- Devel - oVirt List Archives

[Storage-SIG][BugReport] ceph-common broken dependencies on CentOS Stream 8 / ppc64le
by Sandro Bonazzola 22 Sep '21

22 Sep '21

Hi, oVirt CI started to report the following error: Error: Problem: package ceph-common-2:16.2.6-1.el8s.ppc64le requires libpmemobj.so.1()(64bit), but none of the providers can be installed - cannot install the best candidate for the job - package libpmemobj-1.9.2-1.module_el8.4.0+806+82bbed84.ppc64le is filtered out by modular filtering - package libpmemobj-1.9.2-1.module_el8.5.0+756+4cdc1762.ppc64le is filtered out by modular filtering Can you please have a look? Thanks -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

2 1

Cannot install latest oVirt engine
by Vojtech Juranek 21 Sep '21

21 Sep '21

Hi, I'm trying to install engine build [1] to verify test a patch [2], but I'm getting following error: [root@localhost ~]# dnf install ovirt-engine Last metadata expiration check: 0:20:02 ago on Thu Sep 16 10:24:54 2021. Package ovirt-engine-4.4.9.1-0.0.master.20210915185633.git016f27be31a.el8.noarch is already installed. Error: Problem: package ovirt-engine-setup-4.5.0-0.0.master.20210916115243.gitf26fbb5598f.el8.noarch requires ovirt-engine-setup-plugin-ovirt-engine = 4.5.0-0.0.master.20210916115243.gitf26fbb5598f.el8, but none of the providers can be installed - package ovirt-engine-4.5.0-0.0.master.20210916115243.gitf26fbb5598f.el8.noarch requires ovirt-engine-setup >= 4.5.0-0.0.master.20210916115243.gitf26fbb5598f.el8, but none of the providers can be installed - package ovirt-engine-setup-plugin-ovirt-engine-4.5.0-0.0.master.20210916115243.gitf26fbb5598f.el8.noarch requires ovirt-openvswitch-ovn-central >= 2.15, but none of the providers can be installed - cannot install the best candidate for the job - nothing provides ovn-2021-central needed by ovirt-openvswitch-ovn-central-2.15-1.el8.noarch ovirt-engine-setup-plugin-ovirt-engine doesn't seem to be built and ovn-2021-central seems to be available only for centos stream 9 (on the other hand, oVirt packaged are not build for centos stream 9 AFAICT). Any ideas how to solve it and install latest engine build? Thanks Vojta [1] https://jenkins.ovirt.org/job/ovirt-engine_standard-check-patch/14243/artif… [2] https://gerrit.ovirt.org/c/ovirt-engine/+/116747

3 7

noVNC not working when FIPS is enabled
by Milan Zamazal 20 Sep '21

20 Sep '21

Hi, we had to disable VNC OST test some time ago because it started failing. I looked at why it fails and the reason provided by ovirt-websocket-proxy is do_vencrypt_handshake:187 Server supports the following subtypes: 263 Server does not support X509VNC. OvirtProxy only supports X509VNC This happens only when FIPS is enabled and is reproducible outside OST. The only thing that seems to have influence on whether it works or not is the value of `fips' kernel command line parameter -- when it's changed to fips=0 then noVNC console works without any other changes. So it looks like some change in QEMU. I'm not an expert in this area and don't know what those protocols are about, why the proxy supports only X509VNC and why the mismatch in expectations on both the ends happens when FIPS is enabled. Can anybody help clarify it and provide an idea how to resolve the problem? Thanks, Milan

2 4

oVirt Node - master - CentOS Stream 9 based ISO available for testing
by Sandro Bonazzola 17 Sep '21

17 Sep '21

Hi, I'm still working on it but I have a first ISO ready for giving a first run at https://resources.ovirt.org/pub/ovirt-master-snapshot-static/iso/ovirt-node… Known limitations: - No hosted engine setup available - No ansible available - No collectd support - No cinderlib support Everything else should be there but it's totally untested. Help giving it a try and providing feedback is appreciated. Thanks -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

3 7

VDSM test failures on CentOS Stream 9
by Sandro Bonazzola 15 Sep '21

15 Sep '21

[2021-09-15T07:51:34.718Z] ssl_test.py .............. [100 %]/home/jenkins/workspace/vdsm_standard-check-patch/vdsm/lib/vdsm/rpc/Bridge.py: 214: SyntaxWarning: "is not" with a literal. Did you mean "!="? [2021-09-15T07:51:34.718Z] if key is not 'status']) [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] =================================== FAILURES =================================== [2021-09-15T07:51:49.765Z] ______________________ TestTerminating.test_poll_failure _______________________ [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] self = <utils_test.TestTerminating testMethod=test_poll_failure> [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] def tearDown(self): [2021-09-15T07:51:49.765Z] if self.proc_poll() is None: [2021-09-15T07:51:49.765Z] > self.proc_kill() [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] lib/utils_test.py:88: [2021-09-15T07:51:49.765Z] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ [2021-09-15T07:51:49.765Z] /usr/lib64/python3.9/subprocess.py:2080: in kill [2021-09-15T07:51:49.765Z] self.send_signal(signal.SIGKILL) [2021-09-15T07:51:49.765Z] /usr/lib64/python3.9/subprocess.py:2058: in send_signal [2021-09-15T07:51:49.765Z] self.poll() [2021-09-15T07:51:49.765Z] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] def fail(): [2021-09-15T07:51:49.765Z] > raise ExpectedFailure("Fake poll failure") [2021-09-15T07:51:49.765Z] E utils_test.ExpectedFailure: Fake poll failure [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] lib/utils_test.py:122: ExpectedFailure [2021-09-15T07:51:49.765Z] ------------------------------ Captured log call ------------------------------- [2021-09-15T07:51:49.765Z] 03:50:38,141 DEBUG (MainThread) [common.commands] /usr/bin/taskset --cpu-list 0-1 /usr/bin/sleep 2 (cwd None) (commands:153) [2021-09-15T07:51:49.765Z] _____________ TestExecCmdAffinity.testResetAffinityWhenConfigured ______________ [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] a = (<utils_test.TestExecCmdAffinity testMethod=testResetAffinityWhenConfigured>,) [2021-09-15T07:51:49.765Z] kw = {}, r = 13, w = 14, pid = 440223 [2021-09-15T07:51:49.765Z] e = AssertionError('Items in the first set but not the second:\n1'), _ = 440223 [2021-09-15T07:51:49.765Z] status = 256 [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] @functools.wraps(f) [2021-09-15T07:51:49.765Z] def wrapper(*a, **kw): [2021-09-15T07:51:49.765Z] r, w = os.pipe() [2021-09-15T07:51:49.765Z] try: [2021-09-15T07:51:49.765Z] pid = os.fork() [2021-09-15T07:51:49.765Z] if pid == 0: [2021-09-15T07:51:49.765Z] try: [2021-09-15T07:51:49.765Z] f(*a, **kw) [2021-09-15T07:51:49.765Z] os._exit(0) [2021-09-15T07:51:49.765Z] except Exception as e: [2021-09-15T07:51:49.765Z] os.write(w, pickle.dumps(e)) [2021-09-15T07:51:49.765Z] os._exit(1) [2021-09-15T07:51:49.765Z] else: [2021-09-15T07:51:49.765Z] _, status = osutils.uninterruptible(os.waitpid, pid, 0) [2021-09-15T07:51:49.765Z] if status != 0: [2021-09-15T07:51:49.765Z] e = pickle.loads(os.read(r, 4006)) [2021-09-15T07:51:49.765Z] > raise e [2021-09-15T07:51:49.765Z] E AssertionError: Items in the first set but not the second: [2021-09-15T07:51:49.765Z] E 1 [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] testlib.py:570: AssertionError [2021-09-15T07:51:49.765Z] =============================== warnings summary =============================== [2021-09-15T07:51:49.765Z] ../../../../../../usr/lib/python3.9/site-packages/nose/importer.py:12 [2021-09-15T07:51:49.765Z] /usr/lib/python3.9/site-packages/nose/importer.py:12: DeprecationWarning: the imp module is deprecated in favour of importlib; see the module's documentation for alternative uses [2021-09-15T07:51:49.765Z] from imp import find_module, load_module, acquire_lock, release_lock [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] ../lib/vdsm/rpc/Bridge.py:214 [2021-09-15T07:51:49.765Z] /home/jenkins/workspace/vdsm_standard-check-patch/vdsm/lib/vdsm/rpc/Bridge.py: 214: SyntaxWarning: "is not" with a literal. Did you mean "!="? [2021-09-15T07:51:49.765Z] if key is not 'status']) [2021-09-15T07:51:49.765Z] [2021-09-15T07:51:49.765Z] -- Docs: https://docs.pytest.org/en/stable/warnings.html [2021-09-15T07:51:49.765Z] Any chance someone can investigate them? https://jenkins.ovirt.org/blue/organizations/jenkins/vdsm_standard-check-pa… -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

3 5

ovirt-engine has been tagged (ovirt-engine-4.4.9)
by Sandro Bonazzola 15 Sep '21

15 Sep '21

ovirt-engine has been tagged (ovirt-engine-4.4.9) -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0

ovirt-engine-extension-aaa-ldap broken, if using CNAME for LDAP server DNS
by Erdősi Péter 15 Sep '21

15 Sep '21

Hello! We're started the upgrade one of our oVirt clusters to the recent 4.4 minor version (4.4.8.5-1.el8) and we found a bug in the recent change of the aaa-ldap plugin. This bug came along after the IPv4/IPv6 selection introduced in ovirt-engine-extension-aaa-ldap 1.4.4 We've dig down in the rabbit hole, and it looks like, our DNS solution is just not compatible with the plugin after this commit: https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/commit/4c0f2e72df8… I don't know, how the industry actually use CNAME records, but we have a rule, that we use independet DNS names for services, and machines itself. This become handy, when you migrate/upgrade services, like LDAP to another machine, and I think, this should be supported. Our LDAP server service domain is actually ldap-master.niif.hu and ldap.niif.hu, but in real, there are two servers, which actually have their own FQDNs. The actual DNS structure: host -t CNAME ldap-master.niif.hu ldap-master.niif.hu is an alias for elm.niif.hu. host -t CNAME ldap.niif.hu ldap.niif.hu is an alias for holly.ldap.einfra.hu. host elm.niif.hu elm.niif.hu has address 193.225.14.175 elm.niif.hu has IPv6 address 2001:738:0:701::3 host holly.ldap.einfra.hu holly.ldap.einfra.hu has address 193.224.92.6 holly.ldap.einfra.hu has IPv6 address 2001:738:0:431::6 The commit above (as far as I understand) only tries to resolve A and AAAA records in DNS, and drop the connection if it not found. Of course, the certificate only have ldap-master and ldap.niif.hu in it, so using holly end elm does not solve the problem (also, if the service will be migrated, the service domain will be kept, but not the machine's FQDN, since we cannot afford to shut down one of our LDAP server for a migration windows. We've tried to downgrade the package to 1.4.3, which is works fine. The actual error looks like this (engine.log) 2021-09-07 15:53:09,833+02 WARN [org.ovirt.engine.extension.aaa.ldap.AuthnExtension] (default task-1) [] [ovirt-engine-extension-aaa-ldap.authn::NIIFLdap-authn] Cannot initialize LDAP framework, deferring initialization. Error: An error occurred while attempting to connect to server ldap-master.niif.hu:636: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-master.niif.hu/193.225.14.175:636: UnknownHostException(ldap-master.niif.hu), ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb')) 2021-09-07 15:53:09,833+02 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-1) [] Internal Server Error: An error occurred while attempting to connect to server ldap-master.niif.hu:636: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-master.niif.hu/193.225.14.175:636: UnknownHostException(ldap-master.niif.hu), ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb')) 2021-09-07 15:53:09,833+02 ERROR [org.ovirt.engine.core.sso.service.SsoService] (default task-1) [] An error occurred while attempting to connect to server ldap-master.niif.hu:636: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-master.niif.hu/193.225.14.175:636: UnknownHostException(ldap-master.niif.hu), ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb')) 2021-09-07 15:53:09,854+02 ERROR [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-1) [] server_error: An error occurred while attempting to connect to server ldap-master.niif.hu:636: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-master.niif.hu/193.225.14.175:636: UnknownHostException(ldap-master.niif.hu), ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb')) As we tried to run the setup tool, that is also looks broken (after that, we've copied the required files to /etc/ovirt-engine/aaa and /etc/ovirt-engine/extensions.d/ from other, working hosted engine) so we've tested the plugin itself, and the setup too, but no luck. I think, this (CNAME in DNS) should be working with the plugin. Could you please investigate this issue? (we're here to help test the repaired version/patch, if needed, but not feel the knowledge to create the patch ourself) Regards: Peter -- *Erdősi Péter * /Informatikus, IKT Fejlesztési Főosztály / *Kormányzati Informatikai Fejlesztési Ügynökség * cím: 1134 Budapest, Váci út 35. tel: +36 1 450 3080 e-mail: erdosi.peter(a)kifu.gov.hu <mailto:erdosi.peter@kifu.gov.hu> KIFÜ - www.kifu.gov.hu <http://kifu.gov.hu/kifu/>

3 3

Google OAuth enabled on jenkins.ovirt.org
by Evgheni Dereveanchin 14 Sep '21

14 Sep '21

Hi Everyone, TL;DR: From now on please use a Google account if you need to log in to jenkins.ovirt.rog Longer version: We're using Jenkins CI for oVirt and most content does not need authentication - this does not change. Some workflows such as manual job runs do need sign-in and up until now a local user database was used for that. It was inconvenient and not did not meet modern security standards. To improve the situation we're moving to Google OAuth. It works similarly to what we already have on gerrit.ovirt.org and other services. Existing user accounts were migrated so all permissions should be retained. Job results will be available without sign-in just as they did before. If you are unable to perform some actions that worked before - please let me know or log a JIRA ticket. -- Regards, Evgheni Dereveanchin

1 0

vdsm pylint runs don't report some errors
by Harel Braha 14 Sep '21

14 Sep '21

Hi, When I ran vdsm linters in my local environment, I received errors such as: ` lib/vdsm/storage/lvm.py:1837:14: E1120: No value for argument 'rc' in constructor call (no-value-for-parameter)` On inspection of the CI logs from other runs, we found an internal Pylint error[1]. It appears that this error prevents Pylint from working properly. As a result of bumping up pylint version in order to overcome this error, we got the same errors as in my local environment [2], and another error that seems to be a false positive: `lib/vdsm/storage/volumemetadata.py:101:29: E1102: validate is not callable (not-callable)` We don't have a path in the tests that would reach the code part that raises the problematic exception[3], but it seems legit. any suggestions? [1] https://jenkins.ovirt.org/blue/organizations/jenkins/vdsm_standard-check-pa… [2] https://jenkins.ovirt.org/blue/organizations/jenkins/vdsm_standard-check-pa… [3] https://jenkins.ovirt.org/job/vdsm_standard-check-patch/29565/artifact/chec… best regards, Harel

2 1

ovirt-imageio fails tests on CentOS Stream 9 / qemu-6.1.0
by Sandro Bonazzola 10 Sep '21

10 Sep '21

Hi, running ovirt-imageio check-patch on CentOS Stream 9 fails. Is anyone around from the storage team who can have a look? https://jenkins.ovirt.org/job/ovirt-imageio_standard-check-patch/3974//arti… Thanks, -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

4 5