From users-return-31890-archive-asf-public=cust-asf.ponee.io@cloudstack.apache.org Fri Dec 14 14:09:32 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 8E9B3180645 for ; Fri, 14 Dec 2018 14:09:31 +0100 (CET) Received: (qmail 36016 invoked by uid 500); 14 Dec 2018 13:09:30 -0000 Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cloudstack.apache.org Delivered-To: mailing list users@cloudstack.apache.org Received: (qmail 36003 invoked by uid 99); 14 Dec 2018 13:09:29 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 14 Dec 2018 13:09:29 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 5BA5118060F for ; Fri, 14 Dec 2018 13:09:29 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.797 X-Spam-Level: ** X-Spam-Status: No, score=2.797 tagged_above=-999 required=6.31 tests=[DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_REPLY=1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id SQ7R8xpfdZuR for ; Fri, 14 Dec 2018 13:09:25 +0000 (UTC) Received: from mail-ed1-f53.google.com (mail-ed1-f53.google.com [209.85.208.53]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 4D0275F32F for ; Fri, 14 Dec 2018 13:09:25 +0000 (UTC) Received: by mail-ed1-f53.google.com with SMTP id h15so4906266edb.4 for ; Fri, 14 Dec 2018 05:09:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=kCoc4UoSwvmtwuwpEF3yyvuklq3gnu5s2W6OsZv4okg=; b=nhzeTw1lRsmYWcO5HT5vtGgIWdoRQb/m7PImtczZSvRfpVpH1ANV53ZlrqimaJ5NCs JiVTqbs0/Dzt2vv+iy1BdmdAxa+0XAGjlk9QdFmLcQn+NMEkWr1J7DA+prqXxYvAiDi6 bewVUvKKOFmVB54QZEmZOx9jg973qU/jkhnBaKQR+SMaY+p/K5n6ZQS1IJEExRBCdXsY 1E5be9ShAIE2UO2uhOLyp08eQka3ZLzvPho5ZV9yx4JnE/L/2/XrrMcfN8K3m2fONVY7 a5+gtx3jiEWzyPdDbGmMoRUJfNiumy9T5zZJRSpRdAIDqYknnFd7P9NWzUVIEu0+eMG4 FhCA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=kCoc4UoSwvmtwuwpEF3yyvuklq3gnu5s2W6OsZv4okg=; b=atBuczr5kqxdycp94fVHGgxwIRs+cNhn6NbbtqWEVZ0HLYwc+8mlUSz4QL0z+u/2HY NBfS1McD5Mh8kw2IdMacwdAwNOFvsowbOGdVSQ4o5K9riPSykn2V3CBkzi9VutuafimH aN2kYlualIbDfGC6DYMUfiFNUdOyiZ5vSWJHdYNZsuiBRbiVgT2Zp9TBbbyIkLyDkC0I uA2X/la+Fg38m2sVMrxwEgOftoCE2ICzcd8P7oKbHU7iXV/ueR/Tzme96GVjRFbWJzY/ nNCaUEW6xNrF84H7BB2ddndH/obwHp/K1i/x5+ydv5BV7tPed6elNWejNK0KK9GCIb6c +XBQ== X-Gm-Message-State: AA+aEWZAG89ZnDtrPbaMTADBXQtYS/d2ZJbtmZt3Elvj/N0F3iIQ7dL0 jY2F5ovnJMzv6nQqEKt+8OgKw0d5V3CkQgkhdPoIJg== X-Google-Smtp-Source: AFSGD/WFaIYeMrJlj779uqy9Pn+LnYB+qMTkRXHY56xA3TGkO0164xmRjllMDLZ6+MB2yyHifTaY6TUL7Cn/gzVuACc= X-Received: by 2002:aa7:d0c5:: with SMTP id u5mr2932409edo.158.1544792963894; Fri, 14 Dec 2018 05:09:23 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Andrija Panic Date: Fri, 14 Dec 2018 14:09:08 +0100 Message-ID: Subject: Re: Upgrading OS on hypervisors To: users Content-Type: multipart/alternative; boundary="000000000000dd4fc7057cfb23d7" --000000000000dd4fc7057cfb23d7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable No magic as Ivan said, you may want to check dynamic auto-convergence in case of busy VMs (high RAM change ram i.e. busy MSSQL servers and such) - qemu 2.5 needed for this, can be consumed from 4.11 and onwards - but might not be relevant in your case. Some very short interruption IS done - i.e. source VM on source host is paused - and last few bits/megabits of RAM are synced to new VM on new host - then source destination VM is killed/destroyed and destination VM (which was paused all time...) will be un-paused/resumed - this should have be less than a second or so... No magic to make it happen without a brief interruption to networking - the faster management network the better (better throughput, so less pause period for VM...) Cheers On Fri, 14 Dec 2018 at 07:45, Rakesh v wrote: > Hello Ivan > > We upgrade only when critical security patch is released like meltdown an= d > L1TF else we don't do upgrades for every single kernel release > > Sent from my iPhone > > > On 13-Dec-2018, at 11:05 PM, Ivan Kudryavtsev > wrote: > > > > Rakesh, > > No magic exists. Migrate forth, reboot, and migrate back. What I'm real= ly > > wondering about is why you upgrade every time, Ubuntu releases a new > > kernel... There are a pretty small amount of fixes related to KVM and > hosts > > are located in the private networks, they are single-tenant. Maybe you > just > > have to change to policy for that? > > > > =D1=87=D1=82, 13 =D0=B4=D0=B5=D0=BA. 2018 =D0=B3. =D0=B2 16:54, Rakesh = v : > > > >> Hello Folks > >> > >> I have a question regarding upgrading OS on hypervisor. We have few > >> platforms with around 200 hypervisors in each platforms. Every time a > new > >> Ubuntu kernel comes in with new security patch like L1TF fix or other = , > we > >> need to upgrade kernel on all hypervisors. Before rebooting hypervisor > we > >> enable maintenance on it so that all vm's are migrated away. During th= is > >> maintenance we always see some Network interruptions because of live > >> migrations. > >> > >> How are you guys handling such situations and how are doing the OS > >> upgrades? If you have some suggestions or using some automation tools > then > >> please let know > >> > >> I want to reduce time taken to upgrade all hypervisors without any > impact > >> to Networks or VM's > >> > >> Sent from my iPhone > > > > > > > > -- > > With best regards, Ivan Kudryavtsev > > Bitworks LLC > > Cell RU: +7-923-414-1515 > > Cell USA: +1-201-257-1512 > > WWW: http://bitworks.software/ > --=20 Andrija Pani=C4=87 --000000000000dd4fc7057cfb23d7--