- Users - oVirt List Archives

How to debug a failed Run Once launch
by Shareef Jalloq 30 Mar '20

30 Mar '20

Hi, I'm trying to create a Windows Server 2019 VM and having found the virtio-win package that needed to be installed am facing the next hurdle. I've followed the documentation and I'm using the Run Once option with the following boot options: Attach Floppy: virtio-win_servers_amd64.vfd Attach CD: Win 2029 ISO CD-ROM at top of Predefined Boot Sequence Clicking OK starts the VM but it immediately fails with a Failed Launching pop up. How do I go about debugging this? Shareef.

2 8

"engine-setup" 4.3.9 on fresh centos 7 install with PKI error
by edsonrichter＠hotmail.com 30 Mar '20

30 Mar '20

I'm newbie on oVirt - besides having many years on server administration, docker and vmware included. Installation is no mistery, but I'm stuck with error described below. I've just installed a new machine with Centos 7 with all updates: [root@mgmt ~]# uname -a Linux mgmt.simfrete.com 3.10.0-1062.12.1.el7.x86_64 #1 SMP Tue Feb 4 23:02:59 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux [root@mgmt ~]# cat /etc/redhat-release CentOS Linux release 7.7.1908 (Core) I've installed the repository: [root@mgmt ~]# sudo yum install https://resources.ovirt.org/pub/yum-repo/ovirt-release43.rpm -y and then the ovirt-engine: [root@mgmt ~]# yum install ovirt-engine -y Then, run the engine-setup with all defaults (exception fqdn = "mgmt.mydomain.com"). Everything runs smoothly, exception with I open the mamagement interface at "https://mgmt.mydomain.com/ovirt-engine" I get the error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target In the log, I get 2020-03-23 02:20:23,883-03 ERROR [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-8) [] server_error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target I don't know how to proceed from here. Would you please guide me how to fix this?

7 12

Error installing single hyperconverged host using CentOS7
by wodel youchi 29 Mar '20

29 Mar '20

Hi, I am using the latest version of oVirt 4.3.9 I am using nested KVM for a LAB. the CentOS is updated with the latest packages available. The goal of my LAB is to test DR on hypervonerged environment, Why using a CentOS host rather than the oVirt-node, because of the my Internet connection, which is not great, I find simple to just update the new packages on the host rather than update all of the host's image. I installed a CentOS host using the basic profile, then I added the oVirt repository and then installed the needed packages, and by the way the oVirt documentation on hyperconverged setup doesn't mention gluster-ansible-roles as a prerequisite. The Gluster phase is done correctly, but the deployment of the VM Engine fails every time at the same task : TASK [ovirt.hosted_engine_setup : Get local VM IP I repeated the deployment three times and I get the same result. Then I tested with ovirt-node and it worked fine. You can find the logs of my last attempt attached. Regards.

1 0

cannot manually migrate vm's
by eevans＠digitaldatatechs.com 29 Mar '20

29 Mar '20

I upgraded from 4.3.8 to 4.3.9. Before the migration, I could manually migrate vm's and also it would automatically load balance the hosts. Now I cannot manually migrate and I have one server with no vm's and 2 with several. If I put a host into maintenance mode, it will migrate the vm's off to other hosts, but before I noticed it would move vm's around to load balance and now it does not. Not sure if this is a bug or not. How it happens: When I right click on a vm and click migrate, the migrate screen flashes on screen then disappears. Same behavior if I highlight the vm and click the migrate button at the top of the vm screen. It's not critical, but something that needs corrected. Any help or advice is very much appreciated. Thanks.

3 19

Cinderlib db not contained in engine-backup
by Thomas Klute 29 Mar '20

29 Mar '20

Dear oVirt users, I just noticed that the ovirt_cinderlib database does not seem to be contained in the archive file created by engine-backup. Is it missing there? Or is there any other way to restore the data of the ovirt_cinderlib database in case a restore the engine-backup would be required? Best regards, Thomas

2 1

Re: vm console problem
by David David 29 Mar '20

29 Mar '20

I did as you said: copied from engine /etc/ovirt-engine/ca.pem onto my desktop into /etc/pki/ca-trust/source/anchors and then run update-ca-trust it didn’t help, still the same errors вс, 29 мар. 2020 г. в 10:47, David David <dd432690(a)gmail.com>: > I did as you said: > copied from engine /etc/ovirt-engine/ca.pem onto my desktop into > /etc/pki/ca-trust/source/anchors and then run update-ca-trust > it didn’t help, still the same errors > > > пт, 27 мар. 2020 г. в 21:56, Strahil Nikolov <hunter86_bg(a)yahoo.com>: > >> On March 27, 2020 12:23:10 PM GMT+02:00, David David <dd432690(a)gmail.com> >> wrote: >> >here is debug from opening console.vv by remote-viewer >> > >> >2020-03-27 14:09 GMT+04:00, Milan Zamazal <mzamazal(a)redhat.com>: >> >> David David <dd432690(a)gmail.com> writes: >> >> >> >>> yes i have >> >>> console.vv attached >> >> >> >> It looks the same as mine. >> >> >> >> There is a difference in our logs, you have >> >> >> >> Possible auth 19 >> >> >> >> while I have >> >> >> >> Possible auth 2 >> >> >> >> So I still suspect a wrong authentication method is used, but I don't >> >> have any idea why. >> >> >> >> Regards, >> >> Milan >> >> >> >>> 2020-03-26 21:38 GMT+04:00, Milan Zamazal <mzamazal(a)redhat.com>: >> >>>> David David <dd432690(a)gmail.com> writes: >> >>>> >> >>>>> copied from qemu server all certs except "cacrl" to my >> >desktop-station >> >>>>> into /etc/pki/ >> >>>> >> >>>> This is not needed, the CA certificate is included in console.vv >> >and no >> >>>> other certificate should be needed. >> >>>> >> >>>>> but remote-viewer is still didn't work >> >>>> >> >>>> The log looks like remote-viewer is attempting certificate >> >>>> authentication rather than password authentication. Do you have >> >>>> password in console.vv? It should look like: >> >>>> >> >>>> [virt-viewer] >> >>>> type=vnc >> >>>> host=192.168.122.2 >> >>>> port=5900 >> >>>> password=fxLazJu6BUmL >> >>>> # Password is valid for 120 seconds. >> >>>> ... >> >>>> >> >>>> Regards, >> >>>> Milan >> >>>> >> >>>>> 2020-03-26 2:22 GMT+04:00, Nir Soffer <nsoffer(a)redhat.com>: >> >>>>>> On Wed, Mar 25, 2020 at 12:45 PM David David <dd432690(a)gmail.com> >> >>>>>> wrote: >> >>>>>>> >> >>>>>>> ovirt 4.3.8.2-1.el7 >> >>>>>>> gtk-vnc2-1.0.0-1.fc31.x86_64 >> >>>>>>> remote-viewer version 8.0-3.fc31 >> >>>>>>> >> >>>>>>> can't open vm console by remote-viewer >> >>>>>>> vm has vnc console protocol >> >>>>>>> when click on console button to connect to a vm, the >> >remote-viewer >> >>>>>>> console disappear immediately >> >>>>>>> >> >>>>>>> remote-viewer debug in attachment >> >>>>>> >> >>>>>> You an issue with the certificates: >> >>>>>> >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.238: >> >>>>>> ../src/vncconnection.c Set credential 2 libvirt >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c Searching for certs in /etc/pki >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c Searching for certs in /root/.pki >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c Failed to find certificate CA/cacert.pem >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c No CA certificate provided, using GNUTLS >> >global >> >>>>>> trust >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c Failed to find certificate CA/cacrl.pem >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c Failed to find certificate >> >>>>>> libvirt/private/clientkey.pem >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c Failed to find certificate >> >>>>>> libvirt/clientcert.pem >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c Waiting for missing credentials >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c Got all credentials >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.239: >> >>>>>> ../src/vncconnection.c No CA certificate provided; trying the >> >system >> >>>>>> trust store instead >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: >> >>>>>> ../src/vncconnection.c Using the system trust store and CRL >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: >> >>>>>> ../src/vncconnection.c No client cert or key provided >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.240: >> >>>>>> ../src/vncconnection.c No CA revocation list provided >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.241: >> >>>>>> ../src/vncconnection.c Handshake was blocking >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.243: >> >>>>>> ../src/vncconnection.c Handshake was blocking >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.251: >> >>>>>> ../src/vncconnection.c Handshake was blocking >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.298: >> >>>>>> ../src/vncconnection.c Handshake done >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.298: >> >>>>>> ../src/vncconnection.c Validating >> >>>>>> (remote-viewer:2721): gtk-vnc-DEBUG: 11:56:25.301: >> >>>>>> ../src/vncconnection.c Error: The certificate is not trusted >> >>>>>> >> >>>>>> Adding people that may know more about this. >> >>>>>> >> >>>>>> Nir >> >>>>>> >> >>>>>> >> >>>> >> >>>> >> >> >> >> >> >> Hello, >> >> You can try to take the engine's CA (maybe it's useless) and put it on >> your system in: >> /etc/pki/ca-trust/source/anchors (if it's EL7 or a Fedora) and then run >> update-ca-trust >> >> Best Regards, >> Strahil Nikolov >> >

1 0

Import storage domain with different storage type?
by Rik Theys 28 Mar '20

28 Mar '20

Hi, We have an oVirt environment with a FC storage domain. Multiple LUNs on a SAN are exported to the oVirt nodes and combined in a single FC storage domain. The SAN replicates the disks to another storage box that has iSCSI connectivity. Is it possible to - in case of disaster - import the existing, replicated, storage domain as an iSCSI domain and import/run the VM's from that domain? Or is import of a storage domain only possible if they are the same type? Does it also work if multiple LUNs are needed to form the storage domain? Are there any special actions that should be performed beyond the regular import action? Regards, Rik -- Rik Theys System Engineer KU Leuven - Dept. Elektrotechniek (ESAT) Kasteelpark Arenberg 10 bus 2440 - B-3001 Leuven-Heverlee +32(0)16/32.11.07 ---------------------------------------------------------------- <<Any errors in spelling, tact or fact are transmission errors>>

3 2

Doubts related to single HCI and storage network
by Gianluca Cecchi 28 Mar '20

28 Mar '20

Hello, I deployed HCI 4.3.9 with gluster and single node from the cockpit based interface. During install I specified the storage network, using 1) For the mgmt network and hostname of the hypervisor 172.16.0.30 ovirt.mydomain 2) for the storage network (even if not used in single host... but in case of future addition..) 10.50.50.11 ovirtst.mydomain.storage all went good. And system runs quite ok: I was able to deploy an OCP 4.3.8 cluster with 3 workers and 3 masters... a part from erratic "vm paused" messages for which I'm going to send a dedicated mail... I see in engine.log warning messages of this kind: 2020-03-27 00:32:08,655+01 WARN [org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListReturn] (DefaultQuartzScheduler2) [15cbd52e] Could not associate brick 'ovirtst.mydomain.storage:/gluster_bricks/engine/engine' of volume '40ad3b5b-4cc1-495a-815b-3c7e3436b15b' with correct network as no gluster network found in cluster '9cecfa02-6c6c-11ea-8a94-00163e0acd5c' I would have expected the setup to create a gluster network as it was part of the initial configuration.... could this be a subject for an RFE? What can I do to fix this warning? Thanks, Gianluca

3 6

vm console problem
by David David 27 Mar '20

27 Mar '20

ovirt 4.3.8.2-1.el7 gtk-vnc2-1.0.0-1.fc31.x86_64 remote-viewer version 8.0-3.fc31 can't open vm console by remote-viewer vm has vnc console protocol when click on console button to connect to a vm, the remote-viewer console disappear immediately remote-viewer debug in attachment

4 7

Speed Issues
by Christian Reiss 27 Mar '20

27 Mar '20

Hey folks, gluster related question. Having SSD in a RAID that can do 2 GB writes and Reads (actually above, but meh) in a 3-way HCI cluster connected with 10gbit connection things are pretty slow inside gluster. I have these settings: Options Reconfigured: cluster.server-quorum-type: server cluster.quorum-type: auto cluster.shd-max-threads: 8 features.shard: on features.shard-block-size: 64MB server.event-threads: 8 user.cifs: off cluster.shd-wait-qlength: 10000 cluster.locking-scheme: granular cluster.eager-lock: enable performance.low-prio-threads: 32 network.ping-timeout: 30 cluster.granular-entry-heal: enable storage.owner-gid: 36 storage.owner-uid: 36 cluster.choose-local: true client.event-threads: 16 performance.strict-o-direct: on network.remote-dio: enable performance.client-io-threads: on nfs.disable: on storage.fips-mode-rchecksum: on transport.address-family: inet cluster.readdir-optimize: on cluster.metadata-self-heal: on cluster.data-self-heal: on cluster.entry-self-heal: on cluster.data-self-heal-algorithm: full features.uss: enable features.show-snapshot-directory: on features.barrier: disable auto-delete: enable snap-activate-on-create: enable Writing inside the /gluster_bricks yields those 2GB/sec writes, Reading the same. Reading inside the /rhev/data-center/mnt/glusterSD/ dir reads go down to 366mb/sec while writes plummet to to 200mb/sec. Summed up: Writing into the SSD Raid in the lvm/xfs gluster brick directory is fast, writing into the mounted gluster dir is horribly slow. The above can be seen and repeated on all 3 servers. The network can do full 10gbit (tested with, among others: rsync, iperf3). Anyone with some idea on whats missing/ going on here? Thanks folks, as always stay safe and healthy! -- with kind regards, mit freundlichen Gruessen, Christian Reiss

7 20