- Users - oVirt List Archives

Re: SPICE and VNC native
by Strahil 01 Jul '19

01 Jul '19

The graphics server is the actual host. Can you directly access SPICE/VNC port from your workstation? Best Regards, Strahil NikolovOn Jul 1, 2019 13:31, kim.kargaard(a)noroff.no wrote: > > Hi, > > We are running ovirt 4.3. The engine is on a bare metal machine and the hosts are running on Centos 7. When installing the engine, I set it to be the webproxy. When I create a new vm, I select both SPICE+VNC. When clicking on the console I only have the option for SPICE native, not for the HTML option. For VNC I have both options and the HTML option can be selected and works. But, this is also the only option that works. VNC Native as well as SPICE Native do not work. I have tried using both remote viewer on Mac and a VNC client on a Windows machine and neither will actually open the VM. I would really also like the SPICE HTML option to exist, but it does not. The enable SPICE proxy in the Console selection is greyed out. > > When I open in remoteviewer (Mac) I get Unable to connect to the graphic server. > > Any suggestions? > > Kim > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PDH2UJKZC2XEO…

3 2

Mix CPU
by suporte＠logicworks.pt 01 Jul '19

01 Jul '19

Hello, Can we mix an Intel cpu with an AMD cpu in the same cluster? Thanks -- Jose Ferradeira http://www.logicworks.pt

5 5

Re: USB Passtrough device problem
by Strahil 01 Jul '19

01 Jul '19

You can attach the usb to an oVirt node and check the module in use there. Then you can try patthrough the device and check the module in use on the VM (if it's linux) or install the driver (if Windows). Best Regards, Strahil NikolovOn Jun 28, 2019 21:11, Juan Pablo Lorier <jplorier(a)gmail.com> wrote: > > thanks anyway. I'm trying to figure out how to deal with this. > > Regards > > El 26/6/19 a las 16:45, Strahil escribió: > > Slow motion... This sounds like bad driver or an unoptimized one. > > Sadly I have no more ideas how to overcome this. > > Best Rregards, > Strahil Nikolov > > On Jun 25, 2019 20:07, jplorier(a)gmail.com wrote: >> >> Hi Strahil >> >> Sorry for the late reply but google sent ovirt mails to spam. I have tried and thought I get audio, it sounds like its played at an incorrect bitrate (I recorded audio ant soundls like slow motion audio). >> Is there any other way to present the usb device than throught console usb emulation? >> Regards >>

2 1

Re: hosted engine not getting up
by Crazy Ayansh 01 Jul '19

01 Jul '19

Hi Simon, It seems to be a memory issue but why it's not showing correct memory there i mean in hosted engine i have given below memory : [image: image.png] whereas it is showing on virsh -r *** command is bit lesser why ? [image: image.png] why both are different ? On Mon, Jul 1, 2019 at 12:31 PM Crazy Ayansh <shashank123rastogi(a)gmail.com> wrote: > Hi Simon, It seems to be a memory issue but why it's not showing correct > memory there i mean in hosted engine i have given below memory : > [image: image.png] > > whereas it is showing on virsh -r *** command is bit lesser why ? > [image: image.png] > > why both are different ? > > Thanks > > > > On Fri, Jun 28, 2019 at 7:11 PM Simone Tiraboschi <stirabos(a)redhat.com> > wrote: > >> Can you please check how much memory it got in the output of virsh -r >> dumpxml HostedEngine ? >> >> >> On Fri, Jun 28, 2019 at 3:27 PM Crazy Ayansh < >> shashank123rastogi(a)gmail.com> wrote: >> >>> Hi Team, >>> >>> Today i rebooted my hosted engine and found it was not getting up. After >>> connecting through remote viewer i found the error "error:cannot allocate >>> kernel buffer" and i am not able to start hosted engine.any suggestions ? >>> >>> _______________________________________________ >>> Users mailing list -- users(a)ovirt.org >>> To unsubscribe send an email to users-leave(a)ovirt.org >>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MTDRNK2DZVW4U… >>> >> >> >> -- >> >> Simone Tiraboschi >> >> He / Him / His >> >> Principal Software Engineer >> >> Red Hat <https://www.redhat.com/> >> >> stirabos(a)redhat.com >> @redhatjobs <https://twitter.com/redhatjobs> redhatjobs >> <https://www.facebook.com/redhatjobs> @redhatjobs >> <https://instagram.com/redhatjobs> >> <https://red.ht/sig> >> <https://redhat.com/summit> >> >

2 7

Re: Mix CPU
by Strahil 01 Jul '19

01 Jul '19

No. Keep the hosts with different Brand CPU in separate clusters. For example, I have 2 gluster Bricks with AMD (default cluster) and an Intel-based arbiter (Intel cluster). Best Regards, Strahil NikolovOn Jul 1, 2019 14:39, suporte(a)logicworks.pt wrote: > > Hello, > > Can we mix an Intel cpu with an AMD cpu in the same cluster? > > Thanks > > -- > ________________________________ > Jose Ferradeira > http://www.logicworks.pt

1 0

Re: Proper way to upgrade hosts OS?
by Strahil 01 Jul '19

01 Jul '19

I'm using CentOS7 and no deps were broken. Just follow the following: https://www.ovirt.org/documentation/upgrade-guide/chap-Upgrading_from_4.1_t… Best Regards, Strahil NikolovOn Jul 1, 2019 10:30, Nicolas Ecarnot <nicolas(a)ecarnot.net> wrote: > > Le 26/06/2019 à 12:34, Nicolas Ecarnot a écrit : > > Hello, > > > > We're not using nodes but CentOS 7.x hosts. > > Do you know if some documentation has been written about the proper way > > to upgrade the operating system of the hosts, and especially how to > > prevent breaking dependencies or cause versions flaws? > > > > Thank you. > > > > Hello, > > As no answer came, may anyone just tell me if there's any chance to > break something? > > Thank you. > > -- > Nicolas ECARNOT > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/GZYVUCMBIZIZO…

1 0

hosted engine not getting up
by Crazy Ayansh 01 Jul '19

01 Jul '19

Hi Team, Today i rebooted my hosted engine and found it was not getting up. After connecting through remote viewer i found the error "error:cannot allocate kernel buffer" and i am not able to start hosted engine.any suggestions ?

3 3

Ovirt Hyperconverged Cluster
by raffaele＠stefanile.com 01 Jul '19

01 Jul '19

Hi all, I have configured a 3 nodes cluster with an Hyperconverged gluster. I have used 2 network interface bonded with one VLAN for the mgmt and an other one for the storage. When I use cockpit to deploy the hosted engine I receive this error. [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "The host has been set in non_operational status, please check engine logs, fix accordingly and re-deploy.\n"} The ovirt version is 4.3 Someone have a similar problem?

5 7

Proper way to upgrade hosts OS?
by Nicolas Ecarnot 01 Jul '19

01 Jul '19

Hello, We're not using nodes but CentOS 7.x hosts. Do you know if some documentation has been written about the proper way to upgrade the operating system of the hosts, and especially how to prevent breaking dependencies or cause versions flaws? Thank you. -- Nicolas ECARNOT

2 2

Ovirt
by ioabdoulrahamaneapp.site＠gmail.com 30 Jun '19

30 Jun '19

Hello Please, I need help. it's been more than 4 times that I install ovirt-node-ng-install-4.3.4-2019061016.el7 but every time I do ifconfig, I see the message error bash command. I looked back in the sbin folder and there is no ifconfig file. Thanks

3 2

USB host support?
by Hetz Ben Hamo 29 Jun '19

29 Jun '19

Hi, I'm in communication with a company that thinks about RHV. One of the requirements is USB host support (which will be on the nodes, not on the desktops). I haven't found any way to connect USB to a VM other then through SPICE, but this method won't help as these dongles won't be on desktops. Is this in the road map of oVirt? Thanks

1 0

Re: Ovirt Hyperconverged Cluster
by Strahil 29 Jun '19

29 Jun '19

I think raid is OK. At least my setup has a raid0 of 2 HDDs. In the error message there is the command that is being executed by the playbook. Run it manually and if it fails - run again with more verbosely. Best Regards, Strahil NikolovOn Jun 29, 2019 01:00, Edward Berger <edwberger(a)gmail.com> wrote: > > Maybe there is something already on the disk from before? > gluster setup wants it completely blank, no detectable filesystem, no raid, etc. > see what is there with fdisk.-l see what PVs exist with pvs. > Manually wipe, reboot and try again? > > On Fri, Jun 28, 2019 at 5:37 AM <raffaele(a)stefanile.com> wrote: >> >> I have added the lvm global filter and I have configured the multipath.conf but gdploy stay blocked on the PV creation on sda. >> I don't have any log in /var/log/ovirt-hosted-engine-setup >> _______________________________________________ >> Users mailing list -- users(a)ovirt.org >> To unsubscribe send an email to users-leave(a)ovirt.org >> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/SHZOZFQXM6G6U…

1 0

Ovirt + Azure + AWS
by darkytoo＠gmail.com 28 Jun '19

28 Jun '19

Something i struggle with is I can't find any support for things like azure site recovery, azure backup or migrating to / from azure or AWS using oVirt, is there something i'm missing?

1 0

Re: USB Passtrough device problem
by Strahil 28 Jun '19

28 Jun '19

Slow motion... This sounds like bad driver or an unoptimized one. Sadly I have no more ideas how to overcome this. Best Rregards, Strahil NikolovOn Jun 25, 2019 20:07, jplorier(a)gmail.com wrote: > > Hi Strahil > > Sorry for the late reply but google sent ovirt mails to spam. I have tried and thought I get audio, it sounds like its played at an incorrect bitrate (I recorded audio ant soundls like slow motion audio). > Is there any other way to present the usb device than throught console usb emulation? > Regards >

2 1

Re: [ANN] oVirt 4.3.5 Third Release Candidate is now available for testing
by Strahil 28 Jun '19

28 Jun '19

I've mentioned it into the bug that tracks gluster6 integration with oVirt -> https://bugzilla.redhat.com/show_bug.cgi?id=1693998 At that time, oVirt was still not using gluster v6 , so I didn't open a separate bug. As I'm currently on the go, I can open a bug with more details in Monday. Best Regards, Strahil NikolovOn Jun 27, 2019 09:24, Sandro Bonazzola <sbonazzo(a)redhat.com> wrote: > > > > Il giorno gio 27 giu 2019 alle ore 07:38 Strahil <hunter86_bg(a)yahoo.com> ha scritto: >> >> Hi Sandro, >> >> Thanks for the info. >> >> I've just updated my lab (gluster v6.1 -> 6.3 ) and the only issue I have detected so far is that the Advanced Options in UI show no info for the replica bricks, while the arbiter is working. >> >> So the situation is the same as before the upgrade. >> >> Best Regards, >> Strahil Nikolov > > > Thanks for the feedback! Did you already open a bug for this? >

3 3

ovirt-engine
by raffaele＠stefanile.com 28 Jun '19

28 Jun '19

Hi, I am installing an ovirt 4.2 self hosted engine on gluster hyperconverged (3 centos nodes) When, after the gluster configuration, I start the deploy the hosted-engine tool return [ ERROR ] ERROR! 'delegate_to' is not a valid attribute for a TaskInclude [ ERROR ] [ ERROR ] The error appears to be in '/usr/share/ovirt-hosted-engine-setup/ansible/bootstrap_local_vm.yml': line 308, column 11, but may [ ERROR ] be elsewhere in the file depending on the exact syntax problem. [ ERROR ] [ ERROR ] The offending line appears to be: [ ERROR ] [ ERROR ] LOCAL_VM_DIR={{ hostvars['localhost']['LOCAL_VM_DIR'] }} [ ERROR ] - name: Clean bootstrap VM [ ERROR ] ^ here [ ERROR ] Failed to execute stage 'Closing up': Failed executing ansible-playbook Someone have the same issue?

2 1

yum versionlock in ovirt node 4.3
by markus.falb＠mafalb.at 28 Jun '19

28 Jun '19

Hi, I just upgraded some ovirt node 4.2.8 to ovirt node 4.3.4 After a ...snip # yum update ovirt-node-ng-image-update snap... I rebooted, and afterwards I wanted to run a yum update like I was doing it with the previous versions, but ...snip # yum update --disableplugin fastestmirror,subscription-manager Loaded plugins: enabled_repos_upload, imgbased-persist, package_upload, product-id, search-disabled-repos, vdsmupgrade, versionlock Repository centos-sclo-rh-release is listed more than once in the configuration Excluding 76 updates due to versionlock (use "yum versionlock status" to show them) No packages marked for update Uploading Enabled Repositories Report Cannot upload enabled repos report, is this client registered? snap... "Excluding 76 updates due to versionlock" ! Many packages are locked via the yum-versionlock plugin, also many system packages like the kernel and python (well, these 2 got my attention because there were security updates published recently). Isn't it recommended anymore to update the these packages to the latest versions? Do you use modified packages (different from CentOS?) Is it safe to remove the versionlock? Best regards, Markus

4 12

Re: disk description
by Strahil 27 Jun '19

27 Jun '19

I don't get the idea. Do you want to resize a vm disk that is encrypted inside the vm ? Best Regards, Strahil NikolovOn Jun 7, 2019 05:19, Dmitry Filonov <filonov(a)hkl.hms.harvard.edu> wrote: > > Hi - > > Looks like Friday is right around the corner... > Have a really stupid question. > Is there a way to edit disk description (or extend it's size) without attaching that disk to some VM and editing disk there? > > Thanks! > > -- > Dmitry Filonov > Linux Administrator > SBGrid Core | Harvard Medical School > 250 Longwood Ave, SGM-114 > Boston, MA 02115

2 1

Re: Cannot inquire Lease
by Strahil 27 Jun '19

27 Jun '19

It looks OK to me , but I'm no expert in that. In such case you will have 5 GB as a reserve, which you can reduce, just to be able to delete some data (in this case VM). The question that comes to my mind is - did you receive any warning by oVirt that gluster is almost full ? Bewt Regards, Strahil NikolovOn Jun 27, 2019 14:36, suporte(a)logicworks.pt wrote: > > After empty the image file, the data center came up and I was able to remove the VM disk on oVirt Web GUI. > What is the best practice to stop gluster to fill all the disk? > When I had a new storage gluster domain in advanced parameters I usually configure it like this: > Warning Low Space Indicator (%): 20 > Critical Space Action Blocker (GB): 5 > Warning Low Confirmed Space Indicator (%): 20 > > is this the best way? > > José > > ________________________________ > From: "Strahil" <hunter86_bg(a)yahoo.com> > To: "suporte" <suporte(a)logicworks.pt>, "users" <users(a)ovirt.org> > Sent: Thursday, June 27, 2019 6:45:16 AM > Subject: Re: [ovirt-users] Re: Cannot inquire Lease > > Hm ... Removing it from the gluster but not inside oVirt can cause a lot of headaches. > Can you find that image in oVirt Storage -> Disks > > Sadly , you got no other option and the optimal approach would be to take the deletion from oVirt UI/API before the storage gets full. > > Ovirt has the option to notify you in advance. > > Best Regards, > Strahil Nikolov > > On Jun 27, 2019 01:25, suporte(a)logicworks.pt wrote: >> >> I just empty a big image here >> /rhev/data-center/mnt/glusterSD/node2.abc.pt:_data/0a19a375-77cb-47e5-af12-7b5451e6fa53/images >> >> > dff87321-a18e-45a1-a4de-fb528403ebeb >> >> and everything looks like it's working again. >> >> ________________________________ >> De: suporte(a)logicworks.pt >> Para: "users" <users(a)ovirt.org> >> Enviadas: Quarta-feira, 26 De Junho de 2019 22:20:13 >> Assunto: [ovirt-users] Cannot inquire Lease >> >> Hi, >> >> The glusterfs domain disk data master is full and the volume is down. >> I have this error: >> VDSM NODE2 command SpmStatusVDS failed: Cannot inquire Lease(name='SDM', path=u'/rhev/data-center/mnt/glusterSD/node2.abc.pt:_data/0a19a375-77cb-47e5-af12-7b5451e6fa53/dom_md/leases', offset=1048576): (2, 'Sanlock get hosts failure', 'No such file or directory') >> >> Cannot delete de domain because is the data master. >> Version 4.3.4.3-1.el7 >> >> What can I do? >> >> >> Thanks >> >> José >> >> -- >> ________________________________ >> Jose Ferradeira >> http://www.logicworks.pt >> >> _______________________________________________ >> Users mailing list -- users(a)ovirt.org >> To unsubscribe send an email to users-leave(a)ovirt.org >> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/DHZ3BQ77SK353… > >

2 1

Re: Reinstalling the whole infrastructure
by Markus Schaufler 27 Jun '19

27 Jun '19

Would be really glad for any input in this matter!

1 0

Re: Cannot inquire Lease
by Strahil 27 Jun '19

27 Jun '19

Hm ... Removing it from the gluster but not inside oVirt can cause a lot of headaches. Can you find that image in oVirt Storage -> Disks Sadly , you got no other option and the optimal approach would be to take the deletion from oVirt UI/API before the storage gets full. Ovirt has the option to notify you in advance. Best Regards, Strahil NikolovOn Jun 27, 2019 01:25, suporte(a)logicworks.pt wrote: > > I just empty a big image here > /rhev/data-center/mnt/glusterSD/node2.abc.pt:_data/0a19a375-77cb-47e5-af12-7b5451e6fa53/images > > > dff87321-a18e-45a1-a4de-fb528403ebeb > > and everything looks like it's working again. > > ________________________________ > De: suporte(a)logicworks.pt > Para: "users" <users(a)ovirt.org> > Enviadas: Quarta-feira, 26 De Junho de 2019 22:20:13 > Assunto: [ovirt-users] Cannot inquire Lease > > Hi, > > The glusterfs domain disk data master is full and the volume is down. > I have this error: > VDSM NODE2 command SpmStatusVDS failed: Cannot inquire Lease(name='SDM', path=u'/rhev/data-center/mnt/glusterSD/node2.abc.pt:_data/0a19a375-77cb-47e5-af12-7b5451e6fa53/dom_md/leases', offset=1048576): (2, 'Sanlock get hosts failure', 'No such file or directory') > > Cannot delete de domain because is the data master. > Version 4.3.4.3-1.el7 > > What can I do? > > > Thanks > > José > > -- > ________________________________ > Jose Ferradeira > http://www.logicworks.pt > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/DHZ3BQ77SK353…

2 1

RDO integration with oVirt
by Strahil 27 Jun '19

27 Jun '19

Hey guys, I know that RHV has a nice integration with Red Hat's openstack , but I was wondering if RDO - oVirt are having that integration. I've read a nice post : http://www.chrisj.cloud/?q=node/8 and I was wondering if I can do it - as I'm thinking about learning openstack. Bewt Regards, Strahil Nikolov

2 1

VM IPsec network performance
by TranceWorldLogic . 27 Jun '19

27 Jun '19

Hi, I have enable multi-queue feature on nic card and I am getting normal throughput as 26 Gbps. But when I am trying throughput test with IPsec I am getting only max 1.5Gbps. After looking at CPU usages, it is free more than 50%, I am not getting why low throughput in ipsec case. Below are my trial: 2nd, I tried to distribute multi-queue interrupt on mult-cpu but got same result. 3rd, I tried nic passthrough and enable RSS, I got good throughput and CPU usages. Please help me to understand how to increase vnet performance for VM. And also suggest me about ovirt setting. I have also seen some presentation in google around virtio-crypto but as I am using Guest and Host OS as centos 7.3, I can't use virtio-crypto device. Thanks, ~Rohit

1 0

Re: Error virNetTLSContextLoadCertFromFile after upgrade from oVirt 4.2 to 4.3.4
by Strahil 27 Jun '19

27 Jun '19

What about setting the date and time manually somewhere at 2016 on all hosts and blockking ntp at all ? Then the certs will be still valid and can be renewed ? Just asking... Not sure what will be the outcome. Best Regards, Strahil NikolovOn Jun 25, 2019 12:31, Yedidyah Bar David <didi(a)redhat.com> wrote: > > On Tue, Jun 25, 2019 at 12:28 PM Stefano Danzi <s.danzi(a)hawai.it> wrote: > > > > > > > > Il 25/06/2019 10:08, Yedidyah Bar David ha scritto: > > > On Tue, Jun 25, 2019 at 10:26 AM Stefano Danzi <s.danzi(a)hawai.it> wrote: > > >> > > >> > > >> Il 25/06/2019 08:27, Yedidyah Bar David ha scritto: > > >>> On Mon, Jun 24, 2019 at 7:56 PM Stefano Danzi <s.danzi(a)hawai.it> wrote: > > >>>> I've found that this issue is related to: > > >>>> > > >>>> https://bugzilla.redhat.com/show_bug.cgi?id=1648190 > > >>> Are you sure? > > >>> > > >>> That bug is about an old cert, generated by an old version, likely > > >>> before we fixed bug 1210486 (even though it's not mentioned in above > > >>> bug). > > >> Yes! Malformed "Not Before" date/time in certs > > >> > > >>>> But i've no idea how fix it.... > > >>>> > > >>>> Il 24/06/2019 18:19, Stefano Danzi ha scritto: > > >>>>> I've just upgraded my test environment from ovirt 4.2 to 4.3.4. > > >>> Was it installed as 4.2, or upgraded? From which first version? > > >> I don't remember the first installed version. Maybe 4.0... I always > > >> upgraded the original installation. > > >> > > >>>>> System has only one host (Centos 7.6.1810) and run a self hosted engine. > > >>>>> > > >>>>> After upgrade I'm not able to run vdsmd (and so hosted engine....) > > >>>>> > > >>>>> Above the error in log: > > >>>>> > > >>>>> journalctl -xe > > >>>>> > > >>>>> -- L'unità libvirtd.service ha iniziato la fase di avvio. > > >>>>> giu 24 18:09:17 ovirt01.hawai.lan libvirtd[8176]: 2019-06-24 > > >>>>> 16:09:17.006+0000: 8176: info : libvirt version: 4.5.0, package: > > >>>>> 10.el7_6.12 (CentOS BuildSystem <http://bugs.centos.org>, > > >>>>> 2019-06-20-15:01:15, x86-01.bsys. > > >>>>> giu 24 18:09:17 ovirt01.hawai.lan libvirtd[8176]: 2019-06-24 > > >>>>> 16:09:17.006+0000: 8176: info : hostname: ovirt01.hawai.lan > > >>>>> giu 24 18:09:17 ovirt01.hawai.lan libvirtd[8176]: 2019-06-24 > > >>>>> 16:09:17.006+0000: 8176: error : virNetTLSContextLoadCertFromFile:513 > > >>>>> : Unable to import server certificate /etc/pki/vdsm/certs/vdsmcert.pem > > >>> Did you check this file? Does it exist? > > >>> > > >>> ls -l /etc/pki/vdsm/certs/vdsmcert.pem > > >>> > > >>> Can vdsm user read it? > > >>> > > >>> su - vdsm -s /bin/bash -c 'cat /etc/pki/vdsm/certs/vdsmcert.pem > /dev/null' > > >>> > > >>> Please check/share output of: > > >>> > > >>> openssl x509 -in /etc/pki/vdsm/certs/vdsmcert.pem -text > > >>> > > >>> Thanks and best regards, > > >> vdsm can read vdsmcert. The problem is "Not Before" date: > > >> > > >> [root@ovirt01 ~]# su - vdsm -s /bin/bash -c 'openssl x509 -in > > >> /etc/pki/vdsm/certs/vdsmcert.pem -text' > > >> Certificate: > > >> Data: > > >> Version: 3 (0x2) > > >> Serial Number: 4102 (0x1006) > > >> Signature Algorithm: sha1WithRSAEncryption > > >> Issuer: C=US, O=hawai.lan, CN=ovirtbk-sheng.hawai.lan.63272 > > >> Validity > > >> Not Before: Feb 4 08:36:07 2015 > > >> Not After : Feb 4 08:36:07 2020 GMT > > >> [CUT] > > >> > > >> > > >> [root@ovirt01 ~]# su - vdsm -s /bin/bash -c 'openssl x509 -in > > >> /etc/pki/vdsm/certs/cacert.pem -text' > > >> Certificate: > > >> Data: > > >> Version: 3 (0x2) > > >> Serial Number: 4096 (0x1000) > > >> Signature Algorithm: sha1WithRSAEncryption > > >> Issuer: C=US, O=hawai.lan, CN=ovirtbk-sheng.hawai.lan.63272 > > >> Validity > > >> Not Before: Feb 4 00:06:25 2015 > > >> Not After : Feb 2 00:06:25 2025 GMT > > >> > > > OK :-( > > > > > > So it will be rather difficult to fix. > > > > > > You should have been prompted by engine-setup long ago to renew PKI, > > > weren't you? And when you did, didn't you have to reinstall (or Re- > > > Enroll Certificates, in later versions) all hosts? > > > > I don't remember to ever seen a question about this during engine-setup, > > but it could be. > > In /etc/pki/vdsm/certs/ I can see an old cert and ca with subjet: > > > > [root@ovirt01 ~]# su - vdsm -s /bin/bash -c 'openssl x509 -in > > /etc/pki/vdsm/certs/cacert.pem.20150205093608 -text' > > Certificate: > > Data: > > Version: 3 (0x2) > > Serial Number: 1423056193 (0x54d21d41) > > Signature Algorithm: sha256WithRSAEncryption > > Issuer: CN=VDSM Certificate Authority > > Validity > > Not Before: Feb 4 13:23:13 2015 GMT > > Not After : Feb 4 13:23:13 2016 GMT > > Subject: CN=VDSM Certificate Authority > > Subject Public Key Info: > > > > [CUT] > > > > [root@ovirt01 ~]# su - vdsm -s /bin/bash -c 'openssl x509 -in > > /etc/pki/vdsm/certs/vdsmcert.pem.20150205093609 -text' > > Certificate: > > Data: > > Version: 3 (0x2) > > Serial Number: 1423056193 (0x54d21d41) > > Signature Algorithm: sha256WithRSAEncryption > > Issuer: CN=VDSM Certificate Authority > > Validity > > Not Before: Feb 4 13:23:13 2015 GMT > > Not After : Feb 4 13:23:13 2016 GMT > > Subject: CN=ovirt01.hawai.lan, O=VDSM Certificate > > Subject Public Key Info: > > Public Key Algorithm: rsaEncryption > > > > > > I think that was certs made during first hosted engine installation. > > Could it work if I manually create certs like this? > > Just to start libvirtd, vdsm and hosted-engine. > > I think it's worth a try. Just create a self-signed CA, a keypair > signed by it, and place them correctly, should work. > > The engine won't be able to talk with the host, but you can then more > easily reinstall/re-enroll-certs. > > Good luck, > -- > Didi > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/LBD33ESAF534F…

2 1

Re: [ANN] oVirt 4.3.5 Third Release Candidate is now available for testing
by Strahil 27 Jun '19

27 Jun '19

Hi Sandro, Thanks for the info. I've just updated my lab (gluster v6.1 -> 6.3 ) and the only issue I have detected so far is that the Advanced Options in UI show no info for the replica bricks, while the arbiter is working. So the situation is the same as before the upgrade. Best Regards, Strahil NikolovOn Jun 26, 2019 17:45, Sandro Bonazzola <sbonazzo(a)redhat.com> wrote: > > The oVirt Project is pleased to announce the availability of the oVirt 4.3.5 Third Release Candidate for testing, as of June 26th, 2019. > > While testing this release candidate please consider deeper testing on gluster upgrade since with this release we are switching from Gluster 5 to Gluster 6. > > This update is a release candidate of the fifth in a series of stabilization updates to the 4.3 series. > This is pre-release software. This pre-release should not to be used in production. > > This release is available now on x86_64 architecture for: > * Red Hat Enterprise Linux 7.6 or later > * CentOS Linux (or similar) 7.6 or later > > This release supports Hypervisor Hosts on x86_64 and ppc64le architectures for: > * Red Hat Enterprise Linux 7.6 or later > * CentOS Linux (or similar) 7.6 or later > * oVirt Node 4.3 (available for x86_64 only) > > See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. > > Notes: > - oVirt Appliance has not been updated due to a regression in the tooling we use for building it.[3] > - oVirt Node is already available[2] > > Additional Resources: > * Read more about the oVirt 4.3.5 release highlights:http://www.ovirt.org/release/4.3.5/ > * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt > * Check out the latest project news on the oVirt blog:http://www.ovirt.org/blog/ > > [1] http://www.ovirt.org/release/4.3.5/ > [2] http://resources.ovirt.org/pub/ovirt-4.3-pre/iso/ > [3] https://bugzilla.redhat.com/show_bug.cgi?id=1724076 > > -- > > Sandro Bonazzola > > MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV > > Red Hat EMEA > > sbonazzo(a)redhat.com

2 1