1. 17 Apr, 2014 2 commits
  2. 08 Apr, 2014 2 commits
  3. 03 Apr, 2014 1 commit
  4. 02 Apr, 2014 1 commit
  5. 24 Mar, 2014 1 commit
    • Dimitris Aragiorgis's avatar
      kvm: Add migration capabilities as an hvparam · 937ff984
      Dimitris Aragiorgis authored
      
      
      Latest QEMU versions support various migration capabilities. Each
      can be enabled/disabled with 'migrate_set_capability' monitor
      command.
      
      Version 1.7.0 defines x-rdma-pin-all, auto-converge, zero-blocks,
      and xbzrle migration capabilities.
      
      Since migration capabilities are more than one, and because hvparams
      accept only strings/integers and not dicts we decide to provide
      the capabilities that should be on via a ":" separated string.
      
      In other words one can use the following to enable xbzrle and
      auto-converge:
      
      -H kvm:migration_caps=xbzrle:auto-converge
      
      IMPORTANT: xbzrle may result to BSOD for instances running
      Windows 2008r8 on drbd.
      
      Update man page of gnt-instance to include the new hvparam.
      Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
      Signed-off-by: default avatarThomas Thrainer <thomasth@google.com>
      Reviewed-by: default avatarThomas Thrainer <thomasth@google.com>
      937ff984
  6. 11 Mar, 2014 1 commit
  7. 06 Mar, 2014 1 commit
  8. 05 Mar, 2014 2 commits
  9. 27 Feb, 2014 2 commits
  10. 19 Feb, 2014 1 commit
  11. 14 Feb, 2014 2 commits
    • Helga Velroyen's avatar
      Use node UUID as client certificate serial number · ab4b1cf2
      Helga Velroyen authored
      
      
      It turns out, that some implementations of OpenSSL are more
      pedantic in checking the certficates than others. In this
      particular case, the SSL connection could not be
      established when the serial number of the certificates
      was not unique.
      
      To avoid this problem, this patch extends Ganeti's X509
      infrastructure to set the certificate's serial
      number. In case of client certificates, we now use the
      node's UUID as serial number, because the UUIDs are
      assumed to be unique in a cluster. This is however still
      not complying to how SSL was designed to be used, but at
      least it is a lot better than setting every serial number
      to 1, which was used before and is still used for other
      certificates than the client certificate.
      Signed-off-by: default avatarHelga Velroyen <helgav@google.com>
      Reviewed-by: default avatarKlaus Aehlig <aehlig@google.com>
      ab4b1cf2
    • Petr Pudlak's avatar
      Add the WConfD daemon to build configuration files · fb0fa957
      Petr Pudlak authored
      
      
      Also list it in the Haskell datatype, constants, Python constants and
      test configuration.
      Signed-off-by: default avatarPetr Pudlak <pudlak@google.com>
      Reviewed-by: default avatarKlaus Aehlig <aehlig@google.com>
      fb0fa957
  12. 13 Feb, 2014 1 commit
    • Jose A. Lopes's avatar
      'LUClusterSetParams' creates the instance communication net · d6a7518a
      Jose A. Lopes authored
      
      
      Extend 'LUClusterSetParams' to create the user-supplied instance
      communication network in case this network does not exist.  Note that
      if the user-supplied network already exists, nothing needs to be done
      as 'CheckPrereq' already checks this network's configuration.
      
      With this patch, Ganeti will be able to create the instance
      communication network automatically.  The following example shows the
      command line options that instruct Ganeti to enable the instance
      communication network and, if this network does not exist, then Ganeti
      creates it.
      
        gnt-cluster modify --instance-communication-network=mynetwork
      
      The instance communication network can be disabled by setting the
      parameter to the empty string, for example:
      
        gnt-cluster modify --instance-communication-network=
      
      This will not destroy the network itself or modify any running
      instances.  This will have to be done manually.
      
      In this patch:
      
      * 'LUClusterSetParams._EnsureInstanceCommunicationNetwork' creates and
        connects to all groups the instance communication network by
        resorting the 'OpNetworkAdd' and 'OpNetworkConnect'.
      
      * 'LUClusterSetParams.ModifyInstanceCommunicationNetwork' compares the
        previous configured 'instance_communication_network' with the
        user-supplied one and determines whether the opcodes is changing the
        configuration, which might require creating the instance
        communication network.
      
      * Extend 'LUClusterSetParams.Exec' to call
        'ModifyInstanceCommunicationNetwork' and handle the user-supplied
        'instance_communication_network'.
      
      * Because 'ClusterSetParams' now may return a list of jobs, the type
        of the opcode must be updated in 'Ganeti.OpCodes'.
      
      * Add network related constants to 'Ganeti.Constants'.
      Signed-off-by: default avatarJose A. Lopes <jabolopes@google.com>
      Reviewed-by: default avatarHelga Velroyen <helgav@google.com>
      d6a7518a
  13. 12 Feb, 2014 1 commit
  14. 07 Feb, 2014 2 commits
  15. 06 Feb, 2014 3 commits
  16. 20 Jan, 2014 1 commit
  17. 16 Jan, 2014 2 commits
  18. 13 Jan, 2014 2 commits
  19. 07 Jan, 2014 1 commit
  20. 20 Dec, 2013 4 commits
  21. 17 Dec, 2013 5 commits
  22. 02 Dec, 2013 1 commit
  23. 28 Nov, 2013 1 commit