December 2018 - Users - oVirt List Archives

Feature: Hosted engine VM management
by Roy Golan 27 Feb '19

27 Feb '19

Hi all, Upcoming in 3.6 is enhancement for managing the hosted engine VM. In short, we want to: * Allow editing the Hosted engine VM, storage domain, disks, networks etc * Have a shared configuration for the hosted engine VM * Have a backup for the hosted engine VM configuration please review and comment on the wiki below: http://www.ovirt.org/Hosted_engine_VM_management Thanks, Roy

2 3

Re: [ovirt-users] Large DWH Database, how to empty
by Matt . 26 Feb '19

26 Feb '19

Hi, OK thanks! I saw that after upgrading to 4.0.5 from 4.0.4 the DB already dropped with around 500MB directly and is now at 2GB smaller. Does this sounds familiar to you with other settings in 4.0.5 ? Thanks, Matt 2017-01-08 10:45 GMT+01:00 Shirly Radco <sradco(a)redhat.com>: > No. That will corrupt your database. > > Are you using the full dwh or the smaller version for the dashboards? > > Please set the delete thresholds to save less data and the data older then > the time you set will be deleted. > Add a file to /ovirt-engine-dwhd.conf.d/ > update_time_to_keep_records.conf > > Add these lines with the new configurations. The numbers represent the hours > to keep the data. > > DWH_TABLES_KEEP_SAMPLES=24 > DWH_TABLES_KEEP_HOURLY=1440 > DWH_TABLES_KEEP_DAILY=43800 > > > These are the configurations for a full dwh. > > The smaller version configurations are: > DWH_TABLES_KEEP_SAMPLES=24 > DWH_TABLES_KEEP_HOURLY=720 > DWH_TABLES_KEEP_DAILY=0 > > The delete process by default at 3am every day (DWH_DELETE_JOB_HOUR=3) > > Best regards, > > Shirly Radco > > BI Software Engineer > Red Hat Israel Ltd. > 34 Jerusalem Road > Building A, 4th floor > Ra'anana, Israel 4350109 > > > On Fri, Jan 6, 2017 at 6:35 PM, Matt . <yamakasi.014(a)gmail.com> wrote: >> >> Hi, >> >> I seem to have some large database for the DWH logging and I wonder >> how I can empty it safely. >> >> Can I just simply empty the database ? >> >> Have a good weekend! >> >> Cheers, >> >> Matt >> _______________________________________________ >> Users mailing list >> Users(a)ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users > >

1 0

Re: [ovirt-users] Packet loss
by Doron Fediuck 26 Feb '19

26 Feb '19

----_com.android.email_640187878761650 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 SGkgS3lsZSzCoApXZSBtYXkgaGF2ZSBzZWVuIHNvbWV0aGluZyBzaW1pbGFyIGluIHRoZSBwYXN0 IGJ1dCBJIHRoaW5rIHRoZXJlIHdlcmUgdmxhbnMgaW52b2x2ZWQuwqAKSXMgaXQgdGhlIHNhbWUg Zm9yIHlvdT/CoApUb255IC8gRGFuLCBkb2VzIGl0IHJpbmcgYSBiZWxsP8Kg ----_com.android.email_640187878761650 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0 L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPjwvaGVhZD48Ym9keSA+PGRpdj5IaSBLeWxlLCZuYnNwOzwv ZGl2PjxkaXY+V2UgbWF5IGhhdmUgc2VlbiBzb21ldGhpbmcgc2ltaWxhciBpbiB0aGUgcGFzdCBi dXQgSSB0aGluayB0aGVyZSB3ZXJlIHZsYW5zIGludm9sdmVkLiZuYnNwOzwvZGl2PjxkaXY+SXMg aXQgdGhlIHNhbWUgZm9yIHlvdT8mbmJzcDs8L2Rpdj48ZGl2PlRvbnkgLyBEYW4sIGRvZXMgaXQg cmluZyBhIGJlbGw/Jm5ic3A7PC9kaXY+PC9ib2R5PjwvaHRtbD4= ----_com.android.email_640187878761650--

2 1

ovirt 4.2.7.1 fails to deploy hosted engine on GlusterFS
by hunter86_bg＠yahoo.com 19 Feb '19

19 Feb '19

Hello Community, I'm trying to deploy a hosted engine on GlusterFS which fails with the following error: [ INFO ] TASK [Add glusterfs storage domain] [ ERROR ] Error: Fault reason is "Operation Failed". Fault detail is "[Failed to fetch Gluster Volume List]". HTTP response code is 400. [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "deprecations": [{"msg": "The 'ovirt_storage_domains' module is being renamed 'ovirt_storage_domain'", "version": 2.8}], "msg": "Fault reason is \"Operation Failed\". Fault detail is \"[Failed to fetch Gluster Volume List]\". HTTP response code is 400."} I have deployed GlusterFS via the HyperConverged Option in Cockpit and the volumes are up and running. [root@ovirt1 ~]# gluster volume status engine Status of volume: engine Gluster process TCP Port RDMA Port Online Pid ------------------------------------------------------------------------------ Brick ovirt1:/gluster_bricks/engine/engine 49152 0 Y 26268 Brick ovirt2:/gluster_bricks/engine/engine 49152 0 Y 24116 Brick glarbiter:/gluster_bricks/engine/engi ne 49152 0 Y 23526 Self-heal Daemon on localhost N/A N/A Y 31229 Self-heal Daemon on ovirt2 N/A N/A Y 27097 Self-heal Daemon on glarbiter N/A N/A Y 25888 Task Status of Volume engine ------------------------------------------------------------------------------ There are no active volume tasks I'm using the following guide : https://ovirt.org/blog/2018/02/up-and-running-with-ovirt-4-2-and-gluster-st… And on step 4 - Storage - I have defined it as follows: Storage Type: Gluster Storage Connection: ovirt1.localdomain:/gluster_bricks/engine/ Mount Options: backup-volfile-servers=ovirt2.localdomain:glarbiter.localdomain Can someone hint me where is the problem ?

3 15

Using the web-ui VM portal through a proxy failing
by Callum Smith 15 Feb '19

15 Feb '19

Dear oVirt Gurus, Using the oVirt user VM portal seems to not work through the squid proxy setup (configured as per the guide). The page loads and login works fine through the proxy, but the asynchronous requests just hang. I've attached a screenshot, but you can see the "api" endpoint just hanging in a web inspector: "https://proxyfqdn/ovirt-engine/api/" [cid:CA42E493-3AD9-45F8-B4C3-C914F059390C@well.ox.ac.uk] This works fine when not going through the proxy. Is there a way to force noVNC HTML as the console mode through the web-ui, or at least have it as an option if not default? The console seems not to work when logged in with a base 'user role'. Regards, Callum -- Callum Smith Research Computing Core Wellcome Trust Centre for Human Genetics University of Oxford e. callum(a)well.ox.ac.uk<mailto:callum@well.ox.ac.uk>

2 14

sun.security.validator
by suporte＠logicworks.pt 06 Feb '19

06 Feb '19

Hi, I'm running Version 4.2.3.8-1.el7, and after reboot the engine machine no longer could login into administration portal with this error: sun.security.validator.ValidatorException: PKIX path validation faile java.security.cert.CertPathValidatorException: validity check failed I'm using a self signed cert. Any idea? Thanks -- Jose Ferradeira http://www.logicworks.pt

5 5

Ovirt cluster unstable; gluster to blame (again)
by Jim Kusznir 04 Feb '19

04 Feb '19

hi all: Once again my production ovirt cluster is collapsing in on itself. My servers are intermittently unavailable or degrading, customers are noticing and calling in. This seems to be yet another gluster failure that I haven't been able to pin down. I posted about this a while ago, but didn't get anywhere (no replies that I found). The problem started out as a glusterfsd process consuming large amounts of ram (up to the point where ram and swap were exhausted and the kernel OOM killer killed off the glusterfsd process). For reasons not clear to me at this time, that resulted in any VMs running on that host and that gluster volume to be paused with I/O error (the glusterfs process is usually unharmed; why it didn't continue I/O with other servers is confusing to me). I have 3 servers and a total of 4 gluster volumes (engine, iso, data, and data-hdd). The first 3 are replica 2+arb; the 4th (data-hdd) is replica 3. The first 3 are backed by an LVM partition (some thin provisioned) on an SSD; the 4th is on a seagate hybrid disk (hdd + some internal flash for acceleration). data-hdd is the only thing on the disk. Servers are Dell R610 with the PERC/6i raid card, with the disks individually passed through to the OS (no raid enabled). The above RAM usage issue came from the data-hdd volume. Yesterday, I cought one of the glusterfsd high ram usage before the OOM-Killer had to run. I was able to migrate the VMs off the machine and for good measure, reboot the entire machine (after taking this opportunity to run the software updates that ovirt said were pending). Upon booting back up, the necessary volume healing began. However, this time, the healing caused all three servers to go to very, very high load averages (I saw just under 200 on one server; typically they've been 40-70) with top reporting IO Wait at 7-20%. Network for this volume is a dedicated gig network. According to bwm-ng, initially the network bandwidth would hit 50MB/s (yes, bytes), but tailed off to mostly in the kB/s for a while. All machines' load averages were still 40+ and gluster volume heal data-hdd info reported 5 items needing healing. Server's were intermittently experiencing IO issues, even on the 3 gluster volumes that appeared largely unaffected. Even the OS activities on the hosts itself (logging in, running commands) would often be very delayed. The ovirt engine was seemingly randomly throwing engine down / engine up / engine failed notifications. Responsiveness on ANY VM was horrific most of the time, with random VMs being inaccessible. I let the gluster heal run overnight. By morning, there were still 5 items needing healing, all three servers were still experiencing high load, and servers were still largely unstable. I've noticed that all of my ovirt outages (and I've had a lot, way more than is acceptable for a production cluster) have come from gluster. I still have 3 VMs who's hard disk images have become corrupted by my last gluster crash that I haven't had time to repair / rebuild yet (I believe this crash was caused by the OOM issue previously mentioned, but I didn't know it at the time). Is gluster really ready for production yet? It seems so unstable to me.... I'm looking at replacing gluster with a dedicated NFS server likely FreeNAS. Any suggestions? What is the "right" way to do production storage on this (3 node cluster)? Can I get this gluster volume stable enough to get my VMs to run reliably again until I can deploy another storage solution? --Jim

11 23

Roles and Permissions and Inheritance
by Brian Wilson 30 Jan '19

30 Jan '19

Is there a way to prevent Roles Assigned to Groups on Objects to only apply to where it is set? Basically looking for a way to do what we had done in VMWare which involved using the do not propagate permission setting. be able Seems to me that right now there is no way to set this so if i give access to something at the top level of a DC those accesses wlll overide if i then explcitly set another role and permission on an object underneath Lets take as a concrete example the ovirtmgmt network. I do not want users in the engine to be able to place VMs on this (but i want the Superusers to be able to still) How can i accomplish this with the way roles and permissions work with Ovirt? thanks! Brian

3 4

Re: The built in group Everyone is troublesome.
by Jacob Green 22 Jan '19

22 Jan '19

Thank you for your help! This worked flawlessly and helped me understand the engine database a little more! On 12/04/2018 12:00 PM, Staniforth, Paul wrote: > > Get the id for the everyone group > https://engine.example.com/ovirt-engine/api/groups?search=everyone > > Get the id for the UserRole > https://engine.example.com/ovirt-engine/api/roles > > connect to the engine database > > e.g. > > psql -h localhost -U engine -d engine > > select * from permissions where ad_element_id='groupid'; > > note the id of the permission, probably the last one but you can check > by the role_id > then delete the permission. > > delete from permissions where id='noted before'; > > you should make a backup of your system before you do this. > > > Regards, > > Paul S. > > ------------------------------------------------------------------------ > *From:* Staniforth, Paul > *Sent:* 04 December 2018 17:23 > *To:* Jacob Green > *Subject:* Re: [ovirt-users] The built in group Everyone is troublesome. > > Yes, that's not good you need to remove the UserRole system permission > but they fixed it so you can't. > > https://bugzilla.redhat.com/show_bug.cgi?id=1366205 > > > I think there maybe a bug that allows you to add system permissions to > the everyone group in 4.2, you're only supposed to be able to change > the permissions with a dbscript. > > > I'll look up my notes on how to remove the permission from the DB. > > > Regards, > > Paul S. > > > ------------------------------------------------------------------------ > *From:* Jacob Green <jgreen(a)aasteel.com> > *Sent:* 04 December 2018 16:59 > *To:* Staniforth, Paul > *Subject:* Re: [ovirt-users] The built in group Everyone is troublesome. > > > If the picture does not come through. The following are the permisstions > > Group > Everyone > > Everyone > Role - UserRole,UserProfileEditor Object : (System) > > > On 12/04/2018 10:20 AM, Staniforth, Paul wrote: >> What are the permissions for the group everyone, in particular the system permission should be just UserProfileEditor. >> >> Regards, >> Paul S. >> ________________________________________ >> From: Jacob Green<jgreen(a)aasteel.com> >> Sent: 04 December 2018 15:20 >> To: users >> Subject: [ovirt-users] The built in group Everyone is troublesome. >> >> So all my VMs are inheriting system permissions from group >> everyone and giving all my users access to all my VMs, in ovirt 4.2. Is >> there a best practices guide or any recommendation on how to clear this >> up? Clicking remove on everyone does not work because Ovirt won't allow >> me to remove a built in account. >> >> >> Thank you >> >> -- >> Jacob Green >> >> Systems Admin >> >> American Alloy Steel >> >> 713-300-5690 >> _______________________________________________ >> Users mailing list --users(a)ovirt.org >> To unsubscribe send an email tousers-leave(a)ovirt.org >> Privacy Statement:https://www.ovirt.org/site/privacy-policy/ >> oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ >> List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/A5MW… >> To view the terms under which this email is distributed, please go to:- >> http://leedsbeckett.ac.uk/disclaimer/email/ > > -- > Jacob Green > > Systems Admin > > American Alloy Steel > > 713-300-5690 > To view the terms under which this email is distributed, please go to:- > http://leedsbeckett.ac.uk/disclaimer/email/ -- Jacob Green Systems Admin American Alloy Steel 713-300-5690

3 2

VMs paused - unknown storage error - Stale file handle - distribute 2 - replica 3 volume with sharding
by Marco Lorenzo Crociani 17 Jan '19

17 Jan '19

Hi, I opened a bug on gluster because I have reading errors on files on a gluster volume: https://bugzilla.redhat.com/show_bug.cgi?id=1652548 The files are many of the VMs images of the oVirt DATA storage domain. oVirt pause the vms because unknown storage errors. It's impossibile to copy/clone, manage some snapshots of these vms. The errors on the low level are "stale file handle". Volume is distribute 2 replicate 3 with sharding. Should I open a bug also on oVirt? Gluster 3.12.15-1.el7 oVirt 4.2.6.4-1.el7 Regards, -- Marco Crociani

3 3

migrate hosted-engine vm to another cluster?
by Douglas Duckworth 17 Jan '19

17 Jan '19

Hello I am trying to migrate my hosted-engine VM to another cluster in the same data center. Hosts in both clusters have the same logical networks and storage. Yet migrating the VM isn't an option. To get the hosted-engine VM on the other cluster I started the VM on host in that other cluster using "hosted-engine --vm-start." However HostedEngine still associated with old cluster as shown attached. So I cannot live migrate the VM. Does anyone know how to resolve? With other VMs one can shut them down then using the "Edit" option. Though that will not work for HostedEngine. Thanks, Douglas Duckworth, MSc, LFCS HPC System Administrator Scientific Computing Unit<https://scu.med.cornell.edu> Weill Cornell Medicine 1300 York Avenue New York, NY 10065 E: doug(a)med.cornell.edu<mailto:doug@med.cornell.edu> O: 212-746-6305 F: 212-746-8690

4 5

Disk full
by suporte＠logicworks.pt 16 Jan '19

16 Jan '19

Hi, I have a all in one intallation with 2 glusters volumes. The disk of one VM filled up the brick, which is a partition. That partition has 0% free disk space. I moved the disk of that VM to the other gluster volume, the VM is working with the disk on the other gluster volume. When I move the disk, it didn't delete it from the brick, the engine keeps complaining that there is no more disk space on that volume. What can I do? Is there a way to prevent this in the future? Many thanks José -- Jose Ferradeira http://www.logicworks.pt

2 8

Is it possible to migrate self hosted engine to bare metal?
by Abhishek Sahni 15 Jan '19

15 Jan '19

Hello Everyone, Do we have some steps where we can migrate self hosted engine to separate bare metal machine. I do have a recent backup of DB from the self hosted engine? -- ABHISHEK SAHNI Mob : +91-990-701-5143

3 2

Ovirt Engine UI bug- cannot attache networks to hosts
by Leo David 05 Jan '19

05 Jan '19

Hi Everyone, Using self hosted-engine 4.2.7.5-1.el7 running on ovirt-node 4.2.7, i am trying to attache hosts to a newlly created network for gluster/migration traffic. Oncei click on Networks->gluster-Hosts- Unattached, i get the following error: Uncaught exception occurred. Please try reloading the page. Details: (TypeError) : M9(...) is null Please have your administrator check the UI logs So to make the cluster installation possible, i had to use ovirt 4.2.2 and manually install ovirt-engine-appliance-4.2-20180626.1.el7 on the nodes before deploying self-hosted engine ( version that has other problems, like not being able to get dasboards in cloudforms/manageiq - ovirt-engine-dwh is missing ). Is it possible to: 1. upgrade actual hosted-engine version to the latest that has this module properly installed ? 2. fix the latest ( upgraded ) version so i can attach hosts to networks ? Thank you very much ! Leo -- Best regards, Leo David

6 14

Unable to increase memory or CPU on hosted Engine version 4.2.5.2
by Florian Schmid 04 Jan '19

04 Jan '19

Hi, I'm using version 4.2.5.2 and every article I found, I read that with oVirt 4.2, it should be possible to update CPU and memory for hosted Engine in UI. Now, when I'm trying to do this, even being on global maintenance, I always get the same error: Error while executing action: HostedEngine: There was an attempt to change Hosted Engine VM values that are locked. My problem is, that I need to increase the memory, because we had now several times in the last 2 or 3 months an out of memory kill of the java process. What is the best way to increase memory here? Should I do it over the config file? But how is then the OVF updated? BR Florian

2 3

GlusterFS Storage - Size limited at 2 GB
by v.levet＠isiline.net 03 Jan '19

03 Jan '19

Hello everyone, I've installed oVirt on 8 nodes of a MacroServer (SuperMicro Microcloud): 7 Nodes with oVirt Node installed and 1 Node with Centos 7 and oVirt installed. The last one works like hypervisor and node. I would use all the storage of all nodes like a Gluster storage, so I've created a new DataCenter, with a Cluster with all nodes inside. Then I've created the volume Gluster (by GUI): Replicated Duplicated version and 4 replicas on all 8 nodes. Than "Optimize for oVirt Storage". For last I've created Domain storage based on volume created before. All works fine but the total storage that is available from Domain is 1.9 GB. I've tried already to force it using these commands: gluster volume GlusterVol limit-usage / 3200GB gluster volume quota GlusterVol limit-usage /data 3200GB At first it seems work but finally when I was installing a VM, I get Full Storage. It seems that it could use only the storage of the node where is instantiated the volume. I would see all the storage distributed and I wish I could use the storage from all nodes. Someone could help me?

2 4

Vm console direct connection
by Leo David 03 Jan '19

03 Jan '19

Hello everyone, Could someone be so kind to tell me if there's any chance that virt-viewer or any other client can be used to directly connect to vms running on oVirt without the need for the user to access the portal first ? Thank you very much ! Cheers, Leo

5 7

Acquire an XML dump of a VM oVirt?
by Jacob Green 02 Jan '19

02 Jan '19

How does one get an XML dump of a VM from ovirt? I have seen ovirt do it in the engine.log, but not sure how to force it to generate one when I need it. Thank you. -- Jacob Green Systems Admin American Alloy Steel 713-300-5690

3 4

Running different minor versions in different clusters?
by Florian Schmid 02 Jan '19

02 Jan '19

Hi, I want to ask, if this is a supported Environment, when I have for example the latest 4.2 version running on engine and all hosts in a cluster have an earlier release of 4.2 running? Example: - ovirt engine: 4.2.7 - hosts in cluster A: 4.2.5 - hosts in cluster B: 4.2.7 The engine VM would run in cluster A with the older version. I ask, because we have a very huge ovirt setup, split into different clusters. In one cluster, I would like to have always the latest version and in the others, the upgrade will be done in bigger time-intervals. LG Florian Schmid

2 3

Failed to add host to oVirt
by Eyal Shenitzky 02 Jan '19

02 Jan '19

Hey, I am failing to add a host to oVirt due to the following error: 2018-12-23 11:15:29,482+0200 ERROR otopi.context context._executeMethod:152 Failed to execute stage 'Environment customization': Cannot find a valid baseurl for repo: ovirt -master-centos-gluster5/7Server/x86_64 Does someone encounter this issue? -- Regards, Eyal Shenitzky

2 1

Win10 0x80300001
by suporte＠logicworks.pt 02 Jan '19

02 Jan '19

Hi, I'm trying to install win10 pro, but when I load the disk driver vioscsi, it recognizes the disk but with this error: 0x80300001 oVirt 4.2.7.5-1.el7 Disk Interface: VirtIO-SCSI Any idea? Thanks -- Jose Ferradeira http://www.logicworks.pt

3 4

About usb passthrough to vm
by max zhang 01 Jan '19

01 Jan '19

Hello friends,follow these steps: Enviroment :ovirt 3.5 or ovirt 3.6 step1:Plug usb device to physical server,noticed that is physical server. problem: How can my vm (windows 2008r2 )running on ovirt use the usb device directly?Is there some way to solve my problem?Maybe pci-passthrough?Thanks

2 2

help with non-standard LDAP authentication
by alan.edwards＠nokia.com 31 Dec '18

31 Dec '18

I am using an LDAP configuration that either does not expose or contain a nsUniqueId value for Groups. Many of the standard schema fieldnames have been changed to contain a company prefix. I managed to update the profiles enough to have the user authentication work properly & search for the LDAP groups now. But I am unable to add the LDAP group due to the following error: Caused by: org.postgresql.util.PSQLException: ERROR: null value in column "external_id" violates not-null constraint Detail: Failing row contains (dad4b561-6aaa-4e7c-9887-997ba8142d3f, ADMGROUP, REALM-authz, null, null, o=BASE) I've checked the profiles to see if I could possibly remap the nsUniqueID value for Groups (thinking of using either the gid or dn value), but I do not see how I can have a different value for groups from users. I have seen a similar thread from 3 years ago, but it appeared to have been a different cause. Any advice or suggestions? The main goal I am attempting to achieve is to use an existing LDAP user group to control who has access to the system such that we do not have to add users manually. Thanks, Alan

1 0

IP change of a storage domain
by Demeter Tibor 29 Dec '18

29 Dec '18

Dear All, I have to change an IP address of one of my storage domains. How is safe that? There are a lot of disk what running from what and parts of some running VMs. I thought the whole procedure like this: - stop vms - remove storage domain from inventory - delete storage domain from inventory (is it needed?) - change IP - re-add storage domain as new to inventory - import disks from storage domain Need to re-add disks to VMs as new after the import? Or it will automatically? Is it will a new storage domain in the engine or will same as? - start vms Please check my todo list, where I'm was wrong. Thanks in advance, Regards, Tibor

2 2

CentOS Glance Image 7.5 and CloudInit Support
by Robert Crawford 28 Dec '18

28 Dec '18

Apparently there's a bug with 7.5 and Cloudinit with setting static ip's. CentOS 7.5 isn't listed in the Image repository; can we pretty please get that added?

1 0