Where communities thrive

Join over 1.5M+ people
Join over 100K+ communities
Free without limits
Create your own community

Explore more communities

erigones/DanubeCloud

https://www.danube.cloud | https://github.com/erigones/esdc-ce/wiki/Release-Notes

People

Repo info

Activity

Jan 23 19:02

YanChii on bhyve

fix esdc-convert-disk-to-vm for… (compare)
Jan 23 18:29

YanChii on bhyve

fix reporting incorrect backup … (compare)
Jan 14 23:17

ricco386 on upgrade-python3

Updated requirements (compare)
Jan 14 22:50

ricco386 on upgrade-python3

Removed missing unicode (compare)
Jan 14 21:35

ricco386 on upgrade-python3

Removed django-transaction-hook… (compare)
Jan 14 19:23

ricco386 on upgrade-python3

Updated Django 2.1 required ren… (compare)
Jan 14 18:24

jurajlutter opened #535
Jan 10 00:25

YanChii on bhyve

refactor compatible brands check (compare)
Jan 10 00:15

YanChii on bhyve

make kvm and bhyve brands compa… (compare)
Jan 09 22:33

YanChii on bhyve

fix node selection (compare)
Jan 09 21:23

YanChii on bhyve

implement bhyve disk model (compare)
Jan 09 19:21

YanChii on bhyve

add vnc_port attr on deploy (compare)
Jan 09 17:50

YanChii on bhyve

more checks (compare)
Jan 09 15:02

YanChii on bhyve

do a proper input settings vali… (compare)
Jan 09 13:49

YanChii on bhyve

various GUI fixes (compare)
Jan 09 01:37

YanChii on bhyve

fix node bhyve capability check (compare)
Jan 09 01:14

YanChii on bhyve

fix node bhyve capability check (compare)
Jan 09 01:01

YanChii on bhyve

add bootrom to gui; show only r… (compare)
Jan 08 23:22

YanChii on bhyve

add bootrom option; add hvm_typ… (compare)
Jan 07 22:33

dependabot[bot] labeled #534

Jan Poctavek

@YanChii

@toybomb as you've mentioned in erigones/esdc-ce#503, first step is to see what OS image you need. Then we can create a matchbox image.

Paolo Marcheschi

@paolomarcheschi_twitter

Reading the forum I noticed a new mirror of pkcsrc.joyent.com https://pkgsrc.smartos.skylime.net/ that could be useful

Jan Poctavek

@YanChii

maybe it's not so new... in the examples there's pkgsrc 2015Q1 :)
but good to know there's a mirror

Jan Poctavek

@YanChii

with @infinity202 we've just confirmed that DC runs smoothly in OVH. Possible boot modes: from disk, from PXE (local or custom ipxe script defined using OVH API), from install ISO (with embedded ipxe). Failover IP addresses are very well usable for VMs using vRack, no need to generate virtual MAC addresses by OVH API. OPNSense that is deployed during DC install successfully fakes MAC address of the external interface to get behind OVH's IP/MAC restrictions... which makes a good use of the default server IP address.

infinity202

@infinity202

It was a very pleasant journey with @YanChii ! I learned a lot and the new DanubeCloud version is very good, the OPNSense integration makes it a world-class virtualisation solution.

Paolo Marcheschi

@paolomarcheschi_twitter

Good, great job @infinity202 and @YanChii

Paolo Marcheschi

@paolomarcheschi_twitter

https://smartos.topicbox.com/groups/smartos-discuss/T77492f4c70321d96/heads-up-python-solaris-support-at-risk

Jan Poctavek

@YanChii

thank you for heads up, this is big

Paolo Marcheschi

@paolomarcheschi_twitter

Hi I'm trying to convert a debian image , but esdc convert complains about the size of the disk :

esdc-convert-disk-to-vm ./Debian_10_64bit.vmdk debian

SOURCE DISK INFO
image: ./Debian_10_64bit.vmdk
file format: vmdk
virtual size: 500G (536870912000 bytes)
disk size: 5.0G
cluster_size: 65536
Format specific information:
cid: 3406122198
parent cid: 4294967295
create type: monolithicSparse
extents:
[0]:
virtual size: 536870912000
filename: ./Debian_10_64bit.vmdk
cluster size: 65536
format:
SOURCE DISK INFO END

do I need a 500GB disk?

Jan Poctavek

@YanChii

the quick and safe answer is yes

Jan Poctavek

@YanChii

However, if you select some disk compression (either ZLE or the default LZ4), the real data usage will be no more than the really used space. Just refreservation will block the free space from usage by other VMs. Thin provisioning is officially supported only for bhyve VMs in SmartOS but it can be achieved also with KVMs. Create the 500GB+ volume and manually remove the refreservation property from appropriate zones/<uuid>-disk0 zfs volume by using zfs command.

then you are in risk of running completely out of zpool space that will ruin a lot of things so watch the zabbix warnings

Jan Poctavek

@YanChii

@paolomarcheschi_twitter I've just merged erigones/esdc-ce#515
Now you are official DC contributor :)

probably too late for hacktoberfest t-shirt but anyway :)

Paolo Marcheschi

@paolomarcheschi_twitter

WOW Thank you very much !!

...And Happy Halloween...

Paolo Marcheschi

@paolomarcheschi_twitter

I found that it is possible to use PROXMOX images from http://download.proxmox.com/images/system/ to build LX images with the same method I showed previously

Paolo Marcheschi

@paolomarcheschi_twitter

[root@node03 (pacs) ~]# zlogin bb7ed7a1-87bb-41b4-bb98-ea35396c4abb
[Connected to zone 'bb7ed7a1-87bb-41b4-bb98-ea35396c4abb' pts/4]
Welcome to Alpine!

The Alpine Wiki contains a large amount of how-to guides and general
information about administrating Alpine systems.
See http://wiki.alpinelinux.org/.

You can setup the system with the command: setup-alpine

You may change this message by editing /etc/motd.

LXC_NAME:~#

Jan Poctavek

@YanChii

cool

Jan Poctavek

@YanChii

or you can use esdc-convert-disk-to-vm to make them into KVMs

Paolo Marcheschi

@paolomarcheschi_twitter

But the Proxmox images are root filesystem tar files, used for lxc vms

maybe next version of the tool will create also lx images

Paolo Marcheschi

@paolomarcheschi_twitter

Hi, I see that Omnios released a new build with two more compression for zfs Brotli and Zstd do you know if they will be available also for smartos? https://github.com/omniosorg/omnios-build/blob/r151036/doc/ReleaseNotes.md

matrixbot

@matrixbot

otis omnios uses openzfs, no?

Paolo Marcheschi

@paolomarcheschi_twitter

yes , but seems to me that zfs support is not aligned to smartos

Paolo Marcheschi

@paolomarcheschi_twitter

it is not available in DC: compression YES YES on | off | lzjb | gzip | gzip-[1-9] | zle | lz4

Jan Poctavek

@YanChii

are you sure that omnios uses openzfs? I'm not aware that any illumos distro uses openzfs base.

Paolo Marcheschi

@paolomarcheschi_twitter

No I'm not sure, I tried to do some research but no evidence of that

infinity202

@infinity202

https://www.zdnet.com/google-amp/article/hacker-group-uses-solaris-zero-day-to-breach-corporate-networks/

Jan Poctavek

@YanChii

wow

but I don't expect not much solarises to be ssh-accessible from the internet

Jan Poctavek

@YanChii

smartos-es case might be different however... as it is not that easy to setup permanent firewall there (actually it is but AFAIK /var/fw is not documented)

matrixbot

@matrixbot

toybomb does the exploit work with ssh key only auth?

Jan Poctavek

@YanChii

no... the issue is with PAM

matrixbot

@matrixbot

toybomb i see

Jan Poctavek

@YanChii

as long as the sshd don't look into PAM, you're safe (but we can't be completely sure when it checks the PAM)

if you have any DC nodes accessible from the internet and you want do be sure, use esdc-overlay globally-enable-firewall comma,separated,subnet,list on any node to enable firewall on external interface

it does it for all nodes at once

and affects only node itself, VM communication is not touched

infinity202

@infinity202

SmartOS root zone doesn't have pam_unix.so as far as i can see now

ohhh, that was a stupid assumption ;-)

Jan Poctavek

@YanChii

regarding the brotli: I can't find any "brotli" string in the omnios sources... if you could specify which omnios version introduced it, maybe I could trace the source. But so far it seems that it's just not there :).

even internet is quite silent on this matter

Paolo Marcheschi

@paolomarcheschi_twitter

@YanChii https://github.com/omniosorg/omnios-build/blob/r151036/doc/ReleaseNotes.md

there is a package

https://pkg.omniosce.org/r151036/core/en/search.shtml?token=brotli&action=Search

https://pkg.omniosce.org/r151036/core/en/search.shtml?token=zstd&action=Search

Jan Poctavek

@YanChii

I see... it's a package