April 2020 - Users - oVirt List Archives

SPM and Task error ...
by Enrico 22 Nov '24

22 Nov '24

Hi all, my ovirt cluster has got 3 Hypervisors runnig Centos 7.5.1804 vdsm is 4.20.39.1-1.el7, ovirt engine is 4.2.4.5-1.el7, the storage systems are HP MSA P2000 and 2050 (fibre channel). I need to stop one of the hypervisors for maintenance but this system is the storage pool manager. For this reason I decided to manually activate SPM in one of the other nodes but this operation is not successful. In the ovirt engine (engine.log) the error is this: 2019-07-25 12:39:16,744+02 INFO [org.ovirt.engine.core.bll.storage.pool.ForceSelectSPMCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] Running command: ForceSelectSPMCommand internal: false. Entities affected : ID: 81c9bd3c-ae0a-467f-bf7f-63ab30cd8d9e Type: VDSAction group MANIPULATE_HOST with role type ADMIN 2019-07-25 12:39:16,745+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SpmStopOnIrsVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] START, SpmStopOnIrsVDSCommand( SpmStopOnIrsVDSCommandParameters:{storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7', ignoreFailoverLimit='false'}), log id: 37bf4639 2019-07-25 12:39:16,747+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.ResetIrsVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] START, ResetIrsVDSCommand( ResetIrsVDSCommandParameters:{storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7', ignoreFailoverLimit='false', vdsId='751f3e99-b95e-4c31-bc38-77f5661a0bdc', ignoreStopFailed='false'}), log id: 2522686f 2019-07-25 12:39:16,749+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStopVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] START, SpmStopVDSCommand(HostName = infn-vm05.management, SpmStopVDSCommandParameters:{hostId='751f3e99-b95e-4c31-bc38-77f5661a0bdc', storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7'}), log id: 1810fd8b 2019-07-25 12:39:16,758+02 *ERROR* [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStopVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] SpmStopVDSCommand::Not stopping SPM on vds 'infn-vm05.management', pool id '18d57688-6ed4-43b8-bd7c-0665b55950b7' as there are uncleared tasks 'Task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e', status 'running'' 2019-07-25 12:39:16,758+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStopVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] FINISH, SpmStopVDSCommand, log id: 1810fd8b 2019-07-25 12:39:16,758+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.ResetIrsVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] FINISH, ResetIrsVDSCommand, log id: 2522686f 2019-07-25 12:39:16,758+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SpmStopOnIrsVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] FINISH, SpmStopOnIrsVDSCommand, log id: 37bf4639 2019-07-25 12:39:16,760+02 *ERROR* [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] EVENT_ID: USER_FORCE_SELECTED_SPM_STOP_FAILED(4,096), Failed to force select infn-vm07.management as the SPM due to a failure to stop the current SPM. while in the hypervisor (SPM) vdsm.log: 2019-07-25 12:39:16,744+02 INFO [org.ovirt.engine.core.bll.storage.pool.ForceSelectSPMCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] Running command: ForceSelectSPMCommand internal: false. Entities affected : ID: 81c9bd3c-ae0a-467f-bf7f-63ab30cd8d9e Type: VDSAction group MANIPULATE_HOST with role type ADMIN 2019-07-25 12:39:16,745+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SpmStopOnIrsVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] START, SpmStopOnIrsVDSCommand( SpmStopOnIrsVDSCommandParameters:{storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7', ignoreFailoverLimit='false'}), log id: 37bf4639 2019-07-25 12:39:16,747+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.ResetIrsVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] START, ResetIrsVDSCommand( ResetIrsVDSCommandParameters:{storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7', ignoreFailoverLimit='false', vdsId='751f3e99-b95e-4c31-bc38-77f5661a0bdc', ignoreStopFailed='false'}), log id: 2522686f 2019-07-25 12:39:16,749+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStopVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] START, SpmStopVDSCommand(HostName = infn-vm05.management, SpmStopVDSCommandParameters:{hostId='751f3e99-b95e-4c31-bc38-77f5661a0bdc', storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7'}), log id: 1810fd8b 2019-07-25 12:39:16,758+02 *ERROR* [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStopVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] SpmStopVDSCommand::Not stopping SPM on vds 'infn-vm05.management', pool id '18d57688-6ed4-43b8-bd7c-0665b55950b7' as there are uncleared tasks 'Task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e', status 'running'' 2019-07-25 12:39:16,758+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStopVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] FINISH, SpmStopVDSCommand, log id: 1810fd8b 2019-07-25 12:39:16,758+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.ResetIrsVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] FINISH, ResetIrsVDSCommand, log id: 2522686f 2019-07-25 12:39:16,758+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SpmStopOnIrsVDSCommand] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] FINISH, SpmStopOnIrsVDSCommand, log id: 37bf4639 2019-07-25 12:39:16,760+02 *ERROR* [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-30) [7c374384-f884-4dc9-87d0-7af27dce706b] EVENT_ID: USER_FORCE_SELECTED_SPM_STOP_FAILED(4,096), Failed to force select infn-vm07.management as the SPM due to a failure to stop the current SPM. 2019-07-25 12:39:18,660+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] Task id 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' has passed pre-polling period time and should be polled. Pre-polling period is 60000 millis. 2019-07-25 12:39:18,660+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] Task id 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' has passed pre-polling period time and should be polled. Pre-polling period is 60000 millis. 2019-07-25 12:39:18,750+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] Task id 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' has passed pre-polling period time and should be polled. Pre-polling period is 60000 millis. 2019-07-25 12:39:18,750+02 *ERROR* [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] BaseAsyncTask::logEndTaskFailure: Task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' (Parent Command 'Unknown', Parameters Type 'org.ovirt.engine.core.common.asynctasks.AsyncTaskParameters') ended with failure: 2019-07-25 12:39:18,750+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] SPMAsyncTask::ClearAsyncTask: Attempting to clear task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' 2019-07-25 12:39:18,751+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SPMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] START, SPMClearTaskVDSCommand( SPMTaskGuidBaseVDSCommandParameters:{storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7', ignoreFailoverLimit='false', taskId='fdcf4d1b-82fe-49a6-b233-323ebe568f8e'}), log id: 34ae2b2f 2019-07-25 12:39:18,752+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] START, HSMClearTaskVDSCommand(HostName = infn-vm05.management, HSMTaskGuidBaseVDSCommandParameters:{hostId='751f3e99-b95e-4c31-bc38-77f5661a0bdc', taskId='fdcf4d1b-82fe-49a6-b233-323ebe568f8e'}), log id: d3a78ad 2019-07-25 12:39:18,757+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] FINISH, HSMClearTaskVDSCommand, log id: d3a78ad 2019-07-25 12:39:18,757+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SPMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] FINISH, SPMClearTaskVDSCommand, log id: 34ae2b2f 2019-07-25 12:39:18,757+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] SPMAsyncTask::ClearAsyncTask: At time of attempt to clear task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' the response code was 'TaskStateError' and message was 'Operation is not allowed in this task state: ("can't clean in state running",)'. Task will not be cleaned 2019-07-25 12:39:18,757+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] BaseAsyncTask::onTaskEndSuccess: Task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' (Parent Command 'Unknown', Parameters Type 'org.ovirt.engine.core.common.asynctasks.AsyncTaskParameters') ended successfully. 2019-07-25 12:39:18,757+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] SPMAsyncTask::ClearAsyncTask: Attempting to clear task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' 2019-07-25 12:39:18,758+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SPMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] START, SPMClearTaskVDSCommand( SPMTaskGuidBaseVDSCommandParameters:{storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7', ignoreFailoverLimit='false', taskId='fdcf4d1b-82fe-49a6-b233-323ebe568f8e'}), log id: 42de0c2b 2019-07-25 12:39:18,759+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] START, HSMClearTaskVDSCommand(HostName = infn-vm05.management, HSMTaskGuidBaseVDSCommandParameters:{hostId='751f3e99-b95e-4c31-bc38-77f5661a0bdc', taskId='fdcf4d1b-82fe-49a6-b233-323ebe568f8e'}), log id: 4895c79c 2019-07-25 12:39:18,764+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] FINISH, HSMClearTaskVDSCommand, log id: 4895c79c 2019-07-25 12:39:18,764+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SPMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] FINISH, SPMClearTaskVDSCommand, log id: 42de0c2b 2019-07-25 12:39:18,764+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] SPMAsyncTask::ClearAsyncTask: At time of attempt to clear task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' the response code was 'TaskStateError' and message was 'Operation is not allowed in this task state: ("can't clean in state running",)'. Task will not be cleaned 2019-07-25 12:39:18,764+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] Task id 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' has passed pre-polling period time and should be polled. Pre-polling period is 60000 millis. 2019-07-25 12:39:18,764+02 INFO [org.ovirt.engine.core.bll.tasks.AsyncTaskManager] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] Cleaning zombie tasks: Clearing async task 'Unknown' that started at 'Fri May 03 14:48:50 CEST 2019' 2019-07-25 12:39:18,764+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] SPMAsyncTask::ClearAsyncTask: Attempting to clear task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' 2019-07-25 12:39:18,765+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SPMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] START, SPMClearTaskVDSCommand( SPMTaskGuidBaseVDSCommandParameters:{storagePoolId='18d57688-6ed4-43b8-bd7c-0665b55950b7', ignoreFailoverLimit='false', taskId='fdcf4d1b-82fe-49a6-b233-323ebe568f8e'}), log id: da77af2 2019-07-25 12:39:18,766+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] START, HSMClearTaskVDSCommand(HostName = infn-vm05.management, HSMTaskGuidBaseVDSCommandParameters:{hostId='751f3e99-b95e-4c31-bc38-77f5661a0bdc', taskId='fdcf4d1b-82fe-49a6-b233-323ebe568f8e'}), log id: 530694fb 2019-07-25 12:39:18,771+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] FINISH, HSMClearTaskVDSCommand, log id: 530694fb 2019-07-25 12:39:18,771+02 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SPMClearTaskVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] FINISH, SPMClearTaskVDSCommand, log id: da77af2 2019-07-25 12:39:18,771+02 INFO [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] (EE-ManagedThreadFactory-engineScheduled-Thread-67) [] SPMAsyncTask::ClearAsyncTask: At time of attempt to clear task 'fdcf4d1b-82fe-49a6-b233-323ebe568f8e' the response code was 'TaskStateError' and message was 'Operation is not allowed in this task state: ("can't clean in state running",)'. Task will not be cleaned there is some relation between this error and a task that has remained hanging, from SPM server: # vdsm-client Task getInfo taskID=fdcf4d1b-82fe-49a6-b233-323ebe568f8e { "verb": "prepareMerge", "id": "fdcf4d1b-82fe-49a6-b233-323ebe568f8e" } # vdsm-client Task getStatus taskID=fdcf4d1b-82fe-49a6-b233-323ebe568f8e { "message": "running job 1 of 1", "code": 0, "taskID": "fdcf4d1b-82fe-49a6-b233-323ebe568f8e", "taskResult": "", "taskState": "running" } How can I solve this problem ? Thanks a lot for your help !! Best Regards Enrico -- _______________________________________________________________________ Enrico Becchetti Servizio di Calcolo e Reti Istituto Nazionale di Fisica Nucleare - Sezione di Perugia Via Pascoli,c/o Dipartimento di Fisica 06123 Perugia (ITALY) Phone:+39 075 5852777 Mail: Enrico.Becchetti<at>pg.infn.it _______________________________________________________________________

5 15

Changing disk QoS causes segfault with IO-Threads enabled (oVirt 4.3.0.4-1.el7)
by jloh＠squiz.net 23 Apr '24

23 Apr '24

We recently upgraded to 4.3.0 and have found that when changing disk QoS settings on VMs whilst IO-Threads is enabled causes them to segfault and the VM to reboot. We've been able to replicate this across several VMs. VMs with IO-Threads disabled/turned off do not segfault when changing the QoS. Mar 1 11:49:06 srvXX kernel: IO iothread1[30468]: segfault at fffffffffffffff8 ip 0000557649f2bd24 sp 00007f80de832f60 error 5 in qemu-kvm[5576498dd000+a03000] Mar 1 11:49:06 srvXX abrt-hook-ccpp: invalid number 'iothread1' Mar 1 11:49:11 srvXX libvirtd: 2019-03-01 00:49:11.116+0000: 13365: error : qemuMonitorIORead:609 : Unable to read from monitor: Connection reset by peer Happy to supply some more logs to someone if they'll help but just wondering whether anyone else has experienced this or knows of a current fix other than turning io-threads off. Cheers.

4 3

Unable to install oVirt on RHEL7.5
by SS00514758＠techmahindra.com 05 Jan '24

05 Jan '24

Hi All, I am unable to install oVirt on RHEL7.5, to install it I am taking reference of below link, https://www.ovirt.org/documentation/install-guide/chap-Installing_oVirt.html But though it is not working for me, couple of dependencies is not getting installed, and because of this I am not able to run the ovirt-engine, below are the depencies packages that unable to install, Error: Package: collectd-write_http-5.8.0-6.1.el7.x86_64 (@ovirt-4.2-centos-opstools) Requires: collectd(x86-64) = 5.8.0-6.1.el7 Removing: collectd-5.8.0-6.1.el7.x86_64 (@ovirt-4.2-centos-opstools) collectd(x86-64) = 5.8.0-6.1.el7 Updated By: collectd-5.8.1-1.el7.x86_64 (epel) collectd(x86-64) = 5.8.1-1.el7 Available: collectd-5.7.2-1.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.7.2-1.el7 Available: collectd-5.7.2-3.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.7.2-3.el7 Available: collectd-5.8.0-2.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.8.0-2.el7 Available: collectd-5.8.0-3.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.8.0-3.el7 Available: collectd-5.8.0-5.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.8.0-5.el7 Help me to install this. Looking forward to resolve this issue. Regards Sumit Sahay

6 8

Re: Failed to synchronize networks of Provider ovirt-provider-ovn
by Mail SET Inc. Group 27 Oct '23

27 Oct '23

Yes, i use same manual to change WebUI SSL. ovirt-ca-file= is a same SSL file which use WebUI. Yes, i restart ovirt-provider-ovn, i restart engine, i restart all what i can restart. Nothing... > 12 сент. 2018 г., в 16:11, Dominik Holler <dholler(a)redhat.com> написал(а): > > On Wed, 12 Sep 2018 14:23:54 +0300 > "Mail SET Inc. Group" <mail(a)set-pro.net> wrote: > >> Ok! > > Not exactly, please use users(a)ovirt.org for such questions. > Other should benefit from this questions, too. > Please write the next mail to users(a)ovirt.org and keep me in CC. > >> What i did: >> >> 1) install oVirt «from box» (4.2.5.2-1.el7); >> 2) generate own ssl for my engine using my FreeIPA CA, Install it and > > What means "Install it"? You can use the doc from the following link > https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.2/ht… > > Ensure that ovirt-ca-file= in > /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf > points to the correct file and ovirt-provider-ovn is restarted. > >> get tis issue; >> >> >> [root@engine ~]# tail -n 50 /var/log/ovirt-provider-ovn.log >> 2018-09-12 14:10:23,828 root [SSL: CERTIFICATE_VERIFY_FAILED] >> certificate verify failed (_ssl.c:579) Traceback (most recent call >> last): File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", >> line 133, in _handle_request method, path_parts, content >> File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py", >> line 175, in handle_request return >> self.call_response_handler(handler, content, parameters) File >> "/usr/share/ovirt-provider-ovn/handlers/keystone.py", line 33, in >> call_response_handler return response_handler(content, parameters) >> File "/usr/share/ovirt-provider-ovn/handlers/keystone_responses.py", >> line 62, in post_tokens user_password=user_password) File >> "/usr/share/ovirt-provider-ovn/auth/plugin_facade.py", line 26, in >> create_token return auth.core.plugin.create_token(user_at_domain, >> user_password) File >> "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/plugin.py", line >> 48, in create_token timeout=self._timeout()) File >> "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line 75, >> in create_token username, password, engine_url, ca_file, timeout) >> File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line >> 91, in _get_sso_token timeout=timeout File >> "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line 54, >> in wrapper response = func(*args, **kwargs) File >> "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line 47, >> in wrapper raise BadGateway(e) BadGateway: [SSL: >> CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) >> >> >> [root@engine ~]# tail -n 20 /var/log/ovirt-engine/engine.log >> 2018-09-12 14:10:23,773+03 INFO >> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] >> (EE-ManagedThreadFactory-engineScheduled-Thread-47) [316db685] Lock >> Acquired to object >> 'EngineLock:{exclusiveLocks='[14e4fb72-9764-4757-b37d-4d487995571a=PROVIDER]', >> sharedLocks=''}' 2018-09-12 14:10:23,778+03 INFO >> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] >> (EE-ManagedThreadFactory-engineScheduled-Thread-47) [316db685] >> Running command: SyncNetworkProviderCommand internal: true. >> 2018-09-12 14:10:23,836+03 ERROR >> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] >> (EE-ManagedThreadFactory-engineScheduled-Thread-47) [316db685] >> Command >> 'org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand' >> failed: EngineException: (Failed with error Bad Gateway and code >> 5050) 2018-09-12 14:10:23,837+03 INFO >> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] >> (EE-ManagedThreadFactory-engineScheduled-Thread-47) [316db685] Lock >> freed to object >> 'EngineLock:{exclusiveLocks='[14e4fb72-9764-4757-b37d-4d487995571a=PROVIDER]', >> sharedLocks=''}' 2018-09-12 14:14:12,477+03 INFO >> [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default >> task-6) [] User admin@internal successfully logged in with scopes: >> ovirt-app-admin ovirt-app-api ovirt-app-portal >> ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all >> ovirt-ext=token-info:authz-search >> ovirt-ext=token-info:public-authz-search >> ovirt-ext=token-info:validate ovirt-ext=token:password-access >> 2018-09-12 14:14:12,587+03 INFO >> [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default >> task-6) [1bf1b763] Running command: CreateUserSessionCommand >> internal: false. 2018-09-12 14:14:12,628+03 INFO >> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >> (default task-6) [1bf1b763] EVENT_ID: USER_VDC_LOGIN(30), User >> admin@internal-authz connecting from '10.0.3.61' using session >> 's8jAm7BUJGlicthm6yZBA3CUM8QpRdtwFaK3M/IppfhB3fHFB9gmNf0cAlbl1xIhcJ2WX+ww7e71Ri+MxJSsIg==' >> logged in. 2018-09-12 14:14:30,972+03 INFO >> [org.ovirt.engine.core.bll.provider.ImportProviderCertificateCommand] >> (default task-6) [ee3cc8a7-4485-4fdf-a0c2-e9d67b5cfcd3] Running >> command: ImportProviderCertificateCommand internal: false. Entities >> affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: >> SystemAction group CREATE_STORAGE_POOL with role type ADMIN >> 2018-09-12 14:14:30,982+03 INFO >> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >> (default task-6) [ee3cc8a7-4485-4fdf-a0c2-e9d67b5cfcd3] EVENT_ID: >> PROVIDER_CERTIFICATE_IMPORTED(213), Certificate for provider >> ovirt-provider-ovn was imported. (User: admin@internal-authz) >> 2018-09-12 14:14:31,006+03 INFO >> [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] >> (default task-6) [a48d94ab-b0b2-42a2-a667-0525b4c652ea] Running >> command: TestProviderConnectivityCommand internal: false. Entities >> affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: >> SystemAction group CREATE_STORAGE_POOL with role type ADMIN >> 2018-09-12 14:14:31,058+03 ERROR >> [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] >> (default task-6) [a48d94ab-b0b2-42a2-a667-0525b4c652ea] Command >> 'org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' >> failed: EngineException: (Failed with error Bad Gateway and code >> 5050) 2018-09-12 14:15:10,954+03 INFO >> [org.ovirt.engine.core.bll.utils.ThreadPoolMonitoringService] >> (EE-ManagedThreadFactory-engineThreadMonitoring-Thread-1) [] Thread >> pool 'default' is using 0 threads out of 1, 5 threads waiting for >> tasks. 2018-09-12 14:15:10,954+03 INFO >> [org.ovirt.engine.core.bll.utils.ThreadPoolMonitoringService] >> (EE-ManagedThreadFactory-engineThreadMonitoring-Thread-1) [] Thread >> pool 'engine' is using 0 threads out of 500, 16 threads waiting for >> tasks and 0 tasks in queue. 2018-09-12 14:15:10,954+03 INFO >> [org.ovirt.engine.core.bll.utils.ThreadPoolMonitoringService] >> (EE-ManagedThreadFactory-engineThreadMonitoring-Thread-1) [] Thread >> pool 'engineScheduled' is using 0 threads out of 100, 100 threads >> waiting for tasks. 2018-09-12 14:15:10,954+03 INFO >> [org.ovirt.engine.core.bll.utils.ThreadPoolMonitoringService] >> (EE-ManagedThreadFactory-engineThreadMonitoring-Thread-1) [] Thread >> pool 'engineThreadMonitoring' is using 1 threads out of 1, 0 threads >> waiting for tasks. 2018-09-12 14:15:10,954+03 INFO >> [org.ovirt.engine.core.bll.utils.ThreadPoolMonitoringService] >> (EE-ManagedThreadFactory-engineThreadMonitoring-Thread-1) [] Thread >> pool 'hostUpdatesChecker' is using 0 threads out of 5, 2 threads >> waiting for tasks. 2018-09-12 14:15:23,843+03 INFO >> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] >> (EE-ManagedThreadFactory-engineScheduled-Thread-61) [2455041f] Lock >> Acquired to object >> 'EngineLock:{exclusiveLocks='[14e4fb72-9764-4757-b37d-4d487995571a=PROVIDER]', >> sharedLocks=''}' 2018-09-12 14:15:23,849+03 INFO >> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] >> (EE-ManagedThreadFactory-engineScheduled-Thread-61) [2455041f] >> Running command: SyncNetworkProviderCommand internal: true. >> 2018-09-12 14:15:23,900+03 ERROR >> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] >> (EE-ManagedThreadFactory-engineScheduled-Thread-61) [2455041f] >> Command >> 'org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand' >> failed: EngineException: (Failed with error Bad Gateway and code >> 5050) 2018-09-12 14:15:23,901+03 INFO >> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] >> (EE-ManagedThreadFactory-engineScheduled-Thread-61) [2455041f] Lock >> freed to object >> 'EngineLock:{exclusiveLocks='[14e4fb72-9764-4757-b37d-4d487995571a=PROVIDER]', >> sharedLocks=''}' >> >> >> [root@engine ~]# >> cat /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf # >> This file is automatically generated by engine-setup. Please do not >> edit manually [OVN REMOTE] ovn-remote=ssl:127.0.0.1:6641 >> [SSL] >> https-enabled=true >> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem >> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer >> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass >> [OVIRT] >> ovirt-sso-client-secret=Ms7Gw9qNT6IkXu7oA54tDmxaZDIukABV >> ovirt-host=https://engine.set.local:443 >> ovirt-sso-client-id=ovirt-provider-ovn >> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem >> [PROVIDER] >> provider-host=engine.set.local >> >> >>> 12 сент. 2018 г., в 13:59, Dominik Holler <dholler(a)redhat.com> >>> написал(а): >>> >>> On Wed, 12 Sep 2018 13:04:53 +0300 >>> "Mail SET Inc. Group" <mail(a)set-pro.net> wrote: >>> >>>> Hello Dominik! >>>> I have a same issue with OVN provider and SSL >>>> https://www.mail-archive.com/users@ovirt.org/msg47020.html >>>> <https://www.mail-archive.com/users@ovirt.org/msg47020.html> But >>>> certificate changes not helps to resolve it. Maybe you can help me >>>> with this? >>> >>> Sure. Can you please share the relevant lines of >>> ovirt-provider-ovn.log and engine.log, and the information if you >>> are using the certificates generated by engine-setup with >>> users(a)ovirt.org ? Thanks, >>> Dominik >>> >> > >

5 13

engine-setup failing on 4.3.2 -> 4.3.3 fails during Engine schema refresh fail
by Edward Berger 18 Jul '23

18 Jul '23

I was trying to upgrade a hyperconverged oVirt hosted engine and failed in the engine-setup command with these error and warnings. ... [ INFO ] Creating/refreshing Engine database schema [ ERROR ] schema.sh: FATAL: Cannot execute sql command: --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_03_0830_add_foreign_key_to_image_transfers.sql [ ERROR ] Failed to execute stage 'Misc configuration': Engine schema refresh failed ... [ INFO ] Yum Verify: 16/16: ovirt-engine-tools.noarch 0:4.3.3.5-1.el7 - e [WARNING] Rollback of DWH database postponed to Stage "Clean up" [ INFO ] Rolling back database schema ... [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed Attaching engine-setup logfile.

4 6

oVirt host deploy: disable multipath
by femi adegoke 27 Mar '23

27 Mar '23

https://bugzilla.redhat.com/show_bug.cgi?id=1472356 There are 2 drives in my install that oVirt is claiming as multipath. I have tried blacklisting at /etc/multipath/ but that hasn't worked. Any better solutions? I need these 2 drives to be non-multipathed.

4 19

Out-of-sync networks can only be detached
by Sakhi Hadebe 27 Feb '23

27 Feb '23

Hi, I have a 3-node oVirt cluster. I have configured 2 logical networks: ovirtmgmt and public. Public logical network is attached in only 2 nodes and failing to attach on the 3rd node with the below error Invalid operation, out-of-sync network 'public' can only be detached. Please have been stuck on this for almost the whole day now. How do I fix this error? -- Regards, Sakhi Hadebe

3 5

Network Address Change
by Paul.LKW 28 Dec '22

28 Dec '22

Hi All: I just has a case, I need to change the oVirt host and engine IP address due to data center decommission I checked in the hosted-engine host there are some files I could change ; in ovirt-hosted-engine/hosted-engine.conf ca_subject="O=simple.com, CN=1.2.3.4" gateway=1.2.3.254 and of course I need to change the ovirtmgmt interface IP too, I think just change the above line could do the tick, but where could I change the other host IP in the cluster ? I think I have to be lost all the host as once changed the hosted-engine host IP as it is in diff. sub net. Does there any command line tools could do that or someone has such experience could share? Best Regards, Paul.LKW

4 6

looking for some ISV backup software which integrates the backup API
by Nathanaël Blanchet 08 Jun '22

08 Jun '22

Hello, We are about to change our backup provider, and I find it is a great chance to choose a full supported ovirt backup solution. I currently use this python script vm-backup-scheduler (https://github.com/wefixit-AT/oVirtBackup) but it is not the workflow officially suggested by the community (https://www.ovirt.org/develop/release-management/features/storage/backup-re…) I've been looking for a long time an ISV who supports such an API, but the only one I found is this one : Acronis Backup Advanced suggested here https://access.redhat.com/ecosystem/search/#/ecosystem/Red%20Hat%20Enterpri… I ran the trial version, but it doesn't seem to do better than the vm-backup-scheduler script, and it doesn't seem to use the backup API (attach a clone as a disk to an existing vm). Can you suggest me some other ISV solutions, if they ever exist... or share me your backup experience?

5 4

OVS switch type for hosted-engine
by Devin A. Bougie 06 May '22

06 May '22

Is it possible to setup a hosted engine using the OVS switch type instead of Legacy? If it's not possible to start out as OVS, instructions for switching from Legacy to OVS after the fact would be greatly appreciated. Many thanks, Devin

4 5

USB3 redirection
by Rik Theys 19 Apr '22

19 Apr '22

Hi, I'm trying to assign a USB3 controller to a CentOS 7.4 VM in oVirt 4.1 with USB redirection enabled. I've created the following file in /etc/ovirt-engine/osinfo.conf.d: 01-usb.properties with content os.other.devices.usb.controller.value = nec-xhci and have restarted ovirt-engine. If I disable USB-support in the web interface for the VM, the xhci controller is added to the VM (I can see it in the qemu-kvm commandline), but usb redirection is not available. If I enable USB-support in the UI, no xhci controller is added (only 4 uhci controllers). Is there a way to make the controllers for usb redirection xhci controllers? Regards, Rik -- Rik Theys System Engineer KU Leuven - Dept. Elektrotechniek (ESAT) Kasteelpark Arenberg 10 bus 2440 - B-3001 Leuven-Heverlee +32(0)16/32.11.07 ---------------------------------------------------------------- <<Any errors in spelling, tact or fact are transmission errors>>

3 5

OVN routing and firewalling in oVirt
by Gianluca Cecchi 19 Apr '22

19 Apr '22

Hello, how do we manage routing between different OVN networks in oVirt? And between OVN networks and physical ones? Based on architecture read here: http://openvswitch.org/support/dist-docs/ovn-architecture.7.html I see terms for logical routers and gateway routers respectively but how to apply to oVirt configuration? Do I have to choose between setting up a specialized VM or a physical one: is it applicable/advisable to put on oVirt host itself the gateway functionality? Is there any security policy (like security groups in Openstack) to implement? Thanks, Gianluca

4 6

Install hosted-engine - Task Get local VM IP failed
by florentl 10 Mar '22

10 Mar '22

Hi all, I try to install hosted-engine on node : ovirt-node-ng-4.2.3-0.20180518. Every times I get stuck on : [ ERROR ] fatal: [localhost]: FAILED! => {"attempts": 50, "changed": true, "cmd": "virsh -r net-dhcp-leases default | grep -i 00:16:3e:6c:5a:91 | awk '{ print $5 }' | cut -f1 -d'/'", "delta": "0:00:00.108872", "end": "2018-06-01 11:17:34.421769", "rc": 0, "start": "2018-06-01 11:17:34.312897", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []} I tried with static IP Address and with DHCP but both failed. To be more specific, I installed three nodes, deployed glusterfs with the wizard. I'm in a nested virtualization environment for this lab (Vmware Esxi Hypervisor). My node IP is : 192.168.176.40 / and I want the hosted-engine vm has 192.168.176.43. Thanks, Florent

7 17

Host needs to be reinstalled after configuring power management
by Andrew DeMaria 02 Feb '22

02 Feb '22

Hi, I am running ovirt 4.3 and have found the following action item immediately after configuring power management for a host: Host needs to be reinstalled as important configuration changes were applied on it. The thing is - I've just freshly installed this host and it seems strange that I need to reinstall it. Is there a better way to install a host and configure power management without having to reinstall it after? Thanks, Andrew

4 3

Import an exported VM using Ansible
by paolo＠airaldi.it 25 Jan '22

25 Jan '22

Hello everybody! I'm trying to automate a copy of a VM from one Datacenter to another using an Ansible.playbook. I'm able to: - Create a snapshot of the source VM - create a clone from the snapshot - remove the snapshot - attach an Export Domain - export the clone to the Export Domain - remove the clone - detach the Export domain from the source Datacenter and attach to the destination. Unfortunately I cannot find a module to: - import the VM from the Export Domain - delete the VM image from the Export Domain. Any hint on how to do that? Thanks in advance. Cheers. Paolo PS: if someone is interested I can share the playbook.

4 3

Lots of storage.MailBox.SpmMailMonitor
by Fabrice Bacchella 06 Jan '22

06 Jan '22

My vdsm log files are huge: -rw-r--r-- 1 vdsm kvm 1.8G Nov 22 11:32 vdsm.log And this is juste half an hour of logs: $ head -1 vdsm.log 2018-11-22 11:01:12,132+0100 ERROR (mailbox-spm) [storage.MailBox.SpmMailMonitor] mailbox 2 checksum failed, not clearing mailbox, clearing new mail (data='...lots of data', expected='\xa4\x06\x08\x00') (mailbox:612) I just upgraded vdsm: $ rpm -qi vdsm Name : vdsm Version : 4.20.43

3 5

Template for Ubuntu 18.04 Server Issues
by jeremy_tourville＠hotmail.com 02 Sep '21

02 Sep '21

I have built a system as a template on oVirt. Specifically, Ubuntu 18.04 server. I am noticing an issue when creating new vms from that template. I used the check box for "seal template" when creating the template. When I create a new Ubuntu VM I am getting duplicate IP addresses for all the machines created from the template. It seems like the checkbox doesn't fully function as intended. I would need to do further manual steps to clear up this issue. Has anyone else noticed this behavior? Is this expected or have I missed something? Thanks for your input!

6 7

Libgfapi considerations
by Jayme 01 Jul '21

01 Jul '21

Are there currently any known issues with using libgfapi in the latest stable version of ovirt in hci deployments? I have recently enabled it and have noticed a significant (over 4x) increase in io performance on my vms. I’m concerned however since it does not seem to be an ovirt default setting. Is libgfapi considered safe and stable to use in ovirt 4.3 hci?

9 16

poweroff and reboot with ovirt_vm ansible module
by Nathanaël Blanchet 18 May '21

18 May '21

Hello, is there a way to poweroff or reboot (without stopped and running state) a vm with the ovirt_vm ansible module? -- Nathanaël Blanchet Supervision réseau Pôle Infrastrutures Informatiques 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

7 11

supervdsm failing during network_caps
by Alan G 24 Mar '21

24 Mar '21

Hi, I have issues with one host where supervdsm is failing in network_caps. I see the following trace in the log. MainProcess|jsonrpc/1::ERROR::2020-01-06 03:01:05,558::supervdsm_server::100::SuperVdsm.ServerCallback::(wrapper) Error in network_caps Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/supervdsm_server.py", line 98, in wrapper res = func(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/network/api.py", line 56, in network_caps return netswitch.configurator.netcaps(compatibility=30600) File "/usr/lib/python2.7/site-packages/vdsm/network/netswitch/configurator.py", line 317, in netcaps net_caps = netinfo(compatibility=compatibility) File "/usr/lib/python2.7/site-packages/vdsm/network/netswitch/configurator.py", line 325, in netinfo _netinfo = netinfo_get(vdsmnets, compatibility) File "/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py", line 150, in get return _stringify_mtus(_get(vdsmnets)) File "/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py", line 59, in _get ipaddrs = getIpAddrs() File "/usr/lib/python2.7/site-packages/vdsm/network/netinfo/addresses.py", line 72, in getIpAddrs for addr in nl_addr.iter_addrs(): File "/usr/lib/python2.7/site-packages/vdsm/network/netlink/addr.py", line 33, in iter_addrs with _nl_addr_cache(sock) as addr_cache: File "/usr/lib64/python2.7/contextlib.py", line 17, in __enter__ return self.gen.next() File "/usr/lib/python2.7/site-packages/vdsm/network/netlink/__init__.py", line 92, in _cache_manager cache = cache_allocator(sock) File "/usr/lib/python2.7/site-packages/vdsm/network/netlink/libnl.py", line 469, in rtnl_addr_alloc_cache raise IOError(-err, nl_geterror(err)) IOError: [Errno 16] Message sequence number mismatch A restart of supervdsm will resolve the issue for a period, maybe 24 hours, then it will occur again. So I'm thinking it's resource exhaustion or a leak of some kind? Running 4.2.8.2 with VDSM at 4.20.46. I've had a look through the bugzilla and can't find an exact match, closest was this one https://bugzilla.redhat.com/show_bug.cgi?id=1666123 which seems to be a RHV only fix. Thanks, Alan

2 3

OVN and change of mgmt network
by Gianluca Cecchi 26 Jan '21

26 Jan '21

Hello, I previously had OVN running on engine (as OVN provider with northd and northbound and southbound DBs) and hosts (with OVN controller). After changing mgmt ip of hosts (engine has retained instead the same ip), I executed again on them the command: vdsm-tool ovn-config <ip_of_engine> <nel_local_ip_of_host> Now I think I have to clean up some things, eg: 1) On engine where I get these lines below systemctl status ovn-northd.service -l . . . Sep 29 14:41:42 ovmgr1 ovsdb-server[940]: ovs|00005|reconnect|ERR|tcp: 10.4.167.40:37272: no response to inactivity probe after 5 seconds, disconnecting Oct 03 11:52:00 ovmgr1 ovsdb-server[940]: ovs|00006|reconnect|ERR|tcp: 10.4.167.41:52078: no response to inactivity probe after 5 seconds, disconnecting The two IPs are the old ones of two hosts It seems that a restart of the services has fixed... Can anyone confirm if I have to do anything else? 2) On hosts (there are 3 hosts with OVN on ip 10.4.192.32/33/34) where I currently have this output [root@ov301 ~]# ovs-vsctl show 3a38c5bb-0abf-493d-a2e6-345af8aedfe3 Bridge br-int fail_mode: secure Port "ovn-1dce5b-0" Interface "ovn-1dce5b-0" type: geneve options: {csum="true", key=flow, remote_ip="10.4.192.32"} Port "ovn-ddecf0-0" Interface "ovn-ddecf0-0" type: geneve options: {csum="true", key=flow, remote_ip="10.4.192.33"} Port "ovn-fd413b-0" Interface "ovn-fd413b-0" type: geneve options: {csum="true", key=flow, remote_ip="10.4.168.74"} Port br-int Interface br-int type: internal ovs_version: "2.7.2" [root@ov301 ~]# The IPs of kind 10.4.192.x are ok. But there is a left-over of an old host I initially used for tests, corresponding to 10.4.168.74, that now doesn't exist anymore How can I clean records for 1) and 2)? Thanks, Gianluca

3 4

encrypted GENEVE traffic
by Pavel Nakonechnyi 18 Jan '21

18 Jan '21

Dear oVirt Community, From my understanding oVirt does not support Open vSwitch IPSEC tunneling for GENEVE traffic (which is described on pages http://docs.openvswitch.org/en/latest/howto/ipsec/ and http://docs.openvswitch.org/en/latest/tutorials/ipsec/) Are there plans to introduce such support? (or explicitly not to..) Is it possible to somehow manually configure such tunneling for existing virtual networks? (even in a limited way) Alternatively, is it possible to deploy oVirt on top of the tunneled (i.e. via VXLAN, IPSec) interfaces? This will allow to encrypt all management traffic. Such requirement arises when using oVirt deployment on third-party premises with untrusted network. Thank in advance for any clarifications. :) -- WBR, Pavel +32478910884

2 7

Can't import some VMs after storage domain detach and reattach to new datacenter.
by m black 10 Dec '20

10 Dec '20

7 14

"gluster-ansible-roles is not installed on Host" error on Cockpit
by Hesham Ahmed 26 Nov '20

26 Nov '20

On a new 4.3.1 oVirt Node installation, when trying to deploy HCI (also when trying adding a new gluster volume to existing clusters) using Cockpit, an error is displayed "gluster-ansible-roles is not installed on Host. To continue deployment, please install gluster-ansible-roles on Host and try again". There is no package named gluster-ansible-roles in the repositories: [root@localhost ~]# yum install gluster-ansible-roles Loaded plugins: enabled_repos_upload, fastestmirror, imgbased-persist, package_upload, product-id, search-disabled-repos, subscription-manager, vdsmupgrade This system is not registered with an entitlement server. You can use subscription-manager to register. Loading mirror speeds from cached hostfile * ovirt-4.3-epel: mirror.horizon.vn No package gluster-ansible-roles available. Error: Nothing to do Uploading Enabled Repositories Report Cannot upload enabled repos report, is this client registered? This is due to check introduced here: https://gerrit.ovirt.org/#/c/98023/1/dashboard/src/helpers/AnsibleUtil.js Changing the line from: [ "rpm", "-qa", "gluster-ansible-roles" ], { "superuser":"require" } to [ "rpm", "-qa", "gluster-ansible" ], { "superuser":"require" } resolves the issue. The above code snippet is installed at /usr/share/cockpit/ovirt-dashboard/app.js on oVirt node and can be patched by running "sed -i 's/gluster-ansible-roles/gluster-ansible/g' /usr/share/cockpit/ovirt-dashboard/app.js && systemctl restart cockpit"

2 1

Error exporting into ova
by Gianluca Cecchi 31 Aug '20

31 Aug '20

Hello, I'm playing with export_vm_as_ova.py downloaded from the examples github: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/export_v… My environment is oVirt 4.3.3.7 with iSCSI storage domain. It fails leaving an ova.tmp file In webadmin gui: Starting to export Vm enginecopy1 as a Virtual Appliance 7/19/1911:55:12 AM VDSM ov301 command TeardownImageVDS failed: Cannot deactivate Logical Volume: ('General Storage Exception: ("5 [] [\' Logical volume fa33df49-b09d-4f86-9719-ede649542c21/0420ef47-0ad0-4cf9-babd-d89383f7536b in use.\']\\nfa33df49-b09d-4f86-9719-ede649542c21/[\'a7480dc5-b5ca-4cb3-986d-77bc12165be4\', \'0420ef47-0ad0-4cf9-babd-d89383f7536b\']",)',) 7/19/1912:25:36 PM Failed to export Vm enginecopy1 as a Virtual Appliance to path /save_ova/base/dump/myvm2.ova on Host ov301 7/19/1912:25:37 PM During export I have this qemu-img process creating the disk over the loop device: root 30878 30871 0 11:55 pts/2 00:00:00 su -p -c qemu-img convert -T none -O qcow2 '/rhev/data-center/mnt/blockSD/fa33df49-b09d-4f86-9719-ede649542c21/images/59a4a324-4c99-4ff5-abb1-e9bbac83292a/0420ef47-0ad0-4cf9-babd-d89383f7536b' '/dev/loop1' vdsm vdsm 30882 30878 10 11:55 ? 00:00:00 qemu-img convert -T none -O qcow2 /rhev/data-center/mnt/blockSD/fa33df49-b09d-4f86-9719-ede649542c21/images/59a4a324-4c99-4ff5-abb1-e9bbac83292a/0420ef47-0ad0-4cf9-babd-d89383f7536b /dev/loop1 The ova.tmp file is getting filled while command runs eg: [root@ov301 ]# du -sh /save_ova/base/dump/myvm2.ova.tmp 416M /save_ova/base/dump/myvm2.ova.tmp [root@ov301 sysctl.d]# [root@ov301 sysctl.d]# du -sh /save_ova/base/dump/myvm2.ova.tmp 911M /save_ova/base/dump/myvm2.ova.tmp [root@ov301 ]# and the final generated / not completed file is in this state: [root@ov301 ]# qemu-img info /save_ova/base/dump/myvm2.ova.tmp image: /save_ova/base/dump/myvm2.ova.tmp file format: raw virtual size: 30G (32217446400 bytes) disk size: 30G [root@ov301 sysctl.d]# But I notice that the timestamp of the file is about 67 minutes after start of job and well after the notice of its failure.... [root@ov301 sysctl.d]# ll /save_ova/base/dump/ total 30963632 -rw-------. 1 root root 32217446400 Jul 19 13:02 myvm2.ova.tmp [root@ov301 sysctl.d]# [root@ov301 sysctl.d]# du -sh /save_ova/base/dump/myvm2.ova.tmp 30G /save_ova/base/dump/myvm2.ova.tmp [root@ov301 sysctl.d]# In engine.log the first error I see is 30 minutes after start 2019-07-19 12:25:31,563+02 ERROR [org.ovirt.engine.core.common.utils.ansible.AnsibleExecutor] (EE-ManagedThreadFactory-engineScheduled-Thread-64) [2001ddf4] Ansible playbook execution failed: Timeout occurred while executing Ansible playbook. 2019-07-19 12:25:31,563+02 INFO [org.ovirt.engine.core.common.utils.ansible.AnsibleExecutor] (EE-ManagedThreadFactory-engineScheduled-Thread-64) [2001ddf4] Ansible playbook command has exited with value: 1 2019-07-19 12:25:31,564+02 ERROR [org.ovirt.engine.core.bll.CreateOvaCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-64) [2001ddf4] Failed to create OVA. Please check logs for more details: /var/log/ovirt-engine/ova/ovirt-export-ova-ansible-20190719115531-ov301-2001ddf4.log 2019-07-19 12:25:31,565+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.TeardownImageVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-64) [2001ddf4] START, TeardownImageVDSCommand(HostName = ov301, ImageActionsVDSCommandParameters:{hostId='8ef1ce6f-4e38-486c-b3a4-58235f1f1d06'}), log id: 3d2246f7 2019-07-19 12:25:36,569+02 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-64) [2001ddf4] EVENT_ID: VDS_BROKER_COMMAND_FAILURE(10,802), VDSM ov301 command TeardownImageVDS failed: Cannot deactivate Logical Volume: ('General Storage Exception: ("5 [] [\' Logical volume fa33df49-b09d-4f86-9719-ede649542c21/0420ef47-0ad0-4cf9-babd-d89383f7536b in use.\']\\nfa33df49-b09d-4f86-9719-ede649542c21/[\'a7480dc5-b5ca-4cb3-986d-77bc12165be4\', \'0420ef47-0ad0-4cf9-babd-d89383f7536b\']",)',) In ansible playbook suggested log file I don't see anything useful. It ends with timestamps when the script has been launched. Last lines are: 2019-07-19 11:55:33,877 p=5699 u=ovirt | TASK [ovirt-ova-export-pre-pack : Retrieving the temporary path for the OVA file] *** 2019-07-19 11:55:34,198 p=5699 u=ovirt | changed: [ov301] => { "changed": true, "dest": "/save_ova/base/dump/myvm2.ova.tmp", "gid": 0, "group": "root", "mode": "0600", "owner": "root", "secontext": "system_u:object_r:nfs_t:s0", "size": 32217446912, "state": "file", "uid": 0 } 2019-07-19 11:55:34,204 p=5699 u=ovirt | TASK [ovirt-ova-pack : Run packing script] ************************************* It seems 30 minutes... for timeout? About what, ansible job? Or possibly implicit user session created when running the python script? The snapshot has been correctly deleted (as I see also in engine.log), I don't see it in webadmin gui. Any known problem? Just for test I executed again at 14:24 and I see same Ansible error at 14:54 The snapshot gets deleted, while the qemu-img command still continues.... [root@ov301 sysctl.d]# ps -ef | grep qemu-img root 13504 13501 0 14:24 pts/1 00:00:00 su -p -c qemu-img convert -T none -O qcow2 '/rhev/data-center/mnt/blockSD/fa33df49-b09d-4f86-9719-ede649542c21/images/59a4a324-4c99-4ff5-abb1-e9bbac83292a/0420ef47-0ad0-4cf9-babd-d89383f7536b' '/dev/loop0' vdsm vdsm 13505 13504 3 14:24 ? 00:01:26 qemu-img convert -T none -O qcow2 /rhev/data-center/mnt/blockSD/fa33df49-b09d-4f86-9719-ede649542c21/images/59a4a324-4c99-4ff5-abb1-e9bbac83292a/0420ef47-0ad0-4cf9-babd-d89383f7536b /dev/loop0 root 17587 24530 0 15:05 pts/0 00:00:00 grep --color=auto qemu-img [root@ov301 sysctl.d]# [root@ov301 sysctl.d]# du -sh /save_ova/base/dump/myvm2.ova.tmp 24G /save_ova/base/dump/myvm2.ova.tmp [root@ov301 sysctl.d]# ll /save_ova/base/dump/myvm2.ova.tmp -rw-------. 1 root root 32217446400 Jul 19 15:14 /save_ova/base/dump/myvm2.ova.tmp [root@ov301 sysctl.d]# and then continues until image copy completes, but at this time the job has already aborted and so the completion of the ova composition doesn't go ahead... and I remain with the ova.tmp file... How to extend timeout? Thanks in advance, Gianluca

4 11

deprecating export domain?
by Charles Kozler 30 Aug '20

30 Aug '20

Hello, I recently read on this list from a redhat member that export domain is either being deprecated or looking at being deprecated To that end, can you share details? Can you share any notes/postings/bz's that document this? I would imagine something like this would be discussed in larger audience This seems like a somewhat significant change to make and I am curious where this is scheduled? Currently, a lot of my backups rely explicitly on an export domain for online snapshots, so I'd like to plan accordingly Thanks!

11 21

Support for Shared SAS storage
by Vinícius Ferrão 13 Aug '20

13 Aug '20

Hello, I’ve two compute nodes with SAS Direct Attached sharing the same disks. Looking at the supported types I can’t see this on the documentation: https://www.ovirt.org/documentation/admin-guide/chap-Storage.html There’s is local storage on this documentation, but my case is two machines, both using SAS, connected to the same machines. It’s the VRTX hardware from Dell. Is there any support for this? It should be just like Fibre Channel and iSCSI, but with SAS instead. Thanks,

7 11

oVirt thrashes Docker network during installation
by thomas＠hoberg.net 30 Jul '20

30 Jul '20

I want to run containers and VMs side by side and not necessarily nested. The main reason for that is GPUs, Voltas mostly, used for CUDA machine learning not for VDI, which is what most of the VM orchestrators like oVirt or vSphere seem to focus on. And CUDA drivers are notorious for refusing to work under KVM unless you pay $esla. oVirt is more of a side show in my environment, used to run some smaller functional VMs alongside bigger containers, but also in order to consolidate and re-distribute the local compute node storage as a Gluster storage pool: Kibbutz storage and compute, if you want, very much how I understand the HCI philosophy behind oVirt. The full integration of containers and VMs is still very much on the roadmap I believe, but I was surprised to see that even co-existence seems to be a problem currently. So I set-up a 3-node HCI on CentOS7 (GPU-less and older) hosts and then added additional (beefier GPGPU) CentOS7 hosts, that have been running CUDA workloads on the latest Docker-CE v19 something. The installation works fine, I can migrate VMs to these extra hosts etc., but to my dismay Docker containers on these hosts lose access to the local network, that is the entire subnet the host is in. For some strange reason I can still ping Internet hosts, perhaps even everything behind the host's gateway, but local connections are blocked. It would seem that the ovritmgmt network that the oVirt installation puts in breaks the docker0 bridge that Docker put there first. I'd consider that a bug, but I'd like to gather some feedback first, if anyone else has run into this problem. I've repeated this several times in completely distinct environments with the same results: Simply add a host with a working Docker-CE as an oVirt host to an existing DC/cluster and then try if you can still ping anyone on that net, including the Docker host from a busybox container afterwards (should try that ping just before you actually add it). No, I didn't try this with podman yet, because that's separate challenge with CUDA: Would love to know if that is part of QA for oVirt already.

5 9

Shutdown procedure for single host HCI Gluster
by Gianluca Cecchi 25 Jul '20

25 Jul '20

Hello, I'm testing the single node HCI with ovirt-node-ng 4.3.9 iso. Very nice and many improvements over the last time I tried it. Good! I have a doubt related to shutdown procedure of the server. Here below my steps: - Shutdown all VMs (except engine) - Put into maintenance data and vmstore domains - Enable Global HA Maintenance - Shutdown engine - Shutdown hypervisor It seems that the last step doesn't end and I had to brutally power off the hypervisor. Here the screenshot regarding infinite failure in unmounting /gluster_bricks/engine https://drive.google.com/file/d/1ee0HG21XmYVA0t7LYo5hcFx1iLxZdZ-E/view?usp=… What would be the right step to do before the final shutdown of hypervisor? Thanks, Gianluca

3 10

Upgrade ovirt from 3.4 to 4.3
by lu.alfonsi＠almaviva.it 19 Jun '20

19 Jun '20

Good morning, i have a difficult enviroment with 20 Hypervisors based on ovirt 3.4.3-1 and i would like to reach the 4.3 version. Which are the best steps to achieve these objective? Thanks in advance Luigi

3 10

Re: Single instance scaleup.
by Strahil 05 Jun '20

05 Jun '20

Hi Leo, As you do not have a distributed volume , you can easily switch to replica 2 arbiter 1 or replica 3 volumes. You can use the following for adding the bricks: https://access.redhat.com/documentation/en-US/Red_Hat_Storage/2.1/html/Admi… Best Regards, Strahil NikolivOn May 26, 2019 10:54, Leo David <leoalex(a)gmail.com> wrote: > > Hi Stahil, > Thank you so much for yout input ! > > gluster volume info > > > Volume Name: engine > Type: Distribute > Volume ID: d7449fc2-cc35-4f80-a776-68e4a3dbd7e1 > Status: Started > Snapshot Count: 0 > Number of Bricks: 1 > Transport-type: tcp > Bricks: > Brick1: 192.168.80.191:/gluster_bricks/engine/engine > Options Reconfigured: > nfs.disable: on > transport.address-family: inet > storage.owner-uid: 36 > storage.owner-gid: 36 > features.shard: on > performance.low-prio-threads: 32 > performance.strict-o-direct: off > network.remote-dio: off > network.ping-timeout: 30 > user.cifs: off > performance.quick-read: off > performance.read-ahead: off > performance.io-cache: off > cluster.eager-lock: enable > Volume Name: ssd-samsung > Type: Distribute > Volume ID: 76576cc6-220b-4651-952d-99846178a19e > Status: Started > Snapshot Count: 0 > Number of Bricks: 1 > Transport-type: tcp > Bricks: > Brick1: 192.168.80.191:/gluster_bricks/sdc/data > Options Reconfigured: > cluster.eager-lock: enable > performance.io-cache: off > performance.read-ahead: off > performance.quick-read: off > user.cifs: off > network.ping-timeout: 30 > network.remote-dio: off > performance.strict-o-direct: on > performance.low-prio-threads: 32 > features.shard: on > storage.owner-gid: 36 > storage.owner-uid: 36 > transport.address-family: inet > nfs.disable: on > > The other two hosts will be 192.168.80.192/193 - this is gluster dedicated network over 10GB sfp+ switch. > - host 2 wil have identical harware configuration with host 1 ( each disk is actually a raid0 array ) > - host 3 has: > - 1 ssd for OS > - 1 ssd - for adding to engine volume in a full replica 3 > - 2 ssd's in a raid 1 array to be added as arbiter for the data volume ( ssd-samsung ) > So the plan is to have "engine" scaled in a full replica 3, and "ssd-samsung" scalled in a replica 3 arbitrated. > > > > > On Sun, May 26, 2019 at 10:34 AM Strahil <hunter86_bg(a)yahoo.com> wrote: >> >> Hi Leo, >> >> Gluster is quite smart, but in order to provide any hints , can you provide output of 'gluster volume info <glustervol>'. >> If you have 2 more systems , keep in mind that it is best to mirror the storage on the second replica (2 disks on 1 machine -> 2 disks on the new machine), while for the arbiter this is not neccessary. >> >> What is your network and NICs ? Based on my experience , I can recommend at least 10 gbit/s interfase(s). >> >> Best Regards, >> Strahil Nikolov >> >> On May 26, 2019 07:52, Leo David <leoalex(a)gmail.com> wrote: >>> >>> Hello Everyone, >>> Can someone help me to clarify this ? >>> I have a single-node 4.2.8 installation ( only two gluster storage domains - distributed single drive volumes ). Now I just got two identintical servers and I would like to go for a 3 nodes bundle. >>> Is it possible ( after joining the new nodes to the cluster ) to expand the existing volumes across the new nodes and change them to replica 3 arbitrated ? >>> If so, could you share with me what would it be the procedure ? >>> Thank you very much ! >>> >>> Leo > > > > -- > Best regards, Leo David

4 5

Failed to add storage domain
by thunderlight1＠gmail.com 31 May '20

31 May '20

Hi! I have installed oVirt using the iso ovirt-node-ng-installer-4.3.2-2019031908.el7. I the did run the Host-engine deployment through Cockpit. I got an error when it tries to create the domain storage. It sucessfully mounted the NFS-share on the host. Bellow is the error I got: 2019-04-14 10:40:38,967+0200 INFO ansible skipped {'status': 'SKIPPED', 'ansible_task': u'Check storage domain free space', 'ansible_host': u'localhost', 'ansible_playbook': u'/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml', 'ansible_type': 'task'} 2019-04-14 10:40:38,967+0200 DEBUG ansible on_any args <ansible.executor.task_result.TaskResult object at 0x7fb6918ad9d0> kwargs 2019-04-14 10:40:39,516+0200 INFO ansible task start {'status': 'OK', 'ansible_task': u'ovirt.hosted_engine_setup : Activate storage domain', 'ansible_playbook': u'/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml', 'ansible_type': 'task'} 2019-04-14 10:40:39,516+0200 DEBUG ansible on_any args TASK: ovirt.hosted_engine_setup : Activate storage domain kwargs is_conditional:False 2019-04-14 10:40:41,923+0200 DEBUG var changed: host "localhost" var "otopi_storage_domain_details" type "<type 'dict'>" value: "{ "changed": false, "exception": "Traceback (most recent call last):\n File \"/tmp/ansible_ovirt_storage_domain_payload_xSFxOp/__main__.py\", line 664, in main\n storage_domains_module.post_create_check(sd_id)\n File \"/tmp/ansible_ovirt_storage_domain_payload_xSFxOp/__main__.py\", line 526, in post_create_check\n id=storage_domain.id,\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/services.py\", line 3053, in add\n return self._internal_add(storage_domain, headers, query, wait)\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/service.py\", line 232, in _internal_add\n return future.wait() if wait else future\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/service.py\", line 55, in wait\n return self._code(response)\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/service.py\", line 229, in callback\n self._check_fault(response)\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/service.py\", line 132, in _check_fault\n self._raise_error(response , body)\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/service.py\", line 118, in _raise_error\n raise error\nError: Fault reason is \"Operation Failed\". Fault detail is \"[]\". HTTP response code is 400.\n", "failed": true, "msg": "Fault reason is \"Operation Failed\". Fault detail is \"[]\". HTTP response code is 400." }" 2019-04-14 10:40:41,924+0200 DEBUG var changed: host "localhost" var "ansible_play_hosts" type "<type 'list'>" value: "[]" 2019-04-14 10:40:41,924+0200 DEBUG var changed: host "localhost" var "play_hosts" type "<type 'list'>" value: "[]" 2019-04-14 10:40:41,924+0200 DEBUG var changed: host "localhost" var "ansible_play_batch" type "<type 'list'>" value: "[]" 2019-04-14 10:40:41,924+0200 ERROR ansible failed {'status': 'FAILED', 'ansible_type': 'task', 'ansible_task': u'Activate storage domain', 'ansible_result': u'type: <type \'dict\'>\nstr: {\'_ansible_parsed\': True, u\'exception\': u\'Traceback (most recent call last):\\n File "/tmp/ansible_ovirt_storage_domain_payload_xSFxOp/__main__.py", line 664, in main\\n storage_domains_module.post_create_check(sd_id)\\n File "/tmp/ansible_ovirt_storage_domain_payload_xSFxOp/__main__.py", line 526', 'task_duration': 2, 'ansible_host': u'localhost', 'ansible_playbook': u'/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml'} 2019-04-14 10:40:41,924+0200 DEBUG ansible on_any args <ansible.executor.task_result.TaskResult object at 0x7fb691843190> kwargs ignore_errors:None 2019-04-14 10:40:41,928+0200 INFO ansible stats { "ansible_playbook": "/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml", "ansible_playbook_duration": "00:37 Minutes", "ansible_result": "type: <type 'dict'>\nstr: {u'localhost': {'unreachable': 0, 'skipped': 6, 'ok': 23, 'changed': 1, 'failures': 1}}", "ansible_type": "finish", "status": "FAILED" } 2019-04-14 10:40:41,928+0200 INFO SUMMARY: Duration Task Name -------- -------- [ < 1 sec ] Execute just a specific set of steps [ 00:01 ] Force facts gathering [ 00:01 ] Check local VM dir stat [ 00:01 ] Obtain SSO token using username/password credentials [ 00:01 ] Fetch host facts [ < 1 sec ] Fetch cluster ID [ 00:01 ] Fetch cluster facts [ 00:01 ] Fetch Datacenter facts [ < 1 sec ] Fetch Datacenter ID [ < 1 sec ] Fetch Datacenter name [ 00:02 ] Add NFS storage domain [ 00:01 ] Get storage domain details [ 00:01 ] Find the appliance OVF [ 00:01 ] Parse OVF [ < 1 sec ] Get required size [ FAILED ] Activate storage domain 2019-04-14 10:40:41,928+0200 DEBUG ansible on_any args <ansible.executor.stats.AggregateStats object at 0x7fb69404eb90> kwargs Any suggestions on how fix this?

2 2

How to connect to a guest with vGPU ?
by Josep Manel Andrés Moscardó 29 May '20

29 May '20

Hi, I got vGPU through mdev working but I am wondering how I would connect to the client and make use of the GPU. So far I try to access the console through SPICE and at some point in the boot process it switches to GPU and I cannot see anything else. Thanks. -- Josep Manel Andrés Moscardó Systems Engineer, IT Operations EMBL Heidelberg T +49 6221 387-8394

3 4

Issues encountered performing HE install on 4.3
by Alan G 24 May '20

24 May '20

Hi, I hit a few issues while performing a recent HE install of 4.3. While I managed to find solutions/workarounds to all the problems I thought I might share them here * As defined in the Ansible defaults the temp dir for building the local HE VM is /var/tmp. I was 80M short of the required space and there did not appear to be a (supported) way to specify a different location. I ended up having to do a bind mount of /var/tmp to get me through the install. Would be nice to be able to specify a custom location. * Permissive umask required. Our CIS CentOS 7 build requires that default umask is 027. This breaks the installer as it creates the VM image under /var/tmp as root and cannot then access it as qemu user. As the temp files are cleaned up on failure it took me a while to track this one down. My solution was to temporarily set the umask to 022 for the session while running the installer. It would be nice if the installer either handled this by doing a chmod/chown as required, or at least doing a umask pre-check and failing with a meaningful error. * SSH root login required on host. Again for CIS we have "PermitRoologin no" configured in sshd. This means the add host task fails on the Engine, but instead of a hard failure we get a timeout on the installer. Which left me chasing some imagined routing/bridging/DNS issue. Eventually I realised I could get to the engine logs and found the issue but took several hours. Would be nice if the installer could either support a sudo option or at least perform a root login pre-check and fail with a meaningful error. Thanks, Alan

2 1

Upgrade scenario to 4.4 for HCI Gluster
by Gianluca Cecchi 11 May '20

11 May '20

Hello, I saw from some mails in the list that the approach for upgrading from 4.3 to 4.4 will be similar to the 3.6 => 4.0 one. Reading the RHV 4.0 Self Hosted Engine Guide it seems it was necessary to have a second host, going through this: 5.4. Upgrading a RHEV-H-Based Self-Hosted Engine Environment https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.0/ht… and also https://www.ovirt.org/develop/release-management/features/sla/hosted-engine… upgrade process involved: - set global ha maintenance - install a new host (and set it as on hosted engine one) - migrate engine VM to this host and set the host as the SPM - create a backup with engine-backup, verify its contents and copy to the host in some directory - run the upgrade utility on the host to update the engine VM hosted-engine --upgrade-appliance this will create a backup floating disk of the engine vm disk for rollback purposes and override the existing engine disk with a new one where to deploy the new engine version applying also the restore from the engine-backup --> what are requirements for 4.4 engine VM and so free storage to have on engine storage domain? The engine-setup will be automatically executed on the new version engine VM - exit from global maintenance - update remaining hosts Is the above procedure the correct one that I can test on a 4.3.9 lab? The 3.6 -> 4.0 flow implied that a 4.0 host could run a 3.6 engine VM Because the backup disk operation is done by the current running engine itself. So it should be true also for 4.3 -> 4.4 and a 4.4. host should be able to run a 4.3 engine, correct? In case of single 4.3.9 ovirt-node-ng host HCI with Gluster, can I apply the upgrade in a similar way? Something like: - create engine-backup and copy over to the host - put host into global maintenace - shutdown all VMS, engine included - enable 4.4. repo - install new image-base 4.4 is this correct and I can use 4.3 and 4.4 image base versions or do I have to sort-of-scratch necessarily? because 4.3 host is based on el7 while 4.4 on el8... but perhaps on mage based system I have flexibility..? what version of gluster will it be applied? Incompatibilities with the current 4.3.9 one (version 6.8-1.el7) - reboot host - exit global maintenance and wait for engine vm to come up correctly - enter global maintenance again - run the upgrade utility on the host Or do I need at least temporarily a new server to use as the 4.4. host, or what will be the expected path? Thanks, Gianluca

2 3

Ubuntu 18.04 and 16.04 cloud images hang at boot up
by suaro＠live.com 07 May '20

07 May '20

I'm using oVirt 4.3 (latest ) and able to successfully provision Centos VMs without any problems. When I attempt to provision Ubuntu VMs, they hang at startup. The console shows : ... ... [ 4.010016] Btrfs loaded [ 101.268594] random: nonblocking pool is initialized It stays like this indefinitely. Again, I have no problems with Centos images, but need Ubuntu Any tips greatly appreciated.

3 2

Backup software recommendations
by Colin Coe 06 May '20

06 May '20

Hi all I'm looking for recommendations for backup software. It needs to handle physical and virtual Linux and Windows, RHV and Hyper-V. It doesn't have to be open source and it doesn't have to be free. The main features we need are: - disk to disk backups - inter-site replication with rate limiting - be able to handle Linux thin volumes (think RHGS) - support BMR ans granular file / directory restore - correctly handle Windows VSS - support RHEL point releases as soon as they are released I'm as much after "stay away from" as recommendations. We currently use Arcserve UDP and it is ... well ... sub optimal Thanks in advance CC

3 4

Gluster deployment fails with missing UUID
by Shareef Jalloq 05 May '20

05 May '20

Hi, I'm running the gluster deployment flow and am trying to use a second drive as the gluster volume. It's /dev/sdb on each node and I'm using the JBOD mode. I'm seeing the following gluster ansible task fail and a google search doesn't bring up much. TASK [gluster.infra/roles/backend_setup : Create volume groups] **************** failed: [ovirt-gluster-01.jalloq.co.uk] (item={u'vgname': u'gluster_vg_sdb', u'pvname': u'/dev/sdb'}) => {"ansible_loop_var": "item", "changed": false, "err": " Couldn't find device with uuid Y8FVs8-LP6w-R6CR-Yosh-c40j-17XP-ttP3Np.\n Couldn't find device with uuid tA4lpO-hM9f-S8ci-BdPh-lTve-0Rh1-3Bcsfy.\n Couldn't find device with uuid RG3w6j-yrxn-2iMw-ngd0-HgMS-i5dP-CGjaRk.\n Couldn't find device with uuid lQV02e-TUZE-PXCd-GWEd-eGqe-c2xC-pauHG7.\n Device /dev/sdb excluded by a filter.\n", "item": {"pvname": "/dev/sdb", "vgname": "gluster_vg_sdb"}, "msg": "Creating physical volume '/dev/sdb' failed", "rc": 5}

4 11

oVirt 4.4.0 Beta release refresh is now available for testing
by Sandro Bonazzola 03 May '20

03 May '20

oVirt 4.4.0 Beta release refresh is now available for testing The oVirt Project is excited to announce the availability of the beta release of oVirt 4.4.0 refresh (beta 4) for testing, as of April 17th, 2020 This release unleashes an altogether more powerful and flexible open source virtualization solution that encompasses hundreds of individual changes and a wide range of enhancements across the engine, storage, network, user interface, and analytics on top of oVirt 4.3. Important notes before you try it Please note this is a Beta release. The oVirt Project makes no guarantees as to its suitability or usefulness. This pre-release must not to be used in production. In particular, please note that upgrades from 4.3 and future upgrades from this beta to the final 4.4 release from this version are not supported. Some of the features included in oVirt 4.4.0 Beta require content that will be available in CentOS Linux 8.2 but can’t be tested on RHEL 8.2 beta yet due to some incompatibility in openvswitch package shipped in CentOS Virt SIG which requires to rebuild openvswitch on top of CentOS 8.2. Known Issues - ovirt-imageio development is still in progress. In this beta you can’t upload images to data domains using the engine web application. You can still copy iso images into the deprecated ISO domain for installing VMs or upload and download to/from data domains is fully functional via the REST API and SDK. For uploading and downloading via the SDK, please see: - https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upload_d… - https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/download… Both scripts are standalone command line tool, try --help for more info. Installation instructions For the engine: either use appliance or: - Install CentOS Linux 8 minimal from http://centos.mirror.garr.it/centos/8.1.1911/isos/x86_64/CentOS-8.1.1911-x8… - dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44-pre.rpm - dnf update (reboot if needed) - dnf module enable -y javapackages-tools pki-deps postgresql:12 - dnf install ovirt-engine - engine-setup For the nodes: Either use oVirt Node ISO or: - Install CentOS Linux 8 from http://centos.mirror.garr.it/centos/8.1.1911/isos/x86_64/CentOS-8.1.1911-x8… ; select minimal installation - dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44-pre.rpm - dnf update (reboot if needed) - Attach the host to engine and let it be deployed. What’s new in oVirt 4.4.0 Beta? - Hypervisors based on CentOS Linux 8 (rebuilt from award winning RHEL8), for both oVirt Node and standalone CentOS Linux hosts - Easier network management and configuration flexibility with NetworkManager - VMs based on a more modern Q35 chipset with legacy seabios and UEFI firmware - Support for direct passthrough of local host disks to VMs - Live migration improvements for High Performance guests. - New Windows Guest tools installer based on WiX framework now moved to VirtioWin project - Dropped support for cluster level prior to 4.2 - Dropped SDK3 support - 4K disks support only for file based storage. iSCSI/FC storage do not support 4k disks yet. - Exporting a VM to a data domain - Editing of floating disks - Integrating ansible-runner into engine, which allows a more detailed monitoring of playbooks executed from engine - Adding/reinstalling hosts are now completely based on Ansible - The OpenStack Neutron Agent cannot be configured by oVirt anymore, it should be configured by TripleO instead This release is available now on x86_64 architecture for: * Red Hat Enterprise Linux 8.1 * CentOS Linux (or similar) 8.1 This release supports Hypervisor Hosts on x86_64 and ppc64le architectures for: * Red Hat Enterprise Linux 8.1 * CentOS Linux (or similar) 8.1 * oVirt Node 4.4 based on CentOS Linux 8.1 (available for x86_64 only) See the release notes [1] for installation instructions and a list of new features and bugs fixed. If you manage more than one oVirt instance, OKD or RDO we also recommend to try ManageIQ <http://manageiq.org/>. In such a case, please be sure to take the qc2 image and not the ova image. Notes: - oVirt Appliance is already available for CentOS Linux 8 - oVirt Node NG is already available for CentOS Linux 8 Additional Resources: * Read more about the oVirt 4.4.0 release highlights: http://www.ovirt.org/release/4.4.0/ * Get more oVirt project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.4.0/ [2] http://resources.ovirt.org/pub/ovirt-4.4-pre/iso/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/>* <https://www.redhat.com/en/summit?sc_cid=7013a000002D2QxAAK>* *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

5 4

Engine UI exception while viewing unattached hosts in Network tab
by Shareef Jalloq 03 May '20

03 May '20

Hi, I'm following the Gluster setup blog post ( https://blogs.ovirt.org/2018/02/up-and-running-with-ovirt-4-2-and-gluster-s…) and am at the 'Storage network' section. I've created a new 'gluster' network, selected the network and navigated to the 'Hosts' tab. The guide tells you to click the 'Unattached' button and then 'Setup Host Networks' for each host. However, clicking the 'Unattached' button fires off a bunch of exceptions rather than displaying my 3 hosts. The message is: "Uncaught exception occurred. Please try reloading the page. Details: (TypeError) : Cannot read property 'N' of null Please have your administrator check the UI logs" Anyone seen this before? Where is the UI log located? Shareef.

3 3

Unable to remove system roles from Everyone group
by miguel.garcia＠toshibagcs.com 02 May '20

02 May '20

I opened Everyone group and added system role UserRole and realized now that everybody can see all VMS which is not good. I tried to remove the role from the group but got the error "Error while executing action: It's not allowed to remove system permissions assigned to built-in Everyone group" Looking into Ovirt forums I see that this change should be made through the engine database but I was not able to reach that part. Can someone help me out how to remove the system role from Everyone group? or at least reset the group?

2 1

Running Host on sudo user
by carl langlois 30 Apr '20

30 Apr '20

Hi, I was wandering if it is possible to run ovirt node using a sudo user instead of the root user? Let says i want or need to disable root ssh login.. Thanks and regards. Carl

3 3

Can we agree on adding reference to version in help request email?
by Sandro Bonazzola 30 Apr '20

30 Apr '20

Hi, I was looking in the past 2 weeks email landing on this mailing list and a common thing I notice is that it's hard to understand which version of the involved software they're referring too. Can we agree on adding at the top of the message a couple of line like output of yum -q list installed centos-release ovirt-release\* ovirt-engine redhat-release vdsm glusterfs centos-release.x86_64 7-7.1908.0.el7.centos glusterfs.x86_64 6.8-1.el7 ovirt-engine.noarch 4.3.9.4-1.el7 ovirt-release43.noarch 4.3.9-1.el7 It will help understanding if the help request is something that may be already known, a regression, and so on. -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/>* <https://www.redhat.com/en/summit?sc_cid=7013a000002D2QxAAK>* *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

3 2

Add custom Network Filter to oVirt
by Hendrik Peyerl 30 Apr '20

30 Apr '20

Hello all, can anyone give me a hint on where to find documentation on how to add custom created network filters through oVirt? Thanks, Hendrik

3 5

Re: Move Hosted Engine VM to a different storage domain
by Yedidyah Bar David 30 Apr '20

30 Apr '20

On Wed, Apr 29, 2020 at 8:42 AM Anton Louw <Anton.Louw(a)voxtelecom.co.za> wrote: > > > Hi, > > > > Thank you for the reply. I am building another environment today, so I > will run through the backup and restore again. I do recall one issue I had > with the restore was that it gave an error that one of the storage domains > were already in use. This was a new storage domain I added, with no VMs on. > > > > I just want to make sure, I probably cannot deploy the HE on a storage > domain that is in maintenance, correct? I will try and create a new storage > domain again, but remove it from the data center, and perhaps see if the HE > will deploy to it. > hosted-engine deploy does not require an "empty storage domain" (in maintenance or not), but one that "does not exist yet" - meaning, a path to storage that will be used as a storage domain, but in which a storage domain was not created yet. The deploy process itself will create the domain there. I hope this clarifies. > > > The main goal was to have no downtime, but if it is going to be too > complex, I think my next option will be to create a new HE, and attach the > current storage domains. Obviously it is going to take a bit of planning, > as I will need to configure all the networks etc. from scratch again. > Good luck and keep us updated! Best regards, > > > Thanks > > > > *Anton Louw* > *Cloud Engineer: Storage and Virtualization* at *Vox* > ------------------------------ > *T:* 087 805 0000 | *D:* 087 805 1572 > *M:* N/A > *E:* anton.louw(a)voxtelecom.co.za > *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za > > [image: F] <https://www.facebook.com/voxtelecomZA> > [image: T] <https://www.twitter.com/voxtelecom> > [image: I] <https://www.instagram.com/voxtelecomza/> > [image: L] <https://www.linkedin.com/company/voxtelecom> > [image: Y] <https://www.youtube.com/user/VoxTelecom> > > *From:* Strahil Nikolov <hunter86_bg(a)yahoo.com> > *Sent:* 26 April 2020 08:55 > *To:* Yedidyah Bar David <didi(a)redhat.com>; Anton Louw < > Anton.Louw(a)voxtelecom.co.za> > *Cc:* users(a)ovirt.org > *Subject:* Re: [ovirt-users] Re: Move Hosted Engine VM to a different > storage domain > > > > On April 26, 2020 9:39:07 AM GMT+03:00, Yedidyah Bar David < > didi(a)redhat.com> wrote: > >On Fri, Apr 24, 2020 at 1:04 PM Anton Louw > ><Anton.Louw(a)voxtelecom.co.za> > >wrote: > > > >> > >> > >> Hi All, > >> > >> > >> > >> I know this question has been asked before, by myself included. I was > >> hoping that someone has run through the exercise of moving the hosted > >> engine VM to a different storage domain. I have tried many routes, > >but the > >> backup and restore does not work for me. > >> > > > >The "standard answer" is backup and restore. Why does it not work? > > > > > >> > >> > >> Is there anybody that can perhaps give me some guidelines or a > >process I > >> can follow? > >> > > > >I didn't try that myself. > > > >The best guidelines I can give you are: Try first on at a test system. > >Do > >the backup on the real machine, create some isolated VM (isolated so > >that > >it does not interfere with your hosts/storage) somewhere to be used as > >a > >test host (or a physical machine if you have one), some storage > >somewhere, > >and restore on it. Make it work. Document what you needed to do. Ask > >here > >with specific questions if/when you have them. Then do on the > >production > >setup. > > > >Also clarify your needs. Do you need no-downtime for the VMs? If so, > >that's > >more complex. If you don't, it might be enough/simpler to deploy a new > >setup and just import the existing storage. Do you have HA VMs? etc. > > > > > >> > >> > >> The reason I need to move the HE VM is because we are decommissioning > >the > >> current storage array where the HE VM is located. > >> > > > >Good luck! > > > >Best regards, > > > > > >> > >> > >> Thank you very much > >> > >> *Anton Louw* > >> *Cloud Engineer: Storage and Virtualization* at *Vox* > >> ------------------------------ > >> *T:* 087 805 0000 | *D:* 087 805 1572 > >> *M:* N/A > >> *E:* anton.louw(a)voxtelecom.co.za > >> *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > >> www.vox.co.za > >> > >> [image: F] <https://www.facebook.com/voxtelecomZA> > >> [image: T] <https://www.twitter.com/voxtelecom> > >> [image: I] <https://www.instagram.com/voxtelecomza/> > >> [image: L] <https://www.linkedin.com/company/voxtelecom> > >> [image: Y] <https://www.youtube.com/user/VoxTelecom> > >> > >> [image: #VoxBrand] > >> <https://www.vox.co.za/fibre/fibre-to-the-home/?prod=HOME> > >> *Disclaimer* > >> > >> The contents of this email are confidential to the sender and the > >intended > >> recipient. Unless the contents are clearly and entirely of a personal > >> nature, they are subject to copyright in favour of the holding > >company of > >> the Vox group of companies. Any recipient who receives this email in > >error > >> should immediately report the error to the sender and permanently > >delete > >> this email from all storage devices. > >> > >> This email has been scanned for viruses and malware, and may have > >been > >> automatically archived by *Mimecast Ltd*, an innovator in Software as > >a > >> Service (SaaS) for business. Providing a *safer* and *more useful* > >place > >> for your human generated data. Specializing in; Security, archiving > >and > >> compliance. To find out more Click Here > >> <https://www.voxtelecom.co.za/security/mimecast/?prod=Enterprise>. > >> > >> > >> _______________________________________________ > >> Users mailing list -- users(a)ovirt.org > >> To unsubscribe send an email to users-leave(a)ovirt.org > >> Privacy Statement: https://www.ovirt.org/privacy-policy.html > >> oVirt Code of Conduct: > >> https://www.ovirt.org/community/about/community-guidelines/ > >> List Archives: > >> > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/V3PRBRZD7SLUQ… > >> > > If youchange the gluster volume you can use the 'hosted-engine' tool + > migration of the data ? > > The example is for Gluster, but also > hosted-engine --set-shared-config storage <server1>:/engine > > hosted-engine --set-shared-config mnt_options > backup-volfile-servers=<server2>:<server3> > > Best Regards, > Strahil Nikolov > > -- Didi

1 0

Failed to complete VM creation,help me!
by liug74＠sina.com 29 Apr '20

29 Apr '20

Storage domain usage is as follows： vgdisplay 3542ca36-747b-407c-aa5e-331510f81fd9 --- Volume group --- VG Name 3542ca36-747b-407c-aa5e-331510f81fd9 System ID Format lvm2 Metadata Areas 2 Metadata Sequence No 15998 VG Access read/write VG Status resizable MAX LV 0 Cur LV 1954 Open LV 0 Max PV 0 Cur PV 1 Act PV 1 VG Size 113.97 TiB PE Size 128.00 MiB Total PE 933647 Alloc PE / Size 64930 / <7.93 TiB Free PE / Size 868717 / 106.04 TiB VG UUID GiL1LL-ggO5-a6mX-62uc-q597-B3X9-6bzC93 __________________________________________________________ The following error occurred when I created the VM: VDSM H5 command HSMGetAllTasksStatusesVDS failed: Error creating a new volume: (u"Volume creation 62220be2-2781-4771-9373-84af5cc18f01 failed: (28, 'Sanlock resource write failure', 'No space left on device')",) Excuse me, what's the reason, thank you!

3 2

ovrt node ng 4.4 different fs layout and error if changed
by Gianluca Cecchi 29 Apr '20

29 Apr '20

Hello, In CentOS 7 default filesystem in anaconda was xfs, but in ovirt node ng 4.3.9 (based on CentOS 7) the default layout was set to ext4. In CentOS 8 again the default is xfs and I see that ovirt node ng 4.4 beta4 (based on CentOS 8.1) has now xfs for all filesystems, excluded /boot that is set to ext4. In general I have a preference for ext4. I notice that while in 4.3.9 I could somehow customize partition layout, even if not recommended, in 4.4 I always get error if I don't accept automatic partitioning. What I sometimes do: - select disk and custom layout - click done and the storage page appears - I click the button to create automatically and I get the automatic partitioning layout - and here I can change fs type and update settings button and/or change size of some filesystems (eg for /var/log if using Gluster) Even if I only set all filesystems automatically generated by installer to ext4, without changing any size, in the final stage of installation I get this error and installation aborts: " There was an error running the kickstart script at line 5. This is a fatal error and installation will be aborted. The details of this error are: 2020-04-19 10:37:50,451 [INFO] (MainThread) Trying to create a manageable base from '/' 2020-04-19 10:37:50,811 [ERROR] (MainThread) LVM Thin Provisioning partitioning scheme is required. For autoinstall via Kickstart with LVM Thin Provisioning check options: --thinpool and --grow. Please consult documentation for details Traceback (most recent call last): File "/usr/lib64/python3.6/runpy.py", line 193, in _run_module_as_main "__main__", mod_spec) File "/usr/lib64/python3.6/runpy.py", line 85, in _run_code exec(code, run_globals) File "/usr/lib/python3.6/site-packages/imgbased/__main__.py", line 53, in <module> CliApplication() File "/usr/lib/python3.6/site-packages/imgbased/__init__.py", line 82, in CliApplication app.hooks.emit("post-arg-parse", args) File "/usr/lib/python3.6/site-packages/imgbased/hooks.py", line 120, in emit cb(self.context, *args) File "/usr/lib/python3.6/site-packages/imgbased/plugins/core.py", line 171, in post_argparse layout.initialize(args.source, args.init_nvr) File "/usr/lib/python3.6/site-packages/imgbased/plugins/core.py", line 215, in initialize self.app.imgbase.init_layout_from(source, init_nvr) File "/usr/lib/python3.6/site-packages/imgbased/imgbase.py", line 293, in init_layout_from self.init_tags_on(existing_lv) File "/usr/lib/python3.6/site-packages/imgbased/imgbase.py", line 271, in init_tags_on pool = lv.thinpool() File "/usr/lib/python3.6/site-packages/imgbased/lvm.py", line 305, in thinpool raise MissingLvmThinPool() imgbased.lvm.MissingLvmThinPool " If I change nothing and choose automatic partitioning the installation completes. Tried different times with same results. Is it expected? In this case instead of specifying "recommended" it should be written sort of "mandatory"... Gianluca

2 1

Problem with multiple IP addresses and AWX
by Bernhard Dick 29 Apr '20

29 Apr '20

Hi, I've started to use awx shortly and I'd like to have an inventory based on their RHEV/oVirt-Plugin. Basically that works fine, however on machines that have multiple network interfaces or internal nets (like Docker) the first address in the IP list of the vm (which is used as ansible_host by AWX) is not an address that is reachable from the machine's outside and so those host entries are failing in my jobs. I found an issue at AWX, being like we won't fix first: https://github.com/ansible/awx/issues/1191 It also seems that there where issues related to this on oVirt: First this with a request for setting a primary IP: https://bugzilla.redhat.com/show_bug.cgi?id=1437145 And this one mentioning a way to ignore interfaces on ovirt-guest-agent, however it does no longer work due to the use of qemu-guest-agent: https://bugzilla.redhat.com/show_bug.cgi?id=1437145 Do you have any ideas how to circumvent this or is there some improvement alread in planning? Best regards Bernhard

1 0

Re: User Groups
by Lucie Leistnerova 29 Apr '20

29 Apr '20

On 4/29/20 9:35 AM, Anton Louw wrote: > > > Hi Paul, > > Thanks. Its just strange, because when I want to assign group > permissions to a VM for instance, I get the below: > > But when I check, Administration, Users then select Groups, I only see > the below: > These are the groups added to RHV manually (check button Add or Administration - Configure - System Permissions - Add) and Everyone (built-in group). So they can be used to assign permissions. > > Am I missing something? > > Thanks > > > *Anton Louw* > *Cloud Engineer: Storage and Virtualization* at *Vox* > ------------------------------------------------------------------------ > *T:* 087 805 0000 | *D:* 087 805 1572 > *M:* N/A > *E:* anton.louw(a)voxtelecom.co.za <mailto:anton.louw@voxtelecom.co.za> > *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za <http://www.vox.co.za> > > F <https://www.facebook.com/voxtelecomZA> > > > T <https://www.twitter.com/voxtelecom> > > > I <https://www.instagram.com/voxtelecomza/> > > > L <https://www.linkedin.com/company/voxtelecom> > > > Y <https://www.youtube.com/user/VoxTelecom> > > > *From:*Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> > *Sent:* 29 April 2020 09:28 > *To:* Anton Louw <Anton.Louw(a)voxtelecom.co.za>; users(a)ovirt.org > *Subject:* Re: User Groups > > Hello Anton, > > In the Administration->Users there is a groups > button. > > Regards, > > Paul S. > > ------------------------------------------------------------------------ > > *From:*Anton Louw <Anton.Louw(a)voxtelecom.co.za > <mailto:Anton.Louw@voxtelecom.co.za>> > *Sent:* 29 April 2020 06:36 > *To:* users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org > <mailto:users@ovirt.org>> > *Subject:* [ovirt-users] User Groups > > *Caution External Mail:* Do not click any links or open any > attachments unless you trust the sender and know that the content is safe. > > Hi Everybody, > > Is there a way to see My Groups through the Web UI? I have tried > looking around, but cannot see anything. Can this only be seen via the > backend in the HE? > > Thanks > > *Anton Louw* > > *Cloud Engineer: Storage and Virtualization*at *Vox* > > ------------------------------------------------------------------------ > > *T:*087 805 0000 | *D:*087 805 1572 > *M:*N/A > *E:*anton.louw@voxtelecom.co.za <mailto:anton.louw@voxtelecom.co.za> > *A:*Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za > <https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.vox.co…> > > F > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.faceb…> > > > > T > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.twitt…> > > > > I > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.insta…> > > > > L > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linke…> > > > > Y > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtu…> > > #VoxBrand > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vox.c…> > > > *Disclaimer* > > The contents of this email are confidential to the sender and the > intended recipient. Unless the contents are clearly and entirely of a > personal nature, they are subject to copyright in favour of the > holding company of the Vox group of companies. Any recipient who > receives this email in error should immediately report the error to > the sender and permanently delete this email from all storage devices. > > This email has been scanned for viruses and malware, and may have been > automatically archived by *Mimecast Ltd*, an innovator in Software as > a Service (SaaS) for business. Providing a *safer* and *more useful* > place for your human generated data. Specializing in; Security, > archiving and compliance. To find out more Click Here > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.voxte…>. > > To view the terms under which this email is distributed, please go to:- > http://leedsbeckett.ac.uk/disclaimer/email/ > > > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/EOORL4GYWM5XS… -- Lucie Leistnerova Senior Quality Engineer, QE Cloud, RHVM Red Hat EMEA IRC: lleistne @ #rhev-qe

1 0

Can't ping gluster interfaces for HCI setup
by Shareef Jalloq 29 Apr '20

29 Apr '20

Hi, I'm in the process of trying to set up an HCI 3 node cluster in my homelab to better understand the Gluster setup and have failed at the first hurdle. I've set up the node interfaces on the built in NIC and am using a PCI NIC for the Gluster traffic - at the moment this is 1Gb until I can upgrade - and I've assigned a static IP to both interfaces and also have both entries in my DNS. From any of the three nodes, I can ping the gateway, the other nodes, any external IP but I can't ping any of the Gluster NICs. What have I forgotten to do? Here's the relevant output of 'ip addr show'. em1 is the motherboard NIC and p1p1 is port 1 of an Intel NIC. The /etc/sysconfig/network-scripts/ifcfg-<if> scripts are identical aside from IPADDR, NAME, DEVICE and UUID fields. Thanks, Shareef. [root@ovirt-node-00 ~]# ip addr show 2: p1p1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether a0:36:9f:1f:f9:78 brd ff:ff:ff:ff:ff:ff inet 10.0.0.34/24 brd 10.0.0.255 scope global noprefixroute p1p1 valid_lft forever preferred_lft forever inet6 fd4d:e9e3:6f5:1:a236:9fff:fe1f:f978/64 scope global mngtmpaddr dynamic valid_lft 7054sec preferred_lft 7054sec inet6 fe80::a236:9fff:fe1f:f978/64 scope link valid_lft forever preferred_lft forever 4: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 98:90:96:a1:16:ad brd ff:ff:ff:ff:ff:ff inet 10.0.0.31/24 brd 10.0.0.255 scope global noprefixroute em1 valid_lft forever preferred_lft forever inet6 fd4d:e9e3:6f5:1:9a90:96ff:fea1:16ad/64 scope global mngtmpaddr dynamic valid_lft 7054sec preferred_lft 7054sec inet6 fe80::9a90:96ff:fea1:16ad/64 scope link valid_lft forever preferred_lft forever

3 11

Re: User Groups
by Staniforth, Paul 29 Apr '20

29 Apr '20

Hi Anton, have you got an external authentication system? if you add the external groups with the correct roles to the correct object (e.g. datacenter) it will then show in the list of grpups. Regards, Paul S. ________________________________ From: Anton Louw <Anton.Louw(a)voxtelecom.co.za> Sent: 29 April 2020 08:35 To: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk>; users(a)ovirt.org <users(a)ovirt.org> Subject: RE: User Groups Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. Hi Paul, Thanks. Its just strange, because when I want to assign group permissions to a VM for instance, I get the below: [cid:image003.png@01D61E09.7EB68C80] But when I check, Administration, Users then select Groups, I only see the below: [cid:image002.png@01D61E09.7EAC5350] Am I missing something? Thanks Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: anton.louw(a)voxtelecom.co.za<mailto:anton.louw@voxtelecom.co.za> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.vox.co…> [F]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.faceb…> [T]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.twitt…> [I]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.insta…> [L]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linke…> [Y]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtu…> From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: 29 April 2020 09:28 To: Anton Louw <Anton.Louw(a)voxtelecom.co.za>; users(a)ovirt.org Subject: Re: User Groups Hello Anton, In the Administration->Users there is a groups button. Regards, Paul S. ________________________________ From: Anton Louw <Anton.Louw(a)voxtelecom.co.za<mailto:Anton.Louw@voxtelecom.co.za>> Sent: 29 April 2020 06:36 To: users(a)ovirt.org<mailto:users@ovirt.org> <users(a)ovirt.org<mailto:users@ovirt.org>> Subject: [ovirt-users] User Groups Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. Hi Everybody, Is there a way to see My Groups through the Web UI? I have tried looking around, but cannot see anything. Can this only be seen via the backend in the HE? Thanks Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: anton.louw(a)voxtelecom.co.za<mailto:anton.louw@voxtelecom.co.za> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.vox.co…> [F]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.faceb…> [T]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.twitt…> [I]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.insta…> [L]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linke…> [Y]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtu…> [#VoxBrand]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vox.c…> Disclaimer The contents of this email are confidential to the sender and the intended recipient. Unless the contents are clearly and entirely of a personal nature, they are subject to copyright in favour of the holding company of the Vox group of companies. Any recipient who receives this email in error should immediately report the error to the sender and permanently delete this email from all storage devices. This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more Click Here<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.voxte…>. To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/ To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

1 0

Re: User Groups
by Lucie Leistnerova 29 Apr '20

29 Apr '20

Hi Anton, On 4/29/20 7:36 AM, Anton Louw wrote: > > > Hi Everybody, > > Is there a way to see My Groups through the Web UI? I have tried > looking around, but cannot see anything. Can this only be seen via the > backend in the HE? > All information about users you can see in Administration - Users and click on User name. I'm not aware of other information about the users in UI. > > Thanks > > > *Anton Louw* > *Cloud Engineer: Storage and Virtualization* at *Vox* > ------------------------------------------------------------------------ > *T:* 087 805 0000 | *D:* 087 805 1572 > *M:* N/A > *E:* anton.louw(a)voxtelecom.co.za <mailto:anton.louw@voxtelecom.co.za> > *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za <http://www.vox.co.za> > > F <https://www.facebook.com/voxtelecomZA> > > > T <https://www.twitter.com/voxtelecom> > > > I <https://www.instagram.com/voxtelecomza/> > > > L <https://www.linkedin.com/company/voxtelecom> > > > Y <https://www.youtube.com/user/VoxTelecom> > > #VoxBrand <https://www.vox.co.za/fibre/fibre-to-the-home/?prod=HOME> > > > *Disclaimer* > > The contents of this email are confidential to the sender and the > intended recipient. Unless the contents are clearly and entirely of a > personal nature, they are subject to copyright in favour of the > holding company of the Vox group of companies. Any recipient who > receives this email in error should immediately report the error to > the sender and permanently delete this email from all storage devices. > > This email has been scanned for viruses and malware, and may have been > automatically archived by *Mimecast Ltd*, an innovator in Software as > a Service (SaaS) for business. Providing a *safer* and *more useful* > place for your human generated data. Specializing in; Security, > archiving and compliance. To find out more Click Here > <https://www.voxtelecom.co.za/security/mimecast/?prod=Enterprise>. > > > > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/B2275QLUWDTKM… Best regards, -- Lucie Leistnerova Senior Quality Engineer, QE Cloud, RHVM Red Hat EMEA IRC: lleistne @ #rhev-qe

1 0

Re: User Groups
by Anton Louw 29 Apr '20

29 Apr '20

Hi Paul, Thanks. Its just strange, because when I want to assign group permissions to a VM for instance, I get the below: [cid:image003.png@01D61E09.7EB68C80] But when I check, Administration, Users then select Groups, I only see the below: [cid:image002.png@01D61E09.7EAC5350] Am I missing something? Thanks Anton Louw Cloud Engineer: Storage and Virtualization ______________________________________ D: 087 805 1572 | M: N/A A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg anton.louw(a)voxtelecom.co.za www.vox.co.za From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: 29 April 2020 09:28 To: Anton Louw <Anton.Louw(a)voxtelecom.co.za>; users(a)ovirt.org Subject: Re: User Groups Hello Anton, In the Administration->Users there is a groups button. Regards, Paul S. ________________________________ From: Anton Louw <Anton.Louw(a)voxtelecom.co.za<mailto:Anton.Louw@voxtelecom.co.za>> Sent: 29 April 2020 06:36 To: users(a)ovirt.org<mailto:users@ovirt.org> <users(a)ovirt.org<mailto:users@ovirt.org>> Subject: [ovirt-users] User Groups Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. Hi Everybody, Is there a way to see My Groups through the Web UI? I have tried looking around, but cannot see anything. Can this only be seen via the backend in the HE? Thanks Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: anton.louw(a)voxtelecom.co.za<mailto:anton.louw@voxtelecom.co.za> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.vox.co…> [F]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.faceb…> [T]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.twitt…> [I]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.insta…> [L]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linke…> [Y]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtu…> [#VoxBrand]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vox.c…> Disclaimer The contents of this email are confidential to the sender and the intended recipient. Unless the contents are clearly and entirely of a personal nature, they are subject to copyright in favour of the holding company of the Vox group of companies. Any recipient who receives this email in error should immediately report the error to the sender and permanently delete this email from all storage devices. This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more Click Here<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.voxte…>. To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/<http://leedsbeckett.ac.uk/disclaimer/email/>

1 0

Re: User Groups
by Staniforth, Paul 29 Apr '20

29 Apr '20

Hello Anton, In the Administration->Users there is a groups button. Regards, Paul S. ________________________________ From: Anton Louw <Anton.Louw(a)voxtelecom.co.za> Sent: 29 April 2020 06:36 To: users(a)ovirt.org <users(a)ovirt.org> Subject: [ovirt-users] User Groups Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. Hi Everybody, Is there a way to see My Groups through the Web UI? I have tried looking around, but cannot see anything. Can this only be seen via the backend in the HE? Thanks Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: anton.louw(a)voxtelecom.co.za<mailto:anton.louw@voxtelecom.co.za> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.vox.co…> [F]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.faceb…> [T]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.twitt…> [I]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.insta…> [L]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linke…> [Y]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtu…> [#VoxBrand]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vox.c…> Disclaimer The contents of this email are confidential to the sender and the intended recipient. Unless the contents are clearly and entirely of a personal nature, they are subject to copyright in favour of the holding company of the Vox group of companies. Any recipient who receives this email in error should immediately report the error to the sender and permanently delete this email from all storage devices. This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more Click Here<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.voxte…>. To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

1 0

Re: Move Hosted Engine VM to a different storage domain
by Yedidyah Bar David 29 Apr '20

29 Apr '20

On Fri, Apr 24, 2020 at 1:04 PM Anton Louw <Anton.Louw(a)voxtelecom.co.za> wrote: > > > Hi All, > > > > I know this question has been asked before, by myself included. I was > hoping that someone has run through the exercise of moving the hosted > engine VM to a different storage domain. I have tried many routes, but the > backup and restore does not work for me. > The "standard answer" is backup and restore. Why does it not work? > > > Is there anybody that can perhaps give me some guidelines or a process I > can follow? > I didn't try that myself. The best guidelines I can give you are: Try first on at a test system. Do the backup on the real machine, create some isolated VM (isolated so that it does not interfere with your hosts/storage) somewhere to be used as a test host (or a physical machine if you have one), some storage somewhere, and restore on it. Make it work. Document what you needed to do. Ask here with specific questions if/when you have them. Then do on the production setup. Also clarify your needs. Do you need no-downtime for the VMs? If so, that's more complex. If you don't, it might be enough/simpler to deploy a new setup and just import the existing storage. Do you have HA VMs? etc. > > > The reason I need to move the HE VM is because we are decommissioning the > current storage array where the HE VM is located. > Good luck! Best regards, > > > Thank you very much > > *Anton Louw* > *Cloud Engineer: Storage and Virtualization* at *Vox* > ------------------------------ > *T:* 087 805 0000 | *D:* 087 805 1572 > *M:* N/A > *E:* anton.louw(a)voxtelecom.co.za > *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za > > [image: F] <https://www.facebook.com/voxtelecomZA> > [image: T] <https://www.twitter.com/voxtelecom> > [image: I] <https://www.instagram.com/voxtelecomza/> > [image: L] <https://www.linkedin.com/company/voxtelecom> > [image: Y] <https://www.youtube.com/user/VoxTelecom> > > [image: #VoxBrand] > <https://www.vox.co.za/fibre/fibre-to-the-home/?prod=HOME> > *Disclaimer* > > The contents of this email are confidential to the sender and the intended > recipient. Unless the contents are clearly and entirely of a personal > nature, they are subject to copyright in favour of the holding company of > the Vox group of companies. Any recipient who receives this email in error > should immediately report the error to the sender and permanently delete > this email from all storage devices. > > This email has been scanned for viruses and malware, and may have been > automatically archived by *Mimecast Ltd*, an innovator in Software as a > Service (SaaS) for business. Providing a *safer* and *more useful* place > for your human generated data. Specializing in; Security, archiving and > compliance. To find out more Click Here > <https://www.voxtelecom.co.za/security/mimecast/?prod=Enterprise>. > > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/V3PRBRZD7SLUQ… > -- Didi

3 2

User Groups
by Anton Louw 29 Apr '20

29 Apr '20

Hi Everybody, Is there a way to see My Groups through the Web UI? I have tried looking around, but cannot see anything. Can this only be seen via the backend in the HE? Thanks Anton Louw Cloud Engineer: Storage and Virtualization ______________________________________ D: 087 805 1572 | M: N/A A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg anton.louw(a)voxtelecom.co.za www.vox.co.za

1 0

Can't deploy engine vm with ovirt-hosted-engine-setup
by Gabriel Bueno 28 Apr '20

28 Apr '20

Hi, I'm trying deploy an engine vm with ovirt-hosted-engine-setup. After the storage domain configuration, the setup exits with the error: [ ERROR ] fatal: [localhost]: FAILED! => {"ansible_facts": {"ovirt_vms": [{"affinity_labels": [], "applications": [], "bios": {"boot_menu": {"enabled": false}, "type": "i440fx_sea_bios"}, "cdroms": [], "cluster": {"href": "/ovirt-engine/api/clusters/8ef534f4-7820-11ea-82a4-00163e2c790d", "id": "8ef534f4-7820-11ea-82a4-00163e2c790d"}, "comment": "", "cpu": {"architecture": "x86_64", "topology": {"cores": 1, "sockets": 4, "threads": 1}}, "cpu_profile": {"href": "/ovirt-engine/api/cpuprofiles/58ca604e-01a7-003f-01de-000000000250", "id": "58ca604e-01a7-003f-01de-000000000250"}, "cpu_shares": 0, "creation_time": "2020-04-06 16:12:45.950000+00:00", "delete_protected": false, "description": "", "disk_attachments": [], "display": {"address": "127.0.0.1", "allow_override": false, "certificate": {"content": "-----BEGIN CERTIFICATE-----\n\n-----END CERTIFICATE-----\n", "organization": "xxx", "subject": "O=xxx,CN=xxx"}, "copy_paste_enabled": true, "disconnect_action": "LOCK_SCREEN", "file_transf er_enabled": true, "monitors": 1, "port": 5900, "single_qxl_pci": false, "smartcard_enabled": false, "type": "vnc"}, "fqdn": "xxx", "graphics_consoles": [], "guest_operating_system": {"architecture": "x86_64", "codename": "", "distribution": "CentOS Linux", "family": "Linux", "kernel": {"version": {"build": 0, "full_version": "3.10.0-1062.18.1.el7.x86_64", "major": 3, "minor": 10, "revision": 1062}}, "version": {"full_version": "7", "major": 7}}, "guest_time_zone": {"name": "UTC", "utc_offset": "+00:00"}, "high_availability": {"enabled": false, "priority": 0}, "host": {"href": "/ovirt-engine/api/hosts/80856993-d4d1-4609-9ad9-7c4bdd2903b6", "id": "80856993-d4d1-4609-9ad9-7c4bdd2903b6"}, "host_devices": [], "href": "/ovirt-engine/api/vms/e1b55569-5ae4-48c5-a2bf-f109fbdddd4e", "id": "e1b55569-5ae4-48c5-a2bf-f109fbdddd4e", "io": {"threads": 1}, "katello_errata": [], "large_icon": {"href": "/ovirt-engine/api/icons/290ffd7e-4bf3-4283-babc-86b675d7a35e", "id": "290ffd7e-4bf3-4283-babc-86b6 75d7a35e"}, "memory": 17179869184, "memory_policy": {"guaranteed": 17179869184, "max": 17179869184}, "migration": {"auto_converge": "inherit", "compressed": "inherit"}, "migration_downtime": -1, "multi_queues_enabled": true, "name": "external-HostedEngineLocal", "next_run_configuration_exists": false, "nics": [], "numa_nodes": [], "numa_tune_mode": "interleave", "origin": "external", "original_template": {"href": "/ovirt-engine/api/templates/00000000-0000-0000-0000-000000000000", "id": "00000000-0000-0000-0000-000000000000"}, "os": {"boot": {"devices": ["hd"]}, "type": "other"}, "permissions": [], "placement_policy": {"affinity": "migratable"}, "quota": {"id": "a80b336c-7820-11ea-b435-00163e2c790d"}, "reported_devices": [], "run_once": false, "sessions": [], "small_icon": {"href": "/ovirt-engine/api/icons/3d06eacd-f9d1-4c14-a228-b16ed454f7c8", "id": "3d06eacd-f9d1-4c14-a228-b16ed454f7c8"}, "snapshots": [], "sso": {"methods": [{"id": "guest_agent"}]}, "start_paused": false, "stateles s": false, "statistics": [], "status": "unknown", "storage_error_resume_behaviour": "auto_resume", "tags": [], "template": {"href": "/ovirt-engine/api/templates/00000000-0000-0000-0000-000000000000", "id": "00000000-0000-0000-0000-000000000000"}, "time_zone": {"name": "Etc/GMT"}, "type": "desktop", "usb": {"enabled": false}, "watchdogs": []}]}, "attempts": 24, "changed": false, "deprecations": [{"msg": "The 'ovirt_vm_facts' module has been renamed to 'ovirt_vm_info', and the renamed one no longer returns ansible_facts", "version": "2.13"}]} Certificate and sensible information has been deleted... Someone knows what could be wrong with my environment?? Kind Regards

3 3

[OT] windows 10 qemu-kvm latest stable drivers
by Gianluca Cecchi 28 Apr '20

28 Apr '20

Hello, I see that this link below, that should be the correct one for stable virtio drivers: https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-vir… points to virtio-win-0.1.171-1 released on May 2019. The same pointed by the repo https://fedorapeople.org/groups/virt/virtio-win/virtio-win.repo Under https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-vi… there are many new ones... Are so they all to be considered unstable? Thanks, Gianluca

2 1

Wrong CPU type recognized on a new Pentium G4560 Kaby Lake
by mleone87＠hotmail.com 28 Apr '20

28 Apr '20

Hi, I installed an ovirt node based on latest 4.3.9 iso on this hardware: CPU Intel Pentium G4560 Motherboard Asus P10S-i C232 Chipset Overall setup has no problem but I noticed that the CPU type is recognized as: Intel Westmere IBRS SSBD MDS Family The overall system info are: OS Version: RHEL - 7 - 7.1908.0.el7.centos OS Description: oVirt Node 4.3.9 Kernel Version: 3.10.0 - 1062.18.1.el7.x86_64 KVM Version: 2.12.0 - 33.1.el7_7.4 LIBVIRT Version: libvirt-4.5.0-23.el7_7.6 VDSM Version: vdsm-4.30.43-1.el7 SPICE Version: 0.14.0 - 7.el7 GlusterFS Version: glusterfs-6.8-1.el7 CEPH Version: librbd1-10.2.5-4.el7 Open vSwitch Version: openvswitch-2.11.0-4.el7 Kernel Features: PTI: 1, IBRS: 0, RETP: 1, SSBD: 3 VNC Encryption: Disabled Thats give me some problem on the cluster since I'm trying to join some notebooks to it(it's only a lab) and they are recognized ad Haswell CPUs, making them too new to be joined Any help on this? Thanks

2 1

[ANN] oVirt 4.3.10 Second Release Candidate is now available for testing
by Lev Veyde 28 Apr '20

28 Apr '20

The oVirt Project is pleased to announce the availability of oVirt 4.3.10 Second Release Candidate for testing as of April 28th, 2020. This update is the tenth in a series of stabilization updates to the 4.3 series. This release is available now on x86_64 architecture for: * Red Hat Enterprise Linux 7.7 or later (but < 8) * CentOS Linux (or similar) 7.7 or later (but < 8) This release supports Hypervisor Hosts on x86_64 and ppc64le architectures for: * Red Hat Enterprise Linux 7.7 or later (but < 8) * CentOS Linux (or similar) 7.7 or later (but < 8) * oVirt Node 4.3 (available for x86_64 only) See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is already available - oVirt Node is already available[2] Additional Resources: * Read more about the oVirt 4.3.10 release highlights: http://www.ovirt.org/release/4.3.10/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.3.10/ [2] http://resources.ovirt.org/pub/ovirt-4.3-pre/iso/ -- Lev Veyde Senior Software Engineer, RHCE | RHCVA | MCITP Red Hat Israel <https://www.redhat.com> lev(a)redhat.com | lveyde(a)redhat.com <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 0

Info about openstack staging-ovirt driver connection not released
by Gianluca Cecchi 28 Apr '20

28 Apr '20

Hello, I'm setting up an Openstack Queens lab ( to best match OSP 13) using oVirt VMs as nodes. At this time only undercloud configured and 8 Openstack nodes (VMs) set as available for provisioning. I'm using staging-ovirt driver on director node in similar way as the vbmc one. I see from oVirt active user sessions page that every minute I have one connection for node (in my case 8) of the designated user (in my case ostackpm). But it seems they are never released. How can I check the problem? Director is CentOS 7 server and the staging-ovirt driver is provided by the package: [root@director ~]# rpm -q python-ovirt-engine-sdk4 python-ovirt-engine-sdk4-4.3.2-2.el7.x86_64 [root@director ~]# I didn't configure the oVirt repo but only installed the latest stable available for 4.3.9: wget https://resources.ovirt.org/pub/ovirt-4.3/rpm/el7/x86_64/python-ovirt-engin… sudo yum localinstall python-ovirt-engine-sdk4-4.3.2-2.el7.x86_64.rpm Anyone with experience on this? In the mean time any way to use a command using api to kill the stale (I think) sessions? Thanks, Gianluca

2 4

Virtual machine replica - DR
by ccesario＠blueit.com.br 28 Apr '20

28 Apr '20

Hello, Does someone know any tool/method to replicate the VMS from a "Production" Cluster to "Secondary" Cluster, to provide a DR solution without Storage replication dependency or Gluster Storage. Like Veeam, Zerto toosl do with other hypervisors. Is there anyway, tool, product to do it!? Regards Carlos

2 2

Custom ignition in cloud-init?
by Wesley Stewart 26 Apr '20

26 Apr '20

Before anyone tells me this is now included in 4.4.0, I saw this, but I don't think I'm willing to update my centos7 host to centos8 yet. (But perhaps that will be the answer). Currently on 4.3.9/Centos 7 I am trying to run fedora core is to test it out, and the ISO installer hangs on: "failed to isolate default target freezing" So I tried the QCOW2 image, but I'm looking at ways of running the ignition file. I see in the "run once" section i can deploy a custom unit script, and I was wondering is this filetype agnostic? If I generate a JSON ignition script and put it in there will it get passed through correctly ? Or will I need to update to 4.4.0? I also found: https://gerrit.ovirt.org/#/c/100008/ This was abondoned for a "better solution" last September. Was this referring to the changes in 4.4.0? Lastly has anyone who was running 4.3.9 upgrade their centos host to centos8 and then upgrade ovirt without any issues? I usually try and wait at least a couple of minor version changes before switching to a new major version. Thanks guys!

1 0

Ovirt vs lvm?
by csabany＠freemail.hu 26 Apr '20

26 Apr '20

Hi, Our production ovirt system looks like: standalone management server, vesion 4.3.9, 6 clusters, 28 nodes (v4.2, v4.3) , one storage domain, (FC SAN Storages), centos7 vm-s , and some windows vms. I have a returning problem. Sometime when i power off a vm and power on again , i get an error message our linux vm (when we use lvm of course): dracut: Read-only locking type set. Write locks are prohibited., dracut: Can't get lock for vg. I can repair only 70% of damaged vm. I tried to localize the problem, but a can`t. The error occured randomly every cluster, every storage on last 2 years. Has anyone ever encountered such a problem?

5 10

[ANN] oVirt 4.3.10 First Release Candidate is now available for testing
by Lev Veyde 24 Apr '20

24 Apr '20

The oVirt Project is pleased to announce the availability of oVirt 4.3.10 First Release Candidate for testing as of April 25th, 2020. This update is the tenth in a series of stabilization updates to the 4.3 series. This release is available now on x86_64 architecture for: * Red Hat Enterprise Linux 7.7 or later (but < 8) * CentOS Linux (or similar) 7.7 or later (but < 8) This release supports Hypervisor Hosts on x86_64 and ppc64le architectures for: * Red Hat Enterprise Linux 7.7 or later (but < 8) * CentOS Linux (or similar) 7.7 or later (but < 8) * oVirt Node 4.3 (available for x86_64 only) See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is already available - oVirt Node is already available[2] Additional Resources: * Read more about the oVirt 4.3.10 release highlights: http://www.ovirt.org/release/4.3.10/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.3.10/ [2] http://resources.ovirt.org/pub/ovirt-4.3-pre/iso/ -- Lev Veyde Senior Software Engineer, RHCE | RHCVA | MCITP Red Hat Israel <https://www.redhat.com> lev(a)redhat.com | lveyde(a)redhat.com <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 0

How to force removal of old host from Engine
by Shareef Jalloq 24 Apr '20

24 Apr '20

Hi, I seem to have got a stale host in my engine that I can't remove. I recently reinstalled oVirt Node on this host and while trying to refresh the host in the engine, have got it in some state where I can't do anything. The host is listed as Status=Unassigned. Under the Management pull down I only have Restart and Stop options, both of which error if selected. The Remove button is not available. How do I force a removal of this host from the view so I can reload it? Shareef.

4 13

Move Hosted Engine VM to a different storage domain
by Anton Louw 24 Apr '20

24 Apr '20

Hi All, I know this question has been asked before, by myself included. I was hoping that someone has run through the exercise of moving the hosted engine VM to a different storage domain. I have tried many routes, but the backup and restore does not work for me. Is there anybody that can perhaps give me some guidelines or a process I can follow? The reason I need to move the HE VM is because we are decommissioning the current storage array where the HE VM is located. Thank you very much Anton Louw Cloud Engineer: Storage and Virtualization ______________________________________ D: 087 805 1572 | M: N/A A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg anton.louw(a)voxtelecom.co.za www.vox.co.za

1 0

VM disk I/O
by ozmen62＠hotmail.com 23 Apr '20

23 Apr '20

On oVirt 4.3. i installed w10_64 with q35 cpu. i've used vm optimizer for better performans for end-users. it seams good. But i need more performance guidelines. Ex. Our system has FC storage, is tere any options for better read/write performans, Hugepage, write through Like this, if you have any suggestions, could you share Thanks

3 3

Re: Safely disable firewalld [Ovirt 4.3]
by Strahil Nikolov 23 Apr '20

23 Apr '20

On April 22, 2020 10:45:49 PM GMT+03:00, Edson Richter <edsonrichter(a)hotmail.com> wrote: >De: Strahil Nikolov <hunter86_bg(a)yahoo.com> >Enviado: quarta-feira, 22 de abril de 2020 15:45 >Para: users(a)ovirt.org <users(a)ovirt.org>; Edson Richter ><edsonrichter(a)hotmail.com>; eevans(a)digitaldatatechs.com ><eevans(a)digitaldatatechs.com>; francesco(a)shellrent.com ><francesco(a)shellrent.com> >Assunto: Re: [ovirt-users] Re: Safely disable firewalld [Ovirt 4.3] > >On April 22, 2020 6:33:40 PM GMT+03:00, Edson Richter ><edsonrichter(a)hotmail.com> wrote: >>I'm in no way a ovirt expert. But as Linux administrator, I would say >>that firewalld and iptables are "front-end" to kernel internal >security >>tables, so, in the final of the day, will provide *almost* same >>functionality. >> >>Seems that firewalld is able to activate modules without restarting >>entire firewall infra-structure, which iptables is not capable of. >This >>leverage an advantage for firewalld, specially where you would not >have >>interruptions in existing stateful connections. >> >>I've used iptables *always* as replacement for firewalld because of >>almost 20 yrs using iptables - this is the first step in all about >>hundred Centos7 installations I've done past few years. I just can't >>throw away all my scripts that block hackers, provide 2 and 3 way >>"knock-knock" lockers, fail2ban customizations, nat rules, DMZ, and >>all, everytime a new "firewall" front end appears. I've seen at least >>two or three "iptables killers tech" in the past, and iptables still >is >>the king - at least for me. >> >>Again, repeating myself, I'm no ovirt specialist. Just a sazonal linux >>admin which will not jump from iptables train yet. >> >>Perhaps, I would not reccomend to completely deactivate all firewall >in >>any server! If it is the case, I would instead to advice to just >>replace firewalld with iptables-service (at least, in Centos7) - but >>only in case you have too much to loose without iptables (as am I). >> >>Regards, >> >>Edson >> >> >>________________________________ >>De: eevans(a)digitaldatatechs.com <eevans(a)digitaldatatechs.com> >>Enviado: quarta-feira, 22 de abril de 2020 12:18 >>Para: francesco(a)shellrent.com <francesco(a)shellrent.com>; >>users(a)ovirt.org <users(a)ovirt.org> >>Assunto: [ovirt-users] Re: Safely disable firewalld [Ovirt 4.3] >> >>If you log in to the cockpit, you can add services or custom ports >>easily. I would not disable the firewall. >><hostname:9090> for the cockpit. >> >>Eric Evans >>Digital Data Services LLC. >>304.660.9080 >> >> >>-----Original Message----- >>From: francesco(a)shellrent.com <francesco(a)shellrent.com> >>Sent: Tuesday, April 21, 2020 12:54 PM >>To: users(a)ovirt.org >>Subject: [ovirt-users] Safely disable firewalld [Ovirt 4.3] >> >>Hi all, >> >>I was wondering if it's "safe" disabling entirely the firewalld >service >>and manage the firewall only via iptables, on the host and on the >>hosted engine (a self-hosted engine). It would make a lot easier the >>managing the firewall rules for me because of many automatisms I >>created based on iptables. Did anyone manage to do this? Any >>contraindication for doing this or precaution that I have to take care >>of? >> >>Thanks for your time and help, >>Francesco >>_______________________________________________ >>Users mailing list -- users(a)ovirt.org >>To unsubscribe send an email to users-leave(a)ovirt.org Privacy >>Statement: >>https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… >>oVirt Code of Conduct: >>https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… >>List Archives: >>https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi… >>_______________________________________________ >>Users mailing list -- users(a)ovirt.org >>To unsubscribe send an email to users-leave(a)ovirt.org >>Privacy Statement: >>https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… >>oVirt Code of Conduct: >>https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… >>List Archives: >>https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi… > >Keep in mind that I had some issues with oVirt (was more than a year >ago - so don't ask for details) when either firewalld or SELINUX were >down. > >With so much experience in IPTABLES - it's understandable, but keep in >mind that in CentOS/RHEL 8 iptables command is just a translator to >nftables - with limited capability and I don't think that it was a >coincidence . With firewalld you can still achive 90-95% of what you >could do in IPTABLES while the rules are quite clear even for a new >admin. > >What I really like is that you can predefine the ports and protos for >a specific service and easily deploy it via salt or ansible. > >Best Regards, >Strahil Nikolov > > >Good to know! >When I have time to return to my oVirt tests, I"ll take a careull look >at it. >I'll also add a note into our Centos 8 migration plans that all >iptables scripts will have to be rewriten. > >Thanks, > >Edson Richter As you are not the only one with zillions of iptables rules - check the CentOS mailing list. Maybe they got a way to keep you on iptables. Best Regards, Sttrahil Nikolov

2 1

Re: oVirt and KeyCloak intergration
by Artur Socha 23 Apr '20

23 Apr '20

On Wed, 2020-04-22 at 12:28 +0000, Anton Louw wrote: > > > > Hi Artur, > > > > You are a champion! I can access oVirt now. Thank you so much. > You're welcome!I am happy it worked because I had no more ideas what to check next :) > One last question, can I create additional groups in ie. Read Only, etc? And > then will this be done in KeyCloak or in the oVIrt UI? This ovirt-administrator group is only for accessing(authentication & sso) ovirt engine admin panel and, as far as I understand it, it does restrict access to particular engine's admin functions. I think that proper authorization is done only at the engine's UI level. See 'User Authorization' under https://ovirt.org/documentation/admin-guide/chap-Users_and_Roles.html > > > Thank you > > > > > > Anton Louw > > > Cloud Engineer: Storage and Virtualization at Vox > > > > > > > T: 087 805 0000 | D: 087 805 1572 > M: N/A > > E: anton.louw(a)voxtelecom.co.za > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > From: Artur Socha <asocha(a)redhat.com> > > > Sent: 22 April 2020 13:21 > > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za>; users(a)ovirt.org > > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > > > On Wed, 2020-04-22 at 13:09 +0200, Artur Socha wrote: > > > On Wed, 2020-04-22 at 10:42 +0000, Anton Louw wrote: > > > > > > > > Ok so this is definitely looking better. I get an error, but at least now > it > > > > is saying : “The user admin@openidchttp is not authorized to perform > login” > > > > > > > > This is strange though, because admin in by default should be allowed > > > > access? > > > > > > Well, yes and no :) > > > > > > In order for user to be considered admin (for ovirt engine) it must belong > to > > > keycloak's ovirt-administrator group (in keycloak admin panel see Manage- > > > > Groups->Members) > > > > Small clarification: > > > > In keycloak admin panel see Manage-> Groups-> 'ovirt-administrator' -> Members > > > > Note that the group must have the exact name: ovirt-administrator > > > > > > > > > > I think you are very close to have it up-and-running. > > > > > > > > > > > > > > From: Anton Louw > > > > Sent: 22 April 2020 12:38 > > > > To: Artur Socha <asocha(a)redhat.com>; > users(a)ovirt.org > > > > Subject: RE: [ovirt-users] oVirt and KeyCloak intergration > > > > > > > > Perfect, I’ll test and let you know. > > > > > > > > Thanks > > > > > > > > From: Artur Socha <asocha(a)redhat.com> > > > > Sent: 22 April 2020 12:32 > > > > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za>; > users(a)ovirt.org > > > > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > > > > > > > + users(a)ovirt.org > > > > > > > > On Wed, 2020-04-22 at 09:57 +0000, Anton Louw wrote: > > > > > > > > > > > > > > > Hi Artur, > > > > > > > > > > I would just like to make sure I am following correctly, comparing your > > > > > entries against mine. > > > > > > > > > > Your setup: > > > > > ... > > > > > config.mapAuthRecord.regex.pattern = > > > > > ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > > > > ... > > > > > > > > > > > > > > > My setup: > > > > > … > > > > > config.mapAuthRecord.regex.pattern = > > > > > ^(?<user>.*?)((\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > > > > … > > > > > > > > > > Should I add the additional 2 “\\” in on my side? > > > > > > > > > > > > Yes, please try adding it. In my case I learned about this issue by > > > > debugging > > > > the code because the real exception generated by incorrect regexp syntax > was > > > > hidden behind generic error message giving no clues about the true cause. > > > > > > > > > > > > > > Your setup: > > > > > ... > > > > > <LocationMatch ^/ovirt-engine/sso/(interactive-login- > > > > > negotiate|oauth/token- > > > > > http-auth)|^/ovirt-engine/callback> > > > > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > > > > > > > Require valid-user > > > > > AuthType openid-connect > > > > > > > > > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\"content=\"0; > > > > > url=/ovirt-engine/sso/login-unauthorized\"/><body><ahref=\"/ovirt- > > > > > engine/sso/login-unauthorized\">Here</a></body></html>" > > > > > </If> > > > > > </LocationMatch> > > > > > … > > > > > > > > > > My setup: > > > > > … > > > > > <LocationMatch ^/ovirt-engine/sso/(interactive-login- > > > > > negotiate|oauth/token- > > > > > http-auth)|^/ovirt-engine/callback> > > > > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > > > > > > > Require valid-user > > > > > AuthType openid-connect > > > > > > > > > > ErrorDocument 401 "<html><meta http-equiv='refresh' content='0; > > > > > url=/ovirt-engine/sso/login-unauthorized'/><body><a href='/ovirt- > > > > > engine/sso/login-unauthorized'>Here</a></body></html>" > > > > > </If> > > > > > </LocationMatch> > > > > > … > > > > > > > > > > I remember I had syntax errors, but mine was changed. > > > > > > > > > > Does this look fine to you? > > > > > > > > > > > > Yeah, your version looks good too. You have ' instead of " so that is ok. > > > > > > > > > > > > Anton Louw > > > > Cloud Engineer: Storage and Virtualization at Vox > > > > T: 087 805 0000 | D: 087 805 1572 > > > > M: N/A > > > > E: anton.louw(a)voxtelecom.co.za > > > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > > > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks > > > > > > > > > > > > > > > > > > > > Anton Louw > > > > > Cloud Engineer: Storage and Virtualization at Vox > > > > > T: 087 805 0000 | D: 087 805 1572 > > > > > M: N/A > > > > > E: anton.louw(a)voxtelecom.co.za > > > > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > > > > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > From: Anton Louw > > > > > Sent: 22 April 2020 10:07 > > > > > To: Artur Socha <asocha(a)redhat.com> > > > > > Subject: RE: [ovirt-users] oVirt and KeyCloak intergration > > > > > > > > > > Hi Artur, > > > > > > > > > > Great, I will try the below and let you know. I appreciate your efforts. > > > > > > > > > > Sure, you may report it, I was in such a rush that I only hit “reply” > and > > > > > not “Reply All” > > > > > > > > > > I do recall that I had to make some changes to the below as the it > > > > > complained about syntax errors: > > > > > > > > > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\" > > > > > content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><a > > > > > href=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" > > > > > </If> > > > > > </LocationMatch> > > > > > > > > > > I will let you know the outcome when I change the below as you > suggested. > > > > > > > > > > Cheers > > > > > > > > > > From: Artur Socha <asocha(a)redhat.com> > > > > > > Sent: 22 April 2020 09:51 > > > > > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za> > > > > > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > > > > > > > > > I checked your logs and I did not notice anything suspicious. > > > > > However, now I recall I made some changes compared to blog post > > > > > example: > > > > > > > > > > 1) /etc/ovirt-engine/extensions.d/openid-http-mapping.properties > > > > > I added escaping in regexp for '\' > > > > > ... > > > > > config.mapAuthRecord.regex.pattern = > > > > > ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > > > > ... > > > > > > > > > > 2) /etc/httpd/ovirt-openidc.conf > > > > > Escaping for '"' in error document snippet > > > > > ... > > > > > <LocationMatch ^/ovirt-engine/sso/(interactive-login- > > > > > negotiate|oauth/token-http-auth)|^/ovirt-engine/callback> > > > > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > > > > > > > Require valid-user > > > > > AuthType openid-connect > > > > > > > > > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\" > > > > > content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><a > > > > > href=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" > > > > > </If> > > > > > </LocationMatch> > > > > > > > > > > ... > > > > > > > > > > These two issues were most probably caused by the blog site rendering. > > > > > > > > > > > > > > > You might want to check engine.log (or server.log not really sure which > > > > > one was that) for aaa extension initialization logs. They should > > > > > appear at the beginning just after restarting engine. > > > > > > > > > > Unfortunately, at the moment I do not have running keycloak setup (I > > > > > used to have a local VM) but I will try to find some time to set it up > > > > > again once I'm done with another work item that actually consumes > > > > > almost entire disk space for my 2 machines) > > > > > > > > > > Please let me know if anything changes after applying these config > > > > > changes. It this works for you then I will request the blog post to be > > > > > updated. > > > > > > > > > > Do you mind if I keep(re-post) this discussion back to users@ovirt in > > > > > case other might have similar issues with keycloak integration? > > > > > > > > > > A. > > > > > > > > > > On Wed, 2020-04-22 at 06:35 +0000, Anton Louw wrote: > > > > > > > > > > > > Hi Artru, > > > > > > > > > > > > Thank you for the reply. The post [1] is actually the main source of > > > > > > information I worked from in order top get everything configured. In > > > > > > the post[1] I ran through the whole testing section, and everything > > > > > > works as expected. I can see the VMs etc when using the python > > > > > > script. > > > > > > > > > > > > In my case we are not using ldap as a provider, I tried using > > > > > > keycloak directly as a provider, I am not sure if that is where I am > > > > > > going wrong? > > > > > > > > > > > > I have attached the last part of the apache ssl_access_log when I > > > > > > tried logging in this morning. I have also attached the engine log. > > > > > > > > > > > > Thanks > > > > > > > > > > > > > > > > > > Anton Louw > > > > > > Cloud Engineer: Storage and Virtualization at Vox > > > > > > T: 087 805 0000 | D: 087 805 1572 > > > > > > M: N/A > > > > > > E: anton.louw(a)voxtelecom.co.za > > > > > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > > > > > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > From: Artru Socha <asocha(a)redhat.com> > > > > > > > Sent: 21 April 2020 15:20 > > > > > > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za>; > users(a)ovirt.org > > > > > > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > > > > > > > > > > > On Tue, 2020-04-21 at 12:48 +0000, Anton Louw wrote: > > > > > > > > > > > > > > Hi Everybody, > > > > > > > > > > > > > > > > > > > > Hi Anton, > > > > > > > > > > > > > Has anybody gone the route of using KeyCloak to login to oVirt? > > > > > > > KeyCloak has been configured and the neccesary configs have also > > > > > > been > > > > > > > done on the engine. It redirects perfectly from the oVirt Web Login > > > > > > > page to KeyCloak, but after logging into KeyCloak, I get redirected > > > > > > > back to the oVirt Web Login. When trying to login again, I get the > > > > > > > below error: > > > > > > > > > > > > > > > > > > > > > > > > > > > > server_error: Missing parameter: 'params' > > > > > > > > > > > > > > > > > > > Not so long ago I managed to setup ovirt engine with keyloack (using > > > > > > ldap as users provider). Hopefully, I would be able to help you with > > > > > > it. > > > > > > > > > > > > There is excellent blog post[1] available. You might also check > > > > > > keycloak+ldap post [2], however, when I was working on the > > > > > > integration > > > > > > I was not aware of if and did not test it. > > > > > > > > > > > > The error you mentioned does not really indicate what exactly is > > > > > > wrong > > > > > > but it might suggest that there is some sort of misconfiguration with > > > > > > apache (you need to install and configure mod_auth_openidc as > > > > > > described > > > > > > at [1]). At least that happened in my case. > > > > > > > > > > > > In case you have already gone through it you could probably check > > > > > > apache logs. > > > > > > > > > > > > Under [1] there is a python script that can be used to check api > > > > > > calls, > > > > > > please update username/password and test it against your environment. > > > > > > > > > > > > > > > > > > Would it be possible post relevant piece of apache logs together with > > > > > > engine.log ? > > > > > > > > > > > > > > > > > > [1] > > > > > > > > > > > > https://blogs.ovirt.org/2019/01/federate-ovirt-engine-authentication-to-ope… > > > > > > [2] > > > > > > > > > > > > https://blogs.ovirt.org/2018/08/ovirt-saml-with-keyloak-using-389ds-user-fe… > > > > > > Artur > > > > > > > > > > > > > > > > > > > > > > > > > I have checked all the logs, but nothing is telling me what exactly > > > > > > > the issue is. > > > > > > > > > > > > > > If anybody has any idea, please let me know. > > > > > > > > > > > > > > Thanks > > > > > > > > > > > > > > Anton Louw > > > > > > > Cloud Engineer: Storage and Virtualization at Vox > > > > > > > T: 087 805 0000 | D: 087 805 1572 > > > > > > > M: N/A > > > > > > > E: anton.louw(a)voxtelecom.co.za > > > > > > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > > > > > > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Disclaimer > > > > > > > The contents of this email are confidential to the sender and the > > > > > > > intended recipient. Unless the contents are clearly and entirely of > > > > > > a > > > > > > > personal nature, they are subject to copyright in favour of the > > > > > > > holding company of the Vox group of companies. Any recipient who > > > > > > > receives this email in error should immediately report the error to > > > > > > > the sender and permanently delete this email from all storage > > > > > > > devices. > > > > > > > > > > > > > > This email has been scanned for viruses and malware, and may have > > > > > > > been automatically archived by Mimecast Ltd, an innovator in > > > > > > Software > > > > > > > as a Service (SaaS) for business. Providing a safer and more useful > > > > > > > place for your human generated data. Specializing in; Security, > > > > > > > archiving and compliance. To find out more Click Here. > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > Users mailing list -- users(a)ovirt.org > > > > > > > To unsubscribe send an email to > users-leave(a)ovirt.org > > > > > > > Privacy Statement: > https://www.ovirt.org/privacy-policy.html > > > > > > > oVirt Code of Conduct: > > > > > > > > https://www.ovirt.org/community/about/community-guidelines/ > > > > > > > List Archives: > > > > > > > > > > > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/S4I2I3MID4A4A… > > > > > > > > > > > > > > >

2 2

Batch delete Snapshots
by Christian Reiss 22 Apr '20

22 Apr '20

Hey folks, quick question: Can this be made batch-able? # gluster snapshot delete all System contains 1 snapshot(s). Do you still want to continue and delete them? (y/n) So for a script I could do a snapshot, copy the contents and auto-remove all snapshots after. I could go with snapshot list and act on those, but this seems like it should be in the code? -Chris. -- with kind regards, mit freundlichen Gruessen, Christian Reiss

2 1

Re: Safely disable firewalld [Ovirt 4.3]
by Strahil Nikolov 22 Apr '20

22 Apr '20

On April 22, 2020 6:33:40 PM GMT+03:00, Edson Richter <edsonrichter(a)hotmail.com> wrote: >I'm in no way a ovirt expert. But as Linux administrator, I would say >that firewalld and iptables are "front-end" to kernel internal security >tables, so, in the final of the day, will provide *almost* same >functionality. > >Seems that firewalld is able to activate modules without restarting >entire firewall infra-structure, which iptables is not capable of. This >leverage an advantage for firewalld, specially where you would not have >interruptions in existing stateful connections. > >I've used iptables *always* as replacement for firewalld because of >almost 20 yrs using iptables - this is the first step in all about >hundred Centos7 installations I've done past few years. I just can't >throw away all my scripts that block hackers, provide 2 and 3 way >"knock-knock" lockers, fail2ban customizations, nat rules, DMZ, and >all, everytime a new "firewall" front end appears. I've seen at least >two or three "iptables killers tech" in the past, and iptables still is >the king - at least for me. > >Again, repeating myself, I'm no ovirt specialist. Just a sazonal linux >admin which will not jump from iptables train yet. > >Perhaps, I would not reccomend to completely deactivate all firewall in >any server! If it is the case, I would instead to advice to just >replace firewalld with iptables-service (at least, in Centos7) - but >only in case you have too much to loose without iptables (as am I). > >Regards, > >Edson > > >________________________________ >De: eevans(a)digitaldatatechs.com <eevans(a)digitaldatatechs.com> >Enviado: quarta-feira, 22 de abril de 2020 12:18 >Para: francesco(a)shellrent.com <francesco(a)shellrent.com>; >users(a)ovirt.org <users(a)ovirt.org> >Assunto: [ovirt-users] Re: Safely disable firewalld [Ovirt 4.3] > >If you log in to the cockpit, you can add services or custom ports >easily. I would not disable the firewall. ><hostname:9090> for the cockpit. > >Eric Evans >Digital Data Services LLC. >304.660.9080 > > >-----Original Message----- >From: francesco(a)shellrent.com <francesco(a)shellrent.com> >Sent: Tuesday, April 21, 2020 12:54 PM >To: users(a)ovirt.org >Subject: [ovirt-users] Safely disable firewalld [Ovirt 4.3] > >Hi all, > >I was wondering if it's "safe" disabling entirely the firewalld service >and manage the firewall only via iptables, on the host and on the >hosted engine (a self-hosted engine). It would make a lot easier the >managing the firewall rules for me because of many automatisms I >created based on iptables. Did anyone manage to do this? Any >contraindication for doing this or precaution that I have to take care >of? > >Thanks for your time and help, >Francesco >_______________________________________________ >Users mailing list -- users(a)ovirt.org >To unsubscribe send an email to users-leave(a)ovirt.org Privacy >Statement: >https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… >oVirt Code of Conduct: >https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… >List Archives: >https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi… >_______________________________________________ >Users mailing list -- users(a)ovirt.org >To unsubscribe send an email to users-leave(a)ovirt.org >Privacy Statement: >https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… >oVirt Code of Conduct: >https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… >List Archives: >https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi… Keep in mind that I had some issues with oVirt (was more than a year ago - so don't ask for details) when either firewalld or SELINUX were down. With so much experience in IPTABLES - it's understandable, but keep in mind that in CentOS/RHEL 8 iptables command is just a translator to nftables - with limited capability and I don't think that it was a coincidence . With firewalld you can still achive 90-95% of what you could do in IPTABLES while the rules are quite clear even for a new admin. What I really like is that you can predefine the ports and protos for a specific service and easily deploy it via salt or ansible. Best Regards, Strahil Nikolov

2 1

Safely disable firewalld [Ovirt 4.3]
by francesco＠shellrent.com 22 Apr '20

22 Apr '20

Hi all, I was wondering if it's "safe" disabling entirely the firewalld service and manage the firewall only via iptables, on the host and on the hosted engine (a self-hosted engine). It would make a lot easier the managing the firewall rules for me because of many automatisms I created based on iptables. Did anyone manage to do this? Any contraindication for doing this or precaution that I have to take care of? Thanks for your time and help, Francesco

6 6

Re: oVirt and KeyCloak intergration
by Artur Socha 22 Apr '20

22 Apr '20

On Wed, 2020-04-22 at 10:42 +0000, Anton Louw wrote: > > > Ok so this is definitely looking better. I get an error, but at least now it > is saying : “The user admin@openidchttp is not authorized to perform login” > > This is strange though, because admin in by default should be allowed access? Well, yes and no :) In order for user to be considered admin (for ovirt engine) it must belong to keycloak's ovirt-administrator group (in keycloak admin panel see Manage- >Groups->Members) I think you are very close to have it up-and-running. > > From: Anton Louw > Sent: 22 April 2020 12:38 > To: Artur Socha <asocha(a)redhat.com>; users(a)ovirt.org > Subject: RE: [ovirt-users] oVirt and KeyCloak intergration > > Perfect, I’ll test and let you know. > > Thanks > > From: Artur Socha <asocha(a)redhat.com> > Sent: 22 April 2020 12:32 > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za>; users(a)ovirt.org > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > + users(a)ovirt.org > > On Wed, 2020-04-22 at 09:57 +0000, Anton Louw wrote: > > > > > > Hi Artur, > > > > I would just like to make sure I am following correctly, comparing your > > entries against mine. > > > > Your setup: > > ... > > config.mapAuthRecord.regex.pattern = > > ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > ... > > > > > > My setup: > > … > > config.mapAuthRecord.regex.pattern = > > ^(?<user>.*?)((\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > … > > > > Should I add the additional 2 “\\” in on my side? > > > Yes, please try adding it. In my case I learned about this issue by debugging > the code because the real exception generated by incorrect regexp syntax was > hidden behind generic error message giving no clues about the true cause. > > > > > Your setup: > > ... > > <LocationMatch ^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token- > > http-auth)|^/ovirt-engine/callback> > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > Require valid-user > > AuthType openid-connect > > > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\"content=\"0; > > url=/ovirt-engine/sso/login-unauthorized\"/><body><ahref=\"/ovirt- > > engine/sso/login-unauthorized\">Here</a></body></html>" > > </If> > > </LocationMatch> > > … > > > > My setup: > > … > > <LocationMatch ^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token- > > http-auth)|^/ovirt-engine/callback> > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > Require valid-user > > AuthType openid-connect > > > > ErrorDocument 401 "<html><meta http-equiv='refresh' content='0; > > url=/ovirt-engine/sso/login-unauthorized'/><body><a href='/ovirt- > > engine/sso/login-unauthorized'>Here</a></body></html>" > > </If> > > </LocationMatch> > > … > > > > I remember I had syntax errors, but mine was changed. > > > > Does this look fine to you? > > > Yeah, your version looks good too. You have ' instead of " so that is ok. > > > Anton Louw > Cloud Engineer: Storage and Virtualization at Vox > T: 087 805 0000 | D: 087 805 1572 > M: N/A > E: anton.louw(a)voxtelecom.co.za > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za > > > > > > > > > > > > > > Thanks > > > > > > > > Anton Louw > > Cloud Engineer: Storage and Virtualization at Vox > > T: 087 805 0000 | D: 087 805 1572 > > M: N/A > > E: anton.louw(a)voxtelecom.co.za > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > From: Anton Louw > > Sent: 22 April 2020 10:07 > > To: Artur Socha <asocha(a)redhat.com> > > Subject: RE: [ovirt-users] oVirt and KeyCloak intergration > > > > Hi Artur, > > > > Great, I will try the below and let you know. I appreciate your efforts. > > > > Sure, you may report it, I was in such a rush that I only hit “reply” and > > not “Reply All” > > > > I do recall that I had to make some changes to the below as the it > > complained about syntax errors: > > > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\" > > content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><a > > href=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" > > </If> > > </LocationMatch> > > > > I will let you know the outcome when I change the below as you suggested. > > > > Cheers > > > > From: Artur Socha <asocha(a)redhat.com> > > Sent: 22 April 2020 09:51 > > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za> > > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > > > I checked your logs and I did not notice anything suspicious. > > However, now I recall I made some changes compared to blog post > > example: > > > > 1) /etc/ovirt-engine/extensions.d/openid-http-mapping.properties > > I added escaping in regexp for '\' > > ... > > config.mapAuthRecord.regex.pattern = > > ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > ... > > > > 2) /etc/httpd/ovirt-openidc.conf > > Escaping for '"' in error document snippet > > ... > > <LocationMatch ^/ovirt-engine/sso/(interactive-login- > > negotiate|oauth/token-http-auth)|^/ovirt-engine/callback> > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > Require valid-user > > AuthType openid-connect > > > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\" > > content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><a > > href=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" > > </If> > > </LocationMatch> > > > > ... > > > > These two issues were most probably caused by the blog site rendering. > > > > > > You might want to check engine.log (or server.log not really sure which > > one was that) for aaa extension initialization logs. They should > > appear at the beginning just after restarting engine. > > > > Unfortunately, at the moment I do not have running keycloak setup (I > > used to have a local VM) but I will try to find some time to set it up > > again once I'm done with another work item that actually consumes > > almost entire disk space for my 2 machines) > > > > Please let me know if anything changes after applying these config > > changes. It this works for you then I will request the blog post to be > > updated. > > > > Do you mind if I keep(re-post) this discussion back to users@ovirt in > > case other might have similar issues with keycloak integration? > > > > A. > > > > On Wed, 2020-04-22 at 06:35 +0000, Anton Louw wrote: > > > > > > > > > Hi Artru, > > > > > > Thank you for the reply. The post [1] is actually the main source of > > > information I worked from in order top get everything configured. In > > > the post[1] I ran through the whole testing section, and everything > > > works as expected. I can see the VMs etc when using the python > > > script. > > > > > > In my case we are not using ldap as a provider, I tried using > > > keycloak directly as a provider, I am not sure if that is where I am > > > going wrong? > > > > > > I have attached the last part of the apache ssl_access_log when I > > > tried logging in this morning. I have also attached the engine log. > > > > > > Thanks > > > > > > > > > Anton Louw > > > Cloud Engineer: Storage and Virtualization at Vox > > > T: 087 805 0000 | D: 087 805 1572 > > > M: N/A > > > E: anton.louw(a)voxtelecom.co.za > > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > From: Artru Socha <asocha(a)redhat.com> > > > Sent: 21 April 2020 15:20 > > > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za>; users(a)ovirt.org > > > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > > > > > On Tue, 2020-04-21 at 12:48 +0000, Anton Louw wrote: > > > > > > > > > > > > Hi Everybody, > > > > > > > > > > > Hi Anton, > > > > > > > Has anybody gone the route of using KeyCloak to login to oVirt? > > > > KeyCloak has been configured and the neccesary configs have also > > > been > > > > done on the engine. It redirects perfectly from the oVirt Web Login > > > > page to KeyCloak, but after logging into KeyCloak, I get redirected > > > > back to the oVirt Web Login. When trying to login again, I get the > > > > below error: > > > > > > > > > > > > > > > > server_error: Missing parameter: 'params' > > > > > > > > > > Not so long ago I managed to setup ovirt engine with keyloack (using > > > ldap as users provider). Hopefully, I would be able to help you with > > > it. > > > > > > There is excellent blog post[1] available. You might also check > > > keycloak+ldap post [2], however, when I was working on the > > > integration > > > I was not aware of if and did not test it. > > > > > > The error you mentioned does not really indicate what exactly is > > > wrong > > > but it might suggest that there is some sort of misconfiguration with > > > apache (you need to install and configure mod_auth_openidc as > > > described > > > at [1]). At least that happened in my case. > > > > > > In case you have already gone through it you could probably check > > > apache logs. > > > > > > Under [1] there is a python script that can be used to check api > > > calls, > > > please update username/password and test it against your environment. > > > > > > > > > Would it be possible post relevant piece of apache logs together with > > > engine.log ? > > > > > > > > > [1] > > > > > https://blogs.ovirt.org/2019/01/federate-ovirt-engine-authentication-to-ope… > > > [2] > > > > > https://blogs.ovirt.org/2018/08/ovirt-saml-with-keyloak-using-389ds-user-fe… > > > > > > Artur > > > > > > > > > > > > > I have checked all the logs, but nothing is telling me what exactly > > > > the issue is. > > > > > > > > If anybody has any idea, please let me know. > > > > > > > > Thanks > > > > > > > > Anton Louw > > > > Cloud Engineer: Storage and Virtualization at Vox > > > > T: 087 805 0000 | D: 087 805 1572 > > > > M: N/A > > > > E: anton.louw(a)voxtelecom.co.za > > > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Disclaimer > > > > The contents of this email are confidential to the sender and the > > > > intended recipient. Unless the contents are clearly and entirely of > > > a > > > > personal nature, they are subject to copyright in favour of the > > > > holding company of the Vox group of companies. Any recipient who > > > > receives this email in error should immediately report the error to > > > > the sender and permanently delete this email from all storage > > > > devices. > > > > > > > > This email has been scanned for viruses and malware, and may have > > > > been automatically archived by Mimecast Ltd, an innovator in > > > Software > > > > as a Service (SaaS) for business. Providing a safer and more useful > > > > place for your human generated data. Specializing in; Security, > > > > archiving and compliance. To find out more Click Here. > > > > > > > > > > > > _______________________________________________ > > > > Users mailing list -- users(a)ovirt.org > > > > To unsubscribe send an email to users-leave(a)ovirt.org > > > > Privacy Statement: https://www.ovirt.org/privacy-policy.html > > > > oVirt Code of Conduct: > > > > https://www.ovirt.org/community/about/community-guidelines/ > > > > List Archives: > > > > > > > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/S4I2I3MID4A4A… > > > > > > >

2 2

Re: oVirt and KeyCloak intergration
by Anton Louw 22 Apr '20

22 Apr '20

Ok so this is definitely looking better. I get an error, but at least now it is saying : “The user admin@openidchttp is not authorized to perform login” This is strange though, because admin in by default should be allowed access? Anton Louw Cloud Engineer: Storage and Virtualization ______________________________________ D: 087 805 1572 | M: N/A A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg anton.louw(a)voxtelecom.co.za www.vox.co.za From: Anton Louw Sent: 22 April 2020 12:38 To: Artur Socha <asocha(a)redhat.com>; users(a)ovirt.org Subject: RE: [ovirt-users] oVirt and KeyCloak intergration Perfect, I’ll test and let you know. Thanks From: Artur Socha <asocha(a)redhat.com<mailto:asocha@redhat.com>> Sent: 22 April 2020 12:32 To: Anton Louw <Anton.Louw(a)voxtelecom.co.za<mailto:Anton.Louw@voxtelecom.co.za>>; users(a)ovirt.org<mailto:users@ovirt.org> Subject: Re: [ovirt-users] oVirt and KeyCloak intergration + users(a)ovirt.org<mailto:users@ovirt.org> On Wed, 2020-04-22 at 09:57 +0000, Anton Louw wrote: Hi Artur, I would just like to make sure I am following correctly, comparing your entries against mine. Your setup: ... config.mapAuthRecord.regex.pattern = ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$<file://(%3f%3cat%3e@)(%3f%3csuffix%3e.*%3f)@.*)(%3f%3crealm%3e@.*))$)$> ... My setup: … config.mapAuthRecord.regex.pattern = ^(?<user>.*?)((\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$<file://(%3f%3cat%3e@)(%3f%3csuffix%3e.*%3f)@.*)(%3f%3crealm%3e@.*))$)$> … Should I add the additional 2 “\\” in on my side? Yes, please try adding it. In my case I learned about this issue by debugging the code because the real exception generated by incorrect regexp syntax was hidden behind generic error message giving no clues about the true cause. Your setup: ... <LocationMatch ^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token-http-auth)|^/ovirt-engine/callback> <If "req('Authorization') !~ /^(Bearer|Basic)/i"> Require valid-user AuthType openid-connect ErrorDocument 401 "<html><meta http-equiv=\"refresh\"content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><ahref=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" </If> </LocationMatch> … My setup: … <LocationMatch ^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token-http-auth)|^/ovirt-engine/callback> <If "req('Authorization') !~ /^(Bearer|Basic)/i"> Require valid-user AuthType openid-connect ErrorDocument 401 "<html><meta http-equiv='refresh' content='0; url=/ovirt-engine/sso/login-unauthorized'/><body><a href='/ovirt-engine/sso/login-unauthorized'>Here</a></body></html>" </If> </LocationMatch> … I remember I had syntax errors, but mine was changed. Does this look fine to you? Yeah, your version looks good too. You have ' instead of " so that is ok. Thanks Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: anton.louw(a)voxtelecom.co.za<mailto:anton.louw@voxtelecom.co.za> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<http://www.vox.co.za> [F]<https://www.facebook.com/voxtelecomZA> [T]<https://www.twitter.com/voxtelecom> [I]<https://www.instagram.com/voxtelecomza> [L]<https://www.linkedin.com/company/voxtelecom> [Y]<https://www.youtube.com/user/VoxTelecom> From: Anton Louw Sent: 22 April 2020 10:07 To: Artur Socha <asocha(a)redhat.com<mailto:asocha@redhat.com>> Subject: RE: [ovirt-users] oVirt and KeyCloak intergration Hi Artur, Great, I will try the below and let you know. I appreciate your efforts. Sure, you may report it, I was in such a rush that I only hit “reply” and not “Reply All” I do recall that I had to make some changes to the below as the it complained about syntax errors: ErrorDocument 401 "<html><meta http-equiv=\"refresh\" content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><a href=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" </If> </LocationMatch> I will let you know the outcome when I change the below as you suggested. Cheers From: Artur Socha <asocha(a)redhat.com<mailto:asocha@redhat.com>> Sent: 22 April 2020 09:51 To: Anton Louw <Anton.Louw(a)voxtelecom.co.za<mailto:Anton.Louw@voxtelecom.co.za>> Subject: Re: [ovirt-users] oVirt and KeyCloak intergration I checked your logs and I did not notice anything suspicious. However, now I recall I made some changes compared to blog post example: 1) /etc/ovirt-engine/extensions.d/openid-http-mapping.properties I added escaping in regexp for '\' ... config.mapAuthRecord.regex.pattern = ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$<file://(%3f%3cat%3e@)(%3f%3csuffix%3e.*%3f)@.*)(%3f%3crealm%3e@.*))$)$> ... 2) /etc/httpd/ovirt-openidc.conf Escaping for '"' in error document snippet ... <LocationMatch ^/ovirt-engine/sso/(interactive-login- negotiate|oauth/token-http-auth)|^/ovirt-engine/callback> <If "req('Authorization') !~ /^(Bearer|Basic)/i"> Require valid-user AuthType openid-connect ErrorDocument 401 "<html><meta http-equiv=\"refresh\" content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><a href=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" </If> </LocationMatch> ... These two issues were most probably caused by the blog site rendering. You might want to check engine.log (or server.log not really sure which one was that) for aaa extension initialization logs. They should appear at the beginning just after restarting engine. Unfortunately, at the moment I do not have running keycloak setup (I used to have a local VM) but I will try to find some time to set it up again once I'm done with another work item that actually consumes almost entire disk space for my 2 machines) Please let me know if anything changes after applying these config changes. It this works for you then I will request the blog post to be updated. Do you mind if I keep(re-post) this discussion back to users@ovirt in case other might have similar issues with keycloak integration? A. On Wed, 2020-04-22 at 06:35 +0000, Anton Louw wrote: > > > Hi Artru, > > Thank you for the reply. The post [1] is actually the main source of > information I worked from in order top get everything configured. In > the post[1] I ran through the whole testing section, and everything > works as expected. I can see the VMs etc when using the python > script. > > In my case we are not using ldap as a provider, I tried using > keycloak directly as a provider, I am not sure if that is where I am > going wrong? > > I have attached the last part of the apache ssl_access_log when I > tried logging in this morning. I have also attached the engine log. > > Thanks > > > Anton Louw > Cloud Engineer: Storage and Virtualization at Vox > T: 087 805 0000 | D: 087 805 1572 > M: N/A > E: anton.louw(a)voxtelecom.co.za<mailto:anton.louw@voxtelecom.co.za> > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za<http://www.vox.co.za> > > > > > > > > > > > > > From: Artru Socha <asocha(a)redhat.com<mailto:asocha@redhat.com>> > Sent: 21 April 2020 15:20 > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za<mailto:Anton.Louw@voxtelecom.co.za>>; users(a)ovirt.org<mailto:users@ovirt.org> > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > On Tue, 2020-04-21 at 12:48 +0000, Anton Louw wrote: > > > > > > Hi Everybody, > > > > > Hi Anton, > > > Has anybody gone the route of using KeyCloak to login to oVirt? > > KeyCloak has been configured and the neccesary configs have also > been > > done on the engine. It redirects perfectly from the oVirt Web Login > > page to KeyCloak, but after logging into KeyCloak, I get redirected > > back to the oVirt Web Login. When trying to login again, I get the > > below error: > > > > > > > > server_error: Missing parameter: 'params' > > > > Not so long ago I managed to setup ovirt engine with keyloack (using > ldap as users provider). Hopefully, I would be able to help you with > it. > > There is excellent blog post[1] available. You might also check > keycloak+ldap post [2], however, when I was working on the > integration > I was not aware of if and did not test it. > > The error you mentioned does not really indicate what exactly is > wrong > but it might suggest that there is some sort of misconfiguration with > apache (you need to install and configure mod_auth_openidc as > described > at [1]). At least that happened in my case. > > In case you have already gone through it you could probably check > apache logs. > > Under [1] there is a python script that can be used to check api > calls, > please update username/password and test it against your environment. > > > Would it be possible post relevant piece of apache logs together with > engine.log ? > > > [1] > https://blogs.ovirt.org/2019/01/federate-ovirt-engine-authentication-to-ope…<https://blogs.ovirt.org/2019/01/federate-ovirt-engine-authentication-to-ope…> > [2] > https://blogs.ovirt.org/2018/08/ovirt-saml-with-keyloak-using-389ds-user-fe…<https://blogs.ovirt.org/2018/08/ovirt-saml-with-keyloak-using-389ds-user-fe…> > > Artur > > > > > I have checked all the logs, but nothing is telling me what exactly > > the issue is. > > > > If anybody has any idea, please let me know. > > > > Thanks > > > > Anton Louw > > Cloud Engineer: Storage and Virtualization at Vox > > T: 087 805 0000 | D: 087 805 1572 > > M: N/A > > E: anton.louw(a)voxtelecom.co.za<mailto:anton.louw@voxtelecom.co.za> > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > www.vox.co.za<http://www.vox.co.za> > > > > > > > > > > > > > > > > > > > > > > > > > > > > Disclaimer > > The contents of this email are confidential to the sender and the > > intended recipient. Unless the contents are clearly and entirely of > a > > personal nature, they are subject to copyright in favour of the > > holding company of the Vox group of companies. Any recipient who > > receives this email in error should immediately report the error to > > the sender and permanently delete this email from all storage > > devices. > > > > This email has been scanned for viruses and malware, and may have > > been automatically archived by Mimecast Ltd, an innovator in > Software > > as a Service (SaaS) for business. Providing a safer and more useful > > place for your human generated data. Specializing in; Security, > > archiving and compliance. To find out more Click Here. > > > > > > _______________________________________________ > > Users mailing list -- users(a)ovirt.org<mailto:users@ovirt.org> > > To unsubscribe send an email to users-leave(a)ovirt.org<mailto:users-leave@ovirt.org> > > Privacy Statement: https://www.ovirt.org/privacy-policy.html<https://www.ovirt.org/privacy-policy.html> > > oVirt Code of Conduct: > > https://www.ovirt.org/community/about/community-guidelines/<https://www.ovirt.org/community/about/community-guidelines> > > List Archives: > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/S4I2I3MID4A4A…<https://lists.ovirt.org/archives/list/users@ovirt.org/message/S4I2I3MID4A4A…> >

1 0

Re: oVirt and KeyCloak intergration
by Artur Socha 22 Apr '20

22 Apr '20

+ users(a)ovirt.org On Wed, 2020-04-22 at 09:57 +0000, Anton Louw wrote: > > > > Hi Artur, > > > > I would just like to make sure I am following correctly, comparing your > entries against mine. > > > > > Your setup: > > ... > > config.mapAuthRecord.regex.pattern = > ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > ... > > > > > > My setup: > > … > > config.mapAuthRecord.regex.pattern = > ^(?<user>.*?)((\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > … > > > > Should I add the additional 2 “\\” in on my side? Yes, please try adding it. In my case I learned about this issue by debugging the code because the real exception generated by incorrect regexp syntax was hidden behind generic error message giving no clues about the true cause. > > > Your setup: > > ... > > <LocationMatch ^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token- > http-auth)|^/ovirt-engine/callback> > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > Require valid-user > > AuthType openid-connect > > > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\"content=\"0; url=/ovirt- > engine/sso/login-unauthorized\"/><body><ahref=\"/ovirt-engine/sso/login- > unauthorized\">Here</a></body></html>" > > </If> > > </LocationMatch> > > … > > > > My setup: > > … > > <LocationMatch ^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token- > http-auth)|^/ovirt-engine/callback> > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > Require valid-user > > AuthType openid-connect > > > > ErrorDocument 401 "<html><meta http-equiv='refresh' content='0; > url=/ovirt-engine/sso/login-unauthorized'/><body><a href='/ovirt- > engine/sso/login-unauthorized'>Here</a></body></html>" > > </If> > > </LocationMatch> > > … > > > > I remember I had syntax errors, but mine was changed. > > > > Does this look fine to you? > Yeah, your version looks good too. You have ' instead of " so that is ok. > Thanks > > > > > > > > Anton Louw > > > Cloud Engineer: Storage and Virtualization at Vox > > > > > > > T: 087 805 0000 | D: 087 805 1572 > M: N/A > > E: anton.louw(a)voxtelecom.co.za > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > From: Anton Louw > > > Sent: 22 April 2020 10:07 > > To: Artur Socha <asocha(a)redhat.com> > > Subject: RE: [ovirt-users] oVirt and KeyCloak intergration > > > > Hi Artur, > > Great, I will try the below and let you know. I appreciate your efforts. > > > Sure, you may report it, I was in such a rush that I only hit “reply” and not > “Reply All” > > I do recall that I had to make some changes to the below as the it complained > about syntax errors: > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\" > > content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><a > > href=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" > > </If> > > </LocationMatch> > > I will let you know the outcome when I change the below as you suggested. > > Cheers > > > > From: Artur Socha <asocha(a)redhat.com> > > > Sent: 22 April 2020 09:51 > > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za> > > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > > > I checked your logs and I did not notice anything suspicious. > > > However, now I recall I made some changes compared to blog post > > example: > > > > 1) /etc/ovirt-engine/extensions.d/openid-http-mapping.properties > > I added escaping in regexp for '\' > > ... > > config.mapAuthRecord.regex.pattern = > > ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > > ... > > > > 2) /etc/httpd/ovirt-openidc.conf > > Escaping for '"' in error document snippet > > ... > > <LocationMatch ^/ovirt-engine/sso/(interactive-login- > > negotiate|oauth/token-http-auth)|^/ovirt-engine/callback> > > <If "req('Authorization') !~ /^(Bearer|Basic)/i"> > > > > Require valid-user > > AuthType openid-connect > > > > ErrorDocument 401 "<html><meta http-equiv=\"refresh\" > > content=\"0; url=/ovirt-engine/sso/login-unauthorized\"/><body><a > > href=\"/ovirt-engine/sso/login-unauthorized\">Here</a></body></html>" > > </If> > > </LocationMatch> > > > > ... > > > > These two issues were most probably caused by the blog site rendering. > > > > > > You might want to check engine.log (or server.log not really sure which > > one was that) for aaa extension initialization logs. They should > > appear at the beginning just after restarting engine. > > > > Unfortunately, at the moment I do not have running keycloak setup (I > > used to have a local VM) but I will try to find some time to set it up > > again once I'm done with another work item that actually consumes > > almost entire disk space for my 2 machines) > > > > Please let me know if anything changes after applying these config > > changes. It this works for you then I will request the blog post to be > > updated. > > > > Do you mind if I keep(re-post) this discussion back to users@ovirt in > > case other might have similar issues with keycloak integration? > > > > A. > > > > On Wed, 2020-04-22 at 06:35 +0000, Anton Louw wrote: > > > > > > > > > Hi Artru, > > > > > > Thank you for the reply. The post [1] is actually the main source of > > > information I worked from in order top get everything configured. In > > > the post[1] I ran through the whole testing section, and everything > > > works as expected. I can see the VMs etc when using the python > > > script. > > > > > > In my case we are not using ldap as a provider, I tried using > > > keycloak directly as a provider, I am not sure if that is where I am > > > going wrong? > > > > > > I have attached the last part of the apache ssl_access_log when I > > > tried logging in this morning. I have also attached the engine log. > > > > > > Thanks > > > > > > > > > Anton Louw > > > Cloud Engineer: Storage and Virtualization at Vox > > > T: 087 805 0000 | D: 087 805 1572 > > > M: N/A > > > E: anton.louw(a)voxtelecom.co.za > > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > From: Artru Socha <asocha(a)redhat.com> > > > Sent: 21 April 2020 15:20 > > > To: Anton Louw <Anton.Louw(a)voxtelecom.co.za>; > users(a)ovirt.org > > > Subject: Re: [ovirt-users] oVirt and KeyCloak intergration > > > > > > On Tue, 2020-04-21 at 12:48 +0000, Anton Louw wrote: > > > > > > > > > > > > Hi Everybody, > > > > > > > > > > > Hi Anton, > > > > > > > Has anybody gone the route of using KeyCloak to login to oVirt? > > > > KeyCloak has been configured and the neccesary configs have also > > > been > > > > done on the engine. It redirects perfectly from the oVirt Web Login > > > > page to KeyCloak, but after logging into KeyCloak, I get redirected > > > > back to the oVirt Web Login. When trying to login again, I get the > > > > below error: > > > > > > > > > > > > > > > > server_error: Missing parameter: 'params' > > > > > > > > > > Not so long ago I managed to setup ovirt engine with keyloack (using > > > ldap as users provider). Hopefully, I would be able to help you with > > > it. > > > > > > There is excellent blog post[1] available. You might also check > > > keycloak+ldap post [2], however, when I was working on the > > > integration > > > I was not aware of if and did not test it. > > > > > > The error you mentioned does not really indicate what exactly is > > > wrong > > > but it might suggest that there is some sort of misconfiguration with > > > apache (you need to install and configure mod_auth_openidc as > > > described > > > at [1]). At least that happened in my case. > > > > > > In case you have already gone through it you could probably check > > > apache logs. > > > > > > Under [1] there is a python script that can be used to check api > > > calls, > > > please update username/password and test it against your environment. > > > > > > > > > Would it be possible post relevant piece of apache logs together with > > > engine.log ? > > > > > > > > > [1] > > > > https://blogs.ovirt.org/2019/01/federate-ovirt-engine-authentication-to-ope… > > > [2] > > > > https://blogs.ovirt.org/2018/08/ovirt-saml-with-keyloak-using-389ds-user-fe… > > > > > > Artur > > > > > > > > > > > > > I have checked all the logs, but nothing is telling me what exactly > > > > the issue is. > > > > > > > > If anybody has any idea, please let me know. > > > > > > > > Thanks > > > > > > > > Anton Louw > > > > Cloud Engineer: Storage and Virtualization at Vox > > > > T: 087 805 0000 | D: 087 805 1572 > > > > M: N/A > > > > E: anton.louw(a)voxtelecom.co.za > > > > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > > > > > www.vox.co.za > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Disclaimer > > > > The contents of this email are confidential to the sender and the > > > > intended recipient. Unless the contents are clearly and entirely of > > > a > > > > personal nature, they are subject to copyright in favour of the > > > > holding company of the Vox group of companies. Any recipient who > > > > receives this email in error should immediately report the error to > > > > the sender and permanently delete this email from all storage > > > > devices. > > > > > > > > This email has been scanned for viruses and malware, and may have > > > > been automatically archived by Mimecast Ltd, an innovator in > > > Software > > > > as a Service (SaaS) for business. Providing a safer and more useful > > > > place for your human generated data. Specializing in; Security, > > > > archiving and compliance. To find out more Click Here. > > > > > > > > > > > > _______________________________________________ > > > > Users mailing list -- users(a)ovirt.org > > > > To unsubscribe send an email to users-leave(a)ovirt.org > > > > Privacy Statement: > https://www.ovirt.org/privacy-policy.html > > > > oVirt Code of Conduct: > > > > > https://www.ovirt.org/community/about/community-guidelines/ > > > > List Archives: > > > > > > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/S4I2I3MID4A4A… > > > > > > > > > > > > >

2 1

Mirror oVirt content
by adrianquintero＠gmail.com 21 Apr '20

21 Apr '20

Hello oVirt Community / infrastructure team, we would like to get guidance on how to mirror the oVirt content publicly. We replicate content using our own networks so we'd only be pulling the content from the oVirt content server from one location in Chicago. Please advise. Thank you, Adrian

4 4

Re: oVirt and KeyCloak intergration
by Artru Socha 21 Apr '20

21 Apr '20

On Tue, 2020-04-21 at 12:48 +0000, Anton Louw wrote: > > > Hi Everybody, > > Hi Anton, > Has anybody gone the route of using KeyCloak to login to oVirt? > KeyCloak has been configured and the neccesary configs have also been > done on the engine. It redirects perfectly from the oVirt Web Login > page to KeyCloak, but after logging into KeyCloak, I get redirected > back to the oVirt Web Login. When trying to login again, I get the > below error: > > > > server_error: Missing parameter: 'params' > Not so long ago I managed to setup ovirt engine with keyloack (using ldap as users provider). Hopefully, I would be able to help you with it. There is excellent blog post[1] available. You might also check keycloak+ldap post [2], however, when I was working on the integration I was not aware of if and did not test it. The error you mentioned does not really indicate what exactly is wrong but it might suggest that there is some sort of misconfiguration with apache (you need to install and configure mod_auth_openidc as described at [1]). At least that happened in my case. In case you have already gone through it you could probably check apache logs. Under [1] there is a python script that can be used to check api calls, please update username/password and test it against your environment. Would it be possible post relevant piece of apache logs together with engine.log ? [1] https://blogs.ovirt.org/2019/01/federate-ovirt-engine-authentication-to-ope… [2] https://blogs.ovirt.org/2018/08/ovirt-saml-with-keyloak-using-389ds-user-fe… Artur > I have checked all the logs, but nothing is telling me what exactly > the issue is. > > If anybody has any idea, please let me know. > > Thanks > > Anton Louw > Cloud Engineer: Storage and Virtualization at Vox > T: 087 805 0000 | D: 087 805 1572 > M: N/A > E: anton.louw(a)voxtelecom.co.za > A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za > > > > > > > > > > > > > > Disclaimer > The contents of this email are confidential to the sender and the > intended recipient. Unless the contents are clearly and entirely of a > personal nature, they are subject to copyright in favour of the > holding company of the Vox group of companies. Any recipient who > receives this email in error should immediately report the error to > the sender and permanently delete this email from all storage > devices. > > This email has been scanned for viruses and malware, and may have > been automatically archived by Mimecast Ltd, an innovator in Software > as a Service (SaaS) for business. Providing a safer and more useful > place for your human generated data. Specializing in; Security, > archiving and compliance. To find out more Click Here. > > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/S4I2I3MID4A4A…

1 0

oVirt and KeyCloak intergration
by Anton Louw 21 Apr '20

21 Apr '20

Hi Everybody, Has anybody gone the route of using KeyCloak to login to oVirt? KeyCloak has been configured and the neccesary configs have also been done on the engine. It redirects perfectly from the oVirt Web Login page to KeyCloak, but after logging into KeyCloak, I get redirected back to the oVirt Web Login. When trying to login again, I get the below error: [cid:ea1b2738-7e36-4cdb-8650-191d6992853c] server_error: Missing parameter: 'params' I have checked all the logs, but nothing is telling me what exactly the issue is. If anybody has any idea, please let me know. Thanks Anton Louw Cloud Engineer: Storage and Virtualization ______________________________________ D: 087 805 1572 | M: N/A A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg anton.louw(a)voxtelecom.co.za www.vox.co.za

1 0

Migrate engine to another storage domain without losing engine settings?
by Simon Nylund 21 Apr '20

21 Apr '20

Have been trying to figure out a simple way of migrating our hosted-engine to another storage domain, while keeping the data on the same domain. Is there any safe way of doing this? Fortunately I've only tested this in a dev environment, where I ended up with not being to able to restore the backup I did. The only way I got it to work was to deploy a fresh engine attached to the new storage domain, and then import the data storage domain containing the vms. The problem with that is that I lose all the settings I had in my hosted engine, and the hosts.

4 6

spice options hook
by ozmen62＠hotmail.com 21 Apr '20

21 Apr '20

Hi, We're using oVirt 4.3 and want to use spice streaming to better user experience, for example youtube etc. I've tried to use before_vm_start script, but lots of problems came out. 1 - on default environmet, hook script returns of no such file or directory, because python3 does not exist on the system if i install python3, vdsm stops working if change interpreter in the script, vdms retuns rc=0 error code hook=114 and it does not appear on the vm custom properties So, could you help me to run this hook properly we've tested https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/spiceoptions Master and 4.3 branch returns same error code and nothing appeared on the "custom properties" is there anyone who is use it successfully 2 - for this experince is GPU neccessery (not vGPU) , our server has standard 8mb onboard gpu thanks

3 7

Correct workflow for modifying engine vm.conf file
by Gianluca Cecchi 21 Apr '20

21 Apr '20

Hello, I would like to know a way to interact and modify in a "supported"/working way the vm.conf file on shared storage that contains details for the engine vm and I think is the base to dynamically generate the /var/run/ovirt-hosted-engine-ha/vm.conf In the past it was possible to temporarily modify the file under /var/run (or copy to another location) and start engine with it, but now it seems it doesn't work and that the file is continuously updated/refreshed Eg on engine storage domain on a lab with oVirt 4.4. beta4 I have the tar file [root@novirt2 ~]# tar tvf /rhev/data-center/mnt/glusterSD/novirt2st.storage.local\:_engine/7c9397f5-859b-4fba-bcc5-4ecbd454a189/images/530490b0-935e-46a8-84f6-6cd6618c6f0d/2e0f414c-2589-4545-a0a4-3bfed24ef3fc -rw-r--r-- root/root 181 2020-04-19 15:04 broker.conf -rw-r--r-- root/root 2777 2020-04-19 15:04 fhanswers.conf -rw-r--r-- root/root 1076 2020-04-19 15:04 hosted-engine.conf -rw-r--r-- root/root 6 2020-04-19 15:04 version -rw-r--r-- root/root 1359 2020-04-19 15:04 vm.conf [root@novirt2 ~]# And its vm.conf has: cpuType=Cascadelake-Server,+md-clear,+mds-no,-hle,-rtm,+tsx-ctrl,+arch-capabilities I would like to modify it and remove the "+tsx-ctrl" flag. Is there anything in the database that generates modification in the file on shared storage and then on the directory under /var/run? Or how is all the workflow managed to generate at the end the xml file to use to start the engine vm? What is that initially determines how to populate the cpuType in vm.conf at all? Thanks, Gianluca

2 7

New VM disk - failed to create, state locked in UI, nothing in DB
by Strahil Nikolov 20 Apr '20

20 Apr '20

Hello All, did anyone observe the following behaviour: 1. Create a new disk from the VM -> disks UI tab 2. Disk creation failes , but stays in locked state 3. Gluster storage has no directory with that uuid 4. /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh doesn't find anything: [root@engine ~]# /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh -q -t all Locked VMs Locked templates Locked disks Locked snapshots Illegal images Should I just delete the entry from the DB or I have another option ? Best Regards, Strahil Nikolov

2 3

ovirt 4.4 beta4 HCI single host problem unknown CPU feature: tsx-ctrl
by Gianluca Cecchi 20 Apr '20

20 Apr '20

Hello, I'm trying what in subject as a nested environment. Physical is oVirt 4.3.9 I configured the VM that has to be the hypervisor with cpu passthrough. The local VM starts ok with these settings: usr/libexec/qemu-kvm -name guest=HostedEngineLocal,debug-threads=on -S -object secret,id=masterKey0,format=raw,file=/var/lib/libvirt/qemu/domain-1-HostedEngineLocal/master-key.aes -machine pc-q35-rhel8.1.0,accel=kvm,usb=off,dump-guest-core=off -cpu Cascadelake-Server,ss=on,hypervisor=on,tsc-adjust=on,umip=on,pku=on,md-clear=on,stibp=on,arch-capabilities=on,ibpb=on,rdctl-no=on,ibrs-all=on,skip-l1dfl-vmentry=on,mds-no=on,kvmclock=on When at final stage of deployment it tries to start the final engine VM it goes down due to this in vdsm.log: 2020-04-19 15:09:48,962+0200 ERROR (vm/22082519) [virt.vm] (vmId='22082519-70bb-476f-a373-45c2d402a870') The vm start process failed (vm:871) Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 801, in _startUnderlyingVm self._run() File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 2608, in _run dom.createWithFlags(flags) File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", line 131, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python3.6/site-packages/libvirt.py", line 1166, in createWithFlags if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', dom=self) libvirt.libvirtError: unsupported configuration: unknown CPU feature: tsx-ctrl 2020-04-19 15:09:48,962+0200 INFO (vm/22082519) [virt.vm] (vmId='22082519-70bb-476f-a373-45c2d402a870') Changed state to Down: unsupported configuration: unknown CPU feature: tsx-ctrl (code=1) (vm:1629) 2020-04-19 15:09:48,965+0200 INFO (vm/22082519) [virt.vm] (vmId='22082519-70bb-476f-a373-45c2d402a870') Stopping connection (guestagent:441) The xml it tries to activate is: <cpu match="exact"> <model>Cascadelake-Server</model> <feature name="md-clear" policy="require"/> <feature name="mds-no" policy="require"/> <feature name="hle" policy="disable"/> <feature name="rtm" policy="disable"/> <feature name="tsx-ctrl" policy="require"/> <feature name="arch-capabilities" policy="require"/> <topology cores="2" sockets="16" threads="1"/> <numa> <cell cpus="0-31" id="0" memory="16777216"/> </numa> </cpu> <os> <type arch="x86_64" machine="pc-q35-rhel8.1.0">hvm</type> <smbios mode="sysinfo"/> <bios useserial="yes"/> </os> Similar nested env with 4.3.9 on the same physical hw completed ok and the final engine VM had only: -machine pc-i440fx-rhel7.6.0,accel=kvm,usb=off,dump-guest-core=off \ -cpu Skylake-Server,spec-ctrl=on,ssbd=on,md-clear=on \ The physical cpu is: Model name: Intel(R) Xeon(R) Platinum 8260L CPU @ 2.40GHz and between its flags I don't find tsx-ctrl: Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch epb cat_l3 cdp_l3 invpcid_single intel_pt ssbd mba ibrs ibpb stibp ibrs_enhanced tpr_shadow vnmi flexpriority ept vpid fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm cqm mpx rdt_a avx512f avx512dq rdseed adx smap clflushopt clwb avx512cd avx512bw avx512vl xsaveopt xsavec xgetbv1 cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local dtherm ida arat pln pts hwp hwp_act_window hwp_epp hwp_pkg_req pku ospke avx512_vnni md_clear spec_ctrl intel_stibp flush_l1d arch_capabilities any help on how to proceed and test? Thanks, Gianluca

2 2

Enabling VT-d causes hard lockup
by Shareef Jalloq 20 Apr '20

20 Apr '20

Hi, I've been trying to get an old machine setup for PCIe passthrough but am seeing kernel hangs when booting into oVirt. This is a Supermicro X10DAi with dual E5-2695 V4's I think. I had VT-d enabled and added SR-IOV. Don't think there's anything else I need to enable in the BIOS is there? I just updated to the latest version for this board too. It always seems to be CPU#18 too : https://photos.app.goo.gl/HG7NcyWwfuq646HeA Shareef.

3 3

Re: vm console problem
by David David 20 Apr '20

20 Apr '20

tested on four different workstations with: fedora20, fedora31 and windows10(remote-manager last vers) вс, 29 мар. 2020 г. в 12:39, Strahil Nikolov <hunter86_bg(a)yahoo.com>: > On March 29, 2020 9:47:02 AM GMT+03:00, David David <dd432690(a)gmail.com> > wrote: > >I did as you said: > >copied from engine /etc/ovirt-engine/ca.pem onto my desktop into > >/etc/pki/ca-trust/source/anchors and then run update-ca-trust > >it didn’t help, still the same errors > > > > > >пт, 27 мар. 2020 г. в 21:56, Strahil Nikolov <hunter86_bg(a)yahoo.com>: > > > >> On March 27, 2020 12:23:10 PM GMT+02:00, David David > ><dd432690(a)gmail.com> > >> wrote: > >> >here is debug from opening console.vv by remote-viewer > >> > > >> >2020-03-27 14:09 GMT+04:00, Milan Zamazal <mzamazal(a)redhat.com>: > >> >> David David <dd432690(a)gmail.com> writes: > >> >> > >> >>> yes i have > >> >>> console.vv attached > >> >> > >> >> It looks the same as mine. > >> >> > >> >> There is a difference in our logs, you have > >> >> > >> >> Possible auth 19 > >> >> > >> >> while I have > >> >> > >> >> Possible auth 2 > >> >> > >> >> So I still suspect a wrong authentication method is used, but I > >don't > >> >> have any idea why. > >> >> > >> >> Regards, > >> >> Milan > >> >> > >> >>> 2020-03-26 21:38 GMT+04:00, Milan Zamazal <mzamazal(a)redhat.com>: > >> >>>> David David <dd432690(a)gmail.com> writes: > >> >>>> > >> >>>>> copied from qemu server all certs except "cacrl" to my > >> >desktop-station > >> >>>>> into /etc/pki/ > >> >>>> > >> >>>> This is not needed, the CA certificate is included in console.vv > >> >and no > >> >>>> other certificate should be needed. > >> >>>> > >> >>>>> but remote-viewer is still didn't work > >> >>>> > >> >>>> The log looks like remote-viewer is attempting certificate > >> >>>> authentication rather than password authentication. Do you have > >> >>>> password in console.vv? It should look like: > >> >>>> > >> >>>> [virt-viewer] > >> >>>> type=vnc > >> >>>> host=192.168.122.2 > >> >>>> port=5900 > >> >>>> password=fxLazJu6BUmL > >> >>>> # Password is valid for 120 seconds. > >> >>>> ... > >> >>>> > >> >>>> Regards, > >> >>>> Milan > >> >>>> > >> >>>>> 2020-03-26 2:22 GMT+04:00, Nir Soffer <nsoffer(a)redhat.com>: > >> >>>>>> On Wed, Mar 25, 2020 at 12:45 PM David David > ><dd432690(a)gmail.com> > >> >>>>>> wrote: > >> >>>>>>> > >> >>>>>>> ovirt 4.3.8.2-1.el7 > >> >>>>>>> gtk-vnc2-1.0.0-1.fc31.x86_64 > >> >>>>>>> remote-viewer version 8.0-3.fc31 > >> >>>>>>> > >> >>>>>>> can't open vm console by remote-viewer > >> >>>>>>> vm has vnc console protocol > >> >>>>>>> when click on console button to connect to a vm, the > >> >remote-viewer > >> >>>>>>> console disappear immediately > >> >>>>>>> > >> >>>>>>> remote-viewer debug in attachment > >> >>>>>> > >> >>>>>> You an issue with the certificates: > >> >>>>>> > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.238: > >> >>>>>> ../src/vncconnection.c Set credential 2 libvirt > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Searching for certs in /etc/pki > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Searching for certs in /root/.pki > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Failed to find certificate > >CA/cacert.pem > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c No CA certificate provided, using > >GNUTLS > >> >global > >> >>>>>> trust > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Failed to find certificate CA/cacrl.pem > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Failed to find certificate > >> >>>>>> libvirt/private/clientkey.pem > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Failed to find certificate > >> >>>>>> libvirt/clientcert.pem > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Waiting for missing credentials > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Got all credentials > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c No CA certificate provided; trying the > >> >system > >> >>>>>> trust store instead > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: > >> >>>>>> ../src/vncconnection.c Using the system trust store and CRL > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: > >> >>>>>> ../src/vncconnection.c No client cert or key provided > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: > >> >>>>>> ../src/vncconnection.c No CA revocation list provided > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.241: > >> >>>>>> ../src/vncconnection.c Handshake was blocking > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.243: > >> >>>>>> ../src/vncconnection.c Handshake was blocking > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.251: > >> >>>>>> ../src/vncconnection.c Handshake was blocking > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.298: > >> >>>>>> ../src/vncconnection.c Handshake done > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.298: > >> >>>>>> ../src/vncconnection.c Validating > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.301: > >> >>>>>> ../src/vncconnection.c Error: The certificate is not trusted > >> >>>>>> > >> >>>>>> Adding people that may know more about this. > >> >>>>>> > >> >>>>>> Nir > >> >>>>>> > >> >>>>>> > >> >>>> > >> >>>> > >> >> > >> >> > >> > >> Hello, > >> > >> You can try to take the engine's CA (maybe it's useless) and put it > >on > >> your system in: > >> /etc/pki/ca-trust/source/anchors (if it's EL7 or a Fedora) and then > >run > >> update-ca-trust > >> > >> Best Regards, > >> Strahil Nikolov > >> > > Hey David, > > What is you workstation's OS ? > Also, have you tried from another workstation ? > > Best Regards, > Strahil Nikolov >

3 7

Re: command line vm start/stop
by Ali Gusainov 20 Apr '20

20 Apr '20

According to https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/ht… trying to use curl --insecure -v -u admin@internal:password -H Content-type: application/xml -X POST https://FQDN/ovirt-engine/api/vms/VM_NAME/ACTION where ACTION start or stop Got following: * About to connect() to FQDN port 443 (#0) * Trying SERVER_IP... * Connected to FQDN (SERVER_IP) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/ovirt-engine/ca.pem CApath: none * SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 * Server certificate: * subject: CN=FQDN........ * start date: Jan 22 06:12:15 2020 GMT * expire date: Dec 27 06:12:15 2024 GMT * common name: FQDN * issuer: CN=FQDN......... * Server auth using Basic with user 'admin@internal' > POST /ovirt-engine/api/vms/VM_NAME/ACTION HTTP/1.1 > Authorization: Basic YWRtaW5AaW50ZXJuYWw6U3lzVGVhbTEzYw== > User-Agent: curl/7.29.0 > Host: FQDN > Accept: application/xml > < HTTP/1.1 404 Not Found < Date: Sun, 19 Apr 2020 00:20:04 GMT < Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips < Content-Length: 0 < Correlation-Id: 15e7a226-8982-47ff-9f68-7a2519705856 < * Connection #0 to host FQDN left intact -------------- tail -1000f /var/log/ovirt-engine/server.log: 2020-04-18 20:20:04,354-04 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default task-385) RESTEASY002010: Failed to execute: javax.ws.rs.WebApplicationException: HTTP 404 Not Found at org.ovirt.engine.api.restapi.resource.AbstractBackendResource.asGuidOr404(AbstractBackendResource.java:355) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.resource.AbstractBackendSubResource.<init>(AbstractBackendSubResource.java:26) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.resource.AbstractBackendActionableResource.<init>(AbstractBackendActionableResource.java:39) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.resource.BackendVmResource.<init>(BackendVmResource.java:114) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.resource.BackendVmsResource.getVmResource(BackendVmsResource.java:164) [restapi-jaxrs.jar:] at sun.reflect.GeneratedMethodAccessor1357.invoke(Unknown Source) [:1.8.0_232] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.8.0_232] at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_232] at org.jboss.resteasy.core.ResourceLocatorInvoker.createResource(ResourceLocatorInvoker.java:69) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:105) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:132) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:100) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:440) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:229) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:135) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.interception.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:355) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:138) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:215) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:227) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:791) [jboss-servlet-api_4.0_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:274) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.dispatchToPath(ServletInitialHandler.java:209) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.spec.RequestDispatcherImpl.forwardImpl(RequestDispatcherImpl.java:227) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.spec.RequestDispatcherImpl.forwardImplSetup(RequestDispatcherImpl.java:149) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.spec.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:111) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.api.restapi.invocation.VersionFilter.doFilter(VersionFilter.java:178) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.invocation.VersionFilter.doFilter(VersionFilter.java:98) [restapi-jaxrs.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.api.restapi.invocation.CurrentFilter.doFilter(CurrentFilter.java:117) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.invocation.CurrentFilter.doFilter(CurrentFilter.java:72) [restapi-jaxrs.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.RestApiSessionMgmtFilter.doFilter(RestApiSessionMgmtFilter.java:78) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.EnforceAuthFilter.doFilter(EnforceAuthFilter.java:42) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.SsoRestApiNegotiationFilter.doFilter(SsoRestApiNegotiationFilter.java:84) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter.doFilter(SsoRestApiAuthFilter.java:47) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.SessionValidationFilter.doFilter(SessionValidationFilter.java:59) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.RestApiSessionValidationFilter.doFilter(RestApiSessionValidationFilter.java:35) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.api.restapi.security.CSRFProtectionFilter.doFilter(CSRFProtectionFilter.java:111) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.security.CSRFProtectionFilter.doFilter(CSRFProtectionFilter.java:102) [restapi-jaxrs.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.utils.servlet.CORSSupportFilter.doFilter(CORSSupportFilter.java:283) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:132) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.SecurityContextThreadSetupAction.lambda$create$0(SecurityContextThreadSetupAction.java:105) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.Connectors.executeRootHandler(Connectors.java:364) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:830) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35) at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982) at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486) at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377) at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_232]

2 1

oVirt 4.3.7 + Gluster 6.6 unsynced entries
by adrianquintero＠gmail.com 19 Apr '20

19 Apr '20

Hello, I am having the following issue, it has been a few days and healing never finishes, any ideas on how to fix the unsynced entries? [root@host1 vmstore]# gluster vol heal vmstore info --------------------------------------------------- Brick host1:/gluster_bricks/vmstore/vmstore <gfid:5aeb168c-b8e3-4581-97f9-eafc33f2f318> <gfid:9a7483d9-0d68-4fcd-89b7-d281f6132506> <gfid:a3830550-5158-4cf9-af15-19faf5e51db0> Status: Connected Number of entries: 3 Brick host2:/gluster_bricks/vmstore/vmstore /.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1240 /.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1241 /.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1242 Status: Connected Number of entries: 3 host3:/gluster_bricks/vmstore/vmstore Status: Connected Number of entries: 0 --------------------------------------------------- Thanks, Adrian

3 9

Re: disk snapshot in illegal status
by David David 19 Apr '20

19 Apr '20

snapshots in UI: Disk Snapshot ID ===================================================== 5a58466b-1547-4346-a550-8590880b379e - "Active VM" - has status "OK" f447cd4f-9ab3-489d-8c2a-b2e69456496f - "Auto-generated" - has status "Illegal" ====================================================== the "Disk Snapshot ID" with id 5a58466b-1547-4346-a550-8590880b379e actually not present in LV error screenshot attached чт, 16 апр. 2020 г. в 18:20, Shani Leviim <sleviim(a)redhat.com>: > Hi David, > Can you share a screenshot of the error you're getting? > And how the snapshots are presented on the ui? > > > *Regards,* > > *Shani Leviim* > > > On Thu, Apr 16, 2020 at 4:38 PM David David <dd432690(a)gmail.com> wrote: > >> hi >> >> attempt to remove snapshot from UI results in an error >> >> I looked the LV through the lvs and did't find active snapshot ID, only >> the base snapshot ID is present >> >> ovirt in database see 2 snapshots, but i have only one base image on >> storage >> >> so, i must remove the active snapshot ID from db not the base image Id ? >> >> чт, 16 апр. 2020 г. в 13:58, Shani Leviim <sleviim(a)redhat.com>: >> >>> Hi David, >>> Sorry for the late reply. >>> the volume_dump returned 1 occurrence of that image, while the query >>> returned 2 occurrences. >>> >>> It seems that there's an image id with a description of 'Auto-generated >>> for Live Storage Migration' which wasn't removed from the DB. >>> Can you try to remove it from the UI? >>> (If you claimed to remove it, try to remove it from the DB). >>> >>> >>> *Regards,* >>> >>> *Shani Leviim* >>> >>> >>> On Tue, Apr 7, 2020 at 7:45 PM David David <dd432690(a)gmail.com> wrote: >>> >>>> vdsm-tool dump-volume-chains d17aa967-f7f7-4d9f-98e4-7022854da4f5 >>>> >>>> engine=# select * from images_storage_domain_view where >>>> image_group_id='1844873e-45ef-4a2b-a991-2df6e92a3e2d'; >>>> >>>> output attached >>>> >>>> вт, 7 апр. 2020 г. в 19:47, Shani Leviim <sleviim(a)redhat.com>: >>>> >>>>> Hi David, >>>>> First, we need to compare the chain as it is seen by the engine and >>>>> the host and see if there's a difference. >>>>> Can you please share the output of the following? >>>>> >>>>> On the host: >>>>> vdsm-tool dump-volume-chains <sd_id> >>>>> >>>>> On the engine: >>>>> SELECT * >>>>> FROM images_storage_domain_view images_storage_domain_view >>>>> WHERE image_group_id = <image_group_id>; >>>>> >>>>> >>>>> *Regards,* >>>>> >>>>> *Shani Leviim* >>>>> >>>>> >>>>> On Tue, Apr 7, 2020 at 5:28 PM David David <dd432690(a)gmail.com> wrote: >>>>> >>>>>> hello >>>>>> >>>>>> after removing "auto generated" snapshot, the vm snapshot became to >>>>>> illegal status and in the "snapshot" tab also marked in illegal status >>>>>> >>>>>> now my vm is not booting >>>>>> >>>>>> but "vdsm-client Volume getInfo" shows the snapshot status is legal >>>>>> >>>>>> vdsm-client Volume getInfo \ >>>>>> storagepoolID=00000000-0000-0000-0000-000000000000 \ >>>>>> storagedomainID=d17aa967-f7f7-4d9f-98e4-7022854da4f5 \ >>>>>> imageID=1844873e-45ef-4a2b-a991-2df6e92a3e2d \ >>>>>> volumeID=f447cd4f-9ab3-489d-8c2a-b2e69456496f >>>>>> >>>>>> { >>>>>> "status": "OK", >>>>>> "lease": { >>>>>> "path": "/dev/d17aa967-f7f7-4d9f-98e4-7022854da4f5/leases", >>>>>> "owners": [], >>>>>> "version": null, >>>>>> "offset": 132120576 >>>>>> }, >>>>>> "domain": "d17aa967-f7f7-4d9f-98e4-7022854da4f5", >>>>>> "capacity": "21474836480", >>>>>> "voltype": "LEAF", >>>>>> "description": "None", >>>>>> "parent": "00000000-0000-0000-0000-000000000000", >>>>>> "format": "RAW", >>>>>> "generation": 1, >>>>>> "image": "1844873e-45ef-4a2b-a991-2df6e92a3e2d", >>>>>> "uuid": "f447cd4f-9ab3-489d-8c2a-b2e69456496f", >>>>>> "disktype": "DATA", >>>>>> "legality": "LEGAL", >>>>>> "mtime": "0", >>>>>> "apparentsize": "21474836480", >>>>>> "truesize": "21474836480", >>>>>> "type": "PREALLOCATED", >>>>>> "children": [], >>>>>> "pool": "", >>>>>> "ctime": "1530472945" >>>>>> } >>>>>> >>>>>> how to fix the problem? >>>>>> _______________________________________________ >>>>>> Users mailing list -- users(a)ovirt.org >>>>>> To unsubscribe send an email to users-leave(a)ovirt.org >>>>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>>>>> oVirt Code of Conduct: >>>>>> https://www.ovirt.org/community/about/community-guidelines/ >>>>>> List Archives: >>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/JSYMY4QG2HSPV… >>>>>> >>>>>

2 1

Re: VM's in status unknown
by Arik Hadas 19 Apr '20

19 Apr '20

I would start by querying the database with: select vm_name, status, run_on_vds from vms where vm_name in ('<name of vm1>', '<name of vm2>'); Their status should be '7' in that case. The more interesting part though is their 'run_on_vds' field - If it's non-empty and points to the host the VMs ran on, it probably means there's an issue in the communication between the engine and that host, so restarting the engine/vdsm can solve it. Otherwise, it would require a deeper look at the log to see why the engine lost track of the host they run on. On Fri, Apr 17, 2020 at 12:12 PM Staniforth, Paul < P.Staniforth(a)leedsbeckett.ac.uk> wrote: > I don't think the status is reported via the agent but vdsm on the host. > > Try restarting the engine service. > > use vdsm-client on the host to see if the VM running and shut it down if > needed. > > https://www.ovirt.org/develop/developer-guide/vdsm/vdsm-client.html > > on the host restart vdsmd ( you may want to migrate other VMs first) > > systemctl restart vdsmd > > If this doesn't work alter the database > > Regards, > Paul S. > > ------------------------------ > *From:* Jayme <jaymef(a)gmail.com> > *Sent:* 16 April 2020 19:07 > *To:* eevans(a)digitaldatatechs.com <eevans(a)digitaldatatechs.com> > *Cc:* kim.kargaard(a)noroff.no <kim.kargaard(a)noroff.no>; users < > users(a)ovirt.org> > *Subject:* [ovirt-users] Re: VM's in status unknown > > > *Caution External Mail:* Do not click any links or open any attachments > unless you trust the sender and know that the content is safe. > Do you have the guest agent installed on the VMs? > > On Thu, Apr 16, 2020 at 2:55 PM <eevans(a)digitaldatatechs.com> wrote: > > Are you getting any errors in the engine log or > /var/log/libvirt/qemu/<vm_name>.log? > I have Windows 10 and haven't experienced that. You can't shut it down in > the UI? Even after you try to shut it down inside Windows? > I will assume you have the latest guest tools installed. > > Eric Evans > Digital Data Services LLC. > 304.660.9080 > > > -----Original Message----- > From: kim.kargaard(a)noroff.no <kim.kargaard(a)noroff.no> > Sent: Thursday, April 16, 2020 8:23 AM > To: users(a)ovirt.org > Subject: [ovirt-users] VM's in status unknown > > Hi, > > We have a few Windows 10 VM's running on our ovirt 4.3, where when you > shutdown the VM from within Windows, that VM does not shut down but gets a > status of unknown in ovirt and one cannot do anything to the machines > within the web gui. This seems to specfically be related to that Windows 10 > template that we have created. Any ideas? Also, any ideas on how one can > shut these machines down? > > Thanks > > Kim > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: > https://www.ovirt.org/privacy-policy.html > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/UM26TABUTG373… > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi…> > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/M4LITHLIZXJDT… > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi…> > > To view the terms under which this email is distributed, please go to:- > http://leedsbeckett.ac.uk/disclaimer/email/ > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/E73FVYRYWVNAW… >

1 0

Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

I figured it out. Thanks for your help. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: Friday, April 17, 2020 10:53 AM To: eevans(a)digitaldatatechs.com; users(a)ovirt.org Subject: [ovirt-users] Re: assign a specific user to a specific vm When you look at the permissions tab for a VM you will see all the permissions and roles for users & groups, if it is an inherited permission it will show what object it is applied to e,g, database/cluster. You need to remove any that aren't appropriate. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 17 April 2020 15:42 To: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk <mailto:P.Staniforth@leedsbeckett.ac.uk> >; users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: RE: [ovirt-users] Re: assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I guess I need to clarify; when a user logs in to the vm portal, I only want them to see the machine assigned to them and have the ability to operate it. How do I set the permission on a per user per vm basis to ensure the user has the same vm every time they login and that's all they see is their vm. That's what I'm trying to accomplish. Good example: In vmware, you can assign a specific user to a specific machine so that is there machine and that's all they see. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk <mailto:P.Staniforth@leedsbeckett.ac.uk> > Sent: Friday, April 17, 2020 5:16 AM To: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> ; users(a)ovirt.org <mailto:users@ovirt.org> Subject: [ovirt-users] Re: assign a specific user to a specific vm Hello Eric, It sounds like you have permissions set to a group at some level, these are hierarchical system->datacenter->cluster->VM if you remove this permission and then set the userrole for the VM they should only be allowed to run this VM. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 16 April 2020 19:11 To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: [ovirt-users] assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fprivacy-policy.html <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fprivacy-policy.html&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk% 7C76cc4b3403b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C 0%7C637227313752880995&sdata=edzxVEAy3hIeEbfgCE1H%2F8yI9s6lmAme1DtprDA8Zp0%3 D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved =0 oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7CP.Stanifor th%40leedsbeckett.ac.uk%7C76cc4b3403b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417 aa112cd0fb490d85c%7C0%7C0%7C637227313752890991&sdata=hev43rsVCN4aLdBi11ASNXg 46%2B%2FxDpJ5zV0XI0eaOZ8%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0 List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ VZ7OE5VSVJ4D%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT JVZ7OE5VSVJ4D%2F&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk%7C76cc4b34 03b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637227 313752900983&sdata=%2FNePvMrYcRjCvGxR%2F6ZD%2F3%2Fl%2F20B38IWifvKS4fYNuo%3D& reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved =0 To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/ To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

1 0

Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

I guess I need to clarify; when a user logs in to the vm portal, I only want them to see the machine assigned to them and have the ability to operate it. How do I set the permission on a per user per vm basis to ensure the user has the same vm every time they login and that's all they see is their vm. That's what I'm trying to accomplish. Good example: In vmware, you can assign a specific user to a specific machine so that is there machine and that's all they see. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: Friday, April 17, 2020 5:16 AM To: eevans(a)digitaldatatechs.com; users(a)ovirt.org Subject: [ovirt-users] Re: assign a specific user to a specific vm Hello Eric, It sounds like you have permissions set to a group at some level, these are hierarchical system->datacenter->cluster->VM if you remove this permission and then set the userrole for the VM they should only be allowed to run this VM. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 16 April 2020 19:11 To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: [ovirt-users] assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fprivacy-policy.html <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fprivacy-policy.html&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac .uk%7Cf62d237bcada4214b96008d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C 0%7C0%7C637226591945549099&sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVo iWVxQ3e4sk%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved =0 oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7Cp.stan iforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b96008d7e2358c1b%7Cd79a81124fb e417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099&sdata=qn%2F15HEiTqmM1 kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0 List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ VZ7OE5VSVJ4D%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT JVZ7OE5VSVJ4D%2F&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d 237bcada4214b96008d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C63 7226591945549099&sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI %3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved =0 To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

3 2

Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

Now we're talking. Thank you very much. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: Friday, April 17, 2020 10:44 AM To: eevans(a)digitaldatatechs.com; users(a)ovirt.org Subject: Re: [ovirt-users] Re: assign a specific user to a specific vm select the VM in the admin portal and select the permissions tab, then click add and select a user and role to add. https://www.ovirt.org/documentation/vmm-guide/chap-Administrative_Tasks.html Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 17 April 2020 15:28 To: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk <mailto:P.Staniforth@leedsbeckett.ac.uk> >; users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: RE: [ovirt-users] Re: assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. You said: "set the userrole for the VM". I don't see how to do that. Please enlighten me. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk <mailto:P.Staniforth@leedsbeckett.ac.uk> > Sent: Friday, April 17, 2020 5:16 AM To: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> ; users(a)ovirt.org <mailto:users@ovirt.org> Subject: [ovirt-users] Re: assign a specific user to a specific vm Hello Eric, It sounds like you have permissions set to a group at some level, these are hierarchical system->datacenter->cluster->VM if you remove this permission and then set the userrole for the VM they should only be allowed to run this VM. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 16 April 2020 19:11 To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: [ovirt-users] assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fprivacy-policy.html <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fprivacy-policy.html&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk% 7C1a04f7ac7d6a4569557808d7e2dba59f%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C 0%7C637227305318431836&sdata=mgPtjJ14psJGfqtqlpEgs7fba%2FA3ioF84epFeWqDEQ0%3 D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved =0 oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7CP.Stanifor th%40leedsbeckett.ac.uk%7C1a04f7ac7d6a4569557808d7e2dba59f%7Cd79a81124fbe417 aa112cd0fb490d85c%7C0%7C0%7C637227305318431836&sdata=5STxAHvv3eOUBUFLJYre2%2 Bc3NDBqrBAXAOs7hnobI0c%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0 List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ VZ7OE5VSVJ4D%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT JVZ7OE5VSVJ4D%2F&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk%7C1a04f7ac 7d6a4569557808d7e2dba59f%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637227 305318441829&sdata=YakIWb4seZYnKUkUe4RHerNnGOPLYYP%2BqpNz9bD72mk%3D&reserved =0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved =0 To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/ To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

1 0

Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

You said: "set the userrole for the VM". I don't see how to do that. Please enlighten me. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: Friday, April 17, 2020 5:16 AM To: eevans(a)digitaldatatechs.com; users(a)ovirt.org Subject: [ovirt-users] Re: assign a specific user to a specific vm Hello Eric, It sounds like you have permissions set to a group at some level, these are hierarchical system->datacenter->cluster->VM if you remove this permission and then set the userrole for the VM they should only be allowed to run this VM. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 16 April 2020 19:11 To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: [ovirt-users] assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fprivacy-policy.html <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fprivacy-policy.html&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac .uk%7Cf62d237bcada4214b96008d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C 0%7C0%7C637226591945549099&sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVo iWVxQ3e4sk%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved =0 oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7Cp.stan iforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b96008d7e2358c1b%7Cd79a81124fb e417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099&sdata=qn%2F15HEiTqmM1 kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0 List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ VZ7OE5VSVJ4D%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT JVZ7OE5VSVJ4D%2F&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d 237bcada4214b96008d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C63 7226591945549099&sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI %3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved =0 To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

2 1

assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric

3 2

VM's in status unknown
by kim.kargaard＠noroff.no 17 Apr '20

17 Apr '20

Hi, We have a few Windows 10 VM's running on our ovirt 4.3, where when you shutdown the VM from within Windows, that VM does not shut down but gets a status of unknown in ovirt and one cannot do anything to the machines within the web gui. This seems to specfically be related to that Windows 10 template that we have created. Any ideas? Also, any ideas on how one can shut these machines down? Thanks Kim

4 3

Update Conflicts
by Christian Reiss 17 Apr '20

17 Apr '20

Hey folks, Some weeks ago I installed oVirt on top of a fresh CentOS 7 installation. I went ahead according to the official setup, which is basically to actiate a repo and then install via engine. When I try to run "yum update" on the hosts, I get a dependency error: --> Finished Dependency Resolution Error: Package: libvirt-daemon-driver-storage-4.5.0-23.el7_7.6.x86_64 (updates) Requires: libvirt-daemon-driver-storage-gluster = 4.5.0-23.el7_7.6 Installed: libvirt-daemon-driver-storage-gluster-4.5.0-23.el7_7.5.x86_64 (@updates) libvirt-daemon-driver-storage-gluster = 4.5.0-23.el7_7.5 Error: Package: vdsm-gluster-4.30.40-1.el7.x86_64 (@ovirt-4.3) Requires: vdsm = 4.30.40-1.el7 Removing: vdsm-4.30.40-1.el7.x86_64 (@ovirt-4.3) vdsm = 4.30.40-1.el7 Updated By: vdsm-4.30.43-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.43-1.el7 Available: vdsm-4.30.8-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.8-1.el7 Available: vdsm-4.30.9-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.9-1.el7 Available: vdsm-4.30.11-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.11-1.el7 Available: vdsm-4.30.12-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.12-1.el7 Available: vdsm-4.30.13-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.13-1.el7 Available: vdsm-4.30.14-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.14-1.el7 Available: vdsm-4.30.15-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.15-1.el7 Available: vdsm-4.30.16-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.16-1.el7 Available: vdsm-4.30.17-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.17-1.el7 Available: vdsm-4.30.18-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.18-1.el7 Available: vdsm-4.30.19-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.19-1.el7 Available: vdsm-4.30.20-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.20-1.el7 Available: vdsm-4.30.21-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.21-1.el7 Available: vdsm-4.30.22-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.22-1.el7 Available: vdsm-4.30.23-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.23-1.el7 Available: vdsm-4.30.24-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.24-1.el7 Available: vdsm-4.30.25-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.25-1.el7 Available: vdsm-4.30.26-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.26-1.el7 Available: vdsm-4.30.28-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.28-1.el7 Available: vdsm-4.30.29-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.29-1.el7 Available: vdsm-4.30.30-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.30-1.el7 Available: vdsm-4.30.31-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.31-1.el7 Available: vdsm-4.30.32-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.32-1.el7 Available: vdsm-4.30.33-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.33-1.el7 Available: vdsm-4.30.34-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.34-1.el7 Available: vdsm-4.30.35-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.35-1.el7 Available: vdsm-4.30.36-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.36-1.el7 Available: vdsm-4.30.37-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.37-1.el7 Available: vdsm-4.30.38-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.38-1.el7 Available: vdsm-4.30.39-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.39-1.el7 Available: vdsm-4.30.42-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.42-1.el7 Error: Package: libvirt-daemon-driver-storage-gluster-4.5.0-23.el7_7.5.x86_64 (@updates) Requires: libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.5 Removing: libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.5.x86_64 (@updates) libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.5 Updated By: libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.6.x86_64 (updates) libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.6 Available: libvirt-daemon-driver-storage-core-4.5.0-23.el7.x86_64 (base) libvirt-daemon-driver-storage-core = 4.5.0-23.el7 Available: libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.1.x86_64 (updates) libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.1 Available: libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.3.x86_64 (updates) libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.3 What did I miss here? Should I have ignored= some packages? Thanks! :) -- with kind regards, mit freundlichen Gruessen, Christian Reiss

3 6

Multitenant scenario in oVirt
by Michal Gutowski 17 Apr '20

17 Apr '20

Hi oVirt community, I'm playing with a multitenant use-case in oVirt 3.4.6... My setup is as follows: - I have two working Data Centers (DC1 and DC2) - I created two additional users DC1-admin and DC2-admin - In DC1 permission settings I've added DC1-admin as a user with a builtin DataCenterAdmin Role. - In DC2 permission settings I've added DC2-admin as a user with a builtin DataCenterAdmin Role. Now in terms of permissions all is good: DC1-admin is not able to modify anything in DC2 and DC2-admin is not able to modify anything in DC1. However in both the Admin Portal and the VM Portal DC1-admin and DC2-admin can still see all other datacenter resources. My expectation was that if I login to the Admin Portal as e.g. DC2-admin I will only see DC2 datacenter in the GUI and nothing else. Same with VM Portal. I played with different user settings but I couldn't make it work... I think the problem is that whatever user you create it will always belong to the build-in "everyone" group and inherit permission to see everything in the portal. Is it possible to achieve a scenario where e.g. DC2-admin will login to the Admin Portal and only see resources that belong to DC2 and nothing else? Thanks, Michal

4 4

Sometimes paused due to unknown storage error on gluster
by Gianluca Cecchi 16 Apr '20

16 Apr '20

Hello, having deployed oVirt 4.3.9 single host HCI with Gluster, I see some times VM going into paused state for the error above and needing to manually run it (sometimes this resumal operation fails). Actually it only happened with empty disk (thin provisioned) and sudden high I/O during the initial phase of install of the OS; it didn't happened then during normal operaton (even with 600MB/s of throughput). I suspect something related to metadata extension not able to be in pair with the speed of the physical disk growing.... similar to what happens for block based storage domains where the LVM layer has to extend the logical volume representing the virtual disk My real world reproduction of the error is during install of OCP 4.3.8 master node, when Red Hat Cores OS boots from network and wipes the disk and I think then transfer an image, so doing high immediate I/O. The VM used as master node has been created with a 120Gb thin provisioned disk (virtio-scsi type) and starts with disk just initialized and empty, going through PXE install. I get this line inside events for the VM Mar 27, 2020, 12:35:23 AM VM master01 has been paused due to unknown storage error. Here logs around the time frame above: - engine.log https://drive.google.com/file/d/1zpNo5IgFVTAlKXHiAMTL-uvaoXSNMVRO/view?usp=… - vdsm.log https://drive.google.com/file/d/1v8kR0N6PdHBJ5hYzEYKl4-m7v1Lb_cYX/view?usp=… Any suggestions? The disk of the VM is on vmstore storage domain and its gluster volume settings are: [root@ovirt tmp]# gluster volume info vmstore Volume Name: vmstore Type: Distribute Volume ID: a6203d77-3b9d-49f9-94c5-9e30562959c4 Status: Started Snapshot Count: 0 Number of Bricks: 1 Transport-type: tcp Bricks: Brick1: ovirtst.mydomain.storage:/gluster_bricks/vmstore/vmstore Options Reconfigured: performance.low-prio-threads: 32 storage.owner-gid: 36 performance.read-ahead: off user.cifs: off storage.owner-uid: 36 performance.io-cache: off performance.quick-read: off network.ping-timeout: 30 features.shard: on network.remote-dio: off cluster.eager-lock: enable performance.strict-o-direct: on transport.address-family: inet nfs.disable: on [root@ovirt tmp]# What about config above, related to eventual optimizations to be done based on having single host? And comparing with the virt group of options: [root@ovirt tmp]# cat /var/lib/glusterd/groups/virt performance.quick-read=off performance.read-ahead=off performance.io-cache=off performance.low-prio-threads=32 network.remote-dio=enable cluster.eager-lock=enable cluster.quorum-type=auto cluster.server-quorum-type=server cluster.data-self-heal-algorithm=full cluster.locking-scheme=granular cluster.shd-max-threads=8 cluster.shd-wait-qlength=10000 features.shard=on user.cifs=off cluster.choose-local=off client.event-threads=4 server.event-threads=4 performance.client-io-threads=on [root@ovirt tmp]# ? Thanks Gianluca

5 23

Broken doco link for New Host->Kernel boot parameters
by Shareef Jalloq 16 Apr '20

16 Apr '20

Hi, I'm trying to set up one of our nodes with PCI passthrough but there is a dead lnk in the documentation for the kernel boot parameter section of creating a new host. https://www.ovirt.org/documentation/admin-guide/sect-Explanation_of_Setting… Anyone know where this went or can help me with the options? Shareef.

3 8

How to load VMs after importing a domain
by Shareef Jalloq 16 Apr '20

16 Apr '20

I've followed the online instructions on importing a pre-configured domain into a new data centre but I can't see how to import the VMs. The documentation just says, "You can now import virtual machines and templates from the storage domain to the data center." with no other info. What do I need to do in order to get my VMs up and running? Cheers, Shareef.

4 4

Single SPM Host orphaned from ovirt-engine, cannot confirm host rebooted or maintenance host.
by Terry 16 Apr '20

16 Apr '20

We have number of clusters connected to ovirt-engine. Some of these are single host clusters (running ovirt-release43-4.3.5.2-1 on CentOS7) with local storage. Recently, ovirt-engine started reporting one of these hosts NonResponsive, VMs were still running on the host but ovirt seems unable to communicate with it, testing shows no issues connecting engine -> host:vdsm and likewise the host can communicate with the engine on port 80 and 443. The host in question cannot be managed via IPMI for power management but we are able to perform an SSH reboot via the engine interface. We opted to login to the running virtual machines, shut them down and issue the SSH reboot from the engine. The server changes to rebooting status for some time and then reports NonResponsive state. We are unable to maintenance the host or confirm host has been rebooted manually as we are presented with the following "Error while executing action: Cannot perform confirm 'Host has been rebooted'. Another power management action is already in progress." The VDSM logs on the host in question are continually showing: 2020-04-16 08:23:51,478+0000 INFO (vmrecovery) [vds] recovery: waiting for storage pool to go up (clientIF:711) 2020-04-16 08:23:52,332+0000 INFO (jsonrpc/7) [vdsm.api] FINISH getStoragePoolInfo error=Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',) from=::ffff:10.10.1.252,33680, task_id=420249a4-55c0-436d-92c7-ea1286a0e287 (api:52) 2020-04-16 08:23:52,332+0000 ERROR (jsonrpc/7) [storage.TaskManager.Task] (Task='420249a4-55c0-436d-92c7-ea1286a0e287') Unexpected error (task:875) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882, in _run return fn(*args, **kargs) File "<string>", line 2, in getStoragePoolInfo File "/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 50, in method ret = func(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 2550, in getStoragePoolInfo pool = self.getPool(spUUID) File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 351, in getPool raise se.StoragePoolUnknown(spUUID) StoragePoolUnknown: Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',) 2020-04-16 08:23:52,333+0000 INFO (jsonrpc/7) [storage.TaskManager.Task] (Task='420249a4-55c0-436d-92c7-ea1286a0e287') aborting: Task is aborted: "Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',)" - code 309 (task:1181) During this period, the following is observed in the engine logs: 2020-04-16 08:23:52,307Z ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] EVENT_ID: VDS_BROKER_COMMAND_FAILURE(10,802), VDSM compute01.ovirt.local command SpmStatusVDS failed: Message timeout which can be caused by communication issues 2020-04-16 08:23:52,307Z ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] Command 'SpmStatusVDSCommand(HostName = compute01.ovirt.local, SpmStatusVDSCommandParameters:{hostId='67dc53da-d5ee-461e-87de-2ca6dd78637f', storagePoolId='6baea5dc-b049-47c2-a94f-5229c37c62d0'})' execution failed: VDSGenericException: VDSNetworkException: Message timeout which can be caused by communication issues 2020-04-16 08:23:52,346Z ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.GetStoragePoolInfoVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] Failed in 'GetStoragePoolInfoVDS' method 2020-04-16 08:23:52,355Z ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] EVENT_ID: IRS_BROKER_COMMAND_FAILURE(10,803), VDSM command GetStoragePoolInfoVDS failed: Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',) 2020-04-16 08:23:52,356Z ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] IrsBroker::Failed::GetStoragePoolInfoVDS: IRSGenericException: IRSErrorException: Failed to GetStoragePoolInfoVDS, error = Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',), code = 309 The metadata file for the local storage domain looks fine? ALIGNMENT=1048576 BLOCK_SIZE=512 CLASS=Data DESCRIPTION=compute01_local_storage IOOPTIMEOUTSEC=10 LEASERETRIES=3 LEASETIMESEC=60 LOCKPOLICY= LOCKRENEWALINTERVALSEC=5 MASTER_VERSION=1 POOL_DESCRIPTION=compute01_local POOL_DOMAINS=1cc26dea-688c-40cc-bda6-38b00054001e:Active POOL_SPM_ID=-1 POOL_SPM_LVER=-1 POOL_UUID=6baea5dc-b049-47c2-a94f-5229c37c62d0 REMOTE_PATH=/mnt/ovirt_datastore ROLE=Master SDUUID=1cc26dea-688c-40cc-bda6-38b00054001e TYPE=LOCALFS VERSION=5 _SHA_CKSUM=24c85256b889d0b3384e7975c660f4a5cbb58d33 I would assume this has happened because ovirt was unable to power cycle the machine and now can't confirm the SPM state? Normally in a case like this we would confirm the host has been manually rebooted but we're unable to do that. How can I clear the power management action that ovirt-engine thinks is in progress?

1 1

disk snapshot in illegal status
by David David 16 Apr '20

16 Apr '20

hello after removing "auto generated" snapshot, the vm snapshot became to illegal status and in the "snapshot" tab also marked in illegal status now my vm is not booting but "vdsm-client Volume getInfo" shows the snapshot status is legal vdsm-client Volume getInfo \ storagepoolID=00000000-0000-0000-0000-000000000000 \ storagedomainID=d17aa967-f7f7-4d9f-98e4-7022854da4f5 \ imageID=1844873e-45ef-4a2b-a991-2df6e92a3e2d \ volumeID=f447cd4f-9ab3-489d-8c2a-b2e69456496f { "status": "OK", "lease": { "path": "/dev/d17aa967-f7f7-4d9f-98e4-7022854da4f5/leases", "owners": [], "version": null, "offset": 132120576 }, "domain": "d17aa967-f7f7-4d9f-98e4-7022854da4f5", "capacity": "21474836480", "voltype": "LEAF", "description": "None", "parent": "00000000-0000-0000-0000-000000000000", "format": "RAW", "generation": 1, "image": "1844873e-45ef-4a2b-a991-2df6e92a3e2d", "uuid": "f447cd4f-9ab3-489d-8c2a-b2e69456496f", "disktype": "DATA", "legality": "LEGAL", "mtime": "0", "apparentsize": "21474836480", "truesize": "21474836480", "type": "PREALLOCATED", "children": [], "pool": "", "ctime": "1530472945" } how to fix the problem?

2 4

ovirt-engine unresponsive - how to rescue?
by Shareef Jalloq 16 Apr '20

16 Apr '20

So my engine has gone down and I can't ssh into it either. If I try to log into the web-ui of the node it is running on, I get redirected because the node can't reach the engine. What are my next steps? Shareef.

4 35

yum mirrors 403 forbidden
by Shareef Jalloq 16 Apr '20

16 Apr '20

I seem to be taking 2 steps back and 1 forward at the moment. What could I have done on a node to start getting 403 forbidden errors when using yum? [root@ovirt-node-00 ~]# yum repolist Loaded plugins: enabled_repos_upload, fastestmirror, imgbased-persist, package_upload, product-id, search-disabled-repos, vdsmupgrade, versionlock Loading mirror speeds from cached hostfile ovirt-4.3-epel/x86_64/metalink | 13 kB 00:00:00 * ovirt-4.3-epel: mirror.de.leaseweb.net http://mirror.centos.org/centos/7/sclo/x86_64/rh/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. To address this issue please refer to the below wiki article https://wiki.centos.org/yum-errors If above article doesn't help to resolve this issue please use https://bugs.centos.org/. http://mirror.centos.org/centos/7/sclo/x86_64/rh/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. ovirt-4.3/7 | 3.0 kB 00:00:00 http://mirror.centos.org/centos/7/storage/x86_64/gluster-6/repodata/repomd.…: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. http://mirror.centos.org/centos/7/opstools/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. http://mirror.centos.org/centos/7/virt/x86_64/ovirt-4.3/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. http://mirror.centos.org/centos/7/virt/x86_64/kvm-common/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. http://fedorapeople.org/groups/virt/virtio-win/repo/latest/repodata/repomd.…: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. sac-gluster-ansible/x86_64 | 3.3 kB 00:00:00 repo id repo name status centos-sclo-rh-release/x86_64 CentOS-7 - SCLo rh 0 ovirt-4.3/7 Latest oVirt 4.3 Release 2,831 ovirt-4.3-centos-gluster6/x86_64 CentOS-7 - Gluster 6 0 ovirt-4.3-centos-opstools/x86_64 CentOS-7 - OpsTools - release 0 ovirt-4.3-centos-ovirt43/x86_64 CentOS-7 - oVirt 4.3 0 ovirt-4.3-centos-qemu-ev/x86_64 CentOS-7 - QEMU EV 0 ovirt-4.3-epel/x86_64 Extra Packages for Enterprise Linux 7 - x86_64 13,244 ovirt-4.3-virtio-win-latest virtio-win builds roughly matching what will be shipped in upcoming RHEL 0 sac-gluster-ansible/x86_64 Copr repo for gluster-ansible owned by sac 18 repolist: 16,093 Uploading Enabled Repositories Report Cannot upload enabled repos report, is this client registered?

2 3

cloud-init ovirt
by PunkGeek 16 Apr '20

16 Apr '20

Hello, How can I use ovirt tools that configure cloud-init vms by python? https://red.ht/2K1gBkn Actually, I want just to use this tool in my python libvirt script. Best regards

2 1

Can't migrate over migration network
by briandumont＠gmail.com 15 Apr '20

15 Apr '20

Hello, I am trying to configure a dedicated migration network and am unable to get it to work. It is failing with a no route to host error in the cockpit logs, specifically a libvirtd error virNetSocketNewConnectTCP:591 : unable to connect to server at '192.168.1.50:49152': No route to host. Trying to migrate from Host 1 to Host 2. 192.168.1.50 is the ip address on the source host for the migration. If I try to migrate in the other direction I get the same error with tthat hosts migration network ip. My migration network is setup on a different VLAN than my ovirtmgmt network. Here is my configuration: - 2 Hosts - Host 1 - nic 1 - ovirtmgmt - 192.168.1.24/24 - VLAN 1 - nic 2 - migration network - 192.168.1.50/24 VLAN 25 - Host 2 - nic 1 - ovirtmgmnt - 192.168.1.24/24 - VLAN 1 - nic 2 - migration network - 192.168.1.51/24 - VLAN 25 Migration network is setup as follows: - Assign - Yes - Required - Yes - VM Network - No (tried it with VM Nework = Yes with same results) - Migration Network - Yes I think I've got something fundamentally wrong with my host networking but I can't figure it out. Appreciate the help.

4 11

NUMA Pinning bug with Hugepages?
by Alan G 15 Apr '20

15 Apr '20

Hi, I seem to have found an issue when trying to setup a high performance VM utilising hugepages and NUMA pinning. The VM is configured for 32GB RAM and uses hugepages of size 1G. The host has two NUMA nodes each having 64GB RAM (for 128GB total system RAM). No other VMs are running or otherwise pinned to the host. The VM is pinned to node 0. And the required hugepages are allocated with echo 32 > /sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages I then attempt to start the VM and get a pop-up error saying "cannot accommodate memory of VM's pinned virtual NUMA nodes within host's physical NUMA nodes". However, if I remove the hugepages from node 0 echo 0 > /sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages Start the VM and then immediately re-create the hugepqages then everything works as expected. It seems to me that oVirt is considering the hugepages as allocated memory even if they are not in use. Is this correct? Thanks, Alan

3 3

upgrade VM cluster compatibility version
by Bill James 15 Apr '20

15 Apr '20

I'm trying to upgrade my cluster to 4.3. Currently its running 4.2.8.2-1.el7. But the cluster compatibility version is 3.6. I try to change that and it says I need to edit the VM. https://www.ovirt.org/documentation/upgrade-guide/chap-Post-Upgrade_Tasks.h… says: *Important:* An error message may warn that some virtual machines and templates are incorrectly configured. To fix this error, edit each virtual machine manually. The *Edit Virtual Machine* window provides additional validations and warnings that show what to correct. Sometimes the issue is automatically corrected and the virtual machine’s configuration just needs to be saved again. After editing each virtual machine, you will be able to change the cluster compatibility version. I edit the VM and there are no errors or warnings. I see no way to change the cluster compatibility level on a VM. How do I change the Custom Compatibility Version?? -- This email, its contents and attachments contain information from J2 Global, Inc. and/or its affiliates which may be privileged, confidential or otherwise protected from disclosure. The information is intended to be for the addressee(s) only. If you are not an addressee, any disclosure, copy, distribution or use of the contents of this message is prohibited. If you have received this email in error, please notify the sender by reply email and delete the original message and any copies.

2 2

Get OAuth token locally without password?
by Chris Adams 14 Apr '20

14 Apr '20

I'm working on a cron job to run on the engine to do some tasks via the API. Is there a way I can get an API OAuth token created without actually storing a password? For example, some script that can be run to directly create a session in the database and return the token. Obviously this _can_ be done, it's a matter of knowing the right bits to do (so basically wondering if that has already been written). I only have internal users, so no external authentication store available. -- Chris Adams <cma(a)cmadams.net>

2 1

Migrate engine to another storage domain?
by Simon Nylund 14 Apr '20

14 Apr '20

Is there a successful way of migrating an up and running engine to another storage domain? I've been reading through the archive and tested a few various ways without any success. The only way i found working without errors was deploying a new engine attached to the new storage domain, and import the old data domain for the vms, but then you lose all the settings for the previous engine (ofc). And have to redo all of that.

1 0

export vm from 3.4 to 4.3
by Budur Nagaraju 14 Apr '20

14 Apr '20

Hi Can someone help in exporting a vm from 3.5 to 4.3 version , any help or links for exporting a vm ? Thanks, Nagaraju

4 5

Total LUN Limitations
by Ryan Chewning 14 Apr '20

14 Apr '20

I'm hoping that someone might be able to clarify a limitation found in the RedHat documentation. The documentation indicates that there is a limitation of 300 LUNS per block based storage device. Does this include LUNs which are directly mapped to a VM? Or does this referrer to LUNs which serve as a storage repository for ISOs / VM disks?

1 0

Host fails to enter in maintenance due to migration failure
by Vinícius Ferrão 13 Apr '20

13 Apr '20

Hello, I’ve a host that’s preparing to maintenance for almost 20 hours now. There’s a huge VM on it, with 32 gigs of RAM and this VM is failing migration. So, there’s a way to cancel prepare for maintenance, so the host can stop trying this migration that’s end up failing? I can just shutdown the VM to do the maintenance on the host... Thanks,

2 3

Re: oVirt 4.4.0 Beta release refresh is now available for testing
by Joop 13 Apr '20

13 Apr '20

On 13-4-2020 09:45, Satheesaran Sundaramoorthi wrote: > > > On Thu, Apr 9, 2020 at 3:37 PM Sandro Bonazzola <sbonazzo(a)redhat.com > <mailto:sbonazzo@redhat.com>> wrote: > > > > Does the hyperconverged installation now work with glusterfs? > I tested alpha/beta1/2 and the latter won't get past the > storage step. > > > Not yet. There was the issue with glusterfs storage domain and storage > domain blocksize probe check. > This is addressed with a new ioprocess-1.4.1 package for the bug[1]. > > We are testing currently with this fix and it works well. But hitting > yet another issue, where Hosted Engine deployment > fails at the very last stage in the deployment. Gluster developer is > looking in to it, as I respond here. > Soon we will have a working build and I will let you once these issues > are settled. > > [1] - https://bugzilla.redhat.com/show_bug.cgi?id=1820283 > > Thanks, > sas > > Thanks for the message. Looking through the logs I saw references to the blocksize but since that is contained in the ansible scripts which get downloaded to the host I gave up finding the source versions to try to see it I could get it going beyond that failing step. Anyway, thanks for informing me, Regards, Joop

3 3

engine certificate problems in MacOS Catalina
by Jayme 13 Apr '20

13 Apr '20

I recently setup a new ovirt environment using latest 4.3.9 installer. I can't seem to get the novnc client to work for the life of me in safari or chrome on MacOS catalina. I have downloaded the CA from the login page and imported it into keychain and made sure it was fully trusted. In both system and login keychains. Looking at this: https://support.apple.com/en-us/HT210176 seems to suggest that the certificate may be invalid if the issue date is longer than 825 days. The certificate generated by ovirt installer seems to be valid for 5 years. I'm not sure if this is the issue or something else is wrong but if cert length is a problem is there a way for me to re-regenerate a new certificate with a shorter issue period?

1 0

oVirt LUN Limitations
by Ryan Chewning 13 Apr '20

13 Apr '20

I'm hoping that someone might be able to clarify a limitation found in the RedHat documentation. The documentation indicates that there is a limitation of 300 LUNS per block based storage device. Does this include LUNs which are directly mapped to a VM? Or does this referrer to LUNs which serve as a storage repository for ISOs / VM disks? Thanks!

1 0

One more time
by eevans＠digitaldatatechs.com 13 Apr '20

13 Apr '20

I have thought about the issue with Windows vm's reporting the timezone incorrectly. I reaqlized that just last month, before I created my vm's that the Daylight Savings Time took affect moving our time up 1 hour. SO, based on that, instead of setting my time zone to US Eastern (GMT -5), I set it to SA Western (GMT -4) and the nasty exclamation mark disappeared. This tells me that DST (Daylight Savings Time) is not an option or configurable in Ovirt. I think this should be an easy fix for those of use that are stuck with it. I don't think the rest of the world participates in DST but most of the United States does. It would be nice to have those zones added as a configurable option that would switch on the dates it is nationally indicated to change. I hope the developers read this. Thanks.

1 0

DR on hyperconverged deployment
by wodel youchi 13 Apr '20

13 Apr '20

Hi, Need to understand somethings about DR on oVirt-HI - What does mean : Scheduling regular backups using geo-replication (point 3.3.4 RHHI 1.7 Doc Maintaining RHHI) : - Does this mean creating a check-point? - If yes, does this mean that the geo-replication process will sync data up to that check-point and then stops the synchronization, then repeat the same cycle the day after? does this mean that the minimum RPO is one day? - I created a snapshot of a VM on the source Manager, I synced the volume then I executed a DR, The VM was started on the Target Manager but the VM didn't have its snapshot, any idea??? Regards, be safe.

2 6

multiple subnets on hosts for vm's
by eevans＠digitaldatatechs.com 12 Apr '20

12 Apr '20

This is not critical but some functionality I think should be in Ovirt and maybe I am going about it the wrong way. I have several subnets on my physical network. My engine host is separate from the clustered hosts that house the vm's. In order for the vm's on the other subnets (vlans) to get Internet access, I have to add the extra ip addrs on the ovirtmgmt network interface. I have read and tried every solution I could find trying to add teh subnets without using the extra ip addrs option but the machine either becomes isolated or will not start at all. Can someone tell me how to add the vlans so the engine host sees and utilizes them? The engine host can get to resources on the vlans because of the router config but will not let any subnet except ovirtmgmt outside the cluster. This is not critical but something I would like to get working for future deployments. Thank you for your help. Eric

2 1

unsubscribe me please
by Raz Tamir 12 Apr '20

12 Apr '20

EOM -- Raz Tamir

1 0

Storage domain in maintenance
by Strahil Nikolov 11 Apr '20

11 Apr '20

Hello All, I have several storage domains in maintenance mode and I can't neither detach, nor activate. Can someone explain to me what is actually doing the engine whwn I try to activate - so I can debug it? The error from vdsm-client is that the storage domain does not exist, yet it is in the DB . I assume that there is somw storage issue, but in order to debug it - I need to know what is gooing on under the hood. Thanks in advance Best Regards, Strahil Nikolov

3 7

Windows 10 Pro 64 (1909) crashes when migrating
by Maton, Brett 11 Apr '20

11 Apr '20

I recently added a Windows 10 Pro 64 bit (release 1909) VM, and I'm seeing a lot of failures when oVirt tries to move the VM to another host (triggered by load balancing), These errors are showing up in the UI event log Migration failed (VM: <vm label>, Source: <host 1>, Destination: <host 2>). Followed by: VM <host> is down with error. Exit message: Lost connection with qemu process. Google returned some references to 'options kvm ignore_msrs=1' which I've added to /etc/modprobe/d/kvm.conf and restarted the hosts but that doesn't appear to have made a difference. Is this a known issue with Windows 10 guests?

3 7

Firewall GARP not reachable to VM
by k.betsis＠gmail.com 10 Apr '20

10 Apr '20

Hi all Does anyone know how i can allow my Firewall VM cluster act as the default gateway to VMs within the same network? I've configured the GARP functionality on the OPNSENSE firewalls (PFSENSE fork). VMs within the same network can ping the firewall IP addresses successfully but not the GARP IP. The ovirt network has been configured with the MAC Address Anti-spoofing to false. One firewall has been configured with virtio network drivers and the with e1000 both exhibiting the same behavior. Currently all VMs have been configured with a default gateway the primary firewall. Network workarounds using BGP and attributes can work, but are way to complicate to streamline for all VMs when a simple VRRP can do the job. Any ideas what i am missing?

2 1

Data domain down due to space crunch
by Crazy Ayansh 10 Apr '20

10 Apr '20

Hi Guys, I am using Ovirt 4.3.7 in my environment.I am using servers local storage for data domains. Today one of the servers data domain got full and due to this my VMs paused. [image: image.png] Now i am unable to export my VM as the storage in ovirt is down.....What should i do now.....any suggestions.....? Thanks

2 2

Ovirt and Dell Compellent in ISCSI
by dalmasso＠cines.fr 10 Apr '20

10 Apr '20

hi all, we use ovirt 4.3 on dell server r640 runing centos 7.7 and a storage bay Dell Compellent SCv3020 in ISCSI. We use two 10gb interfaces for iSCSI connection on each dell server. If we configure ISCSI connection directly from web IU, we can’t specify the two physical ethernet interface , and there are missing path . (only 4 path on 8) So, on the shell of hypervisor we use this commands for configure the connections : iscsiadm -m iface -I em1 --op=new # 1st ethernet interface iscsiadm -m iface -I p3p1 --op=new # 2d ethernet interface iscsiadm -m discovery -t sendtargets -p xx.xx.xx.xx iscsiadm -m node -o show iscsiadm -m node --login after this, on the web IU we can connect our LUN with all path. Also, I don’t understand how to configure multipath in the web UI . By defaut the configuration is in failover : multipath -ll : 36000d3100457e4000000000000000005 dm-3 COMPELNT,Compellent Vol size=500G features='1 queue_if_no_path' hwhandler='0' wp=rw `-+- policy='service-time 0' prio=1 status=active |- 23:0:0:1 sdb 8:16 active ready running |- 24:0:0:1 sdd 8:48 active ready running |- 25:0:0:1 sdc 8:32 active ready running |- 26:0:0:1 sde 8:64 active ready running |- 31:0:0:1 sdf 8:80 active ready running |- 32:0:0:1 sdg 8:96 active ready running |- 33:0:0:1 sdh 8:112 active ready running |- 34:0:0:1 sdi 8:128 active ready running I think round robind or another configuration will be more performent. So can we made this configuration , select physical interface and configure multipath in web UI ? for easyly maintenance and adding other server ? Thank you. Sylvain.

3 4

oVirt 4.4.0 Beta release refresh is now available for testing
by Sandro Bonazzola 09 Apr '20

09 Apr '20

oVirt 4.4.0 Beta release refresh is now available for testing The oVirt Project is excited to announce the availability of the beta release of oVirt 4.4.0 refresh for testing, as of April 9th, 2020 This release unleashes an altogether more powerful and flexible open source virtualization solution that encompasses hundreds of individual changes and a wide range of enhancements across the engine, storage, network, user interface, and analytics on top of oVirt 4.3. Important notes before you try it Please note this is a Beta release. The oVirt Project makes no guarantees as to its suitability or usefulness. This pre-release must not to be used in production. In particular, please note that upgrades from 4.3 and future upgrades from this beta to the final 4.4 release from this version are not supported. Some of the features included in oVirt 4.4.0 Beta require content that will be available in CentOS Linux 8.2 but can’t be tested on RHEL 8.2 beta yet due to some incompatibility in openvswitch package shipped in CentOS Virt SIG which requires to rebuild openvswitch on top of CentOS 8.2. Known Issues - ovirt-imageio development is still in progress. In this beta you can’t upload images to data domains using the engine web application. You can still copy iso images into the deprecated ISO domain for installing VMs or upload and download to/from data domains is fully functional via the REST API and SDK. For uploading and downloading via the SDK, please see: - https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upload_d… - https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/download… Both scripts are standalone command line tool, try --help for more info. Installation instructions For the engine: either use appliance or: - Install CentOS Linux 8 minimal from http://centos.mirror.garr.it/centos/8.1.1911/isos/x86_64/CentOS-8.1.1911-x8… - dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44-pre.rpm - dnf update (reboot if needed) - dnf module enable -y javapackages-tools pki-deps 389-ds - dnf install ovirt-engine - engine-setup For the nodes: Either use oVirt Node ISO or: - Install CentOS Linux 8 from http://centos.mirror.garr.it/centos/8.1.1911/isos/x86_64/CentOS-8.1.1911-x8… ; select minimal installation - dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44-pre.rpm - dnf update (reboot if needed) - Attach the host to engine and let it be deployed. What’s new in oVirt 4.4.0 Beta? - Hypervisors based on CentOS Linux 8 (rebuilt from award winning RHEL8), for both oVirt Node and standalone CentOS Linux hosts - Easier network management and configuration flexibility with NetworkManager - VMs based on a more modern Q35 chipset with legacy seabios and UEFI firmware - Support for direct passthrough of local host disks to VMs - Live migration improvements for High Performance guests. - New Windows Guest tools installer based on WiX framework now moved to VirtioWin project - Dropped support for cluster level prior to 4.2 - Dropped SDK3 support - 4K disks support only for file based storage. iSCSI/FC storage do not support 4k disks yet. - Exporting a VM to a data domain - Editing of floating disks - Integrating ansible-runner into engine, which allows a more detailed monitoring of playbooks executed from engine - Adding/reinstalling hosts are now completely based on Ansible - The OpenStack Neutron Agent cannot be configured by oVirt anymore, it should be configured by TripleO instead This release is available now on x86_64 architecture for: * Red Hat Enterprise Linux 8.1 * CentOS Linux (or similar) 8.1 This release supports Hypervisor Hosts on x86_64 and ppc64le architectures for: * Red Hat Enterprise Linux 8.1 * CentOS Linux (or similar) 8.1 * oVirt Node 4.4 based on CentOS Linux 8.1 (available for x86_64 only) See the release notes [1] for installation instructions and a list of new features and bugs fixed. If you manage more than one oVirt instance, OKD or RDO we also recommend to try ManageIQ <http://manageiq.org/>. In such a case, please be sure to take the qc2 image and not the ova image. Notes: - oVirt Appliance is already available for CentOS Linux 8 - oVirt Node NG is already available for CentOS Linux 8 Additional Resources: * Read more about the oVirt 4.4.0 release highlights: http://www.ovirt.org/release/4.4.0/ * Get more oVirt project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.4.0/ [2] http://resources.ovirt.org/pub/ovirt-4.4-pre/iso/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/>* <https://www.redhat.com/en/summit?sc_cid=7013a000002D2QxAAK>* *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

2 1

access to QEMU monitor
by Matthias Leopold 09 Apr '20

09 Apr '20

Hi, for educational purposes I'm trying to access the QEMU monitor of oVirt VMs. Can someone tell me how this can be done? Connecting to the unix socket with socat doesn't work, probably because it's not started with "server,nowait". Can the QEMU monitor be reached with the SPICE console? thx Matthias

1 0

UI lockup
by Shareef Jalloq 08 Apr '20

08 Apr '20

Hi, when browsing to the admin portal of the Engine, I get a popup: Uncaught exception occurred. Please try reloading the page. Details: (NS_ERROR_STORAGE_BUSY). And the ui.log has the error at the end of the mail. What gives? Shareef. 2020-04-07 15:54:12,255Z ERROR [org.ovirt.engine.ui.frontend.server.gwt.OvirtRemoteLoggingService] (default task-66) [] Permutation name: 1AD871380C0F85A90CBF764A6CF6663F 2020-04-07 15:54:12,255Z ERROR [org.ovirt.engine.ui.frontend.server.gwt.OvirtRemoteLoggingService] (default task-66) [] Uncaught exception: com.google.gwt.core.client.JavaScriptException: (NS_ERROR_STORAGE_BUSY) : at Unknown.loadFromLocalStorage( https://ovirt-engine.phoelex.com/ovirt-engine/webadmin/theme/00-ovirt.brand… ) at Unknown.init( https://ovirt-engine.phoelex.com/ovirt-engine/webadmin/theme/00-ovirt.brand… ) at Unknown.fn.setupVerticalNavigation( https://ovirt-engine.phoelex.com/ovirt-engine/webadmin/theme/00-ovirt.brand… ) at org.ovirt.engine.ui.webadmin.section.main.view.MainSectionView$lambda$0$Type.execute(MainSectionView.java:48) at com.google.gwt.core.client.impl.SchedulerImpl.runScheduledTasks(SchedulerImpl.java:167) [gwt-servlet.jar:] at com.google.gwt.core.client.impl.SchedulerImpl.$flushPostEventPumpCommands(SchedulerImpl.java:338) [gwt-servlet.jar:] at com.google.gwt.core.client.impl.SchedulerImpl$Flusher.execute(SchedulerImpl.java:76) [gwt-servlet.jar:] at com.google.gwt.core.client.impl.SchedulerImpl.execute(SchedulerImpl.java:140) [gwt-servlet.jar:] at com.google.gwt.core.client.impl.Impl.apply(Impl.java:236) [gwt-servlet.jar:] at com.google.gwt.core.client.impl.Impl.entry0(Impl.java:275) [gwt-servlet.jar:] at Unknown.Tu/<( https://ovirt-engine.phoelex.com/ovirt-engine/webadmin/?locale=en_US line 9 > scriptElement) at Unknown.d( https://ovirt-engine.phoelex.com/ovirt-engine/webadmin/?locale=en_US line 9 > scriptElement) at Unknown.anonymous(Unknown)

2 2

Cluster Console Encryption
by Tommaso - Shellrent 08 Apr '20

08 Apr '20

Hi to all. We are tryng to manage the value of "Enable VNC Encryption" on the cluster via ansible[or any automatic mode]. Someone got any hint? Regards -- -- Shellrent - Il primo hosting italiano Security First *Tommaso De Marchi* /COO - Chief Operating Officer/ Shellrent Srl Via dell'Edilizia, 19 - 36100 Vicenza Tel. 0444321155 <tel:+390444321155> | Fax 04441492177

1 0

Cannot upload image
by Green, Jacob Allen /C 07 Apr '20

07 Apr '20

Hello, I am in a precarious situation where I need to upload an image to the storage domain, I understand that normally you would achieve this via the upload button on the storage domain > Disks tab. However I currently do not have the ability to import the certificate. Is there a way from command line either on the RHV manager or otherwise to upload a qcow2 without using the image upload through the GUI? Thank you.

3 4

Gluster problems with new disk and device name change and overlap
by Gianluca Cecchi 07 Apr '20

07 Apr '20

Hi, I have configured a single host HCI environment through the GUI wizard in 4.3.9. Initial setup has thai layout of disks, as seen by the operating system: /dev/sda -> for ovirt-node-ng OS /dev/nvme0n1 --> for gluster, engine and data volumes /dev/nvme1n1 --> for gluster, vmstore volume So far so good and all is ok. I notice that, even with single path internal disks, at the end oVirt configures the gluster disks as multipath devices and LVM2 PV structure on top of the multipath devices. Is this for "code optimization" at low level or what is the rationale for that, as with Gluster normally you do use local disks and so single path? Multipath structure generated: [root@ovirt ~]# multipath -l nvme.8086-50484b53373530353031325233373541474e-494e54454c205353 dm-5 NVME,INTEL SSDPED1K375GA size=349G features='1 queue_if_no_path' hwhandler='0' wp=rw `-+- policy='service-time 0' prio=0 status=active `- 0:0:1:0 nvme0n1 259:0 active undef running eui.01000000010000005cd2e4b5e7db4d51 dm-6 NVME,INTEL SSDPEDKX040T7 size=932G features='1 queue_if_no_path' hwhandler='0' wp=rw `-+- policy='service-time 0' prio=0 status=active `- 2:0:1:0 nvme1n1 259:2 active undef running [root@ovirt ~]# Anyway, on top of the multipah devices On /dev/nvme0n1: gluster_vg_nvme0n1 volume group with gluster_lv_data and gluster_lv_engine On /dev/nvme1n1 gluster_vg_nvme1n1 volume group with gluster_lv_vmstore logical volume The problem arises when I add another nvme disk, that, occupying a PCI slot, it seems has always higher priority of the previous /dev/nvme1n1 disk and so takes its name. After booting the node: old nvme0n1 --> unmodified name old nvme1n1 --> becomes nvme2n1 new disk --> gets name nvme1n1 From a funcional point of view I have no problems apart LVM warnings I send below and also because the xfs entries in fstab are with UUID: UUID=fa5dd3cb-aeef-470e-b982-432ac896d87a /gluster_bricks/engine xfs inode64,noatime,nodiratime 0 0 UUID=43bed7de-66b1-491d-8055-5b4ef9b0482f /gluster_bricks/data xfs inode64,noatime,nodiratime 0 0 UUID=b81a491c-0a4c-4c11-89d8-9db7fe82888e /gluster_bricks/vmstore xfs inode64,noatime,nodiratime 0 0 lvs commands get: [root@ovirt ~]# lvs WARNING: Not using device /dev/nvme0n1 for PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp. WARNING: Not using device /dev/nvme2n1 for PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl. WARNING: PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp prefers device /dev/mapper/nvme.8086-50484b53373530353031325233373541474e-494e54454c20535344504544314b3337354741-00000001 because device is used by LV. WARNING: PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl prefers device /dev/mapper/eui.01000000010000005cd2e4e359284f51 because device is used by LV. LV VG Attr LSize Pool Origin ... Or, for the old nvme1n1 disk, now nvme2n1 multipath device: [root@ovirt ~]# pvdisplay /dev/mapper/eui.01000000010000005cd2e4e359284f51 WARNING: Not using device /dev/nvme0n1 for PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp. WARNING: Not using device /dev/nvme2n1 for PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl. WARNING: PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp prefers device /dev/mapper/nvme.8086-50484b53373530353031325233373541474e-494e54454c20535344504544314b3337354741-00000001 because device is used by LV. WARNING: PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl prefers device /dev/mapper/eui.01000000010000005cd2e4e359284f51 because device is used by LV. --- Physical volume --- PV Name /dev/mapper/eui.01000000010000005cd2e4e359284f51 VG Name gluster_vg_nvme1n1 PV Size 931.51 GiB / not usable 1.71 MiB Allocatable yes (but full) PE Size 4.00 MiB Total PE 238467 Free PE 0 Allocated PE 238467 PV UUID O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl [root@ovirt ~]# I'm able to create PV on top of the new multipath device detected by the system (see the nvme1n1 of the underlying disk): eui.01000000010000005cd2e4b5e7db4d51 dm-6 NVME,INTEL SSDPEDKX040T7 size=3.6T features='1 queue_if_no_path' hwhandler='0' wp=rw `-+- policy='service-time 0' prio=0 status=active `- 1:0:1:0 nvme1n1 259:1 active undef running [root@ovirt ~]# pvcreate --dataalignment 256K /dev/mapper/eui.01000000010000005cd2e4b5e7db4d51 WARNING: Not using device /dev/nvme0n1 for PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp. WARNING: Not using device /dev/nvme2n1 for PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl. WARNING: PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp prefers device /dev/mapper/nvme.8086-50484b53373530353031325233373541474e-494e54454c20535344504544314b3337354741-00000001 because device is used by LV. WARNING: PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl prefers device /dev/mapper/eui.01000000010000005cd2e4e359284f51 because device is used by LV. Physical volume "/dev/mapper/eui.01000000010000005cd2e4b5e7db4d51" successfully created. [root@ovirt ~]# But then I'm unable to create a VG on top of it: [root@ovirt ~]# vgcreate gluster_vg_4t /dev/mapper/eui.01000000010000005cd2e4b5e7db4d51 WARNING: Not using device /dev/nvme0n1 for PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp. WARNING: Not using device /dev/nvme1n1 for PV 56ON99-hFFP-cGpZ-g4MX-GfjW-jXeE-fKZVG9. WARNING: Not using device /dev/nvme2n1 for PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl. WARNING: PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp prefers device /dev/mapper/nvme.8086-50484b53373530353031325233373541474e-494e54454c20535344504544314b3337354741-00000001 because device is used by LV. WARNING: PV 56ON99-hFFP-cGpZ-g4MX-GfjW-jXeE-fKZVG9 prefers device /dev/mapper/eui.01000000010000005cd2e4b5e7db4d51 because device is in dm subsystem. WARNING: PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl prefers device /dev/mapper/eui.01000000010000005cd2e4e359284f51 because device is used by LV. WARNING: Not using device /dev/nvme0n1 for PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp. WARNING: Not using device /dev/nvme1n1 for PV 56ON99-hFFP-cGpZ-g4MX-GfjW-jXeE-fKZVG9. WARNING: Not using device /dev/nvme2n1 for PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl. WARNING: PV eYfuXw-yaPd-cMUE-0dnA-tVON-uZ9g-5x4BDp prefers device /dev/mapper/nvme.8086-50484b53373530353031325233373541474e-494e54454c20535344504544314b3337354741-00000001 because of previous preference. WARNING: PV 56ON99-hFFP-cGpZ-g4MX-GfjW-jXeE-fKZVG9 prefers device /dev/mapper/eui.01000000010000005cd2e4b5e7db4d51 because of previous preference. WARNING: PV O43LFq-46Gc-RRgS-Sk1F-5mFZ-Qw4n-oxXgJl prefers device /dev/mapper/eui.01000000010000005cd2e4e359284f51 because of previous preference. Cannot use device /dev/mapper/eui.01000000010000005cd2e4b5e7db4d51 with duplicates. [root@ovirt ~]# the same with the "-f" option. I suspect I can solve the problem filtering out /dev/nvme* devices in lvm.conf, but I'm not sure. The OS disk is seen as sda so it should not have problems with this Something like this: filter = [ "r|/dev/nvme|", "a|.*/|" ] And also I am not sure if I have to rebuild the initrd or not in this case and if so what would be the exact sequence of commands to execute. Any suggestions? Thanks in advance, Gianluca

2 2

Auto-logout while editing
by Shareef Jalloq 07 Apr '20

07 Apr '20

There's a rather annoying bug in the Engine UI where you can be logged out while actively using the system. I've been logged out twice now while editing the settings for a new VM. I'm screen grabbing and documenting as I go but I was just logged out while editing the System settings for a new VM. Shareef.

2 1

snapshot options on remote NFS storage
by Jayme 07 Apr '20

07 Apr '20

Was wondering if there are any guides or if anyone could share their storage configuration details for NFS. If using LVM is it safe to snapshot volumes with running VM images for backup purposes?

2 1

Re: Mount ISO to VM
by Shani Leviim 07 Apr '20

07 Apr '20

Hi Anton, Sure thing. During the creation of the NFS storage, you should specify an export path. SSHing that export path will expose you to the storage domain's content. You can visit the "Attaching NFS Storage" section in https://ovirt.org/documentation/admin-guide/chap-Storage.html *Regards,* *Shani Leviim* On Tue, Apr 7, 2020 at 1:37 PM Anton Louw <Anton.Louw(a)voxtelecom.co.za> wrote: > > > Hi Shani, > > > > Great, thank you very much. > > > > Do you perhaps know if I can access the storage domain if I SSH to a node? > For instance, if I want to access a “datastore” in VMware, I SSH to a host > and select /vmfs/volumes > > > > Is there anything like that available for oVirt? > > > > Thanks > > > > *Anton Louw* > *Cloud Engineer: Storage and Virtualization* at *Vox* > ------------------------------ > *T:* 087 805 0000 | *D:* 087 805 1572 > *M:* N/A > *E:* anton.louw(a)voxtelecom.co.za > *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za > > [image: F] <https://www.facebook.com/voxtelecomZA> > [image: T] <https://www.twitter.com/voxtelecom> > [image: I] <https://www.instagram.com/voxtelecomza/> > [image: L] <https://www.linkedin.com/company/voxtelecom> > [image: Y] <https://www.youtube.com/user/VoxTelecom> > > *From:* Shani Leviim <sleviim(a)redhat.com> > *Sent:* 07 April 2020 11:35 > *To:* Anton Louw <Anton.Louw(a)voxtelecom.co.za> > *Cc:* users(a)ovirt.org > *Subject:* Re: [ovirt-users] Mount ISO to VM > > > > Hi Anton, > > You can upload an ISO file as a disk using the UI: > > Storage -> Disks -> upload. > > Further information can be found here under the "Uploading a Disk Image to > a Storage Domain" section: > > https://www.ovirt.org/documentation/admin-guide/chap-Virtual_Machine_Disks.… > > > > Or use the following script using SDK: > https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upload_d… > > > *Regards,* > > *Shani Leviim* > > > > > > On Tue, Apr 7, 2020 at 11:45 AM Anton Louw <Anton.Louw(a)voxtelecom.co.za> > wrote: > > > > Hi Everybody, > > > > Is there a way to mount an ISO to one of my VMs if I do not have an ISO > domain, but the ISO file is on a Data domain? > > > > Thanks > > > > *Anton Louw* > > *Cloud Engineer: Storage and Virtualization* at *Vox* > ------------------------------ > > *T:* 087 805 0000 | *D:* 087 805 1572 > *M:* N/A > *E:* anton.louw(a)voxtelecom.co.za > *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za > > > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > > *Disclaimer* <https://www.facebook.com/voxtelecomZA> > > The contents of this email are confidential to the sender and the intended > recipient. Unless the contents are clearly and entirely of a personal > nature, they are subject to copyright in favour of the holding company of > the Vox group of companies. Any recipient who receives this email in error > should immediately report the error to the sender and permanently delete > this email from all storage devices. > > This email has been scanned for viruses and malware, and may have been > automatically archived by *Mimecast Ltd*, an innovator in Software as a > Service (SaaS) for business. Providing a *safer* and *more useful* place > for your human generated data. Specializing in; Security, archiving and > compliance. To find out more *Click Here*. > <https://www.facebook.com/voxtelecomZA> > > <https://www.facebook.com/voxtelecomZA> > > _______________________________________________ > Users mailing list -- *users(a)ovirt.org* > To unsubscribe send an email to *users-leave(a)ovirt.org* > Privacy Statement: *https://www.ovirt.org/privacy-policy.html* > oVirt Code of Conduct: > *https://www.ovirt.org/community/about/community-guidelines/* > List Archives: > *https://lists.ovirt.org/archives/list/users@ovirt.org/message/D7ONE6IJN6RK2IQRNUYCZE3EOXBJWHX4/* > <https://www.facebook.com/voxtelecomZA> > > >

1 0

Re: Mount ISO to VM
by Shani Leviim 07 Apr '20

07 Apr '20

Hi Anton, You can upload an ISO file as a disk using the UI: Storage -> Disks -> upload. Further information can be found here under the "Uploading a Disk Image to a Storage Domain" section: https://www.ovirt.org/documentation/admin-guide/chap-Virtual_Machine_Disks.… Or use the following script using SDK: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upload_d… *Regards,* *Shani Leviim* On Tue, Apr 7, 2020 at 11:45 AM Anton Louw <Anton.Louw(a)voxtelecom.co.za> wrote: > > > Hi Everybody, > > > > Is there a way to mount an ISO to one of my VMs if I do not have an ISO > domain, but the ISO file is on a Data domain? > > > > Thanks > > *Anton Louw* > *Cloud Engineer: Storage and Virtualization* at *Vox* > ------------------------------ > *T:* 087 805 0000 | *D:* 087 805 1572 > *M:* N/A > *E:* anton.louw(a)voxtelecom.co.za > *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg > www.vox.co.za > > [image: F] <https://www.facebook.com/voxtelecomZA> > [image: T] <https://www.twitter.com/voxtelecom> > [image: I] <https://www.instagram.com/voxtelecomza/> > [image: L] <https://www.linkedin.com/company/voxtelecom> > [image: Y] <https://www.youtube.com/user/VoxTelecom> > > [image: #VoxBrand] > <https://www.vox.co.za/fibre/fibre-to-the-home/?prod=HOME> > *Disclaimer* > > The contents of this email are confidential to the sender and the intended > recipient. Unless the contents are clearly and entirely of a personal > nature, they are subject to copyright in favour of the holding company of > the Vox group of companies. Any recipient who receives this email in error > should immediately report the error to the sender and permanently delete > this email from all storage devices. > > This email has been scanned for viruses and malware, and may have been > automatically archived by *Mimecast Ltd*, an innovator in Software as a > Service (SaaS) for business. Providing a *safer* and *more useful* place > for your human generated data. Specializing in; Security, archiving and > compliance. To find out more Click Here > <https://www.voxtelecom.co.za/security/mimecast/?prod=Enterprise>. > > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/D7ONE6IJN6RK2… >

2 1

ISO and Export domains deprecated
by Colin Coe 07 Apr '20

07 Apr '20

Hi all I'm trying to understand how ISO and Export domains going away is going to affect us. We have four RHV instances: - Prod DC1 (RHV4.1) - Prod DC2 (RHV4.1) - DEV (RHV4.3) - TEST (RHV4.3) Prod DC1, DEV and TEST all share export and ISO domains. Prod DC2 is remote and currently has its own ISO and Export domains. When ISO and Export domains go away, can I still share ISO domains between the RHV instances? Thanks

5 9

Mount ISO to VM
by Anton Louw 07 Apr '20

07 Apr '20

Hi Everybody, Is there a way to mount an ISO to one of my VMs if I do not have an ISO domain, but the ISO file is on a Data domain? Thanks Anton Louw Cloud Engineer: Storage and Virtualization ______________________________________ D: 087 805 1572 | M: N/A A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg anton.louw(a)voxtelecom.co.za www.vox.co.za

1 0

oVirt 4.4.0 Beta release refresh is now available for testing
by Sandro Bonazzola 07 Apr '20

07 Apr '20

oVirt 4.4.0 Beta release refresh is now available for testing The oVirt Project is excited to announce the availability of the beta release of oVirt 4.4.0 refresh for testing, as of April 3rd, 2020 This release unleashes an altogether more powerful and flexible open source virtualization solution that encompasses hundreds of individual changes and a wide range of enhancements across the engine, storage, network, user interface, and analytics on top of oVirt 4.3. Important notes before you try it Please note this is a Beta release. The oVirt Project makes no guarantees as to its suitability or usefulness. This pre-release must not be used in production. In particular, please note that upgrades from 4.3 and future upgrades from this beta to the final 4.4 release from this version are not supported. Some of the features included in oVirt 4.4.0 Beta require content that will be available in CentOS Linux 8.2 but can’t be tested on RHEL 8.2 beta yet due to some incompatibility in openvswitch package shipped in CentOS Virt SIG which requires to rebuild openvswitch on top of CentOS 8.2. Known Issues - ovirt-imageio development is still in progress. In this beta you can’t upload images to data domains using the engine web application. You can still copy iso images into the deprecated ISO domain for installing VMs or upload and download to/from data domains is fully functional via the REST API and SDK. For uploading and downloading via the SDK, please see: - https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upload_d… - https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/download… Both scripts are standalone command line tools, try --help for more info. Installation instructions For the engine: either use appliance or: - Install CentOS Linux 8 minimal from http://centos.mirror.garr.it/centos/8.1.1911/isos/x86_64/CentOS-8.1.1911-x8… - dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44-pre.rpm - dnf update (reboot if needed) - dnf module enable -y javapackages-tools pki-deps 389-ds - dnf install ovirt-engine - engine-setup For the nodes: Either use oVirt Node ISO or: - Install CentOS Linux 8 from http://centos.mirror.garr.it/centos/8.1.1911/isos/x86_64/CentOS-8.1.1911-x8… ; select minimal installation - dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44-pre.rpm - dnf update (reboot if needed) - Attach the host to engine and let it be deployed. What’s new in oVirt 4.4.0 Beta? - Hypervisors based on CentOS Linux 8 (rebuilt from award winning RHEL8), for both oVirt Node and standalone CentOS Linux hosts - Easier network management and configuration flexibility with NetworkManager - VMs based on a more modern Q35 chipset with legacy seabios and UEFI firmware - Support for direct passthrough of local host disks to VMs - Live migration improvements for High Performance guests. - New Windows Guest tools installer based on WiX framework now moved to VirtioWin project - Dropped support for cluster level prior to 4.2 - Dropped SDK3 support - 4K disks support only for file based storage. iSCSI/FC storage do not support 4k disks yet. - Exporting a VM to a data domain - Editing of floating disks - Integrating ansible-runner into engine, which allows a more detailed monitoring of playbooks executed from engine - Adding/reinstalling hosts are now completely based on Ansible - The OpenStack Neutron Agent cannot be configured by oVirt anymore, it should be configured by TripleO instead This release is available now on x86_64 architecture for: * Red Hat Enterprise Linux 8.1 * CentOS Linux (or similar) 8.1 This release supports Hypervisor Hosts on x86_64 and ppc64le architectures for: * Red Hat Enterprise Linux 8.1 * CentOS Linux (or similar) 8.1 * oVirt Node 4.4 based on CentOS Linux 8.1 (available for x86_64 only) See the release notes [1] for installation instructions and a list of new features and bugs fixed. If you manage more than one oVirt instance, OKD or RDO we also recommend to try ManageIQ <http://manageiq.org/>. In such a case, please be sure to take the qc2 image and not the ova image. Notes: - oVirt Appliance is already available for CentOS Linux 8 - oVirt Node NG is already available for CentOS Linux 8 Additional Resources: * Read more about the oVirt 4.4.0 release highlights: http://www.ovirt.org/release/4.4.0/ * Get more oVirt project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.4.0/ [2] http://resources.ovirt.org/pub/ovirt-4.4-pre/iso/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/>* <https://www.redhat.com/en/summit?sc_cid=7013a000002D2QxAAK>* *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

3 5

Add gluster storage domain incomplete documentation
by Gianluca Cecchi 07 Apr '20

07 Apr '20

Hello, I think both at oVirt and Red Hat official docs the steps regarding adding a new Gluster storage domain on an existing installation is quite confusing and misaligned. Below I explain my reasons for both. In the mean time, suppose I have a single host HCI with self hosted engine (but it could be useful to have hints for multi-hosts too) and the 3 storage domains configured during install (engine and data on a disk and vmstore on another disk). The system initially had 3 disks, the first used for the ovirt-node-ng system, the second for engine and data, the third for vmstore initial gluster storage domains Now I go and add a fourth disk, say 4Tb in size. I would like to create a new Gluster storage domain on it What are the suggested steps? BTW: after booting, the new disk has been automatically included in multipath eui.01000000010000005cd2e4b5e7db4d51 dm-6 NVME,INTEL SSDPEDKX040T7 size=3.6T features='1 queue_if_no_path' hwhandler='0' wp=rw `-+- policy='service-time 0' prio=0 status=active `- 1:0:1:0 nvme1n1 259:1 active undef running Coming back to the docs - oVirt documentation I base my considerations on page https://www.ovirt.org/documentation/admin-guide/chap-Working_with_Gluster_S… 1) the picture in that page is still based on 3.6 GUI, so the initial approach tends to make me feel the page could be not up to date 2) I would put the section "Creating a Storage Volume" before "Attaching a Gluster Storage Volume as a Storage Domain" and not the opposite as it is now 3) In "Creating a Storage Volume" there is the note that " You must create brick directories or mountpoints before you can add them to volumes. " This sentence in my opinion is not so clear (see also details at the end)... what is a user expected to have done on hypervisors? Creation of directories or file systems (and what type: prefered xfs or ext4?). Perhaps an example of commands would be useful. 4) in the workflow of creating volume, item 7: Click the Add Bricks button to select bricks to add to the volume. Bricks must be created externally on the Gluster Storage nodes. I would expect an indication of commands to be run instead... This implies knowledge of Gluster that the GUI functionality is aimed to hide... but so, not completely... I can see in my existing bricks, going to their advanced details: " xfs rw,seclabel,noatime,nodiratime,attr2,inode64,logbsize=128k,sunit=256,swidth=512,noquota " There is also the fstab portion of creating bricks... 5) In the workflow of creating volume, item 9: It is not clear the default "*" value for access if is the recommended one or not. I presume not - RHV documentation https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/ht… 4.3 Administrator Guide downloaded today Chapter 8, section 8.6 PREPARING AND ADDING RED HAT GLUSTER STORAGE There is reference to Red Hat Gluster Storage, version 3.4. I think it should be 3.5 instead? Because at the same time in 3.4 there is reference to RHV 4.1, not 4.3. While in "Configuring Red Hat Virtualization with Red Hat Gluster Storage" version 3.5 there is correct reference to RHV 4.3 Anyway this mix of product documentation is not optimal in my opinion. I would directly include inside RHV docs the Gluster part related to it, without jumping between the two comlete, with the risk of misalignment in time. Also, in Gluster Storage guide referred, there is the part related to volumes but not to bricks.... Possibly the correct reference for the brick part, that is the one missing in webadmin GUI, could be this: https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.5/h… and/or this https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.5/h… ? Thanks for reading and hoping to get commands' workflow to configure this new disk for a new gluster storage domain. It seems inside the guides is oversimplified the process of creating bricks, that in the documentation seem actually to be xfs filesystems mounted over thin pool based logical volumes residing on top of volume groups with particular alignment settings specified during their creation.... Gianluca

2 3

Engine/host communication maybe broken
by Sven Achtelik 06 Apr '20

06 Apr '20

Hi All, I'm currently facing a situation which I don't know how to resolve and I don't know how that happened. The hosted engine HA part is working fine and the vm starts. It's accessible via the gui and that's it. It's showing some hosts online and some offline. It looks like it's not communication with the nodes anymore to get the latest status or to start task. Is there a cache or something that can be cleared on the engine vm to force a connection the the nodes ? Or is there a way to analyze if communication is really broken ? Any ideas how to start from here ? Thank you, Sven

3 3

"Actual timezone differs [...]" after using the new virtio-win guest tools
by Tobias Scheinert 06 Apr '20

06 Apr '20

Hi, we are currently preparing our Windows software packages for update oVirt from version 4.3 to version 4.4. One of the novelties[1] of version 4.4 is the change from the ovirt-guest-tools to the virtio-win guest tools. We are currently running version 4.3.9.4-1.el7 in our oVirt cluster. When we are installing the new virtio-win guest tools we get the tooltip message: "Actual timezone in the guest differs from the configuration". The guest agents of the two guest tools are completely different, the ovirt-guest-agent is written in Python, the qemu-guest-agent is written in C. So my guess was, that there would different result send to the ovirt-engine. As I looked into the sources of ovirt-engine, especially into the timezone Java stuff, I did not found any changes in the last few months. So is this bug fixed, with the new ovirt version 4.4, or is this aspect new? P.S. The os in the vm was Windows 10 version 1909 [1] <https://ovirt.org/release/4.4.0/> Best Regards Tobias Scheinert

2 3

Windows Guest Agent Issues Since 4.3
by Alex McWhirter 06 Apr '20

06 Apr '20

Upgraded a installation to 4.3, and update the guest agent on all VM's, now all of my Windows VM's have a exclamation point telling me to install the latest guest agent. Some parts of the guest agent still seem to work, the IP addresses are still showing in the portal, but not FQDN and for some machine the shutdown button no longer functions correctly. I also tried to a fresh 4.3 install on a test cluster, and at first it worked great. But after a few days all of the windows vm's on that setup are showing the same behavior. Linux guests are fine on both systems. Not really sure where to start looking.

1 0

oVirt 4.4.0 Beta release is now available for testing
by Sandro Bonazzola 06 Apr '20

06 Apr '20

oVirt 4.4.0 Beta release is now available for testing The oVirt Project is excited to announce the availability of the beta release of oVirt 4.4.0 for testing, as of March 27th, 2020 This release unleashes an altogether more powerful and flexible open source virtualization solution that encompasses hundreds of individual changes and a wide range of enhancements across the engine, storage, network, user interface, and analytics on top of oVirt 4.3. Important notes before you try it Please note this is a Beta release. The oVirt Project makes no guarantees as to its suitability or usefulness. This pre-release must not to be used in production. In particular, please note that upgrades from 4.3 and future upgrades from this beta to the final 4.4 release from this version are not supported. Some of the features included in oVirt 4.4.0 Beta require content that will be available in CentOS Linux 8.2 which are currently included in Red Hat Enterprise Linux 8.2 beta. If you want to have a better experience you can test oVirt 4.4.0 Beta on Red Hat Enterprise Linux 8.2 beta. Known Issues - ovirt-imageio development is still in progress. In this beta you can’t upload images to data domains. You can still copy iso images into the deprecated ISO domain for installing VMs. Installation instructions For the engine: either use appliance or: - Install CentOS Linux 8 minimal from http://centos.mirror.garr.it/centos/8.1.1911/isos/x86_64/CentOS-8.1.1911-x8… - dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44-pre.rpm - dnf update (reboot if needed) - dnf module enable -y javapackages-tools pki-deps 389-ds - dnf install ovirt-engine - engine-setup For the nodes: Either use oVirt Node ISO or: - Install CentOS Linux 8 from http://centos.mirror.garr.it/centos/8.1.1911/isos/x86_64/CentOS-8.1.1911-x8… ; select minimal installation - dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44-pre.rpm - dnf update (reboot if needed) - Attach the host to engine and let it be deployed. What’s new in oVirt 4.4.0 Beta? - Hypervisors based on CentOS Linux 8 (rebuilt from award winning RHEL8), for both oVirt Node and standalone CentOS Linux hosts - Easier network management and configuration flexibility with NetworkManager - VMs based on a more modern Q35 chipset with legacy seabios and UEFI firmware - Support for direct passthrough of local host disks to VMs - Live migration improvements for High Performance guests. - New Windows Guest tools installer based on WiX framework now moved to VirtioWin project - Dropped support for cluster level prior to 4.2 - Dropped SDK3 support - 4K disks support - Exporting a VM to a data domain - Editing of floating disks - Integrating ansible-runner into engine, which allows a more detailed monitoring of playbooks executed from engine - Adding/reinstalling hosts are now completely based on Ansible - The OpenStack Neutron Agent cannot be configured by oVirt anymore, it should be configured by TripleO instead This release is available now on x86_64 architecture for: * Red Hat Enterprise Linux 8.1 or newer * CentOS Linux (or similar) 8.1 or newer This release supports Hypervisor Hosts on x86_64 and ppc64le architectures for: * Red Hat Enterprise Linux 8.1 or newer * CentOS Linux (or similar) 8.1 or newer * oVirt Node 4.4 based on CentOS Linux 8.1 (available for x86_64 only) See the release notes [1] for installation instructions and a list of new features and bugs fixed. If you manage more than one oVirt instance, OKD or RDO we also recommend to try ManageIQ <http://manageiq.org/>. In such a case, please be sure to take the qc2 image and not the ova image. Notes: - oVirt Appliance is already available for CentOS Linux 8 - oVirt Node NG is already available for CentOS Linux 8 Additional Resources: * Read more about the oVirt 4.4.0 release highlights: http://www.ovirt.org/release/4.4.0/ * Get more oVirt project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.4.0/ [2] http://resources.ovirt.org/pub/ovirt-4.4-pre/iso/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/>* <https://www.redhat.com/en/summit?sc_cid=7013a000002D2QxAAK>* *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

4 5

Re: Multiple NICs on hosted engine, oVirt 4.3
by Jiří Sléžka 06 Apr '20

06 Apr '20

Hello Paul, thanks for reply and for pointing me to RHV documentation. Shame on me, I forogot it exists and is well maintained and super relevant for oVirt. But in this case I am a bit lost. I can't find something relevant to my effort to modify HE vm's config to add the second NIC to it. Or do you mean I should change the location of vm.conf from /var/run location to something persistent and then modify this vm.conf as mentioned in that old post? For example, now I got this output for conf key [root@ovirt-hci01 ~]# hosted-engine --get-shared-config conf --type=he_shared conf : /var/run/ovirt-hosted-engine-ha/vm.conf, type : he_shared [root@ovirt-hci01 ~]# hosted-engine --get-shared-config conf --type=he_local conf : /var/run/ovirt-hosted-engine-ha/vm.conf, type : he_local Is it valid to change it to (for example) /etc/ovirt-hosted-engine/vm.conf and modify that file there? Is it safe for further updates, maintenance, etc.? Maybe the second question - which process creates vm.conf in /var/run path? Cheers, Jiri On 4/5/20 8:35 AM, Staniforth, Paul wrote: > Hello Jri, > The configurations local and shared are managed by > hosted-engine command. > https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/ht… > <https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/ht…> > > Chapter 12. Administering the Self-Hosted Engine Red Hat Virtualization > 4.3 | Red Hat Customer Portal > <https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/ht…> > The Red Hat Customer Portal delivers the knowledge, expertise, and > guidance available through your Red Hat subscription. > access.redhat.com > > see > "hosted-engine --help" > "man hosted-engine" > > Regards, > Paul S. > ------------------------------------------------------------------------ > *From:* Jiří Sléžka <jiri.slezka(a)slu.cz> > *Sent:* 04 April 2020 21:02 > *To:* users(a)ovirt.org <users(a)ovirt.org> > *Subject:* [ovirt-users] Multiple NICs on hosted engine, oVirt 4.3 > > Caution External Mail: Do not click any links or open any attachments > unless you trust the sender and know that the content is safe. > > Hello, > > I would like to add second NIC to hosted engine vm (I need access to > isolated network with host's power management). I found this solution... > > https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi… > > ...which seems to work in oVirt 3.5 but in oVirt 4.3 there is no file > like /etc/ovirt-hosted-engine/vm.conf anymore. > > In the file /etc/ovirt-hosted-engine/hosted-engine.conf is a line > > ... > conf=/var/run/ovirt-hosted-engine-ha/vm.conf > ... > > which points to this config but this is a running config... > > Is there a way to add a second NIC to hosted engin vm? > > Cheers, > > Jiri > > > To view the terms under which this email is distributed, please go to:- > http://leedsbeckett.ac.uk/disclaimer/email/ >

2 1

Re: oVirt Storage quota problems
by Vrgotic, Marko 06 Apr '20

06 Apr '20

Dear oVirt, Is there anyone willing and able to assist me in troubleshooting what seems to be multiple issues regarding quotas: 1. UI Exception each time I add Consumer to Quota. 2. User getting warning of not being authorized to ‘ConsumeQuota’ in order to AddVM or AddVMFromTemplate, even though User is in Consumers list. 3. Fishy quota usage percentage. I see this strange behavior on all my platforms, so it’s starting to look as a bug to me. Happy to provide any relevant logs or do tests needed. Kindly awaiting your reply. ----- kind regards/met vriendelijke groeten Marko Vrgotic ActiveVideo From: "Staniforth, Paul" <P.Staniforth(a)leedsbeckett.ac.uk> Date: Friday, 13 March 2020 at 18:19 To: "Vrgotic, Marko" <M.Vrgotic(a)activevideo.com>, "users(a)ovirt.org" <users(a)ovirt.org> Cc: Darko Stojchev <D.Stojchev(a)activevideo.com> Subject: Re: oVirt Storage quota problems Sorry haven't used quota in a while, one thought is there a template quota getting used? Regards, Paul S. ________________________________ From: Vrgotic, Marko <M.Vrgotic(a)activevideo.com> Sent: 13 March 2020 15:15 To: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk>; users(a)ovirt.org <users(a)ovirt.org> Cc: Stojchev, Darko <D.Stojchev(a)activevideo.com> Subject: Re: oVirt Storage quota problems Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. Hey Paul, I did the check for another user that has same issue and what I found out its bit strange: * DC1 / infrastructure1 – quota storage_inf1 – user is added in Consumers list - gets “2020-03-13 08:26:18,057Z WARN [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-3804) [a6ba871a-dc42-4d4b-a01a-a72cd5a45959] Validation of action 'AddVmFromTemplate' failed for user azabaleta@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA” * DC1 / development2 – quota storage_dev2 – user is added in Consumers list – works The following logs confirm that: * Fails against infrastructure1 : “2020-03-13 08:26:18,057Z INFO [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-3804) [a6ba871a-dc42-4d4b-a01a-a72cd5a45959] No permission found for user '699687a1-da37-4b4 0-a86d-dc744208302d' or one of the groups he is member of, when running action 'AddVmFromTemplate', Required permissions are: Action type: 'USER' Action group: 'CONSUME_QUOTA' Object type: ' Quota' Object ID: '254f2582-839d-11e9-aaa2-00163e4f2a6d'. 2020-03-13 08:26:18,057Z WARN [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-3804) [a6ba871a-dc42-4d4b-a01a-a72cd5a45959] Validation of action 'AddVmFromTemplate' failed for user azabaleta@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-13 08:27:03,426Z INFO [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-3813) [1e11522e-b25a-4972-8ff8-1d9a08bd57ca] Lock Acquired to object 'EngineLock:{exclusiveLocks='[azabaleta-runner=VM_NAME]', sharedLocks='[a80c1f1f-9cd3-4e8c-bfe9-670aa36d2aff=DISK, 9c710118-bb68-45aa-bafd-0e90cb07b9cf=TEMPLATE]'}' * Works against development2: 2020-03-13 08:27:04,323Z INFO [org.ovirt.engine.core.bll.AddGraphicsDeviceCommand] (default task-3813) [2cd83827] Running command: AddGraphicsDeviceCommand internal: true. Entities affected : ID: d75c0d37-4640-49b0-afd1-7db27541f4d4 Type: VMAction group EDIT_VM_PROPERTIES with role type USER 2020-03-13 08:27:04,379Z INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-3813) [2cd83827] EVENT_ID: USER_ADD_VM_STARTED(37), VM azabaleta-runner creation was initiated by azabaleta@ictv.com@ictv.com-authz. 2020-03-13 08:27:04,777Z INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [1e11522e-b25a-4972-8ff8-1d9a08bd57ca] Command 'CreateCloneOfTemplate' (id: '806f2e38-fc42-45c3-87ab-20bec50c226c') waiting on child command id: 'd3826f75-1095-4b5f-98c3-973f4683616b' type:'CopyImageGroupWithData' to complete 2020-03-13 08:27:04,777Z INFO [org.ovirt.engine.core.bll.SerialChildCommandsExecutionCallback] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [1e11522e-b25a-4972-8ff8-1d9a08bd57ca] Command 'CopyImageGroupWithData' (id: 'd3826f75-1095-4b5f-98c3-973f4683616b') waiting on child command id: 'eb9c3360-00a8-4539-bda4-89d70d22da68' type:'CreateVolumeContainer' to complete 2020-03-13 08:27:05,003Z INFO [org.ovirt.engine.core.bll.network.vm.ReorderVmNicsCommand] (default task-3813) [e9f67a0f-aaf8-45a6-bdae-d501e757a3b6] Running command: ReorderVmNicsCommand internal: false. Entities affected : ID: d75c0d37-4640-49b0-afd1-7db27541f4d4 Type: VMAction group CREATE_VM with role type USER Please assist as it currently seems the Quota permissions are not working as expected. The Quotas storage_inf1 and storage_dev2 are configured in exact same way, expect that they are for different DataCenters. From: "Vrgotic, Marko" <M.Vrgotic(a)activevideo.com> Date: Thursday, 12 March 2020 at 20:19 To: "Staniforth, Paul" <P.Staniforth(a)leedsbeckett.ac.uk> Cc: "users(a)ovirt.org" <users(a)ovirt.org>, Darko Stojchev <D.Stojchev(a)activevideo.com> Subject: Re: oVirt Storage quota problems Hey Paul, Thank you. I believe I already added him via Consumers tab, but it does not hurt to doublecheck. Sent from my iPhone On 12 Mar 2020, at 17:53, Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> wrote: Hello Marko, if you select quota in the administration menu, then select the quota it is using you will see the consumers option and there it will allow you to add users or groups. https://www.ovirt.org/documentation/admin-guide/chap-Quotas_and_Service_Lev…<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> Quotas and Service Level Agreement Policy | oVirt<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> Chapter 16: Quotas and Service Level Agreement Policy Introduction to Quota. Quota is a resource limitation tool provided with oVirt. Quota may be thought of as a layer of limitations on top of the layer of limitations set by User Permissions. www.ovirt.org Regards, Paul S. ________________________________ From: Vrgotic, Marko <M.Vrgotic(a)activevideo.com> Sent: 12 March 2020 15:46 To: users(a)ovirt.org <users(a)ovirt.org> Cc: Stojchev, Darko <D.Stojchev(a)activevideo.com> Subject: [ovirt-users] Re: oVirt Storage quota problems Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I fond the following: “2020-03-12 14:03:05,260Z INFO [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [b9635e29-4b8a-44c4-9611-e5af362c783c] No permission found for user '7f906bbf-d194-425f-b313-08a777b764ab' or one of the groups he is member of, when running action 'AddVm', Required permissions are: Action type: 'USER' Action group: 'CONSUME_QUOTA' Object type: 'Quota' Object ID: '47b5e9f4-67a4-4b78-abfd-175e3d9de8da'. 2020-03-12 14:03:05,260Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [b9635e29-4b8a-44c4-9611-e5af362c783c] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA” Does anyone know which permission setting that is, or under which section belongs, as I cannot found clear check for it under Roles definition? Kindly awaiting your reply. ----- kind regards/met vriendelijke groeten Marko Vrgotic ActiveVideo From: "Vrgotic, Marko" <M.Vrgotic(a)activevideo.com> Date: Thursday, 12 March 2020 at 16:28 To: "users(a)ovirt.org" <users(a)ovirt.org> Cc: Darko Stojchev <D.Stojchev(a)activevideo.com> Subject: Re: oVirt Storage quota problems Addiitonally, WARN from log file for one of the Users: 2020-03-12 14:03:05,218Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3607) [2bb50857-d018-48aa-b4ca-ed6fb5cd76bf] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:05,236Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3583) [4ef095e5-59fa-4c73-9035-c5251372066d] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:05,238Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3608) [a571bd5d-98af-4a92-bf74-40681c208d32] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:05,240Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3599) [a77740ff-e725-4632-a189-cac9979238df] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:05,260Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [b9635e29-4b8a-44c4-9611-e5af362c783c] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:30,584Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3599) [90da1953-a2d6-45bb-8a5b-8f8e9a1b7e2c] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:30,597Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [fb938e77-1b95-4405-bebc-b0dd89e99ff0] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:30,600Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3608) [d3c4cd69-134d-49c7-a977-c27d79ce2e24] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:43,460Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3599) [99b158c6-c476-43e4-838f-45cadf73c7e9] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:43,462Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3608) [300289be-d55d-468e-aeda-d845180621e2] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:43,467Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [a6d267af-d14e-44d5-9573-de33a4d45586] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:45,101Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [8efba949-8f58-427b-9add-ead7b54e69d5] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:55,071Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [3444440d-5c3a-4ba7-9a6b-4de6ba71a2cd] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA 2020-03-12 14:03:55,093Z WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-3608) [34e8e6f9-7a5d-4d86-92bc-a595a3ae7688] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA ----- kind regards/met vriendelijke groeten Marko Vrgotic ActiveVideo From: "Vrgotic, Marko" <M.Vrgotic(a)activevideo.com> Date: Thursday, 12 March 2020 at 16:09 To: "users(a)ovirt.org" <users(a)ovirt.org> Cc: Darko Stojchev <D.Stojchev(a)activevideo.com> Subject: oVirt Storage quota problems Dear oVirt, I am experiencing a quota related problem regarding two things: 1. Quota usage and exception trigger 2. User assigned as quota consumer First issue: I have defined quota for storage ( qstorage ), setting all following items: a. Defining quota for storage, with threshold and grace b. Setting quota mode to enforced in datacenter c. Added Users as consumers of the Quota d. Updated quota from Default to qstorage for Templates and related images e. Updated quota from Default to qstorage from all existing VMs and the related Disks Problem: * the percentage of the Storage Consumption is jumping up and down, between 3% and 97%, and at certain point goes back to Unlimited * when checking under Storage tab inside quota name, the value “Used MB out of Total MB” is correct, however, when attempting to exceed the threshold, I am not getting a warning, even though I am consumer of a quota Second issue: User is added to qstorage quota as consumer. Still, when he tries to launch the VMs, Waring is displayed: Cannot add VM. The user is not a consumer of the Quota assigned to the resource. Have I missed something – could it be a permission issue, not a consumer issue. All my users are utilizing Administration Portal with limited set of permissions. They all have same Role assigned, but only few of them are having the problem I described as Second problem. Please assist. ----- kind regards/met vriendelijke groeten Marko Vrgotic Sr. System Engineer @ System Administration ActiveVideo o: +31 (35) 6774131 e: m.vrgotic(a)activevideo.com<mailto:m.vrgotic@activevideo.com> w: www.activevideo.com<https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.active…> ActiveVideo Networks BV. Mediacentrum 3745 Joop van den Endeplein 1.1217 WJ Hilversum, The Netherlands. The information contained in this message may be legally privileged and confidential. It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited. If you have received this message in error, please immediately notify the sender and/or ActiveVideo Networks, LLC by telephone at +1 408.931.9200 and delete or destroy any copy of this message. From: "Vrgotic, Marko" <M.Vrgotic(a)activevideo.com> Date: Thursday, 27 February 2020 at 10:19 To: "users(a)ovirt.org" <users(a)ovirt.org> Cc: Darko Stojchev <D.Stojchev(a)activevideo.com> Subject: oVirt Storage quota questions Dear oVirt, My platform is running SHE oVirt version 4.3.8. Why is my StorageQuota consumption still showing “ 0 out of 3700” ? Did I forget something? <image001.png> I have setup storage quota “StorageQuota” for one of domains. It has 4400GB actual storage. • Quota is set to 3700GB. o Treshold for Quota is 85% and Grace is set to 110%. • Datacenter Quota is set to Enforced • The template image has been changed from Default to StorageQuota • I see that Vms created from Template are automatically assigned StorageQuota To present the following situation in screenshots: • Actual Quota: <image002.png> • VMs (more than on the screenshot) which have the StorageQuota assigned: <image003.png> • Templates which have the StorageQuota assigned <image004.png> Kindly awaiting your reply. Additionally – is there an easy&safe way to update all running VMs quota? ----- kind regards/met vriendelijke groeten Marko Vrgotic Sr. System Engineer @ System Administration ActiveVideo o: +31 (35) 6774131 e: m.vrgotic(a)activevideo.com<mailto:m.vrgotic@activevideo.com> w: www.activevideo.com<https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.active…> ActiveVideo Networks BV. Mediacentrum 3745 Joop van den Endeplein 1.1217 WJ Hilversum, The Netherlands. The information contained in this message may be legally privileged and confidential. It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited. If you have received this message in error, please immediately notify the sender and/or ActiveVideo Networks, LLC by telephone at +1 408.931.9200 and delete or destroy any copy of this message. To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/ To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

1 2

power_saving schedule not powering off hosts
by Maton, Brett 05 Apr '20

05 Apr '20

I've got a cluster made up of five physical hosts, (Dells with idrac 7 management) Power management / fencing enabled on all hosts. I've enabled the power_saving scheduling policy on my cluster, it's migrated all the VM's to a couple of physical hosts so three are sitting idle with no VM's. Shouldn't the power_saving policy shut down the idle hosts?

4 5

Re: ISO and Export domains deprecated
by Colin Coe 05 Apr '20

05 Apr '20

Can a data domain be attached to multiple RHV instances simultaneously? On Sun, Apr 5, 2020, 8:28 PM Patrick Lomakin <patrick.lomakin(a)gmail.com> wrote: > Why? Tell me more about your problem, please > > вс, 5 апр. 2020 г., 13:52 Colin Coe <colin.coe(a)gmail.com>: > >> Thanks but that doesn't answer my question. >> >> On Sun, Apr 5, 2020, 4:59 PM Patrick Lomakin <patrick.lomakin(a)gmail.com> >> wrote: >> >>> > Hi all >>> > >>> > I'm trying to understand how ISO and Export domains going away is >>> going to >>> > affect us. >>> > >>> > We have four RHV instances: >>> > - Prod DC1 (RHV4.1) >>> > - Prod DC2 (RHV4.1) >>> > - DEV (RHV4.3) >>> > - TEST (RHV4.3) >>> > >>> > Prod DC1, DEV and TEST all share export and ISO domains. >>> > >>> > Prod DC2 is remote and currently has its own ISO and Export domains. >>> > >>> > When ISO and Export domains go away, can I still share ISO domains >>> between >>> > the RHV instances? >>> > >>> > Thanks >>> If you are using VM with Windows there is no available way to install >>> virtio driver from diskette to use storage. In Ovirt 4.3.9 I use ISO domain >>> only to load drivers to install windows VM. For attach any ISO image to >>> virtual machine you can simply upload ISO as a disk to storage domain >>> (iSCSI for example). But what about your question, if you have nfs server >>> on your ovirt (rhv) host try to mount your share path to another host with >>> follow example: >>> # mount -t nfs 10.10.0.10:/backups /var/backups >>> _______________________________________________ >>> Users mailing list -- users(a)ovirt.org >>> To unsubscribe send an email to users-leave(a)ovirt.org >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/66LZROBSTAUB6… >>> >>

1 0

Problem with connecting the Storage Domain (Host host2 cannot access the Storage Domain(s) <UNKNOWN>)
by Patrick Lomakin 05 Apr '20

05 Apr '20

Hello, everyone! I need specialist help, because I'm already desperate. My company has four hosts that are connected to the vault. Each host has its own IP to access the storage, which means host 1 has an ip 10.42.0.10 and 10.42.1.10 -> host 2 has an ip 10.42.0.20 and 10.42.0.20 respectively. Host 1 cannot ping the address 10.42.0.20. Hardware I tried to explain in more detail. Host 1 has ovirt node 4.3.9 installed and hosted-engine deployed. When trying to add host 2 to a cluster it is installed, but not activated. There is an error in ovirt manager - "Host host2 cannot access the Storage Domain(s) <UNKNOWN>" and host 2 goes to "Not operational" status. On host 2, it writes "connect to 10.42.1.10:3260 failed (No route to host)" in the logs and repeats indefinitely. I manually connected host 2 to the storage using iscsiadm to ip 10.42.0.20. But the error is not missing(. At the same time, when the host tries to activate it, I can run virtual machines on it until the host shows an error message. VMs that have been run on host 2 continue to run even when the host has "Not operational" status. I assume that when adding host 2 to a cluster, ovirt tries to connect it to the same repository host 1 is connected to from ip 10.42.1.10. There may be a way to get ovirt to connect to another ip address instead of the ip domain address for the first host. I'm attaching logs: ----> /var/log/ovirt-engine/engine.log 2020-03-31 09:13:03,866+03 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghan dling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-90) [7fa128f4] EVENT_ID: VDS_SET_NONOPERATIONAL_DOMAIN(522), Host host2.school34.local c annot access the Storage Domain(s) <UNKNOWN> attached to the Data Center DataCenter. Setting Host state to Non-Operational. 2020-03-31 10:40:04,883+03 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.ConnectStorageServerVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-12) [7a48ebb7] START, ConnectStorageServerVDSCommand(HostName = host2.school34.local, StorageServerConnectionManagementVDSParameters:{hostId='d82c3a76-e417-4fe4-8b08-a29414e3a9c1', storagePoolId='6052cc0a-71b9-11ea-ba5a-00163e10c7e7', storageType='ISCSI', connectionList='[StorageServerConnections:{id='c8a05dc2-f8a2-4354-96ed-907762c29761', connection='10.42.0.10', iqn='iqn.2002-09.com.lenovo:01.array.00c0ff3bfcb0', vfsType='null', mountOptions='null', nfsVersion='null', nfsRetrans='null', nfsTimeo='null', iface='null', netIfaceName='null'}, StorageServerConnections:{id='0ec6f34e-01c8-4ecc-9bd4-7e2a250d589d', connection='10.42.1.10', iqn='iqn.2002-09.com.lenovo:01.array.00c0ff3bfcb0', vfsType='null', mountOptions='null', nfsVersion='null', nfsRetrans='null', nfsTimeo='null', iface='null', netIfaceName='null'}]', sendNetworkEventOnF ailure='true'}), log id: 2c1a22b5 2020-03-31 10:43:05,061+03 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-12) [7a48ebb7] EVENT_ID: VDS_BROKER_COMMAND_FAILURE(10,802), VDSM host2.school34.local command ConnectStorageServerVDS failed: Message timeout which can be caused by communication issues ----> vdsm.log 2020-03-31 09:34:07,264+0300 ERROR (jsonrpc/5) [storage.HSM] Could not connect to storageServer (hsm:2420) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 2417, in connectStorageServer conObj.connect() File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py", line 488, in connect iscsi.addIscsiNode(self._iface, self._target, self._cred) File "/usr/lib/python2.7/site-packages/vdsm/storage/iscsi.py", line 217, in addIscsiNode iscsiadm.node_login(iface.name, target.address, target.iqn) File "/usr/lib/python2.7/site-packages/vdsm/storage/iscsiadm.py", line 337, in node_login raise IscsiNodeError(rc, out, err) IscsiNodeError: (8, ['Logging in to [iface: default, target: iqn.2002-09.com.lenovo:01.array.00c0ff3bfcb0, portal: 10.42.1.10,3260] (multiple)'], ['iscsiadm: Could not login to [iface: default, target: iqn.2002-09.com.lenovo:01.array.00c0ff3bfcb0, portal: 10.42.1.10,3260].', 'iscsiadm: initiator reported error (8 - connection timed out)', 'iscsiadm: Could not log into all portals']) 2020-03-31 09:36:01,583+0300 WARN (vdsm.Scheduler) [Executor] Worker blocked: <Worker name=jsonrpc/0 running <Task <JsonRpcTask {'params': {u'connectionParams': [{u'port': u'3260', u'connection': u'10.42.0.10', u'iqn': u'iqn.2002-09.com.lenovo:01.array.00c0ff3bfcb0', u'user': u'', u'tpgt': u'2', u'ipv6_enabled': u'false', u'password': '********', u'id': u'c8a05dc2-f8a2-4354-96ed-907762c29761'}, {u'port': u'3260', u'connection': u'10.42.1.10', u'iqn': u'iqn.2002-09.com.lenovo:01.array.00c0ff3bfcb0', u'user': u'', u'tpgt': u'1', u'ipv6_enabled': u'false', u'password': '********', u'id': u'0ec6f34e-01c8-4ecc-9bd4-7e2a250d589d'}], u'storagepoolID': u'6052cc0a-71b9-11ea-ba5a-00163e10c7e7', u'domainType': 3}, 'jsonrpc': '2.0', 'method': u'StoragePool.connectStorageServer', 'id': u'64cc0385-3a11-474b-98f0-b0ecaa6c67c8'} at 0x7fe1ac1ff510> timeout=60, duration=60.00 at 0x7fe1ac1ffb10> task#=316 at 0x7fe1f0041ad0>, traceback: File: "/usr/lib64/python2.7/threading.py", line 785, in __bootstrap self.__bootstrap_inner() File: "/usr/lib64/python2.7/threading.py", line 812, in __bootstrap_inner self.run() File: "/usr/lib64/python2.7/threading.py", line 765, in run self.__target(*self.__args, **self.__kwargs) File: "/usr/lib/python2.7/site-packages/vdsm/common/concurrent.py", line 260, in run ret = func(*args, **kwargs) File: "/usr/lib/python2.7/site-packages/vdsm/executor.py", line 301, in _run self._execute_task() File: "/usr/lib/python2.7/site-packages/vdsm/executor.py", line 315, in _execute_task task() File: "/usr/lib/python2.7/site-packages/vdsm/executor.py", line 391, in __call__ self._callable() File: "/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 262, in __call__ self._handler(self._ctx, self._req) File: "/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 305, in _serveRequest response = self._handle_request(req, ctx) File: "/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 345, in _handle_request res = method(**params) File: "/usr/lib/python2.7/site-packages/vdsm/rpc/Bridge.py", line 194, in _dynamicMethod result = fn(*methodArgs) File: "/usr/lib/python2.7/site-packages/vdsm/API.py", line 1102, in connectStorageServer connectionParams) File: "/usr/lib/python2.7/site-packages/vdsm/storage/dispatcher.py", line 74, in wrapper result = ctask.prepare(func, *args, **kwargs) File: "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 108, in wrapper return m(self, *a, **kw) File: "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 1179, in prepare result = self._run(func, *args, **kwargs) File: "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882, in _run return fn(*args, **kargs) File: "<string>", line 2, in connectStorageServer File: "/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 50, in method ret = func(*args, **kwargs) File: "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 2417, in connectStorageServer conObj.connect() File: "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py", line 488, in connect iscsi.addIscsiNode(self._iface, self._target, self._cred) File: "/usr/lib/python2.7/site-packages/vdsm/storage/iscsi.py", line 217, in addIscsiNode iscsiadm.node_login(iface.name, target.address, target.iqn) File: "/usr/lib/python2.7/site-packages/vdsm/storage/iscsiadm.py", line 327, in node_login portal, "-l"]) File: "/usr/lib/python2.7/site-packages/vdsm/storage/iscsiadm.py", line 122, in _runCmd return misc.execCmd(cmd, printable=printCmd, sudo=True, sync=sync) File: "/usr/lib/python2.7/site-packages/vdsm/common/commands.py", line 213, in execCmd (out, err) = p.communicate(data) File: "/usr/lib64/python2.7/site-packages/subprocess32.py", line 924, in communicate stdout, stderr = self._communicate(input, endtime, timeout) File: "/usr/lib64/python2.7/site-packages/subprocess32.py", line 1706, in _communicate orig_timeout) File: "/usr/lib64/python2.7/site-packages/subprocess32.py", line 1779, in _communicate_with_poll ready = poller.poll(self._remaining_time(endtime)) (executor:363)

1 1

Failing to redeploy self hosted engine
by Maton, Brett 05 Apr '20

05 Apr '20

I keep running into this error when I try to (re)deploy self-hosted engine. # ovirt-hosted-engine-cleanup # hosted-engine --deploy ... ... [ INFO ] TASK [ovirt.hosted_engine_setup : Fail with error description] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "The host has been set in non_operational status, deployment errors: code 9000: Failed to verify Power Management configuration for Host physhost01.example.com, fix accordingly and re-deploy."} I shut down all of the VM's and detached the storage before cleaning up and trying to re-deploy the hosted engine, first time I've run into this particular problem. Any help appreciated Brett

4 15

Multiple NICs on hosted engine, oVirt 4.3
by Jiří Sléžka 05 Apr '20

05 Apr '20

Hello, I would like to add second NIC to hosted engine vm (I need access to isolated network with host's power management). I found this solution... https://lists.ovirt.org/pipermail/users/2014-November/062610.html ...which seems to work in oVirt 3.5 but in oVirt 4.3 there is no file like /etc/ovirt-hosted-engine/vm.conf anymore. In the file /etc/ovirt-hosted-engine/hosted-engine.conf is a line ... conf=/var/run/ovirt-hosted-engine-ha/vm.conf ... which points to this config but this is a running config... Is there a way to add a second NIC to hosted engin vm? Cheers, Jiri

2 1

VM and cgroup
by yam yam 05 Apr '20

05 Apr '20

Hello, I'm wondering why the cgroup for the VM is generated, because I thought VM and cgroup are not related. does qemu/KVM use (memory) cgroup to handle memory resources or something else?

1 0

manual migration
by eevans＠digitaldatatechs.com 04 Apr '20

04 Apr '20

FYI: My issue with the inability to migrate is solved. The issue was the ovirt-engine-ui-extensions-1.0.10-1.el7.noarch updated to 1.0.13 and it killed the ability to migrate. In order to downgrade I had to download the rpm, ovirt-engine-ui-extensions-1.0.10-1.el7.noarch.rpm and run a yum downgrade command “yum downgrade ovirt-engine-ui-extensions-1.0.10-1.el7.noarch.rpm”. It would not downgrade any other way. Once it downgraded, migration ability was back. Thanks all for the help and support. Eric Evans Digital Data Services LLC. 304.660.9080 From: Jayme <jaymef(a)gmail.com> Sent: Tuesday, February 25, 2020 9:29 AM To: users <users(a)ovirt.org> Subject: [ovirt-users] oVirt ansible backup improvements If anyone has been following along, I had previously shared a blog post and GitHub repo regarding my unofficial solution for backing up oVirt VMs using Ansible. Martin Necas reached out to me and we collaborated on some great improvements. Namely, it is now possible to run the playbook from any host without requiring direct access to storage (which I was previously using for export status verification). There were several other improvements and cleanups made as well. The changes have been merged in and the READMME updated, you can find the project here: https://github.com/silverorange/ovirt_ansible_backup Big thanks to Martin for helping out. Very much appreciated! - Jayme

2 1

Artwork: 4.4 GA banners
by Sandro Bonazzola 04 Apr '20

04 Apr '20

Hi, in preparation of oVirt 4.4 GA it would be nice to have some graphics we can use for launching oVirt 4.4 GA on social media and oVirt website. If you don't have coding skills but you have marketing or design skills this is a good opportunity to contribute back to the project. Looking forward to your designs! -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/>* <https://www.redhat.com/en/summit?sc_cid=7013a000002D2QxAAK>* *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

4 10

NFS permissions error on ISODomain file with correct permissions
by Shareef Jalloq 03 Apr '20

03 Apr '20

Hi, I asked this question in another thread but it seems to have been lost in the noise so I'm reposting with a more descriptive subject. I'm trying to start a Windows VM and use the virtio-win VFD floppy to get the drivers but the VM startup fails due to a permissions issue detailed below. The permissions look fine to me so why can't the VFD be read? Shareef. I found a permissions issue in the engine.log: 2020-03-25 21:28:41,662Z ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ForkJoinPool-1-worker-14) [] EVENT_ID: VM_DOWN_ERROR(119), VM win-2019 is down with error. Exit message: internal error: qemu unexpectedly closed the monitor: 2020-03-25T21:28:40.324426Z qemu-kvm: -drive file=/rhev/data-center/mnt/nas-01.phoelex.com:_volume2_isostore/41cebb4b-c164-4956-8f44-6426170cd9f5/images/11111111-1111-1111-1111-111111111111/virtio-win_servers_amd64.vfd,format=raw,if=none,id=drive-ua-0b9c28b5-f75c-4575-ad85-b5b836f67d61,readonly=on: Could not open '/rhev/data-center/mnt/nas-01.phoelex.com:_volume2_isostore/41cebb4b-c164-4956-8f44-6426170cd9f5/images/11111111-1111-1111-1111-111111111111/virtio-win_servers_amd64.vfd': Permission denied. But when I look at that path on the node in question, every folder and the final file have the correct vdsm:kvm permissions: [root@ovirt-node-01 ~]# ll /rhev/data-center/mnt/nas-01.phoelex.com: _volume2_isostore/41cebb4b-c164-4956-8f44-6426170cd9f5/images/11111111-1111-1111-1111-111111111111/virtio-win_servers_amd64.vfd -rwxrwxrwx. 1 vdsm kvm 2949120 Mar 25 21:24 /rhev/data-center/mnt/nas-01.phoelex.com: _volume2_isostore/41cebb4b-c164-4956-8f44-6426170cd9f5/images/11111111-1111-1111-1111-111111111111/virtio-win_servers_amd64.vfd The files were uploaded to the ISO domain using: engine-iso-uploader --iso-domain=iso_storage upload virtio-win.iso virtio-win_servers_amd64.vfd

3 7

Re: Windows VirtIO drivers
by Shareef Jalloq 03 Apr '20

03 Apr '20

I can't seem to do anything. If I hit the Windows key and start typing, I get a black popup with no options. Win+R doesn't do anything aside from spit out a GSpice critical error in the terminal I'm running remote-viewer from. You spend a week trying to launch a VM and when you do, you can't do nowt. :-) On Thu, Apr 2, 2020 at 5:24 PM Robert Webb <rwebb(a)ropeguru.com> wrote: > I have yet to figure that one out. All of the VM's I built I had to go old > school with the tab key and arrow keys... > > Very annoying.. > > ________________________________________ > From: Shareef Jalloq <shareef(a)jalloq.co.uk> > Sent: Thursday, April 2, 2020 12:21 PM > To: eevans(a)digitaldatatechs.com > Cc: Robert Webb; users(a)ovirt.org > Subject: Re: [ovirt-users] Re: Windows VirtIO drivers > > Any idea what I need to do to get a working mouse in a Windows VM? I can > click on the SPICE viewer but the mouse pointer is fixed to the left hand > border. > > On Thu, Apr 2, 2020 at 4:38 PM Shareef Jalloq <shareef(a)jalloq.co.uk > <mailto:shareef@jalloq.co.uk>> wrote: > Sorry, I missed all these replies. Thanks for the help. > > I just noticed something funny in the Windows installer. When you get to > the point where it can't find any installation media, if you Load Driver, a > popup appears with a Browse and OK/Cancel options. I assumed that I should > be browsing to the floppy here but if you do that, you get an error that no > signed drivers can be found. Instead, you just have to hit OK when the > popup appears and that somehow finds the drivers. > > I'm assuming that I will need to install the network driver once the > installation has finished? > > On Wed, Mar 25, 2020 at 8:37 PM <eevans(a)digitaldatatechs.com<mailto: > eevans(a)digitaldatatechs.com>> wrote: > Ok. Personally, I like having an ISO repository, but I like the fact that's > it will be optional. > Thanks. > > Eric Evans > Digital Data Services LLC. > 304.660.9080 > > > -----Original Message----- > From: Robert Webb <rwebb(a)ropeguru.com<mailto:rwebb@ropeguru.com>> > Sent: Wednesday, March 25, 2020 4:26 PM > To: eevans(a)digitaldatatechs.com<mailto:eevans@digitaldatatechs.com>; > 'Shareef Jalloq' <shareef(a)jalloq.co.uk<mailto:shareef@jalloq.co.uk>>; > users(a)ovirt.org<mailto:users@ovirt.org> > Subject: Re: [ovirt-users] Re: Windows VirtIO drivers > > It does work that way. > > I found that out as I was testing oVirt and had not created a separate ISO > Domain. I believe it was Strahil who pointed me in the right direction. > > So if one does not have an ISO Domain, it is no longer required. Along with > the fact that ISO Domains are or in the process of being deprecated. > > ________________________________________ > From: eevans(a)digitaldatatechs.com<mailto:eevans@digitaldatatechs.com> < > eevans(a)digitaldatatechs.com<mailto:eevans@digitaldatatechs.com>> > Sent: Wednesday, March 25, 2020 3:13 PM > To: Robert Webb; 'Shareef Jalloq'; users(a)ovirt.org<mailto:users@ovirt.org> > Subject: RE: [ovirt-users] Re: Windows VirtIO drivers > > That may be true, but in the ISO domain, when you open virt viewer you can > change the cd very easily...maybe it works that way as well.. > > Eric Evans > Digital Data Services LLC. > 304.660.9080 > > > -----Original Message----- > From: Robert Webb <rwebb(a)ropeguru.com<mailto:rwebb@ropeguru.com>> > Sent: Wednesday, March 25, 2020 2:35 PM > To: eevans(a)digitaldatatechs.com<mailto:eevans@digitaldatatechs.com>; > 'Shareef Jalloq' <shareef(a)jalloq.co.uk<mailto:shareef@jalloq.co.uk>>; > users(a)ovirt.org<mailto:users@ovirt.org> > Subject: [ovirt-users] Re: Windows VirtIO drivers > > Don't think you have to use the ISO Domain any longer. > > You can upload to a Data Domain and when you highlight the VM in the > management GUI, select the three dots in the top left for extra options and > there is a change cd option. That option will allow for attaching an ISO > from a Data Domain. > > That is what I recall when I was using oVirt a month or so ago. > > ________________________________________ > From: eevans(a)digitaldatatechs.com<mailto:eevans@digitaldatatechs.com> < > eevans(a)digitaldatatechs.com<mailto:eevans@digitaldatatechs.com>> > Sent: Wednesday, March 25, 2020 2:28 PM > To: 'Shareef Jalloq'; users(a)ovirt.org<mailto:users@ovirt.org> > Subject: [ovirt-users] Re: Windows VirtIO drivers > > You have to copy the iso and vfd files to the ISO domain to make them > available to the vm's that need drivers. > > engine-iso-uploader options list > # engine-iso-uploader options upload file file file Documentation is found > here: https://www.ovirt.org/documentation/admin-guide/chap-Utilities.html > > Eric Evans > Digital Data Services LLC. > 304.660.9080 > [cid:image001.jpg@01D602B1.9FEA2EC0] > > From: Shareef Jalloq <shareef(a)jalloq.co.uk<mailto:shareef@jalloq.co.uk>> > Sent: Wednesday, March 25, 2020 1:51 PM > To: users(a)ovirt.org<mailto:users@ovirt.org> > Subject: [ovirt-users] Windows VirtIO drivers > > Hi, > > it seems the online documentation regarding the windows installation steps > is well out of date. Where is there any current documentation on where to > get the VirtIO drivers for a Windows installation? > > From a bit of Googling, it seems that I need to 'yum install virtio-win' on > the engine VM and then copy the relevant .iso/.vfd to the ISO domain. Is > that correct? > > Where is the documentation maintained and how do I open a bug on it? > > Thanks, Shareef. > > > > >

3 3

New Issue - Ovirt Status shows '?' or Down for all elements
by Mark Steele 03 Apr '20

03 Apr '20

Yesterday we had a storage crash that caused our hosted engine to stop and not auto-restart. We manually restarted it and this morning, all elements are showing a status of either question mark '?' or a red down chevron. We are running version oVirt Engine Version: 3.5.0.1-1.el6. We are chasing it down and see this in the log: 2020-04-01 10:15:53,060 WARN [org.ovirt.engine.core.vdsbroker.VdsManager] (DefaultQuartzScheduler_Worker-23) Failed to refresh VDS , vds = e98f8f1d-dd1d-47c4-b039-d6eaaf578317 : hv-06, VDS Network Error, continuing Any insight into what might be causing this or the fix would be appreciated. *** *Mark Steele*

4 10

Re: Windows VirtIO drivers
by eevans＠digitaldatatechs.com 02 Apr '20

02 Apr '20

Ok. Personally, I like having an ISO repository, but I like the fact that's it will be optional. Thanks. Eric Evans Digital Data Services LLC. 304.660.9080 -----Original Message----- From: Robert Webb <rwebb(a)ropeguru.com> Sent: Wednesday, March 25, 2020 4:26 PM To: eevans(a)digitaldatatechs.com; 'Shareef Jalloq' <shareef(a)jalloq.co.uk>; users(a)ovirt.org Subject: Re: [ovirt-users] Re: Windows VirtIO drivers It does work that way. I found that out as I was testing oVirt and had not created a separate ISO Domain. I believe it was Strahil who pointed me in the right direction. So if one does not have an ISO Domain, it is no longer required. Along with the fact that ISO Domains are or in the process of being deprecated. ________________________________________ From: eevans(a)digitaldatatechs.com <eevans(a)digitaldatatechs.com> Sent: Wednesday, March 25, 2020 3:13 PM To: Robert Webb; 'Shareef Jalloq'; users(a)ovirt.org Subject: RE: [ovirt-users] Re: Windows VirtIO drivers That may be true, but in the ISO domain, when you open virt viewer you can change the cd very easily...maybe it works that way as well.. Eric Evans Digital Data Services LLC. 304.660.9080 -----Original Message----- From: Robert Webb <rwebb(a)ropeguru.com> Sent: Wednesday, March 25, 2020 2:35 PM To: eevans(a)digitaldatatechs.com; 'Shareef Jalloq' <shareef(a)jalloq.co.uk>; users(a)ovirt.org Subject: [ovirt-users] Re: Windows VirtIO drivers Don't think you have to use the ISO Domain any longer. You can upload to a Data Domain and when you highlight the VM in the management GUI, select the three dots in the top left for extra options and there is a change cd option. That option will allow for attaching an ISO from a Data Domain. That is what I recall when I was using oVirt a month or so ago. ________________________________________ From: eevans(a)digitaldatatechs.com <eevans(a)digitaldatatechs.com> Sent: Wednesday, March 25, 2020 2:28 PM To: 'Shareef Jalloq'; users(a)ovirt.org Subject: [ovirt-users] Re: Windows VirtIO drivers You have to copy the iso and vfd files to the ISO domain to make them available to the vm's that need drivers. engine-iso-uploader options list # engine-iso-uploader options upload file file file Documentation is found here: https://www.ovirt.org/documentation/admin-guide/chap-Utilities.html Eric Evans Digital Data Services LLC. 304.660.9080 [cid:image001.jpg@01D602B1.9FEA2EC0] From: Shareef Jalloq <shareef(a)jalloq.co.uk> Sent: Wednesday, March 25, 2020 1:51 PM To: users(a)ovirt.org Subject: [ovirt-users] Windows VirtIO drivers Hi, it seems the online documentation regarding the windows installation steps is well out of date. Where is there any current documentation on where to get the VirtIO drivers for a Windows installation? From a bit of Googling, it seems that I need to 'yum install virtio-win' on the engine VM and then copy the relevant .iso/.vfd to the ISO domain. Is that correct? Where is the documentation maintained and how do I open a bug on it? Thanks, Shareef.

3 3

Hosted Engine stalled and unable to restart
by Mark Steele 02 Apr '20

02 Apr '20

Hello, We are on an older version (3.x - cannot be specific as I cannot get my ovirt hosted engine up). We experienced a storage failure earlier this evening - the hosted engine was originally installed with this storage domain although we have moved all VM's and disks off of it. The storage was restored and all the VM's are now running, but the ovirt engine is not pinging and is unreachable. I have attempted to locate it on my HV's using 'virsh list --all' but only one of those is taking my credentials - all the others fail to authenticate. Is there a way to locate what the credentials are on each HV since the default is not working? Additionally, is there any other way to locate the hosted engine and restart it directly from a HV? Thank you for your time and consideration. *** *Mark Steele*

5 8

KeyError: 'getgrnam(): name not found: hugetlbfs'
by Николаев Алексей 01 Apr '20

01 Apr '20

3 3

Engine status : unknown stale-data on single node
by Wood, Randall 01 Apr '20

01 Apr '20

I have a three node Ovirt cluster where one node has stale-data for the hosted engine, but the other two nodes do not: Output of `hosted-engine --vm-status` on a good node: ``` !! Cluster is in GLOBAL MAINTENANCE mode !! --== Host ovirt2.low.mdds.tcs-sec.com (id: 1) status ==-- conf_on_shared_storage : True Status up-to-date : True Hostname : ovirt2.low.mdds.tcs-sec.com Host ID : 1 Engine status : {"health": "good", "vm": "up", "detail": "Up"} Score : 3400 stopped : False Local maintenance : False crc32 : f91f57e4 local_conf_timestamp : 9915242 Host timestamp : 9915241 Extra metadata (valid at timestamp): metadata_parse_version=1 metadata_feature_version=1 timestamp=9915241 (Fri Mar 27 14:38:14 2020) host-id=1 score=3400 vm_conf_refresh_time=9915242 (Fri Mar 27 14:38:14 2020) conf_on_shared_storage=True maintenance=False state=GlobalMaintenance stopped=False --== Host ovirt1.low.mdds.tcs-sec.com (id: 2) status ==-- conf_on_shared_storage : True Status up-to-date : True Hostname : ovirt1.low.mdds.tcs-sec.com Host ID : 2 Engine status : {"reason": "vm not running on this host", "health": "bad", "vm": "down", "detail": "unknown"} Score : 3400 stopped : False Local maintenance : False crc32 : 48f9c0fc local_conf_timestamp : 9218845 Host timestamp : 9218845 Extra metadata (valid at timestamp): metadata_parse_version=1 metadata_feature_version=1 timestamp=9218845 (Fri Mar 27 14:38:22 2020) host-id=2 score=3400 vm_conf_refresh_time=9218845 (Fri Mar 27 14:38:22 2020) conf_on_shared_storage=True maintenance=False state=GlobalMaintenance stopped=False --== Host ovirt3.low.mdds.tcs-sec.com (id: 3) status ==-- conf_on_shared_storage : True Status up-to-date : False Hostname : ovirt3.low.mdds.tcs-sec.com Host ID : 3 Engine status : unknown stale-data Score : 3400 stopped : False Local maintenance : False crc32 : 620c8566 local_conf_timestamp : 1208310 Host timestamp : 1208310 Extra metadata (valid at timestamp): metadata_parse_version=1 metadata_feature_version=1 timestamp=1208310 (Mon Dec 16 21:14:24 2019) host-id=3 score=3400 vm_conf_refresh_time=1208310 (Mon Dec 16 21:14:24 2019) conf_on_shared_storage=True maintenance=False state=GlobalMaintenance stopped=False !! Cluster is in GLOBAL MAINTENANCE mode !! ``` I tried the steps in https://access.redhat.com/discussions/3511881, but `hosted-engine --vm-status` on the node with stale data shows: ``` The hosted engine configuration has not been retrieved from shared storage. Please ensure that ovirt-ha-agent is running and the storage server is reachable. ``` One the stale node, ovirt-ha-agent and ovirt-ha-broker are continually restarting. Since it seems the agent depends on the broker, the broker logs includes this snippet, repeating roughly every 3 seconds: ``` MainThread::INFO::2020-03-27 15:01:06,584::broker::47::ovirt_hosted_engine_ha.broker.broker.Broker::(run) ovirt-hosted-engine-ha broker 2.3.6 started MainThread::INFO::2020-03-27 15:01:06,584::monitor::40::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Searching for submonitors in /usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/broker/submonitors MainThread::INFO::2020-03-27 15:01:06,585::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor engine-health MainThread::INFO::2020-03-27 15:01:06,585::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor storage-domain MainThread::INFO::2020-03-27 15:01:06,585::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor network MainThread::INFO::2020-03-27 15:01:06,587::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor cpu-load-no-engine MainThread::INFO::2020-03-27 15:01:06,587::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor mem-free MainThread::INFO::2020-03-27 15:01:06,587::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor network MainThread::INFO::2020-03-27 15:01:06,588::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor mgmt-bridge MainThread::INFO::2020-03-27 15:01:06,588::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor storage-domain MainThread::INFO::2020-03-27 15:01:06,589::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor cpu-load-no-engine MainThread::INFO::2020-03-27 15:01:06,589::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor engine-health MainThread::INFO::2020-03-27 15:01:06,589::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor mgmt-bridge MainThread::INFO::2020-03-27 15:01:06,589::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor cpu-load MainThread::INFO::2020-03-27 15:01:06,590::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor cpu-load MainThread::INFO::2020-03-27 15:01:06,590::monitor::49::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Loaded submonitor mem-free MainThread::INFO::2020-03-27 15:01:06,590::monitor::50::ovirt_hosted_engine_ha.broker.monitor.Monitor::(_discover_submonitors) Finished loading submonitors MainThread::INFO::2020-03-27 15:01:06,678::storage_backends::373::ovirt_hosted_engine_ha.lib.storage_backends::(connect) Connecting the storage MainThread::INFO::2020-03-27 15:01:06,678::storage_server::349::ovirt_hosted_engine_ha.lib.storage_server.StorageServer::(connect_storage_server) Connecting storage server MainThread::INFO::2020-03-27 15:01:06,717::storage_server::356::ovirt_hosted_engine_ha.lib.storage_server.StorageServer::(connect_storage_server) Connecting storage server MainThread::INFO::2020-03-27 15:01:06,732::storage_server::413::ovirt_hosted_engine_ha.lib.storage_server.StorageServer::(connect_storage_server) Refreshing the storage domain MainThread::WARNING::2020-03-27 15:01:08,940::storage_broker::97::ovirt_hosted_engine_ha.broker.storage_broker.StorageBroker::(__init__) Can't connect vdsm storage: [Errno 5] Input/output error: '/rhev/data-center/mnt/glusterSD/ovirt2:_engine/182a4a94-743f-4941-89c1-dc2008ae1cf5/ha_agent/hosted-engine.lockspace' ``` I restarted the stale node yesterday, but it still shows stale data from December of last year. What is the recommended way for me to try to recover from this? (This came to my attention when warnings concerning space on the /var/log partition began popping up.) Thank you, Randall

3 4

Re: Local network
by Tommaso - Shellrent 01 Apr '20

01 Apr '20

This is what i've got: *ovs-vsctl show* 03a038d4-e81c-45e0-94d1-6f18d6504f1f Bridge br-int fail_mode: secure Port "ovn-765f43-0" Interface "ovn-765f43-0" type: geneve options: {csum="true", key=flow, remote_ip="xxx.169.yy.6"} Port br-int Interface br-int type: internal Port "vnet1" Interface "vnet1" Port "ovn-b33f6e-0" Interface "ovn-b33f6e-0" type: geneve options: {csum="true", key=flow, remote_ip="xxx.169.yy.2"} Port "vnet3" Interface "vnet3" Port "ovn-8678d9-0" Interface "ovn-8678d9-0" type: geneve options: {csum="true", key=flow, remote_ip="xxx.169.yy.8"} Port "ovn-fdd090-0" Interface "ovn-fdd090-0" type: geneve options: {csum="true", key=flow, remote_ip="xxx.169.yy.4"} ovs_version: "2.11.0" I suppose that the vnic are: Port "vnet1" Interface "vnet1" Port "vnet3" Interface "vnet3" on the engine: *ovn-nbctl show* switch a1f30e99-3ab7-46a4-925d-287871905cab (ovirt-local_network_definitiva-d58aea97-bb20-4e8f-bcc3-5277754846bb) port b82f3479-b459-4c26-aff0-053d15c74ddd addresses: ["56:6f:96:b1:00:4c"] port 52f09a28-1645-45ff-9b84-1e53a81bb399 addresses: ["56:6f:96:b1:00:4b"] *ovn-sbctl show* Chassis "ab5bdfdd-8df4-4e9b-9ce9-565cfd513a4d" hostname: "pvt-41f18-002.serverlet.com" Encap geneve ip: "aaa.31.bbb.224" options: {csum="true"} Port_Binding "b82f3479-b459-4c26-aff0-053d15c74ddd" Port_Binding "52f09a28-1645-45ff-9b84-1e53a81bb399" Il 31/03/20 13:39, Staniforth, Paul ha scritto: > The engine runs the controller so ovn-sbctl won't work, on the hosts, > use ovs-vsctl show > > Paul S. > ------------------------------------------------------------------------ > *From:* Tommaso - Shellrent <tommaso(a)shellrent.com> > *Sent:* 31 March 2020 12:13 > *To:* Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk>; > users(a)ovirt.org <users(a)ovirt.org> > *Subject:* Re: [ovirt-users] Local network > > *Caution External Mail:* Do not click any links or open any > attachments unless you trust the sender and know that the content is safe. > > Hi. > > on engine all seems fine. > > on host the command "ovn-sbctl show" is stuck, and with a strace a se > the following error: > > > connect(5, {sa_family=AF_LOCAL, > sun_path="/var/run/openvswitch/ovnsb_db.sock"}, 37) = -1 ENOENT (No > such file or directory) > > > > > > > Il 31/03/20 11:18, Staniforth, Paul ha scritto: >> >> .Hello Tommaso, >> on your oVirt engine host run >> check the north bridge controller >> ovn-nbctl show >> this should show a software switch for each ovn logical network witch >> any ports that are active( in your case you should have 2) >> >> check the south bridge controller >> ovn-sbctl show >> this should show the software switch on each host with a geneve tunnel. >> >> on each host run >> ovs-vsctl show >> this should show the virtual switch with a geneve tunnel to each >> other host and a port for any active vnics >> >> Regards, >> Paul S. >> >> ------------------------------------------------------------------------ >> *From:* Tommaso - Shellrent <tommaso(a)shellrent.com> >> <mailto:tommaso@shellrent.com> >> *Sent:* 31 March 2020 09:27 >> *To:* users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org> >> <mailto:users@ovirt.org> >> *Subject:* [ovirt-users] Local network >> >> *Caution External Mail:* Do not click any links or open any >> attachments unless you trust the sender and know that the content is >> safe. >> >> Hi to all. >> >> I'm trying to connect two vm, on the same "local storage" host, >> with an internal isolated network. >> >> My setup; >> >> VM A: >> >> * eth0 with an external ip >> * eth1, with 1922.168.1.1/24 >> >> VM B >> >> * eth0 with an external ip >> * eth1, with 1922.168.1.2/24 >> >> the eth1 interfaces are connetter by a network created on external >> provider ovirt-network-ovn , whithout a subnet defined. >> >> Now, the external ip works fine, but the two vm cannot connect >> through the local network >> >> ping: ko >> arping: ko >> >> >> any idea to what to check? >> >> >> Regards >> >> -- >> -- >> Shellrent - Il primo hosting italiano Security First >> >> *Tommaso De Marchi* >> /COO - Chief Operating Officer/ >> Shellrent Srl >> Via dell'Edilizia, 19 - 36100 Vicenza >> Tel. 0444321155 <tel:+390444321155> | Fax 04441492177 >> >> To view the terms under which this email is distributed, please go to:- >> http://leedsbeckett.ac.uk/disclaimer/email/ > -- > -- > Shellrent - Il primo hosting italiano Security First > > *Tommaso De Marchi* > /COO - Chief Operating Officer/ > Shellrent Srl > Via dell'Edilizia, 19 - 36100 Vicenza > Tel. 0444321155 <tel:+390444321155> | Fax 04441492177 > > To view the terms under which this email is distributed, please go to:- > http://leedsbeckett.ac.uk/disclaimer/email/ -- -- Shellrent - Il primo hosting italiano Security First *Tommaso De Marchi* /COO - Chief Operating Officer/ Shellrent Srl Via dell'Edilizia, 19 - 36100 Vicenza Tel. 0444321155 <tel:+390444321155> | Fax 04441492177

2 2

How to install Ovirt Node without ISO
by raphael.garcia＠centralesupelec.fr 01 Apr '20

01 Apr '20

Hello Is it possible to install an Ovirt node on a CentOs 7 server without iso (CD or USB). Sorry for this newbie question.

5 5