Koen Warson's blog

ESXi Unsupported Console Access or even SSH

2008-09-01T12:01:00.001+02:00

I know it's old news but you can access the ESXi console by using this unsupported method :

reach to your ESXi over KVMoverIP or just console and press Alt-F1
then type "UNSUPPORTED" and press <enter>
login with your root login and password
and you can do your thing ... or enable SSH in the next steps
Edit the inetd.conf file by typing "vi /etc/inetd.conf"
remove the # in front of the SSH line
reboot your ESXi server (or kill the inetd process and start it again)

The blogs that initially posted this info are :
(it's where I found it as well)

Unattended setup of Virtual Center

2008-06-09T17:35:00.001+02:00

I recently had to setup a VDI training environment which needed 6 virtual center servers. I don't like repetitive tasks so I tried to script it a little. I would like to refer to http://www.vinternals.com/2008/01/virtualcenter-25-silent-install.html because that kind of gave me the start I needed.

I tried to put as much variables in there as possible.

First I set some variables like where the Media is, the DBserver, ... then the script detects the hostname, I have 6 servers called VCTEAM1 ...6 and I take out the number to link the server to the right database in the back-end. I assume the license file is called VCIlicense.lic and is in the VC_Media folder. Then we start the installation; the installation itself doesn't initialize the database so we need to start vpxd.exe with the -b parameter to do so... and then next the install sequence for the VIclient is started, and it's done. And most important here is the script :

#Install VC unattended
SET VC_Media=C:\VC250
SET Team=%computername:~7%
SET DBServer=SQL2005DB

#Create DSN connection
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ODBC.INI\vpx%Team% /v Driver /t REG_SZ /d C:\WINDOWS\system32\sqlncli.dll
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ODBC.INI\vpx%Team% /v Description /t REG_SZ /d vpx%Team%
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ODBC.INI\vpx%Team% /v Server /t REG_SZ /d %DBServer%
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ODBC.INI\vpx%Team% /v LastUser /t REG_SZ /d Team%Team%
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\ODBC\ODBC.INI\ODBC Data Sources" /v vpx%Team% /t REG_SZ /d "SQL Native Client"

#Install Virtual Center + Lic Server
start "Installing VC" /wait "%VC_media%\vpx\VMware-vcserver.exe" /s /w /v"/qr WARNING_LEVEL=0 VMLS_LICENSEPATH="%VC_Media%\VCIlicense.lic" VC_EDITION=vc DB_SERVER_TYPE=Custom DB_DSN=\"vpx%Team%\" DB_USERNAME="Team%Team%" DB_PASSWORD="vmware%Team%" INSTALL_VCI=\"\" REBOOT=SUPPRESS"

#Initiate the Database Tables
start "Creating DB tables" /wait "C:\Program Files\VMware\Infrastructure\VirtualCenter Server\vpxd.exe" -b
net start vpxd

#Install VI Client
start "Installing VI Client" /wait "%VC_Media%\vpx\VMware-viclient.exe" /s /w /v"/qn /L*v "%TEMP%\vmvcc.log" WARNING_LEVEL=0"

Maybe one more point, in this script there is assumed that the connection goes to a SQL2005 database because the generated DSN is using the SQL Native Client DLL.

Create an NFS share on Windows 2003 Server R2 for use with ESX

2008-05-26T11:51:00.001+02:00

Jean Yves Dumont and myself posted a little demonstration on how to create an NFS share on Windows 2003 Server R2 for use with ESX.

Here are the links :

http://www.youtube.com/user/VMwareELearning

http://vmwareelearning.blip.tv

If you want to view it offline and higher quality send a mail to : nfsw2k3@vmware.com
and you receive an automatic bounce back with a download link.

Source Code available for ESXtasks tool

2008-05-05T12:02:00.001+02:00

I uploaded the source code for my ESXtasks tool. It's a tool made with Vmware SDK 2.5.0 on Visual Basic 2008 Express Edition that automates a few tasks in your virtual infrastructure.
This tool is the result of some playing around with VB code and doesn’t guarantee anything (not from me and certainly not from Vmware), for me the tool does its job, but off course you never know because I surely didn’t test it in all possible ways.

From now on you can download the source code with the already compiled dlls so you can reuse it to start making other projects as well. Keep me posted about your initiatives.
The site : http://www.svmotion.com

Storage Vmotion with a GUI

2008-02-21T22:55:00.001+01:00

Hi,

I know I'm not the first that had this idea, to create a tool like this, but it was fun to make and it's fun to share.

So if you want to do a storage vmotion without installing a remote CLI and with the ease of a GUI, check out http://www.svmotion.com

Things to know about my tool and storage vmotion :

Storage Vmotion has a bug that crashes your VM, the tool checks if the VM is effected by this bug and cancels the SVmotion. See also Vmware KB.
Other functions like export settings and a multi server service console user management thingy ...

Next steps for me ... in this tool ... extend it to be able to move multi datastore VMs and select different destinations for .vmx, and .vmdk's.

any remarks can be sent to gui@svmotion.com

VMware VDM with a security server. It's easy if you know how :-)

2008-02-01T18:00:00.001+01:00

I tried to install VDM with the security server in the DMZ but ran in some connectivity issue's. Seems after a 1 day testing I found the clue. First our setup :

VDM Connection Server : 192.168.0.10 (LAN)

Test Desktop : 192.168.0.20 (LAN)

VDM Security Server : 192.168.1.2 (DMZ)

External IP : x.y.z.c (WAN-IP or FQDN)

First item to check on the external URL setting in the VDM Connection server put in : https://192.168.0.10:443

On the VDM Security Server, go to "c:\Program Files\Vmware\Vmware VDM\Server\sslgateway\conf".

Create a file named "locked.properties" open it with notepad and put in the next text :

clientHost=x.y.z.c
clientPort=443
clientProtocol=https

Save and close it, restart the VDM Security Service and the VDM Connection Services and you are good to go.

Off course you are also able to put a FQDN instead of the x.y.z.c

Hèhè

Vmware Workstation on a Vista host gives some network issue's ...

2008-01-08T22:42:00.001+01:00

After installing Vmware Workstation 6.0.2 on Vista, I had some network issues. Not able to connect to my Vista machine using RDP, SMB, ...

After some google-ing I found this :

http://www.frameworkx.com/contentblogdetail.aspx?blog=57&id=690

Which indeed solved my problem.

vimsh : handy Vmware ESX Command line tool

2007-09-18T23:09:00.001+02:00

Hi,

Recently learned/discovered a handy command line tool on ESX :

vimsh

If you just run vimsh and press enter, you enter a sort of separate command line interface

You can do various things with this CLI here some examples :

vmsvc/getallvms :
gives you a list of all registered virtual machines

vmsvc/poweron, vmsvc/poweroff, vmsvc/powerstate :
change/query powerstate of virtual machines

vmsvc/removedisk
remove a virtual disk while your virtual machine is online
for example vmsvc/removedisk 64 0 4 N removes SCSI device 0:4 from virtual machine with vmID 64, the N leaves the virtual disk file intact.

/hostsvc/vmotion/vnic_set portgroup3
enables vmotion on portgroup3, handy to integrate in post-setup configuration scripts

and much much more ...
You can find a detailed white paper about vimsh at the great site http://www.xtravirt.com/index.php?option=com_remository&Itemid=75&func=fileinfo&id=4

For scripting purposes you can use this command in non-interactive mode, for example :

vimsh -ne vmsvc/getallvms > /root/registeredvms.txt

Clustering your Vmware License server

2007-06-20T11:55:00.001+02:00

Clustering your Vmware License server is quite easy but there are a few things to know. In our setup we used a Majority Node set cluster with file share withness. We installed the license servers on each node and uploaded the license files locally in the licensing directory.

Then we created a resource group with "IP", "Network name", and "Generic service" pointing to the Vmware License service, and if you like you can add your Virtual Center Service as well. (mind KB doc. http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=2195771 and be sure you use VC 2.0.1 patch2)

After starting the license server we noticed that the license server takes over the node name and not the clustered resource network name. Seems no big deal at first but apparently the ESX-servers dynamically change the license server name in their config to the node name. If that node fails and the other node takes over the licensing service, all your ESX-servers will point to the wrong locations.

But there is a solution :

Stop the Vmware license server
Go to the license files and open them
Search for "SERVER this_host ANY 27000" be sure to take to one without the # in front of the line
Edit this line and add @<your hostname>, so for example if you clustered resource network name is "VCSERVER01" the line should be : "SERVER this_host ANY 27000@VCSERVER01"
Clustered networknames are allways uppercase.
Search for "VENDOR VMWARELM port=27010" be sure to take to one without the # in front of the line
Edit this line and add @<your hostname>, so for example if you clustered resource network name is "VCSERVER01" the line should be : "VENDOR VMWARELM port=27010@VCSERVER01"
Clustered networknames are allways uppercase.
Save the file
Do this for each license file
Copy the license files to the other node
Start the Vmware License service

Problems are hard, solutions are easy ...

2007-04-02T20:04:00.001+02:00

I had a few clusters-across-boxes on my ESX-servers, and as Vmware described in its guides, I used RDM's.

The result of that was that I wasn't able to add nor create vmfs's anymore. Vmkwarning logs showed SCSI-reservation errors, what didn't suprise me as the MS-cluster-service does this, but I couldn't understand that the VI-client timed out on this.

After long search and consulting some college's we came to the idea to increase VI-client timeout settings. (You can find it in the Edit menu of the VI-client, called client settings, remote command timeout) And ofcourse that did the trick, so conclusion : problems are hard, solutions easy !

Lost ESX-server's root password ?!?!! :-(

2007-03-20T12:37:00.003+01:00

After a little google-ing I found a Red Hat Enterprise password reset procedure, that also works on ESX 3, actually it's quite easy.

Reboot your ESX-server.
In the Linux GRUB menu select "Service Console" and press "e" to edit.
Go to the line that starts with "kernel" and press "e" again
Append the word "single" at the end of the line and press enter
Press "b" to boot with these options
Once the system is booted you get a Linux command prompt, where you can enter "passwd" to change the password
Reboot and login using your new password

Virtual Center High Availability ...

2007-03-16T00:00:00.001+01:00

How to ... for now I'm not sure ...

I have a 2 site config with 2 ESX-clusters one in each site.
I thought to install a MNS-cluster with a file share witness, and use the new cluster-aware features of VC with patch 2.

I would like to virtualize the 2 cluster nodes and put 1 node in each site, and maybe put the witness file share in a 3th site.

It's certainly something to consider but not sure if it will work ... waiting for input from Vmware support ...

to be continued ...

Unattended install of ESX with Microsoft's RIS-server

2007-03-10T23:46:00.000+01:00

I needed to install a lot of ESX servers and thought of a little automation.So I looked around the web and found this link : http://www.vmware.com/community/message.jspa?messageID=466174

In short it comes to this :

Setup the RIS Server :

Install DHCP and RIS
On your RIS server create the following folder structure: Setup\English\Images\PXELinux\i386\templates\pxelinux.cfg\ (pxelinux.cfg is a folder)
Download the latest version of syslinux from: http://www.kernel.org/pub/linux/utils/boot/syslinux/
From the ESX 3 (this works with 2.5.x as well) CD (images\pxeboot) copy the following files to Setup\English\Images\PXELinux\i386\templates vmlinuz initrd.img

NOTE: you MAY want to rename these files IF you plan on have multiple versions of ESX builds available.
From the file you downloaded in step 2, copy the pxelinux.0 to the templates folder.
Create a file called pxelinux.sif file in the template folder with the following contents: [OSChooser]
Description = "Linux"
Help = "This option runs a Linux installer."
LaunchFile = "Setup\English\Images\PXELinux\i386\templates\pxelinux.0"
ImageType = Flat Version="1.01"
In the Setup\English\Images\PXELinux\i386\templates\pxelinux.cfg folder create a file called 'default' (no extension) with the following info.
DEFAULT esx
prompt 1
display boot.msg
timeout 1000
label esx
kernel vmlinuz append initrd=initrd.img
Install NFS on your RIS server, Windows 2003 R2 provides it as a standard component
Create an NFS share with a copy of the Vmware ESX 3.0.1 CD.
Enable scripted installation feature on an already installed ESX to create the answer files.
You can use this link page 94 : http://www.vmware.com/pdf/vi3_installation_guide.pdf
Log in to the ESX Server 3.0.1 service console as root.
Open the file/usr/lib/vmware/webAccess/tomcat/apache-tomcat-5.5.17/webapps/ui/WEB-INF/struts-config.xml in a text editor such as vi.
Locate the scripted section.
Comment out the line reading:
Uncomment the following lines:
Save and close the file.
Type service vmware-webAccess restart.
Launch a supported Web browser and enter the URL of your ESX Server installation to open VI Web Access.The Welcome page appears.
Click Log in to the Scripted Installer.
Follow the onscreen instructions to create and download the answer file
Save the answer file in the root of your NFS share.
Boot your new physical server, let it boot from PXE
At the boot: type esx and the link to the answer file you want to use during install, for example : esx ks=nfs:192.168.29.45:/PXEInstallESX/KS.cfg

TIP : If you have the MAC-addresses of your servers up-front (some hardware vendors can provide this info together with the serial number of the server), you can create additionale files in the Setup\English\Images\PXELinux\i386\templates\pxelinux.cfg directory. Name them after MAC-addresses of your servers.
DEFAULT esx
prompt 1
display boot.msg
timeout 1000
label esx
kernel vmlinuz
append initrd=initrd.img ks=nfs:192.168.29.45:/PXEInstallESX/KS.cfg

This way everything would be fully automated.

Have fun with it ...

Problems upgrading ESX 3.0 to 3.0.1

2007-01-18T22:42:00.000+01:00

Hi,

Upgrading ESX 3.0 to ESX 3.0.1 with a remote repository is not really working for me.
Found a very helpfull post on http://www.vmug.nl/

Seems that it's better to upgrade yum-2.0.7-3vmw.noarch.rpm and VMware-esx-scripts-3.0.1-32039.i386.rpm manually first and then do the esxupdate. Vmware-Esx-Scripts contains the esxupdate script itself, and that script seems to use yum.

The way to do it : Go into the 32039 directory, as root and type :
1) rpm -Uvh yum-2.0.7-3vmw.noarch.rpm
2) rpm -Uvh VMware-esx-scripts-3.0.1-32039.i386.rpm
3) esxupdate -f update

Vmware ESX 3 patch updates through FTP ...

2007-01-16T23:37:00.000+01:00

Hi,

Allthough we only have four ESX-servers for the moment I tried to make a ftp-repository for all ESX-patches. I put the FTP-server on my virtual center server. But it didn't work proporly, I allways got this error :

# esxupdate -r ftp://172.28.247.223/dslib/ESX-1006511 update
INFO: Configuring...
INFO: Preparing to install VMware ESX Server ESX-1006511...
ERROR: Error (1) executing [yum info] retrygrab() failed for: ftp://172.28.247.223/dslib/ESX-1006511/headers/header.info
Executing failover method failover: out of servers to try Error getting file ftp://172.28.247.223/dslib/ESX-1006511/headers/header.info[Errno 6]
ERROR: Url Return no Content-Length - something is wrong
Gathering header information file(s) from server(s) Server:
Esxupdate-compatible repository for VMware ESX Server ESX-1006511

After some google-ing I found this procedure:

Login to the service console as root
Change directory to /usr/share/yum
Make a backup copy of urlgrabber.py (IMPORTANT) cp urlgrabber.py urlgrabber.py.BAK
Edit urlgrabber.py and find the following lines:

if have_urllib2 or scheme != 'file':
# urllib does not provide content-length for local files
if not hdr is None and not hdr.has_key('Content-Length'):
raise URLGrabError(6, _('ERROR: Url Return no Content-Length - something is wrong'))
Comment them out (Add a '#' at the beginning of the line):

# if have_urllib2 or scheme != 'file': #
# urllib does not provide content-length for local files
# if not hdr is None and not hdr.has_key('Content-Length'):
# raise URLGrabError(6, _('ERROR: Url Return no Content-Length - something is wrong')) Try the esxupdate command again..
Then try the esxupdate again

ESX 3.0 can use datastores on NFS and Windows R2 is NFS-capable out of the box ...

2007-01-12T23:00:00.000+01:00

Hi,

Yesterday I had the idea to make an NFS-share on my Virtual Center server. I would like to use it as a repository for ISOs and VM-Templates to make it easier for Windows Admins to upload ISOs to a Virtual Infrastructure. If this works they only need to copy their ISOs to the right location on the Virtual Center server and all ESX's have automatically access to the ISOs, floppies, ... No hassle with sftp, accounts on the ESX, ...

As my VC is a Windows 2003 R2 I could just install NFS by using "Add/Remove Windows Components". It's a build-in feature now.

First try :
I installed the NFS components, shared a folder, with NFS's standard settings, and made the NFS-links in Virtual Center on every ESX-box.
Everything looks good but the connection wasn't really stable. Copying large files always failed.

Second try :
I found some info on the web to adjust a few settings on the windows side :

Anonymous UID: 2 (instead of the std -2)
Anonymous GID: 0 (instead of the std -2)

Next step for me will be to secure this, although everything is in a private VLAN, I would like to have some access control ...

Change TSprofile for a lot of users ...

2007-01-07T20:57:00.000+01:00

Recently I had to change a lot of user's TS-profile settings, I wasn't able to do it with GPO's because I had to deal with W2k Citrix Servers so I tried to use the TSprof.exe-tool but that didn't work also because I had a %-sign in the TS-profile. The %value% was directly translated and only the result was saved in the user property, so I made a little VB-program using Visual Basic Express Ed. to do the job, ... (code and .exe included)

You can use it this way :

Changes tsprofilepaths of users listed in file.
Usage : UpdateTSprofile -s:[servername] -f:[path/file] -p:[tsroamingprofilepath]

-h help, shows this info
-s:[servername] domaincontroller to connect to
-f:[path/file]
file path with users to update format should be one domain\user a line

-p:[tsroamingprofilepath]
path to tsroamingprofilepath if this contains % replace % with ?

Caution : Existing TS-profile Value's will be replaced

My first article ...

2007-01-06T22:08:00.000+01:00

My first article ... Not sure where this will go but we will see what the future brings. I will try to put some professional experiences here ...
For example last week I was confronted with a few ESX-servers installed with tiny partitions, and no separate partition for /var/log ...
A best practice should be to provide a separate partition for /var or /var/log.But of course if it's installed this way you have to live with it ...
I used a standard feature of most Linux/Unix machines that is also included in ESX 2.5/3.0 : "logrotate" ...
Here the procedure :

On ESX servers there should be separate partitions for /var and/or /var/log, if those partitions are to small or integrated in to the "/"-partition it can destabilize the ESX-server.

To adjust the automatic logrotate/Cleanup please use this procedure :

SSH-logon to the ESX-server
su to get root permissions
vi /etc/logrotate.conf --> changes are in red

# see "man logrotate" for details
# rotate log files weekly
weekly
# keep 4 weeks worth of backlogs
rotate 2
# create new (empty) log files after rotating old onescreate
# uncomment this if you want your log files compressed
compress
# RPM packages drop log rotation information into this directoryinclude /etc/logrotate.d
# no packages own lastlog or wtmp -- we'll rotate them here
/var/log/wtmp {
monthly
create 0664 root utmp
rotate 1
}
# system-specific logs may be also be configured here.
vi /etc/logrotate.d/vmkernel --> changes are in red

/var/log/vmkernel {
missingok
compress
# keep a history over 3 years.
weekly
rotate 2
# max log size of 200k (thus limiting total disk usage to under 8megs)
size 100k
sharedscripts
postrotate
/bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null true
endscript
}
run this command : "/usr/sbin/logrotate -f /etc/logrotate.conf"
go to the /var/log dir and cleanup, a last time manually, all log-files with an extension greater or equal then .2
exit