Synology NFS confusion
by Shareef Jalloq
Hi all,
I'm trying to set up a hosted engine on an NFS share provided by a Synology
NAS. I've been reading the info and threads regarding the requirement that
the share be owned by vdsm:kvm with uid:gid of 36:36, but this seems
impossible to set on modern Synology boxes.
My understanding of DSM is that the user doesn't have control of the UID
and GID of users. You can ssh in and modify /etc/passwd but these files
are auto-generated from Synology's own scripts so changes here will not
persist across reboots. Is that correct?
Secondly, having read lots of posts about permissions and various issues
around export settings, why isn't this documented anywhere? There just
seems to be lots of contradictory posts. For example, my experience has
been:
- my Synology vdsm:kvm ids are 1028:65536
- the permissions on the NFS export are 777, anything else gives
permissions errors in HE setup
- the hosted engine install went fine with these settings.
- the nfs-check.py script provided to check the NFS export fails but the
installation still completes.
So are these issues specific to Synology or is the documentation out there
just wrong?
#confused
Cheers, Shareef.
4 years, 8 months
Storage issues on hosted-engine gluster volume
by Dario Pilori
Dear all,
after a switch failure, our three-host oVirt hyperconverged setup has
strange issues with the gluster replicate-3 volume that contains the
hosted-engine VM.
Basically, after a host is properly rebooted (but not always after
every reboot, it happens quite randomly), the hosted-engine starts,
but it is immediately paused. On the other hosts, it runs perfectly.
After some digging in the documentation, I realized that this is due
to a storage issue. However, the health of the gluster volume is OK,
and forcing heal does not fix the problem.
The only solution (or workaround, I would say) is to reset the brick
on the faulty host and re-format the brick XFS file system.
This leaves me with some questions, which are: Why is the volume
health OK, while it is clearly not OK? If so, which commands do I need
to use to detect gluster issues? And, why is this situation happening?
Any suggestion is appreciated.
Regards,
Dario
--
Dario Pilori, PhD
I.N.Ri.M. - Istituto Nazionale di Ricerca Metrologica
Sistemi Informatici
Strada delle Cacce, 91 - 10135 - Torino - Italy
Ph: +39 011 3919 459
4 years, 8 months
Re: Client separation on bridge level
by Hendrik Peyerl
We do have certain VLANs that all the VMs need as of now, we will be able to do this at some point but I need a solution until then.
> On 16. Mar 2020, at 11:08, Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> wrote:
>
> Can't you put then on separate VLANs?
>
>
> Regards,
> Paul S.
> From: Hendrik Peyerl <hpeyerl(a)plusline.net>
> Sent: 16 March 2020 09:24
> To: users(a)ovirt.org <users(a)ovirt.org>
> Subject: [ovirt-users] Client separation on bridge level
>
> Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe.
>
> Hello everyone,
>
> is there a way to seperate the traffic between VMs on the same bridge on one oVirt-node with built-in tools from ovirt? We have VMs using the same bridge which should never be able to talk to each other.
>
> We are currently using ebtables for that, but its not working very good anymore now that we upgraded to 4.3 with firewalld.
>
> Any suggestions would be greatly appreciated.
>
> Best regards,
> Hendrik
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi...
> oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi...
> List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.o...
> To view the terms under which this email is distributed, please go to:-
> http://leedsbeckett.ac.uk/disclaimer/email/
4 years, 8 months
Unable to open oVirt page past login
by Vrgotic, Marko
Dear oVirt,
One of my Users, working remotely via VPN (10.200.145.169), is having issues to load oVirt Dashboard or any other screen past login page.
icmp response time is about 25ms
Tracking ovirt-request-log and server.log I noticed following correlation:
Once User has opened login page, entered credentials and requested page / dataCenters in this case: https://ovirt-engine.avinity.tv/ovirt-engine/webadmin/?locale=en_US#dataC... following is logged:
tailf /var/log/httpd/ovirt-requests-log | grep "10.200.145.169":
[17/Mar/2020:14:54:16 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 8758us" "GET /ovirt-engine/webadmin/?locale=en_US HTTP/1.1" -
[17/Mar/2020:14:54:16 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1946us" "GET /ovirt-engine/webadmin/webadmin.nocache.js HTTP/1.1" -
[17/Mar/2020:14:54:17 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1318us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/plugin.html HTTP/1.1" -
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1649us" "GET /ovirt-engine/docs/csh/webadmin.json HTTP/1.1" 28
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1272us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/css/vendor.f6f68cb2.css HTTP/1.1" -
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1561us" "POST /ovirt-engine/webadmin/xsrf HTTP/1.1" 141
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1850us" "POST /ovirt-engine/webadmin/xsrf HTTP/1.1" 141
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 826us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/js/manifest.08488e4f.js HTTP/1.1" -
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1453us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/js/vendor.e3652c82.chunk.js HTTP/1.1" -
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 890us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/js/plugin.2a3f9da3.chunk.js HTTP/1.1" -
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: 10971786-086e-44ec-acf3-ff74117671a3" "Duration: 23723us" "POST /ovirt-engine/webadmin/GenericApiGWTService HTTP/1.1" 208
[17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 20020204us" "POST /ovirt-engine/webadmin/GenericApiGWTService HTTP/1.1" 226
[17/Mar/2020:14:54:38 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1450us" "POST /ovirt-engine/webadmin/xsrf HTTP/1.1" 141
tailf /var/log/ovirt-engine/server.log :
2020-03-17 14:54:38,581Z ERROR [io.undertow.request] (default task-4989) UT005023: Exception handling request to /ovirt-engine/webadmin/GenericApiGWTService: java.lang.RuntimeException: Unable to report failure
at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doUnexpectedFailure(AbstractRemoteServiceServlet.java:107) [gwt-servlet.jar:]
at org.ovirt.engine.ui.frontend.server.gwt.GenericApiGWTServiceImpl.doUnexpectedFailure(GenericApiGWTServiceImpl.java:212) [frontend.jar:]
at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:67) [gwt-servlet.jar:]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:706) [jboss-servlet-api_4.0_spec-1.0.0.Final.jar:1.0.0.Final]
at org.ovirt.engine.ui.frontend.server.gwt.GenericApiGWTServiceImpl.service(GenericApiGWTServiceImpl.java:78) [frontend.jar:]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:791) [jboss-servlet-api_4.0_spec-1.0.0.Final.jar:1.0.0.Final]
at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94) [utils.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.utils.servlet.CachingFilter.doFilter(CachingFilter.java:133) [utils.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:73) [branding.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:65) [utils.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:132) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.wildfly.extension.undertow.security.SecurityContextThreadSetupAction.lambda$create$0(SecurityContextThreadSetupAction.java:105)
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502)
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502)
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502)
at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.Connectors.executeRootHandler(Connectors.java:364) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:830) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_242]
Caused by: java.nio.channels.ClosedChannelException
at io.undertow.server.protocol.ajp.AjpServerRequestConduit.doRead(AjpServerRequestConduit.java:230) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.protocol.ajp.AjpServerRequestConduit.read(AjpServerRequestConduit.java:201) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at org.xnio.conduits.ConduitStreamSourceChannel.read(ConduitStreamSourceChannel.java:127)
at io.undertow.channels.DetachableStreamSourceChannel.read(DetachableStreamSourceChannel.java:209) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.HttpServerExchange$ReadDispatchChannel.read(HttpServerExchange.java:2343) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at org.xnio.channels.Channels.readBlocking(Channels.java:294)
at io.undertow.servlet.spec.ServletInputStreamImpl.readIntoBuffer(ServletInputStreamImpl.java:192) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.spec.ServletInputStreamImpl.read(ServletInputStreamImpl.java:168) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.spec.ServletInputStreamImpl.read(ServletInputStreamImpl.java:154) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at com.google.gwt.user.server.rpc.RPCServletUtils.readContent(RPCServletUtils.java:224) [gwt-servlet.jar:]
at com.google.gwt.user.server.rpc.RPCServletUtils.readContentAsGwtRpc(RPCServletUtils.java:252) [gwt-servlet.jar:]
at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.readContent(AbstractRemoteServiceServlet.java:182) [gwt-servlet.jar:]
at com.google.gwt.user.server.rpc.RemoteServiceServlet.processPost(RemoteServiceServlet.java:364) [gwt-servlet.jar:]
at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62) [gwt-servlet.jar:]
... 58 more
4 years, 8 months
adding new gluster volume
by Jayme
What if any steps do I need to take prior to adding an additional gluster
volume to my HCI cluster using new storage devices via the oVirt gui? Will
the gui prepare the devices (xfs/lvm etc) or do I need to do that prior?
4 years, 8 months
Several virtual machines all with the same MAC address ?
by Li Xo
Hello,
I need to replicate some file servers that must have the same MAC address to work properly and which will be placed on different VLANs to avoid MAC conflicts.
With VMware and VirtualBox this is quite simple and works without particular problems but it seems that oVirt does not allow it or I did not find how to proceed.
So 2 questions:
- does it is possible ?
- what must be done to allow oVirt to handle it ?
Thanks,
Li
4 years, 8 months
Storage Domain already attached to a Data Center
by Anton Louw
Hi All,
I created a little test environment for myself, just to test a few things. The initial test I wanted to do was to see if I can create a new HE, add it to a different Storage Domain, and then import my existing Storage Domains. Everything went through 100%, except for the little option I forgot to select, and that is to put the original Data Center in maintenance. Now, when I want to import my storage domains, it tells me that the storage domain is already attached to a data center. Is there any way that I can remove this storage domain from my original data center through one of my nodes? I would power up the old HE, but I have powered it off just before deploying a new HE.
I am having the same issue with a node as well, so if there is a way to remove the node from the Data Center as well, that would be awesome.
Thanks
Anton Louw
Cloud Engineer: Storage and Virtualization
______________________________________
D: 087 805 1572 | M: N/A
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
anton.louw(a)voxtelecom.co.za
www.vox.co.za
4 years, 8 months
