blob: 5de6136fa6416378bf04e623487eff59211631fd [file] [log] [blame]
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2016, Apache Software Foundation
# This file is distributed under the same license as the Apache CloudStack Administration Documentation package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: Apache CloudStack Administration Documentation 4.8\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2016-08-22 13:55+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../../systemvm.rst:18
msgid "Working with System Virtual Machines"
msgstr ""
#: ../../systemvm.rst:20
msgid "CloudStack uses several types of system virtual machines to perform tasks in the cloud. In general CloudStack manages these system VMs and creates, starts, and stops them as needed based on scale and immediate needs. However, the administrator should be aware of them and their roles to assist in debugging issues."
msgstr ""
#: ../../systemvm.rst:28
msgid "The System VM Template"
msgstr ""
#: ../../systemvm.rst:30
msgid "The System VMs come from a single template. The System VM has the following characteristics:"
msgstr ""
#: ../../systemvm.rst:33
msgid "Debian 7.8 (\"wheezy\"), 3.2.0 kernel with the latest security patches from the Debian security APT repository"
msgstr ""
#: ../../systemvm.rst:36
msgid "Has a minimal set of packages installed thereby reducing the attack surface"
msgstr ""
#: ../../systemvm.rst:39
msgid "64-bit for enhanced performance on Xen/VMWare"
msgstr ""
#: ../../systemvm.rst:41
msgid "pvops kernel with Xen PV drivers, KVM virtio drivers, and VMware tools for optimum performance on all hypervisors"
msgstr ""
#: ../../systemvm.rst:44
msgid "Xen tools inclusion allows performance monitoring"
msgstr ""
#: ../../systemvm.rst:46
msgid "Latest versions of HAProxy, iptables, IPsec, and Apache from debian repository ensures improved security and speed"
msgstr ""
#: ../../systemvm.rst:49
msgid "Latest version of JRE from Sun/Oracle ensures improved security and speed"
msgstr ""
#: ../../systemvm.rst:54
msgid "Changing the Default System VM Template"
msgstr ""
#: ../../systemvm.rst:56
msgid "Using the 64-bit template should be use with a System Offering of at least 512MB of memory."
msgstr ""
#: ../../systemvm.rst:59
msgid "Based on the hypervisor you use, download the 64-bit template from the following location:"
msgstr ""
#: ../../systemvm.rst:65
msgid "Hypervisor"
msgstr ""
#: ../../systemvm.rst:65
msgid "Download Location"
msgstr ""
#: ../../systemvm.rst:67
msgid "XenServer"
msgstr ""
#: ../../systemvm.rst:67
msgid "|sysvm64-url-xen|"
msgstr ""
#: ../../systemvm.rst:68
msgid "KVM"
msgstr ""
#: ../../systemvm.rst:68
msgid "|sysvm64-url-kvm|"
msgstr ""
#: ../../systemvm.rst:69
msgid "VMware"
msgstr ""
#: ../../systemvm.rst:69
msgid "|sysvm64-url-vmware|"
msgstr ""
#: ../../systemvm.rst:70
msgid "Hyper-V"
msgstr ""
#: ../../systemvm.rst:70
msgid "|sysvm64-url-hyperv|"
msgstr ""
#: ../../systemvm.rst:73
msgid "As an administrator, log in to the CloudStack UI"
msgstr ""
#: ../../systemvm.rst:75
msgid "Register the 64 bit template."
msgstr ""
#: ../../systemvm.rst:77
msgid "For example: KVM64bitTemplate"
msgstr ""
#: ../../systemvm.rst:79
msgid "While registering the template, select Routing."
msgstr ""
#: ../../systemvm.rst:81
msgid "Navigate to Infrastructure > Zone > Settings."
msgstr ""
#: ../../systemvm.rst:83
msgid "Set the name of the 64-bit template, KVM64bitTemplate, in the *``router.template.kvm``* global parameter."
msgstr ""
#: ../../systemvm.rst:86
msgid "If you are using a XenServer 64-bit template, set the name in the *``router.template.xen``* global parameter."
msgstr ""
#: ../../systemvm.rst:89
msgid "Any new virtual router created in this Zone automatically picks up this template."
msgstr ""
#: ../../systemvm.rst:92
msgid "Restart the Management Server."
msgstr ""
#: ../../systemvm.rst:96
msgid "Multiple System VM Support for VMware"
msgstr ""
#: ../../systemvm.rst:98
msgid "Every CloudStack zone has single System VM for template processing tasks such as downloading templates, uploading templates, and uploading ISOs. In a zone where VMware is being used, additional System VMs can be launched to process VMware-specific tasks such as taking snapshots and creating private templates. The CloudStack management server launches additional System VMs for VMware-specific tasks as the load increases. The management server monitors and weights all commands sent to these System VMs and performs dynamic load balancing and scaling-up of more System VMs."
msgstr ""
#: ../../systemvm.rst:110
msgid "Console Proxy"
msgstr ""
#: ../../systemvm.rst:112
msgid "The Console Proxy is a type of System Virtual Machine that has a role in presenting a console view via the web UI. It connects the user’s browser to the VNC port made available via the hypervisor for the console of the guest. Both the administrator and end user web UIs offer a console connection."
msgstr ""
#: ../../systemvm.rst:118
msgid "Clicking a console icon brings up a new window. The AJAX code downloaded into that window refers to the public IP address of a console proxy VM. There is exactly one public IP address allocated per console proxy VM. The AJAX application connects to this IP. The console proxy then proxies the connection to the VNC port for the requested VM on the Host hosting the guest."
msgstr ""
#: ../../systemvm.rst:126
msgid "The hypervisors will have many ports assigned to VNC usage so that multiple VNC sessions can occur simultaneously."
msgstr ""
#: ../../systemvm.rst:129
msgid "There is never any traffic to the guest virtual IP, and there is no need to enable VNC within the guest."
msgstr ""
#: ../../systemvm.rst:132
msgid "The console proxy VM will periodically report its active session count to the Management Server. The default reporting interval is five seconds. This can be changed through standard Management Server configuration with the parameter consoleproxy.loadscan.interval."
msgstr ""
#: ../../systemvm.rst:137
msgid "Assignment of guest VM to console proxy is determined by first determining if the guest VM has a previous session associated with a console proxy. If it does, the Management Server will assign the guest VM to the target Console Proxy VM regardless of the load on the proxy VM. Failing that, the first available running Console Proxy VM that has the capacity to handle new sessions is used."
msgstr ""
#: ../../systemvm.rst:144
msgid "Console proxies can be restarted by administrators but this will interrupt existing console sessions for users."
msgstr ""
#: ../../systemvm.rst:149
msgid "Using a SSL Certificate for the Console Proxy"
msgstr ""
#: ../../systemvm.rst:151
msgid "By default, the console viewing functionality uses plaintext HTTP. In any production environment, the console proxy connection should be encrypted via SSL at the mininum."
msgstr ""
#: ../../systemvm.rst:155
msgid "A CloudStack administrator has 2 ways to secure the console proxy communication with SSL:"
msgstr ""
#: ../../systemvm.rst:158
msgid "Set up a SSL wild-card certificate and domain name resolution"
msgstr ""
#: ../../systemvm.rst:160
msgid "Set up SSL certificate for specific FQDN and configure load-balancer"
msgstr ""
#: ../../systemvm.rst:164
msgid "Changing the Console Proxy SSL Certificate and Domain"
msgstr ""
#: ../../systemvm.rst:166
msgid "The administrator can configure SSL encryption by selecting a domain and uploading a new SSL certificate and private key. The domain must run a DNS service that is capable of resolving queries for addresses of the form aaa-bbb-ccc-ddd.your.domain to an IPv4 IP address in the form aaa.bbb.ccc.ddd, for example, 202.8.44.1. To change the console proxy domain, SSL certificate, and private key:"
msgstr ""
#: ../../systemvm.rst:173
msgid "Set up dynamic name resolution or populate all possible DNS names in your public IP range into your existing DNS server with the format aaa-bbb-ccc-ddd.consoleproxy.company.com -> aaa.bbb.ccc.ddd."
msgstr ""
#: ../../systemvm.rst:178
msgid "In these steps you will notice *consoleproxy.company.com* -For security best practices, we recommend creating a wildcard SSL certificate on a separate subdomain so in the event that the certificate is compromised, a malicious user cannot impersonate a company.com domain."
msgstr ""
#: ../../systemvm.rst:184
msgid "Generate the private key and certificate signing request (CSR). When you are using openssl to generate private/public key pairs and CSRs, for the private key that you are going to paste into the CloudStack UI, be sure to convert it into PKCS#8 format."
msgstr ""
#: ../../systemvm.rst:189
msgid "Generate a new 2048-bit private key"
msgstr ""
#: ../../systemvm.rst:195
msgid "Generate a new certificate CSR. Ensure the creation of a wildcard certificate, eg ``*.consoleproxy.company.com``"
msgstr ""
#: ../../systemvm.rst:202
msgid "Head to the website of your favorite trusted Certificate Authority, purchase an SSL certificate, and submit the CSR. You should receive a valid certificate in return"
msgstr ""
#: ../../systemvm.rst:206
msgid "Convert your private key format into PKCS#8 encrypted format."
msgstr ""
#: ../../systemvm.rst:212
msgid "Convert your PKCS#8 encrypted private key into the PKCS#8 format that is compliant with CloudStack"
msgstr ""
#: ../../systemvm.rst:219
msgid "In the Update SSL Certificate screen of the CloudStack UI, paste the following:"
msgstr ""
#: ../../systemvm.rst:222
msgid "The certificate you've just generated."
msgstr ""
#: ../../systemvm.rst:224
msgid "The private key you've just generated."
msgstr ""
#: ../../systemvm.rst:226
msgid "The desired domain name, prefixed with ``*.``; for example, ``*.consoleproxy.company.com``"
msgstr ""
#: ../../systemvm.rst:228
msgid "|update-ssl.png|"
msgstr ""
#: ../../systemvm.rst:230
msgid "This stops all currently running console proxy VMs, then restarts them with the new certificate and key. Users might notice a brief interruption in console availability."
msgstr ""
#: ../../systemvm.rst:234
msgid "The Management Server generates URLs of the form \"aaa-bbb-ccc-ddd.consoleproxy.company.com\" after this change is made. The new console requests will be served with the new DNS domain name, certificate, and key."
msgstr ""
#: ../../systemvm.rst:240
msgid "Uploading ROOT CA and Intermediate CA"
msgstr ""
#: ../../systemvm.rst:241
msgid "If you need to upload custom certificate with ROOT CA and intermediate CA, you can find more details here: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Procedure+to+Replace+realhostip.com+with+Your+Own+Domain+Name"
msgstr ""
#: ../../systemvm.rst:244
msgid "IMPORTANT NOTES:"
msgstr ""
#: ../../systemvm.rst:246
msgid "In order to avoid errors and problems while uploading custom certificates, please check following:"
msgstr ""
#: ../../systemvm.rst:248
msgid "1. While doing URL encoding of ROOT CA and any Intermediate CA, be sure that the plus signs (\"+\") inside certificates are not replaced by space (\" \"), because some URL/string encoding tools tend to do that."
msgstr ""
#: ../../systemvm.rst:251
msgid "2. If you are renewing certificates it might happen you need to upload new ROOT CA and Intermediate CA, together with new Server Certificate and key. In this case please be sure to use same names for certificates during API upload of certificate, example:"
msgstr ""
#: ../../systemvm.rst:254
msgid "http://123.123.123.123:8080/client/api?command=uploadCustomCertificate&...&name=root1... http://123.123.123.123:8080/client/api?command=uploadCustomCertificate&...&name=intermed1..."
msgstr ""
#: ../../systemvm.rst:257
msgid "Here names are \"root1\" and \"intermed1\". If you used other names previously, please check the cloud.keystore table to obtain used names."
msgstr ""
#: ../../systemvm.rst:260
msgid "If you still have problems and folowing errors in management.log while destroying CPVM:"
msgstr ""
#: ../../systemvm.rst:262
msgid "Unable to build keystore for CPVMCertificate due to CertificateException"
msgstr ""
#: ../../systemvm.rst:263
msgid "Cold not find and construct a valid SSL certificate"
msgstr ""
#: ../../systemvm.rst:265
msgid "that means that still some of the Root/intermediate/server certificates or the key is not in a good format, or incorrectly encoded or multiply Root CA/Intemediate CA present in database by mistake."
msgstr ""
#: ../../systemvm.rst:267
msgid "Other way to renew Certificates (Root,Intermediates,Server certificates and key) - although not recommended unless you fill comfortable - is to directly edit the database, while still respect the main requirement that the private key is PKCS8 encoded, while Root CA, Intemediate and Server certificates are still in default PEM format (no URL encoding needed here). After editing the database, please restart management server, and destroy SSVM and CPVM after that, so the new SSVM and CPVM with new certificates are created."
msgstr ""
#: ../../systemvm.rst:275
msgid "Load-balancing Console Proxies"
msgstr ""
#: ../../systemvm.rst:276
msgid "An alternative to using dynamic DNS or creating a range of DNS entries as described in the last section would be to create a SSL certificate for a specific domain name, configure CloudStack to use that particular FQDN, and then configure a load balancer to load balance the console proxy's IP address behind the FQDN. As the functionality for this is still new, please see https://cwiki.apache.org/confluence/display/CLOUDSTACK/Realhost+IP+changes for more details."
msgstr ""
#: ../../systemvm.rst:287
msgid "Virtual Router"
msgstr ""
#: ../../systemvm.rst:289
msgid "The virtual router is a type of System Virtual Machine. The virtual router is one of the most frequently used service providers in CloudStack. The end user has no direct access to the virtual router. Users can ping the virtual router and take actions that affect it (such as setting up port forwarding), but users do not have SSH access into the virtual router."
msgstr ""
#: ../../systemvm.rst:296
msgid "There is no mechanism for the administrator to log in to the virtual router. Virtual routers can be restarted by administrators, but this will interrupt public network access and other services for end users. A basic test in debugging networking issues is to attempt to ping the virtual router from a guest VM. Some of the characteristics of the virtual router are determined by its associated system service offering."
msgstr ""
#: ../../systemvm.rst:305
msgid "Configuring the Virtual Router"
msgstr ""
#: ../../systemvm.rst:307
msgid "You can set the following:"
msgstr ""
#: ../../systemvm.rst:309
msgid "IP range"
msgstr ""
#: ../../systemvm.rst:311
msgid "Supported network services"
msgstr ""
#: ../../systemvm.rst:313
msgid "Default domain name for the network serviced by the virtual router"
msgstr ""
#: ../../systemvm.rst:315
msgid "Gateway IP address"
msgstr ""
#: ../../systemvm.rst:317
msgid "How often CloudStack fetches network usage statistics from CloudStack virtual routers. If you want to collect traffic metering data from the virtual router, set the global configuration parameter router.stats.interval. If you are not using the virtual router to gather network usage statistics, set it to 0."
msgstr ""
#: ../../systemvm.rst:325
msgid "Upgrading a Virtual Router with System Service Offerings"
msgstr ""
#: ../../systemvm.rst:327
msgid "When CloudStack creates a virtual router, it uses default settings which are defined in a default system service offering. See `“System Service Offerings” <#system-service-offerings>`_. All the virtual routers in a single guest network use the same system service offering. You can upgrade the capabilities of the virtual router by creating and applying a custom system service offering."
msgstr ""
#: ../../systemvm.rst:334
msgid "Define your custom system service offering. See `“Creating a New System Service Offering” <#creating-a-new-system-service-offering>`_. In System VM Type, choose Domain Router."
msgstr ""
#: ../../systemvm.rst:339
msgid "Associate the system service offering with a network offering. See `“Creating a New Network Offering” <networking.html#creating-a-new-network-offering>`_."
msgstr ""
#: ../../systemvm.rst:343
msgid "Apply the network offering to the network where you want the virtual routers to use the new system service offering. If this is a new network, follow the steps in Adding an Additional Guest Network on page 66. To change the service offering for existing virtual routers, follow the steps in `“Changing the Network Offering on a Guest Network” <networking2.html#changing-the-network-offering-on-a-guest-network>`_."
msgstr ""
#: ../../systemvm.rst:352
msgid "Best Practices for Virtual Routers"
msgstr ""
#: ../../systemvm.rst:354
msgid "WARNING: Restarting a virtual router from a hypervisor console deletes all the iptables rules. To work around this issue, stop the virtual router and start it from the CloudStack UI."
msgstr ""
#: ../../systemvm.rst:359
msgid "Do not use the destroyRouter API when only one router is available in the network, because restartNetwork API with the cleanup=false parameter can't recreate it later. If you want to destroy and recreate the single router available in the network, use the restartNetwork API with the cleanup=true parameter."
msgstr ""
#: ../../systemvm.rst:367
msgid "Service Monitoring Tool for Virtual Router"
msgstr ""
#: ../../systemvm.rst:369
msgid "Various services running on the CloudStack virtual routers can be monitored by using a Service Monitoring tool. The tool ensures that services are successfully running until CloudStack deliberately disables them. If a service goes down, the tool automatically restarts the service, and if that does not help bringing up the service, an alert as well as an event is generated indicating the failure. A new global parameter, ``network.router.enableservicemonitoring``, has been introduced to control this feature. The default value is false, implies, monitoring is disabled. When you enable, ensure that the Management Server and the router are restarted."
msgstr ""
#: ../../systemvm.rst:380
msgid "Monitoring tool can help to start a VR service, which is crashed due to an unexpected reason. For example:"
msgstr ""
#: ../../systemvm.rst:383
msgid "The services crashed due to defects in the source code."
msgstr ""
#: ../../systemvm.rst:385
msgid "The services that are terminated by the OS when memory or CPU is not sufficiently available for the service."
msgstr ""
#: ../../systemvm.rst:389
msgid "Only those services with daemons are monitored. The services that are failed due to errors in the service/daemon configuration file cannot be restarted by the Monitoring tool. VPC networks are not supported."
msgstr ""
#: ../../systemvm.rst:393
msgid "The following services are monitored in a VR:"
msgstr ""
#: ../../systemvm.rst:395
#: ../../systemvm.rst:455
msgid "DNS"
msgstr ""
#: ../../systemvm.rst:397
msgid "HA Proxy"
msgstr ""
#: ../../systemvm.rst:399
msgid "SSH"
msgstr ""
#: ../../systemvm.rst:401
msgid "Apache Web Server"
msgstr ""
#: ../../systemvm.rst:403
msgid "The following networks are supported:"
msgstr ""
#: ../../systemvm.rst:405
msgid "Isolated Networks"
msgstr ""
#: ../../systemvm.rst:407
msgid "Shared Networks in both Advanced and Basic zone"
msgstr ""
#: ../../systemvm.rst:409
msgid "VPC networks are not supported"
msgstr ""
#: ../../systemvm.rst:411
msgid "This feature is supported on the following hypervisors: XenServer, VMware, and KVM."
msgstr ""
#: ../../systemvm.rst:416
msgid "Enhanced Upgrade for Virtual Routers"
msgstr ""
#: ../../systemvm.rst:418
msgid "Upgrading VR is made flexible. The CloudStack administrators will be able to control the sequence of the VR upgrades. The sequencing is based on Infrastructure hierarchy, such as by Cluster, Pod, or Zone, and Administrative (Account) hierarchy, such as by Tenant or Domain. As an administrator, you can also determine when a particular customer service, such as VR, is upgraded within a specified upgrade interval. Upgrade operation is enhanced to increase the upgrade speed by allowing as many upgrade operations in parallel as possible."
msgstr ""
#: ../../systemvm.rst:427
msgid "During the entire duration of the upgrade, users cannot launch new services or make changes to an existing service."
msgstr ""
#: ../../systemvm.rst:430
msgid "Additionally, using multiple versions of VRs in a single instance is supported. In the Details tab of a VR, you can view the version and whether it requires upgrade. During the Management Server upgrade, CloudStack checks whether VR is at the latest version before performing any operation on the VR. To support this, a new global parameter, *``router.version.check``*, has been added. This parameter is set to true by default, which implies minimum required version is checked before performing any operation. No operation is performed if the VR is not at the required version. Services of the older version VR continue to be available, but no further operations can be performed on the VR until it is upgraded to the latest version. This will be a transient state until the VR is upgraded. This will ensure that the availability of VR services and VR state is not impacted due to the Management Server upgrade."
msgstr ""
#: ../../systemvm.rst:445
msgid "The following service will be available even if the VR is not upgraded. However, no changes for any of the services can be sent to the VR, until it is upgraded:"
msgstr ""
#: ../../systemvm.rst:449
msgid "SecurityGroup"
msgstr ""
#: ../../systemvm.rst:451
msgid "UserData"
msgstr ""
#: ../../systemvm.rst:453
msgid "DHCP"
msgstr ""
#: ../../systemvm.rst:457
msgid "LB"
msgstr ""
#: ../../systemvm.rst:459
msgid "Port Forwarding"
msgstr ""
#: ../../systemvm.rst:461
msgid "VPN"
msgstr ""
#: ../../systemvm.rst:463
msgid "Static NAT"
msgstr ""
#: ../../systemvm.rst:465
msgid "Source NAT"
msgstr ""
#: ../../systemvm.rst:467
msgid "Firewall"
msgstr ""
#: ../../systemvm.rst:469
msgid "Gateway"
msgstr ""
#: ../../systemvm.rst:471
msgid "NetworkACL"
msgstr ""
#: ../../systemvm.rst:475
msgid "Supported Virtual Routers"
msgstr ""
#: ../../systemvm.rst:477
msgid "VR"
msgstr ""
#: ../../systemvm.rst:479
msgid "VPC VR"
msgstr ""
#: ../../systemvm.rst:481
msgid "Redundant VR"
msgstr ""
#: ../../systemvm.rst:485
msgid "Upgrading Virtual Routers"
msgstr ""
#: ../../systemvm.rst:487
msgid "Download the latest System VM template."
msgstr ""
#: ../../systemvm.rst:489
msgid "Download the latest System VM to all the primary storage pools."
msgstr ""
#: ../../systemvm.rst:491
msgid "Upgrade the Management Server."
msgstr ""
#: ../../systemvm.rst:493
msgid "Upgrade CPVM and SSVM either from the UI or by using the following script:"
msgstr ""
#: ../../systemvm.rst:500
msgid "Even when the VRs are still on older versions, existing services will continue to be available to the VMs. The Management Server cannot perform any operations on the VRs until they are upgraded."
msgstr ""
#: ../../systemvm.rst:504
msgid "Selectively upgrade the VRs:"
msgstr ""
#: ../../systemvm.rst:506
msgid "Log in to the CloudStack UI as the root administrator."
msgstr ""
#: ../../systemvm.rst:508
msgid "In the left navigation, choose Infrastructure."
msgstr ""
#: ../../systemvm.rst:510
msgid "On Virtual Routers, click View More."
msgstr ""
#: ../../systemvm.rst:512
msgid "All the VRs are listed in the Virtual Routers page."
msgstr ""
#: ../../systemvm.rst:514
msgid "In Select View drop-down, select desired grouping based on your requirement."
msgstr ""
#: ../../systemvm.rst:517
msgid "You can use either of the following:"
msgstr ""
#: ../../systemvm.rst:519
msgid "Group by zone"
msgstr ""
#: ../../systemvm.rst:521
msgid "Group by pod"
msgstr ""
#: ../../systemvm.rst:523
msgid "Group by cluster"
msgstr ""
#: ../../systemvm.rst:525
msgid "Group by account"
msgstr ""
#: ../../systemvm.rst:527
msgid "Click the group which has the VRs to be upgraded."
msgstr ""
#: ../../systemvm.rst:529
msgid "For example, if you have selected Group by zone, select the name of the desired zone."
msgstr ""
#: ../../systemvm.rst:532
msgid "Click the Upgrade button to upgrade all the VRs. |vr-upgrade.png|"
msgstr ""
#: ../../systemvm.rst:534
msgid "Click OK to confirm."
msgstr ""
#: ../../systemvm.rst:538
msgid "Secondary Storage VM"
msgstr ""
#: ../../systemvm.rst:540
msgid "In addition to the hosts, CloudStack’s Secondary Storage VM mounts and writes to secondary storage."
msgstr ""
#: ../../systemvm.rst:543
msgid "Submissions to secondary storage go through the Secondary Storage VM. The Secondary Storage VM can retrieve templates and ISO images from URLs using a variety of protocols."
msgstr ""
#: ../../systemvm.rst:547
msgid "The secondary storage VM provides a background task that takes care of a variety of secondary storage activities: downloading a new template to a Zone, copying templates between Zones, and snapshot backups."
msgstr ""
#: ../../systemvm.rst:551
msgid "The administrator can log in to the secondary storage VM if needed."
msgstr ""