- Users - oVirt List Archives

[Users] SELinux policy issue with oVirt/sanlock
by Brian Vetter 25 Oct '12

25 Oct '12

I get the following AVC msg when trying to run a VM from the ovirt admin tool: type=AVC msg=audit(1351051834.851:720): avc: denied { read } for pid=979 comm="sanlock" name="8798edc0-dbd2-466d-8be9-1997f63e196f" dev="dm-4" ino=3145737 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=lnk_file The file it is attempting to read I believe (from the sanlock.log file) is the following: # ls -lZ /rhev/data-center/a8ea368c-bc08-4e10-81e7-c8439bf7bd35/8798edc0-dbd2-466d-8be9-1997f63e196f/images/b029b5a6-9eb3-4a34-ad03-1ac4386e8c7c/71252c8f-68a9-495f-b5a6-4e8e035b56ea.lease -rw-rw----. vdsm kvm system_u:object_r:nfs_t:s0 /rhev/data-center/a8ea368c-bc08-4e10-81e7-c8439bf7bd35/8798edc0-dbd2-466d-8be9-1997f63e196f/images/b029b5a6-9eb3-4a34-ad03-1ac4386e8c7c/71252c8f-68a9-495f-b5a6-4e8e035b56ea.lease I'm no SELinux policy expert, so I 'm not sure what is exactly wrong. The situation is that the VM image file is stored on an NFS file server (in this case, configured using NFSv3). Both the client and the server are fc17. The error occurs when trying to start the VM. The version of oVirt I am using is a recent nightly build (ovirt-engine -> 3.1.0-3.1345126685.git7649eed.fc17). I'd be making a wild guess that the sanlock process doesn't have rights to open some nfs resources but I'm way over the end of my skis. Brian

3 6

[Users] How can I change IP of the ovirt node?
by Adam Tkáč 24 Oct '12

24 Oct '12

Hello all, is it possible to change IP address of the oVirt node? When I log into oVirt web interface, click on "my_datacenter"->clusters->"my_cluster"->hosts and then I click on the host and then I try to change it's IP, it's not possible because it is greyed-out. Node is of course in the maintenance mode. I'm using ovirt-*3.1.0-2.fc17 on fully updated F17 machine. Thank you in advance for response. Regards, Adam

3 3

[Users] oVirt-Live-0.7.iso - beta version Oct 23th 2012
by Moran Goldboim 24 Oct '12

24 Oct '12

=== oVirt-Live-0.7.iso - beta version Oct 23th 2012 === wiki: http://wiki.ovirt.org/wiki/OVirt_Live ==== Download ==== [http://ovirt.org/releases/3.1/tools/oVirt-Live-0.7.iso download oVirt-Live-0.7.iso] ==== change-log ==== -changed wallpapers (thanks Garrett) -oVirt-setup autostart added -oVirt-enigne welcome screen (via firefox) after successful setup -oVirt-setup terminal window stays open after setup (for debug needs) -Disconnected installs - setup works without outside network connection (packages wouldn't be updated by vsdm-bootstrap, yum reinstall vdsm-bootstrap to workaround) -wlan0 support in vdsm enabled (need someone to test it...)

3 4

[Users] oVirt Weekly Meeting Minutes -- 2012-10-24
by Mike Burns 24 Oct '12

24 Oct '12

Minutes: http://ovirt.org/meetings/ovirt/2012/ovirt.2012-10-24-14.00.html Minutes (text): http://ovirt.org/meetings/ovirt/2012/ovirt.2012-10-24-14.00.txt Log: http://ovirt.org/meetings/ovirt/2012/ovirt.2012-10-24-14.00.log.html ============================ #ovirt: oVirt Weekly Meeting ============================ Meeting started by mburns at 14:00:27 UTC. The full logs are available at http://ovirt.org/meetings/ovirt/2012/ovirt.2012-10-24-14.00.log.html . Meeting summary --------------- * agenda and roll call (mburns, 14:00:47) * Release Status (mburns, 14:03:39) * LINK: http://wiki.ovirt.org/wiki/OVirt_3.2_release-management (mburns, 14:03:52) * a few more feature pages updated (mburns, 14:04:32) * still 7 features missing a feature page (or link) (mburns, 14:04:56) * VM create using pre-defined profiles (mburns, 14:05:15) * libvdsm preview (mburns, 14:05:22) * column resizing and sorting in webadmin (mburns, 14:05:33) * user level api (mburns, 14:05:38) * automatic storage domain upgrade (mburns, 14:05:45) * Japanese Localization (mburns, 14:05:54) * full plugin support with example plugins (in Node) (mburns, 14:06:11) * ACTION: mburns to follow up on missing node feature page (mburns, 14:07:14) * 5 new features added around glusterfs support (mburns, 14:08:56) * sgordon reviewed the feature pages and most of the existing ones are in good shape (mburns, 14:10:20) * ACTION: mburns to review feature pages for %complete for next weeks meeting (mburns, 14:10:42) * Beta/Devel Freeze scheduled for Nov 14 (mburns, 14:11:24) * GA scheduled for Dec 12 (mburns, 14:11:41) * ACTION: aglitke will add libvdsm preview feature page (aglitke_, 14:12:02) * ACTION: each team needs to review support options for F18 in 3.2 (mburns, oschreib_ danken ) (mburns, 14:20:13) * will revisit F18 support next week (mburns, 14:20:53) * Sub Project Status (Node) (mburns, 14:27:00) * actively working on features for 3.2 (mburns, 14:27:13) * Node automation work mostly done, some refactoring still pending, but nothing critical or blocking (mburns, 14:27:42) * TUI redesign UI work done, backend functionality being worked on (mburns, 14:28:10) * glusterfs client support complete (mburns, 14:28:19) * full plugin support done, example snmp plugin complete, example cim plugin in progress (mburns, 14:28:45) * Sub Project Status (VDSM) (mburns, 14:30:30) * no updates (mburns, 14:32:21) * Sub Project Status (Engine) (mburns, 14:32:35) * work in progress for 3.2 (mburns, 14:33:37) * Sub Project Status (MOM) (mburns, 14:34:06) * new MOM packages for F17, F18, epel6 (mburns, 14:35:17) * everything needed for initial support is included in those builds (mburns, 14:35:33) * still need to add mom component to bugzilla (mburns, 14:37:47) * ACTION: mburns or eedri to get aglitke access to create mom build in jenkins (mburns, 14:39:20) * eedri and aglitke working together to get jenkins mom build running (mburns, 14:42:55) * Sub Project Status (infra) (mburns, 14:45:01) * talking with Red Hat IT about getting 2 bare metal servers in our PHX2 datacenter within the month, in addition to Alter Way (quaid, 14:48:00) * we'll be able to split services and duplicate to different networks, so we can have better availability and recovery (quaid, 14:48:15) * website update is in the works, will report back status as it happens to arch@ (quaid, 14:48:36) * still need to rename arch@ to devel@ - reminder that will be happening (quaid, 14:48:49) * Gerrit running more smoothly now that Itamar did some tweaks that solved (apparently) the jetty issue (quaid, 14:49:37) * current plan is to migrate Jenkins first, then Mailman to Alter Way; holding back carefully with Gerrit due to crucial position in dev process (quaid, 14:50:16) * working on infra@ on plan to use Foreman/Puppet to do these rollouts and manage machines from here on out (quaid, 14:50:43) * Workshop - Barcelona (mburns, 14:51:27) * LINK: https://events.linuxfoundation.org/events/kvm-forum/schedule (aglitke, 14:53:02) * schedule post to kvm-forum web-site (mburns, 14:53:44) * working with various outlets to promote the workshop (mburns, 14:54:19) * LINK: http://kvmforumovirtworkshop2012.sched.org/ (dneary, 14:57:02) * LINK: http://kvmforumovirtworkshop2012.sched.org/ (mburns, 14:58:45) * mburns has volunteered to be host for Barcelona (mburns, 14:59:12) * dneary working on merchandising, but delayed due to travel this week (mburns, 14:59:44) * booth hours are monday and tuesday (mburns, 15:01:24) * Other Topics (mburns, 15:02:26) Meeting ended at 15:09:00 UTC. Action Items ------------ * mburns to follow up on missing node feature page * mburns to review feature pages for %complete for next weeks meeting * aglitke will add libvdsm preview feature page * each team needs to review support options for F18 in 3.2 (mburns, oschreib_ danken ) * mburns or eedri to get aglitke access to create mom build in jenkins Action Items, by person ----------------------- * aglitke * aglitke will add libvdsm preview feature page * mburns or eedri to get aglitke access to create mom build in jenkins * eedri * mburns or eedri to get aglitke access to create mom build in jenkins * mburns * mburns to follow up on missing node feature page * mburns to review feature pages for %complete for next weeks meeting * each team needs to review support options for F18 in 3.2 (mburns, oschreib_ danken ) * mburns or eedri to get aglitke access to create mom build in jenkins * oschreib_ * each team needs to review support options for F18 in 3.2 (mburns, oschreib_ danken ) * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * mburns (125) * aglitke (25) * oschreib_ (19) * doron (15) * lh (13) * quaid (12) * eedri (12) * dneary (9) * itamar1 (8) * ovirtbot (7) * sgordon (6) * SirDerigo (2) * dougsland (1) * jbrooks (1) * garrett_ (1) * aglitke_ (1) * ofrenkel (1) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

1 0

Re: [Users] engine-iso-uploader problem
by Keith Robertson 24 Oct '12

24 Oct '12

This is a multi-part message in MIME format. --------------050408000706020704000201 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit On 10/24/2012 10:56 AM, Dennis Böck wrote: > > Obviously my e-mail wasn't added to the intendet thread: > > http://lists.ovirt.org/pipermail/users/2012-September/003670.html > Ah, that 'insecure flag'. That change should be merged. Are you still experiencing the issue with a recent build of the iso-uploader? http://gerrit.ovirt.org/#/c/7774/ > > (How can I reply to a such a thread??) > > Thanks in advance > > Dennis > > ------------------------------------------------------------------------ > *Von:* users-bounces(a)ovirt.org [users-bounces(a)ovirt.org]" im Auftrag > von "Keith Robertson [kroberts(a)redhat.com] > *Gesendet:* Mittwoch, 24. Oktober 2012 16:34 > *An:* Dennis Böck > *Cc:* users(a)oVirt.org > *Betreff:* Re: [Users] engine-iso-uploader problem > > Can you please elaborate on the 'insecure flag'? What exactly are you > referring to? > > ------------------------------------------------------------------------ > > *From: *"Dennis Böck" <dennis(a)webdienstleistungen.com> > *To: *"users(a)oVirt.org" <users(a)ovirt.org> > *Sent: *Wednesday, October 24, 2012 10:26:32 AM > *Subject: *[Users] engine-iso-uploader problem > > Hi Keith/Tobias, > > how can I set the "insecure flag"? > > The engine-iso-uploader tool doesn't have such a parameter. > > Best regards > > Dennis > > P.S.: I hope this e-mail goes to the "[Users] engine-iso-uploader > problem"-thread - I have no idea how to do it else. > > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > --------------050408000706020704000201 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 10/24/2012 10:56 AM, Dennis Böck wrote:<br> </div> <blockquote cite="mid:2452E8A35A372E4F8654136ACEABDBCE24F7C51B@DB3PRD0311MB403.eurprd03.prod.outlook.com" type="cite"> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> <style type="text/css">P { MARGIN: 0px } </style> <div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;"> <p>Obviously my e-mail wasn't added to the intendet thread:</p> <p><a moz-do-not-send="true" href="http://lists.ovirt.org/pipermail/users/2012-September/003670.html">http://lists.ovirt.org/pipermail/users/2012-September/003670.html</a></p> </div> </blockquote> Ah, that 'insecure flag'.  That change should be merged.  Are you still experiencing the issue with a recent build of the iso-uploader?<br> <br> <a class="moz-txt-link-freetext" href="http://gerrit.ovirt.org/#/c/7774/">http://gerrit.ovirt.org/#/c/7774/</a><br> <blockquote cite="mid:2452E8A35A372E4F8654136ACEABDBCE24F7C51B@DB3PRD0311MB403.eurprd03.prod.outlook.com" type="cite"> <div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;"> <p> </p> <p>(How can I reply to a such a thread??)</p> <p> </p> <p>Thanks in advance</p> <p>Dennis</p> <div> <p> </p> <div style="FONT-FAMILY: Tahoma; FONT-SIZE: 13px"> <div><font face="Tahoma" size="2"> <p class="MsoNormal"><span style="FONT-FAMILY: 'Arial','sans-serif'; FONT-SIZE: 10pt"></span></p> </font> <hr tabindex="-1"> </div> </div> </div> <div style="FONT-FAMILY: Times New Roman; COLOR: #000000; FONT-SIZE: 16px"> <div style="DIRECTION: ltr" id="divRpF351203"><font color="#000000" face="Tahoma" size="2"><b>Von:</b> <a class="moz-txt-link-abbreviated" href="mailto:users-bounces@ovirt.org">users-bounces(a)ovirt.org</a> [<a class="moz-txt-link-abbreviated" href="mailto:users-bounces@ovirt.org">users-bounces(a)ovirt.org</a>]" im Auftrag von "Keith Robertson [<a class="moz-txt-link-abbreviated" href="mailto:kroberts@redhat.com">kroberts(a)redhat.com</a>]<br> <b>Gesendet:</b> Mittwoch, 24. Oktober 2012 16:34<br> <b>An:</b> Dennis Böck<br> <b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:users@oVirt.org">users(a)oVirt.org</a><br> <b>Betreff:</b> Re: [Users] engine-iso-uploader problem<br> </font><br> </div> <div> <div style="FONT-FAMILY: times new roman,new york,times,serif; COLOR: #000000; FONT-SIZE: 12pt"> Can you please elaborate on the 'insecure flag'?  What exactly are you referring to?<br> <br> <hr id="zwchr"> <blockquote style="BORDER-LEFT: rgb(16,16,255) 2px solid; FONT-STYLE: normal; PADDING-LEFT: 5px; FONT-FAMILY: Helvetica,Arial,sans-serif; COLOR: #000; MARGIN-LEFT: 5px; FONT-SIZE: 12pt; FONT-WEIGHT: normal; TEXT-DECORATION: none"> <b>From: </b>"Dennis Böck" <a class="moz-txt-link-rfc2396E" href="mailto:dennis@webdienstleistungen.com"><dennis(a)webdienstleistungen.com></a><br> <b>To: </b><a class="moz-txt-link-rfc2396E" href="mailto:users@oVirt.org">"users(a)oVirt.org"</a> <a class="moz-txt-link-rfc2396E" href="mailto:users@ovirt.org"><users(a)ovirt.org></a><br> <b>Sent: </b>Wednesday, October 24, 2012 10:26:32 AM<br> <b>Subject: </b>[Users] engine-iso-uploader problem<br> <br> <style id="owaParaStyle">P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } </style> <div style="FONT-FAMILY: Tahoma; DIRECTION: ltr; COLOR: #000000; FONT-SIZE: 10pt"> <p><font face="Tahoma" size="2">Hi Keith/Tobias,</font></p> <div style="FONT-FAMILY: Times New Roman; COLOR: #000000; FONT-SIZE: 16px"> <div> <div style="FONT-FAMILY: Tahoma; DIRECTION: ltr; COLOR: #000000; FONT-SIZE: 10pt"> <div> <p> </p> <p>how can I set the "insecure flag"?</p> <p>The engine-iso-uploader tool doesn't have such a parameter.</p> <p> </p> <p>Best regards</p> <p>Dennis</p> <p> </p> <p>P.S.: I hope this e-mail goes to the "[Users] engine-iso-uploader problem"-thread - I have no idea how to do it else.</p> </div> </div> </div> </div> </div> <br> _______________________________________________<br> Users mailing list<br> <a class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org">Users(a)ovirt.org</a><br> <a class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</a><br> </blockquote> <br> </div> </div> </div> </div> </blockquote> <br> </body> </html> --------------050408000706020704000201--

1 0

[Users] engine-iso-uploader problem
by Dennis Böck 24 Oct '12

24 Oct '12

--_000_2452E8A35A372E4F8654136ACEABDBCE24F7C401DB3PRD0311MB403_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Keith/Tobias, how can I set the "insecure flag"? The engine-iso-uploader tool doesn't have such a parameter. Best regards Dennis --_000_2452E8A35A372E4F8654136ACEABDBCE24F7C401DB3PRD0311MB403_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html dir=3D"ltr"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <meta name=3D"GENERATOR" content=3D"MSHTML 9.00.8112.16450"> <style id=3D"owaParaStyle">P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } </style> </head> <body fPStyle=3D"1" ocsi=3D"0"> <div style=3D"direction: ltr;font-family: Tahoma;color: #000000;font-size: = 10pt;"> <div> <p><font size=3D"2" face=3D"Tahoma">Hi Keith/Tobias,</font></p> <p> </p> <p>how can I set the "insecure flag"?</p> <p>The engine-iso-uploader tool doesn't have such a parameter.</p> <p> </p> <p>Best regards</p> <p>Dennis<font size=3D"2" face=3D"Tahoma"></p> </font></div> </div> </body> </html> --_000_2452E8A35A372E4F8654136ACEABDBCE24F7C401DB3PRD0311MB403_--

2 2

[Users] nightly packages
by Cristian Falcas 24 Oct '12

24 Oct '12

Hi all, Is nightly supposed to install version -3.1345126685, which seems older, based on date then the other rpms? Best regards,

2 1

[Users] move ovirt vms from one node to other
by Alex Leonhardt 24 Oct '12

24 Oct '12

This is a multi-part message in MIME format. --------------070804070105040809010305 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit hi, i was wondering how it'd be possible to move a existing VM (ovirt kvm vm) from one Ovirt node to another ?? Is it just a matter of copying the directory to the other node and restarting ovirt ?? i'd imagine that the DB would be out of date - is it scanning the ovirt directories for existing hosts during start and fill in the DB with their details -or- would I have to create new VMs and copy over the existing disks ?? better yet, is there a way to backup the ovirt mgmt host configuration and restore it to a different host? alex --------------070804070105040809010305 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <font size="-1"><font face="Tahoma">hi,<br> <br> i was wondering how it'd be possible to move a existing VM (ovirt kvm vm) from one Ovirt node to another ?? Is it just a matter of copying the directory to the other node and restarting ovirt ?? i'd imagine that the DB would be out of date - is it scanning the ovirt directories for existing hosts during start and fill in the DB with their details -or- would I have to create new VMs and copy over the existing disks ?? better yet, is there a way to backup the ovirt mgmt host configuration and restore it to a different host?<br> <br> alex<br> <br> </font></font> </body> </html> --------------070804070105040809010305--

3 5

[Users] Disk growing in Ovirt
by Marcin Marcin 24 Oct '12

24 Oct '12

Hi All, Can you tell me if the disk growing on OVirt will be supported in next release? I tried to find upcoming changes on web but with no luck Best regards Martin

2 1

Re: [Users] Error creating the first storage domain (NFS)
by Federico Simoncelli 24 Oct '12

24 Oct '12

Hi Brian, I hate progressing by guesses but could you try to disable selinux: # setenforce 0 If that works you could go on, re-enable it and try something more specific: # setenforce 1 # setsebool sanlock_use_nfs on I have the feeling that the vdsm patch setting the sanlock_use_nfs sebool flag didn't made it to fedora 17 yet. -- Federico ----- Original Message ----- > From: "Brian Vetter" <bjvetter(a)gmail.com> > To: "Federico Simoncelli" <fsimonce(a)redhat.com> > Cc: "Vered Volansky" <vered(a)redhat.com>, users(a)ovirt.org, "David Teigland" <teigland(a)redhat.com> > Sent: Tuesday, October 23, 2012 6:10:36 PM > Subject: Re: [Users] Error creating the first storage domain (NFS) > > Ok. Here's four log files: > > engine.log from my ovirt engine server. > vdsm.log from my host > sanlock.log from my host > messages from my host > > The errors occur around the 20:17:57 time frame. You might see other > errors from either previous attempts or for the time after when I > tried to attach the storage domain. It looks like everything starts > with an error -13 in sanlock. If the -13 maps to 13/EPERM in > errno.h, then it is likely be some kind of permission or other > access error. I saw things that were related to the nfs directories > not being owned by vdsm:kvm, but that is not the case here. > > I did see a note online about some issues with sanlock and F17 (which > I am running), but those bugs were related to sanlock crashing. > > Brian

2 4