Updates announcements and testing

tuxen

I'm here. Alive n' kickin'

stormi

So did anyone install the update candidate for sm, check that they see no obvious regression and ideally test NFS 4.1 support?

rizaemet 0

@stormi
I have an netapp storage. it support nfs 4.1. how can I add a nfs sr with nfs 4.1? I want test it.

borzel

@stormi I did not test it (yet) .. currently copying loads of vm data around at work... but if all goes well I have a free storage next week that will become our new nfs4.1 server for work ... stay tuned

borzel

@rizaemet-0 here is a XCP-ng Center with NFS 4.1 support: https://github.com/xcp-ng/xenadmin/releases/tag/v7.6.3.21

Just add your NFS SR via the normal assistant, the NFS 4.1 option is right there.

rizaemet 0

I create a nfs sr with nfs 4.1 with xcp-ng center v7.6.3.21. success.
live storage migrate a vm to this sr. success.
live vm migrate to another host. success.
backup vm with xo. success.
I tested copy-paste file in itself and nfs4, nfs4.1, fc between each other. nfs 4.1 speed is like nfs4 speed for my environment.
heavy i/o for 24 hours. no any performance or another issue.

olivierlambert

Do you have better perfs than 4.0 by the way?

rizaemet 0

@olivierlambert Similar performance for my environment. I did not any specific test. Just copy-paste files.
By the way, is multipath connection (or pnfs) possible xcp-ng between storage with nfs4.1?

olivierlambert

It should be possible if you SR is supporting pNFS (because IIRC, it's included in 4.1 protocol).

However, pNFS doesn't remove the usual SPOF (metadata NFS server)

r1

pNFS may not be available in XCP-NG's kernel. I see option CONFIG_NFSD_PNFS unset where as most of the distros have CONFIG_NFSD_PNFS=y

JeffBerntsen

@r1 I think that config option is to enable pNFS server support, not the client. I'm pretty sure this being disabled just means that XCP-ng can't be used as a pNFS server (though a VM running on it certainly could).

borzel

@JeffBerntsen @r1 https://cateee.net/lkddb/web-lkddb/NFSD_PNFS.html
"This option enables support for the parallel NFS features of the minor version 1 of the NFSv4 protocol (RFC5661) in the kernel's NFS server."

stormi

Update released for XCP-ng 7.6 : openvswitch-2.5.3-2.2.3.3.xcpng

It fixes a problem in log rotation introduced by our previous update: rotated logs for /var/log/ovsdb-server.log would get rotated themselves, which could lead to the creation of thousands of rotated log files. My mistake.

See https://github.com/xcp-ng/xcp/issues/100 and https://xcp-ng.org/forum/topic/1031/too-many-weird-ovsdb-server-log-file

If you had not installed the previous openvswitch update, then there's no hurry to install this specific update. It would just add log rotation of its logs to avoid having them grow too much.

You don't need to reboot your hosts after installing this update, even if Xen Orchestra says so (we haven't given XO knowledge about what update requires an update yet). Unless you are installing kernel or xen updates at the same time, of course.

The update will not clean the extraneous files, so you'll still need to delete them manually (/var/log/ovsdb-server.log.*).

bplessis created this issue in xcp-ng/xcp

closed OpenVSwitch Logs aren't rotated #100

nuts23

@stormi
upon update, I got a
Transaction check error:
installing package openvswitch-2.5.3-2.2.3.3.xcpng.x86_64 needs 1 inodes on the /var/log filesystem

Which translated that the ovsdb-server logs were too many and had filled up my log storage.
I had to run:
find . -name "ovsdb*" -delete
because rm couldn't handle so many ovsdb log files to delete.

stormi

@nuts23 Thanks for the feedback. Indeed, when the /var/log partition is out of inode, you may need to delete the files before installing the update.

RelNetDavidMerrill

Check out:

https://xcp-ng.org/forum/topic/1044/var-log-has-run-out-of-inodes

stormi

New update candidates are available to fix the recently disclosed Xen security issues (see http://xenbits.xen.org/xsa/ and https://support.citrix.com/article/CTX246572).

Please test as soon as possible. Objective of the test: make sure that there is no obvious regression. Just tell us that you installed the update candidate, the version of XCP-ng, and whether it works as well as before or not after a reboot.

XCP-ng 7.6

xen-4.7.6-6.4.1.xcpng

Installation of the update candidate:

yum install --enablerepo='xcp-ng-updates_testing' xen-dom0-libs xen-hypervisor xen-tools xen-dom0-tools xen-libs

Reboot required after the installation.

XCP-ng 7.5

xen-4.7.5-5.8.1.xcp

Installation of the update candidate:

yum install --enablerepo='xcp-ng-updates_testing' xen-dom0-libs xen-hypervisor xen-tools xen-dom0-tools xen-libs

Reboot required after the installation.

stormi

Anyone? This update candidate should be as safe as could be and internal tests are OK, but I don't want to push it before I get feedback from a few testers.

AllooTikeeChaat

Updated one host without issue and currently testing.

nuts23

security fix installed. Does it require a reboot of the system?