XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login
    • Profile
    • Following 0
    • Followers 2
    • Topics 1
    • Posts 197
    • Groups 2
    poddingueP Offline
    1. Home
    2. poddingue

    poddingue

    @poddingue

    Vates 🪐
    61
    Reputation
    60
    Profile views
    197
    Posts
    2
    Followers
    0
    Following
    Joined
    Last Online

    poddingue Unfollow Follow
    Vates 🪐 Admin
    • RE: 🛰️ XO 6: dedicated thread for all your feedback!

      @MajorP93: Thanks for expressing yourself regarding that, and I'll be transparent about the thinking behind it.

      Filing those on GitHub isn't me asking anyone to stop using the forum, quite the opposite in fact. 😉
      The forum is where real conversations happen, and that's valuable in a way a GitHub issue never quite is. But forum threads scroll, get buried, and developers can't easily maintain a stable backlog out of them. GitHub gives the team a place where things don't disappear or get buried.

      Think of it as belt and suspenders (which I need now that I'm getting old 🤣 ). The discussion lives here, the tracking lives there. My goal as community manager is to be the relay between the two, so you don't have to worry about it.
      File things here, talk about them here, and I'll make sure what matters makes it into the right repo.
      Or at least, that's the plan. Mine. 🤔

      posted in Xen Orchestra
      poddingueP
      poddingue
    • RE: Error mirroring full backups to backblaze b2

      Thanks for the detailed write-up, Pedro.
      I'm not a backup expert, far from it. but you might be right that https://github.com/vatesfr/xen-orchestra/pull/9396 only fixed the size estimation for direct full backups, not the mirror path. 🤔
      Your error is the same as the maximum size allowed one, just twelve bytes over 209715200000. Before this turns into a GitHub issue, it would help to know whether it reproduces on a fresh mirror job and whether bumping minPartSize actually cleared it, so we can be sure it's the mirror code and not the B2 remote settings.
      The object storage docs list Backblaze B2 as supported (https://docs.xen-orchestra.com/xo5/object-storage-support#supported-storage-providers) but don't say much about part-size tuning.
      If it's awkward to test in isolation, a mention to @Team-XO-Backend is probably the quickest route, since they own the backup job code.
      The XVA checksum warnings in your second screenshot look like a separate non-blocking clean VM directory step rather than the cause.
      I hope that points somewhere useful! 🤞

      posted in Backup
      poddingueP
      poddingue
    • Running Kubernetes on XCP-ng? Help us test the CSI driver v0.4.0

      The Kubernetes CSI driver for Xen Orchestra just hit v0.4.0, and we want it on more real clusters before it reaches a stable release candidate. If you run Kubernetes on XCP-ng VMs, this is a good time to give it a proper workout.

      What's new in v0.4.0:

      • Local-storage support
      • Automatic pool-discovery fallback
      • Kubernetes metadata now lives in Xen Orchestra VDI tags instead of the deprecated other_config. That change also drops the old requirement for Xen Orchestra 6.4 or newer, so the driver runs on more deployments now.

      ⚠️ Read this before you upgrade. v0.4.0 is a breaking change. The Kubernetes metadata moved from other_config to VDI tags, so you must migrate before upgrading from v0.3.0. Do not upgrade in place: follow the v0.3.0 to v0.4.0 migration guide in the release notes, then move to v0.4.0.

      What helps us most is hearing how it behaves on your own setup: what works, what breaks, which storage backend you use, and which flavour of Kubernetes you run (k3s, full k8s, or something else). Edge cases on real clusters are the ones we don't see in our own testing.

      Where to report: start right here in this thread. It keeps everything visible to the community and lets others on the same setup jump in. If something turns out to be a reproducible bug, we'll move it to a GitHub issue on the repo so the team can track it to a fix.

      Release notes and migration guide: https://github.com/vatesfr/xenorchestra-csi-driver/releases/tag/v0.4.0

      posted in Infrastructure as Code
      poddingueP
      poddingue
    • RE: VM Display Resolution

      It was too tempting not to test, so I went and tested the other half.
      On an 8.3 host I set the preferred resolution to 800x600 in the OVMF menu on a UEFI Debian VM, turned that VM into a template, and cloned it.
      The clone came up at 800x600.
      A control clone of the same original, with nothing set, came up at 1024x768.
      So your workaround holds, the resolution really does ride along into VMs built from the template.

      For anyone who wants to poke at it, the setting is a UEFI variable called PlatformConfig under GUID 7235c51c-0c80-4cab-87ac-3b084a6304b1. It only appears in NVRAM once you commit it in the menu, and it stores width and height as plain little-endian integers, which is why it travels with the VM record.

      One thing I didn't expect: the OVMF help text says the mode list is filtered against video RAM size, but the VM I used had the default 4 MB and still offered everything up to 1280x1024.
      So you may not need to raise videoram for the common ones.

      ⚠ Fair warning though, I measured the console at the firmware stage rather than after the distro's own driver takes over, so a guest that sets its own mode later could still override it.
      At least, that's my understanding. 🤷

      posted in XCP-ng
      poddingueP
      poddingue
    • RE: Autostart behaviour after upgrade 8.2 -> 8.3

      Thanks for coming back with the actual cause instead of leaving it hanging. 👍
      To me, a permissions reset on /etc/rc.d/rc.local would explain it completely, and it fails in the worst way, since nothing complains at boot and the VMs just never start.
      It also looks worth documenting, because our own troubleshooting page tells people to append a clocksource workaround to /etc/rc.local without mentioning the executable bit either, so anyone following that could end up with a workaround that quietly does nothing.
      I haven't tested whether the 8.2 to 8.3 upgrade resets that bit every time or just happened to in your case, so that half stays your finding, not mine.

      I'm curious what you turn up on the colon versus equals behaviour.

      posted in XCP-ng
      poddingueP
      poddingue
    • RE: Autostart behaviour after upgrade 8.2 -> 8.3

      Hey, thanks for writing this up with the actual commands and the screenshot, that really helps. 👍

      Not sure why rc.local + vApps stopped working after your 8.2 to 8.3 jump. rc.local is more your own dom0-level script than something XCP-ng promises to keep stable across releases, so something underneath may well have shifted, but I can't point to what.

      On the delay question, there does seem to be a per-VM "start-delay" parameter. I ran into it replying to a pretty similar issue a couple days ago, if you want to compare notes: https://xcp-ng.org/forum/topic/12388. There are also the "appliance" CLI commands, the vApp equivalent, though from another recent thread it looked like nobody's fully sure how start order and delay actually interact there: https://xcp-ng.org/forum/topic/12149. So I think the capability is there, just not pulled together in one place.

      The colon-vs-equals thing is interesting. I honestly don't know xe's map-param parsing well enough to say if that's expected or a rough edge. Maybe someone closer to the CLI internals can say whether it should just reject that instead of creating duplicate entries. Given how scattered this all is, might be worth flagging to @Team-Documentation-Knowledge-Management.

      Hope some of that's useful, others probably know xe's internals better than me though.

      posted in XCP-ng
      poddingueP
      poddingue
    • RE: The Lowest Priority Bug Ever? (/etc/udev/rules.d/z10-xen-vcpu-hotplug.rules)

      Two PRs out of the lowest priority bug ever, that made my morning. 😀

      posted in XCP-ng
      poddingueP
      poddingue
    • RE: Revert to snapshot, resets creation date. Intended behaviour?

      From what I understand, when XCP-ng reverts to a snapshot it restores the full VM state from that point (metadata included, not just the disk contents) so the creation date field would get rolled back along with everything else; that might be why it now matches the snapshot timestamp rather than
      the original. I might be wrong about the internals though. 🤔

      It's a bit confusing if you were relying on that field to track VM history, and I don't think https://docs.xen-orchestra.com/xo5/manage_infrastructure#snapshot-management covers this explicitly. 🤷
      Might be worth a mention to @Team-Documentation-Knowledge-Management; it's the kind of thing that catches people off guard because nothing warns you upfront that metadata rolls back too.
      My $0.02.

      posted in XCP-ng
      poddingueP
      poddingue
    • RE: Backup fails with "Body Timeout Error", "all targets have failed, step: writer.run()"

      Thanks for the feedback so far, folks! 👍

      posted in Backup
      poddingueP
      poddingue
    • RE: CR - Cannot start copy because suspended

      On the documentation, I went looking and I do not think it exists. 🤷
      The modes get named but never explained. The closest thing is the backup modifier tags section, which tells you how to override the mode for one VM with a tag and assumes you already know what the modes are: https://docs.xen-orchestra.com/xo5/backups#backup-modifier-tags. That is a gap on our side rather than something you missed, and it is written down now.

      One thing before you make those changes. Switching to normal snapshots and powering off the replicas will probably make this morning's failure impossible to reproduce, and nobody has looked at it yet. If you can spare one more run in the current configuration, the VM_BAD_POWER_STATE on a delta job that worked for months is the interesting part.

      If you would rather just get your backups working, do that instead. You have already spent enough of your week on this.

      Also, correcting myself again: I tagged Team-XO-Backend earlier and that was the wrong team. A XAPI error should go to the storage side, because XO only calls into XAPI rather than implementing it. @Team-Storage, if anyone has a moment for the error in the screenshot at post #3. 🤕

      posted in Backup
      poddingueP
      poddingue
    • RE: DRBD reactor metrics in k8s

      From LINBIT's description, drbd_peerdevice_outofsync_bytes is what one node's bitmap says is still out of sync with one particular peer, while the UpToDate in linstor r l is the state of each node's own disk, so as far as I understand the two aren't measuring the same thing (the resource states are described at https://docs.xcp-ng.org/xostor#drbdlinstor-resource-state).

      Your table has the 119 GiB on .10 and .14, the two Unused copies, so I'd be curious which peer those series point at; the labels on the metric should say. If I'm reading drbd-utils right, drbdsetup status xcp-volume-6a8544e8-f17f-49c8-b725-54c5e3213ae1 --verbose --statistics on xen01 also prints an out-of-sync figure per peer, but I haven't got an XOSTOR cluster to try it on, so treat that as a (not so educated) guess.

      Whether a non-zero number between two secondaries means anything is beyond me; @Team-Storage will know.

      posted in XOSTOR
      poddingueP
      poddingue
    • RE: HA causes reboot of xcp-ng nodes

      From what I read in the docs (HA isn't my strong suit), a host in an HA pool that loses its heartbeat in certain ways is designed to reboot itself, which they call self-fencing, so this may well be HA doing its job rather than something crashing. 🤔

      The log you attached is from the master and starts at 11:21:00, and dacshyp001 is already marked as not live in the very first liveset at 11:21:08, so I think whatever triggered it happened just before that and isn't in this file. 🤷

      The three Setting host dacshyp001 to dead lines look to me like one event being re-checked every 20 seconds while 001 was still coming back, though I could be misreading that.

      I also suspect 003 went down at a different moment, because it still shows as alive in that same liveset. There's a doc section for this case, https://docs.xcp-ng.org/troubleshooting/troubleshooting-ha#my-host-rebooted-why-did-it-reboot, which points at /var/log/xha.log on the host that rebooted.

      Could you post that file from dacshyp001 and dacshyp003 for the few minutes before each reboot, plus 003's boot time?

      posted in Management
      poddingueP
      poddingue
    • RE: XOA 6.8 Pool Metadata backup

      6.8.2 went out, and it carries florent's proxy patch, so the thing that was stopping you switching channels has cleared.

      Before you do, though, the 6.8.2 changelog lists exactly one bug fix, the fetch failed proxy one, with xo-server at 5.208.3 and the proxy at 0.31.10, and there's nothing in it about metadata backups or BodyTimeoutError.

      Your own post above points the same way, since you're seeing the stall on sources at the latest commit, and that commit already has the proxy fix in it. So I'd treat the metadata timeout as a separate bug that 6.8.2 won't touch, and I couldn't find an open issue covering it, though I might well have searched the wrong words.

      Might be worth a mention to @Team-XO-Backend, mostly so the metadata half doesn't quietly get filed as fixed by 6.8.2.

      posted in Backup
      poddingueP
      poddingue
    • RE: Can't init vhd directory without using alias

      You already spotted this over on 12468, so this is just to close the loop here.

      That one's fixed: Pierre Brunet put the fix on a branch, @Andrew and @abudef both tested it, and it's merged now. Since you're running from source on master, you should be able to pull past that merge rather than wait for a release.

      One thing to keep in mind, though: the same error string showed up in 11875 for a completely different cause, so if it comes back after you update, it's probably not this bug again. I'd let 12468 be the thread to follow since that's where the people who fixed it are.

      posted in Backup
      poddingueP
      poddingue
    • RE: packer plugin signing key

      You're not blind, and your fingerprint is right. I pulled packer-plugin-xenserver_v0.11.4_SHA256SUMS.sig off the GitHub release and ran gpg --list-packets on it, and it reports issuer fpr v4 0DD2E92A7A0F682BC29F87073084D82948625D89, which is exactly what you pasted.

      It doesn't match the XCP-ng key because it isn't ours. 🤷

      The plugin our docs point at is ddelnano/packer-plugin-xenserver, maintained outside Vates, so it's signed with the maintainer's key while 34AC2EB6... only signs XCP-ng RPMs.

      I couldn't find that key published anywhere either. It's not on keys.openpgp.org or keyserver.ubuntu.com, it isn't in the repo, and it isn't among the 11 keys at github.com/ddelnano.gpg.

      That looks like something worth raising on the plugin's own issue tracker, and you'd file it better than I would since you're the one trying to verify a download. I'd also say our IaC docs could stand to mention the plugin isn't ours, which is what sent you looking at the wrong key in the first place.

      posted in Infrastructure as Code
      poddingueP
      poddingue
    • RE: How to fixture out what is using backup storage?

      @abudef asked almost exactly this a few days ago over on 12466, and @pierrebrunet answered it there with a link to the doc describing the layout, so that thread's probably your quickest route.

      For the specific "which VM is this folder" question, the UUID in the directory name is the VM's own UUID, so xe vm-list uuid=<that-uuid> params=name-label on a host should give you the name back.

      One thing that bite me when I tried it: if the VM has since been deleted, that command prints nothing at all and still exits cleanly, so silence means "no such VM here" rather than "the command didn't work".
      Those silent ones are probably where your space has gone, if I had to guess. I'm not the backup expert here so someone may well have a tidier way of doing it.

      posted in Backup
      poddingueP
      poddingue
    • RE: Vates

      Thanks for doing that, @john.c.

      The sponsorship side isn't mine to speak to; I forwarded to the right person

      The CFP I can say something about: nor(DEV):con is already in the conference pipeline I keep an eye on, and their Sessionize call closes on 30 September, so your timing is better than you probably realised. I can't promise you'll see us in Norwich, but the nudge landed in front of the right people.

      posted in Vates
      poddingueP
      poddingue
    • RE: Troubleshooting "TCP: out of memory" - Possible memory leak?

      Forwarded to the right team, thanks!

      posted in Xen Orchestra
      poddingueP
      poddingue
    • RE: Backup fails with "Body Timeout Error", "all targets have failed, step: writer.run()"

      Thanks a lot for your feeback, folks! 👍

      posted in Backup
      poddingueP
      poddingue
    • RE: XO NFS option sec=krb5p encrypted transport

      I gave this a go on my lab XOA, and XO isn't touching your option at all: the failure quotes the command it ran, mount -o sec=krb5p -t nfs <server>:/path /run/xo-server/mounts/<remote-id>, and a control remote with no custom options mounted the same export fine. 🤷

      It does fail with mount.nfs: an incorrect mount option was specified, but that line tells you less than it looks like: I fed it sec=totalnonsense and got the identical message back, which is why it reads like XO refusing a valid option when it's really just relaying what mount.nfs said.

      The appliance ships rpc.gssd as part of nfs-common, so that part's there. What isn't there is /etc/krb5.keytab or /etc/krb5.conf, and the systemd unit carries ConditionPathExists=/etc/krb5.keytab, so the daemon never starts. Mine last failed that condition at boot eleven days ago and said nothing about it.

      I went one step further: dropping a keytab in place is enough for rpc.gssd to start and stay up, so that condition really is the only thing stopping it, and it doesn't need krb5.conf for that. Whether the mount then works needs a KDC and principals that agree with each other, and I couldn't get that far, so that part is still untested. 🤔

      posted in Xen Orchestra
      poddingueP
      poddingue