mirror of
				https://github.com/apache/cloudstack.git
				synced 2025-11-04 00:02:37 +01:00 
			
		
		
		
	* DB : Add support for MySQL 8
- Splits commands to create user and grant access on database, the old
statement is no longer supported by MySQL 8.x
- `NO_AUTO_CREATE_USER` is no longer supported by MySQL 8.x so remove
that from db.properties conn parameters
For mysql-server 8.x setup the following changes were added/tested to
make it work with CloudStack in /etc/mysql/mysql.conf.d/mysqld.cnf and
then restart the mysql-server process:
    server_id = 1
    sql-mode="STRICT_TRANS_TABLES,NO_ENGINE_SUBSTITUTION,ERROR_FOR_DIVISION_BY_ZERO,NO_ZERO_DATE,NO_ZERO_IN_DATE,NO_ENGINE_SUBSTITUTION"
    innodb_rollback_on_timeout=1
    innodb_lock_wait_timeout=600
    max_connections=1000
    log-bin=mysql-bin
    binlog-format = 'ROW'
    default-authentication-plugin=mysql_native_password
Notice the last line above, this is to reset the old password based
authentication used by MySQL 5.x.
Developers can set empty password as follows:
    > sudo mysql -u root
    ALTER USER 'root'@'localhost' IDENTIFIED BY '';
In libvirt repository, there are two related commits
2019-08-23 13:13 Daniel P. Berrangé            ● rpm: don't enable socket activation in upgrade if --listen present
2019-08-22 14:52 Daniel P. Berrangé            ● remote: forbid the --listen arg when systemd socket activation
In libvirt.spec.in
        /bin/systemctl mask libvirtd.socket >/dev/null 2>&1 || :
        /bin/systemctl mask libvirtd-ro.socket >/dev/null 2>&1 || :
        /bin/systemctl mask libvirtd-admin.socket >/dev/null 2>&1 || :
        /bin/systemctl mask libvirtd-tls.socket >/dev/null 2>&1 || :
        /bin/systemctl mask libvirtd-tcp.socket >/dev/null 2>&1 || :
Co-authored-by: Wei Zhou <w.zhou@global.leaseweb.com>
Co-authored-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
Co-authored-by: Rohit Yadav <rohit.yadav@shapeblue.com>
		
	
			
		
			
				
	
	
		
			64 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
			
		
		
	
	
			64 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
#!/usr/bin/python3
 | 
						|
# Licensed to the Apache Software Foundation (ASF) under one
 | 
						|
# or more contributor license agreements.  See the NOTICE file
 | 
						|
# distributed with this work for additional information
 | 
						|
# regarding copyright ownership.  The ASF licenses this file
 | 
						|
# to you under the Apache License, Version 2.0 (the
 | 
						|
# "License"); you may not use this file except in compliance
 | 
						|
# with the License.  You may obtain a copy of the License at
 | 
						|
#
 | 
						|
#   http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
#
 | 
						|
# Unless required by applicable law or agreed to in writing,
 | 
						|
# software distributed under the License is distributed on an
 | 
						|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 | 
						|
# KIND, either express or implied.  See the License for the
 | 
						|
# specific language governing permissions and limitations
 | 
						|
# under the License.
 | 
						|
from cloudutils.networkConfig import networkConfig
 | 
						|
from cloudutils.utilities import bash
 | 
						|
import logging
 | 
						|
import re
 | 
						|
def isOldStyleBridge(brName):
 | 
						|
    if brName.find("cloudVirBr") == 0:
 | 
						|
       return True
 | 
						|
    else:
 | 
						|
       return False
 | 
						|
def upgradeBridgeName(brName, enslavedDev):
 | 
						|
    print("upgrade bridge: %s, %s"%(brName, enslavedDev))
 | 
						|
    vlanId = brName.replace("cloudVirBr", "")
 | 
						|
    print("find vlan Id: %s"%vlanId)
 | 
						|
    phyDev = enslavedDev.split(".")[0]
 | 
						|
    print("find physical device %s"%phyDev)
 | 
						|
    newBrName = "br" + phyDev + "-" + vlanId
 | 
						|
    print("new bridge name %s"%newBrName)
 | 
						|
    bash("ip link set %s down"%brName)
 | 
						|
    bash("ip link set %s name %s"%(brName, newBrName))
 | 
						|
    bash("ip link set %s up" %newBrName)
 | 
						|
    cmd = "iptables-save | grep FORWARD | grep -w " +  brName
 | 
						|
    rules = bash(cmd).stdout.split('\n')
 | 
						|
    rules.pop()
 | 
						|
    for rule in rules:
 | 
						|
        try:
 | 
						|
            delrule = re.sub("-A", "-D", rule)
 | 
						|
            newrule = re.sub(" " + brName + " ", " " + newBrName + " ", rule)
 | 
						|
            bash("iptables " + delrule)
 | 
						|
            bash("iptables " + newrule)
 | 
						|
        except:
 | 
						|
            logging.exception("Ignoring failure to update rules for rule " + rule + " on bridge " + brName)
 | 
						|
if __name__ == '__main__':
 | 
						|
   netlib = networkConfig()
 | 
						|
   bridges = netlib.listNetworks()
 | 
						|
   bridges = list(filter(isOldStyleBridge, bridges))
 | 
						|
   for br in bridges:
 | 
						|
       enslavedDev = netlib.getEnslavedDev(br, 1)
 | 
						|
       if enslavedDev is not None:
 | 
						|
           upgradeBridgeName(br, enslavedDev)
 | 
						|
 | 
						|
   bridges = netlib.listNetworks()
 | 
						|
   bridges = list(filter(isOldStyleBridge, bridges))
 | 
						|
   if len(bridges) > 0:
 | 
						|
       print("Warning: upgrade is not finished, still some bridges have the old style name:" + str(bridges))
 | 
						|
   else:
 | 
						|
       print("Upgrade succeed")
 |