Users
Threads by month
- ----- 2026 -----
- June
- May
- April
- March
- February
- January
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- 10 participants
- 19178 discussions
Hello,
I have oVirt 3.2.1 and a CentOS 6.4 guest with rhev-agent-2.3.16-6.el6.x86_64.
If I run shutdow (red square button) from the admin gui I get the equivalent of
shutdown -h +1
Is there any config parameter I can set to have immediately shutdown
in place without waiting for one minute by default (so "shutdown -h
now")?
Gianluca
3
4
Hello,
suppose that I have a f18 3.2.1 node that starts with nested
virtualization activated
# systool -m kvm_intel -v|grep nested
nested = "Y"
Is there any way to configure in oVirt a CentOS 6.x guest where I can
then use hardware virtualization?
So is there a way to pass to the guest the vmx flag of the cpu and
other necessay flags for it (or something like copy to guest as in
virt-manager)?
Gianluca
1
1
------=_Part_126_13514993.1366361089702
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
The VM is a Linux based Sophos UTM Manager, with a kernel based on version =
3.3.8, Do you think it can be a problem?=20
----- Original Message -----
From: "Jonathan Horne" <jhorne(a)skopos.us>=20
To: suporte(a)logicworks.pt=20
Sent: Quinta-feira, 18 de Abril de 2013 19:02:32=20
Subject: Re: [Users] virt-v2v=20
what is the OS of the virtual machine you are migrating?=20
i had some errors myself, they were related to ovirt not providing the nece=
ssary virtio driver for a windows guest migration. (i can create a windows =
machine at the console, but i cannot migrate one in without the virtio pack=
age).=20
this isn't the same error as that, but it might be related, so thats why i =
ask what is your OS of your virtual machine?=20
=09Skopos Website=09JONATHAN HORNE | Systems Administrator | Skopos Web=20
e: jhorne(a)skopos.us t: 214.520.4600 x 5042 f: 214.520.5079 LinkedIn
From: " suporte(a)logicworks.pt " < suporte(a)logicworks.pt >=20
Date: Thursday, April 18, 2013 12:55 PM=20
To: Jonathan Horne < jhorne(a)skopos.us >=20
Subject: Re: [Users] virt-v2v=20
Yes, I got it. Now I have no more the error complaining about the storage p=
ool, but, in fact, it starts the job until 100% and then send another error=
message:=20
KVM_NAME.qcow2: 100% [=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D]D 0h09m54s=20
virt-v2v: Failed to launch guestfs appliance. Try running again with LIBGUE=
STFS_DEBUG=3D1 for more information=20
Any idea?=20
----- Original Message -----
From: "Jonathan Horne" < jhorne(a)skopos.us >=20
To: suporte(a)logicworks.pt=20
Sent: Quinta-feira, 18 de Abril de 2013 18:17:40=20
Subject: RE: [Users] virt-v2v=20
Showmount -e [ipadress-of-nas]=20
From: suporte(a)logicworks.pt [ mailto:suporte@logicworks.pt ]=20
Sent: Thursday, April 18, 2013 4:26 AM=20
To: Shu Ming=20
Cc: Jonathan Horne; Users(a)ovirt.org=20
Subject: Re: [Users] virt-v2v=20
Yes, that's right, but the problem was with the syntax.=20
After running the command, at the end I get this error message:=20
virt-v2v: Failed to launch guestfs appliance. Try running again with LIBGUE=
STFS_DEBUG=3D1 for more information=20
Any idea?=20
----- Original Message -----
From: "Shu Ming" < shuming(a)linux.vnet.ibm.com >=20
To: suporte(a)logicworks.pt=20
Cc: "Jonathan Horne" < jhorne(a)skopos.us >, Users(a)ovirt.org=20
Sent: Quinta-feira, 18 de Abril de 2013 3:11:10=20
Subject: Re: [Users] virt-v2v=20
You can get the mount path from the admin portal.=20
system--->storage--->select a storage domain--->In the general tab page,=20
you can have the nfs export path.=20
suporte(a)logicworks.pt :=20
> well, I run the virt-v2v from the engine server, if I do a showmount=20
> -e it will show me the iso domain. The NFS/export storage is located=20
> at a NAS on the LAN, so I think I need the path to that NAS, how can I=20
> found it?=20
>=20
>=20
> ------------------------------------------------------------------------=
=20
> *De: *"Jonathan Horne" < jhorne(a)skopos.us >=20
> *Para: *suporte(a)logicworks.pt , Users(a)ovirt.org=20
> *Enviadas: *Quarta-feira, 17 Abril, 2013 20:33:29=20
> *Assunto: *RE: virt-v2v=20
>=20
> I imagine =E2=80=9Cshowmount -e=E2=80=9D will show you the NFS path. I re=
cently=20
> imported some VMs from KvM, and my syntax was like this:=20
>=20
> virt-v2v -i libvirt -ic qemu+ ssh://root@source-server/system -o rhev=20
> -os ovirt-exportnfs-server:/opt/nfs -of qcow2 -oa sparse -n ovirtmgmt=20
> exactname-of-kvm-vm=20
>=20
> jonathan=20
>=20
> *From: *users-bounces(a)ovirt.org [ mailto:users-bounces@ovirt.org ] *On=20
> Behalf Of *suporte(a)logicworks.pt=20
> *Sent:* Wednesday, April 17, 2013 12:06 PM=20
> *To:* Users(a)ovirt.org=20
> *Subject:* [Users] virt-v2v=20
>=20
> Hi,=20
>=20
> Im trying to migrate a VM from a qemu kvm server. I'm not sure of the=20
> correct syntax:=20
>=20
> virt-v2v -ic qemu+ ssh://root@/server_ip_addr//system -op=20
> /export_domain/ --bridge ovirtmgmt /kvm_vm_name/=20
>=20
> I have setup a NFS/export storage on the manager, for the export=20
> domain. How can I find the correct path of the export_domain?=20
>=20
> regards=20
>=20
> --=20
>=20
> ------------------------------------------------------------------------=
=20
>=20
> Jose Ferradeira=20
> http://www.logicworks.pt=20
>=20
>=20
> ------------------------------------------------------------------------=
=20
> This is a PRIVATE message. If you are not the intended recipient,=20
> please delete without copying and kindly advise us by e-mail of the=20
> mistake in delivery. NOTE: Regardless of content, this e-mail shall=20
> not operate to bind SKOPOS to any order or other contract unless=20
> pursuant to explicit written agreement or government initiative=20
> expressly permitting the use of e-mail for such purpose.=20
> I imagine =E2=80=9Cshowmount -e=E2=80=9D will show you the NFS path. I re=
cently=20
> imported some VMs from KvM, and my syntax was like this:=20
>=20
> virt-v2v -i libvirt -ic qemu+ ssh://root@source-server/system -o rhev=20
> -os ovirt-exportnfs-server:/opt/nfs -of qcow2 -oa sparse -n ovirtmgmt=20
> exactname-of-kvm-vm=20
>=20
> jonathan=20
>=20
> From: users-bounces(a)ovirt.org [ mailto:users-bounces@ovirt.org ] On=20
> Behalf Of suporte(a)logicworks.pt=20
> Sent: Wednesday, April 17, 2013 12:06 PM=20
> To: Users(a)ovirt.org=20
> Subject: [Users] virt-v2v=20
>=20
> Hi,=20
>=20
> Im trying to migrate a VM from a qemu kvm server. I'm not sure of the=20
> correct syntax:=20
>=20
> virt-v2v -ic qemu+ ssh://root@server_ip_addr/system -op export_domain=20
> --bridge ovirtmgmt kvm_vm_name=20
>=20
> I have setup a NFS/export storage on the manager, for the export=20
> domain. How can I find the correct path of the export_domain?=20
>=20
> regards=20
>=20
> --=20
> ________________________________=20
> Jose Ferradeira=20
> http://www.logicworks.pt=20
>=20
>=20
> ________________________________=20
> This is a PRIVATE message. If you are not the intended recipient,=20
> please delete without copying and kindly advise us by e-mail of the=20
> mistake in delivery. NOTE: Regardless of content, this e-mail shall=20
> not operate to bind SKOPOS to any order or other contract unless=20
> pursuant to explicit written agreement or government initiative=20
> expressly permitting the use of e-mail for such purpose.=20
>=20
>=20
>=20
> _______________________________________________=20
> Users mailing list=20
> Users(a)ovirt.org=20
> http://lists.ovirt.org/mailman/listinfo/users=20
--=20
---=20
=E8=88=92=E6=98=8E Shu Ming=20
Open Virtualization Engineerning; CSTL, IBM Corp.=20
Tel: 86-10-82451626 Tieline: 9051626 E-mail: shuming(a)cn.ibm.com or shuming@=
linux.vnet.ibm.com=20
Address: 3/F Ring Building, ZhongGuanCun Software Park, Haidian District, B=
eijing 100193, PRC=20
This is a PRIVATE message. If you are not the intended recipient, please de=
lete without copying and kindly advise us by e-mail of the mistake in deliv=
ery. NOTE: Regardless of content, this e-mail shall not operate to bind SKO=
POS to any order or other contract unless pursuant to explicit written agre=
ement or government initiative expressly permitting the use of e-mail for s=
uch purpose.=20
This is a PRIVATE message. If you are not the intended recipient, please de=
lete without copying and kindly advise us by e-mail of the mistake in deliv=
ery. NOTE: Regardless of content, this e-mail shall not operate to bind SKO=
POS to any order or other contract unless pursuant to explicit written agre=
ement or government initiative expressly permitting the use of e-mail for s=
uch purpose.=20
------=_Part_126_13514993.1366361089702
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><=
div style=3D'font-family: arial,helvetica,sans-serif; font-size: 10pt; colo=
r: #000000'>The VM is a Linux based Sophos UTM Manager, with a kernel based=
on version 3.3.8, Do you think it can be a problem?<br><br><hr id=3D"zwchr=
"><div style=3D"color: rgb(0, 0, 0); font-weight: normal; font-style: norma=
l; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-siz=
e: 12pt;"><b>From: </b>"Jonathan Horne" <jhorne(a)skopos.us><br><b>To: =
</b>suporte(a)logicworks.pt<br><b>Sent: </b>Quinta-feira, 18 de Abril de 2013=
19:02:32<br><b>Subject: </b>Re: [Users] virt-v2v<br><br>
<link href=3D"/zimbra/css/msgview.css?v=3D130318080117" rel=3D"stylesheet">
<div>
<div>what is the OS of the virtual machine you are migrating?</div>
<div><br>
</div>
<div>i had some errors myself, they were related to ovirt not providing the=
necessary virtio driver for a windows guest migration. (i can create=
a windows machine at the console, but i cannot migrate one in without the =
virtio package).</div>
<div><br>
</div>
<div>this isn't the same error as that, but it might be related, so thats w=
hy i ask what is your OS of your virtual machine?</div>
<div>
<div></div>
<table style=3D"font-family: Times; margin-top: 10px; margin-left: 1px; mar=
gin-bottom: 10px; width: 580px;" border=3D"0">
<tbody>
<tr>
<td width=3D"40"><a href=3D"http://www.skoposfinancial.com/" target=3D"_bla=
nk"><img src=3D"http://dl.dropbox.com/u/67303051/Logo_Signature.gif" alt=3D=
"Skopos Website" src=3D"http://dl.dropbox.com/u/67303051/Logo_Signature.gif=
" height=3D"55" width=3D"151"></a></td>
<td><span style=3D"font-family: 'Trebuchet MS',helvetica,San-Serif; font-si=
ze: 12px; color: rgb(128, 128, 128); line-height: 22px;"><b style=3D"color:=
rgb(173, 41, 17); text-transform: uppercase; letter-spacing: 2px;">JONATHA=
N HORNE </b> | Systems Administrator | <a href=
=3D"http://www.skoposfinancial.com" title=3D"visit Skopos Web" style=3D"tex=
t-decoration: none; border-bottom: 1px dotted rgb(136, 136, 136); color: rg=
b(136, 136, 136);" target=3D"_blank">Skopos
Web</a></span><br>
<span style=3D"font-family: 'Trebuchet MS',helvetica,San-Serif; font-size: =
11px; color: rgb(178, 178, 178);"><b style=3D"color: rgb(136, 136, 136);">e=
:</b> <a href=3D"mailto:jhorne@skopos.us" title=3D"email %FN%" s=
tyle=3D"text-decoration: none; border-bottom: 1px dotted rgb(178, 178, 178)=
; color: rgb(178, 178, 178);" target=3D"_blank">jhorne(a)skopos.us</a> &=
nbsp;<b style=3D"color: rgb(136, 136, 136);">t:</b> 214.520.4600
x 5042 <b style=3D"color: rgb(136, 136, 136);">f:</b> &nbs=
p;214.520.5079 <a href=3D"http://www.linkedin.com/company/skopos-finan=
cial" target=3D"_blank"><img src=3D"http://dl.dropbox.com/u/67303051/LI.jpe=
g" title=3D"visit Skopos LinkedIn" alt=3D"LinkedIn" src=3D"http://dl.dropbo=
x.com/u/67303051/LI.jpeg" height=3D"14" width=3D"13">
<p></p>
</a></span></td>
</tr>
</tbody>
</table>
</div>
</div>
<div><br>
</div>
<span id=3D"OLK_SRC_BODY_SECTION">
<div style=3D"font-family: Calibri; font-size: 11pt; text-align: left; colo=
r: black; border-width: 1pt medium medium; border-style: solid none none; b=
order-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; pa=
dding: 3pt 0in 0in;">
<span style=3D"font-weight: bold;">From: </span>"<a href=3D"mailto:suporte@=
logicworks.pt" target=3D"_blank">suporte(a)logicworks.pt</a>" <<a href=3D"=
mailto:suporte@logicworks.pt" target=3D"_blank">suporte(a)logicworks.pt</a>&g=
t;<br>
<span style=3D"font-weight: bold;">Date: </span>Thursday, April 18, 2013 12=
:55 PM<br>
<span style=3D"font-weight: bold;">To: </span>Jonathan Horne <<a href=3D=
"mailto:jhorne@skopos.us" target=3D"_blank">jhorne(a)skopos.us</a>><br>
<span style=3D"font-weight: bold;">Subject: </span>Re: [Users] virt-v2v<br>
</div>
<div><br>
</div>
<div><style><!--
p
=09{margin:0}
--></style>
<div>
<div style=3D"font-family: arial,helvetica,sans-serif; font-size: 10pt; col=
or: rgb(0, 0, 0);">
Yes, I got it. Now I have no more the error complaining about the storage p=
ool, but, in fact, it starts the job until 100% and then send another error=
message:<br>
KVM_NAME.qcow2: 100% [=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D]D 0h09m54s<br>
virt-v2v: Failed to launch guestfs appliance. Try running again with LIBGUE=
STFS_DEBUG=3D1 for more information<br>
<br>
Any idea?<br>
<br>
<hr id=3D"zwchr">
<div style=3D"color: rgb(0, 0, 0); font-weight: normal; font-style: normal;=
text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size:=
12pt;">
<b>From: </b>"Jonathan Horne" <<a href=3D"mailto:jhorne@skopos.us" targe=
t=3D"_blank">jhorne(a)skopos.us</a>><br>
<b>To: </b><a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">supor=
te(a)logicworks.pt</a><br>
<b>Sent: </b>Quinta-feira, 18 de Abril de 2013 18:17:40<br>
<b>Subject: </b>RE: [Users] virt-v2v<br>
<br>
<style><!--
@font-face
=09{font-family:Helvetica}
@font-face
=09{font-family:"MS Gothic"}
@font-face
=09{font-family:"MS Gothic"}
@font-face
=09{font-family:Calibri}
@font-face
=09{font-family:Tahoma}
@font-face
=09{font-family:"\@MS Gothic"}
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:12.0pt;
=09font-family:"Times New Roman","serif"}
a:link, span.MsoHyperlink
=09{color:blue;
=09text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
=09{color:purple;
=09text-decoration:underline}
p
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:12.0pt;
=09font-family:"Times New Roman","serif"}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:8.0pt;
=09font-family:"Tahoma","sans-serif"}
span.EmailStyle18
=09{font-family:"Calibri","sans-serif";
=09color:#1F497D}
span.BalloonTextChar
=09{font-family:"Tahoma","sans-serif"}
.MsoChpDefault
=09{font-size:10.0pt}
@page WordSection1
=09{margin:1.0in 1.0in 1.0in 1.0in}
--></style>
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size: 11pt; font-family: Calibri=
,sans-serif; color: rgb(31, 73, 125);">Showmount -e [ipadress-of-nas]
</span></p>
<p class=3D"MsoNormal"><span style=3D"font-size: 11pt; font-family: Calibri=
,sans-serif; color: rgb(31, 73, 125);"> </span></p>
<div>
<div style=3D"border-right: medium none; border-width: 1pt medium medium; b=
order-style: solid none none; padding: 3pt 0in 0in;">
<p class=3D"MsoNormal"><b><span style=3D"font-size: 10pt; font-family: Taho=
ma,sans-serif;">From:</span></b><span style=3D"font-size: 10pt; font-family=
: Tahoma,sans-serif;">
<a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">suporte@logicwor=
ks.pt</a> [<a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">mailt=
o:suporte@logicworks.pt</a>]
<br>
<b>Sent:</b> Thursday, April 18, 2013 4:26 AM<br>
<b>To:</b> Shu Ming<br>
<b>Cc:</b> Jonathan Horne; <a href=3D"mailto:Users@ovirt.org" target=3D"_bl=
ank">Users(a)ovirt.org</a><br>
<b>Subject:</b> Re: [Users] virt-v2v</span></p>
</div>
</div>
<p class=3D"MsoNormal"> </p>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom: 12pt;"><span style=3D"font-s=
ize: 10pt; font-family: Arial,sans-serif; color: black;">Yes, that's right,=
but the problem was with the syntax.<br>
After running the command, at the end I get this error message:<br>
<br>
virt-v2v: Failed to launch guestfs appliance. Try running again with LIBGUE=
STFS_DEBUG=3D1 for more information<br>
<br>
Any idea?</span></p>
<div class=3D"MsoNormal" style=3D"text-align: center;" align=3D"center"><sp=
an style=3D"font-size: 10pt; font-family: Arial,sans-serif; color: black;">
<hr id=3D"zwchr" align=3D"center" size=3D"2" width=3D"100%">
</span></div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom: 12pt;"><b><span style=3D"fon=
t-family: Helvetica,sans-serif; color: black;">From:
</span></b><span style=3D"font-family: Helvetica,sans-serif; color: black;"=
>"Shu Ming" <<a href=3D"mailto:shuming@linux.vnet.ibm.com" target=3D"_bl=
ank">shuming(a)linux.vnet.ibm.com</a>><br>
<b>To: </b><a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">supor=
te(a)logicworks.pt</a><br>
<b>Cc: </b>"Jonathan Horne" <<a href=3D"mailto:jhorne@skopos.us" target=
=3D"_blank">jhorne(a)skopos.us</a>>,
<a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users(a)ovirt.org</a><br=
>
<b>Sent: </b>Quinta-feira, 18 de Abril de 2013 3:11:10<br>
<b>Subject: </b>Re: [Users] virt-v2v<br>
<br>
You can get the mount path from the admin portal.<br>
system--->storage--->select a storage domain--->In the general tab=
page, <br>
you can have the nfs export path.<br>
<a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">suporte@logicwor=
ks.pt</a>:<br>
> well, I run the virt-v2v from the engine server, if I do a showmount <=
br>
> -e it will show me the iso domain. The NFS/export storage is located <=
br>
> at a NAS on the LAN, so I think I need the path to that NAS, how can I=
<br>
> found it?<br>
><br>
><br>
> ----------------------------------------------------------------------=
--<br>
> *De: *"Jonathan Horne" <<a href=3D"mailto:jhorne@skopos.us" target=
=3D"_blank">jhorne(a)skopos.us</a>><br>
> *Para: <a href=3D"mailto:*suporte@logicworks.pt" target=3D"_blank">*su=
porte(a)logicworks.pt</a>,
<a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users(a)ovirt.org</a><br=
>
> *Enviadas: *Quarta-feira, 17 Abril, 2013 20:33:29<br>
> *Assunto: *RE: virt-v2v<br>
><br>
> I imagine =E2=80=9Cshowmount -e=E2=80=9D will show you the NFS path. I=
recently <br>
> imported some VMs from KvM, and my syntax was like this:<br>
><br>
> virt-v2v -i libvirt -ic qemu+<a>ssh://root@source-server/system</a> -o=
rhev
<br>
> -os ovirt-exportnfs-server:/opt/nfs -of qcow2 -oa sparse -n ovirtmgmt =
<br>
> exactname-of-kvm-vm<br>
><br>
> jonathan<br>
><br>
> *From:<a href=3D"mailto:*users-bounces@ovirt.org" target=3D"_blank">*u=
sers-bounces(a)ovirt.org</a> [<a href=3D"mailto:users-bounces@ovirt.org" targ=
et=3D"_blank">mailto:users-bounces@ovirt.org</a>] *On
<br>
> Behalf Of <a href=3D"mailto:*suporte@logicworks.pt" target=3D"_blank">=
*suporte(a)logicworks.pt</a><br>
> *Sent:* Wednesday, April 17, 2013 12:06 PM<br>
> *To:* <a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users@ovirt=
.org</a><br>
> *Subject:* [Users] virt-v2v<br>
><br>
> Hi,<br>
><br>
> Im trying to migrate a VM from a qemu kvm server. I'm not sure of the =
<br>
> correct syntax:<br>
><br>
> virt-v2v -ic qemu+<a>ssh://root@/server_ip_addr//system</a> -op <br>
> /export_domain/ --bridge ovirtmgmt /kvm_vm_name/<br>
><br>
> I have setup a NFS/export storage on the manager, for the export <br>
> domain. How can I find the correct path of the export_domain?<br>
><br>
> regards<br>
><br>
> -- <br>
><br>
> ----------------------------------------------------------------------=
--<br>
><br>
> Jose Ferradeira<br>
> <a href=3D"http://www.logicworks.pt" target=3D"_blank">http://www.logi=
cworks.pt</a><br>
><br>
><br>
> ----------------------------------------------------------------------=
--<br>
> This is a PRIVATE message. If you are not the intended recipient, <br>
> please delete without copying and kindly advise us by e-mail of the <b=
r>
> mistake in delivery. NOTE: Regardless of content, this e-mail shall <b=
r>
> not operate to bind SKOPOS to any order or other contract unless <br>
> pursuant to explicit written agreement or government initiative <br>
> expressly permitting the use of e-mail for such purpose.<br>
> I imagine =E2=80=9Cshowmount -e=E2=80=9D will show you the NFS path. I=
recently <br>
> imported some VMs from KvM, and my syntax was like this:<br>
><br>
> virt-v2v -i libvirt -ic qemu+<a>ssh://root@source-server/system</a> -o=
rhev
<br>
> -os ovirt-exportnfs-server:/opt/nfs -of qcow2 -oa sparse -n ovirtmgmt =
<br>
> exactname-of-kvm-vm<br>
><br>
> jonathan<br>
><br>
> From: <a href=3D"mailto:users-bounces@ovirt.org" target=3D"_blank">use=
rs-bounces(a)ovirt.org</a> [<a href=3D"mailto:users-bounces@ovirt.org" target=
=3D"_blank">mailto:users-bounces@ovirt.org</a>] On
<br>
> Behalf Of <a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">s=
uporte(a)logicworks.pt</a><br>
> Sent: Wednesday, April 17, 2013 12:06 PM<br>
> To: <a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users(a)ovirt.o=
rg</a><br>
> Subject: [Users] virt-v2v<br>
><br>
> Hi,<br>
><br>
> Im trying to migrate a VM from a qemu kvm server. I'm not sure of the =
<br>
> correct syntax:<br>
><br>
> virt-v2v -ic qemu+<a>ssh://root@server_ip_addr/system</a> -op export_d=
omain
<br>
> --bridge ovirtmgmt kvm_vm_name<br>
><br>
> I have setup a NFS/export storage on the manager, for the export <br>
> domain. How can I find the correct path of the export_domain?<br>
><br>
> regards<br>
><br>
> --<br>
> ________________________________<br>
> Jose Ferradeira<br>
> <a href=3D"http://www.logicworks.pt" target=3D"_blank">http://www.logi=
cworks.pt</a><br>
><br>
><br>
> ________________________________<br>
> This is a PRIVATE message. If you are not the intended recipient, <br>
> please delete without copying and kindly advise us by e-mail of the <b=
r>
> mistake in delivery. NOTE: Regardless of content, this e-mail shall <b=
r>
> not operate to bind SKOPOS to any order or other contract unless <br>
> pursuant to explicit written agreement or government initiative <br>
> expressly permitting the use of e-mail for such purpose.<br>
><br>
><br>
><br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users(a)ovirt.org</=
a><br>
> <a href=3D"http://lists.ovirt.org/mailman/listinfo/users" target=3D"_b=
lank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
<br>
<br>
-- <br>
---<br>
</span><span style=3D"font-family: '=EF=BC=AD=EF=BC=B3 =E3=82=B4=E3=82=B7=
=E3=83=83=E3=82=AF','MS Gothic'; color: black;">=E8=88=92=E6=98=8E</span><s=
pan style=3D"font-family: Helvetica,sans-serif; color: black;"> Shu Ming<br=
>
Open Virtualization Engineerning; CSTL, IBM Corp.<br>
Tel: 86-10-82451626 Tieline: 9051626 E-mail: <a href=3D"mailto:shumin=
g(a)cn.ibm.com" target=3D"_blank">
shuming(a)cn.ibm.com</a> or <a href=3D"mailto:shuming@linux.vnet.ibm.com" tar=
get=3D"_blank">
shuming(a)linux.vnet.ibm.com</a><br>
Address: 3/F Ring Building, ZhongGuanCun Software Park, Haidian District, B=
eijing 100193, PRC<br>
<br>
</span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size: 10pt; font-family: Arial,s=
ans-serif; color: black;"> </span></p>
</div>
</div>
<br>
<hr>
<font color=3D"Gray" face=3D"Arial" size=3D"1">This is a PRIVATE message. I=
f you are not the intended recipient, please delete without copying and kin=
dly advise us by e-mail of the mistake in delivery. NOTE: Regardless of con=
tent, this e-mail shall not operate to
bind SKOPOS to any order or other contract unless pursuant to explicit wri=
tten agreement or government initiative expressly permitting the use of e-m=
ail for such purpose.</font></div>
<br>
</div>
</div>
</div>
</span><br>
<hr>
<font color=3D"Gray" face=3D"Arial" size=3D"1">This is a PRIVATE message. I=
f you are not the intended recipient, please delete without copying and kin=
dly advise us by e-mail of the mistake in delivery. NOTE: Regardless of con=
tent, this e-mail shall not operate to
bind SKOPOS to any order or other contract unless pursuant to explicit wri=
tten agreement or government initiative expressly permitting the use of e-m=
ail for such purpose.</font>
</div><br></div></body></html>
------=_Part_126_13514993.1366361089702--
1
0
Greetings.
Due to an unfortunate storage misconfiguration (iscsi) the Ovirt-node
was unable to mount it's master storage domain after a power outage.
During the troubleshooting I believe I have managed to get the domain in
some weird state where it now remains in status locked.
If trying to take (only) host/node online it goes back to
non-operational since it's unable to mount the master storage domain.
Rebooting the node and or the engine makes no difference.
Everything storage wise should be OK now.
Any idea on how to recover ?
vdsm.log attached
With kind regards
Jonas
1
0
19 Apr '13
Since I'm not able to reinstall the host from the ovirt-engine web
interface, as another thought I wanted to see if I could bring up a
third host and add it to the cluster.
I have a host Fedora 17 box ready to go but I can't add it to the
cluster. It states that there are no available server in the cluster
to probe the new host.
What about approaching it from the other direction. Would I be able
to stand up an ovirt-h node on the same hardware and then add it to
ovirt from the host itself, using the setup menu?
Could it then obtain spm status and bring the storage domain online?
On Thu, Apr 18, 2013 at 7:20 PM, Chris Smith <whitehat237(a)gmail.com> wrote:
> engine.log attached
>
> On Thu, Apr 18, 2013 at 7:11 PM, Alon Bar-Lev <alonbl(a)redhat.com> wrote:
>> Need to know precise error, please attach engine.log.
>>
>>
>> ----- Original Message -----
>>> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> Cc: Users(a)ovirt.org
>>> Sent: Friday, April 19, 2013 2:03:59 AM
>>> Subject: Re: [Users] Certificates and PKI seem to be broken after yum update
>>>
>>> So as of now, I can put the host into maintenance mode using the
>>> ovirt-engine web interface. I can also try and activate it. It
>>> states that the host was activated. The host never actually comes up
>>> or contends for SPM status, and the data center never actually comes
>>> online.
>>>
>>> If I put the host into maintenance mode and try to reinstall it, it
>>> throws an error and size must be between 0 and 50.
>>>
>>> On Thu, Apr 18, 2013 at 6:51 PM, Alon Bar-Lev <alonbl(a)redhat.com> wrote:
>>> > I am not sure I understand the status.
>>> >
>>> > Everything is working or not.
>>> > If not, what exactly fails?
>>> > Why do you run it 'again'?
>>> >
>>> > What happens if you reinstall host? Go to maintenance and select reinstall?
>>> >
>>> > I cannot understand how all this results from upgrade, something had
>>> > changed, the CA certificate installed on the host is probably not the CA
>>> > certificate of the engine.
>>> >
>>> > ----- Original Message -----
>>> >> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> >> To: "Alon Bar-Lev" <alonbl(a)redhat.com>, Users(a)ovirt.org
>>> >> Sent: Friday, April 19, 2013 1:45:23 AM
>>> >> Subject: Re: [Users] Certificates and PKI seem to be broken after yum
>>> >> update
>>> >>
>>> >> On Thu, Apr 18, 2013 at 6:44 PM, Chris Smith <whitehat237(a)gmail.com>
>>> >> wrote:
>>> >> > I made a backup of the .truststore, and then followed the steps and
>>> >> > then rebooted both the ovirt-engine and one of the hosts, and
>>> >> > everything worked properly.
>>> >> >
>>> >> > If I run it again, or enter the wrong password it throws an error
>>> >> > about the key store already existing, or that the password was wrong
>>> >> > so I'm pretty sure it's good.
>>> >> >
>>> >> > vdsm.log on the host still shows:
>>> >> >
>>> >> > Traceback (most recent call last):
>>> >> > File "/usr/lib64/python2.7/SocketServer.py", line 582, in
>>> >> > process_request_thread
>>> >> > self.finish_request(request, client_address)
>>> >> > File "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py",
>>> >> > line 66, in finish_request
>>> >> > request.do_handshake()
>>> >> > File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake
>>> >> > self._sslobj.do_handshake()
>>> >> > SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL
>>> >> > routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
>>> >> >
>>> >> > engine.log on the host shows:
>>> >> >
>>> >> > 2013-04-18 18:42:43,632 ERROR
>>> >> > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >> > (QuartzScheduler_Worker-68) Failed to decryptData must start with zero
>>> >> > 2013-04-18 18:42:43,642 ERROR
>>> >> > [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand]
>>> >> > (QuartzScheduler_Worker-68) XML RPC error in command
>>> >> > GetCapabilitiesVDS ( Vds: transporter ), the error was:
>>> >> > java.util.concurrent.ExecutionException:
>>> >> > java.lang.reflect.InvocationTargetException,
>>> >> > SunCertPathBuilderException: unable to find valid certification path
>>> >> > to requested target
>>> >> >
>>> >> >
>>> >> > On Thu, Apr 18, 2013 at 4:06 AM, Alon Bar-Lev <alonbl(a)redhat.com> wrote:
>>> >> >>
>>> >> >> You should ask these question in separate thread so people may pick
>>> >> >> them
>>> >> >> up.
>>> >> >>
>>> >> >> For the .truststore, try to remove it and then execute:
>>> >> >>
>>> >> >> # rm -f /etc/pki/ovirt-engine/.truststore
>>> >> >> # keytool -import -noprompt -trustcacerts -alias cacert -keypass mypass
>>> >> >> -file /etc/pki/ovirt-engine/certs/ca.der -keystore
>>> >> >> /etc/pki/ovirt-engine/.truststore -storepass mypass
>>> >> >> # chown ovirt:ovirt /etc/pki/ovirt-engine/.truststore
>>> >> >>
>>> >> >> It should recreate the truststore with the ca certificate you have.
>>> >> >>
>>> >> >> ----- Original Message -----
>>> >> >>> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> >> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> >> >>> Cc: Users(a)ovirt.org
>>> >> >>> Sent: Thursday, April 18, 2013 7:18:27 AM
>>> >> >>> Subject: Re: [Users] Certificates and PKI seem to be broken after yum
>>> >> >>> update
>>> >> >>>
>>> >> >>> If it would be easier than re-setting up the certificates, I'm also
>>> >> >>> willing to just start over and rebuild, but I would like to export the
>>> >> >>> VM's I have first.
>>> >> >>> One of them is a spacewalk server, another runs DNS, and DHCP for my
>>> >> >>> test network, and I have an asterisk server. I would like to avoid
>>> >> >>> having to re-create all of them.
>>> >> >>>
>>> >> >>> The VM's are up and running now, so I could export all of the
>>> >> >>> configurations / backup the file systems, etc.
>>> >> >>>
>>> >> >>> Preferably I could export the VM's to an NFS export domain, or a
>>> >> >>> mounted NFS share so that I can import them to the new storage domain,
>>> >> >>> after I run engine-cleanup and get everything set back up. Is there
>>> >> >>> an easy way to do this? Is it possible to create and attach an NFS
>>> >> >>> export domain directly from the CLI without access to the ovirt
>>> >> >>> manager without communication between the manager and hosts due to the
>>> >> >>> pki issue? Can I export the VM's directly from the hosts to a
>>> >> >>> standard NFS share?
>>> >> >>>
>>> >> >>> Is there an equivalent xml and image file for the VM?
>>> >> >>>
>>> >> >>> My storage domain is iscsi and is served out from another server over
>>> >> >>> 4 bonded 1 Gbps copper links.
>>> >> >>>
>>> >> >>>
>>> >> >>>
>>> >> >>> On Wed, Apr 17, 2013 at 11:46 PM, Chris Smith <whitehat237(a)gmail.com>
>>> >> >>> wrote:
>>> >> >>> > I checked the .truststore on the ovirt engine, and it seems fine.
>>> >> >>> >
>>> >> >>> > [root@reliant ovirt-engine]# ls -l .truststore
>>> >> >>> > -rwxr-x---. 1 ovirt ovirt 918 Apr 6 21:56 .truststore
>>> >> >>> >
>>> >> >>> > It's not zero bytes anyway.
>>> >> >>> >
>>> >> >>> > It's also the same size as the .truststore in the ovirt engine
>>> >> >>> > backups.
>>> >> >>> >
>>> >> >>> > [root@reliant ovirt-engine-backups]# find ./ -name .truststore -exec
>>> >> >>> > ls
>>> >> >>> > -l
>>> >> >>> > {} \;
>>> >> >>> > -rwxr-x---. 1 ovirt ovirt 918 Aug 26 2012
>>> >> >>> > ./ovirt-engine-2013_03_23_03_09_09/ovirt-engine/.truststore
>>> >> >>> > -rwxr-x---. 1 root root 918 Mar 24 12:42
>>> >> >>> > ./ovirt-engine-2013_03_24_11_15_19/ovirt-engine-2013_03_23_03_09_09/ovirt-engine/.truststore
>>> >> >>> >
>>> >> >>> > I haven't looked at the installCA.sh script yet.
>>> >> >>> >
>>> >> >>> > On Mon, Apr 8, 2013 at 2:58 AM, Alon Bar-Lev <alonbl(a)redhat.com>
>>> >> >>> > wrote:
>>> >> >>> >> This error means that the /etc/pki/ovirt-engine/.truststore is
>>> >> >>> >> unreadable
>>> >> >>> >> or does not contain the /etc/pki/ovirt-engine/ca.pem certificate.
>>> >> >>> >>
>>> >> >>> >> Unfortunately, the pki administration is weak in current
>>> >> >>> >> implementation,
>>> >> >>> >> you can trace the installation script and checkout the calls to
>>> >> >>> >> installCA.sh to how to reproduce, please note that password are
>>> >> >>> >> encrypted
>>> >> >>> >> in database using the private key locate in .keystore so if you are
>>> >> >>> >> to
>>> >> >>> >> re-generate anything remember to keep the engine private key.
>>> >> >>> >>
>>> >> >>> >> However, if you succeed in login, the remaining problem you have is
>>> >> >>> >> the
>>> >> >>> >> .truststore permissions and/or content.
>>> >> >>> >>
>>> >> >>> >> Regards,
>>> >> >>> >> Alon Bar-Lev.
>>> >> >>> >>
>>> >> >>> >> ----- Original Message -----
>>> >> >>> >>> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> >> >>> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> >> >>> >>> Cc: Users(a)ovirt.org
>>> >> >>> >>> Sent: Monday, April 8, 2013 9:46:46 AM
>>> >> >>> >>> Subject: Re: [Users] Certificates and PKI seem to be broken after
>>> >> >>> >>> yum
>>> >> >>> >>> update
>>> >> >>> >>>
>>> >> >>> >>> After setting the .keystore owner and group owner to ovirt, and
>>> >> >>> >>> rebooting, I now have a new error in engine.log
>>> >> >>> >>>
>>> >> >>> >>> 2013-04-08 02:39:16,787 ERROR
>>> >> >>> >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >> >>> >>> (QuartzScheduler_Worker-95) Failed to decryptData must start with
>>> >> >>> >>> zero
>>> >> >>> >>> 2013-04-08 02:39:16,845 ERROR
>>> >> >>> >>> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand]
>>> >> >>> >>> (QuartzScheduler_Worker-95) XML RPC error in command
>>> >> >>> >>> GetCapabilitiesVDS ( Vds: transporter ), the error was:
>>> >> >>> >>> java.util.concurrent.ExecutionException:
>>> >> >>> >>> java.lang.reflect.InvocationTargetException,
>>> >> >>> >>> SunCertPathBuilderException: unable to find valid certification
>>> >> >>> >>> path
>>> >> >>> >>> to requested target
>>> >> >>> >>>
>>> >> >>> >>> Are there other files that may have been affected that I can also
>>> >> >>> >>> correct ownership or permissions on?
>>> >> >>> >>>
>>> >> >>> >>> On the host side, I get certificate unknown in vdsm.log
>>> >> >>> >>>
>>> >> >>> >>> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake
>>> >> >>> >>> self._sslobj.do_handshake()
>>> >> >>> >>> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL
>>> >> >>> >>> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
>>> >> >>> >>> Thread-757809::ERROR::2013-04-08
>>> >> >>> >>> 02:44:05,424::SecureXMLRPCServer::73::root::(handle_error) client
>>> >> >>> >>> ('172.16.23.8', 54489)
>>> >> >>> >>> Traceback (most recent call last):
>>> >> >>> >>> File "/usr/lib64/python2.7/SocketServer.py", line 582, in
>>> >> >>> >>> process_request_thread
>>> >> >>> >>> self.finish_request(request, client_address)
>>> >> >>> >>> File
>>> >> >>> >>> "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py",
>>> >> >>> >>> line 66, in finish_request
>>> >> >>> >>> request.do_handshake()
>>> >> >>> >>> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake
>>> >> >>> >>> self._sslobj.do_handshake()
>>> >> >>> >>> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL
>>> >> >>> >>> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
>>> >> >>> >>>
>>> >> >>> >>> Is there a procedure for just re-establishing PKI and certs for
>>> >> >>> >>> the
>>> >> >>> >>> engine and hosts?
>>> >> >>> >>>
>>> >> >>> >>> On Sun, Apr 7, 2013 at 4:58 AM, Alon Bar-Lev <alonbl(a)redhat.com>
>>> >> >>> >>> wrote:
>>> >> >>> >>> >
>>> >> >>> >>> > OK... you are running a very old version of engine (3.1).
>>> >> >>> >>> >
>>> >> >>> >>> > The upgrade did not upgraded into 3.2, so nothing as far as I
>>> >> >>> >>> > know
>>> >> >>> >>> > should
>>> >> >>> >>> > have been changed.
>>> >> >>> >>> >
>>> >> >>> >>> > But the .keystore permissions is owned by root now, so some
>>> >> >>> >>> > other
>>> >> >>> >>> > package
>>> >> >>> >>> > (maybe selinux-policy) changed permissions...
>>> >> >>> >>> >
>>> >> >>> >>> > The simplest way to test is to:
>>> >> >>> >>> > # cp -a /etc/pki/ovirt-engine /etc/pki/ovirt-engine.backup1
>>> >> >>> >>> > # chown -R ovirt:ovirt /etc/pki/ovirt-engine
>>> >> >>> >>> >
>>> >> >>> >>> > But if that file permissions was changed, I can only assume
>>> >> >>> >>> > other
>>> >> >>> >>> > files
>>> >> >>> >>> > were also changes...
>>> >> >>> >>> >
>>> >> >>> >>> > Regards,
>>> >> >>> >>> > Alon
>>> >> >>> >>> >
>>> >> >>> >>> > ----- Original Message -----
>>> >> >>> >>> >> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> >> >>> >>> >> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> >> >>> >>> >> Cc: Users(a)ovirt.org
>>> >> >>> >>> >> Sent: Sunday, April 7, 2013 11:51:17 AM
>>> >> >>> >>> >> Subject: Re: [Users] Certificates and PKI seem to be broken
>>> >> >>> >>> >> after
>>> >> >>> >>> >> yum
>>> >> >>> >>> >> update
>>> >> >>> >>> >>
>>> >> >>> >>> >> I did a yum update and rebooted.
>>> >> >>> >>> >>
>>> >> >>> >>> >> engine-upgrade was run on 24-March
>>> >> >>> >>> >>
>>> >> >>> >>> >> When run now, it states that there are no updates available.
>>> >> >>> >>> >>
>>> >> >>> >>> >> [root@reliant ~]# engine-upgrade
>>> >> >>> >>> >> Loaded plugins: versionlock
>>> >> >>> >>> >> Checking for updates... (This may take several minutes)
>>> >> >>> >>> >> No updates available
>>> >> >>> >>> >>
>>> >> >>> >>> >>
>>> >> >>> >>> >> [root@reliant ovirt-engine]# cat
>>> >> >>> >>> >> ovirt-engine-upgrade_2013_03_24_12_04_06.log
>>> >> >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found
>>> >> >>> >>> >> existing
>>> >> >>> >>> >> pgpass file, fetching DB host value
>>> >> >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found
>>> >> >>> >>> >> existing
>>> >> >>> >>> >> pgpass file, fetching DB port value
>>> >> >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found
>>> >> >>> >>> >> existing
>>> >> >>> >>> >> pgpass file, fetching DB admin value
>>> >> >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::302::root:: Yum
>>> >> >>> >>> >> list
>>> >> >>> >>> >> updates
>>> >> >>> >>> >> started
>>> >> >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::273::root:: Yum
>>> >> >>> >>> >> unlock
>>> >> >>> >>> >> started
>>> >> >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::285::root:: Yum
>>> >> >>> >>> >> unlock
>>> >> >>> >>> >> completed successfully
>>> >> >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::308::root:: Getting
>>> >> >>> >>> >> list
>>> >> >>> >>> >> of packages to upgrade
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::engine-upgrade::260::root:: Yum
>>> >> >>> >>> >> lock
>>> >> >>> >>> >> started
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-backend'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-backend-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-config'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-config-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-genericapi'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-genericapi-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-notification-service'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-notification-service-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-restapi'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-restapi-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-tools-common'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-tools-common-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-userportal'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-userportal-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-webadmin-portal'
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >> >>> >>> >> ovirt-engine-webadmin-portal-3.1.0-4.fc17.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::286::root:: cmd =
>>> >> >>> >>> >> /bin/rpm
>>> >> >>> >>> >> -q ovirt-engine ovirt-engine-backend ovirt-engine-config
>>> >> >>> >>> >> ovirt-engine-genericapi ovirt-engine-notification-service
>>> >> >>> >>> >> ovirt-engine-restapi ovirt-engine-tools-common
>>> >> >>> >>> >> ovirt-engine-userportal
>>> >> >>> >>> >> ovirt-engine-webadmin-portal >>
>>> >> >>> >>> >> /etc/yum/pluginconf.d/versionlock.list
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::291::root:: output =
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::292::root:: stderr =
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::293::root:: retcode =
>>> >> >>> >>> >> 0
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::270::root:: Yum
>>> >> >>> >>> >> lock
>>> >> >>> >>> >> completed successfully
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::320::root:: No
>>> >> >>> >>> >> packages
>>> >> >>> >>> >> marked for update
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::324::root::
>>> >> >>> >>> >> Installed
>>> >> >>> >>> >> packages:
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::325::root::
>>> >> >>> >>> >> ['ovirt-engine-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-backend-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-config-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-dbscripts-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-genericapi-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-notification-service-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-restapi-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-setup-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-tools-common-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-userportal-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-engine-webadmin-portal-3.1.0-4.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-image-uploader-3.1.0-0.git9c42c8.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-iso-uploader-3.1.0-0.git1841d9.fc17.noarch',
>>> >> >>> >>> >> 'ovirt-log-collector-3.1.0-0.git10d719.fc17.noarch',
>>> >> >>> >>> >> 'vdsm-bootstrap-4.10.0-13.fc17.noarch']
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::327::root:: Yum
>>> >> >>> >>> >> list
>>> >> >>> >>> >> updated completed successfully
>>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::609::root:: No
>>> >> >>> >>> >> updates
>>> >> >>> >>> >> available
>>> >> >>> >>> >>
>>> >> >>> >>> >>
>>> >> >>> >>> >> Here's what's installed.
>>> >> >>> >>> >>
>>> >> >>> >>> >> [root@reliant yum.repos.d]# yum list installed | grep ovirt
>>> >> >>> >>> >> ovirt-engine.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-backend.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-cli.noarch 3.2.0.5-1.fc17
>>> >> >>> >>> >> @updates
>>> >> >>> >>> >> ovirt-engine-config.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-dbscripts.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-genericapi.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-notification-service.noarch
>>> >> >>> >>> >> 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-restapi.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-sdk.noarch 3.2.0.2-1.fc17
>>> >> >>> >>> >> @updates
>>> >> >>> >>> >> ovirt-engine-setup.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-tools-common.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-userportal.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-engine-webadmin-portal.noarch 3.1.0-4.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-image-uploader.noarch 3.1.0-0.git9c42c8.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-iso-uploader.noarch 3.1.0-0.git1841d9.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-log-collector.noarch 3.1.0-0.git10d719.fc17
>>> >> >>> >>> >> @ovirt-stable
>>> >> >>> >>> >> ovirt-release-fedora.noarch 4-2
>>> >> >>> >>> >> @/ovirt-release-fedora.noarch
>>> >> >>> >>> >>
>>> >> >>> >>> >> On Sun, Apr 7, 2013 at 2:16 AM, Alon Bar-Lev
>>> >> >>> >>> >> <alonbl(a)redhat.com>
>>> >> >>> >>> >> wrote:
>>> >> >>> >>> >> > How exactly did you upgrade?
>>> >> >>> >>> >> >
>>> >> >>> >>> >> > Usually yum upgrade will not touch ovirt-engine packages as
>>> >> >>> >>> >> > it
>>> >> >>> >>> >> > is in
>>> >> >>> >>> >> > yum
>>> >> >>> >>> >> > version lock.
>>> >> >>> >>> >> > From which version to which version have you upgraded?
>>> >> >>> >>> >> > Have you run engine-upgrade utility?
>>> >> >>> >>> >> > If you did not, please run it.
>>> >> >>> >>> >> > If you did, please attach logs from
>>> >> >>> >>> >> > /var/log/ovirt-engine/ovirt-engine-upgrade*
>>> >> >>> >>> >> >
>>> >> >>> >>> >> > Thanks!
>>> >> >>> >>> >> >
>>> >> >>> >>> >> > ----- Original Message -----
>>> >> >>> >>> >> >> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> >> >>> >>> >> >> To: Users(a)ovirt.org
>>> >> >>> >>> >> >> Sent: Sunday, April 7, 2013 5:09:46 AM
>>> >> >>> >>> >> >> Subject: [Users] Certificates and PKI seem to be broken
>>> >> >>> >>> >> >> after
>>> >> >>> >>> >> >> yum
>>> >> >>> >>> >> >> update
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> I have lost the ability to manage the hosts or VM's using
>>> >> >>> >>> >> >> ovirt
>>> >> >>> >>> >> >> engine web interface after performing yum update on the
>>> >> >>> >>> >> >> ovirt-engine
>>> >> >>> >>> >> >> host, and on one Fedora 17 host. The data center is
>>> >> >>> >>> >> >> offline,
>>> >> >>> >>> >> >> and I
>>> >> >>> >>> >> >> can't place the hosts into maintenance mode. I don't think
>>> >> >>> >>> >> >> that
>>> >> >>> >>> >> >> there
>>> >> >>> >>> >> >> are any actions I can perform in the web interface at all.
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> From the logs it seems that PKI is broken between the engine
>>> >> >>> >>> >> >> and
>>> >> >>> >>> >> >> the
>>> >> >>> >>> >> >> hosts.
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> I am wondering how I can restore or re-generate all of the
>>> >> >>> >>> >> >> certificates and get the hosts communicating with the
>>> >> >>> >>> >> >> ovirt-engine
>>> >> >>> >>> >> >> again so that I can bring the data center back online.
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> I found this page which deals with changing the engine
>>> >> >>> >>> >> >> hostname,
>>> >> >>> >>> >> >> and
>>> >> >>> >>> >> >> thus re-creating the certificates and keystore on the
>>> >> >>> >>> >> >> ovirt-engine
>>> >> >>> >>> >> >> node, and was wondering if this could help. Could I follow
>>> >> >>> >>> >> >> this
>>> >> >>> >>> >> >> process but keep the same hostname for the ovirt-engine
>>> >> >>> >>> >> >> node?
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> http://wiki.ovirt.org/How_to_change_engine_host_name
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> Currently I have 3 VM's running on two hosts. The VM's are
>>> >> >>> >>> >> >> up,
>>> >> >>> >>> >> >> but
>>> >> >>> >>> >> >> I
>>> >> >>> >>> >> >> can't do anything with them in ovirt-engine.
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> Here's the latest activity from engine.log from the
>>> >> >>> >>> >> >> ovirt-engine
>>> >> >>> >>> >> >> node:
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> 2013-04-06 21:58:47,472 ERROR
>>> >> >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >> >>> >>> >> >> (QuartzScheduler_Worker-61) Failed to
>>> >> >>> >>> >> >> decryptjava.io.FileNotFoundException:
>>> >> >>> >>> >> >> /etc/pki/ovirt-engine/.keystore
>>> >> >>> >>> >> >> (Permission denied)
>>> >> >>> >>> >> >> 2013-04-06 21:58:47,478 ERROR
>>> >> >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >> >>> >>> >> >> (QuartzScheduler_Worker-62) Can't load keystore from file
>>> >> >>> >>> >> >> "/etc/pki/ovirt-engine/.keystore".:
>>> >> >>> >>> >> >> java.io.FileNotFoundException:
>>> >> >>> >>> >> >> /etc/pki/ovirt-engine/.keystore (Permission denied)
>>> >> >>> >>> >> >> at java.io.FileInputStream.open(Native Method)
>>> >> >>> >>> >> >> [rt.jar:1.7.0_09-icedtea]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> java.io.FileInputStream.<init>(FileInputStream.java:138)
>>> >> >>> >>> >> >> [rt.jar:1.7.0_09-icedtea]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.engineencryptutils.EncryptionUtils.getKeyStore(EncryptionUtils.java:214)
>>> >> >>> >>> >> >> [engine-encryptutils.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.engineencryptutils.EncryptionUtils.decrypt(EncryptionUtils.java:139)
>>> >> >>> >>> >> >> [engine-encryptutils.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsStaticDAODbFacadeImpl.decryptPassword(VdsStaticDAODbFacadeImpl.java:139)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:253)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:169)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.springframework.jdbc.core.RowMapperResultSetExtractor.extractData(RowMapperResultSetExtractor.java:92)
>>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate$1.doInPreparedStatement(JdbcTemplate.java:653)
>>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.execute(JdbcTemplate.java:591)
>>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:641)
>>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:670)
>>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:702)
>>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.executeCallInternal(PostgresDbEngineDialect.java:155)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.doExecute(PostgresDbEngineDialect.java:121)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.springframework.jdbc.core.simple.SimpleJdbcCall.execute(SimpleJdbcCall.java:164)
>>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeImpl(SimpleJdbcCallsHandler.java:124)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadAndReturnMap(SimpleJdbcCallsHandler.java:75)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadList(SimpleJdbcCallsHandler.java:66)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeRead(SimpleJdbcCallsHandler.java:58)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:36)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:31)
>>> >> >>> >>> >> >> [engine-dal.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.vdsbroker.VdsManager$1.runInTransaction(VdsManager.java:219)
>>> >> >>> >>> >> >> [engine-vdsbroker.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInSuppressed(TransactionSupport.java:168)
>>> >> >>> >>> >> >> [engine-utils.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:107)
>>> >> >>> >>> >> >> [engine-utils.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.vdsbroker.VdsManager.OnTimer(VdsManager.java:215)
>>> >> >>> >>> >> >> [engine-vdsbroker.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> sun.reflect.GeneratedMethodAccessor13.invoke(Unknown
>>> >> >>> >>> >> >> Source) [:1.7.0_09-icedtea]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>>> >> >>> >>> >> >> [rt.jar:1.7.0_09-icedtea]
>>> >> >>> >>> >> >> at java.lang.reflect.Method.invoke(Method.java:601)
>>> >> >>> >>> >> >> [rt.jar:1.7.0_09-icedtea]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:64)
>>> >> >>> >>> >> >> [engine-scheduler.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.quartz.core.JobRunShell.run(JobRunShell.java:213)
>>> >> >>> >>> >> >> [quartz.jar:]
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557)
>>> >> >>> >>> >> >> [quartz.jar:]
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> 2013-04-06 21:58:47,576 ERROR
>>> >> >>> >>> >> >> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand]
>>> >> >>> >>> >> >> (QuartzScheduler_Worker-61) XML RPC error in command
>>> >> >>> >>> >> >> GetCapabilitiesVDS ( Vds: defiant ), the error was:
>>> >> >>> >>> >> >> java.util.concurrent.ExecutionException:
>>> >> >>> >>> >> >> java.lang.reflect.InvocationTargetException,
>>> >> >>> >>> >> >> SSLPeerUnverifiedException: peer not authenticated
>>> >> >>> >>> >> >> 2013-04-06 21:58:47,606 ERROR
>>> >> >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >> >>> >>> >> >> (QuartzScheduler_Worker-62) Failed to
>>> >> >>> >>> >> >> decryptjava.io.FileNotFoundException:
>>> >> >>> >>> >> >> /etc/pki/ovirt-engine/.keystore
>>> >> >>> >>> >> >> (Permission denied)
>>> >> >>> >>> >> >> 2013-04-06 21:58:47,671 ERROR
>>> >> >>> >>> >> >> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand]
>>> >> >>> >>> >> >> (QuartzScheduler_Worker-62) XML RPC error in command
>>> >> >>> >>> >> >> GetCapabilitiesVDS ( Vds: transporter ), the error was:
>>> >> >>> >>> >> >> java.util.concurrent.ExecutionException:
>>> >> >>> >>> >> >> java.lang.reflect.InvocationTargetException,
>>> >> >>> >>> >> >> SSLPeerUnverifiedException: peer not authenticated
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> Here's the message I seem to get over and over on the fedora
>>> >> >>> >>> >> >> 17
>>> >> >>> >>> >> >> host in
>>> >> >>> >>> >> >> vdsm.log
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL
>>> >> >>> >>> >> >> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
>>> >> >>> >>> >> >> Thread-562520::ERROR::2013-04-06
>>> >> >>> >>> >> >> 22:08:44,268::SecureXMLRPCServer::73::root::(handle_error)
>>> >> >>> >>> >> >> client
>>> >> >>> >>> >> >> ('172.16.23.8', 36127)
>>> >> >>> >>> >> >> Traceback (most recent call last):
>>> >> >>> >>> >> >> File "/usr/lib64/python2.7/SocketServer.py", line 582, in
>>> >> >>> >>> >> >> process_request_thread
>>> >> >>> >>> >> >> self.finish_request(request, client_address)
>>> >> >>> >>> >> >> File
>>> >> >>> >>> >> >> "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py",
>>> >> >>> >>> >> >> line 66, in finish_request
>>> >> >>> >>> >> >> request.do_handshake()
>>> >> >>> >>> >> >> File "/usr/lib64/python2.7/ssl.py", line 305, in
>>> >> >>> >>> >> >> do_handshake
>>> >> >>> >>> >> >> self._sslobj.do_handshake()
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> I'm also wondering about the permission denied on the
>>> >> >>> >>> >> >> .keystore
>>> >> >>> >>> >> >> directory. What should the permissions be? Here's what
>>> >> >>> >>> >> >> they
>>> >> >>> >>> >> >> are
>>> >> >>> >>> >> >> currently.
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> [root@reliant pki]# ls -ldZ /etc/pki/ovirt-engine/.keystore
>>> >> >>> >>> >> >> -rwxr-x---. root root unconfined_u:object_r:cert_t:s0
>>> >> >>> >>> >> >> /etc/pki/ovirt-engine/.keystore
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> I also seem to have a backup of the ovirt-engine directory
>>> >> >>> >>> >> >> at
>>> >> >>> >>> >> >> the
>>> >> >>> >>> >> >> time
>>> >> >>> >>> >> >> the update was performed, but replacing ovirt-engine with
>>> >> >>> >>> >> >> the
>>> >> >>> >>> >> >> backup
>>> >> >>> >>> >> >> does no good.
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> I appreciate any assistance, and please let me know what
>>> >> >>> >>> >> >> other
>>> >> >>> >>> >> >> information I can post to help with this.
>>> >> >>> >>> >> >>
>>> >> >>> >>> >> >> Thanks
>>> >> >>> >>> >> >> _______________________________________________
>>> >> >>> >>> >> >> Users mailing list
>>> >> >>> >>> >> >> Users(a)ovirt.org
>>> >> >>> >>> >> >> http://lists.ovirt.org/mailman/listinfo/users
>>> >> >>> >>> >> >>
>>> >> >>> >>> >>
>>> >> >>> >>>
>>> >> >>>
>>> >>
>>>
2
1
19 Apr '13
On Thu, Apr 18, 2013 at 6:44 PM, Chris Smith <whitehat237(a)gmail.com> wrote:
> I made a backup of the .truststore, and then followed the steps and
> then rebooted both the ovirt-engine and one of the hosts, and
> everything worked properly.
>
> If I run it again, or enter the wrong password it throws an error
> about the key store already existing, or that the password was wrong
> so I'm pretty sure it's good.
>
> vdsm.log on the host still shows:
>
> Traceback (most recent call last):
> File "/usr/lib64/python2.7/SocketServer.py", line 582, in
> process_request_thread
> self.finish_request(request, client_address)
> File "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py",
> line 66, in finish_request
> request.do_handshake()
> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake
> self._sslobj.do_handshake()
> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL
> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
>
> engine.log on the host shows:
>
> 2013-04-18 18:42:43,632 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-68) Failed to decryptData must start with zero
> 2013-04-18 18:42:43,642 ERROR
> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand]
> (QuartzScheduler_Worker-68) XML RPC error in command
> GetCapabilitiesVDS ( Vds: transporter ), the error was:
> java.util.concurrent.ExecutionException:
> java.lang.reflect.InvocationTargetException,
> SunCertPathBuilderException: unable to find valid certification path
> to requested target
>
>
> On Thu, Apr 18, 2013 at 4:06 AM, Alon Bar-Lev <alonbl(a)redhat.com> wrote:
>>
>> You should ask these question in separate thread so people may pick them up.
>>
>> For the .truststore, try to remove it and then execute:
>>
>> # rm -f /etc/pki/ovirt-engine/.truststore
>> # keytool -import -noprompt -trustcacerts -alias cacert -keypass mypass -file /etc/pki/ovirt-engine/certs/ca.der -keystore /etc/pki/ovirt-engine/.truststore -storepass mypass
>> # chown ovirt:ovirt /etc/pki/ovirt-engine/.truststore
>>
>> It should recreate the truststore with the ca certificate you have.
>>
>> ----- Original Message -----
>>> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> Cc: Users(a)ovirt.org
>>> Sent: Thursday, April 18, 2013 7:18:27 AM
>>> Subject: Re: [Users] Certificates and PKI seem to be broken after yum update
>>>
>>> If it would be easier than re-setting up the certificates, I'm also
>>> willing to just start over and rebuild, but I would like to export the
>>> VM's I have first.
>>> One of them is a spacewalk server, another runs DNS, and DHCP for my
>>> test network, and I have an asterisk server. I would like to avoid
>>> having to re-create all of them.
>>>
>>> The VM's are up and running now, so I could export all of the
>>> configurations / backup the file systems, etc.
>>>
>>> Preferably I could export the VM's to an NFS export domain, or a
>>> mounted NFS share so that I can import them to the new storage domain,
>>> after I run engine-cleanup and get everything set back up. Is there
>>> an easy way to do this? Is it possible to create and attach an NFS
>>> export domain directly from the CLI without access to the ovirt
>>> manager without communication between the manager and hosts due to the
>>> pki issue? Can I export the VM's directly from the hosts to a
>>> standard NFS share?
>>>
>>> Is there an equivalent xml and image file for the VM?
>>>
>>> My storage domain is iscsi and is served out from another server over
>>> 4 bonded 1 Gbps copper links.
>>>
>>>
>>>
>>> On Wed, Apr 17, 2013 at 11:46 PM, Chris Smith <whitehat237(a)gmail.com> wrote:
>>> > I checked the .truststore on the ovirt engine, and it seems fine.
>>> >
>>> > [root@reliant ovirt-engine]# ls -l .truststore
>>> > -rwxr-x---. 1 ovirt ovirt 918 Apr 6 21:56 .truststore
>>> >
>>> > It's not zero bytes anyway.
>>> >
>>> > It's also the same size as the .truststore in the ovirt engine backups.
>>> >
>>> > [root@reliant ovirt-engine-backups]# find ./ -name .truststore -exec ls -l
>>> > {} \;
>>> > -rwxr-x---. 1 ovirt ovirt 918 Aug 26 2012
>>> > ./ovirt-engine-2013_03_23_03_09_09/ovirt-engine/.truststore
>>> > -rwxr-x---. 1 root root 918 Mar 24 12:42
>>> > ./ovirt-engine-2013_03_24_11_15_19/ovirt-engine-2013_03_23_03_09_09/ovirt-engine/.truststore
>>> >
>>> > I haven't looked at the installCA.sh script yet.
>>> >
>>> > On Mon, Apr 8, 2013 at 2:58 AM, Alon Bar-Lev <alonbl(a)redhat.com> wrote:
>>> >> This error means that the /etc/pki/ovirt-engine/.truststore is unreadable
>>> >> or does not contain the /etc/pki/ovirt-engine/ca.pem certificate.
>>> >>
>>> >> Unfortunately, the pki administration is weak in current implementation,
>>> >> you can trace the installation script and checkout the calls to
>>> >> installCA.sh to how to reproduce, please note that password are encrypted
>>> >> in database using the private key locate in .keystore so if you are to
>>> >> re-generate anything remember to keep the engine private key.
>>> >>
>>> >> However, if you succeed in login, the remaining problem you have is the
>>> >> .truststore permissions and/or content.
>>> >>
>>> >> Regards,
>>> >> Alon Bar-Lev.
>>> >>
>>> >> ----- Original Message -----
>>> >>> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> >>> Cc: Users(a)ovirt.org
>>> >>> Sent: Monday, April 8, 2013 9:46:46 AM
>>> >>> Subject: Re: [Users] Certificates and PKI seem to be broken after yum
>>> >>> update
>>> >>>
>>> >>> After setting the .keystore owner and group owner to ovirt, and
>>> >>> rebooting, I now have a new error in engine.log
>>> >>>
>>> >>> 2013-04-08 02:39:16,787 ERROR
>>> >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >>> (QuartzScheduler_Worker-95) Failed to decryptData must start with zero
>>> >>> 2013-04-08 02:39:16,845 ERROR
>>> >>> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand]
>>> >>> (QuartzScheduler_Worker-95) XML RPC error in command
>>> >>> GetCapabilitiesVDS ( Vds: transporter ), the error was:
>>> >>> java.util.concurrent.ExecutionException:
>>> >>> java.lang.reflect.InvocationTargetException,
>>> >>> SunCertPathBuilderException: unable to find valid certification path
>>> >>> to requested target
>>> >>>
>>> >>> Are there other files that may have been affected that I can also
>>> >>> correct ownership or permissions on?
>>> >>>
>>> >>> On the host side, I get certificate unknown in vdsm.log
>>> >>>
>>> >>> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake
>>> >>> self._sslobj.do_handshake()
>>> >>> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL
>>> >>> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
>>> >>> Thread-757809::ERROR::2013-04-08
>>> >>> 02:44:05,424::SecureXMLRPCServer::73::root::(handle_error) client
>>> >>> ('172.16.23.8', 54489)
>>> >>> Traceback (most recent call last):
>>> >>> File "/usr/lib64/python2.7/SocketServer.py", line 582, in
>>> >>> process_request_thread
>>> >>> self.finish_request(request, client_address)
>>> >>> File "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py",
>>> >>> line 66, in finish_request
>>> >>> request.do_handshake()
>>> >>> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake
>>> >>> self._sslobj.do_handshake()
>>> >>> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL
>>> >>> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
>>> >>>
>>> >>> Is there a procedure for just re-establishing PKI and certs for the
>>> >>> engine and hosts?
>>> >>>
>>> >>> On Sun, Apr 7, 2013 at 4:58 AM, Alon Bar-Lev <alonbl(a)redhat.com> wrote:
>>> >>> >
>>> >>> > OK... you are running a very old version of engine (3.1).
>>> >>> >
>>> >>> > The upgrade did not upgraded into 3.2, so nothing as far as I know
>>> >>> > should
>>> >>> > have been changed.
>>> >>> >
>>> >>> > But the .keystore permissions is owned by root now, so some other
>>> >>> > package
>>> >>> > (maybe selinux-policy) changed permissions...
>>> >>> >
>>> >>> > The simplest way to test is to:
>>> >>> > # cp -a /etc/pki/ovirt-engine /etc/pki/ovirt-engine.backup1
>>> >>> > # chown -R ovirt:ovirt /etc/pki/ovirt-engine
>>> >>> >
>>> >>> > But if that file permissions was changed, I can only assume other files
>>> >>> > were also changes...
>>> >>> >
>>> >>> > Regards,
>>> >>> > Alon
>>> >>> >
>>> >>> > ----- Original Message -----
>>> >>> >> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> >>> >> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> >>> >> Cc: Users(a)ovirt.org
>>> >>> >> Sent: Sunday, April 7, 2013 11:51:17 AM
>>> >>> >> Subject: Re: [Users] Certificates and PKI seem to be broken after yum
>>> >>> >> update
>>> >>> >>
>>> >>> >> I did a yum update and rebooted.
>>> >>> >>
>>> >>> >> engine-upgrade was run on 24-March
>>> >>> >>
>>> >>> >> When run now, it states that there are no updates available.
>>> >>> >>
>>> >>> >> [root@reliant ~]# engine-upgrade
>>> >>> >> Loaded plugins: versionlock
>>> >>> >> Checking for updates... (This may take several minutes)
>>> >>> >> No updates available
>>> >>> >>
>>> >>> >>
>>> >>> >> [root@reliant ovirt-engine]# cat
>>> >>> >> ovirt-engine-upgrade_2013_03_24_12_04_06.log
>>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found existing
>>> >>> >> pgpass file, fetching DB host value
>>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found existing
>>> >>> >> pgpass file, fetching DB port value
>>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found existing
>>> >>> >> pgpass file, fetching DB admin value
>>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::302::root:: Yum list
>>> >>> >> updates
>>> >>> >> started
>>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::273::root:: Yum unlock
>>> >>> >> started
>>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::285::root:: Yum unlock
>>> >>> >> completed successfully
>>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::308::root:: Getting list
>>> >>> >> of packages to upgrade
>>> >>> >> 2013-03-24 12:04:27::DEBUG::engine-upgrade::260::root:: Yum lock
>>> >>> >> started
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine-backend'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-backend-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine-config'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-config-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine-genericapi'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-genericapi-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine-notification-service'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-notification-service-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine-restapi'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-restapi-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine-tools-common'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-tools-common-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine-userportal'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-userportal-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing
>>> >>> >> command --> '/bin/rpm -q ovirt-engine-webadmin-portal'
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output =
>>> >>> >> ovirt-engine-webadmin-portal-3.1.0-4.fc17.noarch
>>> >>> >>
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr =
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::286::root:: cmd = /bin/rpm
>>> >>> >> -q ovirt-engine ovirt-engine-backend ovirt-engine-config
>>> >>> >> ovirt-engine-genericapi ovirt-engine-notification-service
>>> >>> >> ovirt-engine-restapi ovirt-engine-tools-common ovirt-engine-userportal
>>> >>> >> ovirt-engine-webadmin-portal >> /etc/yum/pluginconf.d/versionlock.list
>>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::291::root:: output =
>>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::292::root:: stderr =
>>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::293::root:: retcode = 0
>>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::270::root:: Yum lock
>>> >>> >> completed successfully
>>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::320::root:: No packages
>>> >>> >> marked for update
>>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::324::root:: Installed
>>> >>> >> packages:
>>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::325::root::
>>> >>> >> ['ovirt-engine-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-backend-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-config-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-dbscripts-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-genericapi-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-notification-service-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-restapi-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-setup-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-tools-common-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-userportal-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-engine-webadmin-portal-3.1.0-4.fc17.noarch',
>>> >>> >> 'ovirt-image-uploader-3.1.0-0.git9c42c8.fc17.noarch',
>>> >>> >> 'ovirt-iso-uploader-3.1.0-0.git1841d9.fc17.noarch',
>>> >>> >> 'ovirt-log-collector-3.1.0-0.git10d719.fc17.noarch',
>>> >>> >> 'vdsm-bootstrap-4.10.0-13.fc17.noarch']
>>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::327::root:: Yum list
>>> >>> >> updated completed successfully
>>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::609::root:: No updates
>>> >>> >> available
>>> >>> >>
>>> >>> >>
>>> >>> >> Here's what's installed.
>>> >>> >>
>>> >>> >> [root@reliant yum.repos.d]# yum list installed | grep ovirt
>>> >>> >> ovirt-engine.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-backend.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-cli.noarch 3.2.0.5-1.fc17
>>> >>> >> @updates
>>> >>> >> ovirt-engine-config.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-dbscripts.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-genericapi.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-notification-service.noarch
>>> >>> >> 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-restapi.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-sdk.noarch 3.2.0.2-1.fc17
>>> >>> >> @updates
>>> >>> >> ovirt-engine-setup.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-tools-common.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-userportal.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-engine-webadmin-portal.noarch 3.1.0-4.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-image-uploader.noarch 3.1.0-0.git9c42c8.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-iso-uploader.noarch 3.1.0-0.git1841d9.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-log-collector.noarch 3.1.0-0.git10d719.fc17
>>> >>> >> @ovirt-stable
>>> >>> >> ovirt-release-fedora.noarch 4-2
>>> >>> >> @/ovirt-release-fedora.noarch
>>> >>> >>
>>> >>> >> On Sun, Apr 7, 2013 at 2:16 AM, Alon Bar-Lev <alonbl(a)redhat.com>
>>> >>> >> wrote:
>>> >>> >> > How exactly did you upgrade?
>>> >>> >> >
>>> >>> >> > Usually yum upgrade will not touch ovirt-engine packages as it is in
>>> >>> >> > yum
>>> >>> >> > version lock.
>>> >>> >> > From which version to which version have you upgraded?
>>> >>> >> > Have you run engine-upgrade utility?
>>> >>> >> > If you did not, please run it.
>>> >>> >> > If you did, please attach logs from
>>> >>> >> > /var/log/ovirt-engine/ovirt-engine-upgrade*
>>> >>> >> >
>>> >>> >> > Thanks!
>>> >>> >> >
>>> >>> >> > ----- Original Message -----
>>> >>> >> >> From: "Chris Smith" <whitehat237(a)gmail.com>
>>> >>> >> >> To: Users(a)ovirt.org
>>> >>> >> >> Sent: Sunday, April 7, 2013 5:09:46 AM
>>> >>> >> >> Subject: [Users] Certificates and PKI seem to be broken after yum
>>> >>> >> >> update
>>> >>> >> >>
>>> >>> >> >> I have lost the ability to manage the hosts or VM's using ovirt
>>> >>> >> >> engine web interface after performing yum update on the
>>> >>> >> >> ovirt-engine
>>> >>> >> >> host, and on one Fedora 17 host. The data center is offline, and I
>>> >>> >> >> can't place the hosts into maintenance mode. I don't think that
>>> >>> >> >> there
>>> >>> >> >> are any actions I can perform in the web interface at all.
>>> >>> >> >>
>>> >>> >> >> From the logs it seems that PKI is broken between the engine and
>>> >>> >> >> the
>>> >>> >> >> hosts.
>>> >>> >> >>
>>> >>> >> >> I am wondering how I can restore or re-generate all of the
>>> >>> >> >> certificates and get the hosts communicating with the ovirt-engine
>>> >>> >> >> again so that I can bring the data center back online.
>>> >>> >> >>
>>> >>> >> >> I found this page which deals with changing the engine hostname,
>>> >>> >> >> and
>>> >>> >> >> thus re-creating the certificates and keystore on the ovirt-engine
>>> >>> >> >> node, and was wondering if this could help. Could I follow this
>>> >>> >> >> process but keep the same hostname for the ovirt-engine node?
>>> >>> >> >>
>>> >>> >> >> http://wiki.ovirt.org/How_to_change_engine_host_name
>>> >>> >> >>
>>> >>> >> >> Currently I have 3 VM's running on two hosts. The VM's are up, but
>>> >>> >> >> I
>>> >>> >> >> can't do anything with them in ovirt-engine.
>>> >>> >> >>
>>> >>> >> >>
>>> >>> >> >> Here's the latest activity from engine.log from the ovirt-engine
>>> >>> >> >> node:
>>> >>> >> >>
>>> >>> >> >> 2013-04-06 21:58:47,472 ERROR
>>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >>> >> >> (QuartzScheduler_Worker-61) Failed to
>>> >>> >> >> decryptjava.io.FileNotFoundException:
>>> >>> >> >> /etc/pki/ovirt-engine/.keystore
>>> >>> >> >> (Permission denied)
>>> >>> >> >> 2013-04-06 21:58:47,478 ERROR
>>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >>> >> >> (QuartzScheduler_Worker-62) Can't load keystore from file
>>> >>> >> >> "/etc/pki/ovirt-engine/.keystore".: java.io.FileNotFoundException:
>>> >>> >> >> /etc/pki/ovirt-engine/.keystore (Permission denied)
>>> >>> >> >> at java.io.FileInputStream.open(Native Method)
>>> >>> >> >> [rt.jar:1.7.0_09-icedtea]
>>> >>> >> >> at java.io.FileInputStream.<init>(FileInputStream.java:138)
>>> >>> >> >> [rt.jar:1.7.0_09-icedtea]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.engineencryptutils.EncryptionUtils.getKeyStore(EncryptionUtils.java:214)
>>> >>> >> >> [engine-encryptutils.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.engineencryptutils.EncryptionUtils.decrypt(EncryptionUtils.java:139)
>>> >>> >> >> [engine-encryptutils.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dao.VdsStaticDAODbFacadeImpl.decryptPassword(VdsStaticDAODbFacadeImpl.java:139)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:253)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:169)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.springframework.jdbc.core.RowMapperResultSetExtractor.extractData(RowMapperResultSetExtractor.java:92)
>>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >>> >> >> at
>>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate$1.doInPreparedStatement(JdbcTemplate.java:653)
>>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >>> >> >> at
>>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.execute(JdbcTemplate.java:591)
>>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >>> >> >> at
>>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:641)
>>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >>> >> >> at
>>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:670)
>>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >>> >> >> at
>>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:702)
>>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.executeCallInternal(PostgresDbEngineDialect.java:155)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.doExecute(PostgresDbEngineDialect.java:121)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.springframework.jdbc.core.simple.SimpleJdbcCall.execute(SimpleJdbcCall.java:164)
>>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeImpl(SimpleJdbcCallsHandler.java:124)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadAndReturnMap(SimpleJdbcCallsHandler.java:75)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadList(SimpleJdbcCallsHandler.java:66)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeRead(SimpleJdbcCallsHandler.java:58)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:36)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:31)
>>> >>> >> >> [engine-dal.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.vdsbroker.VdsManager$1.runInTransaction(VdsManager.java:219)
>>> >>> >> >> [engine-vdsbroker.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInSuppressed(TransactionSupport.java:168)
>>> >>> >> >> [engine-utils.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:107)
>>> >>> >> >> [engine-utils.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.vdsbroker.VdsManager.OnTimer(VdsManager.java:215)
>>> >>> >> >> [engine-vdsbroker.jar:]
>>> >>> >> >> at sun.reflect.GeneratedMethodAccessor13.invoke(Unknown
>>> >>> >> >> Source) [:1.7.0_09-icedtea]
>>> >>> >> >> at
>>> >>> >> >> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>>> >>> >> >> [rt.jar:1.7.0_09-icedtea]
>>> >>> >> >> at java.lang.reflect.Method.invoke(Method.java:601)
>>> >>> >> >> [rt.jar:1.7.0_09-icedtea]
>>> >>> >> >> at
>>> >>> >> >> org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:64)
>>> >>> >> >> [engine-scheduler.jar:]
>>> >>> >> >> at org.quartz.core.JobRunShell.run(JobRunShell.java:213)
>>> >>> >> >> [quartz.jar:]
>>> >>> >> >> at
>>> >>> >> >> org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557)
>>> >>> >> >> [quartz.jar:]
>>> >>> >> >>
>>> >>> >> >> 2013-04-06 21:58:47,576 ERROR
>>> >>> >> >> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand]
>>> >>> >> >> (QuartzScheduler_Worker-61) XML RPC error in command
>>> >>> >> >> GetCapabilitiesVDS ( Vds: defiant ), the error was:
>>> >>> >> >> java.util.concurrent.ExecutionException:
>>> >>> >> >> java.lang.reflect.InvocationTargetException,
>>> >>> >> >> SSLPeerUnverifiedException: peer not authenticated
>>> >>> >> >> 2013-04-06 21:58:47,606 ERROR
>>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
>>> >>> >> >> (QuartzScheduler_Worker-62) Failed to
>>> >>> >> >> decryptjava.io.FileNotFoundException:
>>> >>> >> >> /etc/pki/ovirt-engine/.keystore
>>> >>> >> >> (Permission denied)
>>> >>> >> >> 2013-04-06 21:58:47,671 ERROR
>>> >>> >> >> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand]
>>> >>> >> >> (QuartzScheduler_Worker-62) XML RPC error in command
>>> >>> >> >> GetCapabilitiesVDS ( Vds: transporter ), the error was:
>>> >>> >> >> java.util.concurrent.ExecutionException:
>>> >>> >> >> java.lang.reflect.InvocationTargetException,
>>> >>> >> >> SSLPeerUnverifiedException: peer not authenticated
>>> >>> >> >>
>>> >>> >> >>
>>> >>> >> >> Here's the message I seem to get over and over on the fedora 17
>>> >>> >> >> host in
>>> >>> >> >> vdsm.log
>>> >>> >> >>
>>> >>> >> >> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL
>>> >>> >> >> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown
>>> >>> >> >> Thread-562520::ERROR::2013-04-06
>>> >>> >> >> 22:08:44,268::SecureXMLRPCServer::73::root::(handle_error) client
>>> >>> >> >> ('172.16.23.8', 36127)
>>> >>> >> >> Traceback (most recent call last):
>>> >>> >> >> File "/usr/lib64/python2.7/SocketServer.py", line 582, in
>>> >>> >> >> process_request_thread
>>> >>> >> >> self.finish_request(request, client_address)
>>> >>> >> >> File
>>> >>> >> >> "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py",
>>> >>> >> >> line 66, in finish_request
>>> >>> >> >> request.do_handshake()
>>> >>> >> >> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake
>>> >>> >> >> self._sslobj.do_handshake()
>>> >>> >> >>
>>> >>> >> >> I'm also wondering about the permission denied on the .keystore
>>> >>> >> >> directory. What should the permissions be? Here's what they are
>>> >>> >> >> currently.
>>> >>> >> >>
>>> >>> >> >> [root@reliant pki]# ls -ldZ /etc/pki/ovirt-engine/.keystore
>>> >>> >> >> -rwxr-x---. root root unconfined_u:object_r:cert_t:s0
>>> >>> >> >> /etc/pki/ovirt-engine/.keystore
>>> >>> >> >>
>>> >>> >> >> I also seem to have a backup of the ovirt-engine directory at the
>>> >>> >> >> time
>>> >>> >> >> the update was performed, but replacing ovirt-engine with the
>>> >>> >> >> backup
>>> >>> >> >> does no good.
>>> >>> >> >>
>>> >>> >> >> I appreciate any assistance, and please let me know what other
>>> >>> >> >> information I can post to help with this.
>>> >>> >> >>
>>> >>> >> >> Thanks
>>> >>> >> >> _______________________________________________
>>> >>> >> >> Users mailing list
>>> >>> >> >> Users(a)ovirt.org
>>> >>> >> >> http://lists.ovirt.org/mailman/listinfo/users
>>> >>> >> >>
>>> >>> >>
>>> >>>
>>>
2
3
Hi All,
Anyone seen the attached error ? I'm suddenly unable to make a template
from a VM that has a pre-allocated disk. The VM is based on a different
template also still in the system, which I am also unable to remove.
The error in engine.log only says this:
2013-04-16 08:17:24,497 WARN
[org.ovirt.engine.core.bll.AddVmTemplateCommand] (ajp--0.0.0.0-8009-2)
[4021a4d2] CanDoAction of action AddVmTemplate failed.
Reasons:VAR__ACTION__ADD,VAR__TYPE__VM_TEMPLATE,ACTION_TYPE_FAILED_VM_HAS_NO_DISKS
There is nothing special coming up in the vdsm.log / to filter out debug
messages, i've changed log levels to INFO and higher earlier today - still,
when this error occurs, the only message I can see in vdsm.log are the
usual "can I write to the storage domain" ones ..
Thread-493::INFO::2013-04-16
08:17:42,873::logUtils::37::dispatcher::(wrapper) Run and protect:
getSpmStatus(spUUID='353b073e-dfb0-46e6-8ac5-344ff251ca91', options=None)
Thread-493::INFO::2013-04-16
08:17:42,874::logUtils::39::dispatcher::(wrapper) Run and protect:
getSpmStatus, Return response: {'spm_st': {'spmId': 1, 'spmStatus': 'SPM',
'spmLver': 19}}
Thread-494::INFO::2013-04-16
08:17:42,886::logUtils::37::dispatcher::(wrapper) Run and protect:
getStoragePoolInfo(spUUID='353b073e-dfb0-46e6-8ac5-344ff251ca91',
options=None)
Thread-494::INFO::2013-04-16
08:17:42,888::logUtils::39::dispatcher::(wrapper) Run and protect:
getStoragePoolInfo, Return response: {'info': {'spm_id': 1, 'master_uuid':
'7d0f78ff-aa25-4b64-a2ea-c8a65beda616', 'name': 'ALE-LAB', 'version': '2',
'domains':
u'35fd8ea5-8bbc-4343-881e-3f78626420e3:Active,55758a74-5c36-4364-bcb0-acae969acd64:Active,7d0f78ff-aa25-4b64-a2ea-c8a65beda616:Active,84e33e25-f4af-4b3c-9780-8a116a737236:Active,2c7fc39e-767c-4c97-946f-321468451c61:Active',
'pool_status': 'connected', 'isoprefix':
u'/rhev/data-center/353b073e-dfb0-46e6-8ac5-344ff251ca91/55758a74-5c36-4364-bcb0-acae969acd64/images/11111111-1111-1111-1111-111111111111',
'type': 'ISCSI', 'master_ver': 4, 'lver': 19}, 'dominfo':
{u'35fd8ea5-8bbc-4343-881e-3f78626420e3': {'status': u'Active', 'diskfree':
'163208757248', 'alerts': [], 'disktotal': '261858787328'},
u'55758a74-5c36-4364-bcb0-acae969acd64': {'status': u'Active', 'diskfree':
'318918098944', 'alerts': [], 'disktotal': '802458435584'},
u'7d0f78ff-aa25-4b64-a2ea-c8a65beda616': {'status': u'Active', 'diskfree':
'23756537856', 'alerts': [], 'disktotal': '73014444032'},
u'84e33e25-f4af-4b3c-9780-8a116a737236': {'status': u'Active', 'diskfree':
'49153048576', 'alerts': [], 'disktotal': '246076669952'},
u'2c7fc39e-767c-4c97-946f-321468451c61': {'status': u'Active', 'diskfree':
'26306674688', 'alerts': [], 'disktotal': '104555610112'}}}
Any help please ?
FWIW, I am able to export the host to the export domain.
Alex
--
| RHCE | Sen Sys Engineer / Platform Architect | www.vcore.co |
www.vsearchcloud.com |
2
4
Re: [Users] [oss-security] CVE-2012-XXYY Request -- google-authenticator: Information disclosure due insecure requirement on the secrets file
by Michael Pasternak 18 Apr '13
by Michael Pasternak 18 Apr '13
18 Apr '13
FYI
On 04/18/2013 01:45 PM, Jan Lieskovsky wrote:
> Hello Kurt, Steve, Alexander, vendors,
>
> as noted in [1]:
>
> An information disclosure file was found in the way google-authenticator,
> a pluggable authentication module (PAM) which allows login using one-time
> passcodes conforming to the open standards developed by the Initiative for
> Open Authentication (OATH), performed management of its secret / state file
> in certain configurations. Due the lack of 'user=' option the secret file
> was previously required to be user-readable, allowing (in certain cases)
> a local attacker to obtain the (pre)shared client-to-authentication-server
> secret, possibly leading to victim's account impersonation.
>
> A different vulnerability than CVE-2013-0258.
>
> References:
> [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129
> [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129#10
> [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129#20
> [4] https://bugzilla.redhat.com/show_bug.cgi?id=953505
>
> Relevant upstream patch:
> [5] https://code.google.com/p/google-authenticator/source/detail?r=c3414e9857ad…
>
> @Alexander - since I am not sure I have described the attack vector above
> properly, please correct me if / where required.
>
> @Kurt * the CVE-2012- identifier should be allocated to this issue, since
> the security implications of this problem are for the first time
> mentioned here: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129#10 (2012-09-22),
>
> * from what I have looked, there doesn't seem to be:
> http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=authenticator
>
> a CVE identifier allocated to this issue yet (as noted above
> CVE-2013-0258 from that list is different issue).
>
> => could you allocate one?
>
> Thank you && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Response Team
--
Michael Pasternak
RedHat, ENG-Virtualization R&D
1
0
Hi,
For some reason, without doing anything, all the storage domains became
down and restarting VDSM or the entire machine do not bring it up.
I am not using lvm
The following errors appear several times in vdsm.log (full logs are
attached):
Thread-22::WARNING::2013-04-12
19:00:08,597::lvm::378::Storage.LVM::(_reloadvgs) lvm vgs failed: 5 [] ['
Volume group "1083422e-a5db-41b6-b667-b9ef1ef244f0" not found']
Thread-22::DEBUG::2013-04-12
19:00:08,598::lvm::402::OperationMutex::(_reloadvgs) Operation 'lvm reload
operation' released the operation mutex
Thread-22::DEBUG::2013-04-12
19:00:08,681::resourceManager::615::ResourceManager::(releaseResource)
Trying to release resource 'Storage.5849b030-626e-47cb-ad90-3ce782d831b3'
Thread-22::DEBUG::2013-04-12
19:00:08,681::resourceManager::634::ResourceManager::(releaseResource)
Released resource 'Storage.5849b030-626e-47cb-ad90-3ce782d831b3' (0 active
users)
Thread-22::DEBUG::2013-04-12
19:00:08,681::resourceManager::640::ResourceManager::(releaseResource)
Resource 'Storage.5849b030-626e-47cb-ad90-3ce782d831b3' is free, finding
out if anyone is waiting for it.
Thread-22::DEBUG::2013-04-12
19:00:08,682::resourceManager::648::ResourceManager::(releaseResource) No
one is waiting for resource 'Storage.5849b030-626e-47cb-ad90-3ce782d831b3',
Clearing records.
Thread-22::ERROR::2013-04-12
19:00:08,682::task::850::TaskManager.Task::(_setError)
Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::Unexpected error
Traceback (most recent call last):
File "/usr/share/vdsm/storage/task.py", line 857, in _run
return fn(*args, **kargs)
File "/usr/share/vdsm/logUtils.py", line 45, in wrapper
res = f(*args, **kwargs)
File "/usr/share/vdsm/storage/hsm.py", line 939, in connectStoragePool
masterVersion, options)
File "/usr/share/vdsm/storage/hsm.py", line 986, in _connectStoragePool
res = pool.connect(hostID, scsiKey, msdUUID, masterVersion)
File "/usr/share/vdsm/storage/sp.py", line 695, in connect
self.__rebuild(msdUUID=msdUUID, masterVersion=masterVersion)
File "/usr/share/vdsm/storage/sp.py", line 1232, in __rebuild
masterVersion=masterVersion)
File "/usr/share/vdsm/storage/sp.py", line 1576, in getMasterDomain
raise se.StoragePoolMasterNotFound(self.spUUID, msdUUID)
StoragePoolMasterNotFound: Cannot find master domain:
'spUUID=5849b030-626e-47cb-ad90-3ce782d831b3,
msdUUID=1083422e-a5db-41b6-b667-b9ef1ef244f0'
Thread-22::DEBUG::2013-04-12
19:00:08,685::task::869::TaskManager.Task::(_run)
Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::Task._run:
e35a22ac-771a-4916-851f-2fe9d60a0ae6
('5849b030-626e-47cb-ad90-3ce782d831b3', 1,
'5849b030-626e-47cb-ad90-3ce782d831b3',
'1083422e-a5db-41b6-b667-b9ef1ef244f0', 3942) {} failed - stopping task
Thread-22::DEBUG::2013-04-12
19:00:08,685::task::1194::TaskManager.Task::(stop)
Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::stopping in state preparing
(force False)
Thread-22::DEBUG::2013-04-12
19:00:08,685::task::974::TaskManager.Task::(_decref)
Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::ref 1 aborting True
Thread-22::INFO::2013-04-12
19:00:08,686::task::1151::TaskManager.Task::(prepare)
Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::aborting: Task is aborted:
'Cannot find master domain' - code 304
*[wil@bufferoverflow ~]$ **sudo vgs --noheadings --units b --nosuffix
--separator \| -o
uuid,name,attr,size,free,extent_size,extent_count,free_count,tags,vg_mda_size,vg_mda_free
*
No volume groups found
*[wil@bufferoverflow ~]$ **mount*
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
devtmpfs on /dev type devtmpfs
(rw,nosuid,size=8131256k,nr_inodes=2032814,mode=755)
securityfs on /sys/kernel/security type securityfs
(rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)
devpts on /dev/pts type devpts
(rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
tmpfs on /run type tmpfs (rw,nosuid,nodev,mode=755)
tmpfs on /sys/fs/cgroup type tmpfs (rw,nosuid,nodev,noexec,mode=755)
cgroup on /sys/fs/cgroup/systemd type cgroup
(rw,nosuid,nodev,noexec,relatime,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd)
cgroup on /sys/fs/cgroup/cpuset type cgroup
(rw,nosuid,nodev,noexec,relatime,cpuset)
cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup
(rw,nosuid,nodev,noexec,relatime,cpuacct,cpu)
cgroup on /sys/fs/cgroup/memory type cgroup
(rw,nosuid,nodev,noexec,relatime,memory)
cgroup on /sys/fs/cgroup/devices type cgroup
(rw,nosuid,nodev,noexec,relatime,devices)
cgroup on /sys/fs/cgroup/freezer type cgroup
(rw,nosuid,nodev,noexec,relatime,freezer)
cgroup on /sys/fs/cgroup/net_cls type cgroup
(rw,nosuid,nodev,noexec,relatime,net_cls)
cgroup on /sys/fs/cgroup/blkio type cgroup
(rw,nosuid,nodev,noexec,relatime,blkio)
cgroup on /sys/fs/cgroup/perf_event type cgroup
(rw,nosuid,nodev,noexec,relatime,perf_event)
/dev/sda3 on / type ext4 (rw,relatime,data=ordered)
rpc_pipefs on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw,relatime)
debugfs on /sys/kernel/debug type debugfs (rw,relatime)
sunrpc on /proc/fs/nfsd type nfsd (rw,relatime)
hugetlbfs on /dev/hugepages type hugetlbfs (rw,relatime)
systemd-1 on /proc/sys/fs/binfmt_misc type autofs
(rw,relatime,fd=34,pgrp=1,timeout=300,minproto=5,maxproto=5,direct)
mqueue on /dev/mqueue type mqueue (rw,relatime)
tmpfs on /tmp type tmpfs (rw)
configfs on /sys/kernel/config type configfs (rw,relatime)
binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw,relatime)
/dev/sda5 on /home type ext4 (rw,relatime,data=ordered)
/dev/sda1 on /boot type ext4 (rw,relatime,data=ordered)
kernelpanic.home:/home/KP_Data_Domain on
/rhev/data-center/mnt/kernelpanic.home:_home_KP__Data__Domain type nfs
(rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.100.101.100,mountvers=3,mountport=20048,mountproto=udp,local_lock=none,addr=10.100.101.100)
bufferoverflow.home:/home/BO_ISO_Domain on
/rhev/data-center/mnt/bufferoverflow.home:_home_BO__ISO__Domain type nfs
(rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.100.101.108,mountvers=3,mountport=20048,mountproto=udp,local_lock=none,addr=10.100.101.108)
*[wil@bufferoverflow ~]$ **sudo find / -name
5849b030-626e-47cb-ad90-3ce782d831b3*
/run/vdsm/pools/5849b030-626e-47cb-ad90-3ce782d831b3
*[wil@bufferoverflow ~]$* *sudo find / -name
1083422e-a5db-41b6-b667-b9ef1ef244f0*
/home/BO_Ovirt_Storage/1083422e-a5db-41b6-b667-b9ef1ef244f0
I will extremely appreciate any help,
Limor Gavish
4
7
hi, i'm totally an Ovirt newbie. I've installed an all-in-one version to test and i've got a problem with spice.
I found this : http://www.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal
but the link to the spice.cab cabinet is down. Is this page obsolete ?
If yes, how do i open a console from a windows 7 client ?
Thanks in advance
2
1