1
0
mirror of https://github.com/OpenNebula/one.git synced 2025-01-06 13:17:42 +03:00
Commit Graph

141 Commits

Author SHA1 Message Date
Michal Opala
0d5f9280a8
F #5973: Add OneGate proxy service (#2281)
* Update install_gems (async.io, etc, rb-inotify)
    - make install_gems script more verbose
    - slightly refactor/simplify update_locks script
    - add async.io, etc and rb-inotify gems
    - update gem locks for: AlmaLinux8/9, CentOS8
    - update gem locks for: Debian10/11, Ubuntu1804/2004/2204

* onegate-proxy:
    - ruby code and default config (169.254.16.9 to avoid conflicts)
    - install.sh script
    - logrotate and systemd onegate-proxy configs
    - onecfg configs
2022-11-14 20:48:30 +01:00
onenhansen
6b1127f180
F #5328: Update logrotate behavior to avoid long restarts (#2275) 2022-09-12 18:57:07 +02:00
Alejandro Huertas Herrero
307a6bb153
B #5189: fix typo (#2160) 2022-06-17 11:48:25 +02:00
Alejandro Huertas Herrero
c37f2105bd
B #5189: remove left lock file (#2159) 2022-06-16 18:57:07 +02:00
Alejandro Huertas
654990e0ea
F #1149: add systemd units SyslogIdentifier 2022-05-09 13:42:50 +02:00
Alejandro Huertas Herrero
df31718a5c
F #5351: fix minor bug with vgpu path (#1906) 2022-04-05 15:15:45 +02:00
Ruben S. Montero
2488ae1a13
F #5722: Support for QinQ and MTU for OVS
- CVLANs to 1dotq-tunnel
    - QINQ_TYPE defaults to 802.1q
    - Addts support fot MTU set of OVS ports

co-authored-by: Mikhail Samoylov <msamoylov@opennebula.io>
2022-02-25 14:37:30 +01:00
Alejandro Huertas Herrero
7f719598bd
F #5351: add support for NVIDIA vGPU (#1779) 2022-02-17 15:51:27 +01:00
Vlastimil Holer
d0f13f283e
F #5555: Improve Sunstone systemd hardening (#1529)
- Set CAP_NET_BIND_SERVICE capability to allow binding to 80
- Hide directories with SSH keys
2021-10-15 16:44:11 +02:00
fuu0
4740c83458
F #5555: Secutiry options to Sunstone systemd unit
Co-authored-by: Vlastimil Holer <vholer@opennebula.io>
2021-10-11 14:48:25 +02:00
Christian González
0bef8ee722
B #5385: properly manage undeployed states (LVM) (#1235) 2021-05-26 11:28:49 +02:00
Christian González
0ceef20753
F #5260: Add LVM permission to lxc nodes (#1218) 2021-05-13 16:56:42 +02:00
Vlastimil Holer
fb67699091
M #-: Enforce custom library path for guacd (#983) 2021-03-16 17:40:21 +01:00
Petr Ospalý
588bfb7eb6 M #-: Remove exit timeout exception for FireEdge
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2021-03-12 17:10:29 +01:00
Vlastimil Holer
c8565cfce0
M #-: Change tmpfiles to /run, set 0750 on /run/one (#930) 2021-03-09 18:11:36 +01:00
Pavel Czerný
4133d04314
F #3124: Compact memory (#918) 2021-03-08 11:45:50 +01:00
Ruben S. Montero
6cadde8eef
F #5228: LXC driver set
co-authored-by: Christian González <cgonzalez@opennebula.io>
co-authored-by: Daniel Clavijo Coca <dclavijo@opennebula.systems>
2021-03-04 21:07:50 +01:00
Tino Vázquez
31f8df8ff8
F #5257: Remove econe server (#901)
* F #5257: Remove econe server

Also, disable hybrid section by default in Sunstone

* F #5257: Revert onecfg change

* remove amazon-ec2 unneeded gem
* remove file no longer present from install.sh
2021-03-02 20:34:57 +01:00
Petr Ospalý
04273ca9d3
F OpenNebula/one#5178: Update supervised services (#798) 2021-02-11 19:22:41 +01:00
Petr Ospalý
3456cbf3a5
F OpenNebula/one#5178: Fix race with ssh-agent (#748)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2021-02-03 22:52:40 +01:00
Petr Ospalý
5d7ae36c68
F OpenNebula/one#5178: Add time to supervisord log (#635)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2021-01-13 19:09:49 +01:00
Vlastimil Holer
0026fa2b14
F #5217: Unify package names (#617) 2021-01-11 21:12:28 +01:00
Petr Ospalý
10fa7ca4ce
F OpenNebula/one#5178: Add onedb upgrade (#606)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2021-01-11 10:06:14 +01:00
Petr Ospalý
fce39e1493
F OpenNebula/one#5178: Ignore logrotate's failure (#585)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2021-01-05 12:57:28 +01:00
Petr Ospalý
36e6cbe546
F OpenNebula/one#5178: Add logrotate to supervisor (#579)
Enforce logrotate before the start of any opennebula's supervisor
service - as is done similarly in the systemd services.

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-12-21 18:56:40 +01:00
Vlastimil Holer
4682a50a31
F #5214 #5075: Fix canonical ip path on Debian-like (#576) 2020-12-20 22:49:54 +01:00
Petr Ospalý
5d066ea8f4
F OpenNebula/one#5178: Add optional configs (#574)
Each supervisord service (where missing or usable) can use its own
config file which will be sourced. Thanks to this services do not rely
on properly populated environment with all needed variables.

Useful when supervisord is run like this:
% env -i /usr/bin/supervisord

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-12-18 13:12:29 +01:00
Jan Orel
96068ef185
F #5214 #5075: New provision templates.
* Public IP no longer uses NAT'ing
* Improved handle of host collections and indexes
* Update of ansible roles and playbooks

Co-authored-by: Ruben S. Montero <rsmontero@opennebula.org>
2020-12-15 10:07:06 +01:00
Petr Ospalý
bb0b4aa526
B OpenNebula/one#5086: Add fuse support (#541)
This commit solves issues with creating new VM images based on the
docker images inside a container environment.

If fuse2fs command is present then prefer its use instead of the default
mount command which will work only under root or otherwise privileged
user.

This commit solves the mounting issue inside the rootless container
environment.

Also add a new environment file to the oned supervisord service so we
can start oned process with some additional env. variables - notably
DOCKER_HOST.

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-12-10 17:30:27 +01:00
Petr Ospalý
4d9a0fd5fc
B #5189: Remove oned's stale lock in supervisord (#522)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-12-04 10:54:54 +01:00
Petr Ospalý
2edcdae638
F OpenNebula/one#5178: Add docker services (#511)
- New supervisord service containerd
- New supervisord service docker
- Small fix in function.sh to pick up also socket files

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-12-02 15:25:49 +01:00
Petr Ospalý
ff2cb0ab6d
B #5189: Add stopwaitsecs to supervisord services (#496)
By default supervisord waits only 10s before it sends SIGKILL to its
services. This commit raises this limit to 90s in all services -
matching the default in systemd (DefaultTimeoutStopSec).

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-12-01 09:58:49 +01:00
Petr Ospalý
c65a119a2e
F OpenNebula/one#5178: Add stunnel service (#481)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-11-26 17:21:38 +01:00
Vlastimil Holer
5358eeba7a
F #5178: Fix +x permissions to supervisord scripts (#422) 2020-11-13 19:44:47 +01:00
Petr Ospalý
96aab61096
M #-: Fix paths and locations for fireedge/guacd (#411)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-11-11 18:35:00 +01:00
Petr Ospalý
fa22e988b0
M #-: Add supervisord services fireedge, guacd (#389)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-11-06 11:43:18 +01:00
Vlastimil Holer
16f5499fd6
F #3951: Systemd service opennebula-guacd (#376) 2020-10-29 16:13:06 +01:00
Vlastimil Holer
6311392a0b
F OpenNebula/one#3951: FireEdge package-lock.json, service (#333) 2020-10-19 19:02:02 +02:00
Tino Vazquez
f5a78e9b9c
F #3951: Add fireedge logrotate 2020-10-01 18:51:16 +02:00
Petr Ospalý
6fb4b2acd2
M #-: Add supervisord services definition (#269)
* M #-: Add supervisord services definition

Currently only for CentOS 8 but there should be needed only few changes
to make it work on other systems: crond, apache/httpd, mysql/mariadb...

The rest is pretty much system agnostic.

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>

* M #-: Adjust supervisor directories

Co-authored-by: Vlastimil Holer <vholer@opennebula.io>
2020-09-30 17:27:20 +02:00
Vlastimil Holer
7a837b081f
B #4939: Schedule ssh-socks-cleaner by OnCalendar (#32) 2020-06-22 15:21:57 +02:00
Vlastimil Holer
830045e17e
F #1473: Conditional service with SELinux workaround (#4871) 2020-06-03 13:39:24 +02:00
Petr Ospalý
365d1955ff
F #865: Add oneshowback compute timer
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-05-22 03:00:32 +02:00
Christian González
6e5ffdeb24
F #4089: add CPU limitations 2020-05-19 14:55:53 +02:00
Christian González
acf6454c6e
F #4089: Improve DockerHub integration (#4688)
Add LINK attribute to marketapps
lint marketplace
2020-05-18 02:54:11 +02:00
Petr Ospalý
a96de2f14a
F #1473: Update SSH config and sockets (#4733)
* F #1473: Update SSH config and sockets

- install files via install.sh script
- replace crontab with systemd timer
- update opennebula.service dependency
- move ssh master sockets from ~oneadmin to /run/one/ssh-socks
- modify ssh wrapper to not use external programs but only bash builtins
- update ssh configs

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>

* F #1473: Update SSH config and sockets

* F #1473: Update SSH config and sockets

* F #1473: Update SSH wrapper

- rename SSH_USE_MASTER_SOCK to SSH_OPT_CONTROL_MASTER
- change the logic of this directive to be a value of the SSH
  'ControlMaster' option (default is 'auto')
- delete the SSH_USE_MASTER_SOCK from opennebula.service (not needed
  anymore)

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>

Co-authored-by: Vlastimil Holer <vholer@opennebula.io>
2020-05-15 18:51:04 +02:00
Petr Ospalý
523eff2a77
F #1473: Fix SSH persistent connections (#4724)
- add ssh wrapper which is used only on the fronted
- disable SSH master socket on the nodes
- add new PATH and SSH_USE_MASTER_SOCK into opennebula.service

Signed-off-by: Petr Ospalý <pospaly@opennebula.io>
2020-05-13 21:34:38 +02:00
Petr Ospalý
51d6d2a99d
F #1473: Fix and improve SSH config (#4713)
- workaround issues with persistent connections
- add new cronjob

Co-authored-by: Vlastimil Holer <vholer@opennebula.io>
2020-05-12 18:37:23 +02:00
Petr Ospalý
448beb80fc
F #1473: Add oneadmin's SSH config (#4668)
Signed-off-by: Petr Ospalý <pospaly@opennebula.io>

Co-authored-by: Vlastimil Holer <vholer@opennebula.io>
2020-05-11 19:05:34 +02:00
Vlastimil Holer
4c77119fce
M #-: Restrict sudo ip usage (#4689)
Co-authored-by: Jan Orel <jorel@opennebula.systems>
2020-05-11 19:03:23 +02:00