HostedEngine restarts from time to time
by ziyi Liu
Version 4.5.3.2-1.el8
There are two red warnings in the /var/log/messages file
kernel
shpchp 0000:01:00.0: Slot initialization failed
kernel
shpchp 0000:01:00.0: pci_hp_register failed with error -16
1 year, 9 months
Can't log on into my engine : keystore was tampered with, or password was incorrect
by Andy Michielsen
Hello,
I had an issue on my oVirt 4.3 environment that the certificate was
expired. Which I understand was not smart but now it's to late to update
them.
I found some information on how to fix that but the more I tried the more I
got confused and the further I think I got from solving this.
So I took a full backup and started a new installation off my engine on a
centos 8 stream and oVirt 4.5.
After I did the complete installation it worked fine but with a clean
environment and I really wanted to restore my current setup. So I did a
engine-cleanup and a restore off the full backup.
I think it went fine. but when I log into the engine I get the message
keystore was tampered with, or password was incorrect even before I try to
log in.
Why is it telling me this And how can I figure this out and
solve it ?
Kind regards.
1 year, 9 months
Problem after upgrading oVirt
by Andy Michielsen
Hello all,
I'm struggling with an issue with my oVirt environment and I seem not to be
able to figure this one out on my own and am hoping you can point me in on
the right track.
My old oVirt 4.3 environment's certifcat went expired. I thought I could
fix it by reading some tutorials but no luck so far.
Now I have upgraded my engine already to 4.5 and now I get the message
telling me this
"Keystore was tampered with, or password is incorrect"
Even before I can log on.
I'm looking through the ovirtengine.log but so far I haven't find why
exactly.
Any help would be greatly appreciated.
Kind regards.
1 year, 9 months
Error Deploying the self-hosted engine using the command line
by ahmad.hidayat＠singtel.com
Hello masters!
I am trying to deploy a self hosted engine and encountered an error.
We are only allowed to use a range of IP Address and access http via proxy.
IP: 192.168.50.0/24
Command used:
hosted-engine --deploy --4 --ansible-extra-vars=he_offline_deployment=true --ansible-extra-vars=he_ipv4_subnet_prefix=192.168.50
Error:
[ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "cmd": ["virsh", "net-start", "default"], "delta": "0:00:00.069204", "end": "2023-02-17 08:54:21.737578", "msg": "non-zero return code", "rc": 1, "start": "2023-02-17 08:54:21.668374", "stderr": "error: Failed to start network default\nerror: internal error: Network is already in use by interface eno1", "stderr_lines": ["error: Failed to start network default", "error: internal error: Network is already in use by interface eno1"], "stdout": "", "stdout_lines": []}
[ ERROR ] Failed to execute stage 'Closing up': Failed getting local_vm_dir
Hope to gain some ideas from this issue.
Thanks!
1 year, 9 months
Problem with update 4.4.3
by scrik787＠gmail.com
Good afternoon,
I have version 4.4.3 and want to upgrade to at least 4.4.10
but I am facing this error:
[root@ovirt1 ~]# yum update
Failed to set locale, defaulting to C.UTF-8
Last metadata expiration check: 2:05:22 ago on Tue Feb 7 12:31:28 2023.
Error:
Problem 1: package libgfapi0-8.6-2.el8s.x86_64 requires glusterfs-client-xlators(x86-64) = 8.6-2.el8s, but none of the providers can be installed
- cannot install the best update candidate for package glusterfs-api-7.8-1.el8.x86_64
- package glusterfs-client-xlators-8.6-2.el8s.x86_64 is filtered out by exclude filtering
Problem 2: package libglusterfs0-8.6-2.el8s.x86_64 obsoletes glusterfs-libs <= 8.6-2.el8s provided by glusterfs-libs-7.8-1.el8.x86_64
- package glusterfs-7.8-1.el8.x86_64 requires glusterfs-libs = 7.8-1.el8, but none of the providers can be installed
- cannot install the best update candidate for package glusterfs-libs-7.8-1.el8.x86_64
- problem with installed package glusterfs-7.8-1.el8.x86_64
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
I tried these options, but the error did not go away. How can I update? I don't use GlusterFS. I use ISCSI:
rm -rf /var/cache/dnf
cd /etc/yum.repos.d/
sed -i 's/mirrorlist/#mirrorlist/g' /etc/yum.repos.d/CentOS-*
sed -i 's|#baseurl=http://mirror.centos.org|baseurl=http://vault.centos.org|g' /etc/yum.repos.d/CentOS-*
sudo dnf install --disablerepo='*'
https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm
dnf distro-sync —nobest
yum install https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm
yum update
yum update --skip-broken --nobest
1 year, 9 months
Ovirt provider OVN
by scrik787＠gmail.com
Good afternoon,
Since installing ovirt, there have been problems with OVN Provider. But we didn't do it, and we didn't have to. Now we need to create virtual networks, but nothing works for us. Please help with thoughts. I updated the Ovirt OVN Provider certificate, previously there was a problem with them after 2 years.
all host install with ovirt node:
software:
OS Version:RHEL - 8 - 2.2004.0.2.el8
OS Description:oVirt Node 4.4.3
Kernel Version:4.18.0 - 193.28.1.el8_2.x86_64
KVM Version:4.2.0 - 29.el8.6
LIBVIRT Version:libvirt-6.0.0-25.2.el8
VDSM Version:vdsm-4.40.35.1-1.el8
SPICE Version:0.14.2 - 1.el8_2.1
GlusterFS Version:glusterfs-7.8-1.el8
CEPH Version:librbd1-12.2.7-9.el8
Open vSwitch Version:[N/A]
Nmstate Version:nmstate-0.3.6-2.el8
Kernel Features:MDS: (Not affected), L1TF: (Not affected), SRBDS: (Not affected), MELTDOWN: (Not affected), SPECTRE_V1: (Mitigation: usercopy/swapgs barriers and __user pointer sanitization), SPECTRE_V2: (Mitigation: Enhanced IBRS, IBPB: conditional, RSB filling), ITLB_MULTIHIT: (KVM: Mitigation: Split huge pages), TSX_ASYNC_ABORT: (Mitigation: Clear CPU buffers; SMT vulnerable), SPEC_STORE_BYPASS: (Mitigation: Speculative Store Bypass disabled via prctl and seccomp)
VNC Encryption:Disabled
FIPS mode enabled:Disabled
Logs /var/log/ovirt-provider-ovn.log
2023-02-07 12:32:18,629 root Starting server
2023-02-07 12:32:18,630 root Version: 1.2.32-1
2023-02-07 12:32:18,630 root Build date: 20200929061233
2023-02-07 12:32:18,630 root Githash: 44a7426
2023-02-07 12:34:17,362 ovsdbapp.backend.ovs_idl.idlutils Unable to open stream to ssl:127.0.0.1:6641 to retrieve schema: Connection reset by peer
2023-02-07 12:34:17,362 root From: ::ffff:10.0.120.11:43288 Request: GET /v2.0/networks
2023-02-07 12:34:17,362 root Could not retrieve schema from ssl:127.0.0.1:6641
Traceback (most recent call last):
File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line 138, in _handle_request
method, path_parts, content
File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py", line 175, in handle_request
return self.call_response_handler(handler, content, parameters)
File "/usr/share/ovirt-provider-ovn/handlers/neutron.py", line 35, in call_response_handler
with NeutronApi() as ovn_north:
File "/usr/share/ovirt-provider-ovn/neutron/neutron_api.py", line 95, in __init__
self.ovsidl, self.idl = ovn_connection.connect()
File "/usr/share/ovirt-provider-ovn/ovn_connection.py", line 46, in connect
ovnconst.OVN_NORTHBOUND
File "/usr/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 154, in from_server
helper = idlutils.get_schema_helper(connection_string, schema_name)
File "/usr/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/idlutils.py", line 144, in get_schema_helper
raise Exception("Could not retrieve schema from %s" % connection)
Exception: Could not retrieve schema from ssl:127.0.0.1:6641
Test in Ovirt Engine OVN Provider
Error:Failed to communicate with the external provider, see log for additional details.
[root@ovirtengine ~]# cat /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
# This file is automatically generated by engine-setup. Please do not edit manually
[PROVIDER]
provider-host=ovirt.test.test.org
[SSL]
ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
https-enabled=true
[OVN REMOTE]
ovn-remote=ssl:127.0.0.1:6641
[OVIRT]
ovirt-sso-client-id=ovirt-provider-ovn
ovirt-sso-client-secret=SECRET KEY
ovirt-host=https://ovirt.test.test.org:443
ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
[NETWORK]
port-security-enabled-default=True
Reinstall Ovirt OVN with engine-setup did not solve the problem
[root@vovirtengine ~]# ovn-nbctl get-ssl
Private key: /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass
Certificate: /etc/pki/ovirt-engine/certs/ovn-ndb.cer
CA Certificate: /etc/pki/ovirt-engine/ca.pem
Bootstrap: false
[root@vovirtengine ~]# ovn-nbctl get-connection
pssl:6641:[::]
[root@vovirtengine ~]# ovn-sbctl get-ssl
Private key: /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass
Certificate: /etc/pki/ovirt-engine/certs/ovn-sdb.cer
CA Certificate: /etc/pki/ovirt-engine/ca.pem
Bootstrap: false
[root@vovirtengine ~]# ovn-sbctl get-connection
read-write role="" pssl:6642:[::]
[root@vovirtengine ~]#
Ovirt-ENgine Config
Name ovirt-provider-ovn
Description oVirt network provider for OVN
Networking Plugin oVirt Network Provider for OVN
Automatic Synchronization YES
Unmanaged NO
Read-Only NO
Provider URL https://ovirt.test.test.org:9696
Requires Authentication YES
Username admin@internal
Password PASWORD
Protocol HTTPS
Host Name ovirt.test.test.org
API Port 35357
API Version v2.0
Tenant Name
on host in cluster logs /var/log/openvswitch/ovn-controller.log
<...>
2023-02-07T09:11:58.903Z|303247|stream_ssl|WARN|SSL_connect: system error (Success)
2023-02-07T09:12:06.912Z|303248|stream_ssl|WARN|SSL_connect: system error (Success)
2023-02-07T09:12:14.920Z|303249|stream_ssl|WARN|SSL_connect: system error (Success)
2023-02-07T09:12:22.929Z|303250|stream_ssl|WARN|SSL_connect: system error (Success)
2023-02-07T09:12:30.937Z|303251|stream_ssl|WARN|SSL_connect: system error (Success)
1 year, 9 months
Error when deploy Ovirt4.4 Hosted Engine
by staybox＠gmail.com
Hello, I get error, need help.
[ ERROR ] fatal: [localhost]: FAILED! => {"msg": "The conditional check 'not ipv6_deployment|bool and route_rules_ipv4.stdout | from_json | selectattr('priority', 'equalto', 100) | selectattr('dst', 'equalto', virbr_cidr_ipv4 | ipaddr('address') ) | list | length == 0' failed. The error was: error while evaluating conditional (not ipv6_deployment|bool and route_rules_ipv4.stdout | from_json | selectattr('priority', 'equalto', 100) | selectattr('dst', 'equalto', virbr_cidr_ipv4 | ipaddr('address') ) | list | length == 0): 'dict object' has no attribute 'dst'\n\nThe error appears to be in '/usr/share/ansible/collections/ansible_collections/ovirt/ovirt/roles/hosted_engine_setup/tasks/bootstrap_local_vm/01_prepare_routing_rules.yml': line 81, column 5, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n changed_when: true\n - name: Add IPv4 inbound route rules\n ^ here\n"}
1 year, 9 months
oVirt Engine Web Console
by mikejhathaway＠gmail.com
Hi Everyone,
Newbie here.
Ive managed to get an oVirt host and Engine installed, what I am not able to do is access the engine web console, is there a particular port I need to use??
Also, I am can only ping and access the engine host via SSH from hosts on the same VLan, the default GW is set correctly on the engine VM, not sure what is going on?
TIA
Mike
1 year, 9 months
New oVirt HCI 4.5.4 Cluster Problems
by Clint Boggio
Good day all.
I'm in the process of deploying a fresh, new cluster and i'm running into a few snags. I'm trying to use the cockpit environment to deploy the gluster storage setup as I have previously done and it's failing consistently. I looked through what I believe to be the current documentation and I don't see anything about HCI setup, and the Gluster storage documentation points to the Gluster community web presence.
So, my question is, will the oVirt HCI deployment still be supported, and is the process the same with cockpit to configure the storage, and cli to deploy the hosted engine or did HCI and gluster not make the cut with the 4.5.4 release?
I'm using the oVirt node installation iso from the oVirt site for this deployment.
1 year, 9 months
