June 2022 - Users - oVirt List Archives

oVirt 4.5.1 is now generally available
by Lev Veyde 01 Jul '22

01 Jul '22

oVirt 4.5.1 is now generally available The oVirt project is excited to announce the general availability of oVirt 4.5.1, as of June, 22nd 2022. This release unleashes an altogether more powerful and flexible open source virtualization solution that encompasses hundreds of individual changes and a wide range of enhancements across the engine, storage, network, user interface, and analytics on top of oVirt 4.4. Important notes before you install / upgrade Some of the features included in oVirt 4.5.1 require content that is available in RHEL 8.6 (or newer) and derivatives. NOTE: If you’re going to install oVirt 4.5.1 on RHEL or similar, please read Installing on RHEL or derivatives <https://ovirt.org/download/install_on_rhel.html> first. Documentation Be sure to follow instructions for oVirt 4.5! - If you want to try oVirt as quickly as possible, follow the instructions on the Download <https://ovirt.org/download/> page. - For complete installation, administration, and usage instructions, see the oVirt Documentation <https://ovirt.org/documentation/>. - For upgrading from a previous version, see the oVirt Upgrade Guide <https://ovirt.org/documentation/upgrade_guide/>. - For a general overview of oVirt, see About oVirt <https://ovirt.org/community/about.html>. What’s new in oVirt 4.5.1 Release? This release is available now on x86_64 architecture for: - CentOS Stream 8 - RHEL 8.6 and derivatives This release supports Hypervisor Hosts on x86_64: - oVirt Node NG (based on CentOS Stream 8) - CentOS Stream 8 - RHEL 8.6 and derivatives This release also supports Hypervisor Hosts on x86_64 as tech preview without secure boot: - CentOS Stream 9 - RHEL 9.0 and derivatives - oVirt Node NG based on CentOS Stream 9 Builds are also available for ppc64le and aarch64. Known issues: - On EL9 with UEFI secure boot, vdsm fails to decode DMI data due to Bug 2081648 <https://bugzilla.redhat.com/show_bug.cgi?id=2081648> - python-dmidecode module fails to decode DMI data Security fixes included in oVirt 4.5.1 compared to latest oVirt 4.5.0: - CVE-2022-31051 <https://bugzilla.redhat.com/show_bug.cgi?id=2097414> - ovirt-web-ui - semantic-release: Masked secrets can be disclosed if they contain characters that are excluded from uri encoding - CVE-2021-3807 <https://bugzilla.redhat.com/show_bug.cgi?id=2007557> - ovirt-web-ui - nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes - CVE-2021-33623 <https://bugzilla.redhat.com/show_bug.cgi?id=1966615> - ovirt-web-ui - nodejs-trim-newlines: ReDoS in .end() method Some of the RFEs with high user impact are listed below: - 1782077 [RFE] More Flexible oVirt CPU Allocation Policy with HyperThreading - 1975596 [RFE] Enhancement of oVirt monitoring by SNMP to merge each alert message into a single line - 1663217 [RFE] Add oVirt VM name to the matching between Satellite’s content host to RHV (currently only VM FQDN is used) - 1996098 [RFE] Provide options for “Disable Spice file transfer”, “Disable spice clipboard copy and paste” - 2021497 [RFE] Install and configure Keycloak as a default SSO provider for ovirt-engine - 2078500 [RFE] Add support for parallel migration connections to the REST API - 1937408 [RFE] Add ability to import template from OVA in image_template role - 1881280 [RFE] Validate HE cluster if --restore-from-file - 2081559 [RFE] discrepancy tool should detect preallocated cow images that were reduced - 1986335 [RFE] Support hosts based on CentOS Stream 9 Some of the Bugs with high user impact are listed below: - 2043146 Expired /etc/pki/vdsm/libvirt-vnc/server-cert.pem certificate is skipped during Enroll Certificate - 2071468 Engine fenced host that was already reconnected and set to Up status. - 2078025 [Docs] Now that certificates only last 13 months, oVirt needs to document how to renew them - 1986732 ovirt-ha services cannot set the LocalMaintenance mode in the storage metadata and are in a restart loop - 2054745 Setting SD to maintenance fails and turns the SD to inactive mode as a result - 2057958 oVirt Node 4.5 el9 iso doesn’t boot anymore - 2035051 removing nfs-utils cause ovirt-engine removal due to cinderlib dep tree - 1878724 vdsm-tool configure is failing with error “dependency job for libvirtd.service failed” - 2075435 Hybrid Backup - backup href has changed and causing backups to get stuck in finalizing stage - 2055136 virt module is not changed to the correct stream during host upgrade oVirt Node will be released shortly after the release will reach the CentOS mirrors. See the release notes for installation instructions and a list of new features and bugs fixed. Additional resources: - Read more about the oVirt 4.5.1 release highlights: https://www.ovirt.org/release/4.5.1/ - Get more oVirt project updates on Twitter: https://twitter.com/ovirt - Check out the latest project news on the oVirt blog: https://blogs.ovirt.org/ Thanks in advance, -- Lev Veyde Senior Software Engineer, RHCE | RHCVA | MCITP Red Hat Israel <https://www.redhat.com> lev(a)redhat.com | lveyde(a)redhat.com <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

6 10

Re: VMs missing following Import of Storage Domain
by Simon Scott 30 Jun '22

30 Jun '22

The .ovf files don’t exist on the Primary site for the VMs in question so they are not being replicated. Question is why aren’t there .ovf files on any of the hosts for those Vms? Regards Simon…

3 2

gluster heal success but a directory doesn't heal
by Diego Ercolani 29 Jun '22

29 Jun '22

Hello list, I have a problem derived from some hangs in ovirt during upgrade procedures, I have a gluster based self hosted engine deploy with "glen" as the gluster based hosted engine volume: This is the situation I'm facing: [root@ovirt-node3 master]# gluster volume heal glen info Brick ovirt-node2.ovirt:/brickhe/glen /3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks Status: Connected Number of entries: 1 Brick ovirt-node3.ovirt:/brickhe/glen /3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks Status: Connected Number of entries: 1 Brick ovirt-node4.ovirt:/dati/glen <- arbiter /3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks Status: Connected Number of entries: 1 so, as manual suggest, I issued a heal operation: [root@ovirt-node3 master]# gluster volume heal glen Launching heal operation to perform index self heal on volume glen has been successful Use heal info commands to check status. The Heal operation produces no results as the successive heal info report the same from wich I started. But this is the situation in the log files: [root@ovirt-node2 ~]# less /var/log/glusterfs/glfsheal-glen.log <- no errors [root@ovirt-node3 ~]# less /var/log/glusterfs/glfsheal-glen.log <- inside the log I have error entries: [2022-06-20 07:33:05.891367 +0000] W [MSGID: 114031] [client-rpc-fops_v2.c:2620:client4_0_lookup_cbk] 0-glen-client-2: remote operation failed. [{path=<gfid:44d74dba-19e8-47a3-89e8-f4a6cb37d5ec>}, {gfid=44d74dba-19e8-47a3-89e8-f4a6cb37d5ec}, {errno=2}, {error=No such file or directory}] [root@ovirt-node4 ~]# less /var/log/glusterfs/glfsheal-glen.log <- same kind of errors [2022-06-20 07:27:10.486822 +0000] W [MSGID: 114031] [client-rpc-fops_v2.c:2620:client4_0_lookup_cbk] 0-glen-client-1: remote operation failed. [{path=<gfid:b7b1fec5-8246-46eb-afde-ba06f52897d2>}, {gfid=b7b1fec5-8246-46eb-afde-ba06f52897d2}, {errno=2}, {error=No such file or directory}] On the nodes the glen volume is correctly mounted and: [root@ovirt-node2 localhost:_glen]# ls -l 3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks/ [root@ovirt-node3 localhost:_glen]# ls -l 3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks/ [root@ovirt-node4 localhost:_glen]# ls -l 3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks/ all return no files and issuing a ls on the brick source: [root@ovirt-node2 glen]# ls -l 3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks/ total 0 [root@ovirt-node3 glen]# ls -l 3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks/ total 0 drwxr-xr-x. 2 vdsm kvm 156 Jun 9 17:20 ccb6fd19-1b67-42b9-a032-31e12d62ed0e [root@ovirt-node4 glen]# ls -l 3577c21e-f757-4405-97d1-0f827c9b4e22/master/tasks/ total 0 so it turn out there is some difference between bricks... Can you please help address this issue? Thank you

2 5

Cannot Log Into Newly Deployed Hosted Engine
by Clint Boggio 29 Jun '22

29 Jun '22

I have a fresh installation of a 4.5.1 hosted engine and the admin password I set during the process isn't working. I reset the password for the admin user from a root shell on the HE using the ovirt-aaa-jdbc-tool utility and still no dice. I found a log file for "keycloak" that I tailed while logging in and discovered that keycloak was denying me. I am not familiar with keycloak at all. It appears as though I enabled keycloak during the deployment. Just a few quick answers may get me back to where I need to be: 1. How do I log into the web management portal ? Previously it was admin@internal and then the password 2. If keycloak is looking for some kind of directory server outside of the engine I don't have one, if the engine is the keycloak server what are my credentials for the HE portal ? 3. Can I re-run engine-setup and turn Keycloak off so that I have internal based authentication ? Below is dump of my engine-setup command results: Default SAN wipe after delete : False Host FQDN : ovirtmgmt.mycompany.com Firewall manager : firewalld Update Firewall : True Set up Cinderlib integration : False Keycloak installation : True Engine database host : localhost Engine database port : 5432 Engine database secured connection : False Engine database host name validation : False Engine database name : engine Engine database user name : engine Engine installation : True PKI organization : mycompany.com Set up ovirt-provider-ovn : True Grafana integration : True Grafana database user name : ovirt_engine_history_grafana Keycloak database host : localhost Keycloak database port : 5432 Keycloak database secured connection : False Keycloak database host name validation : False Keycloak database name : ovirt_engine_keycloak Keycloak database user name : ovirt_engine_keycloak Configure VMConsole Proxy : True Configure WebSocket Proxy : True DWH installation : True DWH database host : localhost DWH database port : 5432 DWH database secured connection : False DWH database host name validation : False DWH database name : ovirt_engine_history DWH database user name : ovirt_engine_history Backup DWH database : True

1 2

HCI Deployment oVirt 4.5
by Clint Boggio 29 Jun '22

29 Jun '22

Hello oVirt Team I'm in the process of deploying a three-node oVirt hyperconverged platform and from the cockpit interface of the deployment node I keep running into the same error. The system finishes the gluster deployment phase (sometimes) and then prompts to continue with the hosted engine deployment but then fails immediately complaining about the naming convention of my network interfaces. My network interfaces are 802.3ad bonds configured during the installation process of each node using "bondx" naming convention consistent across all three nodes. Any wisdom or pointers would be appreciated.

4 7

Can't start VM because host has insufficient amount of CPU cores
by Ramon Clematide 29 Jun '22

29 Jun '22

Hi I just upgraded my oVirt installation from 4.4.10 to 4.5.1.2. The upgrade went through without any errors and most things seem to work but i have one critical problem now. Somehow it does not evaluate the correct number of CPU available on the hypervisor and blocks the start of a VM (except for the engine). The problem I only have on the hypervisor which has the engine deployed. I have three hypervisors, but only one has the engine installed. This hypervisor is also in a seperate cluster. After the upgrade, on the hypervisor which has the engine installed, I can't start a VM via the oVirt Manager. I can start the engine via "hosted-engine --vm-start" but if I try to start any other VM it fails with this Error: https://imgur.com/7lbGb8v -------------------------------------------------------------------------------------------------------- Operation Canceled Error while executing action: Razor: Cannot run VM. There is no host that satisfies current scheduling constraints. See below for details: The host venge did not satisfy internal filter CPU because it has an insufficient amount of CPU cores to run the VM. -------------------------------------------------------------------------------------------------------- I did not change any specs for the VM and even if I reduce the VM to only use 1 core it fails with the error above. This are the specs of my hypervisor, it has 2 cores with 2 threads: https://imgur.com/rbJnqP3 This is the ovirt version installed https://imgur.com/4LLTVFN Does someone know how to fix this? Regards

3 3

Keep showing: ovirt kernel: NFS: __nfs4_reclaim_open_state: Lock reclaim failed!
by Ke Ye 29 Jun '22

29 Jun '22

I have two same systems: 1 standalone engine + 1 node + 1 NFS storage. One system works well, but the other one, when starting a vm, always shows paused due to storage I/O error. Any one help me thanks!!!!

1 0

Re: VM hangs after migration
by John 29 Jun '22

29 Jun '22

I'm seeing this too on oVirt 4.5.1 using CentOS Stream 8 for the hosts. The console is blank, no response to ping and I have to power off the VM and power it back on again to recover it. On 26/06/2022 19:53, Christopher Law wrote: > > I have this exact same issue, did you guys get anywhere with this, or > find the cause? > > It’s difficult to debug because as far as the engine and hosts > involved are concerned it was successful. It’s just the VM stops > responding to pings etc after migration and the console freezes > exactly as described here. > > I’m using oVirt 4.5.1 Cluster 4.7. I’ve even reinstalled oVirt Node on > the problem host still behaves the same. I’ve tried removing all > VirtIO devices from the VM, I’ve tried with lower CPU family profiles, > I’ve tried with different BIOS/UEFI settings. > > In some cases the VM freezes moving away from the problem host as well > which is interesting. > > *From:*Arik Hadas <ahadas(a)redhat.com> > *Sent:* 31 March 2022 15:11 > *To:* Moshe Sheena <msheena(a)redhat.com> > *Cc:* users <users(a)ovirt.org> > *Subject:* [ovirt-users] Re: VM hangs after migration > > Moshe, this sounds similar to what we've seen in your environment, no? > > Did you manage to resolve it? > > On Thu, Mar 31, 2022 at 12:57 PM Giorgio Biacchi <giorgio(a)di.unimi.it> > wrote: > > Hi, > I have a fresh Ovirt installation (4.4.10.7-1.el8 engine and oVirt > Node > 4.4.10) on a Dell VRTX chassis. There are 3 blades, two of them are > identical hardware (PowerEdge M630) and the third is a little newer > (PowerEdge M640). The third has different CPUs, more RAM, and slower > NICs. I also have a bunch of data domains some on the shared PERC > internal storage and others on an external iSCSI storage, all seems > configured correctly and all the hosts are operational. > > I can migrate a VM back and forth from the first two blades > without any > problem, I can migrate a VM to the third blade but when I migrate > a VM > from the third blade to any of the other two the task terminate > successfully, the VM is marked as up on the target host but the VM > hangs, the console is frozen and the VM stops to respond to ping. > > I have no clues about why this is happening and I'm looking for > suggestions about how to debug and hopefully fix this issue. > > Thanks in advance > -- > gb > > PGP Key: http://pgp.mit.edu/ > Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 > B9CB 0F34 > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/HYHAVG3KDHMNV… > > > _______________________________________________ > Users mailing list --users(a)ovirt.org > To unsubscribe send an email tousers-leave(a)ovirt.org > Privacy Statement:https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ > List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/VUOM… -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

3 2

ovirt node 4.5.1 fails to boot cleanly with selinux-autorelabel-mark.service: Job selinux-autorelabel-mark.service/start failed with result 'dependency'
by p.staniforth＠leedsbeckett.ac.uk 28 Jun '22

28 Jun '22

Hello we have some nodes that don't boot cleanly, CTRL-D or logging into the node allows the system to finish the startup properly. selinux-autorelabel-mark.service: Job selinux-autorelabel-mark.service/start failed with result 'dependency' systemd[1]: Timed out waiting for device dev-disk-by\x2duuid-3839035f\x2db3be\x2d4b8b\x2db711\x2df19bee4785f2.device. systemd[1]: Dependency failed for /gluster_bricks/extra. systemd[1]: Dependency failed for Local File Systems. systemd[1]: Dependency failed for Mark the need to relabel after reboot. systemd[1]: selinux-autorelabel-mark.service: Job selinux-autorelabel-mark.service/start failed with result 'dependency'. systemd[1]: local-fs.target: Job local-fs.target/start failed with result 'dependency'. systemd[1]: local-fs.target: Triggering OnFailure= dependencies. systemd[1]: gluster_bricks-extra.mount: Job gluster_bricks-extra.mount/start failed with result 'dependency'. systemd[1]: dev-disk-by\x2duuid-3839035f\x2db3be\x2d4b8b\x2db711\x2df19bee4785f2.device: Job dev-disk-by\x2duuid-3839035f\x2db3be\x2d4b8b\x2db711\x2df19bee4785f2.device/start failed with result 'timeout'. The other gluster bricks created at install time don't have this problem. Thanks, Paul S.

1 0

Install Ovirt 4.5.1 on Centos Stream 8.6
by moula.badji＠gmail.com 28 Jun '22

28 Jun '22

Hello, I'm trying to install ovirt-engine on centos Stream 8.6 and it's still not possible due to outdated dependencies. ovirt-engine-keycloak ovirt-engine-keycloak-setup mod_auth_openidc Thank's. Moula.

2 2