Howto extend a KVM virtual disk, using lvm, with larger disk space

Prerequisites:
An installed KVM Ubuntu 10.04 guest with regular disk using LVM (lvm makes the resize operation a bit more tricky).
In this example the original disk was 20 GB and I want to extend it with 20GB more.

1. Stop guest


2. Extend imagefile med zeroes to desired size
   - create addon space with the size you want to extend disk with
   sudo qemu-img create -f raw addon.raw 20G
   - make backup of the original disk
   mv ubuntu-dev.img ubuntu-dev.img.save
   - concatenate the extra space on top of the old image
   cat ubuntu-dev.img.save addon.raw >> ubuntu-dev.img
   


3. Start guest with gparted live iso
   Partitions might look like:
   

   Number  Start   End     Size    Type      File system  Flags
   1      1049kB  256MB   255MB   primary   ext2         boot
   2      257MB   20.5GB  20.3GB  extended
   5      257MB   20.5GB  20.3GB  logical                lvm
   

   
   - extend physical partition (2) with gparted (easiest) to fill upp the entire (new) disk
   


4. Reboot into guest
   - Remove the logical partition (lvm)
   - Create a new logic partition, with exact same start but new ending
   rm 5; mkpart logical ext2 0 4000; set 5 lvm on
   


5. Resize the lvm physical volume (use pvdisplay to find out the device /dev/vda5)
   - pvresize /dev/vda5
   


6. Resize the lvm locial volume
   - lvresize -L+4309 /dev/www/root
   repeat the above until you fill up the entire free space, use pvdisplay and lvdisplay to see the free size
   


7. fsck the filesystem, the filesystem name is visible when you do lvdisplay
   - fsck -n /dev/www/root
   


8. Resize the filesystem to fill up the space
   - resize2fs /dev/www/root
   

New Spanish speaking EJBCA forum

We have opened up a new EJBCA forum targeted for spanish speakers.
EJBCA-usuarios. You can visit the new forum on Sourceforge.

Welcome!

Prototyping a new admin web console for EJBCA

This is the first sneak preview of the new admin console that we are working on. The new admin console is currently scheduled for EJBCA 4.1, which is due in 2011. We'll see how the progress goes though, if we can include a beta earlier than that.
The new admin console is uses a modern JSF web framework, giving it a modern look and feel. Of course there is AJAX :-)

Check the movie below to see what the prototype offers. In the first step we have focused on making the CA administration and easy to use as possible. It should be easy to get an overview of your CAs and easy to make the simple tasks, operating on one or multiple CAs. Editing CAs (and profiles) will use a tabbed interface, removing the rediculously long list of options there is today. Instead we can hide the advanced features behind tabs that you don't need to open unless you really want to.
Other usability features will surely be added.

Please feel free to provide feedback on the current prototype, aspecially the ideas on how to manage CAs.

Or watch the video on YouTube.
Or download mpeg.
Or download ogv (opens directly in newer FireFox).

Cheers,
PrimeKey EJBCA Team.

Celebrate 10 years of BouncyCastle

David Hook of BouncyCastle wrote this on the dev-crypto mailinglist.

-----
Hi all,

While we're not in a habit of making a huge fuss about things, one thing
is about to come up which we thought we'd mention.

Monday 24th of May, marks 10 years since the first release of the Bouncy
Castle Cryptography APIs.

To give you an idea of what this means, the first release was on the
order of 24,000 lines of java. Ten years on we are now looking at
200,000 lines of Java and 160,000 lines of C# with a substantial
increase in functionality. The passage of time has certainly been felt.

Anyway, a lot of people outside of the core developers have contributed
over the years, so once again, thanks! And for us, them, and everyone
else, if you're inclined to celebrate 10 years of open source crypto
from this project, Monday is a good time to do it!

Cheers,

David
-----

An incredibly consistent track record of one of the best open source projects out there!

External RA enrollment Web GUI, sponsored by APNIC

I would like to take this opportunity to remind you that in EJBCA 3.10 there is a new, much awaited, feature. A web GUI for enrollment using the External RA.
The web GUI can be used to enroll for browser certificates using most browsers on all platforms. You can also enroll for server certificates and keystores.
The new GUI is developed with JSF and Facelets, using the IceFaces component library. This gives it a nice modern look and function.


The development of this new feature was sponsored by APNIC, who makes sure internet works in the Asia Pacific.

EJBCA at the Greek police

I held a presentation about EJBCA and SignServer at two conferences, held by Eellak, in Greece this weekend. As a part of this I gave as example an installation of EJBCA at the Greek police. A short summary below.

• Project PoL, Police on-line.
• EJCBA replaces RSA Keon CA.
• Installation by BYTE and PrimeKey.
• All certificates in smart cards (~25.000).
• Cards are used to access the PoL network and sign documents.
• Both old cards and new cards produced with EJBCA, used simultaneously
• to access, sign and encrypt using a new client, NetID.
• An old RSA cards that expire is replaced with a new card.
• Users and documents are not affected.

All in all a nice installation and a good example of usage of PKI in an organization.

EJBCA 3.9.7 and 3.10.1 released

Monday saw a double release of EJBCA. 3.9.7 fixes a very low number of issues in the old 3.9 branch, while 3.10.1 contains 34 fixes and feature enhancements for the 3.10 branch.

3.10.1 is the recommended release for all new installations.

Noteworthy changes in 3.10.1

• New WS-API methods for renewing CAs. This enables the possibility for
  automated SPoCs in an EAC ePassport PKI.


• New CMP proxy module letting you have a separate server terminating
  CMP connections and then forwarding them to the CA.


• Possibility to renew CAs without activating new keys, enabling the CA
  to continue working until a new certificate is imported.


• Support for SHA384WithECDSA signature algorithm.


• Fixed deployment on JBoss EAP 5.0.0.


• Fixed admin GUI bug with problems selecting privileges for RA
  administrators.


• Fixed some issues with cli and renewal of expired CAs.


• Fixed a bug with cli for getting delta CRLs.


• Other minor bug fixes.

Changes in 3.9.7

• Fixed an error when creating DVs signed by external CVCAs (EAC
  ePassport only).


• Give better error message when the same public key is passed in
  initial CVC request (EAC ePassport only).


• Log OCSP responder startup and shutdown.


• Fix possible NullpointerException in
  EjbcaWS.getAvailableCertificateProfiles.