December 2022 - Users - oVirt List Archives

VDSM Host command Get Host Capabilities failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
by Vasudev.ippili＠broadcom.com 24 Feb '23

24 Feb '23

We have a situation where nodes are left in Unassigned state. SSL certificate was expired and even after cert update the nodes are not coming out of Unassigned state. Its not even going in maintenance mode as there are VMs on it (although they are not responding right now). Anyway we can remove the node from HE and add it back?

3 2

Re: Self-hosted engine 4.5.0 deployment fails
by John 01 Feb '23

01 Feb '23

I would run the deploy again, wait until the engine is up and then from the server you are deploying the engine on # virsh list obtain the virtual machine number from the above command, in the example below we assume the number is 1 # virsh console 1 login as root wait for all packages to finish updating: tail -f /var/log/dnf.rpm.log then: # dnf downgrade postgresql-jdbc once that's done the deployment of the engine should get past the [ INFO ] TASK [ovirt.ovirt.engine_setup : Check if Engine health page is up] step. On 03/05/2022 17:03, Mohamed Roushdy wrote: > > Hello, > > I’m deploying on Ovirt nodes v4.5.0.1, but it fails to deploy the > self-hosted engine with the following errors in the web installer: > > [ INFO ] skipping: [localhost] > [ INFO ] TASK [ovirt.ovirt.engine_setup : Check if Engine health page > is up] > [ ERROR ] fatal: [localhost -> 192.168.222.197]: FAILED! => > {"attempts": 30, "changed": false, "connection": "close", > "content_encoding": "identity", "content_length": "86", > "content_type": "text/html; charset=UTF-8", "date": "Tue, 03 May 2022 > 15:57:20 GMT", "elapsed": 0, "msg": "Status code was 500 and not > [200]: HTTP Error 500: Internal Server Error", "redirected": false, > "server": "Apache/2.4.37 (centos) OpenSSL/1.1.1k > mod_auth_gssapi/1.6.1", "status": 500, "url": > http://localhost/ovirt-engine/services/health} > [ INFO ] TASK [ovirt.ovirt.engine_setup : Clean temporary files] > [ INFO ] changed: [localhost -> 192.168.222.197] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Sync on engine machine] > [ INFO ] changed: [localhost -> 192.168.222.197] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Set destination > directory path] > [ INFO ] ok: [localhost -> localhost] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Create destination > directory] > [ INFO ] changed: [localhost -> localhost] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : include_tasks] > [ INFO ] ok: [localhost] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Find the local > appliance image] > [ INFO ] ok: [localhost -> localhost] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Set local_vm_disk_path] > [ INFO ] ok: [localhost -> localhost] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Give the vm time to > flush dirty buffers] > [ INFO ] ok: [localhost -> localhost] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Copy engine logs] > [ INFO ] changed: [localhost] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Change ownership of > copied engine logs] > [ INFO ] changed: [localhost -> localhost] > [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Notify the user about > a failure] > [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": > "There was a failure deploying the engine on the local engine VM. The > system may not be provisioned according to the playbook results: > please check the logs for the issue, fix accordingly or re-deploy from > scratch.\n"} > > Any idea if this is a bug or something? I tried to deploy for eight > times with different configuration > > Thank y9ou, > > > _______________________________________________ > Users mailing list --users(a)ovirt.org > To unsubscribe send an email tousers-leave(a)ovirt.org > Privacy Statement:https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ > List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/XL3Q…

2 1

Changing the Cluster Compatibility Version in hyperconverged environment
by lexxthefox＠gmail.com 25 Jan '23

25 Jan '23

Hi! I'm sorry if it is a noob question but it is very important for me. We are researching oVirt in our company and hope to use existing environment where there's no SAN/NAS solution. Just a bunch of servers. We were able to set up a hyperconverged installation with oVirt 4.4 a while ago and now I'm resuming research and trying to upgrade it to 4.5. I was able to upgrade HE and Hosts. What's left is to upgrade Cluster Compatibility Version from 4.5 to 4.7. I don't seem to find a way to do it as when I try to Edit cluster I get this error: "Cluster Compatibility Version". Upgrade Guide on https://www.ovirt.org/documentation/upgrade_guide/ does not have entries for hyperconverged set up. So I don't know where to look for information on this topic. Is it possible to achieve my goal at all? Can "frozen" Cluster Compatibility Version cause problems in the long run? I can rebuild the whole setup now when it is still being reviewed and planed. But if we start using it actively it won't be possible. I'm afraid that this could be a show-stopper in the long run. Thanks in advance!

3 6

oVirt + TrueNAS: Unable to create iSCSI domain - I am missing something obvious
by David Johnson 20 Jan '23

20 Jan '23

Good morning folks, and thank you in advance. I am working on migrating my oVirt backing store from NFS to iSCSI. *oVirt Environment:* oVirt Open Virtualization Manager Software Version:4.4.4.7-1.el8 *TrueNAS environment:* FreeBSD truenas.local 12.2-RELEASE-p11 75566f060d4(HEAD) TRUENAS amd64 The iSCSI share is on a TrueNAS server, exposed to user VDSM and group 36. oVirt sees the targeted share, but is unable to make use of it. The latest issue is "Error while executing action New SAN Storage Domain: Volume Group block size error, please check your Volume Group configuration, Supported block size is 512 bytes." As near as I can tell, oVirt does not support any block size other than 512 bytes, while TrueNAS's smallest OOB block size is 4k. I know that oVirt on TrueNAS is a common configuration, so I expect I am missing something really obvious here, probably a TrueNAS configuration needed to make TrueNAS work with 512 byte blocks. Any advice would be helpful. *David Johnson*

5 9

update path from 4.4.4 to 4.5.4
by marek 16 Jan '23

16 Jan '23

hi, i have standalone ovirt-engine 4.4.4 (centos8 stream) few hosts (mix of old centos 8.2, centos 8 stream, rocky linux) can you confirm if this upgrade path is ok? first round - update engine to 4.4.10 - update OS on engine to last centos 8 stream (can i upgrade to some point in time recommended for 4.4.10?) - update hosts to ovirt 4.4.10 - update OS on hosts to last centos 8 stream and rocky linux 8.6 special case in first round - centos 8.2 - migrate OS on hosts from centos 8.2 to rocky linux 8.6 - update hosts to ovirt 4.4.10 second round - update engine to 4.5.4 - update hosts to ovirt 4.5.4 - update OS on hosts - centos 8 stream - is ALREADY on last update from first round - update OS on hosts - rocky linux - from 8.6 to 8.7 Marek

1 1

noVNC console error : Something went wrong, connection is closed
by dvx.mellin＠gmail.com 03 Jan '23

03 Jan '23

Hello everyone, Context : oVirt 4.4.9.3-1.el8 glusterfs 8.6 Self-hosted engine Problem: Since I update my certificates (with engine-setup) because of the warning that my certs will expire soon, I can't open the noVNC console anymore. In the logs on engine, I have these : in /var/log/messages : ovsdb-server[510110]: ovs|04628|jsonrpc|WARN|ssl:[::ffff:<ip_node_1>]:51214: receive error: Protocol error ovsdb-server[510110]: ovs|04629|reconnect|WARN|ssl:[::ffff:<ip_node_1>]:51214: connection dropped (Protocol error) journal[516217]: 2022-12-21 11:31:27,800+0100 ovirt-websocket-proxy: INFO msg:871 handler exception: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:897) ovirt-websocket-proxy.py[509812]: ovirt-websocket-proxy[516217] INFO msg:871 handler exception: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:897) ovsdb-server[510110]: ovs|04632|stream_ssl|WARN|SSL_accept: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed in /var/log/openvswitch/ovsdb-server-sb.log : 2022-12-21T10:31:22.540Z|04626|stream_ssl|WARN|SSL_accept: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed 2022-12-21T10:31:22.541Z|04627|jsonrpc|WARN|Dropped 1 log messages in last 8 seconds (most recently, 8 seconds ago) due to excessive rate 2022-12-21T10:31:22.541Z|04628|jsonrpc|WARN|ssl:[::ffff:<ip_node_1>]:51214: receive error: Protocol error 2022-12-21T10:31:22.542Z|04629|reconnect|WARN|ssl:[::ffff:<ip_node_1>]:51214: connection dropped (Protocol error) I've tried these commands (found here : https://access.redhat.com/solutions/6877501) : /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name="ovirt-provider-ovn" --password=mypass --subject="<subject_engine>" --keep-key /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name="ovn-ndb" --password=mypass --subject="<subject_engine>" --keep-key /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name="ovn-sdb" --password=mypass --subject="<subject_engine>" --keep-key systemctl restart ovirt-provider-ovn.service systemctl restart ovn-northd.service Still not work, so I've seen that some certificates was still not renewed : /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name="vmconsole-proxy-helper" --password=mypass --subject="<subject_engine>" --keep-key /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name="vmconsole-proxy-host" --password=mypass --subject="<subject_engine>" --keep-key /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name="vmconsole-proxy-user" --password=mypass --subject="<subject_engine>" --keep-key And restart every ovirt services. But it still does not work better. I don't see any other unvalid certificates in /etc/pki/ovirt-engine/certs/, so I don't know which certificate is invalid for ovsdb. Thanks for any advice. Best regards, Michael

2 2

Re: Expand the disk space of the hosting engine
by ziyi Liu 03 Jan '23

03 Jan '23

Thank you very much, I know the operation steps, but there is still one point that I don’t quite understand, fdisk -l only shows 50G, the actual disk allocation has 100G, how can I display the remaining 50G. The second question is that if the allocated 100G is also full, how should I expand it? I can’t expand it using wei ui

2 1

Re: Expand the disk space of the hosting engine
by Jorge Visentini 31 Dec '22

31 Dec '22

Hi guys. So... the problem is that we can't extend the virtual disk on oVirt... "*Cannot edit Virtual Disk. The operation is not supported for HOSTED_ENGINE disks.*" In my case I also created a 100GB Domain Storage, but the disk is only 58GB and I can't increase it... Em qui., 29 de dez. de 2022 às 18:53, Matthew.Stier(a)fujitsu.com < Matthew.Stier(a)fujitsu.com> escreveu: > If you used the default image for your self-hosted-engine, it will create > the disk of the size you specified, (50GB) but only allocate the space it > actually requires. > > This means the remaining space on the allocated disk, is there, unused. > > Since it setup with LVM, you can use 'fdisk' to create a partition of that > unused space. > > Use pvcreate to add that partition to LVM, > > Use vgextend to extend the appropriate volume group > > Use lvextend to extend the appropriate logical volume, and file-system. > > > > -----Original Message----- > From: ziyi Liu <lzy19930211(a)gmail.com> > Sent: Thursday, December 29, 2022 10:13 AM > To: users(a)ovirt.org > Subject: [ovirt-users] Expand the disk space of the hosting engine > > Now my hosting engine /var directory is full, and the 15G free space is > fully occupied. When creating the hosting engine, I use 100G, but actually > only use 50G. What can I do to make /var bigger? > disk expansion > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: > https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/V7UKBE5SJPH3G… > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/XKZDIQR77TFRO… > -- Att, Jorge Visentini +55 55 98432-9868

3 4

Split hosts in a new engine - oVirt 4.4.5
by francesco＠shellrent.com 30 Dec '22

30 Dec '22

Hello everyone! We have less than 500 hosts and ~800 vms handled by our engine and we could benefit from deploy another engine for splitting the workload (in ex.:we perform daily and weekly backup via python script, scheduled snapshot (dell+add). Is there any way for migrating/moving a host from an engine to a new one (same version, ofc)? I thought about export a backup and then import but then I'll have to "select" whihch host to import and remove all the structure (DC/cluster/host/storoge) from the old one... a bit tricky and dangerous, in my opinion. Anyone that has already done this? Thank you for your time and happy holidays! Francesco

2 1

Expand the disk space of the hosting engine
by ziyi Liu 29 Dec '22

29 Dec '22

Now my hosting engine /var directory is full, and the 15G free space is fully occupied. When creating the hosting engine, I use 100G, but actually only use 50G. What can I do to make /var bigger? disk expansion

2 1

USB Redirection - Auto choose devices
by jamie.briscoe＠johnstonnc.com 28 Dec '22

28 Dec '22

Is there a way to auto choose which devices get redirected the the guest? I have a Windows 2022 VM and I can connect to is using the VM portal and Spice (virt-viewer) and it opens fullscreen perfectly. Perfect VDI solution... Except the fact that I have to click in the top menu and choose my usb devices every time I connect to the vm... I need it to save my selections... Any way to do this?

1 0

Network Address Change
by Paul.LKW 28 Dec '22

28 Dec '22

Hi All: I just has a case, I need to change the oVirt host and engine IP address due to data center decommission I checked in the hosted-engine host there are some files I could change ; in ovirt-hosted-engine/hosted-engine.conf ca_subject="O=simple.com, CN=1.2.3.4" gateway=1.2.3.254 and of course I need to change the ovirtmgmt interface IP too, I think just change the above line could do the tick, but where could I change the other host IP in the cluster ? I think I have to be lost all the host as once changed the hosted-engine host IP as it is in diff. sub net. Does there any command line tools could do that or someone has such experience could share? Best Regards, Paul.LKW

4 6

Change engine & nodes network configuration
by azaelrajadel＠gmail.com 28 Dec '22

28 Dec '22

Hi, all. I´m newby in ovirt and i need to develop a task. I have an ovirt engine and 3 nodes working on LAN 192.168.0.0/24. I need to migrate all to another LAN 10.168.72.0/25. this solution don´t work for me https://lists.ovirt.org/archives/list/users@ovirt.org/thread/5JTGYJ6K5CDYFQ… Please, can anyone provide me a link or something to help me? Thanks in advance.

1 0

VM stuck reading and writing to disk
by Murilo Morais 28 Dec '22

28 Dec '22

Good morning people. I'm experiencing a weird problem. I have a specific VM that the IO simply crashes. This VM, during the backup period, executes mysqldump and tries to compress, after a long period of compacting the JBD2 process appears using 100% of the CPU and also of WA (Wait in the TOP command). Numerous other VMs perform the same process but only this one remains in this state. When JBD2 appears, it is necessary to perform a forced reboot, because it stops practically everything. I'm using CephFS as Storage Backend. In the VM I can get rates of at least 600 Megs, I can generate gigs and more gigs of data without any problem. The VMs are using Virtio instead of Virtio-blk. Hosts are interconnected on 10G SFP+ interfaces, Storages on 40G interfaces. I believe that the problem is not the Storage, as this behavior does not exist in other VMs. What I find strange is that JBD2 goes up and spikes at 100%. What could be happening? Could it be something in the Guest itself?

1 0

Ovirt-node don't communicate with qemu-agent
by Fernando Hallberg 28 Dec '22

28 Dec '22

Hi all, I reinstalled one of the ovirt-nodes, with ovirt-4.5.4, and after the reinstallation the agents of the vms connected to this node cannot communicate with the ovirt-engine. ovirt-engine 4.5.4 any idea? VMs work perfectly, but the agent doesn't communicate. Best regards, Fernando Hallberg

3 6

Certificate expiration w/o warning on all clients. Cluster in zombie state
by Gilboa Davara 28 Dec '22

28 Dec '22

Hello all, Even though I do my best to keep track of the certificate issue date across my different clusters, I somehow missed the vdsm certificate expiration in one of my clusters. Now I have an active cluster with multiple nodes (self-hosted / gluster storage), vdsm service is down on all nodes (due to certificate expiration) - hence, I cannot get the cluster into global maintenance mode (vdsms are down), and I cannot access my engine (to renew the engine certificates / re-enroll hosts). How can manual renew the host certificate? Thanks, Gilboa

3 10

Import FC LUN copy/snapshot as storage domain
by KSNull Zero 27 Dec '22

27 Dec '22

Hello! Is it possible to import a FC LUN copy/snapshot as additional storage domain to oVirt to copy large disk from it ? I believe that this LUN will have the same serial as existing one storage domain. How can we accomplish this ? Thank you.

2 1

oVirt node 4.5 now load QLogic 10gb interface.
by kalilac＠gmail.com 27 Dec '22

27 Dec '22

Hello all. Again, here, asking for help. I just installed a oVirt node 4.5.4 in a new server but I can't use our 10gb interface becouse even though the module been loaded we can´t see the interface. I tryed install 4.4 oVirt node in the same server and I can see and use the same interface. I tryed with the 4.5.2, el9, el8 and has the same issu. Operating System: oVirt Node 4.5.4 Kernel: Linux 5.14.0-202.el9.x86_6 module: bnx2i filename: /lib/modules/5.14.0-202.el9.x86_64/kernel/drivers/scsi/bnx2i/bnx2i.ko.xz version: 2.7.10.1 license: GPL description: QLogic NetXtreme II BCM5706/5708/5709/57710/57711/57712/57800/57810/57840 iSCSI Driver author: Anil Veerabhadrappa <anilgv(a)broadcom.com> and Eddie Wai <eddie.wai(a)broadcom.com> rhelversion: 9.2 A tryed remove and reload the module but nothing happened. Anyone has any ideia what is going wrong? Best regards

2 1

RBD support
by Murilo Morais 27 Dec '22

27 Dec '22

Good night people! How is CEPH (RBD) supported through Cinderlib? How about latency? Is it more performant to use CephFS or RBD through Cinderlib? Thanks a lot in advance!

1 0

Unable to sync network settings on new Ovirt installation
by Patrick Lomakin 24 Dec '22

24 Dec '22

Hi guys! I encountered a network error that I had not encountered before in a previous installation. I need to set up another network in addition to the ovirtmgmt network to migrate virtual machines, because when migrating a large number of machines, the ovirtmgmt network is loaded to its maximum. And as you know and documentation - all or none of the networks must or must not have a QoS rule. After creating the migration network, I added this network QoS rule and also added QoS to the ovirtmgmt network. But I get this kind of error - Error while executing action HostSetupNetworks: Unknown exception. In the logs I noticed the following: {'reason': "(2, 'Error: TC classifier not found.\nWe have an error talking to the kernel\\n', ['/sbin/tc', 'filter', 'replace', 'dev', 'bond0', 'protocol', 'all', 'parent', '1389:', 'pref', '200', 'basic', 'match', 'meta(vlan eq 200)', 'flowid', '1389:c8')"} Who can tell me where to put my energy to find a solution?) Good luck everyone!

1 0

oVirt 4.4.10 -> 4.5.x RPM upgrade problems
by joel+ovirt＠robisons.us 24 Dec '22

24 Dec '22

Hi folks! I've have a oVirt 4.4.x installation running for 453 days now without issue. Now that I had some time over the holiday, I thought it would be good to upgrade it to the latest 4.5.x, however im getting stumped on an upgrade step which upgrades the engine setup: https://pastebin.com/mxf6E1R9 A small snippet of the paste-bin here: [root@cloud ovirt-engine]# dnf update ovirt\*setup\* Last metadata expiration check: 0:22:46 ago on Fri 23 Dec 2022 05:55:39 PM CST. Error: Problem 1: package ovirt-engine-setup-base-4.5.4-1.el8.noarch requires python3-otopi >= 1.10.3, but none of the providers can be installed - cannot install the best update candidate for package ovirt-engine-setup-base-4.4.10.7-1.el8.noarch - package python3-otopi-1.10.3-1.el8.noarch is filtered out by exclude filtering Problem 2: package ovirt-engine-setup-plugin-ovirt-engine-4.5.4-1.el8.noarch requires ovirt-provider-ovn >= 1.2.35, but none of the providers can be installed - package ovirt-provider-ovn-1.2.36-1.el8.noarch requires ovirt-python-openvswitch >= 2.15, but none of the providers can be installed - cannot install the best update candidate for package ovirt-engine-setup-plugin-ovirt-engine-4.4.10.7-1.el8.noarch - package ovirt-python-openvswitch-2.15-3.el8.noarch is filtered out by exclude filtering - package ovirt-python-openvswitch-2.15-4.el8.noarch is filtered out by exclude filtering Any help here is appreciated Happy Holidays!

1 0

sun.security.validator erro
by carl langlois 23 Dec '22

23 Dec '22

Hi, Since this morning i am getting this error when tying to acces the vm portal. (default task-221) [] server_error: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed It seem to be a certificate issue since i also get this in the log [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages Received fatal alert: certificate_expired Not sure what are the steps to fix this problem. Any advice? Regards Carl

1 0

Fatal Error While Gluster Deployment
by fa rnd2000 23 Dec '22

23 Dec '22

fatal: [host1.metrokd.net] FAILED! => {"msg": "The task includes an option with an undefined variable. The error was: 'str object' has no attribute 'vgname'\n\nThe error appears to be in '/etc/ansible/roles/gluster.infra/roles/backend_setup/tasks/get_vg_groupings.yml': line 3, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: Group devices by volume group name, including existing devices\n ^ here\n"}

1 0

Manager GUI session timeout
by Diggy Mc 22 Dec '22

22 Dec '22

How can I increase the session timeout of the oVirt Manager GUI v4.4 ???

3 4

FC - Storage domain - space question + direct LUN (FC) SCSI passthrough a good idea ?
by morgan cox 22 Dec '22

22 Dec '22

Hi. Couple of questions regarding Fibre Channel Storage .. sing fibre channel storage domains - I know when you create storage domains you get 2 files on them 'OVF_STORE' which are less than 1 GB. I am using PREALLOCATED (RAW?) disks - if I were add a (preallocated) disk that fills the entire space would any issues occur ? e.g the 2 OVF_STORE files are preallocated so I assume they will not grow (or need another one adding in future ?) - I have noticed 'Critical Space Action Blocker:' size - what happens if my disk covers the entire free space in a stoage domain (when using preallocated disks) Also as a 2nd question : Rather than using a storage domain if I were to create disks using Direct LUN (Fibrechannel LUN) is it a bad idea to enable SCSI-PassThrough ? I ask as the simple FIO benchmarks I did showed improved performance. Thanks

2 1