- Users - oVirt List Archives

Local physical disk directly on the VM
by Jorge Visentini 17 Jul '23

17 Jul '23

Hi. Is it possible to deliver a physical disk straight to the VM? What's my idea... I have a local disk on the server and I want to deliver it directly to a VM, is it possible? For example, take the hypervisor disk /dev/disk/by-id/ata-INTEL_SSDSC2KB480G8_PHYF117203AA480BGN and hand it to the VM. BR. -- Att, Jorge Visentini +55 55 98432-9868

1 0

Re: Future of the oVirt CSI Driver
by Mike Rochefort 11 Jul '23

11 Jul '23

On 7/11/23 2:58 AM, Sandro Bonazzola wrote: > I think that if OKD is dropping the oVirt CSI Driver this also will mean > nobody will be actively developing it anymore. I asked about this on the Kubernetes Slack workspace and Vadim mentioned that in order for the OKD project to continue providing oVirt support, someone with oVirt knowledge and operator development would need to step up. It would also require forking the installer and a few other projects, which is something the OKD team spent a lot of effort to not have to do anymore during the 4.x series. https://github.com/openshift/installer Looking at the OpenShift Installer git, so far what's changed is an admin can no longer specify oVirt as a deployment target. According to Jira, there will be a second phase of the deprecation where the actual provisioning pieces (e.g. Terraform) will be removed, but that probably won't be for 4.14. https://issues.redhat.com//browse/OCPBUGS-14818 But not having anyone develop the CSI driver means it will likely end up with bit rot. With OpenShift 4.14 the oVirt platform becomes less attractive to use, though IPI/UPI installations should be possible. A different storage backend would probably be recommended, however. -- Mike Rochefort

2 1

Simple question - oVirt el8 with UEFI or el9 without UEFI?
by Jorge Visentini 11 Jul '23

11 Jul '23

We are in the process of migrating from version 4.4 to 4.5 and we are in doubt whether we use version el8 with UEFI or el9 without UEFI? What do you recommend? BR. -- Att, Jorge Visentini +55 55 98432-9868

1 0

Future of the oVirt CSI Driver
by Michael Rochefort 11 Jul '23

11 Jul '23

Starting with OpenShift / OKD 4.14, the oVirt CSI driver will no longer be delivered as part of the platform and the oVirt provisioning artifacts will not be included in the installer. Does this at all impact the development and maintenance plans for the driver itself? Original archived driver: https://github.com/oVirt/csi-driver OpenShift forked driver: https://github.com/openshift/ovirt-csi-driver Cheers, Mike

2 1

oVirt Self-Hosted Deploy in lopping during search available subnet
by Lucy Silvestre 11 Jul '23

11 Jul '23

Hi, I have been stuck for weeks in this problem during self-hosted deployment. Does someone have suggestions to resolve this? Error: The Deploy loops in this part until the Deployment Fail: [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Get ip route] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Fail if can't find an available subnet] [ INFO ] skipping: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Set new IPv4 subnet prefix] [ INFO ] skipping: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Search again with another prefix] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Define 3rd chunk] [ INFO ] skipping: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Set 3rd chunk] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Get ip route] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Fail if can't find an available subnet] [ INFO ] skipping: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Set new IPv4 subnet prefix] [ INFO ] skipping: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Search again with another prefix] [ INFO ] ok: [localhost] Details: OS: Oracle Linux 8.8 (minimum installation) and updated oVirt 4.4 ovirt-hosted-engine-setup and ovirt-engine-appliance installed Network device used in the Host machine: eno1 - 192.168.10.x and I also tried with Bond. I made a reservation on DHCP for these IPs used during the installation. I tried by terminal and Cockpit, and it is the same issue. I tried with the command: hosted-engine --deploy --4 I tried with DHCP and Static IP I will appreciate every help. Thank you.

2 1

ACTION_TYPE_FAILED_DISK_IS_BEING_TRANSFERRED
by eshwayri＠gmail.com 08 Jul '23

08 Jul '23

System unexpectedly lost power. Now when I try to start one of the VMs I get: "ACTION_TYPE_FAILED_DISK_IS_BEING_TRANSFERRED". This may be due to a failed backup earlier in the week. There are no active tasks against this VM or its disk at this time. The disk shows OK in the storage view. Any ideas?

1 3

Suggestion to switch to nightly
by Sandro Bonazzola 07 Jul '23

07 Jul '23

Hi, As you probably noticed there were no regular releases after oVirt 4.5.4 <https://ovirt.org/release/4.5.4/> in December 2022. Despite the calls to action to the community and to the companies involved with oVirt, there have been no uptake of the leading of the oVirt project yet. The developers at Red Hat still dedicating time to the project are now facing the fact they lack the time to do formal releases despite they keep fixing platform regressions like the recent ones due to the new ansible changes. That makes a nightly snapshot setup a more stable environment than oVirt 4.5.4. For this reason, we would like to suggest the user community to enable nightly repositories for oVirt by following the procedure at: https://www.ovirt.org/develop/dev-process/install-nightly-snapshot.html This will ensure that the latest fixes for the platform regressions will be promptly available. Regards, -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING - Red Hat In-Vehicle Operating System Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

5 9

GPU Passthrough issues with oVirt 4.5
by Vinícius Ferrão 07 Jul '23

07 Jul '23

Hello, does anyone is having issues with device passthrough on oVirt 4.5? I can passthrough the devices without issue to a given VM, but inside the VM it fails to recognize all the devices. In my case I’ve added 4x GPUs to a VM, but only one show up, and there’s the following errors inside the VM: [ 23.006655] nvidia 0000:0a:00.0: enabling device (0000 -> 0002) [ 23.008026] NVRM: This PCI I/O region assigned to your NVIDIA device is invalid: NVRM: BAR1 is 0M @ 0x0 (PCI:0000:0a:00.0) [ 23.008035] NVRM: This PCI I/O region assigned to your NVIDIA device is invalid: NVRM: BAR2 is 0M @ 0x0 (PCI:0000:0a:00.0) [ 23.008040] NVRM: This PCI I/O region assigned to your NVIDIA device is invalid: NVRM: BAR3 is 0M @ 0x0 (PCI:0000:0a:00.0) [ 23.008045] NVRM: This PCI I/O region assigned to your NVIDIA device is invalid: NVRM: BAR4 is 0M @ 0x0 (PCI:0000:0a:00.0) [ 23.008049] NVRM: This PCI I/O region assigned to your NVIDIA device is invalid: NVRM: BAR5 is 0M @ 0x0 (PCI:0000:0a:00.0) [ 23.012339] NVRM: The NVIDIA GPU 0000:0a:00.0 (PCI ID: 10de:1db1) NVRM: installed in this system is not supported by the NVRM: NVIDIA 535.54.03 driver release. NVRM: Please see 'Appendix A - Supported NVIDIA GPU Products' NVRM: in this release's README, available on the operating system NVRM: specific graphics driver download page at www.nvidia.com. [ 23.016175] nvidia: probe of 0000:0a:00.0 failed with error -1 [ 23.016838] NVRM: This PCI I/O region assigned to your NVIDIA device is invalid: NVRM: BAR0 is 0M @ 0x0 (PCI:0000:0b:00.0) [ 23.016842] nvidia: probe of 0000:0b:00.0 failed with error -1 [ 23.017211] NVRM: This PCI I/O region assigned to your NVIDIA device is invalid: NVRM: BAR0 is 0M @ 0x0 (PCI:0000:0c:00.0) [ 23.017215] nvidia: probe of 0000:0c:00.0 failed with error -1 [ 23.017248] NVRM: The NVIDIA probe routine failed for 3 device(s). [ 23.214409] NVRM: loading NVIDIA UNIX x86_64 Kernel Module 535.54.03 Tue Jun 6 22:20:39 UTC 2023 [ 23.485704] [drm] [nvidia-drm] [GPU ID 0x00000900] Loading driver [ 23.485708] [drm] Initialized nvidia-drm 0.0.0 20160202 for 0000:09:00.0 on minor 1 On the host this shows up on dmesg, but seems right: [ 709.572845] vfio-pci 0000:1a:00.0: vfio_ecap_init: hiding ecap 0x1e@0x258 [ 709.572877] vfio-pci 0000:1a:00.0: vfio_ecap_init: hiding ecap 0x19@0x900 [ 709.572883] vfio-pci 0000:1a:00.0: vfio_ecap_init: hiding ecap 0x23@0xac0 [ 710.660813] vfio-pci 0000:1d:00.0: vfio_ecap_init: hiding ecap 0x1e@0x258 [ 710.660845] vfio-pci 0000:1d:00.0: vfio_ecap_init: hiding ecap 0x19@0x900 [ 710.660851] vfio-pci 0000:1d:00.0: vfio_ecap_init: hiding ecap 0x23@0xac0 [ 711.748760] vfio-pci 0000:1e:00.0: vfio_ecap_init: hiding ecap 0x1e@0x258 [ 711.748791] vfio-pci 0000:1e:00.0: vfio_ecap_init: hiding ecap 0x19@0x900 [ 711.748797] vfio-pci 0000:1e:00.0: vfio_ecap_init: hiding ecap 0x23@0xac0 [ 712.836687] vfio-pci 0000:1c:00.0: vfio_ecap_init: hiding ecap 0x1e@0x258 [ 712.836718] vfio-pci 0000:1c:00.0: vfio_ecap_init: hiding ecap 0x19@0x900 [ 712.836725] vfio-pci 0000:1c:00.0: vfio_ecap_init: hiding ecap 0x23@0xac0 Thanks.

2 1

No bootable disk OVA
by cello86＠gmail.com 07 Jul '23

07 Jul '23

Hi all, we imported a rhel 9.2 image from an OVA generated on vmware and we tried to create a new VM but we had a no bootable disk error. The OVA has been imported with virt-2-v library and if we create a new VM we noticed that the disk is 2 GB size but we resized the disk to 50 GB. The VM has been started with Q35 Chipset with UEFI options and the disk has the flag bootable activated. We're using ovirt 4.5.4-1 Could you help us to sort this issue? Thanks, Marcello

4 4

Restoring HE Fails, engine-config cannot connect to database
by Levi Wilbert 06 Jul '23

06 Jul '23

I am attempting to restore n HE backup to a fresh host (not previously in the old environment) in order to restore our old environment but running into issues during the deployment. Basically my goal is to remove and redeploy an existing HE back into its same environment on a new storage domain. What I've done: backed up HE from prior environment Installed oVirt 4.5.10 on a fresh node that was not in the prior environment Ran the redeployment: hosted-engine --deploy --restore-from-file=<bkpfile> --4 The script pauses the deployment (even tho I told it not to), during this part I update /etc/dnf/dnf.conf w/ "exclude=ansible-core" since once ansible-core is updated it breaks the deployment script w/ Python incompatibilities. But I'm running into the following: [ ERROR ] fatal: [localhost -> 192.168.222.158]: FAILED! => {"changed": true, "cmd": "set -euo pipefail && engine-config -g DisableFenceAtStartupInSec | cut -d' ' -f2 > /root/DisableFenceAtStartupInSec.txt", "delta": "0:00:01.296169", "end": "2023-07-05 11:29:14.101292", "msg": "non-zero return code", "rc": 1, "start": "2023-07-05 11:29:12.805123", "stderr": "Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false", "stderr_lines": ["Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false"], "stdout": "", "stdout_lines": []} I see that it fails running the engine-config command on the new hosted engine, but when I SSH to it and try running it, I get: # engine-config -l Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Connection to the Database failed. Please check that the hostname and port number are correct and that the Database service is up and running. I haven't been able to find anything specifically for this area searching through Google. Anyone have any idea where to go with this?

2 1

ovirt 4.5.4 deploy self-hosted engine
by Jorge Visentini 06 Jul '23

06 Jul '23

Hi. I'm trying to deploy the engine but I'm having some errors that I couldn't identify. I don't know if it's incompatibility with my hardware or some libvirt bug. Jul 05 10:06:21 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48505) Jul 05 10:06:21 ksmmi1r02ovirt36.kosmo.cloud libvirtd[701878]: Domain id=1 name='HostedEngineLocal' uuid=922a156c-7f4c-4815-a645-54ed07 794451 is tainted: custom-ga-command Jul 05 10:06:21 ksmmi1r02ovirt36.kosmo.cloud virtlogd[630980]: Client hit max requests limit 1. This may result in keep-alive timeouts. Consider tuning the max_client_requests server parameter Jul 05 10:06:22 ksmmi1r02ovirt36.kosmo.cloud libvirtd[701878]: Invalid value '-1' for 'cpu.max': Invalid argument Jul 05 10:06:26 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48500) Jul 05 10:06:31 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48495) Jul 05 10:06:31 ksmmi1r02ovirt36.kosmo.cloud systemd[1]: systemd-timedated.service: Deactivated successfully. Jul 05 10:06:36 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48490) Jul 05 10:06:37 ksmmi1r02ovirt36.kosmo.cloud libvirtd[701878]: Invalid value '-1' for 'cpu.max': Invalid argument Jul 05 10:06:41 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48485) Jul 05 10:06:46 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48480) Jul 05 10:06:51 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48475) Jul 05 10:06:52 ksmmi1r02ovirt36.kosmo.cloud libvirtd[701878]: Invalid value '-1' for 'cpu.max': Invalid argument Jul 05 10:06:56 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48470) Jul 05 10:07:01 ksmmi1r02ovirt36.kosmo.cloud ansible-async_wrapper.py[690916]: 690917 still running (48465) *My config:* *CPU:* 2 x Intel(R) Xeon(R) Platinum 8276M CPU @ 2.20GHz *Memory:* 4TB *Disk:* 120GB RAID 1 *ISO:* ovirt-node-ng-installer-4.5.4-2022120615.el9.iso *Packages:* kernel-5.14.0-202.el9.x86_64 libvirt-8.9.0-2.el9.x86_64 centos-release-ovirt45-9.1-3.el9s.noarch python3-ovirt-engine-sdk4-4.6.0-1.el9.x86_64 ovirt-imageio-common-2.4.7-1.el9.x86_64 ovirt-imageio-client-2.4.7-1.el9.x86_64 ovirt-openvswitch-ovn-2.15-4.el9.noarch ovirt-openvswitch-ovn-common-2.15-4.el9.noarch ovirt-imageio-daemon-2.4.7-1.el9.x86_64 ovirt-openvswitch-ovn-host-2.15-4.el9.noarch python3-ovirt-setup-lib-1.3.3-1.el9.noarch ovirt-vmconsole-1.0.9-1.el9.noarch ovirt-vmconsole-host-1.0.9-1.el9.noarch ovirt-openvswitch-2.15-4.el9.noarch python3-ovirt-node-ng-nodectl-4.4.2-1.el9.noarch ovirt-node-ng-nodectl-4.4.2-1.el9.noarch ovirt-ansible-collection-3.0.0-1.el9.noarch ovirt-python-openvswitch-2.15-4.el9.noarch ovirt-openvswitch-ipsec-2.15-4.el9.noarch ovirt-hosted-engine-ha-2.5.0-1.el9.noarch ovirt-provider-ovn-driver-1.2.36-1.el9.noarch ovirt-host-dependencies-4.5.0-3.el9.x86_64 ovirt-hosted-engine-setup-2.7.0-1.el9.noarch ovirt-host-4.5.0-3.el9.x86_64 ovirt-release-host-node-4.5.4-1.el9.x86_64 ovirt-node-ng-image-update-placeholder-4.5.4-1.el9.noarch ovirt-engine-appliance-4.5-20221206125848.1.el9.x86_64 For better understanding, the deploy log is attached. I appreciate any tips that help me. Thank you! -- Att, Jorge Visentini +55 55 98432-9868

3 5

ovirt template import using ansible
by destfinal＠googlemail.com 05 Jul '23

05 Jul '23

Hi, I use a set of templates, generated in one cluster and re-used in multiple clusters. The clusters do not have direct connections between each other. My dev environment can talk to all the clusters. Currently, 1. I export the templates (as OVAs) to one of the nodes (example: node1.source.cluster), from the ovirt console (https://management.source.cluster) 2. scp the templates to my dev machine (example: scp -r node1.source.cluster:/tmp/ovirt_templates /tmp/ovirt_templates) 3. scp the templates from my dev environment to the target cluster (example: scp /tmp/ovirt_templates node1.target.cluster:/tmp) 4. Import the templates using the ovirt console of the target cluster (https://management.target.cluster) This is highly a manual job and I am trying to automate the process using ansible. I am unable to work it out using the ovit_template module documentation (https://docs.ansible.com/ansible/latest/collections/ovirt/ovirt/ovirt_templ…) and could not able to see any other module in this relation. Has anybody done this before and point me to the right direction? Or if there is a better process than what I follow above, please suggest me one. Please let me know if you need more information in this regard. Thanks

4 10

Managing Ovirt Networks with Ansible
by William Roberts 29 Jun '23

29 Jun '23

Hi Team, So I'm setting up some automation to build an environment within an ovirt cluster of X amount of nodes. Part of that is the creation of the networks, and subsequently the attaching of those network to each host in the cluster. Seems pretty straight forward except for the fact you need the name of the interfaces to attach the networks to, unfortunately none of the ansible 2.9 modules I've been trying give you that information. Specifically ovirt_host_info, has a list item called "nics" which i assumed would give it but it doesn't return a value. Does anyone know of a module that would give this info? seems like a pretty crucial thing to be missing. TIA Will

1 0

securing ovirt vnc console
by Bill James 28 Jun '23

28 Jun '23

Our security requirements require that we disable tls1.0 and tla1.1 for VNC port, 59xx. I have not yet been able to find where this can be done, only for spice console. Can anyone assist in pointing me to what config file controls this? ovirt-engine 4.3.

1 0

Re: Customizing ovirt vm / user web portal
by R A 28 Jun '23

28 Jun '23

Hello, the idea was to run the vm portal from another host and connect it through REST-API with the host which run ovirt-engine for example for a dev environment. So it’s not possible? I guess importing the third Party CA local in to ovirt-engine should also work local with the vmportal. BR Peter Von: Patrick Hibbs <hibbsncc1701(a)gmail.com> Gesendet: Mittwoch, 28. Juni 2023 10:27 An: R A <Jarheadx(a)hotmail.de> Betreff: Re: [ovirt-users] Re: Customizing ovirt vm / user web portal Hello, oVirt doesn't use the system wide java keystore. It uses it's own at /etc/pki/ovirt-engine/.truststore If you want your third party cert to work with the java components, such as the disc image uploader function in the admin console, you'll either need to follow the official documentation for altering it. Or import the third party CA manually. (It uses the default keystore password.) -Patrick Hibbs

1 0

Bcp vm
by Ali Gusainov 27 Jun '23

27 Jun '23

Hello experts. Environment: 2 identical servers running CentOS Linux release 7.7.1908 oVirt Version:4.3.7.2-1.el7 No clusters configured. NFS share for backups on third server. Have some questions. 1. Need to create backups of virtual machines to NFS without downtime. Can an 'OVA export' be a complete policy for backups? 2. Is there a way to export vm to OVA via command line?

2 5

How to add alternate fqdn
by BJ一哥 27 Jun '23

27 Jun '23

Version 4.5.1 I try to modify the parameter of SSO_ALTERNATE_ENGINE_FQDNS in /etc/ovirt-engine/engine.conf.d/11-setup-sso.conf to a new domain name The web interface opens normally, but the management portal cannot be accessed. Entering the management portal prompts 500 internal Server error

1 0

Re: Customizing ovirt vm / user web portal
by Jorge Visentini 26 Jun '23

26 Jun '23

Following for being interesting... Em sex., 23 de jun. de 2023 às 10:01, R A <jarheadx(a)hotmail.de> escreveu: > Hello, > > > > i want to customize the interface and some functions in the ovirt user > portal. > > > > For example adding some Buttons with functionality or doing some style > changes. > > > > Is this possible? Is there any guide how to do that? > > > > BR > > Peter > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/RI23B7PVQTVHK… > -- Att, Jorge Visentini +55 55 98432-9868

3 2

HostEngine added alternate fqdn cannot be accessed
by ziyi Liu 26 Jun '23

26 Jun '23

I modified the parameter of SSO_ALTERNATE_ENGINE_FQDNS to the new fqdn in /etc/ovirt-engine/engine.conf.d/11-setup-sso.conf. After modifying the hosts, I can use the new fqdn to open the web but cannot enter the portal management, prompting 500 Internal Server Error

1 0

Re: ovirt 4.5 VNC Failed to complete handshake Error in the pull function on Windows
by Patrick Hibbs 25 Jun '23

25 Jun '23

Hello, On 6/23/23 13:23, R A wrote: > > Hello, > > i am using ovirt 4.5.4-1.el9 standalone on Rocky Linux and have some > struggle with vnc connection. > > I ve engine.mydomain.de which contains the ovirt-engine. I installed > third party certificate successfully. So when i call > engine.mydomain.de/ovirt-engine or node1.mydomain.de:9090 the browser > tell me that connection is secured. > > My first host is node1.mydomain.de, which has currently one VM up. > > On Linux Client (Rocky Linux 9.2) > > 1. When i run „remote-viewer --debug /home/user1/Downloads/console.vv > --gtk-vnc-debug“ everything works fine. RemoteViewer opens and i > can see the console of my vm > 2. When i try to open the console.vv directly via remoteViewer from > enngine-portal i get feedback from remoteViewer: „The certificate > is not trusted“ > Did you do that after opening console.vv manually? Or did you download a new console.vv before doing so? console.vv files are good for one use only. As they contain a one-time password that is revoked after use. > 1. 3. When i try to open via novnc a new tab opens and i get > „Something went wrong, connection is closed“ > Again, did you reuse that console.vv file? Or did you download a new one? FYI: The file should be deleted automatically after remote-viewer opens it. As it's not supposed to be reused. > > On Windows 11 > > 1. When i generate the console.vv and copy the password and > hostadress + port to TigerVNC client everything work fine. > TigerVNC tells me that connection is secured > 2. When opening console.vv directly via RemoteViewer i get „Filed to > complete handshake Error in the pull function > 3. When i try to open via novnc a new tab opens and i get „Something > went wrong, connection is closed“ > 4. When i run "C:\ProgramData\Microsoft\Windows\Start > Menu\Programs\VirtViewer\Remote viewer.lnk" --debug > C:\Users\rezaa\Downloads\console.vv --gtk-vnc-debug > > I get : > > C:\Users\rezaa>"C:\ProgramData\Microsoft\Windows\Start > Menu\Programs\VirtViewer\Remote viewer.lnk" --debug > C:\Users\rezaa\Downloads\console.vv --gtk-vnc-debug > > C:\Users\rezaa>(remote-viewer.exe:9460): virt-viewer-DEBUG: > 19:16:33.218: keymap string is empty - nothing to do > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.264: Opening > display to C:\Users\rezaa\Downloads\console.vv > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.265: Guest > (NULL) has a vnc display > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.271: > ../src/vncconnection.c Init VncConnection=00000000070f1c90 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.271: > ../src/vncdisplaykeymap.c Using Win32 virtual keycode mapping > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.272: > ../src/vncdisplay.c Grab sequence is now Control_L+Alt_L > > (remote-viewer.exe:9460): libsoup-WARNING **: 19:16:33.277: Could not > set SSL credentials from '/etc/pki/tls/certs/ca-bundle.crt': > Vertrauenswürdigkeitsliste konnte nicht aus > /etc/pki/tls/certs/ca-bundle.crt befüllt werden: Error while reading file. > > (remote-viewer.exe:9460): libsoup-WARNING **: 19:16:33.277: Could not > set SSL credentials from '/etc/pki/tls/certs/ca-bundle.crt': > Vertrauenswürdigkeitsliste konnte nicht aus > /etc/pki/tls/certs/ca-bundle.crt befüllt werden: Error while reading file. > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.278: Spice > foreign menu updated > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.278: After open > connection callback fd=-1 > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.279: Opening > connection to display at C:\Users\rezaa\Downloads\console.vv > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.289: fullscreen > display 0: 0 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.289: > ../src/vncconnection.c Open host=node1.mydomain.de port=5900 > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.289: notebook > show status 0000000004408580 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.875: > ../src/vncconnection.c Open coroutine starting > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.876: > ../src/vncconnection.c Started background coroutine > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.877: > ../src/vncconnection.c Resolving host node1.mydomain.de 5900 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.880: > ../src/vncconnection.c Trying one socket > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.881: > ../src/vncconnection.c Schedule socket timeout 00000000070f0a40 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.882: > ../src/vncconnection.c Socket pending > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.914: > ../src/vncconnection.c Finally connected > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.915: > ../src/vncconnection.c Remove timeout 00000000070f0a40 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.916: > ../src/vncconnection.c Emit main context 13 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.917: > ../src/vncdisplay.c Grab sequence is now > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.917: notebook > show status 0000000004408580 > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.919: Insert > display 0 0000000007572f80 > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.919: notebook > show status 0000000004408580 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.920: > ../src/vncdisplay.c Connected to VNC server > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.920: > ../src/vncconnection.c Protocol initialization > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.920: > ../src/vncconnection.c Schedule greeting timeout 00000000070f0a40 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.921: > ../src/vncconnection.c Read error Ein nicht blockierender > Socketvorgang konnte nicht sofort ausgeführt werden. > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.922: Allocated > 1024x768 > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.922: Child > allocate 1024x640 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.946: > ../src/vncconnection.c Remove timeout 00000000070f0a40 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.947: > ../src/vncconnection.c Server version: 3.8 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.950: > ../src/vncconnection.c Sending full greeting > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.951: > ../src/vncconnection.c Using version: 3.8 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.964: > ../src/vncconnection.c Read error Ein nicht blockierender > Socketvorgang konnte nicht sofort ausgeführt werden. > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.983: > ../src/vncconnection.c Possible auth 19 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.984: > ../src/vncconnection.c Emit main context 11 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.984: > ../src/vncconnection.c Thinking about auth type 19 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.985: > ../src/vncconnection.c Decided on auth type 19 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.985: > ../src/vncconnection.c Waiting for auth type > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.986: > ../src/vncconnection.c Choose auth 19 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.986: > ../src/vncconnection.c Checking if credentials are needed > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.987: > ../src/vncconnection.c No credentials required > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.987: > ../src/vncconnection.c Read error Ein nicht blockierender > Socketvorgang konnte nicht sofort ausgeführt werden. > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.019: > ../src/vncconnection.c Read error Ein nicht blockierender > Socketvorgang konnte nicht sofort ausgeführt werden. > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.050: > ../src/vncconnection.c Possible VeNCrypt sub-auth 261 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.051: > ../src/vncconnection.c Emit main context 12 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.052: > ../src/vncconnection.c Requested auth subtype 261 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.053: > ../src/vncconnection.c Waiting for VeNCrypt auth subtype > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.054: > ../src/vncconnection.c Choose auth 261 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.055: > ../src/vncconnection.c Checking if credentials are needed > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.056: > ../src/vncconnection.c No credentials required > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.056: > ../src/vncconnection.c Read error Ein nicht blockierender > Socketvorgang konnte nicht sofort ausgeführt werden. > > (remote-viewer.exe:9460): GLib-GIO-WARNING **: 19:16:34.073: > Unexpectedly, UWP app > `Microsoft.ScreenSketch_11.2303.17.0_x64__8wekyb3d8bbwe' (AUMId > `Microsoft.ScreenSketch_8wekyb3d8bbwe!App') supports 29 extensions but > has no verbs > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.088: > ../src/vncconnection.c Do TLS handshake > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.089: > ../src/vncconnection.c Checking if credentials are needed > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.092: > ../src/vncconnection.c Want a TLS clientname > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.094: > ../src/vncconnection.c Requesting missing credentials > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.102: > ../src/vncconnection.c Emit main context 10 > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:34.105: Got VNC > credential request for 1 credential(s) > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.105: > ../src/vncconnection.c Set credential 2 libvirt > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.106: > ../src/vncconnection.c Searching for certs in > /usr/x86_64-w64-mingw32/sys-root/mingw/etc/pki > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.108: > ../src/vncconnection.c Failed to find certificate CA/cacert.pem > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.109: > ../src/vncconnection.c No CA certificate provided, using GNUTLS global > trust > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.111: > ../src/vncconnection.c Failed to find certificate CA/cacrl.pem > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.113: > ../src/vncconnection.c Failed to find certificate > libvirt/private/clientkey.pem > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.113: > ../src/vncconnection.c Failed to find certificate libvirt/clientcert.pem > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.114: > ../src/vncconnection.c Waiting for missing credentials > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.117: > ../src/vncconnection.c Got all credentials > > ( > > remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.120: > ../src/vncconnection.c No CA certificate provided; trying the system > trust store instead > > (remote-viewer.exe:9460): GLib-GIO-WARNING **: 19:16:34.120: > Unexpectedly, UWP app > `Clipchamp.Clipchamp_2.6.2.0_neutral__yxz26nhyzhsrt' (AUMId > `Clipchamp.Clipchamp_yxz26nhyzhsrt!App') supports 41 extensions but > has no verbs > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.132: > ../src/vncconnection.c Using the system trust store and CRL > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.132: > ../src/vncconnection.c No client cert or key provided > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.133: > ../src/vncconnection.c No CA revocation list provided > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.133: > ../src/vncconnection.c Error: Failed to complete handshake Error in > the pull function. > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.134: > ../src/vncconnection.c Emit main context 16 > > (remote-viewer.exe:9460): virt-viewer-WARNING **: 19:16:34.134: > vnc-session: got vnc error Failed to complete handshake Error in the > pull function. > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.135: > ../src/vncdisplay.c VNC server error > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.135: > ../src/vncconnection.c Auth failed > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.135: > ../src/vncconnection.c Doing final VNC cleanup > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.136: > ../src/vncconnection.c Close VncConnection=00000000070f1c90 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.136: > ../src/vncconnection.c Emit main context 15 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.137: > ../src/vncdisplay.c Disconnected from VNC server > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:34.137: Not > removing main window 0 00000000044694d0 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.138: > ../src/vncdisplay.c Grab sequence is now > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:34.138: Disconnected > > (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:47.126: close > vnc=00000000070ec090 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.127: > ../src/vncconnection.c Init VncConnection=00000000053f6af0 > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.127: > ../src/vncdisplaykeymap.c Using Win32 virtual keycode mapping > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.128: > ../src/vncdisplay.c Grab sequence is now Control_L+Alt_L > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.129: > ../src/vncdisplay.c Display destroy, requesting that VNC connection close > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.129: > ../src/vncdisplay.c Releasing VNC widget > > (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.129: > ../src/vncconnection.c Finalize VncConnection=00000000053f6af0 > This looks like your Windows host lacks the ovirt-engine CA in it's trust store. You should try importing the CA first before opening the console.vv file. It's not possible* to use a third party CA to secure the VNC connections. As the VNC connections originate on the virtualization hosts themselves, the CA that they use is the internal ovirt-engine CA that was automatically generated by engine-setup. If you don't want to import the ovirt-engine CA on the end-user machines, your best option is to force end users through the end-user portal. Alternatively, you could disable VNC encryption entirely and secure the link via other means. *: Technically it is possible to use a third party CA cert on the VNC connections, but it will only work until VDSM reboots the host or performs a host upgrade. As there is no way to force VDSM to ignore the "invalid" custom cert. -Patrick Hibbs > The solutions provided here was not successfull > https://access.redhat.com/solutions/6217601 > > BR > > R A > > > _______________________________________________ > Users mailing list --users(a)ovirt.org > To unsubscribe send an email tousers-leave(a)ovirt.org > Privacy Statement:https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ > List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/XG7T…

2 1

Intel Xeon Platinum 8276M vs oVirt 4.4.10.2-1
by Jorge Visentini 25 Jun '23

25 Jun '23

Hi all! Does anyone use or used Intel Xeon Platinum 8276M with oVirt 4.4.10? *I have the following situation:* I have these 2 sockets on a host, and on bash (lscpu) I identify the 2 sockets, however the oVirt interface only identifies 1 socket: *lscpu:* [root@ovirt03 ~]# lscpu Architecture: x86_64 CPU op-mode(s): 32-bit, 64-bit Byte Order: Little Endian CPU(s): 112 On-line CPU(s) list: 0-111 Thread(s) per core: 2 Core(s) per socket: 28 *Socket(s): 2* NUMA node(s): 2 Vendor ID: GenuineIntel BIOS Vendor ID: Intel(R) Corporation CPU family: 6 Model: 85 Model name: Intel(R) Xeon(R) Platinum 8276M CPU @ 2.20GHz BIOS Model name: Intel(R) Xeon(R) Platinum 8276M CPU @ 2.20GHz Stepping: 7 CPU MHz: 2990.453 CPU max MHz: 4000.0000 CPU min MHz: 1000.0000 BogoMIPS: 4400.00 Virtualization: VT-x L1d cache: 32K L1i cache: 32K L2 cache: 1024K L3 cache: 39424K NUMA node0 CPU(s): 0-27,56-83 NUMA node1 CPU(s): 28-55,84-111 Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch cpuid_fault epb cat_l3 cdp_l3 invpcid_single intel_ppin ssbd mba ibrs ibpb stibp ibrs_enhanced tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 avx2 smep bmi2 erms invpcid cqm mpx rdt_a avx512f avx512dq rdseed adx smap clflushopt clwb intel_pt avx512cd avx512bw avx512vl xsaveopt xsavec xgetbv1 xsaves cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local dtherm ida arat pln pts pku ospke avx512_vnni md_clear flush_l1d arch_capabilities [root@ovirt03 ~]# *oVirt Host Interface:* CPU Model Name: Intel(R) Xeon(R) Platinum 8276M CPU @ 2.20GHz CPU Type: Secure Intel Cascadelake Server Family *CPU Sockets: 1* CPU Cores per Socket: 56 CPU Threads per Core: 2 (SMT Enabled) TSC Frequency: 2199999000 (scaling enabled) I need it to show the 2 sockets because I need to configure the NUMA. If anyone has any tips or fixes, I'd appreciate it. -- Att, Jorge Visentini +55 55 98432-9868

1 0

Ovirt 4.5 different VNC Server
by R A 24 Jun '23

24 Jun '23

Hello, is it possible to use a custom vnc server like tigervnc on the hosts and forward the display then to the vms ?? Is there any guide for this? BR R A

1 0

Ovirt 4.5 any alternatives to Remote Viewer
by R A 23 Jun '23

23 Jun '23

Hello, are there any alternatives to Remote Viewer which can open the console.vv provided by ovirt engine? BR R A

1 0

ovirt 4.5 VNC Failed to complete handshake Error in the pull function on Windows
by R A 23 Jun '23

23 Jun '23

Hello, i am using ovirt 4.5.4-1.el9 standalone on Rocky Linux and have some struggle with vnc connection. I ve engine.mydomain.de which contains the ovirt-engine. I installed third party certificate successfully. So when i call engine.mydomain.de/ovirt-engine or node1.mydomain.de:9090 the browser tell me that connection is secured. My first host is node1.mydomain.de, which has currently one VM up. On Linux Client (Rocky Linux 9.2) 1. When i run "remote-viewer --debug /home/user1/Downloads/console.vv --gtk-vnc-debug" everything works fine. RemoteViewer opens and i can see the console of my vm 2. When i try to open the console.vv directly via remoteViewer from enngine-portal i get feedback from remoteViewer: "The certificate is not trusted" 3. When i try to open via novnc a new tab opens and i get "Something went wrong, connection is closed" On Windows 11 1. When i generate the console.vv and copy the password and hostadress + port to TigerVNC client everything work fine. TigerVNC tells me that connection is secured 2. When opening console.vv directly via RemoteViewer i get "Filed to complete handshake Error in the pull function 3. When i try to open via novnc a new tab opens and i get "Something went wrong, connection is closed" 4. When i run "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VirtViewer\Remote viewer.lnk" --debug C:\Users\rezaa\Downloads\console.vv --gtk-vnc-debug I get : C:\Users\rezaa>"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VirtViewer\Remote viewer.lnk" --debug C:\Users\rezaa\Downloads\console.vv --gtk-vnc-debug C:\Users\rezaa>(remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.218: keymap string is empty - nothing to do (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.264: Opening display to C:\Users\rezaa\Downloads\console.vv (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.265: Guest (NULL) has a vnc display (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.271: ../src/vncconnection.c Init VncConnection=00000000070f1c90 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.271: ../src/vncdisplaykeymap.c Using Win32 virtual keycode mapping (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.272: ../src/vncdisplay.c Grab sequence is now Control_L+Alt_L (remote-viewer.exe:9460): libsoup-WARNING **: 19:16:33.277: Could not set SSL credentials from '/etc/pki/tls/certs/ca-bundle.crt': Vertrauenswürdigkeitsliste konnte nicht aus /etc/pki/tls/certs/ca-bundle.crt befüllt werden: Error while reading file. (remote-viewer.exe:9460): libsoup-WARNING **: 19:16:33.277: Could not set SSL credentials from '/etc/pki/tls/certs/ca-bundle.crt': Vertrauenswürdigkeitsliste konnte nicht aus /etc/pki/tls/certs/ca-bundle.crt befüllt werden: Error while reading file. (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.278: Spice foreign menu updated (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.278: After open connection callback fd=-1 (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.279: Opening connection to display at C:\Users\rezaa\Downloads\console.vv (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.289: fullscreen display 0: 0 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.289: ../src/vncconnection.c Open host=node1.mydomain.de port=5900 (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.289: notebook show status 0000000004408580 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.875: ../src/vncconnection.c Open coroutine starting (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.876: ../src/vncconnection.c Started background coroutine (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.877: ../src/vncconnection.c Resolving host node1.mydomain.de 5900 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.880: ../src/vncconnection.c Trying one socket (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.881: ../src/vncconnection.c Schedule socket timeout 00000000070f0a40 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.882: ../src/vncconnection.c Socket pending (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.914: ../src/vncconnection.c Finally connected (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.915: ../src/vncconnection.c Remove timeout 00000000070f0a40 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.916: ../src/vncconnection.c Emit main context 13 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.917: ../src/vncdisplay.c Grab sequence is now (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.917: notebook show status 0000000004408580 (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.919: Insert display 0 0000000007572f80 (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.919: notebook show status 0000000004408580 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.920: ../src/vncdisplay.c Connected to VNC server (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.920: ../src/vncconnection.c Protocol initialization (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.920: ../src/vncconnection.c Schedule greeting timeout 00000000070f0a40 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.921: ../src/vncconnection.c Read error Ein nicht blockierender Socketvorgang konnte nicht sofort ausgeführt werden. (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.922: Allocated 1024x768 (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:33.922: Child allocate 1024x640 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.946: ../src/vncconnection.c Remove timeout 00000000070f0a40 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.947: ../src/vncconnection.c Server version: 3.8 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.950: ../src/vncconnection.c Sending full greeting (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.951: ../src/vncconnection.c Using version: 3.8 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.964: ../src/vncconnection.c Read error Ein nicht blockierender Socketvorgang konnte nicht sofort ausgeführt werden. (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.983: ../src/vncconnection.c Possible auth 19 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.984: ../src/vncconnection.c Emit main context 11 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.984: ../src/vncconnection.c Thinking about auth type 19 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.985: ../src/vncconnection.c Decided on auth type 19 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.985: ../src/vncconnection.c Waiting for auth type (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.986: ../src/vncconnection.c Choose auth 19 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.986: ../src/vncconnection.c Checking if credentials are needed (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.987: ../src/vncconnection.c No credentials required (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:33.987: ../src/vncconnection.c Read error Ein nicht blockierender Socketvorgang konnte nicht sofort ausgeführt werden. (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.019: ../src/vncconnection.c Read error Ein nicht blockierender Socketvorgang konnte nicht sofort ausgeführt werden. (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.050: ../src/vncconnection.c Possible VeNCrypt sub-auth 261 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.051: ../src/vncconnection.c Emit main context 12 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.052: ../src/vncconnection.c Requested auth subtype 261 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.053: ../src/vncconnection.c Waiting for VeNCrypt auth subtype (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.054: ../src/vncconnection.c Choose auth 261 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.055: ../src/vncconnection.c Checking if credentials are needed (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.056: ../src/vncconnection.c No credentials required (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.056: ../src/vncconnection.c Read error Ein nicht blockierender Socketvorgang konnte nicht sofort ausgeführt werden. (remote-viewer.exe:9460): GLib-GIO-WARNING **: 19:16:34.073: Unexpectedly, UWP app `Microsoft.ScreenSketch_11.2303.17.0_x64__8wekyb3d8bbwe' (AUMId `Microsoft.ScreenSketch_8wekyb3d8bbwe!App') supports 29 extensions but has no verbs (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.088: ../src/vncconnection.c Do TLS handshake (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.089: ../src/vncconnection.c Checking if credentials are needed (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.092: ../src/vncconnection.c Want a TLS clientname (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.094: ../src/vncconnection.c Requesting missing credentials (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.102: ../src/vncconnection.c Emit main context 10 (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:34.105: Got VNC credential request for 1 credential(s) (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.105: ../src/vncconnection.c Set credential 2 libvirt (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.106: ../src/vncconnection.c Searching for certs in /usr/x86_64-w64-mingw32/sys-root/mingw/etc/pki (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.108: ../src/vncconnection.c Failed to find certificate CA/cacert.pem (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.109: ../src/vncconnection.c No CA certificate provided, using GNUTLS global trust (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.111: ../src/vncconnection.c Failed to find certificate CA/cacrl.pem (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.113: ../src/vncconnection.c Failed to find certificate libvirt/private/clientkey.pem (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.113: ../src/vncconnection.c Failed to find certificate libvirt/clientcert.pem (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.114: ../src/vncconnection.c Waiting for missing credentials (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.117: ../src/vncconnection.c Got all credentials ( remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.120: ../src/vncconnection.c No CA certificate provided; trying the system trust store instead (remote-viewer.exe:9460): GLib-GIO-WARNING **: 19:16:34.120: Unexpectedly, UWP app `Clipchamp.Clipchamp_2.6.2.0_neutral__yxz26nhyzhsrt' (AUMId `Clipchamp.Clipchamp_yxz26nhyzhsrt!App') supports 41 extensions but has no verbs (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.132: ../src/vncconnection.c Using the system trust store and CRL (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.132: ../src/vncconnection.c No client cert or key provided (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.133: ../src/vncconnection.c No CA revocation list provided (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.133: ../src/vncconnection.c Error: Failed to complete handshake Error in the pull function. (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.134: ../src/vncconnection.c Emit main context 16 (remote-viewer.exe:9460): virt-viewer-WARNING **: 19:16:34.134: vnc-session: got vnc error Failed to complete handshake Error in the pull function. (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.135: ../src/vncdisplay.c VNC server error (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.135: ../src/vncconnection.c Auth failed (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.135: ../src/vncconnection.c Doing final VNC cleanup (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.136: ../src/vncconnection.c Close VncConnection=00000000070f1c90 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.136: ../src/vncconnection.c Emit main context 15 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.137: ../src/vncdisplay.c Disconnected from VNC server (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:34.137: Not removing main window 0 00000000044694d0 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:34.138: ../src/vncdisplay.c Grab sequence is now (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:34.138: Disconnected (remote-viewer.exe:9460): virt-viewer-DEBUG: 19:16:47.126: close vnc=00000000070ec090 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.127: ../src/vncconnection.c Init VncConnection=00000000053f6af0 (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.127: ../src/vncdisplaykeymap.c Using Win32 virtual keycode mapping (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.128: ../src/vncdisplay.c Grab sequence is now Control_L+Alt_L (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.129: ../src/vncdisplay.c Display destroy, requesting that VNC connection close (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.129: ../src/vncdisplay.c Releasing VNC widget (remote-viewer.exe:9460): gtk-vnc-DEBUG: 19:16:47.129: ../src/vncconnection.c Finalize VncConnection=00000000053f6af0 The solutions provided here was not successfull https://access.redhat.com/solutions/6217601 BR R A

1 0

Constant vdsmd ssl handshake errros on all node (system seems to be ok) - can you help track down error / cinfirm i can ignore ?
by morgan cox 23 Jun '23

23 Jun '23

Hi. I have a (mostly) working Ovirt setup - i.e everything is working as far as I can tell. I have a 'standalone Manager with local databases' setup and several nodes. On all nodes I see this error constantly produced ----- Jun 23 15:50:26 ovirt-node2 vdsm[10344]: ERROR ssl handshake: socket error, address: ::ffff:127.0.0.1 Jun 23 15:50:26 ovirt-node2 vdsm[10344]: WARN unhandled write event ----- As mentioned everything seems to be working, all nodes are up, I can update them , etc. Is the error perhaps related to no ipv6 access and I can safely ignore ? I have an installed cert (not self signed) which i have added to the web ui - could this be connected ? If so can someone confirm which certs and ca should be the same/match (engine and nodes)? One issue I am having is that live migration seems to randomly fail (i.e message is migration was cancelled) could see anything obvious looking at the logs

1 0