- Devel - oVirt List Archives

SELinux issue with f20 libvirtd
by Simone Tiraboschi 02 Apr '15

02 Apr '15

Hi, I found an issue with an SELinux denial trying to deploy hosted-engine from oVirt 3.5.1 on fedora 20 with libvirtd from @updates The issue is: time->Tue Mar 31 17:45:09 2015 type=PROCTITLE msg=audit(1427816709.311:914): proctitle=2F7362696E2F6C64636F6E666967002D70 type=SYSCALL msg=audit(1427816709.311:914): arch=c000003e syscall=59 success=yes exit=0 a0=23f9af0 a1=23f9bf0 a2=23f8b60 a3=7ffcc784f150 items=0 ppid=7037 pid=7038 auid=4294967295 uid=175 gid=175 euid=175 suid=175 fsuid=175 egid=175 sgid=175 fsgid=175 tty=(none) ses=4294967295 comm="ldconfig" exe="/usr/sbin/ldconfig" subj=system_u:system_r:ldconfig_t:s0 key=(null) type=AVC msg=audit(1427816709.311:914): avc: denied { write } for pid=7038 comm="ldconfig" path="/dev/vport2p1" dev="devtmpfs" ino=9984 scontext=system_u:system_r:ldconfig_t:s0 tcontext=system_u:object_r:virtio_device_t:s0 tclass=chr_file permissive=0 and /dev/vport2p1 seams to be badly labeled: crw-rw----. ovirtagent ovirtagent system_u:object_r:virtio_device_t:s0 /dev/vport2p1 I was using: libvirt-daemon.x86_64 1.1.3.9-1.fc20 @updates selinux-policy.noarch 3.12.1-197.fc20 @updates selinux-policy-targeted.noarch 3.12.1-197.fc20 @updates The issue doesn't reproduce enabling virt-preview repo and using a fresher libvirtd. Should I open a bug to have something back-ported on f20 libvirt or should we explicitly require virt-preview repo for oVirt 3.5.2 as we are doing for master? ciao, Simone

3 3

[QE][ACTION REQUIRED] oVirt 3.5.2 and 3.5.3 status
by Sandro Bonazzola 01 Apr '15

01 Apr '15

Hi, we've released 3.5.2 RC3 this morning[0] easing the testing of the fixed bugs on the newly released CentOS 7.1 distribution. Please be aware that a CentOS 7.1 respin has been released this morning[2]. We have one open blocker for 3.5.2[1]: Bug ID Whiteboard Status Summary 1206722 storage POST Live Merge: Active layer merge is not properly synchronized with vdsm and 3 dependency not yet fixed: Bug ID Status Summary 1206365 POST storage Live Merge: Active layer merge is not properly synchronized with vdsm 1204434 POST ux Context Sensitive Help: GUI needs to use different mapping files for different locales. 1206903 NEW ux Context Sensitive Help: GUI needs to use different mapping files for different locales. We'll need another release candidate before GA. We still have 2 bugs in MODIFIED and 9 on QA[3]: MODIFIED ON_QA Total infra 0 4 4 integration 0 1 1 network 0 2 2 sla 1 0 1 storage 1 1 2 virt 0 1 1 Total 2 9 11 ACTION: Testers: you're welcome to verify bugs currently ON_QA. ACTION: Assingee and Maintainers to check modified bugs to see if they're fixed in RC3 All remaining bugs not marked as blockers have been moved to 3.5.3. A release management entry has been added for tracking the schedule of 3.5.3[4] A bug tracker [5] has been created for 3.5.3 and currently shows no blockers. We have 27 bugs currently targeted to 3.5.3[6]: Whiteboard NEW ASSIGNED POST Total docs 1 0 0 1 external 1 0 0 1 gluster 1 0 0 1 infra 1 2 0 3 network 2 0 0 2 node 2 0 1 3 ppc 0 0 1 1 sla 4 0 0 4 storage 7 0 1 8 ux 1 0 1 2 virt 1 0 0 1 Total 21 2 4 27 ACTION: Maintainers / Assignee: to review the bugs targeted to 3.5.3 ensuring they're correctly targeted. ACTION: Maintainers: to fill release notes for 3.5.2, the page has been created and updated here [7] ACTION: Testers: please add yourself to the test page [8] [0] http://lists.ovirt.org/pipermail/announce/2015-April/000165.html [1] https://bugzilla.redhat.com/1186161 [2] http://lists.centos.org/pipermail/centos-announce/2015-April/021010.html [3] http://goo.gl/UEVTCf [4] http://www.ovirt.org/OVirt_3.5.z_Release_Management#oVirt_3.5.3 [5] https://bugzilla.redhat.com/1198142 [6] https://bugzilla.redhat.com/buglist.cgi?quicksearch=product%3Aovirt%20targe… [7] http://www.ovirt.org/OVirt_3.5.2_Release_Notes [8] http://www.ovirt.org/Testing/oVirt_3.5.2_Testing -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

2 3

Get involved in oVirt project! Spring Holidays / April edition
by Sandro Bonazzola 01 Apr '15

01 Apr '15

Hi, have you got some free time in upcoming holidays and do you want to get involved in oVirt project? Do you like the idea of having fresh disk images of recent distribution in oVirt Gluster repository? You can help us by testing existing online images (like https://getfedora.org/en/cloud/download/) ensuring they works with cloud-init or creating one yourself and report your success to devel(a)ovirt.org. We'll be happy to upload the images once these are ready. Do you like Debian and do you have some programming skill? Help us getting VDSM running on it! You can follow the progress here: http://www.ovirt.org/VDSM_on_Debian Here are some bugs you can hopefully fix in less that one day or you can just try to reproduce providing info: Bug ID Status Whiteboard Summary 1083104 ASSIGNED integration engine-setup --offline does not update versionlock 1073421 NEW integration [RFE] allow additional parameter for engine-backup to omit audit_log data 1065350 NEW integration hosted-engine should prompt a question at the user when the host was already a host in the engine 1059952 NEW integration hosted-engine --deploy (additional host) will fail if the engine is not using the default self-signed CA Do you want something easier? Bug ID Whiteboard Status Summary 1174285 i18n NEW [de-DE] "Live Snapshot Support" reads "Live Snapsnot Support" 772931 infra NEW [RFE] Reports should include the name of the oVirt engine 1143817 integration NEW [TEXT ONLY] - Hosted Engine - Instructions for FQDN are not clear enough 1156060 integration NEW [text] engine admin password prompt consistency 1115059 network NEW Incomplete error message when adding VNIC profile to running VM 734120 storage NEW [RFE] VDSM: use virt-sparsify/zerofree to reduce image size Do you love "DevOps?", you count stable builds in jenkins ci while trying to fall a sleep? Then oVirt infra team is looking for you!, join the infra team and dive in to do the newest and coolest devops tools today! Here are some of our open tasks you can help with: https://fedorahosted.org/ovirt/report/1 You don't have programming skills, not enough time for DevOps but you want still to contribute? Here are some bugs you can take care of, also without writing a line of code: https://bugzilla.redhat.com/buglist.cgi?quicksearch=product%3Aovirt%20white… Do you prefer to test things? We have some test cases[5] you can try using nightly snapshots[6] Do you want to contribute test cases? Most of the features[7] included in oVirt are missing a test case, you're welcome to contribute one! Is this the first time you try to contribute to oVirt project? You can start from here [1][2]! You don't know gerrit very well? You can find some more docs here [3]. Any other question about development? Feel free to ask on devel(a)ovirt.org or on irc channel[4]. Let us know you're getting involved, present yourself and tell us what you're going to do, you'll be welcome! [1] http://www.ovirt.org/Develop [2] http://www.ovirt.org/Working_with_oVirt_Gerrit [3] https://gerrit-review.googlesource.com/Documentation [4] http://www.ovirt.org/Community [5] http://www.ovirt.org/Category:TestCase [6] http://www.ovirt.org/Install_nightly_snapshot [7] http://www.ovirt.org/Category:Feature -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

oVirt Glance repository
by Sandro Bonazzola 01 Apr '15

01 Apr '15

Hi, not sure about who's maintaining the oVirt Glance repository, but I see Fedora 19 32-Bit (6975f6e) Disk 797 MB CirrOS 0.3.1 (73786f4) Disk 12 MB CentOS 6.5 64-Bit (7df3c30) Disk 1 GB Fedora 19 64-Bit (865bfac) Disk 858 MB Neutron Appliance (CentOS 7.0) - IceHouse-2014.1.1-3 (960d964) Disk 682 MB Fedora 20 Project Atomic Image (a62ba67) Disk 847 MB CentOS 6.5 64-Bit Docker (b485e50) Disk 1 GB I really think it should be refreshed with more recent distributions to be useful. -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

2 3

[ANN] oVirt 3.5.2 Third Release Candidate is now available for testing
by Sandro Bonazzola 01 Apr '15

01 Apr '15

The oVirt team is pleased to announce that the 3.5.2 Third Release Candidate is now available for testing as of Apr 1st 2015. The release candidate is available now for Fedora 20, Red Hat Enterprise Linux 6.6, CentOS 6.6 (or similar) and Red Hat Enterprise Linux 7.1, CentOS 7.1 (or similar). This release of oVirt includes numerous bug fixes. See the release notes [1] for a list of the new features and bugs fixed. Please refer to release notes [1] for Installation / Upgrade instructions. New oVirt Live and oVirt Node ISO will be available soon as well[2]. Please note that mirrors[3] may need usually one day before being synchronized. Please refer to the release notes for known issues in this release. [1] http://www.ovirt.org/OVirt_3.5.2_Release_Notes [2] http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ [3] http://www.ovirt.org/Repository_mirrors#Current_mirrors -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

[QE] oVirt 3.6.0 status
by Sandro Bonazzola 01 Apr '15

01 Apr '15

Hi, here's an update on 3.6 status on integration / rel-eng side The tracker bug for 3.6.0 [1] currently shows no blockers. Repository closure is currently broken on Fedora 20 due to a missing required dependency on recent libvirt, a patch fixing this issue is currently under review[4]. There are 577 bugs [2] targeted to 3.6.0. NEW ASSIGNED POST Total docs 10 0 0 10 external 1 0 0 1 gluster 48 5 3 56 i18n 2 0 0 2 infra 68 4 9 81 integration 54 5 4 63 network 38 1 9 48 node 28 3 2 33 ppc 0 0 1 1 sla 51 3 2 56 spice 1 0 0 1 storage 72 5 7 84 ux 31 0 3 34 virt 58 5 12 75 Total 462 31 52 545 Features submission is still open until 2015-04-22 as per current release schedule. Maintainers: be sure to have your features tracked in the google doc[3] [1] https://bugzilla.redhat.com/1155425 [2] https://bugzilla.redhat.com/buglist.cgi?quicksearch=target_release%3A3.6.0%… [3] http://goo.gl/9X3G49 [4] https://gerrit.ovirt.org/39249 -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

[ACTION REQUIRED] Packages changed since oVirt 3.5.2 RC2
by Sandro Bonazzola 01 Apr '15

01 Apr '15

Please review and raise any issue as soon as possible. We're starting to compose the repository. # Package changed since oVirt 3.5.2 RC2 # oVirt Engine: # hash: 15ca8c8 - core: Fix CDA typo when importing a "dirty" domain # tag: ovirt-engine-3.5.2_rc3 http://jenkins.ovirt.org/job/manual-build-tarball/497/ # VDSM: # tag v4.16.13 http://jenkins.ovirt.org/job/vdsm_3.5_create-rpms-el6-x86_64_merged/202/ http://jenkins.ovirt.org/job/vdsm_3.5_create-rpms-el7-x86_64_merged/202/ http://jenkins.ovirt.org/job/vdsm_3.5_create-rpms-fc21-x86_64_merged/27/ http://jenkins.ovirt.org/job/vdsm_3.5_create-rpms-fc20-x86_64_merged/196/ # ovirt-hosted-engine-setup http://jenkins.ovirt.org/job/ovirt-hosted-engine-setup_any_create-rpms_manu… -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 1

engine-setup fails with FATAL: Cannot execute sql command:
by mad Engineer 01 Apr '15

01 Apr '15

Hello All, Trying ovirt on centos 6.5 but fails at PostgreSQL configuration with error [ ERROR ] Failed to execute stage 'Misc configuration': Command '/usr/share/ovirt-engine/dbscripts/create_schema.sh' failed to execute Inside log it shows this 2015-03-31 17:47:15 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.db.schema plugin.execute:866 execute-output: ['/usr/share/ovirt-engine/dbscripts/schema.sh', '-s', 'localhost', '-p', '5432', '-u', 'engine', '-d', 'engine', '-l', '/var/log/ovirt-engine/setup/ovirt-engine-setup-20150331174256-pehvs7.log', '-c', 'apply'] stderr: psql:/usr/share/ovirt-engine/dbscripts/upgrade/03_05_0210_change_group_ids.sql:59: ERROR: could not open relation with OID 32878 CONTEXT: SQL statement "CREATE temp TABLE tmp_users_groups ON COMMIT DROP AS SELECT fnsplitteruuid(group_ids) AS group_id, user_id FROM users" PL/pgSQL function "__temp_change_group_ids_03_05_0210" line 35 at SQL statement FATAL: Cannot execute sql command: --file=/usr/share/ovirt-engine/dbscripts/upgrade/03_05_0210_change_group_ids.sql 2015-03-31 17:47:15 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File "/usr/lib/python2.6/site-packages/otopi/context.py", line 142, in _executeMethod method['method']() File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py", line 291, in _misc oenginecons.EngineDBEnv.PGPASS_FILE File "/usr/lib/python2.6/site-packages/otopi/plugin.py", line 871, in execute command=args[0], RuntimeError: Command '/usr/share/ovirt-engine/dbscripts/schema.sh' failed to execute 2015-03-31 17:47:15 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Misc configuration': Command '/usr/share/ovirt-engine/dbscripts/schema.sh' failed to execute Can some one please help me with this please

2 2

vdsm broke repoclosure (again) and node build
by Sandro Bonazzola 31 Mar '15

31 Mar '15

Hi, vdsm broke repository closure again: 06:37:42 package: vdsm-4.17.0-601.gitff96629.el7.x86_64 from check-custom-el7 06:37:42 unresolved deps: 06:37:42 libvirt-daemon >= 0:1.2.8-15.el7 06:37:49 package: vdsm-4.17.0-601.gitff96629.fc20.x86_64 from check-custom-fc20 06:37:49 unresolved deps: 06:37:49 libvirt >= 0:1.2.9 For Fedora 20 I'm solving by adding virt-preview repo to the repoclosure job. Couldn't the EL7 update wait a couple of days until CentOS 7.1 will be out? Above breakage in repository closure caused ovirt node iso build failures: http://jenkins.ovirt.org/job/ovirt-node_master_create-iso-el7_merged/57/ http://jenkins.ovirt.org/job/ovirt-node_master_create-iso-fc20_merged/105/ Tolik, please update http://jenkins.ovirt.org/job/ovirt-node_master_create-iso-fc20_merged adding virt-preview repo. Tolik, while at it, can you also check why the el6 job is requiring the hosted-engine plugin? It was supposed to not require it since in 3.6 hosted-engine won't be available on EL6. http://jenkins.ovirt.org/job/ovirt-node_master_create-iso-el6_merged/37/ -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

2 2

Useless AddVmPoolCommand class
by Shmuel Melamud 30 Mar '15

30 Mar '15

Hi! Do we really need the AddVmPoolCommand class? What I see currently: 1. VdcActionType.AddVmPool is never used. 2. CommonVmPoolWithVmsCommand extends AddVmPoolCommand, but this inheritance is useless: a. AddVmPoolCommand.executeCommand() is never called from CommonVmPoolWithVmsCommand.executeCommand(), the same work is done by AddVmPoolWithVmsCommand.getPoolId(). b. AddVmPoolCommand.getAuditLogTypeValue() is never called. c. AddVmPoolCommand.getValidationGroups() does the same as AddVmPoolWithVmsCommand.getValidationGroups() and may be merged to UpdateVmPoolWithVmsCommand.getValidationGroups() if needed (I'm not sure). d. AddVmPoolCommand() constructor code may be merged to CommonVmPoolWithVmsCommand() constructor. 3. The hierarchy where UpdateVmPoolWithVmsCommand is inherited indirectly from AddVmPoolCommand seems illogical. So can AddVmPoolCommand be safely removed? -- Shmuel

3 2