540 Commits

Author SHA1 Message Date
Dietmar Maurer
4e2e2d515f do not use Net::SSL
seems IO::Socket::SSL can now connect to proxy
2016-02-26 11:29:00 +01:00
Wolfgang Link
0b29c1e89b Fix problems with turnkey repository.
To prevent that one time Net:SSL and an outer time IO::Socket::SSL is loaded,
ensure that always use the same socket class.

We load the the Net:SSL in AccessControl.pm if we call pveupdate,
but if we call pveam update this module is not loaded an so the default is used (IO::Socket::SSL).
2016-02-18 06:34:41 +01:00
Emmanuel Kasper
8b03c01720 Fix warning in Browser console due to missing meta entry
We're not going to support mobile devices via the standard gui,
but ExtJS 6 themes need this
2016-02-17 11:58:16 +01:00
Thomas Lamprecht
8375727c79 ext6/triton: add some visual changes and fixes
They are mostly intended to save space as the "new theme", if it
gets applied, takes up space like it's worth pure gold.

Paddings get made smaller on buttons, tabs and grids.
Also let the main tree receive a sane space padding.

Further fix the height of the top info panel (the one with the logo,
PVE version, login button ...).

Also the "start/stop/more/..." buttons from the tool bar above the
navigation tab bar gets fixed.

Login panel got also some small fixes together with all input
fields.

We use simple CSS overrides to achieve this all.
Working with the scss (sass) files and rebuilding the theme would
be nicer, but as I have no intend to start working with senchas
"build system" and we self have no sane way for compiling the sass
stuff also, this is the preferred way for now.

We add a new css stylesheet so that the current manager remains
untouched by this changes.
2016-02-12 10:46:51 +01:00
Thomas Lamprecht
ad3c4730cb add permissions to allow non root ceph configuration
Do not only allow root@pam to admin ceph server as some user do not
want to allow root logins and users with the Sys.Modify permission
should be able to modify ceph related stuff.

We use basically the following permissions:
 Sys.Modify:
    for any delete, add, modify action (POST, PUT, DELETE)
 Sys.Audit and Datastore.Audit:
    for any status/information view action (GET)
 Sys.Log:
    for viewing the Ceph log (was already implemented)

We have two exceptions creating and destroying osds. Those may only
be done by 'root@pam' for security reasons.

Also show users with any of those capabilities the ceph tab in the
web GUI.

Addresses bug#818
2016-02-12 08:22:16 +01:00
Wolfgang Bumiller
2ef37c7b05 Close #822: show the nodename in the page title 2016-02-11 12:05:08 +01:00
Thomas Lamprecht
b18a710eaf use max_workers from datacenter.cfg for stopall/migrateall
If set limit the maximal worker count to the new datacenter.cfg
setting 'max_workers'.

For stopall we prefer this over the cpu count if it's set.

For migrateall we prefer the parameter but allow now to ommit
the parameter and then we use the new setting if set.
if both are not set we throw an error.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2016-02-11 11:13:55 +01:00
Thomas Lamprecht
903108b61d fix PVE::HA use clause so HA resources get registered
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2016-01-27 17:11:21 +01:00
Fabian Grünbichler
d6f3df4562 Add DHPARAMS option in /etc/default/pveproxy
If set, Diffie-Hellman parameters in PEM format are loaded
from the given path. Otherwise, the built-in 'skip2048'
group is used.

Also fix some typos in the man page.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2016-01-26 16:44:17 +01:00
Fabian Grünbichler
8e0e6561c5 Enable TLS 1.1 and 1.2, change default DH params
AnyEvent uses a built-in DH group defined as 'schmorp1539'
by default, which seems to trigger the bug in [1] for every
attempt of accessing the web GUI using IE11 and TLS1.2. By
switching to a bigger default DH group ('skip2048'), the
bug seems to be gone (or trigger sufficiently rarely).

1: http://engineering.imvu.com/2015/01/27/the-case-of-the-page-cant-be-displayed-intermittent-selenium-test/
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2016-01-26 16:42:53 +01:00
Emmanuel Kasper
bcd1fd98cf When running with extjs=1, construct the includes lists based on manager6 dir content
This way, we don't have to manage manually the list files and let the FS do it.
For development purpose only.
2016-01-26 10:52:53 +01:00
Wolfgang Bumiller
ff13507669 fix #871: netstat: include veth devices
Include container's veth devices in /nodes/{node}/netstat
2016-01-25 10:59:48 +01:00
Dietmar Maurer
a723b00231 fix Makefiles (add 'all' target) 2016-01-22 11:24:26 +01:00
Wolfgang Bumiller
5f34e76b9b ceph: make config parser less greedy
Options such as:
  osd mount options xfs = -i size=2048 -n size=16k
were parsed as:
  key: 'osd mount options xfs = -i size=2048 -n size'
  value: '16k'

This is due to the greedy .* in the beginning. Making it
non-greedy fixes this.

Fixes #851
2016-01-22 11:24:25 +01:00
Wolfgang Bumiller
c9c6aeb46b APLInfo: support proxying http traffic
As requested in ticket #838, to support running `pveam
update` from within a proxied environment.

Closes #838
2016-01-22 11:24:23 +01:00
Wolfgang Bumiller
4d307b7af1 fix bug #821: add systemd-timesyncd to service list. 2016-01-22 11:24:21 +01:00
Alexandre Derumier
2ce302d0e5 influxdb : use multi values measurement
influxdb (> 0.9.5) now support fastly multiple values by mesuerement,
through a new column store engine.

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2016-01-22 11:24:19 +01:00
Dietmar Maurer
92a8efa5f1 improve log messages at sytem shutdown 2016-01-22 11:24:17 +01:00
Alexandre Derumier
f3b2834841 ceph.conf : remove auth_supported
It's not used since ceph 0.50,
replaced by the 3 others auth config options

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2016-01-22 11:24:15 +01:00
Dietmar Maurer
4bb0f337e8 fix bug #575: fork at shutdown, so that partent starts new worker 2016-01-22 11:24:12 +01:00
Emmanuel Kasper
cad206bfa2 Switch to triton theme as default theme in ExtJS6 2016-01-22 11:24:12 +01:00
Emmanuel Kasper
85cd68aae5 Add mime type for woff2 fonts, also update mime type for ttf fonts
application/font-woff2 is still in discussion but works in main three browsers
This is needed for ExtJS6, which includes some woff2 fonts

ttf font mime type is taken from the official IANA assignment, and works as
well in main three browsers
2016-01-22 11:24:11 +01:00
Dietmar Maurer
84c992f741 remove old extJS5 files 2016-01-22 11:24:11 +01:00
Emmanuel Kasper
316e523568 update build infrastucture to be able to develop with Ext6 2015-11-13 07:08:04 +01:00
Thomas Lamprecht
5736ec9f76 make startall wait up to 60 seconds for quorum
Previously we waited 10 seconds, in PVE 4 system sometimes need more
time to initialize all services so the didn't execute the startall
command even if a few seconds later cfs quorum was etablished.
This is a background process started from the pve-manager init
script, thus waiting doesn't interferes with other processes, so
wait long enough.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2015-11-10 07:48:20 +01:00
Emmanuel Kasper
867dc7f3c2 Use protected mode to be able to execute root system commands
Signed-off-by: Emmanuel Kasper <e.kasper@proxmox.com>
2015-11-06 10:06:11 +01:00
Dietmar Maurer
d2fcf44772 report: change return type to string 2015-11-03 18:14:51 +01:00
Emmanuel Kasper
12162b3693 Add REST endpoint for /report call 2015-11-03 18:10:44 +01:00
Emmanuel Kasper
2abf9c199c Move pvereport functionality into a separate PVE package 2015-11-03 18:10:22 +01:00
Alexandre Derumier
7517c9a368 pveceph install : use release repository
and increase git release key retrieval.
(ceph.com git seem to be quite slow currently)

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2015-10-28 09:23:47 +01:00
Thomas Lamprecht
b4db785fbb Fix check if vm is ha managed in get_start_stop_list
The check used was completely wrong and so the startall and stopall
API calls touched HA managed service, which they shouldn't.

Using the vm_is_ha_managed call from the HA stack fixes that.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2015-10-20 09:50:00 +02:00
Thomas Lamprecht
fe72e04fb3 fix lxc config key in get_start_stop_list sub
When adding the new LXC config format we forgot to adapt the
get_start_stop_list and do s/pve.startup/onboot/

This fixes that qemu VMs were started always before LXC CTs,
irregardless of the defined order.

This also let's us simplify the surrounding code and reduce code
reuse.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2015-10-20 09:46:16 +02:00
Wolfgang Bumiller
f74f4349bd DNS ui/api: ipv6 support 2015-10-05 12:33:42 +02:00
Dietmar Maurer
8469c1ac5d fix bug #719: vzdump - only call cleanup after prepare 2015-10-03 15:30:45 +02:00
Dietmar Maurer
2cd650ec0c API: return correct version (instead of 4.0Beta) 2015-10-02 11:37:08 +02:00
Thomas Lamprecht
35c7873ce5 check for ext5 dir to avoid missing directory errors
As we, for now, default to exclude ext5 from our build it's better
to make an check if its directory exists, and only then allow to
load from it. Else we can get errors on proxy startup, and when
someone passes the ext5 parameter.

Also make a indent/whitespace cleanup.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2015-09-29 07:17:19 +02:00
Wolfgang Bumiller
04e4b1348c CephTools: improve abs_path error handling
verify_blockdev_path didn't check the result of abs_path
causing commands like `pveceph createosd bad/path` to error
with a meaningless "Use of uninitialized value" message.
2015-09-25 09:56:04 +02:00
Alexandre Derumier
b3d73ca3fc NetworkEdit : add support for vlan interfaces.
Edit only for now, create will come soon in another patch

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2015-09-25 07:06:48 +02:00
Dietmar Maurer
6a936e7645 Revert "fix bug #706: Use comma to split vmid list when building the crontab vzdump command"
This reverts commit 2fc4c454ea86f3180d84c8717dedef2eb618b4ec.

No longer required, because vzdump accepts space separated vmid lists again.
2015-09-21 09:50:34 +02:00
Thomas Lamprecht
c8f3ed3c2b Deny stop mode backups from HA managed and enabled services
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2015-09-20 09:53:12 +02:00
Dietmar Maurer
c64ab43cba change default ceph download url to download.ceph.com 2015-09-19 14:06:44 +02:00
Dietmar Maurer
3e707453ee vzdump: re-enable passing vmid lists at command line
We lost that feature in a previous commit, so I just re-eanble it.
2015-09-19 10:44:08 +02:00
Wolfgang Bumiller
042559ee81 vzdump: replace 'find' exclude command switches
We're replacing the use of 'find' in the backup code for
various reasons, so we cannot use find-specific options
anymore. Besides, it's up to the plugin to create the
archive and there's no guarantee using 'find' even makes
sense. Even in the current code it's not being used when
hitting the rsync case anyway.

Now using simple glob patterns as that is more widely
supported.
2015-09-16 11:45:15 +02:00
Alexandre Derumier
9f3136b72a add bridge vlan aware checkbox
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2015-09-16 11:02:43 +02:00
Alexandre Derumier
c7f3e2abe2 add influxdb stats plugin V2
/etc/pve/status.cfg
-------------------
influxdb:
      server influxdb3.odiso.net
      port 8089

This require influxdb >= 0.9 with udp enabled

influxdb.conf
-------------

[[udp]]
  enabled = true
  bind-address = "0.0.0.0:8089"
  database = "proxmox"
  batch-size = 1000
  batch-timeout = "1s"

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2015-09-11 07:59:34 +02:00
Emmanuel Kasper
c197f23e6b Update vzdump man page for 4.0 (LXC containers , KVM live backup) 2015-09-10 12:08:37 +02:00
Emmanuel Kasper
2fc4c454ea fix bug #706: Use comma to split vmid list when building the crontab vzdump command 2015-09-10 12:06:19 +02:00
Thomas Lamprecht
5a9283545c fix typo in CephTools: epmty to empty
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2015-09-09 07:50:07 +02:00
Wolfgang Link
f274147af2 fix output percent_used in rbd pools
This fix is essential of cause json field changes in the ceph api.
They change the field size in pool to max_avail
and the field total_size in stats to total_max_avail
2015-09-09 06:41:54 +02:00
Dietmar Maurer
1271f19861 allow usage of ceph development repository
This is a temporary workaround for testing. We plan to switch to
official repository as soon as it gets available.
2015-09-08 12:13:42 +02:00