From didi at redhat.com Wed Mar 26 03:22:56 2014 Content-Type: multipart/mixed; boundary="===============0058528786634335716==" MIME-Version: 1.0 From: Yedidyah Bar David To: users at ovirt.org Subject: Re: [Users] Otopi pre-seeded answers and firewall settings Date: Wed, 26 Mar 2014 03:22:54 -0400 Message-ID: <95247965.8231720.1395818574527.JavaMail.zimbra@redhat.com> In-Reply-To: DUB121-W18356B9DA126BEE64D235DFA650@phx.gbl --===============0058528786634335716== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable ------=3D_Part_8231719_493593418.1395818574526 Content-Type: text/plain; charset=3Dutf-8 Content-Transfer-Encoding: 7bit > From: "Giuseppe Ragusa" > To: "Yedidyah Bar David" > Cc: "Users(a)ovirt.org" > Sent: Wednesday, March 26, 2014 12:09:44 AM > Subject: RE: [Users] Otopi pre-seeded answers and firewall settings > Hi Didi, > I can confirm that using both an ovhe-answers.conf directive: > OVEHOSTED_NETWORK/firewallManager=3Dstr:nonexistent > and an /etc/ovirt-host-deploy.conf.d/99-prevent-iptables.conf with: > [environment:enforce] > NETWORK/iptablesEnable=3Dbool:False > results in "ovirt-hosted-engine-setup --config-append=3Dovhe-answers.conf" > leaving iptables rules untouched while adding the second hypervisor host = to > an already deployed self-hosted-engine with one physical host. Thanks for the report! = As I said, I am not sure this is a perfect solution, because now the engine= thinks it updated iptables where in practice it didn't. = > Many thanks again, > Giuseppe > PS: is there any difference in using "ovirt-hosted-engine-setup" vs. > "hosted-engine --deploy" ? No. = -- = Didi = ------=3D_Part_8231719_493593418.1395818574526 Content-Type: text/html; charset=3Dutf-8 Content-Transfer-Encoding: quoted-printable
From: "Giuseppe Ragusa" <giusepp= =3D e.ragusa(a)hotmail.com>
To: "Yedidyah Bar David" <didi(a)re= dhat=3D .com>
Cc: "Users(a)ovirt.org" <users(a)ovirt.org>
= Sent=3D : Wednesday, March 26, 2014 12:09:44 AM
Subject: RE: [Users] = =3D Otopi pre-seeded answers and firewall settings

Hi Didi,
I can confirm that using both an = ov=3D he-answers.conf directive:
OVEHOSTED_NETWORK/firewallManager=3D3Dstr:non= ex=3D istent

and an /etc/ovirt-host-deploy.conf.d/99-prevent-ip= =3D tables.conf with:
[environment:enforce]
NETWORK/iptablesEnable=3D3Dbo= ol=3D :False

results in "ovirt-hosted-engine-setup --config-app= =3D end=3D3Dovhe-answers.conf" leaving iptables rules untouched while adding th= e =3D second hypervisor host to an already deployed self-hosted-engine with one p= =3D hysical host.

Thanks for the report!<= =3D /div>

As I said, I am not sure this is a perfect solutio= =3D n, because now the engine thinks it updated iptables where in practice it d= =3D idn't.





<= /d=3D iv>Many thanks again,
Giuseppe

PS: is there any differ= =3D ence in using "ovirt-hosted-engine-setup" vs. "hosted-engine --deploy" ?

No.
-- 
Didi

------=3D_Part_8231719_493593418.1395818574526-- --===============0058528786634335716== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" LS0tLS0tPV9QYXJ0XzgyMzE3MTlfNDkzNTkzNDE4LjEzOTU4MTg1NzQ1MjYKQ29udGVudC1UeXBl OiB0ZXh0L3BsYWluOyBjaGFyc2V0PXV0Zi04CkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IDdi aXQKCj4gRnJvbTogIkdpdXNlcHBlIFJhZ3VzYSIgPGdpdXNlcHBlLnJhZ3VzYUBob3RtYWlsLmNv bT4KPiBUbzogIlllZGlkeWFoIEJhciBEYXZpZCIgPGRpZGlAcmVkaGF0LmNvbT4KPiBDYzogIlVz ZXJzQG92aXJ0Lm9yZyIgPHVzZXJzQG92aXJ0Lm9yZz4KPiBTZW50OiBXZWRuZXNkYXksIE1hcmNo IDI2LCAyMDE0IDEyOjA5OjQ0IEFNCj4gU3ViamVjdDogUkU6IFtVc2Vyc10gT3RvcGkgcHJlLXNl ZWRlZCBhbnN3ZXJzIGFuZCBmaXJld2FsbCBzZXR0aW5ncwoKPiBIaSBEaWRpLAo+IEkgY2FuIGNv bmZpcm0gdGhhdCB1c2luZyBib3RoIGFuIG92aGUtYW5zd2Vycy5jb25mIGRpcmVjdGl2ZToKPiBP VkVIT1NURURfTkVUV09SSy9maXJld2FsbE1hbmFnZXI9c3RyOm5vbmV4aXN0ZW50Cgo+IGFuZCBh biAvZXRjL292aXJ0LWhvc3QtZGVwbG95LmNvbmYuZC85OS1wcmV2ZW50LWlwdGFibGVzLmNvbmYg d2l0aDoKPiBbZW52aXJvbm1lbnQ6ZW5mb3JjZV0KPiBORVRXT1JLL2lwdGFibGVzRW5hYmxlPWJv b2w6RmFsc2UKCj4gcmVzdWx0cyBpbiAib3ZpcnQtaG9zdGVkLWVuZ2luZS1zZXR1cCAtLWNvbmZp Zy1hcHBlbmQ9b3ZoZS1hbnN3ZXJzLmNvbmYiCj4gbGVhdmluZyBpcHRhYmxlcyBydWxlcyB1bnRv dWNoZWQgd2hpbGUgYWRkaW5nIHRoZSBzZWNvbmQgaHlwZXJ2aXNvciBob3N0IHRvCj4gYW4gYWxy ZWFkeSBkZXBsb3llZCBzZWxmLWhvc3RlZC1lbmdpbmUgd2l0aCBvbmUgcGh5c2ljYWwgaG9zdC4K ClRoYW5rcyBmb3IgdGhlIHJlcG9ydCEgCgpBcyBJIHNhaWQsIEkgYW0gbm90IHN1cmUgdGhpcyBp cyBhIHBlcmZlY3Qgc29sdXRpb24sIGJlY2F1c2Ugbm93IHRoZSBlbmdpbmUgdGhpbmtzIGl0IHVw ZGF0ZWQgaXB0YWJsZXMgd2hlcmUgaW4gcHJhY3RpY2UgaXQgZGlkbid0LiAKCj4gTWFueSB0aGFu a3MgYWdhaW4sCj4gR2l1c2VwcGUKCj4gUFM6IGlzIHRoZXJlIGFueSBkaWZmZXJlbmNlIGluIHVz aW5nICJvdmlydC1ob3N0ZWQtZW5naW5lLXNldHVwIiB2cy4KPiAiaG9zdGVkLWVuZ2luZSAtLWRl cGxveSIgPwoKTm8uIAotLSAKRGlkaSAKCi0tLS0tLT1fUGFydF84MjMxNzE5XzQ5MzU5MzQxOC4x Mzk1ODE4NTc0NTI2CkNvbnRlbnQtVHlwZTogdGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04CkNvbnRl bnQtVHJhbnNmZXItRW5jb2Rpbmc6IHF1b3RlZC1wcmludGFibGUKCjxodG1sPjxib2R5PjxkaXYg c3R5bGU9M0QiZm9udC1mYW1pbHk6IHRpbWVzIG5ldyByb21hbiwgbmV3IHlvcmssIHRpbWVzLCBz ZT0KcmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiAjMDAwMDAwIj48ZGl2PjwvZGl2PjxibG9j a3F1b3RlIHN0eWxlPTNEImJvcmRlPQpyLWxlZnQ6MnB4IHNvbGlkICMxMDEwRkY7bWFyZ2luLWxl ZnQ6NXB4O3BhZGRpbmctbGVmdDo1cHg7Y29sb3I6IzAwMDtmb250LXc9CmVpZ2h0Om5vcm1hbDtm b250LXN0eWxlOm5vcm1hbDt0ZXh0LWRlY29yYXRpb246bm9uZTtmb250LWZhbWlseTpIZWx2ZXRp Y2EsQT0KcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMnB0OyI+PGI+RnJvbTogPC9iPiJHaXVz ZXBwZSBSYWd1c2EiICZsdDtnaXVzZXBwPQplLnJhZ3VzYUBob3RtYWlsLmNvbSZndDs8YnI+PGI+ VG86IDwvYj4iWWVkaWR5YWggQmFyIERhdmlkIiAmbHQ7ZGlkaUByZWRoYXQ9Ci5jb20mZ3Q7PGJy PjxiPkNjOiA8L2I+IlVzZXJzQG92aXJ0Lm9yZyIgJmx0O3VzZXJzQG92aXJ0Lm9yZyZndDs8YnI+ PGI+U2VudD0KOiA8L2I+V2VkbmVzZGF5LCBNYXJjaCAyNiwgMjAxNCAxMjowOTo0NCBBTTxicj48 Yj5TdWJqZWN0OiA8L2I+UkU6IFtVc2Vyc10gPQpPdG9waSBwcmUtc2VlZGVkIGFuc3dlcnMgYW5k IGZpcmV3YWxsIHNldHRpbmdzPGJyPjxkaXY+PGJyPjwvZGl2PjxzdHlsZT48IS09Ci0KLmhtbWVz c2FnZSBQCnsKbWFyZ2luOjBweDsKcGFkZGluZzowcHgKfQpib2R5LmhtbWVzc2FnZQp7CmZvbnQt c2l6ZTogMTJwdDsKZm9udC1mYW1pbHk6Q2FsaWJyaQp9Ci0tPjwvc3R5bGU+PGRpdiBkaXI9M0Qi bHRyIj5IaSBEaWRpLDxicj5JIGNhbiBjb25maXJtIHRoYXQgdXNpbmcgYm90aCBhbiBvdj0KaGUt YW5zd2Vycy5jb25mIGRpcmVjdGl2ZTo8YnI+T1ZFSE9TVEVEX05FVFdPUksvZmlyZXdhbGxNYW5h Z2VyPTNEc3RyOm5vbmV4PQppc3RlbnQ8YnI+PGRpdj48YnI+PC9kaXY+YW5kIGFuIC9ldGMvb3Zp cnQtaG9zdC1kZXBsb3kuY29uZi5kLzk5LXByZXZlbnQtaXA9CnRhYmxlcy5jb25mIHdpdGg6PGJy PltlbnZpcm9ubWVudDplbmZvcmNlXTxicj5ORVRXT1JLL2lwdGFibGVzRW5hYmxlPTNEYm9vbD0K OkZhbHNlPGJyPjxkaXY+PGJyPjwvZGl2PnJlc3VsdHMgaW4gIm92aXJ0LWhvc3RlZC1lbmdpbmUt c2V0dXAgLS1jb25maWctYXBwPQplbmQ9M0RvdmhlLWFuc3dlcnMuY29uZiIgbGVhdmluZyBpcHRh YmxlcyBydWxlcyB1bnRvdWNoZWQgd2hpbGUgYWRkaW5nIHRoZSA9CnNlY29uZCBoeXBlcnZpc29y IGhvc3QgdG8gYW4gYWxyZWFkeSBkZXBsb3llZCBzZWxmLWhvc3RlZC1lbmdpbmUgd2l0aCBvbmUg cD0KaHlzaWNhbCBob3N0LjwvZGl2PjwvYmxvY2txdW90ZT48ZGl2Pjxicj48L2Rpdj48ZGl2PlRo YW5rcyBmb3IgdGhlIHJlcG9ydCE8PQovZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+QXMgSSBzYWlk LCBJIGFtIG5vdCBzdXJlIHRoaXMgaXMgYSBwZXJmZWN0IHNvbHV0aW89Cm4sIGJlY2F1c2Ugbm93 IHRoZSBlbmdpbmUgdGhpbmtzIGl0IHVwZGF0ZWQgaXB0YWJsZXMgd2hlcmUgaW4gcHJhY3RpY2Ug aXQgZD0KaWRuJ3QuPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj48YnI+ PC9kaXY+PGJsb2NrcXVvdGUgc3R5bGU9Cj0zRCJib3JkZXItbGVmdDoycHggc29saWQgIzEwMTBG RjttYXJnaW4tbGVmdDo1cHg7cGFkZGluZy1sZWZ0OjVweDtjb2xvcjojMD0KMDA7Zm9udC13ZWln aHQ6bm9ybWFsO2ZvbnQtc3R5bGU6bm9ybWFsO3RleHQtZGVjb3JhdGlvbjpub25lO2ZvbnQtZmFt aWx5OkhlPQpsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEycHQ7Ij48ZGl2IGRp cj0zRCJsdHIiPjxicj48ZGl2Pjxicj48L2Q9Cml2Pk1hbnkgdGhhbmtzIGFnYWluLDxicj5HaXVz ZXBwZTxicj48ZGl2Pjxicj48L2Rpdj5QUzogaXMgdGhlcmUgYW55IGRpZmZlcj0KZW5jZSBpbiB1 c2luZyAib3ZpcnQtaG9zdGVkLWVuZ2luZS1zZXR1cCIgdnMuICJob3N0ZWQtZW5naW5lIC0tZGVw bG95IiA/PC9kPQppdj48L2Jsb2NrcXVvdGU+PGRpdj48YnI+PC9kaXY+PGRpdj5Oby48L2Rpdj48 ZGl2Pi0tJm5ic3A7PC9kaXY+PGRpdj5EaWRpPC89CmRpdj48ZGl2Pjxicj48L2Rpdj48c3R5bGU+ PCEtLQouRXh0ZXJuYWxDbGFzcyAuZWN4aG1tZXNzYWdlIFAgewpwYWRkaW5nOjBweDsKfQoKLkV4 dGVybmFsQ2xhc3MgYm9keS5lY3hobW1lc3NhZ2Ugewpmb250LXNpemU6MTJwdDsKZm9udC1mYW1p bHk6Q2FsaWJyaTsKfQoKLS0+PC9zdHlsZT48c3R5bGU+PCEtLQouRXh0ZXJuYWxDbGFzcyAuZWN4 aG1tZXNzYWdlIFAgewpwYWRkaW5nOjBweDsKfQoKLkV4dGVybmFsQ2xhc3MgYm9keS5lY3hobW1l c3NhZ2Ugewpmb250LXNpemU6MTJwdDsKZm9udC1mYW1pbHk6Q2FsaWJyaTsKfQoKCi0tPjwvc3R5 bGU+PC9kaXY+PC9ib2R5PjwvaHRtbD4KLS0tLS0tPV9QYXJ0XzgyMzE3MTlfNDkzNTkzNDE4LjEz OTU4MTg1NzQ1MjYtLQo= --===============0058528786634335716==--