- Users - oVirt List Archives

Re: vm console problem
by David David 20 Apr '20

20 Apr '20

tested on four different workstations with: fedora20, fedora31 and windows10(remote-manager last vers) вс, 29 мар. 2020 г. в 12:39, Strahil Nikolov <hunter86_bg(a)yahoo.com>: > On March 29, 2020 9:47:02 AM GMT+03:00, David David <dd432690(a)gmail.com> > wrote: > >I did as you said: > >copied from engine /etc/ovirt-engine/ca.pem onto my desktop into > >/etc/pki/ca-trust/source/anchors and then run update-ca-trust > >it didn’t help, still the same errors > > > > > >пт, 27 мар. 2020 г. в 21:56, Strahil Nikolov <hunter86_bg(a)yahoo.com>: > > > >> On March 27, 2020 12:23:10 PM GMT+02:00, David David > ><dd432690(a)gmail.com> > >> wrote: > >> >here is debug from opening console.vv by remote-viewer > >> > > >> >2020-03-27 14:09 GMT+04:00, Milan Zamazal <mzamazal(a)redhat.com>: > >> >> David David <dd432690(a)gmail.com> writes: > >> >> > >> >>> yes i have > >> >>> console.vv attached > >> >> > >> >> It looks the same as mine. > >> >> > >> >> There is a difference in our logs, you have > >> >> > >> >> Possible auth 19 > >> >> > >> >> while I have > >> >> > >> >> Possible auth 2 > >> >> > >> >> So I still suspect a wrong authentication method is used, but I > >don't > >> >> have any idea why. > >> >> > >> >> Regards, > >> >> Milan > >> >> > >> >>> 2020-03-26 21:38 GMT+04:00, Milan Zamazal <mzamazal(a)redhat.com>: > >> >>>> David David <dd432690(a)gmail.com> writes: > >> >>>> > >> >>>>> copied from qemu server all certs except "cacrl" to my > >> >desktop-station > >> >>>>> into /etc/pki/ > >> >>>> > >> >>>> This is not needed, the CA certificate is included in console.vv > >> >and no > >> >>>> other certificate should be needed. > >> >>>> > >> >>>>> but remote-viewer is still didn't work > >> >>>> > >> >>>> The log looks like remote-viewer is attempting certificate > >> >>>> authentication rather than password authentication. Do you have > >> >>>> password in console.vv? It should look like: > >> >>>> > >> >>>> [virt-viewer] > >> >>>> type=vnc > >> >>>> host=192.168.122.2 > >> >>>> port=5900 > >> >>>> password=fxLazJu6BUmL > >> >>>> # Password is valid for 120 seconds. > >> >>>> ... > >> >>>> > >> >>>> Regards, > >> >>>> Milan > >> >>>> > >> >>>>> 2020-03-26 2:22 GMT+04:00, Nir Soffer <nsoffer(a)redhat.com>: > >> >>>>>> On Wed, Mar 25, 2020 at 12:45 PM David David > ><dd432690(a)gmail.com> > >> >>>>>> wrote: > >> >>>>>>> > >> >>>>>>> ovirt 4.3.8.2-1.el7 > >> >>>>>>> gtk-vnc2-1.0.0-1.fc31.x86_64 > >> >>>>>>> remote-viewer version 8.0-3.fc31 > >> >>>>>>> > >> >>>>>>> can't open vm console by remote-viewer > >> >>>>>>> vm has vnc console protocol > >> >>>>>>> when click on console button to connect to a vm, the > >> >remote-viewer > >> >>>>>>> console disappear immediately > >> >>>>>>> > >> >>>>>>> remote-viewer debug in attachment > >> >>>>>> > >> >>>>>> You an issue with the certificates: > >> >>>>>> > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.238: > >> >>>>>> ../src/vncconnection.c Set credential 2 libvirt > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Searching for certs in /etc/pki > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Searching for certs in /root/.pki > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Failed to find certificate > >CA/cacert.pem > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c No CA certificate provided, using > >GNUTLS > >> >global > >> >>>>>> trust > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Failed to find certificate CA/cacrl.pem > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Failed to find certificate > >> >>>>>> libvirt/private/clientkey.pem > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Failed to find certificate > >> >>>>>> libvirt/clientcert.pem > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Waiting for missing credentials > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c Got all credentials > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: > >> >>>>>> ../src/vncconnection.c No CA certificate provided; trying the > >> >system > >> >>>>>> trust store instead > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: > >> >>>>>> ../src/vncconnection.c Using the system trust store and CRL > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: > >> >>>>>> ../src/vncconnection.c No client cert or key provided > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: > >> >>>>>> ../src/vncconnection.c No CA revocation list provided > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.241: > >> >>>>>> ../src/vncconnection.c Handshake was blocking > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.243: > >> >>>>>> ../src/vncconnection.c Handshake was blocking > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.251: > >> >>>>>> ../src/vncconnection.c Handshake was blocking > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.298: > >> >>>>>> ../src/vncconnection.c Handshake done > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.298: > >> >>>>>> ../src/vncconnection.c Validating > >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.301: > >> >>>>>> ../src/vncconnection.c Error: The certificate is not trusted > >> >>>>>> > >> >>>>>> Adding people that may know more about this. > >> >>>>>> > >> >>>>>> Nir > >> >>>>>> > >> >>>>>> > >> >>>> > >> >>>> > >> >> > >> >> > >> > >> Hello, > >> > >> You can try to take the engine's CA (maybe it's useless) and put it > >on > >> your system in: > >> /etc/pki/ca-trust/source/anchors (if it's EL7 or a Fedora) and then > >run > >> update-ca-trust > >> > >> Best Regards, > >> Strahil Nikolov > >> > > Hey David, > > What is you workstation's OS ? > Also, have you tried from another workstation ? > > Best Regards, > Strahil Nikolov >

3 7

Re: command line vm start/stop
by Ali Gusainov 20 Apr '20

20 Apr '20

According to https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/ht… trying to use curl --insecure -v -u admin@internal:password -H Content-type: application/xml -X POST https://FQDN/ovirt-engine/api/vms/VM_NAME/ACTION where ACTION start or stop Got following: * About to connect() to FQDN port 443 (#0) * Trying SERVER_IP... * Connected to FQDN (SERVER_IP) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/ovirt-engine/ca.pem CApath: none * SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 * Server certificate: * subject: CN=FQDN........ * start date: Jan 22 06:12:15 2020 GMT * expire date: Dec 27 06:12:15 2024 GMT * common name: FQDN * issuer: CN=FQDN......... * Server auth using Basic with user 'admin@internal' > POST /ovirt-engine/api/vms/VM_NAME/ACTION HTTP/1.1 > Authorization: Basic YWRtaW5AaW50ZXJuYWw6U3lzVGVhbTEzYw== > User-Agent: curl/7.29.0 > Host: FQDN > Accept: application/xml > < HTTP/1.1 404 Not Found < Date: Sun, 19 Apr 2020 00:20:04 GMT < Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips < Content-Length: 0 < Correlation-Id: 15e7a226-8982-47ff-9f68-7a2519705856 < * Connection #0 to host FQDN left intact -------------- tail -1000f /var/log/ovirt-engine/server.log: 2020-04-18 20:20:04,354-04 ERROR [org.jboss.resteasy.resteasy_jaxrs.i18n] (default task-385) RESTEASY002010: Failed to execute: javax.ws.rs.WebApplicationException: HTTP 404 Not Found at org.ovirt.engine.api.restapi.resource.AbstractBackendResource.asGuidOr404(AbstractBackendResource.java:355) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.resource.AbstractBackendSubResource.<init>(AbstractBackendSubResource.java:26) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.resource.AbstractBackendActionableResource.<init>(AbstractBackendActionableResource.java:39) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.resource.BackendVmResource.<init>(BackendVmResource.java:114) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.resource.BackendVmsResource.getVmResource(BackendVmsResource.java:164) [restapi-jaxrs.jar:] at sun.reflect.GeneratedMethodAccessor1357.invoke(Unknown Source) [:1.8.0_232] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.8.0_232] at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_232] at org.jboss.resteasy.core.ResourceLocatorInvoker.createResource(ResourceLocatorInvoker.java:69) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:105) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:132) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:100) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:440) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.lambda$invoke$4(SynchronousDispatcher.java:229) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.lambda$preprocess$0(SynchronousDispatcher.java:135) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.interception.PreMatchContainerRequestContext.filter(PreMatchContainerRequestContext.java:355) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.preprocess(SynchronousDispatcher.java:138) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:215) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:227) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.7.0.Final.jar:3.7.0.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:791) [jboss-servlet-api_4.0_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:274) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.dispatchToPath(ServletInitialHandler.java:209) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.spec.RequestDispatcherImpl.forwardImpl(RequestDispatcherImpl.java:227) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.spec.RequestDispatcherImpl.forwardImplSetup(RequestDispatcherImpl.java:149) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.spec.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:111) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.api.restapi.invocation.VersionFilter.doFilter(VersionFilter.java:178) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.invocation.VersionFilter.doFilter(VersionFilter.java:98) [restapi-jaxrs.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.api.restapi.invocation.CurrentFilter.doFilter(CurrentFilter.java:117) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.invocation.CurrentFilter.doFilter(CurrentFilter.java:72) [restapi-jaxrs.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.RestApiSessionMgmtFilter.doFilter(RestApiSessionMgmtFilter.java:78) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.EnforceAuthFilter.doFilter(EnforceAuthFilter.java:42) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.SsoRestApiNegotiationFilter.doFilter(SsoRestApiNegotiationFilter.java:84) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter.doFilter(SsoRestApiAuthFilter.java:47) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.SessionValidationFilter.doFilter(SessionValidationFilter.java:59) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.aaa.filters.RestApiSessionValidationFilter.doFilter(RestApiSessionValidationFilter.java:35) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.api.restapi.security.CSRFProtectionFilter.doFilter(CSRFProtectionFilter.java:111) [restapi-jaxrs.jar:] at org.ovirt.engine.api.restapi.security.CSRFProtectionFilter.doFilter(CSRFProtectionFilter.java:102) [restapi-jaxrs.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.utils.servlet.CORSSupportFilter.doFilter(CORSSupportFilter.java:283) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:132) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.SecurityContextThreadSetupAction.lambda$create$0(SecurityContextThreadSetupAction.java:105) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.Connectors.executeRootHandler(Connectors.java:364) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:830) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35) at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982) at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486) at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377) at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_232]

2 1

oVirt 4.3.7 + Gluster 6.6 unsynced entries
by adrianquintero＠gmail.com 19 Apr '20

19 Apr '20

Hello, I am having the following issue, it has been a few days and healing never finishes, any ideas on how to fix the unsynced entries? [root@host1 vmstore]# gluster vol heal vmstore info --------------------------------------------------- Brick host1:/gluster_bricks/vmstore/vmstore <gfid:5aeb168c-b8e3-4581-97f9-eafc33f2f318> <gfid:9a7483d9-0d68-4fcd-89b7-d281f6132506> <gfid:a3830550-5158-4cf9-af15-19faf5e51db0> Status: Connected Number of entries: 3 Brick host2:/gluster_bricks/vmstore/vmstore /.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1240 /.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1241 /.shard/9dbd7ab9-3d1c-4eed-908e-852eec1ce3b1.1242 Status: Connected Number of entries: 3 host3:/gluster_bricks/vmstore/vmstore Status: Connected Number of entries: 0 --------------------------------------------------- Thanks, Adrian

3 9

Re: disk snapshot in illegal status
by David David 19 Apr '20

19 Apr '20

snapshots in UI: Disk Snapshot ID ===================================================== 5a58466b-1547-4346-a550-8590880b379e - "Active VM" - has status "OK" f447cd4f-9ab3-489d-8c2a-b2e69456496f - "Auto-generated" - has status "Illegal" ====================================================== the "Disk Snapshot ID" with id 5a58466b-1547-4346-a550-8590880b379e actually not present in LV error screenshot attached чт, 16 апр. 2020 г. в 18:20, Shani Leviim <sleviim(a)redhat.com>: > Hi David, > Can you share a screenshot of the error you're getting? > And how the snapshots are presented on the ui? > > > *Regards,* > > *Shani Leviim* > > > On Thu, Apr 16, 2020 at 4:38 PM David David <dd432690(a)gmail.com> wrote: > >> hi >> >> attempt to remove snapshot from UI results in an error >> >> I looked the LV through the lvs and did't find active snapshot ID, only >> the base snapshot ID is present >> >> ovirt in database see 2 snapshots, but i have only one base image on >> storage >> >> so, i must remove the active snapshot ID from db not the base image Id ? >> >> чт, 16 апр. 2020 г. в 13:58, Shani Leviim <sleviim(a)redhat.com>: >> >>> Hi David, >>> Sorry for the late reply. >>> the volume_dump returned 1 occurrence of that image, while the query >>> returned 2 occurrences. >>> >>> It seems that there's an image id with a description of 'Auto-generated >>> for Live Storage Migration' which wasn't removed from the DB. >>> Can you try to remove it from the UI? >>> (If you claimed to remove it, try to remove it from the DB). >>> >>> >>> *Regards,* >>> >>> *Shani Leviim* >>> >>> >>> On Tue, Apr 7, 2020 at 7:45 PM David David <dd432690(a)gmail.com> wrote: >>> >>>> vdsm-tool dump-volume-chains d17aa967-f7f7-4d9f-98e4-7022854da4f5 >>>> >>>> engine=# select * from images_storage_domain_view where >>>> image_group_id='1844873e-45ef-4a2b-a991-2df6e92a3e2d'; >>>> >>>> output attached >>>> >>>> вт, 7 апр. 2020 г. в 19:47, Shani Leviim <sleviim(a)redhat.com>: >>>> >>>>> Hi David, >>>>> First, we need to compare the chain as it is seen by the engine and >>>>> the host and see if there's a difference. >>>>> Can you please share the output of the following? >>>>> >>>>> On the host: >>>>> vdsm-tool dump-volume-chains <sd_id> >>>>> >>>>> On the engine: >>>>> SELECT * >>>>> FROM images_storage_domain_view images_storage_domain_view >>>>> WHERE image_group_id = <image_group_id>; >>>>> >>>>> >>>>> *Regards,* >>>>> >>>>> *Shani Leviim* >>>>> >>>>> >>>>> On Tue, Apr 7, 2020 at 5:28 PM David David <dd432690(a)gmail.com> wrote: >>>>> >>>>>> hello >>>>>> >>>>>> after removing "auto generated" snapshot, the vm snapshot became to >>>>>> illegal status and in the "snapshot" tab also marked in illegal status >>>>>> >>>>>> now my vm is not booting >>>>>> >>>>>> but "vdsm-client Volume getInfo" shows the snapshot status is legal >>>>>> >>>>>> vdsm-client Volume getInfo \ >>>>>> storagepoolID=00000000-0000-0000-0000-000000000000 \ >>>>>> storagedomainID=d17aa967-f7f7-4d9f-98e4-7022854da4f5 \ >>>>>> imageID=1844873e-45ef-4a2b-a991-2df6e92a3e2d \ >>>>>> volumeID=f447cd4f-9ab3-489d-8c2a-b2e69456496f >>>>>> >>>>>> { >>>>>> "status": "OK", >>>>>> "lease": { >>>>>> "path": "/dev/d17aa967-f7f7-4d9f-98e4-7022854da4f5/leases", >>>>>> "owners": [], >>>>>> "version": null, >>>>>> "offset": 132120576 >>>>>> }, >>>>>> "domain": "d17aa967-f7f7-4d9f-98e4-7022854da4f5", >>>>>> "capacity": "21474836480", >>>>>> "voltype": "LEAF", >>>>>> "description": "None", >>>>>> "parent": "00000000-0000-0000-0000-000000000000", >>>>>> "format": "RAW", >>>>>> "generation": 1, >>>>>> "image": "1844873e-45ef-4a2b-a991-2df6e92a3e2d", >>>>>> "uuid": "f447cd4f-9ab3-489d-8c2a-b2e69456496f", >>>>>> "disktype": "DATA", >>>>>> "legality": "LEGAL", >>>>>> "mtime": "0", >>>>>> "apparentsize": "21474836480", >>>>>> "truesize": "21474836480", >>>>>> "type": "PREALLOCATED", >>>>>> "children": [], >>>>>> "pool": "", >>>>>> "ctime": "1530472945" >>>>>> } >>>>>> >>>>>> how to fix the problem? >>>>>> _______________________________________________ >>>>>> Users mailing list -- users(a)ovirt.org >>>>>> To unsubscribe send an email to users-leave(a)ovirt.org >>>>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>>>>> oVirt Code of Conduct: >>>>>> https://www.ovirt.org/community/about/community-guidelines/ >>>>>> List Archives: >>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/JSYMY4QG2HSPV… >>>>>> >>>>>

2 1

Re: VM's in status unknown
by Arik Hadas 19 Apr '20

19 Apr '20

I would start by querying the database with: select vm_name, status, run_on_vds from vms where vm_name in ('<name of vm1>', '<name of vm2>'); Their status should be '7' in that case. The more interesting part though is their 'run_on_vds' field - If it's non-empty and points to the host the VMs ran on, it probably means there's an issue in the communication between the engine and that host, so restarting the engine/vdsm can solve it. Otherwise, it would require a deeper look at the log to see why the engine lost track of the host they run on. On Fri, Apr 17, 2020 at 12:12 PM Staniforth, Paul < P.Staniforth(a)leedsbeckett.ac.uk> wrote: > I don't think the status is reported via the agent but vdsm on the host. > > Try restarting the engine service. > > use vdsm-client on the host to see if the VM running and shut it down if > needed. > > https://www.ovirt.org/develop/developer-guide/vdsm/vdsm-client.html > > on the host restart vdsmd ( you may want to migrate other VMs first) > > systemctl restart vdsmd > > If this doesn't work alter the database > > Regards, > Paul S. > > ------------------------------ > *From:* Jayme <jaymef(a)gmail.com> > *Sent:* 16 April 2020 19:07 > *To:* eevans(a)digitaldatatechs.com <eevans(a)digitaldatatechs.com> > *Cc:* kim.kargaard(a)noroff.no <kim.kargaard(a)noroff.no>; users < > users(a)ovirt.org> > *Subject:* [ovirt-users] Re: VM's in status unknown > > > *Caution External Mail:* Do not click any links or open any attachments > unless you trust the sender and know that the content is safe. > Do you have the guest agent installed on the VMs? > > On Thu, Apr 16, 2020 at 2:55 PM <eevans(a)digitaldatatechs.com> wrote: > > Are you getting any errors in the engine log or > /var/log/libvirt/qemu/<vm_name>.log? > I have Windows 10 and haven't experienced that. You can't shut it down in > the UI? Even after you try to shut it down inside Windows? > I will assume you have the latest guest tools installed. > > Eric Evans > Digital Data Services LLC. > 304.660.9080 > > > -----Original Message----- > From: kim.kargaard(a)noroff.no <kim.kargaard(a)noroff.no> > Sent: Thursday, April 16, 2020 8:23 AM > To: users(a)ovirt.org > Subject: [ovirt-users] VM's in status unknown > > Hi, > > We have a few Windows 10 VM's running on our ovirt 4.3, where when you > shutdown the VM from within Windows, that VM does not shut down but gets a > status of unknown in ovirt and one cannot do anything to the machines > within the web gui. This seems to specfically be related to that Windows 10 > template that we have created. Any ideas? Also, any ideas on how one can > shut these machines down? > > Thanks > > Kim > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: > https://www.ovirt.org/privacy-policy.html > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/UM26TABUTG373… > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi…> > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt…> > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/M4LITHLIZXJDT… > <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi…> > > To view the terms under which this email is distributed, please go to:- > http://leedsbeckett.ac.uk/disclaimer/email/ > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/E73FVYRYWVNAW… >

1 0

Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

I figured it out. Thanks for your help. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: Friday, April 17, 2020 10:53 AM To: eevans(a)digitaldatatechs.com; users(a)ovirt.org Subject: [ovirt-users] Re: assign a specific user to a specific vm When you look at the permissions tab for a VM you will see all the permissions and roles for users & groups, if it is an inherited permission it will show what object it is applied to e,g, database/cluster. You need to remove any that aren't appropriate. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 17 April 2020 15:42 To: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk <mailto:P.Staniforth@leedsbeckett.ac.uk> >; users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: RE: [ovirt-users] Re: assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I guess I need to clarify; when a user logs in to the vm portal, I only want them to see the machine assigned to them and have the ability to operate it. How do I set the permission on a per user per vm basis to ensure the user has the same vm every time they login and that's all they see is their vm. That's what I'm trying to accomplish. Good example: In vmware, you can assign a specific user to a specific machine so that is there machine and that's all they see. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk <mailto:P.Staniforth@leedsbeckett.ac.uk> > Sent: Friday, April 17, 2020 5:16 AM To: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> ; users(a)ovirt.org <mailto:users@ovirt.org> Subject: [ovirt-users] Re: assign a specific user to a specific vm Hello Eric, It sounds like you have permissions set to a group at some level, these are hierarchical system->datacenter->cluster->VM if you remove this permission and then set the userrole for the VM they should only be allowed to run this VM. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 16 April 2020 19:11 To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: [ovirt-users] assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fprivacy-policy.html <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fprivacy-policy.html&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk% 7C76cc4b3403b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C 0%7C637227313752880995&sdata=edzxVEAy3hIeEbfgCE1H%2F8yI9s6lmAme1DtprDA8Zp0%3 D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved =0 oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7CP.Stanifor th%40leedsbeckett.ac.uk%7C76cc4b3403b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417 aa112cd0fb490d85c%7C0%7C0%7C637227313752890991&sdata=hev43rsVCN4aLdBi11ASNXg 46%2B%2FxDpJ5zV0XI0eaOZ8%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0 List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ VZ7OE5VSVJ4D%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT JVZ7OE5VSVJ4D%2F&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk%7C76cc4b34 03b34b8700ba08d7e2dd9c61%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637227 313752900983&sdata=%2FNePvMrYcRjCvGxR%2F6ZD%2F3%2Fl%2F20B38IWifvKS4fYNuo%3D& reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved =0 To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/ To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

1 0

Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

I guess I need to clarify; when a user logs in to the vm portal, I only want them to see the machine assigned to them and have the ability to operate it. How do I set the permission on a per user per vm basis to ensure the user has the same vm every time they login and that's all they see is their vm. That's what I'm trying to accomplish. Good example: In vmware, you can assign a specific user to a specific machine so that is there machine and that's all they see. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: Friday, April 17, 2020 5:16 AM To: eevans(a)digitaldatatechs.com; users(a)ovirt.org Subject: [ovirt-users] Re: assign a specific user to a specific vm Hello Eric, It sounds like you have permissions set to a group at some level, these are hierarchical system->datacenter->cluster->VM if you remove this permission and then set the userrole for the VM they should only be allowed to run this VM. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 16 April 2020 19:11 To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: [ovirt-users] assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fprivacy-policy.html <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fprivacy-policy.html&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac .uk%7Cf62d237bcada4214b96008d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C 0%7C0%7C637226591945549099&sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVo iWVxQ3e4sk%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved =0 oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7Cp.stan iforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b96008d7e2358c1b%7Cd79a81124fb e417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099&sdata=qn%2F15HEiTqmM1 kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0 List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ VZ7OE5VSVJ4D%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT JVZ7OE5VSVJ4D%2F&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d 237bcada4214b96008d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C63 7226591945549099&sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI %3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved =0 To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

3 2

Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

Now we're talking. Thank you very much. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: Friday, April 17, 2020 10:44 AM To: eevans(a)digitaldatatechs.com; users(a)ovirt.org Subject: Re: [ovirt-users] Re: assign a specific user to a specific vm select the VM in the admin portal and select the permissions tab, then click add and select a user and role to add. https://www.ovirt.org/documentation/vmm-guide/chap-Administrative_Tasks.html Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 17 April 2020 15:28 To: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk <mailto:P.Staniforth@leedsbeckett.ac.uk> >; users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: RE: [ovirt-users] Re: assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. You said: "set the userrole for the VM". I don't see how to do that. Please enlighten me. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk <mailto:P.Staniforth@leedsbeckett.ac.uk> > Sent: Friday, April 17, 2020 5:16 AM To: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> ; users(a)ovirt.org <mailto:users@ovirt.org> Subject: [ovirt-users] Re: assign a specific user to a specific vm Hello Eric, It sounds like you have permissions set to a group at some level, these are hierarchical system->datacenter->cluster->VM if you remove this permission and then set the userrole for the VM they should only be allowed to run this VM. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 16 April 2020 19:11 To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: [ovirt-users] assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fprivacy-policy.html <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fprivacy-policy.html&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk% 7C1a04f7ac7d6a4569557808d7e2dba59f%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C 0%7C637227305318431836&sdata=mgPtjJ14psJGfqtqlpEgs7fba%2FA3ioF84epFeWqDEQ0%3 D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved =0 oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7CP.Stanifor th%40leedsbeckett.ac.uk%7C1a04f7ac7d6a4569557808d7e2dba59f%7Cd79a81124fbe417 aa112cd0fb490d85c%7C0%7C0%7C637227305318431836&sdata=5STxAHvv3eOUBUFLJYre2%2 Bc3NDBqrBAXAOs7hnobI0c%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0 List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ VZ7OE5VSVJ4D%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT JVZ7OE5VSVJ4D%2F&data=02%7C01%7CP.Staniforth%40leedsbeckett.ac.uk%7C1a04f7ac 7d6a4569557808d7e2dba59f%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637227 305318441829&sdata=YakIWb4seZYnKUkUe4RHerNnGOPLYYP%2BqpNz9bD72mk%3D&reserved =0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved =0 To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/ To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

1 0

Re: assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

You said: "set the userrole for the VM". I don't see how to do that. Please enlighten me. Eric Evans Digital Data Services LLC. 304.660.9080 From: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> Sent: Friday, April 17, 2020 5:16 AM To: eevans(a)digitaldatatechs.com; users(a)ovirt.org Subject: [ovirt-users] Re: assign a specific user to a specific vm Hello Eric, It sounds like you have permissions set to a group at some level, these are hierarchical system->datacenter->cluster->VM if you remove this permission and then set the userrole for the VM they should only be allowed to run this VM. Regards, Paul S. _____ From: eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> <eevans(a)digitaldatatechs.com <mailto:eevans@digitaldatatechs.com> > Sent: 16 April 2020 19:11 To: users(a)ovirt.org <mailto:users@ovirt.org> <users(a)ovirt.org <mailto:users@ovirt.org> > Subject: [ovirt-users] assign a specific user to a specific vm Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric _______________________________________________ Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fprivacy-policy.html <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fprivacy-policy.html&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac .uk%7Cf62d237bcada4214b96008d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C 0%7C0%7C637226591945549099&sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVo iWVxQ3e4sk%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=oOND%2B9WD%2Fnc6GMF4q6TeWhvp7LpP%2BHOVoiWVxQ3e4sk%3D&reserved =0 oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt. org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt .org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2F&data=02%7C01%7Cp.stan iforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b96008d7e2358c1b%7Cd79a81124fb e417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099&sdata=qn%2F15HEiTqmM1 kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=qn%2F15HEiTqmM1kvOlU9dBsxhqK5R9ZVGkUNeLG6P4BU%3D&reserved=0 List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovir t.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPTJ VZ7OE5VSVJ4D%2F <https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi rt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FTRL54XDA6TSTNI5ZAPT JVZ7OE5VSVJ4D%2F&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d 237bcada4214b96008d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C63 7226591945549099&sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI %3D&reserved=0> &data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cf62d237bcada4214b960 08d7e2358c1b%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637226591945549099 &sdata=tqPlkeN2Yg%2BGgIN7s4%2FFQMUlrNubPCM1ndtdytvXj%2FI%3D&reserved =0 To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

2 1

assign a specific user to a specific vm
by eevans＠digitaldatatechs.com 17 Apr '20

17 Apr '20

I'm not sure if I'm missing something or not, but I haven't seen how to assign a specific user to a specific vm. Is there a way to do that? When users login, they see all the machines. I'd like them to see just the one they need to login to. Thanks in advance for your help. Eric

3 2

VM's in status unknown
by kim.kargaard＠noroff.no 17 Apr '20

17 Apr '20

Hi, We have a few Windows 10 VM's running on our ovirt 4.3, where when you shutdown the VM from within Windows, that VM does not shut down but gets a status of unknown in ovirt and one cannot do anything to the machines within the web gui. This seems to specfically be related to that Windows 10 template that we have created. Any ideas? Also, any ideas on how one can shut these machines down? Thanks Kim

4 3

Update Conflicts
by Christian Reiss 17 Apr '20

17 Apr '20

Hey folks, Some weeks ago I installed oVirt on top of a fresh CentOS 7 installation. I went ahead according to the official setup, which is basically to actiate a repo and then install via engine. When I try to run "yum update" on the hosts, I get a dependency error: --> Finished Dependency Resolution Error: Package: libvirt-daemon-driver-storage-4.5.0-23.el7_7.6.x86_64 (updates) Requires: libvirt-daemon-driver-storage-gluster = 4.5.0-23.el7_7.6 Installed: libvirt-daemon-driver-storage-gluster-4.5.0-23.el7_7.5.x86_64 (@updates) libvirt-daemon-driver-storage-gluster = 4.5.0-23.el7_7.5 Error: Package: vdsm-gluster-4.30.40-1.el7.x86_64 (@ovirt-4.3) Requires: vdsm = 4.30.40-1.el7 Removing: vdsm-4.30.40-1.el7.x86_64 (@ovirt-4.3) vdsm = 4.30.40-1.el7 Updated By: vdsm-4.30.43-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.43-1.el7 Available: vdsm-4.30.8-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.8-1.el7 Available: vdsm-4.30.9-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.9-1.el7 Available: vdsm-4.30.11-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.11-1.el7 Available: vdsm-4.30.12-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.12-1.el7 Available: vdsm-4.30.13-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.13-1.el7 Available: vdsm-4.30.14-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.14-1.el7 Available: vdsm-4.30.15-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.15-1.el7 Available: vdsm-4.30.16-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.16-1.el7 Available: vdsm-4.30.17-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.17-1.el7 Available: vdsm-4.30.18-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.18-1.el7 Available: vdsm-4.30.19-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.19-1.el7 Available: vdsm-4.30.20-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.20-1.el7 Available: vdsm-4.30.21-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.21-1.el7 Available: vdsm-4.30.22-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.22-1.el7 Available: vdsm-4.30.23-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.23-1.el7 Available: vdsm-4.30.24-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.24-1.el7 Available: vdsm-4.30.25-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.25-1.el7 Available: vdsm-4.30.26-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.26-1.el7 Available: vdsm-4.30.28-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.28-1.el7 Available: vdsm-4.30.29-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.29-1.el7 Available: vdsm-4.30.30-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.30-1.el7 Available: vdsm-4.30.31-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.31-1.el7 Available: vdsm-4.30.32-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.32-1.el7 Available: vdsm-4.30.33-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.33-1.el7 Available: vdsm-4.30.34-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.34-1.el7 Available: vdsm-4.30.35-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.35-1.el7 Available: vdsm-4.30.36-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.36-1.el7 Available: vdsm-4.30.37-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.37-1.el7 Available: vdsm-4.30.38-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.38-1.el7 Available: vdsm-4.30.39-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.39-1.el7 Available: vdsm-4.30.42-1.el7.x86_64 (ovirt-4.3) vdsm = 4.30.42-1.el7 Error: Package: libvirt-daemon-driver-storage-gluster-4.5.0-23.el7_7.5.x86_64 (@updates) Requires: libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.5 Removing: libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.5.x86_64 (@updates) libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.5 Updated By: libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.6.x86_64 (updates) libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.6 Available: libvirt-daemon-driver-storage-core-4.5.0-23.el7.x86_64 (base) libvirt-daemon-driver-storage-core = 4.5.0-23.el7 Available: libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.1.x86_64 (updates) libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.1 Available: libvirt-daemon-driver-storage-core-4.5.0-23.el7_7.3.x86_64 (updates) libvirt-daemon-driver-storage-core = 4.5.0-23.el7_7.3 What did I miss here? Should I have ignored= some packages? Thanks! :) -- with kind regards, mit freundlichen Gruessen, Christian Reiss

3 6

Multitenant scenario in oVirt
by Michal Gutowski 17 Apr '20

17 Apr '20

Hi oVirt community, I'm playing with a multitenant use-case in oVirt 3.4.6... My setup is as follows: - I have two working Data Centers (DC1 and DC2) - I created two additional users DC1-admin and DC2-admin - In DC1 permission settings I've added DC1-admin as a user with a builtin DataCenterAdmin Role. - In DC2 permission settings I've added DC2-admin as a user with a builtin DataCenterAdmin Role. Now in terms of permissions all is good: DC1-admin is not able to modify anything in DC2 and DC2-admin is not able to modify anything in DC1. However in both the Admin Portal and the VM Portal DC1-admin and DC2-admin can still see all other datacenter resources. My expectation was that if I login to the Admin Portal as e.g. DC2-admin I will only see DC2 datacenter in the GUI and nothing else. Same with VM Portal. I played with different user settings but I couldn't make it work... I think the problem is that whatever user you create it will always belong to the build-in "everyone" group and inherit permission to see everything in the portal. Is it possible to achieve a scenario where e.g. DC2-admin will login to the Admin Portal and only see resources that belong to DC2 and nothing else? Thanks, Michal

4 4

Sometimes paused due to unknown storage error on gluster
by Gianluca Cecchi 16 Apr '20

16 Apr '20

Hello, having deployed oVirt 4.3.9 single host HCI with Gluster, I see some times VM going into paused state for the error above and needing to manually run it (sometimes this resumal operation fails). Actually it only happened with empty disk (thin provisioned) and sudden high I/O during the initial phase of install of the OS; it didn't happened then during normal operaton (even with 600MB/s of throughput). I suspect something related to metadata extension not able to be in pair with the speed of the physical disk growing.... similar to what happens for block based storage domains where the LVM layer has to extend the logical volume representing the virtual disk My real world reproduction of the error is during install of OCP 4.3.8 master node, when Red Hat Cores OS boots from network and wipes the disk and I think then transfer an image, so doing high immediate I/O. The VM used as master node has been created with a 120Gb thin provisioned disk (virtio-scsi type) and starts with disk just initialized and empty, going through PXE install. I get this line inside events for the VM Mar 27, 2020, 12:35:23 AM VM master01 has been paused due to unknown storage error. Here logs around the time frame above: - engine.log https://drive.google.com/file/d/1zpNo5IgFVTAlKXHiAMTL-uvaoXSNMVRO/view?usp=… - vdsm.log https://drive.google.com/file/d/1v8kR0N6PdHBJ5hYzEYKl4-m7v1Lb_cYX/view?usp=… Any suggestions? The disk of the VM is on vmstore storage domain and its gluster volume settings are: [root@ovirt tmp]# gluster volume info vmstore Volume Name: vmstore Type: Distribute Volume ID: a6203d77-3b9d-49f9-94c5-9e30562959c4 Status: Started Snapshot Count: 0 Number of Bricks: 1 Transport-type: tcp Bricks: Brick1: ovirtst.mydomain.storage:/gluster_bricks/vmstore/vmstore Options Reconfigured: performance.low-prio-threads: 32 storage.owner-gid: 36 performance.read-ahead: off user.cifs: off storage.owner-uid: 36 performance.io-cache: off performance.quick-read: off network.ping-timeout: 30 features.shard: on network.remote-dio: off cluster.eager-lock: enable performance.strict-o-direct: on transport.address-family: inet nfs.disable: on [root@ovirt tmp]# What about config above, related to eventual optimizations to be done based on having single host? And comparing with the virt group of options: [root@ovirt tmp]# cat /var/lib/glusterd/groups/virt performance.quick-read=off performance.read-ahead=off performance.io-cache=off performance.low-prio-threads=32 network.remote-dio=enable cluster.eager-lock=enable cluster.quorum-type=auto cluster.server-quorum-type=server cluster.data-self-heal-algorithm=full cluster.locking-scheme=granular cluster.shd-max-threads=8 cluster.shd-wait-qlength=10000 features.shard=on user.cifs=off cluster.choose-local=off client.event-threads=4 server.event-threads=4 performance.client-io-threads=on [root@ovirt tmp]# ? Thanks Gianluca

5 23

Broken doco link for New Host->Kernel boot parameters
by Shareef Jalloq 16 Apr '20

16 Apr '20

Hi, I'm trying to set up one of our nodes with PCI passthrough but there is a dead lnk in the documentation for the kernel boot parameter section of creating a new host. https://www.ovirt.org/documentation/admin-guide/sect-Explanation_of_Setting… Anyone know where this went or can help me with the options? Shareef.

3 8

How to load VMs after importing a domain
by Shareef Jalloq 16 Apr '20

16 Apr '20

I've followed the online instructions on importing a pre-configured domain into a new data centre but I can't see how to import the VMs. The documentation just says, "You can now import virtual machines and templates from the storage domain to the data center." with no other info. What do I need to do in order to get my VMs up and running? Cheers, Shareef.

4 4

Single SPM Host orphaned from ovirt-engine, cannot confirm host rebooted or maintenance host.
by Terry 16 Apr '20

16 Apr '20

We have number of clusters connected to ovirt-engine. Some of these are single host clusters (running ovirt-release43-4.3.5.2-1 on CentOS7) with local storage. Recently, ovirt-engine started reporting one of these hosts NonResponsive, VMs were still running on the host but ovirt seems unable to communicate with it, testing shows no issues connecting engine -> host:vdsm and likewise the host can communicate with the engine on port 80 and 443. The host in question cannot be managed via IPMI for power management but we are able to perform an SSH reboot via the engine interface. We opted to login to the running virtual machines, shut them down and issue the SSH reboot from the engine. The server changes to rebooting status for some time and then reports NonResponsive state. We are unable to maintenance the host or confirm host has been rebooted manually as we are presented with the following "Error while executing action: Cannot perform confirm 'Host has been rebooted'. Another power management action is already in progress." The VDSM logs on the host in question are continually showing: 2020-04-16 08:23:51,478+0000 INFO (vmrecovery) [vds] recovery: waiting for storage pool to go up (clientIF:711) 2020-04-16 08:23:52,332+0000 INFO (jsonrpc/7) [vdsm.api] FINISH getStoragePoolInfo error=Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',) from=::ffff:10.10.1.252,33680, task_id=420249a4-55c0-436d-92c7-ea1286a0e287 (api:52) 2020-04-16 08:23:52,332+0000 ERROR (jsonrpc/7) [storage.TaskManager.Task] (Task='420249a4-55c0-436d-92c7-ea1286a0e287') Unexpected error (task:875) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882, in _run return fn(*args, **kargs) File "<string>", line 2, in getStoragePoolInfo File "/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 50, in method ret = func(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 2550, in getStoragePoolInfo pool = self.getPool(spUUID) File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 351, in getPool raise se.StoragePoolUnknown(spUUID) StoragePoolUnknown: Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',) 2020-04-16 08:23:52,333+0000 INFO (jsonrpc/7) [storage.TaskManager.Task] (Task='420249a4-55c0-436d-92c7-ea1286a0e287') aborting: Task is aborted: "Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',)" - code 309 (task:1181) During this period, the following is observed in the engine logs: 2020-04-16 08:23:52,307Z ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] EVENT_ID: VDS_BROKER_COMMAND_FAILURE(10,802), VDSM compute01.ovirt.local command SpmStatusVDS failed: Message timeout which can be caused by communication issues 2020-04-16 08:23:52,307Z ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] Command 'SpmStatusVDSCommand(HostName = compute01.ovirt.local, SpmStatusVDSCommandParameters:{hostId='67dc53da-d5ee-461e-87de-2ca6dd78637f', storagePoolId='6baea5dc-b049-47c2-a94f-5229c37c62d0'})' execution failed: VDSGenericException: VDSNetworkException: Message timeout which can be caused by communication issues 2020-04-16 08:23:52,346Z ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.GetStoragePoolInfoVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] Failed in 'GetStoragePoolInfoVDS' method 2020-04-16 08:23:52,355Z ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] EVENT_ID: IRS_BROKER_COMMAND_FAILURE(10,803), VDSM command GetStoragePoolInfoVDS failed: Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',) 2020-04-16 08:23:52,356Z ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-31) [] IrsBroker::Failed::GetStoragePoolInfoVDS: IRSGenericException: IRSErrorException: Failed to GetStoragePoolInfoVDS, error = Unknown pool id, pool not connected: (u'6baea5dc-b049-47c2-a94f-5229c37c62d0',), code = 309 The metadata file for the local storage domain looks fine? ALIGNMENT=1048576 BLOCK_SIZE=512 CLASS=Data DESCRIPTION=compute01_local_storage IOOPTIMEOUTSEC=10 LEASERETRIES=3 LEASETIMESEC=60 LOCKPOLICY= LOCKRENEWALINTERVALSEC=5 MASTER_VERSION=1 POOL_DESCRIPTION=compute01_local POOL_DOMAINS=1cc26dea-688c-40cc-bda6-38b00054001e:Active POOL_SPM_ID=-1 POOL_SPM_LVER=-1 POOL_UUID=6baea5dc-b049-47c2-a94f-5229c37c62d0 REMOTE_PATH=/mnt/ovirt_datastore ROLE=Master SDUUID=1cc26dea-688c-40cc-bda6-38b00054001e TYPE=LOCALFS VERSION=5 _SHA_CKSUM=24c85256b889d0b3384e7975c660f4a5cbb58d33 I would assume this has happened because ovirt was unable to power cycle the machine and now can't confirm the SPM state? Normally in a case like this we would confirm the host has been manually rebooted but we're unable to do that. How can I clear the power management action that ovirt-engine thinks is in progress?

1 1

disk snapshot in illegal status
by David David 16 Apr '20

16 Apr '20

hello after removing "auto generated" snapshot, the vm snapshot became to illegal status and in the "snapshot" tab also marked in illegal status now my vm is not booting but "vdsm-client Volume getInfo" shows the snapshot status is legal vdsm-client Volume getInfo \ storagepoolID=00000000-0000-0000-0000-000000000000 \ storagedomainID=d17aa967-f7f7-4d9f-98e4-7022854da4f5 \ imageID=1844873e-45ef-4a2b-a991-2df6e92a3e2d \ volumeID=f447cd4f-9ab3-489d-8c2a-b2e69456496f { "status": "OK", "lease": { "path": "/dev/d17aa967-f7f7-4d9f-98e4-7022854da4f5/leases", "owners": [], "version": null, "offset": 132120576 }, "domain": "d17aa967-f7f7-4d9f-98e4-7022854da4f5", "capacity": "21474836480", "voltype": "LEAF", "description": "None", "parent": "00000000-0000-0000-0000-000000000000", "format": "RAW", "generation": 1, "image": "1844873e-45ef-4a2b-a991-2df6e92a3e2d", "uuid": "f447cd4f-9ab3-489d-8c2a-b2e69456496f", "disktype": "DATA", "legality": "LEGAL", "mtime": "0", "apparentsize": "21474836480", "truesize": "21474836480", "type": "PREALLOCATED", "children": [], "pool": "", "ctime": "1530472945" } how to fix the problem?

2 4

ovirt-engine unresponsive - how to rescue?
by Shareef Jalloq 16 Apr '20

16 Apr '20

So my engine has gone down and I can't ssh into it either. If I try to log into the web-ui of the node it is running on, I get redirected because the node can't reach the engine. What are my next steps? Shareef.

4 35

yum mirrors 403 forbidden
by Shareef Jalloq 16 Apr '20

16 Apr '20

I seem to be taking 2 steps back and 1 forward at the moment. What could I have done on a node to start getting 403 forbidden errors when using yum? [root@ovirt-node-00 ~]# yum repolist Loaded plugins: enabled_repos_upload, fastestmirror, imgbased-persist, package_upload, product-id, search-disabled-repos, vdsmupgrade, versionlock Loading mirror speeds from cached hostfile ovirt-4.3-epel/x86_64/metalink | 13 kB 00:00:00 * ovirt-4.3-epel: mirror.de.leaseweb.net http://mirror.centos.org/centos/7/sclo/x86_64/rh/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. To address this issue please refer to the below wiki article https://wiki.centos.org/yum-errors If above article doesn't help to resolve this issue please use https://bugs.centos.org/. http://mirror.centos.org/centos/7/sclo/x86_64/rh/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. ovirt-4.3/7 | 3.0 kB 00:00:00 http://mirror.centos.org/centos/7/storage/x86_64/gluster-6/repodata/repomd.…: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. http://mirror.centos.org/centos/7/opstools/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. http://mirror.centos.org/centos/7/virt/x86_64/ovirt-4.3/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. http://mirror.centos.org/centos/7/virt/x86_64/kvm-common/repodata/repomd.xml: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. http://fedorapeople.org/groups/virt/virtio-win/repo/latest/repodata/repomd.…: [Errno 14] HTTP Error 403 - Forbidden Trying other mirror. sac-gluster-ansible/x86_64 | 3.3 kB 00:00:00 repo id repo name status centos-sclo-rh-release/x86_64 CentOS-7 - SCLo rh 0 ovirt-4.3/7 Latest oVirt 4.3 Release 2,831 ovirt-4.3-centos-gluster6/x86_64 CentOS-7 - Gluster 6 0 ovirt-4.3-centos-opstools/x86_64 CentOS-7 - OpsTools - release 0 ovirt-4.3-centos-ovirt43/x86_64 CentOS-7 - oVirt 4.3 0 ovirt-4.3-centos-qemu-ev/x86_64 CentOS-7 - QEMU EV 0 ovirt-4.3-epel/x86_64 Extra Packages for Enterprise Linux 7 - x86_64 13,244 ovirt-4.3-virtio-win-latest virtio-win builds roughly matching what will be shipped in upcoming RHEL 0 sac-gluster-ansible/x86_64 Copr repo for gluster-ansible owned by sac 18 repolist: 16,093 Uploading Enabled Repositories Report Cannot upload enabled repos report, is this client registered?

2 3

cloud-init ovirt
by PunkGeek 16 Apr '20

16 Apr '20

Hello, How can I use ovirt tools that configure cloud-init vms by python? https://red.ht/2K1gBkn Actually, I want just to use this tool in my python libvirt script. Best regards

2 1

Can't migrate over migration network
by briandumont＠gmail.com 15 Apr '20

15 Apr '20

Hello, I am trying to configure a dedicated migration network and am unable to get it to work. It is failing with a no route to host error in the cockpit logs, specifically a libvirtd error virNetSocketNewConnectTCP:591 : unable to connect to server at '192.168.1.50:49152': No route to host. Trying to migrate from Host 1 to Host 2. 192.168.1.50 is the ip address on the source host for the migration. If I try to migrate in the other direction I get the same error with tthat hosts migration network ip. My migration network is setup on a different VLAN than my ovirtmgmt network. Here is my configuration: - 2 Hosts - Host 1 - nic 1 - ovirtmgmt - 192.168.1.24/24 - VLAN 1 - nic 2 - migration network - 192.168.1.50/24 VLAN 25 - Host 2 - nic 1 - ovirtmgmnt - 192.168.1.24/24 - VLAN 1 - nic 2 - migration network - 192.168.1.51/24 - VLAN 25 Migration network is setup as follows: - Assign - Yes - Required - Yes - VM Network - No (tried it with VM Nework = Yes with same results) - Migration Network - Yes I think I've got something fundamentally wrong with my host networking but I can't figure it out. Appreciate the help.

4 11

NUMA Pinning bug with Hugepages?
by Alan G 15 Apr '20

15 Apr '20

Hi, I seem to have found an issue when trying to setup a high performance VM utilising hugepages and NUMA pinning. The VM is configured for 32GB RAM and uses hugepages of size 1G. The host has two NUMA nodes each having 64GB RAM (for 128GB total system RAM). No other VMs are running or otherwise pinned to the host. The VM is pinned to node 0. And the required hugepages are allocated with echo 32 > /sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages I then attempt to start the VM and get a pop-up error saying "cannot accommodate memory of VM's pinned virtual NUMA nodes within host's physical NUMA nodes". However, if I remove the hugepages from node 0 echo 0 > /sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages Start the VM and then immediately re-create the hugepqages then everything works as expected. It seems to me that oVirt is considering the hugepages as allocated memory even if they are not in use. Is this correct? Thanks, Alan

3 3

upgrade VM cluster compatibility version
by Bill James 15 Apr '20

15 Apr '20

I'm trying to upgrade my cluster to 4.3. Currently its running 4.2.8.2-1.el7. But the cluster compatibility version is 3.6. I try to change that and it says I need to edit the VM. https://www.ovirt.org/documentation/upgrade-guide/chap-Post-Upgrade_Tasks.h… says: *Important:* An error message may warn that some virtual machines and templates are incorrectly configured. To fix this error, edit each virtual machine manually. The *Edit Virtual Machine* window provides additional validations and warnings that show what to correct. Sometimes the issue is automatically corrected and the virtual machine’s configuration just needs to be saved again. After editing each virtual machine, you will be able to change the cluster compatibility version. I edit the VM and there are no errors or warnings. I see no way to change the cluster compatibility level on a VM. How do I change the Custom Compatibility Version?? -- This email, its contents and attachments contain information from J2 Global, Inc. and/or its affiliates which may be privileged, confidential or otherwise protected from disclosure. The information is intended to be for the addressee(s) only. If you are not an addressee, any disclosure, copy, distribution or use of the contents of this message is prohibited. If you have received this email in error, please notify the sender by reply email and delete the original message and any copies.

2 2

Get OAuth token locally without password?
by Chris Adams 14 Apr '20

14 Apr '20

I'm working on a cron job to run on the engine to do some tasks via the API. Is there a way I can get an API OAuth token created without actually storing a password? For example, some script that can be run to directly create a session in the database and return the token. Obviously this _can_ be done, it's a matter of knowing the right bits to do (so basically wondering if that has already been written). I only have internal users, so no external authentication store available. -- Chris Adams <cma(a)cmadams.net>

2 1