- Users - oVirt List Archives

Re: Disk encryption in oVirt
by Strahil 04 Nov '19

04 Nov '19

Hi, Maybe a gluster encryption will also cover your needs in a hyper converged setup? Best Regards, Strahil Nikolov On Oct 22, 2019 14:43, Sandro Bonazzola <sbonazzo(a)redhat.com> wrote: > > > > Il giorno mar 22 ott 2019 alle ore 12:32 MIMMIK _ <dmarini(a)it.iliad.com> ha scritto: >> >> Is there a way to get a full disk encryption on virtual disks used by VMs in oVirt? > > > You can use encrypted file system managed from within the VM itself if the OS support it (dm-crypt with LUKS on GNU Linux, BitLocker) which is the most secure choice on this topic. > Encrypting the storage hosting the VM disks won't help once you access the storage for booting the VM, at that point disks will be accessible without encryption. > > > > >> >> >> Regards >> _______________________________________________ >> Users mailing list -- users(a)ovirt.org >> To unsubscribe send an email to users-leave(a)ovirt.org >> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3FMGDSRBHRWYR… > > > > -- > > Sandro Bonazzola > > MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV > > Red Hat EMEA > > sbonazzo(a)redhat.com > > Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.

2 1

Re: oVirt/RHV 4.3.6: How to boot a Q35/UEFI VM from CD?
by Strahil 04 Nov '19

04 Nov '19

Hi, Can you give a try of the workaround in https://bugzilla.redhat.com/show_bug.cgi?id=1727987#c0 ? At least it works for RHEL 8 (and most probably CentOS 8). Best Regards, Strahil NikolovOn Nov 3, 2019 12:14, Mathieu Simon <mathieu.simon(a)gymneufeld.ch> wrote: > > Hi > > Am Sa., 2. Nov. 2019 um 08:51 Uhr schrieb Strahil Nikolov > <hunter86_bg(a)yahoo.com>: > > > Have you tried with another ISO ? > This is quite weird, still better than my initial testing but here it > goes. I've slimmed down my attempts to Q35 and UEFI (both on and off): > > - Server 2019 ISO boots into installer with or without SecureBoot > enabled (I clearly remember it didn't work in any combination I've > tried, but now it did, anyhow). The OS installes and boots with > SecureBoot enabled > - Server 2016 ISO fails to boot right at the windows bootloader*, > however I don't care for Server 2016 that much anymore at that point > in time, and it could well be that the ISO image could be of an older > revision > (MS does release updated images from time to time) > - Debian 10 boots of the CD, however it doesn't seem like NVRAM > changes are saved in oVirt / RHV guests yet. So at boot the OS doesn't > start and you have to once boot from file (EFI disk -> EFI -> debian > -> shimx64.efi) > After the boot you you have to copy all (or only shimx64.efi?) to > /boot/efi/EFI/BOOT as BOOTX64.EFI like Windows. Debian 10 has a > Microsoft-signed shim loader so SecureBoot actually works. > - Ubuntu 18.04 boots of the disc, installs and boots since their > installer puts a copy of shimx64.efi into /boot/efi/EFI/BOOT which is > where OVMF looks for a loader > > I'm I correctly guessing based on looking at the "VM devices" list per > VM that oVirt/RHV doesn't yet provide a way to provide a persistent > NVRAM image to guests? > Sso for the time being we're actually stuck on Linux systems to have a > EFI/BOOT/BOOTX64.EFI present? Is this the issue you wrote about? > (I've encountered this very same issue on plain KVM and Proxmox, in > both cases a small disk image is required per VM to make the content > of the NVRAM persistent across VM reboots) > > Regards > Mathieu > > * See screenshot uploaded here: https://imgur.com/a/ZsnbCOM > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PTQRSIUTCWI4V…

2 1

Re: Cannot enable maintenance mode
by Bruno Martins 04 Nov '19

04 Nov '19

Hi Lukas, Thanks for your message! In my cluster, I have all the VM's running under "HOST2". The issue I'm having is that I can't enable maintenance mode on "HOST1", in order to re-add it to oVirt Manager (SSL certificate replacement stuff). I did it successfully on "HOST2", but the other one seems to ignore my actions, with that message in the logs... Cheers, Bruno From: Lukas Svaty <lsvaty(a)redhat.com> Sent: 16 de outubro de 2019 10:49 To: Bruno Martins <bruno.o.martins(a)gfi.world> Cc: users(a)ovirt.org Subject: Re: [ovirt-users] Re: Cannot enable maintenance mode Did you "Consider manual intervention" such as "stopping" or "migrating Vms" which are running on that host? If you are trying to put host to maintenance, it will migrate all the VMs somewhere else, thus... you might have problem with migrations (try to migrate them to other destination host) or power them off. On Wed, Oct 16, 2019 at 9:15 AM Bruno Martins <mailto:bruno.o.martins@gfi.world> wrote: Hey guys, There are really no options left here? Is there something else I should check? Thank you! -----Original Message----- From: Bruno Martins <mailto:bruno.o.martins@gfi.world> Sent: 3 de outubro de 2019 22:41 To: Benny Zlotnik <mailto:bzlotnik@redhat.com> Cc: mailto:users@ovirt.org Subject: [ovirt-users] Re: Cannot enable maintenance mode Hello Benny, I did. No luck, still... Cheers! -----Original Message----- From: Benny Zlotnik <mailto:bzlotnik@redhat.com> Sent: 2 de outubro de 2019 19:19 To: Bruno Martins <mailto:bruno.o.martins@gfi.world> Cc: mailto:users@ovirt.org Subject: Re: [ovirt-users] Re: Cannot enable maintenance mode Did you try the "Confirm Host has been rebooted" button? On Wed, Oct 2, 2019 at 9:17 PM Bruno Martins <mailto:bruno.o.martins@gfi.world> wrote: > > Hello guys, > > No ideas for this issue? > > Thanks for your cooperation! > > Kind regards, > > -----Original Message----- > From: Bruno Martins <mailto:bruno.o.martins@gfi.world> > Sent: 29 de setembro de 2019 16:16 > To: mailto:users@ovirt.org > Subject: [ovirt-users] Cannot enable maintenance mode > > Hello guys, > > I am being unable to put a host from a two nodes cluster into maintenance mode in order to remove it from the cluster afterwards. > > This is what I see in engine.log: > > 2019-09-27 16:20:58,364 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-6-thread-45) [4cc251c9] Correlation ID: 4cc251c9, Job ID: 65731fbb-db34-49a9-ab56-9fba59bc0ee0, Call Stack: null, Custom Event ID: -1, Message: Host CentOS-H1 cannot change into maintenance mode - not all Vms have been migrated successfully. Consider manual intervention: stopping/migrating Vms: Non interactive user (User: admin). > > Host has been rebooted multiple times. vdsClient shows no VM's running. > > What else can I do? > > Kind regards, > > Bruno Martins > _______________________________________________ > Users mailing list -- mailto:users@ovirt.org To unsubscribe send an > email to mailto:users-leave@ovirt.org Privacy > Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/X5FJWFW7 > GXNW6YWRPFWOKA6VU3RH4WD3/ > _______________________________________________ > Users mailing list -- mailto:users@ovirt.org To unsubscribe send an > email to mailto:users-leave@ovirt.org Privacy > Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/DD5DW6KK > OOHGL3WFEKIIIS57BN3VWMAQ/ _______________________________________________ Users mailing list -- mailto:users@ovirt.org To unsubscribe send an email to mailto:users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/64GZQKZA7LX7K… _______________________________________________ Users mailing list -- mailto:users@ovirt.org To unsubscribe send an email to mailto:users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/JJPEC7RDG3AUS… -- LUKAS SVATY RHV QE

1 0

Self-Hosted Engine + vxlan + networkd
by pavel＠gremwell.com 04 Nov '19

04 Nov '19

Dear oVirt Community, It appears that oVirt self-hosted engine does not support network configurations based on systemd-networkd? Am I correct? Does oVirt self-hosted engine deployment support VXLAN interface to configure "ovirtmgmt" on top of it? My setup: - three bare-metal servers: two of them are CentOS 7 based, clean installation. the third one is Ubuntu based served as a storage. - all three of them have public Internet connectivity, via basic Ethernet. - in order to emulate internal network, VXLAN was configured between those three. Mainly for testing purposes. - network configuration was done using systemd-networkd, internal communications worked fine. - DNS server was configured on this internal network. worked as direct/reverse resolver. Thus, the main host which I tried to convert to self-hosted engine following https://www.ovirt.org/documentation/self-hosted/chap-Deploying_Self-Hosted_… guide, has the following network interfaces (redacted): - eth0, static IPv4, connected to the Internet; - vxlan0, on top of eth0, has private IPv4, 192.168.200.1; - hosts names resolve via private VXLAN network using 192.168.200.254. I started deployment saying that: Engine FQDN:ovirt-e1.example.com Network Configuration:Static VM IP Address:192.168.200.250/24 Gateway Address:192.168.200.1 DNS Servers:192.168.200.254 hostname of this host on the management network: ovirt-h1.example.com Deployment fails with error "Host ovirt-h1.example.com installation failed. Failed to configure management network on the host." After failure the system (host) does not have "ovirtmgmt" bridge. The same situation was when the host moved from networkd configuration to "network-scripts" (with VXLAN support added). I suspect that the root cause of the problem is that ansible scenarios were not able to create "ovirtmgmt" bridge on top of vxlan0. No switching to VLAN-based management interface... (did not actually tried yet).

1 0

oVirt 4.3.6: volume start: engine: failed: Failed to find brick directory /gluster_bricks/engine/engine for volume engine. Reason : No such file or directory
by adrianquintero＠gmail.com 04 Nov '19

04 Nov '19

While trying to deploy using the WEB UI for single hyperconverged setup I run into this issue (ovirt 4.3.5, ovirt 4.3.6). mount point is "/gluster_bricks/engine" however "/gluster_bricks/engine/engine" is not created. Read a post about gluster 6.1 and having to add /gluster_bricks/engine/.glusterfs/indices manually, I tried it but it did not work, I could not deploy the hosted engine vm.

1 0

Re: Trying to add a LUN to a host and use that, instead of Gluster, as the datastore for my VM's.
by Strahil 04 Nov '19

04 Nov '19

You should be able to do that with the POSIX compliant domain ... If nit, it's better to open a bug so this behaviour is investigated further. Best Regards, Strahil NikolovOn Nov 2, 2019 00:38, TomK <tomkcpr(a)mdevsys.com> wrote: > > On 10/11/2019 12:10 AM, Strahil wrote: > > I'm not sure, but you can try with replica 1 gluster volume. > > Later that gluster volume can be changed to replica 2 arbiter 1 or even better replica 3 volume. > > > > Now that I see this I'm not sure we're on the same page. > > Thinking this might clarify a bit better. Let's take this scenario, > assume gluster is working perfectly: > > HOST01 > 4TB Local LUN /dev/sdb > 4TB Gluster FS (brick w/ host02,03) /dev/sdc > > > HOST02 > 4TB Local LUN /dev/sdb > 4TB Gluster FS (brick w/ host01,03) /dev/sdc > > > HOST03 > 4TB Local LUN /dev/sdb > 4TB Gluster FS (brick w/ host02,01) /dev/sdc > > > For each host I need the local LUN to be available for VM's with the > GlusterFS storage that's distributed across all three nodes. > > However, when I tried to add a local LUN, the host was removed from the > storage domain rendering it unavailable. Now when I took out the local > LUN, I was able to readd that host to the GlusterFS storage domain. > > So it appears I can't add a local LUN when a host is already > participating in a GlusterFS storage domain. > > > Cheers, > TK > > > > > > Best Regards, > > Strahil NikolovOn Oct 10, 2019 13:04, Tom <tk(a)mdevsys.com> wrote: > >> > >> I take it then theres no way to do so without NFS? > >> > >> Sent from my iPhone > >> > >>> On Oct 10, 2019, at 2:53 AM, Strahil <hunter86_bg(a)yahoo.com> wrote: > >>> > >>> You can create an NFS on that host and export to itself that local storage... > >>> > >>> Best Regards, > >>> Strahil NikolovOn Oct 9, 2019 07:43, TomK <tomkcpr(a)mdevsys.com> wrote: > >>>> > >>>> Manged to reverse it through the options. Had to deactivate the custom > >>>> local cluster. > >>>> > >>>> Now I have my GlusterFS back and want to try and add some local storage > >>>> to each host under the same DC, Cluster and Storage Domain. So > >>>> effectively I will have two storage locations. One on my GlusterFS and > >>>> the other on the local storage I've just defined. > >>>> > >>>> Appears I can't make them coexist with oVirt. Either the host is placed > >>>> in a separate cluster with local storage, or I move it back to the > >>>> GlusterFS. > >>>> > >>>> Appears I can't have two usable storage types under one host. Is this > >>>> correct? > >>>> > >>>> What I'm looking for is in the image and shared earlier. > >>>> > >>>> Cheers, > >>>> TK > >>>> > >>>>> On 10/8/2019 11:03 PM, TomK wrote: > >>>>> I'm working to reverse this scenario. > >>>>> > >>>>> My storage domain still exists. However I can't activate it. The > >>>>> Manage button is greyed out without clear indication as to why. > >>>>> Difficult to tell what my next move should be. > >>>>> > >>>>> Anyway to find out? > >>>>> > >>>>> Cheers, > >>>>> TK > >>>>> > >>>>>> On 10/7/2019 8:25 AM, TomK wrote: > >>>>>> Allright. > >>>>>> > >>>>>> So I followed this and configured local storage. It had some default > >>>>>> names that I changed. It would have been either the default name, or > >>>>>> one I choose. In either case it would be a different name then the > >>>>>> Gluster storage domain the host was a part of anyway. > >>>>>> > >>>>>> Once the process completed for both hosts, I noticed the Gluster > >>>>>> volume storage domain was offline and the gluster volume was gone. I > >>>>>> can't seem to add that back in anymore. I get: > >>>>>> > >>>>>> "Error while executing action DisconnectStorageServerConnection: Error > >>>>>> storage server disconnection" > >>>>>> > >>>>>> Guessing I can't have local storage in addition to Gluster on the same > >>>>>> hosts and available for VM's? > >>>>>> > >>>>>> Reason why I need that is that Gluster is slow but provides redundancy > >>>>>> and live migration. But I also wanted direct storage for VM's > >>>>>> requiring faster IO. So here's my sc

2 3

Recovery virtual disks from a added iscsi storage
by Kalil de A. Carvalho 03 Nov '19

03 Nov '19

Hello all. A had a big problem in my company. We had electircal problem and I'v lost access to my iscsi storage. After reinstall the hosted engine a added the storage, but no one virtual disk was faund there. It is possible to recovery it? Best regards. -- Atenciosamente, Kalil de A. Carvalho

2 1

Re: oVirt/RHV 4.3.6: How to boot a Q35/UEFI VM from CD?
by Strahil 03 Nov '19

03 Nov '19

I have successfully managed to boot and install RHEL & openSUSE with Secureboot, but UEFI variables are not saved and requires some workarounds (there is a bug opened for that) to work. What exactly is your problem? Best Regards, Strahil NikolovOn Oct 29, 2019 10:32, mathieu.simon(a)gymneufeld.ch wrote: > > Hi > > I've been experimenting with UEFI on RHV 4.3.6 using Windows Server 2019 but I guess posting on the oVirt list might reach a wider audience. > I've used UEFI guests on other KVM-based virtualizations, but I have been unable to detect a UEFI-bootable CD using Q35 VMs with or without SecureBoot in RHV 4.3.6 since it doesn't even propose to load the UEFI loader from within OVMF. It seems to show the CD-ROM drive, but I cannot boot from file the disc from OVMF: > > Are there any hints? (I've tried finding something more detailed in the Docs though) I'd like investigate UEFI and SecureBoot on oVirt/RHV even if it's still considered a tech preview. (I've been using KVM-based UEFI VM for years already on other platforms and distributions with no particular issues, rather advantages overall). > > Regards > Mathieu > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/AVHRXTQ4TSZCY…

3 3

Re: [ANN] oVirt 4.3.7 First Release Candidate is now available for testing
by Strahil 02 Nov '19

02 Nov '19

I think I have a theory about ovirt1 , but I have to test it. 1. Ovirt1 has a team device controlled by NetworkManager , but in engine those interfaces are unused 2. I guess that when I recently 'reinstalled' the host from UI, the old teamports' ifcfg-<DEVICENAME> was moved to ifcfg-<DEVICENAME>-1 and the original file was left empty. 3. When the system rebooted, network.service rereads all ifcfg-* files and starts the team0 , but when NetworkManager reads the empty files - he alters the /etc/resolv.conf which leads to out-of-sync status. Still, this is only theory and as ovirt3 has no team device (plain gluster arbiter) - I'm not sure how close is this one. Best Regards, Strahil NikolovOn Nov 2, 2019 09:50, Strahil Nikolov <hunter86_bg(a)yahoo.com> wrote: > > I saw the hint in the Cluster's tab and then on each host. I had to put the host back to maintenance in order to sync it again. > > Logs attached . > > Best Regards, > Strahil Nikolov > > В четвъртък, 31 октомври 2019 г., 16:12:53 ч. Гринуич+2, Dominik Holler <dholler(a)redhat.com> написа: > > > > > On Thu, Oct 31, 2019 at 10:06 AM Sandro Bonazzola <sbonazzo(a)redhat.com> wrote: >> >> >> >> Il giorno gio 31 ott 2019 alle ore 09:45 Strahil Nikolov <hunter86_bg(a)yahoo.com> ha scritto: >>> >>> Hi Sandro, >>> >>> I have just updated to latest release candidate (2 clusters in total - 1 AMD , 1 Intel). >>> The only issue observed is that after patching every host's ovirtmgmt (I have another one that has none of the 4 roles which was OK) is out of sync and has to be synced before removing maintenance. >>> >>> Still the system was accessible. >>> >>> Can you guide me which log reports the out-of-sync in order to further investigate. >> >> >> +Miguel Duarte de Mora Barroso , +Dominik Holler can you please help here? >> >> > > > Do you remember if there was a hint shown as a tooltip if you hover the > mouse pointer over ovirtmgmt in > "Compute > Hosts > xxx > Network Interfaces > Setup Host Networks" > ? > > Are you able to share the vdsm.log and engine.log after the ovirtmgmt? > >

1 0

How to change the CPU of the win10 virtual machine on ovirt-node from 2 cores to 8 cores?
by wangyu13476969128＠126.com 02 Nov '19

02 Nov '19

The version of The ovirt-engine is 4.3.5. I created a win10 virtual machine on ovirt-node, which is allocated 8 cores, and when using the virtual machine I found only 2 cores. I used the command "virsh edit win10" on ovirt-node to prepare to modify the CPU core. I was prompted to enter my username and password. I entered the username and password of the ovirt-engine web interface and ssh log in to the ovirt-node username root and password, but both prompt: Error: failed to connect to the hypervisor Error: authentication failed: authentication failed How can this problem be solved?

4 6