- Devel - oVirt List Archives

oVirt HCI point-to-point interconnection
by Stefano Zappa 29 Jun '18

29 Jun '18

Good morning, I would like to kindly ask you a question about the feasibility of defining a point-to-point interconnection between three ovirt nodes. Initially with the idea of optimizing the direct communications between the nodes and especially the gluster communications, and so it would seem quite easy, then evaluating a more complex configuration, assuming to create an overlay L2 network on the three L3 point-to-point, using techniques like geneve, of which at the moment I have no mastery. If the direct routing of three nodes to interconnect the public network with the private overlay network was not easily doable, we could leave the private overlay network isolated from the outside world and connect the VM hosted engine directly to the two networks with two adapters. This layout with direct interconnection of the nodes without switches and a shared L2 overlay network between the nodes may in future be contemplated in future releases of your HCI solution? Thank you for your attention, have a nice day! Stefano Zappa. [cid:609f1f14-f74e-489f-b86d-08647efc6d1c] Stefano Zappa IT Specialist CAE - TT-3 Industrie Saleri Italo S.p.A. Phone: +39 0308250480 Fax: +39 0308250466 This message contains confidential information and is intended only for users(a)ovirt.org, infra(a)ovirt.org, devel(a)ovirt.org. If you are not users(a)ovirt.org, infra(a)ovirt.org, devel(a)ovirt.org you should not disseminate, distribute or copy this e-mail. Please notify Stefano.Zappa(a)saleri.it immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Stefano Zappa therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. PRIVACY INFORMATION ART. 13 EU REG. 2016/679 We inform you that the personal data contained in the present and subsequent electronic communications will be processed in compliance with the EU Regulation 2016/679, for the purpose of and only for the time necessary to allow the sender to carry out the activities connected to the existing commercial relationships. The provision of personal data is not mandatory. However, failure to provide them determines the impossibility of achieving the aforementioned purpose. With regard to these data, is allowed the exercise of the rights set out in art. 13 and from the articles from 15 to 22 of EU Regulation 2016/679 and in particular the right to request the access to, updating, rectification and erasure of your personal data, as well as the right to object to processing and to lodge a complaint with the Supervisory Authority, by sending an e-mail to privacy(a)saleri.it. Data Controller of your personal data is Industrie Saleri Italo S.p.a., with registered office in via Ruca, 406 - 25065 Lumezzane (BS).

5 8

oVirt on Fedora 28 for developers
by Nir Soffer 29 Jun '18

29 Jun '18

I want to share the current state of oVirt on Fedora 28, hopefully it will save time for other developers. 1. Why should I run oVirt on Fedora 28? - Fedora is the the base for future CentOS. The bugs we find *today* on Fedora 28 are the bugs that we will not have next year when we try oVirt on CentOS. - I want to contribute to projects that require python 3. For example, virt-v2v require python 3.6 in upstream. If you want to contribute you need to test it on Fedora 28. - I need to develop with latest libvirt and qemu. One example is incremental backup, you will need Fefora 28 to work on this. - CentOS is old and boring, I want to play with the newest bugs :-) 2. How to install oVirt with Fedora 28 hosts Warning: ugly hacks bellow! - Install ovirt-release-master.rpm on all hosts dnf install http://resources.ovirt.org/pub/yum-repo/ovirt-release-master.rpm - Install or build engine on CentOS 7.5 (1804)[1] - When provisioning a host, make sure you have lvm2-2.02.177-5.fc28 without it, no block storage you[2] - When adding a host, disable "Configure host firewall" - it does not work now I hope that Sandro team will fix this issue soon. - Adding a host will fail, because without firewall setup, port 54321 is not reacable. to fix this, configure the firewall manually, or disable it iptables -F This is pretty lame because you have to apply it again after restart, but it was good enough for now. - Because the host was not reachable, we don't configure the host network so the host will be non-operational. To fix this, open host > network > setup networks and assign ovirtmgmt to the host management nic. The host will become UP after that. I hope that Dan team will fix it soon. - Adding storage will fail because sanlock selinux issue[3] To fix, set selinux to permissive mode: setenforce 0 At this point you should have a working setup. 3. Building and instaling vdsm from source on Fedora 28 - Install build dependencies using dnf install `cat automation/check-patch.packages.fc28` - Clean the source (needed if you rerun ./autogen.sh with different options) git clean -dxf - Configure vdsm with hooks - for some reason 2 hooks are required on Fedora but not on EL. ./autogen.sh --system --enable-hooks - Build make make rpm - Install the packages at /home/user/rpmbuild/RPMS/{noarch,x86_64} - if vdsm was never installed, you need to configure and enable it vdsm-tool configure --force systemctl enable vdsmd systemctl start vdsmd At this point you can test the new bugs you added to vdsm :-) [1] I did not try to install engine on Fedora 28. I guess engine folks can share if there are issues with this. [2] https://bugzilla.redhat.com/1575762 LVM team fixed the issue couple of hours after I asked about it in #lvm We had a build for testing couple of days later. [3] https://bugzilla.redhat.com/1593853 We are still waiting for selinux folks response. Happy hacking! Nir

4 5

CVE-2018-3639 qemu-kvm-ev-2.10.0-21.el7_5.4.1 is now available for testing
by Sandro Bonazzola 28 Jun '18

28 Jun '18

Hi, qemu-kvm-ev-2.10.0-21.el7_5.4.1 has been tagged for testing. If nothing shows up, I'll tag it for release on Monday July 2nd. Here's the changelog: * Thu Jun 28 2018 Sandro Bonazzola <sbonazzo(a)redhat.com> - ev-2.10.0-21.el7_5.4.1 - Removing RH branding from package name * Sat Jun 09 2018 Miroslav Rezanina <mrezanin(a)redhat.com> - rhev-2.10.0-21.el7_5.4 - kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1571370] - kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1571370] - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584370] - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584370] - kvm-cpus-Fix-event-order-on-resume-of-stopped-guest.patch [bz#1582122] - kvm-spec-Enable-Native-Ceph-support-on-all-architectures.patch [bz#1588001] - Resolves: bz#1571370 (Pegas1.1 Alpha: SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-rhev) [rhel-7.5.z]) - Resolves: bz#1582122 (IOERROR pause code lost after resuming a VM while I/O error is still present [rhel-7.5.z]) - Resolves: bz#1584370 (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: AMD: speculative store bypass [rhel-7.5.z]) - Resolves: bz#1588001 (Enable Native Ceph support on non x86_64 CPUs [rhel-7.5.z]) For testing: $ sudo yum install centos-release-qemu-ev $ sudo yum-config-manager --enable centos-qemu-ev-test $ sudo yum update "qemu-kvm-ev*" and use it as usual. Thanks, -- SANDRO BONAZZOLA MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig>

1 0

[VDSM] Why hooks are required for installing vdsm?
by Nir Soffer 28 Jun '18

28 Jun '18

Trying to update vdsm master, my update script fail with: installing... error: Failed dependencies: vdsm = 4.30.0-429.git05bfb8731.fc28 is needed by (installed) vdsm-hook-fcoe-4.30.0-429.git05bfb8731.fc28.noarch vdsm = 4.30.0-429.git05bfb8731.fc28 is needed by (installed) vdsm-hook-ethtool-options-4.30.0-429.git05bfb8731.fc28.noarch I tried to remove these hooks, since I'm not interested in any of them, but removing them try to remove 136 packages including libvirt. Why do we have these dependencies? hook should be optional. Who owns these hooks? Nir

2 4

Ovirt master build failing in my local (fedora27)
by Gobinda Das 27 Jun '18

27 Jun '18

Hi, I am trying to build ovirt master code in my local but build is failing with following error: ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/ovirt_engine_setup/engine_common/postgres.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/ovirt_engine_setup/engine_common/database.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/ovirt_engine_setup/remote_engine.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-common/base/core/postinstall.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-setup/websocket_proxy/pki.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-setup/websocket_proxy/config.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/upgrade/asynctasks.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-setup/vmconsole_proxy_helper/config.py Imports are incorrectly sorted. + echo ERROR: The following check failed: I have cleared my DB as well and also did yum update. -- Thanks, Gobinda

2 2

Adding Fedora 28 host to engine 4.2 (NotImplementedError: Packager install not implemented)
by Nir Soffer 27 Jun '18

27 Jun '18

I'm trying to add a host running Fedora 28 to engine 4.2, and installation fails with: 2018-06-20 01:14:26,137+0300 DEBUG otopi.context context._executeMethod:143 method exception Traceback (most recent call last): File "/tmp/ovirt-Z5BGYej3Qa/pythonlib/otopi/context.py", line 133, in _executeMethod method['method']() File "/tmp/ovirt-Z5BGYej3Qa/otopi-plugins/ovirt-host-deploy/vdsm/vdsmid.py", line 84, in _packages self.packager.install(('dmidecode',)) File "/tmp/ovirt-Z5BGYej3Qa/pythonlib/otopi/packager.py", line 102, in install raise NotImplementedError(_('Packager install not implemented')) NotImplementedError: Packager install not implemented 2018-06-20 01:14:26,138+0300 ERROR otopi.context context._executeMethod:152 Failed to execute stage 'Environment packages setup': Packager install not implemented Do we have a way to workaround this? I must have a host when I can build and test virt-v2v upstream from source, and virt-v2v requires python 3. So I need some workaround to get the host connected to engine. Nir

7 28

UI plugin API updates
by Vojtech Szocs 26 Jun '18

26 Jun '18

Hi everyone, just a heads-up on recent UI plugin API changes. *oVirt 4.2* 4.2.5+ will support "icon" option when adding new menu item & content via addMainTab API function [1]. Both Font Awesome and PatternFly icons are supported [2]. api.addMainTab('Test', 'fooBar', 'plugin/plugin-name/test.html', { icon: 'fa-lock' // icon: 'pficon-security' }); [1] https://bugzilla.redhat.com/1591730 [2] https://www.patternfly.org/styles/icons/ *oVirt** master* You can now use showToast API function [3] to render "toast" notifications in top right corner of the page. api.showToast('success', 'Operation completed successfully.'); The first parameter can be "info" (white), "success" (green), "warning" (yellow) or "danger" (red). [3] https://gerrit.ovirt.org/#/c/92354/ Regards, Vojtech

1 0

ovirt extensions -- weekly report
by Greg Sheremeta 25 Jun '18

25 Jun '18

ovirt extensions -- weekly report Hi, Note: A team is working on a feature to make ansible roles/playbooks runnable via the administration portal. This is the first edition of my weekly status report on the project. Note2: if you cannot access a document, please let me know. I will be converting them all away from google docs so they are public by default. project book: ovirt extensions project book [1] trello: none (yet - ?) The project has 3 sub-parts, currently: migrate-vm cluster-upgrade central considerations (long-running operations, APIs, notifications) *migrate-vm* design document: [2] design discussion moved to github: [3] patches: [4] Status: Design complete (comments welcome though!) UI patch posted and *in code review*. Action items * *Greg, Tomas, Scott*: code review *cluster-upgrade* design document: [5] design discussion moved to github: PR [6] Status: *in design review.* Please comment freely on the PR! Action items: * *all* - design review * *Greg*: code UI (haven't begun) *central considerations* design document: [7] design discussions on github: [8] patches: [9] Status: *in coding (notifications + API)* Action items: * *Greg*: coding notifications drawer * *Ondra*: coding ansible remote API [1] ovirt extensions project book - Google Docs https://docs.google.com/document/d/1n4VlosdPnIZL81wx0sEIrkAfBehuV5DfOU7eH9i… [2] Migrate VMs Modal - Google Docs https://docs.google.com/document/d/1NF46ZJSOcGFrLWx18Ujsckoob19ANfBlpisB6_f… [3] ovirt-design - Migrate Virtual Machines https://ovirt.github.io/ovirt-design/admin-ui/compute/migrate-vms [4] topic:vm-migrate | gerrit.ovirt Code Review https://gerrit.ovirt.org/#/q/status:open+project:ovirt-engine-dashboard+bra… [5] Cluster Upgrade - Google Docs https://docs.google.com/document/d/1kRDAeu0-wIKbSNieXenQY5qevwNlyCnpyZdeUX-… [6] Adding design proposal around Upgrading a Cluster by lizsurette · Pull Request #5 · oVirt/ovirt-design https://github.com/oVirt/ovirt-design/pull/5 [7] ovirt-engine-ui-extensions - overall design considerations and notes - Google Docs https://docs.google.com/document/d/1GMurjSMtzLaZFktH_Ysge4lRIpLd0nosuV1m8IR… [8] ovirt-design/notifications.md at master · oVirt/ovirt-design https://github.com/oVirt/ovirt-design/blob/master/admin-ui/framework/notifi… [9] Change I73f35974: [WIP!!] webadmin: notifications drawer | gerrit.ovirt Code Review https://gerrit.ovirt.org/#/c/92443/ Change Ib7198f91: services: Add /ansible service for remote execution | gerrit.ovirt Code Review https://gerrit.ovirt.org/#/c/92404/ Best wishes, Greg -- GREG SHEREMETA SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX Red Hat NA <https://www.redhat.com/> gshereme(a)redhat.com IRC: gshereme <https://red.ht/sig>

2 2

vm portal UI redesign -- weekly report
by Greg Sheremeta 24 Jun '18

24 Jun '18

vm portal UI redesign -- weekly report Hi, Note: A team is working on redesigning the UI of vm portal. This is the first edition of my weekly status report on this project. [tl;dr pretty screens: https://github.com/oVirt/ovirt-design/pull/6] project book: n/a (using github issues [1] and ovirt-design [2]) trello: none (Note: we have been using a google doc [3], but because it's not publicly visible upstream, we are transitioning to github [2].) Status: * last week we iterated on Jenny's design updates. * Tomas posted a patch to give us everything needed in the API. * The inline edit page is very close to final UI. * Liz is beginning interaction design on Add VM. * Current designs a missing the network graph -- that can come back. It should look identical to the CPU and Memory, a single total Bandwidth. So three pies. * 'Other OS' icon looks awesome but will neutralize the color (gray) * change 'asleep' --> 'suspended' * Marek + Bohdan + Scott are now coding. * Scott can begin immediately with cards that talk to the stats service, and probably others, and will demo a prototype this week *Action items* *Scott*: prototype of the VM details page - functioning CPU, Memory, and Network cards - and as much as possible of everything else :) *Jenny*: - confirmation popups for 'Remove' VM and other actions (ask Marek / Scott for all such actions -- stop, force stop, delete, others?) - console dialog (console options, edit connection type) - options dialog (ssh key) - add a network card, connect it to a network (just a listbox) - button bar changing when VM is in different states - add disks - create snapshot - gray the Other OS icon *Liz*: - new VM flow (could feature explode -- may want to mimic cockpit's design) *Marek / Bohdan*: - continue coding / creating github issues [1] github issues: Redesign main page · Issue #641 · oVirt/ovirt-web-ui https://github.com/oVirt/ovirt-web-ui/issues/641 Designer review of VM Detail page · Issue #596 · oVirt/ovirt-web-ui https://github.com/oVirt/ovirt-web-ui/issues/596 convert 'force' actions to secondary dropdown pattern · Issue #588 · oVirt/ovirt-web-ui https://github.com/oVirt/ovirt-web-ui/issues/588 use modal dialog pattern instead of popover · Issue #587 · oVirt/ovirt-web-ui https://github.com/oVirt/ovirt-web-ui/issues/587 [2] https://github.com/oVirt/ovirt-design/pull/6 [3] https://docs.google.com/presentation/d/1UavAccggYAqLeXZYnVpyiE6h5tnCJJQMq_f… Best wishes, Greg -- GREG SHEREMETA SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX Red Hat NA <https://www.redhat.com/> gshereme(a)redhat.com IRC: gshereme <https://red.ht/sig>

1 0

Deprecating direct RPM downloads from Jenkins
by Barak Korren 24 Jun '18

24 Jun '18

Hi there, TL;DR: Is your build/CI/other process consuming RPMs directly from Jenkins? Could it be changed to consume from other available places? In STDCI V1 we supported obtaining of the latest CI build for a particular project in a particular branch on a particular platform directly from Jenkins, by using the "latestSuccessfulBuild" dynamic link that Jenkins generates. This was possible in STDCI V1 because we had one-to-one correlation between jenkins jobs and project/branch/platform combinations. That is no longer the case in STDCI V2 where each project gets just two fixed jobs that adjust themselves automatically to run needed functionality. We could implement some equivalent functionality in STDCI V2 by for e.g. uploading builds to some predictable locations on an artifact server, but that will take some non-trivial amount of work, so it leads us to the question if this functionality is really needed. There are a couple of alternatives locations to get recently built packages from: - The 'tested' repo which contains all the packages that passed CQ/OST - The 'snapshot' repo which contains a nightly snapshot of 'tested'. So given the options above, if you have a build/CI/other process that currently consumes builds from Jenkins, could it be changed to consume from the other available locations? -- Barak Korren RHV DevOps team , RHCE, RHCi Red Hat EMEA redhat.com | TRIED. TESTED. TRUSTED. | redhat.com/trusted

4 4