Busy week upgrading all VMs to #NetBSD 10.1 to allow switching to HVM from PV (as #XenServer and @xcpng have dropped support for PV and unfortunately do not support PVH either) which means moving to uEFI booting rather than pygrub loading the kernel. Just waiting for the next #pkgsrc quarterly release to move the remainder over with nice fresh packages.

XenServer VM Tools vulnerabilities let attackers gain kernel privileges on Windows VMs. If you run virtualized Windows environments, patch NOW!

#SecurityLand #CyberWatch #XenServer #CVE #VirtualizationSecurity #Windows #Vulnerability

https://www.security.land/three-lines-of-code-that-could-compromise-your-entire-virtual-infrastructure/

Today I've been playing with #pkgsrc on #FreeBSD and trying to get some of my #NetBSD packages working on it.

pkgsrc bootstrap worked well on FreeBSD. Hardest part is remember you can't just type make any more!

I've been focussing on the #XenServer tools which looks to be rather stagnant in FreeBSD ports. The #pkgsrc version will work better on FreeBSD than the version from ports.

Just need to work out what to do about rc.d scripts. I can't find any prior art for rc.d from pkgsrc on FreeBSD

Cloud Software Group, owner of Citrix, Tibco, NetScaler, and XenServer, confirms global layoffs, with LinkedIn posts revealing cuts to engineers, technical account managers, and other roles. #CloudSoftwareGroup #Citrix #Tibco #NetScaler #XenServer #Layoffs #TechNews #JobCuts #WorkforceChanges

Pretty pleased with the speed of #zfs replication between two #NetBSD systems between our two datacentres in Cambridge:

receiving full stream of tank/[email protected]:01:01 into tank/backup/[email protected]:01:01
received 325GB stream in 3453 seconds (96.4MB/sec)

One end is virtual (a #Xen domU running on #XenServer on a host connected by 16Gb FC to an IBM FlashSystem) and the other is physical (HP Microserver Gen 10). Running over rsh on a private VLAN (so no ssh encryption overhead)

@mWare @ltning Many of my #ZFS installs are virtual, maybe even on #XenServer connected to an IBM #FlashSystem over FibreChannel. There's do many levels of abstraction, no option to offload a ZIL

#BSI WID-SEC-2024-2209: [NEU] [mittel] #XEN, #Citrix #XenServer #und #Hypervisor: Schwachstelle ermöglicht Denial of Service

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in XEN, Citrix XenServer und Citrix Systems Hypervisor ausnutzen, um einen Denial of Service Angriff durchzuführen.

https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2209

Warn- und Informationsdienst

#ProxLB has been released in version 1.0.2 and adds some smaller features and squashes some bugs.

ProxLB is a Load Balancer for #Proxmox clusters, which rebalances your VM/CT workloads across nodes in your cluster.

https://github.com/gyptazy/ProxLB/releases/tag/v1.0.2

#virtualization #virtualisation #vmware #esxi #esx #kvm #qemu #xcpng #xen #xenserver #alternatives #opensource #free #fediverse #support #migration #VM #virtualmachines #virtualmachines #container #containers #LXC
Release v1.0.2 · gyptazy/ProxLB

[1.0.2] - 2024-08-13 Added Add option to run migration in parallel or sequentially. [#41] Add option to run ProxLB only on the Proxmox's master node in the cluster (reg. HA feature). [#40] Change...

GitHub
@willnix Try #XCPng. It is a fork of the old #XenServer code before it went closed source. I noticed you had #Citrix in your tags, so it could be a good fit for you.

i wonder if xenserver just doesn't support creating SRs from encrypted zfs pools or whether i'm missing some params when creating it.

any xenserver nerds know?

#xen #xenserver