Note: This changes the build method, and so the CI will be broken. Once this
patch set is merged, the CI can be updated to store the documentation and RPM
built by the Makefile, and also updated to use the RPM from the new location
Change-Id: Ic1721f161c42fb323a7d3fd730dcff1dd76ba583
Apart from the readme need to be updated, the platform version also
need to be corrected. And as xenserver-nova-suppack-builder is modified,
a earlier branch of the repo needs to be specified.
Change-Id: Id858f5c1a58cc359739cb23e4e954ba86a93c7bb
Fix below potential security risks so can pass bandit test:
* Any input should be quoted for subprocess call
* Temp file should not use fixed name
* Use yaml.safe_load to prevent arbitrary objects
Change-Id: I71b4afb5805c8b1d7ead626f7fa2e15a687811fa
Closes-Bug: 1590761
Even if the route exists on the current host, we are re-writing the
script run by udev, so the static routes must always be added to the
script.
Also, always check fixed strings rather than regular expressions
for the networks (which contain periods!)
Change-Id: I94cfd53506a915309095da0f5f8b9db397f81892
When host is restarted, static-routes won't be able add route rules
because HIMN isn't brought up. Thus we need to use udev to add
those route rules back. As tested there is time gap between udev is
triggered and HIMN is ready, a 5-sec sleep is added just in case.
Change-Id: Ifa3260107265f400bde2a33640d4da2fc9f32ddf
(cherry picked from commit a28e0bbdc3)
sshpass will be removed as it is not necessary and it is not
included in the Ubuntu repo mirror list by default and may block
installation.
Change-Id: I347297aba72fbeb07cc4113e5ea21acd2e59652d
To support Dundee as XenServer 7.0 (or RTM as 6.6), below changes
required to be addressed
* blacklist-bridge is renamed
* Production version increases
* Hotfix XS65ESP1013 is no longer needed
Change-Id: Ib154f8d2ff47400889ca8720b35035434c1f1e08
In MOS 8.0, compute node will drop packets at input stage thus
the packets forwarded from HIMN will not get a chance to be
masqueraded which will happen at postrouting stage. It is the
reason why Dom0 fails to connect to Cinder's iScSi target.
This change will make sure all packets flown from HIMN will be
accepted to prevent similar situations from happening.
Change-Id: Icd427ba1e133a55204af6b5a8ad203b73f5f5ad6
This is to apply a patch to address the following problem:
bug: #1567857
When writing config drive, dd by default uses 512B as the block
size. It costs more than 3mins to write the 64M config drive.
It's longer than expected: Some health checking(fuel's heat
checking) on XenServer may failed due to timeout. So we need
improve the performance via specifying a bigger block size
with dd.
Change-Id: I97e121800567efbce66ce1de8f8cbf9c788d12e5
In MOS 7.0 services and horizon go with https by default, while
then in 8.0 it turns to http. Thus the setting of novnc proxy needs
to be altered.
Change-Id: I1a675dec62941107cbcd9503d16fd13651aab55a
1. Enable Linux bridge in Dom0 so that neutron security group can work
2. Config vif driver as OpenVswitch driver in nova-compute.conf
3. Config integration bridge in nova-compute.conf
4. Config xenapi connection information in neturon rootwrap.conf
5. Config root_helper and bridge_mappings in ml2_conf.ini in compute node
6. Replace novaplugins-kilo.iso, use xenserverplugins-liberty.iso instead.
xenserverplugins-liberty.iso contains both nova and neutron Dom0 RPM,
which also match with stable/liberty.
7. Add scripts build-xenserver-suppack.sh for building Dom0 plugin ISO,
in this ISO, netwrap and xenhost will be replaced with the ones in our
patchset folder.
Changes in netwrap is used for supporting neutron security group
Changes in xenhost is used for supporting OVS interim bridge
Change-Id: I7c1bc1a841877bccb019fa72407df92872831dac
We need to copy https://git.openstack.org/cgit/openstack/nova/tree/
tools/xenserver/rotate_xen_guest_logs.sh to dom0 and then add a
cronjob to run it every minute.
Change-Id: I5aba6bb2bc18cd659c5ede171e7e4b2d7abb65e9
Closes-Bug: #1521483
The guest consoles are not visible through the horizon UI because
novnc proxy is set to compute node by default thus a port forwarding
to dom0 is required. Besides, Mirantis uses an internal host name -
"public.fuel.local" - as the novnc's base url which cannot be
resolved by users therefore need to be replaced with the real public
IP address.
Change-Id: I819d13dca1a8263247fe443606095ba33b142756
Closes-Bug: #1513551
In order to stop installation when some fatal errors like
configuraion files missing, cannot find himn, hotfix not
installed happen.
Change-Id: I41e11a0d0acd200387a42a2de8d8b1947a3fa319
Closes-Bug: #1531552
Migration basically will include kilo-based nova plugin, new release
file, new deployment task file and new metadata file. As fuel plugin
builder 3.0.0 will support post-install script, the customized fuel
plugin builder (https://github.com/citrix-openstack/fuel-plugins)
will be useless for XenServer Fuel Plugin building.
Change-Id: I129b2f429165ef805ac3e8f6bf57383b09876e60
Hotfix XS65ESP1013 is to fix Cinder volume when iSCSI is used. It
is necessary to check whether this hotfix is installed and exit
deployment if not. And docs are also updated to make sure user will
do so in advance.
Besides, if password of XenServer is wrong, an alert with error
message will also be needed.
Change-Id: I2b7d5b1b127e8a0e232537a4baa5f401f9be0854
Closes-Bug: #1508474
Closes-Bug: #1508996
Add a checkbox to the UI that allows the user to state that the
supplemental pack need not be installed
Change-Id: I82081e82cd9666a8b2e4af381b6fb203f2f03ffb
Bob Ball