29 Commits

Author SHA1 Message Date
Joris van Lieshout
c90bf1231f sysctl improvements. 1. ip_nonlocal_bind for smooth transition in case of a keepalived failover. 2. panic settings so that a vm dies in a way that ACS understands it's down. 3. also up the nf_conntrack limits.
Signed-off-by: Daan Hoogland <daan@onecht.net>
(cherry picked from commit 45deade1df171d9ae5562111bf011ee913ff9dc0)

Conflicts:
	systemvm/patches/debian/config/etc/sysctl.conf

(cherry picked from commit c4d1bf7f2426bfddd96ab9415fe793647e67a5a4)
2014-08-14 14:11:33 +02:00
Sheng Yang
2ff7b846fd CLOUDSTACK-7185: Change Apache2 log rotation policy to avoid memory leak 2014-07-25 14:02:44 -07:00
Hugo Trippaers
1ad1883b74 Add virtualbox support to cloud-early-config so we can use virtualbox for testing 2014-07-14 15:34:14 +02:00
Jayapal
e0d4af5062 CLOUDSTACK-7092: Disabled icmp redirects in VR 2014-07-10 15:17:50 +05:30
Jayapal
2f1b40d2e8 CLOUDSTACK-7028: Fixed adding route for additional public nic on fail over 2014-07-01 15:16:27 +05:30
Jayapal
d5e686f2ec CLOUDSTACK-6997: Increase proc ip_conntrack_max 2014-07-01 10:29:46 +05:30
Sheng Yang
c181485ae5 CLOUDSTACK-6908: Enable IPv6 in sysctl when only necessary
This new way would only enable IPv6 when VR is created in IPv6 shared network.
Otherwise IPv6 sysctl options remain disable.
2014-06-13 11:08:32 -07:00
Joris van Lieshout
66816827cb Cosmetic fixed. three in total. 1. Only run hv_kvp_daemon if it exists. 2. add the -f argument to the rm to make is silent if it doesn't exist. 3. by using log_action_msg instead of log_action_begin_msg the screen output looks way better.
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-12 14:56:11 +02:00
Daan Hoogland
b85dd956f8 rats 2014-06-10 16:21:06 +02:00
Joris van Lieshout
c54ce3cafb If for some reason dnsmasq.log does not exist anymore logrotate will create it with nobody as owner. This will prevent dnsmasq deamon from logging to that file.
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-10 15:51:03 +02:00
Joris van Lieshout
11f532bbec blacklist pcspkr as cosmetic improvement. aesni_intel blacklisting was not working because the include only works if the file ends with .conf.
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-06-10 15:45:15 +02:00
Saurav Lahiri
96b1c6bf3c CLOUDSTACK-6328: run.sh check if an existing java process is running, before spawining new ones
Signed-off-by: Jayapal <jayapal@apache.org>
2014-05-27 15:56:25 +05:30
Saurav Lahiri
42d48fe9ab cloudstack-6258: Log file will be set to cloud.out only if CLOUD_DEBUG is enabled 2014-04-25 05:50:57 +05:30
Sheng Yang
74fe010db3 CLOUDSTACK-6434: Make RvR advert_int configurable
In some network environment, 1*3 seconds by default make RvR setup too
sensitive. A configurable parameter would be better for fitting different
network environments.
2014-04-16 20:13:16 -07:00
Sheng Yang
a554ebdf75 CLOUDSTACK-6432: Blocking DHCP server to service DNS outside network
This would cover only DHCP only network since in basic and shared network, the
private IP used by VR and network may expose to outside.
2014-04-16 19:13:23 -07:00
Marcus Sorensen
2a0236931a Ensure that min_free_kbytes in secstorage vm is set such that heavy nfs load will not cause page allocation failures 2014-04-14 00:00:47 -06:00
Marcus Sorensen
6b7f91d770 add conntrackd logrotate for systemvms, dont start conntrackd on logrotate if it isnt running 2014-04-05 00:30:28 -06:00
Sheng Yang
8937434fce CLOUDSTACK-5986: Fix dnsmasq lease for VPC 2014-03-11 16:14:33 -07:00
Rajesh Battala
540d020aa5 CLOUDSTACK-6179 Execute VR commands on Virtual Resource when commands received to Hyper-V 2014-03-11 13:10:13 +05:30
Joris van Lieshout
986813d973 Prevent DHCPACK for DHCPINFORM in the DHCP server
The orignal "dhcp-range=xxx,static" would only prohibit DHCPREQUEST from unknown
hosts, but not DHCPINFORM which can request routing information. This caused
trouble for some bridged networks outside CloudStack.

This patch would fix the issue, prevent dnsmasq from acking any unknown request.

Signed-off-by: Sheng Yang <sheng.yang@citrix.com>
2014-02-25 14:55:24 -08:00
Sheng Yang
66989a9364 CLOUDSTACK-6018: Increase dnsmasq dhcp-lease-max to 2100
Would able to accomodate one /21 network then.
2014-02-03 14:52:42 -08:00
Sheng Yang
121d88743a CLOUDSTACK-5986: Make dnsmasq handle dnsmasq.leases when dhcp_release is available
The original issue has been exposed due to CloudStack VR would modify the
dnsmasq.leases, thus make it unsync with dnsmasq's memory lease.

Make the modification to let dnsmasq handle the lease file if dhcp_release is
available.
2014-01-29 18:02:11 -08:00
Rajesh Battala
7ac48934f7 CLOUDSTACK-5821 systemvmiso is locked by systevmvm in hyperv 2014-01-28 07:03:08 +05:30
Rajesh Battala
238eda30ae CLOUDSTACK-5592 ssh should run on eth1 interface in ssvm/cpvm running in HyperV 2013-12-27 14:57:52 +05:30
Sheng Yang
e54d1dec9d CLOUDSTACK-5533: Disable VR's DNS functionality if user choose to use external dns
Also fix the regression that external dns won't be used if "dns" service in the
network offering is unset.
2013-12-17 16:06:58 -08:00
Hugo Trippaers
479f404aea Fix several rat issues introduced by recent commits 2013-11-04 20:14:46 +01:00
Rajesh Battala
989c6e6914 Modified cloud-early-config to configure, when the VR boots up in HyperV Environment
Implemented commands that are required for VR to bootup and Vm deployment to work
Modified hyperv agent code, to deploy VR with Boot Args, boot args passed to VR using KVP Exchange Component.
Fix for VR to boot up and get configured with boot args, Fixed issue in VolumeOrchestrator
Implemented SetFirewallRulesCommand in HyperV Resource
Implemented VR network commands to provide the necessary services from VR
Fixed hyperv localstorage path encode url issue. encode is converting space to '+'
2013-11-04 18:48:53 +05:30
Sheng Yang
85dc65c7f7 CLOUDSTACK-4786: Reset Redundant Router priority after all the routers are stopped
This patch would reset the priority in such condition:
1. All redundant routers are stopped, e.g. due to network GC
2. User start one VM in the network
3. The routers would be brought up with reseted priority(100 & 99).

This would resolve the issue of network GC result in lower limit of redundant router priority reached.
2013-10-17 20:00:48 -07:00
Hugo Trippaers
6c26104282 Move the system vm to a separate maven project.
All (almost) files belonging to the systemvm aer now centralize in the systemvm directory. The code for the separate functions is still in the services directory. This will make the code easier to understand and makes it clear that the systemvm is a separate item. It alos means that it can be excluded from the build entirely by not adding the systemvm profile, this will speed up the compiles somewhat.
2013-09-20 18:31:02 +08:00