- Users - oVirt List Archives

Re: HostedEngine migration fail
by doboscsongor＠gmail.com 18 Jul '24

18 Jul '24

The "crown" symbol is on the host where the engine-host vm is running.

1 0

Hosted engine deployment fails on Rocky Linux 9
by mpelicci＠cisco.com 18 Jul '24

18 Jul '24

Trying to do a fresh install of ovirt 4.5 on a Rocky Linux 9 host. While running the hosted-engine --deploy --4, I input all of the information. Why is it that the hosted engine is trying to reach out to the CentOS8 repos and is there a way for me to pause the deployment to modify the repo files on the vm? [ INFO ] TASK [ovirt.ovirt.engine_setup : Install oVirt Engine package] [ ERROR ] fatal: [localhost -> 192.168.1.103]: FAILED! => {"changed": false, "msg": "Failed to download metadata for repo 'centos-ceph-pacific': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=storage-cep… [Could not resolve host: mirrorlist.centos.org]", "rc": 1, "results": []} [root@lab-node1]# cat /etc/rocky-release Rocky Linux release 9.4 (Blue Onyx)

3 2

oVirt 4.5.5 compatibility with CPU
by jakov.jelinic＠adriatic.hr 18 Jul '24

18 Jul '24

Hi, We plan to install ovirt node 4.5.5 (https://resources.ovirt.org/pub/ovirt-4.5/iso/ovirt-node-ng-installer/) on our 2 new servers, but looking at the documentation (https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engin…) it seems that oVirt is not compatible with our CPU Intel Xeon Silver 4410Y 12C 150 W 2 .0 GHz processor? Can you help us?

6 6

fence_rhevm with oVirt >4.5
by justindavis＠mail.utexas.edu 18 Jul '24

18 Jul '24

Hello Folks Is the "fence_rhevm" package compatible with oVirt >4.5? We're converting our legacy RHV cluster to a new install of oVirt latest with NFS backed storage. Everything has been working smoothly with the exception of the RHV-M fencing device on this newly provisioned oVirt 4.5.7 cluster with RHEL 9.4 hosts -- I haven't been able to get authentication working between the fencing device and the manager appliance. The same configuration is working on both the legacy RHV 4.4 cluster (RHV nodes) and a test oVirt 4.5.6 cluster (RHEL 8.9 hosts). The primary difference that comes to mind between my test and new cluster is that the newest one was installed with Keycloak SSO default configs while it was disabled on the older test environment. I suspect it has something to do with dropping basic auth? Assuming this is the case, can Keycloak be removed without having to rebuild the cluster? Are there any significant drawbacks to disabling it? I've found docs for converting from AAA to Keycloak, but not the reverse. I see on the mailing list that the `ovirt-aaa-jdbc-tool` is deprecated and that Keycloak is strongly recommended moving forward -- is it possible to integrate an internal Keycloak implementation with the existing "fence_rhevm" package? The errors I'm seeing are: 401 Unauthorized This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required. I've tried every variation of the <domain> value suggested -- including "admin@internal", "admin@ovirt@internal", "@admin@ovirt@internal-authz" Thanks in advance, Justin

2 1

New Member Introduction
by Maria Jonas 16 Jul '24

16 Jul '24

Hi everyone, I am new to this forum. I am excited to be here and to learn more about oVirt. I have just started exploring oVirt, and I have a few questions. Could someone please guide me on how to ask questions here ? Where should I post if I have a query ? Looking forward to your advice and connecting with you all. Thanks

2 1

Network issue - self-hosted engine on a single host
by jakov.jelinic＠adriatic.hr 16 Jul '24

16 Jul '24

Hi, I'm confused about installing ovirt as a self-hosted engine on a single host with local storage. I have one server which I have connected to 2 switches (which are in "Cisco stack"). I have connected the server with 2 UTP cables in master switch and 2 UTP cables in slave. I have installed on server Rocky Linux 9.4. And now i have 4 network interfaces (4 ip addresses) which i can ping from my computer. After that I installed ovirt engine 4.5.6-1.el9 with the next commands: > dnf install centos-release-ovirt45 > dnf install ovirt-engine > engine-setup Next step, I want to add a new host through my engine (Compute -> Hosts -> New). I started installing a new host. I choose my hostname to be my one and only server. After installation, I can no longer connect to my server: https://vhost01.testing.local/ovirt-engine/ because the ip address behind the dns name can no longer be pinged. Out of my 4 IP addresses, I can now ping only one from my computer. And then, of course, I change the DNS record and set it to that one-onlyworking IP address. So I think after adding the host my network is messed up. It even makes sense to me since everything is done on one host, and it seems to me that if I had separated the engine, it would not have these problems. This was my network before adding new host: ens13f0np0: connected to ens13f0np0 "Broadcom and subsidiaries BCM57454 NetXtreme-E 10Gb/25Gb/40Gb/50Gb/100Gb" ethernet (bnxt_en), 14:23:F2:5A:B8:E4, hw, mtu 1500 ip4 default inet4 192.168.50.60/24 route4 192.168.50.0/24 metric 100 route4 default via 192.168.50.2 metric 100 inet6 fe80::1623:f2ff:fe5a:b8e4/64 route6 fe80::/64 metric 1024 ens13flnpl: connected to ens13flnpl "Broadcom and subsidiaries BCM57454 NetXtreme-E 10Gb/25Gb/40Gb/50Gb/100Gb" ethernet (bnxt_en), 14:23:F2:5A:B8:E5, hw, mtu 1500 inet4 192.168.50.54/24 route4 192.168.50.0/24 metric 101 route4 default via 192.168.50.2 metric 101 inet6 fe80::1623:f2ff:fe5a:b8e5/64 route6 fe80::/64 metric 1024 ens13f2np2: connected to ens13f2np2 "Broadcom and subsidiaries BCM57454 NetXtreme-E 10Gb/25Gb/40Gb/50Gb/100Gb" ethernet (bnxt_en), 14:23:F2:5A:B8:E6, hw, mtu 1500 inet4 192.168.50.78/24 route4 192.168.50.0/24 metric 102 route4 default via 192.168.50.2 metric 102 inet6 fe80::1623:f2ff:fe5a:b8e6/64 route6 fe80::/64 metric 1024 ens13f3np3: connected to ens13f3np3 "Broadcom and subsidiaries BCM57454 NetXtreme-E 10Gb/25Gb/40Gb/50Gb/100Gb" ethernet (bnxt_en), 14:23:F2:5A:B8: E7, hw, mtu 1500 inet4 192.168.50.109/24 route4 192.168.50.0/24 metric 103 route4 default via 192.168.50.2 metric 103 inet6 fe80::1623:f2ff:fe5a:b8e7/64 route6 fe80::/64 metric 1024 lo: connected (externally) to lo "10" loopback (unknown), 00:00:00:00:00:00, sw, mtu 65536 inet4 127.0.0.1/8 inet6 ::1/128 route6:1/128 metric 256 virbro: connected (externally) to virbro "virbro" bridge, 52:54:00:11:F7:8C, sw, mtu 1500 inet4 192.168.122.1/24 route4 192.168.122.0/24 metric 0 and this is after adding new host: ens13f1np1: connected to ens13f1np1 "Broadcom and subsidiaries BCM57454 NetXtreme-E 10Gb/25Gb/40Gb/50Gb/100Gb" ethernet (bnxt_en), 14:23:F2:5A:B8:E5, hw, mtu 1500 ip4 default inet4 192.168.50.54/24 route4 192.168.50.0/24 metric 100 route4 default via 192.168.50.2 metric 100 inet6 fe80::1623:f2ff:fe5a:b8e5/64 route6 fe80::/64 metric 1024 ovirtmgmt: connected to ovirtmgmt "ovirtmgmt" bridge, 14:23:F2:5A:B8:E4, sw, mtu 1500 inet4 192.168.50.60/24 route4 192.168.50.0/24 metric 425 inet6 fe80::1623:f2ff:fe5a:b8e4/64 route6 fe80::/64 metric 1024 ens13f2np2: connected to ens13f2np2 "Broadcom and subsidiaries BCM57454 NetXtreme-E 10Gb/25Gb/40Gb/50Gb/100Gb" ethernet (bnxt_en), 14:23:F2:5A:B8:E6, hw, mtu 1500 inet4 192.168.50.78/24 route4 192.168.50.0/24 metric 101 route4 default via 192.168.50.2 metric 101 inet6 fe80::1623:f2ff:fe5a:b8e6/64 route6 fe80::/64 metric 1024 ens13f3np3: connected to ens13f3np3 "Broadcom and subsidiaries BCM57454 NetXtreme-E 10Gb/25Gb/40Gb/50Gb/100Gb" ethernet (bnxt_en), 14:23:F2:5A:B8:E7, hw, mtu 1500 inet4 192.168.50.109/24 route4 192.168.50.0/24 metric 102 route4 default via 192.168.50.2 metric 102 inet6 fe80::1623:f2ff:fe5a:b8e7/64 route6 fe80::/64 metric 1024 ens13f0np0: connected to ens13f0np0 "Broadcom and subsidiaries BCM57454 NetXtreme-E 10Gb/25Gb/40Gb/50Gb/100Gb" ethernet (bnxt_en), 14:23:F2:5A:B8:E4, hw, mtu 1500 master ovirtmgmt lo: connected (externally) to lo "lo" loopback (unknown), 00:00:00:00:00:00, sw, mtu 65536 inet4 127.0.0.1/8 inet6 ::1/128 route6 ::1/128 metric 256 br-int: disconnected "br-int" ovs-interface (openvswitch), 12:47:1C:18:8F:E2, sw, mtu 1500 Can you plese help?

2 1

HostedEngine migration fail
by doboscsongor＠gmail.com 16 Jul '24

16 Jul '24

Hi, I have two hosts in one cluster, where the hosts are exactly the same physical servers. The migration of virtual machines works fine, but I can't migrate the hosted engine VM. When I try to migrate it to the second host/server, the "Destination host" field in the migration pop-up window shows "No available host to migrate VMs to." However, if I try to migrate any other running VMs, the field becomes active and I can choose the second host/server. Screenshot: https://i.postimg.cc/YCnddhs1/ovirt.jpg Server software information: - OS Version: RHEL - 9.1.2206.0 - 23.el9 - OS Description: oVirt Node 4.5.5 - Kernel Version: 5.14.0 - 388.el9.x86_64 - KVM Version: 8.1.0 - 4.el9 - LIBVIRT Version: libvirt-9.5.0-6.el9 - VDSM Version: vdsm-4.50.5.1-1.el9 Thanks in advance!

2 1

[Self-hosted engine] Change port for web portal
by junhoyu＠beamworks.co.kr 16 Jul '24

16 Jul '24

Hi everyone, I've installed oVirt (specifically Oracle Linux Virtualization Manager v.4.5) on my server using the Self-Hosted Deployment method. However, my server is in an environment where using well-known ports is restricted. Therefore, I need to reconfigure the ports for the web portal, which currently uses ports 80 and 443, so that I can access the web portal through the browser. I tried the following two methods: === Method 1 === During installation, I prepared an answer file (/root/answers.conf) with the following configurations: OVESETUP_CONFIG/publicHttpPort=int:2416 OVESETUP_CONFIG/publicHttpsPort=int:5281 OVESETUP_CONFIG/httpPort=int:2416 OVESETUP_CONFIG/httpsPort=int:5281 Then, I executed 'hosted-engine --deploy --4 --config-append=/root/answers.conf'. However, this did not change the ports. === Method 2 === After installation, I modified the firewalld service files (ovirt-http.xml, ovirt-https.xml), httpd configuration files (httpd.conf, conf.d/ssl.conf), and engine configuration files (engine.conf.d/10-setup-portocols.conf, 11-setup-sso.conf). This worked, but the 'hosted-engine --vm-status' command contains the following issue: Engine status : {"vm": "up", "health": "bad", "detail": "Up", "reason": "failed liveliness check"} It seems to be caused by the health check to the web portal. (https://{engine_fqdn}/ovirt-engine/services/health -> the health-check process does not modify the port in this URL) ====== So, I will solve it with aspects related to the two questions below. 1) Is there a way to change the engine health-check URL during or after installation? 2) Is there a way to configure ports globally related to oVirt? I hope you guys can provide solutions. Thanks. Best regards, Junho Yu

1 0

lvm.log is growing
by dev＠eazis.com 16 Jul '24

16 Jul '24

Hi, The file /tmp/lvm.log is growing every day. I need to clear the file once in the two weeks. Can anyone tell me how i can rotate this log file? Kind regards, Gerjan

1 0

Start VM with option -machine smm=off
by Kalil de A. Carvalho 16 Jul '24

16 Jul '24

Hello all. I'm trying to workaround the problem reported here: https://gitlab.com/qemu-project/qemu/-/issues/1198 but I did not find out how to start up the VM with the option -machine smm=off like sead on the lsit above. I guess that it is possible to run the command using the qemu command but I think that I will lose the management of it. It is possible to startup up a VM with this option using the oVirt GUI ou virsh? Best regards -- Atenciosamente, Kalil de A. Carvalho

3 2

New oVirt release ???
by Diggy 15 Jul '24

15 Jul '24

Any movement towards a new oVirt release now that CentOS Stream 8 is officially at EOL and the current engine is based on it? Do I see oVirt v4.6 in my near future? I'm looking for a reason to build a fresh oVirt environment and migrate our 100+ VMs to it. :) ---

6 10

ovirt.ovirt
by james.parsons1＠arcelormittal.com 15 Jul '24

15 Jul '24

I would like to get ovirt.ovirt. working in my environment which run on oracle KVM, and I have an oracle automation manager 1. I've tried installing ovirt.ovirt packages on my OAM with no like ., 2. I installed the packages on my Hosts, but I'm still unable to run any of the packages Do I need to install the packages on my hosted-engine ? Regards James Parsons

1 0

rocky 9.4 hypervisor - failed to create ovirmgmt iface
by marek 12 Jul '24

12 Jul '24

hi, today i tried to add new hypervisor - rocky 9.4 ovirt engine - 4.5 ovirtmgmt iface is not functional when i try add host to cluster it exist for while (seconds) but then i see message "ovirtmgmt: port 1(eno3) entered disabled state" and ovirtmgmt iface is gone and network is unreacheable i have working hypervisors based on rocky 9.3 i tried downgrade nmstate to version from 9.3 dnf downgrade https://dl.rockylinux.org/vault/rocky/9.3/AppStream/x86_64/os/Packages/p/py… https://dl.rockylinux.org/vault/rocky/9.3/AppStream/x86_64/os/Packages/n/nm… https://dl.rockylinux.org/vault/rocky/9.3/AppStream/x86_64/os/Packages/n/nm… any ideas/tips howto debug ovirmgmt iface creation process? vdsm.log 2024-07-11 17:42:07,305+0200 INFO (jsonrpc/6) [api.network] START setupNetworks(networks={'ovirtmgmt': {'netmask': '255.255.255.0', 'ipv6autoconf': False, 'nic': 'eno3', 'bridged': 'true', 'ipaddr': '10.10.10.237', 'defaultRoute': True, 'dhcpv6': False, 'STP': 'no', 'mtu': 1500, 'switch': 'legacy'}}, bondings={}, options={'connectivityTimeout': 120, 'commitOnSuccess': True, 'connectivityCheck': 'true'}) from=::ffff:10.10.12.12,33842 (api:31) 2024-07-11 17:43:07,312+0200 WARN (vdsm.Scheduler) [Executor] Worker blocked: <Worker name=jsonrpc/6 running <Task <JsonRpcTask {'jsonrpc': '2.0', 'method': 'Host.setupNetworks', 'params': {'networks': {'ovirtmgmt': {'netmask': '255.255.255.0', 'ipv6autoconf': False, 'nic': 'eno3', 'bridged': 'true', 'ipaddr': '10.10.10.237', 'defaultRoute': True, 'dhcpv6': False, 'STP': 'no', 'mtu': 1500, 'switch': 'legacy'}}, 'bondings': {}, 'options': {'connectivityTimeout': 120, 'commitOnSuccess': True, 'connectivityCheck': 'true'}}, 'id': '65b89a79-0e7a-4a05-b310-f9903bdec2ce'} at 0x7f5e8c245b20> timeout=60, duration=60.01 at 0x7f5e8c245df0> task#=0 at 0x7f5e8c27eaf0>, traceback: File: "/usr/lib64/python3.9/threading.py", line 937, in _bootstrap self._bootstrap_inner() File: "/usr/lib64/python3.9/threading.py", line 980, in _bootstrap_inner self.run() File: "/usr/lib64/python3.9/threading.py", line 917, in run self._target(*self._args, **self._kwargs) File: "/usr/lib/python3.9/site-packages/vdsm/common/concurrent.py", line 243, in run ret = func(*args, **kwargs) File: "/usr/lib/python3.9/site-packages/vdsm/executor.py", line 284, in _run self._execute_task() File: "/usr/lib/python3.9/site-packages/vdsm/executor.py", line 298, in _execute_task task() File: "/usr/lib/python3.9/site-packages/vdsm/executor.py", line 374, in __call__ self._callable() File: "/usr/lib/python3.9/site-packages/yajsonrpc/__init__.py", line 253, in __call__ self._handler(self._ctx, self._req) File: "/usr/lib/python3.9/site-packages/yajsonrpc/__init__.py", line 296, in _serveRequest response = self._handle_request(req, ctx) File: "/usr/lib/python3.9/site-packages/yajsonrpc/__init__.py", line 338, in _handle_request res = method(**params) File: "/usr/lib/python3.9/site-packages/vdsm/rpc/Bridge.py", line 186, in _dynamicMethod result = fn(*methodArgs) File: "<decorator-gen-508>", line 2, in setupNetworks File: "/usr/lib/python3.9/site-packages/vdsm/common/api.py", line 33, in method ret = func(*args, **kwargs) File: "/usr/lib/python3.9/site-packages/vdsm/API.py", line 1576, in setupNetworks supervdsm.getProxy().setupNetworks(networks, bondings, options) File: "/usr/lib/python3.9/site-packages/vdsm/common/supervdsm.py", line 38, in __call__ return callMethod() File: "/usr/lib/python3.9/site-packages/vdsm/common/supervdsm.py", line 35, in <lambda> getattr(self._supervdsmProxy._svdsm, self._funcName)(*args, File: "<string>", line 2, in setupNetworks File: "/usr/lib64/python3.9/multiprocessing/managers.py", line 810, in _callmethod kind, result = conn.recv() File: "/usr/lib64/python3.9/multiprocessing/connection.py", line 254, in recv buf = self._recv_bytes() File: "/usr/lib64/python3.9/multiprocessing/connection.py", line 418, in _recv_bytes buf = self._recv(4) File: "/usr/lib64/python3.9/multiprocessing/connection.py", line 383, in _recv chunk = read(handle, remaining) (executor:345) installed ovirt packages on host centos-release-ovirt45-9.2-1.el9s.noarch ovirt-vmconsole-1.0.9-3.el9.noarch ovirt-imageio-common-2.5.0-1.el9.x86_64 python3-ovirt-engine-sdk4-4.6.2-1.el9.x86_64 ovirt-openvswitch-ovn-2.17-1.el9.noarch ovirt-openvswitch-ovn-common-2.17-1.el9.noarch ovirt-imageio-client-2.5.0-1.el9.x86_64 ovirt-imageio-daemon-2.5.0-1.el9.x86_64 ovirt-openvswitch-ovn-host-2.17-1.el9.noarch ovirt-vmconsole-host-1.0.9-3.el9.noarch ovirt-python-openvswitch-2.17-1.el9.noarch ovirt-openvswitch-2.17-1.el9.noarch python3.11-ovirt-imageio-common-2.5.0-1.el9.x86_64 python3.11-ovirt-engine-sdk4-4.6.2-1.el9.x86_64 python3.11-ovirt-imageio-client-2.5.0-1.el9.x86_64 ovirt-openvswitch-ipsec-2.17-1.el9.noarch python3-ovirt-setup-lib-1.3.3-1.el9.noarch ovirt-ansible-collection-3.2.0-1.el9.noarch ovirt-hosted-engine-ha-2.5.1-1.el9.noarch ovirt-provider-ovn-driver-1.2.36-1.el9.noarch ovirt-host-dependencies-4.5.0-3.el9.x86_64 ovirt-hosted-engine-setup-2.7.1-1.el9.noarch ovirt-host-4.5.0-3.el9.x86_64

1 1

Failed to configure management network on the host.
by d_hashima＠sagaidc.co.jp 12 Jul '24

12 Jul '24

RHEL9 (KVM server) cannot be added from oVirt Engine built on centos9 stream. The oVirt management NW and the RHEL9 (KVM server) management NW are in the same segment and are in an environment where they can resolve each other's names. I'm new to oVirt, so I'd appreciate it if you could explain it in an easy-to-understand manner.

2 1

Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute"
by Brent Saner 11 Jul '24

11 Jul '24

Whoops, sent before I finished replying- I'll look into first trying the Nightly, to see if that has the same behavior, and then trying the _setupAuth patching et. al. to see if I can narrow down what might be happening here. Brent Saner SENIOR SYSTEMS ENGINEER Follow us on LinkedIn! brent.saner(a)netfire.com 855-696-3834 Ext. 110 www.netfire.com ________________________________ From: Brent Saner <brent.saner(a)netfire.com> Sent: Thursday, July 11, 2024 5:38 PM To: users(a)ovirt.org <users(a)ovirt.org> Subject: Re: [ovirt-users] Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute" Looking into this, I can confirm that *after* the packages are installed and *before* engine-setup is run, /etc/ovirt-engine/aaa/ does not even exist: # ls /etc/ovirt-engine/aaa ls: cannot access '/etc/ovirt-engine/aaa': No such file or directory Which may be expected, I'm unclear on that. Further details inline below: ________________________________ From: Yedidyah Bar David <didi(a)redhat.com> Sent: Thursday, July 4, 2024 2:13 AM To: Brent Saner <brent.saner(a)netfire.com> Cc: users(a)ovirt.org <users(a)ovirt.org> Subject: Re: [ovirt-users] Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute" You don't often get email from didi(a)redhat.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification> Caution: The e-mail below is from an external source. Please exercise caution before opening attachments, clicking links, or following guidance. On Thu, Jul 4, 2024 at 9:11 AM Yedidyah Bar David <didi(a)redhat.com<mailto:didi@redhat.com>> wrote: On Wed, Jun 19, 2024 at 10:38 PM Brent S. <brent.saner(a)netfire.com<mailto:brent.saner@netfire.com>> wrote: As a quick update to this: # ovirt-aaa-jdbc-tool Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Jun 19, 2024 7:28:14 PM org.ovirt.engine.extension.aaa.jdbc.binding.cli.Cli main SEVERE: Unexpected Exception invoking Cli: Could not read properties from: /etc/ovirt-engine/aaa/internal.properties Which is, of course, the same message in the log. This is probably expected, since *engine-setup never actually created the file*: Are you sure about this? Presumably it was removed, but I do know the directory is not present before engine-setup is run and the file is not present after. # ls -la /etc/ovirt-engine/aaa total 4 drwxr-xr-x. 2 root root 6 Jun 19 19:27 . drwxr-xr-x. 18 root root 4096 Jun 19 19:27 .. # I guess you checked the above only after engine-setup failed/finished, right? At the time, yes; see above inlines; the directory itself does not even exist before engine-setup. And: 2024-06-19 19:27:10,917+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.config.aaajdbc plugin.execute:923 execute-output: ['/usr/share/ovirt-engine-extension-aaa-jdbc/dbscripts/schema.sh', '-s', '[REDACTED_REMOTE_DB_HOST]', '-p', '5432', '-u', '[REDACTED_REMOTE_DB_USER]', '-d', '[REDACTED_REMOTE_DB_NAME]', '-e', 'aaa_jdbc', '-l', '/root/ovirt-engine-setup.log', '-c', 'apply'] stderr: 2024-06-19 19:27:10,917+0000 DEBUG otopi.transaction transaction._prepare:61 preparing 'File transaction for '/etc/ovirt-engine/aaa/internal.properties'' 2024-06-19 19:27:10,917+0000 DEBUG otopi.filetransaction filetransaction.prepare:184 file '/etc/ovirt-engine/aaa/internal.properties' missing Indeed (SNIP) If you grep ovirt-engine sources, you'll find internal.properties in: packaging/setup/ovirt_engine_setup/engine/constants.py: AAA_JDBC_CONFIG_DB = os.path.join( OVIRT_ENGINE_SYSCONFDIR, 'aaa', 'internal.properties' ) If you then grep for AAA_JDBC_CONFIG_DB, you see it in: packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/config/aaajdbc.py: def _setupAuth(self): self.environment[otopicons.CoreEnv.MAIN_TRANSACTION].append( filetransaction.FileTransaction( name=oenginecons.FileLocations.AAA_JDBC_CONFIG_DB, ... visibleButUnsafe=True, Forgot to mention: You can check otopi sources:src/otopi/filetransaction.py to see what this means. ... def _setupAdminUser(self): toolArgs = ( oenginecons.FileLocations.AAA_JDBC_TOOL, '--db-config=%s' % oenginecons.FileLocations.AAA_JDBC_CONFIG_DB, ) ... @plugin.event( stage=plugin.Stages.STAGE_MISC, name=AAA_JDBC_SETUP_ADMIN_USER, after=( oengcommcons.Stages.DB_SCHEMA, oengcommcons.Stages.DB_CONNECTION_AVAILABLE, oenginecons.Stages.CONFIG_EXTENSIONS_UPGRADE, ), before=( oenginecons.Stages.CONFIG_AAA_ADMIN_USER_SETUP, ), condition=lambda self: self.environment[ oenginecons.ConfigEnv.ADMIN_USER_AUTHZ_TYPE ] == self.AAA_JDBC_AUTHZ_TYPE, ) def _misc(self): # TODO: if we knew that aaa-jdbc package was upgraded by engine-setup # TODO: we could display summary note that custom profiles have to be # TODO: upgraded manually self._setupSchema() self._setupAuth() self._setupAdminUser() ... This means that: At STAGE_MISC, _misc calls _setupAuth, which creates this file, and then it calls _setupAdminUser which tries to use it. Latter fails, and engine-setup rolls back the MAIN_TRANSACTION, including removing the file. I'd start debugging this issue by: 1. Patching _setupAuth to wait (e.g. using dialog.queryBoolean, search the source for examples) after it creates the file, so that I can investigate it 2. Patching _setupAdminUser to wait after it runs the tool, so that I can try to investigate the failure - e.g. run it myself under strace, if the existing logging is not enough. You can try using the otopi plugin wait_on_error for this, instead of patching. Good luck and best regards, -- Didi -- Didi

1 0

Recall: Re: Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute"
by Brent Saner 11 Jul '24

11 Jul '24

brent.saner(a)netfire.com would like to recall the message, "Re: [ovirt-users] Re: engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute"". Brent Saner SENIOR SYSTEMS ENGINEER Follow us on LinkedIn! brent.saner(a)netfire.com 855-696-3834 Ext. 110 www.netfire.com

1 0

engine-setup fails: "Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute"
by brent.saner＠netfire.com 11 Jul '24

11 Jul '24

I can find no reason why this would be happening. AlmaLinux 9.4, oVirt 4.5.6, brand new/fresh cluster/install. From the log, these seem to be the only relevant lines: 2024-06-18 22:02:52,720+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.config.aaajdbc plugin.execute:918 execute-output: ('/usr/bin/ovirt-aaa-jdbc-tool', '--db-config=/etc/ovirt-engine/aaa/internal.properties', 'query', '--what= user', '--pattern=name=admin') stdout: 2024-06-18 22:02:52,720+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.config.aaajdbc plugin.execute:923 execute-output: ('/usr/bin/ovirt-aaa-jdbc-tool', '--db-config=/etc/ovirt-engine/aaa/internal.properties', 'query', '--what= user', '--pattern=name=admin') stderr: Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Jun 18, 2024 10:02:52 PM org.ovirt.engine.extension.aaa.jdbc.binding.cli.Cli main SEVERE: Unexpected Exception invoking Cli: com/ongres/scram/common/stringprep/StringPreparation 2024-06-18 22:02:52,720+0000 DEBUG otopi.context context._executeMethod:143 method exception Traceback (most recent call last): File "/usr/lib/python3.9/site-packages/otopi/context.py", line 132, in _executeMethod method['method']() File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/config/aaajdbc.py", line 414, in _misc self._setupAdminUser() File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/config/aaajdbc.py", line 298, in _setupAdminUser if not self._userExists( File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/config/aaajdbc.py", line 49, in _userExists rc, stdout, stderr = self.execute( File "/usr/lib/python3.9/site-packages/otopi/plugin.py", line 929, in execute raise RuntimeError( RuntimeError: Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute 2024-06-18 22:02:52,721+0000 ERROR otopi.context context._executeMethod:151 Failed to execute stage 'Misc configuration': Command '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute 2024-06-18 22:02:52,721+0000 DEBUG otopi.transaction transaction.abort:124 aborting 'DNF Transaction' Any ideas?

5 7

Get Host Capabilities failed: Connection timeout for host
by Frederico Madeira 11 Jul '24

11 Jul '24

Hi guys I'm getting these messages from engine-gui interfaces.: Get Host Capabilities failed: Connection timeout for host My hosts are in irresponsible state My VMs are in unknown state My Storage are in inactive state From the engine, I did successfully : ping ip and name and ssh connect to host my hosts, so I didn´t have network connectivity problems. error in engine.log 2024-07-10 03:47:30,088-03 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-13) [] EVENT_ID: VDS_BROKER_COMMAND_FAILURE(10,802), VDSM servernode10 command Get Host Capabilities failed: Connection timeout for host '10.180.18.116', last response arrived 6609 ms ago. 2024-07-10 03:47:30,089-03 ERROR [org.ovirt.engine.core.vdsbroker.monitoring.HostMonitoring] (EE-ManagedThreadFactory-engineScheduled-Thread-13) [] Unable to RefreshCapabilities: VDSNetworkException: VDSGenericException: VDSNetworkException: Connection timeout for host '10.180.18.116', last response arrived 6609 ms ago. 2024-07-10 03:49:45,027-03 INFO Any hint how to troubleshoot this issue? Regards,*o Madeira * fred(a)madeira.eng.br www.madeira.eng.br Cisco CCNA, LPIC-1, LPIC-2 Registered GNU/Linux nº 206120 GPG-Key-ID: 1024D/0F0A721D Key fingerprint = C424 D86B 57D5 BE55 767A 6ED1 53F8 254E 0F0A 721D MSN: fttmadeira(a)hotmail.com GTalk:fmadeira@gmail.com SKYPE: fred_madeira

1 0

VM live migration fails after update to qemu-kvm-9.0.0-4.el9.x86_64
by g.vasilopoulos＠uoc.gr 11 Jul '24

11 Jul '24

Hello After updating a hypervisor with qemu-kvm-9.0.0-4.el9.x86_64 live migration stopped working with errors related to the cpu topology. When I downgraded to qemu-kvm-9.0.0-3.el9.x86_64 migration worked again. Is this a known bug? Has anyone else encountered this?

3 3

vm stays locked after failed export
by h aanst 10 Jul '24

10 Jul '24

Hi, Running ovirt for many years, but this baffles me. An export was taking too long, seems to hang. Due to the heat a switch failedt, so export storage is umounted, at this time. Now my VM has a little lock, and can't be restarted. (shutdown worked) Checked all DB entries and vdsm. update vm_static set template_status = 0 where template_status = 1; select * from vm_static where template_status = 1; 0 update vm_dynamic set status = 0 where status = 15; select * from vm_dynamic where status = 15; 0 update images set imagestatus = 1 where imagestatus = 2; select * from images where imagestatus = 2; 0 update snapshots set status = 'OK' where status like 'LOCKED'; select * from snapshots where status like 'LOCKED'; 0 UPDATE images SET imagestatus = 1 WHERE imagestatus = 4; select * from images where imagestatus = 4; 0 restarted the hosted-engine I dont know what to check next. Any hints? thanks

1 0

CentOS9 Stream -- Only way forward?
by eshwayri＠gmail.com 10 Jul '24

10 Jul '24

I've been running 4.5.4-1 on RHEL8 for a while now; been running fine for my needs. I was getting around the unholy dependency issue caused by the centos-release package conflicting with the redhat-release package by upgrading everything else -- not it. It's been necessary to do this since RHEL versions were higher than any CentOS 8 Stream versions. This time round since CentOS has been archived, I made sure to install anything I hadn't and then manually purged centos-release from the rpm database. This allowed RHEL to update to 8.10, including the release package this time. Not expecting an issue since there won't be any future patches coming from that repo. If I decide to stick with oVirt and install daily snapshots, I assume what I will have to do is setup a new CentOS Steam 9 server, create a backup of the old server, and then restore on the new server. Like what I did when I was forced to migrate from CentOS 8 to RHEL8 (with CentOS 8 Stream packages). Is this right? I haven't decided if I want to do this. CentOS Stream 9 is supported until mid 2027; RHEL 8.10 is supported until mid 2029. Barring any new features or major incompatibility, I really don't see a pressing reason to do this. In fact, with no one stepping in to take over the project, there is a better chance of being supported by sticking with RHEL 8.10 (2+ years).

5 5

VM Migration Failed
by KSNull Zero 10 Jul '24

10 Jul '24

Running oVirt 4.4.5 VM cannot migrate between hosts. vdsm.log contains the following error: libvirt.libvirtError: operation failed: Failed to connect to remote libvirt URI qemu+tls://ovhost01.local/system: authentication failed: Failed to verify peer's certificate Certificates on hosts was renewed some time ago. How this issue can be fixed ? Thank you.

4 6

Re: Multiple GPU Passthrough with NVLink (Invalid I/O region)
by Zhengyi Lai 10 Jul '24

10 Jul '24

I noticed this document https://docs.nvidia.com/vgpu/16.0/grid-vgpu-release-notes-generic-linux-kvm… has this to say In pass through mode, all GPUs connected to each other through NVLink must be assigned to the same VM. If a subset of GPUs connected to each other through NVLink is passed through to a VM, unrecoverable error XID 74 occurs when the VM is booted. If a subset of GPUs connected to each other through NVLink is passed through to a VM, unrecoverable error XID 74 occurs when the VM is booted. This error corrupts the NVLink state on the physical GPUs and, as a result, the NVLink bridge between the NVLink and the physical GPUs is not recognized. result, the NVLink bridge between the GPUs is unusable. You may need to passthrough all GPUs in the nvlink to the VM

2 1

problem on dnf update
by g.vasilopoulos＠uoc.gr 09 Jul '24

09 Jul '24

Hi I tried dnf update today and got the error bellow. Is there a solution for this?: [root@*****~]# dnf update Last metadata expiration check: 3:42:36 ago on Mon 17 Jun 2024 08:47:59 AM EEST. Error: Problem 1: package python3-boto3-1.18.58-1.el9s.noarch from @System requires (python3.9dist(botocore) < 1.22 with python3.9dist(botocore) >= 1.21.58), but none of the providers can be installed - cannot install both python3-botocore-1.31.62-1.el9.noarch from appstream and python3-botocore-1.21.58-1.el9s.noarch from @System - cannot install both python3-botocore-1.21.58-1.el9s.noarch from ovirt-master-centos-stream-openstack-yoga-testing and python3-botocore-1.31.62-1.el9.noarch from appstream - cannot install the best update candidate for package python3-botocore-1.21.58-1.el9s.noarch - cannot install the best update candidate for package python3-boto3-1.18.58-1.el9s.noarch Problem 2: package python3-pyngus-2.3.0-8.el9s.noarch from @System requires python3.9dist(python-qpid-proton), but none of the providers can be installed - cannot install both python3-qpid-proton-0.39.0-2.el9s.x86_64 from ovirt-master-centos-stream-opstools-collectd5-testing and python3-qpid-proton-0.35.0-2.el9s.x86_64 from @System - cannot install both python3-qpid-proton-0.35.0-2.el9s.x86_64 from ovirt-master-centos-stream-openstack-yoga-testing and python3-qpid-proton-0.39.0-2.el9s.x86_64 from ovirt-master-centos-stream-opstools-collectd5-testing - cannot install the best update candidate for package python3-qpid-proton-0.35.0-2.el9s.x86_64 - cannot install the best update candidate for package python3-pyngus-2.3.0-8.el9s.noarch Problem 3: package python3-oslo-messaging-12.13.3-1.el9s.noarch from @System requires python3-pyngus, but none of the providers can be installed - package python3-pyngus-2.3.0-8.el9s.noarch from @System requires python3.9dist(python-qpid-proton), but none of the providers can be installed - package python3-pyngus-2.3.0-8.el9s.noarch from ovirt-master-centos-stream-openstack-yoga-testing requires python3.9dist(python-qpid-proton), but none of the providers can be installed - package python3-qpid-proton-0.35.0-2.el9s.x86_64 from @System requires qpid-proton-c(x86-64) = 0.35.0-2.el9s, but none of the providers can be installed - package python3-qpid-proton-0.35.0-2.el9s.x86_64 from ovirt-master-centos-stream-openstack-yoga-testing requires qpid-proton-c(x86-64) = 0.35.0-2.el9s, but none of the providers can be installed - cannot install both qpid-proton-c-0.39.0-2.el9s.x86_64 from ovirt-master-centos-stream-opstools-collectd5-testing and qpid-proton-c-0.35.0-2.el9s.x86_64 from @System - cannot install both qpid-proton-c-0.35.0-2.el9s.x86_64 from ovirt-master-centos-stream-openstack-yoga-testing and qpid-proton-c-0.39.0-2.el9s.x86_64 from ovirt-master-centos-stream-opstools-collectd5-testing - cannot install the best update candidate for package qpid-proton-c-0.35.0-2.el9s.x86_64 - cannot install the best update candidate for package python3-oslo-messaging-12.13.3-1.el9s.noarch (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

2 2

Certificate verification error for qemu while migrating
by Julien Deberles 03 Jul '24

03 Jul '24

Hello, I'm running ovirt 4.4.10 and I have the following error while I launch a VM migration : Jul 3 12:37:07 ssc-sati-02 journal[958949]: Certificate [session] owner does not match the hostname myhostname Jul 3 12:37:07 ssc-sati-02 journal[958949]: Certificate check failed Certificate [session] owner does not match the hostname myhostname Jul 3 12:37:07 ssc-sati-02 journal[958949]: authentication failed: Failed to verify peer's certificate Jul 3 12:37:07 ssc-sati-02 journal[958949]: operation failed: Failed to connect to remote libvirt URI qemu+tls://myhostname/system: authentication failed: Failed to verify peer's certificate To avoid this error I set the following paramaters inside the /etc/libvirt/qemu.conf and restard vdsmd daemon. migrate_tls_x509_verify = 0 default_tls_x509_verify = 0 But I still have the same error. Can you help me to understand why this set of parameters are not working as exepected ? kind regards, Julien

1 0