Virtuozzo OnApp 6.0 Patch 7 (6.0.0-196)
6 June 2019
This is an update for the Control Panel server and Static compute resources. This document provides information on improvements and fixes implemented as a part of the 6.0.0-196 update, as well as the upgrade instructions for:
Virtuozzo OnApp 6.0.0-196 provides a resolution to a vulnerability which could be exploited in some Virtuozzo OnApp transactions and under certain conditions allow an attacker to run arbitrary commands with root privileges on other Xen or KVM virtual servers within the same Virtuozzo OnApp cloud.
Improvements
The following improvements were implemented in the scope of the 6.0.0-196 update.
| Key | Release Notes |
|---|---|
| CORE-13611 | You can set Price Space Used and Free Space Used for R1Soft backup resource zones in a bucket. |
| CORE-13781 | You can edit CPU and RAM on vCenter virtual servers without a reboot. |
| CORE-13869 | You can create weekly and yearly auto backup presents for backup resources based on Veeam. |
| CORE-14093 CORE-14255 | Accelerator is now a separate feature at the Configure CDN Features page of your Virtuozzo OnApp license. Implemented the new ApplicationState feature set for Aflexi to separate CDN and Accelerator features. |
| CORE-14246 | You can access Accelerators from the Appliances section instead of the CDN section on your Control Panel. |
| CORE-14300 | Now you can view available IP addresses and IP ranges in the drop-down list at the IP Settings tab of the vCD Edge Gateway wizard. |
| INSTALLER-427 | Updated a version of RabbitMQ to 3.7.14 for new installations of 3xHA Control Panel servers. |
Fixes
The following issues were fixed in the scope of the 6.0.0-196 update.
| Key | Release Notes | Affected Versions |
|---|---|---|
vCloud Director | ||
| CORE-13560 | Updated an info box at the Network Interfaces page for vCD virtual servers, saying that changes to NIC configuration is disabled for servers with powered-on snapshots. | 6.0 |
| CORE-13647 | You could initiate the Convert vApp transaction for a vApp that contained a virtual server with inserted media. | 6.0.0-98 |
| CORE-14121 | When users created a vCD Edge Gateway, they could exceed the IP Address limit set for a network zone in a bucket. | 6.0.0-122 |
| CORE-14140 | Sometimes you needed to reload the vApp page to update logs that were not updated automatically. | 6.0.0-152 |
| CORE-14195 | Reimplemented the logic of destroying an Edge Gateway network interface using the components/onapp-networking/app/services/networking/network_interfaces/destroy.rb file. | 6.0.0-159 |
| CORE-14196 | Added the Total Amount box to display a price for all Resource Pools and Storage Policy Usage for a given period of time at the Resource Pool Statistics page. | 6.0.0-159 |
| CORE-14218 | After a vApp was created, its status was stuck on Pending until the page was reloaded. | 6.0.0-159 |
| CORE-14231 | After you edited prices for CPU and RAM quotas for a PAYG resource pool in a bucket, the billing statistics was gathered based on the old prices. | 6.0.0-159 |
| CORE-14251 | If a virtual server was moved to another vApp on the vCD side, the changes were not synchronized to OnApp. | 6.0 |
vCenter | ||
| CORE-13878 | When you logged in with an encrypted password to a vCenter virtual server, the password was invalid and a default template password could be used instead. | 6.0.0-122 |
| CORE-14062 | When you deployed a Windows virtual server from a vCenter template, a hostname was not configured to the one you specified. | 6.0 |
| CORE-14132 | It wasn't possible to assign to a network interface an IP address that was previously removed from a vCenter virtual server. | 6.0.0-152 |
| CORE-14150 | You could not create a virtual server from an OVA template if a destination vCenter compute zone was not attached to a backup server. | 6.0.0-152 |
| CORE-14220 | After deploying a Windows virtual server from OVA on vCenter UI, a hostname was displayed incorrectly as hostname .localdomain on Virtuozzo OnApp CP. | 6.0 |
| CORE-14267 | Reseting root password for a Windows virtual server imported from vCenter failed with an error. | 6.0 |
| CORE-14445 | When adding a vCenter resource, a system error occurred if PvLANs were used. | 6.0 |
| CORE-14529 | After you configured auto-import rules for vCenter from CP and then created a virtual server on vCenter UI, the virtual server was duplicated on CP. | 6.0.0-98 |
Virtuozzo OnApp | ||
| CORE-12874 | It was not possible to add the Virtuozzo OnApp CDN Appliance template to a template store. | 6.0 |
| CORE-13650 | Disabled sorting by CPU Used/Available/MHz and RAM Total/Free at the All Compute Resources page on Control Panel. | 6.0 |
| CORE-13725 | An undefined method error occurred while creating a Windows virtual server from an OVA template where a virtual disk had two partitions. | 6.0.0-98 |
| CORE-13727 | The Edit disk button was available for users who didn't have the corresponding permissions enabled. | 5.5-6.0 |
| CORE-13758 | When you sorted the bucket users by Full Name, User Name, or User Group, a list of all users appeared instead of the users associated with the bucket. | 6.0 |
| CORE-14028 | Searching for some specific phrases at the Locales page didn't return any results that were supposed to be found. | 6.0 |
| CORE-14155 | CDN SSL certificates that had been removed from Aflexi were not removed from the Virtuozzo OnApp database. | 6.0.0-152 |
| CORE-14182 | After you cloned a bucket, prices for Template Store were not displayed in Rate Card of a cloned bucket. | 6.0 |
| CORE-14183 | The deactivation of logical volumes, such as virtual server disks that were activated on two compute resources simultaneously or activated on the wrong compute resource, failed. | 6.0 |
| CORE-14186 | When you enabled the Show compute resources on virtual server creation permission but disabled Show compute zones on virtual server creation , both resources and zones were available for selection in the virtual server wizard. | 6.0.0-159 |
| CORE-14201 | The number of CDN SSL certificates was not updated on the left bar on the Control Panel after certificates were deleted from Aflexi. | 6.0 |
| CORE-14206 | The number of CDN resources was not updated on the left bar on the Control Panel after resources were deleted from Aflexi. | 6.0 |
| CORE-14233 | The value of a virtual server CPU Priority on a CentOS 6 Xen compute resource did not correspond to the value set while creating the virtual server. | 6.0 |
| CORE-14240 | After you clicked Pause All CDN Accelerators, the acceleration was paused for all destination virtual servers but the rerouting rules were not removed from production_aflexi.log. | 6.0 |
| CORE-14249 | After removing a location from CDN Dashboard, the CDN Sync Runner service was down on the Virtuozzo OnApp side. | 6.0 |
| CORE-14339 | Taking a backup failed with an error Fatal: Could not find attached scsi disk because the transaction failed before a virtual disk was distributes by iSCSI. | 6.0.0-159 |
| CORE-14343 | After you reset XML config to default on a stopped virtual server, the virtual server was reset with rebooting. | 6.0 |
| CORE-14351 | CDN cloud locations that had been removed from Dashboard were not removed from Control Panel. | 5.0-6.0 |
| CORE-14423 | It was not possible to set a CPU Quota for a compute resource. | 6.0 |
| CORE-14444 | A user with a default permissions set and the Create and manage user OVAs (a user can view/create/edit/delete OVAs created by any user) permission enabled could not create and manage OVAs. | 6.0.0-159 |
| CORE-14476 | After you opened a bucket, added a resource and immediately closed the box without saving the changes, you could no longer run some actions, such as logging out from Control Panel. | 6.0 |
| CORE-14510 | After you migrated a virtual disk to a new data store, the disk was billed under the source data store zone's bucket instead of the destination data store zone. | 6.0.0-159 |
| CORE-14516 | After you created a virtual server backup and then changed an owner of the virtual server, the previous owner was billed for the backups instead of the new owner. | 6.0 |
| CORE-14531 | An error occurred when you tried to edit a CPU Quota that was set to any value except for unlimited for a compute resource. | 6.0.0-159 |
| INSTALLER-429 | Now STDERR is skipped while displaying volume group information within the vgdisplay.sh script. | 5.5-6.0 |
Patch Installation
The instructions below are relevant if you already run Virtuozzo OnApp 6.0.
Upgrade Control Panel Server
To apply the patch to a Control Panel server based on Virtuozzo OnApp 6.0:
Upgrade the Virtuozzo OnApp Control Panel installer package:
1# yum update onapp-cp-installRun the Control Panel installer:
1# /onapp/onapp-cp-install/onapp-cp-install.sh --quick-update='monit rabbitmq'
Upgrade Static Compute Resources
Make sure your compute resource is visible and online on the Control Panel. Then you can proceed to the following procedure and run the steps, depending on a version from which you upgrade.
If you upgrade from Virtuozzo OnApp =< 6.0.0-62, run the following steps (1-3).
If you have CentOS 7 Xen resources, remove the centos-release-xen-46 package:
1# rpm -e centos-release-xen-46Upgrade the Virtuozzo OnApp compute resource installer package:
1# yum update onapp-hv-installRun Static compute resource installer:
For KVM compute resources
1# /onapp/onapp-hv-install/onapp-hv-kvm-install.shFor Xen compute resources
1# /onapp/onapp-hv-install/onapp-hv-xen-install.shPlease confirm the download of Recovery Templates and other ISOs/images when you are prompted.
Upgrade Static Backup Server
If you upgrade from Virtuozzo OnApp =< 6.0.0-62, follow the next procedure to upgrade static backup server.
Upgrade the Virtuozzo OnApp backup server installer package:
1# yum update onapp-bk-installUpdate tar on CentOS 6 backup servers:
1# yum update tarRun the installer:
1# sh /onapp/onapp-bk-install/onapp-bk-install.sh
