- Users - oVirt List Archives

oVirt 4.0 and multipath.conf for HPE 3PAR. What do you advise?
by aleksey.maksimov＠it-kb.ru 16 Aug '16

16 Aug '16

Hello, oVirt guru's ! I installed oVirt 4.0 on several servers HP ProLiant DL360 G5 with QLogic/Emulex 4G dual-port HBAs. These servers have multipath connection to the storage system HP 3PAR 7200. Before installing oVirt to servers I set up the configuration file /etc/multipath.conf according to the vendor recommendations from document "HPE 3PAR Red Hat Enterprise Linux and Oracle Linux Implementation Guide (emr_na-c04448818-9.pdf)" https://blog.it-kb.ru/2016/06/12/configuring-device-mapper-multipathing-dm-… Before installing oVirt my multipath.conf was the: ---> start of /etc/multipath.conf <----- defaults { polling_interval 10 user_friendly_names no find_multipaths yes } blacklist { devnode "^cciss\/c[0-9]d[0-9]*" } multipaths { multipath { wwid 360002ac000000000000000160000cec9 alias 3par-vv2 } multipath { wwid 360002ac000000000000000170000cec9 alias 3par-vv1 } } devices { device { vendor "3PARdata" product "VV" path_grouping_policy group_by_prio path_selector "round-robin 0" path_checker tur features "0" hardware_handler "1 alua" prio alua failback immediate rr_weight uniform no_path_retry 18 rr_min_io_rq 1 detect_prio yes } } ---> end of /etc/multipath.conf <----- But after installing oVirt file multipath.conf has changed to: ---> start of /etc/multipath.conf <----- defaults { polling_interval 5 no_path_retry fail user_friendly_names no flush_on_last_del yes fast_io_fail_tmo 5 dev_loss_tmo 30 max_fds 4096 } devices { device { all_devs yes no_path_retry fail } } ---> end of /etc/multipath.conf <----- Now I'm not sure that this configuration is optimal. What do you advise?

3 3

restore db table
by Fernando Fuentes 16 Aug '16

16 Aug '16

1 1

Short SSL key sizes, and TLS 1.2 on vdsm
by Chris H 15 Aug '16

15 Aug '16

Hello, My RHEVM hypervisors (Red Hat Enterprise Virtualization Hypervisor release 7.2 (20160627.3.el7ev)) are failing corporate Nessus TCP/IP vulnerability scans spectacularly with the following. 1) "SSL Certificate Chain Contains RSA Keys Less Than 2048 bits": many ports in the 5900 range are presenting certificates signed by a key of 1024 bits. I can certainly see 1024-bit keys on the management server and the hypervisors: management ovirt-engine]# openssl x509 -in ca.pem -noout -text | grep Public-Key Public-Key: (1024 bit) hypervisor admin]# openssl x509 -in /etc/pki/vdsm/certs/cacert.pem -noout -text | grep Public-Key Public-Key: (1024 bit) Can anyone point me at directions on how to regenerate the key(s) with 2048 bits, and all certificates, preferably without breaking anything? The management server is running RHEL 6.8, rhevm-3.6.7.5. 2) "TLS Version 1.2 Protocol Detection": Port 54321 is failing because it doesn't support TLS v1.2 (and also because its certificate's key is less than 2048 bits). This port is used by "/usr/bin/python /usr/share/vdsm/vdsm". Can I enable TLS v1.2 in vdsm? It doesn't have to accept TLSv1.2 exclusively, it just has to have v1.2 available (and NOT SSLv2 or 3). If I firewall off these ports, I can't connect to VMs' consoles anymore, so hiding from the scanner isn't feasible for long. Please help point me in the right direction. Thanks, Chris -- *The Starflyer is real!*

1 0

LDAP-based domain not working after upgrade?
by Nicolás 15 Aug '16

15 Aug '16

Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click on Add, the LDAP backend shows up but any value entered into the search box returns nothing, even when I know the values exist. This has been working on oVirt 3.x, we actually migrated to 4.x last week and didn't notice this issue. Additionally, there's no combobox to choose the permission to grant? All this is done with the admin@internal user, so I guess this is not a self-permission issue. Interesting thing is that I can successfully log-in to the user portal with a LDAP based user and manage all the VMs assigned to them. Just to see if there's been any configuration change, we also run the ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns is pretty similar to ours, and even the test commands (Login, Search) work successfully (I can see search returning user's data like name, surname, ...). We even applied this configuration to engine to see if it makes a difference but the result is the same, the search dialog returns nothing and neither I can see the permission to grant. Any hint about this? Thanks

4 14

xml config file being used in ovirt different from virsh?
by Bill Bill 15 Aug '16

15 Aug '16

--_000_CO2PR0801MB07431E23EE4A4AFFE56128E0A61F0CO2PR0801MB0743_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBoYXZlIGEgVk0gd2l0aCBuZXR3b3JrIGZpbHRlcmluZyBlbmFibGVkLCBzcGVjaWZpY2FsbHkg dGhlIGNsZWFuLXRyYWZmaWMgZmlsdGVyLg0KDQpUaHJvdWdoIHZpcnNoLCBJIG1vZGlmeSB0aGUg Y29uZmlndXJhdGlvbiB0byByZWZsZWN0IGNoYW5nZXMgbGlrZSB0aGlzOg0KDQogICAgIDxmaWx0 ZXJyZWYgZmlsdGVyPSdjbGVhbi10cmFmZmljJz4NCiAgICAgICAgPHBhcmFtZXRlciBuYW1lPSdJ UCcgdmFsdWU9JzE5Mi4xNjguMTAuMTAuJy8+DQogICAgICAgIDxwYXJhbWV0ZXIgbmFtZT0nSVAn IHZhbHVlPScxOTIuMTY4LjEwLjExJy8+DQogICAgICA8L2ZpbHRlcnJlZj4NCg0KVGhpcyBvbmx5 IGFsbG93cyB0aG9zZSB0d28gc3BlY2lmaWVkIElQ4oCZcyB0byBjb21tdW5pY2F0ZSBvbiB0aGUg Vk0uIEnigJl2ZSBkZWZpbmVkIHRoZSB4bWwgdGhyb3VnaCB2aXJzaC4NCg0KTm93LCBpZiBJIHN0 YXJ0IHRoZSBWTSBkaXJlY3RseSB0aHJvdWdoIHZpcnNoLCB0aG9zZSBydWxlcyBhcHBseSBhbmQg d29yayBjb3JyZWN0bHkuIEkgY2FuIGFkZCBhbnkgb3RoZXIgcmFuZG9tIElQIGZyb20gdGhlIHNh bWUgc3VibmV0IGFuZCBpdCBkb2VzIG5vdCB3b3JrLCBhcyBleHBlY3RlZC4gT25seSB0aGUgdHdv IElw4oCZcyBzcGVjaWZpZWQgYWJvdmUgd2lsbCByZXNwb25kLg0KDQpUaGlzIHVuZm9ydHVuYXRl bHksIG1ha2VzIHRoZSBWTSBhcHBlYXIgdG8gYmUgZG93biBmcm9tIHdpdGggdGhlIG92aXJ0IGRh c2hib2FyZCBpZiBpdOKAmXMgc3RhcnRlZCBtYW51YWxseSB0aHJvdWdoIHZpcnNoLg0KDQpJZiBJ IGVkaXQgdGhlIG1hY2hpbmUgdGhyb3VnaCB2aXJzaCBidXQgZG8gbm90IHN0YXJ0IGl0IGFuZCB0 aGVuIGdvIG9udG8gb1ZpcnQgdG8gc3RhcnQgdGhlIFZNLCBpdCBzZWVtcyB0aGUgY29uZmlndXJh dGlvbiBpcyBub3QgbG9hZGVkIOKAkyBkb2VzIG9WaXJ0IGxvYWQgYSBkaWZmZXJlbnQgY29uZmln dXJhdGlvbiBmaWxlIG90aGVyIHRoYW4gL2V0Yy9saWJ2aXJ0L3FlbXUvbWFjaGluZS54bWw/DQo= --_000_CO2PR0801MB07431E23EE4A4AFFE56128E0A61F0CO2PR0801MB0743_ Content-Type: text/html; charset="utf-8" Content-ID: <4B0D61C4EF4E6348BF40DF4B18975372(a)sct-15-1-485-2-msonline-outlook-1173a.templateTenant> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQouTXNv Q2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTt9DQpAcGFnZSBXb3JkU2Vj dGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEu MGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHls ZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0iIzk1NEY3 MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBo YXZlIGEgVk0gd2l0aCBuZXR3b3JrIGZpbHRlcmluZyBlbmFibGVkLCBzcGVjaWZpY2FsbHkgdGhl IGNsZWFuLXRyYWZmaWMgZmlsdGVyLjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhyb3VnaCB2aXJzaCwgSSBtb2Rp ZnkgdGhlIGNvbmZpZ3VyYXRpb24gdG8gcmVmbGVjdCBjaGFuZ2VzIGxpa2UgdGhpczo8L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7ZmlsdGVycmVmIGZpbHRlcj0nY2xl YW4tdHJhZmZpYycmZ3Q7PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDtwYXJhbWV0ZXIgbmFtZT0nSVAnIHZhbHVl PScxOTIuMTY4LjEwLjEwLicvJmd0OzwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7cGFyYW1ldGVyIG5hbWU9J0lQ JyB2YWx1ZT0nMTkyLjE2OC4xMC4xMScvJmd0OzwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbHQ7L2ZpbHRlcnJlZiZndDs8L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+VGhpcyBv bmx5IGFsbG93cyB0aG9zZSB0d28gc3BlY2lmaWVkIElQ4oCZcyB0byBjb21tdW5pY2F0ZSBvbiB0 aGUgVk0uIEnigJl2ZSBkZWZpbmVkIHRoZSB4bWwgdGhyb3VnaCB2aXJzaC48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+Tm93LCBpZiBJIHN0YXJ0IHRoZSBWTSBkaXJlY3RseSB0aHJvdWdoIHZpcnNoLCB0 aG9zZSBydWxlcyBhcHBseSBhbmQgd29yayBjb3JyZWN0bHkuIEkgY2FuIGFkZCBhbnkgb3RoZXIg cmFuZG9tIElQIGZyb20gdGhlIHNhbWUgc3VibmV0IGFuZCBpdCBkb2VzIG5vdCB3b3JrLCBhcyBl eHBlY3RlZC4NCiBPbmx5IHRoZSB0d28gSXDigJlzIHNwZWNpZmllZCBhYm92ZSB3aWxsIHJlc3Bv bmQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPlRoaXMgdW5mb3J0dW5hdGVseSwgbWFrZXMgdGhlIFZN IGFwcGVhciB0byBiZSBkb3duIGZyb20gd2l0aCB0aGUgb3ZpcnQgZGFzaGJvYXJkIGlmIGl04oCZ cyBzdGFydGVkIG1hbnVhbGx5IHRocm91Z2ggdmlyc2guPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPklm IEkgZWRpdCB0aGUgbWFjaGluZSB0aHJvdWdoIHZpcnNoIGJ1dCBkbyBub3Qgc3RhcnQgaXQgYW5k IHRoZW4gZ28gb250byBvVmlydCB0byBzdGFydCB0aGUgVk0sIGl0IHNlZW1zIHRoZSBjb25maWd1 cmF0aW9uIGlzIG5vdCBsb2FkZWQg4oCTIGRvZXMgb1ZpcnQgbG9hZCBhIGRpZmZlcmVudCBjb25m aWd1cmF0aW9uDQogZmlsZSBvdGhlciB0aGFuIC9ldGMvbGlidmlydC9xZW11L21hY2hpbmUueG1s PzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_CO2PR0801MB07431E23EE4A4AFFE56128E0A61F0CO2PR0801MB0743_--

3 4

new internal SSO
by Fabrice Bacchella 15 Aug '16

15 Aug '16

--Apple-Mail=_138C94D8-E499-4C85-8D42-96B668C52119 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I'm currently fighting with the new mandatory SSO system introduced in = 4.0. It's also used internally as ovirt-engine is calling himself, as shown = in the apache log, to identity himself to himself: [2016-08-12 11:30:24] 10.83.16.34 "ovirt.prod.exalead.com" "POST = /ovirt-engine/sso/status HTTP/1.1" 256 401 + 163 "-" "Java/1.8.0_92" [2016-08-12 10:55:49] 10.83.16.34 "ovirt.prod.exalead.com" "POST = /ovirt-engine/sso/oauth/token HTTP/1.1" 237 401 + 163 "-" = "Java/1.8.0_92" But the sso will be acceded by human too: [2016-08-12 11:29:27] 192.168.205.59 "ovirt.prod.exalead.com" "GET = /ovirt-engine/sso/interactive-redirect-to-module HTTP/1.1" 5097 302 + - = "https://ovirt.prod.exalead.com/ovirt-engine/" "Mozilla/5.0 (Macintosh; = Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" I'm using a custom apache configuration, as I need that to better = integrate ovirt in our running SSO and PKI setup. So under SSO I wonder which part needs to be protected using our own = SSO, and what part can be open to any access, and the internal security = of ovirt will manage it ? In https://bugzilla.redhat.com/show_bug.cgi?id=3D1342192, it seems for = me that = ^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token-http-auth) = needs to be protected. Am i right ? In my log, I've seen access to: /ovirt-engine/sso/status /ovirt-engine/sso/oauth/token-info /ovirt-engine/webadmin/sso/oauth2-callback /ovirt-engine/webadmin/sso/login /ovirt-engine/sso/oauth/token /ovirt-engine/sso/oauth/authorize /ovirt-engine/sso/interactive-redirect-to-module /ovirt-engine/sso/interactive-login-next-auth /ovirt-engine/sso/interactive-login-negotiate/ovirt-auth= --Apple-Mail=_138C94D8-E499-4C85-8D42-96B668C52119 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html = charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D"">I'm currently fighting with the new mandatory SSO system = introduced in 4.0.<div class=3D""><br class=3D""></div><div = class=3D"">It's also used internally as ovirt-engine is calling himself, = as shown in the apache log, to identity himself to himself:</div><div = class=3D""><br class=3D""></div><div class=3D""><div style=3D"margin: = 0px; font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">[2016-08-12 11:30:24] 10.83.16.34 "<a = href=3D"http://ovirt.prod.exalead.com" = class=3D"">ovirt.prod.exalead.com</a>" "POST /ovirt-engine/sso/status = HTTP/1.1" 256 401 + 163 "-" "Java/1.8.0_92"</span></div></div><div = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D""><div style=3D"margin: 0px; font-size: 11px; line-height: = normal; font-family: Menlo;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">[2016-08-12 10:55:49] 10.83.16.34 "<a = href=3D"http://ovirt.prod.exalead.com" = class=3D"">ovirt.prod.exalead.com</a>" "POST = /ovirt-engine/sso/oauth/token HTTP/1.1" 237 401 + 163 "-" = "Java/1.8.0_92"</span></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><br = class=3D""></span></div></span></div><div class=3D"">But the sso will be = acceded by human too:</div><div class=3D""><br class=3D""></div><div = class=3D""><div style=3D"margin: 0px; font-size: 11px; line-height: = normal; font-family: Menlo;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">[2016-08-12 11:29:27] 192.168.205.59 "<a = href=3D"http://ovirt.prod.exalead.com" = class=3D"">ovirt.prod.exalead.com</a>" "GET = /ovirt-engine/sso/interactive-redirect-to-module HTTP/1.1" 5097 302 + - = "<a href=3D"https://ovirt.prod.exalead.com/ovirt-engine/" = class=3D"">https://ovirt.prod.exalead.com/ovirt-engine/</a>" = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 = Firefox/47.0"</span></div></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><br = class=3D""></span></div><div class=3D""><br class=3D""></div><div = class=3D"">I'm using a custom apache configuration, as I need that to = better integrate ovirt in our running SSO and PKI setup.</div><div = class=3D""><br class=3D""></div><div class=3D"">So under SSO I wonder = which part needs to be protected using our own SSO, and what part can be = open to any access, and the internal security of ovirt will manage it = ?</div><div class=3D""><br class=3D""></div><div class=3D"">In <a = href=3D"https://bugzilla.redhat.com/show_bug.cgi?id=3D1342192" = class=3D"">https://bugzilla.redhat.com/show_bug.cgi?id=3D1342192</a>, it = seems for me that <span style=3D"white-space: pre-wrap;" = class=3D"">^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token-htt= p-auth) needs to be protected. Am i right ?</span></div><div = class=3D""><br class=3D""></div><div class=3D"">In my log, I've seen = access to:</div><div class=3D""><br class=3D"">/ovirt-engine/sso/status<br= class=3D"">/ovirt-engine/sso/oauth/token-info<br = class=3D"">/ovirt-engine/webadmin/sso/oauth2-callback<br = class=3D"">/ovirt-engine/webadmin/sso/login<br = class=3D"">/ovirt-engine/sso/oauth/token<br = class=3D"">/ovirt-engine/sso/oauth/authorize<br = class=3D"">/ovirt-engine/sso/interactive-redirect-to-module<br = class=3D"">/ovirt-engine/sso/interactive-login-next-auth<br = class=3D"">/ovirt-engine/sso/interactive-login-negotiate/ovirt-auth</div><= /body></html>= --Apple-Mail=_138C94D8-E499-4C85-8D42-96B668C52119--

2 2

unable to find valid certification path to requested target
by Bill Bill 15 Aug '16

15 Aug '16

--_000_CO2PR0801MB0743DBC3AD940D3496CE9880A6100CO2PR0801MB0743_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmVjZW50bHkgdXBncmFkZWQgb3ZpcnQtZW5naW5lIGFuZCBub3cgY2Fubm90IGxvZyBpbi4gR2V0 dGluZyB0aGUgZXJyb3IgYmVsb3c6DQoNCg0Kc3VuLnNlY3VyaXR5LnZhbGlkYXRvci5WYWxpZGF0 b3JFeGNlcHRpb246IFBLSVggcGF0aCBidWlsZGluZyBmYWlsZWQ6IHN1bi5zZWN1cml0eS5wcm92 aWRlci5jZXJ0cGF0aC5TdW5DZXJ0UGF0aEJ1aWxkZXJFeGNlcHRpb246IHVuYWJsZSB0byBmaW5k IHZhbGlkIGNlcnRpZmljYXRpb24gcGF0aCB0byByZXF1ZXN0ZWQgdGFyZ2V0DQoNCg== --_000_CO2PR0801MB0743DBC3AD940D3496CE9880A6100CO2PR0801MB0743_ Content-Type: text/html; charset="utf-8" Content-ID: <87541A889A1A18439B925049574FD1FF(a)sct-15-1-485-2-msonline-outlook-1173a.templateTenant> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LndlbGNvbWUtdGl0bGUNCgl7bXNvLXN0eWxlLW5hbWU6d2VsY29tZS10aXRsZTt9DQouTXNvQ2hw RGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTt9DQpAcGFnZSBXb3JkU2VjdGlv bjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGlu O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4N CjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0iIzk1NEY3MiI+ DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmVjZW50 bHkgdXBncmFkZWQgb3ZpcnQtZW5naW5lIGFuZCBub3cgY2Fubm90IGxvZyBpbi4gR2V0dGluZyB0 aGUgZXJyb3IgYmVsb3c6PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGNsYXNzPSJ3ZWxjb21lLXRpdGxlIj5zdW4uc2VjdXJpdHku dmFsaWRhdG9yLlZhbGlkYXRvckV4Y2VwdGlvbjogUEtJWCBwYXRoIGJ1aWxkaW5nIGZhaWxlZDog c3VuLnNlY3VyaXR5LnByb3ZpZGVyLmNlcnRwYXRoLlN1bkNlcnRQYXRoQnVpbGRlckV4Y2VwdGlv bjogdW5hYmxlIHRvIGZpbmQgdmFsaWQgY2VydGlmaWNhdGlvbiBwYXRoIHRvIHJlcXVlc3RlZCB0 YXJnZXQ8L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlm Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4N Cg== --_000_CO2PR0801MB0743DBC3AD940D3496CE9880A6100CO2PR0801MB0743_--

2 1

Move VM disks from gluster storage to local storage
by Siavash Safi 14 Aug '16

14 Aug '16

Hi, An unknown bug broke our gluster storage (dom_md/ids is corrupted) and oVirt no longer activates the storage(I tried to recover it using the similar issues reported in mailing list but it didn't work). As I checked VM disk images are still accessible when I mount the gluster storage manually. How can we manually move the VM disk images to local storage? (oVirt complains about gluster storage being inactive when using the web interface for move/copy) Thanks, Siavash

2 4

How to open vm console by API ?
by Wang Evan 14 Aug '16

14 Aug '16

--_000_HK2PR0401MB13322CE62E444F628CF2E3F5D71F0HK2PR0401MB1332_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi : I want to integrate oVirt-engine into our system platform. In reference to = ovirt rest API , I have finished added host and create virtual machine. But= I can't find the way to open vm console by API or CLI ,so what should I do= ? Thanks ! Evan --_000_HK2PR0401MB13322CE62E444F628CF2E3F5D71F0HK2PR0401MB1332_ Content-Type: text/html; charset="us-ascii" Content-ID: <959C49C01EEEAB4B9F2C281FC1C76AB6(a)sct-15-1-485-9-msonline-outlook-33ea8.templateTenant> Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"ZH-CN" link=3D"#0563C1" vlink=3D"#954F72" style=3D"text-justi= fy-trim:punctuation"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span lang=3D"EN-US">Hi :<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">I want to integrate oVirt-engin= e into our system platform. In reference to ovirt rest API , I have finishe= d added host and create virtual machine. But I can't find the way to open v= m console by API or CLI ,so what should I do ?<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">Thanks !<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">Evan<o:p></o:p></span></p> </div> </body> </html> --_000_HK2PR0401MB13322CE62E444F628CF2E3F5D71F0HK2PR0401MB1332_--

3 2

LVM2 Thinprovisioned
by Fernando Frediani 14 Aug '16

14 Aug '16

Hello all. When you use oVirt with a Block Storage the only option available to store de VMs is LVM. Does LVM in oVirt use Thinprovisoned (supported in LVM2) instead of having to use the SAN Thinprovisioned features ? Fernando

5 8

General system updates policy
by David Gossage 14 Aug '16

14 Aug '16

Is it considered safe from an ovirt stability standpoint to apply yum updates to the hosts and engine as centos/redhat release them? For example the recent https://rhn.redhat.com/errata/RHSA-2016-1606.html update for qemu. If I run yum update and update that is their any worry for me that it has not been tested with oVirt and so versions will break something. Same with kernels, libraries etc.. *David Gossage* *Carousel Checks Inc. | System Administrator* *Office* 708.613.2284

3 3

Storage for my Environment
by Michael Cooper 14 Aug '16

14 Aug '16

This is a multi-part message in MIME format. --------------F4353BC018BCA8D035BFD678 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Hello Guys, I am sorry ask a stupid question again, however I am not sure how to add storage to the environment that I have at the moment. I have 4 Servers 3 of them are AMD and one Intel Core i7, on my servers I have 2 Dell SC1435's and one HP DL385 G5 I have the Engine Running and I have added a node as well, Both of them are Physical servers they both have 1 tb drives, I would like to add the drive in the node as storage how would I accomplish that? Thank you very much in advance, -- *Michael Cooper* http://www.coopfire.com Linux/VMWare Certified Professional --------------F4353BC018BCA8D035BFD678 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit <html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hello Guys,<br> <br> I am sorry ask a stupid question again, however I am not sure how to add storage to the environment that I have at the moment. I have 4 Servers 3 of them are AMD and one Intel Core i7, on my servers I have 2 Dell SC1435's and one HP DL385 G5<br> <br> I have the Engine Running and I have added a node as well, Both of them are Physical servers they both have 1 tb drives, I would like to add the drive in the node as storage how would I accomplish that?<br> <br> Thank you very much in advance, <br> <div class="moz-signature">-- <br> <b><font color="#008080">Michael Cooper</font></b><br> <a class="moz-txt-link-freetext" href="http://www.coopfire.com">http://www.coopfire.com</a><br> Linux/VMWare Certified Professional<br> </div> </body> </html> --------------F4353BC018BCA8D035BFD678--

3 3

Re: [ovirt-users] IP Address Stealing
by Subhendu Ghosh 14 Aug '16

14 Aug '16

----_com.ninefolders.hd3.email_133710414088413_alt Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 Tm90IGJ1aWx0IGludG8gb3ZpcnQgQUZBSUssIMKgYnV0IGFuIGVidGFibGVzIHJ1bGUgY2FuIGFs bG93IHlvdSB0byBmaWx0ZXIgb3V0IG1hYytpcCBjb21iaW5hdGlvbnPCoAoKTG9vayBhdCB0aGUg YW50aS1zcG9vZmluZyBydWxlcyBvbiBlYnRhYmxlcy5uZXRmaWx0ZXIub3JnCgpJdCBkb2Vzbid0 IHByZXZlbnQgdGhlIHVzZXIgYWRkaW5nIGl0IGluIHRoZSB2bSwgYnV0IHRoZSBpbmZyYXN0cnVj dHVyZSBibG9ja3MgaXQncyB1c2FnZS4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f CkZyb206IEJpbGwgQmlsbCA8amF4MjU2OEBvdXRsb29rLmNvbT4KU2VudDogQXVnIDMsIDIwMTYg MjI6NDAKVG86IHVzZXJzQG92aXJ0Lm9yZwpTdWJqZWN0OiBbb3ZpcnQtdXNlcnNdIElQIEFkZHJl c3MgU3RlYWxpbmcKCkhlbGxvLAoKwqAKCkl0IGlzIHBvc3NpYmxlIHRvIHByZXZlbnQgYSBWTSBm cm9tIGFkZGluZyBhbiBJUD8gRm9yIGV4YW1wbGUsIGlmIHdlIHByb3Zpc2lvbiBhIFZNIHdpdGgg b25lIElQLCBpZiB0aGUgdXNlciBoYXMgcm9vdCBhY2Nlc3MgdGhleSBjYW4gc2ltcGx5IGFkZCBy YW5kb20gSVDigJlzIGZyb20gd2l0aGluIHRoZSBzYW1lIHJhbmdlIGFzIHN1YiBpbnRlcmZhY2Vz OiBldGgwOjAgZXRoMDoxIGV0aDA6MiBzbyBvbiBhbmQgc28gZm9ydGguCgrCoAoKU3VibmV0dGlu ZyBpcyBub3QgaWRlYWwgaW4gdGhpcyBzaXR1YXRpb24gYmVjYXVzZSBpdOKAmXMgYSBodWdlIHdh c3RlIG9mIElQIHNwYWNlLgoKwqA= ----_com.ninefolders.hd3.email_133710414088413_alt Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSwgQXJpYWwsIEhlbHZldGljYSwgc2Fucy1z ZXJpZjsgZm9udC1zaXplOjEyLjBwdDsgY29sb3I6IzFGNDk3RCI+PGRpdj5Ob3QgYnVpbHQgaW50 byBvdmlydCBBRkFJSywgJm5ic3A7YnV0IGFuIGVidGFibGVzIHJ1bGUgY2FuIGFsbG93IHlvdSB0 byBmaWx0ZXIgb3V0IG1hYytpcCBjb21iaW5hdGlvbnMmbmJzcDs8L2Rpdj48ZGl2Pjxicj48L2Rp dj48ZGl2Pkxvb2sgYXQgdGhlIGFudGktc3Bvb2ZpbmcgcnVsZXMgb24gZWJ0YWJsZXMubmV0Zmls dGVyLm9yZzwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+SXQgZG9lc24ndCBwcmV2ZW50IHRoZSB1 c2VyIGFkZGluZyBpdCBpbiB0aGUgdm0sIGJ1dCB0aGUgaW5mcmFzdHJ1Y3R1cmUgYmxvY2tzIGl0 J3MgdXNhZ2UuPC9kaXY+CjxkaXY+PGJyPjwvZGl2Pgo8L2Rpdj48ZGl2IGNsYXNzPSJxdW90ZWRf c2VwYXJhdGVfYm9keSIvPjxkaXYgaWQ9InF1b3RlZF9oZWFkZXIiIHN0eWxlPSJjbGVhcjpib3Ro OyI+PGhyIHN0eWxlPSJib3JkZXI6bm9uZTsgaGVpZ2h0OjFweDsgY29sb3I6I0UxRTFFMTsgYmFj a2dyb3VuZC1jb2xvcjojRTFFMUUxOyIvPjxkaXYgc3R5bGU9ImJvcmRlcjpub25lOyBwYWRkaW5n OjMuMHB0IDBjbSAwY20gMGNtIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpLCBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmIj48Yj5Gcm9tOjwvYj4g QmlsbCBCaWxsICZsdDtqYXgyNTY4QG91dGxvb2suY29tJmd0Ozxicj48Yj5TZW50OjwvYj4gQXVn IDMsIDIwMTYgMjI6NDA8YnI+PGI+VG86PC9iPiB1c2Vyc0BvdmlydC5vcmc8YnI+PGI+U3ViamVj dDo8L2I+IFtvdmlydC11c2Vyc10gSVAgQWRkcmVzcyBTdGVhbGluZzxicj48L3NwYW4+PC9kaXY+ PC9kaXY+PGJyIHR5cGU9J2F0dHJpYnV0aW9uJz48ZGl2IGlkPSJxdW90ZWRfYm9keSI+Cgo8bWV0 YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11 dGYtOCI+CjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPgo8c3R5bGU+PCEtLQovKiBGb250IERlZmluaXRpb25zICovCkBm b250LWZhY2UKCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsKCXBhbm9zZS0xOjIgNCA1IDMg NSA0IDYgMyAyIDQ7fQpAZm9udC1mYWNlCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsKCXBhbm9zZS0x OjIgMTUgNSAyIDIgMiA0IDMgMiA0O30KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbAoJe21hcmdpbjowaW47CgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7Cglmb250LXNpemU6MTEuMHB0OwoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5OwoJY29sb3I6Ymx1ZTsKCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQphOnZpc2l0ZWQs IHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQKCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7Cgljb2xv cjojOTU0RjcyOwoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9Ci5Nc29DaHBEZWZhdWx0Cgl7 bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQpAcGFnZSBXb3JkU2VjdGlvbjEKCXtzaXplOjgu NWluIDExLjBpbjsKCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9CmRpdi5Xb3JkU2Vj dGlvbjEKCXtwYWdlOldvcmRTZWN0aW9uMTt9Ci0tPjwvc3R5bGU+CgoKPGRpdiBjbGFzcz0iV29y ZFNlY3Rpb24xIj4KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGVsbG8sPC9wPgo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SXQgaXMg cG9zc2libGUgdG8gcHJldmVudCBhIFZNIGZyb20gYWRkaW5nIGFuIElQPyBGb3IgZXhhbXBsZSwg aWYgd2UgcHJvdmlzaW9uIGEgVk0gd2l0aCBvbmUgSVAsIGlmIHRoZSB1c2VyIGhhcyByb290IGFj Y2VzcyB0aGV5IGNhbiBzaW1wbHkgYWRkIHJhbmRvbSBJUOKAmXMgZnJvbSB3aXRoaW4gdGhlIHNh bWUgcmFuZ2UgYXMgc3ViIGludGVyZmFjZXM6IGV0aDA6MCBldGgwOjEgZXRoMDoyIHNvIG9uIGFu ZCBzbwogZm9ydGguPC9wPgo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U3VibmV0dGluZyBpcyBub3QgaWRlYWwgaW4gdGhpcyBz aXR1YXRpb24gYmVjYXVzZSBpdOKAmXMgYSBodWdlIHdhc3RlIG9mIElQIHNwYWNlLjwvcD4KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+CjwvZGl2PgoKCjwvZGl2Pg== ----_com.ninefolders.hd3.email_133710414088413_alt--

3 3

import qcow2 image to ovirt
by David David 14 Aug '16

14 Aug '16

Hi all ovirt 4.0 there is KVM qcow2 image: file format: qcow2 virtual size: 466G (500106788864 bytes) disk size: 86G cluster_size: 65536 How to import the image with the same disk size, 86 GB, to ovirt ?

3 10

ovirt 3.6.6 and gluster 3.7.13
by David Gossage 14 Aug '16

14 Aug '16

Anyone running one of recent 3.6.x lines and gluster using 3.7.13? I am looking to upgrade gluster from 3.7.11->3.7.13 for some bug fixes, but have been told by users on gluster mail list due to some gluster changes I'd need to change the disk parameters to use writeback cache. Something to do with aio support being removed. I believe this could be done with custom parameters? But I believe strage tests are done using dd and would they fail with current settings then? Last upgrade to 3.7.13 I had to rollback to 3.7.11 due to stability isues where gluster storage would go into down state and always show N/A as space available/used. Even if hosts saw storage still and VM's were running on it on all 3 hosts. Saw a lot of messages like these that went away once gluster rollback finished [2016-07-09 15:27:46.935694] I [fuse-bridge.c:4083:fuse_init] 0-glusterfs-fuse: FUSE inited with protocol versions: glusterfs 7.22 kernel 7.22 [2016-07-09 15:27:49.555466] W [MSGID: 114031] [client-rpc-fops.c:3050:client3_3_readv_cbk] 0-GLUSTER1-client-1: remote operation failed [Operation not permitted] [2016-07-09 15:27:49.556574] W [MSGID: 114031] [client-rpc-fops.c:3050:client3_3_readv_cbk] 0-GLUSTER1-client-0: remote operation failed [Operation not permitted] [2016-07-09 15:27:49.556659] W [fuse-bridge.c:2227:fuse_readv_cbk] 0-glusterfs-fuse: 80: READ => -1 gfid=deb61291-5176-4b81-8315-3f1cf8e3534d fd=0x7f5224002f68 (Operation not permitted) [2016-07-09 15:27:59.612477] W [MSGID: 114031] [client-rpc-fops.c:3050:client3_3_readv_cbk] 0-GLUSTER1-client-1: remote operation failed [Operation not permitted] [2016-07-09 15:27:59.613700] W [MSGID: 114031] [client-rpc-fops.c:3050:client3_3_readv_cbk] 0-GLUSTER1-client-0: remote operation failed [Operation not permitted] [2016-07-09 15:27:59.613781] W [fuse-bridge.c:2227:fuse_readv_cbk] 0-glusterfs-fuse: 168: READ => -1 gfid=deb61291-5176-4b81-8315-3f1cf8e3534d fd=0x7f5224002f68 (Operation not permitted) *David Gossage* *Carousel Checks Inc. | System Administrator* *Office* 708.613.2284

7 32

oVirt 4.0.2 RC
by Fernando Fuentes 12 Aug '16

12 Aug '16

So I went to do an update to my ovirt system and found that the RC is coming down to my production box... IE: 4.0.2 I did a repo list and found - centos-ovirt40-candidate Than found that 4.0.2 its also coming down from the ovirt-4.0 repo... ovirt-engine-sdk-python noarch 3.6.8.0-1.el7 centos-ovirt40-candidate 480 k ovirt-release40 noarch 4.0.2-2 ovirt-4.0 8.3 k ovirt-vmconsole noarch 1.0.4-1.el7 centos-ovirt40-candidate 29 k ovirt-vmconsole-proxy noarch 1.0.4-1.el7 centos-ovirt40-candidate 17 k python-ovirt-engine-sdk4 x86_64 4.0.0-0.5.a5.el7 centos-ovirt40-candidate 308 k Is this safe to upgrade? Regards, -- Fernando Fuentes ffuentes(a)txweather.org http://www.txweather.org

2 2

Failed to activate Storage Domain vms (Data Center Default)
by Gonzalo Faramiñan 12 Aug '16

12 Aug '16

Hello everyone, I'm brand new to oVirt, but anyway I'm trying to solve a problem because of staff changes. Any help is really appreciated. Context: - oVirt Engine Version: 3.1.0-3.19.el6 running on Centos 6.7 - two nodes running Centos 6.7 connected with Gluster 3.3.1.15.el6, replicate configured - six VMs with high-availability on six separated virtual disk created into de Default volume. The Data Center was working fine for a few years and after a maintenance (step-by-step well done) reboot, the Default volume lost GBs of data. Just 23MB of replicated data remained :_( Now the Master Storage Domain seems to be broken and we cannot get it up and running in any way. Whatever we try, we end up facing this message: "No valid Data Storage Domains are available in Data Center Default (please check your storage infrastructure)." Over this list we saw same log messages, but couldn't solve the problem. I include what I think are the main error messages Thanks in advance! Webgui: 2016-Aug-12, 14:37:11 Host nodo2 cannot access one of the Storage Domains attached to it, or the Data Center object. Setting Host state to Non-Operational. 2016-Aug-12, 14:37:11 Failed to connect Host nodo2 to Storage Pool Default 2016-Aug-12, 14:40:02 Failed to activate Storage Domain vms (Data Center Default) by admin@internal Cluster's admin machine: $ tail /var/log/ovirt-engine/engine.log 2016-08-12 14:12:12,285 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.BrokerCommandBase] (QuartzScheduler_Worker-62) Vds: nodo1 2016-08-12 14:12:12,285 ERROR [org.ovirt.engine.core.vdsbroker.VDSCommandBase] (QuartzScheduler_Worker-62) Command ConnectStoragePoolVDS execution failed. Exception: IRSNoMasterDomainException: IRSGenericException: IRSErrorException: IRSNoMasterDomainException: Cannot find master domain: 'spUUID=6c820dd3-24dc-472f-9b9b-b366da23b22f, msdUUID=fe3dad77-6f27-40cd-8be9-b9e9cd1fb9bf' 2016-08-12 14:12:12,286 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.ConnectStoragePoolVDSCommand] (QuartzScheduler_Worker-62) FINISH, ConnectStoragePoolVDSCommand, log id: 125fb199 2016-08-12 14:12:12,287 ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (QuartzScheduler_Worker-62) IrsBroker::Failed::GetStoragePoolInfoVDS 2016-08-12 14:12:12,287 ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (QuartzScheduler_Worker-62) Exception: IRSGenericException: IRSErrorException: IRSNoMasterDomainException: Cannot find master domain: 'spUUID=6c820dd3-24dc-472f-9b9b-b366da23b22f, msdUUID=fe3dad77-6f27-40cd-8be9-b9e9cd1fb9bf' 2016-08-12 14:12:12,302 WARN [org.ovirt.engine.core.dal.job.ExecutionMessageDirector] (QuartzScheduler_Worker-62) [3165a3b2] The message key ReconstructMasterDomain is missing from bundles/ExecutionMessages 2016-08-12 14:12:12,350 INFO [org.ovirt.engine.core.bll.storage.ReconstructMasterDomainCommand] (QuartzScheduler_Worker-62) [3165a3b2] Running command: ReconstructMasterDomainCommand internal: true. Entities affected : ID: fe3dad77-6f27-40cd-8be9-b9e9cd1fb9bf Type: Storage 2016-08-12 14:12:12,397 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.MarkPoolInReconstructModeVDSCommand] (QuartzScheduler_Worker-62) [3165a3b2] START, MarkPoolInReconstructModeVDSCommand(storagePoolId = 6c820dd3-24dc-472f-9b9b-b366da23b22f, ignoreFailoverLimit = false, compatabilityVersion = null, reconstructMarkAction = ClearCache), log id: 40a6ee33 2016-08-12 14:12:12,397 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (QuartzScheduler_Worker-62) [3165a3b2] clearing cache for problematic entities in pool 6c820dd3-24dc-472f-9b9b-b366da23b22f 2016-08-12 14:12:12,398 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.MarkPoolInReconstructModeVDSCommand] (QuartzScheduler_Worker-62) [3165a3b2] FINISH, MarkPoolInReconstructModeVDSCommand, log id: 40a6ee33

1 0

Best way to create project-based virtual labs
by Clint Smith 12 Aug '16

12 Aug '16

> This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3553852069_1160118647 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Hi All, I have gone through work of setting up ovirt and have integrated a director= y server. I am now reading about permissions and quotas; I'm trying to figu= re out the best mechanisms for sectioning off resources to groups of users t= hat are on different projects. I would like each member to have the ability to create Vms and templates wi= thin their respective project group. It=E2=80=99s ok if members within the group = see the each others Vms, however, I would like to keep team resources isolat= ed to the team, if possible. I=E2=80=99m not sure whether to create a new host, cl= uster, datacenter, or storage domain for each team. Ovirt seems highly flexi= ble in this area so I was wondering if anyone has any suggestions. Thanks very much! Clint --B_3553852069_1160118647 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable <html><head></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: s= pace; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size:= 14px; font-family: Calibri, sans-serif;"><div>Hi All,</div><div>I have gone= through work of setting up ovirt and have integrated a directory server. &n= bsp;I am now reading about permissions and quotas; I'm trying to figure out = the best mechanisms for sectioning off resources to groups of users that are= on different projects.</div><div><br></div><div>I would like each member to= have the ability to create Vms and templates within their respective projec= t group.  It’s ok if members within the group see the each others= Vms, however, I would like to keep team resources isolated to the team, if = possible. I’m not sure whether to create a new host, cluster, datacent= er, or storage domain for each team. Ovirt seems highly flexible in this are= a so I was wondering if anyone has any suggestions.</div><div><br></div><div= >Thanks very much!</div><div>Clint</div><div><div id=3D"MAC_OUTLOOK_SIGNATURE"= ></div></div></body></html> --B_3553852069_1160118647--

1 0

oVirt updates available on host due to libvirt missing
by Gianluca Cecchi 12 Aug '16

12 Aug '16

Hello, My self hosted engine environment was born in 3.6.0 in November with CentOS 7 on host and CentOS 7 appliance. I managed several updates applying 3.6.2, then 3.6.5, then 4.0. Now I'm at 4.0.2 final and in web admin gui I see a message regarding updates available on host (hosted_engine_1) that doesn't go away. The host usually was updated through "yum update" and not from the gui during updates described above. In events pane it seems the problem is related with libvirt package Host hosted_engine_1 has available updates: libvirt. Actually at this moment the libvirt package (that seems actually a sort of meta-package) is not installed and I think has been never here. Situation is: [root@ractor log]# rpm -qa|grep libvirt libvirt-daemon-driver-network-1.2.17-13.el7_2.5.x86_64 libvirt-daemon-driver-interface-1.2.17-13.el7_2.5.x86_64 libvirt-daemon-kvm-1.2.17-13.el7_2.5.x86_64 libvirt-client-1.2.17-13.el7_2.5.x86_64 libvirt-daemon-1.2.17-13.el7_2.5.x86_64 libvirt-lock-sanlock-1.2.17-13.el7_2.5.x86_64 libvirt-daemon-driver-storage-1.2.17-13.el7_2.5.x86_64 libvirt-daemon-driver-qemu-1.2.17-13.el7_2.5.x86_64 libvirt-daemon-driver-nodedev-1.2.17-13.el7_2.5.x86_64 libvirt-python-1.2.17-2.el7.x86_64 libvirt-daemon-config-nwfilter-1.2.17-13.el7_2.5.x86_64 libvirt-daemon-driver-nwfilter-1.2.17-13.el7_2.5.x86_64 libvirt-daemon-driver-secret-1.2.17-13.el7_2.5.x86_64 [root@ractor log]# If I run "yum install libvirt" I'm proposed: Dependencies Resolved ==================================================================================================== Package Arch Version Repository Size ==================================================================================================== Installing: libvirt x86_64 1.2.17-13.el7_2.5 updates 119 k Installing for dependencies: libvirt-daemon-config-network x86_64 1.2.17-13.el7_2.5 updates 120 k libvirt-daemon-driver-lxc x86_64 1.2.17-13.el7_2.5 updates 747 k Transaction Summary ==================================================================================================== Install 1 Package (+2 Dependent packages) How to proceed? Thanks, Gianluca

5 11

[ANN] oVirt 4.0.2 Final Release is now available
by Sandro Bonazzola 12 Aug '16

12 Aug '16

The oVirt Project is pleased to announce the availability of oVirt 4.0.2, as of August 12th, 2016. This release is available now for: * Fedora 23 (tech preview) * Red Hat Enterprise Linux 7.2 or later * CentOS Linux (or similar) 7.2 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.2 or later * CentOS Linux (or similar) 7.2 or later * Fedora 23 (tech preview) * oVirt Next Generation Node 4.0 Please take a look at our community page[1] to know how to ask questions and interact with developers and users. All issues or bugs should be reported via oVirt Bugzilla[2]. This update is the second in a series of stabilization updates to the 4.0 series. 4.0.2 brings 24 enhancements and more than 200 bugfixes, including 107 high or urgent severity fixes, on top of oVirt 4.0 series See the release notes [3] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: * A new oVirt Live ISO is available. [4] * A new oVirt Next Generation Node will be available soon [4]. * A new oVirt Engine Appliance is already available. * Mirrors[5] might need up to one day to synchronize. Additional Resources: * Read more about the oVirt 4.0.2 release highlights: http://www.ovirt.org/release/4.0.2/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] https://www.ovirt.org/community/ [2] https://bugzilla.redhat.com/enter_bug.cgi?classification=oVirt [3] http://www.ovirt.org/release/4.0.2/ [4] http://resources.ovirt.org/pub/ovirt-4.0/iso/ [5] http://www.ovirt.org/Repository_mirrors#Current_mirrors -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

2 2

Re: [ovirt-users] Unable to login to the WEB UI
by Fabrice Bacchella 12 Aug '16

12 Aug '16

--Apple-Mail=_F7422B19-9C53-401B-B9C1-3EB9A88300B1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > Le 11 ao=C3=BBt 2016 =C3=A0 11:37, Fabrice Bacchella = <fabrice.bacchella(a)icloud.com> a =C3=A9crit : >=20 >=20 >> Le 11 ao=C3=BBt 2016 =C3=A0 09:31, Martin Perina <mperina(a)redhat.com = <mailto:mperina@redhat.com>> a =C3=A9crit : >>=20 >> Hi Fabrice, >>=20 >> so it seems to me that ovirt-engine-rename didn't work as expected, = because you have changed ENGINE_FQDN in 10-setup-protocols.conf. We = don't support user updates on automatically generated files in = /etc/ovirt-engine/engine.conf.d/. Please next time you'd like to change = something, change it in 99-custom-???.conf file. >=20 > I roll back this change, as you said it was not enough and then the = rename command.. >=20 >>=20 >> Now how to get things working: I'm afraid it would be long and = painful process, but let's try: >>=20 >> 1. Change manually ENGINE_FQDN to the new value you have used as new = FQDN in ovirt-engine-rename in those files: >>=20 >> /etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf >> /etc/ovirt-engine/imageuploader.conf.d/10-engine-setup.conf >> /etc/ovirt-engine/isouploader.conf.d/10-engine-setup.conf >> /etc/ovirt-engine/logcollector.conf.d/10-engine-setup.conf >>=20 >> 2. Now, let's check your custom certificates, I know you are using = your custom CA, does the trustore you have set into = ENGINE_HTTPS_PKI_TRUST_STORE contains all certificates which are needed = to verify HTTPS certificates you have set in Apache for new FQDN? If so, = then please restart your engine and try >>=20 >> Thanks >>=20 >> Martin Perina >=20 > I'm not sur the PKI part is the biggest problem. I managed to get it = work after a rename and using a custom truststore with all the needed = CA. >=20 > My main problem is with this strange=20 > User login failure: java.lang.RuntimeException: server_error: = org.codehaus.jackson.JsonParseException: Unexpected character ('<' (code = 60)): expected a valid value (number, String, array, object, 'true', = 'false' or 'null') >=20 > that no one seems to understand where it came from. Ravi suggest to do = not use custom certificate, but I think it's impossible to test this = now, because of the incomplete operation of the rename command. So I = will but back my trust store and we should focus on this message. >=20 > By the way, I'm on irc on the channel with the nick FabriceB. Ok we finally nailed that problem with the help of Ravi Nori. Because of = the new SSO settings, ovirt-engine made a called to itself, from within = the same process. But it needed to go through apache to authentify = itself by itself and was intercepted by my SSO setup. I will need to = rewrite it and split URL. --Apple-Mail=_F7422B19-9C53-401B-B9C1-3EB9A88300B1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D""><br class=3D""><div><blockquote type=3D"cite" class=3D""><div = class=3D"">Le 11 ao=C3=BBt 2016 =C3=A0 11:37, Fabrice Bacchella <<a = href=3D"mailto:fabrice.bacchella@icloud.com" = class=3D"">fabrice.bacchella(a)icloud.com</a>> a =C3=A9crit :</div><br = class=3D"Apple-interchange-newline"><div class=3D""><meta = http-equiv=3D"Content-Type" content=3D"text/html charset=3Dutf-8" = class=3D""><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: = space; -webkit-line-break: after-white-space;" class=3D""><br = class=3D""><div class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D"">Le 11 ao=C3=BBt 2016 =C3=A0 09:31, Martin Perina <<a = href=3D"mailto:mperina@redhat.com" class=3D"">mperina(a)redhat.com</a>> = a =C3=A9crit :</div><br class=3D"Apple-interchange-newline"><div = class=3D""><div dir=3D"ltr" class=3D""><div class=3D"gmail_default" = style=3D"font-family:arial,helvetica,sans-serif">Hi Fabrice,<br = class=3D""><br class=3D""></div><div class=3D"gmail_default" = style=3D"font-family:arial,helvetica,sans-serif">so it seems to me that = ovirt-engine-rename didn't work as expected, because you have changed = ENGINE_FQDN in 10-setup-protocols.conf. We don't support user updates on = automatically generated files in /etc/ovirt-engine/engine.conf.d/. = Please next time you'd like to change something, change it in = 99-custom-???.conf file.<br class=3D""></div></div></div></blockquote><div= class=3D""><br class=3D""></div>I roll back this change, as you said it = was not enough and then the rename command..</div><div class=3D""><br = class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div = dir=3D"ltr" class=3D""><div class=3D"gmail_default" = style=3D"font-family:arial,helvetica,sans-serif"><br class=3D""></div><div= class=3D"gmail_default" = style=3D"font-family:arial,helvetica,sans-serif">Now how to get things = working: I'm afraid it would be long and painful process, but let's = try:<br class=3D""><br class=3D""></div><div class=3D"gmail_default" = style=3D"font-family:arial,helvetica,sans-serif">1. Change manually = ENGINE_FQDN to the new value you have used as new FQDN in = ovirt-engine-rename in those files:<br class=3D""><br = class=3D"">    /etc/ovirt-engine/engine.conf.<wbr = class=3D"">d/10-setup-protocols.conf<br class=3D"">    = /etc/ovirt-engine/<wbr class=3D"">imageuploader.conf.d/10-<wbr = class=3D"">engine-setup.conf<br class=3D"">     /etc/ovirt-engine/isouploader.<wbr = class=3D"">conf.d/10-engine-setup.conf<br class=3D"">     /etc/ovirt-engine/<wbr = class=3D"">logcollector.conf.d/10-engine-<wbr class=3D"">setup.conf<br = class=3D""><br class=3D""></div><div class=3D"gmail_default" = style=3D"font-family:arial,helvetica,sans-serif">2. Now, let's check = your custom certificates, I know you are using your custom CA, does the = trustore you have set into ENGINE_HTTPS_PKI_TRUST_STORE contains all = certificates which are needed to verify HTTPS certificates you have set = in Apache for new FQDN? If so, then please restart your engine and = try<br class=3D""><br class=3D""></div><div class=3D"gmail_default" = style=3D"font-family:arial,helvetica,sans-serif">Thanks<br class=3D""><br = class=3D""></div><div class=3D"gmail_default" = style=3D"font-family:arial,helvetica,sans-serif">Martin Perina<br = class=3D""></div></div></div></blockquote></div><br class=3D""><div = class=3D"">I'm not sur the PKI part is the biggest problem. I managed to = get it work after a rename and using a custom truststore with all the = needed CA.</div><div class=3D""><br class=3D""></div><div class=3D"">My = main problem is with this strange </div><div class=3D"">User login = failure: java.lang.RuntimeException: server_error: = org.codehaus.jackson.JsonParseException: Unexpected character ('<' = (code 60)): expected a valid value (number, String, array, object, = 'true', 'false' or 'null')</div><div class=3D""><br class=3D""></div><div = class=3D"">that no one seems to understand where it came from. Ravi = suggest to do not use custom certificate, but I think it's impossible to = test this now, because of the incomplete operation of the rename = command. So I will but back my trust store and we should focus on this = message.</div><div class=3D""><br class=3D""></div><div class=3D"">By = the way, I'm on irc on the channel with the nick = FabriceB.</div></div></div></blockquote><br class=3D""></div><div>Ok we = finally nailed that problem with the help of Ravi Nori. Because of the = new SSO settings, ovirt-engine made a called to itself, from within the = same process. But it needed to go through apache to authentify itself by = itself and was intercepted by my SSO setup. I will need to rewrite it = and split URL.</div><div><br class=3D""></div><div><br = class=3D""></div><br class=3D""></body></html>= --Apple-Mail=_F7422B19-9C53-401B-B9C1-3EB9A88300B1--

1 0

Missing vdsm-vhostmd-hook for oVirt 4.x
by Arsène Gschwind 11 Aug '16

11 Aug '16

Hi, I'm missing vdsm-vhostmd-hook for oVirt 4, will this hook not be available for this version? Regards, Arsène

2 2

oVirt upgrade
by Budur Nagaraju 11 Aug '16

11 Aug '16

HI How to upgrade oVirt3.5 to 4 ? am using centos6.7. Thanks, Nagaraju

4 8

time zone
by Fernando Fuentes 11 Aug '16

11 Aug '16

Team, My vms are coming up with an exclamation mark saying that the guest time zone differs from the configuration. My linux vms are not doing this. Only my windows vm. On windows I have it set for CST just like the configuration. The hosts are on CST as well. Any ideas? This is Ovirt 4.0.1 Regards, -- Fernando Fuentes ffuentes(a)txweather.org http://www.txweather.org

3 3

ovirt-Guest-agent CPU usage
by Tadas 11 Aug '16

11 Aug '16

Hello groups, we are having problem with ovirt-guest agent on Windows os. When started, agent fully utilizes one core (if machine has single core, then you will see 100% CPU usage, if there are two cores, then you will get 50% usage etc). Usage does not drop and persists for a whole time ovirt agent is running. This happens on windows 7 32 and 64 versions and also on windows 10. Have anybody had the same issue? Thank you.

2 9