May 2013 - Devel - oVirt List Archives

[Engine-devel] 3.3 scratch or upgraded installation must use Apache proxy (https://bugzilla.redhat.com/905754)
by Sandro Bonazzola 27 May '13

27 May '13

Hi, I'm working on https://bugzilla.redhat.com/905754, trying to have Apache proxy in all 3.3 installations. I'm looking in the code and I've found a point where I'm in doubt about how to handle the case. The current engine-setup implementation perform some checks that change the behavior of the installer documented as: 1. Check whether the relevant httpd configuration files were changed, as it's an indication for the setup that the httpd application is being actively used, Therefore we may need to ask (dynamic change) the user whether to override this configuration. 2. Check if IPA is installed and drop port 80/443 support. What the script really do is setting OVERRIDE_HTTPD_CONFIG default to False in both cases and just for case 2 call also setHttpPortsToNonProxyDefault. About 1, if we can consider Apache "owned" by the engine we can drop any question to the user, else I think we need to ask what to do or abort the setup considering the configuration as unsupported. About 2, it seems that the best solution for that is to abort the setup if IPA is found on the same system where we're installing the engine. As far I've understood having IPA and engine on the same host is not a supported configuration. What do you think about this? -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

4 19

[Engine-devel] Clusters with empty processor name
by Vitor de Lima 24 May '13

24 May '13

--_000_B2CAFC4D5E2D574A883EF61ACD5ADE3301000617SERV070corpeldo_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi everyone, While I was figuring out how to implement the support for IBM POWER in the = oVirt engine, I stumbled into an use case that can cause some confusion. During the creation of a cluster, you can choose an empty processor name if= you do not select the option "Enable Virt Service". As a result, it is pos= sible to create a virtual machine inside a cluster without any attached hos= ts. So, if you create a VM this way, it is impossible to decide in which ar= chitecture it will run (if it is either x86-64 or POWER). Without knowing t= his, the engine cannot show the proper list of device models (for networks,= disks, displays, ...) in the frontend. It raises some questions: - Why oVirt allows the creation of clusters without a processor name? - What exactly is the "Virt Service"? Why are the processor related checks= only executed if this service is enabled? - How can this use case be solved? Should the engine always enforce a prope= r CPU name in all clusters? - If the engine enforces every cluster to have a CPU name, what should be d= one in the default Cluster? Thanks, Vitor --_000_B2CAFC4D5E2D574A883EF61ACD5ADE3301000617SERV070corpeldo_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"PT-BR" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span lang=3D"EN-US">Hi everyone,<o:p></o:p></span><= /p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">While I was figuring out how to= implement the support for IBM POWER in the oVirt engine, I stumbled into a= n use case that can cause some confusion.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">During the creation of a cluste= r, you can choose an empty processor name if you do not select the option &= quot;Enable Virt Service". As a result, it is possible to create a vir= tual machine inside a cluster without any attached hosts. So, if you create a VM this way, it is impossible to decide in whic= h architecture it will run (if it is either x86-64 or POWER). Without knowi= ng this, the engine cannot show the proper list of device models (for netwo= rks, disks, displays, ...) in the frontend.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">It raises some questions:<o:p><= /o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">- Why oVirt allows the creation= of clusters without a processor name?<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">- What exactly is the "Vir= t Service"? Why are the processor  related checks only executed i= f this service is enabled?<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">- How can this use case be solv= ed? Should the engine always enforce a proper CPU name in all clusters?<o:p= ></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">- If the engine enforces every = cluster to have a CPU name, what should be done in the default Cluster?<o:p= ></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">Thanks,<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">Vitor<o:p></o:p></span></p> </div> </body> </html> --_000_B2CAFC4D5E2D574A883EF61ACD5ADE3301000617SERV070corpeldo_--

2 1

[Engine-devel] which RESTful framework ovirt-engine used
by wlbleaboy＠126 24 May '13

24 May '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_0021_01CE5895.54B6CA80 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all: Recently , I'm studying ovirt-engine' REST API, I want to know which framework of RESTful ovirt-engine used. For example, if I wanted to build a web server with RESTful API like ovirt-engine, which framework or technology I need. When I search "RESTful" as a keyword in some opensource website, I get results like this: SemREST -- A Java Framework for the Semantic Extension of RESTful Web Services JAX-RS -- Kauri Jersey RESTEasy and so on. ------=_NextPart_000_0021_01CE5895.54B6CA80 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> <p class=3DMsoNormal><span lang=3DEN-US>Hi all:<o:p></o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>         Recently , I’m studying ovirt-engine’ REST API, I want to know which = framework of RESTful<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>ovirt-engine used. = <o:p></o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>         For example, if I wanted to build a web server with RESTful API like = ovirt-engine, which framework<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>or technology I = need.<o:p></o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>         When I search “RESTful” as a keyword in some opensource website, = I get results like this:<o:p></o:p></span></p> <p class=3DMsoNormal><b><span = lang=3DEN-US>SemREST        &nbsp= ; </span></b><span lang=3DEN-US>--</span><b><span lang=3DEN-US = style=3D'font-size:16.0pt;font-family: "Verdana","sans-serif";color:black'> </span><span lang=3DEN-US> A = Java Framework for the Semantic Extension of RESTful Web = Services<o:p></o:p></span></b></p> <p class=3DMsoNormal><b><span = lang=3DEN-US>JAX-RS         =      --       = </span></b><span lang=3DEN-US><o:p></o:p></span></p> <p class=3DMsoNormal><b><span = lang=3DEN-US>Kauri<o:p></o:p></span></b></p> <p class=3DMsoNormal><b><span = lang=3DEN-US>Jersey<o:p></o:p></span></b></p> <p class=3DMsoNormal><b><span = lang=3DEN-US>RESTEasy<o:p></o:p></span></b></p> <p class=3DMsoNormal><b><span = lang=3DEN-US><o:p> </o:p></span></b></p> <p class=3DMsoNormal><span lang=3DEN-US>and so = on…<o:p></o:p></span></p> </div> </body> </html> ------=_NextPart_000_0021_01CE5895.54B6CA80--

2 1

[Engine-devel] error install on centos
by Paco qw 23 May '13

23 May '13

Hello everyone. Ovirt install on Centos 6.2 Run engine-setup and get the error. Installing: Configuring oVirt Engine... [ DONE ] Configuring JVM... [ DONE ] Creating CA... [ DONE ] Updating ovirt-engine service... [ DONE ] Setting Database Configuration... [ DONE ] Setting Database Security... [ DONE ] Creating Database... [ ERROR ] Database creation failed Please check log file /var/log/ovirt-engine/engine-setup_2011_11_24_05_36_26.log for more information In log engine-db-install #engine db installer log file on rhevm8.lab.topsonline.ru [engine-db-install] verifying required rpms are installed. postgresql-server-8.4.9-1.el6_1.1.x86_64 postgresql-8.4.9-1.el6_1.1.x86_64 postgresql-libs-8.4.9-1.el6_1.1.x86_64 [engine-db-install] verifying postgres service exists. [engine-db-install] init postgres db. [engine-db-install] psgql db already been initialized. [engine-db-install] changing authentication scheme from peer to ident. [engine-db-install] changing authentication scheme from ident to trust. [engine-db-install] stop postgres service. Stopping postgresql service: [ OK ] [engine-db-install] starting postgres service. Starting postgresql service: [ OK ] [engine-db-install] validating that postgres service is running...retry 1 ?column? ---------- 1 (1 row) [engine-db-install] checking if engine db exists already.. psql: FATAL: database "engine" does not exist [engine-db-install] engine not installed. [engine-db-install] updating db admin credentials DROP ROLE CREATE ROLE [engine-db-install] creating engine db on postgres. /usr/share/ovirt-engine/dbscripts ~ /usr/share/ovirt-engine/dbscripts /usr/share/ovirt-engine/dbscripts Creating the database: engine dropdb: database removal failed: ERROR: database "engine" does not exist user name is: engine Creating tables... Creating functions... Creating common functions... Inserting data ... Inserting pre-defined roles ... Running upgrade scripts... upgrade script detected a change in Config, View or Stored Procedure... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/pre_upgrade/0000_config.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/pre_upgrade/0010_custom.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/pre_upgrade/0020_add_comment_col_to_schema_version.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/pre_upgrade/0030_add_materialized_views_table.sql ... Dropping materialized views... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0010_add_group_ids_to_users.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0030_change_storage_format_type_to_str.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0040_change_vm_dynamic_vm_ip_type.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0050_make_blank_template_pulic.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0060_add_group_everyone.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0100_add_device_size_to_luns.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0120_add_update_date_to_vm_templates.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0130_change_dwh_history_timekeeping_date_type.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0150_update_roles.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0180_add_guest_disk_size.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0190_add_latency_vm_disks.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0220_add_MaxAuditLogMessageLength_to_config.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0260_change_app_list_type_to_text.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0270_change_users_group_ids_field_to_text.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0280_change_blank_template_default_display_type_to_spice.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0300_add_local_admin_user.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0330_add_configuration_action_group_to_super_user_role.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0360_upgrade_default_vds_group_thp.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0380_add_otp_validity_to_vds_static.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0410_add_disks_usage.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0420_encrypt_pm_passwd.sh ... psql:upgrade/03_00_0420_encrypt_pm_passwd.sh:25: ERROR: syntax error at or near "#!/" LINE 1: #!/bin/bash ^ What am I doing wrong?

2 1

[Engine-devel] about user roles
by wlbleaboy＠126 22 May '13

22 May '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_0012_01CE5723.E5FA2190 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all: I have a question about user role. Recently, I connect to ovirt-engine by ovirt-engine-sdk, use the admin@internal login is ok, because admin have System Permissions. But , when I have a domain named ovirt.test.com, and have a user name leaboy in ovirt.test.com, leaboy(a)ovirt.test.com can't to login ovirt-engine. I think maybe leaboy don't have permissions to login ovirt-engine. So , I want to know how can I do let leaboy login ovirt-engine, or some exist roles can let leaboy login. Thanks. ------=_NextPart_000_0012_01CE5723.E5FA2190 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> <p class=3DMsoNormal><span lang=3DEN-US>Hi all:<o:p></o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>         I have a question about user role.<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>Recently, I connect to = ovirt-engine by ovirt-engine-sdk, use the admin@internal <o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>login is ok, because admin have = System Permissions. <o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>         But , when I have a domain named ovirt.test.com, and have a user name = leaboy<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>in ovirt.test.com, <a href=3D"mailto:leaboy@ovirt.test.com">leaboy(a)ovirt.test.com</a> = can’t to login ovirt-engine. I think maybe leaboy<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>don’t have permissions to = login ovirt-engine. So , I want to know how can I do let = leaboy<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>login ovirt-engine, or some = exist roles can let leaboy login.<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>          =             &= nbsp;           &n= bsp;            = Thanks. <o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> </div> </body> </html> ------=_NextPart_000_0012_01CE5723.E5FA2190--

2 2

[Engine-devel] Any reason to use UUID instead of name or dn?
by Juan Hernandez 22 May '13

22 May '13

Hello all, I am working on a series of changes with the objective to simplify the LDAP layer and make it more generic. One of the things that I would like to do is to use the name or dn attributes to identify the users/group instead of the UUIDs as we currently do. Can someone explain me if there is any powerful reason to use the directory specific UUIDs (objectGUID in ActiveDirectory, nsUniqueId in RHDS, etc) instead of user/group names or distinguished names? Thanks in advance, Juan Hernandez -- Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta 3ºD, 28016 Madrid, Spain Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.

3 2

[Engine-devel] about ovirt-shell
by wlbleaboy＠126 22 May '13

22 May '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_000B_01CE56FC.F4262150 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all: When I connect to ovirt-engine use ovirt-shell like this: It's failed, I don't know why. The ovirt-engine is build and deployed by myself and base ovirt-engine 3.2 But when I connect to the ovirt-engine use rmp installed, ovirt-shell work well. ++++++++++++++++++++++++++++++++++++++++++ Welcome to oVirt shell ++++++++++++++++++++++++++++++++++++++++++ [oVirt shell (disconnected)]# connect --url http://192.168.1.201 --user admin@internal --password 111111 error: [ERROR]::No response returned from server. If you're using HTTP protocol against a SSL secured server, then try using HTTPS instead. [oVirt shell (disconnected)]# ------=_NextPart_000_000B_01CE56FC.F4262150 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> <p class=3DMsoNormal><span lang=3DEN-US>Hi all:<o:p></o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>         When I connect to ovirt-engine use ovirt-shell like this: It’s failed, = I don’t know why.<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>The ovirt-engine is build and = deployed by myself and base ovirt-engine 3.2<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>         But when I connect to the ovirt-engine use rmp installed, ovirt-shell work = well.<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>++++++++++++++++++++++++++++++++++++++++++<o:p></o:p></span>= </p> <p class=3DMsoNormal><span lang=3DEN-US> <o:p></o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>          = Welcome to oVirt shell<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US> <o:p></o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US> ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p><= /span></p> <p class=3DMsoNormal><span = lang=3DEN-US>        = <o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>    = <o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>[oVirt shell (disconnected)]# = connect --url http://192.168.1.201 --user admin@internal --password = 111111<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>error: [ERROR]::No response = returned from server. If you're using HTTP protocol<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>against a SSL secured server, = then try using HTTPS instead.<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>[oVirt shell = (disconnected)]#<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> </div> </body> </html> ------=_NextPart_000_000B_01CE56FC.F4262150--

4 5

[Engine-devel] for a few clicks less
by Laszlo Hornyak 22 May '13

22 May '13

Hi, Today the default memory size when creating a VM is 512 MB, this is coming from the Blank template, which is not modifiable by user. This amount of memory is not enough for a installation for most Linux distros (and possibly for other mainstream OS either) so I think it would make sense to increase the default memory size to 1024 MB, for most users, it would save some time. This patch changes the memory size for new installations. http://gerrit.ovirt.org/14747 Thx, Laszlo

3 4

[Engine-devel] searchbackend cleanup
by Laszlo Hornyak 22 May '13

22 May '13

Hi, I have a patchset for the searchbackend waiting for review. Anyone could give me +2? http://gerrit.ovirt.org/14616/ http://gerrit.ovirt.org/14617/ http://gerrit.ovirt.org/14618/ http://gerrit.ovirt.org/14619/ http://gerrit.ovirt.org/14620/ Thx, Laszlo

1 0

[Engine-devel] Any tips for running ovirt from trunk on Fedora 19 Beta RC2?
by Dax Kelson 21 May '13

21 May '13

I did a git checkout and created rpms with "make rpm". I used engine-setup-2. Is that correct? engine-setup fails btw Going to the web page gives a error 503 "The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later." Under /var/log/ovirt-egine/ I see: console.log Exception in thread "main" javax.management.JMRuntimeException: Failed to load MBeanServerBuilder class org.jboss.as.jmx.PluggableMBeanServerBuilder: java.lang.ClassNotFoundException: org.jboss.as.jmx.PluggableMBeanServerBuilder from [Module "org.jboss.as.standalone:main" from local module loader @72e1c560 (roots: /usr/share/ovirt-engine/modules,/var/tmp/ovirt-engine/modules)] at javax.management.MBeanServerFactory.checkMBeanServerBuilder(MBeanServerFactory.java:502) at javax.management.MBeanServerFactory.getNewMBeanServerBuilder(MBeanServerFactory.java:538) at javax.management.MBeanServerFactory.newMBeanServer(MBeanServerFactory.java:315) at javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:230) at javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:191) at java.lang.management.ManagementFactory.getPlatformMBeanServer(ManagementFactory.java:466) at org.jboss.modules.Main.main(Main.java:286) Caused by: java.lang.ClassNotFoundException: org.jboss.as.jmx.PluggableMBeanServerBuilder from [Module "org.jboss.as.standalone:main" from local module loader @72e1c560 (roots: /usr/share/ovirt-engine/modules,/var/tmp/ovirt-engine/modules)] at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:190) at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468) at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456) at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398) at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120) at javax.management.MBeanServerFactory.loadBuilderClass(MBeanServerFactory.java:445) at javax.management.MBeanServerFactory.checkMBeanServerBuilder(MBeanServerFactory.java:487) ... 6 more Traceback (most recent call last): File "/usr/lib64/python2.7/logging/handlers.py", line 859, in emit self._connect_unixsocket(self.address) File "/usr/lib64/python2.7/logging/handlers.py", line 777, in _connect_unixsocket self.socket.connect(address) File "/usr/lib64/python2.7/socket.py", line 224, in meth return getattr(self._sock,name)(*args) error: [Errno 9] Bad file descriptor Logged from file service.py, line 557 from boot.log 11:35:03,354 INFO [org.jboss.modules] JBoss Modules version 1.1.1.GA 11:35:03,499 WARN [org.jboss.modules] Failed to define class org.jboss.as.jmx.PluggableMBeanServerBuilder in Module "org.jboss.as.jmx:main" from local module loader @72e1c560 (roots: /usr/share/ovirt-engine/modules,/var/tmp/ovirt-engine/modules): org.jboss.modules.ModuleLoadError: Error loading module from /var/tmp/ovirt-engine/modules/org/jboss/logging/main/module.xml at org.jboss.modules.ModuleLoadException.toError(ModuleLoadException.java:78) at org.jboss.modules.Module.getPathsUnchecked(Module.java:1181) at org.jboss.modules.Module.loadModuleClass(Module.java:512) at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:182) at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468) at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456) at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398) at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120) at java.lang.ClassLoader.defineClass1(Native Method) [rt.jar:1.7.0_19] at java.lang.ClassLoader.defineClass(ClassLoader.java:791) [rt.jar:1.7.0_19] at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142) [rt.jar:1.7.0_19] at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:327) at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:391) at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:243) at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:73) at org.jboss.modules.Module.loadModuleClass(Module.java:517) at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:182) at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468) at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456) at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398) at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120) at javax.management.MBeanServerFactory.loadBuilderClass(MBeanServerFactory.java:445) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.checkMBeanServerBuilder(MBeanServerFactory.java:487) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.getNewMBeanServerBuilder(MBeanServerFactory.java:538) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.newMBeanServer(MBeanServerFactory.java:315) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:230) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:191) [rt.jar:1.7.0_19] at java.lang.management.ManagementFactory.getPlatformMBeanServer(ManagementFactory.java:466) [rt.jar:1.7.0_19] at org.jboss.modules.Main.main(Main.java:286) Caused by: javax.xml.stream.XMLStreamException: ParseError at [row,col]:[27,50] Message: Failed to add resource root 'jboss-logging.jar' at path 'jboss-logging.jar' at org.jboss.modules.ModuleXmlParser.parseResourceRoot(ModuleXmlParser.java:898) at org.jboss.modules.ModuleXmlParser.parseResources(ModuleXmlParser.java:854) at org.jboss.modules.ModuleXmlParser.parseModuleContents(ModuleXmlParser.java:676) at org.jboss.modules.ModuleXmlParser.parseDocument(ModuleXmlParser.java:548) at org.jboss.modules.ModuleXmlParser.parseModuleXml(ModuleXmlParser.java:287) at org.jboss.modules.ModuleXmlParser.parseModuleXml(ModuleXmlParser.java:242) at org.jboss.modules.LocalModuleLoader.parseModuleInfoFile(LocalModuleLoader.java:138) at org.jboss.modules.LocalModuleLoader.findModule(LocalModuleLoader.java:122) at org.jboss.modules.ModuleLoader.loadModuleLocal(ModuleLoader.java:275) at org.jboss.modules.ModuleLoader.preloadModule(ModuleLoader.java:222) at org.jboss.modules.LocalModuleLoader.preloadModule(LocalModuleLoader.java:94) at org.jboss.modules.Module.addPaths(Module.java:841) at org.jboss.modules.Module.link(Module.java:1196) at org.jboss.modules.Module.getPaths(Module.java:1156) at org.jboss.modules.Module.getPathsUnchecked(Module.java:1179) ... 27 more

1 0

[Engine-devel] [REST-API] Support passing auth information without having to use HTTP Authorization header #958874
by Michael Pasternak 21 May '13

21 May '13

https://bugzilla.redhat.com/show_bug.cgi?id=958874 Hi Alon, (In reply to comment #2) > > Regardless of this specific RFE I would like to write that I don't like the > REST API session mechanism > [http://wiki.ovirt.org/Features/RESTSessionManagement] solution, as it > relays on cookies and not explicit API interaction. authentication in RESTful application is a matter of debate, it can be achieved in various ways, but session + cookie auth. method is very common and usually effective, it's biggest disadvantage is that it's not exactly RESfull cause client have to maintain (story) the cookie and not the server (but i wouldn't call it an issue at all), besides that it's works perfectly well from the REST PoV, also some may say that cookies are not strong enough and OAuth for instance should be used instead, but this is a different story cause in our case, cookie are for the clients (not browsers [1]) that can store them in a secure way or even not to store at all (in-memory cookie). [1] another disadvantage is that webbrowsers not able to access cookie namespace, but lately i've suggested URI based authentication [2] to support web browsers as well. [2] http://lists.ovirt.org/pipermail/engine-devel/2013-April/004235.html the biggest advantage of the cookie is a session expiration that maintained by the server and abstracted from the client what is much better from security PoV than standard authentication mechanisms such as HTTP basic auth for instance which can be potentially cached. > I would have expected a > 'ticket' to be retrieved and that 'ticket' to be disconnected from the > application server objects. Although we can refer the 'cookie' as a ticket, > however the requirement to parse it should not be required, there be a > conflict between two separate applications running on same server, and there > may be a problem to transfer credentials between servers. well, this is not exactly correct: 1. client desn't have to decode/parse the cookie and pass credentials, all it need is just to store the cookie and pass it as is to server on every request. 2. "conflict between two separate applications running on same server"? different cookie uses different domain & path by spec., can you pls explain what do you mean by this? > > If we modify authentication we should support more authentication types, at > least SPNEGO. > > In order to allow SPNEGO and other authentication mechanisms, we better > force people to use single URI to perform the login and return authenticated > 'ticket' to continue interaction with application. this is good for the backend authentication, but is not for the RESTful application, it's like buying an aeroplane and driving it on a road, "force people to use single URI to perform the login" means SOAP while we wanted REST where any URI is considered as entry point and actually a resource address that should be accessible/manipulatable and authentication should be abstracted/disconnected from this concept. SPNEGO is only an implementation detail that can be abstracted for the API. > This will be much simpler > implementation at the api side and much more efficient, and as we are > discussion application-to-application interaction there should be no user > experience visible issues. i'm not sure: "force people to use single URI to perform the login" and no "no user experience visible issues."? > > What I recommend is purely applicative rest login command... IIUC this is SOAP and not REST ... > --- > Input: authentication type, authentication credentials > authentication=http > authentication=password > credentials: > user=user > password=password > [OPTIONALLY] HTTP authentication headers > Output: > ticket > ticket issue time (required to avoid clock sync) > ticket expiration time > Logic: > if authentication is http, use http authentication headers to establish user > authentication. This will allow future SSO. > if authentication is password, use embedded credentials. > --- > > For every other rest call add http header: > oVirt-Authentication-Ticket: <ticket> this is not any different from the today's session based auth. only instead of oVirt-Authentication-Ticket added cookie. > > The backend side will attach the correct security context to the action if > the header is received. this is how it's works today. > > No need for the prefer mechanism nor multiple authentications. It should be > easy for javascript implementation to perform the authentication via the > designated URI, and then pass the ticket if not expired, when expired to > perform re-authentication with or without involving the user. again this is how it works today, and you not solving web browser problem as when ticket expires, they cannot re-authenticate with new oVirt-Authentication-Ticket cause this header is cached and cannot be changed by the browser in runtime. -- Michael Pasternak RedHat, ENG-Virtualization R&D

4 9

[Engine-devel] SQL procedure - row mapper
by Sahina Bose 21 May '13

21 May '13

Hi all, In org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler , there's a map maintained for procedure name and SimpleJdbcCall. If I have the same procedure with different row mappers, this results in an error - because the map already contains a mapping for the procedure name but with different row mapper. Do we intend to support calling the same procedure with different RowMappers? If so, I can change this class to handle this. thanks sahina

3 3

[Engine-devel] how to let engine run scripts with root privilege
by bigclouds 20 May '13

20 May '13

------=_Part_335625_1891521110.1369064678119 Content-Type: text/plain; charset=GBK Content-Transfer-Encoding: 7bit hi, engine run as a normal user, but sometimes we need it to run scripts(start,stop services) which require root privilege. how to do that? thanks. ------=_Part_335625_1891521110.1369064678119 Content-Type: text/html; charset=GBK Content-Transfer-Encoding: 7bit <div style="line-height:1.7;color:#000000;font-size:14px;font-family:arial"><div>hi,</div><div>engine run as a normal user, but sometimes we need it to run scripts(start,stop services) which require root privilege.</div><div>how to do that?</div><div> </div><div>thanks.</div></div><br><br><span title="neteasefooter"><span id="netease_mail_footer"></span></span> ------=_Part_335625_1891521110.1369064678119--

3 2

[Engine-devel] VDSM Java Bindings
by Saggi Mizrahi 20 May '13

20 May '13

A preliminary version on the Java bindings is up on gerrit ready for review. It's been up for a while now but I noticed I forgot to notify the list. It currently only supports the TCP transport as the Java implementation of Proton gave me a lot of grief and I wanted to release things ASAP. Also, receiving unions is still a bit problematic. The will always arrive as the base form of the union since detection of the concrete type is not implemented yet. I also don't like how unions works ATM and would like to come up with a system that makes them more easily detectable. You can review the code here http://gerrit.ovirt.org/#/q/status:open+project:vdsm+branch:master+topic:js… An example project showing how to set up a Java project and connect to a VDSM instance. https://github.com/ficoos/vdsmhello I would like to have more feedback about how the interface is exported and generated. Getting the interface right is much more important to me at the moment than performance tweaks and corner cases.

1 0

[Engine-devel] cannot attach ISO with latest master
by Dead Horse 20 May '13

20 May '13

Cannot attach images from the iso storage domain with latest master. VDSM version is latest master as well Host = EL6.4 2013-05-13 16:41:02,184 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IsoPrefixVDSCommand] (ajp--127.0.0.1-8702-7) [5d889258] START, IsoPrefixVDSCommand( storagePoolId = 0cba78bd-f1b7-438f-afac-acd59fab92ae, ignoreFailoverLimit = false, compatabilityVersion = null), log id: a85d3c0 2013-05-13 16:41:02,196 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IsoPrefixVDSCommand] (ajp--127.0.0.1-8702-7) [5d889258] FINISH, IsoPrefixVDSCommand, return: /rhev/data-center/mnt/192.168.0.1:_ovirt_dalaran/d6276dc3-1714-4024-9b70-b7971ed5fe35/images/11111111-1111-1111-1111-111111111111, log id: a85d3c0 2013-05-13 16:41:02,328 WARN [org.ovirt.engine.core.bll.RunVmOnceCommand] (ajp--127.0.0.1-8702-7) [5d889258] CanDoAction of action RunVmOnce failed. Reasons:VAR__ACTION__RUN,VAR__TYPE__VM,ERROR_CANNOT_FIND_ISO_IMAGE_PATH - DHC

3 5

[Engine-devel] [oVirt jenkins] Weekly report on open tasks for ovirt-engine
by Jenkins ci oVirt Server 18 May '13

18 May '13

------=_Part_2225_2133464712.1368918109841 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit <h2>Open tasks report for ovirt-engine</h2> <b>files scanned: '**/*.java, **/*.py'</b> <br><br> Report: http://jenkins.ovirt.org/job/ovirt_engine_scan_open_tasks/7/tasksResult/? ------=_Part_2225_2133464712.1368918109841--

1 0

[Engine-devel] vm in pool can't be suspended
by wlbleaboy＠126 17 May '13

17 May '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_0001_01CE52E1.4BA18980 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all: When I create some vms in pool, the vm in pool can't be suspended, I don't know is a bug, or it's don't support. ------=_NextPart_000_0001_01CE52E1.4BA18980 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> <p class=3DMsoNormal><span lang=3DEN-US>Hi all:<o:p></o:p></span></p> <p class=3DMsoNormal><span = lang=3DEN-US>         When I create some vms in pool, the vm in pool can’t be = suspended,<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US>I don’t know is a bug, or = it’s don’t support.<o:p></o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> <p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:p></span></p> </div> </body> </html> ------=_NextPart_000_0001_01CE52E1.4BA18980--

2 1

[Engine-devel] ovirt user portal and attach a cd
by Andrej Bagon 17 May '13

17 May '13

Hi all, we would like to limit a user as much as possible and give him only actions that he needs with his VM. If we disallow a user the right in system|configure system|manipulate permissions), we give the user, in user portal, only basic mode. But then three is no option to attach a cd in the basic user portal. In basic mode user interface there is no chance in attaching a cd (as this is a basic operation a solution to this would be a button attaching a cd when starting a vm). If we allow the user to manipulate permissions, we get the extended menu back and the user is limited, but we found unacceptable when he is adding permission to the VM, he sees all the users (name, surname, email!) in the ovirt authentication mechanism? A solution to this would be authenticating to the directory service as a user an not as ovirt admin user - meaning that the user will see only users that we allowed he sees in the ldap directory. Thank you. Best Regards, Andrej

4 8

[Engine-devel] Build ovirt from srpms and install
by Paco qw 17 May '13

17 May '13

Hi! Trying to build an RPM of ovirt in Centos 6.2. Srpms take away http://resources.ovirt.org/releases/3.2/rpm/EL/6/SRPMS/ execute commands engine-cleanup get an error Installing: Configuring oVirt Engine... [ DONE ] Configuring JVM... [ DONE ] Creating CA... [ DONE ] Updating ovirt-engine service... [ DONE ] Setting Database Configuration... [ DONE ] Setting Database Security... [ DONE ] Creating Database... [ ERROR ] Database creation failed Please check log file /var/log/ovirt-engine/engine-setup_2011_11_24_05_36_26.log for more information In log file - psql: FATAL: database "engine" does not exist ]0;root@rhevm8:/usr/lib/jvm[root@rhevm8 jvm]# ]0;root@rhevm8:/usr/lib/jvm[root@rhevm8 jvm]# ]0;root@rhevm8:/usr/lib/jvm[root@rhevm8 jvm]# ]0;root@rhevm8:/usr/lib/jvm[root@rhevm8 jvm]# moll java-1.7.0-openjdk-1.7.0.9.x86_64/jre/bin/[Kbin/[K [C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Kcd /usr/lib/jvm/ll /usr/lib/jvm/jre-1.7.0-openjdk.x86_64 [C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Cmore /var/log/ovirt-engine/engine-setup_2011_11_24_05_17_02.log [C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[1P[1P[1P[1P /var/log/ovirt-engine/engine-setup_2011_11_24_05_17_02.log [C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Cc /var/log/ovirt-engine/engine-setup_2011_11_24_05_17_02.log [C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Ca /var/log/ovirt-engine/engine-setup_2011_11_24_05_17_02.log [C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[Ct /var/log/ovirt-engine/engine-setup_2011_11_24_05_17_02.log [C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C[C 2011-11-24 05:17:02::DEBUG::engine-setup::2279::root:: importing module example_plugin_000, from file example_plugin_000.py 2011-11-24 05:17:02::DEBUG::example_plugin_000::17::root:: plugin example_plugin_000 loaded 2011-11-24 05:17:02::DEBUG::common_utils::1282::root:: checking if firewalld service is available 2011-11-24 05:17:02::DEBUG::common_utils::1282::root:: checking if iptables service is available 2011-11-24 05:17:02::DEBUG::common_utils::434::root:: Executing command --> '/sbin/ip addr' 2011-11-24 05:17:02::DEBUG::common_utils::472::root:: output = 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:21:5a:ac:0b:b6 brd ff:ff:ff:ff:ff:ff inet 192.168.91.166/25 brd 192.168.91.255 scope global eth0 inet6 fe80::221:5aff:feac:bb6/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 00:21:5a:ac:0b:dc brd ff:ff:ff:ff:ff:ff 2011-11-24 05:17:02::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:02::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:02::DEBUG::common_utils::593::root:: Found IP Address: 192.168.91.166 2011-11-24 05:17:02::DEBUG::engine-setup::2228::root:: initiating command line option parser 2011-11-24 05:17:02::DEBUG::engine-setup::2195::root:: checking total memory 2011-11-24 05:17:02::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/free -m' 2011-11-24 05:17:02::DEBUG::common_utils::472::root:: output = total used free shared buffers cached Mem: 13928 7087 6841 0 44 6579 -/+ buffers/cache: 463 13465 Swap: 16111 0 16111 2011-11-24 05:17:02::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:02::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:02::DEBUG::engine-setup::2207::root:: Found a match, amount of memory: 13928 2011-11-24 05:17:02::DEBUG::common_utils::332::root:: YUM: VERB: Loaded plugins: fastestmirror, presto, versionlock 2011-11-24 05:17:02::DEBUG::engine-setup::2097::root:: Entered main(configFile='None') 2011-11-24 05:17:02::DEBUG::engine-setup::1888::root:: stopping ovirt-engine service 2011-11-24 05:17:02::DEBUG::common_utils::1266::root:: getting status for ovirt-engine 2011-11-24 05:17:02::DEBUG::common_utils::1275::root:: executing action ovirt-engine on service status 2011-11-24 05:17:02::DEBUG::common_utils::434::root:: Executing command --> '/sbin/service ovirt-engine status' 2011-11-24 05:17:02::DEBUG::common_utils::472::root:: output = The engine is not running. 2011-11-24 05:17:02::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:02::DEBUG::common_utils::474::root:: retcode = 3 2011-11-24 05:17:02::DEBUG::engine-setup::1597::root:: going over group PORTS 2011-11-24 05:17:02::DEBUG::common_utils::1326::root:: retrieving version for ipa-server rpm 2011-11-24 05:17:02::DEBUG::common_utils::332::root:: YUM: VERB: Loaded plugins: fastestmirror, presto, versionlock 2011-11-24 05:17:02::DEBUG::common_utils::332::root:: YUM: VERB: Loading mirror speeds from cached hostfile 2011-11-24 05:17:13::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: epel/metalink (0%) 2011-11-24 05:17:13::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: epel/metalink 20 k(100%) 2011-11-24 05:17:17::DEBUG::common_utils::332::root:: YUM: VERB: * base: centos-mirror.rbc.ru 2011-11-24 05:17:17::DEBUG::common_utils::332::root:: YUM: VERB: * c6-media: 2011-11-24 05:17:17::DEBUG::common_utils::332::root:: YUM: VERB: * epel: mirror.yandex.ru 2011-11-24 05:17:17::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdia5nU5tmp.xml (0%) 2011-11-24 05:17:17::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdia5nU5tmp.xml 3.7 k(100%) 2011-11-24 05:17:17::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdsydpX3tmp.xml (0%) 2011-11-24 05:17:17::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdsydpX3tmp.xml 4.0 k(100%) 2011-11-24 05:17:18::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdtkXySWtmp.xml (0%) 2011-11-24 05:17:18::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdtkXySWtmp.xml 1.3 k(100%) 2011-11-24 05:17:18::DEBUG::common_utils::1347::root:: getRpmVersion failed Traceback (most recent call last): File "/usr/share/ovirt-engine/scripts/common_utils.py", line 1344, in installed getRpmVersion(rpmName=rpm) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 1338, in getRpmVersion raise Exception(output_messages.ERR_READ_RPM_VER % rpmName) Exception: Error reading version number for package ipa-server 2011-11-24 05:17:18::DEBUG::common_utils::1326::root:: retrieving version for freeipa-server rpm 2011-11-24 05:17:18::DEBUG::common_utils::332::root:: YUM: VERB: Loaded plugins: fastestmirror, presto, versionlock 2011-11-24 05:17:18::DEBUG::common_utils::332::root:: YUM: VERB: Loading mirror speeds from cached hostfile 2011-11-24 05:17:20::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: epel/metalink (0%) 2011-11-24 05:17:20::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: epel/metalink 20 k(100%) 2011-11-24 05:17:24::DEBUG::common_utils::332::root:: YUM: VERB: * base: mirror.majorhost.net 2011-11-24 05:17:24::DEBUG::common_utils::332::root:: YUM: VERB: * c6-media: 2011-11-24 05:17:24::DEBUG::common_utils::332::root:: YUM: VERB: * epel: mirror.yandex.ru 2011-11-24 05:17:24::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdJIgPbAtmp.xml (0%) 2011-11-24 05:17:24::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdJIgPbAtmp.xml 3.7 k(100%) 2011-11-24 05:17:24::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdYNz_Eutmp.xml (0%) 2011-11-24 05:17:24::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdYNz_Eutmp.xml 4.0 k(100%) 2011-11-24 05:17:25::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdQ8r269tmp.xml (0%) 2011-11-24 05:17:25::DEBUG::common_utils::332::root:: YUM: VERB: Downloading: repomdQ8r269tmp.xml 1.3 k(100%) 2011-11-24 05:17:26::DEBUG::common_utils::1347::root:: getRpmVersion failed Traceback (most recent call last): File "/usr/share/ovirt-engine/scripts/common_utils.py", line 1344, in installed getRpmVersion(rpmName=rpm) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 1338, in getRpmVersion raise Exception(output_messages.ERR_READ_RPM_VER % rpmName) Exception: Error reading version number for package freeipa-server 2011-11-24 05:17:26::INFO::engine-setup::1606::root:: Comparing pre-conditions; condition: 'True', and match: 'True' 2011-11-24 05:17:28::INFO::engine_validators::199::root:: validateOverrideHttpdConfAndChangePortsAccordingly y as part of ['yes', 'no'] 2011-11-24 05:17:28::INFO::engine_validators::182::root:: Validating y as part of ['yes', 'no'] 2011-11-24 05:17:28::DEBUG::engine_validators::207::root:: stopping httpd service 2011-11-24 05:17:28::DEBUG::common_utils::1238::root:: stopping httpd 2011-11-24 05:17:28::DEBUG::common_utils::1275::root:: executing action httpd on service stop 2011-11-24 05:17:28::DEBUG::common_utils::434::root:: Executing command --> '/sbin/service httpd stop' 2011-11-24 05:17:28::DEBUG::common_utils::472::root:: output = Stopping httpd: [FAILED] 2011-11-24 05:17:28::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:28::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:29::DEBUG::engine_validators::62::root:: Validating 80 as a valid TCP Port 2011-11-24 05:17:29::DEBUG::common_utils::398::root:: Checking if TCP port 80 is open by any process 2011-11-24 05:17:29::DEBUG::common_utils::434::root:: Executing command --> '/usr/sbin/lsof -i -n -P' 2011-11-24 05:17:29::DEBUG::common_utils::472::root:: output = COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME rpcbind 1225 rpc 6u IPv4 9182 0t0 UDP *:111 rpcbind 1225 rpc 7u IPv4 9186 0t0 UDP *:976 rpcbind 1225 rpc 8u IPv4 9187 0t0 TCP *:111 (LISTEN) rpcbind 1225 rpc 9u IPv6 9189 0t0 UDP *:111 rpcbind 1225 rpc 10u IPv6 9191 0t0 UDP *:976 rpcbind 1225 rpc 11u IPv6 9192 0t0 TCP *:111 (LISTEN) rpc.statd 1243 rpcuser 5r IPv4 9372 0t0 UDP *:995 rpc.statd 1243 rpcuser 8u IPv4 9376 0t0 UDP *:37288 rpc.statd 1243 rpcuser 9u IPv4 9380 0t0 TCP *:45184 (LISTEN) rpc.statd 1243 rpcuser 10u IPv6 9384 0t0 UDP *:53291 rpc.statd 1243 rpcuser 11u IPv6 9388 0t0 TCP *:59962 (LISTEN) sshd 1350 root 3u IPv4 9728 0t0 TCP *:22 (LISTEN) sshd 1350 root 4u IPv6 9730 0t0 TCP *:22 (LISTEN) sshd 1386 root 3r IPv4 9969 0t0 TCP 192.168.91.166:22-> 62.231.2.201:16232 (ESTABLISHED) sshd 1433 root 3r IPv4 10426 0t0 TCP 192.168.91.166:22-> 62.231.2.201:15167 (ESTABLISHED) postmaste 7175 postgres 3u IPv6 45181 0t0 TCP [::1]:5432 (LISTEN) postmaste 7175 postgres 4u IPv4 45182 0t0 TCP 127.0.0.1:5432(LISTEN) postmaste 7175 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 postmaste 7179 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 postmaste 7180 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 postmaste 7181 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 postmaste 7182 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 engine-se 8001 root 27u IPv4 48231 0t0 TCP 192.168.91.166:33822->80.239.156.215:443 (ESTABLISHED) engine-se 8001 root 33u IPv4 48710 0t0 TCP 192.168.91.166:36829->80.68.249.121:80 (ESTABLISHED) 2011-11-24 05:17:29::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:29::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:29::DEBUG::common_utils::434::root:: Executing command --> '/usr/sbin/semanage port -l' 2011-11-24 05:17:31::DEBUG::common_utils::472::root:: output = SELinux Port Type Proto Port Number afs_bos_port_t udp 7007 afs_client_port_t udp 7001 afs_fs_port_t tcp 2040 afs_fs_port_t udp 7000, 7005 afs_ka_port_t udp 7004 afs_pt_port_t udp 7002 afs_vl_port_t udp 7003 agentx_port_t tcp 705 agentx_port_t udp 705 amanda_port_t tcp 10080-10083 amanda_port_t udp 10080-10082 amavisd_recv_port_t tcp 10024 amavisd_send_port_t tcp 10025 amqp_port_t tcp 5671, 5672 amqp_port_t udp 5671, 5672 aol_port_t tcp 5190-5193 aol_port_t udp 5190-5193 apcupsd_port_t tcp 3551 apcupsd_port_t udp 3551 apertus_ldp_port_t tcp 539 apertus_ldp_port_t udp 539 asterisk_port_t tcp 1720 asterisk_port_t udp 2427, 2727, 4569 audit_port_t tcp 60 auth_port_t tcp 113 bgp_port_t tcp 179, 2605 bgp_port_t udp 179, 2605 boinc_port_t tcp 31416 certmaster_port_t tcp 51235 chronyd_port_t udp 323 clamd_port_t tcp 3310 clockspeed_port_t udp 4041 cluster_port_t tcp 5149, 40040, 50006-50008 cluster_port_t udp 5149, 50006-50008 cma_port_t tcp 1050 cma_port_t udp 1050 cobbler_port_t tcp 25151 commplex_port_t tcp 5000, 5001 commplex_port_t udp 5000, 5001 comsat_port_t udp 512 ctdb_port_t tcp 4379 ctdb_port_t udp 4379 cvs_port_t tcp 2401 cvs_port_t udp 2401 cyphesis_port_t tcp 6767, 6769, 6780-6799 cyphesis_port_t udp 32771 dbskkd_port_t tcp 1178 dcc_port_t udp 6276, 6277 dccm_port_t tcp 5679 dccm_port_t udp 5679 dhcpc_port_t tcp 68, 546 dhcpc_port_t udp 68, 546 dhcpd_port_t tcp 547, 548, 647, 847, 7911 dhcpd_port_t udp 67, 547, 548, 647, 847 dict_port_t tcp 2628 distccd_port_t tcp 3632 dns_port_t tcp 53 dns_port_t udp 53 dogtag_port_t tcp 7390 epmap_port_t tcp 135 epmap_port_t udp 135 festival_port_t tcp 1314 fingerd_port_t tcp 79 flash_port_t tcp 843, 1935 flash_port_t udp 1935 ftp_data_port_t tcp 20 ftp_port_t tcp 21, 990 ftp_port_t udp 990 gatekeeper_port_t tcp 1721, 7000 gatekeeper_port_t udp 1718, 1719 giftd_port_t tcp 1213 git_port_t tcp 9418 git_port_t udp 9418 gopher_port_t tcp 70 gopher_port_t udp 70 gpsd_port_t tcp 2947 hddtemp_port_t tcp 7634 hi_reserved_port_t tcp 512-1023 hi_reserved_port_t udp 512-1023 howl_port_t tcp 5335 howl_port_t udp 5353 hplip_port_t tcp 1782, 2207, 2208, 8290, 50000, 50002, 8292, 9100, 9101, 9102, 9220, 9221, 9222, 9280, 9281, 9282, 9290, 9291, 9292 http_cache_port_t tcp 3128, 8080, 8118, 8123, 10001-10010 http_cache_port_t udp 3130 http_port_t tcp 80, 443, 488, 8008, 8009, 8443 i18n_input_port_t tcp 9010 imaze_port_t tcp 5323 imaze_port_t udp 5323 inetd_child_port_t tcp 1, 7, 9, 13, 19, 37, 512, 543, 544, 891, 892, 2105, 5666 inetd_child_port_t udp 1, 7, 9, 13, 19, 37, 891, 892 innd_port_t tcp 119 ionixnetmon_port_t tcp 7410 ionixnetmon_port_t udp 7410 ipmi_port_t udp 623, 664 ipp_port_t tcp 631, 8610-8614 ipp_port_t udp 631, 8610-8614 ipsecnat_port_t tcp 4500 ipsecnat_port_t udp 4500 ircd_port_t tcp 6667 isakmp_port_t udp 500 iscsi_port_t tcp 3260 isns_port_t tcp 3205 isns_port_t udp 3205 jabber_client_port_t tcp 5222, 5223 jabber_interserver_port_t tcp 5269 jabber_router_port_t tcp 5347 jboss_management_port_t tcp 4712, 9123, 18001 jboss_management_port_t udp 4712, 9123 kerberos_admin_port_t tcp 749 kerberos_master_port_t tcp 4444 kerberos_master_port_t udp 4444 kerberos_password_port_t tcp 464 kerberos_password_port_t udp 464 kerberos_port_t tcp 88, 750 kerberos_port_t udp 88, 750 kismet_port_t tcp 2501 kprop_port_t tcp 754 ktalkd_port_t udp 517, 518 ldap_port_t tcp 389, 636, 3268 ldap_port_t udp 389, 636 lirc_port_t tcp 8765 lmtp_port_t tcp 24 lmtp_port_t udp 24 luci_port_t tcp 8084 mail_port_t tcp 2000, 3905 matahari_port_t tcp 49000 matahari_port_t udp 49000 memcache_port_t tcp 11211 memcache_port_t udp 11211 mmcc_port_t tcp 5050 mmcc_port_t udp 5050 monopd_port_t tcp 1234 movaz_ssc_port_t tcp 5252 mpd_port_t tcp 6600 msnp_port_t tcp 1863 msnp_port_t udp 1863 mssql_port_t tcp 1433, 1434 mssql_port_t udp 1433, 1434 munin_port_t tcp 4949 munin_port_t udp 4949 mysqld_port_t tcp 1186, 3306, 63132-63164 mysqlmanagerd_port_t tcp 2273 nessus_port_t tcp 1241 netport_port_t tcp 3129 netport_port_t udp 3129 netsupport_port_t tcp 5404, 5405 netsupport_port_t udp 5404, 5405 nmbd_port_t udp 137, 138 ntop_port_t tcp 3000, 3001 ntop_port_t udp 3000, 3001 ntp_port_t udp 123 ocsp_port_t tcp 9080 openvpn_port_t tcp 1194 openvpn_port_t udp 1194 oracle_port_t tcp 1521, 2483, 2484 oracle_port_t udp 1521, 2483, 2484 pegasus_http_port_t tcp 5988 pegasus_https_port_t tcp 5989 pgpkeyserver_port_t tcp 11371 pgpkeyserver_port_t udp 11371 pingd_port_t tcp 9125 piranha_port_t tcp 3636 pki_ca_port_t tcp 9180, 9701, 9443-9447 pki_kra_port_t tcp 10180, 10701, 10443-10446 pki_ocsp_port_t tcp 11180, 11701, 11443-11446 pki_ra_port_t tcp 12888, 12889 pki_tks_port_t tcp 13180, 13701, 13443-13446 pki_tps_port_t tcp 7888, 7889 pktcable_port_t tcp 2126, 3198 pktcable_port_t udp 2126, 3198 pop_port_t tcp 106, 109, 110, 143, 220, 993, 995, 1109 portmap_port_t tcp 111 portmap_port_t udp 111 postfix_policyd_port_t tcp 10031 postgresql_port_t tcp 5432 postgrey_port_t tcp 60000 prelude_port_t tcp 4690 prelude_port_t udp 4690 presence_port_t tcp 5298 presence_port_t udp 5298 printer_port_t tcp 515 ptal_port_t tcp 5703 pulseaudio_port_t tcp 4713 puppet_port_t tcp 8140 pxe_port_t udp 4011 pyzor_port_t udp 24441 radacct_port_t udp 1646, 1813 radius_port_t udp 1645, 1812 radsec_port_t tcp 2083 razor_port_t tcp 2703 repository_port_t tcp 6363 ricci_modcluster_port_t tcp 16851 ricci_modcluster_port_t udp 16851 ricci_port_t tcp 11111 ricci_port_t udp 11111 rlogind_port_t tcp 513 rndc_port_t tcp 953 router_port_t tcp 521 router_port_t udp 520, 521 rsh_port_t tcp 514 rsync_port_t tcp 873 rsync_port_t udp 873 rwho_port_t udp 513 sap_port_t tcp 9875 sap_port_t udp 9875 sieve_port_t tcp 4190 sip_port_t tcp 5060, 5061 sip_port_t udp 5060, 5061 sixxsconfig_port_t tcp 3874 sixxsconfig_port_t udp 3874 smbd_port_t tcp 137-139, 445 smtp_port_t tcp 25, 465, 587 snmp_port_t tcp 161-162, 199, 1161 snmp_port_t udp 161-162 soundd_port_t tcp 8000, 9433, 16001 spamd_port_t tcp 783 speech_port_t tcp 8036 squid_port_t tcp 3401, 4827 squid_port_t udp 3401, 4827 ssh_port_t tcp 22 streaming_port_t tcp 1755 streaming_port_t udp 1755 swat_port_t tcp 901 sype_port_t tcp 9911 sype_port_t udp 9911 syslogd_port_t tcp 6514 syslogd_port_t udp 514, 6514 telnetd_port_t tcp 23 tftp_port_t udp 69 tor_port_t tcp 6969, 9001, 9030, 9050, 9051 traceroute_port_t udp 64000-64010 transproxy_port_t tcp 8081 ups_port_t tcp 3493 uucpd_port_t tcp 540 varnishd_port_t tcp 6081, 6082 virt_migration_port_t tcp 49152-49216 virt_port_t tcp 16509, 16514 virt_port_t udp 16509, 16514 vnc_port_t tcp 5900-5999 wccp_port_t udp 2048 websm_port_t tcp 9090 websm_port_t udp 9090 whois_port_t tcp 43, 4321 whois_port_t udp 43, 4321 xdmcp_port_t tcp 177 xdmcp_port_t udp 177 xen_port_t tcp 8002 xfs_port_t tcp 7100 xserver_port_t tcp 6000-6150 zarafa_port_t tcp 236, 237 zebra_port_t tcp 2600-2604, 2606 zebra_port_t udp 2600-2604, 2606 zented_port_t tcp 1229 zented_port_t udp 1229 zope_port_t tcp 8021 2011-11-24 05:17:31::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:31::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:31::DEBUG::engine_validators::119::root:: http_port_t = [80, 443, 488, 8008, 8009, 8443] 2011-11-24 05:17:31::DEBUG::engine_validators::62::root:: Validating 443 as a valid TCP Port 2011-11-24 05:17:31::DEBUG::common_utils::398::root:: Checking if TCP port 443 is open by any process 2011-11-24 05:17:31::DEBUG::common_utils::434::root:: Executing command --> '/usr/sbin/lsof -i -n -P' 2011-11-24 05:17:31::DEBUG::common_utils::472::root:: output = COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME rpcbind 1225 rpc 6u IPv4 9182 0t0 UDP *:111 rpcbind 1225 rpc 7u IPv4 9186 0t0 UDP *:976 rpcbind 1225 rpc 8u IPv4 9187 0t0 TCP *:111 (LISTEN) rpcbind 1225 rpc 9u IPv6 9189 0t0 UDP *:111 rpcbind 1225 rpc 10u IPv6 9191 0t0 UDP *:976 rpcbind 1225 rpc 11u IPv6 9192 0t0 TCP *:111 (LISTEN) rpc.statd 1243 rpcuser 5r IPv4 9372 0t0 UDP *:995 rpc.statd 1243 rpcuser 8u IPv4 9376 0t0 UDP *:37288 rpc.statd 1243 rpcuser 9u IPv4 9380 0t0 TCP *:45184 (LISTEN) rpc.statd 1243 rpcuser 10u IPv6 9384 0t0 UDP *:53291 rpc.statd 1243 rpcuser 11u IPv6 9388 0t0 TCP *:59962 (LISTEN) sshd 1350 root 3u IPv4 9728 0t0 TCP *:22 (LISTEN) sshd 1350 root 4u IPv6 9730 0t0 TCP *:22 (LISTEN) sshd 1386 root 3r IPv4 9969 0t0 TCP 192.168.91.166:22-> 62.231.2.201:16232 (ESTABLISHED) sshd 1433 root 3r IPv4 10426 0t0 TCP 192.168.91.166:22-> 62.231.2.201:15167 (ESTABLISHED) postmaste 7175 postgres 3u IPv6 45181 0t0 TCP [::1]:5432 (LISTEN) postmaste 7175 postgres 4u IPv4 45182 0t0 TCP 127.0.0.1:5432(LISTEN) postmaste 7175 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 postmaste 7179 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 postmaste 7180 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 postmaste 7181 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 postmaste 7182 postgres 7u IPv6 45193 0t0 UDP [::1]:58773->[::1]:58773 engine-se 8001 root 27u IPv4 48231 0t0 TCP 192.168.91.166:33822->80.239.156.215:443 (ESTABLISHED) engine-se 8001 root 33u IPv4 48710 0t0 TCP 192.168.91.166:36829->80.68.249.121:80 (CLOSE_WAIT) 2011-11-24 05:17:31::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:31::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:31::DEBUG::common_utils::434::root:: Executing command --> '/usr/sbin/semanage port -l' 2011-11-24 05:17:33::DEBUG::common_utils::472::root:: output = SELinux Port Type Proto Port Number afs_bos_port_t udp 7007 afs_client_port_t udp 7001 afs_fs_port_t tcp 2040 afs_fs_port_t udp 7000, 7005 afs_ka_port_t udp 7004 afs_pt_port_t udp 7002 afs_vl_port_t udp 7003 agentx_port_t tcp 705 agentx_port_t udp 705 amanda_port_t tcp 10080-10083 amanda_port_t udp 10080-10082 amavisd_recv_port_t tcp 10024 amavisd_send_port_t tcp 10025 amqp_port_t tcp 5671, 5672 amqp_port_t udp 5671, 5672 aol_port_t tcp 5190-5193 aol_port_t udp 5190-5193 apcupsd_port_t tcp 3551 apcupsd_port_t udp 3551 apertus_ldp_port_t tcp 539 apertus_ldp_port_t udp 539 asterisk_port_t tcp 1720 asterisk_port_t udp 2427, 2727, 4569 audit_port_t tcp 60 auth_port_t tcp 113 bgp_port_t tcp 179, 2605 bgp_port_t udp 179, 2605 boinc_port_t tcp 31416 certmaster_port_t tcp 51235 chronyd_port_t udp 323 clamd_port_t tcp 3310 clockspeed_port_t udp 4041 cluster_port_t tcp 5149, 40040, 50006-50008 cluster_port_t udp 5149, 50006-50008 cma_port_t tcp 1050 cma_port_t udp 1050 cobbler_port_t tcp 25151 commplex_port_t tcp 5000, 5001 commplex_port_t udp 5000, 5001 comsat_port_t udp 512 ctdb_port_t tcp 4379 ctdb_port_t udp 4379 cvs_port_t tcp 2401 cvs_port_t udp 2401 cyphesis_port_t tcp 6767, 6769, 6780-6799 cyphesis_port_t udp 32771 dbskkd_port_t tcp 1178 dcc_port_t udp 6276, 6277 dccm_port_t tcp 5679 dccm_port_t udp 5679 dhcpc_port_t tcp 68, 546 dhcpc_port_t udp 68, 546 dhcpd_port_t tcp 547, 548, 647, 847, 7911 dhcpd_port_t udp 67, 547, 548, 647, 847 dict_port_t tcp 2628 distccd_port_t tcp 3632 dns_port_t tcp 53 dns_port_t udp 53 dogtag_port_t tcp 7390 epmap_port_t tcp 135 epmap_port_t udp 135 festival_port_t tcp 1314 fingerd_port_t tcp 79 flash_port_t tcp 843, 1935 flash_port_t udp 1935 ftp_data_port_t tcp 20 ftp_port_t tcp 21, 990 ftp_port_t udp 990 gatekeeper_port_t tcp 1721, 7000 gatekeeper_port_t udp 1718, 1719 giftd_port_t tcp 1213 git_port_t tcp 9418 git_port_t udp 9418 gopher_port_t tcp 70 gopher_port_t udp 70 gpsd_port_t tcp 2947 hddtemp_port_t tcp 7634 hi_reserved_port_t tcp 512-1023 hi_reserved_port_t udp 512-1023 howl_port_t tcp 5335 howl_port_t udp 5353 hplip_port_t tcp 1782, 2207, 2208, 8290, 50000, 50002, 8292, 9100, 9101, 9102, 9220, 9221, 9222, 9280, 9281, 9282, 9290, 9291, 9292 http_cache_port_t tcp 3128, 8080, 8118, 8123, 10001-10010 http_cache_port_t udp 3130 http_port_t tcp 80, 443, 488, 8008, 8009, 8443 i18n_input_port_t tcp 9010 imaze_port_t tcp 5323 imaze_port_t udp 5323 inetd_child_port_t tcp 1, 7, 9, 13, 19, 37, 512, 543, 544, 891, 892, 2105, 5666 inetd_child_port_t udp 1, 7, 9, 13, 19, 37, 891, 892 innd_port_t tcp 119 ionixnetmon_port_t tcp 7410 ionixnetmon_port_t udp 7410 ipmi_port_t udp 623, 664 ipp_port_t tcp 631, 8610-8614 ipp_port_t udp 631, 8610-8614 ipsecnat_port_t tcp 4500 ipsecnat_port_t udp 4500 ircd_port_t tcp 6667 isakmp_port_t udp 500 iscsi_port_t tcp 3260 isns_port_t tcp 3205 isns_port_t udp 3205 jabber_client_port_t tcp 5222, 5223 jabber_interserver_port_t tcp 5269 jabber_router_port_t tcp 5347 jboss_management_port_t tcp 4712, 9123, 18001 jboss_management_port_t udp 4712, 9123 kerberos_admin_port_t tcp 749 kerberos_master_port_t tcp 4444 kerberos_master_port_t udp 4444 kerberos_password_port_t tcp 464 kerberos_password_port_t udp 464 kerberos_port_t tcp 88, 750 kerberos_port_t udp 88, 750 kismet_port_t tcp 2501 kprop_port_t tcp 754 ktalkd_port_t udp 517, 518 ldap_port_t tcp 389, 636, 3268 ldap_port_t udp 389, 636 lirc_port_t tcp 8765 lmtp_port_t tcp 24 lmtp_port_t udp 24 luci_port_t tcp 8084 mail_port_t tcp 2000, 3905 matahari_port_t tcp 49000 matahari_port_t udp 49000 memcache_port_t tcp 11211 memcache_port_t udp 11211 mmcc_port_t tcp 5050 mmcc_port_t udp 5050 monopd_port_t tcp 1234 movaz_ssc_port_t tcp 5252 mpd_port_t tcp 6600 msnp_port_t tcp 1863 msnp_port_t udp 1863 mssql_port_t tcp 1433, 1434 mssql_port_t udp 1433, 1434 munin_port_t tcp 4949 munin_port_t udp 4949 mysqld_port_t tcp 1186, 3306, 63132-63164 mysqlmanagerd_port_t tcp 2273 nessus_port_t tcp 1241 netport_port_t tcp 3129 netport_port_t udp 3129 netsupport_port_t tcp 5404, 5405 netsupport_port_t udp 5404, 5405 nmbd_port_t udp 137, 138 ntop_port_t tcp 3000, 3001 ntop_port_t udp 3000, 3001 ntp_port_t udp 123 ocsp_port_t tcp 9080 openvpn_port_t tcp 1194 openvpn_port_t udp 1194 oracle_port_t tcp 1521, 2483, 2484 oracle_port_t udp 1521, 2483, 2484 pegasus_http_port_t tcp 5988 pegasus_https_port_t tcp 5989 pgpkeyserver_port_t tcp 11371 pgpkeyserver_port_t udp 11371 pingd_port_t tcp 9125 piranha_port_t tcp 3636 pki_ca_port_t tcp 9180, 9701, 9443-9447 pki_kra_port_t tcp 10180, 10701, 10443-10446 pki_ocsp_port_t tcp 11180, 11701, 11443-11446 pki_ra_port_t tcp 12888, 12889 pki_tks_port_t tcp 13180, 13701, 13443-13446 pki_tps_port_t tcp 7888, 7889 pktcable_port_t tcp 2126, 3198 pktcable_port_t udp 2126, 3198 pop_port_t tcp 106, 109, 110, 143, 220, 993, 995, 1109 portmap_port_t tcp 111 portmap_port_t udp 111 postfix_policyd_port_t tcp 10031 postgresql_port_t tcp 5432 postgrey_port_t tcp 60000 prelude_port_t tcp 4690 prelude_port_t udp 4690 presence_port_t tcp 5298 presence_port_t udp 5298 printer_port_t tcp 515 ptal_port_t tcp 5703 pulseaudio_port_t tcp 4713 puppet_port_t tcp 8140 pxe_port_t udp 4011 pyzor_port_t udp 24441 radacct_port_t udp 1646, 1813 radius_port_t udp 1645, 1812 radsec_port_t tcp 2083 razor_port_t tcp 2703 repository_port_t tcp 6363 ricci_modcluster_port_t tcp 16851 ricci_modcluster_port_t udp 16851 ricci_port_t tcp 11111 ricci_port_t udp 11111 rlogind_port_t tcp 513 rndc_port_t tcp 953 router_port_t tcp 521 router_port_t udp 520, 521 rsh_port_t tcp 514 rsync_port_t tcp 873 rsync_port_t udp 873 rwho_port_t udp 513 sap_port_t tcp 9875 sap_port_t udp 9875 sieve_port_t tcp 4190 sip_port_t tcp 5060, 5061 sip_port_t udp 5060, 5061 sixxsconfig_port_t tcp 3874 sixxsconfig_port_t udp 3874 smbd_port_t tcp 137-139, 445 smtp_port_t tcp 25, 465, 587 snmp_port_t tcp 161-162, 199, 1161 snmp_port_t udp 161-162 soundd_port_t tcp 8000, 9433, 16001 spamd_port_t tcp 783 speech_port_t tcp 8036 squid_port_t tcp 3401, 4827 squid_port_t udp 3401, 4827 ssh_port_t tcp 22 streaming_port_t tcp 1755 streaming_port_t udp 1755 swat_port_t tcp 901 sype_port_t tcp 9911 sype_port_t udp 9911 syslogd_port_t tcp 6514 syslogd_port_t udp 514, 6514 telnetd_port_t tcp 23 tftp_port_t udp 69 tor_port_t tcp 6969, 9001, 9030, 9050, 9051 traceroute_port_t udp 64000-64010 transproxy_port_t tcp 8081 ups_port_t tcp 3493 uucpd_port_t tcp 540 varnishd_port_t tcp 6081, 6082 virt_migration_port_t tcp 49152-49216 virt_port_t tcp 16509, 16514 virt_port_t udp 16509, 16514 vnc_port_t tcp 5900-5999 wccp_port_t udp 2048 websm_port_t tcp 9090 websm_port_t udp 9090 whois_port_t tcp 43, 4321 whois_port_t udp 43, 4321 xdmcp_port_t tcp 177 xdmcp_port_t udp 177 xen_port_t tcp 8002 xfs_port_t tcp 7100 xserver_port_t tcp 6000-6150 zarafa_port_t tcp 236, 237 zebra_port_t tcp 2600-2604, 2606 zebra_port_t udp 2600-2604, 2606 zented_port_t tcp 1229 zented_port_t udp 1229 zope_port_t tcp 8021 2011-11-24 05:17:33::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:33::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:33::DEBUG::engine_validators::119::root:: http_port_t = [80, 443, 488, 8008, 8009, 8443] 2011-11-24 05:17:33::DEBUG::engine-setup::1597::root:: going over group ALL_PARAMS 2011-11-24 05:17:33::INFO::engine-setup::1606::root:: Comparing pre-conditions; condition: 'True', and match: 'True' 2011-11-24 05:17:33::DEBUG::engine-setup::575::root:: setting default value (no) for key (RANDOM_PASSWORDS) 2011-11-24 05:17:33::DEBUG::engine-setup::575::root:: setting default value (00:1A:4A:A8:5B:00-00:1A:4A:A8:5B:FF) for key (MAC_RANGE) 2011-11-24 05:17:34::INFO::engine_validators::307::root:: Validating rhevm8.lab.topsonline.ru as a FQDN 2011-11-24 05:17:34::INFO::engine_validators::216::root:: validating rhevm8.lab.topsonline.ru as a valid domain string 2011-11-24 05:17:34::DEBUG::common_utils::434::root:: Executing command --> '/sbin/ip addr' 2011-11-24 05:17:34::DEBUG::common_utils::472::root:: output = 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:21:5a:ac:0b:b6 brd ff:ff:ff:ff:ff:ff inet 192.168.91.166/25 brd 192.168.91.255 scope global eth0 inet6 fe80::221:5aff:feac:bb6/64 scope link valid_lft forever preferred_lft forever 3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 00:21:5a:ac:0b:dc brd ff:ff:ff:ff:ff:ff 2011-11-24 05:17:34::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:34::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:34::DEBUG::common_utils::593::root:: Found IP Address: 192.168.91.166 2011-11-24 05:17:34::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/nslookup rhevm8.lab.topsonline.ru' 2011-11-24 05:17:34::DEBUG::common_utils::472::root:: output = Server: 192.168.90.11 Address: 192.168.90.11#53 Name: rhevm8.lab.topsonline.ru Address: 192.168.91.166 2011-11-24 05:17:34::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:34::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:34::DEBUG::engine_validators::526::root:: rhevm8.lab.topsonline.ru resolved into 192.168.91.166 2011-11-24 05:17:34::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/nslookup 192.168.91.166' 2011-11-24 05:17:34::DEBUG::common_utils::472::root:: output = Server: 192.168.90.11 Address: 192.168.90.11#53 166.91.168.192.in-addr.arpa name = rhevm8.lab.topsonline.ru. 2011-11-24 05:17:34::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:17:34::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:17:34::DEBUG::engine_validators::526::root:: 192.168.91.166 resolved into rhevm8.lab.topsonline.ru 2011-11-24 05:17:39::DEBUG::engine_validators::161::root:: Validating password 2011-11-24 05:17:42::DEBUG::engine-setup::654::root:: Param confirmation passed, value for both questions is identical 2011-11-24 05:17:43::INFO::engine_validators::388::root:: validating organization name 2011-11-24 05:17:44::INFO::engine_validators::182::root:: Validating both as part of ['virt', 'gluster', 'both'] 2011-11-24 05:17:47::INFO::engine_validators::182::root:: Validating FC as part of ['NFS', 'FC', 'ISCSI', 'POSIXFS'] 2011-11-24 05:17:48::INFO::engine_validators::182::root:: Validating local as part of ['remote', 'local'] 2011-11-24 05:17:48::DEBUG::engine-setup::1597::root:: going over group REMOTE_DB 2011-11-24 05:17:48::INFO::engine-setup::1606::root:: Comparing pre-conditions; condition: 'False', and match: 'True' 2011-11-24 05:17:48::DEBUG::engine-setup::1635::root:: no post condition check for group REMOTE_DB 2011-11-24 05:17:48::DEBUG::engine-setup::1597::root:: going over group LOCAL_DB 2011-11-24 05:17:48::INFO::engine-setup::1606::root:: Comparing pre-conditions; condition: 'False', and match: 'False' 2011-11-24 05:17:51::DEBUG::engine_validators::161::root:: Validating password 2011-11-24 05:17:53::DEBUG::engine-setup::654::root:: Param confirmation passed, value for both questions is identical 2011-11-24 05:17:53::DEBUG::engine-setup::1597::root:: going over group NFS 2011-11-24 05:17:56::INFO::engine_validators::182::root:: Validating no as part of ['yes', 'no'] 2011-11-24 05:17:56::INFO::engine-setup::1606::root:: Comparing pre-conditions; condition: 'no', and match: 'yes' 2011-11-24 05:17:56::DEBUG::engine-setup::1635::root:: no post condition check for group NFS 2011-11-24 05:17:56::DEBUG::engine-setup::1597::root:: going over group IPTABLES 2011-11-24 05:17:56::INFO::engine-setup::1606::root:: Comparing pre-conditions; condition: 'True', and match: 'True' 2011-11-24 05:17:57::INFO::engine_validators::182::root:: Validating no as part of ['None', 'IPTables'] 2011-11-24 05:18:00::INFO::engine_validators::182::root:: Validating none as part of ['None', 'IPTables'] 2011-11-24 05:18:00::INFO::engine-setup::1678::root:: *** User input summary *** 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: override-httpd-config: yes 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: http-port: 80 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: https-port: 443 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: host-fqdn: rhevm8.lab.topsonline.ru 2011-11-24 05:18:00::INFO::engine-setup::1687::root:: auth-pass: ******** 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: org-name: lab.topsonline.ru 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: application-mode: both 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: default-dc-type: FC 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: db-remote-install: local 2011-11-24 05:18:00::INFO::engine-setup::1687::root:: db-local-pass: ******** 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: config-nfs: no 2011-11-24 05:18:00::INFO::engine-setup::1691::root:: override-firewall: none 2011-11-24 05:18:00::INFO::engine-setup::1693::root:: *** User input summary *** 2011-11-24 05:18:00::DEBUG::common_utils::971::root:: asking user: Proceed with the configuration listed above? (yes|no): 2011-11-24 05:18:02::DEBUG::common_utils::975::root:: user answered: y 2011-11-24 05:18:02::DEBUG::engine-setup::1712::root:: user chose to accept user parameters 2011-11-24 05:18:02::DEBUG::engine-setup::2126::root:: {'ORG_NAME': ' lab.topsonline.ru', 'HOST_FQDN': 'rhevm8.lab.topsonline.ru', 'OVERRIDE_FIREWALL': 'none', 'HTTP_PORT': '80', 'APPLICATION_MODE': 'both', 'HTTPS_PORT': '443', 'AUTH_PASS_CONFIRMED': '********', 'DC_TYPE_ENUM': <common_utils.Enum object at 0x298eb50>, 'AUTH_PASS': '********', 'DB_LOCAL_PASS': '********', 'RANDOM_PASSWORDS': 'no', 'OVERRIDE_HTTPD_CONFIG': 'yes', 'APPLICATION_MODE_ENUM': <common_utils.Enum object at 0x254a810>, 'MAC_RANGE': '00:1A:4A:A8:5B:00-00:1A:4A:A8:5B:FF', 'DB_LOCAL_PASS_CONFIRMED': '********', 'CONFIG_NFS': 'no', 'DB_REMOTE_INSTALL': 'local', 'DC_TYPE': 'FC'} 2011-11-24 05:18:02::DEBUG::engine-setup::2129::root:: Entered Configuration stage 2011-11-24 05:18:02::DEBUG::setup_sequences::59::root:: running setMaxSharedMemory 2011-11-24 05:18:02::DEBUG::common_utils::434::root:: Executing command --> '/sbin/sysctl -b kernel.shmmax' 2011-11-24 05:18:02::DEBUG::common_utils::472::root:: output = 68719476736 2011-11-24 05:18:02::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:18:02::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:02::DEBUG::engine-setup::1783::root:: current shared memory max in kernel is 68719476736, there is no need to update the kernel parameters 2011-11-24 05:18:02::DEBUG::setup_sequences::59::root:: running _findJavaHome 2011-11-24 05:18:02::DEBUG::common_utils::434::root:: Executing command --> '/usr/lib/jvm/jre-1.7.0-openjdk.x86_64/bin/java -version' 2011-11-24 05:18:02::DEBUG::common_utils::472::root:: output = 2011-11-24 05:18:02::DEBUG::common_utils::473::root:: stderr = java version "1.7.0_09-icedtea" OpenJDK Runtime Environment (rhel-2.3.4.1.el6_3-x86_64) OpenJDK 64-Bit Server VM (build 23.2-b09, mixed mode) 2011-11-24 05:18:02::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:02::DEBUG::common_utils::434::root:: Executing command --> '/usr/lib/jvm/java-1.7.0-openjdk.x86_64/bin/java -version' 2011-11-24 05:18:02::DEBUG::common_utils::472::root:: output = 2011-11-24 05:18:02::DEBUG::common_utils::473::root:: stderr = java version "1.7.0_09-icedtea" OpenJDK Runtime Environment (rhel-2.3.4.1.el6_3-x86_64) OpenJDK 64-Bit Server VM (build 23.2-b09, mixed mode) 2011-11-24 05:18:02::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:02::DEBUG::common_utils::434::root:: Executing command --> '/usr/lib/jvm/jre-1.5.0-gcj/bin/java -version' 2011-11-24 05:18:02::DEBUG::common_utils::472::root:: output = java version "1.5.0" gij (GNU libgcj) version 4.4.7 20120313 (Red Hat 4.4.7-3) Copyright (C) 2007 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 2011-11-24 05:18:02::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:18:02::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:02::DEBUG::common_utils::1378::root:: Java version "1.5.0" is not supported, it should start with "1.7.0". 2011-11-24 05:18:02::DEBUG::common_utils::1412::root:: The java version "1.5.0" is not supported. 2011-11-24 05:18:02::DEBUG::common_utils::1430::root:: JVM path "/usr/lib/jvm/jre-1.7.0-openjdk.x86_64" doesn't contain the Java compiler. 2011-11-24 05:18:02::DEBUG::setup_sequences::59::root:: running _createCA 2011-11-24 05:18:02::DEBUG::engine-setup::923::root:: updating /etc/pki/ovirt-engine/cacert.template 2011-11-24 05:18:02::DEBUG::engine-setup::923::root:: updating /etc/pki/ovirt-engine/cert.template 2011-11-24 05:18:02::DEBUG::engine-setup::797::root:: Date string is 111123011802+0000 2011-11-24 05:18:02::DEBUG::engine-setup::804::root:: truncated HOST_FQDN ' rhevm8.lab.topsonline.ru' to 'rhevm8.lab.topsonline.ru'. sized reduced to 24.. 2011-11-24 05:18:02::DEBUG::engine-setup::806::root:: using unique CN: 'rhevm8.lab.topsonline.ru.77279' for CA certificate 2011-11-24 05:18:02::DEBUG::common_utils::434::root:: Executing command --> '/etc/pki/ovirt-engine/installCA.sh rhevm8.lab.topsonline.ru US lab.topsonline.ru engine ******** 111123011802+0000 /etc/pki/ovirt-engine rhevm8.lab.topsonline.ru.77279' 2011-11-24 05:18:03::DEBUG::common_utils::472::root:: output = } Creating CA... > Importing CA certificate... } Creating client certificates for oVirt... }} Creating Engine Key... }} Signing certificate request... }} Creating PKCS#12 store... }} Creating Engine Key... }} Signing certificate request... }} Creating PKCS#12 store... 2011-11-24 05:18:03::DEBUG::common_utils::473::root:: stderr = Generating RSA private key, 2048 bit long modulus ...............+++ ..................................................+++ e is 65537 (0x10001) Using configuration from openssl.conf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'US' organizationName :PRINTABLE:'lab.topsonline.ru' commonName :PRINTABLE:'CA-rhevm8.lab.topsonline.ru.77279' Certificate is to be certified until Nov 21 01:18:02 2021 GMT (3650 days) Write out database with 1 new entries Data Base Updated Certificate was added to keystore Generating a 2048 bit RSA private key ...................+++ ................+++ writing new private key to '/tmp/engine.8216.key' ----- Using configuration from openssl.conf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'US' organizationName :ASN.1 12:'lab.topsonline.ru' commonName :ASN.1 12:'rhevm8.lab.topsonline.ru' Certificate is to be certified until Oct 28 01:18:03 2016 GMT (1800 days) Write out database with 1 new entries Data Base Updated Generating a 2048 bit RSA private key ................................................................................................................+++ ...................................................+++ writing new private key to '/tmp/engine.8216.key' ----- Using configuration from openssl.conf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'US' organizationName :ASN.1 12:'lab.topsonline.ru' commonName :ASN.1 12:'rhevm8.lab.topsonline.ru' Certificate is to be certified until Oct 28 01:18:03 2016 GMT (1800 days) Write out database with 1 new entries Data Base Updated 2011-11-24 05:18:03::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:03::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/openssl pkcs12 -in /etc/pki/ovirt-engine/keys/engine.p12 -passin pass:******** -nodes -nocerts -out /etc/pki/ovirt-engine/keys/engine_id_rsa' 2011-11-24 05:18:03::DEBUG::common_utils::472::root:: output = 2011-11-24 05:18:03::DEBUG::common_utils::473::root:: stderr = MAC verified OK 2011-11-24 05:18:03::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:03::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/openssl pkcs12 -in /etc/pki/ovirt-engine/keys/apache.p12 -passin pass:******** -nodes -nocerts -out /etc/pki/ovirt-engine/keys/apache.key.nopass' 2011-11-24 05:18:03::DEBUG::common_utils::472::root:: output = 2011-11-24 05:18:03::DEBUG::common_utils::473::root:: stderr = MAC verified OK 2011-11-24 05:18:03::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:03::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/openssl x509 -in /etc/pki/ovirt-engine/ca.pem -fingerprint -noout' 2011-11-24 05:18:03::DEBUG::common_utils::472::root:: output = SHA1 Fingerprint=DC:C2:0F:0A:A6:18:0C:E7:99:42:A1:50:E2:C5:10:CD:E3:DE:6B:2B 2011-11-24 05:18:03::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:18:03::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:03::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/ssh-keygen -yf /etc/pki/ovirt-engine/keys/engine_id_rsa' 2011-11-24 05:18:03::DEBUG::common_utils::472::root:: output = ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTS3g+L05Mrevw/yGIxmoOq6k1Obrrq/cKazaNIxu4zVojJtWa6nnK12l8khy3zcT323aKHN78RUg+caIusnVPgPsW2dUPjW377LObJHXhqzswNrpd3h9Z214nJ+axWKnH6rG7bqwHOIE5+ItHd7QWXOJ169+QwithMuI8fVdIyAHsVyeA/gV9irKcCZ9oElw2dd70WQgVSO72kcIui7mpEkIbdx3WcV+9bGJa6pszP26mlxY5/ifxsMFZwfALoZWLgtVURge8+HELJYQ7O0tjBXZjxPWVN4DOCUQoloVru2ePC7OP77sq424bmoSWXgG7P4VUAE7XBg5JmwIZeMgT 2011-11-24 05:18:03::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:18:03::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:03::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/ssh-keygen -lf /tmp/tmpvYtF4U.pub' 2011-11-24 05:18:03::DEBUG::common_utils::472::root:: output = 2048 c0:2e:c5:ff:60:35:43:9c:31:ad:1b:b5:18:f6:91:b3 /tmp/tmpvYtF4U.pub (RSA) 2011-11-24 05:18:03::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:18:03::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:03::DEBUG::common_utils::1309::root:: chown /etc/pki/ovirt-engine/private to 108:108 2011-11-24 05:18:03::DEBUG::engine-setup::910::root:: changing directory permissions for /etc/pki/ovirt-engine/private to 0750 2011-11-24 05:18:03::DEBUG::common_utils::1309::root:: chown /etc/pki/ovirt-engine/ca.pem to 108:108 2011-11-24 05:18:03::DEBUG::engine-setup::913::root:: changing file permissions for /etc/pki/ovirt-engine/ca.pem to 0640 2011-11-24 05:18:03::DEBUG::common_utils::1309::root:: chown /etc/pki/ovirt-engine/keys/engine.p12 to 108:108 2011-11-24 05:18:03::DEBUG::engine-setup::913::root:: changing file permissions for /etc/pki/ovirt-engine/keys/engine.p12 to 0640 2011-11-24 05:18:03::DEBUG::common_utils::1309::root:: chown /etc/pki/ovirt-engine/private/ca.pem to 108:108 2011-11-24 05:18:03::DEBUG::engine-setup::913::root:: changing file permissions for /etc/pki/ovirt-engine/private/ca.pem to 0640 2011-11-24 05:18:03::DEBUG::common_utils::1309::root:: chown /etc/pki/ovirt-engine/.truststore to 108:108 2011-11-24 05:18:03::DEBUG::engine-setup::913::root:: changing file permissions for /etc/pki/ovirt-engine/.truststore to 0640 2011-11-24 05:18:03::DEBUG::setup_sequences::59::root:: running _editSysconfig 2011-11-24 05:18:03::DEBUG::common_utils::781::root:: found existing pgpass file /etc/ovirt-engine/.pgpass, fetching DB user value 2011-11-24 05:18:03::DEBUG::common_utils::1148::root:: Loading text file handler 2011-11-24 05:18:03::DEBUG::common_utils::1180::root:: Engine has been configured 2011-11-24 05:18:03::DEBUG::setup_sequences::59::root:: running _updatePgPassFile 2011-11-24 05:18:03::DEBUG::engine-setup::1348::root:: found existing pgpass file, backing current to /etc/ovirt-engine/.pgpass.2011_11_24_05_18_03 2011-11-24 05:18:03::INFO::engine-setup::1372::root:: Using default db credentials 2011-11-24 05:18:03::DEBUG::engine-setup::1973::root:: Checking if db is already installed.. 2011-11-24 05:18:03::DEBUG::engine-setup::1974::root:: Checking the presence of .pgpass file 2011-11-24 05:18:03::DEBUG::common_utils::481::root:: running sql query 'select 1' on db server: 'localhost'. 2011-11-24 05:18:03::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/psql -h localhost -p 5432 -U postgres -d engine -c select 1' 2011-11-24 05:18:03::DEBUG::common_utils::472::root:: output = 2011-11-24 05:18:03::DEBUG::common_utils::473::root:: stderr = psql: FATAL: database "engine" does not exist 2011-11-24 05:18:03::DEBUG::common_utils::474::root:: retcode = 2 2011-11-24 05:18:03::DEBUG::engine-setup::1973::root:: Checking if db is already installed.. 2011-11-24 05:18:03::DEBUG::engine-setup::1974::root:: Checking the presence of .pgpass file 2011-11-24 05:18:03::DEBUG::common_utils::481::root:: running sql query 'select 1' on db server: 'localhost'. 2011-11-24 05:18:03::DEBUG::common_utils::434::root:: Executing command --> '/usr/bin/psql -h localhost -p 5432 -U postgres -d engine -c select 1' 2011-11-24 05:18:03::DEBUG::common_utils::472::root:: output = 2011-11-24 05:18:03::DEBUG::common_utils::473::root:: stderr = psql: FATAL: database "engine" does not exist 2011-11-24 05:18:03::DEBUG::common_utils::474::root:: retcode = 2 2011-11-24 05:18:03::DEBUG::setup_sequences::59::root:: running _encryptDBPass 2011-11-24 05:18:03::DEBUG::common_utils::434::root:: Executing command --> '/usr/share/ovirt-engine/bin/engine-encrypt-passwd.sh ********' 2011-11-24 05:18:04::DEBUG::common_utils::472::root:: output = Encoded password: -25bb02aac8b8140a64265f4892564719 2011-11-24 05:18:04::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:18:04::DEBUG::common_utils::474::root:: retcode = 0 2011-11-24 05:18:04::DEBUG::common_utils::676::root:: found new parsed string: -25bb02aac8b8140a64265f4892564719 2011-11-24 05:18:04::DEBUG::setup_sequences::59::root:: running _configEncryptedPass 2011-11-24 05:18:04::DEBUG::common_utils::1208::root:: Encrypting database password. 2011-11-24 05:18:04::DEBUG::common_utils::781::root:: found existing pgpass file /etc/ovirt-engine/.pgpass, fetching DB user value 2011-11-24 05:18:04::DEBUG::setup_sequences::59::root:: running _createDB 2011-11-24 05:18:04::DEBUG::engine-setup::1105::root:: installing postgres db 2011-11-24 05:18:04::DEBUG::engine-setup::1108::root:: engine db creation is logged at /var/log/ovirt-engine//engine-db-install-2011_11_24_05_18_04.log 2011-11-24 05:18:04::DEBUG::common_utils::434::root:: Executing command --> '/usr/share/ovirt-engine/dbscripts/engine-db-install.sh -l engine-db-install-2011_11_24_05_18_04.log -w ******** -u postgres -s localhost -p 5432 -r local' 2011-11-24 05:18:22::DEBUG::common_utils::472::root:: output = Running local installation error, failed creating enginedb 2011-11-24 05:18:22::DEBUG::common_utils::473::root:: stderr = 2011-11-24 05:18:22::DEBUG::common_utils::474::root:: retcode = 1 2011-11-24 05:18:22::DEBUG::setup_sequences::62::root:: Traceback (most recent call last): File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 60, in run function() File "/usr/bin/engine-setup", line 1124, in _createDB output, rc = utils.execCmd(cmdList=cmd, failOnError=True, msg=output_messages.ERR_DB_CREATE_FAILED, maskList=masked_value_set) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 477, in execCmd raise Exception(msg) Exception: Database creation failed 2011-11-24 05:18:22::DEBUG::engine-setup::1965::root:: *** The following params were used as user input: 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: override-httpd-config: yes 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: http-port: 80 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: https-port: 443 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: random-passwords: no 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: mac-range: 00:1A:4A:A8:5B:00-00:1A:4A:A8:5B:FF 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: host-fqdn: rhevm8.lab.topsonline.ru 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: auth-pass: ******** 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: org-name: lab.topsonline.ru 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: application-mode: both 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: default-dc-type: FC 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: db-remote-install: local 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: db-host: localhost 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: db-local-pass: ******** 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: config-nfs: no 2011-11-24 05:18:22::DEBUG::engine-setup::1970::root:: override-firewall: none 2011-11-24 05:18:22::ERROR::engine-setup::2385::root:: Traceback (most recent call last): File "/usr/bin/engine-setup", line 2379, in <module> main(confFile) File "/usr/bin/engine-setup", line 2162, in main runSequences() File "/usr/bin/engine-setup", line 2085, in runSequences controller.runAllSequences() File "/usr/share/ovirt-engine/scripts/setup_controller.py", line 54, in runAllSequences sequence.run() File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 154, in run step.run() File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 60, in run function() File "/usr/bin/engine-setup", line 1124, in _createDB output, rc = utils.execCmd(cmdList=cmd, failOnError=True, msg=output_messages.ERR_DB_CREATE_FAILED, maskList=masked_value_set) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 477, in execCmd raise Exception(msg) Exception: Database creation failed ]0;root@rhevm8:/usr/lib/jvm[root@rhevm8 jvm]#

1 0

[Engine-devel] [ANN] Development environment and Gentoo packaging (preview)
by Alon Bar-Lev 16 May '13

16 May '13

Hello All, We[1] are working to rewrite the current installer to something more portable and flexible. Currently two milestones had been reached: 1. Ability to install almost fully functioning ovirt-engine at $HOME for development environment. 2. Porting ovirt-engine to run on different distribution, Gentoo. We will be glad to receive feedback on either. Code is located at github[2] for now, at otopi branch. Instructions for setting up development environment are available[3]. Gentoo overlay for live ebuilds is available[4], the following packages are valid: - app-emulation/otopi - app-emulation/ovirt-host-deploy - app-emulation/ovirt-jboss-bin - app-emulation/ovirt-engine Why Gentoo first? because source based distributions demands the highest level of customization, solving the complex issue ease to continue porting to binary based distributions. Please remember that this is work in progress, and not guarantee to be stable or even work... The installer was re-written from scratch so expect issues at this point. Any feedback is welcomed, we are focusing first in providing the functionality of the existing installer to be able to replace it entirely before going into new adventures. Regards, Alon Bar-Lev. [1] Alex Lourie, Sandro Bonazzola, Alon Bar-Lev [2] https://github.com/alonbl/ovirt-engine [3] https://github.com/alonbl/ovirt-engine/blob/otopi/README.developer [4] https://github.com/alonbl/ovirt-overlay

2 1

[Engine-devel] Snapshots with RAM feature
by Arik Hadas 16 May '13

16 May '13

Hi All, The proposed feature will make it possible to run a VM which was reverted to live snapshot or created from live snapshot with the same memory state as it was at the moment the live snapshot was taken. http://www.ovirt.org/Features/RAM_Snapshots All feedback is welcome! Regards, Arik

5 8

[Engine-devel] [ANN] New development environment for ovirt-engine
by Alon Bar-Lev 15 May '13

15 May '13

Hello all ovirt-engine developers, When I first joined the ovirt project, it took me about two weeks to setup a development environment, I needed to work on a bug related to host-deploy so I needed an environment that could use the ssh, PKI, vdsm-bootstrap and communicate with vdsm using SSL, this was virtually impossible to do so without tweaking the product in a way that it is so different from production use, that I cannot guarantee that whatever tested in development will actually work in production. I peeked at the installation script in a hope that I can create partial environment similar to production, but I found that the packaging implementation makes to much assumption and is very difficult to adopt. The fact that I do not use fedora/rhel for my development made it even worse. I had no other option than to create rpms after each of my changes and test each in real production like setup. It was obvious to me that the manual customization of developers to achieve working product will eventually break as product grow and move away from being developer friendly to production friendly. For example, product defaults cannot be these which serve developers, but these which serve production the best, or having a valid PKI setup cannot be optional any more as components do need to use it. Same for location of files and configuration, for example, if we write a pluggable infrastructure for branding, we cannot damage the interface just because developers runs the product in their own manual customization. I took the opportunity handed to me to port the ovirt-engine to other distributions in order to provide a development environment that is similar to production setup. Together with Sandro Bonazzola and Alex Lourie we re-wrote the whole installation of the product which can also be used to setup the desired development environment. Within this environment the product is set up using the same tools and configuration as in production, while the process does not require special privileges nor changes the state of the developer machine. A complete documentation is available[1], I preferred to use README within the source tree as wiki tend to quickly become obsolete, while documentation within source tree can be modified by the commit that introduces a change. I will redirect to this file from the current wiki once the site will be up. In a nut shell, after installing prerequisites, build and install the product using: $ make clean install-dev PREFIX=$HOME/ovirt-engine This will run maven and create product installation at $HOME/ovirt-engine Next, a setup phase is required just like in production, to initialize configuration and database: $ $HOME/ovirt-engine/bin/engine-setup-2 You have now fully functional product, including PKI, SSL, host-deploy, tools. No manual database updates are required, no lose of functionality. All that is left is to start the engine service: $ $HOME/ovirt-engine/share/ovirt-engine/services/ovirt-engine.py start Access to application: http://localhost:8080 https://localhost:8443 Debugging port is opened at port 8787. Farther information exists in the documentation[1]. There are several inherit benefits of the new environment, the major one is the ability to manage several environments in parallel on the same host. For example, if we develop two separate features on two branches we can install the product into $HOME/ovirt-engine-feature1 and $HOME/ovirt-engine-feature-2 and have a separate database for each, if we modify the ports jboss is listening to we can run two instances of engine at the same time! We will be happy to work with all developers to assist in porting into the new development environment, the simplest is to create a new database for this effort. Moti has a sequence of converting the existing database owned by postgres to be owned by the engine, Moti, can you please share that? We are sure there are missing bits, we will be happy to know these so we can improve. I am aware that developers (especially java) are conservative, but I ask you to give us a chance, so that we make it easy for developers to join the project, and to allow us to drop the parallel effort of packaging to production and fixing the broken development environment. A special thanks to developers who took the time to test and provide feedback before the merged: - Yaniv Bronheim - Moti Asayag - Limor Gavish - Sharad Mishra - Ofer Schreiber We are hoping that after migration you will be find this environment useful and friendly, Sandro Bonazzola, Alex Lourie, Alon Bar-Lev. [1] http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=blob;f=README.developer…

7 13

[Engine-devel] Engine config and device custom properties
by Martin Perina 15 May '13

15 May '13

Hi, I'm working on a patch to support custom device properties in ovirt-engine. I would like that custom device properties format can be set using engine-config command in a similar way as UserDefinedVMProperties. What is needed to be done to support this? Thanks Martin

3 2

[Engine-devel] UI Plugins: issue with REST API keep-alive heartbeat fixed
by Vojtech Szocs 14 May '13

14 May '13

Hi guys, just a quick update, recently we fixed an issue [1] with UI Plugin REST API integration trying to keep-alive the current REST API session, which was causing repeated "User logged in" events in GUI, along with new REST API session created each time the heartbeat request was fired. Please refer to commit message for more details on this issue. There are some things to be aware of with regard to UI Plugin REST API integration: - all plugins still receive a single session ID based on WebAdmin user credentials, i.e. keep the current "single-admin-session-for-all-plugins" behavior - session timeout is set to 6 hours --> 2x more than default REST API session timeout - WebAdmin will *not* try to keep-alive the session via periodic heartbeat requests, i.e. break the current "keep-session-alive-while-user-stays-authenticated" behavior In practice, this means that after a user logs into WebAdmin, if no plugin interacts with the REST API session via provided ID for more than 6 hours, the session will time-out eventually. Unfortunately, for now, we can't support the session keep-alive mechanism due to issues with HTTP 'Authorization' header handling in web browsers, but with RFE [2] it would be possible to re-implement the session keep-alive mechanism. On the other hand, we'll most likely revisit the current "single-admin-session-for-all-plugins" behavior in future, i.e. have special Engine users created for use with UI Plugin REST API integration, with permissions of such users under control by the admin. This would change the current behavior to something like "separate-user-session-for-each-plugin", with individual plugins able to create their own REST API session on demand. Regards, Vojtech [1] http://gerrit.ovirt.org/#/c/14411/

2 2

[Engine-devel] What type of DB inheritance to use?
by Mike Kolesnik 14 May '13

14 May '13

------=_Part_165720_1428728257.1368351734157 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Hi All, I would like to have your opinions on which inheritance type to use in the DB. We are adding an "external provider" entity to the system which will be able to provide various resources (networks, hosts, etc). These providers will be distinguishable by "type". The basic definition of a provider contains: * name * description * url * type Some providers might need additional properties such as: * user * password In Java this is easily represented by inheritance. In the DB however, there are 3 approaches that we can take: 1. No inheritance. This means that each type will wit in his own table, with no relation or re-use. 2. Single table inheritance. All types sit in a single table, and each has his corresponding columns. 3. Multiple table inheritance. Each type sists in his own table, where the PK is FK for the most basic table (providers). Pros for each approach: 1. None that I can think of. 2. No joins: Better performance Easier for developer to see the DB info Facilitate column reuse 3. Constraints can be set on each column Cons for each approach: 1. No reuse of DB entities + no compliance for column types Most cumbersome to query all providers 2. Can't put some constraints on non-base columns (esp. not null) 3. Joins are needed - opposite of the pros of 2. >From personal experience, I find #2 to be better and easier to work with & maintain. What are your thoughts? Regards, Mike ------=_Part_165720_1428728257.1368351734157 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><body><div style=3D"font-family: times new roman, new york, times, se= rif; font-size: 12pt; color: #000000"><div>Hi All,<br></div><div><br></div>= <div>I would like to have your opinions on which inheritance type to use in= the DB.<br></div><div>We are adding an "external provider" entity to the s= ystem which will be able to provide various resources (networks, hosts, etc= ).<br></div><div><br></div><div>These providers will be distinguishable by = "type".<br></div><div>The basic definition of a provider contains:</div><di= v><ul><li> name</li><li>description</li><li>url</li><li>type</li></ul><div>= Some providers might need additional properties such as:<br></div><div><ul>= <li>user<br></li><li>password<br></li></ul><div>In Java this is easily repr= esented by inheritance.<br></div><div><br></div><div>In the DB however, the= re are 3 approaches that we can take:<br></div><div><ol><li>No inheritance.= <br>This means that each type will wit in his own table, with no relation o= r re-use.<br></li><li>Single table inheritance.<br>All types sit in a singl= e table, and each has his corresponding columns.<br></li><li>Multiple table= inheritance.<br>Each type sists in his own table, where the PK is FK for t= he most basic table (providers).<br></li></ol><div><br></div><div>Pros for = each approach:<br></div><div><ol><li>None that I can think of.<br></li><li>= No joins:<br>    Better performance<br>  &nbs= p; Easier for developer to see the DB info<br>    = Facilitate column reuse<br></li><li>Constraints can be set on each column<b= r></li></ol></div></div></div></div><div>Cons for each approach:<br></div><= div><ol><li>No reuse of DB entities + no compliance for column types<br>Mos= t cumbersome to query all providers<br></li><li>Can't put some constraints = on non-base columns (esp. not null)<br></li><li>Joins are needed - opposite= of the pros of 2.<br></li></ol><div>From personal experience, I find #2 to= be better and easier to work with & maintain.<br></div><div><br></div>= <div>What are your thoughts?<br></div></div><div><br></div><div><span name= =3D"x"></span>Regards,<br>Mike<span name=3D"x"></span><br></div><div><br></= div></div></body></html> ------=_Part_165720_1428728257.1368351734157--

8 22