1
0
mirror of https://github.com/OpenNebula/one.git synced 2024-12-22 13:33:52 +03:00
Commit Graph

29 Commits

Author SHA1 Message Date
Ruben S. Montero
146dfe6a09
F #6669: Support for VLAN filtering and QinQ
This commit adds the following features using the vlan_filter
capabilities of the Linux Bridge:

* 802.1Q driver, support for QinQ. This is not a full implementation
  compared to the vSwitch as there is no native support in the linux
  bridge:
    - VLAN_ID is the (outer/C-VLAN) tag implemented by tagging the
      PHY_DEV interface
    - CVLANS are the customer tags, any other VLAN is filtered out in
      the bridge

* bridge driver, support for vlan filtering (VLAN_TAGGED_ID) only the
  specified tags are allowed in the trunk.

Additionally this commits includes linting of some files.

(cherry picked from commit e379bd66842dc4aa256e1c503ca425553d02bf9b)
2024-12-11 11:38:22 +01:00
Michal Opala
b1ef4332e5
F OpenNebula/one#6641: Add the "string-phone" transparent proxy (#3221)
This feature let's cloud admin to proxy VM connections to any service through the hypervisor. VMs uses a link local IP that is forwarded to a local proxy. This simplifies VM network requirements, e.g. to access gateway, vaults, configuration services etc...

Implementation:
- Use network namespaces to isolate VNET networking. ip netns command is executed through a wrapper to limit sudo access to commands.
- Add tproxy.rb app to manage a group of daemons on HV nodes.
- Use unix sockets for communication between proxy peers. "Inner" proxy runs in the netns without any network access. "Outer" proxy handles HV connections to services.
- Use OpenNebulaNetwork.conf + 'onehost sync -f' for configuration. Proxy can be defined per network.
2024-09-26 18:19:48 +02:00
Ruben S. Montero
f194c1241f
M #-: Remove tproxy logic 2024-07-23 13:29:48 +02:00
Michal Opala
360605628c
F #6641: Implement OneGateProxy in VN drivers (#3142)
This commit implements a transparent proxy for OneGate service (as well as any other  TCP service)
* #6281: Disable legacy OneGateProxy
* Implement OneGateProxy in VN drivers
2024-07-19 11:55:49 +02:00
Ruben S. Montero
888cc87c68
F #6397: Minor adjustments to LXC marketplace
- Fix LXC linuxcontainers monitor action (error setting header)
- Update context packages URL reference to point to the new location
- Add lxc marketplace utility to sudoers file (removed in a previous
  commit)
- Remove CentOS from supported OS list in LXC marketplace
  (CentOS9_Stream includes some failures that need further debugging)
2024-07-09 13:43:35 +02:00
Ruben S. Montero
41f25a2518
F OpenNebula/one#6397: Removes Marketplaces, Hypervisor drivers and others
- Remove Firecracker driver
- Remove LXD driver
- Remove dockerhub, docker registry marketplaces
- Remove turnkey linux marketplace
- Remove docker machine
- Remove references to above components in Sunstone
- Change suffix to LXC to avoid confussion, remove turnkeylinux driver
2024-07-08 09:49:11 +02:00
Jan Orel
a32719139d
M #-: Use /usr/bin/arping from iputils-arping (#2938)
There is also arping, providing /usr/sbin/arping but we don't use that one.
2024-02-12 12:16:33 +01:00
Jan Orel
ca1ac6f8f0
B OpenNebula/one##5909: Switch to /usr/(s)bin deb (#2907) 2024-02-06 11:38:47 +01:00
Ruben S. Montero
3c9bfecbd1
Revert "B #5909: Add /usr/sbin/ipset to sudoers (#2466)"
This reverts commit 8a0d892f39.
2023-01-30 13:49:59 +01:00
Jan Orel
8a0d892f39
B #5909: Add /usr/sbin/ipset to sudoers (#2466)
(cherry picked from commit f96338c0c8)
(cherry picked from commit 1cc6332536)
2023-01-30 11:43:28 +01:00
Alejandro Huertas Herrero
df31718a5c
F #5351: fix minor bug with vgpu path (#1906) 2022-04-05 15:15:45 +02:00
Ruben S. Montero
2488ae1a13
F #5722: Support for QinQ and MTU for OVS
- CVLANs to 1dotq-tunnel
    - QINQ_TYPE defaults to 802.1q
    - Addts support fot MTU set of OVS ports

co-authored-by: Mikhail Samoylov <msamoylov@opennebula.io>
2022-02-25 14:37:30 +01:00
Alejandro Huertas Herrero
7f719598bd
F #5351: add support for NVIDIA vGPU (#1779) 2022-02-17 15:51:27 +01:00
Christian González
0bef8ee722
B #5385: properly manage undeployed states (LVM) (#1235) 2021-05-26 11:28:49 +02:00
Christian González
0ceef20753
F #5260: Add LVM permission to lxc nodes (#1218) 2021-05-13 16:56:42 +02:00
Pavel Czerný
4133d04314
F #3124: Compact memory (#918) 2021-03-08 11:45:50 +01:00
Ruben S. Montero
6cadde8eef
F #5228: LXC driver set
co-authored-by: Christian González <cgonzalez@opennebula.io>
co-authored-by: Daniel Clavijo Coca <dclavijo@opennebula.systems>
2021-03-04 21:07:50 +01:00
Vlastimil Holer
0026fa2b14
F #5217: Unify package names (#617) 2021-01-11 21:12:28 +01:00
Vlastimil Holer
4682a50a31
F #5214 #5075: Fix canonical ip path on Debian-like (#576) 2020-12-20 22:49:54 +01:00
Jan Orel
96068ef185
F #5214 #5075: New provision templates.
* Public IP no longer uses NAT'ing
* Improved handle of host collections and indexes
* Update of ansible roles and playbooks

Co-authored-by: Ruben S. Montero <rsmontero@opennebula.org>
2020-12-15 10:07:06 +01:00
Petr Ospalý
365d1955ff
F #865: Add oneshowback compute timer
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-05-22 03:00:32 +02:00
Christian González
6e5ffdeb24
F #4089: add CPU limitations 2020-05-19 14:55:53 +02:00
Christian González
acf6454c6e
F #4089: Improve DockerHub integration (#4688)
Add LINK attribute to marketapps
lint marketplace
2020-05-18 02:54:11 +02:00
Vlastimil Holer
4c77119fce
M #-: Restrict sudo ip usage (#4689)
Co-authored-by: Jan Orel <jorel@opennebula.systems>
2020-05-11 19:03:23 +02:00
Vlastimil Holer
f6aeb26936
M #-: Independent LXD sudoers (#4576) 2020-04-21 18:03:44 +02:00
Vlastimil Holer
424ab046b7
M #-: Use non-interactive sudo, fix arping path on Debians (#4555)
* M #-: Force all sudo usage as non-interactive
* M #-: Fix sudoers arping path on Debian-like systems
2020-04-17 19:26:31 +02:00
Christian González
544c1ecfcd
F #4089: Firecracker node packages (#4412) 2020-03-27 11:18:18 +01:00
Vlastimil Holer
8b7e661327 B #3046: Enable HA HEM server control and IP cmd (#3816) 2019-10-07 10:02:08 +02:00
Vlastimil Holer
cf0d1465df B #3046: Review sudoers (#3786) 2019-09-30 15:15:42 +02:00