<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 16 Jun 2016, at 09:07, Yaniv Kaul <<a href="mailto:ykaul@redhat.com" class="">ykaul@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><br class=""><div class="gmail_extra"><br class=""><div class="gmail_quote">On Thu, Jun 16, 2016 at 9:29 AM, Yedidyah Bar David <span dir="ltr" class=""><<a href="mailto:didi@redhat.com" target="_blank" class="">didi@redhat.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Thu, Jun 16, 2016 at 9:10 AM, Yaniv Kaul <<a href="mailto:ykaul@redhat.com" class="">ykaul@redhat.com</a>> wrote:<br class="">
><br class="">
><br class="">
> On Thu, Jun 16, 2016 at 8:53 AM, Yedidyah Bar David <<a href="mailto:didi@redhat.com" class="">didi@redhat.com</a>> wrote:<br class="">
>><br class="">
>> On Thu, Jun 16, 2016 at 5:33 AM, Sandvik Agustin<br class="">
>> <<a href="mailto:agustinsandvik@gmail.com" class="">agustinsandvik@gmail.com</a>> wrote:<br class="">
>> > Hi users,<br class="">
>> ><br class="">
>> > Good day, is it possible to configure two ovirt-engine to manage one<br class="">
>> > hypervisor? My purpose for this is what if the first ovirt-engine fails,<br class="">
>> > I<br class="">
>> > still have the 2nd ovirt-engine to manage hypervisor.<br class="">
>> ><br class="">
>> > is this possible? or any suggestion similar to my purpose?<br class="">
>><br class="">
>> The "normal" solution is hosted-engine, which has HA - the engine<br class="">
>> runs in a VM, and HA daemons monitor it and the hosts, and if there<br class="">
>> is a problem they can start it on another host.<br class="">
>><br class="">
>> There were discussions in the past, which you can find in the list<br class="">
>> archives,<br class="">
>> about running two engines against a single database, and current bottom<br class="">
>> line<br class="">
>> is that it's not supported, will not work, and iiuc will require some<br class="">
>> significant development investment to support.<br class="">
>><br class="">
>> You might manage to have an active/passive solution - install an engine<br class="">
>> on two machines, configure both to use the same remote database, but<br class="">
>> make sure only one of them is active at any given time. Not sure if that's<br class="">
>> considered "fully supported", but might come close.<br class=""></span></blockquote></div></div></div></div></blockquote><div><br class=""></div>even when you make it work when cert issues are sorted out, you need to be very careful not to bring both engines up managing a same host, they will fight over it and the monitoring is going to be received only by one of the engines, which in turn may cause HA VMs restart and split brains all over the place.</div><div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
><br class="">
><br class="">
> That's not enough - they need to share the same set of certificates...<br class="">
<br class="">
</span>Best is to simply clone the machine after initial setup then change<br class="">
what's needed, or backup/restore only files (engine-backup --mode=backup<br class="">
--scope=files).<br class="">
<br class="">
Didn't check, but I do not think they actually need all the certs of<br class="">
all hosts - that is, that it's not mandatory to keep /etc/pki synced<br class="">
between them after initial setup. Didn't try that myself.<br class=""></blockquote><div class=""><br class=""></div><div class="">I'm not sure what happens when you provision a host from Mgmt A, then move to Mgmt B and provision another from it:</div><div class="">1. Mgmt A won't be aware of that host, from cert req perspective. May not be such a big deal - donno.</div></div></div></div></div></blockquote></div><div><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_extra"><div class="gmail_quote"><div class="">2. Can Mgmt A provision another host? Need to ensure the certificate serial numbers are OK, etc.</div><div class=""><br class=""></div><div class="">They really need to share the CA DB.</div><div class="">The backup-restore sounds like good approach to me.</div><div class="">Y.</div><div class=""><br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="HOEnZb"><div class="h5"><br class="">
> Y.<br class="">
><br class="">
>><br class="">
>><br class="">
>> You can find on the net docs/resources about creating a redundant<br class="">
>> postgresql cluster.<br class="">
>><br class="">
>> Best,<br class="">
>> --<br class="">
>> Didi<br class="">
>> _______________________________________________<br class="">
>> Users mailing list<br class="">
>> <a href="mailto:Users@ovirt.org" class="">Users@ovirt.org</a><br class="">
>> <a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank" class="">http://lists.ovirt.org/mailman/listinfo/users</a><br class="">
><br class="">
><br class="">
<br class="">
<br class="">
<br class="">
</div></div><span class="HOEnZb"><font color="#888888" class="">--<br class="">
Didi<br class="">
</font></span></blockquote></div><br class=""></div></div>
_______________________________________________<br class="">Users mailing list<br class=""><a href="mailto:Users@ovirt.org" class="">Users@ovirt.org</a><br class="">http://lists.ovirt.org/mailman/listinfo/users<br class=""></div></blockquote></div><br class=""></body></html>