GitLab

private key.

The goal is to distribute an experiment wide certificate and private
key. At the moment this is just a self signed x509 certificate and the
accompanying rsa key. In PEM format. The same cert/key will be distributed
across multiple aggregates.

An openssh key pair can be trivially derived from the private key. Or the
public part can be derived from the certificate. A quick google will show
show.

Initially, you will need to run tmcc directly to get them, using the
geni_certificate and geni_key commands.

which affords a bit more flexibility in the link element.

is just like importing images (by using a url instead of a urn), which
makes sense since image backed datasets are just images with a flag set.

Key differences:

1. You cannot snapshot a new version of the dataset on a cluster it has
   been imported to. The snapshot has to be done where the dataset was
   created initially. This is slightly inconvenient and will perhaps
   confuse users, but it is far less confusing that then datasets getting
   out of sync.

2. No image versioning of datasets. We can add that later if we want to.

1. A trivial change in GeniCM; only look at the first two interfaces in the
   link if it references an external node. We already depend on the fact
   that the first two interfaces are in the same order as the two stitch
   points in the stitching section, so as long as we ignore external nodes
   after the second interface, setting up the virtual state for a lan works
   just peachy.

2. libvtop_test: a bit less trivial, mostly cause of vlan tag pre
   reservation when stitching. When we encapsulate a lan we build another
   lans table entry that is linked. There is no need to do this when the
   encapsulation is vlan, and in fact I had changed links a long time ago
   to not do this, for the exact same reason. Lans are little bit more
   complicated but I think I got it.

It used to mean bytes per second.  Now it means bits per second.  To
avoid worrying about client-side versions and updating, we'll keep the
client unmodified and convert statistics on their way through the server.
Who doesn't like ugly hacks?

certificate. Need to decide how to deal with it; the cert parsing code
requires a URN in the certificate, and I don't want to mess with that right
now.

with tag fragmentation which can causes us to not find any free tags
even there are plenty. Add some debugging when we do fail to find
a free tag.

aggregate in the DDC.

Remove obsolete stitching rspecs.

Soon, we will have images with both full images and deltas, for the same
image version. To make this possible, the image path will now be a
directory instead of a file, and all of the versions (ndz,sig,sha1,delta)
files will reside in the directory.

A new config variable IMAGEDIRECTORIES turns this on, there is also a check
for the ImageDiretories feature. This is applied only when a brand new
image is created; a clone version of the image inherits the path it started
with. Yes, you can have a mix of directory based and file based image
descriptors.

When it is time to convert all images over, there is a script called
imagetodir that will go through all image descriptors, create the
directory, move/rename all the files, and update the descriptors.
Ultimately, we will not support file based image paths.

I also added versioning to the image metadata descriptors so that going
forward, old clients can handle a descriptor from a new server.

change had some problems.

picking pieces out, so I added this:

  my $foo = GeniHRN->new("urn:publicid:IDN+emulab.net:testbed+slice+myexp3");

and provides:

  $foo->domain();
  $foo->type();
  $foo->id();
  $foo->urn();

and has a stringify method that returns the urn, so that existing code all
works.

The problem though is the XML::RPC and Frontier libraries provide no hooks
to catch this, and rather then using a stringification, they both convert
all blessed references into structs, and so anyplace that puts a urn into
something to go out on the wire, has to be changed to force to the string.

Damn, how disappointing! So all the code is here but basically disabled
until I find time to go through all the code.

   RELOADSETUP -> RELOADFAILED
   RELOADING -> RELOADFAILED
   RELOADFAILED -> SHUTDOWN

the xl create, so that we can watch for VMs that do not get to TBSETUP in a
reasonable amount of time (which means it hung and we need to restart it).

Might do the same for physical nodes.

clusters.

but there is already a geni_users account.

Snapshot. This is not yet plumbed through for Clone.

rather then "persistent";

Aggressively flush tables, and mysqlcheck on boot.

metric until Mike adds uncompressed data size to the images table.