- Users - oVirt List Archives

[Self-hosted engine] Change port for web portal
by junhoyu＠beamworks.co.kr 16 Jul '24

16 Jul '24

Hi everyone, I've installed oVirt (specifically Oracle Linux Virtualization Manager v.4.5) on my server using the Self-Hosted Deployment method. However, my server is in an environment where using well-known ports is restricted. Therefore, I need to reconfigure the ports for the web portal, which currently uses ports 80 and 443, so that I can access the web portal through the browser. I tried the following two methods: === Method 1 === During installation, I prepared an answer file (/root/answers.conf) with the following configurations: OVESETUP_CONFIG/publicHttpPort=int:2416 OVESETUP_CONFIG/publicHttpsPort=int:5281 OVESETUP_CONFIG/httpPort=int:2416 OVESETUP_CONFIG/httpsPort=int:5281 Then, I executed 'hosted-engine --deploy --4 --config-append=/root/answers.conf'. However, this did not change the ports. === Method 2 === After installation, I modified the firewalld service files (ovirt-http.xml, ovirt-https.xml), httpd configuration files (httpd.conf, conf.d/ssl.conf), and engine configuration files (engine.conf.d/10-setup-portocols.conf, 11-setup-sso.conf). This worked, but the 'hosted-engine --vm-status' command contains the following issue: Engine status : {"vm": "up", "health": "bad", "detail": "Up", "reason": "failed liveliness check"} It seems to be caused by the health check to the web portal. (https://{engine_fqdn}/ovirt-engine/services/health -> the health-check process does not modify the port in this URL) ====== So, I will solve it with aspects related to the two questions below. 1) Is there a way to change the engine health-check URL during or after installation? 2) Is there a way to configure ports globally related to oVirt? I hope you guys can provide solutions. Thanks. Best regards, Junho Yu

1 0

lvm.log is growing
by dev＠eazis.com 16 Jul '24

16 Jul '24

Hi, The file /tmp/lvm.log is growing every day. I need to clear the file once in the two weeks. Can anyone tell me how i can rotate this log file? Kind regards, Gerjan

1 0

Start VM with option -machine smm=off
by Kalil de A. Carvalho 16 Jul '24

16 Jul '24

Hello all. I'm trying to workaround the problem reported here: https://gitlab.com/qemu-project/qemu/-/issues/1198 but I did not find out how to start up the VM with the option -machine smm=off like sead on the lsit above. I guess that it is possible to run the command using the qemu command but I think that I will lose the management of it. It is possible to startup up a VM with this option using the oVirt GUI ou virsh? Best regards -- Atenciosamente, Kalil de A. Carvalho

3 2

New oVirt release ???
by Diggy 15 Jul '24

15 Jul '24

Any movement towards a new oVirt release now that CentOS Stream 8 is officially at EOL and the current engine is based on it? Do I see oVirt v4.6 in my near future? I'm looking for a reason to build a fresh oVirt environment and migrate our 100+ VMs to it. :) ---

6 10

ovirt.ovirt
by james.parsons1＠arcelormittal.com 15 Jul '24

15 Jul '24

I would like to get ovirt.ovirt. working in my environment which run on oracle KVM, and I have an oracle automation manager 1. I've tried installing ovirt.ovirt packages on my OAM with no like ., 2. I installed the packages on my Hosts, but I'm still unable to run any of the packages Do I need to install the packages on my hosted-engine ? Regards James Parsons

1 0

rocky 9.4 hypervisor - failed to create ovirmgmt iface
by marek 12 Jul '24

12 Jul '24

hi, today i tried to add new hypervisor - rocky 9.4 ovirt engine - 4.5 ovirtmgmt iface is not functional when i try add host to cluster it exist for while (seconds) but then i see message "ovirtmgmt: port 1(eno3) entered disabled state" and ovirtmgmt iface is gone and network is unreacheable i have working hypervisors based on rocky 9.3 i tried downgrade nmstate to version from 9.3 dnf downgrade https://dl.rockylinux.org/vault/rocky/9.3/AppStream/x86_64/os/Packages/p/py… https://dl.rockylinux.org/vault/rocky/9.3/AppStream/x86_64/os/Packages/n/nm… https://dl.rockylinux.org/vault/rocky/9.3/AppStream/x86_64/os/Packages/n/nm… any ideas/tips howto debug ovirmgmt iface creation process? vdsm.log 2024-07-11 17:42:07,305+0200 INFO (jsonrpc/6) [api.network] START setupNetworks(networks={'ovirtmgmt': {'netmask': '255.255.255.0', 'ipv6autoconf': False, 'nic': 'eno3', 'bridged': 'true', 'ipaddr': '10.10.10.237', 'defaultRoute': True, 'dhcpv6': False, 'STP': 'no', 'mtu': 1500, 'switch': 'legacy'}}, bondings={}, options={'connectivityTimeout': 120, 'commitOnSuccess': True, 'connectivityCheck': 'true'}) from=::ffff:10.10.12.12,33842 (api:31) 2024-07-11 17:43:07,312+0200 WARN (vdsm.Scheduler) [Executor] Worker blocked: <Worker name=jsonrpc/6 running <Task <JsonRpcTask {'jsonrpc': '2.0', 'method': 'Host.setupNetworks', 'params': {'networks': {'ovirtmgmt': {'netmask': '255.255.255.0', 'ipv6autoconf': False, 'nic': 'eno3', 'bridged': 'true', 'ipaddr': '10.10.10.237', 'defaultRoute': True, 'dhcpv6': False, 'STP': 'no', 'mtu': 1500, 'switch': 'legacy'}}, 'bondings': {}, 'options': {'connectivityTimeout': 120, 'commitOnSuccess': True, 'connectivityCheck': 'true'}}, 'id': '65b89a79-0e7a-4a05-b310-f9903bdec2ce'} at 0x7f5e8c245b20> timeout=60, duration=60.01 at 0x7f5e8c245df0> task#=0 at 0x7f5e8c27eaf0>, traceback: File: "/usr/lib64/python3.9/threading.py", line 937, in _bootstrap self._bootstrap_inner() File: "/usr/lib64/python3.9/threading.py", line 980, in _bootstrap_inner self.run() File: "/usr/lib64/python3.9/threading.py", line 917, in run self._target(*self._args, **self._kwargs) File: "/usr/lib/python3.9/site-packages/vdsm/common/concurrent.py", line 243, in run ret = func(*args, **kwargs) File: "/usr/lib/python3.9/site-packages/vdsm/executor.py", line 284, in _run self._execute_task() File: "/usr/lib/python3.9/site-packages/vdsm/executor.py", line 298, in _execute_task task() File: "/usr/lib/python3.9/site-packages/vdsm/executor.py", line 374, in __call__ self._callable() File: "/usr/lib/python3.9/site-packages/yajsonrpc/__init__.py", line 253, in __call__ self._handler(self._ctx, self._req) File: "/usr/lib/python3.9/site-packages/yajsonrpc/__init__.py", line 296, in _serveRequest response = self._handle_request(req, ctx) File: "/usr/lib/python3.9/site-packages/yajsonrpc/__init__.py", line 338, in _handle_request res = method(**params) File: "/usr/lib/python3.9/site-packages/vdsm/rpc/Bridge.py", line 186, in _dynamicMethod result = fn(*methodArgs) File: "<decorator-gen-508>", line 2, in setupNetworks File: "/usr/lib/python3.9/site-packages/vdsm/common/api.py", line 33, in method ret = func(*args, **kwargs) File: "/usr/lib/python3.9/site-packages/vdsm/API.py", line 1576, in setupNetworks supervdsm.getProxy().setupNetworks(networks, bondings, options) File: "/usr/lib/python3.9/site-packages/vdsm/common/supervdsm.py", line 38, in __call__ return callMethod() File: "/usr/lib/python3.9/site-packages/vdsm/common/supervdsm.py", line 35, in <lambda> getattr(self._supervdsmProxy._svdsm, self._funcName)(*args, File: "<string>", line 2, in setupNetworks File: "/usr/lib64/python3.9/multiprocessing/managers.py", line 810, in _callmethod kind, result = conn.recv() File: "/usr/lib64/python3.9/multiprocessing/connection.py", line 254, in recv buf = self._recv_bytes() File: "/usr/lib64/python3.9/multiprocessing/connection.py", line 418, in _recv_bytes buf = self._recv(4) File: "/usr/lib64/python3.9/multiprocessing/connection.py", line 383, in _recv chunk = read(handle, remaining) (executor:345) installed ovirt packages on host centos-release-ovirt45-9.2-1.el9s.noarch ovirt-vmconsole-1.0.9-3.el9.noarch ovirt-imageio-common-2.5.0-1.el9.x86_64 python3-ovirt-engine-sdk4-4.6.2-1.el9.x86_64 ovirt-openvswitch-ovn-2.17-1.el9.noarch ovirt-openvswitch-ovn-common-2.17-1.el9.noarch ovirt-imageio-client-2.5.0-1.el9.x86_64 ovirt-imageio-daemon-2.5.0-1.el9.x86_64 ovirt-openvswitch-ovn-host-2.17-1.el9.noarch ovirt-vmconsole-host-1.0.9-3.el9.noarch ovirt-python-openvswitch-2.17-1.el9.noarch ovirt-openvswitch-2.17-1.el9.noarch python3.11-ovirt-imageio-common-2.5.0-1.el9.x86_64 python3.11-ovirt-engine-sdk4-4.6.2-1.el9.x86_64 python3.11-ovirt-imageio-client-2.5.0-1.el9.x86_64 ovirt-openvswitch-ipsec-2.17-1.el9.noarch python3-ovirt-setup-lib-1.3.3-1.el9.noarch ovirt-ansible-collection-3.2.0-1.el9.noarch ovirt-hosted-engine-ha-2.5.1-1.el9.noarch ovirt-provider-ovn-driver-1.2.36-1.el9.noarch ovirt-host-dependencies-4.5.0-3.el9.x86_64 ovirt-hosted-engine-setup-2.7.1-1.el9.noarch ovirt-host-4.5.0-3.el9.x86_64

1 1

Failed to configure management network on the host.
by d_hashima＠sagaidc.co.jp 12 Jul '24

12 Jul '24

RHEL9 (KVM server) cannot be added from oVirt Engine built on centos9 stream. The oVirt management NW and the RHEL9 (KVM server) management NW are in the same segment and are in an environment where they can resolve each other's names. I'm new to oVirt, so I'd appreciate it if you could explain it in an easy-to-understand manner.

2 1

Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute"
by Brent Saner 11 Jul '24

11 Jul '24

Whoops, sent before I finished replying- I'll look into first trying the Nightly, to see if that has the same behavior, and then trying the _setupAuth patching et. al. to see if I can narrow down what might be happening here. Brent Saner SENIOR SYSTEMS ENGINEER Follow us on LinkedIn! brent.saner(a)netfire.com 855-696-3834 Ext. 110 www.netfire.com ________________________________ From: Brent Saner <brent.saner(a)netfire.com> Sent: Thursday, July 11, 2024 5:38 PM To: users(a)ovirt.org <users(a)ovirt.org> Subject: Re: [ovirt-users] Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute" Looking into this, I can confirm that *after* the packages are installed and *before* engine-setup is run, /etc/ovirt-engine/aaa/ does not even exist: # ls /etc/ovirt-engine/aaa ls: cannot access '/etc/ovirt-engine/aaa': No such file or directory Which may be expected, I'm unclear on that. Further details inline below: ________________________________ From: Yedidyah Bar David <didi(a)redhat.com> Sent: Thursday, July 4, 2024 2:13 AM To: Brent Saner <brent.saner(a)netfire.com> Cc: users(a)ovirt.org <users(a)ovirt.org> Subject: Re: [ovirt-users] Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute" You don't often get email from didi(a)redhat.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification> Caution: The e-mail below is from an external source. Please exercise caution before opening attachments, clicking links, or following guidance. On Thu, Jul 4, 2024 at 9:11 AM Yedidyah Bar David <didi(a)redhat.com<mailto:didi@redhat.com>> wrote: On Wed, Jun 19, 2024 at 10:38 PM Brent S. <brent.saner(a)netfire.com<mailto:brent.saner@netfire.com>> wrote: As a quick update to this: # ovirt-aaa-jdbc-tool Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Jun 19, 2024 7:28:14 PM org.ovirt.engine.extension.aaa.jdbc.binding.cli.Cli main SEVERE: Unexpected Exception invoking Cli: Could not read properties from: /etc/ovirt-engine/aaa/internal.properties Which is, of course, the same message in the log. This is probably expected, since *engine-setup never actually created the file*: Are you sure about this? Presumably it was removed, but I do know the directory is not present before engine-setup is run and the file is not present after. # ls -la /etc/ovirt-engine/aaa total 4 drwxr-xr-x. 2 root root 6 Jun 19 19:27 . drwxr-xr-x. 18 root root 4096 Jun 19 19:27 .. # I guess you checked the above only after engine-setup failed/finished, right? At the time, yes; see above inlines; the directory itself does not even exist before engine-setup. And: 2024-06-19 19:27:10,917+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.config.aaajdbc plugin.execute:923 execute-output: ['/usr/share/ovirt-engine-extension-aaa-jdbc/dbscripts/schema.sh', '-s', '[REDACTED_REMOTE_DB_HOST]', '-p', '5432', '-u', '[REDACTED_REMOTE_DB_USER]', '-d', '[REDACTED_REMOTE_DB_NAME]', '-e', 'aaa_jdbc', '-l', '/root/ovirt-engine-setup.log', '-c', 'apply'] stderr: 2024-06-19 19:27:10,917+0000 DEBUG otopi.transaction transaction._prepare:61 preparing 'File transaction for '/etc/ovirt-engine/aaa/internal.properties'' 2024-06-19 19:27:10,917+0000 DEBUG otopi.filetransaction filetransaction.prepare:184 file '/etc/ovirt-engine/aaa/internal.properties' missing Indeed (SNIP) If you grep ovirt-engine sources, you'll find internal.properties in: packaging/setup/ovirt_engine_setup/engine/constants.py: AAA_JDBC_CONFIG_DB = os.path.join( OVIRT_ENGINE_SYSCONFDIR, 'aaa', 'internal.properties' ) If you then grep for AAA_JDBC_CONFIG_DB, you see it in: packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/config/aaajdbc.py: def _setupAuth(self): self.environment[otopicons.CoreEnv.MAIN_TRANSACTION].append( filetransaction.FileTransaction( name=oenginecons.FileLocations.AAA_JDBC_CONFIG_DB, ... visibleButUnsafe=True, Forgot to mention: You can check otopi sources:src/otopi/filetransaction.py to see what this means. ... def _setupAdminUser(self): toolArgs = ( oenginecons.FileLocations.AAA_JDBC_TOOL, '--db-config=%s' % oenginecons.FileLocations.AAA_JDBC_CONFIG_DB, ) ... @plugin.event( stage=plugin.Stages.STAGE_MISC, name=AAA_JDBC_SETUP_ADMIN_USER, after=( oengcommcons.Stages.DB_SCHEMA, oengcommcons.Stages.DB_CONNECTION_AVAILABLE, oenginecons.Stages.CONFIG_EXTENSIONS_UPGRADE, ), before=( oenginecons.Stages.CONFIG_AAA_ADMIN_USER_SETUP, ), condition=lambda self: self.environment[ oenginecons.ConfigEnv.ADMIN_USER_AUTHZ_TYPE ] == self.AAA_JDBC_AUTHZ_TYPE, ) def _misc(self): # TODO: if we knew that aaa-jdbc package was upgraded by engine-setup # TODO: we could display summary note that custom profiles have to be # TODO: upgraded manually self._setupSchema() self._setupAuth() self._setupAdminUser() ... This means that: At STAGE_MISC, _misc calls _setupAuth, which creates this file, and then it calls _setupAdminUser which tries to use it. Latter fails, and engine-setup rolls back the MAIN_TRANSACTION, including removing the file. I'd start debugging this issue by: 1. Patching _setupAuth to wait (e.g. using dialog.queryBoolean, search the source for examples) after it creates the file, so that I can investigate it 2. Patching _setupAdminUser to wait after it runs the tool, so that I can try to investigate the failure - e.g. run it myself under strace, if the existing logging is not enough. You can try using the otopi plugin wait_on_error for this, instead of patching. Good luck and best regards, -- Didi -- Didi

1 0

Recall: Re: Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute"
by Brent Saner 11 Jul '24

11 Jul '24

brent.saner(a)netfire.com would like to recall the message, "Re: [ovirt-users] Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute"". Brent Saner SENIOR SYSTEMS ENGINEER Follow us on LinkedIn! brent.saner(a)netfire.com 855-696-3834 Ext. 110 www.netfire.com

1 0

engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute"
by brent.saner＠netfire.com 11 Jul '24

11 Jul '24

I can find no reason why this would be happening. AlmaLinux 9.4, oVirt 4.5.6, brand new/fresh cluster/install. From the log, these seem to be the only relevant lines: 2024-06-18 22:02:52,720+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.config.aaajdbc plugin.execute:918 execute-output: ('/usr/bin/ovirt-aaa-jdbc-tool', '--db-config=/etc/ovirt-engine/aaa/internal.properties', 'query', '--what= user', '--pattern=name=admin') stdout: 2024-06-18 22:02:52,720+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.config.aaajdbc plugin.execute:923 execute-output: ('/usr/bin/ovirt-aaa-jdbc-tool', '--db-config=/etc/ovirt-engine/aaa/internal.properties', 'query', '--what= user', '--pattern=name=admin') stderr: Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Jun 18, 2024 10:02:52 PM org.ovirt.engine.extension.aaa.jdbc.binding.cli.Cli main SEVERE: Unexpected Exception invoking Cli: com/ongres/scram/common/stringprep/StringPreparation 2024-06-18 22:02:52,720+0000 DEBUG otopi.context context._executeMethod:143 method exception Traceback (most recent call last): File "/usr/lib/python3.9/site-packages/otopi/context.py", line 132, in _executeMethod method['method']() File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/config/aaajdbc.py", line 414, in _misc self._setupAdminUser() File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/config/aaajdbc.py", line 298, in _setupAdminUser if not self._userExists( File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/config/aaajdbc.py", line 49, in _userExists rc, stdout, stderr = self.execute( File "/usr/lib/python3.9/site-packages/otopi/plugin.py", line 929, in execute raise RuntimeError( RuntimeError: Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute 2024-06-18 22:02:52,721+0000 ERROR otopi.context context._executeMethod:151 Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute 2024-06-18 22:02:52,721+0000 DEBUG otopi.transaction transaction.abort:124 aborting 'DNF Transaction' Any ideas?

5 7