Beta packages for Proxmox VE 3.2 - pvetest

dietmar

Proxmox Staff Member
Staff member
Apr 28, 2005
17,112
512
133
Austria
www.proxmox.com
1. When creating CEPH pools if you do not copy the keys on the command line

What keys do you talk about here?

2. Will your implementation of Open vSwitch have some sort of IP filtering with it or will it be similar to your Linux bridge and rely on hardware firewall to protect VM's from each other? At the moment your current documentation states the use of a hardware firewall is recommended but this is only protecting the VM's from things outside the host and not protecting VM's from other VM's even on the same host machine.

There will be no firewall for OVS.
 

pieterk

New Member
Feb 7, 2014
17
1
1
Hi,

This part from the wiki

You also need to copy the keyring to a predefined location
# cd /etc/pve/priv/
# mkdir ceph
# cp ceph.client.admin.keyring ceph/my-ceph-pool.keyring

This is if you make a new custom pool in the web gui and then go to mount it. If the key copy step is missed (above) then the gui just locks up for a few minutes.
 

dietmar

Proxmox Staff Member
Staff member
Apr 28, 2005
17,112
512
133
Austria
www.proxmox.com
If the key copy step is missed (above) then the gui just locks up for a few minutes.

The current rados commands use a 'timeout' of 300s. This will be fixed in next ceph release (hopefully), so we will
use a shorter timeout when that option is available.
 

MACscr

Member
Mar 19, 2013
95
3
8
So were moving from Java (which is a pain) that runs on most OS'es, to Spice, which only runs on 2? Should have gone with novnc that runs on everything and doesnt require some third party client. :(

Also, whats the advantage to your new kernel if openvz support isnt available in it? Why not just use the newest debian vanilla kernel?

Lastly, thanks for new ceph integration and improvements. Really looking forward to testing that out. What version of ceph is currently included/supported and will the upcoming Firefly release be supported? Its a huge improvement.
 
Last edited:

tom

Proxmox Staff Member
Staff member
Aug 29, 2006
15,520
906
163
So were moving from Java (which is a pain) that runs on most OS'es, to Spice, which only runs on 2? Should have gone with novnc that runs on everything and doesnt require some third party client. :(

Java works great on Windows, Linux and OSX, also Android. Spice works on Windows and Linux (including Android) which is also more than 90 % of used client OS.

In 3.2, you have the choice. use Java or Spice.

Also, whats the advantage to your new kernel if openvz support isnt available in it? Why not just use the newest debian vanilla kernel?

3.10 is the future default kernel for Proxmox VE. if you want test this one we provide the package. OpenVZ support will follow.

Lastly, thanks for new ceph integration and improvements. Really looking forward to testing that out. What version of ceph is currently included/supported and will the upcoming Firefly release be supported? Its a huge improvement.

ceph servers use latest main version (currently Emperor) and as soon as Firefly is available, it will use Firefly.
 

m.ardito

Active Member
Feb 17, 2010
1,473
15
38
Torino, Italy
So were moving from Java (which is a pain) that runs on most OS'es, to Spice, which only runs on 2? Should have gone with novnc that runs on everything and doesnt require some third party client. :(
Also, whats the advantage to your new kernel if openvz support isnt available in it? Why not just use the newest debian vanilla kernel?
Lastly, thanks for new ceph integration and improvements. Really looking forward to testing that out. What version of ceph is currently included/supported and will the upcoming Firefly release be supported? Its a huge improvement.

come one people, relax, and look closely at some key words in this post: test, beta, for now. It isn't so difficult. It means: we are still working on it, we just released this to allow testing by users...

And remember (or read docs) that once (1.x days) pve had multiple kernels, some (usually newer) with only kvm, others (older) with both kvm and openvz, and you could choose at system startup.

There's an amomunt of choices, available. PVE is production and thus stability-oriented, not for bleeding adge and thus unstability. But it's packed with tons of useful features, and a good ui, too.

If you look for always bleeding edge, pve is probably not for you, but the good news is that there are many different and also free solutions out there for you!

:-D

Cheers,
Marco
 

MACscr

Member
Mar 19, 2013
95
3
8
come one people, relax, and look closely at some key words in this post: test, beta, for now. It isn't so difficult. It means: we are still working on it, we just released this to allow testing by users...

And remember (or read docs) that once (1.x days) pve had multiple kernels, some (usually newer) with only kvm, others (older) with both kvm and openvz, and you could choose at system startup.

There's an amomunt of choices, available. PVE is production and thus stability-oriented, not for bleeding adge and thus unstability. But it's packed with tons of useful features, and a good ui, too.

If you look for always bleeding edge, pve is probably not for you, but the good news is that there are many different and also free solutions out there for you!

:-D

Cheers,
Marco

My questions/statements have zero to do with it being beta or not. It has to do with decisions and directions the product is going and just general questions. The op mentions what is new features and versions and I am simply providing feedback on those.

1) Yes, in 3.2, we have a choice of java or spice (both poor options for complete cross system compatibility), but as mentioned, spice is going to eventually replace java. Java has had a very poor security history the past few years and its blocked on many networks from being installed. So while you might think it works great on all of those operating systems, thats only true if its even installed in the first place. It also doesn't work with every browser (like Chrome that has a large market share). NoVNC has pretty much zero requirements besides a modern browser and works with even more devices than both. Any solution that requires a dedicated client or third party software installed just to access a simple console for troubleshooting or installs is a bad choice. Just my opinion of course, but the opinion is also shared by projects and products much larger than this one.

2) No biggie on the kernel. I probably didnt need to bring it up. I just dont like custom kernels as they mean I cant use ksplice and security releases are delayed. So i was more stating that if openvz support isnt in that kernel at the time, why even have it when the vanilla kernel could be used instead.

3) Thats great news about the ceph versioning. Glad to hear it.
 

tom

Proxmox Staff Member
Staff member
Aug 29, 2006
15,520
906
163
My questions/statements have zero to do with it being beta or not. It has to do with decisions and directions the product is going and just general questions. The op mentions what is new features and versions and I am simply providing feedback on those.

1) Yes, in 3.2, we have a choice of java or spice (both poor options for complete cross system compatibility), but as mentioned, spice is going to eventually replace java. Java has had a very poor security history the past few years and its blocked on many networks from being installed. So while you might think it works great on all of those operating systems, thats only true if its even installed in the first place. It also doesn't work with every browser (like Chrome that has a large market share). NoVNC has pretty much zero requirements besides a modern browser and works with even more devices than both. Any solution that requires a dedicated client or third party software installed just to access a simple console for troubleshooting or installs is a bad choice. Just my opinion of course, but the opinion is also shared by projects and products much larger than this one.

I am sorry but novnc is not such a great winner in our tests. we tested novnc serveral times and it always fails for our needs. instead, spice have great features like copy/paste support, resizing and you can even use local USB devices. Almost all KVM based solutions focus on spice.

2) No biggie on the kernel. I probably didnt need to bring it up. I just dont like custom kernels as they mean I cant use ksplice and security releases are delayed. So i was more stating that if openvz support isnt in that kernel at the time, why even have it when the vanilla kernel could be used instead.

RHEL6 is currently the ONLY kernel with openVZ. AFAIK, in future RHEL7 will be only newer kernel with OpenVZ. so as long as you want OpenVZ, there is just no other choice here - seems you missed that part.
 

MACscr

Member
Mar 19, 2013
95
3
8
I am sorry but novnc is not such a great winner in our tests. we tested novnc serveral times and it always fails for our needs. instead, spice have great features like copy/paste support, resizing and you can even use local USB devices. Almost all KVM based solutions focus on spice.



RHEL6 is currently the ONLY kernel with openVZ. AFAIK, in future RHEL7 will be only newer kernel with OpenVZ. so as long as you want OpenVZ, there is just no other choice here - seems you missed that part.

I am not sure about the local usb, but novnc definitely supports copy and paste and resizing.

I didnt miss that part at all. I have zero interest in openvz as I only use kvm. You had mentioned that the kernel you were providing didnt have openvz support at that time, so my point was then, why have it at all? Thats all I was trying to say on the subject.
 

tom

Proxmox Staff Member
Staff member
Aug 29, 2006
15,520
906
163
I completely understand. What kind of customizations does it have over the vanilla version of that same number?

There is no short answer for this and a bit outside of the topic of this thread. Search the forum about Proxmox VE kernels and if something is unclear, please open a new thread.

also check http://pve.proxmox.com/wiki/Proxmox_VE_Kernel and the history of this wiki page.
 

emanuelebruno

Active Member
May 1, 2012
129
3
38
Catania
emanuelebruno.it
We uploaded a lot of packages for beta testing, containing new features, small improvements and countless bug fixes.[...]
  • New 3.10 Kernel (based on RHEL7, for now without OpenVZ support)

According to the OpenVZ Survey, only 39% use KVM only... I really hope that Proxmox will decide to *NOT* remove OPENVZ component ... would be the end!
 

emanuelebruno

Active Member
May 1, 2012
129
3
38
Catania
emanuelebruno.it
I'm always stunned by the amount of people who can't understand the statement "for now"... :confused:

Marco

Here in Italy when somebody speaks about "for now", in reality means "forever"... isn't it Marco? Also, it is not the first time that Proxmox staff speaks about to remove OpenVZ support (this was the reason for the survey that I was speaking about)
 
Last edited:

Patschi

Member
Jul 23, 2013
51
0
6
26
Austria
pkern.at
I also prefer OpenVZ, because about 98% of my vms are just Linux machines. OpenVZ is easier to manage, saves memory and CPU and is faster then full-virtualized machines (KVM), so I don't think that Proxmox will drop OpenVZ support. But that's not the topic here.

The reason why OpenVZ isn't available with the Proxmox Linux 3.10 test-kernel is, because OpenVZ isn't available for Linux 3.10 yet. The OpenVZ team is already working on a version for 3.10, but may take at least some more months.
 

m.ardito

Active Member
Feb 17, 2010
1,473
15
38
Torino, Italy
Here in Italy when somebody speaks about "for now", in reality means "forever"... isn't it Marco? Also, it is not the first time that Proxmox staff speaks about to remove OpenVZ support (this was the reason for the survey that I was speaking about)

since I've read why it is "for now", I can't imagine how they could think to remove openvz: it's clearly matter of rh kernel & openvz integration, not ready at the moment.
I don't remember any statement like "remove OpenVZ support": I remember use lxc instead of openvz (even dockers was suggested by someone) but I've never read anything like "we're going to remove containers and keep only kvm".
It's one of the strongest point of pve, btw.

marco
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!