You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Jevgeni Zolotarjov <j....@gmail.com> on 2018/09/18 16:10:09 UTC
Unable to migrate instance to new host
We were running cloudstack 4.11.1 with 1 host.
Now we added another identical host.
The procedure completed successfully.
But the attempt to migrate instance to this new host fails with error
message:
Migration was refused connection to destination: qemu+tcp://A.B.C.D/system.
Please check libvirt configuration compatibility and firewall rules on the
source and destination hosts.
iptables configuration on both hosts is the one suggested here
http://docs.cloudstack.apache.org/projects/archived-cloudstack-installation/en/4.11/hypervisor/kvm.html#configuring-the-firewall
Please help.
Re: Unable to migrate instance to new host
Posted by Rohit Yadav <ro...@shapeblue.com>.
Hi Jevgeni,
After upgrading to 4.11.1.0, by default we require that hosts are secured using a new CA framework. To do that you can run provisionCertificate API against all your KVM hosts and CPVM/SSVM hosts which will secure and onboard them to use CloudStack issued x509 certificates.
By default all new KVM hosts added after one upgrades to 4.11.x will use the CA framework, however the security will not be enforced (you can still have unsecured hosts and it will still work). Only in case of VM migration, live migration of VM will not be supposed between non-homogenous hosts (i.e. when either src/target KVM host is secured but other is not).
You can read more about this here: http://docs.cloudstack.apache.org/en/4.11.1.0/adminguide/hosts.html#security
- Rohit
<https://cloudstack.apache.org>
________________________________
From: Jevgeni Zolotarjov <j....@gmail.com>
Sent: Tuesday, September 18, 2018 9:40:09 PM
To: users@cloudstack.apache.org
Subject: Unable to migrate instance to new host
We were running cloudstack 4.11.1 with 1 host.
Now we added another identical host.
The procedure completed successfully.
But the attempt to migrate instance to this new host fails with error
message:
Migration was refused connection to destination: qemu+tcp://A.B.C.D/system.
Please check libvirt configuration compatibility and firewall rules on the
source and destination hosts.
iptables configuration on both hosts is the one suggested here
http://docs.cloudstack.apache.org/projects/archived-cloudstack-installation/en/4.11/hypervisor/kvm.html#configuring-the-firewall
Please help.
rohit.yadav@shapeblue.com
www.shapeblue.com
Amadeus House, Floral Street, London WC2E 9DPUK
@shapeblue
Re: Unable to migrate instance to new host
Posted by Jevgeni Zolotarjov <j....@gmail.com>.
Resolved the problem by following changes in /etc/libvirt/libvirtd.conf
listen_tls=0
listen_tcp=1
Now I can move running instances between hosts!
BUT - new problem
The instances, running on freshly added host are not accessible over TCP
from LAN. When I open console for these instances, then the network is
available, IP address is correct and IP addresses in LAN are accessible
from these instances.
What is still missing?
Help appreciated.
On Tue, Sep 18, 2018 at 11:46 PM Jevgeni Zolotarjov <j....@gmail.com>
wrote:
> My host is running on Centos7.
>
> tried to set "LIBVIRTD_ARGS=-l" in
> /etc/sysconfig/libvirtd
>
> But nothing changed
>
> On Tue, Sep 18, 2018 at 8:42 PM Nicolas Bouige <n....@dimsi.fr> wrote:
>
>> Hello Jevgeni,
>>
>> Whats is your linux distribution ?
>> On ubuntu 16.04, We ran into the same problem few month ago and we had
>> to modify the libvirt-bin.service as well.
>>
>> 'ExecStart=/usr/sbin/libvirtd $libvirtd_opts' >>
>> 'ExecStart=/usr/sbin/libvirtd -l $libvirtd_opts'
>>
>> Add the "-l" before $libvirtd_opts
>>
>> Best regards,
>> N.B
>>
>> -----Message d'origine-----
>> De : Jevgeni Zolotarjov [mailto:j.zolotarjov@gmail.com]
>> Envoyé : mardi 18 septembre 2018 18:10
>> À : users@cloudstack.apache.org
>> Objet : Unable to migrate instance to new host
>>
>> We were running cloudstack 4.11.1 with 1 host.
>> Now we added another identical host.
>>
>> The procedure completed successfully.
>>
>> But the attempt to migrate instance to this new host fails with error
>> message:
>>
>> Migration was refused connection to destination:
>> qemu+tcp://A.B.C.D/system.
>> Please check libvirt configuration compatibility and firewall rules on
>> the source and destination hosts.
>>
>> iptables configuration on both hosts is the one suggested here
>> http://docs.cloudstack.apache.org/projects/archived-cloudstack-installation/en/4.11/hypervisor/kvm.html#configuring-the-firewall
>>
>> Please help.
>>
>
Re: Unable to migrate instance to new host
Posted by Jevgeni Zolotarjov <j....@gmail.com>.
My host is running on Centos7.
tried to set "LIBVIRTD_ARGS=-l" in
/etc/sysconfig/libvirtd
But nothing changed
On Tue, Sep 18, 2018 at 8:42 PM Nicolas Bouige <n....@dimsi.fr> wrote:
> Hello Jevgeni,
>
> Whats is your linux distribution ?
> On ubuntu 16.04, We ran into the same problem few month ago and we had to
> modify the libvirt-bin.service as well.
>
> 'ExecStart=/usr/sbin/libvirtd $libvirtd_opts' >>
> 'ExecStart=/usr/sbin/libvirtd -l $libvirtd_opts'
>
> Add the "-l" before $libvirtd_opts
>
> Best regards,
> N.B
>
> -----Message d'origine-----
> De : Jevgeni Zolotarjov [mailto:j.zolotarjov@gmail.com]
> Envoyé : mardi 18 septembre 2018 18:10
> À : users@cloudstack.apache.org
> Objet : Unable to migrate instance to new host
>
> We were running cloudstack 4.11.1 with 1 host.
> Now we added another identical host.
>
> The procedure completed successfully.
>
> But the attempt to migrate instance to this new host fails with error
> message:
>
> Migration was refused connection to destination: qemu+tcp://A.B.C.D/system.
> Please check libvirt configuration compatibility and firewall rules on the
> source and destination hosts.
>
> iptables configuration on both hosts is the one suggested here
> http://docs.cloudstack.apache.org/projects/archived-cloudstack-installation/en/4.11/hypervisor/kvm.html#configuring-the-firewall
>
> Please help.
>
RE: Unable to migrate instance to new host
Posted by Nicolas Bouige <n....@dimsi.fr>.
Hello Jevgeni,
Whats is your linux distribution ?
On ubuntu 16.04, We ran into the same problem few month ago and we had to modify the libvirt-bin.service as well.
'ExecStart=/usr/sbin/libvirtd $libvirtd_opts' >> 'ExecStart=/usr/sbin/libvirtd -l $libvirtd_opts'
Add the "-l" before $libvirtd_opts
Best regards,
N.B
-----Message d'origine-----
De : Jevgeni Zolotarjov [mailto:j.zolotarjov@gmail.com]
Envoyé : mardi 18 septembre 2018 18:10
À : users@cloudstack.apache.org
Objet : Unable to migrate instance to new host
We were running cloudstack 4.11.1 with 1 host.
Now we added another identical host.
The procedure completed successfully.
But the attempt to migrate instance to this new host fails with error
message:
Migration was refused connection to destination: qemu+tcp://A.B.C.D/system.
Please check libvirt configuration compatibility and firewall rules on the source and destination hosts.
iptables configuration on both hosts is the one suggested here http://docs.cloudstack.apache.org/projects/archived-cloudstack-installation/en/4.11/hypervisor/kvm.html#configuring-the-firewall
Please help.