XCP-ng 8.3 betas and RCs feedback 🚀

stormi

I just pushed several updates to the xcp-ng-base repository for XCP-ng 8.3.

Most notable changes

Addition of a new SR driver, largeblock, which emulates 512B blocks for disks which only support 4KiB blocks. More at: https://xcp-ng.org/forum/topic/8901/largeblocksr-for-4kib-blocksize-disks
XO Lite updated to version 0.2.2, which changes the treeview component.
new API for PCI passthrough, that Xen Orchestra already knows how to use to let you configure a device for passthrough.
changes in the way configuration files are handled on OpenSSH. Previously, any update to sshd_config or ssh_config would overwrite any change you made to the files. This is what XenServer 8 does, but we wanted to do it differently, which is now the case. So, now, the update won't touch the files if you had modified them. To update default cipher lists, keys, algorithms, we now do so directly at build time, in the binaries. You can check this with sshd -T. If you do have local changes to these files, the update won't be able to remove the cipher lists and other definitions from the files. Instead, name_of_file.rpmnew files will be created in the /etc/ssh directory. Which means next time we update the default lists, your configuration file will still override them with the old settings. Make sure to remove the lines starting with Ciphers, MACs, KexAlgorithms and HostKeyAlgorithms if they are present.
changes in the way UEFI certificates are propagated to UEFI VMs at their first boot. In a few words: if you enabled Secure Boot for a VM but haven't setup your pool for Secure Boot first by running secureboot-certs install, then these VMs are currently in UEFI setup mode, which discards any Secure Boot setting. With the change made, Secure Boot will fail instead in this situation, thus avoiding a false sense of security. Future UI improvements in Xen Orchestra will help detecting the issue and fixing the UEFI certificates so that Secure Boot works in these VMs. You can also do it manually with: varstore-sb-state $VM_UUID user (yes, user, verbatim. It stands for user mode). This will install the necessary certificates to the VM provided you first have setup your pool for SecureBoot with secureboot-certs install.

ph7

@stormi
I can not see anything under Network throughput in XO-lite

edit:
When I hover I can see the numbers but no graph

ph7

@ph7
With another xcp-ng server that is not yet updated i can see the Network throughput graph from url/xolite.html which is on v0.2.2 (3a44b)

stormi

@gduperrey can you check?

Theoi-Meteoroi

@stormi Nice work on the PCI passthru. Very helpful. I like the treeview as well. Thanks!

gduperrey

@stormi and @ph7 I just tested with two xo-lites in 0.2.1 and 0.2.2 on just installed servers, and in both cases, the Network throughput graph seems to have lines and values.

ph7

@gduperrey
Both servers was last updated ~ 3 weeks ago

I updated the other server the same way i updated the first one and its showing the graph
The first one still no graph after another reboot.
Netdata and XO is showing the graph by the way.

Is there some log I can check

I have earlier ( a few month ago) had problems with no graphs shown at all but a change from dark to light mode and back to dark made them visible. But I dont remember what version it was and I have changed server after that.

gduperrey

@ph7 I've asked the xo-lite team if they can give us guidance on this or if they have any idea about the current state of this host.

ph7

@gduperrey
Its not importent to me, its just a simple homelab
I was just reporting if there was a bug.
The problematic "server":
Lenovo thinkcentre M715q
AMD Ryzen 5 2400GE
r8169 0000:01:00.0 eth0: RTL8168ep/8111ep

edit: thinkcentre

marcungeschikts

@ph7 : This issue seems to appear randomly. We are going to investigate further. Thank you for your feedback.

Houbsi

Greetings,

i have 8.3 running on my MS-01, it's working fine.

I upgraded my network setup with a pfsense VM and some VLAN's (still work in progress).
But, when i open my pfsense VM i'm getting this regular message:

xenstore: could not write path attr/eth1.2/ip

the 1.2 is my VLAN2 on this interface. Is this a known issue/bug? If you need some logs, then ping me

bufanda

@Houbsi Did you setup the pfsense VM according to the guide?
https://docs.xcp-ng.org/guides/pfsense/

fatek

This post is deleted!

fatek

This post is deleted!

Anonabhar

OMG! I have just noticed that on the latest beta of 8.3 the Garge Collector gives a percentage of completion in XO(a) "Tasks" and estimation of time to completion!

THANK YOU!! THANK YOU!! THANK YOU!!!

stormi

To be fair, this feature was developed by XAPI developers at XenServer, as far as I remember

That's a benefit of open source.

olivierlambert

But the display inside XO and the time left computation is done by XO

Anonabhar

Actually, another cool feature I just noticed is that I am now able to take snapshots of my Windows 11 VM's with vTPM attached.. So.. The day is just getting better and better..

I havent tried doing a backup / export yet.. I think that if it worked, I would be overwhelmed with to0 much good news for a single day and faint LOL

olivierlambert

IIRC, that should work now

stormi

Indeed.