- Users - oVirt List Archives

possible actions on host remaining as nonresponsive
by Gianluca Cecchi 23 Dec '21

23 Dec '21

Hello, I have a 4.4.8 host that results as nonresponsive. The DC is FC based Tried to restart some daemons without effect (vdsmd, mom-vdsmd wdmd) Then I executed a ssh host reboot but it seems it continues this way after rebooting From storage and network point of view it seems all ok on the host. In vdsm.log of the host I see every 5 seconds: 2021-12-23 18:54:53,053+0100 INFO (vmrecovery) [vdsm.api] START getConnectedStoragePoolsList() from=internal, task_id=916bc455-ce37-4b50-9f38-b69e3b03807f (api:48) 2021-12-23 18:54:53,053+0100 INFO (vmrecovery) [vdsm.api] FINISH getConnectedStoragePoolsList return={'poollist': []} from=internal, task_id=916bc455-ce37-4b50-9f38-b69e3b03807f (api:54) 2021-12-23 18:54:53,053+0100 INFO (vmrecovery) [vds] recovery: waiting for storage pool to go up (clientIF:735) 2021-12-23 18:54:53,444+0100 INFO (periodic/0) [vdsm.api] START repoStats(domains=()) from=internal, task_id=eb5540e0-0f90-4996-bc9a-7c73949f390f (api:48) 2021-12-23 18:54:53,445+0100 INFO (periodic/0) [vdsm.api] FINISH repoStats return={} from=internal, task_id=eb5540e0-0f90-4996-bc9a-7c73949f390f (api:54) In engine.log 2021-12-23 18:54:38,745+01 INFO [org.ovirt.engine.core.bll.utils.ThreadPoolMonitoringService] (EE-ManagedScheduledExecutorService-engineThreadMonitoringThreadPool-Thread-1) [] Thread pool 'hostUpdatesChecker' is using 0 threads out of 5, 5 threads waiting for tasks. 2021-12-23 18:55:27,479+01 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-73) [] EVENT_ID: VDS_BROKER_COMMAND_FAILURE(10,802), VDSM ov300 command Get Host Capabilities failed: Message timeout which can be caused by communication issues 2021-12-23 18:55:27,479+01 ERROR [org.ovirt.engine.core.vdsbroker.monitoring.HostMonitoring] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-73) [] Unable to RefreshCapabilities: VDSNetworkException: VDSGenericException: VDSNetworkException: Message timeout which can be caused by communication issues I would like to try to put into maintenance the host and then activate, or reinstall, but there is a power action still in place since 1 hour ago (when I executed ssh host reboot attempt that got host rebooted but not connected apparently) that prevents it... what is its timeout? WHat can I check to understand the source of these supposed communication problems? Thanks, Gianluca

2 2

Ovirt version 4.4.9.5-1.el8 getting error PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
by florianvanoudgaarden＠gmail.com 23 Dec '21

23 Dec '21

Hi All, I just have installed a Ovirt host using all the default settings from the manual. I started with a CentOS 8 minimum install Then I followed the Ovirt installation guide to install Ovirt version 4.4.9.5-1.el8 Now I try to log on to the Administration portal and I get the following message : PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target When searching the internet then I get several answers but all about using certificates from third-parties. I don’t use third-party certificates. When I look in the OVIRT administration guide they only talk about third party certificates So can anyone help to fix this error?

4 10

using stop_reason as a vdsm hook trigger into the UI
by Nathanaël Blanchet 22 Dec '21

22 Dec '21

Hello, I'm writing some code to make the following workflow: * setting a custom stop_reason as 'force_delete' when stopping/deleting a vm * this will trigger a vdsm hook into after_vm_destroy event. * this hook will call back AWX/ansible to: o remove DNS entries o remove vm file backup o delete supervision o (optionnal) delete the vm * the vm is destroyed and removed by vdsm. Here is the code (I'm not a python expert) #!/usr/libexec/platform-python # 211217 NBT # This is a vdsm hook that aims to auto delete oVirt dependencies when removing a VM directly from engine. # It is triggered when filling the stop_reason field in oVirt with strict 'clean'. # It initially concerns following actions: # - Centreon subscription Removing # - Backup erase from Sotora # - DNS cleaning on Lilas # - IPA deletion # This set of actions can be extended into the concerned AWX job_template (180 or 160) # When finished, vm can be manually removed from Engine. # When string is 'force_delete' or 'force_remove', then in addition, the vm will be automatically erased at the same time. importos fromvdsm.hook importhooking fromxml.dom importminidom importrequests fromxml.etree importElementTree importsys importurllib3 importtime importtraceback importsubprocess fromsubprocess importPIPE, STDOUT importlogging urllib3.disable_warnings() logger = logging.getLogger("register_migration") defexec_cmd(*args): retcode, out, err = hooking.execCmd(args, sudo=True) ifretcode != 0: raiseRuntimeError("Failed to execute %s, due to: %s"% (args, err)) returnout if__name__== '__main__': logging.basicConfig(filename="/var/log/vdsm/custom_hooks.log", level=logging.INFO, format='%(asctime)s%(levelname)s%(name)s:%(message)s', datefmt= '%Y-%m-%d%H:%M:%S') iflen(sys.argv) > 1: vm_name= sys.argv[1] else: domxml = hooking.read_domxml() vm_name = domxml.getElementsByTagName('name')[0].firstChild.nodeValue print(vm_name) # API oVirt: Initialize variables user = 'admin@internal' password = 'password' url = "https://air-dev.v100.abes.fr/ovirt-engine/api/vms?search=name%3D"+ vm_name headers = {'Accept': 'application/xml'} print('name: '+ vm_name) # API oVirt: Test if VM stop_reason has been defined whileTrue: # r = requests.get(url, headers=headers, auth=('admin@internal', 'password'), verify=False) # tree = ElementTree.fromstring(r.content) r = exec_cmd('curl', '--insecure', '--header', 'Accept: application/xml', '--user', 'admin@internal:password', 'https://air-dev.v100.abes.fr/ovirt-engine/api/vms?search=name%3D'+ vm_name) tree = ElementTree.fromstring(b''.join(r)) forvm intree.findall('vm'): status = vm.find('status') stop_reason = vm.find('stop_reason') print(status.text) ifstop_reason isnotNone: print(status.text, stop_reason.text) break time.sleep(1) forvm intree.findall('vm'): stop_reason = vm.find('stop_reason') ifstop_reason isNone: exit('stop_reason is not defined') else: # API AWX: Initialize variables header1 = 'Content-Type: application/json' header2 = 'Authorization: Bearer token' curl_server = "nbt" curl_extra_vars = "{\\\"comment\\\": \\\"Nbt\\\", \\\"survey_ovirt_password\\\": \\\"password\\\", \\\"force_erase\\\": \\\"yes\\\", \\\"survey_vms_list\\\": %s}"% (vm_name) curl_config = '{"extra_vars": "%s"}'% (curl_extra_vars) ifstop_reason in["clean"]: curl_job_template = "180" print('Cleaning'+ vm_name + 'from oVirt on ancolie-'+ curl_server + 'with workflow_job_template '+ curl_job_template) curl_url = "http://ancolie-{}.v106.abes.fr/api/v2/workflow_job_templates/{}/launch/".format(curl_server,curl_job_template) exec_cmd('curl', '-f', '-H', header1, '-H', header2, '-XPOST', '-d', curl_config, curl_url) elifstop_reason in["force_delete", "force_remove"]: curl_job_template = "160" print('Deleting and cleaning'+ vm_name + 'from oVirt on ancolie-'+ curl_server + 'with workflow_job_template '+ curl_job_template ) curl_url = "http://ancolie-{}.v106.abes.fr/api/v2/workflow_job_templates/{}/launch/".format(curl_server,curl_job_template) exec_cmd('curl', '-f', '-H', header1, '-H', header2, '-XPOST', '-d', curl_config, curl_url) else: exit('Stop reason is '+ stop_reason + ' and there is no reason to do anything for '+ vm_name) The idea is to use the stop_reason element into the vm xml definition. But after hours, I realized that this element is writed to the vm definition file only after the VM has been destroyed. So if I test this value (if existing) when executing the hook, the text value doesn't still exist at early time I added a 'while' loop to wait for the stop_reason element to be present, but vdsm hangs out because of an infinity loop: 2021-12-20 18:13:30,148+0100 INFO (jsonrpc/7) [root] /usr/libexec/vdsm/hooks/after_vm_destroy/clean_vm_dependencies_2.py: rc=1 err=b'Traceback (most recent call last):\n File "/usr/libexec/vdsm/hooks/after_vm_destroy/clean_vm_dependencies_2.py", line 84, in <module>\n print(status.text, stop_reason.text)\nAttributeError: \'NoneType\' object has no attribute \'text\'\n' (hooks:122) .... So I'm deducing I'm not able to accomplish my initial goal to use stop_reason as a trigger with after_vm_destroy event. I searched an other way to do: I thought of replacing querying ovirt API with getting the value coming from the UI, but I can't find the suitable database query. Is there a way to do such a thing? Does engine hooks exist for stopped vm?? Thank you for your help. PS: I'm already able to do this from ansible/AWX, but I have to do it from UI/vdsm for any reason. -- Nathanaël Blanchet Supervision réseau SIRE 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

3 5

virsh list --all only shows running on host
by richmoch＠yahoo.com 22 Dec '21

22 Dec '21

Hi *, I am having a problem where on a KVM host I run virsh list --all. I only see the running VMs : [root@MBGVRT3323 ~]# virsh list --all Please enter your authentication name: Please enter your password: Id Name State ----------------------------------- 3 MBPDBS0583U-CLONE running 4 MBGDBS3156U-CLONE running I know there are two more VMs that are shutdown , and if I run virsh list --state-shutoff , nothing is returned. in fact, look at the numbering of the two running VMs, 3 and 4. The GUI shows the two running and the other two as being shutdown. Why is this happening ? Given this, seems the only way to start the two VMs which are down is in the GUI and not with virsh start domain which seems limiting. Any ideads would be greatly appreciated. [root@MBGVRT3323 ~]# virsh version Please enter your authentication name: root Please enter your password: Compiled against library: libvirt 5.7.0 Using library: libvirt 5.7.0 Using API: QEMU 5.7.0 Running hypervisor: QEMU 4.2.1 You have new mail in /var/spool/mail/root [root@MBGVRT3323 ~]#

3 4

Oauth token lifetime
by Nathanaël Blanchet 21 Dec '21

21 Dec '21

3 4

[ANN] oVirt 4.4.10 First Release Candidate is now available for testing
by Sandro Bonazzola 21 Dec '21

21 Dec '21

oVirt 4.4.10 First Release Candidate is now available for testing The oVirt Project is pleased to announce the availability of oVirt 4.4.10 First Release Candidate for testing, as of December 21st, 2021. This update is the tenth in a series of stabilization updates to the 4.4 series. Documentation - If you want to try oVirt as quickly as possible, follow the instructions on the Download <https://ovirt.org/download/> page. - For complete installation, administration, and usage instructions, see the oVirt Documentation <https://ovirt.org/documentation/>. - For upgrading from a previous version, see the oVirt Upgrade Guide <https://ovirt.org/documentation/upgrade_guide/>. - For a general overview of oVirt, see About oVirt <https://ovirt.org/community/about.html>. Important notes before you try it Please note this is a pre-release build. The oVirt Project makes no guarantees as to its suitability or usefulness. This pre-release must not be used in production. Installation instructions For installation instructions and additional information please refer to: https://ovirt.org/documentation/ This release is available now on x86_64 architecture for: * Red Hat Enterprise Linux 8.5 or similar * CentOS Stream 8 This release supports Hypervisor Hosts on x86_64 and ppc64le architectures for: * Red Hat Enterprise Linux 8.5 or similar * CentOS Stream 8 * oVirt Node 4.4 based on CentOS Stream 8 (available for x86_64 only) See the release notes [1] for installation instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is already available based on CentOS Stream 8 - oVirt Node NG is already available based on CentOS Stream 8 Additional Resources: * Read more about the oVirt 4.4.10 pre-release highlights: http://www.ovirt.org/release/4.4.10/ * Get more oVirt project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.4.10/ [2] http://resources.ovirt.org/pub/ovirt-4.4-pre/iso/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0

vdsm-client delete_checkpoints
by Tommaso - Shellrent 20 Dec '21

20 Dec '21

Hi, someone can give to use us an exemple of the command vdsm-client VM delete_checkpoints ? we have tried a lot of combinations like: vdsm-client VM delete_checkpoints vmID="ce5d0251-e971-4d89-be1b-4bc28283614c" checkpoint_ids=["e0c56289-bfb3-4a91-9d33-737881972116"] without success.. Regards, Tommaso. -- -- Shellrent - Il primo hosting italiano Security First *Tommaso De Marchi* /COO - Chief Operating Officer/ Shellrent Srl Via dell'Edilizia, 19 - 36100 Vicenza Tel. 0444321155 <tel:+390444321155> | Fax 04441492177

2 1

copr-be.cloud.fedoraproject.org down again
by tony.stivers＠gmail.com 20 Dec '21

20 Dec '21

Can we get more than one mirror for this repo? It's down every other day...

2 1

Fresh install, dnf update dependency errors
by mediocre.slacker＠protonmail.com 20 Dec '21

20 Dec '21

CentOS Stream 8 fresh install. The logs show other repos, but I've tried this just installing CentOS Stream 8, updating, then installing the ovirt repo only. Then, after installing ovirt-hosted-engine-setup, dependencies become broken and dnf update produces the following error: [slacker@host1 ~]$ sudo dnf check-update Last metadata expiration check: 0:15:33 ago on Tue 07 Dec 2021 06:27:14 PM EST. epel-next-release.noarch 8-13.el8 epel epel-release.noarch 8-13.el8 epel epel-release.noarch 8-13.el8 ovirt-4.4-epel libzstd.x86_64 1.4.5-6.el8 ovirt-4.4-openstack-victoria ovirt-host.x86_64 4.4.9-2.el8 ovirt-4.4 ovirt-host-dependencies.x86_64 4.4.9-2.el8 ovirt-4.4 ovirt-release44.noarch 4.4.9.1-1.el8 ovirt-4.4 python3-pyparsing.noarch 2.4.6-1.el8 ovirt-4.4-openstack-victoria python3-pyyaml.x86_64 5.1.2-3.el8 ovirt-4.4-copr:copr.fedorainfracloud.org:sbonazzo:EL8_collection python3-six.noarch 1.15.0-2.el8 ovirt-4.4-openstack-victoria [slacker@host1 ~]$ sudo dnf update Last metadata expiration check: 0:15:56 ago on Tue 07 Dec 2021 06:27:14 PM EST. Error: Problem 1: package rsyslog-openssl-8.2102.0-5.el8.x86_64 requires rsyslog = 8.2102.0-5.el8, but none of the providers can be installed - cannot install both rsyslog-8.2102.0-5.el8.x86_64 and rsyslog-8.2102.0-6.el8.x86_64 - package ovirt-host-dependencies-4.4.9-2.el8.x86_64 requires rsyslog-openssl, but none of the providers can be installed - cannot install the best update candidate for package rsyslog-8.2102.0-6.el8.x86_64 - cannot install the best update candidate for package ovirt-host-dependencies-4.4.8-1.el8.x86_64 Problem 2: package rsyslog-mmnormalize-8.2102.0-6.el8.x86_64 requires rsyslog = 8.2102.0-6.el8, but none of the providers can be installed - cannot install both rsyslog-8.2102.0-5.el8.x86_64 and rsyslog-8.2102.0-6.el8.x86_64 - cannot install both rsyslog-8.2102.0-6.el8.x86_64 and rsyslog-8.2102.0-5.el8.x86_64 - package rsyslog-openssl-8.2102.0-5.el8.x86_64 requires rsyslog = 8.2102.0-5.el8, but none of the providers can be installed - package ovirt-host-dependencies-4.4.9-2.el8.x86_64 requires rsyslog-openssl, but none of the providers can be installed - package ovirt-host-4.4.9-2.el8.x86_64 requires ovirt-host-dependencies = 4.4.9-2.el8, but none of the providers can be installed - cannot install the best update candidate for package rsyslog-mmnormalize-8.2102.0-6.el8.x86_64 - cannot install the best update candidate for package ovirt-host-4.4.8-1.el8.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

2 1

Checksum errors
by tony.stivers＠gmail.com 20 Dec '21

20 Dec '21

[ INFO ] TASK [ovirt.ovirt.engine_setup : Update all packages] [ ERROR ] fatal: [localhost -> 192.168.1.115]: FAILED! => {"changed": false, "msg": "Failed to download packages: Cannot download noarch/ovirt-engine-setup-plugin-imageio-4.4.9.5-1.el8.noarch.rpm: All mirrors were tried", "results": []} $ sudo dnf download ovirt-engine-setup-plugin-imageio Last metadata expiration check: 0:17:07 ago on Mon 06 Dec 2021 02:45:32 PM EST. [MIRROR] ovirt-engine-setup-plugin-imageio-4.4.9.5-1.el8.noarch.rpm: Downloading successful, but checksum doesn't match. Calculated: 341e4863db246fd0f55fac65f7c464391ca92abacb69726a58c9ca99d8a81695(sha256) Expected: 001ace75d82bedc5c80a9203ea888cb385d1661d37b06e1f3b8a368c504bd0fe(sha256) [MIRROR] ovirt-engine-setup-plugin-imageio-4.4.9.5-1.el8.noarch.rpm: Downloading successful, but checksum doesn't match. Calculated: 341e4863db246fd0f55fac65f7c464391ca92abacb69726a58c9ca99d8a81695(sha256) Expected: 001ace75d82bedc5c80a9203ea888cb385d1661d37b06e1f3b8a368c504bd0fe(sha256) [MIRROR] ovirt-engine-setup-plugin-imageio-4.4.9.5-1.el8.noarch.rpm: Downloading successful, but checksum doesn't match. Calculated: 341e4863db246fd0f55fac65f7c464391ca92abacb69726a58c9ca99d8a81695(sha256) Expected: 001ace75d82bedc5c80a9203ea888cb385d1661d37b06e1f3b8a368c504bd0fe(sha256) ovirt-engine-setup-plugin-imageio-4.4.9.5-1.el8.noarch.rpm 33 kB/s | 27 kB 00:00

2 1

cannot add amd and intel cpu type hosts in the same cluster
by kishorekumar.goli＠gmail.com 20 Dec '21

20 Dec '21

Hi Team, We have hosts with intel and amd cpu types. We would like to know if there is a possibility to use both cpu types in the same cluster in ovirt. cpu types: AMD EPYC, Intel Haswell Family. BRs Kishore

2 2

Upgrading Cluster Compatibility Level with Self Hosted HE
by Nur Imam Febrianto 20 Dec '21

20 Dec '21

Hi, Any idea how the appropriate step for upgrading cluster compatibility level ? We have two nodes that already up to date (already do yum upgrade manually and make sure its up to date), whenever we try to use Upgrade function in cluster, nothing changes. Thanks before. Regards, Nur Imam Febrianto Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows

1 0

fetch engine's version
by Diggy Mc 19 Dec '21

19 Dec '21

Is there a command I can run on the engine to retrieve the engine's version number? I ask because I am writing a bash script to automatically backup the engine database via the 'engine-backup' command and would like to include the engine's current version number with the backup. A response is greatly appreciated.

2 3

Veeam Backup ova importing
by bulentsenguler＠gmail.com 19 Dec '21

19 Dec '21

Hi all, I have wanted to try veeam backup solution for ovirt and I tried to import ova but I failed. the message was "VDSM rhvh01.test.local command Get Host Statistics failed: Internal JSON-RPC error: {'reason': "'str' object has no attribute 'decode'"}" that I recived every thirty seconds. I stuck in this stuation.

2 1

Re: remote-viewer VNC mode issue
by Patrick Hibbs 17 Dec '21

17 Dec '21

Hello, Apperently, VNC with TLS enabled is the default. At the very least I don't remember ever enabling it. Attempting to disable it as a quick test, by altering /etc/libvirt/qemu.conf and setting vlc_tls=0 fixes it. So I guess, I'll need to disable it at the cluster level for a permanent fix. (And then reinstall the hosts....) After seeing the previous reply, I figured that the "direct connection to the VM host" meant the VNC connection would be using TLS. SPICE "Just Works(TM)" with TLS enabled, but for VNC it requires a TLS cert to be installed on the ovirt host servers. And of course, the default is the internal engine CA. With no easy way to override it. (I.e. The new cert config won't survive a host reinstall / upgrade.) Which defeats the entire purpose of having a third party CA for end- user connections. I guess we'll have to disable this method of VM console access for now, and rely on noVNC until the cert issue gets fixed. I'm not sure that the user mailing list is the place for feature requests, but just in case and to avoid criticizing without offering a solution, I would love some mechanism in the web interface to upload a new third party CA cert for the hosts to use with end-user requests. (VNC, image io proxy, cockpit, etc.) The internal engine CA could even be used to secure those cert updates. (As the engine itself could prompt the hosts to install the new cert via VDSM or something. Even better that method wouldn't require a host reinstall to finish.) That would simplify managment and renewal of the certs. As the operation could be delegated / restricted to users with a specific permission, (like with the VM permissions), and prevent us from needing to manually configure things in a text file. (The engine host could use this also.) Thanks for the suggestions everyone. -Patrick Hibbs On Wed, 2021-12-15 at 00:05 +0000, Staniforth, Paul wrote: > Hi Patrick, > > The ovirt-vmconsole is a for emulated serial connections (via a ssh > tunnel). > > The VNC ports are the same range as spice5900 - 6923. > > Do you have encryption enabled for VNC? > > > Regards, > Paul S. > From: Patrick Hibbs <hibbsncc1701(a)gmail.com> > Sent: 14 December 2021 22:53 > To: Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> > Cc: oVirt Users Mailing List <users(a)ovirt.org> > Subject: Re: [ovirt-users] Re: remote-viewer VNC mode issue > > Caution External Mail: Do not click any links or open any attachments > unless you trust the sender and know that the content is safe. > Hello, > > Well a quick check of the hosts say that they have ovirt-vmconsole > enabled on their firewall, but there doesn't seem to be any logs for > the vmconsoles on them. Running wireshark on one of the end-user > machines shows that the host does send packets back and forth but > then the end-user machine TCP resets the connection. (I assume due to > the credential failure.) So it doesn't seem to be a firewall issue. > > Is there anything I can do to get some more logs from the vmconsoles > on the Host? > > Thanks. > > -Patrick Hibbs > > On Tue, 2021-12-14 at 12:56 +0000, Staniforth, Paul wrote: > > Hello Patrick, > > with noVNC the connection is made via the > > websocket-poxy service (probably on the engine server). > > The remote-viewer connects directly from the client machine to the > > virtual host the VM is running on. Maybe check the network/firewall > > between the client and the host, also the OTP expires after 120 > > seconds. > > > > > > Regards, > > > > Paul S. > > From: Strahil Nikolov via Users <users(a)ovirt.org> > > Sent: 14 December 2021 12:12 > > To: hibbsncc1701(a)gmail.com <hibbsncc1701(a)gmail.com>; oVirt Users > > Mailing List <users(a)ovirt.org> > > Subject: [ovirt-users] Re: remote-viewer VNC mode issue > > > > Caution External Mail: Do not click any links or open any > > attachments unless you trust the sender and know that the content > > is safe. > > The most common problem is the CA of oVirt not trusted in the web > > browser of the client. > > > > > > Best Regards, > > Strahil Nikolov > > > > > On Sun, Dec 12, 2021 at 0:00, Patrick Hibbs > > > <hibbsncc1701(a)gmail.com> wrote: > > > Hello, > > > > > > As oVirt unfortuately now requires VNC for the VM consoles, > > > I've been attempting to get VNC mode working on my end user > > > clients. > > > > > > The noVNC browser client works just fine, but for some reason > > > the default download to remote-viewer fails on the same hosts. > > > > > > All the end-user gets is a quick flash of the remote-viewer > > > window on > > > their screen. > > > > > > Running remote-viewer in debug mode I get this: > > > > > > ---log snip--- > > > > > > $ remote-viewer -v --debug Downloads/console.vv > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.906: Opening > > > display > > > to Downloads/console.vv > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.906: Guest > > > (null) has > > > a vnc display > > > Guest (null) has a vnc display > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: Spice > > > foreign > > > menu updated > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: After open > > > connection callback fd=-1 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: Opening > > > connection to display at Downloads/console.vv > > > Opening connection to display at Downloads/console.vv > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.953: fullscreen > > > display 0: 0 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.953: notebook > > > show > > > status 0x560a419d2280 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: notebook > > > show > > > status 0x560a419d2280 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: Insert > > > display 0 > > > 0x560a423fa1e0 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: notebook > > > show > > > status 0x560a419d2280 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.052: Allocated > > > 1024x740 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.052: Child > > > allocate > > > 1024x640 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.053: Got VNC > > > credential request for 1 credential(s) > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: Not > > > removing > > > main window 0 0x560a4195d910 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: > > > Disconnected > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: close > > > vnc=0x560a419fc220 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.068: notebook > > > show > > > status 0x560a419d2280 > > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.068: Guest > > > (null) > > > display has disconnected, shutting down > > > Guest (null) display has disconnected, shutting down > > > > > > ---log snip--- > > > > > > It seems to be failing a credential request, but I'm not sure > > > why. The > > > engine logs only show the VM console ticket being created, but > > > does not > > > show any connection attempts unless noVNC is used. > > > > > > ---log snip--- > > > > > > 2021-12-11 16:48:23,402-05 INFO > > > [org.ovirt.engine.core.bll.SetVmTicketCommand] (default task-16) > > > [68b90cfe] Running command: SetVmTicketCommand internal: false. > > > Entities affected : ID: bb05ab12-91e5-4ab6-92b1-b911ed78f64f > > > Type: > > > VMAction group CONNECT_TO_VM with role type USER > > > 2021-12-11 16:48:23,414-05 INFO > > > [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] > > > (default task-16) [68b90cfe] START, > > > SetVmTicketVDSCommand(HostName = -- > > > REDACTED--, SetVmTicketVDSCommandParameters:{hostId='1fdd841b- > > > 477f- > > > 4d13-9935-7908924dd5a1', vmId='bb05ab12-91e5-4ab6-92b1- > > > b911ed78f64f', > > > protocol='VNC', ticket='ocziPsEOF4km', validTime='120', > > > userName='-- > > > REDACTED--@--REDACTED--', userId='e83ab2b3-c464-49a4-a0ab- > > > 4e62e8131304', disconnectAction='LOCK_SCREEN'}), log id: f6dccdd > > > 2021-12-11 16:48:23,435-05 INFO > > > [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] > > > (default task-16) [68b90cfe] FINISH, SetVmTicketVDSCommand, > > > return: , > > > log id: f6dccdd > > > 2021-12-11 16:48:23,461-05 INFO > > > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDire > > > ctor] > > > (default task-16) [68b90cfe] EVENT_ID: VM_SET_TICKET(164), User -- > > > REDACTED--@--REDACTED--@--REDACTED-- initiated console session > > > for VM > > > Test > > > # > > > > > > ---log snip--- > > > > > > What else can I do to troubleshoot this? > > > > > > - Patrick Hibbs > > > > > > _______________________________________________ > > > Users mailing list -- users(a)ovirt.org > > > To unsubscribe send an email to users-leave(a)ovirt.org > > > Privacy Statement: https://www.ovirt.org/privacy-policy.html > > > oVirt Code of Conduct: > > > https://www.ovirt.org/community/about/community-guidelines/ > > > List Archives: > > > > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/Q5ENXJJU5V7LJ… > > To view the terms under which this email is distributed, please go > > to:- > > https://leedsbeckett.ac.uk/disclaimer/email > > > To view the terms under which this email is distributed, please go > to:- > https://leedsbeckett.ac.uk/disclaimer/email

1 0

There is no 'admin' in users table
by jihwahn1018＠naver.com 17 Dec '21

17 Dec '21

Hi, i have trouble in 'ovirt-engine-extension-aaa-jdbc' I'm following 'III. Configuration of a new custom aaa-jdbc profile' part in README.admin (https://github.com/jihwahn1018/ovirt-engine-extension-aaa-jdbc/blob/master/…) when i try to login the webadmin page, i can't login becauser there is no 'admin' in custom database. how can i solve it? Thanks, Jihwan

2 2

Is vulnerable log4j package necessary in my ovirt repo?
by Henry lol 16 Dec '21

16 Dec '21

Hello, I found that the vulnerable log4j-2.13.0-1 package is in oVirt repository, but not installed even after the oVirt setup. So, I want to remove that package from my private oVirt repository if it's not necessary. but I'm not sure what will happen by doing so. Is there any side effects?

2 1

Questions about VDSM communication protocol
by Henry lol 16 Dec '21

16 Dec '21

Hello, 1. I know vdsm communication adopted rpc over "stomp" and i'm wondering if it's due to use of the message broker or any other purpose. 2. according to https://www.ovirt.org/develop/release-management/features/infra/jsonrpc.html, vdsm has the final plan to completely separate msg broker. Is it still valid and under development? 3. if so, why is vdsm trying to use msg broker? because it seems enough even without msg broker. thanks,

3 7

After update nodectl reports host as degraded
by Giorgio Biacchi 16 Dec '21

16 Dec '21

Hi all, I've got this minor issue a couple of times so far after updating Ovirt node hosts from the UI. The update is done corrctly but after the final reboot I have to login via ssh and manually fix the issue with these commands: [root@host01 ~]# semodule -i /usr/share/selinux/packages/ovirt-vmconsole/ovirt_vmconsole.pp [root@host01 ~]# vdsm-tool configure [root@host01 ~]# systemctl restart vdsmd I have the same behavior on all my hosts running Ovirt Node. There's a way to fix it properly? Thanks -- gb PGP Key: http://pgp.mit.edu/ Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34

2 1

snapshot create fails - files not owned by vdsm:kvm
by tpike＠psc.edu 15 Dec '21

15 Dec '21

I've got an issue with one of my oVirt 4.3.10.4 clusters. OS is Centos 7.7, storage is glusterfs. Whenever I try to create a snapshot of any of my VMs, I get an (eventual) error: VDSM track04.yard.psc.edu command HSMGetAllTasksStatusesVDS failed: Could not acquire resource. Probably resource factory threw an exception.: () After a bit of investigation, I believe that the root cause is that the snapshot file created is not owned by vdsm:kvm. Looking at the directories in glusterfs, I see that some of the disk images are owned by root:root, some are owned by qemu:qemu. In fact, if we watch the directory for the VM, we can actually see that the files are owned by vdsm:kvm when they are created, then get changed to qemu:qemu, then eventually get changed to being owned by root:root. This is entirely repeatable. Needless to say, oVirt can't read the disk images when they are owned by root, so that explains why the snapshot is failing. The question, then, is why the ownership is getting changed out from under the creation process. Checking the gluster volume info shows: Volume Name: engine Type: Replicate Volume ID: 00951055-74b5-463a-84c0-59fa03be7478 Status: Started Snapshot Count: 0 Number of Bricks: 1 x 3 = 3 Transport-type: tcp Bricks: Brick1: 10.200.0.131:/gluster_bricks/engine/engine Brick2: 10.200.0.134:/gluster_bricks/engine/engine Brick3: 10.200.0.135:/gluster_bricks/engine/engine Options Reconfigured: performance.client-io-threads: off nfs.disable: on transport.address-family: inet performance.quick-read: off performance.read-ahead: off performance.io-cache: off performance.low-prio-threads: 32 network.remote-dio: off cluster.eager-lock: enable cluster.quorum-type: auto cluster.server-quorum-type: server cluster.data-self-heal-algorithm: full cluster.locking-scheme: granular cluster.shd-max-threads: 8 cluster.shd-wait-qlength: 10000 features.shard: on user.cifs: off storage.owner-uid: 36 storage.owner-gid: 36 network.ping-timeout: 30 performance.strict-o-direct: on cluster.granular-entry-heal: enable I see that the owner UID and GID are correct (vdsm:kvm). Note that snapshots worked at one point in the past - I see that there are snapshot images from a year ago. Any ideas where to look to correct this? Thanks! Tod Pike

2 3

[FOSDEM][CFP] Virtualization & IaaS Devroom
by Piotr Kliczewski 15 Dec '21

15 Dec '21

We are excited to announce that the call for proposals is now open for the Virtualization & IaaS devroom at the upcoming FOSDEM 2022, to be hosted virtually on February 5th 2022. This year will mark FOSDEM’s 22nd anniversary as one of the longest-running free and open source software developer events, attracting thousands of developers and users from all over the world. Due to Covid-19, FOSDEM will be held virtually this year on February 5th & 6th, 2022. About the Devroom The Virtualization & IaaS devroom will feature session topics such as open source hypervisors and virtual machine managers such as Xen Project, KVM, bhyve, and VirtualBox, and Infrastructure-as-a-Service projects such as KubeVirt, Apache CloudStack, Foreman, OpenStack, oVirt, QEMU and OpenNebula. This devroom will host presentations that focus on topics of shared interest, such as KVM; libvirt; shared storage; virtualized networking; cloud security; clustering and high availability; interfacing with multiple hypervisors; hyperconverged deployments; and scaling across hundreds or thousands of servers. Presentations in this devroom will be aimed at users or developers working on these platforms who are looking to collaborate and improve shared infrastructure or solve common problems. We seek topics that encourage dialog between projects and continued work post-FOSDEM. Important Dates Submission deadline: 20th of December Acceptance notifications: 25th of December Final schedule announcement: 31st of December Recorded presentations upload deadline: 15th of January Devroom: 6th February 2022 Submit Your Proposal All submissions must be made via the Pentabarf event planning site[1]. If you have not used Pentabarf before, you will need to create an account. If you submitted proposals for FOSDEM in previous years, you can use your existing account. After creating the account, select Create Event to start the submission process. Make sure to select Virtualization and IaaS devroom from the Track list. Please fill out all the required fields, and provide a meaningful abstract and description of your proposed session. Submission Guidelines We expect more proposals than we can possibly accept, so it is vitally important that you submit your proposal on or before the deadline. Late submissions are unlikely to be considered. All presentation slots are 30 minutes, with 20 minutes planned for presentations, and 10 minutes for Q&A. All presentations will need to be pre-recorded and put into our system at least a couple of weeks before the event. The presentations should be uploaded by 15th of January and made available under Creative Commons licenses. In the Submission notes field, please indicate that you agree that your presentation will be licensed under the CC-By-SA-4.0 or CC-By-4.0 license and that you agree to have your presentation recorded. For example: "If my presentation is accepted for FOSDEM, I hereby agree to license all recordings, slides, and other associated materials under the Creative Commons Attribution Share-Alike 4.0 International License. Sincerely, <NAME>." In the Submission notes field, please also confirm that if your talk is accepted, you will be able to attend the virtual FOSDEM event for the Q&A. We will not consider proposals from prospective speakers who are unsure whether they will be able to attend the FOSDEM virtual event. If you are experiencing problems with Pentabarf, the proposal submission interface, or have other questions, you can email our devroom mailing list[2] and we will try to help you. Code of Conduct Following the release of the updated code of conduct for FOSDEM, we'd like to remind all speakers and attendees that all of the presentations and discussions in our devroom are held under the guidelines set in the CoC and we expect attendees, speakers, and volunteers to follow the CoC at all times. If you submit a proposal and it is accepted, you will be required to confirm that you accept the FOSDEM CoC. If you have any questions about the CoC or wish to have one of the devroom organizers review your presentation slides or any other content for CoC compliance, please email us and we will do our best to assist you. Call for Volunteers We are also looking for volunteers to help run the devroom. We need assistance with helping speakers to record the presentation as well as helping with streaming and chat moderation for the devroom. Please contact devroom mailing list [2] for more information. Questions? If you have any questions about this devroom, please send your questions to our devroom mailing list. You can also subscribe to the list to receive updates about important dates, session announcements, and to connect with other attendees. See you all at FOSDEM! [1] https://penta.fosdem.org/submission/FOSDEM22 [2] iaas-virt-devroom at lists.fosdem.org

1 1

[ANN] oVirt Node 4.4.9.3 Async update
by Sandro Bonazzola 15 Dec '21

15 Dec '21

oVirt Node 4.4.9.3 Async update On December 15th 2021 the oVirt project released an async update of oVirt Node (4.4.9.3) delivering fixes for the following issues: Bug 2031911 <https://bugzilla.redhat.com/show_bug.cgi?id=2031911> - oVirt Node 4.4.9.1 and 4.4.9.2 are missing UEFI support due to a build issue Bug 2026432 <https://bugzilla.redhat.com/show_bug.cgi?id=2026432> - rsyslog-openssl is missing Reverted lvm2 package to previous version as workaround for Bug 2026370 <https://bugzilla.redhat.com/show_bug.cgi?id=2026370> - oVirt node fail to boot if lvm filter uses /dev/disk/by-id/lvm-pv-uuid-* Several bug fixes and improvements from CentOS Stream. Here’s the full list of changes: --- ovirt-node-ng-image-4.4.9.2.manifest-rpm 2021-12-10 09:09:24.084642608 +0100 +++ ovirt-node-ng-image-4.4.9.3.manifest-rpm 2021-12-15 15:40:13.501764699 +0100 @@ -1,0 +2 @@ +ModemManager-glib-1.18.2-1.el8.x86_64 @@ -46,0 +48 @@ +bubblewrap-0.4.0-1.el8.x86_64 @@ -97,3 +99,3 @@ -dbus-1.12.8-14.el8.x86_64 -dbus-common-1.12.8-14.el8.noarch -dbus-daemon-1.12.8-14.el8.x86_64 +dbus-1.12.8-18.el8.x86_64 +dbus-common-1.12.8-18.el8.noarch +dbus-daemon-1.12.8-18.el8.x86_64 @@ -101,6 +103,6 @@ -dbus-libs-1.12.8-14.el8.x86_64 -dbus-tools-1.12.8-14.el8.x86_64 -device-mapper-1.02.181-1.el8.x86_64 -device-mapper-event-1.02.181-1.el8.x86_64 -device-mapper-event-libs-1.02.181-1.el8.x86_64 -device-mapper-libs-1.02.181-1.el8.x86_64 +dbus-libs-1.12.8-18.el8.x86_64 +dbus-tools-1.12.8-18.el8.x86_64 +device-mapper-1.02.177-10.el8.x86_64 +device-mapper-event-1.02.177-10.el8.x86_64 +device-mapper-event-libs-1.02.177-10.el8.x86_64 +device-mapper-libs-1.02.177-10.el8.x86_64 @@ -109 +111 @@ -device-mapper-persistent-data-0.9.0-5.el8.x86_64 +device-mapper-persistent-data-0.9.0-6.el8.x86_64 @@ -117 +119 @@ -dnf-plugins-core-4.0.21-6.el8.noarch +dnf-plugins-core-4.0.21-7.el8.noarch @@ -127,0 +130,3 @@ +efi-filesystem-3-3.el8.noarch +efibootmgr-16-1.el8.x86_64 +efivar-libs-37-4.el8.x86_64 @@ -187,0 +193 @@ +fwupd-1.5.9-1.el8_4.x86_64 @@ -199,5 +205,5 @@ -glib2-2.56.4-157.el8.x86_64 -glibc-2.28-170.el8.x86_64 -glibc-common-2.28-170.el8.x86_64 -glibc-gconv-extra-2.28-170.el8.x86_64 -glibc-langpack-en-2.28-170.el8.x86_64 +glib2-2.56.4-158.el8.x86_64 +glibc-2.28-174.el8.x86_64 +glibc-common-2.28-174.el8.x86_64 +glibc-gconv-extra-2.28-174.el8.x86_64 +glibc-langpack-en-2.28-174.el8.x86_64 @@ -229,0 +236 @@ +grub2-efi-x64-2.02-106.el8.x86_64 @@ -251,0 +259 @@ +iotop-0.6-16.el8.noarch @@ -274,13 +282,13 @@ -iwl100-firmware-39.31.5.1-103.el8.1.noarch -iwl1000-firmware-39.31.5.1-103.el8.1.noarch -iwl105-firmware-18.168.6.1-103.el8.1.noarch -iwl135-firmware-18.168.6.1-103.el8.1.noarch -iwl2000-firmware-18.168.6.1-103.el8.1.noarch -iwl2030-firmware-18.168.6.1-103.el8.1.noarch -iwl3160-firmware-25.30.13.0-103.el8.1.noarch -iwl5000-firmware-8.83.5.1_1-103.el8.1.noarch -iwl5150-firmware-8.24.2.2-103.el8.1.noarch -iwl6000-firmware-9.221.4.1-103.el8.1.noarch -iwl6000g2a-firmware-18.168.6.1-103.el8.1.noarch -iwl6050-firmware-41.28.5.1-103.el8.1.noarch -iwl7260-firmware-25.30.13.0-103.el8.1.noarch +iwl100-firmware-39.31.5.1-105.el8.1.noarch +iwl1000-firmware-39.31.5.1-105.el8.1.noarch +iwl105-firmware-18.168.6.1-105.el8.1.noarch +iwl135-firmware-18.168.6.1-105.el8.1.noarch +iwl2000-firmware-18.168.6.1-105.el8.1.noarch +iwl2030-firmware-18.168.6.1-105.el8.1.noarch +iwl3160-firmware-25.30.13.0-105.el8.1.noarch +iwl5000-firmware-8.83.5.1_1-105.el8.1.noarch +iwl5150-firmware-8.24.2.2-105.el8.1.noarch +iwl6000-firmware-9.221.4.1-105.el8.1.noarch +iwl6000g2a-firmware-18.168.6.1-105.el8.1.noarch +iwl6050-firmware-41.28.5.1-105.el8.1.noarch +iwl7260-firmware-25.30.13.0-105.el8.1.noarch @@ -332,15 +340,15 @@ -libblockdev-2.24-7.el8.x86_64 -libblockdev-crypto-2.24-7.el8.x86_64 -libblockdev-dm-2.24-7.el8.x86_64 -libblockdev-fs-2.24-7.el8.x86_64 -libblockdev-kbd-2.24-7.el8.x86_64 -libblockdev-loop-2.24-7.el8.x86_64 -libblockdev-lvm-2.24-7.el8.x86_64 -libblockdev-mdraid-2.24-7.el8.x86_64 -libblockdev-mpath-2.24-7.el8.x86_64 -libblockdev-nvdimm-2.24-7.el8.x86_64 -libblockdev-part-2.24-7.el8.x86_64 -libblockdev-plugins-all-2.24-7.el8.x86_64 -libblockdev-swap-2.24-7.el8.x86_64 -libblockdev-utils-2.24-7.el8.x86_64 -libblockdev-vdo-2.24-7.el8.x86_64 +libblockdev-2.24-8.el8.x86_64 +libblockdev-crypto-2.24-8.el8.x86_64 +libblockdev-dm-2.24-8.el8.x86_64 +libblockdev-fs-2.24-8.el8.x86_64 +libblockdev-kbd-2.24-8.el8.x86_64 +libblockdev-loop-2.24-8.el8.x86_64 +libblockdev-lvm-2.24-8.el8.x86_64 +libblockdev-mdraid-2.24-8.el8.x86_64 +libblockdev-mpath-2.24-8.el8.x86_64 +libblockdev-nvdimm-2.24-8.el8.x86_64 +libblockdev-part-2.24-8.el8.x86_64 +libblockdev-plugins-all-2.24-8.el8.x86_64 +libblockdev-swap-2.24-8.el8.x86_64 +libblockdev-utils-2.24-8.el8.x86_64 +libblockdev-vdo-2.24-8.el8.x86_64 @@ -363 +371 @@ -libdnf-0.63.0-4.el8.x86_64 +libdnf-0.63.0-5.el8.x86_64 @@ -372 +380,2 @@ -libgcc-8.5.0-4.el8_5.x86_64 +libgcab1-1.1-1.el8.x86_64 +libgcc-8.5.0-6.el8.x86_64 @@ -384 +393 @@ -libgomp-8.5.0-4.el8_5.x86_64 +libgomp-8.5.0-6.el8.x86_64 @@ -390,0 +400 @@ +libgusb-0.3.0-1.el8.x86_64 @@ -404 +414 @@ -libldb-2.3.0-2.el8.x86_64 +libldb-2.4.1-1.el8.x86_64 @@ -407,0 +418 @@ +libmbim-1.26.0-2.el8.x86_64 @@ -435,0 +447 @@ +libqmi-1.30.2-1.el8.x86_64 @@ -458,0 +471 @@ +libsmbios-2.4.1-2.el8.x86_64 @@ -470 +483 @@ -libstdc++-8.5.0-4.el8_5.x86_64 +libstdc++-8.5.0-6.el8.x86_64 @@ -472 +485 @@ -libtalloc-2.3.2-1.el8.x86_64 +libtalloc-2.3.3-1.el8.x86_64 @@ -475 +488 @@ -libtdb-1.4.3-1.el8.x86_64 +libtdb-1.4.4-1.el8.x86_64 @@ -493,24 +506,24 @@ -libvirt-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-client-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-config-network-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-config-nwfilter-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-interface-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-network-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-nodedev-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-nwfilter-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-qemu-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-secret-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-core-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-disk-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-gluster-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-iscsi-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-iscsi-direct-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-logical-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-mpath-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-rbd-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-driver-storage-scsi-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-daemon-kvm-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-libs-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 -libvirt-lock-sanlock-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 +libvirt-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-client-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-config-network-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-config-nwfilter-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-interface-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-network-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-nodedev-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-nwfilter-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-qemu-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-secret-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-core-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-disk-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-gluster-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-iscsi-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-iscsi-direct-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-logical-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-mpath-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-rbd-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-driver-storage-scsi-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-daemon-kvm-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-libs-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 +libvirt-lock-sanlock-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 @@ -528,0 +542 @@ +libxmlb-0.1.15-1.el8.x86_64 @@ -533 +547 @@ -linux-firmware-20210702-103.gitd79c2677.el8.noarch +linux-firmware-20211119-105.gitf5d51956.el8.noarch @@ -536 +550 @@ -llvm-compat-libs-12.0.1-3.module_el8.6.0+1029+6594c364.x86_64 +llvm-compat-libs-12.0.1-4.module_el8.6.0+1041+0c503ac4.x86_64 @@ -546,2 +560,2 @@ -lvm2-2.03.14-1.el8.x86_64 -lvm2-libs-2.03.14-1.el8.x86_64 +lvm2-2.03.12-10.el8.x86_64 +lvm2-libs-2.03.12-10.el8.x86_64 @@ -557,0 +572 @@ +memtest86+-5.01-20.el8.x86_64 @@ -564,0 +580 @@ +mokutil-0.3.0-11.el8.x86_64 @@ -590 +606 @@ -nftables-0.9.3-23.el8.x86_64 +nftables-0.9.3-24.el8.x86_64 @@ -593,2 +609,2 @@ -nmstate-1.2.0-0.1.alpha1.el8.noarch -nmstate-plugin-ovsdb-1.2.0-0.1.alpha1.el8.noarch +nmstate-1.2.0-0.1.alpha2.el8.x86_64 +nmstate-plugin-ovsdb-1.2.0-0.1.alpha2.el8.noarch @@ -628,2 +644,2 @@ -ovirt-host-4.4.8-1.el8.x86_64 -ovirt-host-dependencies-4.4.8-1.el8.x86_64 +ovirt-host-4.4.9-2.el8.x86_64 +ovirt-host-dependencies-4.4.9-2.el8.x86_64 @@ -635 +651 @@ -ovirt-node-ng-image-update-placeholder-4.4.9.2-1.el8.noarch +ovirt-node-ng-image-update-placeholder-4.4.9.3-1.el8.noarch @@ -643,2 +659,2 @@ -ovirt-release-host-node-4.4.9.2-1.el8.noarch -ovirt-release44-4.4.9.2-1.el8.noarch +ovirt-release-host-node-4.4.9.3-1.el8.noarch +ovirt-release44-4.4.9.3-1.el8.noarch @@ -732 +748 @@ -python3-blockdev-2.24-7.el8.x86_64 +python3-blockdev-2.24-8.el8.x86_64 @@ -750,2 +766,2 @@ -python3-dnf-plugin-versionlock-4.0.21-6.el8.noarch -python3-dnf-plugins-core-4.0.21-6.el8.noarch +python3-dnf-plugin-versionlock-4.0.21-7.el8.noarch +python3-dnf-plugins-core-4.0.21-7.el8.noarch @@ -764 +780 @@ -python3-hawkey-0.63.0-4.el8.x86_64 +python3-hawkey-0.63.0-5.el8.x86_64 @@ -780 +796 @@ -python3-libdnf-0.63.0-4.el8.x86_64 +python3-libdnf-0.63.0-5.el8.x86_64 @@ -782 +798 @@ -python3-libnmstate-1.2.0-0.1.alpha1.el8.noarch +python3-libnmstate-1.2.0-0.1.alpha2.el8.noarch @@ -787 +803 @@ -python3-libvirt-7.9.0-1.module_el8.6.0+983+a7505f3f.x86_64 +python3-libvirt-7.10.0-1.module_el8.6.0+1046+bd8eec5e.x86_64 @@ -789 +805 @@ -python3-linux-procfs-0.6.3-3.el8.noarch +python3-linux-procfs-0.6.3-4.el8.noarch @@ -798 +814 @@ -python3-nftables-0.9.3-23.el8.x86_64 +python3-nftables-0.9.3-24.el8.x86_64 @@ -853 +869 @@ -python3-setools-4.3.0-2.el8.x86_64 +python3-setools-4.3.0-3.el8.x86_64 @@ -906,0 +923 @@ +rsyslog-openssl-8.2102.0-6.el8.x86_64 @@ -920,2 +937,2 @@ -selinux-policy-3.14.3-84.el8.noarch -selinux-policy-targeted-3.14.3-84.el8.noarch +selinux-policy-3.14.3-85.el8.noarch +selinux-policy-targeted-3.14.3-85.el8.noarch @@ -926 +943,3 @@ -shadow-utils-4.6-15.el8.x86_64 +shadow-utils-4.6-16.el8.x86_64 +shared-mime-info-1.9-3.el8.x86_64 +shim-x64-15-15.el8_2.x86_64 @@ -931 +950 @@ -sos-4.2-6.el8.noarch +sos-4.2-7.el8.noarch @@ -946 +965 @@ -sudo-1.8.29-7.el8_4.1.x86_64 +sudo-1.8.29-8.el8.x86_64 @@ -956 +975 @@ -sysstat-11.7.3-6.el8.x86_64 +sysstat-11.7.3-7.el8.x86_64 @@ -989,3 +1008,3 @@ -virt-install-3.2.0-1.el8.noarch -virt-manager-common-3.2.0-1.el8.noarch -virt-v2v-1.42.0-16.module_el8.6.0+983+a7505f3f.x86_64 +virt-install-3.2.0-2.el8.noarch +virt-manager-common-3.2.0-2.el8.noarch +virt-v2v-1.42.0-18.module_el8.6.0+1046+bd8eec5e.x86_64 @@ -995 +1014 @@ -xfsprogs-5.0.0-9.el8.x86_64 +xfsprogs-5.0.0-10.el8.x86_64 -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0

import vm from iscsi storage domain fails with "Cannot import VM. Invalid time zone for given OS type. Attribute: vm.vmStatic"
by timo.veith＠uni-tuebingen.de 15 Dec '21

15 Dec '21

Dear ovirt users, we are running RHV 4.4.8.6-0.1.el8ev on the manager and Red Hat Virtualization Host 4.4.6 (el8.4) on the hypervisors. Normally I would open a case at Red Hat but our subscriptions expired. We are currently in the process of purchasing new ones but this problem is really urgent so I thought I'd give it a try here. Sorry for that if its misplaced. We have a problem importing some VMs from a iscsi storage domain. We had an outage of the iscsi san volume but managed to recover the data and bring them back online. We imported the volume into a new data center and were able to import most of the vms which were on that volume. But now there are still some importand ones left and we do get the upper mentioned error. I searched the web and found a solution which proposes to alter the "operating system type" in the import dialog and change it to "linux". Oh, while writing "linux" I forgot to mention all of the problematic vms are windows ones. But the import dialog doesn't let me change the operation system type. I can only change the name. I found another solution here in the archive of this mailing list. Its pretty new I think. Topic was "How to re-import a VM with an invalid timezone?" in August. The solution was to add the missing timezone in a file (https://github.com/oVirt/ovirt-engine/blob/master/packaging/conf/timezones-…) on the manager and restart ovirt-engine. I would love to try that but I really don't know what to put there. I can't open an ova file because the vm is on the iscsi domain in some lvs or metadata or .. I don't know where RHV reads that from. Hope I am not missing some important info. Any help would be greatly appreciated Cheers Timo

4 4

Re: remote-viewer VNC mode issue
by Patrick Hibbs 15 Dec '21

15 Dec '21

Hello, Well a quick check of the hosts say that they have ovirt- vmconsole enabled on their firewall, but there doesn't seem to be any logs for the vmconsoles on them. Running wireshark on one of the end- user machines shows that the host does send packets back and forth but then the end-user machine TCP resets the connection. (I assume due to the credential failure.) So it doesn't seem to be a firewall issue. Is there anything I can do to get some more logs from the vmconsoles on the Host? Thanks. -Patrick Hibbs On Tue, 2021-12-14 at 12:56 +0000, Staniforth, Paul wrote: > Hello Patrick, > with noVNC the connection is made via the > websocket-poxy service (probably on the engine server). > The remote-viewer connects directly from the client machine to the > virtual host the VM is running on. Maybe check the network/firewall > between the client and the host, also the OTP expires after 120 > seconds. > > > Regards, > > Paul S. > From: Strahil Nikolov via Users <users(a)ovirt.org> > Sent: 14 December 2021 12:12 > To: hibbsncc1701(a)gmail.com <hibbsncc1701(a)gmail.com>; oVirt Users > Mailing List <users(a)ovirt.org> > Subject: [ovirt-users] Re: remote-viewer VNC mode issue > Caution External Mail: Do not click any links or open any attachments > unless you trust the sender and know that the content is safe. > The most common problem is the CA of oVirt not trusted in the web > browser of the client. > > > Best Regards, > Strahil Nikolov > > > On Sun, Dec 12, 2021 at 0:00, Patrick Hibbs > > <hibbsncc1701(a)gmail.com> wrote: > > Hello, > > > > As oVirt unfortuately now requires VNC for the VM consoles, > > I've been attempting to get VNC mode working on my end user > > clients. > > > > The noVNC browser client works just fine, but for some reason > > the default download to remote-viewer fails on the same hosts. > > > > All the end-user gets is a quick flash of the remote-viewer window > > on > > their screen. > > > > Running remote-viewer in debug mode I get this: > > > > ---log snip--- > > > > $ remote-viewer -v --debug Downloads/console.vv > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.906: Opening > > display > > to Downloads/console.vv > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.906: Guest (null) > > has > > a vnc display > > Guest (null) has a vnc display > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: Spice > > foreign > > menu updated > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: After open > > connection callback fd=-1 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: Opening > > connection to display at Downloads/console.vv > > Opening connection to display at Downloads/console.vv > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.953: fullscreen > > display 0: 0 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.953: notebook > > show > > status 0x560a419d2280 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: notebook > > show > > status 0x560a419d2280 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: Insert > > display 0 > > 0x560a423fa1e0 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: notebook > > show > > status 0x560a419d2280 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.052: Allocated > > 1024x740 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.052: Child > > allocate > > 1024x640 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.053: Got VNC > > credential request for 1 credential(s) > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: Not removing > > main window 0 0x560a4195d910 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: Disconnected > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: close > > vnc=0x560a419fc220 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.068: notebook > > show > > status 0x560a419d2280 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.068: Guest (null) > > display has disconnected, shutting down > > Guest (null) display has disconnected, shutting down > > > > ---log snip--- > > > > It seems to be failing a credential request, but I'm not sure why. > > The > > engine logs only show the VM console ticket being created, but does > > not > > show any connection attempts unless noVNC is used. > > > > ---log snip--- > > > > 2021-12-11 16:48:23,402-05 INFO > > [org.ovirt.engine.core.bll.SetVmTicketCommand] (default task-16) > > [68b90cfe] Running command: SetVmTicketCommand internal: false. > > Entities affected : ID: bb05ab12-91e5-4ab6-92b1-b911ed78f64f Type: > > VMAction group CONNECT_TO_VM with role type USER > > 2021-12-11 16:48:23,414-05 INFO > > [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] > > (default task-16) [68b90cfe] START, SetVmTicketVDSCommand(HostName > > = -- > > REDACTED--, SetVmTicketVDSCommandParameters:{hostId='1fdd841b-477f- > > 4d13-9935-7908924dd5a1', vmId='bb05ab12-91e5-4ab6-92b1- > > b911ed78f64f', > > protocol='VNC', ticket='ocziPsEOF4km', validTime='120', userName='-- > > REDACTED--@--REDACTED--', userId='e83ab2b3-c464-49a4-a0ab- > > 4e62e8131304', disconnectAction='LOCK_SCREEN'}), log id: f6dccdd > > 2021-12-11 16:48:23,435-05 INFO > > [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] > > (default task-16) [68b90cfe] FINISH, SetVmTicketVDSCommand, return: > > , > > log id: f6dccdd > > 2021-12-11 16:48:23,461-05 INFO > > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirect > > or] > > (default task-16) [68b90cfe] EVENT_ID: VM_SET_TICKET(164), User -- > > REDACTED--@--REDACTED--@--REDACTED-- initiated console session for > > VM > > Test > > # > > > > ---log snip--- > > > > What else can I do to troubleshoot this? > > > > - Patrick Hibbs > > > > _______________________________________________ > > Users mailing list -- users(a)ovirt.org > > To unsubscribe send an email to users-leave(a)ovirt.org > > Privacy Statement: https://www.ovirt.org/privacy-policy.html > > oVirt Code of Conduct: > > https://www.ovirt.org/community/about/community-guidelines/ > > List Archives: > > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/Q5ENXJJU5V7LJ… > To view the terms under which this email is distributed, please go > to:- > https://leedsbeckett.ac.uk/disclaimer/email

2 1

remote-viewer VNC mode issue
by Patrick Hibbs 14 Dec '21

14 Dec '21

Hello, As oVirt unfortuately now requires VNC for the VM consoles, I've been attempting to get VNC mode working on my end user clients. The noVNC browser client works just fine, but for some reason the default download to remote-viewer fails on the same hosts. All the end-user gets is a quick flash of the remote-viewer window on their screen. Running remote-viewer in debug mode I get this: ---log snip--- $ remote-viewer -v --debug Downloads/console.vv (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.906: Opening display to Downloads/console.vv (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.906: Guest (null) has a vnc display Guest (null) has a vnc display (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: Spice foreign menu updated (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: After open connection callback fd=-1 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: Opening connection to display at Downloads/console.vv Opening connection to display at Downloads/console.vv (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.953: fullscreen display 0: 0 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.953: notebook show status 0x560a419d2280 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: notebook show status 0x560a419d2280 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: Insert display 0 0x560a423fa1e0 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: notebook show status 0x560a419d2280 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.052: Allocated 1024x740 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.052: Child allocate 1024x640 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.053: Got VNC credential request for 1 credential(s) (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: Not removing main window 0 0x560a4195d910 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: Disconnected (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: close vnc=0x560a419fc220 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.068: notebook show status 0x560a419d2280 (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.068: Guest (null) display has disconnected, shutting down Guest (null) display has disconnected, shutting down ---log snip--- It seems to be failing a credential request, but I'm not sure why. The engine logs only show the VM console ticket being created, but does not show any connection attempts unless noVNC is used. ---log snip--- 2021-12-11 16:48:23,402-05 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (default task-16) [68b90cfe] Running command: SetVmTicketCommand internal: false. Entities affected : ID: bb05ab12-91e5-4ab6-92b1-b911ed78f64f Type: VMAction group CONNECT_TO_VM with role type USER 2021-12-11 16:48:23,414-05 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (default task-16) [68b90cfe] START, SetVmTicketVDSCommand(HostName = -- REDACTED--, SetVmTicketVDSCommandParameters:{hostId='1fdd841b-477f- 4d13-9935-7908924dd5a1', vmId='bb05ab12-91e5-4ab6-92b1-b911ed78f64f', protocol='VNC', ticket='ocziPsEOF4km', validTime='120', userName='-- REDACTED--@--REDACTED--', userId='e83ab2b3-c464-49a4-a0ab- 4e62e8131304', disconnectAction='LOCK_SCREEN'}), log id: f6dccdd 2021-12-11 16:48:23,435-05 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (default task-16) [68b90cfe] FINISH, SetVmTicketVDSCommand, return: , log id: f6dccdd 2021-12-11 16:48:23,461-05 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-16) [68b90cfe] EVENT_ID: VM_SET_TICKET(164), User -- REDACTED--@--REDACTED--@--REDACTED-- initiated console session for VM Test # ---log snip--- What else can I do to troubleshoot this? - Patrick Hibbs

3 2