<div dir="ltr">Hi Stefan,<div class="gmail_extra"><br></div><div class="gmail_extra">comments inline</div><div class="gmail_extra"><br><div class="gmail_quote">On 13 November 2013 10:11, Stefan Kooman <span dir="ltr"><<a href="mailto:stefan@bit.nl" target="_blank">stefan@bit.nl</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Hi list,<br>
<br>
Currently there is no option to enable IPv6 for novnc-server<br>
(websockify) although websockify supports this. I've made a little<br>
(dirty) hack to enable IPv6 for websockify:<br>
<br>
--- /root/OpenNebulaVNC.rb 2013-11-08 21:37:13.958535135 +0100<br>
+++ /usr/lib/one/ruby/OpenNebulaVNC.rb 2013-11-09 22:08:12.951812886 +0100<br>
@@ -70,7 +70,7 @@<br>
<br>
@pipe = nil<br>
@token_folder = File.join(VAR_LOCATION, opts[:token_folder_name])<br>
- @proxy_path = File.join(SHARE_LOCATION, "websockify/websocketproxy.py")<br>
+ @proxy_path = File.join(SHARE_LOCATION, "websockify/websocketproxy.py -6")<br>
@proxy_port = config[:vnc_proxy_port]<br>
<br>
@wss = config[:vnc_proxy_support_wss]<br>
<br>
If sunstone is reachable over IPv6 your clients might want to reach the<br>
websockify port over IPv6 as well, if they want to make a VNC<br>
connection. It would be nice to have a config option in<br>
sunstone-server.conf to influence this behaviour (i.e :vnc_proxy_ipv6:<br>
yes/no).<br>
<br></blockquote><div><br></div><div>It makes sense, I have created a ticket to add this parameter</div><div><a href="http://dev.opennebula.org/issues/2454">http://dev.opennebula.org/issues/2454</a><br></div><div><br></div>
<div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
One of the hints in documentation [1] debugging novnc-server /<br>
websockify is to run it on a console. But if you do this sunstone will<br>
give an error message "VNC server is not running" and will refuse to<br>
initiate a vnc session. Sure, you can hack your way around this but it<br>
would be nice if either the check in OpenNebulaVNC.rb would be adjusted<br>
to figure out if there's really nothing listening on vnc port (instead<br>
of depending on lock file) or include a "debug" option so it skips this<br>
check altogether.<br></blockquote><div><br></div><div>Yes, the documentation should include that you have to generate the lock file, otherwise the sunstone-server will not work, or modify the code to include one of your suggestions. (patches are more than welcome)</div>
<div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
Another thing biting me are the functions in OpenNebulaVNC.rb creating<br>
and removing the sunstone_vnc_tokens directory. The directory is created<br>
with oneadmin as owner and group. If you're running sunstone with Apache<br>
Passenger it depends on the user you're running passenger with if it's<br>
able to write new tokens or not. Documentation assumes passenger runs<br>
as user www-data [2] (although you can easily change that). With the<br>
default configuration passenger is not allowed to write tokens in that<br>
directory and an error will be thrown. It would be nice if OpenNebulaVNC<br>
could check what user passenger runs as, and create the directory<br>
accordingly. What is the reason this directory should be created "on the fly"<br>
anyway? It seems to complicate things a bit.<br></blockquote><div><br></div><div>You are right, the dir should not be recreated if it already exists</div><div><a href="http://dev.opennebula.org/issues/2455">http://dev.opennebula.org/issues/2455</a><br>
</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
Finally, when running "websockify" on command line in "debug" mode it gives the<br>
folllowing warning:<br>
<br>
"WARNING: no 'numpy' module, HyBi protocol is slower or disabled<br>
WebSocket server settings"<br>
<br>
Is python-numpy indeed a "performance accelerator" in this case? If so,<br>
I think this should be (at least) a (recommended) dependency for<br>
sunstone. Documentation does mention python-numby so I guess it does<br>
help [1].<br></blockquote><div><br></div><div>Yes, it is recommended since it uses some optimized C code instead of python. I will include it in the docs.</div><div><br></div><div>Thank you for your great feedback</div><div>
</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
Cheers,<br>
<br>
Stefan<br>
<br>
[1]: <a href="http://opennebula.org/documentation:rel4.2:sunstone" target="_blank">http://opennebula.org/documentation:rel4.2:sunstone</a><br>
[2]: <a href="http://opennebula.org/documentation:rel4.2:suns_advance" target="_blank">http://opennebula.org/documentation:rel4.2:suns_advance</a><br>
<span class=""><font color="#888888"><br>
<br>
--<br>
| BIT BV <a href="http://www.bit.nl/" target="_blank">http://www.bit.nl/</a> Kamer van Koophandel 09090351<br>
| GPG: 0xD14839C6 <a href="tel:%2B31%20318%20648%20688" value="+31318648688">+31 318 648 688</a> / <a href="mailto:info@bit.nl">info@bit.nl</a><br>
</font></span><br>-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.10 (GNU/Linux)<br>
<br>
iF4EAREIAAYFAlKDQkEACgkQTyGgYdFIOcZeLAEAiRmrySJ9GHtyVjyIepIJ77ct<br>
2abudHSLdsPLFzXNavcBAJ3SQn5mFkOtZCBSx9KehF16/HqMpA7Hh0D4SebulA4q<br>
=IJTP<br>
-----END PGP SIGNATURE-----<br>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div>--<br></div>Daniel Molina<br>Project Engineer<br>OpenNebula - Flexible Enterprise Cloud Made Simple<br><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:dmolina@opennebula.org" target="_blank">dmolina@opennebula.org</a> | @OpenNebula</div>
</div></div>