1:08 a.m.
----- Original Message -----
From: "Jiří Sléžka" <jiri.slezka(a)slu.cz>
To: users(a)ovirt.org
Sent: Wednesday, June 18, 2014 8:12:09 PM
Subject: [ovirt-users] host upgrade from ovirt manager and custom iptables rules
Hello all,
is there any way to make custom iptables rules persistent during host
upgrade? I have for example zabbix agents installed on all hosts and
thus iptables rule allowing connections from our zabbix server. Sadly I
have to manually restore iptables backup after host upgrade (initiated
from oVirt manager).
This should be achievable by defining the iptables rules you wish to use
when [re]installing using the engine-config tool:
1. Check the existing iptables rules:
sudo engine-config -g IPTablesConfig
2. Define the desired iptables:
sudo engine-config -s IPTablesConfig="Your rules"
3. Verify the changes
sudo engine-config -g IPTablesConfig
4. Restart the engine for changes to take effect
5. Reinstall the host and verify the iptables rule.
And another question I have always wanted to ask... It looks like
host
upgrade is upgrading just vdsm components and no others virtualization stuff
this was updatet after clicking to "host upgrade"
Jun 18 18:21:38 Updated: iproute-2.6.32-32.el6_5.x86_64
Jun 18 18:21:59 Installed: vdsm-python-zombiereaper-4.14.7-3.el6ev.noarch
Jun 18 18:21:59 Updated: vdsm-python-4.14.7-3.el6ev.x86_64
Jun 18 18:21:59 Updated: vdsm-xmlrpc-4.14.7-3.el6ev.noarch
Jun 18 18:21:59 Updated: vdsm-cli-4.14.7-3.el6ev.noarch
Jun 18 18:22:26 Updated: vdsm-4.14.7-3.el6ev.x86_64
Jun 18 18:22:27 Updated:
2:qemu-kvm-rhev-tools-0.12.1.2-2.415.el6_5.10.x86_64
and after that I run yum update and updated this components (honestly
this one was rhev host but ovirt behave the same)
Jun 18 18:26:59 Updated: selinux-policy-3.7.19-231.el6_5.3.noarch
Jun 18 18:27:03 Updated: tzdata-2014d-1.el6.noarch
Jun 18 18:27:10 Updated: glibc-2.12-1.132.el6_5.2.x86_64
Jun 18 18:27:22 Updated: glibc-common-2.12-1.132.el6_5.2.x86_64
Jun 18 18:27:22 Updated: audit-libs-2.2-4.el6_5.x86_64
Jun 18 18:27:22 Updated: libxml2-2.7.6-14.el6_5.1.x86_64
Jun 18 18:27:22 Updated: libcurl-7.19.7-37.el6_5.3.x86_64
Jun 18 18:27:23 Updated: 2:qemu-img-rhev-0.12.1.2-2.415.el6_5.10.x86_64
Jun 18 18:27:23 Updated: libtasn1-2.3-6.el6_5.x86_64
Jun 18 18:27:23 Updated: gnutls-2.8.5-14.el6_5.x86_64
Jun 18 18:27:25 Updated: openssl-1.0.1e-16.el6_5.14.x86_64
Jun 18 18:27:25 Updated: spice-server-0.12.4-6.el6_5.2.x86_64
Jun 18 18:27:25 Updated: gnutls-utils-2.8.5-14.el6_5.x86_64
Jun 18 18:27:25 Updated: pm-utils-1.2.5-10.el6_5.1.x86_64
Jun 18 18:27:28 Updated: libvirt-client-0.10.2-29.el6_5.9.x86_64
Jun 18 18:27:30 Updated: libvirt-0.10.2-29.el6_5.9.x86_64
Jun 18 18:27:30 Updated: libvirt-python-0.10.2-29.el6_5.9.x86_64
Jun 18 18:27:30 Updated: mom-0.4.0-1.el6ev.noarch
Jun 18 18:27:30 Updated: libvirt-lock-sanlock-0.10.2-29.el6_5.9.x86_64
Jun 18 18:27:32 Updated: 2:qemu-kvm-rhev-0.12.1.2-2.415.el6_5.10.x86_64
Jun 18 18:27:32 Updated: python-rhsm-1.9.7-1.el6_5.x86_64
Jun 18 18:27:32 Updated: curl-7.19.7-37.el6_5.3.x86_64
Jun 18 18:27:33 Updated: libxml2-python-2.7.6-14.el6_5.1.x86_64
Jun 18 18:27:33 Updated: audit-libs-python-2.2-4.el6_5.x86_64
Jun 18 18:27:33 Updated: audit-2.2-4.el6_5.x86_64
Jun 18 18:27:33 Updated: mdadm-3.2.6-7.el6_5.2.x86_64
Jun 18 18:27:33 Updated: python-cpopen-1.3-2.el6_5.x86_64
Jun 18 18:28:30 Updated: selinux-policy-targeted-3.7.19-231.el6_5.3.noarch
Jun 18 18:28:30 Updated: python-pthreading-0.1.3-1.el6ev.noarch
I believe qemu-img-rhev, spice-server, libvirt, mom,... are important
components too. Should not be upgraded as well?
Thanks for clarification,
Jiri
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users