XCP-ng
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login
    1. Home
    2. nathanael-h
    3. Best
    Offline
    • Profile
    • Following 0
    • Followers 0
    • Topics 0
    • Posts 29
    • Groups 3

    Posts

    Recent Best Controversial
    • RE: DevOps Megathread: what you need and how we can help!

      Hello there, we released a new Pulumi Xen Orchestra provider last month ! It's worth noting that the work on this was started by some contributors from DESY, and that now we (Vates) commit to support and maintain it. This demonstrate the strength of joined work from both community and Vates on free and open source softwares 🤝

      So what is offered is to declare your infrastructure as code, in Javascript or Typescript, Go, or Python (pick the one you prefer 🎲 ) and to deploy, maintain, and update it.

      https://github.com/vatesfr/pulumi-xenorchestra/

      posted in Infrastructure as Code
      nathanael-hN
      nathanael-h
    • RE: XOA deploy error

      @HamiltonWDS Thanks for the report. As it works with wget let use it! I'll switch from curl to wget in doc. In the meantime some colleagues will investigate more.

      posted in Xen Orchestra
      nathanael-hN
      nathanael-h
    • RE: Adding Sysprep Capability to VM Creation Using (Windows) Template

      @coolsport00 Hello, I don't know the VMware feature you're talking about.

      I would use Packer https://github.com/vatesfr/packer-plugin-xenserver and Cloud Base init https://cloudbase-init.readthedocs.io/en/latest/intro.html to build a Windows VM template. The sysprep would be run at the end of the packer for example using the provisioner powershell or in the shutdown_command

      NB: do not forget to deploy guest tools inside the template.

      @dinhngtu might have also suggestions

      posted in Management
      nathanael-hN
      nathanael-h
    • RE: XOA Hub

      Hello, the Hub is offered as is. We'll update the available templates soon. In the meantime you can convert any VM to be a template.
      More here :

      • https://docs.xen-orchestra.com/vm-templates
      posted in Management
      nathanael-hN
      nathanael-h
    • RE: Authentication with OIDC (Keycloak) is working but logout doesn't disconnect Keycloak session

      @dsmteam Yes I totally agree, a user who logs out from XO, might also have the choice to logout from all SSO'ed applications. That would be for the feature request list 😉

      posted in Management
      nathanael-hN
      nathanael-h
    • RE: LDAP Authentication with OpenLDAP backend?

      Hi again, I tried to reproduce the issue, but obviously as I do not have the same LDAP server and content as yours it is not easy. So I setup the plugin as follow:

      User filter: (|(objectclass=posixAccount))
      ID Attribute: uid
      
      Group filter: (objectclass=posixGroup)
      ID Attribute: gidNumber
      Display name attribute: cn
      
      Group attribute: memberUid
      User attribute: uid
      

      With this I can see :

      • All the groups synced from LDAP to XO
      • Users inside the groups (from the groups page)
      • Users belong to un number of groups (from the users page)

      I also tuned the config as follow:

      User filter: (&(objectclass=posixAccount)(uid={{name}})
      ID Attribute: uid
      
      Group filter: (&(objectclass=posixGroup)(cn=group1))
      ID Attribute: gidNumber
      Display name attribute: cn
      
      Group attribute: memberUid
      User attribute: uid
      
      • Only the group1 is synced
      • User and group matching works as expected.

      Then is the two cases, I could create ACL that grant admin priviliges on one or more objects to a group and so its users.

      Can you trigger a group sync and look for error in logs?

      posted in Management
      nathanael-hN
      nathanael-h
    • RE: Managing a host using a proxy

      Hello @McHenry I wanted to share with you that we've just build a new images for XOA and the proxy. You might want to try it and keep us posted.

      posted in Management
      nathanael-hN
      nathanael-h
    • RE: DevOps Megathread: what you need and how we can help!

      @Davidj-0 Let me ping @thomas-dkmt about doc 📚

      posted in Infrastructure as Code
      nathanael-hN
      nathanael-h
    • RE: EOL: XCP-ng Center has come to an end (New Maintainer!)

      Hello @propsoft I made a quick test: I'm running Firefox and changed the settings about download location to "always ask where to download files", then from XO-lite, when I export a VM I am being prompted where to save the exported file. I hope this will help you a little bit 😊

      posted in News
      nathanael-hN
      nathanael-h
    • RE: XO Ansible Dynamic Inventory Plugin - Group Variables Support?

      Hello @guiand888

      You could use compose in your inventory file like this:

      plugin: community.general.xen_orchestra
      api_host: xo.example.com
      user: admin
      password: mypass
      validate_certs: true
      use_ssl: true
      groups:
          gp1: "'gp1' in tags"
          gp2: "'gp2' in tags"
      compose:
        ansible_user: "'admin' if 'gp1' in tags else 'anotheradmin' if 'gp2' in tags"
      

      I made some local tests, this should do what you need. Maybe @shinuza has a better suggestion for writing the Jinja2 expression in the compose key.

      posted in Xen Orchestra
      nathanael-hN
      nathanael-h
    • RE: XOA deploy error

      Hello @kbsp @stefanflegg and @fatek, a new XOA image has just been uploaded. Can you test it and keep us posted?

      posted in Xen Orchestra
      nathanael-hN
      nathanael-h