- Users - oVirt List Archives

VDI experience to share?
by Giorgio Bersano 28 Jun '16

28 Jun '16

Hi everyone, I've been asked to deploy a VDI solution based on our oVirt infrastructure. What we have in production is a 3.6 manager (standalone, not HE) with a 3.5 cluster (CentOS 6) and a 3.6 cluster (CentOS 7), iSCSI storage, fully redundant networking. What is not clear to me is the client side, especially because we have been asked to implement a thin client solution but I've been almost unable to find suitable devices. Is there anyone in this list willing to share his/her experience on this topic? Probably my search skill is low but I've only seen references to IGEL. Other brands? There is another strong requirement: our network infrastructure makes use of 802.1x to authenticate client devices and it would be highly advisable to respect that constraint. TIA, Giorgio.

9 17

Re: [ovirt-users] 3.6 to 4.0 upgrade cert issue
by Matt Haught 28 Jun '16

28 Jun '16

So I switched back to the original self-signed certs that I had luckily saved and was able to get in without error. Is there a new process for using non-self-signed certs with ovirt 4.0? Thanks, -- Matt Haught On Fri, Jun 24, 2016 at 11:19 AM, Matt Haught <dmhaught(a)ncsu.edu> wrote: > I just attempted an upgrade from 3.6 to 4.0 hosted engine and ran into an > problem. The hosted engine vm updated without issue, but when I go to login > to the web interface to continue the process I get: > > sun.security.validator.ValidatorException: PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to find > valid certification path to requested target > > at every page load and I can't login. I have a feeling that the issue > comes from where I replaced the self-signed certs with trusted ca signed > certs a year ago. Is there a work around? > > CentOS 7.2 > > Thanks, > > -- > Matt Haught >

3 5

Security Groups
by Pavel Gashev 28 Jun '16

28 Jun '16

Hello, Currently oVirt supports network security groups for OpenStack network provider only. Are there plans to implement Security Groups for native networks? Technically, I can configure a vNic profile with some Security Groups UUID, and apply it in before_device_create and before_update_device VDSM hooks as filterref to some custom nwfilter. The only issue is that I have to manually edit and distribute nwfilter xml among hardware nodes. If I want isolate set of VMs, I have to manually maintain MAC addresses of VMs in that xml. It would be great if oVirt web interface had a nwfilter editor. Are there plans for it? Thanks

2 1

ovirt-engine-4.0 storage ISO Domain Unattached
by 转圈圈 28 Jun '16

28 Jun '16

This is a multi-part message in MIME format. ------=_NextPart_57722BB7_09080C70_033D1CB6 Content-Type: text/plain; charset="gb18030" Content-Transfer-Encoding: base64 UHJvYmxlbTpJbnN0YWxsIHRoZSBvdmlydC1lbmdpbmUtNC4wICxJIGNob3NlIHRoZSBJU08g RG9tYWluIHBhdGggIi92YXIvbGliL2V4cG9ydHMvaXNvIiBhbmQgaW5zdGFsbCBzdWNjZXNz ZnVsIDtidXQgYWNjZXNzIHRocm91Z2ggYnJvd3NlciwgdGhlIElTTyBEb21haW4gc3RhdGUg aXMgIlVuYXR0YWNoZWQiOw== ------=_NextPart_57722BB7_09080C70_033D1CB6 Content-Type: text/html; charset="gb18030" Content-Transfer-Encoding: base64 PGRpdj5Qcm9ibGVtOkluc3RhbGwgdGhlIG92aXJ0LWVuZ2luZS00LjAgLEkgY2hvc2UgdGhl IElTTyBEb21haW4gcGF0aCAiL3Zhci9saWIvZXhwb3J0cy9pc28iIGFuZCBpbnN0YWxsIHN1 Y2Nlc3NmdWwgO2J1dCBhY2Nlc3MgdGhyb3VnaCBicm93c2VyLCZuYnNwOzxzcGFuIHN0eWxl PSJsaW5lLWhlaWdodDogMS41OyI+dGhlIElTTyBEb21haW4gc3RhdGUgaXMgIlVuYXR0YWNo ZWQ8L3NwYW4+PHNwYW4gc3R5bGU9ImxpbmUtaGVpZ2h0OiAxLjU7Ij4iOzwvc3Bhbj48L2Rp dj48ZGl2Pjxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2Pjxi cj48L2Rpdj4= ------=_NextPart_57722BB7_09080C70_033D1CB6--

1 0

migrating a vm from a down node
by Bill James 27 Jun '16

27 Jun '16

I am doing some fault tolerance type testing with ovirt before we put it in production. One thing I noticed is if I unplug the power from a hardware node, including iLo (fence), that the VMs that were on that host go to unknown state. I have found no way in the GUI to migrate the hosts, even they they are marked HA. The only way I've found so far is to modify the database directly. Is that the only recovery from a host failure of this type? engine=> update vm_dynamic set status = 0 where vm_guid =(select engine(> vm_guid from vm_static where vm_name = 'myvm'); ovirt-engine-3.6.4.1-1.el7.centos.noarch centos 7.2 Also is 3.6.4 a OK version to use or should I upgrade first? (looks like 3.6.6.2-1.el7.centos is current latest)

2 1

Accessing VM over WAN
by RK RK 27 Jun '16

27 Jun '16

Hi, I am planning to deploy oVirt 4.0.0 in a production environment where initially it will host 150 VDIs and will expand by 20 to 25 in subsequent years with Windows 7, 8.1 and 10. Users will be accessing these VDIs from their android tab or any tiny thin client devices which will have only very small footprint OS with HTML5 supported browser. I wish to give users to access the VDIs over WAN(from their home or on travel). Is it possible to access the VDIs via spice-html5 over the WAN. Any special configurations to be made to enable it? How should I make spice-html5 as the default protocol to access the VDIs? -- With Regards, RK, +91 9840483044

4 3

VMs halt on Storage Error
by David Gerner 27 Jun '16

27 Jun '16

Hi, I'm running into a strange issue that I've been trying to solve unsuccessfully for a few days now, and I was hoping someone could offer some insight. A few days ago I needed to reboot the the server that hosts the management engine and is also a node in the system. Following proper procedure I selected a new host to be the SPM, migrated VMs off the Host, and put it into maintenance mode. After the host came back up (and the management engine was back online) I noticed that one of my VMs had halted on a storage error, to rule out the SPM being the issue I asked oVirt to select a new SPM and it was stuck in a contending loop where each host tries to contend for SPM status but ultimately fails (every other VM also halted by this point). The error was "BlockSD master file system FSCK error", after researching the error I found a post on this list that was the same error and the author said that a simple FSCK on the offending file system fixed his issue. I had to force shutdown every VM from the halted state and put all but one host into maintenance mode. On that host I ran a FSCK on the offending volume which found a lot of short read errors which it fixed and afterwards the contending loop was broke and hosts could now successfully be an SPM. Now every VM halts on start or resume, even ones that were offline at the time of the earlier incident, with a Storage Error "abnormal vm stop device virtio-disk0 error eio". I can't even create new disks because it fails with an error. I've attached what I think is the relevant VDSM log portion of a VM trying to resume, if more is needed please just let me know. I'm worried FSCK and I mangled the file system, and have no idea how to repair it. Any insight is greatly appreciated. Thank you, Dave oVirt Engine Version: 3.6.2.6-1.el7.centos Storage Tech: iSCSI 4 Servers each with: OS: RHEL - 7 - 2.1511.el7.centos.2.10 Kernel: 3.10.0 - 327.4.5.el7.x86_64 KVM Version: 2.3.0 - 31.el7_2.7.1 libVirt Version: libvirt-1.2.17-13.el7_2.5 VDSM Version: vdsm-4.17.28-0.el7.centos

2 1

direct mounting of vm disks?
by Robert Story 27 Jun '16

27 Jun '16

--Sig_/.lLlEVeLgvPZAtF/dI+yD0s Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hello, I'm using oVirt 3.5.x w/nfs for vm file storage. I'm trying to restore a vm from backup, which entails: - scp backup.tar to vm - untar backup on vm this means all the data makes 3 trips over the network, each of which causes a load spike on my nfs server. That nfs load, of course, affects all other vms. what I'd like to be able to do is - scp backup.tar to nfs server - stop vm - mount vm disks on nfs server - untar backup on nfs server (using ionice to minimze load impact) - unmount vm disks - start vm I remember that I used to use kpartx to mount regular KVM disks, so I'm hoping that it can also be done here. Anyone else tried to make this work? Robert --=20 Senior Software Engineer @ Parsons --Sig_/.lLlEVeLgvPZAtF/dI+yD0s Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAldvXM8ACgkQ7/fVLLY1mni4KwCdFDpmX8f3BumEgulWCmcUiiNz m6wAnReCZ1roZh10nXVW0iIYKtl+M9gE =KDOJ -----END PGP SIGNATURE----- --Sig_/.lLlEVeLgvPZAtF/dI+yD0s--

2 2

Unofficial projects
by James Michels 27 Jun '16

27 Jun '16

Greetings, Is there some official oVirt section where you list unofficial oVirt-related projects? If so, what is the process for a new unofficial project to get listed there? If not, I think it might be a good idea to provide a minimal support by listing them. Thank you. James

3 3

no katello 3.0 errata available anymore into ovirt
by Nathanaël Blanchet 27 Jun '16

27 Jun '16

Hi, I upgraded to the latest katello 3.0, and errata are not available anymore for hosts or vms. There is no error, it always displays 0 errata. The name of the host/vm is the same as into foreman. Though, list of provisionned hosts is still available, so I suppose the issue comes from katello API and not foreman API. Thank you. -- Nathanaël Blanchet Supervision réseau Pôle Infrastrutures Informatiques 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

2 1