Piszki Lab | EN

My case study in the clouds…

2025/02/23
by Piotr Pisz
0 comments

The Cloud That Works for You

It may sound a bit colloquial, but clouds are different. Some are huge, heavy with offered services, financially unmanageable. They often obscure the horizon and it is hard to see other clouds behind them. Such clouds are of course Azure, GCP and AWS, they are so large that for most people the concept of a public cloud is identical to their names. And yet behind them there is a number of other, smaller and lighter clouds. Uncomplicated and transparent in terms of price, easy to use and learn how to use. Today, with undisguised pleasure, I would like to tell you about one of them: The Cloud, That Works for You.

Zrzut ekranu 2025-02-23 183655

This Cloud is WebDisk Cloud Computing, it is a real Polish Public Cloud. Why am I writing about it? Well, it is based entirely on Apache CloudStack, which I have been a big fan of for a very long time. CloudStack is a universal cloud orchestrator, independent of the virtualizer. Entirely designed to operate at the interface with the Internet, it has built-in all the necessary services, such as virtual servers, virtual VPS networks, VPN, support for block and file storage, supports many types of virtualizers (KVM, VMware, XCP). The latest release supports object storage s3 and native backups.

WebDisk is a very interesting public cloud that offers unprecedented possibilities. Only here can you, completely legally, import your own VM template to the cloud. What’s more, you can transfer your entire environment to the cloud yourself. Thanks to virtual VPS networks, you won’t even have to change IP adresses in your VMs. This is an ideal solution for any company that would like to migrate, for example, from VMware to KVM and the public cloud. From what I know, WebDisk specialists will help with such a migration. And what if you would like to give up the public cloud? And transfer your resources to your server room (on premise)? No one, no cloud offers the VM export service, only WebDisk Cloud Computing. No additional fees.

Sounds interesting? These are just two examples of a number of interesting services offered by WebDisk Cloud Computing. I will mention just one more advantage, namely that our contact with the cloud usually takes place via CMP, Cloud Management Portal. Such a portal, in addition to standard mechanisms related to virtualization, networks, etc., offers the possibility of full user billing. Billing, invoicing, and so on. In WebDisk, in addition to the CMP portal, there is the possibility, unfortunately only for business customers, of access to the orchestrator portal, i.e. Apache CloudStack (and API). This gives a number of unique possibilities, such as access from VM to fast shared storage services (SFS) and an internal endpoint for Object Storage S3.

This article sounds a bit like an advertising text, and in fact it is. And that’s because it is the Public Cloud that I work with best, I have a lot of experience with various services, sometimes it is better and sometimes more tiring. In the case of WebDisk Cloud Computing, work is a pure pleasure, additionally there is support from Polish specialists, to whom you can turn with any problem (and here think about reports sent in Azure or GCP). And most importantly, the prices are really at the right level, calculated so that everyone can afford it. And yes, I agree with the slogan they advertise, it is a real Cloud that works for us.

2021/08/17
by Piotr Pisz
1 Comment

CloudStack – VM with vTPM and Secure boot UEFI

Virtualization provides all possible tools to support the launch of operating systems with special requirements. One of such requirements is to ensure possible security by using TPM and UEFI with Secure Boot. This type of system startup ensures that nothing has been tampered with in the boot loader. While it is easy to implement in a physical host, in solutions the Stack type requires a bit more work. How it is solved in VMware vSphere, already written here. Today we will test a very similar solution in CloudStack. However, note that existing VMs installed with the BIOS will not be usable, you will have to create a completely new UEFI reference VM.

Continue Reading →

2021/05/13
by Piotr Pisz
9 Comments

CloudStack – KVM and running VM with vGPU

GPU cards (such as Nvidia V100) have recently gained popularity in many companies and other places (such as universities). Such a card can be used in many ways, for CUDA calculations but also for virtualization (NVIDIA RTX Virtual Workstation). Thanks to the support for vGPU, we can divide such a card according to the desired profile (more on that later) and run up to 32 virtual machines (per physical card), each of which will be able to operate with its own GPU processor. In this article, I would like to discuss two aspects in detail, the first is the physical card passthrough (one or more) to the VM and the second is the use of vGPU. In both cases, we have a VM running on CloudStack, although some techniques described here can be used in any IaaS (eg Proxmox, Openstack, vSphere and others).

8x-NVIDIA-Tesla-V100-32GB-Server

Continue Reading →

2021/05/04
by Piotr Pisz
2 Comments

CloudStack – Kubernetes plugin

Most of the IaaS solutions (CloudStack, vSphere, OpenStack, Proxmox etc.), so far focused on virtual machines, very intensively develop support for containerization. The leading standard at the moment is Kubernetes, support for it can be found in VMware vSphere (Tanzu project) and in CloudStack (kubernetes plugin). The approach to containerization in IaaS is more or less the same everywhere, containers run in lightweight VMs, and the IaaS platform is designed to facilitate cluster startup and management. Today we will deal with the latter solution, configure CloudStack step by step and launch a Kubernetes cluster. The CS documentation for version 4.15 is quite detailed and has up-to-date links to the ISO images you need, be sure to read it.

9BBF8AbW_400x400

Continue Reading →

2019/11/19
by Piotr Pisz
0 comments

vSphere 6.7U3 – Unable to push CA certificates and CRLs to host

The current version of vCenter 6.7U3 brought with it an interesting change, as we can read here, all CA certificates in trusted store must have the “X509v3 Basic Constraints: CA: TRUE” flag set. Lack of this flag in any certificate basically blocks all operations on certificates, the error “Certificate is not valid CA certificate” appears. Today, on the example of the problem with refreshing CA certificates at the host level, I will show you how to deal with it. Generally, as I wrote in this post, the vCenter CA certificate store should be in order, the mess brings only problems.

ca3

Continue Reading →

2019/09/27
by Piotr Pisz
0 comments

Secure file server based on Samba, CTDB, CephFS and OpenLDAP

The purpose of today’s exercise will be to run a secure, full HA, Samba cluster with which we will serve files directly from CephFS and authorize users at the OpenLDAP level. The closest equivalent to this configuration is the Failover Cluster + DFS service available in Microsoft Windows Server 2012+. Ceph and OpenLDAP configuration can be found in the linked articles, here we will focus mainly on CTDB and Samba. Clustered Trivial Data Base, because this is how this abbreviation develops, ensures the consistency of user sessions between multiple nodes. He also oversees the work of samba itself. In this configuration the VFS module samba-vfs-ceph (Samba Gateway for CephFS) will be used, this module allows samba to work correctly (natively) with CephFS. Using this module, Samba dumps all file operations (opening, blocking, closing, etc.) on CephFS. To ensure consistency with recent configurations, users will be taken from OpenLDAP (the entire Samba configuration will also be stored there). Thanks to this approach, we will obtain a coherent, redundant configuration that will seamlessly connect many components. Due to the use of the latest versions, which are not available in CentOS 7 or Ubuntu 18, all configuration will be carried out on Fedora Server 29 (but I think we will put it on CentOS 8 without any problems).

smb5

Continue Reading →