April 2025 - Users - Ovirt List Archives

Standalone Engine restore to Rocky Linux 9

by KSNull Zero

Hello! There are a lot of errors regarding legacy cipher while restoring engine backup to RL9 during our migration to 4.5. 2025-04-22 08:35:48,773+0300 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.pki.ca plugin.execute:923 execute-output: ('/usr/bin/openssl', 'pkcs12', '-in', '/etc/pki/ovirt-engine/keys/engine.p12', '-passin', 'pass:**FILTERED**', '-nokeys') stderr: Error outputting keys and certificates 00CE347D1F7F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:355:Global default library context, Algorithm (RC2-40-CBC : 0), Properties () RHEL/RL 9 disables the legacy provider for security reasons. What is the best way to solve this problem ? Should i just enable legacy provider in OpenSSL config or re-sign all certs with new ciper (where can i find more information about this) ? Thank you.

8 hours, 40 minutes

3
6
0 / 0

Ovirt 4.3 update to Ovirt 4.5 on alma8

by Pavel Šipoš

Hi, I’m working on upgrading an oVirt 4.3 cluster to the latest 4.5 version. So far, I’ve successfully performed a test upgrade of the oVirt Engine from 4.3 (CentOS 7) to 4.4 (AlmaLinux 8.10). I’ve encountered some noVNC issues, as described here: https://forums.oracle.com/ords/apexds/post/olvm-manager-vm-console-novnc-... I’ll probably leave this issue unresolved for now, as I’m planning to continue with the upgrade process. For the next step, I’d like to ask if anyone has experience installing and running an oVirt 4.5 cluster (both engine and hosts) on AlmaLinux 8.x. So far, it seems that I might need to upgrade the OS to AlmaLinux 9 as well, possibly using ELevate. If anyone has recently completed a similar migration, I’d really appreciate any tips or recommendations. Best regards, Pavel

2 days, 20 hours

3
4
0 / 0

Barebone Hosted Engine Deployment fails

by kevin＠kllmnn.de

Hey people, I hope someone can help me identify if there's something I'm doing wrong or if there's a bug. Originally I wanted to re-deploy my self-hosted engine, as it is still on version 4.5.5 with CentOS 8, and therefore can't be updated anymore. To get a fresh backup of the currently running config I did the following: 1. On physical host `hosted-engine --set-maintenance --mode=global` 2. On engine VM `systemctl stop ovirt-engine` and then 3. `engine-backup --scope=all --mode=backup --file=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.bck --log=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.log` (where `/mnt/ovirt-engine-backup/` is a NFS share) 4. On physical host `hosted-engine --vm-shutdown` Then I set up a new physical host with CentOS 9 Stream (Build 20250320), enabled and installed the oVirt repository as mentioned at https://www.ovirt.org/download/install_on_rhel.html, then ran: `hosted-engine --deploy --4 --restore-from-file=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.bck` (of course mounting the NFS share prior to this). But after giving it all the information it needed it fails after 15-20 minutes with several errors in the logfile, which I cannot identify the primary/root cause of. The first error that appears is this one: ``` 2025-03-25 11:19:35,427+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Include after engine-setup custom tasks files for the engine VM] 2025-03-25 11:19:36,730+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Wait for the engine to reach a stable condition] 2025-03-25 11:19:37,431+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 skipping: [localhost] 2025-03-25 11:19:38,133+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Configure LibgfApi support] 2025-03-25 11:19:38,835+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 skipping: [localhost] 2025-03-25 11:19:39,536+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Save original OvfUpdateIntervalInMinutes] 2025-03-25 11:19:42,041+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 changed: [localhost -> 192.168.222.170] 2025-03-25 11:19:42,742+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Set OVF update interval to 1 minute] 2025-03-25 11:19:45,147+0100 DEBUG otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:109 {'changed': True, 'stdout': 'Index 1 out of bounds for length 1', 'stderr': 'Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false', 'rc': 1, 'cmd': ['engine-config', '-s', 'OvfUpdateIntervalInMinutes=1'], 'start': '2025-03-25 11:19:43.872322', 'end': '2025-03-25 11:19:44.941216', 'delta': '0:00:01.068894', 'msg': 'non-zero return code', 'invocation': {'module_args': {'_raw_params': 'engine-config -s OvfUpdateIntervalInMinutes=1', '_uses_shell': False, 'stdin_add_newline': True, 'strip_empty_ends': True, 'argv': None, 'chdir': None, 'executable': None, 'creates': None, 'removes': None, 'stdin': None}}, 'stdout_lines': ['Index 1 out of bounds for length 1'], 'stderr_lines': ['Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false'], '_ansible_no_log': False, '_ansible_delegated_vars': {'ansible_host': '192.168.222.170', 'ansible_port': None, 'ansible_user': 'root', 'ansible_ connection': 'smart'}} 2025-03-25 11:19:45,248+0100 ERROR otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:113 fatal: [localhost -> 192.168.222.170]: FAILED! => {"changed": true, "cmd": ["engine-config", "-s", "OvfUpdateIntervalInMinutes=1"], "delta": "0:00:01.068894", "end": "2025-03-25 11:19:44.941216", "msg": "non-zero return code", "rc": 1, "start": "2025-03-25 11:19:43.872322", "stderr": "Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false", "stderr_lines": ["Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false"], "stdout": "Index 1 out of bounds for length 1", "stdout_lines": ["Index 1 out of bounds for length 1"]} ``` The full log is available here: https://filebin.net/dimi5g2o6q20t4aj I also tried with a completely clean deployment, without restoring from backup (once without and once with using `ovirt-hosted-engine-cleanup` in between). The errors in the log are completely the same. Also I tried to use the oVirt Node master experimental ISO (`ovirt-node-ng-installer-4.5.6-2025031111.c9s.iso`), same issue. Does the problem lie somewhere in my answers for the questions asked by the tool? I cannot identify giving any wrong info. Can someone maybe reproduce the issue?

1 week, 2 days

2
2
0 / 0

oVirt enquiry and installation instructions

by Andreas Giannakopoulos

Hi all, I have been looking into oVirt and researching possible utilization by my team. I have been through the instructions in the site, on github and the forums. I have attempted both with self hosted using the ISO provided and as a standalone engine installation on a separate server. However I have been getting all kinds of different failures and errors and since I understand that some of the instructions provided could be slightly outdated can you please direct me to the most accurate and recent instructions to follow for setting up and testing the environment? Also is there a new version planned some time soon or should I consider the 4.5.5 version from almost 2 years ago the most recent and updated one? Best Regards, Andreas Giannakopoulos Network & Security Engineer AI2CYBER -- CONFIDENTIALITY STATEMENT - This electronic communication, including any attachments, is exclusively meant for the recipient(s) named herein. It may contain sensitive, privileged, or confidential information. If you are not the intended recipient, or if you have received this message in error, kindly notify the sender immediately. Any unauthorized review, dissemination, disclosure, or duplication of this email or its contents is strictly forbidden.

1 week, 3 days

3
2
1 / 0

nvidia GPU SXM

by De Lee

Hi oVirt Community, Anyone in the community was able to use oVirt platform for nvidia SXM environment either on sxm4 or sxm5? We can achieve with KVM with direct libvirt as GPU pass-thourgh but not sure how the functionality works in sxm and VDSM. -De

1 week, 6 days

1
0
0 / 0

Re: hosted-engine --deploy fails with "The task includes an option with an undefined variable. The error was: 'local_vm_ip' is undefined"

by Glenn Paden

I have has this happen a number of times with ovirt versions. I have yet to find a solution. Did you?

2 weeks, 1 day

1
0
0 / 0

How to modify the MAC address of a bonding interface after changing the nic card

by wodel youchi

Hi, ovirt 4.4 on centos 8. We have changed the network card of a hypervisor which uses bonding interface. The bonding interface still uses the old MAC address of the former slave interface. We tried to modify it via CLI but it didn't work, as soon as the node (hypervisor) is activated, the old MAC is reestablished. it seems to be backed up somewhere. Should we reinstall the host? Regards.

3 weeks

2
1
0 / 0

graphical console strange issue - certificate's owner does not match hostname - IP address (ovirt 4.5.6)

by eson＠inux.cz

Dear proud RHV/Ovirt Hackers, facing strange issue with graphical console - do you have any tips? We successfully run many different clusters, most of them are similar (versions, hw setup). On single one of those, we are facing issue with opening graphical console: Many other clusters are the same setup, the same number of hypervisors, the same versions of OS, packages, ovirt-engine OS, versions and packages... ...and graphical console opens fine. The graphical console setup is the same at all places also: We did comparison of 'console-1.vv' content over many clusters and its content is totaly the same with the faulty one. Meaning there is never hostname, there is always an IP address (not hostname) as the "The certificate's owner does not match hostname 'IP-address'" says: Any tips howto fix this? Best regards Charles Stellen

3 weeks, 1 day

1
0
0 / 0

Re: not able to upload disks, iso - Connection to ovirt-imageio service has failed. Ensure that ovirt-engine certificate is registered as a valid CA in the browser.

by Mostafa Md Arefin

Observed in 3rd party Firewall monitoring log files that during the Test Connection, the PC Client is trying to reach the Engine Portal in port 54322, instead of 54323 (Image I/O Proxy) Confirmed in engine-config, that ImageTransferProxyEnabled is set to False. SOLUTION To confirm that the ImageTransferProxyEnabled is set to "false", login in the OLVM Engine Host/VM as root, and execute the following command: # engine-config -g ImageTransferProxyEnabled Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false ImageTransferProxyEnabled: false version: general <<< set to false To enable the Image I/O Proxy and restart the ovirt-engine and ovirt-imageio services perform the following as root: # engine-config -s ImageTransferProxyEnabled=true Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false ImageTransferProxyEnabled: true version: general <<< set to true # systemctl restart ovirt-engine # systemctl restart ovirt-imageio

3 weeks, 1 day

2
1
0 / 0

oVirh Host Update Problem

by Vladislav Solovei

Freshly installed using nightly build, freshly installed OS :) OS: AlmaLinux 9.5 Can't update the system (and can't reinstall the Host) Repository copr:copr.fedorainfracloud.org:ovirt:ovirt-master-snapshot is listed more than once in the configuration Last metadata expiration check: 0:22:12 ago on Fri 24 Jan 2025 11:41:49 EET. Error: Problem: package rdo-ovn-host-2:22.12-2.el9s.noarch from ovirt-master-centos-stream-openstack-yoga-testing requires rdo-ovn = 2:22.12-2.el9s, but none of the providers can be installed - cannot install the best update candidate for package ovn22.09-host-22.09.0-31.el9s.x86_64 - package rdo-ovn-2:22.12-2.el9s.noarch from ovirt-master-centos-stream-openstack-yoga-testing is filtered out by exclude filtering (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) [ovirt-master-centos-stream-openstack-yoga-testing] name=CentOS Stream 9 - OpenStack Yoga Repository - testing baseurl=https://buildlogs.centos.org/9-stream/cloud/$basearch/openstack-y... gpgcheck=0 enabled=1 exclude= openstack-ansible-core python3-rdo-openvswitch rdo-network-scripts-openvswitch rdo-openvswitch rdo-ovn rdo-ovn-central How can this problem be resolved? Should the rdo-ovn package, which is a dependency of rdo-ovn-host-2:22.12-2, be filtered out?

3 weeks, 1 day

2
1
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

Users April 2025