April 2022 - Users - oVirt List Archives

Re: NVIDIA vgpu mdev/mediated devices are getting deleted/removed after VM shutdown with ovirt
by Arik Hadas 20 Apr '22

20 Apr '22

On Tue, Apr 19, 2022 at 11:00 PM Sandip Thorat <sandipt(a)nvidia.com> wrote: > > Thanks Arik for reply. > > I want to add enable_large_sys_mem=1 vGPU plugin parameter . How can I do that with oVirt? Could you please share steps? Go to the "Manage vGPU" (Virtual Machine -> Host Devices -> Manage vGPU) and add it to "Optional driver parameters" (see attached screenshot) > > -----Original Message----- > From: Arik Hadas <ahadas(a)redhat.com> > Sent: Tuesday, April 19, 2022 6:49 PM > To: Sandip Thorat <sandipt(a)nvidia.com> > Cc: users <users(a)ovirt.org> > Subject: Re: [ovirt-users] NVIDIA vgpu mdev/mediated devices are getting deleted/removed after VM shutdown with ovirt > > > > External email: Use caution opening links or attachments > > > > > > On Tue, Apr 19, 2022 at 3:47 PM sandipt--- via Users <users(a)ovirt.org> wrote: > > > > > > Hi Team, > > > NVIDIA vgpu mdev/mediated devices are getting deleted/removed after VM shutdown with ovirt. How I can make them persistent even after VM shutdown/poweroff ? I want to set some vgpu parameter in file /sys/bus/mdev/devices/vgpu-id/nvidia/vgpu_params for testing to mdev. But can't do as uuid of mdev are not persistent. mdev are not there in /sys/bus/mdev/devices/ after VM shutdown. We were using RHV/Red Hat Virtualization Host 4.4.10 host with NVIDIA vGPU. virsh commands are helping. Can you please help? > > > > As from oVirt 4.5, you can set such parameters via oVirt's UI/API, see: > > https://bugzilla.redhat.com/1987121 > > (The mdev devices were also changed to managed devices in order to have them persisted) > > > > > > > _______________________________________________ > > > Users mailing list -- users(a)ovirt.org > > > To unsubscribe send an email to users-leave(a)ovirt.org Privacy > > > Statement: https://www.ovirt.org/privacy-policy.html > > > oVirt Code of Conduct: > > > https://www.ovirt.org/community/about/community-guidelines/ > > > List Archives: > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/YAZ5I5LT > > > FZ3WXBPVNIPH2HQWVEDSQW6K/ > >

1 0

What does the ovirtmgmt service do & how do I work withit in regards to networking
by louisb＠ameritech.net 20 Apr '22

20 Apr '22

I've installed ovirt 4.4.10 several times and found myself not being able to reach out to the internet to perform updates to the OS or ovirt. When installing ovirt I've accepted the defaults and found that networking on my server has stopped working. I've also noticed that the ovirtmgmt service has taken over the network port/NIC that I've assigned in the DNS. My server has six/6 NIC's installed but after the install of ovirt with the defaults I'm unable to perform another network functions other than go to ovirt. How do i get ovirt to co-exist on the server as it relates to networking. I just have the OS & GUI installed and then ovirt. I've checked the firewall and not found anything out the ordinary. When this happens what can I do to get things back to normal, the ability to apply OS and ovirt updates? I'm going to install ovirt again making sure that I don't take the default regarding the firewall, maybe this will help? Thanks

2 1

What does the ovirtmgmt service do & how do I work withit in regards to networking
by louisb＠ameritech.net 19 Apr '22

19 Apr '22

I've installed ovirt 4.4.10 several times and found myself not being able to reach out to the internet to perform updates to the OS or ovirt. When installing ovirt I've accepted the defaults and found that networking on my server has stopped working. I've also noticed that the ovirtmgmt service has taken over the network port/NIC that I've assigned in the DNS. My server has six/6 NIC's installed but after the install of ovirt with the defaults I'm unable to perform another network functions other than go to ovirt. How do i get ovirt to co-exist on the server as it relates to networking. I just have the OS & GUI installed and then ovirt. I've checked the firewall and not found anything out the ordinary. When this happens what can I do to get things back to normal, the ability to apply OS and ovirt updates? I'm going to install ovirt again making sure that I don't take the default regarding the firewall, maybe this will help? Thanks

1 0

NVIDIA vgpu mdev/mediated devices are getting deleted/removed after VM shutdown with ovirt
by sandipt＠nvidia.com 19 Apr '22

19 Apr '22

Hi Team, NVIDIA vgpu mdev/mediated devices are getting deleted/removed after VM shutdown with ovirt. How I can make them persistent even after VM shutdown/poweroff ? I want to set some vgpu parameter in file /sys/bus/mdev/devices/vgpu-id/nvidia/vgpu_params for testing to mdev. But can't do as uuid of mdev are not persistent. mdev are not there in /sys/bus/mdev/devices/ after VM shutdown. We were using RHV/Red Hat Virtualization Host 4.4.10 host with NVIDIA vGPU. virsh commands are helping. Can you please help?

3 2

engine.rar
by Nazeem Durgahee 19 Apr '22

19 Apr '22

HI, We have ovirt 4.4.10 running on oracle linux 8 but we are having issues with netbackup whereby it is not removing the snapshot after VM backup. Kindly find attached engine log. Regards

1 0

USB3 redirection
by Rik Theys 19 Apr '22

19 Apr '22

Hi, I'm trying to assign a USB3 controller to a CentOS 7.4 VM in oVirt 4.1 with USB redirection enabled. I've created the following file in /etc/ovirt-engine/osinfo.conf.d: 01-usb.properties with content os.other.devices.usb.controller.value = nec-xhci and have restarted ovirt-engine. If I disable USB-support in the web interface for the VM, the xhci controller is added to the VM (I can see it in the qemu-kvm commandline), but usb redirection is not available. If I enable USB-support in the UI, no xhci controller is added (only 4 uhci controllers). Is there a way to make the controllers for usb redirection xhci controllers? Regards, Rik -- Rik Theys System Engineer KU Leuven - Dept. Elektrotechniek (ESAT) Kasteelpark Arenberg 10 bus 2440 - B-3001 Leuven-Heverlee +32(0)16/32.11.07 ---------------------------------------------------------------- <<Any errors in spelling, tact or fact are transmission errors>>

3 5

New ovirt 4.4.10 user unable to login
by louisb＠ameritech.net 19 Apr '22

19 Apr '22

I just create an new user in ovirt 4.4.10 using the tool "ovirt-aaa-jdbc-tool". I'm unable to log into ovirt using the newly created user. I'm getting the error message: The user xyzabcs@internal-authz with profile [internal] is not authorized to perform login. Is the profile the same as a "Group", I've also tried creating a new group also asl follows: sudo ovirt-aaa-jdbc-tool group-manage groupadd --group='Administrator'. I get the following message: Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Usage: /bin/ovirt-aaa-jdbc-tool [options] group-manage groupadd group-name --group Add a group as a member to group-name. Options: --group=[STRING] Name of group to add. --help Show help for this module. Thanks in advance

3 2

Host certificate expired
by Nyika Csaba 19 Apr '22

19 Apr '22

Hi, I have an ovirt cluster (4 nodes) and a stand-alone engine. Last week one of the cluster-members node went to "Non-responsive" status, because i forgot to renew the host certificate. On this node's vms now are in "unknown" states. (but running) How can i stop this vms and how can i start them on another nodes? thanks csabany

1 0

OVN routing and firewalling in oVirt
by Gianluca Cecchi 19 Apr '22

19 Apr '22

Hello, how do we manage routing between different OVN networks in oVirt? And between OVN networks and physical ones? Based on architecture read here: http://openvswitch.org/support/dist-docs/ovn-architecture.7.html I see terms for logical routers and gateway routers respectively but how to apply to oVirt configuration? Do I have to choose between setting up a specialized VM or a physical one: is it applicable/advisable to put on oVirt host itself the gateway functionality? Is there any security policy (like security groups in Openstack) to implement? Thanks, Gianluca

4 6

OVN in oVirt : practical use cases
by ravi k 17 Apr '22

17 Apr '22

Hello, I was exploring OVN in oVirt and got thinking as to where it's practical use cases are? Folks who've implemented it in their production environments, can you please explain how you are using OVN in your environment. It seemed to be a bit complex for implementing and maintaining. It might be complex to me because I'm still fairly new to it. So is the OVN/OVS implementation geared towards teams that build the backend functionalities for virtualization softwares like VMware NSX etc? Hence my question asking if there are any practical benefits to using OVN/OVS in a regular virtualization environment. For example, if we're a financial or automobile setup where we use oVirt for provisioning VMs, what extra value does OVN/OVS add if we were to use it. Regards, Ravi

1 0

Emulex OneConnect 10Gb NICs on Ovirt 4.4.10
by thkam＠hua.gr 16 Apr '22

16 Apr '22

Hi We have a large number of HP servers where we use Ovirt and we are having problems upgrading the nodes to Ovirt 4.4.10 More specifically the servers have the Emulex OneConnect 10Gb NICs and what we did in previous Ovirt node installations was to download the driver rpm (e.g. kmod-be2net-12.0.0.0-8.el8_5.elrepo.x86_64.rpm) and then install it using "rpm -ivh ... " and carrying out "modprobe be2net" For 4.18.0-365 we could not find a separate rpm but it looks like this was included in kernel-modules-4.18.0-365.el8.x86_64.rpm (https://centos.pkgs.org/8-stream/centos-baseos-x86_64/kernel-modules-4.18.0…) which is already installed. "modprobe be2net" produces no errors but the network interfaces do not show up in "ip -a" even after reboot. Are we missing something here, or is our infrastructure unusable with 4.4.10? Things were working for 4.4.9. Thanks!

5 11

Storage domain out of space need help
by louisbohm＠gmail.com 15 Apr '22

15 Apr '22

Running Oracle VM (Ovirt 4.3) on Oracle Linux 7.8. Storage Domain (comprised of local disks in RAID10) is out of space. We have 2 VMs on this physical host. One of them is up (the important one). One of them is down. The VM that is down is a test VM and if there is a way I can delete it from the disk and recover the disk space. I can also purchase more physical disks and add them to the system but then how do I grow the Storage domain if its state is INACTIVE? I also have a second physical server running Linux acting as a NFS server. I would happily add the NFS space to this Storage domain and move the TEST vm to the NFS space. Can some one help explain how I can fix this with out destroying the currently working VM? I have created a backup of the data on the VM but it would be very painful if I had to rebuild it. Thanks,

2 1

Confused Newby - RHEL 9.0Beta
by Trevor Monaghan 14 Apr '22

14 Apr '22

Hello Friends at oVirt, I set up a MINI PC as to host with the modest aim of hosting a couple of VMs. I mainly decided on Red Hat for its easy of use when setting up RAID1 with a pair of NVme SSDs. vSphere does not support RAID Ubuntu the option of setting up RAID is not available or hard to locate even after Googling into for hours... Never mind, now set up with RHEL 9.0Beta I was not able also to learn if it requires upgrading to RHV 4.4 Then I came across oVirt and became confused between both with Cokpit that is also mentioning that Ovirt can be an addon. At the moment RHEL 9.0Beta works fine and could do without breaking the system. Is there a need to upgrade it to RHV 4.4? As the existing Virtualisaton of RHEL 9.0Beta is rather light or perhaps I need oVirt to access its full potentional? What confuses me is that Red Hat indicates RHV 4.4 to be a great enterprise solution however based on the features available to me when Cokpit is used is rather contradictory when compared to other technologies available even for free. It could be amazing to hear from you, Wish you well, Trevor

2 2

Re: Ovirt 4.4.10 lab unstable on ESXi
by Strahil Nikolov 14 Apr '22

14 Apr '22

That's really strange.Do you see any errors in the HE logs (after the situation get better)? Best Regards,Strahil Nikolov On Mon, Apr 11, 2022 at 13:21, Mohamed Roushdy<mohamedroushdy(a)peopleintouch.com> wrote:  Hello, I’m used to having a nested-ESXi on another ESXi, but we are testing Ovirt these days, and we are facing a strange behavior with the engine VM. I have a hyper-converged Ovirt cluster with a hosted-engine, and whenever I reboot/shutdown one of the nodes for testing (a node that is not hosting the engine VM of course) the engine goes crazy and too slow, and starts losing network connecting to the remaining (healthy) nodes in the cluster, and I can hardly SSH into it. Ping also has too many drops while another node is down. Once that faulty node is up again the engine works very fine, but this is really limiting my ability to make further Ovirt HA tests before moving to production. I though maybe the promiscuous mode on the physical host causes this, but never faced this with nester-virtualization with VMware, and turning-off promiscuous mode isn’t an option either… what do you think please? Mohamed Roushdy Team Member – Systems Administrator M: +31 61 55 94 300 _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/N66ENNVMW7H2C…

1 0

Issue with Netbackup Snapshot
by Govind Mooroogen 14 Apr '22

14 Apr '22

Hello David, Trust you are doing fine, we need your advice on an issue that we have with Netbackup not removing snapshot and the disk is locked. How do we proceed with removing the snapshot, this is a very critical server. If we delete the snapshot will it merge. [cid:image008.png@01D84FF0.21CC6BA0] Regards From: Nazeem Durgahee <nazeem.durgahee(a)harelmallac.com> Sent: Tuesday, 11 January 2022 16:49 To: Yedidyah Bar David <didi(a)redhat.com> Cc: users(a)ovirt.org; Veeroo Dowlut <Veeroo.Dowlut(a)harelmallac.com>; Govind Mooroogen <govind.mooroogen(a)harelmallac.com> Subject: RE: [ovirt-users] Installin ovirt and ovirt host on orcale 8.5 linux issues Hi, We made it work. The workaround is to create a symlink between /usr/bin/python3 to /usr/bin/python2 and it worked. We created an empty /usr/bin/python2. Now we will try same on the other two hosts that we need to install. Regards From: Yedidyah Bar David <didi(a)redhat.com<mailto:didi@redhat.com>> Sent: Tuesday, January 11, 2022 4:45 PM To: Nazeem Durgahee <nazeem.durgahee(a)harelmallac.com<mailto:nazeem.durgahee@harelmallac.com>> Cc: users(a)ovirt.org<mailto:users@ovirt.org>; Veeroo Dowlut <Veeroo.Dowlut(a)harelmallac.com<mailto:Veeroo.Dowlut@harelmallac.com>>; Govind Mooroogen <govind.mooroogen(a)harelmallac.com<mailto:govind.mooroogen@harelmallac.com>> Subject: Re: [ovirt-users] Installin ovirt and ovirt host on orcale 8.5 linux issues GOVIND MOOROOGEN Senior System Engineer Advanced Infrastructure Services Harel Mallac Technologies Ltd. 1st Floor, Block A, Phoenix Central, Pont Fer, Phoenix 73524, Mauritius t: (230) 207 3300 | ext: 2073200 f: (230) 207 3333 | m: (230) 59623771 e: govind.mooroogen(a)harelmallac.com w: harelmallactechnologies.com | BRN: C07007231 On Tue, Jan 11, 2022 at 2:39 PM Nazeem Durgahee <nazeem.durgahee(a)harelmallac.com<mailto:nazeem.durgahee@harelmallac.com>> wrote: Hi, Having issue when installing Ovirt on Oracle linux 8.1,8.2,8,3 whereby it is unable to set the interpreter for python. It is looking for python 2 instead, Kindly find attached logs. Some time ago, we merged this patch, which was designed to solve your case: https://gerrit.ovirt.org/c/ovirt-engine/+/114663 Specifically: https://gerrit.ovirt.org/c/ovirt-engine/+/114663/6/packaging/ansible-runner… However, this didn't work, because, as you can see in your attached logs, 'ansible_distribution_file_variety' is 'OracleLinux', and not 'RedHat'. Not sure whether this is due to ansible or to Oracle Linux. I think it would have made more sense that it was 'RedHat', as this seems to have worked well at least for AlmaLinux (and IIRC we also got success reports about Rocky Linux). Anyway, patches are welcome. Best regards, -- Didi NAZEEM DURGAHEE Senior System Engineer Advanced Infrastructure Services [cid:image001.png@01D84FEF.EA093680] [cid:image002.png@01D84FEF.EA093680] Harel Mallac Technologies Ltd. 1st Floor, Block A, Phoenix Central, Pont Fer, Phoenix 73524, Mauritius t: (230) 207 3300 | ext: 1154 f: (230) 207 3333 | m: (230) e: nazeem.durgahee(a)harelmallac.com<mailto:nazeem.durgahee@harelmallac.com> w: harelmallactechnologies.<https://www.harelmallactechnologies.com/>com | BRN: C07007231 [cid:image003.png@01D84FEF.EA093680]<https://www.facebook.com/HarelMallacTechnologies/>[cid:image004.png@01D84FEF.EA093680]<https://www.instagram.com/lifeathmt/?igshid=jw0mtea7mvep>[cid:image005.png@01D84FEF.EA093680]<https://twitter.com/technologieshm?lang=en>[cid:image006.png@01D84FEF.EA093680]<https://www.linkedin.com/company/harel-mallac-technologies-ltd> [cid:image007.gif@01D84FEF.EA093680] Disclaimer: This e-mail and any attachment thereof are intended only for the person or entity to whom it is addressed in the email and contain confidential and/or privileged information. If you are not the intended recipient of this e-mail, please notify the sender immediately and delete the material from all platforms. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Before opening any attachments, please check them for viruses and defects, since we do not accept any liability for loss and/or damage which may be caused as a result. Data Privacy: Any personal data that you share with us by email will be processed in accordance with our privacy policy found on www.harelmallac.com<http://www.harelmallac.com/> Disclaimer: This e-mail and any attachment thereof are intended only for the person or entity to whom it is addressed in the email and contain confidential and/or privileged information. If you are not the intended recipient of this e-mail, please notify the sender immediately and delete the material from all platforms. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Before opening any attachments, please check them for viruses and defects, since we do not accept any liability for loss and/or damage which may be caused as a result. Data Privacy: Any personal data that you share with us by email will be processed in accordance with our privacy policy found on www.harelmallac.com

1 0

Cannot remove Snapshot. Related operation is currently in progress. Please try again later.
by Martin Marusinec 13 Apr '22

13 Apr '22

Hello, my storage got disconnected during the image migration, resulting is stuck migration. Task had been cleaned with restart of vdsdm service, but lead to stuck disk image. The VM got powered down in the meantime, and currently I cannot do anything with it, I always get a message like "Cannot.... Related operation is currently in progress." I already used the unlock_entity.sh script, it cleaned something, but did not help me. I cannot delete the VM, delete the disk, delete the snapshots. I even deleted the wrong snapshot from disk. All I need is it get rid of the VM and its disk, as I can restore it from the backup. Could you please somebody try to navigate me how to solve the problem? Engine log keeps filling up with messages which indicate there is an orphaned task, however I am not sure what to delete from database: 2022-04-13 22:26:41,822+02 INFO [org.ovirt.engine.core.bll.StorageJobCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-87) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command CopyData id: '62b1976b-729a-41ae-972c-a42de750ad1d': couldn't get the status of job '6ef3cb28-14cf-486a-ad71-96484c1a596e' on host 'kvm2.finamis.com' (id: 'f880cfbe-5827-4853-a4fc-11199c439f79'), assuming it's still running 2022-04-13 22:26:41,846+02 INFO [org.ovirt.engine.core.bll.SerialChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-87) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command 'LiveMigrateDisk' (id: '3cd698fd-08a2-419e-bdd8-6b3516bb3127') waiting on child command id: '2e9ad954-8f4e-41ed-9c75-015afeed337d' type:'CopyImageGroupVolumesData' to complete 2022-04-13 22:26:41,847+02 INFO [org.ovirt.engine.core.bll.StorageJobCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-87) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command FenceVolumeJob id: '831828a3-2e0f-4989-965b-91761fa9601f': job '9dc88836-db04-49ae-b01e-18a56e24c91a' wasn't executed on any host, considering the job status as failed 2022-04-13 22:26:41,847+02 INFO [org.ovirt.engine.core.bll.StorageJobCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-87) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command FenceVolumeJob id: '831828a3-2e0f-4989-965b-91761fa9601f': execution was completed, the command status is 'FAILED' 2022-04-13 22:26:42,850+02 ERROR [org.ovirt.engine.core.bll.job.JobRepositoryImpl] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-6) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Failed to save step '499b0207-61ba-4998-8cb8-2cb93b89422b', 'FINALIZING': CallableStatementCallback; SQL [{call insertstep(?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)}ERROR: insert or update on table "step" violates foreign key constraint "fk_step_job" Detail: Key (job_id)=(ed10f993-cfd2-4a8b-806f-3fbd823101ef) is not present in table "job". Where: SQL statement "INSERT INTO step ( step_id, parent_step_id, job_id, step_type, description, step_number, status, progress, start_time, end_time, correlation_id, external_id, external_system_type, is_external ) VALUES ( v_step_id, v_parent_step_id, v_job_id, v_step_type, v_description, v_step_number, v_status, v_progress, v_start_time, v_end_time, v_correlation_id, v_external_id, v_external_system_type, v_is_external )" PL/pgSQL function insertstep(uuid,uuid,uuid,character varying,text,integer,character varying,smallint,timestamp with time zone,timestamp with time zone,character varying,uuid,character varying,boolean) line 3 at SQL statement; nested exception is org.postgresql.util.PSQLException: ERROR: insert or update on table "step" violates foreign key constraint "fk_step_job" Detail: Key (job_id)=(ed10f993-cfd2-4a8b-806f-3fbd823101ef) is not present in table "job". Where: SQL statement "INSERT INTO step ( step_id, parent_step_id, job_id, step_type, description, step_number, status, progress, start_time, end_time, correlation_id, external_id, external_system_type, is_external ) VALUES ( v_step_id, v_parent_step_id, v_job_id, v_step_type, v_description, v_step_number, v_status, v_progress, v_start_time, v_end_time, v_correlation_id, v_external_id, v_external_system_type, v_is_external )" PL/pgSQL function insertstep(uuid,uuid,uuid,character varying,text,integer,character varying,smallint,timestamp with time zone,timestamp with time zone,character varying,uuid,character varying,boolean) line 3 at SQL statement 2022-04-13 22:26:42,851+02 ERROR [org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-6) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Ending command 'org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand' with failure. 2022-04-13 22:26:51,855+02 INFO [org.ovirt.engine.core.bll.SerialChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command 'CopyImageGroupVolumesData' (id: '2e9ad954-8f4e-41ed-9c75-015afeed337d') waiting on child command id: '62b1976b-729a-41ae-972c-a42de750ad1d' type:'CopyData' to complete 2022-04-13 22:26:51,858+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetHostJobsVDSCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] START, GetHostJobsVDSCommand(HostName = kvm2.finamis.com, GetHostJobsVDSCommandParameters:{hostId='f880cfbe-5827-4853-a4fc-11199c439f79', type='storage', jobIds='[6ef3cb28-14cf-486a-ad71-96484c1a596e]'}), log id: 480d931c 2022-04-13 22:26:51,862+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetHostJobsVDSCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] FINISH, GetHostJobsVDSCommand, return: {}, log id: 480d931c 2022-04-13 22:26:51,862+02 INFO [org.ovirt.engine.core.bll.StorageJobCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command CopyData id: '62b1976b-729a-41ae-972c-a42de750ad1d': attempting to determine the job status by polling the entity. 2022-04-13 22:26:51,862+02 ERROR [org.ovirt.engine.core.bll.StorageJobCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command CopyData id: '62b1976b-729a-41ae-972c-a42de750ad1d': failed to poll the command entity 2022-04-13 22:26:51,862+02 INFO [org.ovirt.engine.core.bll.storage.disk.image.CopyDataCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command CopyData id: '62b1976b-729a-41ae-972c-a42de750ad1d': attempting to fence job ed10f993-cfd2-4a8b-806f-3fbd823101ef 2022-04-13 22:26:51,868+02 INFO [org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Running command: FenceVolumeJobCommand internal: true. 2022-04-13 22:26:51,868+02 ERROR [org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command 'org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand' failed: null 2022-04-13 22:26:51,868+02 ERROR [org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Exception: java.lang.NullPointerException at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand.executeCommand(FenceVolumeJobCommand.java:31) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.CommandBase.executeWithoutTransaction(CommandBase.java:1174) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.CommandBase.executeActionInTransactionScope(CommandBase.java:1332) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.CommandBase.runInTransaction(CommandBase.java:2008) at org.ovirt.engine.core.utils//org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInSuppressed(TransactionSupport.java:140) at org.ovirt.engine.core.utils//org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:79) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.CommandBase.execute(CommandBase.java:1392) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:424) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.executor.DefaultBackendActionExecutor.execute(DefaultBackendActionExecutor.java:13) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.Backend.runAction(Backend.java:450) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.Backend.runActionImpl(Backend.java:432) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.Backend.runInternalAction(Backend.java:638) at jdk.internal.reflect.GeneratedMethodAccessor273.invoke(Unknown Source) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:566) at org.jboss.as.ee@23.0.2.Final//org.jboss.as.ee.component.ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptor.java:52) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:509) at org.jboss.as.weld.common@23.0.2.Final//org.jboss.as.weld.interceptors.Jsr299BindingsInterceptor.delegateInterception(Jsr299BindingsInterceptor.java:79) at org.jboss.as.weld.common@23.0.2.Final//org.jboss.as.weld.interceptors.Jsr299BindingsInterceptor.doMethodInterception(Jsr299BindingsInterceptor.java:89) at org.jboss.as.weld.common@23.0.2.Final//org.jboss.as.weld.interceptors.Jsr299BindingsInterceptor.processInvocation(Jsr299BindingsInterceptor.java:102) at org.jboss.as.ee@23.0.2.Final//org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:63) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.component.invocationmetrics.ExecutionTimeInterceptor.processInvocation(ExecutionTimeInterceptor.java:43) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ee@23.0.2.Final//org.jboss.as.ee.concurrent.ConcurrentContextInterceptor.processInvocation(ConcurrentContextInterceptor.java:45) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:40) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:53) at org.jboss.as.ee@23.0.2.Final//org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:52) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.component.singleton.SingletonComponentInstanceAssociationInterceptor.processInvocation(SingletonComponentInstanceAssociationInterceptor.java:53) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:232) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.tx.CMTTxInterceptor.supports(CMTTxInterceptor.java:446) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:164) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:509) at org.jboss.weld.core@3.1.6.Final//org.jboss.weld.module.ejb.AbstractEJBRequestScopeActivationInterceptor.aroundInvoke(AbstractEJBRequestScopeActivationInterceptor.java:81) at org.jboss.as.weld.common@23.0.2.Final//org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:89) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.component.invocationmetrics.WaitTimeInterceptor.processInvocation(WaitTimeInterceptor.java:47) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(SecurityContextInterceptor.java:100) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.deployment.processors.StartupAwaitInterceptor.processInvocation(StartupAwaitInterceptor.java:22) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:64) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ejb3@23.0.2.Final//org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:67) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.as.ee@23.0.2.Final//org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.ContextClassLoaderInterceptor.processInvocation(ContextClassLoaderInterceptor.java:60) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.run(InterceptorContext.java:438) at org.wildfly.security.elytron-private@1.15.3.Final//org.wildfly.security.manager.WildFlySecurityManager.doChecked(WildFlySecurityManager.java:633) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.AccessCheckingInterceptor.processInvocation(AccessCheckingInterceptor.java:57) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) at org.jboss.invocation@1.6.0.Final//org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:53) at org.jboss.as.ee@23.0.2.Final//org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:198) at org.jboss.as.ee@23.0.2.Final//org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:191) at org.jboss.as.ee@23.0.2.Final//org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:81) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.interfaces.BackendInternal$$$view3.runInternalAction(Unknown Source) at jdk.internal.reflect.GeneratedMethodAccessor272.invoke(Unknown Source) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:566) at org.jboss.weld.core@3.1.6.Final//org.jboss.weld.util.reflection.Reflections.invokeAndUnwrap(Reflections.java:410) at org.jboss.weld.core@3.1.6.Final//org.jboss.weld.module.ejb.EnterpriseBeanProxyMethodHandler.invoke(EnterpriseBeanProxyMethodHandler.java:134) at org.jboss.weld.core@3.1.6.Final//org.jboss.weld.bean.proxy.EnterpriseTargetBeanInstance.invoke(EnterpriseTargetBeanInstance.java:56) at org.jboss.weld.core@3.1.6.Final//org.jboss.weld.module.ejb.InjectionPointPropagatingEnterpriseTargetBeanInstance.invoke(InjectionPointPropagatingEnterpriseTargetBeanInstance.java:68) at org.jboss.weld.core@3.1.6.Final//org.jboss.weld.bean.proxy.ProxyMethodHandler.invoke(ProxyMethodHandler.java:106) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.BackendCommandObjectsHandler$BackendInternal$BackendLocal2049259618$Proxy$_$$_Weld$EnterpriseProxy$.runInternalAction(Unknown Source) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.CommandBase.runInternalAction(CommandBase.java:2386) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.CommandBase.runInternalActionWithTasksContext(CommandBase.java:2411) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.CommandBase.runInternalActionWithTasksContext(CommandBase.java:2406) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.storage.disk.image.CopyDataCommand.attemptToFenceJob(CopyDataCommand.java:144) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.HostJobCallback.handleUndeterminedJobStatus(HostJobCallback.java:196) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.HostJobCallback.childCommandsExecutionEnded(HostJobCallback.java:84) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.ChildCommandsCallbackBase.doPolling(ChildCommandsCallbackBase.java:80) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethodsImpl(CommandCallbacksPoller.java:181) at deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethods(CommandCallbacksPoller.java:109) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.runAndReset(FutureTask.java:305) at org.glassfish.javax.enterprise.concurrent//org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.access$201(ManagedScheduledThreadPoolExecutor.java:360) at org.glassfish.javax.enterprise.concurrent//org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.run(ManagedScheduledThreadPoolExecutor.java:511) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:829) at org.glassfish.javax.enterprise.concurrent//org.glassfish.enterprise.concurrent.ManagedThreadFactoryImpl$ManagedThread.run(ManagedThreadFactoryImpl.java:227) 2022-04-13 22:26:51,872+02 INFO [org.ovirt.engine.core.bll.StorageJobCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command CopyData id: '62b1976b-729a-41ae-972c-a42de750ad1d': couldn't get the status of job '6ef3cb28-14cf-486a-ad71-96484c1a596e' on host 'kvm2.finamis.com' (id: 'f880cfbe-5827-4853-a4fc-11199c439f79'), assuming it's still running 2022-04-13 22:26:51,899+02 INFO [org.ovirt.engine.core.bll.SerialChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command 'LiveMigrateDisk' (id: '3cd698fd-08a2-419e-bdd8-6b3516bb3127') waiting on child command id: '2e9ad954-8f4e-41ed-9c75-015afeed337d' type:'CopyImageGroupVolumesData' to complete 2022-04-13 22:26:51,900+02 INFO [org.ovirt.engine.core.bll.StorageJobCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command FenceVolumeJob id: '3c8b0471-c405-4b7f-ac54-43732407d3cb': job '3c38e07a-44f3-46b7-97f9-56b6218e69b4' wasn't executed on any host, considering the job status as failed 2022-04-13 22:26:51,900+02 INFO [org.ovirt.engine.core.bll.StorageJobCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-76) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Command FenceVolumeJob id: '3c8b0471-c405-4b7f-ac54-43732407d3cb': execution was completed, the command status is 'FAILED' 2022-04-13 22:26:52,903+02 ERROR [org.ovirt.engine.core.bll.job.JobRepositoryImpl] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-14) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Failed to save step 'ad184ef6-e708-41f3-acff-962d39f01c30', 'FINALIZING': CallableStatementCallback; SQL [{call insertstep(?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)}ERROR: insert or update on table "step" violates foreign key constraint "fk_step_job" Detail: Key (job_id)=(ed10f993-cfd2-4a8b-806f-3fbd823101ef) is not present in table "job". Where: SQL statement "INSERT INTO step ( step_id, parent_step_id, job_id, step_type, description, step_number, status, progress, start_time, end_time, correlation_id, external_id, external_system_type, is_external ) VALUES ( v_step_id, v_parent_step_id, v_job_id, v_step_type, v_description, v_step_number, v_status, v_progress, v_start_time, v_end_time, v_correlation_id, v_external_id, v_external_system_type, v_is_external )" PL/pgSQL function insertstep(uuid,uuid,uuid,character varying,text,integer,character varying,smallint,timestamp with time zone,timestamp with time zone,character varying,uuid,character varying,boolean) line 3 at SQL statement; nested exception is org.postgresql.util.PSQLException: ERROR: insert or update on table "step" violates foreign key constraint "fk_step_job" Detail: Key (job_id)=(ed10f993-cfd2-4a8b-806f-3fbd823101ef) is not present in table "job". Where: SQL statement "INSERT INTO step ( step_id, parent_step_id, job_id, step_type, description, step_number, status, progress, start_time, end_time, correlation_id, external_id, external_system_type, is_external ) VALUES ( v_step_id, v_parent_step_id, v_job_id, v_step_type, v_description, v_step_number, v_status, v_progress, v_start_time, v_end_time, v_correlation_id, v_external_id, v_external_system_type, v_is_external )" PL/pgSQL function insertstep(uuid,uuid,uuid,character varying,text,integer,character varying,smallint,timestamp with time zone,timestamp with time zone,character varying,uuid,character varying,boolean) line 3 at SQL statement 2022-04-13 22:26:52,904+02 ERROR [org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-14) [e546bb30-7d18-4348-9c28-9dbbf4ab1893] Ending command 'org.ovirt.engine.core.bll.storage.disk.image.FenceVolumeJobCommand' with failure. ^C

1 0

certification expires: PKIX path validation failed
by Nathanaël Blanchet 13 Apr '22

13 Apr '22

Hi, Some of my hosts came into a non responsive state since there certicate had expired: VDSM palomo command Get Host Capabilities failed: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed |openssl x509 -noout -enddate -in /etc/pki/vdsm/certs/vdsmcert.pem palomo notAfter=Apr 6 11:09:05 2022 GMT | The recommanded path to update certificates is to put hosts into maintenance and enroll certificates. But I can't anymore live migrate vms since the certificate is expired: 2022-04-13 10:34:12,022+0200 ERROR (migsrc/bf0f7628) [virt.vm] (vmId='bf0f7628-d70b-47a4-8569-5430e178f429') [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897) (migration:331) So is there a way to disable tls to migrate these vms so as to put the host into maintenance? No possibility of migration would imply to stop production vms, this is what we absolutely don't want! Any help much appreciated. || -- Nathanaël Blanchet Supervision réseau SIRE 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

2 2

vdsm hook after node upgrade
by Nathanaël Blanchet 13 Apr '22

13 Apr '22

Hi, I've upgraded my hosts from 4.4.9 to 4.4.10 and none of my vdsm hooks are present anymore... i believed those additionnal personnal data were persistent across update... -- Nathanaël Blanchet Supervision réseau SIRE 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

4 7

ovirt-dr generate
by Colin Coe 12 Apr '22

12 Apr '22

Hi all I'm trying to run ovirt-dr generate but its failing: /usr/share/ansible/collections/ansible_collections/redhat/rhv/roles/disaster_recovery/files/ovirt-dr generate Log file: '/tmp/ovirt-dr-1649673243333.log' [Generate Mapping File] Connection to setup has failed. Please check your credentials: URL: https://server.fqdn/ovirt-engine/api user: admin@internal CA file: ./ca.pem [Generate Mapping File] Failed to generate var file. When I examine the log file: 2022-04-11 18:34:03,332 INFO Start generate variable mapping file for oVirt ansible disaster recovery 2022-04-11 18:34:03,333 INFO Site address: https://server.fqdn/ovirt-engine/api username: admin@internal password: ******* ca file location: ./ca.pem output file location: ./disaster_recovery_vars.yml ansible play location: ./dr_play.yml 2022-04-11 18:34:03,343 ERROR Connection to setup has failed. Please check your credentials: URL: https://server.fqdn/ovirt-engine/api user: admin@internal CA file: ./ca.pem 2022-04-11 18:34:03,343 ERROR Error: Error while sending HTTP request: (60, 'SSL certificate problem: unable to get local issuer certificate') 2022-04-11 18:34:03,343 ERROR Failed to generate var file. My suspicion is that the script doesn't like third party certs. Has anyone got this working with third party certs? If so, what did you need to do? Thanks

4 4

Couldn't connect to VDSM within 60 seconds
by pasquale.borrelli＠synlab.it 11 Apr '22

11 Apr '22

Hi, we have 3 hosts and a self-hosted engine VM (ovirt version 4.4.). After rebooting all the hosts, we are unable to start the VM hosted-engine. In particular, the output of 'hosted-engine --vm-start' is as follows: "The hosted engine configuration has not been retrieved from shared storage yet, for more details please check sanlock status." We checked the sanlock, ovirt-ha-agent and broker status but all are "active (running)". Checking the log files, all share the common error "RuntimeError: Couldn't connect to VDSM within 60 second", returned in loop. In the vdsm.log we found this error: " 2022-04-05 16:20:11,786+0200 INFO (periodic/0) [vdsm.api] START repoStats(domains=()) from=internal, task_id=8541000f-e7fd-4b59-8ae6-522c87538688 (api:48) 2022-04-05 16:20:11,786+0200 INFO (periodic/0) [vdsm.api] FINISH repoStats return={} from=internal, task_id=8541000f-e7fd-4b59-8ae6-522c87538688 (api:54) 2022-04-05 16:20:11,789+0200 WARN (periodic/0) [root] Failed to retrieve Hosted Engine HA info, is Hosted Engine setup finished? (api:168) " We tried googling to resolve this issue but, unfortunately, unsuccessfully. Can someone help us to solve our critical issue? Bests, Pasquale

4 9

Recall: Ovirt 4.4.10 lab unstable on ESXi
by Mohamed Roushdy 11 Apr '22

11 Apr '22

Mohamed Roushdy would like to recall the message, "Ovirt 4.4.10 lab unstable on ESXi".

1 0

Ovirt 4.4.10 lab unstable on ESXi
by Mohamed Roushdy 11 Apr '22

11 Apr '22

Hello, I’m used to having a nested-ESXi on another ESXi, but we are testing Ovirt these days, and we are facing a strange behavior with the engine VM. I have a hyper-converged Ovirt cluster with a hosted-engine, and whenever I reboot/shutdown one of the nodes for testing (a node that is not hosting the engine VM of course) the engine goes crazy and too slow, and starts losing network connecting to the remaining (healthy) nodes in the cluster, and I can hardly SSH into it. Ping also has too many drops while another node is down. Once that faulty node is up again the engine works very fine, but this is really limiting my ability to make further Ovirt HA tests before moving to production. I though maybe the promiscuous mode on the physical host causes this, but never faced this with nester-virtualization with VMware, and turning-off promiscuous mode isn’t an option either… what do you think please? Mohamed Roushdy Team Member – Systems Administrator M: +31 61 55 94 300 [signature_514057058]<https://peopleintouch.com/>[signature_1294661742]<https://www.linkedin.com/authwall?trk=bf&trkInfo=AQGK3xaGp-v5DAAAAX16b8yY54…>

1 0

Ovirt 4.4 - (Restore from 4.3): The provided authorization grant for the auth code has expired. (all Users)
by fabian.mohren＠qbeyond.de 11 Apr '22

11 Apr '22

Hi, we install ovirt 4.4 on a fresh Redhat 8.5 Installation. Next Restore the oVirt Backup (https://www.ovirt.org/documentation/upgrade_guide/#Remote_Upgrading_from_4-3) We use a external Certificate.I copy all certs/key from old installation to the new Manager. No matter with which user I log in - the same error message always appears. Also create a new user - had no success. Same error message Unfortunately there is nothing new in the logfile - except exactly this message. Setting the log level to "DEBUG" for all services did not bring any new or clearer error messages. The time is set correctly - this can almost not be the cause. Unfortunately I have no idea what the cause is and how I can solve this - I hope you have another idea. Thanks & many greetings

4 8

VM failed to start when host's network is down
by lizhijian＠fujitsu.com 08 Apr '22

08 Apr '22

Post again after subscribing the mail list. Hi guys I have an all in one ovirt environment which node installed both vdsm and ovirt-engine. I have setup the ovirt environment and it could work well. For some reasons, i have to use this ovirt with node's networking down(i unplugged the network cable) In such case, I noticed that i cannot start a VM anymore. I wonder if there is a configuration switch to enable a ovirt to work with node's networking down ? if not, may i possible to make it work by a easy way ? When i tried to start VM with ovirt API, it responses with: ```bash [root@74d2ab9cb0 ~]# sh start.sh <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <action> <async>false</async> <fault> <detail>[Cannot run VM. Unknown Data Center status.]</detail> <reason>Operation Failed</reason> </fault> <status>failed</status> </action> [root@74d2ab9cb0 ~]# sh start.sh <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <action> <async>false</async> <fault> <detail>[Cannot run VM. Unknown Data Center status.]</detail> <reason>Operation Failed</reason> </fault> <status>failed</status> </action> [root@74d2ab9cb0 ~]# ``` Attached the vdsm and ovirt-engine Thanks Zhijian

2 1

Wait for the engine to come up on the target vm
by Vladimir Belov 08 Apr '22

08 Apr '22

I'm trying to deploy oVirt from a self-hosted engine, but at the last step I get an engine startup error. [ INFO ] TASK [Wait for the engine to come up on the target VM] [ ERROR ] fatal: [localhost]: FAILED! => {"attempts": 120, "changed": true, "cmd": ["hosted-engine", "--vm-status", "--json"], "delta": "0:00:00.181846", "end": "2022-03-28 15:41:28.853150", "rc": 0, "start": "2022-03-28 15:41:28.671304", "stderr": "", "stderr_lines": [], "stdout": "{\"1\": {\"conf_on_shared_storage\": true, \"live-data\": true, \"extra\": \"metadata_parse_version=1\\nmetadata_feature_version=1\\ntimestamp=5537 (Mon Mar 28 15:41:20 2022)\\nhost-id=1\\nscore=3400\\nvm_conf_refresh_time=5537 (Mon Mar 28 15:41:20 2022)\\nconf_on_shared_storage=True\\nmaintenance=False\\nstate=EngineStarting\\nstopped=False\\n\", \"hostname\": \"v2.test.ru\", \"host-id\": 1, \"engine-status\": {\"reason\": \"failed liveliness check\", \"health\": \"bad\", \"vm\": \"up\", \"detail\": \"Up\"}, \"score\": 3400, \"stopped\": false, \"maintenance\": false, \"crc32\": \"4d2eeaea\", \"local_conf_timestamp\": 5537, \"host-ts\": 5537}, \"global_maintenance\": false}", "stdout_lines": ["{\"1\": {\"conf_on_shared_storage\": true, \"live-data\": true, \"extra\": \"metadata_parse_version=1\\nmetadata_feature_version=1\\ntimestamp=5537 (Mon Mar 28 15:41:20 2022)\\nhost-id=1\\nscore=3400\\nvm_conf_refresh_time=5537 (Mon Mar 28 15:41:20 2022)\\nconf_on_shared_storage=True\\nmaintenance=False\\nstate=EngineStarting\\nstopped=False\\n\", \"hostname\": \"v2.test.ru\", \"host-id\": 1, \"engine-status\": {\"reason\": \"failed liveliness check\", \"health\": \"bad\", \"vm\": \"up\", \"detail\": \"Up\"}, \"score\": 3400, \"stopped\": false, \"maintenance\": false, \"crc32\": \"4d2eeaea\", \"local_conf_timestamp\": 5537, \"host-ts\": 5537}, \"global_maintenance\": false}"]} Аfter the installation is completed, the condition of the engine is as follows: Engine status: {"reason": "failed liveliness check", "health": "bad", "vm": "up", "detail": "Up"} After reading the vdsm.logs, I found that qemu-guest-agent failed to connect to the engine for some reason. Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 5400, in qemuGuestAgentShutdown self._dom.shutdownFlags(libvirt.VIR_DOMAIN_SHUTDOWN_GUEST_AGENT) File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line 98, in f ret = attr(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", line 130, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python2.7/site-packages/libvirt.py", line 2517, in shutdownFlags if ret == -1: raise libvirtError ('virDomainShutdownFlags() failed', dom=self) libvirtError: Guest agent is not responding: QEMU guest agent is not connected During the installation phase, qemu-guest-agent on the guest VM is running. Setting a temporary password (hosted-engine --add-console-password --password) and connecting via VNC also failed. Using "hosted-engine --console" also failed to connect The engine VM is running on this host Connected to HostedEngine domain Escaping character: ^] error: internal error: character device <null> not found The network settings are configured using static addressing, without DHCP. It seems to me that this is due to the fact that the engine receives an IP address that does not match the entry in /etc/hosts, but I do not know how to fix it. Any help is welcome, I will provide the necessary logs. Thanks

3 2

Gluster storage and TRIM VDO
by Oleh Horbachov 08 Apr '22

08 Apr '22

Hello everyone. I have a Gluster distributed replication cluster deployed. The cluster - store for ovirt. For bricks - VDO over a raw disk. When discarding via 'fstrim -av' the storage hangs for a few seconds and the connection is lost. Does anyone know the best practices for using TRIM with VDO in the context of ovirt? ovirt - v4.4.10 gluster - v8.6

2 3

Mac addresses pool issues
by Nicolas MAIRE 08 Apr '22

08 Apr '22

Hi, We're encountering some issues on one of our production clusters running oVirt 4.2. We've had an incident with the engine's database a few weeks back that we were able to recover from, however since then we've been having a bunch of weird issues, mostly around MACs. It started off with the engine being unable to find a free MAC when creating a VM, despite there being significantly less virtual interfaces (around 250) than the total number of MACs in the default pool (default configuration, so 65536 addresses) and escalated into creating duplicate MACs (despite the pool not allowing it) and now we can't even modify the pool or remove VMs (since deleting the attached vnics fail), so we're kinda stuck with a cluster that has running VMs which are fine as long as we don't touch them, but on which we can't create new VMs (or modify the existing ones). In the engine's log we can see that we've had an "Unable to initialize MAC pool due to existing duplicates (Failed with error MAC_POOL_INITIALIZATION_FAILED and code 5010)" error when we tried to reconfigure the pool this morning (see the full error stack here : https://pastebin.com/6bKMfbLn) and now whenever we try to delete a VM or reconfigure the pool we have a 'Pool for id="58ca604b-017d-0374-0220-00000000014e" does not exist' error (see the full error stack here: https://pastebin.com/Huy91iig) but, if we check the engine's mac_pool table we can see that it's there : engine=# select * from mac_pools; id | name | description | allow_duplicate_mac_addresses | default_pool --------------------------------------+---------+------------------+-------------------------------+-------------- 58ca604b-017d-0374-0220-00000000014e | Default | Default MAC pool | f | t (1 row) engine=# select * from mac_pool_ranges; mac_pool_id | from_mac | to_mac --------------------------------------+-------------------+------------------- 58ca604b-017d-0374-0220-00000000014e | 56:6f:1a:1a:00:00 | 56:6f:1a:1a:ff:ff (1 row) I found this bugzilla that seems to somehow apply https://bugzilla.redhat.com/show_bug.cgi?id=1554180 however I don't really know how to "reinitialize engine", especially considering that the mac pool was not configured to allow duplicate macs to begin with, and I've no idea what the impact of that reinitialization would be on the current VMs. I'm quite new to oVirt (only been using it for one year) so any help would be greatly appreciated.

3 2

How to create User in web ui?
by jihwahn1018＠naver.com 08 Apr '22

08 Apr '22

Hello, in ovirt guide, we need to create user by ovirt-aaa-jdbc-tool and we can add only users created by ovirt-aaa-jdbc-tool. Is there any way to create user in web ui? and if not, is there any reason to block creating user in web ui? Thank you.

2 1

Duplicate nameserver in Host causing unassigned state when adding. possible bug?
by ravi k 08 Apr '22

08 Apr '22

Hello all, We are running oVirt 4.3.10.4-1.0.22.el7. I noticed an interesting issue or a possible bug yesterday. I was trying to add a host when I noticed that it was failing and the host status was going into 'unassigned' state. I saw the below error in the engine log. /var/log/ovirt-engine/engine.log 2022-04-07 15:17:07,739+04 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.CollectVdsNetworkDataAfterInstallationVDSCommand] (EE-ManagedThreadFactory-engine-Thread-24723) [4917a348] HostName = olvsrv005u 2022-04-07 15:17:07,739+04 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.CollectVdsNetworkDataAfterInstallationVDSCommand] (EE-ManagedThreadFactory-engine-Thread-24723) [4917a348] Failed in 'CollectVdsNetworkDataAfterInstallationVDS' method, for vds: 'olvsrv005u'; host: '10.119.6.232': CallableStatementCallback; SQL [{call insertnameserver(?, ?, ?)}ERROR: duplicate key value violates unique constraint "name_server_pkey" Detail: Key (dns_resolver_configuration_id, address)=(459b68e6-b684-4cf6-8834-755249a6bd3a, 10.119.10.212) already exists. Where: SQL statement "INSERT INTO name_server( address, position, dns_resolver_configuration_id) VALUES ( v_address, v_position, v_dns_resolver_configuration_id)" PL/pgSQL function insertnameserver(uuid,character varying,smallint) line 3 at SQL statement; nested exception is org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "name_server_pkey" Detail: Key (dns_resolver_configuration_id, address)=(459b68e6-b684-4cf6-8834-755249a6bd3a, 10.119.10.212) already exists. Then I checked the resolv.conf on the host [root@olvsrv005u ~]# cat /etc/resolv.conf # Version: 1.00 search uat.abc.com nameserver 10.119.10.212 nameserver 10.119.10.212 Well, ideally it's of no use having duplicate nameserver. But it was not affecting the functionality of the host. However it was failing the addition of the host, probably because it was failing when updating the host's config in the engine DB due to the duplicate nameserver. To test this I commented the duplicate value and checked. The host is now added successfully. 2022-04-07 15:33:37,301+04 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetHardwareInfoAsyncVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [] START, GetHardwareInfoAsyncVDSCommand(HostName = olvsrv005u, VdsIdA ndVdsVDSCommandParametersBase:{hostId='459b68e6-b684-4cf6-8834-755249a6bd3a', vds='Host[olvsrv005u,459b68e6-b684-4cf6-8834-755249a6bd3a]'}), log id: 52e7ec52 2022-04-07 15:33:37,301+04 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetHardwareInfoAsyncVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [] FINISH, GetHardwareInfoAsyncVDSCommand, return: , log id: 52e7ec52 2022-04-07 15:33:37,356+04 INFO [org.ovirt.engine.core.bll.SetNonOperationalVdsCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [3de72cb7] Running command: SetNonOperationalVdsCommand internal: true. Entities affected : ID: 459b68e6-b684-4cf6-8834-755249a6bd3a Type: VDS 2022-04-07 15:33:37,360+04 INFO [org.ovirt.engine.core.vdsbroker.SetVdsStatusVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [3de72cb7] START, SetVdsStatusVDSCommand(HostName = olvsrv005u, SetVdsStatusVDSCommandPa rameters:{hostId='459b68e6-b684-4cf6-8834-755249a6bd3a', status='NonOperational', nonOperationalReason='NETWORK_UNREACHABLE', stopSpmFailureLogged='false', maintenanceReason='null'}), log id: 1bfc90a3 2022-04-07 15:33:37,363+04 INFO [org.ovirt.engine.core.vdsbroker.SetVdsStatusVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [3de72cb7] FINISH, SetVdsStatusVDSCommand, return: , log id: 1bfc90a3 2022-04-07 15:33:37,404+04 ERROR [org.ovirt.engine.core.bll.SetNonOperationalVdsCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [3de72cb7] Host 'olvsrv005u' is set to Non-Operational, it is missing the following networks Should I raise this as a bug? I'm of the opinion that it should be because if it's not breaking the host's functionality then it should be ok. Regards, Ravi

2 1

Welcome to oVirt 4.5.0 Beta test day!
by Sandro Bonazzola 07 Apr '22

07 Apr '22

Hi, 4.5.0 Beta was released yesterday! As for oVirt 4.5 Alpha test day we have a trello board at https://trello.com/b/3FZ7gdhM/ovirt-450-test-day . If you have troubles accessing the trello board please let me know. A release management draft page has been created at: https://www.ovirt.org/release/4.5.0/ If you're willing to help testing the release during the test days please join the oVirt development mailing list at https://lists.ovirt.org/archives/list/devel@ovirt.org/ and report your feedback there. Please join the trello board for sharing what you're going to test so others can focus on different areas not covered by your test. If you don't want to register to trello, please share on the oVirt development mailing list and we'll add it to the board. The board is publicly visible also to non-registered users. Instructions for installing oVirt 4.5.0 Beta for testing have been added to the release page https://www.ovirt.org/release/4.5.0/ and to relevant documentation sections on the oVirt website. Professional Services, Integrators and Backup vendors: please run a test session against your additional services, integrated solutions, downstream rebuilds, backup solution accordingly. If you're not listed here: https://ovirt.org/community/user-stories/users-and-providers.html consider adding your company there. If you're willing to help updating the localization for oVirt 4.5.0 please follow https://ovirt.org/develop/localization.html If you're willing to help promoting the oVirt 4.5.0 release you can submit your banner proposals for the oVirt home page and for the social media advertising at https://github.com/oVirt/ovirt-site/issues The current banner proposal is here: https://github.com/oVirt/ovirt-site/issues/2797#issuecomment-1084842431 As an alternative please consider submitting a case study as in https://ovirt.org/community/user-stories/user-stories.html Feature owners: please share recordings of the presentation of your feature for oVirt Youtube channel: https://www.youtube.com/c/ovirtproject If you have some new feature requiring community feedback / testing please add your case under the "Test looking for volunteer" section. Do you want to contribute to getting ready for this release? Read more about oVirt community at https://ovirt.org/community/ and join the oVirt developers https://ovirt.org/develop/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

2 2

10Gbps iSCSI Bonding issue on HPE Gen10 server
by michael.li＠hactlsolutions.com 07 Apr '22

07 Apr '22

Hi support, I have an issue on configure 10Gbps iSCSI port on HPE Gen 10 Server in oVirt 4.4.10. The behavior as below 1. Two 10Gbps ports are running on 10000Mb/s and up verified ethtool 2. configure iSCSI active-standby bonding (bond0) on oVirt manager. 3. When reboot the server, one of port is down (no carrier). Temp. solution: I manually up the port by "nmcli conn up "port name" to resume bonding. Anyone know how to resolve it? Let me know for any information needed to investigate. I enclose my configuration as below. [root@ovrphv04 network-scripts]# cat /proc/net/bonding/bond0 Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011) Bonding Mode: fault-tolerance (active-backup) Primary Slave: None Currently Active Slave: ens1f1np1 MII Status: up MII Polling Interval (ms): 100 Up Delay (ms): 0 Down Delay (ms): 0 Peer Notification Delay (ms): 0 Slave Interface: ens1f1np1 MII Status: up Speed: 10000 Mbps Duplex: full Link Failure Count: 0 Permanent HW addr: f4:03:43:e7:da:38 Slave queue ID: 0 Slave Interface: ens4f1np1 MII Status: down Speed: Unknown Duplex: Unknown Link Failure Count: 0 Permanent HW addr: f4:03:43:e7:d7:68 Slave queue ID: 0 [root@ovrphv04 network-scripts]# ip link |grep ens1f1np1 7: ens1f1np1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 9000 qdisc mq master bond0 state UP mode DEFAULT group default qlen 1000 [root@ovrphv04 network-scripts]# ip link |grep ens4f1np1 10: ens4f1np1: <NO-CARRIER,BROADCAST,MULTICAST,SLAVE,UP> mtu 9000 qdisc mq master bond0 state DOWN mode DEFAULT group default qlen 1000 [root@ovrphv04 network-scripts]# cat ifcfg-ens1f1np1 TYPE=Ethernet MTU=9000 SRIOV_TOTAL_VFS=0 NAME=ens1f1np1 UUID=6072cd16-a45a-433e-bc9e-817557706fb2 DEVICE=ens1f1np1 ONBOOT=yes LLDP=no ETHTOOL_OPTS="speed 10000 duplex full autoneg on" MASTER_UUID=77e39d1b-cf14-406f-87f6-fe954fde40f0 MASTER=bond0 SLAVE=yes [root@ovrphv04 network-scripts]# cat ifcfg-ens4f1np1 TYPE=Ethernet MTU=9000 SRIOV_TOTAL_VFS=0 NAME=ens4f1np1 UUID=cf6b28e7-8fdb-472f-bbe9-0eecc95c5c3c DEVICE=ens4f1np1 ONBOOT=yes LLDP=no ETHTOOL_OPTS="speed 10000 duplex full autoneg on" MASTER_UUID=77e39d1b-cf14-406f-87f6-fe954fde40f0 MASTER=bond0 SLAVE=yes [root@ovrphv04 network-scripts]# cat ifcfg-bond0 BONDING_OPTS="mode=active-backup miimon=100" TYPE=Bond BONDING_MASTER=yes HWADDR= MTU=9000 PROXY_METHOD=none BROWSER_ONLY=no BOOTPROTO=none IPADDR=172.26.14.139 PREFIX=24 DEFROUTE=yes DHCP_CLIENT_ID=mac IPV4_FAILURE_FATAL=no IPV6_DISABLED=yes IPV6INIT=no DHCPV6_DUID=ll DHCPV6_IAID=mac IPV6_DEFROUTE=yes IPV6_FAILURE_FATAL=no NAME=bond0 UUID=77e39d1b-cf14-406f-87f6-fe954fde40f0 DEVICE=bond0 ONBOOT=yes AUTOCONNECT_SLAVES=yes LLDP=no

2 1

Re: [Ext.] Re: Re: Storage Design Question - GlusterFS
by Strahil Nikolov 07 Apr '22

07 Apr '22

This one shows if a setting differs from the defaults. As I don't know the default (you can see it with gluster volume set help), you can check via gluster volume get <VOLUME> cluster.lookup-optimize. best Regards,Strahil Nikolov On Wed, Apr 6, 2022 at 16:50, Mohamed Roushdy<mohamedroushdy(a)peopleintouch.com> wrote:  Well, I think it’s not configured. Here’s the config: Volume Name: data Type: Replicate Volume ID: 06cac4b9-3d6a-410b-93e6-4f876bbfcdd1 Status: Started Snapshot Count: 0 Number of Bricks: 1 x 3 = 3 Transport-type: tcp Bricks: Brick1: server1:/gluster/data/brick1 Brick2: server2:/gluster/data/brick1 Brick3: server3:/gluster/data/brick1 Options Reconfigured: features.shard-block-size: 512MB storage.owner-gid: 36 storage.owner-uid: 36 user.cifs: off features.shard: on cluster.shd-wait-qlength: 10000 cluster.shd-max-threads: 8 cluster.locking-scheme: granular cluster.data-self-heal-algorithm: full cluster.server-quorum-type: server cluster.quorum-type: auto cluster.eager-lock: enable network.remote-dio: enable performance.low-prio-threads: 32 performance.stat-prefetch: off performance.io-cache: off performance.read-ahead: off performance.quick-read: off transport.address-family: inet performance.readdir-ahead: on nfs.disable: on From: Strahil Nikolov <hunter86_bg(a)yahoo.com> Sent: Wednesday, April 6, 2022 1:42 PM To: Mohamed Roushdy <mohamedroushdy(a)peopleintouch.com>; users(a)ovirt.org Subject: [Ext.] Re: [ovirt-users] Re: Storage Design Question - GlusterFS Can you check of the volume had 'cluster.lookup-optimize' enabled (on)? Most probably it caused your problems . For details check [1] [2] Best Regards, Strahil Nikolov [1] https://access.redhat.com/solutions/5896761 [2] https://lists.ovirt.org/archives/list/users@ovirt.org/thread/BEYIM56H2Q3PVF… On Wed, Apr 6, 2022 at 10:42,mohamedroushdy@peopleintouch.com <mohamedroushdy(a)peopleintouch.com> wrote: Thanks a lot for your answer. The thing is, we had data lose disaster last month, and that's why we've decided to deploy a cmmpletely new environment for taht pirpose, and let me tell you what happened. We are using Ovirt 4.1 with Gluster 3.8 for our production, and the cluster contains five hosts, three of them are storage servers. I've added two more hosts, and manually via CLI (as I couldn't do this via GUI) created a new brick on one of the newely added nodes,and expanded the volume with the parameter "replica = 4 as it was refused to expand without setting the replica count. The action was successful for both the engine vol, and the data vol, however, few minutes later we've found that the disk sizes (images) of the existing VMs got shrunk and lost all of the data, and we had to recover from backup.. We can't afford another downtime (another disaster I mean), that's why I'm so maticulous about what to do next, so, is there a good guide around for the architecure and sizing? Thank you, _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/G4LS3BEUHYFS2…

1 0

oVirt 4.5.0 Beta is now available for testing
by Sandro Bonazzola 07 Apr '22

07 Apr '22

oVirt 4.5.0 Beta is now available for testing The oVirt project is excited to announce the availability of oVirt 4.5.0 Beta release for testing , as of April 6th, 2022. This release unleashes an altogether more powerful and flexible open source virtualization solution that encompasses hundreds of individual changes and a wide range of enhancements across the engine, storage, network, user interface, and analytics on top of oVirt 4.4. Important notes before you try it Please note this is a Beta release. The oVirt Project makes no guarantees as to its suitability or usefulness. This pre-release must not be used in production, and it is not feature complete. In particular, please note that upgrades from 4.4 and future upgrades from this beta to the final 4.5 release from this version are not supported. Some of the features included in oVirt 4.5.0 Beta require content that will be available in RHEL 8.6 and derivatives which are currently included in CentOS Stream 8. Known issues After BETA compose finished a few issues have been found: - Cluster upgrade is not working, fix in progress: https://github.com/oVirt/ovirt-ansible-collection/pull/474 - Hosted Engine setup fails on Keycloak configuration, fix in progress: https://github.com/oVirt/ovirt-ansible-collection/pull/475 An async beta refresh will be issued as soon as the fix will be ready. Documentation Be sure to follow instructions for oVirt 4.5! - If you want to try oVirt as quickly as possible, follow the instructions on the Download <https://ovirt.org/download/> page. - For complete installation, administration, and usage instructions, see the oVirt Documentation <https://ovirt.org/documentation/>. - For upgrading from a previous version, see the oVirt Upgrade Guide <https://ovirt.org/documentation/upgrade_guide/>. - For a general overview of oVirt, see About oVirt <https://ovirt.org/community/about.html>. What’s new in oVirt 4.5.0 Beta Release? This release is available now on x86_64 architecture for: - CentOS Stream 8 - RHEL 8.6 Beta and derivatives This release supports Hypervisor Hosts on x86_64: - oVirt Node NG (based on CentOS Stream 8) - CentOS Stream 8 - RHEL 8.6 Beta and derivatives Builds are also available for ppc64le and aarch64. Experimental builds for CentOS Stream 9 are also provided for Hypervisor Hosts. Security fixes included in oVirt 4.5 compared to latest oVirt 4.4.10: - CVE-2021-33502 <https://access.redhat.com/security/cve/CVE-2021-33502> [moderate] ovirt-web-ui: normalize-url: ReDoS for data URLs - CVE-2022-0207 <https://access.redhat.com/security/cve/CVE-2022-0207> [low] vdsm: disclosure of sensitive values in log files - CVE-2022-24302 <https://access.redhat.com/security/cve/CVE-2022-24302> [moderate] python-paramiko: Race condition in the write_private_key_file function - CVE-2021-41182 <https://access.redhat.com/security/cve/CVE-2021-41182> [moderate] jquery-ui: XSS in the altField option of the datepicker widget [ovirt-engine] - CVE-2021-41183 <https://access.redhat.com/security/cve/CVE-2021-41183> [moderate] jquery-ui: XSS in *Text options of the datepicker widget [ovirt-engine] - CVE-2021-41184 <https://access.redhat.com/security/cve/CVE-2021-41184> [moderate] jquery-ui: XSS in the 'of' option of the .position() util [ovirt-engine] - CVE-2021-33502 <https://access.redhat.com/security/cve/CVE-2021-33502> [moderate] ovirt-engine-ui-extensions: normalize-url: ReDoS for data URLs - CVE-2021-23425 <https://access.redhat.com/security/cve/CVE-2021-23425> [moderate] ovirt-engine-ui-extensions: nodejs-trim-off-newlines: ReDoS via string processing - CVE-2021-3807 <https://access.redhat.com/security/cve/CVE-2021-3807> [moderate] ovirt-engine-ui-extensions: nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes oVirt Node includes updated packages with fixes for: - CVE-2022-25235 <https://access.redhat.com/security/cve/CVE-2022-25235> [important] expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 <https://access.redhat.com/security/cve/CVE-2022-25315> [important] expat: Integer overflow in storeRawNames() - CVE-2022-25236 <https://access.redhat.com/security/cve/CVE-2022-25236> [important] expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2021-4083 <https://access.redhat.com/security/cve/CVE-2021-4083> [important] kernel: fget: check that the fd still exists after getting a ref to it - CVE-2022-0847 <https://access.redhat.com/security/cve/CVE-2022-0847> [important] kernel: improper initialization of the "flags" member of the new pipe_buffer - CVE-2022-0778 <https://access.redhat.com/security/cve/CVE-2022-0778> [important] openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates Some of the RFEs with high user impact are listed below: - 1782077 [RFE] More Flexible RHV CPU Allocation Policy with HyperThreading - 1922977 [RFE] VM shared disks are not part of the OVF_STORE - 977778 [RFE] - Mechanism for converting disks for non-running VMS - 1926625 [RFE] How to enable HTTP Strict Transport Security (HSTS) on Apache HTTPD for Red Hat Virtualization Manager - 2029830 [RFE] Hosted engine should accept OpenSCAP profile name instead of bool - 1933555 [RFE] Release python-ovirt-engine-sdk4 package on RHEL 9 - 1782056 [RFE] Integration of built-in ipsec feature in RHV/RHHI-V with OVN - 1849169 [RFE] add virtualCPUs/physicalCPUs ratio property to evenly_distributed policy - 1624015 [RFE] Expose Console Options and Console invocation via API - 1998255 [RFE] [UI] Add search box for vNIC Profiles in RHVM WebUI on the main vNIC profiles tab - 1987121 [RFE] Support enabling nVidia Unified Memory on mdev vGPU - 2058177 [RFE] Include the package nvme-cli on virtualization hosts - 1927985 [RFE] Speed up export-to-OVA on NFS by aligning loopback device offset - 2021217 [RFE] Windows 2022 support - 1975720 [RFE] Huge VMs require an additional migration parameter - 1979277 [RFE] Migration - Apply automatic CPU and NUMA pinning based on the migrated host - 1986775 [RFE] introduce support for CentOS Stream 9 on oVirt releases - 1990462 [RFE] Add user name and password to ELK integration - 1838089 [RFE] Please allow placing domain in maintenance mode with suspended VM - 1913389 [CBT] [RFE] Provide VDSM with more information on scratch disks Some of the Bugs with high user impact are listed below: - 1986732 ovirt-ha services cannot set the LocalMaintenance mode in the storage metadata and are in a restart loop - 2035051 removing nfs-utils cause ovirt-engine removal due to cinderlib dep tree - 2054745 Setting SD to maintenance fails and turns the SD to inactive mode as a result - 1878724 vdsm-tool configure is failing with error ”dependency job for libvirtd.service failed” - 2024698 build failure in copr - 2057958 oVirt Node 4.5 el9 iso doesn’t boot anymore - 2043146 Expired /etc/pki/vdsm/libvirt-vnc/server-cert.pem certificate is skipped during Enroll Certificate - 2040402 unable to use --log-size=0 option - 1932149 [blocked] Create hosted_storage with the correct storage_format based on the Data-Center level of the backup - 2066285 Copying from an Image domain to a Managed Block Storage domain fails - 1986485 otopi uses deprecated API platform.linux_distribution which has been removed in Python 3.7 and later. - 1986728 ovirt-log-collector uses deprecated API platform.linux_distribution which has been removed in Python 3.7 and later. - 2066628 [UI] UI exception when updating or enabling number of VFs via the webadmin - 1986731 ovirt-engine uses deprecated API platform.linux_distribution which has been removed in Python 3.7 and later. - 2024161 Penalizing score by 1000 due to cpu load is not canceled after load decreasing to 0 - 2019869 Local disk is not bootable when the VM is imported from OVA - 1857815 Copying HE-VM's disk to iSCSI storage volume, during deployment of 4.4 HE takes too long. - 2065152 Implicit CPU pinning for NUMA VMs destroyed because of invalid CPU policy - 2069658 Unable to deploy HE, couldn't resolve module/action 'firewalld'. - 2070184 Hybrid Backup - Specifying disks for backup doesn’t work, backup is created for all disks oVirt Node has been updated, including: - oVirt 4.5.0 beta: https://www.ovirt.org/release/4.5.0/ - GlusterFS 10.1: https://docs.gluster.org/en/main/release-notes/10.1/ - RDO OpenStack Yoga pre-release: https://releases.openstack.org/yoga/index.html - OVS 2.15 - Ansible Core 2.12.3: https://github.com/ansible/ansible/blob/stable-2.12/changelogs/CHANGELOG-v2… - CentOS Stream 8 latest updates - Full list of changes compared to oVirt Node 4.5.0 Alpha: ovirt-node-ng-image-4.5.0_alpha ovirt-node-ng-image-4.5.0_beta NetworkManager 1.36.0-2.el8 1.37.2-1.el8 NetworkManager-config-server 1.36.0-2.el8 1.37.2-1.el8 NetworkManager-libnm 1.36.0-2.el8 1.37.2-1.el8 NetworkManager-ovs 1.36.0-2.el8 1.37.2-1.el8 NetworkManager-team 1.36.0-2.el8 1.37.2-1.el8 NetworkManager-tui 1.36.0-2.el8 1.37.2-1.el8 ansible 2.9.27-2.el8 ansible-collection-ansible-netcommon 2.2.0-3.2.el8 ansible-collection-ansible-posix 1.3.0-1.2.el8 ansible-collection-ansible-utils 2.3.0-2.2.el8 ansible-core 2.12.3-1.el8 audispd-plugins 3.0.7-2.el8 3.0.7-3.el8 audit 3.0.7-2.el8 3.0.7-3.el8 audit-libs 3.0.7-2.el8 3.0.7-3.el8 centos-gpg-keys 8-4.el8 8-6.el8 centos-release-gluster10 1.0-1.el8s centos-release-ovirt45 8.6-1.el8 8.6-3.el8s centos-stream-repos 8-4.el8 8-6.el8 cockpit-ovirt-dashboard 0.15.1-1.el8 0.16.0-1.el8 dmidecode 3.3-1.el8 3.3-4.el8 dnf 4.7.0-7.el8 4.7.0-8.el8 dnf-data 4.7.0-7.el8 4.7.0-8.el8 dnf-plugins-core 4.0.21-10.el8 4.0.21-11.el8 emacs-filesystem 26.1-7.el8 expat 2.2.5-5.el8 2.2.5-8.el8 gdisk 1.0.3-8.el8 1.0.3-9.el8 git 2.31.1-2.el8 git-core-doc 2.31.1-2.el8 glibc 2.28-189.el8 2.28-196.el8 glibc-common 2.28-189.el8 2.28-196.el8 glibc-langpack-en 2.28-189.el8 2.28-196.el8 gluster-ansible-cluster 1.0.1-2.el8 1.0-4.el8 gluster-ansible-features 1.0.5-6.el8 1.0.5-12.el8 gluster-ansible-infra 1.0.4-15.el8 1.0.4-20.el8 gluster-ansible-maintenance 1.0.1-10.el8 1.0.1-12.el8 gluster-ansible-repositories 1.0.1-3.el8 1.0.1-5.el8 gluster-ansible-roles 1.0.5-21.el8 1.0.5-26.el8 ipa-client 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 ipa-client-common 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 ipa-common 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 ipa-selinux 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 iproute 5.15.0-3.el8 5.15.0-4.el8 iproute-tc 5.15.0-3.el8 5.15.0-4.el8 iputils 20180629-9.el8 20180629-10.el8 kernel 4.18.0-365.el8 4.18.0-373.el8 kernel-core 4.18.0-365.el8 4.18.0-373.el8 kernel-modules 4.18.0-365.el8 4.18.0-373.el8 kernel-tools 4.18.0-365.el8 4.18.0-373.el8 kernel-tools-libs 4.18.0-365.el8 4.18.0-373.el8 libbabeltrace 1.5.4-3.el8 1.5.4-4.el8 libblkid 2.32.1-34.el8 2.32.1-35.el8 libdnf 0.63.0-7.el8 0.63.0-8.el8 libfdisk 2.32.1-34.el8 2.32.1-35.el8 libipa_hbac 2.6.1-2.el8 2.6.2-3.el8 libmount 2.32.1-34.el8 2.32.1-35.el8 libnfsidmap 2.3.3-50.el8 2.3.3-51.el8 libsmartcols 2.32.1-34.el8 2.32.1-35.el8 libsss_autofs 2.6.1-2.el8 2.6.2-3.el8 libsss_certmap 2.6.1-2.el8 2.6.2-3.el8 libsss_idmap 2.6.1-2.el8 2.6.2-3.el8 libsss_nss_idmap 2.6.1-2.el8 2.6.2-3.el8 libsss_simpleifp 2.6.1-2.el8 2.6.2-3.el8 libsss_sudo 2.6.1-2.el8 2.6.2-3.el8 libuuid 2.32.1-34.el8 2.32.1-35.el8 libwbclient 4.15.5-4.el8 4.15.5-5.el8 nfs-utils 2.3.3-50.el8 2.3.3-51.el8 nmstate 1.2.1-1.el8 1.3.0-0.alpha.20220310.el8 nmstate-plugin-ovsdb 1.2.1-1.el8 1.3.0-0.alpha.20220310.el8 openssl 1.1.1k-5.el8_5 1.1.1k-6.el8 openssl-libs 1.1.1k-5.el8_5 1.1.1k-6.el8 ovirt-ansible-collection 2.0.0-0.6.BETA.el8 2.0.1-1.el8 ovirt-host 4.5.0-1.el8 4.5.0-2.el8 ovirt-host-dependencies 4.5.0-1.el8 4.5.0-2.el8 ovirt-hosted-engine-setup 2.6.1-1.el8 2.6.3-1.el8 ovirt-imageio-client 2.4.1-1.el8 2.4.3-1.el8 ovirt-imageio-common 2.4.1-1.el8 2.4.3-1.el8 ovirt-imageio-daemon 2.4.1-1.el8 2.4.3-1.el8 ovirt-node-ng-image-update-placeholder 4.5.0-2.el8 4.5.0-3.el8 ovirt-node-ng-nodectl 4.4.1-1.el8 4.4.2-1.el8 ovirt-release-host-node 4.5.0-2.el8 4.5.0-3.el8 perl-Error 0.17025-2.el8 perl-Git 2.31.1-2.el8 perl-TermReadKey 2.37-7.el8 platform-python 3.6.8-45.el8 3.6.8-46.el8 procps-ng 3.3.15-6.el8 3.3.15-7.el8 python3-audit 3.0.7-2.el8 3.0.7-3.el8 python3-click 6.7-8.el8 python3-daemon 2.2.4-3.el8 2.2.4-3.2.el8 python3-dnf 4.7.0-7.el8 4.7.0-8.el8 python3-dnf-plugin-versionlock 4.0.21-10.el8 4.0.21-11.el8 python3-dnf-plugins-core 4.0.21-10.el8 4.0.21-11.el8 python3-docutils 0.14-12.module_el8.5.0+761+faacb0fb 0.14-12.2.el8 python3-hawkey 0.63.0-7.el8 0.63.0-8.el8 python3-ipaclient 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 python3-ipalib 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 python3-jmespath 0.9.0-11.el8 0.9.0-11.1.el8 python3-libdnf 0.63.0-7.el8 0.63.0-8.el8 python3-libipa_hbac 2.6.1-2.el8 2.6.2-3.el8 python3-libnmstate 1.2.1-1.el8 1.3.0-0.alpha.20220310.el8 python3-libs 3.6.8-45.el8 3.6.8-46.el8 python3-lockfile 0.12.2-1.el8 0.12.2-1.2.el8 python3-netaddr 0.7.19-8.el8 0.7.19-8.1.1.el8 python3-ovirt-engine-sdk4 4.5.0-1.el8 4.5.1-1.el8 python3-ovirt-node-ng-nodectl 4.4.1-1.el8 4.4.2-1.el8 python3-pbr 5.5.1-1.el8 5.5.1-7.2.el8 python3-perf 4.18.0-365.el8 4.18.0-373.el8 python3-pexpect 4.7.0-4.el8 4.7.0-4.3.el8 python3-ptyprocess 0.5.2-4.el8 0.5.2-4.2.el8 python3-pycurl 7.43.0.2-4.el8 7.43.0.2-4.1.el8 python3-sss 2.6.1-2.el8 2.6.2-3.el8 python3-sss-murmur 2.6.1-2.el8 2.6.2-3.el8 python3-sssdconfig 2.6.1-2.el8 2.6.2-3.el8 python3-syspurpose 1.28.25-1.el8 1.28.28-1.el8 python3-tenacity 6.2.0-1.el8 6.3.1-1.el8 python38 3.8.12-1.module_el8.6.0+929+89303463 python38-asn1crypto 1.2.0-3.module_el8.5.0+742+dbad1979 python38-babel 2.7.0-11.module_el8.6.0+929+89303463 python38-cffi 1.13.2-3.module_el8.5.0+742+dbad1979 python38-cryptography 2.8-3.module_el8.5.0+742+dbad1979 python38-idna 2.8-6.module_el8.5.0+742+dbad1979 python38-jinja2 2.10.3-5.module_el8.6.0+929+89303463 python38-jmespath 0.9.0-11.1.el8 python38-libs 3.8.12-1.module_el8.6.0+929+89303463 python38-markupsafe 1.1.1-6.module_el8.5.0+742+dbad1979 python38-netaddr 0.7.19-8.1.1.el8 python38-ovirt-engine-sdk4 4.5.1-1.el8 python38-ovirt-imageio-client 2.4.3-1.el8 python38-ovirt-imageio-common 2.4.3-1.el8 python38-passlib 1.7.0-5.1.el8 python38-pip-wheel 19.3.1-5.module_el8.6.0+960+f11a9b17 python38-ply 3.11-10.module_el8.5.0+742+dbad1979 python38-pycparser 2.19-3.module_el8.5.0+742+dbad1979 python38-pycurl 7.43.0.2-4.1.el8 python38-pytz 2019.3-3.module_el8.5.0+742+dbad1979 python38-pyyaml 5.4.1-1.module_el8.6.0+929+89303463 python38-resolvelib 0.5.4-5.el8 python38-setuptools 41.6.0-5.module_el8.6.0+929+89303463 python38-setuptools-wheel 41.6.0-5.module_el8.6.0+929+89303463 python38-six 1.12.0-10.module_el8.5.0+742+dbad1979 rsyslog 8.2102.0-7.el8 8.2102.0-8.el8 rsyslog-elasticsearch 8.2102.0-7.el8 8.2102.0-8.el8 rsyslog-mmjsonparse 8.2102.0-7.el8 8.2102.0-8.el8 rsyslog-mmnormalize 8.2102.0-7.el8 8.2102.0-8.el8 rsyslog-openssl 8.2102.0-7.el8 8.2102.0-8.el8 samba-client-libs 4.15.5-4.el8 4.15.5-5.el8 samba-common 4.15.5-4.el8 4.15.5-5.el8 samba-common-libs 4.15.5-4.el8 4.15.5-5.el8 selinux-policy 3.14.3-93.el8 3.14.3-95.el8 selinux-policy-targeted 3.14.3-93.el8 3.14.3-95.el8 sssd-client 2.6.1-2.el8 2.6.2-3.el8 sssd-common 2.6.1-2.el8 2.6.2-3.el8 sssd-common-pac 2.6.1-2.el8 2.6.2-3.el8 sssd-dbus 2.6.1-2.el8 2.6.2-3.el8 sssd-ipa 2.6.1-2.el8 2.6.2-3.el8 sssd-kcm 2.6.1-2.el8 2.6.2-3.el8 sssd-krb5-common 2.6.1-2.el8 2.6.2-3.el8 sssd-tools 2.6.1-2.el8 2.6.2-3.el8 tzdata 2021e-1.el8 2022a-1.el8 util-linux 2.32.1-34.el8 2.32.1-35.el8 vdsm 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-api 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-client 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-common 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-gluster 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-http 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-jsonrpc 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-network 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-python 4.50.0.10-1.el8 4.50.0.11-1.el8 vdsm-yajsonrpc 4.50.0.10-1.el8 4.50.0.11-1.el8 virt-install 3.2.0-3.el8 3.2.0-4.el8 virt-manager-common 3.2.0-3.el8 3.2.0-4.el8 yum 4.7.0-7.el8 4.7.0-8.el8 oVirt Appliance has been updated, including: - oVirt 4.5.0 beta: https://www.ovirt.org/release/4.5.0/ - GlusterFS 10.1: https://docs.gluster.org/en/main/release-notes/10.1/ - RDO OpenStack Yoga pre-release: https://releases.openstack.org/yoga/index.html - OVS 2.15 - Ansible Core 2.12.3: https://github.com/ansible/ansible/blob/stable-2.12/changelogs/CHANGELOG-v2… - CentOS Stream 8 latest updates - Full list of changes compared to oVirt Appliance 4.5.0 Alpha: ovirt-engine-appliance-manifest-rpm-el8.4.5.0_alpha ovirt-engine-appliance-manifest-rpm-el8.4.5.0_beta NetworkManager 1.36.0-2.el8 1.37.2-1.el8 NetworkManager-libnm 1.36.0-2.el8 1.37.2-1.el8 NetworkManager-team 1.36.0-2.el8 1.37.2-1.el8 NetworkManager-tui 1.36.0-2.el8 1.37.2-1.el8 ansible 2.9.27-2.el8 ansible-collection-ansible-netcommon 2.2.0-3.2.el8 ansible-collection-ansible-posix 1.3.0-1.2.el8 ansible-collection-ansible-utils 2.3.0-2.2.el8 ansible-core 2.12.3-1.el8 ansible-runner 2.1.3-1.el8 ansible-runner-service 1.0.7-1.el8 audit 3.0.7-2.el8 3.0.7-3.el8 audit-libs 3.0.7-2.el8 3.0.7-3.el8 centos-gpg-keys 8-4.el8 8-6.el8 centos-release-gluster10 1.0-1.el8s centos-release-ovirt45 8.6-1.el8s 8.6-3.el8s centos-stream-repos 8-4.el8 8-6.el8 dmidecode 3.3-1.el8 3.3-4.el8 dnf 4.7.0-7.el8 4.7.0-8.el8 dnf-data 4.7.0-7.el8 4.7.0-8.el8 dnf-plugins-core 4.0.21-10.el8 4.0.21-11.el8 expat 2.2.5-5.el8 2.2.5-8.el8 gdisk 1.0.3-8.el8 1.0.3-9.el8 git 2.31.1-2.el8 git-core-doc 2.31.1-2.el8 glibc 2.28-189.el8 2.28-196.el8 glibc-common 2.28-189.el8 2.28-196.el8 glibc-gconv-extra 2.28-189.el8 2.28-196.el8 glibc-langpack-en 2.28-189.el8 2.28-196.el8 iproute 5.15.0-3.el8 5.15.0-4.el8 iputils 20180629-9.el8 20180629-10.el8 java-1.8.0-openjdk-headless 1.8.0.322.b06-2.el8_5 1.8.0.322.b06-11.el8 java-11-openjdk-headless 11.0.14.0.9-2.el8_5 11.0.14.1.1-6.el8 kernel 4.18.0-365.el8 4.18.0-373.el8 kernel-core 4.18.0-365.el8 4.18.0-373.el8 kernel-modules 4.18.0-365.el8 4.18.0-373.el8 kernel-tools 4.18.0-365.el8 4.18.0-373.el8 kernel-tools-libs 4.18.0-365.el8 4.18.0-373.el8 libbabeltrace 1.5.4-3.el8 1.5.4-4.el8 libblkid 2.32.1-34.el8 2.32.1-35.el8 libdnf 0.63.0-7.el8 0.63.0-8.el8 libfdisk 2.32.1-34.el8 2.32.1-35.el8 libmount 2.32.1-34.el8 2.32.1-35.el8 libnfsidmap 2.3.3-50.el8 2.3.3-51.el8 libqb 1.0.3-12.el8 libsmartcols 2.32.1-34.el8 2.32.1-35.el8 libsss_certmap 2.6.1-2.el8 2.6.2-3.el8 libsss_idmap 2.6.1-2.el8 2.6.2-3.el8 libsss_nss_idmap 2.6.1-2.el8 2.6.2-3.el8 libuuid 2.32.1-34.el8 2.32.1-35.el8 nfs-utils 2.3.3-50.el8 2.3.3-51.el8 nodejs 10.23.1-1.module_el8.4.0+645+9ce14ba2 14.17.5-1.module_el8.6.0+939+4802ccb9 nodejs-docs 14.17.5-1.module_el8.6.0+939+4802ccb9 nodejs-full-i18n 10.23.1-1.module_el8.4.0+645+9ce14ba2 14.17.5-1.module_el8.6.0+939+4802ccb9 npm 6.14.10-1.10.23.1.1.module_el8.4.0+645+9ce14ba2 6.14.14-1.14.17.5.1.module_el8.6.0+939+4802ccb9 openssl 1.1.1k-5.el8_5 1.1.1k-6.el8 openssl-libs 1.1.1k-5.el8_5 1.1.1k-6.el8 openstack-java-cinder-client 3.2.9-1.el8 3.2.9-9.el8 openstack-java-cinder-model 3.2.9-1.el8 3.2.9-9.el8 openstack-java-client 3.2.9-1.el8 3.2.9-9.el8 openstack-java-glance-client 3.2.9-1.el8 3.2.9-9.el8 openstack-java-glance-model 3.2.9-1.el8 3.2.9-9.el8 openstack-java-keystone-client 3.2.9-1.el8 3.2.9-9.el8 openstack-java-keystone-model 3.2.9-1.el8 3.2.9-9.el8 openstack-java-quantum-client 3.2.9-1.el8 3.2.9-9.el8 openstack-java-quantum-model 3.2.9-1.el8 3.2.9-9.el8 openstack-java-resteasy-connector 3.2.9-1.el8 3.2.9-9.el8 ovirt-ansible-collection 2.0.0-0.6.BETA.el8 2.0.1-1.el8 ovirt-engine 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-backend 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-dbscripts 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-dwh 4.5.0-1.el8 4.5.2-1.el8 ovirt-engine-dwh-grafana-integration-setup 4.5.0-1.el8 4.5.2-1.el8 ovirt-engine-dwh-setup 4.5.0-1.el8 4.5.2-1.el8 ovirt-engine-keycloak-setup 15.0.2-1.el8 ovirt-engine-metrics 1.4.4-1.el8 1.6.0-1.el8 ovirt-engine-restapi 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-setup 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-setup-base 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-setup-plugin-cinderlib 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-setup-plugin-imageio 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-setup-plugin-ovirt-engine 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-setup-plugin-ovirt-engine-common 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-setup-plugin-vmconsole-proxy-helper 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-setup-plugin-websocket-proxy 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-tools 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-tools-backup 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-ui-extensions 1.3.1-1.el8 1.3.2-1.el8 ovirt-engine-vmconsole-proxy-helper 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-webadmin-portal 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-engine-websocket-proxy 4.5.0-1.el8 4.5.0.1-1.el8 ovirt-imageio-client 2.4.1-1.el8 2.4.3-1.el8 ovirt-imageio-common 2.4.1-1.el8 2.4.3-1.el8 ovirt-imageio-daemon 2.4.1-1.el8 2.4.3-1.el8 ovirt-web-ui 1.8.0-1.el8 1.8.1-1.el8 perl-Error 0.17025-2.el8 perl-Git 2.31.1-2.el8 perl-TermReadKey 2.37-7.el8 platform-python 3.6.8-45.el8 3.6.8-46.el8 platform-python-devel 3.6.8-45.el8 3.6.8-46.el8 procps-ng 3.3.15-6.el8 3.3.15-7.el8 protobuf 3.11.2-2.el8 python3-aniso8601 8.1.0-1.el8 python3-ansible-runner 1.4.6-3.el8 python3-audit 3.0.7-2.el8 3.0.7-3.el8 python3-click 6.7-8.el8 python3-daemon 2.2.4-3.el8 2.2.4-3.2.el8 python3-dataclasses 0.8-1.el8 python3-dnf 4.7.0-7.el8 4.7.0-8.el8 python3-dnf-plugin-versionlock 4.0.21-10.el8 4.0.21-11.el8 python3-dnf-plugins-core 4.0.21-10.el8 4.0.21-11.el8 python3-docutils 0.14-12.module_el8.5.0+761+faacb0fb 0.14-12.2.el8 python3-flask 1.1.2-4.el8 python3-flask-restful 0.3.9-2.el8 python3-hawkey 0.63.0-7.el8 0.63.0-8.el8 python3-itsdangerous 0.24-14.el8 python3-jmespath 0.9.0-11.el8 0.9.0-11.1.el8 python3-libdnf 0.63.0-7.el8 0.63.0-8.el8 python3-libs 3.6.8-45.el8 3.6.8-46.el8 python3-lockfile 0.12.2-1.el8 0.12.2-1.2.el8 python3-mod_wsgi 4.6.4-4.el8 python3-netaddr 0.7.19-8.el8 0.7.19-8.1.1.el8 python3-notario 0.0.16-4.el8 python3-ntlm-auth 1.5.0-1.el8 python3-ovirt-engine-lib 4.5.0-1.el8 4.5.0.1-1.el8 python3-ovirt-engine-sdk4 4.5.0-1.el8 4.5.1-1.el8 python3-paramiko 2.7.2-2.el8 2.7.2-3.el8 python3-pbr 5.5.1-1.el8 5.5.1-7.2.el8 python3-perf 4.18.0-365.el8 4.18.0-373.el8 python3-pexpect 4.7.0-4.el8 python3-psycopg2 2.7.5-7.el8 2.8.6-3.el8 python3-ptyprocess 0.5.2-4.el8 python3-pycurl 7.43.0.2-4.el8 7.43.0.2-4.1.el8 python3-requests_ntlm 1.1.0-9.el8 python3-sqlalchemy 1.4.18-1.1.el8 1.4.31-1.el8 python3-syspurpose 1.28.25-1.el8 1.28.28-1.el8 python3-tenacity 6.2.0-1.el8 6.3.1-1.el8 python3-tkinter 3.6.8-45.el8 3.6.8-46.el8 python3-werkzeug 2.0.1-2.el8 python3-winrm 0.4.1-1.el8 python3-xmltodict 0.12.0-6.el8 python38 3.8.12-1.module_el8.6.0+929+89303463 python38-ansible-runner 2.1.3-1.el8 python38-asn1crypto 1.2.0-3.module_el8.5.0+742+dbad1979 python38-babel 2.7.0-11.module_el8.6.0+929+89303463 python38-cffi 1.13.2-3.module_el8.5.0+742+dbad1979 python38-cryptography 2.8-3.module_el8.5.0+742+dbad1979 python38-daemon 2.2.4-3.2.el8 python38-docutils 0.14-12.2.el8 python38-idna 2.8-6.module_el8.5.0+742+dbad1979 python38-jinja2 2.10.3-5.module_el8.6.0+929+89303463 python38-jmespath 0.9.0-11.1.el8 python38-libs 3.8.12-1.module_el8.6.0+929+89303463 python38-lockfile 0.12.2-1.2.el8 python38-markupsafe 1.1.1-6.module_el8.5.0+742+dbad1979 python38-netaddr 0.7.19-8.1.1.el8 python38-ovirt-engine-sdk4 4.5.1-1.el8 python38-ovirt-imageio-client 2.4.3-1.el8 python38-ovirt-imageio-common 2.4.3-1.el8 python38-passlib 1.7.0-5.1.el8 python38-pexpect 4.7.0-4.3.el8 python38-pip 19.3.1-5.module_el8.6.0+960+f11a9b17 python38-pip-wheel 19.3.1-5.module_el8.6.0+960+f11a9b17 python38-ply 3.11-10.module_el8.5.0+742+dbad1979 python38-ptyprocess 0.5.2-4.2.el8 python38-pycparser 2.19-3.module_el8.5.0+742+dbad1979 python38-pycurl 7.43.0.2-4.1.el8 python38-pytz 2019.3-3.module_el8.5.0+742+dbad1979 python38-pyyaml 5.4.1-1.module_el8.6.0+929+89303463 python38-resolvelib 0.5.4-5.el8 python38-setuptools 41.6.0-5.module_el8.6.0+929+89303463 python38-setuptools-wheel 41.6.0-5.module_el8.6.0+929+89303463 python38-six 1.12.0-10.module_el8.5.0+742+dbad1979 python38-tkinter 3.8.12-1.module_el8.6.0+929+89303463 rhel-system-roles 1.15.1-1.el8 1.16.1-1.el8 rng-tools 6.14-4.git.b2b7934e.el8 rsyslog 8.2102.0-7.el8 8.2102.0-8.el8 rsyslog-elasticsearch 8.2102.0-7.el8 8.2102.0-8.el8 rsyslog-gnutls 8.2102.0-8.el8 rsyslog-mmjsonparse 8.2102.0-7.el8 8.2102.0-8.el8 rsyslog-mmnormalize 8.2102.0-7.el8 8.2102.0-8.el8 selinux-policy 3.14.3-93.el8 3.14.3-95.el8 selinux-policy-targeted 3.14.3-93.el8 3.14.3-95.el8 sssd-client 2.6.1-2.el8 2.6.2-3.el8 sssd-common 2.6.1-2.el8 2.6.2-3.el8 sssd-kcm 2.6.1-2.el8 2.6.2-3.el8 tzdata 2021e-1.el8 2022a-1.el8 tzdata-java 2021e-1.el8 2022a-1.el8 usbguard 1.0.0-9.el8 usbguard-selinux 1.0.0-9.el8 util-linux 2.32.1-34.el8 2.32.1-35.el8 yum 4.7.0-7.el8 4.7.0-8.el8 yum-utils 4.0.21-10.el8 4.0.21-11.el8 See the release notes for installation instructions and a list of new features and bugs fixed. Additional resources: - Read more about the oVirt 4.5.0 release highlights: https://www.ovirt.org/release/4.5.0/ - Get more oVirt project updates on Twitter: https://twitter.com/ovirt - Check out the latest project news on the oVirt blog: https://blogs.ovirt.org/ oVirt 4.5.0 Beta test day - April 7th 2022 If you're willing to help testing the release during the test days please join the oVirt development mailing list at https://lists.ovirt.org/archives/list/devel@ovirt.org/ and report your feedback there. Please join the trello board at https://trello.com/b/3FZ7gdhM/ovirt-450-test-day for sharing what you're going to test so others can focus on different areas not covered by your test. If you don't want to register to trello, please share on the oVirt development mailing list and we'll add it to the board. The board is publicly visible also to non-registered users. Instructions for installing oVirt 4.5.0 Beta for testing have been added to the release page https://www.ovirt.org/release/4.5.0/. Professional Services, Integrators and Backup vendors: please run a test session against your additional services, integrated solutions, downstream rebuilds, backup solution on the released beta release and report issues as soon as possible. If you're not listed here: https://ovirt.org/community/user-stories/users-and-providers.html consider adding your company there. Do you want to contribute to getting ready for this release? Read more about oVirt community at https://ovirt.org/community/ and join the oVirt developers https://ovirt.org/develop/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 2

Storage Design Question - GlusterFS
by mohamedroushdy＠peopleintouch.com 06 Apr '22

06 Apr '22

Hello, we are designing a new production cluster, and I have to questsions about GlusterFS please: 1- this quote from the documentation os not clear to me " Creating additional data domains in the same data center as the self-hosted engine storage domain is highly recommended. If you deploy the self-hosted engine in a data center with only one active data storage domain, and that storage domain is corrupted, you will not be able to add new storage domains or remove the corrupted storage domain; you will have to redeploy the self-hosted engine." Does this mean that we should have more than one "Data" domain? or here this paragraph is talking about sharing a single domain for both the hosted-engine and VMs? 2- the documentation mentioned that Replica 1 or Replica 3 are only supported, but is this only for the hosted-engine volume? or also for Data volumes? so the max is only 3? and waht if I wanted to expand capacity later? Thank you,

3 4

Enroll Host Certificate
by dlotarev＠yahoo.com 05 Apr '22

05 Apr '22

Hi there! I have a problem to enroll host certificate. The steps that I took: 1) Move host to maintenance mode (all VMs transferred to another host including HE VM) 2) Enroll certificate via web interface without errors 3) Exit from maintenance mode (transferred all VMs back including HE VM) 4) Restart ovirt-engine service But my problem that after 6 hours i get message from oVirt engine notifier that my certificate expired soon. I know that my oVirt installation is old (4.1.9), but what can i do with that? Maybe i missed something. I didn't reboot the host after renewing the certificate Thank you for any advice!

4 5

Synology NAS
by Keith Forman 05 Apr '22

05 Apr '22

Hi all I just wanted to find out if anyone has had any success configuring 2x Synology NAS devices in a High Availability setup as the storage for their Ovirt environment? So that if the active NAS goes down, the passive NAS takes over? Regards --

1 0

ovirt hosted engine restore backup fails: remot host identifaction changed
by jeroen.gui＠telenet.be 04 Apr '22

04 Apr '22

I have a backup file from our ovirt hosted engine. When I try to run "hosted-engine --deploy --restore-from-file=backup.bck" on the same machine with a fresh install of ovirt node 4.3 I get this error after some minutes: [ ERROR ] fatal: [localhost -> ovirt.*mydomain.com*]: FAILED! => {"changed": false, "elapsed": 185, "msg": "timed out waiting for ping module test success: Failed to connect to the host via ssh: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r\n@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @\r\n@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r\nIT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!\r\nSomeone could be eavesdropping on you right now (man-in-the-middle attack)!\r\nIt is also possible that a host key has just been changed.\r\nThe fingerprint for the ECDSA key sent by the remote host is\nSHA256:aer7BMZyKHhfzMXX4pzVULHN7OwSSNDrCuOyvdmG8sQ.\r\nPlease contact your system administrator.\r\nAdd correct host key in /dev/null to get rid of this message.\r\nOffending ED25519 key in /var/lib/sss/pubconf/known_hosts:6\r\nPassword authentication is disabled to avoid man-in-the-middle attacks.\r\nKeyboard-interactive authentication is disabled to avoid man-in-the-middle attacks.\r\nPermission denied (publickey,gssapi-keyex,gssapi-with-mic,password)."} I can't find anything in the docs about this problem. I already removed all the entries in /var/lib/sss/pubconf/known_hosts on my ovirt host machine. But that didn't change anything. Is their something wrong with the backup. At the moment I have 2 other hosts running my VM's but no ovirt manager.

3 3

Failed to start service jboss.deployment.subunit."engine.ear"."webadmin.war".STRUCTURE Ovirt 4.4.10 Self-hosted engine
by wthomas85＠gmail.com 04 Apr '22

04 Apr '22

I'm trying to deploy a new ovirt 4.4.10 self-hosted engine. Whenever I try to access the server via a web browser I get 404 - Not Found. In /var/log/ovirt-engine/server.log I see Failed to start service jboss.deployment.subunit."engine.ear"."webadmin.war".STRUCTURE due to a java.io.FileNotFoundException for /var/lib/ovirt-engine/jboss_runtime/tmp/vfs/deployment/deployment38ca8fb55a7d2674/gwt-servlet.jar-ab669e949f887030/gwt-servlet.jar. Inside /var/lib/ovirt-engine/jboss_runtime/tmp/vfs/deployment/deployment38ca8fb55a7d2674/, I do not have the gwt-servlet.jar-ab669e949f887030 dir. I can create it and copy gwt-servlet.jar to it and set the proper ownership and permissions, but then I am not sure how to restart jboss. I am not sure what is happening that would prevent the gwt-servlet.jar dir from being created inside the /var/lib/ovirt-engine/jboss_runtime/tmp/vfs/deployment/ dir. I can see bll.jar, 4 branding.jar dirs, docs.jar, enginesso.jar, scheduler.jar, services.jar, vdsbroker.ja r, and welcome.jar dirs inside /var/lib/ovirt-engine/jboss_runtime/tmp/vfs/deployment/deployment38ca8fb55a7d2674 but no gwt-servlet.jar dir unless I make it myself.

1 1

Updated invitation: oVirt 4.5.0 Beta release test day @ Thu Apr 7, 2022 (users@ovirt.org)
by sbonazzo＠redhat.com 04 Apr '22

04 Apr '22

This event has been changed. Title: oVirt 4.5.0 Beta release test day If you're willing to help testing the release during the test daysplease join the oVirt development mailing list athttps://lists.ovirt.org/archives/list/devel@ovirt.org/ and report yourfeedback there.Instructions for installing oVirt 4.5.0 Beta fortesting have been added to the release pagehttps://www.ovirt.org/release/4.5.0/ Re-scheduled due to beta delay When: Thu Apr 7, 2022 (changed) Calendar: users(a)ovirt.org Who: (Guest list has been hidden at organizer's request) Event details: https://calendar.google.com/calendar/event?action=VIEW&eid=MXZpZGdobjViaHQz… Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this courtesy email at the account users(a)ovirt.org because you are an attendee of this event. To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://calendar.google.com/calendar/ and control your notification settings for your entire calendar. Forwarding this invitation could allow any recipient to send a response to the organizer and be added to the guest list, or invite others regardless of their own invitation status, or to modify your RSVP. Learn more at https://support.google.com/calendar/answer/37135#forwarding

1 0

Python Unsupported Version Detection (ovirt Manager 4.4.10)
by michael.li＠hactlsolutions.com 04 Apr '22

04 Apr '22

Hi, We have installed oVirt manger in Centos stream 8 and running the security scanning by Tenable Nessus ID 148367 When I try to remove the python3.6. It will remove many dependency package related ovirt. How can I fixed this vulnerability as below? Python Unsupported Version Detection Plugin Output: The following Python installation is unsupported : Path : / Port : 35357 Installed version : 3.6.8 Latest version : 3.10 Support dates : 2021-12-23 (end of life) Regards, Michael Li

3 2

Network filters in oVirt : zero-trust, IP and port filtering
by ravi k 01 Apr '22

01 Apr '22

Good people of the community, Hope you are all doing well. We are exploring the network filters in oVirt to check if we can implement a zero-trust model at the network level. The intention is to have a filter which takes two parameters, IP and PORT. After that there will be a 'deny all' rule. We realized that none of the default network filters offer such a functionality and the only option is to write a custom filter. Why don't we have such a filter in libvirt and thereby in oVirt? Someone would've already thought about such a use case. So I was thinking maybe network filters aren't meant to be used for implementing such functionalities like zero-trust? Also what are some practical use cases of the default filters that are provided? I was able to understand and use the clean-traffic and clean-traffic-gateway. Regards, ravi

2 4