1. Home
  2. Xen Orchestra

Subcategories

  • VMs, hosts, pools, networks and all other usual management tasks.

    427 Topics
    3k Posts
    P
    @stormi I really appreciate the continued help. I'm not sure it works. On my single-host pool master—the one I want to join into my half-upgraded pool—I run the command: xe host-emergency-disable-tls-verification It returns with no errors. If I do xe host-param-list and look through the parameters for my host, I see: tls-verification-enabled ( RO): false This is the only thing I see documented that can turn off TLS verification. If some other command like pool-uninstall-ca-certificate would have the effect of disabling TLS verification, I can't see that documented anywhere. In fact, even though xe pool-uninstall-ca-certificate appears to be a valid command that my xe binary knows about, I can't find that particular command documented at all. Even after the emergency-disable-tls-verification, if I attempt to join that host to the half-upgraded pool (using xe pool-join...) I get: Error code: POOL_JOINING_HOST_TLS_VERIFICATION_MISMATCH It seems like even though the host has TLS verification off, the fact that its pool has verification enabled is blocking the action.

  • ACLs, Self-service, Cloud-init, Load balancing...

    97 Topics
    818 Posts
    olivierlambertO
    October release fixed it

  • All XO backup features: full and incremental, replication, mirrors...

    438 Topics
    4k Posts
    P
    Hi, Latest XOA, with fully patched XCP 8.3 here. I'm fiddling around again with NBD+CBT in backup jobs (was avoiding CBT for a time, to reliably control my backups and avoid unnecessary KEY points) in the context of THICK SRs to spare some space. I know that CBT is reset when migrating from one SR to another. But here is what I encounter : VM has no CBT enabled on its VDIs, it is on a SHARED SR in a pool of 3 hosts backup option changed for NBD+CBT, was only NBD before CBT is enabled on the next run by the backup job, I get a delta (was expecting a FULL ?) next run, delta, as expected i migrate this VM on another HOST, without changing its SR CBT is immediatly disabled ? why ?? next run of backup it tries a delta, but "fall back to a full" (normal as CBT has been disabled...), and do a KEY point on the remote next run is a delta as expected does this mean if I do a rolling pool update or host maintenance that will move the all VMs around, all CBT will be disabled and I should expect a FALL BACK TO FULL on all my NBD+CBT enabled backup jobs ??! why disabling CBT on a change of HOST and no move of SR ?

  • Everything related to Xen Orchestra's REST API

    74 Topics
    567 Posts
    olivierlambertO
    But giving your feedback on how you solved it might help many people in the future Thanks!

  • Terraform, Packer or any tool to do IaC

    45 Topics
    424 Posts
    olivierlambertO
    The roadmap depends a lot on the feedback we have on it More demand/popular, faster we'll implement stuff
Log in to post
Load new posts
  • P

    Lots of performance alerts after upgrading XO to commit aa490

    28
    0 Votes
    28 Posts
    7k Views
    Bastien NolletB
    @ph7 Some of the errors you encountered are intended. We don't allow values in the "Virtual Machines" field if "Exclude VMs" is disabled and "All running VMs" is enabled, because it would make the plugin configuration confusing. However you're right, there seems to be an issue when the VMs are selected and then removed. The value becomes an empty list instead of being undefined, which causes the validation to fail when we try to turn off the "Exclude VMs" option. I'm going to create a task on our side so that we can plan to resolve this problem. In the meantime you can work around the problem by deleting the monitor and recreating a new one with the same parameters.
  • D

    S3 Backup - maximum number of parts

    1
    0 Votes
    1 Posts
    161 Views
    No one has replied
  • Y

    How to update to the latest version of XOA?

    2
    1
    0 Votes
    2 Posts
    458 Views
    DanpD
    Hi, This is explained in this KB article -- https://help.vates.tech/kb/en-us/30/21 Regards, Dan
  • D

    Guide : XOA OIDC authentication with Fortiauthenticator

    1
    0 Votes
    1 Posts
    283 Views
    No one has replied
  • N

    Rolling pool update failed to migrate VMs back

    14
    0 Votes
    14 Posts
    2k Views
    N
    @BenjiReis HA is automatically disabled by the RPU when it starts, then enabled at the end. - I see the task for that in the task log. We do have about 5 VMs that do not have HA enabled, but they are very small (~4GB each) so should not make any difference regardless of which hosts they were on. Also all VMs successfully evacuate from the host for the updates, its only when VMs are migrated back after all hosts are upgraded that I see a problem. I've raised a support ticket, if anything relevant comes out of it I'll try and report back here for future readers. Thanks for the suggestions, Neal.
  • C

    Acl setting not clear, how to

    4
    0 Votes
    4 Posts
    410 Views
    I
    @Chico008 ACLs are used to assign rights to the guest users. As you said you have an admin who can do anything. In case you want to go with acl then your guest can get no leverage by using ACL create vm You as an admin will create VMs and manage other stuff but you then have ability to give three type of rights to the guest user. admin, operator, viewer In case of VMs when you give the admin right to a user then it means that user can have ability to anything with that VM. Delete, Reboot, etc But from you query you said that you want to give a right to guest user to create/run the vms to achieve this you have to look Self Service feature which is supported in XO from sources and in Premium XOA In self service you have ability to create resource sets which are pools, storage, networks, templates etc, and assign a user or group to it.
  • M

    Backblaze as Remote error Unsupported header 'x-amz-checksum-mode' received for this API call.

    Solved
    16
    0 Votes
    16 Posts
    3k Views
    M
    @florent Sorry for the delay. I was able to make it work with the change you posted. Thank You.
  • JamfoFLJ

    All drop-down options are empty

    Solved
    18
    3
    0 Votes
    18 Posts
    2k Views
    TS79T
    @Andrew said in All drop-down options are empty: XO install video thanks Andrew - 100% agree Tom's video is the exact one that introduced me to the ronivay script, which is what I've used for all XO-from-source installs without problems.
  • H

    OIDC issue with Microsoft Entra ID

    3
    0 Votes
    3 Posts
    470 Views
    J
    I'm expericing the same/similar behaviour with SAML, and submitted a Feature Request that it should be looked at. https://xcp-ng.org/forum/topic/10430/feature-request-if-authenticated-don-t-stop-at-the-xo.company.net-signin-page
  • C

    This topic is deleted!

    17
    1
    0 Votes
    17 Posts
    41 Views
  • A

    Is there any way to cleanup or reset xo config db

    Solved
    4
    0 Votes
    4 Posts
    465 Views
    A
    @Danp Thanks a million dear. much appreciated
  • I

    $getFrom Understanding

    1
    3
    0 Votes
    1 Posts
    135 Views
    No one has replied
  • D

    Keycloak : OIDC auth working but SAML fails with Internal Server Error or Invalid Requester

    5
    0 Votes
    5 Posts
    2k Views
    D
    I'm starting to think that something is wrong. Everywhere I check, I can see that the SAML request from the SP should have a signature of some sort. It doesn't seem that there is anything of the sort in our case. We are using the opensource for preproduction and are waiting for a pro license (paperwork on it's way) so maybe there is something wrong in the implementation ?
  • Y

    LDAP fails with error "Code: -32000 Message: Code: 0x3"

    Solved
    7
    0 Votes
    7 Posts
    722 Views
    Y
    @dinhngtu said in LDAP fails with error "Code: -32000 Message: Code: 0x3": sAMAccountName Thank you. (userPrincipalName={{name}}) filter made the trick. When I use (userPrincipalName={{name}}), it works for me either I set certificate check ON or not. (Actually I was expecting to check AD root cert as this connection is using LDAPS) And also test only works when I do it using UPN but not with username@domain format. Other filter options did not work at all.
  • X

    Transfer Pool Master / only partial success

    Solved xoa master designate
    6
    1 Votes
    6 Posts
    719 Views
    X
    positive Update: today I wanted to continue with this problem, but when I logged Into XOA today, Master status was Green / enabled. Since no one execpt me has credentials to the Testcluster, I am sure that no one else had done something. So the master host seemed to recovered itself from grey to green within the last 8 Hours. There were at least 1-2 hours yesterday between execution of "pool-emergency-transition-to-master" and still beeing grey dot / Halted. xe pool-emergency-reset-master master-address=... then added the remaining hosts to the new master.
  • M

    windows 11 : "windows 11 installation has failed"

    2
    3
    0 Votes
    2 Posts
    262 Views
    No one has replied
  • A

    Issues With Audit Log

    Solved
    8
    0 Votes
    8 Posts
    2k Views
    marcoiM
    bringing up the host and restarting the tools on master seem to stop the excessive logging. EDIT: Bringing down host 3 triggers the alerts again EDIT2: Looks like it may be due to how i shutdown the host. First time I put it into maintenance mode, then did the halt command. That caused the messages to come up. Second time I just did halt and that caused the messages to come up. Third time, i hit disable first then halt. So far seems the messages are no longer coming up. I guess i should RTM more lol.
  • K

    Imported VM Starts but Does Not Initialize the Display

    Solved
    51
    2
    0 Votes
    51 Posts
    11k Views
    K
    @olivierlambert Awesome! Can't wait.
  • M

    Migrating XO to another server.... best process?

    Solved
    4
    0 Votes
    4 Posts
    302 Views
    M
    So, problem solved.....
  • ForzaF

    Migrating an offline VM disk between two local SRs is slow

    22
    1
    0 Votes
    22 Posts
    3k Views
    olivierlambertO
    Maybe the IO scheduler is not the right one?