- Users - oVirt List Archives

Slow on deleting file in VM with gluster as storage
by nha.pham 19 Jun '18

19 Jun '18

Hi all, I had an issue with delete file in VM. I used Ovirt with Gluster as Storage. I create new VM is fast, install everything is fast, also create and copy file. But when I delete large number of file in VM, it really slow. OS in VM is windows server 2012 r2. Ovirt 4.2.3 Gluster 3.12.9 Could you please help me on this case. Thanks.

2 1

Ovirt + Gluster : How do I gain access to the file systems of the VMs
by Hanson Turner 19 Jun '18

19 Jun '18

Hi Guys, My engine has corrupted, and while waiting for help, I'd like to see if I can pull some data off the VM's to re purpose back onto dedicated hardware. Our setup is/was a gluster based storage system for VM's. The gluster data storage I'm assuming is okay, I think the hosted engine is hosed, and needs restored, but that's another thread. I can copy the raw disk file off of the gluster data domain. What's the best way to mount it short of importing it into another gluster domain? With vmware, we can grab the disk file and move it from server to server without issue. You can mount and explore contents with workstation. What do we have available to us for ovirt? Thanks,

2 1

glusterfs backup-volfile-servers lost
by g.vasilopoulos＠uoc.gr 19 Jun '18

19 Jun '18

I have a 4 node setup (centos 7) with hosted engine on glusterfs (replica 3 arbiter1). Gluster fs is like this ohost01 104G brick (real data) ohost02 104g brick (real data) ohost04 104g brick (arbiter) ohost05 104g partition used as nfs-storage. hosted engine is on gluster. I also have an fc domain of 3,6 TB mount of gluster is like this storage=172.16.224.10:/engine mnt_options=backup-volfile-servers=172.16.224.11:172.16.224.13 172.16.224.10 is ohost01 storage network 172.16.224.12 is ohost02 storage network 172.16.224.13 is ohost04 storage network Today I upgraded all nodes. I did it like this: hosted-engine was running on ohost05 at the time Put ohost04 (arbiter) on maintenance and did upgrade (ok) Same with ohost02 Ohost01 was spm so I did ohost05 spm then put ohost01 on maintenance and then upgraded it. I notticed that engine VM paused during the process (which usualy does not happen) as I have backup-volfile-servers mount option. But today I notticed that this option is ignored. On the hosts I also noted that mount is like this 172.16.224.10:/engine on /rhev/data-center/mnt/glusterSD/172.16.224.10:_engine type fuse.glusterfs (rw,relatime,user_id=0,group_id=0,default_permissions,allow_other,max_read=131072) so reduduncy is gone from gluster and I cannot figure out why. If I restart ohost01 (after maintenance) hosted engine get paused until ohost01 comes back up. How can I solve this issue

2 6

Lost host after upgrade/reboot
by Nicolas Ecarnot 19 Jun '18

19 Jun '18

Hello, TL;DR : engine stops talking with rebooted host. [oVirt 4.2.3.5-1.el7.centos] - From the web gui, upgrading a host, allowing the reboot checkbox checked - upgrade is OK (/var/log/yum.log is showing successful updates + the Ansible host deploy log is also OK) - reboot is OK (clean, SSH OK...) - the host eventually appears as "Install failed" - the engine.log is telling : > 2018-06-19 10:02:24,896+02 ERROR > [org.ovirt.engine.core.bll.SshHostRebootCommand] > (EE-ManagedThreadFactory-commandCoordinator-Thread-7) [6e32b3ac] SSH > reboot command failed on host 'serv-hv-prds06': SSH session timeout > host 'root@ serv-hv-prds06' Stdout: Stderr: 2018-06-19 > 10:02:25,028+02 ERROR > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (EE-ManagedThreadFactory-commandCoordinator-Thread-7) [6e32b3ac] > EVENT_ID: SYSTEM_FAILED_SSH_HOST_RESTART(198), A restart usin g SSH > initiated by the engine to Host serv-hv-prds06 has failed. 2018-06-19 > 10:02:25,185+02 INFO > [org.ovirt.engine.core.vdsbroker.SetVdsStatusVDSCommand] > (EE-ManagedThreadFactory-commandCoordinator-Thread-7) [6e32b3ac] > START, SetVdsStatusVDSCommand(HostName = serv-hv-prds06, > SetVdsStatusVDSCom > mandParameters:{hostId='9c1566a4-8432-4de6-b30d-fd3b8e5fafca', > status='InstallFailed', nonOperationalReason='NONE', > stopSpmFailureLogged='false', maintenanceReason='null'}), log id: > 833f9bd 2018-06-19 10:02:25,191+02 INFO > [org.ovirt.engine.core.vdsbroker.SetVdsStatusVDSCommand] > (EE-ManagedThreadFactory-commandCoordinator-Thread-7) [6e32b3ac] > FINISH, SetVdsStatusVDSCommand, log id: 833f9bd 2018-06-19 > 10:02:25,191+02 ERROR > [org.ovirt.engine.core.bll.hostdeploy.UpgradeHostInternalCommand] > (EE-ManagedThreadFactory-commandCoordinator-Thread-7) [6e32b3ac] > Engine failed to restart via ssh host 'serv-hv-prds06' ('9c1566a4- > 8432-4de6-b30d-fd3b8e5fafca') after upgrade 2018-06-19 > 10:02:25,256+02 ERROR > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (EE-ManagedThreadFactory-commandCoordinator-Thread-7) > [8b7c6e7d-1a22-407c-818b-849e67b94051] EVENT_ID: > HOST_UPGRADE_FAILED(841 ), Failed to upgrade Host serv-hv-prds06 > (User: necarnot@sdis.isere.fr@SDIS38-authz). 2018-06-19 > 10:02:30,755+02 ERROR > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (EE-ManagedThreadFactory-engineScheduled-Thread-69) > [8b7c6e7d-1a22-407c-818b-849e67b94051] EVENT_ID: > HOST_UPGRADE_FAILED(841), Failed to upgrade Host serv-hv-prds06 > (User: necarnot@sdis.isere.fr@SDIS38-authz). - Manually activating the host puts it back on track without issue The usual SSH communications between the engine and the host are usually very sound (VM migrations, maintenance...). On this oVirt DC, I reproduced this issue twice on 2 different hosts. In this engine log above, you see that I'm using my account to manage this engine, as I 'm doing for years with no issue. I'll try the exact same path with admin@internal to see what could change, but I don't see the link. What other logs could I give you to debug this? Regards, -- Nicolas ECARNOT

1 1

oVirt Node 4.1 at www.ovirt.org/node/ is 404
by clam2718＠gmail.com 19 Jun '18

19 Jun '18

I am trying to download Node 4.1 from https://www.ovirt.org/node but am receiving a 404 error. Is there an alternative link to try for the latest stable release? Thanks, Charles

3 2

RHEL 7.5 as an oVirt host - missing packages
by jasonmicron＠gmail.com 19 Jun '18

19 Jun '18

Hello everyone, I believe there is a potential issue with the RHEL 7 yum repos and at least one missing RPM to convert a pre-existing RHEL 7.5 system into an oVirt host node. I have the following YUM repos enabled in my RHEL 7 system, according to the documentation: rhel-7-server-rpms rhel-7-server-optional-rpms rhel-7-server-extras-rpms I installed the oVirt 4.2 RPM: ovirt-release42-4.2.3.1-1.el7.noarch I then go to the engine GUI to add the new host, and during the installation process I am informed that there is a YUM transaction error with the following package being unavailable: python-qpid-proton (as a dependency install for the python-gofer-proton package) I dug around Red Hat's YUM repos and discovered that this package only exists in the rhel-7-server-satellite-tools-6.{1..3}-rpms YUM repos from the official Red Hat site. I tried enabling this repo (specifically the rhel-7-server-satellite-tools-6.3-rpms repo) to see which version of the package would be installed, and it appears to be a custom spin for Satellite in the release version: ============================================================================================================= Package Arch Version Repository Size ============================================================================================================= Installing: python-gofer-proton noarch 2.7.7-3.el7sat lab1-rhel-7-server-satellite-tools-6.3-rpms 54 k Installing for dependencies: python-gofer noarch 2.7.7-3.el7sat lab1-rhel-7-server-satellite-tools-6.3-rpms 132 k python-qpid-proton x86_64 0.16.0-7.el7 lab1-rhel-7-server-satellite-tools-6.3-rpms 216 k qpid-proton-c x86_64 0.16.0-7.el7 lab1-rhel-7-server-satellite-tools-6.3-rpms 131 k Transaction Summary ============================================================================================================== Install 1 Package (+3 Dependent packages) Since I shouldn't even require this repo according to the official oVirt install documentation for hosts, and the fact that these packages appear to be custom spins (el7sat) versions, I was curious if this is OK to use for oVirt or if I have encountered a dependency bug with RHEL 7.5 and oVirt 4.2? Any advice would be welcomed.

2 2

Gluster Deployment: Repositories, Packages
by femi adegoke 19 Jun '18

19 Jun '18

In Step 2 of the HE deployment what should be filled in here? Repositories: ?? Packages: ??

4 5

oVirt 4.2 vm-portal console
by Staniforth, Paul 19 Jun '18

19 Jun '18

Hello, I have installed a test system for oVirt 4.2 and it seems that in the vm portal I can't change the console to vnc or spice+vnc. It seems that this is only available in the admin portal. Am I missing something? Thanks, Paul S. To view the terms under which this email is distributed, please go to:- http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html

2 1

Ovirt Node NG (4.2.3.1-0.20180530) Boot fail ISCSI using ibft after installation
by Ralf Schenk 18 Jun '18

18 Jun '18

Hello, I successfully installed Ovirt Node NG from ISO to an ISCSI target attached via first network interface by using following extensions to the grub cmdline: "rd.iscsi.ibft=1 ip=ibft ip=eno2:dhcp" I want to use the server as diskless ovirt-node-ng Server. After successful install the system reboots and starts up but it fails later in dracut even having detected correctly the disk and all the LV's. I think "iscsistart" is run multiple times even after already being logged in to the ISCSI-Target and that fails finally like that: *[ 147.644872] localhost dracut-initqueue[1075]: iscsistart: initiator reported error (15 - session exists)* [ 147.645588] localhost dracut-initqueue[1075]: iscsistart: Logging into iqn.2018-01.de.databay.office:storage01.epycdphv02-disk1 172.16.1.3:3260,1 [ 147.651027] localhost dracut-initqueue[1075]: Warning: 'iscsistart -b ' failed with return code 0 [ 147.807510] localhost systemd[1]: Starting Login iSCSI Target... [ 147.809293] localhost iscsistart[6716]: iscsistart: TargetName not set. Exiting iscsistart [ 147.813625] localhost systemd[1]: iscsistart_iscsi.service: main process exited, code=exited, status=7/NOTRUNNING [ 147.824897] localhost systemd[1]: Failed to start Login iSCSI Target. [ 147.825050] localhost systemd[1]: Unit iscsistart_iscsi.service entered failed state. [ 147.825185] localhost systemd[1]: iscsistart_iscsi.service failed. -- Mit freundlichen Grüßen Ralf Schenk

2 1

HostedEngine and affinity groups
by tehnic＠take3.ro 18 Jun '18

18 Jun '18

Hi, i operate a 3 node ovirt42 cluster (hyperconverged). Now i would like to isolate the HostedEngine from the other VMs. The reason is to minimize the impact of outage of one of the nodes. When the node with the HE is away there is no impact at all on the running VMs. If one of the other nodes goes down, then i have still a running HE which restarts the missing VMs on remaining nodes fast again. I cannot use hard affinity because in case of failure i need all resources of the 2 remaining modes, so i configured a soft negative affinity group for every VM between this VM and the HE. As a first test i migrated the HE to a node with VMs but even after a while nothing happened. I would have expected that either the HE or the VMs on this node would have been migrated to fullfill the soft negative affinity. Now my questions: Are my thoughts correct? Is there a better solution than making one (soft negative) affinity group for every VM to isolate from HE? Does the affinity group enforcement engine work at all with soft rules? Regards, Robert

2 1

Ovirt 4.2 hosted engine deploy failed
by Lakhwinder Rai 18 Jun '18

18 Jun '18

i have error while installing hosted engine.if anybody have solution for this,please help i stuck here from two days. [ INFO ] TASK [Wait for the host to be up] [ ERROR ] fatal: [localhost]: FAILED! => {"ansible_facts": {"ovirt_hosts": []}, "attempts": 120, "changed": false} [ INFO ] TASK [include_tasks] [ INFO ] ok: [localhost] [ INFO ] TASK [Remove local vm dir] [ INFO ] changed: [localhost] [ INFO ] TASK [Notify the user about a failure] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "The system may not be provisioned according to the playbook results: please check the logs for the issue, fix accordingly or re-deploy from scratch.\n"} thanks

3 2

VM can't start: Unknown CPU-Model
by Tobias Scheinert 18 Jun '18

18 Jun '18

Hi, we see here a confusing problem. A college reboots/shutdown his VMs for maintenance. After that he starts the VMs (~20), but one of them throws following error: > VM <name> is down with error. Exit message: internal error: Unknown CPU-Model SandyBridge,+spec-ctrl All nodes of the clusters are reporting: > CPU Type: > Intel SandyBridge IBRS Family And the cluster is configured with: > Cluster CPU Type: > Intel SandyBridge IBRS Family My quick fix for the vm was, that I used a specific (not the cluster default) CPU-Model without the spectre/meltdown mitigation: > Guest CPU Type: > SandyBridge I've also tried to select manually "SandyBridge,+spec-ctrl". But when I do this the wizard blocks and surround the field with a red border (see picture in the attachment). Any idea? Greeting Tobias

1 0

ovirt 4.2 and hugepages
by Gianluca Cecchi 18 Jun '18

18 Jun '18

A part from configuring high performance vm, that gives me no high availability. Can I allocate huge pages using vdsm-hook-hugepages-4.19.31-1.el7.centos.noarch it seems that after updating an environment to 4.2 I'm not able to start a VM configured with the custom property I get Th ehost xxxxx did not satisfy internal filter HugePages because there are not enough free huge pages to run the VM But on host I have # cat /proc/meminfo | grep -i huge AnonHugePages: 0 kB HugePages_Total: 60000 HugePages_Free: 60000 HugePages_Rsvd: 0 HugePages_Surp: 0 Hugepagesize: 2048 kB # and the custom property is configured to allocate 8200 huge pages to the guest The gropu configured in sysctl.d/10-hugepages.conf is vm.hugetlb_shm_group = 36 Do I have to set anything in /etc/securily/limits.d/ for qemu user? Thanks In advance, Gainluca

2 2

Gluster not synicng changes between nodes for engine
by Hanson Turner 18 Jun '18

18 Jun '18

Hi Guys, I've got 60 some odd files for each of the nodes in the cluster, they don't seem to be syncing. Running a volume heal engine full, reports successful. Running volume heal engine info reports the same files, and doesn't seem to be syncing. Running a volume heal engine info split-brain, there's nothing listed in split-brain. Peers show as connected. Gluster volumes are started/up. Hosted-engine --vm-status reports : The hosted engine configuration has not been retrieved from shared storage. Please ensure that ovirt-ha-agent is running and the storage server is reachable. This is leaving the cluster in an engine down with all vm's down state... Thanks,

1 1

Install CiscoISE VM on oVirt
by Anantha Raghava 18 Jun '18

18 Jun '18

Hi, I am not sure whether I should write it here. However the documents referred to specifies that I have change something in BIOS of VM & there is no way to get access to BIOS. Hence I am writing here. I am trying to install Cisco ISE in a VM on oVirt. The installation process halts reporting "Unsupported Hardware Found. The Cisco UDI (Unique Device Identifier) found on this appliance does not match with supported UDI of the product being Installed. Exiting installation" However it works perfectly on VMWare ESXi, VMWare Workstation and VMWare Fusion. In fact I tested this in VMWare Workstation and VMWare Fusion. The same ISO file throws above error. Cisco ISE is based on RHEL 7 and it is hardened. Has any one attempted to install Cisco ISE in oVirt? Any one throw some light? My oVirt Version 4.2.3 and Hosts are on 4.1.9 Thanks & regards, Anantha Raghava

2 2

Moving from thin to preallocated storage domains
by Albl, Oliver 17 Jun '18

17 Jun '18

Hi all, I have to move some FC storage domains from thin to preallocated. I would set the storage domain to maintenance, convert the LUN from thin to preallocated on the array, remove "Discard After Delete" from the advanced settings of the storage domain and active it again. Is there anything else I need to take care of? All the best, Oliver

4 4

Non-responsive vm's due to crashed host and hosted vm liveliness check fails
by clam2718＠gmail.com 15 Jun '18

15 Jun '18

Dear Community: The local drive on a host running ovirt-node-ng-4.1.9 in a three node cluster failed. I have production JIRA and Postres running on it at the time, not in HA, just simple vm's. Storage is via NFS on a Synology NAS. Hosted Engine was on a different host, but JIRA and Postgres vm's showed nonresponsive. I tried different things but then stupidly thought that upgrading my Hosted Engine would reinitialize the vm's that were on the failed host. Update of HE seemed to go well (output below) but now my Hosted Engine, while up, fails the liveliness check and the web management console is unavailable. I cannot console into the HE from the host it is running on. Below are the results of my attempts to console into the Hosted Engine. Please help! I have search forums, lists and Google but have not been able to fix this. My coworkers and manager are anxious. --- When I try "hosted-engine --console" after setting the console password I get The engine VM is running on this host Connected to domain HostedEngine Escape character is ^] _ The prompt is non-responsive except for the escape character key combo. --- "virsh -r list" gives ID 3, Name: HostedEngine, State: running "virsh -r console HostedEngine" gives Connected to domain HostedEngine Escape character is ^] error: operation forbidden: read only access prevents virDomainOpenConsole "virsh -r vncdisplay HostedEngine" gives "0:0" and returns me to prompt --- I am SSHed into the host running my Hosted Engine from a CentOS7 minimal install with packages xorg-x11-server-Xorg, xorg-x11-xauth and xorg-x11-apps installed. The result of "grep -i X11Forwarding /etc/ssh/sshd_config" shows it set to "Yes". I SSH into the host using "ssh -Y root(a)xxx.xxx.xxx.xxx" I am logged into the CentOS7 minimal install as root. I know root is poor practice but was trying to minimize anything that could be causing an issue. --- Below are the results of my attempt to update Hosted Engine (slightly redacted to remove personal info): --== CONFIGURATION PREVIEW ==-- Default SAN wipe after delete : False Firewall manager : firewalld Update Firewall : True Host FQDN : ovengineint.xdomainx.tld Upgrade packages : True Engine database secured connection : False Engine database user name : engine Engine database name : engine Engine database host : localhost Engine database port : 5432 Engine database host name validation : False Engine installation : True PKI organization : xdomainx.tld Set up ovirt-provider-ovn : True Configure WebSocket Proxy : True DWH installation : True DWH database secured connection : False DWH database host : localhost DWH database user name : ovirt_engine_history DWH database name : ovirt_engine_history DWH database port : 5432 DWH database host name validation : False Configure Image I/O Proxy : True Configure VMConsole Proxy : True --== SUMMARY ==-- [ INFO ] Restarting httpd Web access is enabled at: http://ovengineint.xdomainx.tld:80/ovirt-engine https://ovengineint.xdomainx.tld:443/ovirt-engine Internal CA XX:XX:XX:XX... SSH fingerprint: SHA256:xxxxxxxxxx... --== END OF SUMMARY ==-- [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20180502165652-88pkpi.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20180502170149-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ INFO ] Execution of setup completed successfully Again, thank you so very much for any suggestions! I have found many answers on this mailing list archive to be of great insight and help. Respectfully, Charles

3 11

User agent for Ovirt 4.2
by Jim Kusznir 15 Jun '18

15 Jun '18

Hi: I haven't managed to find the new / current repo/source for the ovirt guest agent for the 4.2 upgrade. All my VMs now say that they need the agent. Googles keep referring me to old / broke / non-existent repos. Where do I find the 4.2 agent (or does the 4.2 agent even exist?) Thanks! --Jim

4 5

Error UI in engine
by Spickiy Nikita 15 Jun '18

15 Jun '18

Hi, i use engine 4.2.3.8-1.el7 version. When i try opening setting Storage > Volumes > MyVolume i get error at the top of the screen. In log UI https://paste.fedoraproject.org/paste/---B4tGrLbAVYpl1TvR0sg/raw. How to fix it?

2 1

[ANN] oVirt 4.2.4 Fourth Release Candidate is now available
by Sandro Bonazzola 15 Jun '18

15 Jun '18

The oVirt Project is pleased to announce the availability of the oVirt 4.2.4 Fourth Release Candidate, as of June 14th, 2018. This update is a release candidate of the fourth in a series of stabilization updates to the 4.2 series. This is pre-release software. This pre-release should not to be used in production. This release is available now for: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.5 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.5 or later * CentOS Linux (or similar) 7.5 or later See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is available - oVirt Node is available [2] Additional Resources: * Read more about the oVirt 4.2.4 release highlights: http://www.ovirt.org/release/4.2.4/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.2.4/ [2] http://resources.ovirt.org/pub/ovirt-4.2-pre/iso/ -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig>

1 0

Re: OVA export/import
by RabidCicada 15 Jun '18

15 Jun '18

Third attempt to send to list also > Yaniv, > Most of this is obe...but I'll answer the questions. It's been resolved > as in my other email to this chain. > > > On Thu, Jun 14, 2018, 4:56 PM Yaniv Kaul <ykaul(a)redhat.com> wrote: > >> >> >> On Wed, Jun 13, 2018, 4:05 PM RabidCicada <rabidcicada(a)gmail.com> wrote: >> >>> All, >>> I recently tried to used the OVA export/import functionality. It >>> seems I misunderstood the intentions. I expected OVA export/import to >>> be reciprocal functionalities. I expected what we export as OVA to be >>> importable as OVA in ovirt. >>> >>> What I have found is the following: >>> >>> * It seems OVA export does export an OVA, though the format is not >>> spec compliant >>> >> >> Which spec? >> > I believe every version of the dmtd ovf specification. > >> >> * We use 'disk/' in the HostResource xml field instead of '/disk/' >>> for example in the ovf. >>> >> >> Who's 'we'? >> > Ovirt software/group. I was including myself in a friendly manner soas to > not sound accusatory. I know it's a group effort :). > > >> * It seems OVA import is intended specifically for VMWare OVA's? >>> >> >> That's a common case, but we can look at other OVAs. The problem is that >> the spec is quite loose. >> Y. >> > > Agreed. I know that's why it's hard to be inter-compatible. >

1 0

OVA export/import
by RabidCicada 14 Jun '18

14 Jun '18

All, I recently tried to used the OVA export/import functionality. It seems I misunderstood the intentions. I expected OVA export/import to be reciprocal functionalities. I expected what we export as OVA to be importable as OVA in ovirt. What I have found is the following: * It seems OVA export does export an OVA, though the format is not spec compliant * We use 'disk/' in the HostResource xml field instead of '/disk/' for example in the ovf. * It seems OVA import is intended specifically for VMWare OVA's? * I thought I read about export domains being deprecated, and incorrectly assumed the recently added OVA export/import was to make things better for one off import/export. Can anyone clarify the following: * Is OVA import really just VMWare OVA's? * Are we really not spec compliant with the OVA/OVF format as my example above shows? OR do I misunderstand something? * After spending my time yesterday, I recall now that the deprecation of export domain is in favor of detaching and re-attaching ANY data domain. * What is the purpose of our OVA export if we ourselves indeed cannot import our own OVA? Or can you tell me how we import our own if I'm wrong. Please feel free to overshare details :), as any context will help prevent more confusion on my part. ~Kyle

3 8

Ovirt-Hosted-Engine-Install-Purge Ansible Script Snippet
by RabidCicada 14 Jun '18

14 Jun '18

All, I put together a full purge ansible script for CentOS. I figured I'd share it here. I ran into many issues with spurious failures of installs when I would try to reinstall ovirt on CentOS after having "removed" it. I was developing an automated install of our own software along with ovirt but along the way I had to reinstall on the same box numerous times. Initially I'd get spurious failures from leftover cruft that would get in the way. I eventually found this:https://www.ovirt.org/documentation/how-to/hosted-engine/#recoving-fro… and then crafted my own ansible purge script. It uses ovirts own engine cleanup script first if it exists, then fully cleans every other thing that can affect it. Tested on CentOS, probably will work on other distros without too much trouble. Hopefully someone saves themselves some grief - name: Clean Old Install #This attempts to remove all old cruft from previous install attempts #The reason we include the ovirt packages is so that they can be reinstall #At potentially newer versions along with dependency packages block: - name: Detect existing cleanup script shell: which ovirt-hosted-engine-cleanup | cat register: ohes_cleanup - name: Debug ohes_cleanup.stdout debug: var: ohes_cleanup.stdout - name: Run Ovirt's Hosted Engine Cleanup Script shell: ovirt-hosted-engine-cleanup -q when: ohes_cleanup.stdout != "" - name: Clean old packages package: name: "{{item}}" state: absent with_items: - "*vdsm*" - "*ovirt*" - "*libvirt*" - "*cockpit*" - name: Remove old configs etc shell: "rm -rf /etc/{{item}}" args: warn: False with_items: - "/etc/*ovirt*" - "/etc/*vdsm*" - "/etc/libvirt/qemu/HostedEngine*" - "/etc/*libvirt*" - "/etc/guacamole" - "/etc/pki/vdsm" - "/etc/pki/libvirt" - "/etc/pki/CA" - "/etc/pki/keystore" - "/etc/ovirt-hosted-engine" - "/var/lib/libvirt/" - "/var/lib/vdsm/" - "/var/lib/ovirt-hosted-engine-*" - "/var/log/ovirt-hosted-engine-setup/" - "/var/cache/libvirt/" - "/etc/libvirt/nwfilter/vdsm-no-mac-spoofing.xml" - "/var/cache/tomcat/temp/*" - "/var/cache/tomcat/work/Catalina/localhost/*" - "/usr/share/tomcat/webapps/guacamole" - "/usr/share/tomcat/webapps/guacamole.war" - "/etc/guacamole/extensions/guacamole*" - name: Clean old repo files shell: "rm -rf /etc/yum.repos.d/{{item}}" args: warn: False with_items: - "ovirt*" - "virt*" - name: clean interface configs shell: "rm -rf /etc/sysconfig/network-scripts/ifcfg-ovirtmgmt" args: warn: False - name: clean network stuff shell: "{{item}}" args: warn: False with_items: - "brctl delbr ovirtmgmt | cat" - "ip link del ovirtmgmt | cat" - "ip link del dummy0 | cat" - "ip link del virbr0 | cat" - "ip link del virbr0-nic | cat" - 'ip link del \;vdsmdummy\; | cat'

1 1

LDAP logins do not work
by Michael Watters 14 Jun '18

14 Jun '18

I've ran the ovirt-engine-extension-aaa-ldap-setup command to configure LDAP authentication using Active Directory however I am unable to authenticate using valid credentials. Here is the output show while testing the login flow. [ INFO ] Executing login sequence... Login output: 2018-06-13 11:27:17,931-04 INFO ======================================================================== 2018-06-13 11:27:17,960-04 INFO ============================ Initialization ============================ 2018-06-13 11:27:17,960-04 INFO ======================================================================== 2018-06-13 11:27:17,999-04 INFO Loading extension 'example.com-authn' 2018-06-13 11:27:18,072-04 INFO Extension 'example.com-authn' loaded 2018-06-13 11:27:18,077-04 INFO Loading extension 'example.com-authz' 2018-06-13 11:27:18,089-04 INFO Extension 'example.com-authz' loaded 2018-06-13 11:27:18,090-04 INFO Initializing extension 'example.com-authn' 2018-06-13 11:27:18,091-04 INFO [ovirt-engine-extension-aaa-ldap.authn::example.com-authn] Creating LDAP pool 'authz' 2018-06-13 11:27:19,574-04 WARNING Exception: 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839 2018-06-13 11:27:19,576-04 INFO [ovirt-engine-extension-aaa-ldap.authn::example.com-authn] Creating LDAP pool 'authn' 2018-06-13 11:27:20,668-04 INFO [ovirt-engine-extension-aaa-ldap.authn::example.com-authn] LDAP pool 'authn' information: vendor='null' version='null' 2018-06-13 11:27:20,674-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:20,676-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:20,676-04 INFO Extension 'example.com-authn' initialized 2018-06-13 11:27:20,677-04 INFO Initializing extension 'example.com-authz' 2018-06-13 11:27:20,679-04 INFO [ovirt-engine-extension-aaa-ldap.authz::example.com-authz] Creating LDAP pool 'authz' 2018-06-13 11:27:21,270-04 WARNING Exception: 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839 2018-06-13 11:27:21,273-04 INFO [ovirt-engine-extension-aaa-ldap.authz::example.com-authz] Creating LDAP pool 'gc' 2018-06-13 11:27:22,065-04 WARNING Exception: 80090308: LdapErr: DSID-0C090400, comment: AcceptSecurityContext error, data 52e, v1db1 2018-06-13 11:27:22,069-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:22,072-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:22,085-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:22,086-04 INFO [ovirt-engine-extension-aaa-ldap.authz::example.com-authz] Available Namespaces: [] 2018-06-13 11:27:22,087-04 INFO Extension 'example.com-authz' initialized 2018-06-13 11:27:22,088-04 INFO Start of enabled extensions list 2018-06-13 11:27:22,089-04 INFO Instance name: 'example.com-authz', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.7', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.7-1.el7.centos', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpPQluAI/extensions.d/example.com-authz.properties', Initialized: 'true' 2018-06-13 11:27:22,089-04 INFO Instance name: 'example.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.7', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.7-1.el7.centos', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpPQluAI/extensions.d/example.com-authn.properties', Initialized: 'true' 2018-06-13 11:27:22,090-04 INFO End of enabled extensions list 2018-06-13 11:27:22,090-04 INFO ======================================================================== 2018-06-13 11:27:22,090-04 INFO ============================== Execution =============================== 2018-06-13 11:27:22,091-04 INFO ======================================================================== 2018-06-13 11:27:22,091-04 INFO Iteration: 0 2018-06-13 11:27:22,093-04 INFO Profile='example.com' authn='example.com-authn' authz='example.com-authz' mapping='null' 2018-06-13 11:27:22,094-04 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='example.com' user='d861703' 2018-06-13 11:27:22,251-04 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='example.com' result=CREDENTIALS_INCORRECT 2018-06-13 11:27:22,262-04 SEVERE Authn.Result code is: CREDENTIALS_INCORRECT [ ERROR ] Login sequence failed Does anybody know what LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839 means? Is this a TLS issue? I am quite certain the password I'm using is correct.

2 4

VM created is reachable from only oVirt node
by sweettriplek＠gmail.com 14 Jun '18

14 Jun '18

VM running with centos is not reaching to any other network other than oVirt node. I tried to apply no network filer, clean-filter while creating vNIC interfaces but no luck. Setup configurations: - oVirt Engine and Node running on different machines - OVirt running on cent OS Please help me to resolve this issue, thanks in advance.

2 2