1
0
mirror of https://github.com/OpenNebula/one.git synced 2025-01-05 09:17:41 +03:00
Commit Graph

582 Commits

Author SHA1 Message Date
Ruben S. Montero
41f25a2518
F OpenNebula/one#6397: Removes Marketplaces, Hypervisor drivers and others
- Remove Firecracker driver
- Remove LXD driver
- Remove dockerhub, docker registry marketplaces
- Remove turnkey linux marketplace
- Remove docker machine
- Remove references to above components in Sunstone
- Change suffix to LXC to avoid confussion, remove turnkeylinux driver
2024-07-08 09:49:11 +02:00
Ruben S. Montero
286604a3b5
M #-: Add DNS attribute to the default inherit attribute set 2024-06-07 12:38:46 +02:00
Aletibazo
1f9b15cd95
B OpenNebula/one#6487: Fix SPARSE parameter ignored (#3033)
in TM cloning script 

- Added function get_ds_attribute to tm_common.sh to get a given attribute from a Datastore
- Using falloc preallocation mode on the qemu-img commands since it is faster than using full preallocation
- Note the cloning script when using the TM_MAD = ssh does not use qemu-img command. Instead it uses the tar command, hence it ignores the QCOW2_OPTIONS parameter
- Deleted get_ds_attribute function since it is no longer needed
- SPARSE is inherited from Datastore on oned.conf
- Changed resize statement so it uses same syntax as the clone statement

Signed-off-by: Alejandro Mosteiro <amosteiro@opennebula.io>
Co-authored-by: Tino Vázquez <cvazquez@opennebula.io>
2024-05-08 10:47:11 +02:00
Ruben S. Montero
3dfd53df1c
F #6053: In-place restore of VM backups (shared and ssh drivers)
This commit implements the in-place restore of VM backups. Selected VM disks will
be replaced with the specified backup:

* A new API call has been added to the XML-RPC API (`one.vm.restore`) with
  the following arguments:
    - VM ID to be restored, needs to be in **poweroff** state
    - IMAGE ID of the backup to restore
    - INCREMENT ID, only for incremental backups, the increment to use
      (defults to -1 to use the last increment available)
    - DISK ID of the disk to restore (defaults to -1 to restore all VM
      disks)

* Datastore drivers needs to implemente a new operation `ls`. This new
  operation takes the VM, image information of the backup and datastore
  information and returns the restore URL for the disks in the backup.

* This commit includes the implementation for qcow2 and ssh drivers,
  ceph will be implemented in a separated PR. The new driver action is
  `restore host:vm_dir vm_id img_id inc_id disk_id`

* The restore operation is performed in a new state `PROLOG_RESTORE`
  rendered as `RESTORE` and `rest` in short form. State in in RSuntone.

TODO:
  - Remove any existing VM snapshot (system/disk) in the VM. Note that
    snapshots are not included in a backup.

  - Ceph drivers

  - JAVA, GO Lang API bindings

  - Sunstone interface, new state and new operation. Review new state in
    RSuntone.

co-authored-by: Pavel Czerny <pczerny@opennebula.io>
2024-04-26 12:45:04 +02:00
Ruben S. Montero
1ee6498b3c
F #6439: Add deafult auth operation 2024-01-31 18:10:44 +01:00
mkutouski
5d21f33a7b
B OpenNebula/one#6467: LUKS_PASSWORD was removed (#2903)
Removed LUKS_PASSWORD from the oned.conf because it's not used in the code.
2024-01-22 15:55:56 +01:00
Pavel Czerný
442041fd07
F #6341: Generic Quotas
- Generic quotas are defined and read from oned.conf (QUOTA_VM_ATTRIBUTE)
- Generic quotas react to the running mode (i.e. account only when the VM is
  running). For each quota oned also adds a RUNNIN_* metric
- one.system.config API call has been updated so every user can read
  quota configuration:
    . Sensitive information is hidden (***)
    . Oneadmin group has no longer access to sensitive information
      through the API
- CLI has been updated to render generic quotas
- onedb fsck fixes generic quotas reading the configuration from
  oned.conf

Other changes in this PR:
- Refactor Quota metrics to use std::vector instead of C array
Squashed commit of the following:
- New methods to Template and Attribute classes to render hidden
  attributes as "***"
- Update Quota calls to not include unneeded quotas

co-authored-by:Ruben S. Montero <rsmontero@opennebula.org>
2024-01-08 14:07:03 +01:00
Pavel Czerný
0712e08a70
M #-: Fix VM restricted attribute from RAW to RAW/DATA (#2874) 2023-12-18 16:23:25 +01:00
Pavel Czerný
2ada2ec687
M #-: Remove obsolete attribute from oned.conf (#2808) 2023-11-10 11:52:15 +01:00
Neal
ae2a6b8cb8
F OpenNebula/one#6212: add DISK_TYPE to TM_MAD_CONF for lvm tms (#2684)
Signed-off-by: Neal Hansen <nhansen@opennebula.io>
2023-07-26 16:43:59 +02:00
Neal
201d388601
F OpenNebula/one#6367: Add FORMAT to the ALLOW_ORPHANS values (#2664)
in oned.conf comments
2023-07-10 19:37:31 +02:00
Ruben S. Montero
6bbfbb03e4
F #6063: Backup Jobs for OpenNebula
Includes the following changes:
- xml-schema for Backup Job and Scheduled Actions
- GO, Java api
- Deprecate onevm update-chart, delete-chart
    * The commands are replaced by sched-update and sched-delete
    * Refactor method deprecate_command, it's still possible to run the
    command
    * Delete 'shutdown' and 'delete' commands deprecated years ago
    * Fix --verbose option for sched-update and sched-delete
- Re-implementation of scheduled actions, now are managed and executed
  by oned
- Backup Job objects, API, and CLI commands
2023-07-03 18:15:52 +02:00
Pavel Czerný
167e25077a
F #6239: Update VMAction permissions (#2642)
* Add Sched actions and sg (de)attach to VM_*_OPERATION
* Add Backup cancel action
* For consistency add poweroff migrate, alias (de)attach and nic update to set_auth_ops
2023-06-21 09:40:03 +02:00
Jan Orel
8f1d95040c
F #6098 Introduce QCOW2_STANDALONE (#2582)
* Datastores (fs/shared) can set QCOW2_STANDALONE to create disk images without backing files. This will increase clone times but will not have any dependencies.
2023-04-25 09:58:01 +02:00
Ruben S. Montero
5a83b45ce1
B #6162: Only stdin supported for datastore driver
Deprecate the use of arguments for passing messages to the datastore
driver actions.
2023-03-29 13:28:13 +02:00
Ruben S. Montero
52156312fc
B #6162: Use stdin for datastore drivers
New option for datastore driver (--stdin) that sends driver information
    through stdin. Driver actions will read stdin if the first argument is
    '-'. This change is compatible with drivers that read input from argument command
    line. By default the driver will work using the command line arguments.

    Monitor scripts part of the transfer manager are also updated

    File oned.conf is changed to use stdin by default

(cherry picked from commit 8c12a8dbcd)
(cherry picked from commit aa1e6b4196)
2023-03-27 19:24:53 +02:00
Tino Vázquez
4ba8847da1
F #6127: Remove headers from all conf files (#2517) 2023-02-22 16:03:37 +01:00
Tino Vázquez
61b56b0275
Revert "M #-: Prevent change in conf file"
This reverts commit 990830982e.
2023-01-17 10:52:45 +01:00
Tino Vázquez
990830982e
M #-: Prevent change in conf file 2023-01-17 10:52:08 +01:00
Tino Vázquez
3376afdaf0
M #-: Bump year 2023 2023-01-09 12:23:19 +01:00
Anton Todorov
a9b528cf84
B #6037: there are no dedicated backup DS drivers
(cherry picked from commit 750909f9b1)
2022-12-15 15:18:56 +01:00
Neal
f14b423e22
F OpenNebula/one#5516: add rsync config to oned.conf (#2419)
Signed-off-by: Neal Hansen <nhansen@opennebula.io>
2022-12-12 20:22:13 +01:00
Jan Orel
a7fd43d9f5
B #5676: Create LDAP user without password (#2399)
* Create LDAP user without password
* Update oneuser CLI tool
* Update opennebula_configuration.xsd

Co-authored-by: Pavel Czerný <pczerny@opennebula.io>
2022-12-07 10:03:15 +01:00
Michal Opala
0d5f9280a8
F #5973: Add OneGate proxy service (#2281)
* Update install_gems (async.io, etc, rb-inotify)
    - make install_gems script more verbose
    - slightly refactor/simplify update_locks script
    - add async.io, etc and rb-inotify gems
    - update gem locks for: AlmaLinux8/9, CentOS8
    - update gem locks for: Debian10/11, Ubuntu1804/2004/2204

* onegate-proxy:
    - ruby code and default config (169.254.16.9 to avoid conflicts)
    - install.sh script
    - logrotate and systemd onegate-proxy configs
    - onecfg configs
2022-11-14 20:48:30 +01:00
Ruben S. Montero
e433ccb85b
F #5516: New backup interface for OpenNebula
co-authored-by: Frederick Borges <fborges@opennebula.io>
co-authored-by: Neal Hansen <nhansen@opennebula.io>
co-authored-by: Daniel Clavijo Coca <dclavijo@opennebula.io>
co-authored-by: Pavel Czerný <pczerny@opennebula.systems>

BACKUP INTERFACE
=================

* Backups are exposed through a a special Datastore (BACKUP_DS) and
  Image (BACKUP) types. These new types can only be used for backup'ing
  up VMs. This approach allows to:

  - Implement tier based backup policies (backups made on different
    locations).

  - Leverage access control and quota systems

  - Support differnt storage and backup technologies

* Backup interface for the VMs:

  - VM configures backups with BACKUP_CONFIG. This attribute can be set
    in the VM template or updated with updateconf API call. It can include:

    + BACKUP_VOLATILE: To backup or not volatile disks

    + FS_FREEZE: How the FS is freeze for running VMs (qemu-agent,
      suspend or none). When possible backups are crash consistent.

    + KEEP_LAST: keep only a given number of backups.

  - Backups are initiated by the one.vm.backup API call that requires
    the target Datastore to perform the backup (one-shot). This is
    exposed by the onevm backup command.

  - Backups can be periodic through scheduled actions.

  - Backup configuration is updated with one.vm.updateconf API call.

* Restore interface:

  - Restores are initiated by the one.image.restore API call. This is
    exposed by oneimage restore command.

  - Restore include configurable options for the VM template

    + NO_IP: to not preserve IP addresses (but keep the NICs and network
      mapping)

    + NO_NIC: to not preserve network mappings

  - Other template attributes:

    + Clean PCI devices, including network configuration in case of TYPE=NIC
    attributes. By default it removes SHORT_ADDRESS and leave the "auto"
    selection attributes.

    + Clean NUMA_NODE, removes node id and cpu sets. It keeps the NUMA node

  - It is possible to restore single files stored in the repository by
    using the backup specific URL.

* Sunstone (Ruby version) has been updated to expose this feautres.

BACKUP DRIVERS & IMPLEMENTATION
===============================

* Backup operation is implemented by a combination of 3 driver operations:

  - VMM. New (internal oned <-> one_vmm_exec.rb) to orchestrate
    backups for RUNNING VMs.

  - TM. This commit introduces 2 new operations (and their
    corresponding _live variants):

    + pre_backup(_live): Prepares the disks to be back'ed up in the
      repository. It is specific to the driver: (i) ceph uses the export
      operation; (ii) qcow2/raw uses snapshot-create-as and fs_freeze as
      needed.
    + post_backup(_live): Performs cleanning operations, i.e. KVM
      snapshots or tmp dirs.

  - DATASTORE. Each backup technology is represented by its
    corresponfing driver, that needs to implement:

    + backup: it takes the VM disks in file (qcow2) format and stores it
      the backup repository.

    + restore: it takes a backup image and restores the associated disks
      and VM template.

    + monitor: to gather available space in the repository

    + rm: to remove existing backups

    + stat: to return the "restored" size of a disk stored in a backup

    + downloader pseudo-URL handler: in the form
      <backup_proto>://<driver_snapshot_id>/<disk filename>

BACKUP MANAGEMENT
=================

Backup actions may potentially take some time, leaving some vmm_exec threads in
use for a long time, stucking other vmm operations. Backups are planned
by the scheduler through the sched action interface.

Two attributes has been added to sched.conf:
  * MAX_BACKUPS max active backup operations in the cloud. No more
    backups will be started beyond this limit.

  * MAX_BACKUPS_HOST max number of backups per host

* Fix onevm CLI to properly show and manage schedule actions. --schedule
  supports now, as well as relative times +<seconds_from_stime>

  onvm backup --schedule now -d 100 63

* Backup is added as VM_ADMIN_ACTIONS in oned.conf. Regular users needs
  to use the batch interface or request specific permissions

Internal restructure of Scheduler:

- All sched_actions interface is now in SchedActionsXML class and files.
  This class uses references to VM XML, and MUST be used in the same
  lifetime scope.

- XMLRPC API calls for sched actions has been moved to ScheduledActionXML.cc as
  static functions.

- VirtualMachineActionPool includes counters for active backups (total
  and per host).

SUPPORTED PLATFORMS
====================
* hypervisor: KVM
* TM: qcow2/shared/ssh, ceph
* backup: restic, rsync

Notes on Ceph

* Ceph backups are performed in the following steps:
    1. A snapshot of each disk is taken (group snapshots cannot be used as
       it seems we cannot export the disks afterwards)
    2. Disks are export to a file
    3. File is converted to qcow2 format
    4. Disk files are upload to the backup repo

TODO:
  * Confirm crash consistent snapshots cannot be used in Ceph

TODO:
  * Check if using VM dir instead of full path is better to accomodate
    DS migrations i.e.:
    - Current path: /var/lib/one/datastores/100/53/backup/disk.0
    - Proposal: 53/backup/disk.0

RESTIC DRIVER
=============
Developed together with this feature is part of the EE edtion.

* It supports the SFTP protocol, the following attributes are
  supported:

  - RESTIC_SFTP_SERVER
  - RESTIC_SFTP_USER: only if different from oneadmin
  - RESTIC_PASSWORD
  - RESTIC_IONICE: Run restic under a given ionice priority (class 2)
  - RESTIC_NICE: Run restic under a given nice
  - RESTIC_BWLIMIT: Limit restic upload/download BW
  - RESTIC_COMPRESSION: Restic 0.14 implements compression (three modes:
    off, auto, max). This requires repositories version 2. By default,
    auto is used (average compression without to much CPU usage)
  - RESTIC_CONNECTIONS: Sets the number of concurrent connections to a
    backend (5 by default). For high-latency backends this number can be
    increased.

* downloader URL: restic://<datastore_id>/<snapshot_id>/<file_name>
  snapshot_id is the restic snapshot hash. To recover single disk images
  from a backup. This URLs support:

  - RESTIC_CONNECTIONS
  - RESTIC_BWLIMIT
  - RESTIC_IONICE
  - RESTIC_NICE

  These options needs to be defined in the associated datastore.

RSYNC DRIVER
=============
A rsync driver is included as part of the CE distribution. It uses the
rsync tool to store backups in a remote server through SSH:

* The following attributes are supported to configure the backup
  datastore:

  - RSYNC_HOST
  - RSYNC_USER
  - RSYNC_ARGS: Arguments to perform the rsync operatin (-aS by default)

* downloader URL: rsync://<ds_id>/<vmid>/<hash>/<file> can be used to recover
  single files from an existing backup. (RSYNC_HOST and RSYN_USER needs
  to be set in ds_id

EMULATOR_CPUS
=============

This commit includes a non related backup feature:

* Add EMULATOR_CPUS (KVM). This host (or cluster attribute) defines the
  CPU IDs where the emulator threads will be pinned. If this value is
  not defined the allocated CPU wll be used when using a PIN policy.

(cherry picked from commit a9e6a8e000e9a5a2f56f80ce622ad9ffc9fa032b)

F OpenNebula/one#5516: adding rsync backup driver

(cherry picked from commit fb52edf5d009dc02b071063afb97c6519b9e8305)

F OpenNebula/one#5516: update install.sh, add vmid to source, some polish

Signed-off-by: Neal Hansen <nhansen@opennebula.io>
(cherry picked from commit 6fc6f8a67e435f7f92d5c40fdc3d1c825ab5581d)

F OpenNebula/one#5516: cleanup

Signed-off-by: Neal Hansen <nhansen@opennebula.io>
(cherry picked from commit 12f4333b833f23098142cd4762eb9e6c505e1340)

F OpenNebula/one#5516: update downloader, default args, size check

Signed-off-by: Neal Hansen <nhansen@opennebula.io>
(cherry picked from commit 510124ef2780a4e2e8c3d128c9a42945be38a305)

LL

(cherry picked from commit d4fcd134dc293f2b862086936db4d552792539fa)
2022-10-07 22:01:37 +02:00
Ruben S. Montero
74bc751bd7
F #5940: Improve PCI Passthrough and SRIOV support
- SHORT_ADDRESS can be used to select specific devices  (useful on
  homogenous clusters or nic attach operations). This name has been
  selected because of:
    1. It is the attrbute shown host info
    2. It does not collide with the reserved ADDRESS attribute

- New test and add functions that considers both allocation methods: by
  name (VENDOR/CLASS/DEVICE) or address (SHORT_ADDRESS)

- Parameter check on VM creation

- revert and add method use the same pci_attribute function to add info
  to the VM PCI attribute

- Remove well-known attributes when parsing PCI devices (ADDRESS,
  PREV_ADDRES, BUS, FUNCTION, SLOT, NUMA_NODE, UUID)

- Support for attach and detach NIC with PCI attributes
    * onevm_exec.rb looks for PCI devices for ATTACH=YES when attaching/detaching an interface
    * script action are now written in Ruby
    * KVM module with common actions (hostdev/interface device str)
    * Minor changes in xmlparser and OpenNebulaVM classes

- PCI selection options to onevm nic-attach:
    * pci short_address
    * pci_device device ID
    * pci_vendor vendor ID
    * pci_class class ID

- VF can be configured by setting some parameters through IP link (e.g.
  MAC or VLAN_ID). This commit includes a mixin to activate_vf

    * one_vmm_exec.rb looks for PCI VN_MAD drivers
    * VM class (VNM) adds a @pcis array
    * activate_vf should be called in the pre stage. The following drivers
      acticate VFs (VLAN_ID is implemented as 802.1Q tag)
            - 802.1Q
            - bridge
            - fw
            - ovswitch
    * Supported attributes for VF:
      - MAC
      - VLAN_ID
      - spoof checking (SPOOFCHK)
      - trust (TRUST)

- Predictable PCI addresses for guests is only enabled if PCI bus 1
  is present (PCI bridge bus cannot be hotplugged)

- Improve integration with Libvirt/QEMU:

    * When attach, only activate the VF being attached
    * Attach: Use <interface> and not <hostdev> for VF. There seems to be a race
      condition between accessing the vfio device and permission setup.
    * Attach: Remove address on attach as it may fail beacuse PCI controller
      is not present, e.g.:

        ATTACHNIC: Could not attach NIC to 28534240: error: Failed to attach device
        from /dev/fd/63 error: XML error: Invalid PCI address 0000:01:01.0.
        Only PCI buses up to 0 are available ExitCode: 1

    * Detach: Detach always use <hostdev> as libvirt fails to identified the
      device just by address when using <interface>

- Suntone Support: The "Hardware" profile of a network interface (NIC) of a VM can be of three types, now exposed in Sunstone:

    * "Emulated" it includes the hardware model emulated by Qemu
    * "PCI - Automatic" oned hw scheduler will pick the best PCI device for the NIC
    * "PCI - Manual" user can specify the PCI device by its short-address as shown in host information

This commits also enables the attach/detach operations on PCI based NICs in Suntone. *Note*: only for KVM VMs

(reverts commit aafd5f3014)
(reverts commit 671ef0b2d91aba00b1e6c63e19c4a50c3af20f6f)
2022-10-04 20:53:08 +02:00
Frederick Borges
578ca30b76
F #~: Bind opennebula-guacd.service to an address (#2189) 2022-06-27 19:35:24 +02:00
Alejandro Huertas Herrero
f63f313ddc
B #5820: add 4,5 debug levels (#2135) 2022-06-08 18:27:38 +02:00
Tino Vazquez
8c481beb6b M #-: Add disk resize for vCenter Wild VMs 2022-05-12 15:34:32 +02:00
Daniel Clavijo Coca
381ffa31b3
F OpenNebula/one#5680: Make parallel KVM a default (#1959) 2022-04-20 20:20:39 +02:00
Tino Vazquez
f7d53e75ff M #-: Bump version 6.3.85 2022-04-07 19:49:58 +02:00
Tino Vazquez
9d7f8e8a60 M #-: Add recover action to vCenter Wild VMs 2022-04-07 16:53:30 +02:00
Tino Vazquez
ba6bcf632b
M #-: Add missing action for vCenter Wild VMs 2022-03-30 09:55:20 +02:00
Jan Orel
3939dfb0ea
M #-: Add missing ALLOW_ORPHAN for shared TM_MAD (#1835)
shared is now the same as qcow2, so the configuration
defaults should be the same
2022-03-14 13:03:44 +01:00
Kristián Feldsam
b9e2dcc4eb
F #4556: Added option to conf VM logs location
Easily share VM logs between HA nodes with the aid of a sync daemon like
lsyncd

Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
2022-03-03 12:07:58 +01:00
Ruben S. Montero
6ec28c4f35
F #5722: Restrict QinQ conf for regular users 2022-03-01 10:05:21 +01:00
Ruben S. Montero
1d545b923e
F #5722: Revert changes to oned.conf made during merge 2022-02-25 14:42:55 +01:00
Ruben S. Montero
2488ae1a13
F #5722: Support for QinQ and MTU for OVS
- CVLANs to 1dotq-tunnel
    - QINQ_TYPE defaults to 802.1q
    - Addts support fot MTU set of OVS ports

co-authored-by: Mikhail Samoylov <msamoylov@opennebula.io>
2022-02-25 14:37:30 +01:00
Ruben S. Montero
ef92dc600c
F #5722: New QinQ parameters in oned.cof [OpenvSwtich] 2022-02-21 18:35:51 +01:00
Pavel Czerný
b3166b5e6f
F #5661: Use factor to count snapshot size (#1650)
Co-authored-by: Ruben S. Montero <rsmontero@opennebula.org>
2022-01-05 12:23:22 +01:00
Frederick Borges
64dc6deac6
F #5431: Add USER_ENCRYPTED_ATTR in oned.conf (#1611) 2021-11-24 13:58:52 +01:00
Ruben S. Montero
84c00d29e3
F #5431: Add comments to oned.conf for encrypted 2021-11-24 11:08:09 +01:00
Sergio Betanzos
05d47fbc1e
M #~: Fix typo in vcenter vm_mad conf (#1536) 2021-10-21 17:24:30 +02:00
Pavel Czerný
701cfdb774
b #4193: Defaults for IMPORTED_VMS_ACTIONS (#1526) 2021-10-14 09:29:00 +02:00
Alejandro Huertas Herrero
03d43d399c
F #5474: rename Packet to Equinix (#1465)
* rename Packet to Equinix in provision

* rename packet to equinix in fireedge files

* Update fireedge.d in provision templates

Co-authored-by: Sergio Betanzos <sbetanzos@opennebula.io>
2021-09-17 09:51:14 +02:00
Vlastimil Holer
190b0c6e4f
F OpenNebula/addon-context-linux#86: Update NIC parameters (#1447)
- Support METHOD and IP6_METHOD.
- Update METRIC6 to IP6_METRIC6.
- Deprecate CONTEXT_FORCE_IPV4 (unused for some time)
2021-09-10 12:19:38 +02:00
Jan Orel
5d20599416
B #5462: Remove deprecated EXT ALIAS conf (#1367) 2021-07-22 11:23:21 +02:00
Alejandro Huertas Herrero
8b26f099ae
F #5411: add support for Docker Private Registry (#1248) 2021-05-31 13:27:53 +02:00
Jan Orel
86f174d469
F #5381: Join qcow2 + shared TM drivers (#1217) 2021-05-26 18:21:13 +02:00
Alejandro Huertas Herrero
7927c95553
F #5387: add Vultr support into OneProvision (#1229) 2021-05-19 12:24:19 +02:00