Datacenter Management¶
The Datacenter view is the top-level management panel in Eight.ly OS. It provides infrastructure-wide configuration, backup scheduling, authentication, and cluster management.
Where to find it: Infrastructure > click Datacenter at the top of the resource tree
Datacenter tabs¶
| Tab | What it does |
|---|---|
| Summary | Aggregated CPU/memory/storage gauges, node count, VM/CT counts, cluster status |
| Notes | Markdown notes for your datacenter |
| Options | Keyboard layout, console viewer, MAC prefix, migration settings, bandwidth limits, resource scheduling, VMID range, user tag access, consent text |
| Cluster | Create/join/leave clusters, view node status — under Settings > Advanced |
| Ceph | Ceph distributed storage management — under Settings > Advanced |
| SDN | Software-defined networking — under Settings > Advanced |
| Storage | Manage storage backends (dir, zfs, lvm, nfs) with content/shared/enabled metadata |
| Backup | Backup scheduling with cron schedules and retention policies |
| Firewall | Datacenter-level firewall rules, security groups, aliases, IP sets — see Firewall |
| Replication | Rsync-based replication between nodes |
| Rehome | Rehome — high availability that fences a failed node, relocates its workloads, and brings them home on recovery — under Settings > Advanced |
| ACME | Let's Encrypt certificate management with DNS-01 plugins |
| Notifications | Email/webhook targets, event rules, notification history |
| Metric Server | Graphite and InfluxDB metric export |
| Resource Mappings | PCI and USB passthrough mappings |
| Directory Mappings | Host directory passthrough mappings |
| Permissions | Role and per-path permission entries (see the note below) |
| Authentication | Auth realms (LDAP, AD, OIDC), realm sync jobs, 2FA |
| Support | Support and diagnostics |
Backup scheduling¶
Create automated backup jobs with fine-grained control:
- Schedule format — a cron expression, same as
crontab(e.g.0 2 * * *for daily at 2 AM) - Selection — back up all VMs/CTs, all with exclusions, or a specific list
- Storage target — choose which storage backend receives backups
- Retention policies —
keep-last=4,keep-daily=7,keep-monthly=2style retention - Compression — configure backup compression level
Authentication system¶
Eight.ly OS includes a full authentication system beyond basic username/password.
Auth realms¶
Every install starts with Eight.ly's own local accounts (Settings > Users) — no configuration needed. On top of that, you can add external realms:
| Realm | Description |
|---|---|
| LDAP | Connect to an LDAP directory (OpenLDAP, FreeIPA) |
| Active Directory | Connect to Microsoft AD |
| OpenID Connect | SSO via Keycloak, Google, or any OIDC provider |
Realm sync jobs¶
Automatically mirror users and groups from external realms:
- Schedule sync on a cron-like interval
- Enable-new — automatically enable newly discovered users
- Remove-lost — disable or remove users deleted from the external directory
Two-Factor Authentication (2FA)¶
Enable TOTP-based 2FA per user:
- User enables 2FA from their profile
- Scan QR code with any TOTP app (Google Authenticator, Authy, 1Password)
- Enter verification code
- 2FA is required on every login going forward
Admins can unlock a user's 2FA if they lose access to their authenticator.
Groups and resource pools¶
- Groups — organize users into groups
- Resource pools — group VMs, containers, and storage under a named pool
Roles and per-path permissions — what's actually enforced¶
The Permissions and Authentication > Roles tabs let you define named roles (Administrator, plus finer-grained ones like EOSVMAdmin or EOSDatastoreAdmin), build custom roles from individual privileges, and assign them at a path in the resource tree.
What actually gates access on every request today is simpler: your account's coarse tier — Admin, Operator, or Viewer (see Security Model). The finer-grained roles and per-path assignments are stored and shown in the UI, but they aren't yet what the server checks when deciding whether a request is allowed. Don't rely on a custom role or a path-scoped permission entry as an access boundary — use the account tier for that until this catches up.
Metric server export¶
Export system metrics to external monitoring systems:
- Graphite — TCP export to Graphite/Carbon
- InfluxDB — HTTP export to InfluxDB
Eight.ly collects and pushes metrics on a schedule you configure; this is separate from the built-in Monitoring Stack and useful if you already run Graphite or InfluxDB elsewhere.
Global search¶
Press Cmd+K (or Ctrl+K) anywhere in Eight.ly OS to open global resource search. Search across VMs, containers, nodes, and storage — jump to any resource instantly. (Inside Nova, Cmd+K instead opens the model picker.)