Re: Disk encryption in oVirt
by Strahil
Hi,
Maybe a gluster encryption will also cover your needs in a hyper converged setup?
Best Regards,
Strahil Nikolov
On Oct 22, 2019 14:43, Sandro Bonazzola <sbonazzo(a)redhat.com> wrote:
>
>
>
> Il giorno mar 22 ott 2019 alle ore 12:32 MIMMIK _ <dmarini(a)it.iliad.com> ha scritto:
>>
>> Is there a way to get a full disk encryption on virtual disks used by VMs in oVirt?
>
>
> You can use encrypted file system managed from within the VM itself if the OS support it (dm-crypt with LUKS on GNU Linux, BitLocker) which is the most secure choice on this topic.
> Encrypting the storage hosting the VM disks won't help once you access the storage for booting the VM, at that point disks will be accessible without encryption.
>
>
>
>
>>
>>
>> Regards
>> _______________________________________________
>> Users mailing list -- users(a)ovirt.org
>> To unsubscribe send an email to users-leave(a)ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3FMGDSRBHRW...
>
>
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
>
> Red Hat EMEA
>
> sbonazzo(a)redhat.com
>
> Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.
6 months, 3 weeks
Re: oVirt/RHV 4.3.6: How to boot a Q35/UEFI VM from CD?
by Strahil
I have successfully managed to boot and install RHEL & openSUSE with Secureboot, but UEFI variables are not saved and requires some workarounds (there is a bug opened for that) to work.
What exactly is your problem?
Best Regards,
Strahil NikolovOn Oct 29, 2019 10:32, mathieu.simon(a)gymneufeld.ch wrote:
>
> Hi
>
> I've been experimenting with UEFI on RHV 4.3.6 using Windows Server 2019 but I guess posting on the oVirt list might reach a wider audience.
> I've used UEFI guests on other KVM-based virtualizations, but I have been unable to detect a UEFI-bootable CD using Q35 VMs with or without SecureBoot in RHV 4.3.6 since it doesn't even propose to load the UEFI loader from within OVMF. It seems to show the CD-ROM drive, but I cannot boot from file the disc from OVMF:
>
> Are there any hints? (I've tried finding something more detailed in the Docs though) I'd like investigate UEFI and SecureBoot on oVirt/RHV even if it's still considered a tech preview. (I've been using KVM-based UEFI VM for years already on other platforms and distributions with no particular issues, rather advantages overall).
>
> Regards
> Mathieu
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/AVHRXTQ4TSZ...
6 months, 3 weeks
Re: Trying to add a LUN to a host and use that, instead of Gluster, as the datastore for my VM's.
by Strahil
I'm not sure, but you can try with replica 1 gluster volume.
Later that gluster volume can be changed to replica 2 arbiter 1 or even better replica 3 volume.
Best Regards,
Strahil NikolovOn Oct 10, 2019 13:04, Tom <tk(a)mdevsys.com> wrote:
>
> I take it then theres no way to do so without NFS?
>
> Sent from my iPhone
>
> > On Oct 10, 2019, at 2:53 AM, Strahil <hunter86_bg(a)yahoo.com> wrote:
> >
> > You can create an NFS on that host and export to itself that local storage...
> >
> > Best Regards,
> > Strahil NikolovOn Oct 9, 2019 07:43, TomK <tomkcpr(a)mdevsys.com> wrote:
> >>
> >> Manged to reverse it through the options. Had to deactivate the custom
> >> local cluster.
> >>
> >> Now I have my GlusterFS back and want to try and add some local storage
> >> to each host under the same DC, Cluster and Storage Domain. So
> >> effectively I will have two storage locations. One on my GlusterFS and
> >> the other on the local storage I've just defined.
> >>
> >> Appears I can't make them coexist with oVirt. Either the host is placed
> >> in a separate cluster with local storage, or I move it back to the
> >> GlusterFS.
> >>
> >> Appears I can't have two usable storage types under one host. Is this
> >> correct?
> >>
> >> What I'm looking for is in the image and shared earlier.
> >>
> >> Cheers,
> >> TK
> >>
> >>> On 10/8/2019 11:03 PM, TomK wrote:
> >>> I'm working to reverse this scenario.
> >>>
> >>> My storage domain still exists. However I can't activate it. The
> >>> Manage button is greyed out without clear indication as to why.
> >>> Difficult to tell what my next move should be.
> >>>
> >>> Anyway to find out?
> >>>
> >>> Cheers,
> >>> TK
> >>>
> >>>> On 10/7/2019 8:25 AM, TomK wrote:
> >>>> Allright.
> >>>>
> >>>> So I followed this and configured local storage. It had some default
> >>>> names that I changed. It would have been either the default name, or
> >>>> one I choose. In either case it would be a different name then the
> >>>> Gluster storage domain the host was a part of anyway.
> >>>>
> >>>> Once the process completed for both hosts, I noticed the Gluster
> >>>> volume storage domain was offline and the gluster volume was gone. I
> >>>> can't seem to add that back in anymore. I get:
> >>>>
> >>>> "Error while executing action DisconnectStorageServerConnection: Error
> >>>> storage server disconnection"
> >>>>
> >>>> Guessing I can't have local storage in addition to Gluster on the same
> >>>> hosts and available for VM's?
> >>>>
> >>>> Reason why I need that is that Gluster is slow but provides redundancy
> >>>> and live migration. But I also wanted direct storage for VM's
> >>>> requiring faster IO. So here's my scenario:
> >>>>
> >>>> host01
> >>>> /dev/sda OS
> >>>> /dev/sdb 4TB (For Gluster)
> >>>> /dev/sdc 4TB (For Local Storage)
> >>>>
> >>>> host02
> >>>> /dev/sda OS
> >>>> /dev/sdb 4TB (For Gluster)
> >>>> /dev/sdc 4TB (For Local Storage)
> >>>>
> >>>> I would like to have:
> >>>>
> >>>> 1) GlusterFS volume available to oVirt via the two /dev/sdb drives in
> >>>> both physical hosts.
> >>>> 2) Two locally attached LUN's, each separate and local to that
> >>>> physical host.
> >>>>
> >>>> Is this possible?
> >>>>
> >>>> Cheers,
> >>>> TK
> >>>>
> >>>>> On 10/6/2019 12:38 AM, Strahil wrote:
> >>>>> Hi Tom,
> >>>>>
> >>>>> Have you checked
> >>>>> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/...
> >>>>> ?
> >>>>>
> >>>>> Best Regards,
> >>>>> Strahil NikolovOn Oct 6, 2019 06:26, TomK <tomkcpr(a)mdevsys.com> wrote:
> >>>>>>
> >>>>>> Hey All,
> >>>>>>
> >>>>>> I've added a 4TB LUN to my physical storage and now I want to use that,
> >>>>>> instead of GlusterFS as my datastore for VM's on that physical. How do
> >>>>>> I do this?
> >>>>>>
> >>>>>> I've tried a number of options, including adding LUN's but appears I
> >>>>>> can
> >>>>>> only add them to VM's directly but not use them as my datastores
> >>
6 months, 4 weeks
Re: oVirt 4.3.5/6 HC: Reinstall fails from WEB UI
by Strahil
Ssh to host and check the status of :
sanlock.service
supervdsmd.service
vdsmd.service
ovirt-ha-broker.service
ovirt-ha-agent.service
For example if sanlock is working, but supervdsmd is not - try to restart it.
If it fais, run:
systemctl cat supervdsmd.service
And execute the commands in sections:
ExecStartPre
ExecStart
And report any issues, then follow the next service in the chain.
Best Regards,
Strahil NikolovOn Oct 16, 2019 23:52, adrianquintero(a)gmail.com wrote: > > Hi, > I am trying to re-install a host from the web UI in oVirt 4.3.5, but it always fails and goes to "Setting Host state to Non-Operational" > > From the engine.log I see the following WARN/ERROR: > 2019-10-16 16:32:57,263-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-43) [491c8bd9] EVENT_ID: VDS_SET_NONOPERATIONAL_DOMAIN(522), Host host1.example.com cannot access the Storage Domain(s) attached to the Data Center Default-DC1. Setting Host state to Non-Operational. > 2019-10-16 16:32:57,271-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-43) [491c8bd9] EVENT_ID: VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host host1.example.com.There is no other host in the data center that can be used to test the power management settings. > 2019-10-16 16:32:57,276-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-43) [491c8bd9] EVENT_ID: CONNECT_STORAGE_POOL_FAILED(995), Failed to connect Host host1.example.com to Storage Pool Default-DC1 > 2019-10-16 16:35:06,151-04 ERROR [org.ovirt.engine.core.bll.InitVdsOnUpCommand] (EE-ManagedThreadFactory-engine-Thread-137245) [] Could not connect host 'host1.example.com' to pool 'Default-DC1': Error storage pool connection: (u"spUUID=7d3fb14c-ebf0-11e9-9ee5-00163e05e135, msdUUID=4b87a5de-c976-4982-8b62-7cffef4a22d8, masterVersion=1, hostID=1, domainsMap={u'8c2df9c6-b505-4499-abb9-0d15db80f33e': u'active', u'4b87a5de-c976-4982-8b62-7cffef4a22d8': u'active', u'5d9f7d05-1fcc-4f99-9470-4e57cd15f128': u'active', u'fe24d88e-6acf-42d7-a857-eaf1f8deb24a': u'active'}",) > 2019-10-16 16:35:06,248-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-91) [690baf86] EVENT_ID: VDS_SET_NONOPERATIONAL_DOMAIN(522), Host host1.example.com cannot access the Storage Domain(s) attached to the Data Center Default-DC1. Setting Host state to Non-Operational. > 2019-10-16 16:35:06,256-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-91) [690baf86] EVENT_ID: VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host host1.example.com.There is no other host in the data center that can be used to test the power management settings. > 2019-10-16 16:35:06,261-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-91) [690baf86] EVENT_ID: CONNECT_STORAGE_POOL_FAILED(995), Failed to connect Host host1.example.com to Storage Pool Default-DC1 > 2019-10-16 16:37:46,011-04 ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp Reactor) [] Connection timeout for host 'host1.example.com', last response arrived 1501 ms ago. > 2019-10-16 16:41:57,095-04 ERROR [org.ovirt.engine.core.bll.InitVdsOnUpCommand] (EE-ManagedThreadFactory-engine-Thread-137527) [17f3aadd] Could not connect host 'host1.example.com' to pool 'Default-DC1': Error storage pool connection: (u"spUUID=7d3fb14c-ebf0-11e9-9ee5-00163e05e135, msdUUID=4b87a5de-c976-4982-8b62-7cffef4a22d8, masterVersion=1, hostID=1, domainsMap={u'8c2df9c6-b505-4499-abb9-0d15db80f33e': u'active', u'4b87a5de-c976-4982-8b62-7cffef4a22d8': u'active', u'5d9f7d05-1fcc-4f99-9470-4e57cd15f128': u'active', u'fe24d88e-6acf-42d7-a857-eaf1f8deb24a': u'active'}",) > 2019-10-16 16:41:57,199-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-22) [508ddb44] EVENT_ID: VDS_SET_NONOPERATIONAL_DOMAIN(522), Host host1.example.com cannot access the Storage Domain(s) attached to the Data Center Default-DC1. Setting Host state to Non-Operational. > 2019-10-16 16:41:57,211-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-22) [508ddb44] EVENT_ID: VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host host1.example.com.There is no other host in the data center that can be used to test the power management settings. > 2019-10-16 16:41:57,216-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-22) [508ddb44] EVENT_ID: CONNECT_STORAGE_POOL_FAILED(995), Failed to connect Host host1.example.com to Storage Pool Default-DC1 > > Any ideas why this might be happening? > I have researched, however I have not been able to find a solution. > > thanks, > > Adrian > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3XAKJ23DSQV...
6 months, 4 weeks
Drag and Drop - Setup Host Networks
by ccesario＠blueit.com.br
it seems that drag and drop function does not working as expected in Setup Host Networks screen.
It is not possibel remove NIC interface a interface from a Bond config.
When I tried move a interface to outside Bond cofing, all block is moved instead of only the specific interface .
Screenshots abut this
https://pasteboard.co/IEx5Cun.png
In this case, I'm trying remove eno5 interface from bond0 config, but it is not possible.
Regards
6 months, 4 weeks
[ANN] oVirt 4.3.7 Second Release Candidate is now available for testing
by Sandro Bonazzola
The oVirt Project is pleased to announce the availability of the oVirt
4.3.7 Second Release Candidate for testing, as of October 31th, 2019.
This update is a release candidate of the seventh in a series of
stabilization updates to the 4.3 series.
This is pre-release software. This pre-release should not to be used in
production.
This release is available now on x86_64 architecture for:
* Red Hat Enterprise Linux 7.7 or later (but <8)
* CentOS Linux (or similar) 7.7 or later (but <8)
This release supports Hypervisor Hosts on x86_64 and ppc64le architectures
for:
* Red Hat Enterprise Linux 7.7 or later (but <8)
* CentOS Linux (or similar) 7.7 or later (but <8)
* oVirt Node 4.3 (available for x86_64 only) has been built consuming
CentOS 7.7 Release
See the release notes [1] for known issues, new features and bugs fixed.
Notes:
- oVirt Appliance is already available
- oVirt Node is already available
Additional Resources:
* Read more about the oVirt 4.3.7 release highlights:
http://www.ovirt.org/release/4.3.7/
* Get more oVirt Project updates on Twitter: https://twitter.com/ovirt
* Check out the latest project news on the oVirt blog:
http://www.ovirt.org/blog/
[1] http://www.ovirt.org/release/4.3.7/
[2] http://resources.ovirt.org/pub/ovirt-4.3-pre/iso/
--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat EMEA <https://www.redhat.com/>
sbonazzo(a)redhat.com
<https://www.redhat.com/>*Red Hat respects your work life balance.
Therefore there is no need to answer this email out of your office hours.
<https://mojo.redhat.com/docs/DOC-1199578>*
6 months, 4 weeks
Planned restart of production services
by Evgheni Dereveanchin
Hi everyone,
I'll be restarting several production systems today to apply security
updates.
The following services may be unreachable for short periods of time:
- resources.ovirt.org - software repositories
- jenkins.ovirt.org - CI master
No new builds will be started during this period.
I will announce you once maintenance is complete.
--
Regards,
Evgheni Dereveanchin
7 months
ovirt-web-ui search active directory user problem
by 山永军
Ovirt version 4.3, active directory windows 2012r2; after adding domain authentication through ovirt engine extension AAA LDAP setup, when adding domain users through management interface configuration - > system permissions, select Search: domain, namespace: *. The following go button is gray and cannot be searched. It is normal to search through ovirt engine extensions tool test. How can I solve this problem?
7 months
oVirt/RHV 4.3.6: How to boot a Q35/UEFI VM from CD?
by mathieu.simon＠gymneufeld.ch
Hi
I've been experimenting with UEFI on RHV 4.3.6 using Windows Server 2019 but I guess posting on the oVirt list might reach a wider audience.
I've used UEFI guests on other KVM-based virtualizations, but I have been unable to detect a UEFI-bootable CD using Q35 VMs with or without SecureBoot in RHV 4.3.6 since it doesn't even propose to load the UEFI loader from within OVMF. It seems to show the CD-ROM drive, but I cannot boot from file the disc from OVMF:
Are there any hints? (I've tried finding something more detailed in the Docs though) I'd like investigate UEFI and SecureBoot on oVirt/RHV even if it's still considered a tech preview. (I've been using KVM-based UEFI VM for years already on other platforms and distributions with no particular issues, rather advantages overall).
Regards
Mathieu
7 months
