Commit Graph

4135 Commits

Author SHA1 Message Date
Thomas Lamprecht
b80838a2fc bump version to 5.4-15
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-05-12 17:42:57 +02:00
Thomas Lamprecht
6763226345 followup log messages nits
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-05-12 17:40:20 +02:00
Thomas Lamprecht
797ba64009 pve5to6: refactor out apt-cache package installed checks
for potential reuse in the future and makes the real check easier to
read

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-05-12 15:43:18 +02:00
Dominik Csapak
a08419739e pve5to6: add check for ovmf vms with potentially broken efi disk
we wrongly mapped some efidisks into the vm, and fixed it in pve6
this potentially needs manual intervention, so warn the user about
which vms might be affected

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
2020-05-12 14:18:34 +02:00
Dominik Csapak
aa517822d6 pve5to6: add check for stock debian kernel package
on current debian buster, stock kernel images recommend
firmware-linux-free which conflict with our pve-firmware package
which leads to apt wanting to remove promxox-ve

check for the meta package in the update check script

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
2020-05-12 14:18:34 +02:00
Dominik Csapak
74f2df2f5f ui: fix missing htmlEncodes
username can include some special characters, so we have
to escape them

backport from pve6

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
2020-05-12 14:18:34 +02:00
Thomas Lamprecht
e5bdba1d9c bump version to 5.4-14
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-04-21 18:20:02 +02:00
Thomas Lamprecht
22e1b9473f use https links to our sites
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 2dc23b7e2ea493a4f79f7cdca7c7b635eb8c50e0)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-04-21 18:13:56 +02:00
Thomas Lamprecht
ff4200481c add PVE 5.4 End-of-Life notice
since pve 5.4 goes out of support in July, add a notice at the top with
a link to the faq, where the EOL dates are and also the upgrade
process is described and linked in short.

Originally-by: Dominik Csapak <d.csapak@proxmox.com>
(cherry picked from commit cc9b37b811)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-04-21 12:49:42 +02:00
Thomas Lamprecht
4a326edd52 bump version to 5.4-13
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-26 10:15:08 +02:00
Thomas Lamprecht
bbd6506b7a fixup building pvecfg, ensure that the package release is available
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-26 10:14:38 +02:00
Thomas Lamprecht
8c030a5df4 bump version to 5.4-12
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-25 10:11:55 +02:00
Thomas Lamprecht
0ac0c01b14 buildsys: use dpkg-dev makefile helpers for pkg info
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit bcef9bde68a920a4d204beb8ec1d5f334f7fbb78)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-25 10:11:55 +02:00
Thomas Lamprecht
9462dbb422 remove unused ext-pve.css
not used since commit 5783c7f4dd from
2016...

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 194745b924d8fbda70a3bccdd9724defb7a2633d)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-25 09:30:07 +02:00
Thomas Lamprecht
12511b123d 5to6: cleanup cert check and make more general
If we need to add other types or increases the min size this makes it
easier as it's just a schematic definition.

Also just do a pass/fail on each cert, so drop the last "summary
pass".

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 6c7e4ab4e24592a8dfa5dac3f5047064e17254f2)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-25 09:29:56 +02:00
Alwin Antreich
70effe2709 pve5to6: cert: check certificates key size
Debian Buster raised the default security level (1 -> 2) for TLS
connections.

This moves from the 80 bit security level to the 112 bit security level
and will require 2048 bit or larger RSA and DHE keys, 224 bit or larger
ECC keys, and SHA-2.

Signed-off-by: Alwin Antreich <a.antreich@proxmox.com>
(cherry picked from commit 501f8505210553093243db6d279f936498e76124)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-25 09:29:52 +02:00
Alwin Antreich
c6966f357b pvenode: add public key size & type to cert info
Signed-off-by: Alwin Antreich <a.antreich@proxmox.com>
(cherry picked from commit ee3fd393c4721b6c68d7adb47bb498976235d82f)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-25 09:29:48 +02:00
Alwin Antreich
3103cd9a41 gui: cert: add public key type & size to certs view
by default the fields are hidden

Signed-off-by: Alwin Antreich <a.antreich@proxmox.com>
(cherry picked from commit 1007cf29d984d74bd7893bc3a4e6fe2b26f50e4e)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-25 09:29:43 +02:00
Thomas Lamprecht
70b8b9f55d bump version to 5.4-11
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-09 09:55:31 +02:00
Dominik Csapak
6c6a16a1ab gui: show 0 for max_relocate/restart correctly
0 || '1' will always return '1'

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
(cherry picked from commit 92b89add8d09efc864fbd03fc9aab6a1d63c5736)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-08 19:22:52 +02:00
Dominik Csapak
ec4cd7ce25 fix #2267: delete address(6) and netmas(6) with cidr(6)
otherwise a user cannot delete an ip from an interface

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
(cherry picked from commit b350268a1b59ed6513d5ad7b05bee3f55ca5afab)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-08 19:20:39 +02:00
Fabian Grünbichler
e0505600dd 5to6: make corosync totem checks more verbose
to avoid just printing the subheader with no results

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit c4bc94bb7b019e3c5a4518eda55883bb989146c5)
2019-07-08 18:27:23 +02:00
Fabian Grünbichler
77f8b8414f 5to6: add more corosync subheaders
to improve readability

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit 5684da54dc15fb2a5bb26fdef95db67cea836a21)
2019-07-08 18:27:23 +02:00
Fabian Grünbichler
a6524bbec2 5to6: fail if a corosync node has neither ring0 nor ring1 defined
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit e6b956df7bb1522e0cf47e2afb3dbb609a88b750)
2019-07-08 18:27:23 +02:00
Fabian Grünbichler
b3a6a2aebe 5to6: reword/-structure corosync message
and fix a typo as well

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit 388a505104eae0d8c6389b247aba7eca713b03ba)
2019-07-08 18:27:23 +02:00
Fabian Grünbichler
b78378f3cc 5to6: attempt to resolve corosync rings
and only fail if unable to

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

(backported from commit 669211d8bbb0857275669068fcbf62560782b888)

use local copy of resolve_hostname_like_corosync instead of
pve-cluster's.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2019-07-08 18:27:23 +02:00
Fabian Grünbichler
e9ad9ab43f 5to6: add Corosync resolve helper
copied from PVE 6.x's pve-cluster.

since Corosync 2.x has a different default value for ip_version, we
don't want to backport this for general usage in PVE::Corosync. the
check here needs the default of Corosync 3.x, since that is what we
upgrade to.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2019-07-08 18:27:23 +02:00
Thomas Lamprecht
a8b2fd71bd bump version to 5.4-10
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:35:49 +02:00
Thomas Lamprecht
64ef936327 5to6: only tell to solve problems if fails are present
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit be1072fb3bee0c15fbe67637289ab39adf64b6d7)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:32:44 +02:00
Thomas Lamprecht
e35e351f12 5to6: improve final note on errors and/or warning a bit
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit a14a5aaf678d9f5ba6235616b091684a9042cf4a)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:31:08 +02:00
Thomas Lamprecht
0e25ab8057 5to6: fiy typo: s/detailled/detailed/
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 71f6edacdf6f5694f10a196626b950c66665d121)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:23:42 +02:00
Thomas Lamprecht
e5196e8489 5to6: check common services pveproxy pvedaemon pvestatd
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 0192b0a2c2d5e2debb8e0a3e9279e73399e288ec)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:22:13 +02:00
Thomas Lamprecht
57d9636122 5to6: add log_systemd_unit_state and use for pve-cluster and corosync
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit fa1c414e265c1fe47673c069a114cbc9199d8347)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:22:13 +02:00
Thomas Lamprecht
b60916cc2c 5to6: import run_command
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit a82c200a9e11033f0f696a0af6bb5e6d522ca883)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:22:13 +02:00
Thomas Lamprecht
084625c29f 5to6: clarify "cluster quorate" message a bit
As this is the state from the pmxcfs

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 88d757d0c02fe62f57432a133e222a0fbd057e4e)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:22:13 +02:00
Thomas Lamprecht
a6fc492a8b 5to6: fixup: really set $total_votes to 0 if not defined
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 176116b22ffae4993f5b3e25977ea08c6aca4dc9)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:22:13 +02:00
Fabian Grünbichler
02e79accf9 5to6: drop detailed quorumtool output
since we already print most of that anyway, and it is rather long.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit 3456f2fc9d3094af3a0c7bdbe7a55abfd16ff380)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:22:13 +02:00
Fabian Grünbichler
fbcc77375f 5to6: more quorum / vote checking
handle expected votes set to non-standard value, and try to adjust
calculations for qdevice setups.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit f6c6aa2b046b6b580855bab633a7ff1f94e3028a)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 15:22:13 +02:00
Fabian Grünbichler
7a6994bc37 5to6: quote some Ceph flags/options
to improve readability

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit 8ac5d4a50064f8d4c0e3abd6023fd2dee46331d3)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 11:40:28 +02:00
Fabian Grünbichler
a500f71b44 5to6: check for ceph global keyring config
which causes issues after upgrading to Nautilus.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit 974a1b58548eb6f63541b311166c81a46fb4dc35)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 11:40:28 +02:00
Thomas Lamprecht
6cc9ab6128 5to6: followup: also detect ceph conf keys separated with -
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 09250673d60b34febd220944c2a904758cf91618)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 11:27:54 +02:00
Thomas Lamprecht
90ec2ddb9e 5to6: ceph mon host check: switch config check from defined to hash values exist
we can get here if a empty (or one with just comments) ceph.conf
exists

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 153d6912879b0053af54a9218e10aa57ed43fc96)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 11:27:54 +02:00
Thomas Lamprecht
8ade3b35fa 5to6: ceph global mon host check: also detect mon-host
and adapt message a bit

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit f696b0c355d0e9400da7f10530a957ede2b4e433)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 11:27:54 +02:00
Dominik Csapak
c0d772c434 pve5to6: check ipv6/ipv4 settings in ceph.conf
having ipv6 enabled while not disabling ipv4 prevents
nautilus osds to start if no ipv4 network is given (because they
are trying to bind to both ip families and die if one of them
is not found)

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
(cherry picked from commit 9e98f1fecf1c09811239b2c6183107a00b149de0)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 11:27:54 +02:00
Dominik Csapak
42bbe3edd1 pve5to6: check ceph config for mon_host line
this already works on luminous, so it does not harm to add it already,
and is recommended when both msgr1 and msgr2 is activated in nautilus

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
(cherry picked from commit 4731f493c3484d5ea95dee7978678779189ef779)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 11:27:54 +02:00
Fabian Grünbichler
a75241fb90 5to6: invert check for noout for nautilus
mainly because it looks strange to get a warning after the upgrade is
finished and noout has been removed again

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit 600a106ba0c47150c29f87561d480d4b89085d41)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 09:41:30 +02:00
Thomas Lamprecht
33866e3cdc 5to6: followup: still include nodename in IP check
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit eb7dae8bba7f57abdf16d3843ce6716786d04bf8)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 09:41:30 +02:00
Fabian Grünbichler
f94e33c0e1 5to6: reuse $nodename
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit 473a71d246492941b17d003decc8d2c1e7d5b01a)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 09:41:30 +02:00
Fabian Grünbichler
329cf22a70 5to6: improve some log messages
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
(cherry picked from commit 1760de9011fdfbc3f734c3039125d46176586545)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 09:41:30 +02:00
Thomas Lamprecht
92c64229a9 5to6: followup sheepdog message
do not suggest that we ever supported it as first class storage, it
was always just a experimental support and upstream is
EOL/unmaintained now.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 95c3dc246008b64cdc66e77f08a4862f531e7f0a)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-07-04 09:41:30 +02:00