1. Home
  2. Xen Orchestra

Subcategories

  • VMs, hosts, pools, networks and all other usual management tasks.

    459 Topics
    4k Posts
    Tristis OrisT
    While I was updating all the pools, a micro-update for 5 packages was released again. They come out every week now. Same issue with basic migration. Now it impossible.

  • ACLs, Self-service, Cloud-init, Load balancing...

    102 Topics
    851 Posts
    dlgroepD
    Replicating the issue with another OIDC OP (simplesamlphp module-oidc), it appears to hinge on an expectation of a 'thick' JWT token being returned from the OP, whereas some OPs (simplesamlphp, but also SRAM which IIRC uses SATOSA) strictly interpret OpenID Connect Core section 5.4 so that in the Authorization Code flow the returned JWT token is 'thin' and the RP must collect the claims (based on the requested scopes) from the userinfo endpoint, rather than expecting them to be in the returned IDToken. And since the auth-oidc plugin uses the response_type=code ... (see https://github.com/vatesfr/xen-orchestra/pull/9648#issuecomment-4161156812 for more details). Modifying an OP to always add claims to the IDToken, i.e. disregarding section 5.4 of the OIDC core spec, makes the issue above go away ... olivierlambert opened this pull request in vatesfr/xen-orchestra draft fix(xo-server-auth-oidc): handle missing profile fields in username resolution #9648

  • All XO backup features: full and incremental, replication, mirrors...

    483 Topics
    5k Posts
    florentF
    @joeymorin said: I observed similar behaviour. Two pools. Pool A composed of two hosts. Pool B is single-host. B runs a VM with XO from source. Two VMs on host A1 (on local SR), one VM on host B1 A2 (on local SR). Host A2 has a second local SR (separate physical disc) used as the target for a CR job. CR job would back up all four VMs to the second local SR on host A2. The behaviour observed was that, although the VM on B would be backed up (as expected) as a single VM with multiple snapshots (up to the 'replication retention'), the three other VMs on the same pool as the target SR would see a new full VM created for each run of the CR job. That rather quickly filled up the target SR. I noticed the situation was corrected by a commit on or about the same date reported by @ph7. Incidentally, whatever broke this, and subsequently corrected it, appears to have corrected another issue I reported here. I never got a satisfactory answer regarding that question. Questions were raised about the stability of my test environment, even though I could easily reproduce it with a completely fresh install. Thanks for the work! edit: Correction B1 A2 sometimes it's hard to find a n complete explanation without connecting to the hosts and xo, and going through a lot of logs , which is out of the scope of community support I am glad the continuous improvement of the code base fixed the issue . We will release today a new patch, because migrating from 6.2.2 to 6.3 for a full replication ( source user that updated to the intermediate version are not affected )

  • Everything related to Xen Orchestra's REST API

    84 Topics
    629 Posts
    K
    @olivierlambert & @mathieura thanks for the speedy response. Duly noted, very much appreciated.

  • Terraform, Packer or any tool to do IaC

    49 Topics
    463 Posts
    dalemD
    Version 1.4.0 is released: https://codeberg.org/NiXOA/system/releases/tag/v1.4.0 It includes significant changes and improvements, including: dedicated getting started section, migration to valkey, only needing to clone system, and helper scripts. the xen-orchestra-ce nixpkg now references the libvhdi nixpkg, and the core flake now references and pulls from the xen-orchestra-ce repo as an overlay. System (the user input flake) now uses the Core repo as an overlay, reducing the need to clone both locally AND allowing system to pull new updates and releases from core. XO, and libvhdi as needed. The next goal is: Make an xsconsole-like TUI Automate package updates for libvhdi and xen-orchestra-ce using CI/CD pipelines Submit libvhdi and xen-orchestra-ce as official nixpkgs
Log in to post
Load new posts
  • M

    New install some people can't login

    1
    0 Votes
    1 Posts
    511 Views
    No one has replied
  • M

    New install can't add remote NFS

    Solved
    3
    0 Votes
    3 Posts
    896 Views
    M
    That was it you're awesome. You can mark it as solved.
  • M

    XOCE Yarn Start Error code 1

    Solved
    13
    0 Votes
    13 Posts
    2k Views
    M
    Again thanks everyone. you can mark this as solved. The step I was missing was the config step. $ cd packages/xo-server $ mkdir -p ~/.config/xo-server $ cp sample.config.toml ~/.config/xo-server/config.toml
  • L

    XO Installation on an offline system

    17
    0 Votes
    17 Posts
    5k Views
    L
    @olivierlambert Thanks
  • D

    Scheduled snapshots only visible to self-service user when they're an admin *

    5
    0 Votes
    5 Posts
    784 Views
    pdoniasP
    @duxepu Ok, this is weird, I'm not able to reproduce that and I don't see how it's possible. Could you check a few things? from an admin point of view, at the bottom of the VM's advanced tab, please check that the user has Admin ACLs on the VM from the user's point of view, when you're on the snapshots tab, open the browser console (press F12 > Console tab) and check if there are any errors do you have this issue with all the users of all your Self Service groups or is it more specific? Thanks!
  • X

    Bizarre Error during backup process (from the sources, 20.04)

    12
    0 Votes
    12 Posts
    2k Views
    DanpD
    Yesterday I updated to the latest sources and my backup ran successfully, so it appears that this issue is resolved. @carlosfrederico You'll need to switch back to the master branch before your normal update routine will work.
  • S

    Debian cloud template for XenServer Default Password

    6
    0 Votes
    6 Posts
    5k Views
    olivierlambertO
    There's no root password. Use sudo -s
  • grapesmcG

    Server can no longer connect after crash

    Solved pool server
    5
    0 Votes
    5 Posts
    1k Views
    grapesmcG
    @olivierlambert FYI turned out to be a networking issue that had nothing to do with the server itself. I'm still getting to the bottom of what exactly the cause was, and will update here once I do just in case someone else runs into this. Thanks again. And thanks for the awesome software. ! -Rob
  • pwasonP

    Uncertain state of VM tools

    7
    0 Votes
    7 Posts
    1k Views
    olivierlambertO
    No, there's no need to upgrade VM tools when you upgrade the host. You can keep old tools, it will work fine.
  • D

    VDI is not available Error

    4
    0 Votes
    4 Posts
    3k Views
    F
    @dan2462 Did you get a resolution to your VDI issue? I have a similar problem as it seems hosts are locking up the VDI's on my shared iscsi storage and if they are shutdown and I try to boot them on an alternate host, I get the VDI not available error.
  • M

    HOST_NOT_ENOUGH_FREE_MEMORY

    9
    0 Votes
    9 Posts
    3k Views
    M
    @olivierlambert Thanks for the quick feedback!
  • X

    What ordering does XO trigger backups in?

    3
    0 Votes
    3 Posts
    651 Views
    badrAZB
    Hi @xo-g , We don't use any specific order to pick the VMs to backup.
  • iverlaekI

    How to implement the perfect backup strategy with Xen Orchestra?

    1
    0 Votes
    1 Posts
    2k Views
    No one has replied
  • M

    Single backup job two locations

    2
    0 Votes
    2 Posts
    443 Views
    olivierlambertO
    You can have one job with 2 remotes. Or a job with backup and DR at the same time.
  • M

    SAML, automatic user generation

    5
    0 Votes
    5 Posts
    2k Views
    pdoniasP
    @mrbaz Thanks for the detailed feedback! If XO had a way of pulling the user's group information and only allowing those in a certain group to have authorization to XO to have their accounts automatically generated, that would work too. That wouldn't be trivial to implement with our current plugin system. But as you said, a user that logs into XO isn't able to do anything without granting them permissions first. Also, if this is still a concern for you, you can disable user auto-generation in xo-server configuration by adding this line: createUserOnFirstSignin = false However, you'd then have to create the users manually before they can log in. the issue still stands that I can't put a user into a group or assign ACLs until after they have signed in for the first time. I agree but I'm not sure what a good solution to this would be. If we add an option to import all the users at once, it could mean importing a lot of users for some companies, even if many of those users would never actually log in later.
  • D

    Cannot import a large VHD using Import Disk option

    Solved
    8
    0 Votes
    8 Posts
    2k Views
    D
    @nraynaud @olivierlambert Thanks guys!
  • F

    S3 Remote

    12
    0 Votes
    12 Posts
    3k Views
    F
    @lawrencesystems said in S3 Remote: I was hoping to avoid this method as my pfsense is not connected at 10G. Thank you for the clarification. Happy I could help.
  • ForzaF

    un-zstd .xva files exported with XOA?

    Solved
    3
    0 Votes
    3 Posts
    412 Views
    ForzaF
    @olivierlambert said in un-zstd .xva files exported with XOA?: Hi! Again, before starting to talk about technical solution, can you explain the use case? If you have zstd installed on your machine, yes. It's a tar with compression (gzip or zstd). But then it won't be trivial to assemble VM data (but you can exctract metadata easily!) I didn't really mean disassemble the .xva, but rather create an uncompressed .xva that has broader support/portability. The zstd command line tool seems to be able to uncompress it just fine. Thanks.
  • R

    Reset Xen Orchestra Community Edition Web Password

    2
    0 Votes
    2 Posts
    10k Views
    olivierlambertO
    Hey there! It's a good thing to start by reading our doc. If you enter "Password" in the search field, you would have find: https://xen-orchestra.com/docs/troubleshooting.html#recover-web-login-password As you are using Xen Orchestra into production, may I suggest to go for XOA with pro support at some point?
  • E

    Automating VM creation via Terraform

    7
    0 Votes
    7 Posts
    3k Views
    E
    @newknowledge Thanks, I'll try it out later.