- Users - oVirt List Archives

OVN and MTU of vnics based on it clarification
by Gianluca Cecchi 09 Jul '18

09 Jul '18

Hello, I'm testing a virtual rhcs cluster based on 4 nodes that are CentOS 7.4 VMs. So the stack is based on Corosync/Pacemaker I have two oVirt hosts and so my plan is to put two VMs on first host and two VMs on the second host, to simulate a two sites config and site loss, before going to physical production config. Incidentally the two hypervisor hosts are indeed placed into different physical datacenters. So far so good. I decided to use OVN for the intracluster dedicated network configured for corosync (each VM has two vnics, one on production lan and one for intracluster). I detected that the cluster worked and formed (also only two nodes) only if the VMs run on the same host, while it seems they are not able to communicate when on different hosts. Ping is ok and an attempt of ssh session between them on intracluster lan, but cluster doesn't come up So after digging in past mailing list mails I found this recent one: https://lists.ovirt.org/archives/list/users@ovirt.org/thread/RMS7XFOZ67O3ER… where the solution was to set 1400 for the MTU of the interfaces on OVN network. It seems it resolves the problem also in my scenario: - I live migrated two VMs on the second host and rhcs clusterware didn't complain - I relocated a resource group composed by several LV/FS, VIP and application from VM running on host1 to VM running on host2 without problems. So the question is: can anyone confirm what are guidelines for settings vnics on OVN? Is there already a document in place about MTU settings for OVN based vnics? Other particular settings or limitations if I want to configure a vnic on OVN? Thanks, Gianluca

2 1

fence_rhevm and ovirt 4.2
by Gianluca Cecchi 08 Jul '18

08 Jul '18

Hello, I'm configuring a virtual rhcs cluster and would like to use fence_rhevm agent for stonith. As VMs composing the 4-nodes cluster I'm using CentOS 7.4 os with fence-agents-rhevm-4.0.11-66.el7_4.4.x86_64; I see that in 7.5 the agent is fence-agents-rhevm-4.0.11-86.el7_5.2.x86_64 but with no modification for the /usr/sbin/fence_rhevm python script apart the BUILD_DATE line. Some questions: - it seems it is still in API v3 even if deprecated; any particular reason? Possible to update to V4? Can I create a RFE bugzilla? This is in fact what I get in engine events registering connection: Client from address "10.4.4.68" is using version 3 of the API, which has been deprecated since version 4.0 of the engine, and will no longer be supported starting with version 4.3. Make sure to update that client to use a supported versions of the API and the SDKs, before upgrading to version 4.3 of the engine. 7/7/184:56:11 PM User fenceuser@internal-authz connecting from '10.4.4.68' using session 'OVgdzMofRFDS4ZKSdL83mRyGUFEdc+++onJHzGiAfpYuS07xa/EbBqFEPtztpwEeRzCn9mBOTGXE69rBbHlhXQ==' logged in. 7/7/184:56:11 PM - UserRole ok Back in April 2017 for version 4.1.1 I had problems and it seems I had to set super user privileges for the "fencing user" See thread here https://lists.ovirt.org/archives/list/users@ovirt.org/message/FS5YFU5ZXIYDC… Now instead I only set UserRole for the defined "fenceuser" on the virtual cluster VMS and it works ok - for a VM with permissions already setup: [root@cl1 ~]# fence_rhevm -a 10.4.192.49 -l "fenceuser@internal" -S /usr/local/bin/pwd_ovmgr01.sh -z --ssl-insecure -o status --shell-timeout=20 --power-wait=10 -n cl1 Status: ON - for a VM still without permissions [root@cl1 ~]# fence_rhevm -a 10.4.192.49 -l "fenceuser@internal" -S /usr/local/bin/pwd_ovmgr01.sh -z --ssl-insecure -o status --shell-timeout=20 --power-wait=10 -n cl2 Failed: Unable to obtain correct plug status or plug is not available - for a VM with permissions already setup: I'm able to make power off / power on of the VM Thanks, Gianluca

2 2

Ovirt vs RHEV
by Krzysztof Wajda 08 Jul '18

08 Jul '18

Hi, can anyone explain differences between Ovirt and RHEV in version 4.1 ? I know that RHEV has diffrent product life-cycle, and there are some diffrences in installation process. Do you know if there are any additional featuers in Ovirt or RHEV ? Do you know any oifficial statements from RH about differences ? From my experience there is not too much diffrences, but I need to prepere such a comaprison for bussines so I would like to get an info from relaiable source. Chris

2 1

Ovirt/ RHV Disaster Recovery Designing
by samee095＠gmail.com 07 Jul '18

07 Jul '18

Hi I've looking for some ideas about designing disaster recovery planning with ovirt 4.2. Since 4.2 we have options to have intergration with disaster recovery site also. I went through some videos at internet and want to share if those are correct or not. Thus you can help me regarding what other things I should be having ideas during planning and designing more about this. 1. We've to keep both sites on and already created datacenter, cluster and one site with storage domain attached and other site with no storage domain. 2. We've to keep latency of 10ms at maximum between both sites. 3. Have to configure virtual machines with affinity group. 4. The VM's which are configured as high-available vm, will be migrated first. 5. There's an Ansible script while have to run to fail over and fail back. Now, please could you help me out regarding this. 1. Where can I find this ansible script? Is this https://github.com/oVirt/ovirt-ansible-disaster-recovery.git? 2. Can this script run at rhv also ? or just for ovirt? Or what other changes I have to make for rhv to have this functionalities? 3. How ovirt/rhv works with the OVN compared to NSX? Is there's any challenges ? 4. Can you share me some high and low level diagram related to rhv disaster planning? 5. How the storage migrates on backend ? During the script ? 6. Where do I run this script? During fail over at primary site and during fail back at secondary site? 7. Basically since only the storage migrates and all other components are on already so basically backend it's only dealing with storage migration according to defined policies ? Please could you help me out with some designing and ideas what're the best architecture during planning on disaster recovery at RHV. Thank you.

3 2

=?utf-8?q?=5Bovirt-users=5D?=(v4.2.5-1.el7) Snapshots UI - html null
by Maton, Brett 07 Jul '18

07 Jul '18

Hi, I'm trying to restore a VM snapshot theough the UI but keep running into this error: Uncaught exception occurred. Please try reloading the page. Details: Exception caught: html is null Please have your administrator check the UI logs ui log attached. CentOS 7 oVirt 4.2.5-1.el7 Regards, Brett

2 5

Re: PollVDSCommand Error: java.lang.NoClassDefFoundError: org/apache/commons/lang/StringUtils
by Greg Sheremeta 07 Jul '18

07 Jul '18

Is your engine functioning at all? I'm not sure if you're saying your entire engine doesn't work, or just host deploy doesn't work. What version of ovirt engine is this? How did you install -- fresh installation, upgrade? From source or rpm? Best wishes, Greg On Wed, Jun 20, 2018 at 12:35 AM Deekshith <deekshith(a)binaryindia.com> wrote: > Dear team > > Please find the attached server and host logs.. ovirt host > unresponsive(down), unable to install node packages. > > > > Regards > > Deekshith > > > > *From:* Roy Golan [mailto:rgolan@redhat.com] > *Sent:* 19 June 2018 06:57 > *To:* Greg Sheremeta > *Cc:* devel; users; deekshith(a)binaryindia.com; allen_john(a)mrpl.co.in > *Subject:* Re: [ovirt-users] PollVDSCommand Error: > java.lang.NoClassDefFoundError: org/apache/commons/lang/StringUtils > > > > > > On Tue, 19 Jun 2018 at 16:04 Greg Sheremeta <gshereme(a)redhat.com> wrote: > > Sending to devel list. > > > > Anyone ever seen this before? It sounds like a bad installation if Java > classes are missing / classloader issues are present. > > > > 2018-06-18 11:23:11,287+05 INFO > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (VdsDeploy) [d6a2578b-c58f-43be-b6ad-30a3a0a57a74] EVENT_ID: > VDS_INSTALL_IN_PROGRESS(509), Correlation ID: > d6a2578b-c58f-43be-b6ad-30a3a0a57a74, Call Stack: null, Custom ID: null, > Custom Event ID: -1, Message: Installing Host Node. Retrieving installation > logs to: > '/var/log/ovirt-engine/host-deploy/ovirt-host-deploy-20180618112311-mrpl.kvm2-d6a2578b-c58f-43be-b6ad-30a3a0a57a74.log'. > > 2018-06-18 11:23:12,131+05 INFO > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (VdsDeploy) [d6a2578b-c58f-43be-b6ad-30a3a0a57a74] EVENT_ID: > VDS_INSTALL_IN_PROGRESS(509), Correlation ID: > d6a2578b-c58f-43be-b6ad-30a3a0a57a74, Call Stack: null, Custom ID: null, > Custom Event ID: -1, Message: Installing Host Node. Stage: Termination. > > 2018-06-18 11:23:12,193+05 INFO > [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp Reactor) > [] Connecting to mrpl.kvm2/172.31.1.32 > > 2018-06-18 11:23:12,206+05 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.PollVDSCommand] > (org.ovirt.thread.pool-7-thread-47) [d6a2578b-c58f-43be-b6ad-30a3a0a57a74] > Error: java.lang.NoClassDefFoundError: org/apache/commons/lang/StringUtils > > 2018-06-18 11:23:12,206+05 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.PollVDSCommand] > (org.ovirt.thread.pool-7-thread-47) [d6a2578b-c58f-43be-b6ad-30a3a0a57a74] > Command 'PollVDSCommand(HostName = Node, > VdsIdVDSCommandParametersBase:{runAsync='true', > hostId='d862d5c8-c75e-42ee-867f-ca16a228c2ad'})' execution failed: > java.util.concurrent.ExecutionException: java.lang.NoClassDefFoundError: > org/apache/commons/lang/StringUtils > > 2018-06-18 11:23:12,707+05 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.PollVDSCommand] > (org.ovirt.thread.pool-7-thread-47) [d6a2578b-c58f-43be-b6ad-30a3a0a57a74] > Error: java.lang.NoClassDefFoundError: org/apache/commons/lang/StringUtils > > > > > > Is that a regular installation and what version? > > jdk version? > > server.log engine.log > > > > > > On Tue, Jun 19, 2018 at 8:50 AM Deekshith <deekshith(a)binaryindia.com> > wrote: > > Dear team > > Please find attached ovirt-engine log . > > > > Regards > > Deekshith > > > > *From:* Greg Sheremeta [mailto:gshereme@redhat.com] > *Sent:* 19 June 2018 05:53 > *To:* deekshith(a)binaryindia.com > *Cc:* users > *Subject:* Re: [ovirt-users] Unable to start Ovirt engine > > > > What does it say in the > /var/log/ovirt-engine/setup/ovirt-engine-setup-xxxxxx.log? > > > > On Sun, Jun 17, 2018 at 6:01 AM Deekshith <deekshith(a)binaryindia.com> > wrote: > > Hi Team > > Please anyone help me to solve this issue. > > > > > > *Error! Filename not specified.* > > > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/QPBXKHLK4NSU6… > > > > > -- > > *GREG SHEREMETA* > > SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX > > Red Hat NA > > <https://www.redhat.com/> > > gshereme(a)redhat.com IRC: gshereme > > <https://red.ht/sig> > > > > > > > -- > > *GREG SHEREMETA* > > SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX > > Red Hat NA > > <https://www.redhat.com/> > > gshereme(a)redhat.com IRC: gshereme > > <https://red.ht/sig> > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/2AA4B5IPQL7O2… > > -- GREG SHEREMETA SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX Red Hat NA <https://www.redhat.com/> gshereme(a)redhat.com IRC: gshereme <https://red.ht/sig>

3 9

import OVA failed
by du_hongyu＠yeah.net 07 Jul '18

07 Jul '18

Hi my ovirt-engine version is 4.2.1, I import OVA by web UI, face some error, can you give me some advise? Regards Hongyu Du

2 1

ovirt, postfix and sendmail
by Fabrice Bacchella 06 Jul '18

06 Jul '18

ovirt in version 4.2 choose to incorporate postfix as a mandatory MTA: yum erase postfix ... Removing: postfix x86_64 2:2.10.1-6.el7 @base 12 M Removing for dependencies: cockpit-ovirt-dashboard noarch 0.11.28-1.el7 @ovirt-4.2 15 M ovirt-host x86_64 4.2.3-1.el7 @ovirt-4.2 11 k ovirt-hosted-engine-setup noarch 2.2.22.1-1.el7 @ovirt-4.2 2.2 M Is there a way to change that ? It's not about postfix being inferior or superior to other solutions. It's that it didn't ask any thing, didn't check if one was already installed. It's just installed. For example: rpm -q --provides postfix MTA config(postfix) = 2:2.10.1-6.el7 postfix = 2:2.10.1-6.el7 postfix(x86-64) = 2:2.10.1-6.el7 server(smtp) smtpd smtpdaemon rpm -q --provides sendmail MTA config(sendmail) = 8.14.7-5.el7 sendmail = 8.14.7-5.el7 sendmail(x86-64) = 8.14.7-5.el7 server(smtp) smtpdaemon There is a lot of other dependencies to declare other than postfix, MTA would have been better.

3 8

Ovirt Networking Setup Questions
by Dave Mintz 06 Jul '18

06 Jul '18

Hello, I am trying to understand, by reading all available docs, how to correctly set up networking. What I have: 6 nodes, 1 engine - all have 3 nics. What I want: To separate traffic into three zones - ovirtmgmt, prod (for vm and admin web interface, data (for db access). So, I have three subnets - 10.10.10.0, 10.10.20.0, and 10.10.30.0 - with matching VLANs 10, 20, 30 I am trying to understand how bonding and bridging work. Should I bond all three nics together? The instructions here: https://www.ovirt.org/documentation/how-to/networking/bonding-vlan-bridge/ <https://www.ovirt.org/documentation/how-to/networking/bonding-vlan-bridge/> seem to do that and then create two bridges br0 and ovirtmgmt, which they then assign ip addresses to. I can do that, but shouldn’t I be configuring all of the networking at the logical network level? So, in that case, should I just create one bond/bridge and then do all of the networking at the logical level? Sorry if this is newbie stuff. Thanks Dave

1 0

Snapshots don't seem to work with Windows VMs
by jmp242＠cornell.edu 06 Jul '18

06 Jul '18

I've been testing with Windows 10 1607 LTSB and created several snapshots. I can preview each one, but they all boot with the same configuration and software installed and files as the "active VM" - so I cannot see at all how to roll back changes. Is this a known issue? I believe I'm following the documentation properly, but I can't see that the snapshots are doing anything. I'm testing on Scientific Linux 7.4 using oVirt 4.2.2.6-1.el7.centos.

2 1

oVirt LLDP Labeler
by Ales Musil 06 Jul '18

06 Jul '18

Hello, I would like to announce that oVirt LLDP Labeler is officially available. The Labeler is service that runs along with engine and is capable of labeling host network interfaces according to their reported VLANs via LLDP. The attached labels are named "lldp_vlan_${VLAN}", where ${VLAN} is ID of the corresponding VLAN. This can make work of an administrator easier, because any network with the same label, will be automatically attached to the corresponding host interface. The Labeler is currently tested only with Juniper switches which are capable of reporting all of their VLANs that are present on the interface. We would like to extend the Labeler with auto bonding feature. Those interfaces that are detected on the same switch would be automatically bonded. The Labeler source is available here: https://github.com/almusil/ovirt-lldp-labeler And the build: https://copr.fedorainfracloud.org/coprs/amusil/ovirt-lldp-labeler/ If you have any suggestions or problems please don't hesitate to report them on the GitHub page. -- ALES MUSIL Associate software engineer - rhv network Red Hat EMEA <https://www.redhat.com/> amusil(a)redhat.com IM: amusil <https://red.ht/sig>

3 3

GlusterFS 4.1
by Chris Boot 06 Jul '18

06 Jul '18

All, Now that GlusterFS 4.1 LTS has been released, and is the "default" version of GlusterFS in CentOS (you get this from "centos-release-gluster" now), what's the status with regards to oVirt? How badly is oVirt 4.2.4 likely to break if one were to upgrade the gluster* packages to 4.1? Thanks, Chris -- Chris Boot bootc(a)boo.tc

2 1

Performing a quickstart task in the new console
by Dave Thacker 06 Jul '18

06 Jul '18

Hello list, I'm using the quick start documentation to build a lab setup. Immediately after the task "Configure Networks", there is a task "Attach oVirt Node or Enterprise Linux Host" I haven't found a spot in the new GUI that matches the navigation tree in the manual. How would I navigate to that task? Thanks. -- Dave Thacker

2 1

Progetto di virtualizzazione ....vorremmo utilizzare oVirt
by Marco Tosato 06 Jul '18

06 Jul '18

Buongiorno a tutti! La mia azienda sta intraprendendo un nuovo progetto che richiede un cluster di virtualizzazione di medie dimensioni (6 nodi), vorremmo valutare oVirt e GlusterFS come soluzione e stiamo cercando un partner (azienda o professionista) che abbia già esperienza con questo software e che possa fornirci i seguenti servizi: * Installazione e messa in produzione del sistema * Risoluzione di eventuali problemi che si possano verificare in futuro * formazione e approfondimento su oVirt/GlusterFS Grazie a tutti! Marco Tosato Ricerca e Sviluppo ________________________________ [Esapro]<http://www.esapro.it/> Esapro Srl Sede Legale Largo G. Donegani 2 20121 Milano (MI) REA CCIAA MI 2515336 P.I./C.F. 03836010409 Cap. Sociale Euro 111.111,00 i.v. Sede Amministrativa Via Cappello 12/a 35010 San Pietro in Gu (PD) T: +39 049 9490075 F: +39 049 5960992 www.esapro.it<http://www.esapro.it/> - info(a)esapro.it<mailto:info@esapro.it> [CSQ IQNet - UNI EN ISO 9001:2015] Ai sensi del D. Lgs. 196/2003 e successive modificazioni ed integrazioni si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario. Sono vietati la riproduzione e l'uso di questa e-mail in mancanza di autorizzazione del mittente. Se avete ricevuto questa e-mail per errore, vi invitiamo ad eliminarla senza copiarla e a non inoltrarla a terzi, dandocene gentilmente comunicazione. Grazie per la collaborazione / This message, for the D. Lgs n. 196/2003 (Privacy Code), may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation.

3 2

ovirt-node: freshly installed node: network interfaces not visible
by etienne.charlier＠reduspaceservices.eu 06 Jul '18

06 Jul '18

Hello, I'm deploying a test cluster to get used to the ovirt product. My ovirt ( 4.2.2) engine is deployed in a vmware virtual machine. I'm busy deploying 5 hosts using the ovirt-node iso. I have issue with the additional physical network interface ( used for vm trafic and iSCSI) In ovirt manager I can't see the physical network interfaces. It's thus not possible to assign logical network to physical interfaces and my hosts stays in "non operational" status. How should I configure the additional interfaces in the ovirt-node installer to have them recognized ? I somehow managed to configure one host and I can see a comment line in /etc/sysconfig/network-script/ifcfg-... saying vdsm has acquired the interface.... No Such line in the ifcfg-* file in non operational hosts.... Any idea ? Etienne

3 4

ENGINE_SSO_AUTH_URL configuration
by Hari Prasanth Loganathan 05 Jul '18

05 Jul '18

Hi Team, I want oVirt to point to my Authentication / Authorization HTTP URL, so I modified the following property in */etc/ovirt-engine/engine.conf.d/11-setup-sso.conf* #ENGINE_SSO_AUTH_URL="https://${ENGINE_FQDN}:443/ovirt-engine/sso" ENGINE_SSO_AUTH_URL="http://172.30.39.176:9090/api/auth/sso" #SSO_ENGINE_URL="https://${ENGINE_FQDN}:443/ovirt-engine/" SSO_ENGINE_URL="http://172.30.39.176:9090/api/auth/" I verified in the log and found the following message : engine.log:2018-07-04 15:12:46,238+05 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 42) [] Value of property 'ENGINE_SSO_AUTH_URL' is ' http://172.30.39.176:9090/api/auth/sso'. engine.log:2018-07-04 15:12:46,244+05 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 42) [] Value of property 'SSO_ENGINE_URL' is ' http://172.30.39.176:9090/api/auth/'. But still it is not point to my Authentication URL, Is there any other change we need to make to point the oVirt Authentication to my HTTP URL? Thanks, Hari

3 6

When creating a virtual machine with a template, there are times when disk cannot be recognized
by Pym 05 Jul '18

05 Jul '18

Hi: I use environment is ovirt4.2.0, first, I created a template, the template has already installed in the operating system, and then I use this template to create a virtual machine, sometimes can't find the disk happens, particular case is shown in figure: At this point, the virtual machine attaches disk again and cannot be recognized. However, the disk above is identifiable to other virtual machines, and the contents of disk still exist I would like to ask what causes this problem.

3 5

oVirt 4.2.3 to 4.2.4 failed
by Matt Simonsen 05 Jul '18

05 Jul '18

Hello, I did yum updates on 2 of my oVirt 4.2.3 nodes running the prebuilt node platform and it doesn't appear the updates worked. [root@node6-g8-h4 ~]# yum update Loaded plugins: enabled_repos_upload, fastestmirror, imgbased-persist, : package_upload, product-id, search-disabled-repos, subscription- : manager This system is not registered with an entitlement server. You can use subscription-manager to register. Loading mirror speeds from cached hostfile * ovirt-4.2-epel: linux.mirrors.es.net Resolving Dependencies --> Running transaction check ---> Package ovirt-node-ng-image-update.noarch 0:4.2.3.1-1.el7 will be updated ---> Package ovirt-node-ng-image-update.noarch 0:4.2.4-1.el7 will be obsoleting ---> Package ovirt-node-ng-image-update-placeholder.noarch 0:4.2.3.1-1.el7 will be obsoleted --> Finished Dependency Resolution Dependencies Resolved ========================================================================================================================= Package Arch Version Repository Size ========================================================================================================================= Installing: ovirt-node-ng-image-update noarch 4.2.4-1.el7 ovirt-4.2 647 M replacing ovirt-node-ng-image-update-placeholder.noarch 4.2.3.1-1.el7 Transaction Summary ========================================================================================================================= Install 1 Package Total download size: 647 M Is this ok [y/d/N]: y Downloading packages: warning: /var/cache/yum/x86_64/7/ovirt-4.2/packages/ovirt-node-ng-image-update-4.2.4-1.el7.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID fe590cb7: NOKEY Public key for ovirt-node-ng-image-update-4.2.4-1.el7.noarch.rpm is not installed ovirt-node-ng-image-update-4.2.4-1.el7.noarch.rpm | 647 MB 00:02:07 Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-ovirt-4.2 Importing GPG key 0xFE590CB7: Userid : "oVirt <infra(a)ovirt.org>" Fingerprint: 31a5 d783 7fad 7cb2 86cd 3469 ab8c 4f9d fe59 0cb7 Package : ovirt-release42-4.2.3.1-1.el7.noarch (installed) From : /etc/pki/rpm-gpg/RPM-GPG-ovirt-4.2 Is this ok [y/N]: y Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : ovirt-node-ng-image-update-4.2.4-1.el7.noarch 1/3 warning: %post(ovirt-node-ng-image-update-4.2.4-1.el7.noarch) scriptlet failed, exit status 1 Non-fatal POSTIN scriptlet failure in rpm package ovirt-node-ng-image-update-4.2.4-1.el7.noarch Erasing : ovirt-node-ng-image-update-placeholder-4.2.3.1-1.el7.noarch 2/3 Cleanup : ovirt-node-ng-image-update-4.2.3.1-1.el7.noarch 3/3 warning: file /usr/share/ovirt-node-ng/image/ovirt-node-ng-4.2.0-0.20180530.0.el7.squashfs.img: remove failed: No such file or directory Uploading Package Profile Unable to upload Package Profile Verifying : ovirt-node-ng-image-update-4.2.4-1.el7.noarch 1/3 Verifying : ovirt-node-ng-image-update-4.2.3.1-1.el7.noarch 2/3 Verifying : ovirt-node-ng-image-update-placeholder-4.2.3.1-1.el7.noarch 3/3 Installed: ovirt-node-ng-image-update.noarch 0:4.2.4-1.el7 Replaced: ovirt-node-ng-image-update-placeholder.noarch 0:4.2.3.1-1.el7 Complete! Uploading Enabled Repositories Report Loaded plugins: fastestmirror, product-id, subscription-manager This system is not registered with an entitlement server. You can use subscription-manager to register. Cannot upload enabled repos report, is this client registered? My engine shows the nodes as having no updates, however the major components including the kernel version and port 9090 admin GUI show 4.2.3 Is there anything I can provide to help diagnose the issue? [root@node6-g8-h4 ~]# rpm -qa | grep ovirt ovirt-imageio-common-1.3.1.2-0.el7.centos.noarch ovirt-host-deploy-1.7.3-1.el7.centos.noarch ovirt-vmconsole-host-1.0.5-4.el7.centos.noarch ovirt-provider-ovn-driver-1.2.10-1.el7.centos.noarch ovirt-engine-sdk-python-3.6.9.1-1.el7.noarch ovirt-setup-lib-1.1.4-1.el7.centos.noarch ovirt-release42-4.2.3.1-1.el7.noarch ovirt-imageio-daemon-1.3.1.2-0.el7.centos.noarch ovirt-hosted-engine-setup-2.2.20-1.el7.centos.noarch ovirt-host-dependencies-4.2.2-2.el7.centos.x86_64 ovirt-hosted-engine-ha-2.2.11-1.el7.centos.noarch ovirt-host-4.2.2-2.el7.centos.x86_64 ovirt-node-ng-image-update-4.2.4-1.el7.noarch ovirt-vmconsole-1.0.5-4.el7.centos.noarch ovirt-release-host-node-4.2.3.1-1.el7.noarch cockpit-ovirt-dashboard-0.11.24-1.el7.centos.noarch ovirt-node-ng-nodectl-4.2.0-0.20180524.0.el7.noarch python-ovirt-engine-sdk4-4.2.6-2.el7.centos.x86_64 [root@node6-g8-h4 ~]# yum update Loaded plugins: enabled_repos_upload, fastestmirror, imgbased-persist, package_upload, product-id, search-disabled-repos, subscription-manager This system is not registered with an entitlement server. You can use subscription-manager to register. Loading mirror speeds from cached hostfile * ovirt-4.2-epel: linux.mirrors.es.net No packages marked for update Uploading Enabled Repositories Report Loaded plugins: fastestmirror, product-id, subscription-manager This system is not registered with an entitlement server. You can use subscription-manager to register. Cannot upload enabled repos report, is this client registered?

6 29

Upgrading Hosted Engine version not supported by upgrade flow
by John Nguyen 05 Jul '18

05 Jul '18

Hello, While trying to upgrade a hosted engine to most recent 4.2.4 version, I'm receiving this error "Cluster INT-cluster is at a version 4.2 which is not supported by this upgrade flow. Please fix it before upgrading." I am unable to find a method of fixing the version. The software version on this engine is at 4.2.0.2-1el7.centos. And was installed from the ovirt-engine-appliance rpm. The host boxes are running Centos 7.4 I see this from ovirt-hosted-engine-setup log "DEDUG otopi.context._executeMethod:135 condition False INFO otopi.context.runSequence:735 Stage: Termination" Any guidance would be greatly appreciated, Thanks John

2 1

cloud -init variable name
by Nathanaël Blanchet 05 Jul '18

05 Jul '18

Hello, I use cloud-init to provision new vm and I'd like the hostname field to be a variable so as the name disk to be based on. i.e: my vm name is toto and the disk alias is toto_Disk1 Is there a way to easlily do such a thing? Thank you. -- Nathanaël Blanchet Supervision réseau Pôle Infrastrutures Informatiques 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

1 0

VM - Disks - Table too small
by Maton, Brett 05 Jul '18

05 Jul '18

The table which displays disk info is too small when moving disks between storage domains, probably because the progress bar is added below the 'locked' status but the table doesn't resize to accommodate the taller rows. Tried in Chrome, Edge, Firefox, Internet Explorer & Safari

2 2

oVirt 4.2 Self-hosted engine deployment fails at the end - "failed liveliness check"
by Aleksander Maricq 04 Jul '18

04 Jul '18

I successfully deployed an oVirt 4.2 self-hosted engine setup just over 6 months ago, and recently tried to re-install to modify hostnames on the engine and hypervisor. After I cleaned up and re-ran hosted-engine --deploy my install failed right at the end (TASK [Wait for the engine to come up on the target VM]) with the following error: ERROR otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:98 fatal and the following engine vm status: Engine status: {"reason": "failed liveliness check", "health": "bad", "vm": "up", "detail": "Up"} I opted to do a clean re-install of CentOS 7.5 and try again, but I keep running into the same error (see the attached logs). Some details that may or may not be helpful: - I'm reusing old mount points without formatting such as /home and my previous NFS-exported storage domain LVMs. The root partition, swap, /boot, and the engine destination LVMs were all re-formatted during the CentOS 7.5 install or prior to attempted oVirt install. - I'm reusing the MAC address from the previous attempt (so that it picks up the static entry I put on my router). - I currently only have entries in /etc/hosts to map FQDNs to IPs, but the install fails the same way whether or not I tell the process to populate the engine VM's hosts file. - Prior to my re-install of CentOS 7.5 I tried, and was able, to log into the engine appliance. I saw the hosted engine VM was listed as "down", and there was some temporary VM (leftover from the install process?) that I couldn't do anything to. Thanks in advance for your help!

2 2

remote-viewer Spice Problem on MacOS
by hpeyerl＠plusline.net 04 Jul '18

04 Jul '18

Hi all, we are currently experiencing a weird problem with oVirt and the spice console on MacOS: Occasionally when our Mac Users are connecting to a Spice Console of any oVirt VM it opens the usual window but just displays the message: "Connected to graphic server". When a Linux user now connects to it and closes the connection the Mac user can also connect again normally. I have tried https://www.spice-space.org/osx-client.html and https://rizvir.com/articles/ovirt-mac-console/ with exactly the same behaviour. The Issue appears on several different MacOS Versions and we believe it started after our upgrade to oVirt 4.2. MacOS Version: 10.13.5 oVirt Version: 4.2.3.8-1.el7 Any help or suggestion is greatly appreciated. Best regards, Hendrik

10 15

LDAP login extension
by Mariusz Kozakowski 04 Jul '18

04 Jul '18

Hello, We managed to setup oVirt Engine with your help, now we're facing other issue. I'm trying to configure AD auth for web portal, but unfortunately I got error during ovirt-engine-extension-aaa-ldap-setup: 2018-06-27 09:06:21,926+02 INFO ======================================================================== 2018-06-27 09:06:21,926+02 INFO ============================== Execution =============================== 2018-06-27 09:06:21,926+02 INFO ======================================================================== 2018-06-27 09:06:21,927+02 INFO Iteration: 0 2018-06-27 09:06:21,928+02 INFO Profile='ad' authn='ad-authn' authz='ad-authz' mapping='null' 2018-06-27 09:06:21,928+02 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='ad' user='username' 2018-06-27 09:06:21,945+02 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='ad' result=SUCCESS 2018-06-27 09:06:21,948+02 INFO --- Begin AuthRecord --- 2018-06-27 09:06:21,949+02 INFO AAA_AUTHN_AUTH_RECORD_PRINCIPAL: username 2018-06-27 09:06:21,949+02 INFO --- End AuthRecord --- 2018-06-27 09:06:21,950+02 INFO API: -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD principal='username' 2018-06-27 09:06:21,952+02 WARNING Ignoring records from pool: 'gc' 2018-06-27 09:06:21,953+02 SEVERE Cannot resolve principal 'username' Do you have any idea what's the issue and what we're missing? As it looks like credentials are correct - passing wrong username gives fail earlier, so issue is somewhere after authentication. -- Best regards/Pozdrawiam/MfG Mariusz Kozakowski Site Reliability Engineer Dansk Supermarked Group Baltic Business Park ul. 1 Maja 38-39 71-627 Szczecin dansksupermarked.com

2 1

oVirt Authentication and Authorization
by Hari Prasanth Loganathan 04 Jul '18

04 Jul '18

Hi Team, We have three components in our setup 1) Our Script (application using python) 2) Ovirt 3) LDAP (Also integrated to oVirt) 1) Our Python application is authenticating to LDAP and it creates a token for our application 2) For accessing the API's in oVIrt, I need to contact to the oVirt API which authenticates and creates a token for it 3) then I need to maintain the token of my application with its mapping to the ovirt tokenId in my application. When I want to hit any oVirt API, First I perform the token check in my application (using my application token) then I need to perform the ovirt token check in oVirt. 1) * I would like to know Is there a way to skip the authentication and authorization in oVIrt? * 2)* Or Is it possible to point the authentication check for oVirt (to my application / to some URL which I configure) which always return true and allow for all oVirt API's?* *I did some analysis and verified the oVirt code in github, Identified that it is going via a fliter in web.xml which points to the class, Is it possible to tune this? * <filter> <filter-name>RestApiSessionValidationFilter</filter-name> <filter-class>org.ovirt.engine.core.aaa.filters.RestApiSessionValidationFilter</filter-class> </filter> <filter-mapping> <filter-name>RestApiSessionValidationFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter> <filter-name>SessionValidationFilter</filter-name> <filter-class>org.ovirt.engine.core.aaa.filters.SessionValidationFilter</filter-class> </filter> <filter-mapping> <filter-name>SessionValidationFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter> <filter-name>SsoRestApiAuthFilter</filter-name> <filter-class>org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter</filter-class> </filter> <filter-mapping> <filter-name>SsoRestApiAuthFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter> <filter-name>SsoRestApiNegotiationFilter</filter-name> <filter-class>org.ovirt.engine.core.aaa.filters.SsoRestApiNegotiationFilter</filter-class> </filter> <filter-mapping> <filter-name>SsoRestApiNegotiationFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> If my query is not clear, please let me know. Thanks, Hari

3 5