June 2021 - Devel - oVirt List Archives

[VDSM] Started getting virNetTLSContextCheckCertTimes:154 : The server certificate /etc/pki/vdsm/certs/vdsmcert.pem has expired
by Edward Haas 11 Jan '24

11 Jan '24

Hi, I have a VM which acts as an oVirt host with VDSM installed. I use it for testing without connecting it to Engine. Recently VDSM fails to come up and I see this error: Sep 26 17:58:18 localhost libvirtd: 2018-09-26 14:58:18.978+0000: 12176: error : virNetTLSContextCheckCertTimes:154 : The server certificate /etc/pki/vdsm/certs/vdsmcert.pem has expired Any hint on how to generate or fetch a new certificate without the help of Engine? Thanks, Edy.

3 5

Error: Adding new Host to ovirt-engine
by Ahmad Khiet 14 Aug '23

14 Aug '23

Hi, Can't add new host to ovirt engine, because the following error: 2019-06-12 12:23:09,664 p=4134 u=engine | TASK [ovirt-host-deploy-facts : Set facts] ************************************* 2019-06-12 12:23:09,684 p=4134 u=engine | ok: [10.35.1.17] => { "ansible_facts": { "ansible_python_interpreter": "/usr/bin/python2", "host_deploy_vdsm_version": "4.40.0" }, "changed": false } 2019-06-12 12:23:09,697 p=4134 u=engine | TASK [ovirt-provider-ovn-driver : Install ovs] ********************************* 2019-06-12 12:23:09,726 p=4134 u=engine | fatal: [10.35.1.17]: FAILED! => {} MSG: The conditional check 'cluster_switch == "ovs" or (ovn_central is defined and ovn_central | ipaddr and ovn_engine_cluster_version is version_compare('4.2', '>='))' failed. The error was: The ipaddr filter requires python's netaddr be installed on the ansible controller The error appears to be in '/home/engine/apps/engine/share/ovirt-engine/playbooks/roles/ovirt-provider-ovn-driver/tasks/configure.yml': line 3, column 5, but may be elsewhere in the file depending on the exact syntax problem. The offending line appears to be: - block: - name: Install ovs ^ here 2019-06-12 12:23:09,728 p=4134 u=engine | PLAY RECAP ********************************************************************* 2019-06-12 12:23:09,728 p=4134 u=engine | 10.35.1.17 : ok=3 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0 whats missing!? Thanks -- Ahmad Khiet Red Hat <https://www.redhat.com/> akhiet(a)redhat.com M: +972-54-6225629 <https://red.ht/sig>

7 10

This year conference community updates
by Sandro Bonazzola 30 Jul '21

30 Jul '21

Hi, as announced we are going to have oVirt online conference coming in September. I would like to give usual community updates in and as part of that I'd like to report about oVirt downstream products (such as Red Hat Virtualization and Oracle Linux Virtualization Manager) and about companies using oVirt. I could just go googling and guessing by e-mail traffic on oVirt users list but I want to try a different approach this year. So, if you are shipping an oVirt downstream or if you're using oVirt and you'd like to get the company nominated during the community reports please let me know off-list. Also I'd like to remind that oVirt site has a section dedicated to user stories, if you want to share yours you can either push it to https://github.com/oVirt/ovirt-site or get in touch with me off-list to get help getting your story published. Thanks, -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 1

importing fixtures in ovirt-system-tests
by Yedidyah Bar David 08 Jul '21

08 Jul '21

Hi all, We have several different styles of where/how to import fixtures in ovirt-system-tests: - import directly inside the test code - import in conftest.py - import in fixtures modules - For all of above, both 'import *' and importing specific fixtures I think we should try to agree on a specific style and then follow it. One drawback of importing directly in test/fixtures code is that it's then impossible to override them in conftest.py. A drawback of importing '*' and/or doing this in conftest.py is that you might inadvertently import more than you want, or this might happen eventually (after more stuff are added), that this makes it harder to find what uses what, and that it risks unintended collisions in names - as opposed to intended overrides. A related issue is having to update many places if you add/change something. If there is some kind of "best practices" document somewhere that people are happy with, perhaps we should follow it. Otherwise, we should come up with our own. Personally I think I'd like to have a single file with all the imports, of specific fixtures (not '*'), and import this file from conftest.py of all the suites. Didn't actually try this and no idea what complications it might bring. Comments/ideas/opinions/decisions are welcome :-) Best regards, -- Didi

3 2

ovirt-engine-4.4.7 was branched
by Tal Nisan 30 Jun '21

30 Jun '21

Hi everyone, Today we've tagged what will be 4.4.7 RC build, to maintain stability and to allow work on 4.4.8 we have branched 4.4.7 in case of bugs found on the RC Build that need to be fixed. The general guidelines: For your 4.4.8 work - just push to master For 4.4.7 work (blockers/exceptions only!) - push to master and once it's merged backport to the ovirt-engine-4.4.7.z branch Thanks!

1 0

Vdsm: ovirt-4.4.7 branch created
by Milan Zamazal 30 Jun '21

30 Jun '21

Hi, ovirt-4.4.7 branch has been created for 4.4.7 backports. You can merge 4.4.8 stuff to master now. Regards, Milan

1 0

ovirt-engine has been tagged (ovirt-engine-4.4.7.6)
by Tal Nisan 30 Jun '21

30 Jun '21

1 0

oVirt CI mirror for centos stream advancedvirt-common repo
by Nir Soffer 30 Jun '21

30 Jun '21

I updated vdsm libvirt requirement to 7.0.0-14. The package exists in centos stream and rhel so the change is correct, but the install check fails in the CI. I found that adding the repo to check-patch.repos works: https://gerrit.ovirt.org/c/vdsm/+/115039/4/automation/check-patch.repos But depending on mirror.centos.org does not feel like the right way. I think keeping a local mirror is the right way. It looks like the stdci docs[1] are not maintained for a while, listing mirrors for fedora 30 and centos 7. Looking in the mirrors jobs[2] we have advanced-virtualization for centos[3] but it holds old versions (6.x). Can we add a local mirror for this repo? [1] https://ovirt-infra-docs.readthedocs.io/en/latest/CI/List_of_mirrors/index.… [2] https://jenkins.ovirt.org/search/?q=system-sync_mirrors [3] https://buildlogs.centos.org/centos/8/virt/x86_64/advanced-virtualization/P… Nir

3 3

cloning LVM partitions
by duparchy＠esrf.fr 29 Jun '21

29 Jun '21

Hi, What are the internal commands used to clone LVM partitions ? (you can simply indicate me the source code where this is done) Thanks

3 6

selenium.common.exceptions.TimeoutException: Message: Clusters menu is not displayed
by Yedidyah Bar David 29 Jun '21

29 Jun '21

On Wed, Jun 23, 2021 at 1:03 PM Code Review <gerrit(a)ovirt.org> wrote: > > From Jenkins CI <jenkins(a)ovirt.org>: > > Jenkins CI has posted comments on this change. ( https://gerrit.ovirt.org/c/ovirt-system-tests/+/115191 ) > > Change subject: Make the ansible_inventory fixture backend-independent > ...................................................................... > > > Patch Set 16: Continuous-Integration-1 > > Build Failed > > https://jenkins.ovirt.org/job/ovirt-system-tests_standard-check-patch/17451/ : FAILURE Hi all, Can someone please have a look and decide if this failure is reasonable? The screenshot of the failed "Open cluster list view" does not show anything suspicious at all [1], to me, but not sure how it should otherwise look - e.g. should it include a pointer, which might imply where we tried to move, etc. It timed out 3 minutes after a successful login [2]. If it's not supposed to include a pointer, perhaps we should try to make selenium do include a pointer in the screenshots - I have a feeling this can help debug other UI issues. But I don't know this code at all... Thanks and best regards, [1] https://jenkins.ovirt.org/job/ovirt-system-tests_standard-check-patch/17451… [2] https://jenkins.ovirt.org/job/ovirt-system-tests_standard-check-patch/17451… > > > -- > To view, visit https://gerrit.ovirt.org/c/ovirt-system-tests/+/115191 > To unsubscribe, or for help writing mail filters, visit https://gerrit.ovirt.org/settings > > Gerrit-Project: ovirt-system-tests > Gerrit-Branch: master > Gerrit-Change-Id: Id07012f8fc3a972a3b62d32f2271d5747514e13a > Gerrit-Change-Number: 115191 > Gerrit-PatchSet: 16 > Gerrit-Owner: Yedidyah Bar David <didi(a)redhat.com> > Gerrit-Reviewer: Andrej Cernek <acernek(a)redhat.com> > Gerrit-Reviewer: Anton Marchukov <amarchuk(a)redhat.com> > Gerrit-Reviewer: Dafna Ron <dron(a)redhat.com> > Gerrit-Reviewer: Dusan Fodor <dfodor(a)redhat.com> > Gerrit-Reviewer: Gal Ben Haim <galbh2(a)gmail.com> > Gerrit-Reviewer: Galit Rosenthal <grosenth(a)redhat.com> > Gerrit-Reviewer: Jenkins CI <jenkins(a)ovirt.org> > Gerrit-Reviewer: Marcin Sobczyk <msobczyk(a)redhat.com> > Gerrit-Reviewer: Name of user not set #1001916 > Gerrit-Reviewer: Yedidyah Bar David <didi(a)redhat.com> > Gerrit-Comment-Date: Wed, 23 Jun 2021 10:03:15 +0000 > Gerrit-HasComments: No > Gerrit-Has-Labels: Yes > Gerrit-MessageType: comment > -- Didi

3 4

2FA requirement for oVirt GitHub org?
by Janos Pasztor 28 Jun '21

28 Jun '21

Hey folks, I just noticed that we don't have 2FA enforcement on the oVirt GitHub org. [image: image.png] Is this just an oversight or is it intentional? May I propose to turn 2FA enforcement on? Janos

5 5

Broken commit-msg hook in gerrit
by Nir Soffer 25 Jun '21

25 Jun '21

In ovirt-imageio developer docs, we ask to install the commit-msg hook from gerrit: wget -P .git/hooks https://gerrit.ovirt.org/tools/hooks/commit-msg This downloads now a broken script that does not add a ChangeId header. In the past I think it returned something like the attached file, without the code for adding signed-off-by. I suggest to replace the current file at: https://gerrit.ovirt.org/tools/hooks/commit-msg Or if we want to keep the default file for some reason, add: https://gerrit.ovirt.org/tools/ovirt/hooks/commit-msg This file contains the code for adding the signed-off-by header, so so developers do not need to add this manually: # Add Signed-off-by trailer. sob=$(git var GIT_AUTHOR_IDENT | sed -n 's/^$.*>$.*$/Signed-off-by: \1/p') git interpret-trailers --in-place --trailer "$sob" "$1" Later we need to replace this ugly shell script with proper code. Nir

1 1

Add "ci system-test" command
by Nir Soffer 24 Jun '21

24 Jun '21

Similar to "ci build", "ci test", "ci merge" add a new command that triggers OST run. Running OST is tied now in vdsm (and engine?) to Code-Review: +2. This causes trouble and does not allow non-maintainers to use the convenient OST infrastructure. Expected flow: 1. User add a comment with "ci system-test" 2. OST flow building and running OST triggered

4 5

basic OST: Error initializing source docker, unauthorized: incorrect username or password
by Yedidyah Bar David 24 Jun '21

24 Jun '21

Hi all, On Mon, Jun 21, 2021 at 8:55 PM <jenkins(a)jenkins.phx.ovirt.org> wrote: > > Project: https://jenkins.ovirt.org/job/ovirt-system-tests_basic-suite-master_nightly/ > Build: https://jenkins.ovirt.org/job/ovirt-system-tests_basic-suite-master_nightly… This is a week-old build, but some (but not all) of the check-patch OST runs I did yesterday failed the same way, e.g. [1][2]: ====================================================================== failed on setup with "ost_utils.shell.ShellError: Command failed with rc=125. Stdout: Stderr: Trying to pull docker.io/selenium/hub:3.141.59-20210422... unable to retrieve auth token: invalid username/password: unauthorized: incorrect username or password Error: 1 error occurred: * Error initializing source docker://selenium/hub:3.141.59-20210422: unable to retrieve auth token: invalid username/password: unauthorized: incorrect username or password" ====================================================================== Is this a known issue? Perhaps related to docker's rate-limiting? [1] https://jenkins.ovirt.org/job/ovirt-system-tests_standard-check-patch/17434/ [2] https://jenkins.ovirt.org/job/ovirt-system-tests_standard-check-patch/17434… Best regards, -- Didi

2 3

Add OST flag to all oVirt projects
by Nir Soffer 23 Jun '21

23 Jun '21

Similar to Continuous-Integration flag, OST needs its own flag. OST will set this flag when OST build started from gerrit was started. We want to make this field mandatory for merging patches, like Continuous-Integration. Like Continuous-Integration maintainers should be able to override the value after OST completed, or set the value before OST started.

1 0

AV 8.4 for CentOS Linux
by Sandro Bonazzola 23 Jun '21

23 Jun '21

Hi all, New versions of AV packages in CentOS Virt SIG for CentOS Linux 8.4 are available on https://buildlogs.centos.org/centos/8/virt/x86_64/advanced-virtualization/ . Please help with testing so we can release it. hivex-1.3.18-21.el8 libguestfs-1.44.0-2.el8 libguestfs-winsupport-8.2-1.el8 libiscsi-1.18.0-8.el8 libnbd-1.6.0-3.el8 libosinfo-1.8.0-1.el8 libtpms-0.7.4-4.20201106git2452a24dab.el8 libvirt-dbus-1.3.0-2.el8 libvirt-7.0.0-14.1.el8 libvirt-python-7.0.0-1.el8 nbdkit-1.24.0-1.el8 netcf-0.2.8-12.el8 perl-Sys-Virt-7.0.0-1.el8 python-pyvmomi-6.7.1-7.el8 qemu-kvm-5.2.0-16.el8 seabios-1.14.0-1.el8 sgabios-0.20170427git-3.el8 SLOF-20200717-1.gite18ddad8.el8 supermin-5.2.1-1.el8 swtpm-0.4.2-1.20201201git2df14e3.el8 virglrenderer-0.8.2-1.el8 virt-v2v-1.42.0-10.el8 If no negative feedback will be reported, the plan is to tag it for release tomorrow. -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

8 15

ovirt-engine has been tagged (ovirt-engine-4.4.7.5)
by Tal Nisan 23 Jun '21

23 Jun '21

1 0

ansible OST: Failed to hot-plug disk
by Yedidyah Bar David 23 Jun '21

23 Jun '21

Hi all, Please see [1], failed twice so far: "msg": "Fault reason is \"Operation Failed\". Fault detail is \"[Failed to hot-plug disk]\". HTTP response code is 400." Thanks and best regards, [1] https://jenkins.ovirt.org/job/ovirt-system-tests_ansible-suite-master/1972/ -- Didi

2 2

planned Jenkins restart
by Evgheni Dereveanchin 23 Jun '21

23 Jun '21

Hi everyone, I'll be performing a planned Jenkins restart within the next hour. No new CI jobs will be scheduled during this maintenance period. I will inform you once it is back online. -- Regards, Evgheni Dereveanchin

1 1

Gerrit hook adds unrelated patches to bugs
by Nir Soffer 22 Jun '21

22 Jun '21

Gerrit hook is wrongly looking for https://bugzilla.redhat.com/ URLs in the commit message, and adding the patch to the bug. Example patch: https://gerrit.ovirt.org/c/vdsm/+/115339 I had to clean up the bug after the broken hook (see screenshot). The hook should really look only in the single URL in (one or more) Bug-Url headers: Bug-Url: https://bugzilla.redhat.com/ I reported this years ago (I think for Related-To:), and I remember we had a patch fixing this issue, but for some reason it was lost. Nir

3 2

OST verifed -1 broken, fails for infra issue in OST
by Nir Soffer 21 Jun '21

21 Jun '21

I got this wrong review from OST, which looks like an infra issue in OST: Patch: https://gerrit.ovirt.org/c/vdsm/+/115232 Error: https://gerrit.ovirt.org/c/vdsm/+/115232#message-46ad5e75_ed543485 Failing code: Package(*line.split()) for res in results.values() > for line in _filter_results(res['stdout'].splitlines()) ] E TypeError: __new__() missing 2 required positional arguments: 'version' and 'repo' ost_utils/ost_utils/deployment_utils/package_mgmt.py:177: TypeError I hope someone working on OST can take a look soon. Nir

3 3

Moving #vdsm to #ovirt?
by Nir Soffer 21 Jun '21

21 Jun '21

We had mostly dead #vdsm channel in freenode[1]. Recently there was a hostile takeover of freenode, and old freenode folks created libera[2] network. Most (all?) projects moved to this network. We can move #vdsm to libera, but I think we have a better option, use #ovirt channel in oftc[3], which is pretty lively. Having vdsm developers in #ovirt channel is good for the project and will make it easier to reach developers. Moving to libera require registration work. Moving to #ovirt requires no change. In both cases we need to update vdsm readme and ovirt.org. What do you think? [1] https://freenode.net/ [2] https://libera.chat/ [3] https://www.oftc.net/ Nir

6 5

Purging inactive maintainers from vdsm-master-maintainers
by Nir Soffer 21 Jun '21

21 Jun '21

I want to remove inactive contributors from vdsm-master-maintainers. I suggest the simple rule of 2 years of inactivity for removing from this group, based on git log. See the list below for current status: https://gerrit.ovirt.org/#/admin/groups/106,members Thoughts? Nir

6 11

test_hotplug_memory fails basic and he-basic
by Yedidyah Bar David 20 Jun '21

20 Jun '21

Hi all, On Sun, Jun 20, 2021 at 7:18 AM <jenkins(a)jenkins.phx.ovirt.org> wrote: > > Project: https://jenkins.ovirt.org/job/ovirt-system-tests_he-basic-suite-master/ > Build: https://jenkins.ovirt.org/job/ovirt-system-tests_he-basic-suite-master/2060/ > Build Number: 2060 basic-suite-master started failing on test_hotplug_memory at: https://jenkins.ovirt.org/job/ovirt-system-tests_basic-suite-master_nightly… 1246 failed on a later test (due to some other (temporary) reason?), all other runs since failed on test_hotplug_memory. Didn't try to bisect engine/vdsm. On an OST check-patch run from this afternoon, basic-suite did pass, so it's not always failing: https://jenkins.ovirt.org/job/ovirt-system-tests_standard-check-patch/17364/ Any idea? Thanks and best regards, -- Didi

1 0

hc-basic-suite-master fails due to missing glusterfs firewalld services
by Yedidyah Bar David 20 Jun '21

20 Jun '21

Hi, I now tried running locally hc-basic-suite-master with a patched OST, and it failed due to $subject. I checked and see that this also happened on CI, e.g. [1], before it started failing to to an unrelated reason later: E TASK [gluster.infra/roles/firewall_config : Add/Delete services to firewalld rules] *** E failed: [lago-hc-basic-suite-master-host-0] (item=glusterfs) => {"ansible_loop_var": "item", "changed": false, "item": "glusterfs", "msg": "ERROR: Exception caught: org.fedoraproject.FirewallD1.Exception: INVALID_SERVICE: 'glusterfs' not among existing services Permanent and Non-Permanent(immediate) operation, Services are defined by port/tcp relationship and named as they are in /etc/services (on most systems)"} E failed: [lago-hc-basic-suite-master-host-2] (item=glusterfs) => {"ansible_loop_var": "item", "changed": false, "item": "glusterfs", "msg": "ERROR: Exception caught: org.fedoraproject.FirewallD1.Exception: INVALID_SERVICE: 'glusterfs' not among existing services Permanent and Non-Permanent(immediate) operation, Services are defined by port/tcp relationship and named as they are in /etc/services (on most systems)"} E failed: [lago-hc-basic-suite-master-host-1] (item=glusterfs) => {"ansible_loop_var": "item", "changed": false, "item": "glusterfs", "msg": "ERROR: Exception caught: org.fedoraproject.FirewallD1.Exception: INVALID_SERVICE: 'glusterfs' not among existing services Permanent and Non-Permanent(immediate) operation, Services are defined by port/tcp relationship and named as they are in /etc/services (on most systems)"} This seems similar to [2], and indeed I can't see the package 'glusterfs-server' installed locally on host-0. Any idea? Thanks and best regards, [1] https://jenkins.ovirt.org/job/ovirt-system-tests_hc-basic-suite-master/2088/ [2] https://github.com/oVirt/ovirt-ansible/issues/124 -- Didi

2 5