- Users - oVirt List Archives

managing local users in 4.2 ?
by Matthias Leopold 06 May '18

06 May '18

Hi, i tried to create a local user in oVirt 4.2 with "ovirt-aaa-jdbc-tool user add" (like i did in oVirt 4.1.9). the command worked ok, but the created user wasn't visible in the web gui. i then used the "add" button in admin portal to add the already existing user and after that the user was visible. i didn't have to do that in 4.1.9, the "add" button was already there the, but i didn't know what to do with it. how did managing local users change in 4.2? thx matthias

3 3

ansible failure during host install
by Young, Matthew (Numerical Algorithms Group) 06 May '18

06 May '18

--_000_C3425601B4F77C49A7674BEF0DEB80CB1AA98Cde35s00fhst07DSCB_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello all, I have been working on adding a new host to an oVirt cluster. The installa= tion is failing in the ansible portion, specifically installing the ansible= elasticsearch ca cert. I have no experience with ansible. Does anyone kn= ow what is causing this issue? Or how to create this ca cert? **** from ansible log**** ... 2018-04-12 09:32:18,114 p=3D56616 u=3Dovirt | TASK [oVirt.ovirt-fluentd/fl= uentd-setup : Create fluentd.conf] ***************** 2018-04-12 09:32:18,730 p=3D56616 u=3Dovirt | ok: [10.222.10.156] =3D> { "changed": false, "checksum": "c9f88b60cd12ab8e3f3ffce1ae07654c89b06ef6", "gid": 0, "group": "root", "mode": "0640", "owner": "root", "path": "/etc/fluentd/fluent.conf", "secontext": "system_u:object_r:etc_t:s0", "size": 58, "state": "file", "uid": 0 } 2018-04-12 09:32:18,739 p=3D56616 u=3Dovirt | TASK [oVirt.ovirt-fluentd/fl= uentd-setup : Install fluentd certificate] ********* 2018-04-12 09:32:18,759 p=3D56616 u=3Dovirt | skipping: [10.222.10.156] = =3D> { "changed": false, "skip_reason": "Conditional result was False" } 2018-04-12 09:32:18,768 p=3D56616 u=3Dovirt | TASK [oVirt.ovirt-fluentd/fl= uentd-setup : Install fluentd elasticsearch CA certificate] *** 2018-04-12 09:32:18,810 p=3D56616 u=3Dovirt | fatal: [10.222.10.156]: FAIL= ED! =3D> { "changed": false } MSG: src (or content) is required 2018-04-12 09:32:18,812 p=3D56616 u=3Dovirt | PLAY RECAP *****************= **************************************************** 2018-04-12 09:32:18,812 p=3D56616 u=3Dovirt | 10.222.10.156 := ok=3D33 changed=3D4 unreachable=3D0 failed=3D1 ************ --_000_C3425601B4F77C49A7674BEF0DEB80CB1AA98Cde35s00fhst07DSCB_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> Hello all,<o:p></o:p> <o:p> </o:p> I have been working on adding a new host to an oVirt= cluster.  The installation is failing in the ansible portion, specifi= cally installing the ansible elasticsearch ca cert.  I have no experie= nce with ansible.  Does anyone know what is causing this issue?  Or how to create this ca cert?<o:p></o:p> <o:p> </o:p> **** from ansible log****<o:p></o:p> …<o:p></o:p> 2018-04-12 09:32:18,114 p=3D56616 u=3Dovirt |  = TASK [oVirt.ovirt-fluentd/fluentd-setup : Create fluentd.conf] ************= *****<o:p></o:p> 2018-04-12 09:32:18,730 p=3D56616 u=3Dovirt |  = ok: [10.222.10.156] =3D> {<o:p></o:p>     "changed": false,<o:p><= /o:p>     "checksum": "c9f88= b60cd12ab8e3f3ffce1ae07654c89b06ef6",<o:p></o:p>     "gid": 0,<o:p></o:p></p= >     "group": "root&quo= t;,<o:p></o:p>     "mode": "0640&quot= ;,<o:p></o:p>     "owner": "root&quo= t;,<o:p></o:p>     "path": "/etc/flue= ntd/fluent.conf",<o:p></o:p>     "secontext": "syst= em_u:object_r:etc_t:s0",<o:p></o:p>     "size": 58,<o:p></o:p><= /p>     "state": "file&quo= t;,<o:p></o:p>     "uid": 0<o:p></o:p> }<o:p></o:p> 2018-04-12 09:32:18,739 p=3D56616 u=3Dovirt |  = TASK [oVirt.ovirt-fluentd/fluentd-setup : Install fluentd certificate] ****= *****<o:p></o:p> 2018-04-12 09:32:18,759 p=3D56616 u=3Dovirt |  = skipping: [10.222.10.156] =3D> {<o:p></o:p>     "changed": false,<o:p><= /o:p>     "skip_reason": "Co= nditional result was False"<o:p></o:p> }<o:p></o:p> 2018-04-12 09:32:18,768 p=3D56616 u=3Dovirt |  = TASK [oVirt.ovirt-fluentd/fluentd-setup : Install fluentd elasticsearch CA = certificate] ***<o:p></o:p> 2018-04-12 09:32:18,810 p=3D56616 u=3Dovirt |  = fatal: [10.222.10.156]: FAILED! =3D> {<o:p></o:p>     "changed": false<o:p></= o:p> }<o:p></o:p> <o:p> </o:p> MSG:<o:p></o:p> <o:p> </o:p> src (or content) is required<o:p></o:p> <o:p> </o:p> 2018-04-12 09:32:18,812 p=3D56616 u=3Dovirt |  = PLAY RECAP ****************************************************************= *****<o:p></o:p> 2018-04-12 09:32:18,812 p=3D56616 u=3Dovirt |  = 10.222.10.156          &n= bsp;   : ok=3D33   changed=3D4    unreac= hable=3D0    failed=3D1<o:p></o:p> <o:p> </o:p> ************<o:p></o:p> </div> </body> </html> --_000_C3425601B4F77C49A7674BEF0DEB80CB1AA98Cde35s00fhst07DSCB_--

2 5

Ovirt 3.5 Does not start ovirt-engine after restore
by Tácito Chaves 06 May '18

06 May '18

--_000_FR1PR80MB034209657132B4D80A7B7746E9870FR1PR80MB0342lamp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello guys! Could any of you help me with my manager's backup / restore? I followed the documentation to create my backup and restore on another ser= ver but I'm having trouble accessing the panel after the restore is complet= e. can anybody help me? The steps are listed in this file: http://paste.scsys.co.uk/577382 and just remembering, I'm using version 3.5 and the hostname is the same as= the one I'm trying to migrate. The unfortunate message I receive is the following: ovirt-engine: ERROR run= : 532 Error: process terminated with status code 1 With this the service does not rise! Thank you! T=E1cito --_000_FR1PR80MB034209657132B4D80A7B7746E9870FR1PR80MB0342lamp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style> </head> <body dir=3D"ltr"> <div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;= color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);"> Hello guys! Could any of you help me with my manager's backup / restore?<b= r> I followed the documentation to create my backup and restore on anoth= er server but I'm having trouble accessing the panel after the restore is c= omplete. can anybody help me? The steps are listed in this file: http://paste.scsys.co.uk/57= 7382 and just remembering, I'm using version 3.5 and the hostname is the s= ame as the one I'm trying to migrate. The unfortu= nate message I receive is the following: ovirt-engine: ERROR run: 532 Error= : process terminated with status code 1 With this the service does not rise! Thank you! T=E1cito </div> </body> </html> --_000_FR1PR80MB034209657132B4D80A7B7746E9870FR1PR80MB0342lamp_--

3 2

oVirt messages from engine to vdsm
by Anastasiya Ruzhanskaya 05 May '18

05 May '18

Hello everyone! Currently I want to determine what information is included in messages passing from oVirt engine to VDSM on ovirt-node. I made up a really simple configuration with one VM representing engine, another - node, a managed to successfully launch a single VM on this node. However, I have chosen to configure everything automatically. Currently traffic is encrypted with default certificates. So, there are three options for me and no one of them really works. 1) Find the format of messages ( what the fields are, session id for example) in docs, but I didn't manage to find it; 2) Use wireshark to decrypt the traffic and the apply maybe a json -dissector to the decrypted data. I have tried many solutions ( thanks god I have rsa private and public keys but there is another session key which is generated every time engine starts to communicate with vdsm, which I cannot get with the help of sslkeylog file or ld_preload technology. Maybe someone knows the exact methodology how to do this correctly? 3) Turn off ssl in oVirt. It is simple to do that for vdsm, but for engine, according to answers on oVirt site, I should do 2 requests to the database. I was really surprised that psql was not installed by oVirt on my system. How did it then created a default database? ( I have chosen to create all locally and with default configurations). I mean these two commands : https://www.ovirt.org/develop/developer-guide/vdsm/connecting-development-v… . I have a following error there : psql: FATAL: Peer authentication failed for user "engine" Could you please guide my what method is the best and how should I correct my faults there?

2 1

Can't get hosted-engine console in cli
by Vadim 04 May '18

04 May '18

Hi, Users I installed on clean Centos7.4 ovirt-4.2.2.6-1 with HE on domain iscsi using cockpit and found that 1. can't get console in cli # hosted-engine --console The engine VM is running on this host Connected to domain HostedEngine Escape character is ^] error: internal error: cannot find character device <null> from gui console works fine. may this is because vm.conf in 4.2.2 display=qxl ? 2. can't import vm from ova errors from engine.log 2018-05-03 12:19:29,112+03 ERROR [org.ovirt.engine.core.bll.exportimport.ImportVmFromOvaCommand] (EE- ManagedThreadFactory-engine-Thread-11299) [8cc80ae5-cccf-4554-b52d-4892548eea8c] Command 'org.ovirt.engine.core.bll.exportimport.ImportVmFromOvaCommand' failed: For input string: "" 2018-05-03 12:19:29,112+03 ERROR [org.ovirt.engine.core.bll.exportimport.ImportVmFromOvaCommand] (EE- ManagedThreadFactory-engine-Thread-11299) [8cc80ae5-cccf-4554-b52d-4892548eea8c] Exception: java.lang.NumberFormatException: For input string: "" 2018-05-03 12:19:29,119+03 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE- ManagedThreadFactory-engine-Thread-11299) [8cc80ae5-cccf-4554-b52d-4892548eea8c] EVENT_ID: IMPORTEXPORT_IMPORT_VM_FAILED(1,153), Failed to import Vm VM7.2.0-x86_64 to Data Center Default, Cluster Default on ovirt-4.1.9.1-1 import works fine Can you help me to solve these problems. Thanks, Vadim

2 1

[ANN] oVirt 4.2.3 is now generally available
by Sandro Bonazzola 04 May '18

04 May '18

The oVirt Project is pleased to announce the general availability of oVirt 4.2.3 as of May 4th, 2018 This update is the third release in a series of stabilization updates to the 4.2 series. This release is available now for: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.4 or later * oVirt Node 4.2 See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance will be avialable in a few hours - oVirt Node will be avialable in a few hours [2] Additional Resources: * Read more about the oVirt 4.2.3 release highlights: http://www.ovirt.org/release/4.2.3/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.2.3/ [2] http://resources.ovirt.org/pub/ovirt-4.2/iso/ -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig> <https://redhat.com/summit>

1 0

Can't add newly reinstalled ovirt node
by Jakov Sosic 04 May '18

04 May '18

Hi, after installing 4.2.1.1 oVirt node, and adding it in hosted oVirt engine I get the following error: Ansible host-deploy playbook execution has started on host vhost01. Ansible host-deploy playbook execution has successfully finished on host vhost01. Status of host vhost01 was set to NonOperational. Host vhost01 does not comply with the cluster Lenovo networks, the following networks are missing on host: 'VLAN10' Host vhost01 installation failed. Failed to configure management network on the host. One more interesting thing: Compute => Hosts => vhost02 => Network interfaces is empty... there are no recognized interfaces on this host. Any idea?

3 3

vNIC Network Filter setting
by TranceWorldLogic 04 May '18

04 May '18

Hi, I want to set default vNIC profile "Network Filter" setting as "no-ip-muticast" rather than "vdsm-no-muticast-snooping". Can it possible in ovirt ? If yes, how to do same ? Thanks, ~Rohit

2 1

Recovering oVirt-Engine with a backup before upgrading to 4.2
by Sven Achtelik 04 May '18

04 May '18

--_000_41e0a4df7d7b4b04824f154982fe953fepsaero_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi All, I'm still facing issues with my HE engine. Here are the steps that I took t= o end up in this situation: - Update Engine from 4.1.7 to 4.1.9 o That worked as expected - Automatic Backup of Engine DB in the night - Upgraded Engine from 4.1.9 to 4.2.1 o That worked fine - Noticed Issues with the HA support for HE o Cause was not having the latest ovirt-ha agent/broker version on hosts - After updating the first host with the latest packages for the Ag= ent/Broker engine was started twice o As a result the Engine VM Disk was corrupted and there is no Backup of = the Disk o There is also no Backup of the Engine DB with version 4.2 - VM disk was repaired with fsck.ext4, but DB is corrupt o Can't restore the Engine DB because the Backup DB from Engine V 4.1 - Rolled back all changes on Engine VM to 4.1.9 and imported Backup o Checked for HA VMs to set as disabled and started the Engine - Login is fine but the Engine is having trouble picking up and inf= ormation from the Hosts o No information on running VMs or hosts status - Final Situation o 2 Hosts have VMs still running and I can't stop those o I still have the image of my corrupted Engine VM (v4.2) Since there were no major changes after upgrading from 4.1 to 4.2, would it= be possible to manually restore the 4.1 DB to the 4.2 Engine VM to this up= and running again or are there modifications made to the DB on upgrading t= hat are relevant for this ? All my work on rolling back to 4.1.9 with the D= B restore failed as the Engine is not capable of picking up information fro= m the hosts. Lessons learned is to always make a copy/snapshot of the engin= e VM disk before upgrading anything. What are my options on getting back to= a working environment ? Any help or hint is greatly appreciated. Thank you, Sven --_000_41e0a4df7d7b4b04824f154982fe953fepsaero_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"DE" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> Hi All, <o:p></o:p> <o:p> </o:p> I’m still facing issues w= ith my HE engine. Here are the steps that I took to end up in this situatio= n: <o:p></o:p> <o:p> </o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>Update Engine from 4.1.= 7 to 4.1.9 <o:p></o:p> <![if !supportLists]>o   <![endif]>That worked as expected= <o:p></o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>Automatic Backup of Eng= ine DB in the night<o:p></o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>Upgraded Engine from 4.= 1.9 to 4.2.1<o:p></o:p> <![if !supportLists]>o   <![endif]>That worked fine<o:p></= o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>Noticed Issues with the= HA support for HE<o:p></o:p> <![if !supportLists]>o   <![endif]>Cause was not having th= e latest ovirt-ha agent/broker version on hosts<o:p></o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>After updating the firs= t host with the latest packages for the Agent/Broker engine was started twi= ce <o:p></o:p> <![if !supportLists]>o   <![endif]>As a result the Engine = VM Disk was corrupted and there is no Backup of the Disk<o:p></o:p><= /p> <![if !supportLists]>o   <![endif]>There is also no Backup= of the Engine DB with version 4.2<o:p></o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>VM disk was repaired wi= th fsck.ext4, but DB is corrupt<o:p></o:p> <![if !supportLists]>o   <![endif]>Can’t restore the= Engine DB because the Backup DB from Engine V 4.1<o:p></o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>Rolled back all changes= on Engine VM to 4.1.9 and imported Backup <o:p></o:p> <![if !supportLists]>o   <![endif]>Checked for HA VMs to s= et as disabled and started the Engine<o:p></o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>Login is fine but the E= ngine is having trouble picking up and information from the Hosts<o:p></o:p= > <![if !supportLists]>o   <![endif]>No information on runni= ng VMs or hosts status<o:p></o:p> <![if !supportLists]>- &nbsp= ;       <![endif]>Final Situation<o:p></o= :p> <![if !supportLists]>o   <![endif]>2 Hosts have VMs still = running and I can’t stop those <o:p></o:p> <![if !supportLists]>o   <![endif]>I still have the image = of my corrupted Engine VM (v4.2)<o:p></o:p> <o:p> </o:p> Since there were no major chang= es after upgrading from 4.1 to 4.2, would it be possible to manually restor= e the 4.1 DB to the 4.2 Engine VM to this up and running again or are there= modifications made to the DB on upgrading that are relevant for this ? All my work on rolling back to 4.1.9 with the= DB restore failed as the Engine is not capable of picking up information f= rom the hosts. Lessons learned is to always make a copy/snapshot of the eng= ine VM disk before upgrading anything. What are my options on getting back to a working environment ? Any help or= hint is greatly appreciated.<o:p></o:p> <o:p> </o:p> Thank you, <o:p></o:p></= p> Sven  <o:p></o:p></= p> </div> </body> </html> --_000_41e0a4df7d7b4b04824f154982fe953fepsaero_--

3 8

problem to create snapshot
by Marcelo Leandro 03 May '18

03 May '18

Hello , I am geting error when try do a snapshot: Error msg in SPM log. 2018-05-02 17:46:11,235-0300 WARN (tasks/2) [storage.ResourceManager] Resource factory failed to create resource '01_img_6e5cce71-3438-4045-9d54-607123e0557e.ed7f1c0f-5986-4979-b783-5c465b0854c6'. Canceling request. (resourceManager:543) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/storage/resourceManager.py", line 539, in registerResource obj = namespaceObj.factory.createResource(name, lockType) File "/usr/lib/python2.7/site-packages/vdsm/storage/resourceFactories.py", line 193, in createResource lockType) File "/usr/lib/python2.7/site-packages/vdsm/storage/resourceFactories.py", line 122, in __getResourceCandidatesList imgUUID=resourceName) File "/usr/lib/python2.7/site-packages/vdsm/storage/image.py", line 213, in getChain if srcVol.isLeaf(): File "/usr/lib/python2.7/site-packages/vdsm/storage/volume.py", line 1430, in isLeaf return self._manifest.isLeaf() File "/usr/lib/python2.7/site-packages/vdsm/storage/volume.py", line 138, in isLeaf return self.getVolType() == sc.type2name(sc.LEAF_VOL) File "/usr/lib/python2.7/site-packages/vdsm/storage/volume.py", line 134, in getVolType self.voltype = self.getMetaParam(sc.VOLTYPE) File "/usr/lib/python2.7/site-packages/vdsm/storage/volume.py", line 118, in getMetaParam meta = self.getMetadata() File "/usr/lib/python2.7/site-packages/vdsm/storage/blockVolume.py", line 112, in getMetadata md = VolumeMetadata.from_lines(lines) File "/usr/lib/python2.7/site-packages/vdsm/storage/volumemetadata.py", line 103, in from_lines "Missing metadata key: %s: found: %s" % (e, md)) MetaDataKeyNotFoundError: Meta Data key not found error: ("Missing metadata key: 'DOMAIN': found: {'NONE': '######################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################################'}",) 2018-05-02 17:46:11,286-0300 WARN (tasks/2) [storage.ResourceManager.Request] (ResName='01_img_6e5cce71-3438-4045-9d54-607123e0557e.ed7f1c0f-5986-4979-b783-5c465b0854c6', ReqID='a3cd9388-977b-45b9-9aa0-e431aeff8750') Tried to cancel a processed request (resourceManager:187) 2018-05-02 17:46:11,286-0300 ERROR (tasks/2) [storage.TaskManager.Task] (Task='ba0766ca-08a1-4d65-a4e9-1e0171939037') Unexpected error (task:875) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882, in _run return fn(*args, **kargs) File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 336, in run return self.cmd(*self.argslist, **self.argsdict) File "/usr/lib/python2.7/site-packages/vdsm/storage/securable.py", line 79, in wrapper return method(self, *args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/storage/sp.py", line 1938, in createVolume with rm.acquireResource(img_ns, imgUUID, rm.EXCLUSIVE): File "/usr/lib/python2.7/site-packages/vdsm/storage/resourceManager.py", line 1025, in acquireResource return _manager.acquireResource(namespace, name, lockType, timeout=timeout) File "/usr/lib/python2.7/site-packages/vdsm/storage/resourceManager.py", line 475, in acquireResource raise se.ResourceAcqusitionFailed() ResourceAcqusitionFailed: Could not acquire resource. Probably resource factory threw an exception.: () Anyone help?

2 2