April 2013 - Devel - oVirt List Archives

[Engine-devel] ovirt-engine-sdk-java 1.0.0.6-1 released
by Michael Pasternak 25 Dec '13

25 Dec '13

- added new collection ClusterGlusterVolumeGlusterBrickStatistics - added new properties to the GlusterBrick - to vm added cpu.mode - to host install action added "image" parameter - ignore case in factory method lookup More details can be found at [1]. [1] http://www.ovirt.org/Java-sdk-changelog -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 10

[Engine-devel] ovirt-sdk-python 3.3.0.1 released
by Michael Pasternak 25 Dec '13

25 Dec '13

- added new collection ClusterGlusterVolumeBrickStatistics - added NetUp 'cloned disk' importing capabilities - to ClusterGlusterVolumeBricks.list() added new argument "all_content" - to ClusterGlusterVolumeBricks.get() added new argument "all_content" - to host install method added new parameter "image" - to host add method added new parameter "display.address" - to vm add method added new parameter "vm.cpu.mode" - to vm add method added new overload for creating vm from snapshot - to cluster added tunnel_migration - to display added keyboard_layout - to display added smartcard_enabled - to DataCenter added Clusters sub-collection - to StorageDomain added Disks sub-collection - to Disks.list() added 'unregistered' argument - to Host added display.address - to Snapshot added commit/preview/undo actions - to vms.add() added overload for creating vm from snapshot - to hosts.add() added [@param host.display.address: string] - to vm.ticket() added [@param action.ticket.value: string] - return error if amount of fetched objects in X.get() is > 1 #890327 - session based authentication for /localhost is broken #916285 - explicitly ask for reply in xml - Add constructor parameter validate_cert_chain=True #915225 - defend against malformed server reply For more details see [1]. [1] http://wiki.ovirt.org/Python-sdk-changelog -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 5

[Engine-devel] ovirt-cli 3.3.0.1 released
by Michael Pasternak 14 Nov '13

14 Nov '13

- at vm.start() --vm-os-boot doesn't send the order of devices #921464 - rephrase status command help - add option to retrieve system summary #854369 - accept IP address as FQ argument rather than string #886067 - fix broken pipe - Bad error message when trying to create a new Role #908284 - add flag --dont-validate-cert-chain #915231 - collection-based-options could be passed in 2 ways #859684 - make NO_SUCH_ACTION error a bit more clear - ovirt-cli DistributionNotFound exception on f18 #881011 - ovirt-shell misleading help for command "connect" #907943 - show event -id accept strings instead of numeric values #886786 - Use vncviewer passwordFile instead of passwdInput More details can be found at [1]. [1] http://wiki.ovirt.org/Cli-changelog -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 5

[Engine-devel] Cloud-Init integration
by Greg Padgett 17 Jun '13

17 Jun '13

Hi Everyone, I'd like to propose a feature we've been doing some investigation into, which is to integrate cloud-init support into oVirt. Cloud-init is used to help provision new Linux systems by setting the hostname, ip, ssh keys, timezone, injecting files, and more. It's used by OpenStack (amongst others) now, and has a lot of features that may be helpful to our users. Details are still evolving, but for more info please see the wiki page: http://www.ovirt.org/Features/Cloud-Init_Integration All feedback is welcome! Thanks, Greg

8 11

[Engine-devel] Proposal VDSM <=> Engine Data Statistics Retrieval Optimization
by Vinzenz Feenstra 30 May '13

30 May '13

This is a multi-part message in MIME format. --------------020305070807050907000005 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Please find the prettier version on the wiki: http://www.ovirt.org/Proposal_VDSM_-_Engine_Data_Statistics_Retrieval Proposal VDSM - Engine Data Statistics Retrieval VDSM <=> Engine data retrieval optimization Motivation: Currently the RHEVM engine is polling the a lot of data from VDSM every 15 seconds. This should be optimized and the amount of data requested should be more specific. For each VM the data currently contains much more information than actually needed which blows up the size of the XML content quite big. We could optimize this by splitting the reply on the getVmStats based on the request of the engine into sections. For this reason Omer Frenkel and me have split up the data into parts based on their usage. This data can and usually does change during the lifetime of the VM. Rarely Changed: This data is change not very frequent and it should be enough to update this only once in a while. Most commonly this data changes after changes made in the UI or after a migration of the VM to another Host. *Status* = Running *acpiEnable* = true *vmType* = kvm *guestName* = W864GUESTAGENTT *displayType* = qxl *guestOs* = Win 8 *kvmEnable* = true #/*this should be constant and never changed*/ *pauseCode* = NOERR *monitorResponse* = 0 *session* = Locked # unused *netIfaces* = [{'name': 'Realtek RTL8139C+ Fast Ethernet NIC', 'inet6': ['fe80::490c:92bb:bbcc:9f87'], 'inet': ['10.34.60.148'], 'hw': '00:1a:4a:22:3c:db'}] *appsList* = ['RHEV-Tools 3.2.4', 'RHEV-Agent64 3.2.3', 'RHEV-Serial64 3.2.3', 'RHEV-Network64 3.2.2', 'RHEV-Network64 3.2.3', 'RHEV-Block64 3.2.3', 'RHEV-Balloon64 3.2.3', 'RHEV-Balloon64 3.2.2', 'RHEV-Agent64 3.2.2', 'RHEV-USB 3.2.3', 'RHEV-Block64 3.2.2', 'RHEV-Serial64 3.2.2'] *pid* = 11314 *guestIPs* = 10.34.60.148 # duplicated info *displayIp* = 0 *displayPort* = 5902 *displaySecurePort* = 5903 *username* = user@W864GUESTAGENTT *clientIp* = *lastLogin* = 1361976900.67 Often Changed: This data is changed quite often however it is not necessary to update this data every 15 seconds. As this is cumulative data and reflects the current status, and it does not need to be snapshotted every 15 seconds to retrieve statistics. The data can be retrieved in much more generous time slices. (e.g. Every 5 minutes) *network* = {'vnet1': {'macAddr': '00:1a:4a:22:3c:db', 'rxDropped': '0', 'txDropped': '0', 'rxErrors': '0', 'txRate': '0.0', 'rxRate': '0.0', 'txErrors': '0', 'state': 'unknown', 'speed': '100', 'name': 'vnet1'}} *disksUsage* = [{'path': 'c:\\', 'total': '64055406592', 'fs': 'NTFS', 'used': '19223846912'}, {'path': 'd:\\', 'total': '3490912256', 'fs': 'UDF', 'used': '3490912256'}] *timeOffset* = 14422 *elapsedTime* = 68591 *hash* = 2335461227228498964 *statsAge* = 0.09 # unused Often Changed but unused This data does not seem to be used in the engine at all. It is *not* even used in the data warehouse. *memoryStats* = {'swap_out': '0', 'majflt': '0', 'mem_free': '1466884', 'swap_in': '0', 'pageflt': '0', 'mem_total': '2096736', 'mem_unused': '1466884'} *balloonInfo* = {'balloon_max': 2097152, 'balloon_cur': 2097152} *disks* = {'vda': {'readLatency': '0', 'apparentsize': '64424509440', 'writeLatency': '1754496', 'imageID': '28abb923-7b89-4638-84f8-1700f0b76482', 'flushLatency': '156549', 'readRate': '0.00', 'truesize': '18855059456', 'writeRate': '952.05'}, 'hdc': {'readLatency': '0', 'apparentsize': '0', 'writeLatency': '0', 'flushLatency': '0', 'readRate': '0.00', 'truesize': '0', 'writeRate': '0.00'}} Very frequent uppdates needed by webadmin portal: This data is mostly needed for the webadmin portal and might be required to be updated quite often. An exception here is the statsAge field, which seems to be unused by the Engine. This data could be requested every 15 seconds to keep things as they are now. *cpuSys* = 2.32 *cpuUser* = 1.34 *memUsage* = 30 Proposed Solution for VDSM & Engine: We will introduce new optional parameters to getVmStats, getAllVmStats and list to allow a finer grained specification of data which should be included. *Parameter:* *statsType*=/*<string>*/ (getVmStats, getAllVmStats only) *Allowed values:* * full (default to keep backwards compatibility) * app-list (Just send the application list) * rare (include everything from rarely changed to very frequent) * often (include everything from often changed to very frequent) * frequent (only send the very frequently changed items) *Parameter:* *clientId*=*<string>* The client id is specified by the client and should be unique however constantly used. *Parameter:* *diff*=*<boolean>* In combination with the clientId VDSM will send only differences to the previous request from the named clientId. (if diff=true) Additional Change: Besides the introduction of the new parameters for list, getVmStats and getAllVmStats it might make sense to include a hash for the appList into the rarely changed section of the response which would allow to identify changes and avoid having to sent the complete appList every so often and only if the hash known to the client is outdated. *Note:* The appList (Application List) reported by the guest agent could be fully implemented on request only, as long as the guest agent installed supports this. As there seems to be a request to have the complete list of installed applications on all guests this data could be quite extensive and a huge list. On the other hand this data is only rarely visible and therefore it should not be requested all the time and only on demand. Improvement of the Guest Agent: As part of the proposed solution it is necessary to improve the guest agent as well. For the full application list there should be implemented a caching system which will be fully reactive and should not poll the application list for example all the time. The guest can create a prepared data file containing all data in the JSON format (as used for the communication with VDSM via VIO) and just have to read that file from disk and directly sends it to VDSM. However it is quite possible that this list is to big and it might have to be chunked into pieces. (Multiple messages, which would have to be supported by VDSM then as well) The solution for this is to make VDSM request this data and it will retrieve the data necessary on request only. -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R & D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com --------------020305070807050907000005 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> Please find the prettier version on the wiki: <a class="moz-txt-link-freetext" href="http://www.ovirt.org/Proposal_VDSM_-_Engine_Data_Statistics_Retrieval">http://www.ovirt.org/Proposal_VDSM_-_Engine_Data_Statistics_Retrieval</a><br> <br> <h1 id="firstHeading" class="firstHeading page-header"><span dir="auto">Proposal VDSM - Engine Data Statistics Retrieval</span></h1> <h2><span class="mw-headline" id="VDSM_.3C.3D.3E_Engine_data_retrieval_optimization">VDSM <=> Engine data retrieval optimization </span></h2> <h3> <span class="mw-headline" id="Motivation:"> Motivation: </span></h3> <p>Currently the RHEVM engine is polling the a lot of data from VDSM every 15 seconds. This should be optimized and the amount of data requested should be more specific. </p> <p>For each VM the data currently contains much more information than actually needed which blows up the size of the XML content quite big. We could optimize this by splitting the reply on the getVmStats based on the request of the engine into sections. For this reason Omer Frenkel and me have split up the data into parts based on their usage. </p> <p>This data can and usually does change during the lifetime of the VM. </p> <h4> <span class="mw-headline" id="Rarely_Changed:"> Rarely Changed: </span></h4> <p>This data is change not very frequent and it should be enough to update this only once in a while. Most commonly this data changes after changes made in the UI or after a migration of the VM to another Host. </p> <pre> <b>Status</b> = Running <b>acpiEnable</b> = true <b>vmType</b> = kvm <b>guestName</b> = W864GUESTAGENTT <b>displayType</b> = qxl <b>guestOs</b> = Win 8 <b>kvmEnable</b> = true # <i><b>this should be constant and never changed</b></i> <b>pauseCode</b> = NOERR <b>monitorResponse</b> = 0 <b>session</b> = Locked # unused <b>netIfaces</b> = [{'name': 'Realtek RTL8139C+ Fast Ethernet NIC', 'inet6': ['fe80::490c:92bb:bbcc:9f87'], 'inet': ['10.34.60.148'], 'hw': '00:1a:4a:22:3c:db'}] <b>appsList</b> = ['RHEV-Tools 3.2.4', 'RHEV-Agent64 3.2.3', 'RHEV-Serial64 3.2.3', 'RHEV-Network64 3.2.2', 'RHEV-Network64 3.2.3', 'RHEV-Block64 3.2.3', 'RHEV-Balloon64 3.2.3', 'RHEV-Balloon64 3.2.2', 'RHEV-Agent64 3.2.2', 'RHEV-USB 3.2.3', 'RHEV-Block64 3.2.2', 'RHEV-Serial64 3.2.2'] <b>pid</b> = 11314 <b>guestIPs</b> = 10.34.60.148 # duplicated info <b>displayIp</b> = 0 <b>displayPort</b> = 5902 <b>displaySecurePort</b> = 5903 <b>username</b> = user@W864GUESTAGENTT <b>clientIp</b> = <b>lastLogin</b> = 1361976900.67 </pre> <h4> <span class="mw-headline" id="Often_Changed:"> Often Changed: </span></h4> <p>This data is changed quite often however it is not necessary to update this data every 15 seconds. As this is cumulative data and reflects the current status, and it does not need to be snapshotted every 15 seconds to retrieve statistics. The data can be retrieved in much more generous time slices. (e.g. Every 5 minutes) </p> <pre> <b>network</b> = {'vnet1': {'macAddr': '00:1a:4a:22:3c:db', 'rxDropped': '0', 'txDropped': '0', 'rxErrors': '0', 'txRate': '0.0', 'rxRate': '0.0', 'txErrors': '0', 'state': 'unknown', 'speed': '100', 'name': 'vnet1'}} <b>disksUsage</b> = [{'path': 'c:\\', 'total': '64055406592', 'fs': 'NTFS', 'used': '19223846912'}, {'path': 'd:\\', 'total': '3490912256', 'fs': 'UDF', 'used': '3490912256'}] <b>timeOffset</b> = 14422 <b>elapsedTime</b> = 68591 <b>hash</b> = 2335461227228498964 <b>statsAge</b> = 0.09 # unused </pre> <h4> <span class="mw-headline" id="Often_Changed_but_unused"> Often Changed but unused </span></h4> <p>This data does not seem to be used in the engine at all. It is <b>not</b> even used in the data warehouse. </p> <pre> <b>memoryStats</b> = {'swap_out': '0', 'majflt': '0', 'mem_free': '1466884', 'swap_in': '0', 'pageflt': '0', 'mem_total': '2096736', 'mem_unused': '1466884'} <b>balloonInfo</b> = {'balloon_max': 2097152, 'balloon_cur': 2097152} <b>disks</b> = {'vda': {'readLatency': '0', 'apparentsize': '64424509440', 'writeLatency': '1754496', 'imageID': '28abb923-7b89-4638-84f8-1700f0b76482', 'flushLatency': '156549', 'readRate': '0.00', 'truesize': '18855059456', 'writeRate': '952.05'}, 'hdc': {'readLatency': '0', 'apparentsize': '0', 'writeLatency': '0', 'flushLatency': '0', 'readRate': '0.00', 'truesize': '0', 'writeRate': '0.00'}} </pre> <h4> <span class="mw-headline" id="Very_frequent_uppdates_needed_by_webadmin_portal:"> Very frequent uppdates needed by webadmin portal: </span></h4> <p>This data is mostly needed for the webadmin portal and might be required to be updated quite often. An exception here is the statsAge field, which seems to be unused by the Engine. This data could be requested every 15 seconds to keep things as they are now. </p> <pre> <b>cpuSys</b> = 2.32 <b>cpuUser</b> = 1.34 <b>memUsage</b> = 30 </pre> <h2> <span class="mw-headline" id="Proposed_Solution_for_VDSM_.26_Engine:"> Proposed Solution for VDSM & Engine: </span></h2> <p>We will introduce new optional parameters to getVmStats, getAllVmStats and list to allow a finer grained specification of data which should be included. </p> <p><b>Parameter:</b> <b>statsType</b>=<i><b><string></b></i> (getVmStats, getAllVmStats only) <b>Allowed values:</b> </p> <ul> <li> full (default to keep backwards compatibility) </li> <li> app-list (Just send the application list) </li> <li> rare (include everything from rarely changed to very frequent) </li> <li> often (include everything from often changed to very frequent) </li> <li> frequent (only send the very frequently changed items) </li> </ul> <p><br> <b>Parameter:</b> <b>clientId</b>=<b><string></b> The client id is specified by the client and should be unique however constantly used. </p> <p><b>Parameter:</b> <b>diff</b>=<b><boolean></b> In combination with the clientId VDSM will send only differences to the previous request from the named clientId. (if diff=true) </p> <p><br> </p> <h3> <span class="mw-headline" id="Additional_Change:"> Additional Change: </span></h3> <p>Besides the introduction of the new parameters for list, getVmStats and getAllVmStats it might make sense to include a hash for the appList into the rarely changed section of the response which would allow to identify changes and avoid having to sent the complete appList every so often and only if the hash known to the client is outdated. </p> <p><b>Note:</b> The appList (Application List) reported by the guest agent could be fully implemented on request only, as long as the guest agent installed supports this. As there seems to be a request to have the complete list of installed applications on all guests this data could be quite extensive and a huge list. On the other hand this data is only rarely visible and therefore it should not be requested all the time and only on demand. </p> <h3> <span class="mw-headline" id="Improvement_of_the_Guest_Agent:"> Improvement of the Guest Agent: </span></h3> <p>As part of the proposed solution it is necessary to improve the guest agent as well. For the full application list there should be implemented a caching system which will be fully reactive and should not poll the application list for example all the time. The guest can create a prepared data file containing all data in the JSON format (as used for the communication with VDSM via VIO) and just have to read that file from disk and directly sends it to VDSM. However it is quite possible that this list is to big and it might have to be chunked into pieces. (Multiple messages, which would have to be supported by VDSM then as well) The solution for this is to make VDSM request this data and it will retrieve the data necessary on request only. </p> <pre class="moz-signature" cols="72">-- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R & D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com</pre> </body> </html> --------------020305070807050907000005--

8 23

[Engine-devel] ovirt user portal and attach a cd
by Andrej Bagon 17 May '13

17 May '13

Hi all, we would like to limit a user as much as possible and give him only actions that he needs with his VM. If we disallow a user the right in system|configure system|manipulate permissions), we give the user, in user portal, only basic mode. But then three is no option to attach a cd in the basic user portal. In basic mode user interface there is no chance in attaching a cd (as this is a basic operation a solution to this would be a button attaching a cd when starting a vm). If we allow the user to manipulate permissions, we get the extended menu back and the user is limited, but we found unacceptable when he is adding permission to the VM, he sees all the users (name, surname, email!) in the ovirt authentication mechanism? A solution to this would be authenticating to the directory service as a user an not as ovirt admin user - meaning that the user will see only users that we allowed he sees in the ldap directory. Thank you. Best Regards, Andrej

4 8

[Engine-devel] [ANN] Development environment and Gentoo packaging (preview)
by Alon Bar-Lev 16 May '13

16 May '13

Hello All, We[1] are working to rewrite the current installer to something more portable and flexible. Currently two milestones had been reached: 1. Ability to install almost fully functioning ovirt-engine at $HOME for development environment. 2. Porting ovirt-engine to run on different distribution, Gentoo. We will be glad to receive feedback on either. Code is located at github[2] for now, at otopi branch. Instructions for setting up development environment are available[3]. Gentoo overlay for live ebuilds is available[4], the following packages are valid: - app-emulation/otopi - app-emulation/ovirt-host-deploy - app-emulation/ovirt-jboss-bin - app-emulation/ovirt-engine Why Gentoo first? because source based distributions demands the highest level of customization, solving the complex issue ease to continue porting to binary based distributions. Please remember that this is work in progress, and not guarantee to be stable or even work... The installer was re-written from scratch so expect issues at this point. Any feedback is welcomed, we are focusing first in providing the functionality of the existing installer to be able to replace it entirely before going into new adventures. Regards, Alon Bar-Lev. [1] Alex Lourie, Sandro Bonazzola, Alon Bar-Lev [2] https://github.com/alonbl/ovirt-engine [3] https://github.com/alonbl/ovirt-engine/blob/otopi/README.developer [4] https://github.com/alonbl/ovirt-overlay

2 1

[Engine-devel] Snapshots with RAM feature
by Arik Hadas 16 May '13

16 May '13

Hi All, The proposed feature will make it possible to run a VM which was reverted to live snapshot or created from live snapshot with the same memory state as it was at the moment the live snapshot was taken. http://www.ovirt.org/Features/RAM_Snapshots All feedback is welcome! Regards, Arik

5 8

[Engine-devel] spice-xpi(firefox) plugin for Windows
by Christophe Fergeau 13 May '13

13 May '13

--tsOsTdHNUZQcU9Ye Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Hi everyone, Lately I've been hacking on getting the spice-xpi plugin to work on Windows. This is the Firefox plugin that is used on Linux to implement the portal SPICE console. This work has now been merged upstream ( http://cgit.freedesktop.org/spice/spice-xpi/ ), and I've pushed a scratch build using mingw available from http://koji.fedoraproject.org/koji/taskinfo?taskID=5265107 (this will go away in several days). Copying this dll + its dependencies to the C:\Program Files\Mozilla Firefox\plugins directory are enough to get a spice-xpi plugin to show up in about:plugins, and to then be able to start a SPICE client from the spice-xpi test page ( http://teuf.fedorapeople.org/plugins/test.html ). The dependencies I had to copy are: gspawn-win32-helper-console.exe gspawn-win32-helper.exe iconv.dll libffi-6.dll libgcc_s_sjlj-1.dll libgio-2.0-0.dll libglib-2.0-0.dll libgmodule-2.0-0.dll libgobject-2.0-0.dll libgthread-2.0-0.dll libintl-8.dll libstdc++-6.dll pthreadGC2.dll zlib1.dll (I picked them from the various mingw-* fedora packages). The reason for this email is that to be usable from oVirt, some portal changes are needed as it currently only tries to use the spice-xpi plugin on Linux platforms. Another fuzzy bit is how to get this plugin to the users' machines... And that's about all I had to say in that email ;) Let me know if that's useful to oVirt, how you want to integrate this, ... Cheers, Christophe --tsOsTdHNUZQcU9Ye Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) iEYEARECAAYFAlFumXkACgkQJKRp+3pW945+vwCglgqxiHD3g6EOC12U9Ydg8pVS kmMAoIRXM5MepmgnvK+UJMF1rjiVJ4r/ =QcGM -----END PGP SIGNATURE----- --tsOsTdHNUZQcU9Ye--

5 6

[Engine-devel] VDSM Fake
by Libor Spevak 12 May '13

12 May '13

Hi, let me introduce an experimental project called VDSM Fake. This is a small Java web application simulating selected VDSM features, but only from the Engine point of view. The aim was to get oVirt-Engine top performance characteristics in core features simulating hundreds of fake hosts and VMs, and in ecologic way. More info: http://www.ovirt.org/VDSM_Fake Sources: git clone git://github.com/lspevak/ovirt-vdsmfake.git git clone git://github.com/lspevak/ovirt-restapiconf.git Regards, Libor

5 6

[Engine-devel] Migrating engine-setup to otopi
by Alex Lourie 10 May '13

10 May '13

Hi All Recent development of the otopi [1] framework allows us to migrate the engine-setup, upgrade and cleanup (and potentially other) utilities to implementation as an otopi plugin. Potential benefits of such a move are: 1. Be able to port engine to other distributions. 2. Be able to install engine in a development mode. 3. Be able to customize installation easily. 4. Share installation of components (reports, dwh). 5. Modular implementation, reduce maintenance costs. 6. Code reuse of installer code for multiple purposes (host-deploy, enigne-setup). Currently we are in the process of creating a 'setup' plugin for the otopi, and the progress can be monitored at [2]. The current roadmap for the feature is as follows: 1. Recreate the configuration utilities as plugins in otopi. 2. Support side-by side installation using both the old and the new utilities. 3. Switch to the new utility when the confidence that it is on-par with an old one is high. Our goal is to have the new utilities ready for 3.3 release (at least for the step 2 in the roadmap). We'd like to hear as much feedback as possible, so we could address it as soon as possible. Thanks! [1] http://gerrit.ovirt.org/#/q/project:otopi,n,z [2] http://www.ovirt.org/Features/Otopi_Infra_Migration

6 12

[Engine-devel] Dropping encryption of database password
by Alon Bar-Lev 06 May '13

06 May '13

Hello, Currently we store database password encrypted using org.picketbox.datasource.security.SecureIdentityLoginModule. This is reverse encryption with common knowledge shared secret. Using encryption with common knowledge shared secret is close to void protection. So far we also stored the password as plain text at /etc/ovirt-engine/.pgpass, this is going to be removed as no component actually uses the .pgpass, however we do need to store non-java specific password in for utilities. In master (aiming to 3.3), we store the database connection details in own file /etc/ovirt-engine/engine.conf.d/50-setup-database.conf owned by ovirt user and not world readable. I would like to use the same 50-setup-database.conf to store plain text password and remove the java specific reversible encrypted password usage. Bottom line... 1. We drop the .pgpass file. 2. We store database connection information in /etc/ovirt-engine/engine.conf.d/<file> that is readable only by ovirt usage. 3. We drop the java specific reversible encryption in favor of plain text. Thoughts? Alon

6 16

[Engine-devel] Any way to setup ovirt engine 3.2.0 or 3.2.1 running enviroment?
by Chen, Wei D 03 May '13

03 May '13

Hi, We notice that ovirt-engine's version (rpm package and source code) has updated from 3.2.0 to 3.2.1. As our development process is always based on 3.2.0. Is there any way to re-setup 3.2.0 running environment? Besides, we also cannot setup 3.2.1 ovrit-engine running environment as its dependent package glusterfs-3.4 cannot be found from ovirt repo or fedora18 repo. How can I fix this issue? Thanks. Best Regards, Dave Chen

4 7

[Engine-devel] REST vs. UI validation
by Whitcomb, Kari 02 May '13

02 May '13

I've been making use of the oVirt REST api, and have noticed that in several cases the validation done for a REST request is different than what the admin UI does. It seems that the UI is generally more restrictive on the data it will accept than the backend. So you can set things up using the REST api that the UI wouldn't let you do. Two examples I've hit recently, both in the cluster policy (load balancing section): - Cluster load balancing policy duration - the UI requires a value between 1 and 100, but the REST api seems to let you set it to any integer. - Cluster load balancing high and low thresholds / max and min service levels - The UI restricts the high value to 51-90% and the low value to 10-50%. But the backend only requires that the values be 0-100% and that low can't be greater than high. So my question - is this intended behavior, or is it a bug that the validation is different? If similar validation should be done through both the UI and REST api, should the UI be less restrictive, or the backend more restrictive? Thanks, Kari

6 10

[Engine-devel] Error: could not create ovirtsdk API object
by 李强 02 May '13

02 May '13

HI：All I build source and rpm -Uvh ovirt-engine-setup-plugin-allinone-3.3.0-0.2.master.20130427145036.fc18.noarch.rpm But I engine-setup have ERROR. Error: could not create ovirtsdk API object OS:F18 mini install. =================================== [root@localhost ~]# engine-setup Welcome to oVirt Engine setup utility WARNING: oVirt Engine setup has already been run on this host. To remove all configuration and reset oVirt Engine please run engine-cleanup. Please be advised that executing engine-setup without cleanup is not supported. Would you like to proceed? (yes|no): yes In order to proceed the installer must stop the ovirt-engine service Would you like to stop the ovirt-engine service? (yes|no): yes oVirt Engine uses httpd to proxy requests to the application server. It looks like the httpd installed locally is being actively used. The installer can override current configuration . Alternatively you can use JBoss directly (on ports higher than 1024) Do you wish to override current httpd configuration and restart the service? ['yes'| 'no'] [yes] : HTTP Port [80] : HTTPS Port [443] : Setup can configure server default page to launch oVirt Engine. Do you wish to do so? ['yes'| 'no'] [yes] : Host fully qualified domain name. Note: this name should be fully resolvable [localhost] : engine.startn.com Enter a password for an internal oVirt Engine administrator user (admin@internal) : Warning: Weak Password. Confirm password : Organization Name for the Certificate [localhost] : The engine can be configured to present the UI in three different application modes. virt [Manage virtualization only], gluster [Manage gluster storage only], and both [Manage virtualization as well as gluster storage] ['virt'| 'gluster'| 'both'] [both] : The default storage type you will be using ['NFS'| 'FC'| 'ISCSI'| 'POSIXFS'] [NFS] : Enter DB type for installation ['remote'| 'local'] [local] : Enter a password for a local oVirt Engine DB admin user (engine) : Warning: Weak Password. Confirm password : Local ISO domain path [/var/lib/exports/iso_2013_04_28_15_18_22] : Firewall ports need to be opened. The installer can configure firewall automatically overriding the current configuration. The old configuration will be backed up. Alternately you can configure the firewall later using an example file selecting None. Which firewall manager do you wish to use? ['None'| 'Firewalld'| 'iptables']: Firewalld Configure VDSM on this host? ['yes'| 'no'] [yes] : yes Local storage domain path [/var/lib/images_2013_04_28_15_18_22] : Confirm root password : oVirt Engine will be installed using the following configuration: ================================================================= override-httpd-config: yes http-port: 80 https-port: 443 override-httpd-root: yes host-fqdn: engine.startn.com auth-pass: ******** org-name: localhost application-mode: both default-dc-type: NFS db-remote-install: local db-local-pass: ******** nfs-mp: /var/lib/exports/iso_2013_04_28_15_18_22 firewall-manager: Firewalld config-allinone: yes storage-path: /var/lib/images_2013_04_28_15_18_22 superuser-pass: ******** Proceed with the configuration listed above? (yes|no): yes Installing: AIO: Validating CPU Compatibility... [ DONE ] AIO: Adding firewall rules... [ DONE ] Configuring oVirt Engine... [ DONE ] Configuring JVM... [ DONE ] Creating CA... [ DONE ] Updating ovirt-engine service... [ DONE ] Setting Database Configuration... [ DONE ] Setting Database Security... [ DONE ] Upgrading Database Schema... [ DONE ] Editing oVirt Engine Configuration... [ DONE ] Editing Postgresql Configuration... [ DONE ] Configuring the Default ISO Domain... [ DONE ] Configuring Firewall... [ DONE ] Starting ovirt-engine Service... [ DONE ] Configuring HTTPD... [ DONE ] AIO: Creating storage directory... [ DONE ] AIO: Adding Local Datacenter and cluster... [ ERROR ] Error: could not create ovirtsdk API object Please check log file /var/log/ovirt-engine/engine-setup_2013_04_28_15_18_21.log for more information =LOG========================================== FragmentPath=/usr/lib/systemd/system/firewalld.service UnitFileState=enabled InactiveExitTimestamp=Sun 2013-04-28 15:16:26 CST InactiveExitTimestampMonotonic=2057927058 ActiveEnterTimestamp=Sun 2013-04-28 15:16:26 CST ActiveEnterTimestampMonotonic=2058029155 ActiveExitTimestamp=Sun 2013-04-28 15:16:26 CST ActiveExitTimestampMonotonic=2057262228 InactiveEnterTimestamp=Sun 2013-04-28 15:16:26 CST InactiveEnterTimestampMonotonic=2057889979 "/var/log/ovirt-engine/engine-setup_2013_04_28_15_18_21.log" 2023L, 122617C 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: db-remote-install: local 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: db-host: localhost 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: db-local-pass: ******** 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: nfs-mp: /var/lib/exports/iso_2013_04_28_15_18_22 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: iso-domain-name: ISO_DOMAIN 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: config-nfs: yes 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: firewall-manager: Firewalld 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: config-allinone: yes 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: storage-path: /var/lib/images_2013_04_28_15_18_22 2013-04-28 15:19:34::DEBUG::engine-setup::2069::root:: superuser-pass: ******** 2013-04-28 15:19:34::ERROR::engine-setup::2504::root:: Traceback (most recent call last): File "/usr/bin/engine-setup", line 2498, in <module> main(confFile) File "/usr/bin/engine-setup", line 2265, in main runSequences() File "/usr/bin/engine-setup", line 2184, in runSequences controller.runAllSequences() File "/usr/share/ovirt-engine/scripts/setup_controller.py", line 54, in runAllSequences sequence.run() File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 154, in run step.run() File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 60, in run function() File "/usr/share/ovirt-engine/scripts/plugins/all_in_one_100.py", line 252, in initAPI raise Exception(ERROR_CREATE_API_OBJECT) Exception: Error: could not create ovirtsdk API object ============================================ [root@localhost ~]# rpm -qa | grep ovirt ovirt-engine-sdk-3.3.0.1-1.20130427.gitfc5985e.fc18.noarch ovirt-engine-backend-3.3.0-0.2.master.20130427145036.fc18.noarch ovirt-engine-setup-plugin-allinone-3.3.0-0.2.master.20130427145036.fc18.noarch ovirt-host-deploy-1.0.1-1.fc18.noarch ovirt-engine-setup-3.3.0-0.2.master.20130427145036.fc18.noarch ovirt-engine-cli-3.2.0.11-1.fc18.noarch ovirt-iso-uploader-3.3.0-0.0.master.20130318.gitec3e5e7.fc18.noarch ovirt-engine-restapi-3.3.0-0.2.master.20130427145036.fc18.noarch ovirt-engine-webadmin-portal-3.3.0-0.2.master.20130427145036.fc18.noarch ovirt-host-deploy-offline-1.0.1-1.fc18.noarch ovirt-image-uploader-3.3.0-0.0.master.20130423.git8dde3cc.fc18.noarch ovirt-engine-dbscripts-3.3.0-0.2.master.20130427145036.fc18.noarch ovirt-engine-userportal-3.3.0-0.2.master.20130427145036.fc18.noarch ovirt-release-fedora-5-3.1.noarch ovirt-host-deploy-java-1.0.1-1.fc18.noarch ovirt-engine-tools-3.3.0-0.2.master.20130427145036.fc18.noarch ovirt-log-collector-3.3.0-0.0.master.20130421.git1c4542d.fc18.noarch ovirt-engine-3.3.0-0.2.master.20130427145036.fc18.noarch [root@localhost ~]# rpm -qa | grep vdsm vdsm-python-4.10.3-10.fc18.x86_64 vdsm-xmlrpc-4.10.3-10.fc18.noarch vdsm-4.10.3-10.fc18.x86_64 vdsm-cli-4.10.3-10.fc18.noarch vdsm-bootstrap-4.10.3-10.fc18.noarch [root@localhost ~]# cat /etc/hosts 10.0.10.181 engine.startn.com [root@localhost ~]# ifconfig eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.11.4 netmask 255.255.255.0 broadcast 192.168.11.255 inet6 fe80::20c:29ff:feed:4f64 prefixlen 64 scopeid 0x20<link> ether 00:0c:29:ed:4f:64 txqueuelen 1000 (Ethernet) RX packets 22780 bytes 31526531 (30.0 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 7612 bytes 547095 (534.2 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 10.0.10.181 netmask 255.255.255.0 broadcast 10.0.10.255 inet6 fe80::20c:29ff:feed:4f6e prefixlen 64 scopeid 0x20<link> ether 00:0c:29:ed:4f:6e txqueuelen 1000 (Ethernet) RX packets 45792 bytes 58908887 (56.1 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 11143 bytes 2063171 (1.9 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Local Loopback) RX packets 180949 bytes 62786059 (59.8 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 180949 bytes 62786059 (59.8 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 virbr0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500 inet 192.168.122.1 netmask 255.255.255.0 broadcast 192.168.122.255 ether 16:aa:69:7c:1e:3e txqueuelen 0 (Ethernet) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 0 bytes 0 (0.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 [root@localhost ~]# dig -x 10.0.10.181 ; <<>> DiG 9.9.2-rl.028.23-P2-RedHat-9.9.2-10.P2.fc18 <<>> -x 10.0.10.181 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21966 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;181.10.0.10.in-addr.arpa. IN PTR ;; ANSWER SECTION: 181.10.0.10.in-addr.arpa. 1200 IN PTR engine.startn.com. ;; AUTHORITY SECTION: 10.0.10.in-addr.arpa. 1200 IN NS engine.startn.com. ;; ADDITIONAL SECTION: engine.startn.com. 86400 IN A 10.0.10.181 ;; Query time: 0 msec ;; SERVER: 10.0.10.181#53(10.0.10.181) ;; WHEN: Sun Apr 28 15:36:34 2013 ;; MSG SIZE rcvd: 114 [root@localhost ~]# dig engine.startn.com ; <<>> DiG 9.9.2-rl.028.23-P2-RedHat-9.9.2-10.P2.fc18 <<>> engine.startn.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36210 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;engine.startn.com. IN A ;; ANSWER SECTION: engine.startn.com. 86400 IN A 10.0.10.181 ;; AUTHORITY SECTION: startn.com. 86400 IN NS engine.startn.com. ;; Query time: 0 msec ;; SERVER: 10.0.10.181#53(10.0.10.181) ;; WHEN: Sun Apr 28 15:36:40 2013 ;; MSG SIZE rcvd: 76 ============================================= --- 有问题请通知我，谢谢，李强 ------------------------------------------------------------------------------ + 太初有道，道与神同在，道就是神。(约翰福音1:1) + ------------------------------------------------------------------------------

3 4

[Engine-devel] FeatureSupported and compatibility versions
by Shireesh Anjal 02 May '13

02 May '13

Hi all, The current mechanism in oVirt to check whether a feature is supported in a particular compatibility version is to use the FeatureSupported class. e.g. FeatureSupported.networkLinking(getVm().getVdsGroupCompatibilityVersion()) Checks whether the "network linking" feature is supported for the the VM's cluster compatibility version. This internally checks whether the value of the corresponding config (NetworkLinkingSupported) for the given compatibility version is true/false. I'm not sure if this is a good idea, since a feature is typically supported "from" a particular version. E.g. Gluster support was introduced in 3.1, and it continues to be available in all subsequent versions. So I see no point in adding configuration for every version indicating whether the feature is supported in that version or not. I suggest to use either of the following options: 1) Instead of using a boolean config for each version, use a single string config that indicates the "supported from" version e.g. GlusterSupportedFrom = 3.1. There could be rare cases where a feature, for some reason, is removed in some release. In such cases, we could use one additional config for the "supported to" version. 2) Continue with the boolean approach, but do not have entries for every version; rather make use of the "default value" for majority of cases, and add the explicit version mapping for the minority e.g. GlusterSupported = true by default, and false in case of 3.0 (only one config required for 3.0) Thoughts? Regards, Shireesh

7 16

Re: [Engine-devel] Root password to add Host
by Alon Bar-Lev 30 Apr '13

30 Apr '13

Please reply to 'all'. When you login as admin you should be presented with Text User Interface. Within this interface there should be options on the left and a dialog on the right. At the left you should see 'ovirt-engine' or similar option, when selecting it, you should see on the right an input field of address of the ovirt-engine server, specifying the engine address and selecting apply will initiate registration into the engine. Once registered, you should see the host in the engine, select it and click on "Approve". Another option is to specify password at the same dialog without filling the engine address. This password may be used as the password withi the 'Add Host' dialog. Alon ----- Original Message ----- > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com> > To: "Alon Bar-Lev" <alonbl(a)redhat.com> > Sent: Wednesday, May 1, 2013 12:00:01 AM > Subject: Re: [Engine-devel] Root password to add Host > > I think I don't really understand what you call TUI? > Yes I'm log as admin on ovirt-node to use Hypervisor > > (And sorry if I make some language faults English isn't my native language > ^^) > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com> > > > > > You cannot do this via agent by via the TUI of the ovirt-node. > > > > Just to make sure, you are using ovirt-node as hypervisor, right? > > > > ----- Original Message ----- > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com> > > > To: "Alon Bar-Lev" <alonbl(a)redhat.com> > > > Sent: Tuesday, April 30, 2013 11:47:53 PM > > > Subject: Re: [Engine-devel] Root password to add Host > > > > > > Oh ok, i didn't know ... > > > > > > I was looking my oVirt Engine and i don't understand how i can add an > > Host > > > without this password ... > > > For me i have to right click on the Hosts panel, select "new" and it asks > > > me to give name, address and Root password. > > > I have already register this Host from oVirt Node Hypervisor, i add my > > > Management Server and there is no problem i can see "Certificate Status : > > > Verified" but this Host don't appears in the Web page ... > > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com> > > > > > > > > > > > > > > > ----- Original Message ----- > > > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com> > > > > > To: "Alon Bar-Lev" <alonbl(a)redhat.com> > > > > > Sent: Tuesday, April 30, 2013 11:06:14 PM > > > > > Subject: Re: [Engine-devel] Root password to add Host > > > > > > > > > > For me single mode it's when you add "single" at the end of the > > kernel > > > > > commande line like that you boot on shell commande as > > > > > root@localhostand > > > > > you can do what you want. > > > > > > > > Oh... this is "single user mode"... :) > > > > > > > > > > > > > > I will try it soon! > > > > > > > > > > Thank you > > > > > > > > > > Florian > > > > > > > > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com> > > > > > > > > > > > What is 'single mode'? > > > > > > > > > > > > You should be able to set root password via node TUI, at ovirt tab. > > > > > > Or... you can simply perform registration via the node TUI, so you > > > > don't > > > > > > need to specify password at all. > > > > > > > > > > > > ----- Original Message ----- > > > > > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com> > > > > > > > To: engine-devel(a)ovirt.org > > > > > > > Sent: Tuesday, April 30, 2013 7:28:12 PM > > > > > > > Subject: [Engine-devel] Root password to add Host > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > I try to add Host from oVirt Engine Web Administration, but it > > asks > > > > me to > > > > > > > give a Root Password (It's not the same that i used to log in > > admin > > > > on > > > > > > the > > > > > > > Node). > > > > > > > Do i really need this Root Password? Because i can't have it and > > i > > > > don't > > > > > > want > > > > > > > to change it by using single mode... > > > > > > > There is an other solution to add Hosts? > > > > > > > > > > > > > > Thank you, > > > > > > > > > > > > > > Florian BRUSCHET > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Engine-devel mailing list > > > > > > > Engine-devel(a)ovirt.org > > > > > > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > > > > > > > > > > > > > > > > > > > > > > > > >

2 9

Re: [Engine-devel] Root password to add Host
by Alon Bar-Lev 30 Apr '13

30 Apr '13

You cannot do this via agent by via the TUI of the ovirt-node. Just to make sure, you are using ovirt-node as hypervisor, right? ----- Original Message ----- > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com> > To: "Alon Bar-Lev" <alonbl(a)redhat.com> > Sent: Tuesday, April 30, 2013 11:47:53 PM > Subject: Re: [Engine-devel] Root password to add Host > > Oh ok, i didn't know ... > > I was looking my oVirt Engine and i don't understand how i can add an Host > without this password ... > For me i have to right click on the Hosts panel, select "new" and it asks > me to give name, address and Root password. > I have already register this Host from oVirt Node Hypervisor, i add my > Management Server and there is no problem i can see "Certificate Status : > Verified" but this Host don't appears in the Web page ... > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com> > > > > > > > ----- Original Message ----- > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com> > > > To: "Alon Bar-Lev" <alonbl(a)redhat.com> > > > Sent: Tuesday, April 30, 2013 11:06:14 PM > > > Subject: Re: [Engine-devel] Root password to add Host > > > > > > For me single mode it's when you add "single" at the end of the kernel > > > commande line like that you boot on shell commande as root@localhost and > > > you can do what you want. > > > > Oh... this is "single user mode"... :) > > > > > > > > I will try it soon! > > > > > > Thank you > > > > > > Florian > > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com> > > > > > > > What is 'single mode'? > > > > > > > > You should be able to set root password via node TUI, at ovirt tab. > > > > Or... you can simply perform registration via the node TUI, so you > > don't > > > > need to specify password at all. > > > > > > > > ----- Original Message ----- > > > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com> > > > > > To: engine-devel(a)ovirt.org > > > > > Sent: Tuesday, April 30, 2013 7:28:12 PM > > > > > Subject: [Engine-devel] Root password to add Host > > > > > > > > > > Hi, > > > > > > > > > > I try to add Host from oVirt Engine Web Administration, but it asks > > me to > > > > > give a Root Password (It's not the same that i used to log in admin > > on > > > > the > > > > > Node). > > > > > Do i really need this Root Password? Because i can't have it and i > > don't > > > > want > > > > > to change it by using single mode... > > > > > There is an other solution to add Hosts? > > > > > > > > > > Thank you, > > > > > > > > > > Florian BRUSCHET > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > Engine-devel mailing list > > > > > Engine-devel(a)ovirt.org > > > > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > > > > > > > > > > > >

1 0

[Engine-devel] Root password to add Host
by Florian BRUSCHET 30 Apr '13

30 Apr '13

Hi, I try to add Host from oVirt Engine Web Administration, but it asks me to give a Root Password (It's not the same that i used to log in admin on the Node). Do i really need this Root Password? Because i can't have it and i don't want to change it by using single mode... There is an other solution to add Hosts? Thank you, Florian BRUSCHET

2 1

[Engine-devel] Fwd: the procedure of storage-related
by Vered Volansky 29 Apr '13

29 Apr '13

----- Forwarded Message ----- > From: "Vered Volansky" <vered(a)redhat.com> > To: "bigclouds" <bigclouds(a)163.com> > Sent: Sunday, April 28, 2013 12:39:31 PM > Subject: Re: [Engine-devel] the procedure of storage-related > > Hi, > > Find my answers below. > > Best Regards, > Vered > > ----- Original Message ----- > > From: "bigclouds" <bigclouds(a)163.com> > > To: "engine-devel" <engine-devel(a)ovirt.org> > > Sent: Saturday, April 27, 2013 8:40:56 AM > > Subject: [Engine-devel] the procedure of storage-related > > > > hi,all > > 1.i am now not very familar with the right procedure of storage, > > please give me a simply introduction of their concept and relation. > > help > > me out > > > > StoragePool,StorageDomain > > image,volume > > You should find the following link helpful: > http://www.ovirt.org/Vdsm_Storage_Terminology > > As per your other questions, you might find the following guide helpul: > http://www.ovirt.org/Quick_Start_Guide#Configure_Storage > > Of not, please rephrase them as they're not clear enough and I'd rather not > guess. > > > > > > > > 2.please help me confirm. > > i find only one place call mount command, which is > > poolConnectStorageServer. > > if poolConnectStorageServer is before create and active > > StoragePool,StorageDomain? > > > > 3.if attach is just modify metadata, not anything else? > > > > 4.sp.py, deactivateSD > > if i deactivate ISO storage,it finally umount masterDir, why ? > > if masterDir is not mastersd? > > thanks > > > > > > > > _______________________________________________ > > Engine-devel mailing list > > Engine-devel(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > >

3 3

[Engine-devel] oVirt updates - April 28th, 2013
by Itamar Heim 28 Apr '13

28 Apr '13

I thought a summary of things going on from time to time may interest folks: 1. From the Web * Vagrant support for oVirt/RHEV added http://alturl.com/bkauk https://github.com/pradels/vagrant-ovirt http://www.vagrantup.com/ * How to create and provision an oVirt VM with ansible http://www.youtube.com/watch?v=up8X_clAvZk * ovirt_metrics - ActiveRecord-based gem for reading the oVirt History database http://is.gd/hO94Us * DEMO: oVirt - GlusterFS Native Integration for KVM Virtualization http://www.youtube.com/watch?v=0iIuHCz8L04 * Android x86 running on oVirt http://www.youtube.com/watch?v=5nFZLma_Ofw * using oVirt to build a virtualization platform on an IBM BladeCenter http://www.r11networks.com/2013/04/ovirt-meets-ibm-bladecenter/ http://www.r11networks.com/2013/04/ovirt-installation-guide/ 2. Conferences * René Koch (ovido) presented oVirt in a two conferences in Germany oVirt was covered in two OpenStack summit sessions: * Mike Day, IBM: Connected Communities, Innovative Technologies: OpenStack, oVirt, and KVM http://sched.co/WcehtG * Romil Gupta et al, HP: RHEV-M/oVirt Clusters as compute resources http://sched.co/14hte1T http://www.slideshare.net/romilgupta19/hp-rhevmdriverromil) http://alturl.com/vsn5e 3. Bug/feature/patch of the week? Send your candidates for the next update 4. Upcoming * oVirt Shanghai workshop http://www.ovirt.org/Intel_Workshop_May_2013 Feel free to send comments, items, etc for consideration for the next update. Thanks, Itamar

1 0

[Engine-devel] Design wiki page for trusted compute pools integration with oVirt has been updated
by Chen, Wei D 28 Apr '13

28 Apr '13

Hi All, Our second approach for trusted compute pools integration with oVirt seems more simple and sensible than previous VM level approach. Welcome any comments on our latest design. Thanks in advance. Link is here, http://www.ovirt.org/Trusted_compute_pools Best Regards, Dave Chen

6 14

[Engine-devel] the procedure of storage-related
by bigclouds 27 Apr '13

27 Apr '13

------=_Part_127621_1793542873.1367041256436 Content-Type: text/plain; charset=GBK Content-Transfer-Encoding: 7bit hi,all 1.i am now not very familar with the right procedure of storage, please give me a simply introduction of their concept and relation. help me out StoragePool,StorageDomain image,volume 2.please help me confirm. i find only one place call mount command, which is poolConnectStorageServer. if poolConnectStorageServer is before create and active StoragePool,StorageDomain? 3.if attach is just modify metadata, not anything else? 4.sp.py, deactivateSD if i deactivate ISO storage,it finally umount masterDir, why ? if masterDir is not mastersd? thanks ------=_Part_127621_1793542873.1367041256436 Content-Type: text/html; charset=GBK Content-Transfer-Encoding: 7bit <div style="line-height:1.7;color:#000000;font-size:14px;font-family:arial"><div style="color: rgb(0, 0, 0); line-height: 1.7; font-family: arial; font-size: 14px;"><div>hi,all</div><div>1.i am now not very familar with the right procedure of storage, </div><div>    please give me a simply introduction of their concept and relation. help me out</div><div> </div><div>StoragePool,StorageDomain</div><div>image,volume</div><div> </div><div> </div><div>2.please help me confirm.</div><div>i find only one place call mount command, which is poolConnectStorageServer.</div><div>if poolConnectStorageServer is before create and active StoragePool,StorageDomain?</div><div> </div><div>3.if attach is just modify metadata, not anything else?</div><div> </div><div>4.sp.py, deactivateSD</div><div>  if i deactivate ISO storage,it finally umount masterDir, why  ?</div><div>  if masterDir is not  mastersd?</div><div>thanks</div></div><br><br><span title="neteasefooter"><span id="netease_mail_footer"></span></span></div><br><br><span title="neteasefooter"><span id="netease_mail_footer"></span></span> ------=_Part_127621_1793542873.1367041256436--

1 0

[Engine-devel] enable column resizing on all sub-tabs?
by Einav Cohen 25 Apr '13

25 Apr '13

Vojtech[/others] - what do you think about Gilad's comment below? would it be possible / more correct to activate column resizing within the base grid class itself by default (or something similar), rather than enable it separately for each grid? [@Gilad - keep in mind that IIUC - each column in each grid still needs to have its width explicitly set] ---- Thanks, Einav ----- Original Message ----- > From: gchaplik(a)redhat.com > To: "Daniel Erez" <derez(a)redhat.com> > Cc: "Einav Cohen" <ecohen(a)redhat.com>, "Vojtech Szocs" <vszocs(a)redhat.com>, "Alona Kaplan" <alkaplan(a)redhat.com>, > "Tal Nisan" <tnisan(a)redhat.com> > Sent: Thursday, April 25, 2013 3:23:56 AM > Subject: Change in ovirt-engine[master]: webadmin: DataCenters main-tab: sub-tabs resizable columns > > Gilad Chaplik has posted comments on this change. > > Change subject: webadmin: DataCenters main-tab: sub-tabs resizable columns > ...................................................................... > > > Patch Set 4: > > why we need to invoke getTable().enableColumnResizing() on each sub-tab? > don't we want all grid subtabs to have column resizing? > > -- > To view, visit http://gerrit.ovirt.org/14105 > To unsubscribe, visit http://gerrit.ovirt.org/settings > > Gerrit-MessageType: comment > Gerrit-Change-Id: I71465d36e5c18ecb8eb6dbca436feaeea1c902a9 > Gerrit-PatchSet: 4 > Gerrit-Project: ovirt-engine > Gerrit-Branch: master > Gerrit-Owner: Daniel Erez <derez(a)redhat.com> > Gerrit-Reviewer: Alona Kaplan <alkaplan(a)redhat.com> > Gerrit-Reviewer: Daniel Erez <derez(a)redhat.com> > Gerrit-Reviewer: Einav Cohen <ecohen(a)redhat.com> > Gerrit-Reviewer: Gilad Chaplik <gchaplik(a)redhat.com> > Gerrit-Reviewer: Tal Nisan <tnisan(a)redhat.com> > Gerrit-Reviewer: Vojtech Szocs <vszocs(a)redhat.com> >

4 7

[Engine-devel] Proposal to make REST API more webapp-friendly
by Vojtech Szocs 24 Apr '13

24 Apr '13

Hi guys, having worked with Engine REST API from web application (JavaScript) perspective, there are things that could be improved to make REST API more webapp-friendly. First of all, webapps are *not* traditional HTTP clients, i.e. they have *not* full control over HTTP processing. There are some standard conventions and behaviors built into web browsers that any REST API implementation should be aware of. -- (1) Don't force clients to use cookies for transmitting authentication information! (or don't use cookies at all) Good explanation can be found at [http://www.berenddeboer.net/rest/cookies.html] Cookies have many disadvantages: * cookie parsing/formatting is not trivial --> extra complexity imposed on REST clients * in addition to Same-Origin Policy [http://en.wikipedia.org/wiki/Same_origin_policy] cookies can be get/set *only* for the given path --> JavaScript running at [http://example.com/webapp] *cannot* get/set cookies from requests at [http://example.com/restapi] * cookies are the primary source of Cross-Site Request Forgery [http://en.wikipedia.org/wiki/Cross-site_request_forgery] attacks --> malicious websites/scripts can forge requests to REST API that will include the cookie, compromising user session Alternative: clients could be given the *option* to use regular HTTP header for transmitting authentication information. For example, webapp could read such (sensitive information) header, store it securely via HTML5 Session Storage [http://en.wikipedia.org/wiki/Web_storage] and implement related HTTP processing on its own, e.g. pass this header for all authenticated requests (instead of pushing this responsibility to browser). -- (2) Straight-forward HTTP Basic Auth has some drawbacks! HTTP Basic Auth [http://en.wikipedia.org/wiki/Basic_access_authentication] over (non-secure) HTTP connection means sending user credentials (username/password/domain) in easy-to-decode cleartext, i.e. the value is *not* encrypted or hashed in any way. Using secure lower-level protocol (SSL) fixes the consequence, rather than the root cause of the confidentiality issue. Furthermore, browsers typically remember HTTP Basic Auth information (either via browser-specific popup, or via XmlHttpRequest) until the browser window is closed. This means the webapp has no control over HTTP Basic Auth header after it has been set! This is the reason why it's hard to implement "logout" functionality in webapps when using HTTP Basic Auth. Last but not least, HTTP Basic Auth is vulnerable to Replay attacks [http://en.wikipedia.org/wiki/Replay_attack] Someone between client and server can intercept requests and replay them, compromising user session. Alternative: clients could be given the *option* to use more advanced authentication scheme. I've just read an excellent article at [http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-authe…] which describes easy yet secure authentication scheme inspired by Amazon Web Services REST API authentication [http://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html] The idea is simple: collect auth information, hash (sign) it with a private key, and send everything to server. To guard against Replay attacks, just provide some timestamp to enforce request expiry after some time (say, 5-15 minutes). Easy and simple! -- (3) Support JSON for resource representations! I think this is pretty much obvious. XML has no real advantages over JSON. JSON, on the other hand, has good support in webapps (JavaScript) and maps directly to common data structures (i.e. string, number, boolean, and so on). >From webapp perspective, it's much easier and natural to use JSON than to parse/format XML documents. Alternative: clients could be given the *option* to use JSON, in addition to XML representation. -- Vojtech

4 8