Correct workflow for modifying engine vm.conf file
by Gianluca Cecchi
Hello,
I would like to know a way to interact and modify in a "supported"/working
way the vm.conf file on shared storage that contains details for the engine
vm and I think is the base to dynamically generate the
/var/run/ovirt-hosted-engine-ha/vm.conf
In the past it was possible to temporarily modify the file under /var/run
(or copy to another location) and start engine with it, but now it seems it
doesn't work and that the file is continuously updated/refreshed
Eg on engine storage domain on a lab with oVirt 4.4. beta4 I have the tar
file
[root@novirt2 ~]# tar tvf
/rhev/data-center/mnt/glusterSD/novirt2st.storage.local\:_engine/7c9397f5-859b-4fba-bcc5-4ecbd454a189/images/530490b0-935e-46a8-84f6-6cd6618c6f0d/2e0f414c-2589-4545-a0a4-3bfed24ef3fc
-rw-r--r-- root/root 181 2020-04-19 15:04 broker.conf
-rw-r--r-- root/root 2777 2020-04-19 15:04 fhanswers.conf
-rw-r--r-- root/root 1076 2020-04-19 15:04 hosted-engine.conf
-rw-r--r-- root/root 6 2020-04-19 15:04 version
-rw-r--r-- root/root 1359 2020-04-19 15:04 vm.conf
[root@novirt2 ~]#
And its vm.conf has:
cpuType=Cascadelake-Server,+md-clear,+mds-no,-hle,-rtm,+tsx-ctrl,+arch-capabilities
I would like to modify it and remove the "+tsx-ctrl" flag.
Is there anything in the database that generates modification in the file
on shared storage and then on the directory under /var/run?
Or how is all the workflow managed to generate at the end the xml file to
use to start the engine vm?
What is that initially determines how to populate the cpuType in vm.conf at
all?
Thanks,
Gianluca
4 years
New VM disk - failed to create, state locked in UI, nothing in DB
by Strahil Nikolov
Hello All,
did anyone observe the following behaviour:
1. Create a new disk from the VM -> disks UI tab
2. Disk creation failes , but stays in locked state
3. Gluster storage has no directory with that uuid
4. /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh doesn't find anything:
[root@engine ~]# /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh -q -t all
Locked VMs
Locked templates
Locked disks
Locked snapshots
Illegal images
Should I just delete the entry from the DB or I have another option ?
Best Regards,
Strahil Nikolov
4 years
ovirt 4.4 beta4 HCI single host problem unknown CPU feature: tsx-ctrl
by Gianluca Cecchi
Hello,
I'm trying what in subject as a nested environment.
Physical is oVirt 4.3.9
I configured the VM that has to be the hypervisor with cpu passthrough.
The local VM starts ok with these settings:
usr/libexec/qemu-kvm -name guest=HostedEngineLocal,debug-threads=on -S
-object
secret,id=masterKey0,format=raw,file=/var/lib/libvirt/qemu/domain-1-HostedEngineLocal/master-key.aes
-machine pc-q35-rhel8.1.0,accel=kvm,usb=off,dump-guest-core=off -cpu
Cascadelake-Server,ss=on,hypervisor=on,tsc-adjust=on,umip=on,pku=on,md-clear=on,stibp=on,arch-capabilities=on,ibpb=on,rdctl-no=on,ibrs-all=on,skip-l1dfl-vmentry=on,mds-no=on,kvmclock=on
When at final stage of deployment it tries to start the final engine VM it
goes down due to this in vdsm.log:
2020-04-19 15:09:48,962+0200 ERROR (vm/22082519) [virt.vm]
(vmId='22082519-70bb-476f-a373-45c2d402a870') The vm start process failed
(vm:871)
Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 801, in
_startUnderlyingVm
self._run()
File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 2608, in
_run
dom.createWithFlags(flags)
File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py",
line 131, in wrapper
ret = f(*args, **kwargs)
File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94,
in wrapper
return func(inst, *args, **kwargs)
File "/usr/lib64/python3.6/site-packages/libvirt.py", line 1166, in
createWithFlags
if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed',
dom=self)
libvirt.libvirtError: unsupported configuration: unknown CPU feature:
tsx-ctrl
2020-04-19 15:09:48,962+0200 INFO (vm/22082519) [virt.vm]
(vmId='22082519-70bb-476f-a373-45c2d402a870') Changed state to Down:
unsupported configuration: unknown CPU feature: tsx-ctrl (code=1) (vm:1629)
2020-04-19 15:09:48,965+0200 INFO (vm/22082519) [virt.vm]
(vmId='22082519-70bb-476f-a373-45c2d402a870') Stopping connection
(guestagent:441)
The xml it tries to activate is:
<cpu match="exact">
<model>Cascadelake-Server</model>
<feature name="md-clear" policy="require"/>
<feature name="mds-no" policy="require"/>
<feature name="hle" policy="disable"/>
<feature name="rtm" policy="disable"/>
<feature name="tsx-ctrl" policy="require"/>
<feature name="arch-capabilities" policy="require"/>
<topology cores="2" sockets="16" threads="1"/>
<numa>
<cell cpus="0-31" id="0" memory="16777216"/>
</numa>
</cpu>
<os>
<type arch="x86_64" machine="pc-q35-rhel8.1.0">hvm</type>
<smbios mode="sysinfo"/>
<bios useserial="yes"/>
</os>
Similar nested env with 4.3.9 on the same physical hw completed ok and the
final engine VM had only:
-machine pc-i440fx-rhel7.6.0,accel=kvm,usb=off,dump-guest-core=off \
-cpu Skylake-Server,spec-ctrl=on,ssbd=on,md-clear=on \
The physical cpu is:
Model name: Intel(R) Xeon(R) Platinum 8260L CPU @ 2.40GHz
and between its flags I don't find tsx-ctrl:
Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall
nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl
xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor
ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid dca sse4_1 sse4_2
x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm
abm 3dnowprefetch epb cat_l3 cdp_l3 invpcid_single intel_pt ssbd mba ibrs
ibpb stibp ibrs_enhanced tpr_shadow vnmi flexpriority ept vpid fsgsbase
tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm cqm mpx rdt_a avx512f
avx512dq rdseed adx smap clflushopt clwb avx512cd avx512bw avx512vl
xsaveopt xsavec xgetbv1 cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local
dtherm ida arat pln pts hwp hwp_act_window hwp_epp hwp_pkg_req pku ospke
avx512_vnni md_clear spec_ctrl intel_stibp flush_l1d arch_capabilities
any help on how to proceed and test?
Thanks,
Gianluca
4 years
Enabling VT-d causes hard lockup
by Shareef Jalloq
Hi,
I've been trying to get an old machine setup for PCIe passthrough but am
seeing kernel hangs when booting into oVirt. This is a Supermicro X10DAi
with dual E5-2695 V4's I think.
I had VT-d enabled and added SR-IOV. Don't think there's anything else I
need to enable in the BIOS is there? I just updated to the latest version
for this board too.
It always seems to be CPU#18 too :
https://photos.app.goo.gl/HG7NcyWwfuq646HeA
Shareef.
4 years
Re: vm console problem
by David David
tested on four different workstations with: fedora20, fedora31 and
windows10(remote-manager last vers)
вс, 29 мар. 2020 г. в 12:39, Strahil Nikolov <hunter86_bg(a)yahoo.com>:
> On March 29, 2020 9:47:02 AM GMT+03:00, David David <dd432690(a)gmail.com>
> wrote:
> >I did as you said:
> >copied from engine /etc/ovirt-engine/ca.pem onto my desktop into
> >/etc/pki/ca-trust/source/anchors and then run update-ca-trust
> >it didn’t help, still the same errors
> >
> >
> >пт, 27 мар. 2020 г. в 21:56, Strahil Nikolov <hunter86_bg(a)yahoo.com>:
> >
> >> On March 27, 2020 12:23:10 PM GMT+02:00, David David
> ><dd432690(a)gmail.com>
> >> wrote:
> >> >here is debug from opening console.vv by remote-viewer
> >> >
> >> >2020-03-27 14:09 GMT+04:00, Milan Zamazal <mzamazal(a)redhat.com>:
> >> >> David David <dd432690(a)gmail.com> writes:
> >> >>
> >> >>> yes i have
> >> >>> console.vv attached
> >> >>
> >> >> It looks the same as mine.
> >> >>
> >> >> There is a difference in our logs, you have
> >> >>
> >> >> Possible auth 19
> >> >>
> >> >> while I have
> >> >>
> >> >> Possible auth 2
> >> >>
> >> >> So I still suspect a wrong authentication method is used, but I
> >don't
> >> >> have any idea why.
> >> >>
> >> >> Regards,
> >> >> Milan
> >> >>
> >> >>> 2020-03-26 21:38 GMT+04:00, Milan Zamazal <mzamazal(a)redhat.com>:
> >> >>>> David David <dd432690(a)gmail.com> writes:
> >> >>>>
> >> >>>>> copied from qemu server all certs except "cacrl" to my
> >> >desktop-station
> >> >>>>> into /etc/pki/
> >> >>>>
> >> >>>> This is not needed, the CA certificate is included in console.vv
> >> >and no
> >> >>>> other certificate should be needed.
> >> >>>>
> >> >>>>> but remote-viewer is still didn't work
> >> >>>>
> >> >>>> The log looks like remote-viewer is attempting certificate
> >> >>>> authentication rather than password authentication. Do you have
> >> >>>> password in console.vv? It should look like:
> >> >>>>
> >> >>>> [virt-viewer]
> >> >>>> type=vnc
> >> >>>> host=192.168.122.2
> >> >>>> port=5900
> >> >>>> password=fxLazJu6BUmL
> >> >>>> # Password is valid for 120 seconds.
> >> >>>> ...
> >> >>>>
> >> >>>> Regards,
> >> >>>> Milan
> >> >>>>
> >> >>>>> 2020-03-26 2:22 GMT+04:00, Nir Soffer <nsoffer(a)redhat.com>:
> >> >>>>>> On Wed, Mar 25, 2020 at 12:45 PM David David
> ><dd432690(a)gmail.com>
> >> >>>>>> wrote:
> >> >>>>>>>
> >> >>>>>>> ovirt 4.3.8.2-1.el7
> >> >>>>>>> gtk-vnc2-1.0.0-1.fc31.x86_64
> >> >>>>>>> remote-viewer version 8.0-3.fc31
> >> >>>>>>>
> >> >>>>>>> can't open vm console by remote-viewer
> >> >>>>>>> vm has vnc console protocol
> >> >>>>>>> when click on console button to connect to a vm, the
> >> >remote-viewer
> >> >>>>>>> console disappear immediately
> >> >>>>>>>
> >> >>>>>>> remote-viewer debug in attachment
> >> >>>>>>
> >> >>>>>> You an issue with the certificates:
> >> >>>>>>
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.238:
> >> >>>>>> ../src/vncconnection.c Set credential 2 libvirt
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c Searching for certs in /etc/pki
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c Searching for certs in /root/.pki
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c Failed to find certificate
> >CA/cacert.pem
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c No CA certificate provided, using
> >GNUTLS
> >> >global
> >> >>>>>> trust
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c Failed to find certificate CA/cacrl.pem
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c Failed to find certificate
> >> >>>>>> libvirt/private/clientkey.pem
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c Failed to find certificate
> >> >>>>>> libvirt/clientcert.pem
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c Waiting for missing credentials
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c Got all credentials
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239:
> >> >>>>>> ../src/vncconnection.c No CA certificate provided; trying the
> >> >system
> >> >>>>>> trust store instead
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240:
> >> >>>>>> ../src/vncconnection.c Using the system trust store and CRL
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240:
> >> >>>>>> ../src/vncconnection.c No client cert or key provided
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240:
> >> >>>>>> ../src/vncconnection.c No CA revocation list provided
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.241:
> >> >>>>>> ../src/vncconnection.c Handshake was blocking
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.243:
> >> >>>>>> ../src/vncconnection.c Handshake was blocking
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.251:
> >> >>>>>> ../src/vncconnection.c Handshake was blocking
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.298:
> >> >>>>>> ../src/vncconnection.c Handshake done
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.298:
> >> >>>>>> ../src/vncconnection.c Validating
> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.301:
> >> >>>>>> ../src/vncconnection.c Error: The certificate is not trusted
> >> >>>>>>
> >> >>>>>> Adding people that may know more about this.
> >> >>>>>>
> >> >>>>>> Nir
> >> >>>>>>
> >> >>>>>>
> >> >>>>
> >> >>>>
> >> >>
> >> >>
> >>
> >> Hello,
> >>
> >> You can try to take the engine's CA (maybe it's useless) and put it
> >on
> >> your system in:
> >> /etc/pki/ca-trust/source/anchors (if it's EL7 or a Fedora) and then
> >run
> >> update-ca-trust
> >>
> >> Best Regards,
> >> Strahil Nikolov
> >>
>
> Hey David,
>
> What is you workstation's OS ?
> Also, have you tried from another workstation ?
>
> Best Regards,
> Strahil Nikolov
>
4 years
Re: command line vm start/stop
by Ali Gusainov
According to
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/...
trying to use
curl --insecure -v -u admin@internal:password -H Content-type: application/xml -X POST https://FQDN/ovirt-engine/api/vms/VM_NAME/ACTION
where ACTION start or stop
Got following:
* About to connect() to FQDN port 443 (#0)
* Trying SERVER_IP...
* Connected to FQDN (SERVER_IP) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/ovirt-engine/ca.pem
CApath: none
* SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate:
* subject: CN=FQDN........
* start date: Jan 22 06:12:15 2020 GMT
* expire date: Dec 27 06:12:15 2024 GMT
* common name: FQDN
* issuer: CN=FQDN.........
* Server auth using Basic with user 'admin@internal'
> POST /ovirt-engine/api/vms/VM_NAME/ACTION HTTP/1.1
> Authorization: Basic YWRtaW5AaW50ZXJuYWw6U3lzVGVhbTEzYw==
> User-Agent: curl/7.29.0
> Host: FQDN
> Accept: application/xml
>
< HTTP/1.1 404 Not Found
< Date: Sun, 19 Apr 2020 00:20:04 GMT
< Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
< Content-Length: 0
< Correlation-Id: 15e7a226-8982-47ff-9f68-7a2519705856
<
* Connection #0 to host FQDN left intact
--------------
tail -1000f /var/log/ovirt-engine/server.log:
2020-04-18 20:20:04,354-04 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default task-385) RESTEASY002010: Failed to execute: javax.ws.rs.WebApplicationException: HTTP 404 Not Found
at org.ovirt.engine.api.restapi.resource.AbstractBackendResource.asGuidOr404(AbstractBackendResource.java:355) [restapi-jaxrs.jar:]
at org.ovirt.engine.api.restapi.resource.AbstractBackendSubResource.<init>(AbstractBackendSubResource.java:26) [restapi-jaxrs.jar:]
at org.ovirt.engine.api.restapi.resource.AbstractBackendActionableResource.<init>(AbstractBackendActionableResource.java:39) [restapi-jaxrs.jar:]
at org.ovirt.engine.api.restapi.resource.BackendVmResource.<init>(BackendVmResource.java:114) [restapi-jaxrs.jar:]
at org.ovirt.engine.api.restapi.resource.BackendVmsResource.getVmResource(BackendVmsResource.java:164) [restapi-jaxrs.jar:]
at sun.reflect.GeneratedMethodAccessor1357.invoke(Unknown Source) [:1.8.0_232]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.8.0_232]
at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_232]
at org.jboss.resteasy.core.ResourceLocatorInvoker.createResource(ResourceLocatorInvoker.java:69) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:105) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:132) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:100) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:440) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:229) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:135) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.interception.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:355) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:138) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:215) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:227) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:791) [jboss-servlet-api_4.0_spec-1.0.0.Final.jar:1.0.0.Final]
at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:274) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler.dispatchToPath(ServletInitialHandler.java:209) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.spec.RequestDispatcherImpl.forwardImpl(RequestDispatcherImpl.java:227) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.spec.RequestDispatcherImpl.forwardImplSetup(RequestDispatcherImpl.java:149) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.spec.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:111) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.api.restapi.invocation.VersionFilter.doFilter(VersionFilter.java:178) [restapi-jaxrs.jar:]
at org.ovirt.engine.api.restapi.invocation.VersionFilter.doFilter(VersionFilter.java:98) [restapi-jaxrs.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.api.restapi.invocation.CurrentFilter.doFilter(CurrentFilter.java:117) [restapi-jaxrs.jar:]
at org.ovirt.engine.api.restapi.invocation.CurrentFilter.doFilter(CurrentFilter.java:72) [restapi-jaxrs.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.aaa.filters.RestApiSessionMgmtFilter.doFilter(RestApiSessionMgmtFilter.java:78) [aaa.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.aaa.filters.EnforceAuthFilter.doFilter(EnforceAuthFilter.java:42) [aaa.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.aaa.filters.SsoRestApiNegotiationFilter.doFilter(SsoRestApiNegotiationFilter.java:84) [aaa.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter.doFilter(SsoRestApiAuthFilter.java:47) [aaa.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.aaa.filters.SessionValidationFilter.doFilter(SessionValidationFilter.java:59) [aaa.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.aaa.filters.RestApiSessionValidationFilter.doFilter(RestApiSessionValidationFilter.java:35) [aaa.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.api.restapi.security.CSRFProtectionFilter.doFilter(CSRFProtectionFilter.java:111) [restapi-jaxrs.jar:]
at org.ovirt.engine.api.restapi.security.CSRFProtectionFilter.doFilter(CSRFProtectionFilter.java:102) [restapi-jaxrs.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.ovirt.engine.core.utils.servlet.CORSSupportFilter.doFilter(CORSSupportFilter.java:283) [utils.jar:]
at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:132) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at org.wildfly.extension.undertow.security.SecurityContextThreadSetupAction.lambda$create$0(SecurityContextThreadSetupAction.java:105)
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502)
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502)
at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502)
at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.Connectors.executeRootHandler(Connectors.java:364) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:830) [undertow-core-2.0.21.Final.jar:2.0.21.Final]
at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_232]
4 years
oVirt 4.3.7 + Gluster 6.6 unsynced entries
by adrianquintero＠gmail.com
Hello,
I am having the following issue, it has been a few days and healing never finishes, any ideas on how to fix the unsynced entries?
[root@host1 vmstore]# gluster vol heal vmstore info
---------------------------------------------------
Brick host1:/gluster_bricks/vmstore/vmstore
<gfid:5aeb168c-b8e3-4581-97f9-eafc33f2f318>
<gfid:9a7483d9-0d68-4fcd-89b7-d281f6132506>
<gfid:a3830550-5158-4cf9-af15-19faf5e51db0>
Status: Connected
Number of entries: 3
Brick host2:/gluster_bricks/vmstore/vmstore
/.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1240
/.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1241
/.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1242
Status: Connected
Number of entries: 3
host3:/gluster_bricks/vmstore/vmstore
Status: Connected
Number of entries: 0
---------------------------------------------------
Thanks,
Adrian
4 years
Re: disk snapshot in illegal status
by David David
snapshots in UI:
Disk Snapshot ID
=====================================================
5a58466b-1547-4346-a550-8590880b379e - "Active VM" - has status "OK"
f447cd4f-9ab3-489d-8c2a-b2e69456496f - "Auto-generated" - has status
"Illegal"
======================================================
the "Disk Snapshot ID" with id 5a58466b-1547-4346-a550-8590880b379e
actually not present in LV
error screenshot attached
чт, 16 апр. 2020 г. в 18:20, Shani Leviim <sleviim(a)redhat.com>:
> Hi David,
> Can you share a screenshot of the error you're getting?
> And how the snapshots are presented on the ui?
>
>
> *Regards,*
>
> *Shani Leviim*
>
>
> On Thu, Apr 16, 2020 at 4:38 PM David David <dd432690(a)gmail.com> wrote:
>
>> hi
>>
>> attempt to remove snapshot from UI results in an error
>>
>> I looked the LV through the lvs and did't find active snapshot ID, only
>> the base snapshot ID is present
>>
>> ovirt in database see 2 snapshots, but i have only one base image on
>> storage
>>
>> so, i must remove the active snapshot ID from db not the base image Id ?
>>
>> чт, 16 апр. 2020 г. в 13:58, Shani Leviim <sleviim(a)redhat.com>:
>>
>>> Hi David,
>>> Sorry for the late reply.
>>> the volume_dump returned 1 occurrence of that image, while the query
>>> returned 2 occurrences.
>>>
>>> It seems that there's an image id with a description of 'Auto-generated
>>> for Live Storage Migration' which wasn't removed from the DB.
>>> Can you try to remove it from the UI?
>>> (If you claimed to remove it, try to remove it from the DB).
>>>
>>>
>>> *Regards,*
>>>
>>> *Shani Leviim*
>>>
>>>
>>> On Tue, Apr 7, 2020 at 7:45 PM David David <dd432690(a)gmail.com> wrote:
>>>
>>>> vdsm-tool dump-volume-chains d17aa967-f7f7-4d9f-98e4-7022854da4f5
>>>>
>>>> engine=# select * from images_storage_domain_view where
>>>> image_group_id='1844873e-45ef-4a2b-a991-2df6e92a3e2d';
>>>>
>>>> output attached
>>>>
>>>> вт, 7 апр. 2020 г. в 19:47, Shani Leviim <sleviim(a)redhat.com>:
>>>>
>>>>> Hi David,
>>>>> First, we need to compare the chain as it is seen by the engine and
>>>>> the host and see if there's a difference.
>>>>> Can you please share the output of the following?
>>>>>
>>>>> On the host:
>>>>> vdsm-tool dump-volume-chains <sd_id>
>>>>>
>>>>> On the engine:
>>>>> SELECT *
>>>>> FROM images_storage_domain_view images_storage_domain_view
>>>>> WHERE image_group_id = <image_group_id>;
>>>>>
>>>>>
>>>>> *Regards,*
>>>>>
>>>>> *Shani Leviim*
>>>>>
>>>>>
>>>>> On Tue, Apr 7, 2020 at 5:28 PM David David <dd432690(a)gmail.com> wrote:
>>>>>
>>>>>> hello
>>>>>>
>>>>>> after removing "auto generated" snapshot, the vm snapshot became to
>>>>>> illegal status and in the "snapshot" tab also marked in illegal status
>>>>>>
>>>>>> now my vm is not booting
>>>>>>
>>>>>> but "vdsm-client Volume getInfo" shows the snapshot status is legal
>>>>>>
>>>>>> vdsm-client Volume getInfo \
>>>>>> storagepoolID=00000000-0000-0000-0000-000000000000 \
>>>>>> storagedomainID=d17aa967-f7f7-4d9f-98e4-7022854da4f5 \
>>>>>> imageID=1844873e-45ef-4a2b-a991-2df6e92a3e2d \
>>>>>> volumeID=f447cd4f-9ab3-489d-8c2a-b2e69456496f
>>>>>>
>>>>>> {
>>>>>> "status": "OK",
>>>>>> "lease": {
>>>>>> "path": "/dev/d17aa967-f7f7-4d9f-98e4-7022854da4f5/leases",
>>>>>> "owners": [],
>>>>>> "version": null,
>>>>>> "offset": 132120576
>>>>>> },
>>>>>> "domain": "d17aa967-f7f7-4d9f-98e4-7022854da4f5",
>>>>>> "capacity": "21474836480",
>>>>>> "voltype": "LEAF",
>>>>>> "description": "None",
>>>>>> "parent": "00000000-0000-0000-0000-000000000000",
>>>>>> "format": "RAW",
>>>>>> "generation": 1,
>>>>>> "image": "1844873e-45ef-4a2b-a991-2df6e92a3e2d",
>>>>>> "uuid": "f447cd4f-9ab3-489d-8c2a-b2e69456496f",
>>>>>> "disktype": "DATA",
>>>>>> "legality": "LEGAL",
>>>>>> "mtime": "0",
>>>>>> "apparentsize": "21474836480",
>>>>>> "truesize": "21474836480",
>>>>>> "type": "PREALLOCATED",
>>>>>> "children": [],
>>>>>> "pool": "",
>>>>>> "ctime": "1530472945"
>>>>>> }
>>>>>>
>>>>>> how to fix the problem?
>>>>>> _______________________________________________
>>>>>> Users mailing list -- users(a)ovirt.org
>>>>>> To unsubscribe send an email to users-leave(a)ovirt.org
>>>>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>>>>> oVirt Code of Conduct:
>>>>>> https://www.ovirt.org/community/about/community-guidelines/
>>>>>> List Archives:
>>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/JSYMY4QG2HS...
>>>>>>
>>>>>
4 years
Re: VM's in status unknown
by Arik Hadas
I would start by querying the database with:
select vm_name, status, run_on_vds from vms where vm_name in ('<name of
vm1>', '<name of vm2>');
Their status should be '7' in that case.
The more interesting part though is their 'run_on_vds' field -
If it's non-empty and points to the host the VMs ran on, it probably means
there's an issue in the communication between the engine and that host, so
restarting the engine/vdsm can solve it.
Otherwise, it would require a deeper look at the log to see why the engine
lost track of the host they run on.
On Fri, Apr 17, 2020 at 12:12 PM Staniforth, Paul <
P.Staniforth(a)leedsbeckett.ac.uk> wrote:
> I don't think the status is reported via the agent but vdsm on the host.
>
> Try restarting the engine service.
>
> use vdsm-client on the host to see if the VM running and shut it down if
> needed.
>
> https://www.ovirt.org/develop/developer-guide/vdsm/vdsm-client.html
>
> on the host restart vdsmd ( you may want to migrate other VMs first)
>
> systemctl restart vdsmd
>
> If this doesn't work alter the database
>
> Regards,
> Paul S.
>
> ------------------------------
> *From:* Jayme <jaymef(a)gmail.com>
> *Sent:* 16 April 2020 19:07
> *To:* eevans(a)digitaldatatechs.com <eevans(a)digitaldatatechs.com>
> *Cc:* kim.kargaard(a)noroff.no <kim.kargaard(a)noroff.no>; users <
> users(a)ovirt.org>
> *Subject:* [ovirt-users] Re: VM's in status unknown
>
>
> *Caution External Mail:* Do not click any links or open any attachments
> unless you trust the sender and know that the content is safe.
> Do you have the guest agent installed on the VMs?
>
> On Thu, Apr 16, 2020 at 2:55 PM <eevans(a)digitaldatatechs.com> wrote:
>
> Are you getting any errors in the engine log or
> /var/log/libvirt/qemu/<vm_name>.log?
> I have Windows 10 and haven't experienced that. You can't shut it down in
> the UI? Even after you try to shut it down inside Windows?
> I will assume you have the latest guest tools installed.
>
> Eric Evans
> Digital Data Services LLC.
> 304.660.9080
>
>
> -----Original Message-----
> From: kim.kargaard(a)noroff.no <kim.kargaard(a)noroff.no>
> Sent: Thursday, April 16, 2020 8:23 AM
> To: users(a)ovirt.org
> Subject: [ovirt-users] VM's in status unknown
>
> Hi,
>
> We have a few Windows 10 VM's running on our ovirt 4.3, where when you
> shutdown the VM from within Windows, that VM does not shut down but gets a
> status of unknown in ovirt and one cannot do anything to the machines
> within the web gui. This seems to specfically be related to that Windows 10
> template that we have created. Any ideas? Also, any ideas on how one can
> shut these machines down?
>
> Thanks
>
> Kim
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement:
> https://www.ovirt.org/privacy-policy.html
> <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi...>
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi...>
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/UM26TABUTG3...
> <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.o...>
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi...>
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi...>
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/M4LITHLIZXJ...
> <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.o...>
>
> To view the terms under which this email is distributed, please go to:-
> http://leedsbeckett.ac.uk/disclaimer/email/
>
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/E73FVYRYWVN...
>
4 years
Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com
I figured it out. Thanks for your help.
Eric Evans
Digital Data Services LLC.
304.660.9080
From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk>
Sent: Friday, April 17, 2020 10:53 AM
To: eevans(a)digitaldatatechs.com; users(a)ovirt.org
Subject: [ovirt-users] Re: assign a specific user to a specific vm
When you look at the permissions tab for a VM you will see all the
permissions and roles for users & groups, if it is an inherited permission
it will show what object it is applied to e,g, database/cluster. You need to
remove any that aren't appropriate.
Regards,
Paul S.
_____
From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com>
<eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> >
Sent: 17 April 2020 15:42
To: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk
<mailto:P.Staniforth@leedsbeckett.ac.uk> >; users(a)ovirt.org
<mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> >
Subject: RE: [ovirt-users] Re: assign a specific user to a specific vm
Caution External Mail: Do not click any links or open any attachments unless
you trust the sender and know that the content is safe.
I guess I need to clarify; when a user logs in to the vm portal, I only want
them to see the machine assigned to them and have the ability to operate it.
How do I set the permission on a per user per vm basis to ensure the user
has the same vm every time they login and that's all they see is their vm.
That's what I'm trying to accomplish.
Good example: In vmware, you can assign a specific user to a specific
machine so that is there machine and that's all they see.
Eric Evans
Digital Data Services LLC.
304.660.9080
From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk
<mailto:P.Staniforth@leedsbeckett.ac.uk> >
Sent: Friday, April 17, 2020 5:16 AM
To: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> ;
users(a)ovirt.org <mailto:users@ovirt.org>
Subject: [ovirt-users] Re: assign a specific user to a specific vm
Hello Eric,
It sounds like you have permissions set to a group at some
level, these are hierarchical system->datacenter->cluster->VM
if you remove this permission and then set the userrole for the VM they
should only be allowed to run this VM.
Regards,
Paul S.
_____
From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com>
<eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> >
Sent: 16 April 2020 19:11
To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org
<mailto:users@ovirt.org> >
Subject: [ovirt-users] assign a specific user to a specific vm
Caution External Mail: Do not click any links or open any attachments unless
you trust the sender and know that the content is safe.
I'm not sure if I'm missing something or not, but I haven't seen how to
assign a specific user to a specific vm. Is there a way to do that? When
users login, they see all the machines. I'd like them to see just the one
they need to login to.
Thanks in advance for your help.
Eric
_______________________________________________
Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-leave(a)ovirt.org
<mailto:users-leave@ovirt.org>
Privacy Statement:
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.
org%2Fprivacy-policy.html
<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt
.org%2Fprivacy-policy.html&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk%
7C76cc4b3403b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C
0%7C637227313752880995&sdata=edzxVEAy3hIeEbfgCE1H%2F8yI9s6lmAme1DtprDA8Zp0%3
D&reserved=0>
&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960
08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099
&sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved
=0
oVirt Code of Conduct:
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.
org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F
<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt
.org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7CP.Stanifor
th%40leedsbeckett.ac.uk%7C76cc4b3403b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417
aa112cd0fb490d85c%7C0%7C0%7C637227313752890991&sdata=hev43rsVCN4aLdBi11ASNXg
46%2B%2FxDpJ5zV0XI0eaOZ8%3D&reserved=0>
&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960
08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099
&sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0
List Archives:
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir
t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ
VZ7OE5VSVJ4D%2F
<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi
rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT
JVZ7OE5VSVJ4D%2F&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk%7C76cc4b34
03b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637227
313752900983&sdata=%2FNePvMrYcRjCvGxR%2F6ZD%2F3%2Fl%2F20B38IWifvKS4fYNuo%3D&
reserved=0>
&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960
08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099
&sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved
=0
To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/
To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/
4 years
