Displaying 20 results from an estimated 1000 matches similar to: "How to migrate over TCP without certs"
2012 Sep 29
2
High availability for guests
Hello,
What is the recommended way to offer high availability to Guests?
For example, let host1, host2 and host3 be libvirt and KVM/Qemu enabled.
If I start a guest in host1, how can I guarantee that it will stay
online if host1 goes down?
GlusterFS, for example, would take care of storage; but what about CPU
and RAM? How can this be accomplished?
Thank you for any feedback or comment in
2012 Sep 20
2
How to pass info to a guest?
Hello,
I would love to be able to pass information to a Guest. For example:
- I'd love to sync the root password with the VNC/Spice one
- I'd like to be able to inject stuff to /root/.ssh/authorized_keys
All of these at boot time.
How would I do it? I'd make these files/strings available in the BIOS
or something; maybe some kind of storage local to the host and guest
as well. Then,
2012 Jul 09
0
Metadata accessible within guests
Hello,
I'd like to know if there is any way to make metadata; for example,
the public part of an SSH, accessible within a Guest?
This would be very useful in order to provide access to Guests in an
automated way.
For example, let's suppose I have an implementation that gives a user
the power to create Guests. The user has stored his public SSH key in
my implementation.
After the user
2013 Jul 13
0
★ Libvirt Users, Rene Bon Ciric te ha dejado un mensaje
Rene Bon Ciric te ha dejado un mensaje
Este mensaje es personal. Sólo tú y su remitente tenéis acceso a él y te recordamos que lo puedes eliminar en cualquier momento. Si quieres responder puedes hacerlo desde el chat. Para leer tu mensaje, haz clic en el siguiente enlace:
http://us1.badoo.com/renich/in/l-47pIIAagA/?lang_id=7&g=57&m=21&mid=51e14031000000000007000001f1ad310252eb3f00e9
2010 Jul 15
3
Bug#589176: xen-utils-common: replace gawk with awk in scripts and Depends
Package: xen-utils-common
Version: 4.0.0-1
Severity: wishlist
Tags: patch
I am not a gawk/mawk expert, but I looked carefully at the few uses of
gawk that I saw in /etc/xen/scripts/vtpm-common.sh and network-bridge,
and I did not see anything that was gawk-specific. It would be nice if
they could be changed to awk and the dependency on gawk removed.
base-files is Essential: yes and it
2006 May 15
2
Slightly OT: SSL certs - best practice?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi all,
This question may be slightly OT for this list, but it does concern
securing services on my FreeBSD servers :-)
At the moment I have some existing (self-signed) SSL certs for Dovecot,
Exim and Apache. It's mostly only me that uses them for now, but I'm
planning on expanding that, so want to try and do things "right".
My
2013 Jan 04
2
Bug#697417: xen-utils-4.1: pygrub is unable to parse default Debian grub.cfg
Package: xen-utils-4.1
Version: 4.1.3-7
Severity: normal
The grub.cfg created by a default Debian installation uses many
configuration statements that pygrub does not recognize, and pygrub is
unable to find any kernel to load.
...Marvin
-- System Information:
Debian Release: 7.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'stable-updates'), (500,
2013 Jan 04
2
Bug#697412: xen-utils-4.1: pygrub does not recognize the include statement in extlinux.conf
Package: xen-utils-4.1
Version: 4.1.3-7
Severity: normal
pygrub does not recognize the include statement in extlinux.conf. The
default Debian installation of extlinux creates a stub extlinux.conf
which includes linux.cfg, where all the linux image entries are. This
means that even if bugs 697407 and 697409 are fixed, pygrub still can't
find the right kernel on a default Debian installation
2015 Dec 04
2
virsh athentification failure
Hi,
I wrote a C program running in a KVM host.
Part of it adds a Unix Channel device in all Guests in order to have a dialog from Host to Guest.
As long as my host wasn't part of an Ovirt cluster , all was running fine.
I added my host in a ovirt cluster , and then , when running the script creating the channel device ( by using "virsh attach-device --persistent -live ....."
2015 Mar 03
2
Ignorant question on SSL certs
I'm getting endless complaints about my dovecot cert,
/etc/pki/dovecot/certs/dovecot.pem
which I created years ago following the dovecot instructions.
Do I really have to use a separate cert and key for dovecot?
Can I not use the "standard" cert in /etc/pki/tls/certs (and key)
from CACert.org ?
--
Timothy Murphy
gayleard /at/ eircom.net
School of Mathematics, Trinity College,
2013 Jan 04
1
Bug#697407: xen-utils-4.1: pygrub doesn't find extlinux.conf in default Debian location
Package: xen-utils-4.1
Version: 4.1.3-7
Severity: normal
pygrub looks for extlinux config files "/boot/isolinux/isolinux.cfg" and
"/boot/extlinux.conf", but the default Debian installation uses the
config file "/boot/extlinux/extlinux.conf". (See
/usr/lib/xen-4.1/bin/pygrub lines 405-407.)
...Marvin
-- System Information:
Debian Release: 7.0
APT prefers testing
2013 Jan 04
1
Bug#697409: xen-utils-4.1: pygrub does not correctly distinguish between "disk with partitions" and "partition"
Package: xen-utils-4.1
Version: 4.1.3-7
Severity: normal
The function is_disk_image in /usr/lib/xen-4.1/bin/pygrub at line 45
distinguishes a partitioned disk from a partition by looking for 0xaa55
at offset 0x1fe in the image, but this is the bootsector signature, not
the partition table signature. extlinux and other bootloaders put this
signature there on bootable partitions (which don't
2006 Sep 11
8
fckeditor works, but i cant get my buttons back...
I am going to bet this is a mongrel issue,because this doesn''t happen
under webrick. Anyway, I was able to get fckeditor: http://www.fckeditor.net/
to work under rails: http://www.joshuamcharles.com/xhtml/fckrails.php
i even saw the part about adding "1. Adding a YAML configuration file. For example, create
$(RAILS_ROOT)/config/mongrel_mime.yml with the contents:
xml:
2015 Mar 03
5
Ignorant question on SSL certs
Jason Pyeron wrote:
>> I'm getting endless complaints about my dovecot cert,
>
> Exact message please?
The certificate does not apply to the given host
The certificate is not signed by any trusted certificate authority
>> Do I really have to use a separate cert and key for dovecot?
>> Can I not use the "standard" cert in /etc/pki/tls/certs (and key)
2014 Dec 09
1
Two new CVEs against FLAC
Janne Hyv?rinen wrote:
> In general I'm against patches that error out at the first sign of
> corruption instead of gracefully handling the situation and continuing
> from the next good bytes.
I put the need for secure un-exploitable code at the top of my list
for any code which operates on data from un-trusted sources. Sorry,
that's not negotiable :-).
> I think it would
2007 Mar 29
2
EXT3 fs error on RAID1 device
Hi all.
I have a Dell SC440 running Centos 4.4. It has two 500GB disks in a
RAID1 array using linux software raid (md1 is / and md0 is /boot).
Recently the root file system was remounted read-only for some reason.
The logs don't show anything unusual, presumably the file system was
read-only before anythng was logged. Running dmesg showed this error
repeated many times:
EXT3-fs error (device
2007 May 29
3
business ssl certs for centos www and/or email servers
Although I know the basics about getting and installing web and mail server
ssl certs, I haven't had to "purchase" and do it "myself" for some time. i
always had someone else dealing with it.
I am wondering what you folks on the list are using on your centos web and
mail servers
:-)
Are you making your own or are you purchasing them from godaddy, thawte,
geotrust,
2010 Aug 19
1
[virt-tools-list] Client certificate paths?
On 08/12/2010 10:29 AM, Lars Kellogg-Stedman wrote:
> Hello all,
>
> I'm trying to get virsh (and virt-manager) to talk to a remote libvirt
> instance. I cannot for the life of me figure out how to tell either
> tool where to find client or CA certificates. Do they *really* need
> to access the ones in /etc/pki? In particular, the client seems to
> want to read the
2016 Mar 02
1
Traffic mirroring
Hello,
We're interested in mirroring traffic from a host's guests to another
host's guest. We've been able to achieve that on the same host;
redirecting traffic from the host's bridge interface (VLAN) to one of
the guest's in the same host by using the tc command.
But, when it comes to traffic from one host to the other, we haven't
been able to pull it through.
2012 Mar 08
1
Commercial SSL certs on Asterisk 1.8.10.0 with Polycom phones for encrypted calls using TLS and SRTP?
Hi all,
We're testing TLS and SRTP on Asterisk 1.8.10.0 and have it working
with a commerical (not self-sign) AlphaSSL wildcard (GlobalSign) using
Blink Lite 1.6.2 as per
https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial
We've tested with Bria on an iPhone and that doesn't recognised the
commercial CA (GlobalSign Root CA).
On a Yealink 28P with V60/V61 is registers