February 2023 - Users - oVirt List Archives

Problem after upgrading oVirt
by Andy Michielsen 18 Feb '23

18 Feb '23

Hello all, I'm struggling with an issue with my oVirt environment and I seem not to be able to figure this one out on my own and am hoping you can point me in on the right track. My old oVirt 4.3 environment's certifcat went expired. I thought I could fix it by reading some tutorials but no luck so far. Now I have upgraded my engine already to 4.5 and now I get the message telling me this "Keystore was tampered with, or password is incorrect" Even before I can log on. I'm looking through the ovirtengine.log but so far I haven't find why exactly. Any help would be greatly appreciated. Kind regards.

2 2

Error Deploying the self-hosted engine using the command line
by ahmad.hidayat＠singtel.com 17 Feb '23

17 Feb '23

Hello masters! I am trying to deploy a self hosted engine and encountered an error. We are only allowed to use a range of IP Address and access http via proxy. IP: 192.168.50.0/24 Command used: hosted-engine --deploy --4 --ansible-extra-vars=he_offline_deployment=true --ansible-extra-vars=he_ipv4_subnet_prefix=192.168.50 Error: [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "cmd": ["virsh", "net-start", "default"], "delta": "0:00:00.069204", "end": "2023-02-17 08:54:21.737578", "msg": "non-zero return code", "rc": 1, "start": "2023-02-17 08:54:21.668374", "stderr": "error: Failed to start network default\nerror: internal error: Network is already in use by interface eno1", "stderr_lines": ["error: Failed to start network default", "error: internal error: Network is already in use by interface eno1"], "stdout": "", "stdout_lines": []} [ ERROR ] Failed to execute stage 'Closing up': Failed getting local_vm_dir Hope to gain some ideas from this issue. Thanks!

2 1

Problem with update 4.4.3
by scrik787＠gmail.com 17 Feb '23

17 Feb '23

Good afternoon, I have version 4.4.3 and want to upgrade to at least 4.4.10 but I am facing this error: [root@ovirt1 ~]# yum update Failed to set locale, defaulting to C.UTF-8 Last metadata expiration check: 2:05:22 ago on Tue Feb 7 12:31:28 2023. Error: Problem 1: package libgfapi0-8.6-2.el8s.x86_64 requires glusterfs-client-xlators(x86-64) = 8.6-2.el8s, but none of the providers can be installed - cannot install the best update candidate for package glusterfs-api-7.8-1.el8.x86_64 - package glusterfs-client-xlators-8.6-2.el8s.x86_64 is filtered out by exclude filtering Problem 2: package libglusterfs0-8.6-2.el8s.x86_64 obsoletes glusterfs-libs <= 8.6-2.el8s provided by glusterfs-libs-7.8-1.el8.x86_64 - package glusterfs-7.8-1.el8.x86_64 requires glusterfs-libs = 7.8-1.el8, but none of the providers can be installed - cannot install the best update candidate for package glusterfs-libs-7.8-1.el8.x86_64 - problem with installed package glusterfs-7.8-1.el8.x86_64 (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) I tried these options, but the error did not go away. How can I update? I don't use GlusterFS. I use ISCSI: rm -rf /var/cache/dnf cd /etc/yum.repos.d/ sed -i 's/mirrorlist/#mirrorlist/g' /etc/yum.repos.d/CentOS-* sed -i 's|#baseurl=http://mirror.centos.org|baseurl=http://vault.centos.org|g' /etc/yum.repos.d/CentOS-* sudo dnf install --disablerepo='*' https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm dnf distro-sync —nobest yum install https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm yum update yum update --skip-broken --nobest

1 1

Ovirt provider OVN
by scrik787＠gmail.com 17 Feb '23

17 Feb '23

Good afternoon, Since installing ovirt, there have been problems with OVN Provider. But we didn't do it, and we didn't have to. Now we need to create virtual networks, but nothing works for us. Please help with thoughts. I updated the Ovirt OVN Provider certificate, previously there was a problem with them after 2 years. all host install with ovirt node: software: OS Version:RHEL - 8 - 2.2004.0.2.el8 OS Description:oVirt Node 4.4.3 Kernel Version:4.18.0 - 193.28.1.el8_2.x86_64 KVM Version:4.2.0 - 29.el8.6 LIBVIRT Version:libvirt-6.0.0-25.2.el8 VDSM Version:vdsm-4.40.35.1-1.el8 SPICE Version:0.14.2 - 1.el8_2.1 GlusterFS Version:glusterfs-7.8-1.el8 CEPH Version:librbd1-12.2.7-9.el8 Open vSwitch Version:[N/A] Nmstate Version:nmstate-0.3.6-2.el8 Kernel Features:MDS: (Not affected), L1TF: (Not affected), SRBDS: (Not affected), MELTDOWN: (Not affected), SPECTRE_V1: (Mitigation: usercopy/swapgs barriers and __user pointer sanitization), SPECTRE_V2: (Mitigation: Enhanced IBRS, IBPB: conditional, RSB filling), ITLB_MULTIHIT: (KVM: Mitigation: Split huge pages), TSX_ASYNC_ABORT: (Mitigation: Clear CPU buffers; SMT vulnerable), SPEC_STORE_BYPASS: (Mitigation: Speculative Store Bypass disabled via prctl and seccomp) VNC Encryption:Disabled FIPS mode enabled:Disabled Logs /var/log/ovirt-provider-ovn.log 2023-02-07 12:32:18,629 root Starting server 2023-02-07 12:32:18,630 root Version: 1.2.32-1 2023-02-07 12:32:18,630 root Build date: 20200929061233 2023-02-07 12:32:18,630 root Githash: 44a7426 2023-02-07 12:34:17,362 ovsdbapp.backend.ovs_idl.idlutils Unable to open stream to ssl:127.0.0.1:6641 to retrieve schema: Connection reset by peer 2023-02-07 12:34:17,362 root From: ::ffff:10.0.120.11:43288 Request: GET /v2.0/networks 2023-02-07 12:34:17,362 root Could not retrieve schema from ssl:127.0.0.1:6641 Traceback (most recent call last): File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line 138, in _handle_request method, path_parts, content File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py", line 175, in handle_request return self.call_response_handler(handler, content, parameters) File "/usr/share/ovirt-provider-ovn/handlers/neutron.py", line 35, in call_response_handler with NeutronApi() as ovn_north: File "/usr/share/ovirt-provider-ovn/neutron/neutron_api.py", line 95, in __init__ self.ovsidl, self.idl = ovn_connection.connect() File "/usr/share/ovirt-provider-ovn/ovn_connection.py", line 46, in connect ovnconst.OVN_NORTHBOUND File "/usr/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/connection.py", line 154, in from_server helper = idlutils.get_schema_helper(connection_string, schema_name) File "/usr/lib/python3.6/site-packages/ovsdbapp/backend/ovs_idl/idlutils.py", line 144, in get_schema_helper raise Exception("Could not retrieve schema from %s" % connection) Exception: Could not retrieve schema from ssl:127.0.0.1:6641 Test in Ovirt Engine OVN Provider Error:Failed to communicate with the external provider, see log for additional details. [root@ovirtengine ~]# cat /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf # This file is automatically generated by engine-setup. Please do not edit manually [PROVIDER] provider-host=ovirt.test.test.org [SSL] ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem https-enabled=true [OVN REMOTE] ovn-remote=ssl:127.0.0.1:6641 [OVIRT] ovirt-sso-client-id=ovirt-provider-ovn ovirt-sso-client-secret=SECRET KEY ovirt-host=https://ovirt.test.test.org:443 ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem [NETWORK] port-security-enabled-default=True Reinstall Ovirt OVN with engine-setup did not solve the problem [root@vovirtengine ~]# ovn-nbctl get-ssl Private key: /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass Certificate: /etc/pki/ovirt-engine/certs/ovn-ndb.cer CA Certificate: /etc/pki/ovirt-engine/ca.pem Bootstrap: false [root@vovirtengine ~]# ovn-nbctl get-connection pssl:6641:[::] [root@vovirtengine ~]# ovn-sbctl get-ssl Private key: /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass Certificate: /etc/pki/ovirt-engine/certs/ovn-sdb.cer CA Certificate: /etc/pki/ovirt-engine/ca.pem Bootstrap: false [root@vovirtengine ~]# ovn-sbctl get-connection read-write role="" pssl:6642:[::] [root@vovirtengine ~]# Ovirt-ENgine Config Name ovirt-provider-ovn Description oVirt network provider for OVN Networking Plugin oVirt Network Provider for OVN Automatic Synchronization YES Unmanaged NO Read-Only NO Provider URL https://ovirt.test.test.org:9696 Requires Authentication YES Username admin@internal Password PASWORD Protocol HTTPS Host Name ovirt.test.test.org API Port 35357 API Version v2.0 Tenant Name on host in cluster logs /var/log/openvswitch/ovn-controller.log <...> 2023-02-07T09:11:58.903Z|303247|stream_ssl|WARN|SSL_connect: system error (Success) 2023-02-07T09:12:06.912Z|303248|stream_ssl|WARN|SSL_connect: system error (Success) 2023-02-07T09:12:14.920Z|303249|stream_ssl|WARN|SSL_connect: system error (Success) 2023-02-07T09:12:22.929Z|303250|stream_ssl|WARN|SSL_connect: system error (Success) 2023-02-07T09:12:30.937Z|303251|stream_ssl|WARN|SSL_connect: system error (Success)

1 1

oVirt Engine Web Console
by mikejhathaway＠gmail.com 14 Feb '23

14 Feb '23

Hi Everyone, Newbie here. Ive managed to get an oVirt host and Engine installed, what I am not able to do is access the engine web console, is there a particular port I need to use?? Also, I am can only ping and access the engine host via SSH from hosts on the same VLan, the default GW is set correctly on the engine VM, not sure what is going on? TIA Mike

3 2

New oVirt HCI 4.5.4 Cluster Problems
by Clint Boggio 14 Feb '23

14 Feb '23

Good day all. I'm in the process of deploying a fresh, new cluster and i'm running into a few snags. I'm trying to use the cockpit environment to deploy the gluster storage setup as I have previously done and it's failing consistently. I looked through what I believe to be the current documentation and I don't see anything about HCI setup, and the Gluster storage documentation points to the Gluster community web presence. So, my question is, will the oVirt HCI deployment still be supported, and is the process the same with cockpit to configure the storage, and cli to deploy the hosted engine or did HCI and gluster not make the cut with the 4.5.4 release? I'm using the oVirt node installation iso from the oVirt site for this deployment.

2 2

Migration failed due to an Error: Fatal error during migration
by Anthony Bustillos Gonzalez 13 Feb '23

13 Feb '23

Hello, I have this issue, when I tried to migrate one VM to another host. "Migration failed due to an Error: Fatal error during migration " OS: VERSION=Oracle Linux "8.7" Qemu: KVM 6.1.1 log 2023-02-09 11:50:38,991-06 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engine-Thread-264062) [757bd45d] EVENT_ID: VM_MIGRATION_TO_SERVER_FAILED(120), Migration failed due to an Error: Fatal error during migration (VM: Coopavg-BDDESA01, Source: Coopavg-Moscow, Destination: Coopavg-Berlin).

2 1

Turn on my host
by Anthony Bustillos Gonzalez 13 Feb '23

13 Feb '23

Hello, I have a Cluster with two host, when i tried to turn off the host the VM's reboot the OS. I need migrate the VMS in HA... how i cand do this ?

2 1

4.5.4 no virtualization?
by chaddr18＠gmail.com 13 Feb '23

13 Feb '23

i just download the last iso available 4.5.4 and virtualization is not inclued what is happening here?

3 3

future of oVirt after end of road for CentOS. (porting)
by rp.neuli＠yahoo.com 12 Feb '23

12 Feb '23

Hello Masters, I am very keen to use oVirt, but I was shocked and shaken to go ahead with oVirt after I heard about end of road for CentOS. Therefore I looked for some answers which I could not find online: 1. Will/Are you actively and vigorously porting: a) oVirt Agent to other OS like ubuntu? b) vdsm package to other OS like ubuntu, deb, openBSD etc. 2. While standalone oVirt Node can continue to have CentOS codebase under the hood. But do you still want to migrate it to other OS? like openBSD? Kindly advice. In my view, oVirt in itself is a good and complete platform. It just need to continue evolve as VM and container "OS"/hypervisor. At the same time 'agent' and vdsm should be ported to as many OS as possible. Thank you. Rajeev

2 1

oVirt 4.5 console problem with Ubuntu 22.04 guest
by Kalil de A. Carvalho 12 Feb '23

12 Feb '23

Hello all. Today I had a problem trying to connect with some VM's using console vnc, through user portal, informing us that other one was connected already, asking if we want to connect anyway, and after we accepted it show us a information that was not possible connect, that has some problem synchronize with de SSO, that is probably error with the guest agent. We tried restarting the agent but had the same result. Just after shutdown and starting again all things worked fine. We looked for any firewall rule, errors between communication and we did not find anything. Does anyone have this kind of problem? We have other O.S and distribution working fine here, just have this problem with Ubuntu 22.04. Best regards -- Atenciosamente, Kalil de A. Carvalho

2 1

ImageIO Performance
by Jean-Louis Dupond 11 Feb '23

11 Feb '23

Hi All, We backup our VM's with a custom script based on the https://github.com/oVirt/python-ovirt-engine-sdk4/blob/main/examples/backup… example. This works fine, but we start to see scaling issues. On VM's where there are a lot of dirty blocks, the transfer goes really slow (sometimes only 20MiB/sec). At the same time we see that ovirt-imageio process sometimes uses 100% CPU (its single threaded?). Is this known behavior? Are there ways to optimize imageio? Or any other ways to improve the download speed? Thanks Jean-Louis

2 3

{REQUEST} oVirt (including RHHI) as HCI in the future
by 樽井周久（KTCSP） 10 Feb '23

10 Feb '23

To whom it may concern I have been using oVirt in an HCI environment for over 5 years. The reason why I chose oVirt (most attractive point of oVirt for me) was that it is easy to build an HCI environment with GUI deployment. Now, I found out that the deployment by GUI has been deprecated (from ovirt4.5) on your forum site, and that all the contents related to HCI were deleted (dropped) in your official installation guide site. https://lists.ovirt.org/archives/list/users@ovirt.org/message/CBDUBBKLTCW4M… https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engin… It seems that oVirt will not be able to build HCI environment in the future. So I'm very worried about whether I can continue to use oVirt as before. I would appreciate it if you could tell me about your prospects regarding oVirt as HCI. For your reference below. On 4.5.3 oVirt host, Gluster deployment was done with GUI, but hosted-engine had to be deployed with CLI. On 4.5.4 oVirt host, Guster deployment failed with GUI, so subsequent hosted-engine deployment could not proceed. ('str object' has no attribute 'vgname') Best regards, Kanehisa Tarui Tokyo, Japan

2 1

when is next ovirt version release?
by Sam zz 08 Feb '23

08 Feb '23

Will there be next ovirt release? If so when? And do we have roadmap?

2 1

OS moves after reboot to different device
by simon＠justconnect.ie 07 Feb '23

07 Feb '23

Hi All, I just built a 3 node cluster (4.5.2) with 3 Virtual Disks on identical Dell Servers. First Virtual Disk /dev/sda - BOSS Card - 450GB Second Virtual Disk /dev/sdb - SSD 14TB Third Virtual Disk /dev/sdc - HDD 72TB All OS disks were /dev/sda before reboot Following reboot only first Node is still /dev/sda - other 2 nodes are now /dev/sdc This obviously makes it impossible to create VG groups and create Gluster storage volumes. Can anyone shed any light on why this is happening and how to prevent it. Kind regards Simon

2 3

OVirt VM's not getting DHCP address
by mikejhathaway＠gmail.com 07 Feb '23

07 Feb '23

Hi Folks, None of my VM's are ablt to get an IP from my DHCP server, the management network interface and an additional interface are both set to DHCP and are able to get addresses, but I am not able to see any VM's obtain an address, is there anything by way of trouble shooting someone can point me to please? TIA Mike

1 0

oVirt 4.6 planning
by Sandro Bonazzola 07 Feb '23

07 Feb '23

oVirt developers community, I see there are a few enhancements submitted in GitHub: engine: Add amt_ws fence agent support <https://github.com/oVirt/ovirt-engine/pull/810> Notification emails merging and localization <https://github.com/oVirt/ovirt-engine/pull/798> And also some rebase proposal: Rebase on WildFly 26 <https://github.com/oVirt/ovirt-engine/issues/637> Which would probably make more sense to be targeted to an oVirt 4.6 than a 4.5.z. There are now about three hundreds Untargeted issues(no milestone set) <https://github.com/issues?q=is%3Aopen+is%3Aissue+user%3Aovirt+archived%3Afa…> to be triaged and about sixty Untargeted PRs (no milestone set) <https://github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovirt+archived%3Afalse+…> to be reviewed. Some of them might be ready for a 4.5.z bugfix release while others can wait for a 4.6. Anyone willing to step in to lead the oVirt 4.6 development? A year has passed since my blog post about the future of the oVirt project <https://blogs.ovirt.org/2022/02/future-of-ovirt-february-2022/> but the concept is the same: oVirt future depends on how you, the community! Come help contribute to this new future <https://ovirt.org/develop/>! CC users community in case someone wants to jump into development as well. Regards, -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING - Red Hat In-Vehicle Operating System Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0

Ovirt Hosted Engine - Offline Deployment
by will.roberts＠penten.com 07 Feb '23

07 Feb '23

Hi Team, I need some help deploying Ovirt Hosted Engine. I have installed Ovirt Node 4.5.4 on my intel NUC as a small development environment for a bigger project. I am not able to connect the NUC to the internet but am able to download any relevant packages onto a hard drive and connect this to the system. I have attempted to deploy Hosted Engine via the CLI with the following command: "hosted-engine --deploy --4 --ansible-extra-vars=he_offline_deployment=true". This Fails as it is unable to resolve the URL for the mirror? I feel as though I must be missing some pre-deployment step which changes the repo path but my knowledge in this area is definitely not where it needs to be. I've trolled through the internet but cant find any sort of documentation which details the involved steps. Does anyone have any knowledge on how do accomplish this with my previously mentioned restrictions?

2 1

Timeout during the creation of vm
by Pietro Pesce 06 Feb '23

06 Feb '23

Hello sometimes the creation of the vm require more time and the script go in timeout: An exception occurred during task execution. To see the full traceback, use -vvv. The error was: Exception: Timeout exceed while waiting on result state of the entity. fatal: [co001olv]: FAILED! => {"changed": false, "msg": "Timeout exceed while waiting on result state of the entity."} there is i way for increse the timeout? regards

1 0

PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
by Roberto Nunin 06 Feb '23

06 Feb '23

We are receiving this message into engine web page, surprising us due to certificate renewal done three months ago, during upgrade from 4.5.2 to 4.5.3. Infact, all certificates are valid, with only two exceptions: In /etc/pki/ovirt-engine/certs, apache.cer and websocket-proxy.cer were reporting expired certificates. We've done the defined action to renew certificates, with engine-setup --oflline and everything goes smoothly, but instead of two 5-years valid SSL certificates, we've got 2 1-year valid (more or less): #openssl x509 -noout -startdate -enddate -in websocket-proxy.cer notBefore=Feb 4 20:59:14 2023 GMT notAfter=Mar 9 20:59:14 2024 GMT #openssl x509 -noout -startdate -enddate -in apache.cer notBefore=Feb 4 20:59:14 2023 GMT notAfter=Mar 9 20:59:14 2024 GMT It's the correct behaviour ? I'm already aware about web SSL certificate duration "restriction" to 1-year, but all other certs have a 5-year validity. Here's one of: #openssl x509 -noout -startdate -enddate -in vmconsole-proxy-user.cer notBefore=Nov 20 11:11:08 2022 GMT notAfter=Nov 22 11:11:08 2027 GMT This post just for confirmation that this is correct behavior. Roberto Nunin

1 0

How to assign user rights more precisely
by ziyi Liu 06 Feb '23

06 Feb '23

I have configured ldap and can use ldap users to log in to the web engine There are many data center clusters and virtual machines in my environment. I should have more precise control over users The general manager can see several data centers he manages and can manage them There are three employees, A, B, and C, under the general manager. These three employees manage these data centers separately, and I want the three employees of A, B, and C to not be able to see each other's data centers.

1 0

vm was set to the Uknow satus- how fix it?
by oscar.loza＠toshibagcs.com 05 Feb '23

05 Feb '23

vm was set to the Uknow satus- how fix it?

2 1

Change nic name from template
by Pietro Pesce 03 Feb '23

03 Feb '23

Hello when i create the vm from the template i would like to change the vlan name from time to time. How can I do within the playbook?

2 2

Ovirt Rename multiple disks
by Pietro Pesce 03 Feb '23

03 Feb '23

Hi I'm new to using ansible, I'm writing a playbook to install a vm from template, everything works fine except for the disk names which stay the same as the template. The vm has more than one disk attached, I found this works for renaming the disk, but it only renames 1. how can I rename the others too? - name: Print vm attributes ovirt.ovirt.ovirt_vm_info: auth: "{{ ovirt_auth }}" pattern: name="{{ vm_fqdn }}" fetch_nested: true register: vm_info - debugging: msg: "{{ vm_info.ovirt_vms[0] }}" - name: Rename disk ovirt.ovirt.ovirt_disk: auth: "{{ ovirt_auth }}" id: "{{ vm_info.ovirt_vms[0].id }}" storage_domain: lrg0-ovirt-mydom-internal-Local name: "{{ vm_fqdn }}-osdisk0" vm_name: "{{ vm_fqdn }}" Thanks Regards

2 1

oVirt Installation in ESXi 7
by mikejhathaway＠gmail.com 03 Feb '23

03 Feb '23

Hi Folks, Am a complete newbie with oVirt and am researching how to install in an ESXi server, the idea is to create a VM that runs the oVirt host and hosted engine with a virtual NFS server, I found the following but am not able to get the hoste engine VM to deploy, I am not seeing anything leaping out at me from the log file and was hoping that others may have experiences they can share? https://jorgedelacruz.uk/2021/07/26/ovirt-detailed-guide-on-how-to-deploy-a… am also using https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engin… TIA Mike

2 1