- Users - oVirt List Archives

Re: [Users] Can oVirt be installed in a virtual machine?
by Itamar Heim 06 Oct '12

06 Oct '12

On 09/13/2012 12:20 AM, Nicolas Chenier wrote: > Yes! how critical is the availability? you could place it in a VM on shared storage. then launch it on one host. but you should never launch it on the other host before you made sure it doesn't run on the first node, or it will be corrupted. you also want to set the SPM priority on the node it is running to lower than the other node so SPM won't be scheduled on engine node. > > On 2012-09-12 5:02 PM, "Itamar Heim" <iheim(a)redhat.com > <mailto:iheim@redhat.com>> wrote: > > On 09/12/2012 11:58 PM, Nicolas Chenier wrote: > > Thank you Itamar, much appreciated... > > So how would you go about getting this setup if you only have 2 host > servers? > > > are they supposed to be in same cluster with shared storage, live > migration, etc.? > > > > On Wed, Sep 12, 2012 at 4:43 PM, Itamar Heim <iheim(a)redhat.com > <mailto:iheim@redhat.com> > <mailto:iheim@redhat.com <mailto:iheim@redhat.com>>> wrote: > > On 09/12/2012 08:26 PM, Nicolas Chenier wrote: > > Hi all, > > I am starting a small hosting business and want to use > oVirt w/ > KVM as > my virtualization platform. > > I currently have 2 host servers and an iSCSI NAS. > > Do I need a dedicated machine to run oVirt? Can I run > it from a VM? > > > either will work, but not easy right now to host the engine > on its > own hypervisor. > > > > Can I use the all-in-one solution in a Production > environment, > with a > 2nd host? ... would I need to install oVirt on both > hosts, in > the event > that one of my servers went down? > > > the all-in-one is mostly intended for POC level, using > local storage > of the host. > if you plan to use both hosts with local storage, you > should be able > to use it, depending on strength of your hosts. > > > > I am trying to see how I can survive if my oVirt server > fails. > It would > be great if it ran from a VM but I can also see issues with > doing that... > > Another option would be to run oVirt on my workstation > and have it > connect to my 2 host servers in colocation over the > internet? > > > should work over WAN, but if you are hosting, wouldn't > users need to > access the engine / your workstation? > > > Please let me know how you've accomplished an oVirt > setup with 2 > servers. > > Thank you! > > Nic > > > > > ___________________________________________________ > Users mailing list > Users(a)ovirt.org <mailto:Users@ovirt.org> <mailto:Users@ovirt.org > <mailto:Users@ovirt.org>> > http://lists.ovirt.org/____mailman/listinfo/users > <http://lists.ovirt.org/__mailman/listinfo/users> > <http://lists.ovirt.org/__mailman/listinfo/users > <http://lists.ovirt.org/mailman/listinfo/users>> > > > > > >

4 12

[Users] ovirt cli commands / script wont exit the shell
by Alex Leonhardt 06 Oct '12

06 Oct '12

This is a multi-part message in MIME format. --------------050106070209060408090504 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit hi there, i'm playing with the Ovirt CLI and started to script a few things, but it seems as if the console stays connected when I execute the commands - I even included a "exit" and tried "disconnect", but nothing would do it - any hints / clues ? the script is very simple : --- action vm vm2 start exit --- or --- action vm vm1 stop disconnect exit --- I always end up back here : ### ========================================== >>> connected to oVirt manager 3.1.0.0 <<< ========================================== [oVirt shell (connected)]# action vm vm2 start status-state: complete [oVirt shell (connected)]# exit [oVirt shell (connected)]# ### Thanks Alex --------------050106070209060408090504 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> hi there, i'm playing with the Ovirt CLI and started to script a few things, but it seems as if the console stays connected when I execute the commands - I even included a "exit" and tried "disconnect", but nothing would do it - any hints / clues ? the script is very simple : --- action vm vm2 start exit --- or --- action vm vm1 stop disconnect exit --- I always end up back here : ###  ==========================================  >>> connected to oVirt manager 3.1.0.0 <<<  ========================================== [oVirt shell (connected)]# action vm vm2 start status-state: complete [oVirt shell (connected)]# exit [oVirt shell (connected)]# ### Thanks Alex </body> </html> --------------050106070209060408090504--

1 0

Re: [Users] Users Digest, Vol 13, Issue 17
by Jonathan Larson 06 Oct '12

06 Oct '12

--_000_19A02BE7DAAF904D9E66EDE8550C40080A3BC443mbx024e1nj10exc_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Sent from my Android phone using TouchDown (www.nitrodesk.com) -----Original Message----- From: users-request(a)ovirt.org [users-request(a)ovirt.org] Received: Saturday, 06 Oct 2012, 12:00 To: users(a)ovirt.org [users(a)ovirt.org] Subject: Users Digest, Vol 13, Issue 17 Send Users mailing list submissions to users(a)ovirt.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.ovirt.org/mailman/listinfo/users or, via email, send a message with subject or body 'help' to users-request(a)ovirt.org You can reach the person managing the list at users-owner(a)ovirt.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Users digest..." Today's Topics: 1. Re: Nightly Builds, was Authentication for REST APIs? (Steve Gordon) 2. Re: Ceph / rbd and ovirt (Ayal Baron) 3. Re: [Spice-devel] mouse problem with muiltiple monitors (was HowTo: Spice ActiveX Plugin/Virt Viewer Console on oVirt 3.1) (Dead Horse) 4. Re: fw: Migrating ovirt-engine to new server (Juan Hernandez) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Oct 2012 14:02:19 -0400 (EDT) From: Steve Gordon <sgordon(a)redhat.com> To: Brian Vetter <bjvetter(a)gmail.com> Cc: users(a)ovirt.org Subject: Re: [Users] Nightly Builds, was Authentication for REST APIs? Message-ID: <372383135.7069086.1349460139686.JavaMail.root(a)redhat.com> Content-Type: text/plain; charset=3Dutf-8 ----- Original Message ----- > From: "Brian Vetter" <bjvetter(a)gmail.com> > To: "Itamar Heim" <iheim(a)redhat.com> > Cc: users(a)ovirt.org > Sent: Friday, October 5, 2012 12:03:13 PM > Subject: Re: [Users] Nightly Builds, was Authentication for REST APIs? > > I found instructions on the wiki for using nightly builds at: > > http://wiki.ovirt.org/wiki/Installing_ovirt-engine_from_rpm > > The instructions didn't work. In particular, the ovirt-engine.repo > file was not found at the provided url. > http://www.ovirt.org/releases/nightly/fedora/16/ovirt-engine.repo > > I did find an ovirt-engine.repo file at: > http://www.ovirt.org/releases/nightly/rpm/Fedora/17/ovirt-engine.repo > > The contents of that repo file point it back to the > releases/3.1/rpm/Fedora/17 directory. I'm presuming that if I change > the baseurl to releases/nightly/rpm/... it will all work (which I'll > be doing this afternoon). > > In any case, someone might want to fix the ovirt-engine.repo file in > the nightly tree and then update the urls in the wiki. > > Brian I would recommend using this package to install the repo file: http://www.ovirt.org/releases/ovirt-release-fedora.noarch.rpm It includes definitions for both the stable and nightly repositories - defa= ulting to stable. You can: yum install ovirt-engine --enablerepo=3Dovirt-nightly Or enable it in the /etc/yum.repos.d/ovirt.repo file. Agree that the other = repo files littering the directory structure should be cleaned up (I though= t they already had been). Who has access to do that? Steve ------------------------------ Message: 2 Date: Fri, 5 Oct 2012 20:02:46 -0400 (EDT) From: Ayal Baron <abaron(a)redhat.com> To: Josh Logan <joshtlogan(a)gmail.com> Cc: users(a)ovirt.org Subject: Re: [Users] Ceph / rbd and ovirt Message-ID: <887641321.6918996.1349481766537.JavaMail.root(a)redhat.com> Content-Type: text/plain; charset=3Dutf-8 Hi Josh, ----- Original Message ----- > > > > On Sun, Sep 23, 2012 at 8:41 AM, Itamar Heim < iheim(a)redhat.com > > wrote: > > > > On 09/23/2012 05:33 PM, Josh Logan wrote: > > > > > On Sun, Sep 23, 2012 at 6:10 AM, Itamar Heim < iheim(a)redhat.com > > > <mailto: iheim(a)redhat.com >> wrote: > > On 09/22/2012 08:58 AM, Josh Logan wrote: > > > I'm currently setting up an ovirt cluster and so far it looks > good. I > like the integration with Foreman http://theforeman.org/ . > > I would like to use Ceph / rbd for my storage. I saw some > mention of > patches coming in May, but I did not find any new posts. > > What is the status of this work? Is there some patches I can > try out? > I have a working Ceph cluster and a working ovirt cluster, I > just need a > way to bring them together. > > Thanks, JOSH > > > > I don't remember any active work on this right now (for sure nothing > like the gluster integration being done). > but iiuc, ceph provides posixfs support - did you try creating a > posixfs based storage domain? > (you would need a "full" host (not ovirt-node) to install ceph > client components on). > > Thanks, > Itamar > > > > I am doing my work on Fedora 17 hosts, not ovirt-node, since I know > this > will need more OS support. > > There are a few different Ceph filesystems. But the posix based one > is > the least ready for production. The rbd filesystem is integrated into > qemu and libvirt is the most suited for VM images. > > Are the Gluster patches available? I would like to see what that > feature looks like and if I can modify them for Ceph. > If there is a better filesystem to investigate please let me know. > > Thanks, JOSH > > > gluster as a native storage domain (rather than posixfs) is still in > reviews (and has patches only for vdsm side). > http://gerrit.ovirt.org/#/c/ 6856/ > > you can also use NFS in the meantime if relevant for ceph. > > > > Thanks for the pointer. I'll follow that and see what I learn. > > The vdsm side may be similar since both are network disk device. > There are only 2 steps needed to start up a VM with rbd. > > qemu-img create -f rbd rbd:data/host1 10G > > Then to start the image for qemu add -drive > file=3Drbd:data/host1,if=3Dnone,id=3Ddrive-virtio-disk0,format=3Draw > > or within libvirt: > <disk type=3D'network' device=3D'disk'> > <driver name=3D'qemu' type=3D'raw'/> > <source protocol=3D'rbd' name=3D'data/host1'/> > <target dev=3D'vda' bus=3D'virtio'/> > <address type=3D'pci' domain=3D'0x0000' bus=3D'0x00' slot=3D'0x05' > function=3D'0x0'/> > </disk> > > So the steps are simple, and maybe Gluster is more complex then I > should use as an example. Have you followed up on this? Do you need more pointers? Regards, Ayal. > > Thanks, JOSH > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > ------------------------------ Message: 3 Date: Fri, 5 Oct 2012 21:34:00 -0500 From: Dead Horse <deadhorseconsulting(a)gmail.com> To: Christophe Fergeau <cfergeau(a)redhat.com> Cc: spice-devel(a)lists.freedesktop.org, "<users(a)ovirt.org>" <users(a)ovirt.org> Subject: Re: [Users] [Spice-devel] mouse problem with muiltiple monitors (was HowTo: Spice ActiveX Plugin/Virt Viewer Console on oV= irt 3.1) Message-ID: <CAEWPe=3Dp8Xf3uYHDbD5uAz46i-OnHJxfYxrzJ-XkNc64GfwtjBQ(a)mail.gmail.c= om> Content-Type: text/plain; charset=3D"iso-8859-1" I've actually started to notice that this occurs natively as well (I rarely if ever use the activex console on a native windows install). However I have noted that with a Native Windows install and the Activex Remote Viewer version 0.5.3 that alot of guests have mouse issues w/o spice vdagent or the windows spice agent in place (very annoying during LFC guests with no knowledge of "spice mice"). Windows installs can be slipstreamed with the spice drivers to fix this but thats really a pain. Linux guests however not as easy. This actually seems to a repeat of this issue: http://lists.ovirt.org/pipermail/users/2012-February/000351.html (for which a fix was applied to windows spicec + activex NOT remote-viewer) possible regression? Using the usbtablet custom vdsm hook does indeed solve issues with guests that encounter this issue. I have noted it within older linux guests (no surprise they know nothing of a spice mouse), windows guests, solaris guests, some of the older opensuse and ubuntu as well as fedora. The most confusing one was RHEL 6.x which without the spice vdagent loaded will experience the cursor jumping in and out of the window or randomly on the spice display. I note the one downside of the usbtablet is that power users are able to view custom hooks in the PUP UI, but cannot set them as only the "admin role" not "user role" can do this. That is to say the power user can look at and even set the hook but is stopped short of committing it to the VM settings. - DHC On Fri, Oct 5, 2012 at 5:18 AM, Christophe Fergeau <cfergeau(a)redhat.com>wro= te: > On Thu, Sep 13, 2012 at 12:26:43PM +0300, Itamar Heim wrote: > > On 09/13/2012 10:24 AM, Karli Sj?berg wrote: > > > > > >13 sep 2012 kl. 01.21 skrev Dead Horse: > > > > > >>Thank you! glad to be able to help ;) > > >> > > >>As Itamar mentioned if you are running the spice client inside a VM > > >>(dunno if this is case) you will need the guest paravirtual driver > > >>and/or services for mouse handling. I have observed exactly this > > >>behavior before when running the spice client in a VM when the guest > > >>tools/drivers for mouse handling are not present (In my case most of > > >>the time VirtualBox). > > > > > >Very amusing "bug":) But cripples SPICE?s usage. > > > > > >I have tested this from 5 different physical machines running Win7/IE, > > >and this behavior shows itself only on machines with more than one > > >monitor, or a laptop with another monitor attached .e.g. These guest > > >tools you both mention, would these be > > >"http://spice-space.org/download/binaries/spice-guest-tools-0.1.exe"? > > >And can you install them in a physical machine as well? > > > > cc-ing spice-devel to see if they have insights on your issue > > Could this be related to > https://bugzilla.redhat.com/show_bug.cgi?id=3D852841 > ? > > Christophe >

1 0

Re: [Users] Users Digest, Vol 13, Issue 17
by Jonathan Larson 06 Oct '12

06 Oct '12

--_000_19A02BE7DAAF904D9E66EDE8550C40080A3BC40Ambx024e1nj10exc_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable -----Original Message----- From: users-request(a)ovirt.org [users-request(a)ovirt.org] Received: Saturday, 06 Oct 2012, 12:00 To: users(a)ovirt.org [users(a)ovirt.org] Subject: Users Digest, Vol 13, Issue 17 Send Users mailing list submissions to users(a)ovirt.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.ovirt.org/mailman/listinfo/users or, via email, send a message with subject or body 'help' to users-request(a)ovirt.org You can reach the person managing the list at users-owner(a)ovirt.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Users digest..." Today's Topics: 1. Re: Nightly Builds, was Authentication for REST APIs? (Steve Gordon) 2. Re: Ceph / rbd and ovirt (Ayal Baron) 3. Re: [Spice-devel] mouse problem with muiltiple monitors (was HowTo: Spice ActiveX Plugin/Virt Viewer Console on oVirt 3.1) (Dead Horse) 4. Re: fw: Migrating ovirt-engine to new server (Juan Hernandez) ---------------------------------------------------------------------- Message: 1 Date: Fri, 5 Oct 2012 14:02:19 -0400 (EDT) From: Steve Gordon <sgordon(a)redhat.com> To: Brian Vetter <bjvetter(a)gmail.com> Cc: users(a)ovirt.org Subject: Re: [Users] Nightly Builds, was Authentication for REST APIs? Message-ID: <372383135.7069086.1349460139686.JavaMail.root(a)redhat.com> Content-Type: text/plain; charset=3Dutf-8 ----- Original Message ----- > From: "Brian Vetter" <bjvetter(a)gmail.com> > To: "Itamar Heim" <iheim(a)redhat.com> > Cc: users(a)ovirt.org > Sent: Friday, October 5, 2012 12:03:13 PM > Subject: Re: [Users] Nightly Builds, was Authentication for REST APIs? > > I found instructions on the wiki for using nightly builds at: > > http://wiki.ovirt.org/wiki/Installing_ovirt-engine_from_rpm > > The instructions didn't work. In particular, the ovirt-engine.repo > file was not found at the provided url. > http://www.ovirt.org/releases/nightly/fedora/16/ovirt-engine.repo > > I did find an ovirt-engine.repo file at: > http://www.ovirt.org/releases/nightly/rpm/Fedora/17/ovirt-engine.repo > > The contents of that repo file point it back to the > releases/3.1/rpm/Fedora/17 directory. I'm presuming that if I change > the baseurl to releases/nightly/rpm/... it will all work (which I'll > be doing this afternoon). > > In any case, someone might want to fix the ovirt-engine.repo file in > the nightly tree and then update the urls in the wiki. > > Brian I would recommend using this package to install the repo file: http://www.ovirt.org/releases/ovirt-release-fedora.noarch.rpm It includes definitions for both the stable and nightly repositories - defa= ulting to stable. You can: yum install ovirt-engine --enablerepo=3Dovirt-nightly Or enable it in the /etc/yum.repos.d/ovirt.repo file. Agree that the other = repo files littering the directory structure should be cleaned up (I though= t they already had been). Who has access to do that? Steve ------------------------------ Message: 2 Date: Fri, 5 Oct 2012 20:02:46 -0400 (EDT) From: Ayal Baron <abaron(a)redhat.com> To: Josh Logan <joshtlogan(a)gmail.com> Cc: users(a)ovirt.org Subject: Re: [Users] Ceph / rbd and ovirt Message-ID: <887641321.6918996.1349481766537.JavaMail.root(a)redhat.com> Content-Type: text/plain; charset=3Dutf-8 Hi Josh, ----- Original Message ----- > > > > On Sun, Sep 23, 2012 at 8:41 AM, Itamar Heim < iheim(a)redhat.com > > wrote: > > > > On 09/23/2012 05:33 PM, Josh Logan wrote: > > > > > On Sun, Sep 23, 2012 at 6:10 AM, Itamar Heim < iheim(a)redhat.com > > > <mailto: iheim(a)redhat.com >> wrote: > > On 09/22/2012 08:58 AM, Josh Logan wrote: > > > I'm currently setting up an ovirt cluster and so far it looks > good. I > like the integration with Foreman http://theforeman.org/ . > > I would like to use Ceph / rbd for my storage. I saw some > mention of > patches coming in May, but I did not find any new posts. > > What is the status of this work? Is there some patches I can > try out? > I have a working Ceph cluster and a working ovirt cluster, I > just need a > way to bring them together. > > Thanks, JOSH > > > > I don't remember any active work on this right now (for sure nothing > like the gluster integration being done). > but iiuc, ceph provides posixfs support - did you try creating a > posixfs based storage domain? > (you would need a "full" host (not ovirt-node) to install ceph > client components on). > > Thanks, > Itamar > > > > I am doing my work on Fedora 17 hosts, not ovirt-node, since I know > this > will need more OS support. > > There are a few different Ceph filesystems. But the posix based one > is > the least ready for production. The rbd filesystem is integrated into > qemu and libvirt is the most suited for VM images. > > Are the Gluster patches available? I would like to see what that > feature looks like and if I can modify them for Ceph. > If there is a better filesystem to investigate please let me know. > > Thanks, JOSH > > > gluster as a native storage domain (rather than posixfs) is still in > reviews (and has patches only for vdsm side). > http://gerrit.ovirt.org/#/c/ 6856/ > > you can also use NFS in the meantime if relevant for ceph. > > > > Thanks for the pointer. I'll follow that and see what I learn. > > The vdsm side may be similar since both are network disk device. > There are only 2 steps needed to start up a VM with rbd. > > qemu-img create -f rbd rbd:data/host1 10G > > Then to start the image for qemu add -drive > file=3Drbd:data/host1,if=3Dnone,id=3Ddrive-virtio-disk0,format=3Draw > > or within libvirt: > <disk type=3D'network' device=3D'disk'> > <driver name=3D'qemu' type=3D'raw'/> > <source protocol=3D'rbd' name=3D'data/host1'/> > <target dev=3D'vda' bus=3D'virtio'/> > <address type=3D'pci' domain=3D'0x0000' bus=3D'0x00' slot=3D'0x05' > function=3D'0x0'/> > </disk> > > So the steps are simple, and maybe Gluster is more complex then I > should use as an example. Have you followed up on this? Do you need more pointers? Regards, Ayal. > > Thanks, JOSH > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > ------------------------------ Message: 3 Date: Fri, 5 Oct 2012 21:34:00 -0500 From: Dead Horse <deadhorseconsulting(a)gmail.com> To: Christophe Fergeau <cfergeau(a)redhat.com> Cc: spice-devel(a)lists.freedesktop.org, "<users(a)ovirt.org>" <users(a)ovirt.org> Subject: Re: [Users] [Spice-devel] mouse problem with muiltiple monitors (was HowTo: Spice ActiveX Plugin/Virt Viewer Console on oV= irt 3.1) Message-ID: <CAEWPe=3Dp8Xf3uYHDbD5uAz46i-OnHJxfYxrzJ-XkNc64GfwtjBQ(a)mail.gmail.c= om> Content-Type: text/plain; charset=3D"iso-8859-1" I've actually started to notice that this occurs natively as well (I rarely if ever use the activex console on a native windows install). However I have noted that with a Native Windows install and the Activex Remote Viewer version 0.5.3 that alot of guests have mouse issues w/o spice vdagent or the windows spice agent in place (very annoying during LFC guests with no knowledge of "spice mice"). Windows installs can be slipstreamed with the spice drivers to fix this but thats really a pain. Linux guests however not as easy. This actually seems to a repeat of this issue: http://lists.ovirt.org/pipermail/users/2012-February/000351.html (for which a fix was applied to windows spicec + activex NOT remote-viewer) possible regression? Using the usbtablet custom vdsm hook does indeed solve issues with guests that encounter this issue. I have noted it within older linux guests (no surprise they know nothing of a spice mouse), windows guests, solaris guests, some of the older opensuse and ubuntu as well as fedora. The most confusing one was RHEL 6.x which without the spice vdagent loaded will experience the cursor jumping in and out of the window or randomly on the spice display. I note the one downside of the usbtablet is that power users are able to view custom hooks in the PUP UI, but cannot set them as only the "admin role" not "user role" can do this. That is to say the power user can look at and even set the hook but is stopped short of committing it to the VM settings. - DHC On Fri, Oct 5, 2012 at 5:18 AM, Christophe Fergeau <cfergeau(a)redhat.com>wro= te: > On Thu, Sep 13, 2012 at 12:26:43PM +0300, Itamar Heim wrote: > > On 09/13/2012 10:24 AM, Karli Sj?berg wrote: > > > > > >13 sep 2012 kl. 01.21 skrev Dead Horse: > > > > > >>Thank you! glad to be able to help ;) > > >> > > >>As Itamar mentioned if you are running the spice client inside a VM > > >>(dunno if this is case) you will need the guest paravirtual driver > > >>and/or services for mouse handling. I have observed exactly this > > >>behavior before when running the spice client in a VM when the guest > > >>tools/drivers for mouse handling are not present (In my case most of > > >>the time VirtualBox). > > > > > >Very amusing "bug":) But cripples SPICE?s usage. > > > > > >I have tested this from 5 different physical machines running Win7/IE, > > >and this behavior shows itself only on machines with more than one > > >monitor, or a laptop with another monitor attached .e.g. These guest > > >tools you both mention, would these be > > >"http://spice-space.org/download/binaries/spice-guest-tools-0.1.exe"? > > >And can you install them in a physical machine as well? > > > > cc-ing spice-devel to see if they have insights on your issue > > Could this be related to > https://bugzilla.redhat.com/show_bug.cgi?id=3D852841 > ? > > Christophe >

1 0

[Users] [vdsm] SPICE SSL Woes
by Bret Palsson 05 Oct '12

05 Oct '12

I can't seem to get this secure spice session to work. Any help is appreciated, already burnt 20 hours on this. Spice versions: spice-server-0.10.1 spice-client 0.12.0 spice-xpi 2.7 spicec: I set the password to abcd using a bash script found on this mailing list, valid for 1200 seconds. ============================================= # spicec --password abcd --secure-channels all -h 10.20.20.2 --secure-port 5902 --ca-file cacert.pem Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1) 139833084392776:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:s3_clnt.c:1063: Warning: SSL Error: ============================================= spice-xpi: spice-xpi.log ============================================= built and installed latest (which is great has better debugging output: 2012-10-02 07:58:26,805 DEBUG nsPluginInstance::SetHostIP: 10.20.20.2 2012-10-02 07:58:26,806 DEBUG nsPluginInstance::SetPort: 5901 2012-10-02 07:58:26,806 DEBUG nsPluginInstance::SetTitle: Test:%d - Press SHIFT+F12 to Release Cursor 2012-10-02 07:58:26,807 DEBUG nsPluginInstance::SetDynamicMenu: 2012-10-02 07:58:26,807 DEBUG nsPluginInstance::SetFullScreen: 0 2012-10-02 07:58:26,808 DEBUG nsPluginInstance::SetPassword: Password set 2012-10-02 07:58:26,808 DEBUG nsPluginInstance::SetNumberOfMonitors: 1 2012-10-02 07:58:26,808 DEBUG nsPluginInstance::SetUsbListenPort: 0 2012-10-02 07:58:26,809 DEBUG nsPluginInstance::SetAdminConsole: 1 2012-10-02 07:58:26,809 DEBUG nsPluginInstance::SetSecurePort: 5902 2012-10-02 07:58:26,810 DEBUG nsPluginInstance::SetSSLChannels: original channels: smain,sinputs,scursor,splayback,srecord,sdisplay 2012-10-02 07:58:26,810 DEBUG nsPluginInstance::SetSSLChannels: modified channels: main,inputs,cursor,playback,record,display 2012-10-02 07:58:26,810 DEBUG nsPluginInstance::SetGuestHostName: Test 2012-10-02 07:58:26,811 DEBUG nsPluginInstance::SetCipherSuite: DEFAULT 2012-10-02 07:58:26,811 DEBUG nsPluginInstance::SetHostSubject: O=Best Company,CN=10.20.20.2 2012-10-02 07:58:26,812 DEBUG nsPluginInstance::SetTrustStore: Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, O=Best Company, CN=CA-ovirt-engine.example.com.28202 Validity Not Before: Sep 6 21:49:14 2012 Not After : Sep 6 03:49:15 2022 GMT Subject: C=US, O=Best Company, CN=CA-ovirt-engine.example.com.28202 Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (1024 bit) Modulus: 00:bc:70:bd:bc:a0:07:7a:99:5e:84:c6:91:70:30: 3e:f0:2a:c9:96:cb:ac:d5:f4:e7:a4:8d:85:c2:2d: 39:12:fa:2f:3f:3c:bf:bb:ed:90:31:28:ae:38:49: 68:e2:4a:ca:89:21:4c:1c:b5:72:ca:e5:c7:3d:d8: 64:95:22:98:45:67:50:43:dd:8e:cb:9e:39:d4:9b: 11:16:71:e1:d9:81:1e:4d:1c:2c:9c:6d:7c:d1:43: a1:af:4a:83:77:e8:ad:0d:92:cb:fa:45:b8:d3:b6: 50:99:3e:4e:a7:91:30:57:ce:a7:5b:62:95:7f:9b: fd:26:05:a9:e0:8e:45:2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:93:27:08:E5:4D:2B:CE:EC:55:2C:E6:C4:C0:EE:32:0C:87:22:BF Authority Information Access: CA Issuers - URI:http://ovirt-engine.example.com:80/ca.crt X509v3 Authority Key Identifier: keyid:87:93:27:08:E5:4D:2B:CE:EC:55:2C:E6:C4:C0:EE:32:0C:87:22:BF DirName:/C=US/O=Best Company/CN=CA-ovirt-engine.example.com.28202 serial:01 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Signature Algorithm: sha1WithRSAEncryption a1:a9:17:91:ba:6e:0d:15:ce:28:e0:b8:7f:3c:5e:ba:6e:8d: 31:91:bf:99:0c:74:5f:95:86:e6:90:fd:3c:13:3a:64:9e:40: f7:4f:e0:45:b8:8e:27:b3:23:d4:75:bb:be:5f:73:4f:48:e4: 8c:6d:11:eb:76:70:81:c7:a5:8a:35:0b:ef:a5:cf:3d:ae:fd: 1f:94:b7:e4:c3:4c:7f:fb:5b:09:eb:e8:b1:35:3c:b8:ba:e8: b7:d0:5f:8a:98:b5:9a:6c:24:53:2a:49:61:0e:7c:5e:b3:d2: d4:c3:dd:ca:b9:57:a3:f0:e4:9c:d6:3d:43:40:9d:dd:ff:cd: 94:be -----BEGIN CERTIFICATE----- MIIDCDCCAnGgAwIBAgIBATANBgkqhkiG9w0BAQUFADBMMQswCQYDVQQGEwJVUzEc MBoGA1UEChMTSml2ZSBDb21tdW5pY2F0aW9uczEfMB0GA1UEAxMWQ0EtY20uaml2 ZWlwLm5ldC4yODIwMjAiFxExMjA5MDYyMTQ5MTQrMDcwMBcNMjIwOTA2MDM0OTE1 WjBMMQswCQYDVQQGEwJVUzEcMBoGA1UEChMTSml2ZSBDb21tdW5pY2F0aW9uczEf MB0GA1UEAxMWQ0EtY20uaml2ZWlwLm5ldC4yODIwMjCBnzANBgkqhkiG9w0BAQEF AAOBjQAwgYkCgYEAvHC9vKAHeplehMaRcDA+8CrJlsus1fTnpI2Fwi05EvovPzy/ u+2QMSiuOElo4krKiSFMHLVyyuXHPdhklSKYRWdQQ92Oy5451JsRFnHh2YEeTRws nG180UOhr0qDd+itDZLL+kW407ZQmT5Op5EwV86nW2KVf5v9JgWp4I5FK+MCAwEA AaOB9TCB8jAdBgNVHQ4EFgQUh5MnCOVNK87sVSzmxMDuMgyHIr8wOgYIKwYBBQUH AQEELjAsMCoGCCsGAQUFBzAChh5odHRwOi8vY20uaml2ZWlwLm5ldDo4MC9jYS5j cnQwdAYDVR0jBG0wa4AUh5MnCOVNK87sVSzmxMDuMgyHIr+hUKROMEwxCzAJBgNV BAYTAlVTMRwwGgYDVQQKExNKaXZlIENvbW11bmljYXRpb25zMR8wHQYDVQQDExZD QS1jbS5qaXZlaXAubmV0LjI4MjAyggEBMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMA0GCSqGSIb3DQEBBQUAA4GBAKGpF5G6bg0VzijguH88XrpujTGR v5kMdF+VhuaQ/TwTOmSeQPdP4EW4jiezI9R1u75fc09I5IxtEet2cIHHpYo1C++l zz2u/R+Ut+TDTH/7Wwnr6LE1PLi66LfQX4qYtZpsJFMqSWEOfF6z0tTD3cq5V6Pw 5JzWPUNAnd3/zZS+ -----END CERTIFICATE----- 2012-10-02 07:58:26,813 DEBUG nsPluginInstance::SetHotKeys: release-cursor=shift+f12,toggle-fullscreen=shift+f11 2012-10-02 07:58:26,813 DEBUG nsPluginInstance::SetNoTaskMgrExecution: 0 2012-10-02 07:58:26,813 DEBUG nsPluginInstance::SetSendCtrlAltDelete: 0 2012-10-02 07:58:26,814 DEBUG nsPluginInstance::SetUsbAutoShare: 1 2012-10-02 07:58:26,815 DEBUG nsPluginInstance::SetUsbFilter: -1,-1,-1,-1,0 2012-10-02 07:58:26,816 INFO nsPluginInstance::Connect: SPICE_XPI_SOCKET: /tmp/spicec-8ym5mJ/spice-xpi 2012-10-02 07:58:26,816 INFO nsPluginInstance::Connect: SPICE_FOREIGN_MENU_SOCKET: /tmp/spicec-8ym5mJ/spice-foreign 2012-10-02 07:58:26,816 DEBUG nsPluginInstance::Connect: Controller pid: 50483 2012-10-02 07:58:26,816 DEBUG QErrorHandler: Something went wrong: connect error, 2 2012-10-02 07:58:26,817 DEBUG SpiceController::Connect: Connect Error 2012-10-02 07:58:26,817 INFO nsPluginInstance::Connect: Launching /usr/libexec/spice-xpi-client 2012-10-02 07:58:26,817 DEBUG QErrorHandler: Something went wrong: connect error, 2 2012-10-02 07:58:26,817 DEBUG SpiceController::Connect: Connect Error 2012-10-02 07:58:27,818 DEBUG SpiceController::Connect: Connected! 2012-10-02 07:58:29,821 INFO nsPluginInstance::Connect: Initiating connection with controller 2012-10-02 07:59:05,999 DEBUG nsPluginInstance::ControllerWaitHelper: Controller finished, pid: 50483, exit code: 0 2012-10-02 07:59:05,999 ERROR nsPluginInstance::CallOnDisconnected: could not get browser window, when trying to call OnDisconnected ============================================= Openssl test: ============================================= [root@centos6 ~]# openssl s_client -connect 10.20.20.2:5902 -CAfile cacert.pem CONNECTED(00000003) depth=1 C = US, O = Best Company, CN = CA-ovirt-engine.example.com.28202 verify return:1 depth=0 O = Best Company, CN = 10.20.20.2 verify error:num=9:certificate is not yet valid notBefore=Oct 4 01:40:57 2012 verify return:1 depth=0 O = Best Company, CN = 10.20.20.2 notBefore=Oct 4 01:40:57 2012 verify return:1 --- Certificate chain 0 s:/O=Best Company/CN=10.20.20.2 i:/C=US/O=Best Company/CN=CA-ovirt-engine.example.com.28202 1 s:/C=US/O=Best Company/CN=CA-ovirt-engine.example.com.28202 i:/C=US/O=Best Company/CN=CA-ovirt-engine.example.com.28202 --- Server certificate -----BEGIN CERTIFICATE----- MIIDDTCCAnagAwIBAgIBBzANBgkqhkiG9w0BAQUFADBMMQswCQYDVQQGEwJVUzEc MBoGA1UEChMTSml2ZSBDb21tdW5pY2F0aW9uczEfMB0GA1UEAxMWQ0EtY20uaml2 ZWlwLm5ldC4yODIwMjAiFxExMjEwMDQwMTQwNTctMDYwMBcNMTcxMDA0MDc0MDU4 WjAzMRwwGgYDVQQKExNKaXZlIENvbW11bmljYXRpb25zMRMwEQYDVQQDEwoxMC4y MC4yMC4yMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfxg43vrorGXoui5Cs 69xeS/R31r2FkfE3UO57BzKbToBY88Hj7dUkFjlFVwg3/eUIBh0jYQ5Qq5Q4Kl9p Oy4/58VwqRd6P/C3a9LgF1rdvXEnmtNZyoXNmvFeTgpEF+165hr6aPXmMqXqaSEv ab/mFdxVKM6FwgUWQb/uW3Rp3QIDAQABo4IBEjCCAQ4wHQYDVR0OBBYEFIhzxNFR sbDS9hLGOID0RLPlYrLPMDoGCCsGAQUFBwEBBC4wLDAqBggrBgEFBQcwAoYeaHR0 cDovL2NtLmppdmVpcC5uZXQ6ODAvY2EuY3J0MHQGA1UdIwRtMGuAFIeTJwjlTSvO 7FUs5sTA7jIMhyK/oVCkTjBMMQswCQYDVQQGEwJVUzEcMBoGA1UEChMTSml2ZSBD b21tdW5pY2F0aW9uczEfMB0GA1UEAxMWQ0EtY20uaml2ZWlwLm5ldC4yODIwMoIB ATAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAgBgNVHSUBAf8EFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQEFBQADgYEAayUoWzI77OMVGa1QeWKQ VF/iwu5URB8sbsmFk9NmfUOtIYsVsmdMsoDSYQsL7mEe0SA5GOXpS1sThdXsU1uf 9bZ+dyrmCBmg0/cPOiXA8R1GgS+Bwjc+MxEOuXzTmumfW19hlbKbRXRwgx+vRgDv JbUNV6jXUHqhBeGnsVhiLrQ= -----END CERTIFICATE----- subject=/O=Best Company/CN=10.20.20.2 issuer=/C=US/O=Best Company/CN=CA-ovirt-engine.example.com.28202 --- No client certificate CA names sent --- SSL handshake has read 1884 bytes and written 311 bytes --- New, TLSv1/SSLv3, Cipher is AES256-SHA Server public key is 1024 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : AES256-SHA Session-ID: 9747FACA4B5CC4542E050F4B8534E1B71234BC5F99F3221D284BC53D0A5CB746 Session-ID-ctx: Master-Key: 7A579DA9F75E76C63F3FDFCB5BBE42EE28AEF5211C5AC5ECAE8679166C98FBB5AD00BFC4B8AC5D7E214A3B0069CF50E7 Key-Arg : None Krb5 Principal: None PSK identity: None PSK identity hint: None TLS session ticket: 0000 - ae f2 91 79 e4 94 85 a2-02 60 aa 91 54 a5 3f 13 ...y.....`..T.?. 0010 - 90 b4 78 20 27 5a 52 61-78 a1 4d db 73 25 c0 f8 ..x 'ZRax.M.s%.. 0020 - 65 7f 43 76 72 35 08 96-0d 32 c4 72 eb ae c4 a9 e.Cvr5...2.r.... 0030 - 83 78 7f 48 8c c6 a9 38-78 ea 90 60 52 62 0e 4d .x.H...8x..`Rb.M 0040 - 7c 3e 41 62 63 2d 27 b3-bc ba bb b7 87 ac 12 df |>Abc-'......... 0050 - 04 61 3d c8 8f cd 14 e4-51 bf 74 66 2c a0 a6 70 .a=.....Q.tf,..p 0060 - 3e d2 5f 4c 63 10 80 83-18 d7 4e 08 e0 5b c5 5a >._Lc.....N..[.Z 0070 - 75 94 27 de 1e 8e 61 e9-64 af 52 eb 1e 98 00 e2 u.'...a.d.R..... 0080 - 4f 80 8c 1f ec 40 b7 25-7b 72 a3 1a 99 8a 6a ca O....@.%{r....j. 0090 - 90 80 f9 1e 5f 99 96 0a-3e bb 4f b6 86 d1 49 0c ...._...>.O...I. Start Time: 1349186957 Timeout : 300 (sec) Verify return code: 9 (certificate is not yet valid) --- =============================================

5 5

[Users] Console and keyboard setup on VNC
by Alexandre Santos 05 Oct '12

05 Oct '12

Hello all, first post here :-) When using VNC as the console to access the VM I can't use the portuguese keyboard and see special characters. I tried it with VMs running Fedora, CentOS and Debian. If I ssh the VM, everything is correct on the terminal console. Is this a issue from oVirt or from the VNC server running behind (I guess it's the second). Any help? TYA Alex

3 3

[Users] oVirt-engine and UserPortal "cluster"
by Brian Vetter 04 Oct '12

04 Oct '12

I've been scouring through the install notes and the architecture documents but didn't find my answer. Is there a way to "cluster" or replicate the userportal app or is it strictly a single instance? Any thoughts to the scale of a large VDI system with 10,000 desktops and their VMs and how that impacts the ovirt-engine and the user-portal app? I figure it has been discussed, but using the word cluster in a google search of the wiki results in a lot of hits, none of them that I saw that are to do with clustering the server, just the virtual machine nodes. Brian

3 3

[Users] new ovirt-engine-sdk features (form 3.1 till now)
by Michael Pasternak 04 Oct '12

04 Oct '12

- allow persistent_auth via localhost - make /filter header global rather than method driven #857018 - throw error when connecting to ssl site using http protocol - raise NoCertificatesError only when no ca_file specified - several rebases to include latest engine features -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 0

[Users] new ovirt-engine-cli features (form 3.1 till now)
by Michael Pasternak 04 Oct '12

04 Oct '12

- support utf-8 encoding - do not log /connect command in history - disable /history while not connected - add username/password prompt/command-line functionality - history command does not support pipe redirection #854486 - valid UUIDs are treated as syntax error #854391 - Rename /delete command with /remove #855769 - Raise an error if identifier is not specified in /show command #855750 - remove --show-all option from /show command #855749 - rename "create" command with "add" #855773 - change NoCertificatesError message to ask only for ca_file - implement /filter flag - do not write to file i/o during script execution - shell does not exit when using /exit/ command in script -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 0

[Users] Logical networks in 3.1 on CentOS 6.3
by Frank Soyer 04 Oct '12

04 Oct '12

Hi list, I'm testing oVirt on 3 hosts as a possible replacement for Proxmox. I've some trouble to understand the network part of the config (for beginning, I'll have some other questions about glusterfs later :)) and need some lights. The environment : - Engine host, no-virtualisation capability, one NIC eth0 - 2 nodes, virtualisation OK, 2 NICs eth0,eth1 - oVirt 3.1 on CentOS 6.3. The installation of engine/nodes was OK, no problem at all on the 3 nodes. The NIC eth0 on all hosts was manually bound on a bridge "ovirtmgmt", respectively on 10.0.0.1, .2, .3 ovirmgmt appears on the console as the management network, no problem, just a first question : it is marked as "VM network", and no way to change that. What if I want that this network to be dedicated on physical hosts only ? Second, I tried to create a logical network, call it "vmnetwork", linked it to datacenter and cluster. In the network interface configuration window on the hosts, I can link vmnetwork on eth0, but when validating an error occurs saying that eth0 is already linked to ovirmgmt. So I can't have management network and vm network on the same NIC , even on a virtual nic (tried with vlan=0 and vlan=10 on vmnetwork, same thing) ? Third, is this a bug when I come back to the configuration window, that the networks (for ovirmgmt and vmnetwork) return to "DHCP" ? If I forgot to re-check the static network, the host lose all it's network config and is declared non-responsive then rebooted..... Bad ! Thank you for helping me to understand. Frank

4 4