Hi Christoph,<div><br></div><div>regarding the firewall hook, I've reviewed the rules and simulated your scenario and it's the expected behaviour. The ping should work from the worker node running the vm to the vm, but it won't from other vms, which is the purpose of the filter. Could you please start another VM and try pinging from there?</div>
<div><br></div><div>Regards,</div><div>Jaime<br><br><div class="gmail_quote">2011/7/29 Christoph Raible <span dir="ltr"><<a href="mailto:c.raible@science-computing.de">c.raible@science-computing.de</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi Carlos,<br>
<br>
this doesn't work for me... I uncomment this options and restart the one daemon.<br>
<br>
Then I create a virtual Machine with following Template:<br>
<br>
<a href="https://pastee.org/j6f3d" target="_blank">https://pastee.org/j6f3d</a><br>
<br>
After commenting out Default requiretty in /etc/sudoers<br>
creation and inserting IPTABLES rule works but have no effect...<br>
<br>
An IPTABLES -L shows me the following output:<br>
<br>
<a href="https://pastee.org/vjynr" target="_blank">https://pastee.org/vjynr</a><br>
<br>
But I can Ping my VM... Is it possible that the Firwalling is still buggy? Or is this an error of my bridged network configuration?<br>
<br>
Regards<br>
<br>
Chritoph<br>
<br>
<br>
<br>
<br>
<br>
Am <a href="tel:27.07.2011%2017" value="+12707201117" target="_blank">27.07.2011 17</a>:16, schrieb Carlos Martín Sánchez:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
Hi Christoph,<br>
<br>
We are aware of the top command bug, see [1] if you are interested in<br>
the ticket.<br>
<br>
As for the iptables configuration, we are still improving the<br>
documentation and some requirements and configurations are not as<br>
detailed as they should.<br>
<br>
Some of the networking features have to be activated editing<br>
/etc/one/oned.conf<br>
I believe you just need to uncomment this hook:<br>
<br>
VM_HOOK = [<br>
name = "firewall",<br>
on = "RUNNING",<br>
command = "vnm/firewall",<br>
arguments = "on $TEMPLATE",<br>
remote = "yes" ]<br>
<br>
And restart OpenNebula with one stop; one start<br>
<br>
Best regards,<br>
Carlos.<br>
<br>
[1] <a href="http://dev.opennebula.org/issues/747" target="_blank">http://dev.opennebula.org/<u></u>issues/747</a><br>
--<br>
Carlos Martín, MSc<br>
Project Major Contributor<br>
OpenNebula - The Open Source Toolkit for Cloud Computing<br>
</div><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> <<a href="http://www.opennebula.org/" target="_blank">http://www.opennebula.org/</a>> | <a href="mailto:cmartin@opennebula.org" target="_blank">cmartin@opennebula.org</a><br>
<mailto:<a href="mailto:cmartin@opennebula.org" target="_blank">cmartin@opennebula.org</a><u></u>><div class="im"><br>
<br>
<br>
On Wed, Jul 27, 2011 at 2:00 PM, Christoph Raible<br></div>
<<a href="mailto:c.raible@science-computing.de" target="_blank">c.raible@science-computing.de</a> <mailto:<a href="mailto:c.raible@science-computing.de" target="_blank">c.raible@science-<u></u>computing.de</a>>><br>
wrote:<br>
<br>
Am <a href="tel:27.07.2011%2011" value="+12707201111" target="_blank">27.07.2011 11</a> <tel:27.07.2011%2011>:14, schrieb Héctor Sanjuán:<div><div></div><div class="h5"><br>
<br>
Hi Christoph,<br>
<br>
it seems the ruby gem 'sequel' is not present in your system.<br>
This gem<br>
is needed by the monitoring system (requirements in [1], also<br>
seems you<br>
are missing sqlite3), which is used by Sunstone (requirements in<br>
[2]).<br>
<br>
You can install the missing dependencies manually issuing 'gem<br>
install...'.<br>
<br>
Also, in order to assure that you have all the dependencies<br>
necessary<br>
for OpenNebula in general, we recommend to use the<br>
'install_gems' script<br>
[3], which will try to install all the ruby gems for you in their<br>
correct versions.<br>
<br>
For Scientific linux, this means however that you will need to<br>
install<br>
the packages listed in the doc manually before the script can<br>
proceed to<br>
install the gems.<br>
<br>
Don't hesitate to write back if you have more questions,<br>
<br>
Hector<br>
<br>
[1]<br>
<a href="http://opennebula.org/__documentation:rel3.0:acctd___conf#requirements_installation" target="_blank">http://opennebula.org/__<u></u>documentation:rel3.0:acctd___<u></u>conf#requirements_installation</a><br>
<<a href="http://opennebula.org/documentation:rel3.0:acctd_conf#requirements_installation" target="_blank">http://opennebula.org/<u></u>documentation:rel3.0:acctd_<u></u>conf#requirements_installation</a><u></u>><br>
<br>
[2]<br>
<a href="http://opennebula.org/__documentation:rel3.0:sunstone#__requirements_installation" target="_blank">http://opennebula.org/__<u></u>documentation:rel3.0:sunstone#<u></u>__requirements_installation</a><br>
<<a href="http://opennebula.org/documentation:rel3.0:sunstone#requirements_installation" target="_blank">http://opennebula.org/<u></u>documentation:rel3.0:sunstone#<u></u>requirements_installation</a>><br>
<br>
[3]<br>
<a href="http://opennebula.org/__documentation:rel3.0:ignc#__ruby_libraries_requirements___front-end" target="_blank">http://opennebula.org/__<u></u>documentation:rel3.0:ignc#__<u></u>ruby_libraries_requirements___<u></u>front-end</a><br>
<<a href="http://opennebula.org/documentation:rel3.0:ignc#ruby_libraries_requirements_front-end" target="_blank">http://opennebula.org/<u></u>documentation:rel3.0:ignc#<u></u>ruby_libraries_requirements_<u></u>front-end</a>><br>
<br>
<br>
<br>
<br>
<br>
El 27/07/11 10:21, Christoph Raible escribió:<br>
<br>
Hi @all,<br>
<br>
I got the following error on Starting sunstone-server with<br>
OpenNebula 3.0 Beta1.<br>
<br>
<a href="http://pastebin.com/SdBJZSc5" target="_blank">http://pastebin.com/SdBJZSc5</a><br>
<br>
<br>
My System is a 64-Bit Scientific Linux 6.0<br>
Selinux disabled<br>
iptables disabled<br>
One networkinterface as bridge<br>
<br>
<br>
Following Gems are installed:<br>
daemons (1.1.4)<br>
eventmachine (0.12.10)<br>
json (1.5.3)<br>
mkrf (0.2.3)<br>
nokogiri (1.5.0)<br>
rack (1.3.2)<br>
rake (0.9.2, 0.8.7)<br>
sinatra (1.2.6)<br>
thin (1.2.11)<br>
tilt (1.3.2)<br>
<br>
and my sunstone-server.conf is configured so:<br>
<br>
<a href="http://pastebin.com/4bjn1bqX" target="_blank">http://pastebin.com/4bjn1bqX</a><br>
<br>
<br>
I hope someone can help me with my problem...<br>
I need the Sunstone server for an article in the linux-admin<br>
magazin<br>
(Germany ;) )<br>
<br>
<br>
<br>
Regards<br>
Chr.Raible<br>
<br>
<br>
<br>
<br>
Hi Thanks for your help.<br>
<br>
With those informations and all gems, sunstone and monitoring system<br>
works fine :)<br>
<br>
Now I found two other "errors/bug" (don't know how to describe ;) )<br>
<br>
The "onevm top" command doesn't refresh the status of the VMs. When<br>
I start creation of an VM and switch to the top overview, the status<br>
is always on pending state...<br>
<br>
The second bug is that the IP-Table configurtaion doesn't work. I<br>
insert the following Option to the NIC section:<br>
<br>
ICMP = drop<br>
<br>
But after creation of the VM I can ping those VM.<br>
oneadmin has rights to add an delete iptable rules and has also full<br>
sudo rights...<br>
<br>
Has anyone an idea? Or is this just not implemented in the Beta?<br>
<br>
Thank an best regards,<br>
<br>
Christoph<br>
<br>
<br>
<br>
--<br>
Vorstand/Board of Management:<br>
Dr. Bernd Finkbeiner, Dr. Roland Niemeier, Dr. Arno Steitz, Dr.<br>
Ingrid Zech<br>
Vorsitzender des Aufsichtsrats/<br>
Chairman of the Supervisory Board:<br>
Philippe Miltin<br>
Sitz/Registered Office: Tuebingen<br>
Registergericht/Registration Court: Stuttgart<br>
Registernummer/Commercial Register No.: HRB 382196<br>
<br>
______________________________<u></u>___________________<br>
Users mailing list<br></div></div>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a> <mailto:<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.<u></u>opennebula.org</a>><div class="im">
<br>
<a href="http://lists.opennebula.org/__listinfo.cgi/users-opennebula.__org" target="_blank">http://lists.opennebula.org/__<u></u>listinfo.cgi/users-opennebula.<u></u>__org</a><br>
<<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/<u></u>listinfo.cgi/users-opennebula.<u></u>org</a>><br>
<br>
<br>
</div></blockquote><div><div></div><div class="h5">
<br>
-- <br>
Vorstand/Board of Management:<br>
Dr. Bernd Finkbeiner, Dr. Roland Niemeier, Dr. Arno Steitz, Dr. Ingrid Zech<br>
Vorsitzender des Aufsichtsrats/<br>
Chairman of the Supervisory Board:<br>
Philippe Miltin<br>
Sitz/Registered Office: Tuebingen<br>
Registergericht/Registration Court: Stuttgart<br>
Registernummer/Commercial Register No.: HRB 382196 <br>
<br>
______________________________<u></u>_________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/<u></u>listinfo.cgi/users-opennebula.<u></u>org</a><br>
</div></div></blockquote></div><br></div><br clear="all"><br>-- <br>Jaime Melis, Cloud Technology Engineer/Researcher<br>Major Contributor<br>OpenNebula - The Open Source Toolkit for Cloud Computing<br><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:jmelis@opennebula.org" target="_blank">jmelis@opennebula.org</a><br>