831713/raw/
>> ipset -L: http://paste.fedoraproject.org/85339/79832613/raw/
>>
>> I will install 4.2.1 as that one was working and try to compare the
>> outputs.
>
> Ok, reinstalled with 4.2.1 and this one works as expected, all ingress
> is blocked unless stated otherwise. Here's the same outputs as earlier:
> iptables http://paste.fedoraproject.org/85350/1356139/raw/
> ebtables http://paste.fedoraproject.org/85351/80136613/raw/
> ipset -L http://paste.fedoraproject.org/85352/13948013/raw/
>
> Kindly look into this, it breaks a major feature.
>
> Lucian
>

I can confirm this observation.
The test was to install ACS42 and ACS43 in the same environment;

   - OEL65 (Oracle's variant of CentOS v65)
   - KVM hypervisor
   - Advanced with 3 shared networks (3 VLAN's)
   - ACS421; official KVM system VM template
   - ACS43; latest 64 bit KVM system VM template
   - 24 hypervisors; 144Gbyte RAM / 24 Cores / 4TB local disk

SG works as expected in ACS42.
In ACS43, the iptables forward chain on hypervisors is empty and in 
policy ACCEPT, hence all traffic goes through.

The same set of automated install scripts were used in both cases so the 
installs are virtually identical.

/Ove


-- 
Ove Everlid
System Administrator / Architect / SDN- & Automation- & Linux-hacker
Mobile: +46706662363 (dedicated work mobile)
Country: Sweden, timezone; Middle Europan Time (MET or GMT+1)

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 14.03.2014 12:06, Nux! wrote:
> It looks like the traffic doesn't go in the right chains, all traffic
> is accepted as FORWARD is set to ACCEPT.
> There are zero packets going through BF-breth0-109.
> 
> Here's outputs from:
> iptables-save: http://paste.fedoraproject.org/85337/47982321/raw/
> ebatables-save: http://paste.fedoraproject.org/85338/79831713/raw/
> ipset -L: http://paste.fedoraproject.org/85339/79832613/raw/
> 
> I will install 4.2.1 as that one was working and try to compare the 
> outputs.

Ok, reinstalled with 4.2.1 and this one works as expected, all ingress 
is blocked unless stated otherwise. Here's the same outputs as earlier:
iptables http://paste.fedoraproject.org/85350/1356139/raw/
ebtables http://paste.fedoraproject.org/85351/80136613/raw/
ipset -L http://paste.fedoraproject.org/85352/13948013/raw/

Kindly look into this, it breaks a major feature.

Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 13.03.2014 21:24, Animesh Chaturvedi wrote:
>> [Animesh] Did you see this with prior RC too?
> [Animesh] Nux, security group support for advanced zone is limited
> and that too was developed in 4.2. I don’t think any changes have been
> made to that support since then. Can you call out what specific issue
> are you seeing? Most likely it is pre-existing issue or not supported.
> 
> 
> The functional spec from 4.2 is at [1] and I don’t know if all that
> is called out is implemented or not, adding Anthony and Chiradeep to
> the thread for further comments
> 
> [1]
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+based+on+Security+Groups+in+Advance+zone

I could replicate this problem on a clean hypervisor. The security 
groups seem broken on KVM/CentOS.

It looks like the traffic doesn't go in the right chains, all traffic 
is accepted as FORWARD is set to ACCEPT.
There are zero packets going through BF-breth0-109.

Here's outputs from:
iptables-save: http://paste.fedoraproject.org/85337/47982321/raw/
ebatables-save: http://paste.fedoraproject.org/85338/79831713/raw/
ipset -L: http://paste.fedoraproject.org/85339/79832613/raw/

I will install 4.2.1 as that one was working and try to compare the 
outputs.

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
> Sent: Thursday, March 13, 2014 1:25 PM
> To: dev@cloudstack.apache.org
> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> 
> 
> > -----Original Message-----
> > From: Nux! [mailto:nux@li.nux.ro]
> > Sent: Thursday, March 13, 2014 12:41 PM
> > To: dev@cloudstack.apache.org
> > Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > On 13.03.2014 18:58, Nux! wrote:
> > > On 13.03.2014 00:26, Animesh Chaturvedi wrote:
> > >> Hi All,
> > >>
> > >>
> > >> I've created a 4.3.0 release, with the following artifacts up for a
> > >> vote:
> > >
> > > -1
> > >
> > > In Adv SG zone assigning secondary IPs to a NIC doesn't update the
> > > ipset accordingly on the agent/hv; it requires stopping/starting the
> > > VM.
> > > It's not a tragedy, but this was not the case in 4.2.1. Haven't
> > > checked basic zone.
> >
> > Actually something is very wrong, the SG don't seem to do anything, I
> > have 2 setups with SG and 4.3 RC8 and on both the SG are useless.
> > Not only the ipsets are not updated "live", but all the traffic is
> > accepted by default! Can anyone with Adv SG zone test?
> >
> > I'm on 4.3 rc8 + CentOS 6.5 HV. I will do more testing tomorrow.
> >
> [Animesh] Did you see this with prior RC too?
[Animesh] Nux, security group support for advanced zone is limited and that too was developed in 4.2. I don’t think any changes have been made to that support since then. Can you call out what specific issue are you seeing? Most likely it is pre-existing issue or not supported. 

The functional spec from 4.2 is at [1] and I don’t know if all that is called out is implemented or not, adding Anthony and Chiradeep to the thread for further comments

[1] https://cwiki.apache.org/confluence/display/CLOUDSTACK/Isolation+based+on+Security+Groups+in+Advance+zone



> > --
> > Sent from the Delta quadrant using Borg technology!
> >
> > Nux!
> > www.nux.ro

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Nux! [mailto:nux@li.nux.ro]
> Sent: Thursday, March 13, 2014 12:41 PM
> To: dev@cloudstack.apache.org
> Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> On 13.03.2014 18:58, Nux! wrote:
> > On 13.03.2014 00:26, Animesh Chaturvedi wrote:
> >> Hi All,
> >>
> >>
> >> I've created a 4.3.0 release, with the following artifacts up for a
> >> vote:
> >
> > -1
> >
> > In Adv SG zone assigning secondary IPs to a NIC doesn't update the
> > ipset accordingly on the agent/hv; it requires stopping/starting the
> > VM.
> > It's not a tragedy, but this was not the case in 4.2.1. Haven't
> > checked basic zone.
> 
> Actually something is very wrong, the SG don't seem to do anything, I have 2
> setups with SG and 4.3 RC8 and on both the SG are useless.
> Not only the ipsets are not updated "live", but all the traffic is accepted by
> default! Can anyone with Adv SG zone test?
> 
> I'm on 4.3 rc8 + CentOS 6.5 HV. I will do more testing tomorrow.
> 
[Animesh] Did you see this with prior RC too? 
> --
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 13.03.2014 18:58, Nux! wrote:
> On 13.03.2014 00:26, Animesh Chaturvedi wrote:
>> Hi All,
>> 
>> 
>> I've created a 4.3.0 release, with the following artifacts up for a
>> vote:
> 
> -1
> 
> In Adv SG zone assigning secondary IPs to a NIC doesn't update the
> ipset accordingly on the agent/hv; it requires stopping/starting the
> VM.
> It's not a tragedy, but this was not the case in 4.2.1. Haven't
> checked basic zone.

Actually something is very wrong, the SG don't seem to do anything, I 
have 2 setups with SG and 4.3 RC8 and on both the SG are useless.
Not only the ipsets are not updated "live", but all the traffic is 
accepted by default! Can anyone with Adv SG zone test?

I'm on 4.3 rc8 + CentOS 6.5 HV. I will do more testing tomorrow.

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 13.03.2014 18:58, Nux! wrote:
> On 13.03.2014 00:26, Animesh Chaturvedi wrote:
>> Hi All,
>> 
>> 
>> I've created a 4.3.0 release, with the following artifacts up for a
>> vote:
> 
> -1
> 
> In Adv SG zone assigning secondary IPs to a NIC doesn't update the
> ipset accordingly on the agent/hv; it requires stopping/starting the
> VM.
> It's not a tragedy, but this was not the case in 4.2.1. Haven't
> checked basic zone.
> 
> A quick fix for it anyone?
> 

I have opened https://issues.apache.org/jira/browse/CLOUDSTACK-6240 for 
the ipset issue.


Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Nux! <nu...@li.nux.ro>.
On 13.03.2014 00:26, Animesh Chaturvedi wrote:
> Hi All,
> 
> 
> 
> I've created a 4.3.0 release, with the following artifacts up for a
> 
> vote:

-1

In Adv SG zone assigning secondary IPs to a NIC doesn't update the 
ipset accordingly on the agent/hv; it requires stopping/starting the VM.
It's not a tragedy, but this was not the case in 4.2.1. Haven't checked 
basic zone.

A quick fix for it anyone?

Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Ove Ewerlid <Ov...@oracle.com>.
-1 given the regression in Security Groups for advanced zones.
I was able to duplicate NUX reported issues, e.g., works in ACS421 but 
does not work at all in ACS43.

/Ove

On 03/13/2014 01:26 AM, Animesh Chaturvedi wrote:
> Hi All,
>
>
>
> I've created a 4.3.0 release, with the following artifacts up for a
>
> vote:
>
>
>
>
>
> Git Branch and Commit SH:
>
> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>
>
>
> List of changes:
>
> New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248
>
> Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
>
> Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
>
> Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162
>
>
>
>
>
>
>
> Source release (checksums and signatures are available at the same
>
> location):
>
> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>
>
>
> PGP release keys (signed using 94BE0D7C):
>
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>
>
>
> Testing instructions are here:
>
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure
>
>
>
> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>
>
>
> For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?
>
>
>
> [ ] +1  approve
>
> [ ] +0  no opinion
>
> [ ] -1  disapprove (and reason why)
>
>
>
> Thanks
>
> Animesh
>
>


-- 
Ove Everlid
System Administrator / Architect / SDN- & Automation- & Linux-hacker
Mobile: +46706662363 (dedicated work mobile)
Country: Sweden, timezone; Middle Europan Time (MET or GMT+1)

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: John Kinsella [mailto:jlk@stratosec.co]
> Sent: Monday, March 17, 2014 11:26 AM
> To: dev@cloudstack.apache.org
> Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> Before we go to 9th round, let's get
> https://issues.apache.org/jira/browse/CLOUDSTACK-6156 resolved.
[Animesh] I had responded earlier we do not see the issue with Jenkins build so if someone needs they can get it from the Jenkins, I don't consider it blocker and nobody seems to pick it up. We can track it for maintenance release on 4.3
> 
> I'm pretty busy this week, but will see if I can come up with. Just tried doing
> a clean awsapi build on a clean AWS instance again and it still fails.
> 
> 
> On Mar 12, 2014, at 5:26 PM, Animesh Chaturvedi
> <an...@citrix.com>>
> wrote:
> 
> Hi All,
> 
> 
> 
> I've created a 4.3.0 release, with the following artifacts up for a
> 
> vote:
> 
> 
> 
> 
> 
> Git Branch and Commit SH:
> 
> https://git-wip-
> us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
> Commit: 6a6ec648099553a42f830dcd566eab2452428908
> 
> 
> 
> List of changes:
> 
> New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248
> 
> Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
> 
> Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
> 
> Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162
> 
> 
> 
> 
> 
> 
> 
> Source release (checksums and signatures are available at the same
> 
> location):
> 
> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
> 
> 
> 
> PGP release keys (signed using 94BE0D7C):
> 
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
> 
> 
> 
> Testing instructions are here:
> 
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+pro
> cedure
> 
> 
> 
> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
> 
> 
> 
> For sanity in tallying the vote, can PMC members please be sure to indicate
> "(binding)" with their vote?
> 
> 
> 
> [ ] +1  approve
> 
> [ ] +0  no opinion
> 
> [ ] -1  disapprove (and reason why)
> 
> 
> 
> Thanks
> 
> Animesh
> 
> 
> Stratosec<http://stratosec.co/> - Compliance as a Service
> o: 415.315.9385
> @johnlkinsella<http://twitter.com/johnlkinsella>


Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by John Kinsella <jl...@stratosec.co>.
I’ll be committing the patch to master in the morning unless I hear otherwise.

On Mar 17, 2014, at 2:56 PM, Animesh Chaturvedi <an...@citrix.com>> wrote:



-----Original Message-----
From: John Kinsella [mailto:jlk@stratosec.co]
Sent: Monday, March 17, 2014 2:48 PM
To: dev@cloudstack.apache.org<ma...@cloudstack.apache.org>
Cc: Likitha Shetty; Prachi Damle
Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Thanks Sebastien. I had been intending to mail previous committers on the
subdir.

Prachi/Likitha - any comments on https://reviews.apache.org/r/18392/
would be appreciated.
[Animesh] Removing rampart dependency will need testing AWSAPI again, I am inclined to track this for 4.3 maintenance or 4.4 release


On Mar 17, 2014, at 12:54 PM, Sebastien Goasguen
<ru...@gmail.com>> wrote:

John, I am copying Likitha and Prachi who worked on awsapi, maybe they
can help

-sebastien

On Mar 17, 2014, at 2:25 PM, John Kinsella
<jl...@stratosec.co>> wrote:

Before we go to 9th round, let's get
https://issues.apache.org/jira/browse/CLOUDSTACK-6156 resolved.

I'm pretty busy this week, but will see if I can come up with. Just tried doing
a clean awsapi build on a clean AWS instance again and it still fails.


On Mar 12, 2014, at 5:26 PM, Animesh Chaturvedi
<an...@citrix.com><m
ailto:animesh.chaturvedi@citrix.com<http://citrix.com>>> wrote:

Hi All,



I've created a 4.3.0 release, with the following artifacts up for a

vote:





Git Branch and Commit SH:

https://git-wip-
us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
Commit: 6a6ec648099553a42f830dcd566eab2452428908



List of changes:

New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248

Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249

Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161

Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162







Source release (checksums and signatures are available at the same

location):

https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



PGP release keys (signed using 94BE0D7C):

https://dist.apache.org/repos/dist/release/cloudstack/KEYS



Testing instructions are here:

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+pro
cedure



Vote will be open for 72 hours (Monday evening PST 5:30 PM)



For sanity in tallying the vote, can PMC members please be sure to indicate
"(binding)" with their vote?



[ ] +1  approve

[ ] +0  no opinion

[ ] -1  disapprove (and reason why)



Thanks

Animesh


Stratosec<http://stratosec.co/> - Compliance as a Service
o: 415.315.9385
@johnlkinsella<http://twitter.com/johnlkinsella>



Stratosec<http://stratosec.co/> - Compliance as a Service
o: 415.315.9385
@johnlkinsella<http://twitter.com/johnlkinsella>


Stratosec<http://stratosec.co/> - Compliance as a Service
o: 415.315.9385
@johnlkinsella<http://twitter.com/johnlkinsella>


RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: John Kinsella [mailto:jlk@stratosec.co]
> Sent: Monday, March 17, 2014 2:48 PM
> To: dev@cloudstack.apache.org
> Cc: Likitha Shetty; Prachi Damle
> Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> Thanks Sebastien. I had been intending to mail previous committers on the
> subdir.
> 
> Prachi/Likitha - any comments on https://reviews.apache.org/r/18392/
> would be appreciated.
[Animesh] Removing rampart dependency will need testing AWSAPI again, I am inclined to track this for 4.3 maintenance or 4.4 release

> 
> On Mar 17, 2014, at 12:54 PM, Sebastien Goasguen
> <ru...@gmail.com>> wrote:
> 
> John, I am copying Likitha and Prachi who worked on awsapi, maybe they
> can help
> 
> -sebastien
> 
> On Mar 17, 2014, at 2:25 PM, John Kinsella
> <jl...@stratosec.co>> wrote:
> 
> Before we go to 9th round, let's get
> https://issues.apache.org/jira/browse/CLOUDSTACK-6156 resolved.
> 
> I'm pretty busy this week, but will see if I can come up with. Just tried doing
> a clean awsapi build on a clean AWS instance again and it still fails.
> 
> 
> On Mar 12, 2014, at 5:26 PM, Animesh Chaturvedi
> <an...@citrix.com><m
> ailto:animesh.chaturvedi@citrix.com>> wrote:
> 
> Hi All,
> 
> 
> 
> I've created a 4.3.0 release, with the following artifacts up for a
> 
> vote:
> 
> 
> 
> 
> 
> Git Branch and Commit SH:
> 
> https://git-wip-
> us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
> Commit: 6a6ec648099553a42f830dcd566eab2452428908
> 
> 
> 
> List of changes:
> 
> New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248
> 
> Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
> 
> Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
> 
> Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162
> 
> 
> 
> 
> 
> 
> 
> Source release (checksums and signatures are available at the same
> 
> location):
> 
> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
> 
> 
> 
> PGP release keys (signed using 94BE0D7C):
> 
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
> 
> 
> 
> Testing instructions are here:
> 
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+pro
> cedure
> 
> 
> 
> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
> 
> 
> 
> For sanity in tallying the vote, can PMC members please be sure to indicate
> "(binding)" with their vote?
> 
> 
> 
> [ ] +1  approve
> 
> [ ] +0  no opinion
> 
> [ ] -1  disapprove (and reason why)
> 
> 
> 
> Thanks
> 
> Animesh
> 
> 
> Stratosec<http://stratosec.co/> - Compliance as a Service
> o: 415.315.9385
> @johnlkinsella<http://twitter.com/johnlkinsella>
> 
> 
> 
> Stratosec<http://stratosec.co/> - Compliance as a Service
> o: 415.315.9385
> @johnlkinsella<http://twitter.com/johnlkinsella>


Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by sebgoa <ru...@gmail.com>.
On Mar 17, 2014, at 10:53 PM, Prachi Damle <Pr...@citrix.com> wrote:

> John,
> 
> I could not reproduce the build failure on my dev setup, as mentioned earlier.
> Also Jenkins seem to create awsapi 4.3 build fine without issues.

Did you remove all your cached maven repos ?

> 
> As to whether rampart maven dependencies can be safely removed, we need to really test awsapi functionality after removing the jars thoroughly.
> I am afraid I do not know why these jars are needed or were added to this project.
> 
> Prachi
> 
> 
> From: John Kinsella [mailto:jlk@stratosec.co]
> Sent: Monday, March 17, 2014 2:48 PM
> To: dev@cloudstack.apache.org
> Cc: Likitha Shetty; Prachi Damle
> Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> Thanks Sebastien. I had been intending to mail previous committers on the subdir.
> 
> Prachi/Likitha - any comments on https://reviews.apache.org/r/18392/ would be appreciated.
> 
> On Mar 17, 2014, at 12:54 PM, Sebastien Goasguen <ru...@gmail.com>> wrote:
> 
> 
> John, I am copying Likitha and Prachi who worked on awsapi, maybe they can help
> 
> -sebastien
> 
> On Mar 17, 2014, at 2:25 PM, John Kinsella <jl...@stratosec.co>> wrote:
> 
> 
> Before we go to 9th round, let's get https://issues.apache.org/jira/browse/CLOUDSTACK-6156 resolved.
> 
> I'm pretty busy this week, but will see if I can come up with. Just tried doing a clean awsapi build on a clean AWS instance again and it still fails.
> 
> 
> On Mar 12, 2014, at 5:26 PM, Animesh Chaturvedi <an...@citrix.com>> wrote:
> 
> Hi All,
> 
> 
> 
> I've created a 4.3.0 release, with the following artifacts up for a
> 
> vote:
> 
> 
> 
> 
> 
> Git Branch and Commit SH:
> 
> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
> Commit: 6a6ec648099553a42f830dcd566eab2452428908
> 
> 
> 
> List of changes:
> 
> New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248
> 
> Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
> 
> Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
> 
> Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162
> 
> 
> 
> 
> 
> 
> 
> Source release (checksums and signatures are available at the same
> 
> location):
> 
> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
> 
> 
> 
> PGP release keys (signed using 94BE0D7C):
> 
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
> 
> 
> 
> Testing instructions are here:
> 
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure
> 
> 
> 
> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
> 
> 
> 
> For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?
> 
> 
> 
> [ ] +1  approve
> 
> [ ] +0  no opinion
> 
> [ ] -1  disapprove (and reason why)
> 
> 
> 
> Thanks
> 
> Animesh
> 
> 
> Stratosec<http://stratosec.co/> - Compliance as a Service
> o: 415.315.9385
> @johnlkinsella<http://twitter.com/johnlkinsella>
> 
> 
> Stratosec<http://stratosec.co/> - Compliance as a Service
> o: 415.315.9385
> @johnlkinsella<http://twitter.com/johnlkinsella>
> 


RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Prachi Damle <Pr...@citrix.com>.
John,

I could not reproduce the build failure on my dev setup, as mentioned earlier.
Also Jenkins seem to create awsapi 4.3 build fine without issues.

As to whether rampart maven dependencies can be safely removed, we need to really test awsapi functionality after removing the jars thoroughly.
I am afraid I do not know why these jars are needed or were added to this project.

Prachi


From: John Kinsella [mailto:jlk@stratosec.co]
Sent: Monday, March 17, 2014 2:48 PM
To: dev@cloudstack.apache.org
Cc: Likitha Shetty; Prachi Damle
Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Thanks Sebastien. I had been intending to mail previous committers on the subdir.

Prachi/Likitha - any comments on https://reviews.apache.org/r/18392/ would be appreciated.

On Mar 17, 2014, at 12:54 PM, Sebastien Goasguen <ru...@gmail.com>> wrote:


John, I am copying Likitha and Prachi who worked on awsapi, maybe they can help

-sebastien

On Mar 17, 2014, at 2:25 PM, John Kinsella <jl...@stratosec.co>> wrote:


Before we go to 9th round, let's get https://issues.apache.org/jira/browse/CLOUDSTACK-6156 resolved.

I'm pretty busy this week, but will see if I can come up with. Just tried doing a clean awsapi build on a clean AWS instance again and it still fails.


On Mar 12, 2014, at 5:26 PM, Animesh Chaturvedi <an...@citrix.com>> wrote:

Hi All,



I've created a 4.3.0 release, with the following artifacts up for a

vote:





Git Branch and Commit SH:

https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
Commit: 6a6ec648099553a42f830dcd566eab2452428908



List of changes:

New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248

Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249

Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161

Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162







Source release (checksums and signatures are available at the same

location):

https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



PGP release keys (signed using 94BE0D7C):

https://dist.apache.org/repos/dist/release/cloudstack/KEYS



Testing instructions are here:

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure



Vote will be open for 72 hours (Monday evening PST 5:30 PM)



For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?



[ ] +1  approve

[ ] +0  no opinion

[ ] -1  disapprove (and reason why)



Thanks

Animesh


Stratosec<http://stratosec.co/> - Compliance as a Service
o: 415.315.9385
@johnlkinsella<http://twitter.com/johnlkinsella>


Stratosec<http://stratosec.co/> - Compliance as a Service
o: 415.315.9385
@johnlkinsella<http://twitter.com/johnlkinsella>


Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by John Kinsella <jl...@stratosec.co>.
Thanks Sebastien. I had been intending to mail previous committers on the subdir.

Prachi/Likitha - any comments on https://reviews.apache.org/r/18392/ would be appreciated.

On Mar 17, 2014, at 12:54 PM, Sebastien Goasguen <ru...@gmail.com>> wrote:

John, I am copying Likitha and Prachi who worked on awsapi, maybe they can help

-sebastien

On Mar 17, 2014, at 2:25 PM, John Kinsella <jl...@stratosec.co>> wrote:

Before we go to 9th round, let’s get https://issues.apache.org/jira/browse/CLOUDSTACK-6156 resolved.

I’m pretty busy this week, but will see if I can come up with. Just tried doing a clean awsapi build on a clean AWS instance again and it still fails.


On Mar 12, 2014, at 5:26 PM, Animesh Chaturvedi <an...@citrix.com>> wrote:

Hi All,



I've created a 4.3.0 release, with the following artifacts up for a

vote:





Git Branch and Commit SH:

https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
Commit: 6a6ec648099553a42f830dcd566eab2452428908



List of changes:

New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248

Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249

Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161

Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162







Source release (checksums and signatures are available at the same

location):

https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



PGP release keys (signed using 94BE0D7C):

https://dist.apache.org/repos/dist/release/cloudstack/KEYS



Testing instructions are here:

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure



Vote will be open for 72 hours (Monday evening PST 5:30 PM)



For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?



[ ] +1  approve

[ ] +0  no opinion

[ ] -1  disapprove (and reason why)



Thanks

Animesh


Stratosec<http://stratosec.co/> - Compliance as a Service
o: 415.315.9385
@johnlkinsella<http://twitter.com/johnlkinsella>



Stratosec<http://stratosec.co/> - Compliance as a Service
o: 415.315.9385
@johnlkinsella<http://twitter.com/johnlkinsella>


Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Sebastien Goasguen <ru...@gmail.com>.
John, I am copying Likitha and Prachi who worked on awsapi, maybe they can help

-sebastien

On Mar 17, 2014, at 2:25 PM, John Kinsella <jl...@stratosec.co> wrote:

> Before we go to 9th round, let’s get https://issues.apache.org/jira/browse/CLOUDSTACK-6156 resolved.
> 
> I’m pretty busy this week, but will see if I can come up with. Just tried doing a clean awsapi build on a clean AWS instance again and it still fails.
> 
> 
> On Mar 12, 2014, at 5:26 PM, Animesh Chaturvedi <an...@citrix.com>> wrote:
> 
> Hi All,
> 
> 
> 
> I've created a 4.3.0 release, with the following artifacts up for a
> 
> vote:
> 
> 
> 
> 
> 
> Git Branch and Commit SH:
> 
> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
> Commit: 6a6ec648099553a42f830dcd566eab2452428908
> 
> 
> 
> List of changes:
> 
> New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248
> 
> Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
> 
> Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
> 
> Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162
> 
> 
> 
> 
> 
> 
> 
> Source release (checksums and signatures are available at the same
> 
> location):
> 
> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
> 
> 
> 
> PGP release keys (signed using 94BE0D7C):
> 
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
> 
> 
> 
> Testing instructions are here:
> 
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure
> 
> 
> 
> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
> 
> 
> 
> For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?
> 
> 
> 
> [ ] +1  approve
> 
> [ ] +0  no opinion
> 
> [ ] -1  disapprove (and reason why)
> 
> 
> 
> Thanks
> 
> Animesh
> 
> 
> Stratosec<http://stratosec.co/> - Compliance as a Service
> o: 415.315.9385
> @johnlkinsella<http://twitter.com/johnlkinsella>
> 


Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by John Kinsella <jl...@stratosec.co>.
Before we go to 9th round, let’s get https://issues.apache.org/jira/browse/CLOUDSTACK-6156 resolved.

I’m pretty busy this week, but will see if I can come up with. Just tried doing a clean awsapi build on a clean AWS instance again and it still fails.


On Mar 12, 2014, at 5:26 PM, Animesh Chaturvedi <an...@citrix.com>> wrote:

Hi All,



I've created a 4.3.0 release, with the following artifacts up for a

vote:





Git Branch and Commit SH:

https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
Commit: 6a6ec648099553a42f830dcd566eab2452428908



List of changes:

New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248

Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249

Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161

Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162







Source release (checksums and signatures are available at the same

location):

https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



PGP release keys (signed using 94BE0D7C):

https://dist.apache.org/repos/dist/release/cloudstack/KEYS



Testing instructions are here:

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure



Vote will be open for 72 hours (Monday evening PST 5:30 PM)



For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?



[ ] +1  approve

[ ] +0  no opinion

[ ] -1  disapprove (and reason why)



Thanks

Animesh


Stratosec<http://stratosec.co/> - Compliance as a Service
o: 415.315.9385
@johnlkinsella<http://twitter.com/johnlkinsella>


Re: 32 vs 64 bit systemvm on 43 and secondary NFS storage used / capacity Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Erik Weber <te...@gmail.com>.
On Mon, Mar 17, 2014 at 7:02 PM, Animesh Chaturvedi <
animesh.chaturvedi@citrix.com> wrote:

>
>
> > -----Original Message-----
> > From: Ove Ewerlid [mailto:Ove.Ewerlid@oracle.com]
> > Sent: Monday, March 17, 2014 9:09 AM
> > To: dev@cloudstack.apache.org
> > Subject: 32 vs 64 bit systemvm on 43 and secondary NFS storage used /
> > capacity Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> >
> > Has anyone else seen below behavior with 4.3.0 RC 8?
> >
> >   - with 32 bit system VM, the secondary storage is reported as 0/0
> (this is at
> > the agent level, not a GUI or manager issue)
> >
> >   - with 64 bit system VM, the secondary storage is reported OK.
> >
> >
> [Animesh] We have defaulted to 64 bit template for 4.3
>


Guess I should've asked this earlier, but does this mean that 32 bits
template no longer work, unless you do "something"?

Erik

RE: 32 vs 64 bit systemvm on 43 and secondary NFS storage used / capacity Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Animesh Chaturvedi <an...@citrix.com>.

> -----Original Message-----
> From: Ove Ewerlid [mailto:Ove.Ewerlid@oracle.com]
> Sent: Monday, March 17, 2014 9:09 AM
> To: dev@cloudstack.apache.org
> Subject: 32 vs 64 bit systemvm on 43 and secondary NFS storage used /
> capacity Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
> 
> Has anyone else seen below behavior with 4.3.0 RC 8?
> 
>   - with 32 bit system VM, the secondary storage is reported as 0/0 (this is at
> the agent level, not a GUI or manager issue)
> 
>   - with 64 bit system VM, the secondary storage is reported OK.
> 
> 
[Animesh] We have defaulted to 64 bit template for 4.3

> Environment;
> 
>   - ACS43RC8, installed from RPM on OEL65 (64bit) built on OEL65 (64bit)
> using centos63/package.sh
>   - Secondary storage on NFS
>   - 64 bit systemvm;
>       systemvm64template-2014-03-12-master-kvm.qcow2.bz2
>     32 bit systemvm;
>       systemvmtemplate-2014-03-12-master-kvm.qcow2.bz2
>     picked from here;
>       http://jenkins.buildacloud.org/view/4.3/
> 
> When 32-bit systemvm is used with 4.2.1 on the very same environment
> built the same way. The secondary storage is reported OK.
> 
> With increased debug level on secondary storage systemvm the following is
> logged from the SSVM agent, example from 64-bit systemvm; ...
> [{"com.cloud.agent.api.GetStorageStatsAnswer":{"used":481910849536,"capa
> city":3298534883328,"result":true,"contextMap":{},"wait":0}}]
> ...
> 
> With a 32-bit systemvm, ACS43 GetStorageStatsAnswer reports used=0 and
> capacity=0.
> 
> /Ove
> 
> 
> On 03/13/2014 01:26 AM, Animesh Chaturvedi wrote:
> > Hi All,
> >
> >
> >
> > I've created a 4.3.0 release, with the following artifacts up for a
> >
> > vote:
> >
> >
> >
> >
> >
> > Git Branch and Commit SH:
> >
> > https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=
> > refs/heads/4.3
> > Commit: 6a6ec648099553a42f830dcd566eab2452428908
> >
> >
> >
> > List of changes:
> >
> > New Features in 4.3:
> > https://issues.apache.org/jira/issues/?filter=12325248
> >
> > Improvement in 4.3:
> > https://issues.apache.org/jira/issues/?filter=12325249
> >
> > Issues fixed in 4.3
> > https://issues.apache.org/jira/issues/?filter=12326161
> >
> > Known Issues in 4.3:
> > https://issues.apache.org/jira/issues/?filter=12326162
> >
> >
> >
> >
> >
> >
> >
> > Source release (checksums and signatures are available at the same
> >
> > location):
> >
> > https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
> >
> >
> >
> > PGP release keys (signed using 94BE0D7C):
> >
> > https://dist.apache.org/repos/dist/release/cloudstack/KEYS
> >
> >
> >
> > Testing instructions are here:
> >
> > https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+pr
> > ocedure
> >
> >
> >
> > Vote will be open for 72 hours (Monday evening PST 5:30 PM)
> >
> >
> >
> > For sanity in tallying the vote, can PMC members please be sure to indicate
> "(binding)" with their vote?
> >
> >
> >
> > [ ] +1  approve
> >
> > [ ] +0  no opinion
> >
> > [ ] -1  disapprove (and reason why)
> >
> >
> >
> > Thanks
> >
> > Animesh
> >
> >
> 
> 
> --
> Ove Everlid
> System Administrator / Architect / SDN- & Automation- & Linux-hacker
> Mobile: +46706662363 (dedicated work mobile)
> Country: Sweden, timezone; Middle Europan Time (MET or GMT+1)

32 vs 64 bit systemvm on 43 and secondary NFS storage used / capacity Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Ove Ewerlid <Ov...@oracle.com>.
Has anyone else seen below behavior with 4.3.0 RC 8?

  - with 32 bit system VM, the secondary storage is reported as 0/0 
(this is at the agent level, not a GUI or manager issue)

  - with 64 bit system VM, the secondary storage is reported OK.


Environment;

  - ACS43RC8, installed from RPM on OEL65 (64bit) built on OEL65 (64bit) 
using centos63/package.sh
  - Secondary storage on NFS
  - 64 bit systemvm;
      systemvm64template-2014-03-12-master-kvm.qcow2.bz2
    32 bit systemvm;
      systemvmtemplate-2014-03-12-master-kvm.qcow2.bz2
    picked from here;
      http://jenkins.buildacloud.org/view/4.3/

When 32-bit systemvm is used with 4.2.1 on the very same environment 
built the same way. The secondary storage is reported OK.

With increased debug level on secondary storage systemvm the following 
is logged from the SSVM agent, example from 64-bit systemvm;
... 
[{"com.cloud.agent.api.GetStorageStatsAnswer":{"used":481910849536,"capacity":3298534883328,"result":true,"contextMap":{},"wait":0}}] 
...

With a 32-bit systemvm, ACS43 GetStorageStatsAnswer reports used=0 and 
capacity=0.

/Ove


On 03/13/2014 01:26 AM, Animesh Chaturvedi wrote:
> Hi All,
>
>
>
> I've created a 4.3.0 release, with the following artifacts up for a
>
> vote:
>
>
>
>
>
> Git Branch and Commit SH:
>
> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>
>
>
> List of changes:
>
> New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248
>
> Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
>
> Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
>
> Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162
>
>
>
>
>
>
>
> Source release (checksums and signatures are available at the same
>
> location):
>
> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>
>
>
> PGP release keys (signed using 94BE0D7C):
>
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>
>
>
> Testing instructions are here:
>
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure
>
>
>
> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>
>
>
> For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?
>
>
>
> [ ] +1  approve
>
> [ ] +0  no opinion
>
> [ ] -1  disapprove (and reason why)
>
>
>
> Thanks
>
> Animesh
>
>


-- 
Ove Everlid
System Administrator / Architect / SDN- & Automation- & Linux-hacker
Mobile: +46706662363 (dedicated work mobile)
Country: Sweden, timezone; Middle Europan Time (MET or GMT+1)

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Daan Hoogland <DH...@schubergphilis.com>.
Created bridged network with ip-range reservation. Validated that https://issues.apache.org/jira/browse/CLOUDSTACK-6232 is no longer an issue. Vm can be created in this network.
The same bridged offering is created with Connectivity through NVP. VM gets created and seems fine.
Created vpcs with networks and nicira based gateways. Validated that https://issues.apache.org/jira/browse/CLOUDSTACK-6231 is no longer an issue. Vm can be created in this network. Doesn't seem to get a valid route to the VR.

Due to time constraints I am not testing the plain network and the vlan based vpc this round. I am considering it not changed from previous RCs.

+1 (binding)

-----Original Message-----
From: Wilder Rodrigues [mailto:WRodrigues@schubergphilis.com] 
Sent: donderdag 13 maart 2014 5:08
To: dev@cloudstack.apache.org
Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Hi all,

Outcome of more tests... So far, so good:

* Environment
  - Management Server: Debian 7 VM under VirtualBox
  - DevCloud: XenServer 6.2
  - MySQL: running on the DevCloud
  - System VM: Latest from http://jenkins.buildacloud.org/view/4.3/job/cloudstack-4.3-systemvm/
  
* Create VPC
  - 10.1.2.0/24
  - Passed

* Create DMZ Tier With LB
  - 10.1.2.1
  - 255.255.255.128
  - Passed
  
* Create APP Tier Without LB
  - 10.1.2.129
  - 255.255.255.128
  - Passed
  
* Create 2 instances under APP Tier
  - Passed
  
* Create 2 instances under DMZ Tier
  - Passed
  
* Acquire a new IP for the VPC Router
  - 10.1.1.8
  - Passed
  
* Create load balancer rules on the IP for DMZ tier
  - Port 80 and 2 instances added
  - Passed
  
* Create 2 ACLs and associate them with the tiers
  - Passed
  
* Create ACL rules from ports 80 and 22
  - Passed

* SSH into the 4 VMs
  - Passed
  
* Telnet the Load Balancer on port 80
  - Passed

Cheers,
Wilder

-----Original Message-----
From: Daan Hoogland [mailto:DHoogland@schubergphilis.com]
Sent: Thursday, March 13, 2014 2:03 PM
To: dev@cloudstack.apache.org
Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Are you guys +1'ing Wilders testing or the release? And if the release, then why, what did you test that made you decide this?

Please note that the PMC has to decide based on what they read here as arguments. We need more input then a number of +1, please.

Thanks,
Daan

-----Original Message-----
From: Madan Ganesh Velayudham [mailto:madanganesh@me.com]
Sent: donderdag 13 maart 2014 11:49
To: dev@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

+1

On 13-Mar-2014, at 4:18 pm, Guo Star <gh...@gmail.com> wrote:

> +1
> 
> 
> 2014-03-13 18:27 GMT+08:00 Wilder Rodrigues <WR...@schubergphilis.com>:
> 
>> Hi guys,
>> 
>> I'm testing the CS 4.3 RC (8th round), and will keep doing so, but 
>> for now I already did the following and it looks good (sorry for the long email):
>> 
>> * Environment
>>  - Management Server: Debian 7 VM under VirtualBox
>>  - DevCloud: XenServer 6.2
>>  - MySQL: running on the DevCloud
>>  - System VM: Latest from
>> http://jenkins.buildacloud.org/view/4.3/job/cloudstack-4.3-systemvm/
>> 
>> * Initial start-up
>>  - Everything seems to work fine
>> 
>> * Zone
>>  - DNS1: 8.8.8.8
>>  - DNS2: 8.8.4.4
>>  - Hypervisor: XenServer
>>  - Guest CIDR: 10.1.2.0/24
>>  - Local Storage enabled: true
>> 
>> * Public Traffic
>>  - 10.1.1.1 / 255.255.255.0 / 10.1.1.2 / 10.1.1.100
>> 
>> * POD
>>  - 10.1.1.1 / 255.255.255.0 / 10.1.1.101 / 10.1.1.200
>> 
>> * VLAN
>>  - 101 - 109
>> 
>> * Host
>>  - Host Name: 178.237.34.120
>>  - Username: root
>>  - Password: blah
>> 
>> * Secondary Storage
>>  - Provider: NFS
>>  - Name: sec01
>>  - Server: 10.1.1.114
>>  - Path: /opt/storage/secondary
>> 
>> ::: Create Instance / Network / ACLs / Port Forwarding :::
>> 
>> * Create Instance
>>  - Featured: Tiny Linux
>>  - Compute Offering: Tiny Offering
>>  - Disk Offering: None
>>  - Instance name: cs43-01
>> 
>> * NIC Information
>>  - IP Address: 10.1.2.186
>>  - Gateway: 10.1.2.1
>>  - Netmask: 255.255.255.0
>> 
>> * Create Network
>>  - Name: devcloud-net01
>>  - Type: Isolated
>>  - CIDR: 10.1.2.0/24
>>  - Public IP: 10.1.1.4 [Source NAT]
>>  - Egress Rules: 0.0.0.0/0 - All
>>  - Network Offering: Offering for Isolated networks with Source Nat 
>> service enabled
>> 
>> * Create ACLs
>>  - 10.1.0.0/16 - TCP - 22 - 22
>>  - 10.1.0.0/16 - TCP - 443 - 443
>> 
>> * Create Port Forwarding
>>  - 22:22 - 22:22 - instance cs43-01 [10.1.2.186]
>>  - 443:443 - 443:443 - instance cs43-01 [10.1.2.186]
>> 
>> * SSH into the new instance via the Public IP:
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.4 The authenticity of host
>> '10.1.1.4 (10.1.1.4)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.4' (RSA) to the list of known hosts.
>> root@10.1.1.4's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Create Admin User / Log In / Create Instance / Network / ACLs / 
>> Port Forwarding  :::
>> 
>> * Create a new Admin User
>>  - Passed
>> 
>> * Login with newly created user
>>  - Passed
>> 
>> * Create VM and Network
>>  - Passed
>> 
>> * Add ACLs and Port forwarding
>>  - Passed
>> 
>> * SSH into the machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.5 The authenticity of host
>> '10.1.1.5 (10.1.1.5)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.5' (RSA) to the list of known hosts.
>> root@10.1.1.5's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Log In as Admin / Stop-Destroy Router VM / Stop-Start Instance / 
>> Check if router VM is back :::
>> 
>> * Stop-Destroy Router VM
>>  - Passed
>> 
>> * Stop-Start VM
>>  - Passed
>> 
>> * Router VM is Back
>>  - Passed
>> 
>> * SSH into the Machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.4 root@10.1.1.4's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Create Domain / Create User / Log In / Create 
>> Instance-Network-ACLs-Port forwarding / SSH into the VM :::
>> 
>> * Create Domain
>>  - Passed
>> 
>> * Create User
>>  - Passed
>> 
>> * Log in
>>  - Passed
>> 
>> * Create VM and Network
>>  - Passed
>> 
>> * Add ACLs and Port forwarding
>>  - Passed
>> 
>> * SSH into the machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.6 The authenticity of host
>> '10.1.1.6 (10.1.1.6)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.6' (RSA) to the list of known hosts.
>> root@10.1.1.6's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> Cheers,
>> Wilder
>> 
>> -----Original Message-----
>> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
>> Sent: Thursday, March 13, 2014 1:27 AM
>> To: dev@cloudstack.apache.org
>> Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>> 
>> Hi All,
>> 
>> 
>> 
>> I've created a 4.3.0 release, with the following artifacts up for a
>> 
>> vote:
>> 
>> 
>> 
>> 
>> 
>> Git Branch and Commit SH:
>> 
>> 
>> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h
>> =refs/heads/4.3
>> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>> 
>> 
>> 
>> List of changes:
>> 
>> New Features in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12325248
>> 
>> Improvement in 4.3: 
>> https://issues.apache.org/jira/issues/?filter=12325249
>> 
>> Issues fixed in 4.3
>> https://issues.apache.org/jira/issues/?filter=12326161
>> 
>> Known Issues in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12326162
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> Source release (checksums and signatures are available at the same
>> 
>> location):
>> 
>> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>> 
>> 
>> 
>> PGP release keys (signed using 94BE0D7C):
>> 
>> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>> 
>> 
>> 
>> Testing instructions are here:
>> 
>> 
>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+p
>> rocedure
>> 
>> 
>> 
>> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>> 
>> 
>> 
>> For sanity in tallying the vote, can PMC members please be sure to 
>> indicate "(binding)" with their vote?
>> 
>> 
>> 
>> [ ] +1  approve
>> 
>> [ ] +0  no opinion
>> 
>> [ ] -1  disapprove (and reason why)
>> 
>> 
>> 
>> Thanks
>> 
>> Animesh
>> 
>> 


RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Wilder Rodrigues <WR...@schubergphilis.com>.
Hi all,

Outcome of more tests... So far, so good:

* Environment
  - Management Server: Debian 7 VM under VirtualBox
  - DevCloud: XenServer 6.2
  - MySQL: running on the DevCloud
  - System VM: Latest from http://jenkins.buildacloud.org/view/4.3/job/cloudstack-4.3-systemvm/
  
* Create VPC
  - 10.1.2.0/24
  - Passed

* Create DMZ Tier With LB
  - 10.1.2.1
  - 255.255.255.128
  - Passed
  
* Create APP Tier Without LB
  - 10.1.2.129
  - 255.255.255.128
  - Passed
  
* Create 2 instances under APP Tier
  - Passed
  
* Create 2 instances under DMZ Tier
  - Passed
  
* Acquire a new IP for the VPC Router
  - 10.1.1.8
  - Passed
  
* Create load balancer rules on the IP for DMZ tier
  - Port 80 and 2 instances added
  - Passed
  
* Create 2 ACLs and associate them with the tiers
  - Passed
  
* Create ACL rules from ports 80 and 22
  - Passed

* SSH into the 4 VMs
  - Passed
  
* Telnet the Load Balancer on port 80
  - Passed

Cheers,
Wilder

-----Original Message-----
From: Daan Hoogland [mailto:DHoogland@schubergphilis.com] 
Sent: Thursday, March 13, 2014 2:03 PM
To: dev@cloudstack.apache.org
Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Are you guys +1'ing Wilders testing or the release? And if the release, then why, what did you test that made you decide this?

Please note that the PMC has to decide based on what they read here as arguments. We need more input then a number of +1, please.

Thanks,
Daan

-----Original Message-----
From: Madan Ganesh Velayudham [mailto:madanganesh@me.com]
Sent: donderdag 13 maart 2014 11:49
To: dev@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

+1

On 13-Mar-2014, at 4:18 pm, Guo Star <gh...@gmail.com> wrote:

> +1
> 
> 
> 2014-03-13 18:27 GMT+08:00 Wilder Rodrigues <WR...@schubergphilis.com>:
> 
>> Hi guys,
>> 
>> I'm testing the CS 4.3 RC (8th round), and will keep doing so, but 
>> for now I already did the following and it looks good (sorry for the long email):
>> 
>> * Environment
>>  - Management Server: Debian 7 VM under VirtualBox
>>  - DevCloud: XenServer 6.2
>>  - MySQL: running on the DevCloud
>>  - System VM: Latest from
>> http://jenkins.buildacloud.org/view/4.3/job/cloudstack-4.3-systemvm/
>> 
>> * Initial start-up
>>  - Everything seems to work fine
>> 
>> * Zone
>>  - DNS1: 8.8.8.8
>>  - DNS2: 8.8.4.4
>>  - Hypervisor: XenServer
>>  - Guest CIDR: 10.1.2.0/24
>>  - Local Storage enabled: true
>> 
>> * Public Traffic
>>  - 10.1.1.1 / 255.255.255.0 / 10.1.1.2 / 10.1.1.100
>> 
>> * POD
>>  - 10.1.1.1 / 255.255.255.0 / 10.1.1.101 / 10.1.1.200
>> 
>> * VLAN
>>  - 101 - 109
>> 
>> * Host
>>  - Host Name: 178.237.34.120
>>  - Username: root
>>  - Password: blah
>> 
>> * Secondary Storage
>>  - Provider: NFS
>>  - Name: sec01
>>  - Server: 10.1.1.114
>>  - Path: /opt/storage/secondary
>> 
>> ::: Create Instance / Network / ACLs / Port Forwarding :::
>> 
>> * Create Instance
>>  - Featured: Tiny Linux
>>  - Compute Offering: Tiny Offering
>>  - Disk Offering: None
>>  - Instance name: cs43-01
>> 
>> * NIC Information
>>  - IP Address: 10.1.2.186
>>  - Gateway: 10.1.2.1
>>  - Netmask: 255.255.255.0
>> 
>> * Create Network
>>  - Name: devcloud-net01
>>  - Type: Isolated
>>  - CIDR: 10.1.2.0/24
>>  - Public IP: 10.1.1.4 [Source NAT]
>>  - Egress Rules: 0.0.0.0/0 - All
>>  - Network Offering: Offering for Isolated networks with Source Nat 
>> service enabled
>> 
>> * Create ACLs
>>  - 10.1.0.0/16 - TCP - 22 - 22
>>  - 10.1.0.0/16 - TCP - 443 - 443
>> 
>> * Create Port Forwarding
>>  - 22:22 - 22:22 - instance cs43-01 [10.1.2.186]
>>  - 443:443 - 443:443 - instance cs43-01 [10.1.2.186]
>> 
>> * SSH into the new instance via the Public IP:
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.4 The authenticity of host
>> '10.1.1.4 (10.1.1.4)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.4' (RSA) to the list of known hosts.
>> root@10.1.1.4's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Create Admin User / Log In / Create Instance / Network / ACLs / 
>> Port Forwarding  :::
>> 
>> * Create a new Admin User
>>  - Passed
>> 
>> * Login with newly created user
>>  - Passed
>> 
>> * Create VM and Network
>>  - Passed
>> 
>> * Add ACLs and Port forwarding
>>  - Passed
>> 
>> * SSH into the machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.5 The authenticity of host
>> '10.1.1.5 (10.1.1.5)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.5' (RSA) to the list of known hosts.
>> root@10.1.1.5's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Log In as Admin / Stop-Destroy Router VM / Stop-Start Instance / 
>> Check if router VM is back :::
>> 
>> * Stop-Destroy Router VM
>>  - Passed
>> 
>> * Stop-Start VM
>>  - Passed
>> 
>> * Router VM is Back
>>  - Passed
>> 
>> * SSH into the Machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.4 root@10.1.1.4's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Create Domain / Create User / Log In / Create 
>> Instance-Network-ACLs-Port forwarding / SSH into the VM :::
>> 
>> * Create Domain
>>  - Passed
>> 
>> * Create User
>>  - Passed
>> 
>> * Log in
>>  - Passed
>> 
>> * Create VM and Network
>>  - Passed
>> 
>> * Add ACLs and Port forwarding
>>  - Passed
>> 
>> * SSH into the machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.6 The authenticity of host
>> '10.1.1.6 (10.1.1.6)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.6' (RSA) to the list of known hosts.
>> root@10.1.1.6's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> Cheers,
>> Wilder
>> 
>> -----Original Message-----
>> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
>> Sent: Thursday, March 13, 2014 1:27 AM
>> To: dev@cloudstack.apache.org
>> Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>> 
>> Hi All,
>> 
>> 
>> 
>> I've created a 4.3.0 release, with the following artifacts up for a
>> 
>> vote:
>> 
>> 
>> 
>> 
>> 
>> Git Branch and Commit SH:
>> 
>> 
>> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h
>> =refs/heads/4.3
>> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>> 
>> 
>> 
>> List of changes:
>> 
>> New Features in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12325248
>> 
>> Improvement in 4.3: 
>> https://issues.apache.org/jira/issues/?filter=12325249
>> 
>> Issues fixed in 4.3
>> https://issues.apache.org/jira/issues/?filter=12326161
>> 
>> Known Issues in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12326162
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> Source release (checksums and signatures are available at the same
>> 
>> location):
>> 
>> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>> 
>> 
>> 
>> PGP release keys (signed using 94BE0D7C):
>> 
>> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>> 
>> 
>> 
>> Testing instructions are here:
>> 
>> 
>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+p
>> rocedure
>> 
>> 
>> 
>> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>> 
>> 
>> 
>> For sanity in tallying the vote, can PMC members please be sure to 
>> indicate "(binding)" with their vote?
>> 
>> 
>> 
>> [ ] +1  approve
>> 
>> [ ] +0  no opinion
>> 
>> [ ] -1  disapprove (and reason why)
>> 
>> 
>> 
>> Thanks
>> 
>> Animesh
>> 
>> 


RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Daan Hoogland <DH...@schubergphilis.com>.
Are you guys +1'ing Wilders testing or the release? And if the release, then why, what did you test that made you decide this?

Please note that the PMC has to decide based on what they read here as arguments. We need more input then a number of +1, please.

Thanks,
Daan

-----Original Message-----
From: Madan Ganesh Velayudham [mailto:madanganesh@me.com] 
Sent: donderdag 13 maart 2014 11:49
To: dev@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

+1

On 13-Mar-2014, at 4:18 pm, Guo Star <gh...@gmail.com> wrote:

> +1
> 
> 
> 2014-03-13 18:27 GMT+08:00 Wilder Rodrigues <WR...@schubergphilis.com>:
> 
>> Hi guys,
>> 
>> I'm testing the CS 4.3 RC (8th round), and will keep doing so, but 
>> for now I already did the following and it looks good (sorry for the long email):
>> 
>> * Environment
>>  - Management Server: Debian 7 VM under VirtualBox
>>  - DevCloud: XenServer 6.2
>>  - MySQL: running on the DevCloud
>>  - System VM: Latest from
>> http://jenkins.buildacloud.org/view/4.3/job/cloudstack-4.3-systemvm/
>> 
>> * Initial start-up
>>  - Everything seems to work fine
>> 
>> * Zone
>>  - DNS1: 8.8.8.8
>>  - DNS2: 8.8.4.4
>>  - Hypervisor: XenServer
>>  - Guest CIDR: 10.1.2.0/24
>>  - Local Storage enabled: true
>> 
>> * Public Traffic
>>  - 10.1.1.1 / 255.255.255.0 / 10.1.1.2 / 10.1.1.100
>> 
>> * POD
>>  - 10.1.1.1 / 255.255.255.0 / 10.1.1.101 / 10.1.1.200
>> 
>> * VLAN
>>  - 101 - 109
>> 
>> * Host
>>  - Host Name: 178.237.34.120
>>  - Username: root
>>  - Password: blah
>> 
>> * Secondary Storage
>>  - Provider: NFS
>>  - Name: sec01
>>  - Server: 10.1.1.114
>>  - Path: /opt/storage/secondary
>> 
>> ::: Create Instance / Network / ACLs / Port Forwarding :::
>> 
>> * Create Instance
>>  - Featured: Tiny Linux
>>  - Compute Offering: Tiny Offering
>>  - Disk Offering: None
>>  - Instance name: cs43-01
>> 
>> * NIC Information
>>  - IP Address: 10.1.2.186
>>  - Gateway: 10.1.2.1
>>  - Netmask: 255.255.255.0
>> 
>> * Create Network
>>  - Name: devcloud-net01
>>  - Type: Isolated
>>  - CIDR: 10.1.2.0/24
>>  - Public IP: 10.1.1.4 [Source NAT]
>>  - Egress Rules: 0.0.0.0/0 - All
>>  - Network Offering: Offering for Isolated networks with Source Nat 
>> service enabled
>> 
>> * Create ACLs
>>  - 10.1.0.0/16 - TCP - 22 - 22
>>  - 10.1.0.0/16 - TCP - 443 - 443
>> 
>> * Create Port Forwarding
>>  - 22:22 - 22:22 - instance cs43-01 [10.1.2.186]
>>  - 443:443 - 443:443 - instance cs43-01 [10.1.2.186]
>> 
>> * SSH into the new instance via the Public IP:
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.4 The authenticity of host 
>> '10.1.1.4 (10.1.1.4)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.4' (RSA) to the list of known hosts.
>> root@10.1.1.4's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Create Admin User / Log In / Create Instance / Network / ACLs / 
>> Port Forwarding  :::
>> 
>> * Create a new Admin User
>>  - Passed
>> 
>> * Login with newly created user
>>  - Passed
>> 
>> * Create VM and Network
>>  - Passed
>> 
>> * Add ACLs and Port forwarding
>>  - Passed
>> 
>> * SSH into the machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.5 The authenticity of host 
>> '10.1.1.5 (10.1.1.5)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.5' (RSA) to the list of known hosts.
>> root@10.1.1.5's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Log In as Admin / Stop-Destroy Router VM / Stop-Start Instance / 
>> Check if router VM is back :::
>> 
>> * Stop-Destroy Router VM
>>  - Passed
>> 
>> * Stop-Start VM
>>  - Passed
>> 
>> * Router VM is Back
>>  - Passed
>> 
>> * SSH into the Machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.4 root@10.1.1.4's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Create Domain / Create User / Log In / Create 
>> Instance-Network-ACLs-Port forwarding / SSH into the VM :::
>> 
>> * Create Domain
>>  - Passed
>> 
>> * Create User
>>  - Passed
>> 
>> * Log in
>>  - Passed
>> 
>> * Create VM and Network
>>  - Passed
>> 
>> * Add ACLs and Port forwarding
>>  - Passed
>> 
>> * SSH into the machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.6 The authenticity of host 
>> '10.1.1.6 (10.1.1.6)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.6' (RSA) to the list of known hosts.
>> root@10.1.1.6's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> Cheers,
>> Wilder
>> 
>> -----Original Message-----
>> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
>> Sent: Thursday, March 13, 2014 1:27 AM
>> To: dev@cloudstack.apache.org
>> Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>> 
>> Hi All,
>> 
>> 
>> 
>> I've created a 4.3.0 release, with the following artifacts up for a
>> 
>> vote:
>> 
>> 
>> 
>> 
>> 
>> Git Branch and Commit SH:
>> 
>> 
>> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h
>> =refs/heads/4.3
>> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>> 
>> 
>> 
>> List of changes:
>> 
>> New Features in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12325248
>> 
>> Improvement in 4.3: 
>> https://issues.apache.org/jira/issues/?filter=12325249
>> 
>> Issues fixed in 4.3 
>> https://issues.apache.org/jira/issues/?filter=12326161
>> 
>> Known Issues in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12326162
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> Source release (checksums and signatures are available at the same
>> 
>> location):
>> 
>> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>> 
>> 
>> 
>> PGP release keys (signed using 94BE0D7C):
>> 
>> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>> 
>> 
>> 
>> Testing instructions are here:
>> 
>> 
>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+p
>> rocedure
>> 
>> 
>> 
>> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>> 
>> 
>> 
>> For sanity in tallying the vote, can PMC members please be sure to 
>> indicate "(binding)" with their vote?
>> 
>> 
>> 
>> [ ] +1  approve
>> 
>> [ ] +0  no opinion
>> 
>> [ ] -1  disapprove (and reason why)
>> 
>> 
>> 
>> Thanks
>> 
>> Animesh
>> 
>> 


Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Madan Ganesh Velayudham <ma...@me.com>.
+1 

On 13-Mar-2014, at 4:18 pm, Guo Star <gh...@gmail.com> wrote:

> +1
> 
> 
> 2014-03-13 18:27 GMT+08:00 Wilder Rodrigues <WR...@schubergphilis.com>:
> 
>> Hi guys,
>> 
>> I'm testing the CS 4.3 RC (8th round), and will keep doing so, but for now
>> I already did the following and it looks good (sorry for the long email):
>> 
>> * Environment
>>  - Management Server: Debian 7 VM under VirtualBox
>>  - DevCloud: XenServer 6.2
>>  - MySQL: running on the DevCloud
>>  - System VM: Latest from
>> http://jenkins.buildacloud.org/view/4.3/job/cloudstack-4.3-systemvm/
>> 
>> * Initial start-up
>>  - Everything seems to work fine
>> 
>> * Zone
>>  - DNS1: 8.8.8.8
>>  - DNS2: 8.8.4.4
>>  - Hypervisor: XenServer
>>  - Guest CIDR: 10.1.2.0/24
>>  - Local Storage enabled: true
>> 
>> * Public Traffic
>>  - 10.1.1.1 / 255.255.255.0 / 10.1.1.2 / 10.1.1.100
>> 
>> * POD
>>  - 10.1.1.1 / 255.255.255.0 / 10.1.1.101 / 10.1.1.200
>> 
>> * VLAN
>>  - 101 - 109
>> 
>> * Host
>>  - Host Name: 178.237.34.120
>>  - Username: root
>>  - Password: blah
>> 
>> * Secondary Storage
>>  - Provider: NFS
>>  - Name: sec01
>>  - Server: 10.1.1.114
>>  - Path: /opt/storage/secondary
>> 
>> ::: Create Instance / Network / ACLs / Port Forwarding :::
>> 
>> * Create Instance
>>  - Featured: Tiny Linux
>>  - Compute Offering: Tiny Offering
>>  - Disk Offering: None
>>  - Instance name: cs43-01
>> 
>> * NIC Information
>>  - IP Address: 10.1.2.186
>>  - Gateway: 10.1.2.1
>>  - Netmask: 255.255.255.0
>> 
>> * Create Network
>>  - Name: devcloud-net01
>>  - Type: Isolated
>>  - CIDR: 10.1.2.0/24
>>  - Public IP: 10.1.1.4 [Source NAT]
>>  - Egress Rules: 0.0.0.0/0 - All
>>  - Network Offering: Offering for Isolated networks with Source Nat
>> service enabled
>> 
>> * Create ACLs
>>  - 10.1.0.0/16 - TCP - 22 - 22
>>  - 10.1.0.0/16 - TCP - 443 - 443
>> 
>> * Create Port Forwarding
>>  - 22:22 - 22:22 - instance cs43-01 [10.1.2.186]
>>  - 443:443 - 443:443 - instance cs43-01 [10.1.2.186]
>> 
>> * SSH into the new instance via the Public IP:
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.4
>> The authenticity of host '10.1.1.4 (10.1.1.4)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.4' (RSA) to the list of known hosts.
>> root@10.1.1.4's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Create Admin User / Log In / Create Instance / Network / ACLs / Port
>> Forwarding  :::
>> 
>> * Create a new Admin User
>>  - Passed
>> 
>> * Login with newly created user
>>  - Passed
>> 
>> * Create VM and Network
>>  - Passed
>> 
>> * Add ACLs and Port forwarding
>>  - Passed
>> 
>> * SSH into the machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.5
>> The authenticity of host '10.1.1.5 (10.1.1.5)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.5' (RSA) to the list of known hosts.
>> root@10.1.1.5's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Log In as Admin / Stop-Destroy Router VM / Stop-Start Instance / Check
>> if router VM is back :::
>> 
>> * Stop-Destroy Router VM
>>  - Passed
>> 
>> * Stop-Start VM
>>  - Passed
>> 
>> * Router VM is Back
>>  - Passed
>> 
>> * SSH into the Machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.4
>> root@10.1.1.4's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> ::: Create Domain / Create User / Log In / Create
>> Instance-Network-ACLs-Port forwarding / SSH into the VM :::
>> 
>> * Create Domain
>>  - Passed
>> 
>> * Create User
>>  - Passed
>> 
>> * Log in
>>  - Passed
>> 
>> * Create VM and Network
>>  - Passed
>> 
>> * Add ACLs and Port forwarding
>>  - Passed
>> 
>> * SSH into the machine
>>  - Passed
>> 
>> [root@devcloud-wil01 ~]# ssh root@10.1.1.6
>> The authenticity of host '10.1.1.6 (10.1.1.6)' can't be established.
>> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
>> Are you sure you want to continue connecting (yes/no)? yes
>> Warning: Permanently added '10.1.1.6' (RSA) to the list of known hosts.
>> root@10.1.1.6's password:
>> % cd /
>> % ls
>> bin         boot        dev         etc         home        lib
>> lost+found  mnt         proc        root        sbin        sys         tmp
>>        usr         var
>> %
>> 
>> Cheers,
>> Wilder
>> 
>> -----Original Message-----
>> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
>> Sent: Thursday, March 13, 2014 1:27 AM
>> To: dev@cloudstack.apache.org
>> Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>> 
>> Hi All,
>> 
>> 
>> 
>> I've created a 4.3.0 release, with the following artifacts up for a
>> 
>> vote:
>> 
>> 
>> 
>> 
>> 
>> Git Branch and Commit SH:
>> 
>> 
>> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
>> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>> 
>> 
>> 
>> List of changes:
>> 
>> New Features in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12325248
>> 
>> Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
>> 
>> Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
>> 
>> Known Issues in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12326162
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> Source release (checksums and signatures are available at the same
>> 
>> location):
>> 
>> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>> 
>> 
>> 
>> PGP release keys (signed using 94BE0D7C):
>> 
>> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>> 
>> 
>> 
>> Testing instructions are here:
>> 
>> 
>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure
>> 
>> 
>> 
>> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>> 
>> 
>> 
>> For sanity in tallying the vote, can PMC members please be sure to
>> indicate "(binding)" with their vote?
>> 
>> 
>> 
>> [ ] +1  approve
>> 
>> [ ] +0  no opinion
>> 
>> [ ] -1  disapprove (and reason why)
>> 
>> 
>> 
>> Thanks
>> 
>> Animesh
>> 
>> 


Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Guo Star <gh...@gmail.com>.
+1


2014-03-13 18:27 GMT+08:00 Wilder Rodrigues <WR...@schubergphilis.com>:

> Hi guys,
>
> I'm testing the CS 4.3 RC (8th round), and will keep doing so, but for now
> I already did the following and it looks good (sorry for the long email):
>
> * Environment
>   - Management Server: Debian 7 VM under VirtualBox
>   - DevCloud: XenServer 6.2
>   - MySQL: running on the DevCloud
>   - System VM: Latest from
> http://jenkins.buildacloud.org/view/4.3/job/cloudstack-4.3-systemvm/
>
> * Initial start-up
>   - Everything seems to work fine
>
> * Zone
>   - DNS1: 8.8.8.8
>   - DNS2: 8.8.4.4
>   - Hypervisor: XenServer
>   - Guest CIDR: 10.1.2.0/24
>   - Local Storage enabled: true
>
> * Public Traffic
>   - 10.1.1.1 / 255.255.255.0 / 10.1.1.2 / 10.1.1.100
>
> * POD
>   - 10.1.1.1 / 255.255.255.0 / 10.1.1.101 / 10.1.1.200
>
> * VLAN
>   - 101 - 109
>
> * Host
>   - Host Name: 178.237.34.120
>   - Username: root
>   - Password: blah
>
> * Secondary Storage
>   - Provider: NFS
>   - Name: sec01
>   - Server: 10.1.1.114
>   - Path: /opt/storage/secondary
>
> ::: Create Instance / Network / ACLs / Port Forwarding :::
>
> * Create Instance
>   - Featured: Tiny Linux
>   - Compute Offering: Tiny Offering
>   - Disk Offering: None
>   - Instance name: cs43-01
>
> * NIC Information
>   - IP Address: 10.1.2.186
>   - Gateway: 10.1.2.1
>   - Netmask: 255.255.255.0
>
> * Create Network
>   - Name: devcloud-net01
>   - Type: Isolated
>   - CIDR: 10.1.2.0/24
>   - Public IP: 10.1.1.4 [Source NAT]
>   - Egress Rules: 0.0.0.0/0 - All
>   - Network Offering: Offering for Isolated networks with Source Nat
> service enabled
>
> * Create ACLs
>   - 10.1.0.0/16 - TCP - 22 - 22
>   - 10.1.0.0/16 - TCP - 443 - 443
>
> * Create Port Forwarding
>   - 22:22 - 22:22 - instance cs43-01 [10.1.2.186]
>   - 443:443 - 443:443 - instance cs43-01 [10.1.2.186]
>
> * SSH into the new instance via the Public IP:
>
> [root@devcloud-wil01 ~]# ssh root@10.1.1.4
> The authenticity of host '10.1.1.4 (10.1.1.4)' can't be established.
> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
> Are you sure you want to continue connecting (yes/no)? yes
> Warning: Permanently added '10.1.1.4' (RSA) to the list of known hosts.
> root@10.1.1.4's password:
> % cd /
> % ls
> bin         boot        dev         etc         home        lib
> lost+found  mnt         proc        root        sbin        sys         tmp
>         usr         var
> %
>
> ::: Create Admin User / Log In / Create Instance / Network / ACLs / Port
> Forwarding  :::
>
> * Create a new Admin User
>   - Passed
>
> * Login with newly created user
>   - Passed
>
> * Create VM and Network
>   - Passed
>
> * Add ACLs and Port forwarding
>   - Passed
>
> * SSH into the machine
>   - Passed
>
> [root@devcloud-wil01 ~]# ssh root@10.1.1.5
> The authenticity of host '10.1.1.5 (10.1.1.5)' can't be established.
> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
> Are you sure you want to continue connecting (yes/no)? yes
> Warning: Permanently added '10.1.1.5' (RSA) to the list of known hosts.
> root@10.1.1.5's password:
> % cd /
> % ls
> bin         boot        dev         etc         home        lib
> lost+found  mnt         proc        root        sbin        sys         tmp
>         usr         var
> %
>
> ::: Log In as Admin / Stop-Destroy Router VM / Stop-Start Instance / Check
> if router VM is back :::
>
> * Stop-Destroy Router VM
>   - Passed
>
> * Stop-Start VM
>   - Passed
>
> * Router VM is Back
>   - Passed
>
> * SSH into the Machine
>   - Passed
>
> [root@devcloud-wil01 ~]# ssh root@10.1.1.4
> root@10.1.1.4's password:
> % cd /
> % ls
> bin         boot        dev         etc         home        lib
> lost+found  mnt         proc        root        sbin        sys         tmp
>         usr         var
> %
>
> ::: Create Domain / Create User / Log In / Create
> Instance-Network-ACLs-Port forwarding / SSH into the VM :::
>
> * Create Domain
>   - Passed
>
> * Create User
>   - Passed
>
> * Log in
>   - Passed
>
> * Create VM and Network
>   - Passed
>
> * Add ACLs and Port forwarding
>   - Passed
>
> * SSH into the machine
>   - Passed
>
> [root@devcloud-wil01 ~]# ssh root@10.1.1.6
> The authenticity of host '10.1.1.6 (10.1.1.6)' can't be established.
> RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
> Are you sure you want to continue connecting (yes/no)? yes
> Warning: Permanently added '10.1.1.6' (RSA) to the list of known hosts.
> root@10.1.1.6's password:
> % cd /
> % ls
> bin         boot        dev         etc         home        lib
> lost+found  mnt         proc        root        sbin        sys         tmp
>         usr         var
> %
>
> Cheers,
> Wilder
>
> -----Original Message-----
> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
> Sent: Thursday, March 13, 2014 1:27 AM
> To: dev@cloudstack.apache.org
> Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>
> Hi All,
>
>
>
> I've created a 4.3.0 release, with the following artifacts up for a
>
> vote:
>
>
>
>
>
> Git Branch and Commit SH:
>
>
> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>
>
>
> List of changes:
>
> New Features in 4.3:
> https://issues.apache.org/jira/issues/?filter=12325248
>
> Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
>
> Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
>
> Known Issues in 4.3:
> https://issues.apache.org/jira/issues/?filter=12326162
>
>
>
>
>
>
>
> Source release (checksums and signatures are available at the same
>
> location):
>
> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>
>
>
> PGP release keys (signed using 94BE0D7C):
>
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>
>
>
> Testing instructions are here:
>
>
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure
>
>
>
> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>
>
>
> For sanity in tallying the vote, can PMC members please be sure to
> indicate "(binding)" with their vote?
>
>
>
> [ ] +1  approve
>
> [ ] +0  no opinion
>
> [ ] -1  disapprove (and reason why)
>
>
>
> Thanks
>
> Animesh
>
>

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Wilder Rodrigues <WR...@schubergphilis.com>.
Hi guys,

I'm testing the CS 4.3 RC (8th round), and will keep doing so, but for now I already did the following and it looks good (sorry for the long email):

* Environment
  - Management Server: Debian 7 VM under VirtualBox
  - DevCloud: XenServer 6.2
  - MySQL: running on the DevCloud
  - System VM: Latest from http://jenkins.buildacloud.org/view/4.3/job/cloudstack-4.3-systemvm/

* Initial start-up
  - Everything seems to work fine

* Zone
  - DNS1: 8.8.8.8
  - DNS2: 8.8.4.4
  - Hypervisor: XenServer
  - Guest CIDR: 10.1.2.0/24
  - Local Storage enabled: true
  
* Public Traffic
  - 10.1.1.1 / 255.255.255.0 / 10.1.1.2 / 10.1.1.100
  
* POD
  - 10.1.1.1 / 255.255.255.0 / 10.1.1.101 / 10.1.1.200
  
* VLAN
  - 101 - 109
  
* Host
  - Host Name: 178.237.34.120
  - Username: root
  - Password: blah
  
* Secondary Storage
  - Provider: NFS
  - Name: sec01
  - Server: 10.1.1.114
  - Path: /opt/storage/secondary
  
::: Create Instance / Network / ACLs / Port Forwarding :::

* Create Instance
  - Featured: Tiny Linux
  - Compute Offering: Tiny Offering
  - Disk Offering: None
  - Instance name: cs43-01
  
* NIC Information
  - IP Address: 10.1.2.186
  - Gateway: 10.1.2.1
  - Netmask: 255.255.255.0
  
* Create Network
  - Name: devcloud-net01
  - Type: Isolated
  - CIDR: 10.1.2.0/24
  - Public IP: 10.1.1.4 [Source NAT]
  - Egress Rules: 0.0.0.0/0 - All
  - Network Offering: Offering for Isolated networks with Source Nat service enabled
  
* Create ACLs
  - 10.1.0.0/16 - TCP - 22 - 22
  - 10.1.0.0/16 - TCP - 443 - 443
  
* Create Port Forwarding
  - 22:22 - 22:22 - instance cs43-01 [10.1.2.186]
  - 443:443 - 443:443 - instance cs43-01 [10.1.2.186]
  
* SSH into the new instance via the Public IP:

[root@devcloud-wil01 ~]# ssh root@10.1.1.4
The authenticity of host '10.1.1.4 (10.1.1.4)' can't be established.
RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.1.1.4' (RSA) to the list of known hosts.
root@10.1.1.4's password: 
% cd /
% ls
bin         boot        dev         etc         home        lib         lost+found  mnt         proc        root        sbin        sys         tmp         usr         var
% 

::: Create Admin User / Log In / Create Instance / Network / ACLs / Port Forwarding  :::

* Create a new Admin User
  - Passed

* Login with newly created user
  - Passed
  
* Create VM and Network
  - Passed
  
* Add ACLs and Port forwarding
  - Passed
  
* SSH into the machine
  - Passed

[root@devcloud-wil01 ~]# ssh root@10.1.1.5
The authenticity of host '10.1.1.5 (10.1.1.5)' can't be established.
RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.1.1.5' (RSA) to the list of known hosts.
root@10.1.1.5's password: 
% cd /
% ls
bin         boot        dev         etc         home        lib         lost+found  mnt         proc        root        sbin        sys         tmp         usr         var
%

::: Log In as Admin / Stop-Destroy Router VM / Stop-Start Instance / Check if router VM is back :::

* Stop-Destroy Router VM
  - Passed

* Stop-Start VM
  - Passed
  
* Router VM is Back
  - Passed
  
* SSH into the Machine
  - Passed

[root@devcloud-wil01 ~]# ssh root@10.1.1.4
root@10.1.1.4's password: 
% cd /
% ls
bin         boot        dev         etc         home        lib         lost+found  mnt         proc        root        sbin        sys         tmp         usr         var
%

::: Create Domain / Create User / Log In / Create Instance-Network-ACLs-Port forwarding / SSH into the VM :::

* Create Domain
  - Passed
  
* Create User
  - Passed
  
* Log in
  - Passed

* Create VM and Network
  - Passed
  
* Add ACLs and Port forwarding
  - Passed
  
* SSH into the machine
  - Passed
  
[root@devcloud-wil01 ~]# ssh root@10.1.1.6
The authenticity of host '10.1.1.6 (10.1.1.6)' can't be established.
RSA key fingerprint is 02:43:6c:24:c5:79:b6:e2:c8:b7:e8:3c:8d:13:37:91.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.1.1.6' (RSA) to the list of known hosts.
root@10.1.1.6's password: 
% cd /
% ls
bin         boot        dev         etc         home        lib         lost+found  mnt         proc        root        sbin        sys         tmp         usr         var
%

Cheers,
Wilder

-----Original Message-----
From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com] 
Sent: Thursday, March 13, 2014 1:27 AM
To: dev@cloudstack.apache.org
Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Hi All,



I've created a 4.3.0 release, with the following artifacts up for a

vote:





Git Branch and Commit SH:

https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
Commit: 6a6ec648099553a42f830dcd566eab2452428908



List of changes:

New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248

Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249

Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161

Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162







Source release (checksums and signatures are available at the same

location):

https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



PGP release keys (signed using 94BE0D7C):

https://dist.apache.org/repos/dist/release/cloudstack/KEYS



Testing instructions are here:

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure



Vote will be open for 72 hours (Monday evening PST 5:30 PM)



For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?



[ ] +1  approve

[ ] +0  no opinion

[ ] -1  disapprove (and reason why)



Thanks

Animesh


RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Florin Dumitrascu <fl...@intunenetworks.com>.
Hi Ilya,

Thanks for getting back.
My problem was actually caused by myself playing around with MySQL bind address setting in my.cnf.
Apologies for all the noise.

Florin


-----Original Message-----
From: ilya musayev [mailto:ilya.mailing.lists@gmail.com]
Sent: Wednesday, March 19, 2014 3:46 PM
To: dev@cloudstack.apache.org
Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Florin,

I had a similar issue earlier today.

My solution was to cleanup everything from previous builds - i did not figure what exactly got corrupted where, but i did have layered installs of ACS4.2.1 on top of multiple versions of 4.3 .

My fix was something along the lines of
rm -rf `locate cloudstack`

But i would ask that you be careful when you run the command above.

I also dropped my databases in order for everything to be recreated - probably was not necessary, but i had nothing to loose and it worked.

Regards
ilya

On 3/18/14, 1:45 PM, Florin Dumitrascu wrote:
> Hi Alena,
>
> Actually I just had a quick look at the management server logs and I see this error. MySQL server is running, so not sure what is causing it:
>
> 2014-03-18 17:37:12,453 ERROR [c.c.u.d.Merovingian2] (main:null)
> Unable to get a new db connection
> com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: Could not create connection to database server. Attempted reconnect 3 times. Giving up.
>
>
>
> -----Original Message-----
> From: Alena Prokharchyk [mailto:Alena.Prokharchyk@citrix.com]
> Sent: Tuesday, March 18, 2014 5:40 PM
> To: dev@cloudstack.apache.org; Florin Dumitrascu
> Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>
> Florin, can you check the output of the following DB query:
>
> Select * from configuration where name="hypervisor.list"
>
>
>
> On 3/18/14, 10:17 AM, "Florin Dumitrascu"
> <fl...@intunenetworks.com> wrote:
>
>> Apologies for the missing link. Screenshot of the GUI bug is here:
>>
>> http://imgur.com/FL9OnY0
>>
>> Thanks,
>> Florin
>>
>>
>> -----Original Message-----
>> From: Florin Dumitrascu [mailto:florin.dumitrascu@intunenetworks.com]
>> Sent: Tuesday, March 18, 2014 5:11 PM
>> To: dev@cloudstack.apache.org
>> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>>
>> Hi,
>>
>> I am trying to create an advanced zone using RC8, but I am blocked
>> even
> >from the first steps.
>> As seen in the attached image, I cannot select the Hypervisor type
>> from the drop down box.
>> Has anyone else seen this behaviour ?
>>
>> Thanks,
>> Florin
>>
>>
>>
>>
>>
>> -----Original Message-----
>> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
>> Sent: Thursday, March 13, 2014 12:27 AM
>> To: dev@cloudstack.apache.org
>> Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>>
>> Hi All,
>>
>>
>>
>> I've created a 4.3.0 release, with the following artifacts up for a
>>
>> vote:
>>
>>
>>
>>
>>
>> Git Branch and Commit SH:
>>
>> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h
>> =r
>> efs
>> /heads/4.3
>> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>>
>>
>>
>> List of changes:
>>
>> New Features in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12325248
>>
>> Improvement in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12325249
>>
>> Issues fixed in 4.3
>> https://issues.apache.org/jira/issues/?filter=12326161
>>
>> Known Issues in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12326162
>>
>>
>>
>>
>>
>>
>>
>> Source release (checksums and signatures are available at the same
>>
>> location):
>>
>> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>>
>>
>>
>> PGP release keys (signed using 94BE0D7C):
>>
>> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>>
>>
>>
>> Testing instructions are here:
>>
>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+p
>> ro
>> ced
>> ure
>>
>>
>>
>> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>>
>>
>>
>> For sanity in tallying the vote, can PMC members please be sure to
>> indicate "(binding)" with their vote?
>>
>>
>>
>> [ ] +1  approve
>>
>> [ ] +0  no opinion
>>
>> [ ] -1  disapprove (and reason why)
>>
>>
>>
>> Thanks
>>
>> Animesh
>>
>>
>>
>> IMPORTANT NOTE: The information in this e-mail (and any attachments)
>> is confidential. The contents may not be disclosed or used by anyone
>> other than the addressee. If you are not the intended recipient,
>> please notify the sender immediately or telephone: +353 (0)1 6204700.
>> We cannot accept any responsibility for the accuracy or completeness
>> of this message as it has been transmitted over a public network. If
>> you suspect that the message may have been intercepted or amended, please call the sender.
>>
>>
>> IMPORTANT NOTE: The information in this e-mail (and any attachments)
>> is confidential. The contents may not be disclosed or used by anyone
>> other than the addressee. If you are not the intended recipient,
>> please notify the sender immediately or telephone: +353 (0)1 6204700.
>> We cannot accept any responsibility for the accuracy or completeness
>> of this message as it has been transmitted over a public network. If
>> you suspect that the message may have been intercepted or amended, please call the sender.
>
> IMPORTANT NOTE: The information in this e-mail (and any attachments) is confidential. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient, please notify the sender immediately or telephone: +353 (0)1 6204700. We cannot accept any responsibility for the accuracy or completeness of this message as it has been transmitted over a public network. If you suspect that the message may have been intercepted or amended, please call the sender.


IMPORTANT NOTE: The information in this e-mail (and any attachments) is confidential. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient, please notify the sender immediately or telephone: +353 (0)1 6204700. We cannot accept any responsibility for the accuracy or completeness of this message as it has been transmitted over a public network. If you suspect that the message may have been intercepted or amended, please call the sender.

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by ilya musayev <il...@gmail.com>.
Florin,

I had a similar issue earlier today.

My solution was to cleanup everything from previous builds - i did not 
figure what exactly got corrupted where, but i did have layered installs 
of ACS4.2.1 on top of multiple versions of 4.3 .

My fix was something along the lines of
rm -rf `locate cloudstack`

But i would ask that you be careful when you run the command above.

I also dropped my databases in order for everything to be recreated - 
probably was not necessary, but i had nothing to loose and it worked.

Regards
ilya

On 3/18/14, 1:45 PM, Florin Dumitrascu wrote:
> Hi Alena,
>
> Actually I just had a quick look at the management server logs and I see this error. MySQL server is running, so not sure what is causing it:
>
> 2014-03-18 17:37:12,453 ERROR [c.c.u.d.Merovingian2] (main:null) Unable to get a new db connection
> com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: Could not create connection to database server. Attempted reconnect 3 times. Giving up.
>
>
>
> -----Original Message-----
> From: Alena Prokharchyk [mailto:Alena.Prokharchyk@citrix.com]
> Sent: Tuesday, March 18, 2014 5:40 PM
> To: dev@cloudstack.apache.org; Florin Dumitrascu
> Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>
> Florin, can you check the output of the following DB query:
>
> Select * from configuration where name="hypervisor.list"
>
>
>
> On 3/18/14, 10:17 AM, "Florin Dumitrascu"
> <fl...@intunenetworks.com> wrote:
>
>> Apologies for the missing link. Screenshot of the GUI bug is here:
>>
>> http://imgur.com/FL9OnY0
>>
>> Thanks,
>> Florin
>>
>>
>> -----Original Message-----
>> From: Florin Dumitrascu [mailto:florin.dumitrascu@intunenetworks.com]
>> Sent: Tuesday, March 18, 2014 5:11 PM
>> To: dev@cloudstack.apache.org
>> Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>>
>> Hi,
>>
>> I am trying to create an advanced zone using RC8, but I am blocked even
> >from the first steps.
>> As seen in the attached image, I cannot select the Hypervisor type from
>> the drop down box.
>> Has anyone else seen this behaviour ?
>>
>> Thanks,
>> Florin
>>
>>
>>
>>
>>
>> -----Original Message-----
>> From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
>> Sent: Thursday, March 13, 2014 12:27 AM
>> To: dev@cloudstack.apache.org
>> Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>>
>> Hi All,
>>
>>
>>
>> I've created a 4.3.0 release, with the following artifacts up for a
>>
>> vote:
>>
>>
>>
>>
>>
>> Git Branch and Commit SH:
>>
>> https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=r
>> efs
>> /heads/4.3
>> Commit: 6a6ec648099553a42f830dcd566eab2452428908
>>
>>
>>
>> List of changes:
>>
>> New Features in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12325248
>>
>> Improvement in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12325249
>>
>> Issues fixed in 4.3
>> https://issues.apache.org/jira/issues/?filter=12326161
>>
>> Known Issues in 4.3:
>> https://issues.apache.org/jira/issues/?filter=12326162
>>
>>
>>
>>
>>
>>
>>
>> Source release (checksums and signatures are available at the same
>>
>> location):
>>
>> https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>>
>>
>>
>> PGP release keys (signed using 94BE0D7C):
>>
>> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>>
>>
>>
>> Testing instructions are here:
>>
>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+pro
>> ced
>> ure
>>
>>
>>
>> Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>>
>>
>>
>> For sanity in tallying the vote, can PMC members please be sure to
>> indicate "(binding)" with their vote?
>>
>>
>>
>> [ ] +1  approve
>>
>> [ ] +0  no opinion
>>
>> [ ] -1  disapprove (and reason why)
>>
>>
>>
>> Thanks
>>
>> Animesh
>>
>>
>>
>> IMPORTANT NOTE: The information in this e-mail (and any attachments) is
>> confidential. The contents may not be disclosed or used by anyone other
>> than the addressee. If you are not the intended recipient, please
>> notify the sender immediately or telephone: +353 (0)1 6204700. We
>> cannot accept any responsibility for the accuracy or completeness of
>> this message as it has been transmitted over a public network. If you
>> suspect that the message may have been intercepted or amended, please call the sender.
>>
>>
>> IMPORTANT NOTE: The information in this e-mail (and any attachments) is
>> confidential. The contents may not be disclosed or used by anyone other
>> than the addressee. If you are not the intended recipient, please
>> notify the sender immediately or telephone: +353 (0)1 6204700. We
>> cannot accept any responsibility for the accuracy or completeness of
>> this message as it has been transmitted over a public network. If you
>> suspect that the message may have been intercepted or amended, please call the sender.
>
> IMPORTANT NOTE: The information in this e-mail (and any attachments) is confidential. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient, please notify the sender immediately or telephone: +353 (0)1 6204700. We cannot accept any responsibility for the accuracy or completeness of this message as it has been transmitted over a public network. If you suspect that the message may have been intercepted or amended, please call the sender.


RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Florin Dumitrascu <fl...@intunenetworks.com>.
Hi Alena,

Actually I just had a quick look at the management server logs and I see this error. MySQL server is running, so not sure what is causing it:

2014-03-18 17:37:12,453 ERROR [c.c.u.d.Merovingian2] (main:null) Unable to get a new db connection
com.mysql.jdbc.exceptions.jdbc4.MySQLNonTransientConnectionException: Could not create connection to database server. Attempted reconnect 3 times. Giving up.



-----Original Message-----
From: Alena Prokharchyk [mailto:Alena.Prokharchyk@citrix.com]
Sent: Tuesday, March 18, 2014 5:40 PM
To: dev@cloudstack.apache.org; Florin Dumitrascu
Subject: Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Florin, can you check the output of the following DB query:

Select * from configuration where name="hypervisor.list"



On 3/18/14, 10:17 AM, "Florin Dumitrascu"
<fl...@intunenetworks.com> wrote:

>Apologies for the missing link. Screenshot of the GUI bug is here:
>
>http://imgur.com/FL9OnY0
>
>Thanks,
>Florin
>
>
>-----Original Message-----
>From: Florin Dumitrascu [mailto:florin.dumitrascu@intunenetworks.com]
>Sent: Tuesday, March 18, 2014 5:11 PM
>To: dev@cloudstack.apache.org
>Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>
>Hi,
>
>I am trying to create an advanced zone using RC8, but I am blocked even
>from the first steps.
>As seen in the attached image, I cannot select the Hypervisor type from
>the drop down box.
>Has anyone else seen this behaviour ?
>
>Thanks,
>Florin
>
>
>
>
>
>-----Original Message-----
>From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
>Sent: Thursday, March 13, 2014 12:27 AM
>To: dev@cloudstack.apache.org
>Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>
>Hi All,
>
>
>
>I've created a 4.3.0 release, with the following artifacts up for a
>
>vote:
>
>
>
>
>
>Git Branch and Commit SH:
>
>https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=r
>efs
>/heads/4.3
>Commit: 6a6ec648099553a42f830dcd566eab2452428908
>
>
>
>List of changes:
>
>New Features in 4.3:
>https://issues.apache.org/jira/issues/?filter=12325248
>
>Improvement in 4.3:
>https://issues.apache.org/jira/issues/?filter=12325249
>
>Issues fixed in 4.3
>https://issues.apache.org/jira/issues/?filter=12326161
>
>Known Issues in 4.3:
>https://issues.apache.org/jira/issues/?filter=12326162
>
>
>
>
>
>
>
>Source release (checksums and signatures are available at the same
>
>location):
>
>https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>
>
>
>PGP release keys (signed using 94BE0D7C):
>
>https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>
>
>
>Testing instructions are here:
>
>https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+pro
>ced
>ure
>
>
>
>Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>
>
>
>For sanity in tallying the vote, can PMC members please be sure to
>indicate "(binding)" with their vote?
>
>
>
>[ ] +1  approve
>
>[ ] +0  no opinion
>
>[ ] -1  disapprove (and reason why)
>
>
>
>Thanks
>
>Animesh
>
>
>
>IMPORTANT NOTE: The information in this e-mail (and any attachments) is
>confidential. The contents may not be disclosed or used by anyone other
>than the addressee. If you are not the intended recipient, please
>notify the sender immediately or telephone: +353 (0)1 6204700. We
>cannot accept any responsibility for the accuracy or completeness of
>this message as it has been transmitted over a public network. If you
>suspect that the message may have been intercepted or amended, please call the sender.
>
>
>IMPORTANT NOTE: The information in this e-mail (and any attachments) is
>confidential. The contents may not be disclosed or used by anyone other
>than the addressee. If you are not the intended recipient, please
>notify the sender immediately or telephone: +353 (0)1 6204700. We
>cannot accept any responsibility for the accuracy or completeness of
>this message as it has been transmitted over a public network. If you
>suspect that the message may have been intercepted or amended, please call the sender.


IMPORTANT NOTE: The information in this e-mail (and any attachments) is confidential. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient, please notify the sender immediately or telephone: +353 (0)1 6204700. We cannot accept any responsibility for the accuracy or completeness of this message as it has been transmitted over a public network. If you suspect that the message may have been intercepted or amended, please call the sender.

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Alena Prokharchyk <Al...@citrix.com>.
Florin, can you check the output of the following DB query:

Select * from configuration where name="hypervisor.list"



On 3/18/14, 10:17 AM, "Florin Dumitrascu"
<fl...@intunenetworks.com> wrote:

>Apologies for the missing link. Screenshot of the GUI bug is here:
>
>http://imgur.com/FL9OnY0
>
>Thanks,
>Florin
>
>
>-----Original Message-----
>From: Florin Dumitrascu [mailto:florin.dumitrascu@intunenetworks.com]
>Sent: Tuesday, March 18, 2014 5:11 PM
>To: dev@cloudstack.apache.org
>Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>
>Hi,
>
>I am trying to create an advanced zone using RC8, but I am blocked even
>from the first steps.
>As seen in the attached image, I cannot select the Hypervisor type from
>the drop down box.
>Has anyone else seen this behaviour ?
>
>Thanks,
>Florin
>
>
>
>
>
>-----Original Message-----
>From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
>Sent: Thursday, March 13, 2014 12:27 AM
>To: dev@cloudstack.apache.org
>Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)
>
>Hi All,
>
>
>
>I've created a 4.3.0 release, with the following artifacts up for a
>
>vote:
>
>
>
>
>
>Git Branch and Commit SH:
>
>https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs
>/heads/4.3
>Commit: 6a6ec648099553a42f830dcd566eab2452428908
>
>
>
>List of changes:
>
>New Features in 4.3:
>https://issues.apache.org/jira/issues/?filter=12325248
>
>Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
>
>Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
>
>Known Issues in 4.3:
>https://issues.apache.org/jira/issues/?filter=12326162
>
>
>
>
>
>
>
>Source release (checksums and signatures are available at the same
>
>location):
>
>https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>
>
>
>PGP release keys (signed using 94BE0D7C):
>
>https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>
>
>
>Testing instructions are here:
>
>https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+proced
>ure
>
>
>
>Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>
>
>
>For sanity in tallying the vote, can PMC members please be sure to
>indicate "(binding)" with their vote?
>
>
>
>[ ] +1  approve
>
>[ ] +0  no opinion
>
>[ ] -1  disapprove (and reason why)
>
>
>
>Thanks
>
>Animesh
>
>
>
>IMPORTANT NOTE: The information in this e-mail (and any attachments) is
>confidential. The contents may not be disclosed or used by anyone other
>than the addressee. If you are not the intended recipient, please notify
>the sender immediately or telephone: +353 (0)1 6204700. We cannot accept
>any responsibility for the accuracy or completeness of this message as it
>has been transmitted over a public network. If you suspect that the
>message may have been intercepted or amended, please call the sender.
>
>
>IMPORTANT NOTE: The information in this e-mail (and any attachments) is
>confidential. The contents may not be disclosed or used by anyone other
>than the addressee. If you are not the intended recipient, please notify
>the sender immediately or telephone: +353 (0)1 6204700. We cannot accept
>any responsibility for the accuracy or completeness of this message as it
>has been transmitted over a public network. If you suspect that the
>message may have been intercepted or amended, please call the sender.


RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Florin Dumitrascu <fl...@intunenetworks.com>.
Apologies for the missing link. Screenshot of the GUI bug is here:

http://imgur.com/FL9OnY0

Thanks,
Florin


-----Original Message-----
From: Florin Dumitrascu [mailto:florin.dumitrascu@intunenetworks.com]
Sent: Tuesday, March 18, 2014 5:11 PM
To: dev@cloudstack.apache.org
Subject: RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Hi,

I am trying to create an advanced zone using RC8, but I am blocked even from the first steps.
As seen in the attached image, I cannot select the Hypervisor type from the drop down box.
Has anyone else seen this behaviour ?

Thanks,
Florin





-----Original Message-----
From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
Sent: Thursday, March 13, 2014 12:27 AM
To: dev@cloudstack.apache.org
Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Hi All,



I've created a 4.3.0 release, with the following artifacts up for a

vote:





Git Branch and Commit SH:

https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
Commit: 6a6ec648099553a42f830dcd566eab2452428908



List of changes:

New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248

Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249

Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161

Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162







Source release (checksums and signatures are available at the same

location):

https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



PGP release keys (signed using 94BE0D7C):

https://dist.apache.org/repos/dist/release/cloudstack/KEYS



Testing instructions are here:

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure



Vote will be open for 72 hours (Monday evening PST 5:30 PM)



For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?



[ ] +1  approve

[ ] +0  no opinion

[ ] -1  disapprove (and reason why)



Thanks

Animesh



IMPORTANT NOTE: The information in this e-mail (and any attachments) is confidential. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient, please notify the sender immediately or telephone: +353 (0)1 6204700. We cannot accept any responsibility for the accuracy or completeness of this message as it has been transmitted over a public network. If you suspect that the message may have been intercepted or amended, please call the sender.


IMPORTANT NOTE: The information in this e-mail (and any attachments) is confidential. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient, please notify the sender immediately or telephone: +353 (0)1 6204700. We cannot accept any responsibility for the accuracy or completeness of this message as it has been transmitted over a public network. If you suspect that the message may have been intercepted or amended, please call the sender.

RE: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Florin Dumitrascu <fl...@intunenetworks.com>.
Hi,

I am trying to create an advanced zone using RC8, but I am blocked even from the first steps.
As seen in the attached image, I cannot select the Hypervisor type from the drop down box.
Has anyone else seen this behaviour ?

Thanks,
Florin





-----Original Message-----
From: Animesh Chaturvedi [mailto:animesh.chaturvedi@citrix.com]
Sent: Thursday, March 13, 2014 12:27 AM
To: dev@cloudstack.apache.org
Subject: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Hi All,



I've created a 4.3.0 release, with the following artifacts up for a

vote:





Git Branch and Commit SH:

https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/4.3
Commit: 6a6ec648099553a42f830dcd566eab2452428908



List of changes:

New Features in 4.3: https://issues.apache.org/jira/issues/?filter=12325248

Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249

Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161

Known Issues in 4.3: https://issues.apache.org/jira/issues/?filter=12326162







Source release (checksums and signatures are available at the same

location):

https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/



PGP release keys (signed using 94BE0D7C):

https://dist.apache.org/repos/dist/release/cloudstack/KEYS



Testing instructions are here:

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure



Vote will be open for 72 hours (Monday evening PST 5:30 PM)



For sanity in tallying the vote, can PMC members please be sure to indicate "(binding)" with their vote?



[ ] +1  approve

[ ] +0  no opinion

[ ] -1  disapprove (and reason why)



Thanks

Animesh



IMPORTANT NOTE: The information in this e-mail (and any attachments) is confidential. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient, please notify the sender immediately or telephone: +353 (0)1 6204700. We cannot accept any responsibility for the accuracy or completeness of this message as it has been transmitted over a public network. If you suspect that the message may have been intercepted or amended, please call the sender.

Re: [VOTE] Apache CloudStack 4.3.0 (eighth round)

Posted by Srikanteswararao Talluri <sr...@citrix.com>.
Here is the automation report on this RC:

On XenServer/BVT/Test Run: #1196 & #1197
--------
all the failures are test/evn issues related to ssh.
--------

Link to test results:
http://jenkins.buildacloud.org/view/cloudstack-qa-4.3/job/test-smoke-matrix
-4.3/1196/testReport/
http://jenkins.buildacloud.org/view/cloudstack-qa-4.3/job/test-smoke-matrix
-4.3/1197/testReport/

--------
Total:97
Fail :4
Skip :2
--------

name                                               pass    fail    skip
test_privategw_acl/                                   1       0       0
test_global_settings/                                 1       0       0
test_affinity_groups/                                 1       0       0
test_vm_life_cycle/                                  10       0       0
test_non_contigiousvlan/                              1       0       0
test_vm_snapshots/                                    3       0       0
test_scale_vm/                                        1       0       0
test_deploy_vm_with_userdata/                         2       0       0
test_disk_offerings/                                  3       0       0
test_portable_publicip/                               2       0       0
test_regions/                                         1       0       0
test_templates/                                       7       0       1
test_nic/                                             1       0       0
test_vpc_vpn/                                         2       0       0
test_network_acl/                                     1       0       0
test_iso/                                             5       0       1
test_public_ip_range/                                 1       0       0
test_volumes/                                         9       0       0
test_routers/                                         9       0       0
test_multipleips_per_nic/                             1       0       0
test_deploy_vms_with_varied_deploymentplanners/       3       0       0
test_deploy_vm/                                       1       0       0
test_ssvm/                                           10       0       0
test_pvlan/                                           1       0       0
test_network/                                         7       0       0
test_loadbalance/                                     0       3       0
test_reset_vm_on_reboot/                              1       0       0
test_guest_vlan_range/                                1       0       0
test_service_offerings/                               3       1       0
test_internal_lb/                                     1       0       0
test_resource_detail/                                 1       0       0
--------


On XenServer 6.2/Regression/Test Run: #305
--------
all the failures are test/evn issues related to ssh.
--------

Link to test results:
http://jenkins.buildacloud.org/view/cloudstack-qa-4.3/job/test-regression-m
atrix-4.3/305/testReport/

--------
Total:451
Fail :53
Skip :24
--------

name                               pass    fail    skip
test_ip_reservation/                  4       0       0
test_accounts/                       14       0       0
test_affinity_groups/                41       0       1
test_vm_passwdenabled/                1       0       0
test_vpc_network_lbrules/            13       2       0
test_vpc_network_staticnatrule/       3       3       0
test_resource_limits/                11       0       0
test_regions/                         3       0       0
test_reset_ssh_keypair/               9       1       0
test_implicit_planner/                0       0       1
test_recurring_snapshots/             2       0       0
test_vpc_offerings/                   7       1       0
test_explicit_dedication/             0       0       1
test_custom_hostname/                 3       0       3
test_security_groups/                 1       0       0
test_redundant_router_cleanups/       3       0       0
test_haproxy/                        10       1       0
test_shared_networks/                12       0       1
test_advancedsg_networks/             1       0       0
test_multiple_ip_ranges/              1       0       0
test_redundant_router_upgrades/       2       0       0
test_routers/                         6       0       0
test_project_limits/                  8       0       0
test_vpn_users/                       7       0       0
test_templates/                       4       0       0
test_redundant_router_services/       1       0       0
test_blocker_bugs/                    7       0       0
test_volumes/                         9       0       0
test_network_offering/                3       0       0
test_storage_motion/                  2       0       0
test_snapshot_gc/                     1       0       0
test_egress_rules/                    1       0       0
test_egress_fw_rules/                 6      16       4
test_vpc_vms_deployment/              6       1       0
test_project_usage/                   9       0       0
test_vpc_routers/                     8       2       0
test_tags/                           19       0       1
test_snapshot_limits/                 1       0       0
test_vpc_network/                    16       2       9
test_eip_elb/                         1       0       0
test_usage/                           9       0       0
test_vpc_vm_life_cycle/              24       9       0
test_project_configs/                 2       0       3
test_projects/                       10       0       0
test_assign_vm/                      15       2       0
test_stopped_vm/                     16       1       0
test_allocation_states/               6       0       0
test_update_vm/                       1       0       0
test_regions_accounts/                3       0       0
test_snapshots/                       7       0       0
test_project_resources/               7       0       0
test_vpc/                            17       3       0
test_vpc_network_pfrules/             1       9       0
--------

Thanks,

~Talluri

On 13/03/14 5:56 am, "Animesh Chaturvedi" <an...@citrix.com>
wrote:

>Hi All,
>
>
>
>I've created a 4.3.0 release, with the following artifacts up for a
>
>vote:
>
>
>
>
>
>Git Branch and Commit SH:
>
>https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs
>/heads/4.3
>Commit: 6a6ec648099553a42f830dcd566eab2452428908
>
>
>
>List of changes:
>
>New Features in 4.3:
>https://issues.apache.org/jira/issues/?filter=12325248
>
>Improvement in 4.3: https://issues.apache.org/jira/issues/?filter=12325249
>
>Issues fixed in 4.3 https://issues.apache.org/jira/issues/?filter=12326161
>
>Known Issues in 4.3:
>https://issues.apache.org/jira/issues/?filter=12326162
>
>
>
>
>
>
>
>Source release (checksums and signatures are available at the same
>
>location):
>
>https://dist.apache.org/repos/dist/dev/cloudstack/4.3.0/
>
>
>
>PGP release keys (signed using 94BE0D7C):
>
>https://dist.apache.org/repos/dist/release/cloudstack/KEYS
>
>
>
>Testing instructions are here:
>
>https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+proced
>ure
>
>
>
>Vote will be open for 72 hours (Monday evening PST 5:30 PM)
>
>
>
>For sanity in tallying the vote, can PMC members please be sure to
>indicate "(binding)" with their vote?
>
>
>
>[ ] +1  approve
>
>[ ] +0  no opinion
>
>[ ] -1  disapprove (and reason why)
>
>
>
>Thanks
>
>Animesh
>