Subcategories

  • VMs, hosts, pools, networks and all other usual management tasks.

    437 Topics
    3k Posts
    P
    @rtjdamen hey there, did you ever modify in the POOL advanced tab at the bottom the BACKUP network & MIGRATION network ? fiddle with these, note what they are actually set, and change them if possible between each change, check your SR stats @florent could explain better how SR stats use the backup network to get the RRDs... I guess you have stalled RRD tasks too ? in tasks list ?
  • ACLs, Self-service, Cloud-init, Load balancing...

    97 Topics
    821 Posts
    pdoniasP
    @DaleDibbadel Are you running XOA or XO from the sources? Are you up-to-date?
  • All XO backup features: full and incremental, replication, mirrors...

    447 Topics
    4k Posts
    florentF
    @cbaguzman I am not sure checking a vhd without its chain is giving much benefits you may be able to use vhd-cli raw <vhd> <output> it will generate a raw disk of the source, you should be able to write it to /dev/null and it will fail if any block is unreadable
  • Everything related to Xen Orchestra's REST API

    75 Topics
    572 Posts
    L
    @florent, I had to do the same for Xen Orchestra Community Edition. In my case, config.toml already contained the [authentication] section, so adding a separate config.tokenValidity.toml file did not work. Instead, I had to modify the existing config.toml located at /opt/xo/xo-server. In my opinion, it is best to keep defaultTokenValidity set to 30 days as a fallback in case no value is specified. You can then simply increase maxTokenValidity to the duration you prefer. [authentication] defaultTokenValidity = '30 days' # default value of 0.5 years # comment out and increase to 5 years #maxTokenValidity = ' 0.5 year' maxTokenValidity = '5 year'
  • Terraform, Packer or any tool to do IaC

    48 Topics
    437 Posts
    P
    @majorp93 I've updated and added a node.js-installation to the role. Targeting the LTS-24 version. I hope you find it to your liking.
  • 🛰️ XO 6: dedicated thread for all your feedback!

    Pinned
    84
    5 Votes
    84 Posts
    5k Views
    GheppyG
    For me it's a bit confusing XO6. For example, why are the icons so small and in such far corners, like New VM? It's like you want it to be hidden. [image: 1767904503324-174bdca5-6545-4f34-b7d4-804718aebd58-image.png] Isn't it more intuitive if they're at the top/bottom of this menu or in line with title (***-xen01)? [image: 1767905123455-80e7222e-e104-4225-b928-4d8ee3094b15-image.png] Another thing is the number of allocated processors. In my opinion it is misleading. It shows the total number of allocated processors even to VMs that are not started. It is not better to be something like: 8 vCPUs running VMs / 4 vCPUs stopped VMs - total number allocated vCPUs 12/ Total CPUs 8. And something like 8 - green / 4 -red - 12 orange/ 8 grey [image: 1767904986729-594a774d-9ea8-4db3-9b8d-b46c525b70a8-image.png] Running VM [image: 1767905081890-92387c99-40f8-4fbd-83fa-c6d32d48a72d-image.png]
  • Orphan VDIs in XO show health problem

    15
    4
    0 Votes
    15 Posts
    300 Views
    W
    @Pilow Does disk show up after you do the snapshot? If it is able to do the snapshot there is a high chance it can boot up. So try booting up (and check for disk) and shut it down and do the snapshot at that time if the disk show up. It helps to boot up on the old v5 commit and check from that side too if you have both copy before the commit update. Yep I can confirm that snapshot doesn't always work. But using the older v5 that used to work before the update does get it showing up on the newer v5 commit if I go through whole snapshot, revert, etc. one of those case work.
  • 0 Votes
    7 Posts
    1k Views
    olivierlambertO
    We are not energy efficiency experts, while EasyVirt people are. I think they already have some stuff and it might be just a matter of plumbing.
  • ISO won't show since XO6 Default

    5
    2
    0 Votes
    5 Posts
    200 Views
    MathieuRAM
    Hi @Kptainflintt, I don't think this is related to XO6, but probably to this PR: https://github.com/vatesfr/xen-orchestra/pull/9231 VDIs with snapshot_of: <something> are now recognized as snapshots spacotte-vates opened this pull request in vatesfr/xen-orchestra closed fix(xo-server): improve handling of xapi snapshots #9231
  • XO 6 Official Release (for community)

    xo6 community life-cycle feedback
    4
    0 Votes
    4 Posts
    127 Views
    D
    I provided some feedback.
  • Can't designate new master on XO source pool

    8
    0 Votes
    8 Posts
    246 Views
    V
    Tracked it down to it thinking there was a pool version mismatch... then when I tried to transition to a new master it would fail with Xmlrpc_client.Connection_reset ... digging deeper it was complaining that it couldn't restore from the wrong version. Lots of head banging later... I setup a backup for the pool metadata and forced the backup immediately. TADA... I can now change the master with no issues at all.
  • XOA gets disconnected very often

    6
    0 Votes
    6 Posts
    182 Views
    olivierlambertO
    Yes, there's a possible weird combo between XOSTOR and HA in some situations. Let me add @ronan-a or @dthenot in the loop. It's likely that XOA disconnection is just a visible symptom of something else. It's not ultra trivial to reproduce though.
  • Staring up a shutdown VM in XO 6

    4
    0 Votes
    4 Posts
    204 Views
    W
    @olivierlambert Thank you. I thought maybe I was losing my mind/eye sight, especially after reading that google search indicating there was a start button in 6.
  • 2FA doesn't load graphics properly after XO6 went default (XO from source)

    Solved
    5
    1
    0 Votes
    5 Posts
    203 Views
    olivierlambertO
    Excellent news
  • Failed unmounting remotes at XO/XOA shutdown

    4
    1
    0 Votes
    4 Posts
    393 Views
    P
    No idea if anyone have "fixed" anything No, the XO commit 5fcb6 hang for ~3 min at reboot today. edit: I disabled the sceduled reboot yesterday.
  • Xen Orchestra Node 24 compatibility

    7
    0 Votes
    7 Posts
    496 Views
    M
    @olivierlambert said in Xen Orchestra Node 24 compatibility: Can you reproduce the issue on XOA? Or it's only on the sources + your current OS? We do not have a XOA license (yet) which is why I am currently solely using XO from sources. Therefore currently not able to reproduce on XOA. OS is Debian 13.
  • XO5 breaks after defaulting to XO6 (from source)

    53
    1
    0 Votes
    53 Posts
    2k Views
    M
    @MathieuRA I disabled Traefik and reverted to my old XO config (port 443, ssl encryption, http to https redirection), rebuild the docker container using your branch and tested: it is working fine on my end now Thank you very much! I did not expect this to get fixed so fast!
  • Plugins in XO6?

    6
    0 Votes
    6 Posts
    206 Views
    olivierlambertO
    It won't disappear tomorrow, but I'd like to phase it out sooner than later (before 2027? who knows)
  • Xen Orchestra from source ignores config.toml from /etc/xo-server/

    2
    0 Votes
    2 Posts
    151 Views
    A
    Ok I've figured out root cause. My config override has only one option: ignoreVmSnapshotResources = true And I had to change it with adding [selfService] on a line below Also I found out that override config for XO5 interface needs to have absolute paths to xo-web and @XenOrchestra in it. With relative paths it didn't work.
  • LUKS Secured VM via Cloud Config

    1
    0 Votes
    1 Posts
    68 Views
    No one has replied
  • Retention for log files and audit logs

    6
    0 Votes
    6 Posts
    697 Views
    E
    I would like to suggest to configure a remote syslog server. it centralizes all the log s and give you full control over the retention. It would also avoid situation where a disk full would impact your logging as well XCP-ng or XOA host operations. For your XCP-NG host go to you POOl, select Advanced tab and configure the Remote syslog host section to point to your syslog server. For XOA, you can follow the instruction here : https://docs.xen-orchestra.com/backups#send-xo-logs-to-an-external-syslog-server
  • This topic is deleted!

    1
    0 Votes
    1 Posts
    4 Views
    No one has replied
  • HOST_NOT_ENOUGH_FREE_MEMORY

    4
    0 Votes
    4 Posts
    176 Views
    P
    @ideal perhaps you could use advantage of dynamic memory https://docs.xcp-ng.org/vms/#dynamic-memory to oversubscribe memory and have all 4 VMs up at once... or reduce the allocated memory of your VMs, you seem to have a pretty big VM in terms of memory in comparison to the 2 others on your screenshot
  • SAML Auth with Azure AD

    Solved
    37
    1 Votes
    37 Posts
    6k Views
    D
    @olivierlambert Just to add another weird case of this situation I tell you my SAML-auth-adventures. I have just migrated a week ago from XOCE to XOA paid support this week and all the process was fine except the auth with the saml plugin. The commit I had in XOCE was [XO 5d92f - Master 3f604]. I compiled it the first week of this november so it wasn't very outdated. We use the MSEntraID SAML authentication and it was working fine in XOCE since at least one year ago. Mi process was like this: First, I installed XOA and imported the configuration from my old XOCE. Everything was fine and all was imported succesfully (backups, users, acls, etc.), including my plugin configurations. Note that I reused the https server certificate/private key and used the same IP and the same DNS (beacuse I turned off my XOCE before starting XOA). Everything was working fine except the saml auth plugin. I had the same "Internal server error" problem. I looked at the xo-server logs and the error was "invalid document signature" so, as Olivier said, we changed the configuration in MSEntraID to set the "Sign SAML response and assertion" on. Once we changed the configuration I thought the plugin would work again, but surprisingly not. If I try again SAML validation i still got the "Internal server error". When i checked again the xo-server logs I saw ahother exception, this time with the error "SAML assertion audience mismatch" and a reference to the issuer configuration of the plugin. The exact error I got from xo-server logs using "journalctl -u xo-server -f -n 50" was: "xoa xo-server[2370]: Error: SAML assertion audience mismatch. Expected: <id-of-MSEntraID-xo-validation> Received: spn:<id-of-MSEntraID-xo-validation>"I didn't understand this, because the configuration was exactly the same as I had in XOCE. In fact, I turned off XOA and turned on again XOCE just to test the plugin. The result was that in XOCE the plugin worked well. After many tries and some time of impostor syndrome we found the solution: I don't know why, but in XOCE compiled at the beginning of november you have to configure the issuer field of the plugin with the <id-of-MSEntraID-xo-validation> (8digit-4digit-4digit-4digit-12digit). Instead, in XOA deployed also this november, you have to set the issuer field to you XOA URL: https://<xo.company.net>/ I hope this will help, because it was a pain in the neck for us this week. BTW: @olivierlambert this "Internal server error" coming from an uncatched exception in the plugin was not very descriptive. Even a generic try-catch block just to show in the web interface the error would help... P.D.: I'm from Spain, so I do my best with my english P.D. 2: Great job with all the Vates virtualization stack! You are the best! Dani
  • XOCE - ISO upload is renamed after upload to ISO SR

    18
    1 Votes
    18 Posts
    812 Views
    mxM
    We'd recently got a relevant experience regarding this weird renaming to uuids. We had one orchestra managing one pool. ISOs were in an ISO SR, with an nfs4 serving it underneath. All fine till then. We added one second pool to the orchestra. Just a single host by itself. One of the very next days we discovered that all names in the ISO SR had been replaced by uuids. Removing/readding the sr to the new pool helped temporarily. Usual names appeared again. But after a few more days, again uuids. Where uuids were appearing, we could not select anything from the dropdown list in the console's cdrom. The list per pool was unpopulated. We tried separate the shares by offering the new pool an nfs4 share from the NAS, actually sharing the same source dir. It did mount but now there was a uuid uniq constraint that was violated, so we could not see no files at all in this new SR. It would not be an illogical thought to have an 'iso sr' attached once to the orchestra and be offered by the orchestra to all managed pools, without uuids, without uniqs etc. There seems to be an unnecessary complication here I think.