I'm also getting the "self-signed certificate" error sinds the last update.
I get it while trying to import/upload ISO.

From source, commit e52b1
8.3 beta

I added a big warning in step 3 which should never be done outside a test host that you are ready to reinstall afterwards.

@codycrypto's comment is another workaround which replaces it without any impact on the host, but weakens the security by accepting weaker key types.

@TodorPetkov thanks, and apologies for the (very basic) off-topic questions. Also first time using server-core.

@jasonnix said in A question for the creators of XO:

Hi @john-c,
Thank you for your great tips.
As I said, I've heard that Java and JavaScript are insecure, but they also have some advantages that you and others have pointed out. For example, they have a large community of users and developers. Sorry, but I think that sometimes we don't choose the right path. For example, I'm sure that a professional PHP or Ruby developer can convince you that JavaScript is not the right choice for some projects. If PHP or Ruby were not good programming languages, then they would not have so many fans and everyone would use JavaScript. One of the reasons why JavaScript is so popular is that this language can be run by browsers. Something like a standard for the web. In my opinion, JavaScript like Windows operating system. It has capabilities and features, but the most important reasons for its popularity are its large number of users and ease of use.
My other question is, why is there no program under the operating system to manage XCP-ng?

If you are talking about directly on XCP-ng operating system there are. In this case there's two options:-

Though XO Lite is new and still being developed its designed to be hosted (embedded) on the currently beta XCP-ng version 8.3. It's aim is to provide a features consistent with a single host or single pool environment. It's aimed at home lab users mostly so they can perform basic tasks, without having to install any extra software on client computers. Though technically it's viewed and invoked remotely but the commands are done directly on the pool master XCP-ng host. The remote viewing and invoking is done on a client device through the web browser or if installed as PWA the browser engine.

The other option is xe its command line based so everything you wish to do needs to be typed out in the right syntax. Even tasks as basic as creating a new VM require multiple commands, several of which are from xe to perform a part.

To manage XCP-ng remotely you have the option of:-

A bit off topic are you any good with PowerShell?

If so how about reading up on the relevant documentation about XAPI and/or XO's API so that a PowerShell commandlet can be developed?

@Danp yes, I'm getting this error on the settings > remotes page.

As you can imagine, I'm confused why NFS works on the main SR page, but not the settings > remotes page

EDIT: never mind, discovered that I have to put the full share path, not just the share name.

Example:

@jqueiroz said in SSL Inspection Certificates:

Don't you love to find the answer by yourself just after asking in the community forum? 😖

Create directory '/usr/local/share/ca-certificates' Copy the needed certificates this place Run /usr/sbin/update-ca-certificates [seems not be on the path].

@john-c said in SSL Inspection Certificates:

Also for future reference if you ever re-do a server note that XCP-ng's certificates can be done through the XO application.

Thanks. But, just for clarification, it wasn't the XO/XOA server certificate, was the certificates that sign all the HTTPS pages we visit.

I uncovered a much more effective and supported method that that one you done.

Follow the steps in the documentation for the XCP-ng hosts, utilising a certificate chain to include you custom CA certificate.

Not forgetting setting up a custom extra CA for xen orchestra via an additional configuration file documented in the documentation for XO VM.

Also by the way the method you did in the post above will be lost on upgrade, as well as likely not included in the backup feature process of XO application. However the links below will get included in the backup feature and the backup of XO configuration. Plus your method will potentially interfere with software update package which comes from the official repository, that updates the certificate authority certificates and their trusts.

https://xen-orchestra.com/docs/configuration.html#custom-certificate-authority

https://xen-orchestra.com/docs/configuration.html#https-and-certificates

https://docs.xenserver.com/en-us/citrix-hypervisor/hosts-pools.html#install-a-tls-certificate-on-your-server

https://docs.xcp-ng.org/guides/TLS-certificates-xcpng/

@john-c
well, me too. But since it gets neither at the moment. And being realistic in that they can't be excpected to keep up with every distro in existance. I'll take what I reasonably can get 🙂

Update: Let me clarify. If there could be Distro specific logos, then that would be awesome. However, if we could get a generic Tux for Linux in general. Then that would cover a large part of the variants out there.

@olivierlambert is there a way to mount the same disk in two VMs in RW mode? I have a lab that uses pacemaker inside the VM's and pacemaker handles the mounting/access of the volumes.

I have a working setup on oVirt using the "Shareable" option of a Virtual Disk. So I can attach to multiple VM's simultaneously. Is there anything similar on XCP-ng? Even if I have to hack through the command like to attach?

Thank you.

@fffeee the underlying storage repository is disconnected from the Host.

It would likely be better to open a new topic to discuss in detail, as there are a variety of reasons as to why this could happen that are going to be case specific to your issue.

@Danp This is exactly that 🙂

@Tristis-Oris thank you

@splastunov said in XOA is allways halted after the machine is rebooted:

xe vm-param-set uuid=<vm_UUID> other-config:auto_poweron=true

Thank you very much for detailed reply. It worked.

All the best

@Xelosu FWIW, the log entries related to xo-server-test are benign and should be ignored.

@djingo
My syslog stopped working (I think after one o the updates) and this bug still exists. If you trying removing it form the Pool or individual hosts in the Pool via XO it will not let you have it as blank. If you ssh in and use xsconsole you can remove the syslog server and but it will not let you specify a port. But once it has been removed from xsconsole you can go back into XO and add in the syslogserver along with a non-default port such as

and it will work.

@pdonias said in Xen Orchestra & XO Lite PWA Manifest:

Thank you @john-c! We need to make a few changes first, we'll take care of your PR right after that 🙂

As a result of taking such a long time to get around to reviewing and merging my PR. The base for my contribution got really out of sync so I had to discard the changes and rebase. This meant the PR got closed a new one was needed. The Old PR with branch was really out of sync and with several lots of conflicts.

https://github.com/vatesfr/xen-orchestra/pull/7445

So please do this new one during today or tomorrow so that the rebasing isn't needed again!

i found this lines of code (ex. mint) in the other topic (https://xcp-ng.org/forum/topic/4583/adding-os-logos/14?_=1709647941739)
on the right side my version as ex.

NAME="Linux Mint"
VERSION="20.1 (Ulyssa)"
ID=linuxmint
ID_LIKE=ubuntu
PRETTY_NAME="Linux Mint 20.1"
VERSION_ID="20.1"

NAME="Scientific Linux"
VERSION="7.2 (Nitrogen)"
ID=scientificlinux
ID_LIKE=redhat
PRETTY_NAME="Scientific Linux 7.2"
VERSION_ID="7.2"

do i forgot to add some more lines like those (up) for e.x. ?

@stormi

Thanks for your answer.

I'll give a try later, bypassing the PFBlocker module of the router.

Github is not currently on any blacklist, but I block Digital Ocean and some others who host many attackers.