- Users - oVirt List Archives

[oVirt HC] Gluster traffic still flows on mgmt even after choosing a different Gluster nw
by Stefano Stagnaro 17 Oct '19

17 Oct '19

Hi, I've deployed an oVirt HC starting with latest oVirt Node 4.3.6; this is my simple network plan (FQDNs only resolves the front-end addresses): front-end back-end engine.ovirt 192.168.110.10 node1.ovirt 192.168.110.11 192.168.210.11 node2.ovirt 192.168.110.12 192.168.210.12 node3.ovirt 192.168.110.13 192.168.210.13 at the end I followed the RHHI-V 1.6 Deployment Guide where, at chapter 9 [1], it suggests to create a logical network for Gluster traffic. Now I can see, indeed, back-end addresses added in the address pool: [root@node1 ~]# gluster peer status Number of Peers: 2 Hostname: node3.ovirt Uuid: 3fe33e8b-d073-4d7a-8bda-441c42317c92 State: Peer in Cluster (Connected) Other names: 192.168.210.13 Hostname: node2.ovirt Uuid: a95a9233-203d-4280-92b9-04217fa338d8 State: Peer in Cluster (Connected) Other names: 192.168.210.12 The problem is that the Gluster traffic seems still to flow on the management interfaces: [root@node1 ~]# tcpdump -i ovirtmgmt portrange 49152-49664 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on ovirtmgmt, link-type EN10MB (Ethernet), capture size 262144 bytes 14:04:58.746574 IP node2.ovirt.49129 > node1.ovirt.49153: Flags [.], ack 484303246, win 18338, options [nop,nop,TS val 6760049 ecr 6760932], length 0 14:04:58.753050 IP node2.ovirt.49131 > node1.ovirt.49152: Flags [P.], seq 2507489191:2507489347, ack 2889633200, win 20874, options [nop,nop,TS val 6760055 ecr 6757892], length 156 14:04:58.753131 IP node2.ovirt.49131 > node1.ovirt.49152: Flags [P.], seq 156:312, ack 1, win 20874, options [nop,nop,TS val 6760055 ecr 6757892], length 156 14:04:58.753142 IP node2.ovirt.49131 > node1.ovirt.49152: Flags [P.], seq 312:468, ack 1, win 20874, options [nop,nop,TS val 6760055 ecr 6757892], length 156 14:04:58.753148 IP node2.ovirt.49131 > node1.ovirt.49152: Flags [P.], seq 468:624, ack 1, win 20874, options [nop,nop,TS val 6760055 ecr 6757892], length 156 14:04:58.753203 IP node2.ovirt.49131 > node1.ovirt.49152: Flags [P.], seq 624:780, ack 1, win 20874, options [nop,nop,TS val 6760055 ecr 6757892], length 156 14:04:58.753216 IP node2.ovirt.49131 > node1.ovirt.49152: Flags [P.], seq 780:936, ack 1, win 20874, options [nop,nop,TS val 6760055 ecr 6757892], length 156 14:04:58.753231 IP node1.ovirt.49152 > node2.ovirt.49131: Flags [.], ack 936, win 15566, options [nop,nop,TS val 6760978 ecr 6760055], length 0 ... and no yet to the eth1 I dedicated to gluster: [root@node1 ~]# tcpdump -i eth1 portrange 49152-49664 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth1, link-type EN10MB (Ethernet), capture size 262144 bytes What am I missing here? What can I do to force the Gluster traffic to really flow on dedicated Gluster network? Thank you, Stefano. [1] https://red.ht/2MiZ4Ge

4 7

Re: oVirt 4.3.5/6 HC: Reinstall fails from WEB UI
by Strahil 17 Oct '19

17 Oct '19

Check why the sanlock.service reports no pid. Also check the logs of the broker and agent located at /var/log/ovirt-hosted-engine-ha You might have to increase the verbosity of the broker and agent. Best Regards, Strahil NikolovOn Oct 17, 2019 08:00, adrianquintero(a)gmail.com wrote: > > Strahil, > this is what i see for each service > all services are active and running except for ovirt-ha-agent which says "activating", even though the rest of the services are Active/running they still show a few errors warnings. > > ------------------------------------------------------------------------------------------------------- > ● sanlock.service - Shared Storage Lease Manager > Loaded: loaded (/usr/lib/systemd/system/sanlock.service; disabled; vendor preset: disabled) > Active: active (running) since Thu 2019-10-17 00:47:20 EDT; 2min 1s ago > Process: 16495 ExecStart=/usr/sbin/sanlock daemon (code=exited, status=0/SUCCESS) > Main PID: 2023 > Tasks: 10 > CGroup: /system.slice/sanlock.service > └─2023 /usr/sbin/sanlock daemon > > Oct 17 00:47:20 host1.example.com systemd[1]: Starting Shared Storage Lease Manager... > Oct 17 00:47:20 host1.example.com systemd[1]: Started Shared Storage Lease Manager. > Oct 17 00:47:20 host1.example.com sanlock[16496]: 2019-10-17 00:47:20 33920 [16496]: lockfile setlk error /var/run/sanlock/sanlock.pid: Resource temporarily unavailable > ● supervdsmd.service - Auxiliary vdsm service for running helper functions as root > Loaded: loaded (/usr/lib/systemd/system/supervdsmd.service; static; vendor preset: enabled) > Active: active (running) since Thu 2019-10-17 00:43:06 EDT; 6min ago > Main PID: 15277 (supervdsmd) > Tasks: 5 > CGroup: /system.slice/supervdsmd.service > └─15277 /usr/bin/python2 /usr/share/vdsm/supervdsmd --sockfile /var/run/vdsm/svdsm.sock > > Oct 17 00:43:06 host1.example.com systemd[1]: Started Auxiliary vdsm service for running helper functions as root. > Oct 17 00:43:07 host1.example.com supervdsmd[15277]: failed to load module nvdimm: libbd_nvdimm.so.2: cannot open shared object file: No such file or directory > ● vdsmd.service - Virtual Desktop Server Manager > Loaded: loaded (/usr/lib/systemd/system/vdsmd.service; enabled; vendor preset: enabled) > Active: active (running) since Thu 2019-10-17 00:47:27 EDT; 1min 54s ago > Process: 16402 ExecStopPost=/usr/libexec/vdsm/vdsmd_init_common.sh --post-stop (code=exited, status=0/SUCCESS) > Process: 16499 ExecStartPre=/usr/libexec/vdsm/vdsmd_init_common.sh --pre-start (code=exited, status=0/SUCCESS) > Main PID: 16572 (vdsmd) > Tasks: 38 > CGroup: /system.slice/vdsmd.service > └─16572 /usr/bin/python2 /usr/share/vdsm/vdsmd > > Oct 17 00:47:28 host1.example.com vdsm[16572]: WARN MOM not available. > Oct 17 00:47:28 host1.example.com vdsm[16572]: WARN MOM not available, KSM stats will be missing. > Oct 17 00:47:28 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:47:43 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:47:58 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:48:13 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:48:28 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:48:43 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:48:58 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:49:13 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > ● ovirt-ha-broker.service - oVirt Hosted Engine High Availability Communications Broker > Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-broker.service; enabled; vendor preset: disabled) > Active: active (running) since Thu 2019-10-17 00:44:11 EDT; 5min ago > Main PID: 16379 (ovirt-ha-broker) > Tasks: 2 > CGroup: /system.slice/ovirt-ha-broker.service > └─16379 /usr/bin/python /usr/share/ovirt-hosted-engine-ha/ovirt-ha-broker > > Oct 17 00:44:11 host1.example.com systemd[1]: Started oVirt Hosted Engine High Availability Communications Broker. > ● ovirt-ha-agent.service - oVirt Hosted Engine High Availability Monitoring Agent > Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-agent.service; enabled; vendor preset: disabled) > Active: activating (auto-restart) (Result: exit-code) since Thu 2019-10-17 00:49:13 EDT; 8s ago > Process: 16925 ExecStart=/usr/share/ovirt-hosted-engine-ha/ovirt-ha-agent (code=exited, status=157) > Main PID: 16925 (code=exited, status=157) > > Oct 17 00:49:13 host1.example.com systemd[1]: Unit ovirt-ha-agent.service entered failed state. > Oct 17 00:49:13 host1.example.com systemd[1]: ovirt-ha-agent.service failed. > [root@host1]# systemctl status sanlock;echo ---------;systemctl status supervdsmd;echo -------------;systemctl status vdsmd;echo ---------;systemctl status ovirt-ha-broker;echo ----------;systemctl status ovirt-ha-agent > ● sanlock.service - Shared Storage Lease Manager > Loaded: loaded (/usr/lib/systemd/system/sanlock.service; disabled; vendor preset: disabled) > Active: active (running) since Thu 2019-10-17 00:47:20 EDT; 3min 14s ago > Process: 16495 ExecStart=/usr/sbin/sanlock daemon (code=exited, status=0/SUCCESS) > Main PID: 2023 > Tasks: 10 > CGroup: /system.slice/sanlock.service > └─2023 /usr/sbin/sanlock daemon > > Oct 17 00:47:20 host1.example.com systemd[1]: Starting Shared Storage Lease Manager... > Oct 17 00:47:20 host1.example.com systemd[1]: Started Shared Storage Lease Manager. > Oct 17 00:47:20 host1.example.com sanlock[16496]: 2019-10-17 00:47:20 33920 [16496]: lockfile setlk error /var/run/sanlock/sanlock.pid: Resource temporarily unavailable > --------- > ● supervdsmd.service - Auxiliary vdsm service for running helper functions as root > Loaded: loaded (/usr/lib/systemd/system/supervdsmd.service; static; vendor preset: enabled) > Active: active (running) since Thu 2019-10-17 00:43:06 EDT; 7min ago > Main PID: 15277 (supervdsmd) > Tasks: 5 > CGroup: /system.slice/supervdsmd.service > └─15277 /usr/bin/python2 /usr/share/vdsm/supervdsmd --sockfile /var/run/vdsm/svdsm.sock > > Oct 17 00:43:06 host1.example.com systemd[1]: Started Auxiliary vdsm service for running helper functions as root. > Oct 17 00:43:07 host1.example.com supervdsmd[15277]: failed to load module nvdimm: libbd_nvdimm.so.2: cannot open shared object file: No such file or directory > ------------- > ● vdsmd.service - Virtual Desktop Server Manager > Loaded: loaded (/usr/lib/systemd/system/vdsmd.service; enabled; vendor preset: enabled) > Active: active (running) since Thu 2019-10-17 00:47:27 EDT; 3min 7s ago > Process: 16402 ExecStopPost=/usr/libexec/vdsm/vdsmd_init_common.sh --post-stop (code=exited, status=0/SUCCESS) > Process: 16499 ExecStartPre=/usr/libexec/vdsm/vdsmd_init_common.sh --pre-start (code=exited, status=0/SUCCESS) > Main PID: 16572 (vdsmd) > Tasks: 38 > CGroup: /system.slice/vdsmd.service > └─16572 /usr/bin/python2 /usr/share/vdsm/vdsmd > > Oct 17 00:48:13 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:48:28 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:48:43 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:48:58 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:49:13 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:49:28 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:49:43 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:49:58 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:50:13 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > Oct 17 00:50:28 host1.example.com vdsm[16572]: ERROR failed to retrieve Hosted Engine HA score '[Errno 2] No such file or directory'Is the Hosted Engine setup finished? > --------- > ● ovirt-ha-broker.service - oVirt Hosted Engine High Availability Communications Broker > Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-broker.service; enabled; vendor preset: disabled) > Active: active (running) since Thu 2019-10-17 00:44:11 EDT; 6min ago > Main PID: 16379 (ovirt-ha-broker) > Tasks: 2 > CGroup: /system.slice/ovirt-ha-broker.service > └─16379 /usr/bin/python /usr/share/ovirt-hosted-engine-ha/ovirt-ha-broker > > Oct 17 00:44:11 host1.example.com systemd[1]: Started oVirt Hosted Engine High Availability Communications Broker. > ---------- > ● ovirt-ha-agent.service - oVirt Hosted Engine High Availability Monitoring Agent > Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-agent.service; enabled; vendor preset: disabled) > Active: activating (auto-restart) (Result: exit-code) since Thu 2019-10-17 00:50:27 EDT; 7s ago > Process: 17107 ExecStart=/usr/share/ovirt-hosted-engine-ha/ovirt-ha-agent (code=exited, status=157) > Main PID: 17107 (code=exited, status=157) > > Oct 17 00:50:27 host1.example.com systemd[1]: Unit ovirt-ha-agent.service entered failed state. > Oct 17 00:50:27 host1.example.com systemd[1]: ovirt-ha-agent.service failed. > > ------------------------------------------------------------------------------------------------------- > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4P4WPUBORKISK…

1 0

Re: Delete snapshots task hung
by Strahil 17 Oct '19

17 Oct '19

Have you checked this thread : https://lists.ovirt.org/pipermail/users/2016-April/039277.html You can switch to postgre user, then 'source /opt/rhn/postgresql10/enable' & then 'psql engine'. As per the thread you can find illegal snapshots via 'select image_group_id,imagestatus from images where imagestatus =4;' And then update them via 'update images set imagestatus =1 where imagestatus = 4 and <other criteria>; commit' Best Regards, Strahil Nikolov On Oct 13, 2019 15:45, Leo David <leoalex(a)gmail.com> wrote: > > Hi Everyone, > Im still not being able to start the vms... Could anyone give me an advice on sorign this out ? > Still having th "Bad volume specification" error, although the disk is present on the storage. > This issue would force me to reinstall a 10 nodes Openshift cluster from scratch, which would not be so funny.. > Thanks, > > Leo. > > On Fri, Oct 11, 2019 at 7:12 AM Strahil <hunter86_bg(a)yahoo.com> wrote: >> >> Nah... >> It's done directly on the DB and I wouldn't recommend such action for Production Cluster. >> I've done it only once and it was based on some old mailing lists. >> >> Maybe someone from the dev can assist? >> >> On Oct 10, 2019 13:31, Leo David <leoalex(a)gmail.com> wrote: >>> >>> Thank you Strahil, >>> Could you tell me what do you mean by changing status ? Is this something to be done in the UI ? >>> >>> Thanks, >>> >>> Leo >>> >>> On Thu, Oct 10, 2019, 09:55 Strahil <hunter86_bg(a)yahoo.com> wrote: >>>> >>>> Maybe you can change the status of the VM in order the engine to know that it has to blockcommit the snapshots. >>>> >>>> Best Regards, >>>> Strahil Nikolov >>>> >>>> On Oct 9, 2019 09:02, Leo David <leoalex(a)gmail.com> wrote: >>>>> >>>>> Hi Everyone, >>>>> Please let me know if any thoughts or recommandations that could help me solve this issue.. >>>>> The real bad luck in this outage is that these 5 vms are part on an Openshift deployment, and now we are not able to start it up... >>>>> Before trying to sort this at ocp platform level by replacing the failed nodes with new vms, I would rather prefer to do it at the oVirt level and have the vms starting since the disks are still present on gluster. >>>>> Thank you so much ! >>>>> >>>>> >>>>> Leo > > > > -- > Best regards, Leo David

2 2

oVirt 4.3.5/6 HC: Reinstall fails from WEB UI
by adrianquintero＠gmail.com 16 Oct '19

16 Oct '19

Hi, I am trying to re-install a host from the web UI in oVirt 4.3.5, but it always fails and goes to "Setting Host state to Non-Operational" From the engine.log I see the following WARN/ERROR: 2019-10-16 16:32:57,263-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-43) [491c8bd9] EVENT_ID: VDS_SET_NONOPERATIONAL_DOMAIN(522), Host host1.example.com cannot access the Storage Domain(s) <UNKNOWN> attached to the Data Center Default-DC1. Setting Host state to Non-Operational. 2019-10-16 16:32:57,271-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-43) [491c8bd9] EVENT_ID: VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host host1.example.com.There is no other host in the data center that can be used to test the power management settings. 2019-10-16 16:32:57,276-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-43) [491c8bd9] EVENT_ID: CONNECT_STORAGE_POOL_FAILED(995), Failed to connect Host host1.example.com to Storage Pool Default-DC1 2019-10-16 16:35:06,151-04 ERROR [org.ovirt.engine.core.bll.InitVdsOnUpCommand] (EE-ManagedThreadFactory-engine-Thread-137245) [] Could not connect host 'host1.example.com' to pool 'Default-DC1': Error storage pool connection: (u"spUUID=7d3fb14c-ebf0-11e9-9ee5-00163e05e135, msdUUID=4b87a5de-c976-4982-8b62-7cffef4a22d8, masterVersion=1, hostID=1, domainsMap={u'8c2df9c6-b505-4499-abb9-0d15db80f33e': u'active', u'4b87a5de-c976-4982-8b62-7cffef4a22d8': u'active', u'5d9f7d05-1fcc-4f99-9470-4e57cd15f128': u'active', u'fe24d88e-6acf-42d7-a857-eaf1f8deb24a': u'active'}",) 2019-10-16 16:35:06,248-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-91) [690baf86] EVENT_ID: VDS_SET_NONOPERATIONAL_DOMAIN(522), Host host1.example.com cannot access the Storage Domain(s) <UNKNOWN> attached to the Data Center Default-DC1. Setting Host state to Non-Operational. 2019-10-16 16:35:06,256-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-91) [690baf86] EVENT_ID: VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host host1.example.com.There is no other host in the data center that can be used to test the power management settings. 2019-10-16 16:35:06,261-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-91) [690baf86] EVENT_ID: CONNECT_STORAGE_POOL_FAILED(995), Failed to connect Host host1.example.com to Storage Pool Default-DC1 2019-10-16 16:37:46,011-04 ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp Reactor) [] Connection timeout for host 'host1.example.com', last response arrived 1501 ms ago. 2019-10-16 16:41:57,095-04 ERROR [org.ovirt.engine.core.bll.InitVdsOnUpCommand] (EE-ManagedThreadFactory-engine-Thread-137527) [17f3aadd] Could not connect host 'host1.example.com' to pool 'Default-DC1': Error storage pool connection: (u"spUUID=7d3fb14c-ebf0-11e9-9ee5-00163e05e135, msdUUID=4b87a5de-c976-4982-8b62-7cffef4a22d8, masterVersion=1, hostID=1, domainsMap={u'8c2df9c6-b505-4499-abb9-0d15db80f33e': u'active', u'4b87a5de-c976-4982-8b62-7cffef4a22d8': u'active', u'5d9f7d05-1fcc-4f99-9470-4e57cd15f128': u'active', u'fe24d88e-6acf-42d7-a857-eaf1f8deb24a': u'active'}",) 2019-10-16 16:41:57,199-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-22) [508ddb44] EVENT_ID: VDS_SET_NONOPERATIONAL_DOMAIN(522), Host host1.example.com cannot access the Storage Domain(s) <UNKNOWN> attached to the Data Center Default-DC1. Setting Host state to Non-Operational. 2019-10-16 16:41:57,211-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-22) [508ddb44] EVENT_ID: VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host host1.example.com.There is no other host in the data center that can be used to test the power management settings. 2019-10-16 16:41:57,216-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-22) [508ddb44] EVENT_ID: CONNECT_STORAGE_POOL_FAILED(995), Failed to connect Host host1.example.com to Storage Pool Default-DC1 Any ideas why this might be happening? I have researched, however I have not been able to find a solution. thanks, Adrian

1 0

ovirt and jackson security
by Fabrice Bacchella 16 Oct '19

16 Oct '19

When I launch ovirt 4.3.6, I see in the command line of the ovirt-engine: -Djackson.deserialization.whitelist.packages=org,com,java,javax That whitelist almost everything. Isn't that dangerous ? When I read this: https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-yo… I think the white list should be as small as possible.

2 1

Re: Cannot enable maintenance mode
by Lukas Svaty 16 Oct '19

16 Oct '19

Did you "Consider manual intervention" such as "stopping" or "migrating Vms" which are running on that host? If you are trying to put host to maintenance, it will migrate all the VMs somewhere else, thus... you might have problem with migrations (try to migrate them to other destination host) or power them off. On Wed, Oct 16, 2019 at 9:15 AM Bruno Martins <bruno.o.martins(a)gfi.world> wrote: > Hey guys, > > There are really no options left here? Is there something else I should > check? > > Thank you! > > -----Original Message----- > From: Bruno Martins <bruno.o.martins(a)gfi.world> > Sent: 3 de outubro de 2019 22:41 > To: Benny Zlotnik <bzlotnik(a)redhat.com> > Cc: users(a)ovirt.org > Subject: [ovirt-users] Re: Cannot enable maintenance mode > > Hello Benny, > > I did. No luck, still... > > Cheers! > > -----Original Message----- > From: Benny Zlotnik <bzlotnik(a)redhat.com> > Sent: 2 de outubro de 2019 19:19 > To: Bruno Martins <bruno.o.martins(a)gfi.world> > Cc: users(a)ovirt.org > Subject: Re: [ovirt-users] Re: Cannot enable maintenance mode > > Did you try the "Confirm Host has been rebooted" button? > > On Wed, Oct 2, 2019 at 9:17 PM Bruno Martins <bruno.o.martins(a)gfi.world> > wrote: > > > > Hello guys, > > > > No ideas for this issue? > > > > Thanks for your cooperation! > > > > Kind regards, > > > > -----Original Message----- > > From: Bruno Martins <bruno.o.martins(a)gfi.world> > > Sent: 29 de setembro de 2019 16:16 > > To: users(a)ovirt.org > > Subject: [ovirt-users] Cannot enable maintenance mode > > > > Hello guys, > > > > I am being unable to put a host from a two nodes cluster into > maintenance mode in order to remove it from the cluster afterwards. > > > > This is what I see in engine.log: > > > > 2019-09-27 16:20:58,364 INFO > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (org.ovirt.thread.pool-6-thread-45) [4cc251c9] Correlation ID: 4cc251c9, > Job ID: 65731fbb-db34-49a9-ab56-9fba59bc0ee0, Call Stack: null, Custom > Event ID: -1, Message: Host CentOS-H1 cannot change into maintenance mode - > not all Vms have been migrated successfully. Consider manual intervention: > stopping/migrating Vms: Non interactive user (User: admin). > > > > Host has been rebooted multiple times. vdsClient shows no VM's running. > > > > What else can I do? > > > > Kind regards, > > > > Bruno Martins > > _______________________________________________ > > Users mailing list -- users(a)ovirt.org > > To unsubscribe send an email to users-leave(a)ovirt.org Privacy > > Statement: https://www.ovirt.org/site/privacy-policy/ > > oVirt Code of Conduct: > > https://www.ovirt.org/community/about/community-guidelines/ > > List Archives: > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/X5FJWFW7 > > GXNW6YWRPFWOKA6VU3RH4WD3/ > > _______________________________________________ > > Users mailing list -- users(a)ovirt.org > > To unsubscribe send an email to users-leave(a)ovirt.org Privacy > > Statement: https://www.ovirt.org/site/privacy-policy/ > > oVirt Code of Conduct: > > https://www.ovirt.org/community/about/community-guidelines/ > > List Archives: > > https://lists.ovirt.org/archives/list/users@ovirt.org/message/DD5DW6KK > > OOHGL3WFEKIIIS57BN3VWMAQ/ > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: > https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/64GZQKZA7LX7K… > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/JJPEC7RDG3AUS… > -- Lukas Svaty RHV QE

1 0

Clarifications on support@
by Marc Dequènes (Duck) 16 Oct '19

16 Oct '19

Quack, We do as a community provide help on the MLs and reply to JIRA tickets but there is no customer support as it is not a product but a community project. Historically, probably for some other purpose, support@ was created, but noone remembers why. Anyway, the alias redirected to postmaster so it was not very useful. There was also a ML which could not receive mails because of the alias but probably got noticed in the new ML UI when we migrated. Recently more people subscribed and posted requests using the UI. After discussing with the infra team, and to avoid confusion and unreplied requests on this channel, we decided to remove it. I thus unsubscribed people from the list so that they would notice it and then purged the list and alias. Regards. \_o<

1 0

Re: Cannot enable maintenance mode
by Bruno Martins 15 Oct '19

15 Oct '19

Hey guys, There are really no options left here? Is there something else I should check? Thank you! -----Original Message----- From: Bruno Martins <bruno.o.martins(a)gfi.world> Sent: 3 de outubro de 2019 22:41 To: Benny Zlotnik <bzlotnik(a)redhat.com> Cc: users(a)ovirt.org Subject: [ovirt-users] Re: Cannot enable maintenance mode Hello Benny, I did. No luck, still... Cheers! -----Original Message----- From: Benny Zlotnik <bzlotnik(a)redhat.com> Sent: 2 de outubro de 2019 19:19 To: Bruno Martins <bruno.o.martins(a)gfi.world> Cc: users(a)ovirt.org Subject: Re: [ovirt-users] Re: Cannot enable maintenance mode Did you try the "Confirm Host has been rebooted" button? On Wed, Oct 2, 2019 at 9:17 PM Bruno Martins <bruno.o.martins(a)gfi.world> wrote: > > Hello guys, > > No ideas for this issue? > > Thanks for your cooperation! > > Kind regards, > > -----Original Message----- > From: Bruno Martins <bruno.o.martins(a)gfi.world> > Sent: 29 de setembro de 2019 16:16 > To: users(a)ovirt.org > Subject: [ovirt-users] Cannot enable maintenance mode > > Hello guys, > > I am being unable to put a host from a two nodes cluster into maintenance mode in order to remove it from the cluster afterwards. > > This is what I see in engine.log: > > 2019-09-27 16:20:58,364 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-6-thread-45) [4cc251c9] Correlation ID: 4cc251c9, Job ID: 65731fbb-db34-49a9-ab56-9fba59bc0ee0, Call Stack: null, Custom Event ID: -1, Message: Host CentOS-H1 cannot change into maintenance mode - not all Vms have been migrated successfully. Consider manual intervention: stopping/migrating Vms: Non interactive user (User: admin). > > Host has been rebooted multiple times. vdsClient shows no VM's running. > > What else can I do? > > Kind regards, > > Bruno Martins > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org Privacy > Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/X5FJWFW7 > GXNW6YWRPFWOKA6VU3RH4WD3/ > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org Privacy > Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/DD5DW6KK > OOHGL3WFEKIIIS57BN3VWMAQ/ _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/64GZQKZA7LX7K…

1 0

Host "install failed"
by Jess Zanne Uy 15 Oct '19

15 Oct '19

Hi Sir/Madaam, I'm trying to search for hours now but still no luck I can already access the oVirt engine web port via IP address. I'm running via Virtualbox machine. Configured data center, cluster. Then after adding new host. Error occur "Install failed". Tried to check the engine log. It says "EVENT ID: VDS INSTALL_FAILED(505), Host ovirt host installation failed. Command returned failure code 1 during SSH session" My IP address and password is exact. And edited the /etc/host IP_ADDRESS localhost.localdomain My hostname is default, BTW Any help what's wrong with the configuration. Please see attached logs ovirtlog.txt <https://drive.google.com/file/d/13PK8wgJPwlxFB08Ve6hXxYMcDpiLHkmF/view?usp=…>

3 4

Upload ISO with ovirt-imageio-proxy
by Fabrice SOLER 15 Oct '19

15 Oct '19

Hello, We try to use ovirt-imageio-proxy to upload ISO image to a node. Some errors appear and the upload do not work. We use ovirt-engine 4.3.6 and our engine is configured to use a SSL/TLS certificate validated by Digicert (documented in https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html ) Our configuration file |/etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf is :| |/[proxy]// //# Listening port// //port = 54323// // //# Listening addresses (empty for all)// //host = infra-eple.ac-guadeloupe.fr// // //# Wrap incoming connections with SSL// //use_ssl = true// // //# Key file for SSL connections// //ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass// // //# Certificate file for SSL connections// //ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer// // //# Certificate file used when decoding signed token// //engine_cert_file = /etc/pki/ovirt-engine/certs/engine.cer// // //# CA certificate file used to verify signed token// //engine_ca_cert_file = /etc/pki/ovirt-engine/ca.pem// // //# Verify the certificate used to decode the signed token// //verify_certificate = true// // //# Server shutdown request polling interval, in seconds// //# poll_interval = 1.0// // //# Signed proxy ticket; false for plain-text JSON// //# signed_proxy_ticket = true// // //# Allowed time drift between signed ticket issuer and proxy// //# host, considered when checking ticket validity// //# allowed_skew_seconds = 0// // //# Seconds to wait while connecting to the ovirt-imageio-daemon// //# imaged_connection_timeout_sec = 10// // //# Seconds to wait while reading from the ovirt-imageio-daemon// //# imaged_read_timeout_sec = 30/ | | | *|To upload the image ISO, we use the web portal, select the host's storage Domains, select Disks and Upload|**|--> Start.|**||**| |** **|When the upload||starts, the message on the web page is "Transferring via Brower" then after sometimes it changes to "Paused by System".|** *|*In the /var/log/ovirt-imageio-proxy/image-proxy.log file we can read :* | /|(Thread-6 ) INFO 2019-10-14 14:38:17,186 auth:197:auth2:(add_signed_ticket) Adding new ticket: <Ticket id=u'e633a89d-4dd8-4155-85ef-0eb6375e4117', transfer_id=u'11a1fb8b-22b7-4182-ac7f-b897830fffc3', url=u'https://eple-rectorat-proto1.ac-guadeloupe.fr:54322' timeout=35999.813010931015 at 0x7f793bc720d0>|/ *|So, it seems good, but in /var/log/ovirt-engine/engine.log some errors are presents :|* /|2019-10-14 14:41:13,279-04 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetImageTicketVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-75) [af987639-b3f7-4907-a11f-d2ffde5a6de8] START, GetImageTicketVDSCommand(HostName = eple-rectorat-proto1, GetImageTicketVDSCommandParameters:{hostId='56c658ea-148c-4a55-af65-e9c89ec1a984', ticketId='e633a89d-4dd8-4155-85ef-0eb6375e4117', timeout='null'}), log id: 728b11ad 2019-10-14 14:41:13,286-04 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.GetImageTicketVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-75) [af987639-b3f7-4907-a11f-d2ffde5a6de8] FINISH, GetImageTicketVDSCommand, return: org.ovirt.engine.core.common.businessentities.storage.ImageTicketInformation@8bc98ba3, log id: 728b11ad 2019-10-14 14:41:15,136-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-23) [98c1bb29-7c86-433c-b8f7-40cc4815b083] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2019-10-14 14:41:16,487-04 WARN [org.ovirt.vdsm.jsonrpc.client.utils.retry.Retryable] (SSL Stomp Reactor) [] Retry failed 2019-10-14 14:41:16,487-04 ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (EE-ManagedThreadFactory-engineScheduled-Thread-89) [] Exception during connection 2019-10-14 14:41:16,487-04 ERROR [org.ovirt.engine.core.vdsbroker.monitoring.HostMonitoring] (EE-ManagedThreadFactory-engineScheduled-Thread-89) [] Unable to RefreshCapabilities: ConnectException: Connection timeout 2019-10-14 14:41:16,487-04 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.GetCapabilitiesAsyncVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-89) [] Command 'GetCapabilitiesAsyncVDSCommand(HostName = lgt-faustinfleret, VdsIdAndVdsVDSCommandParametersBase:{hostId='8dfa9c9d-d7ac-4184-ae61-1c80fbbf487b', vds='Host[lgt-faustinfleret,8dfa9c9d-d7ac-4184-ae61-1c80fbbf487b]'})' execution failed: java.rmi.ConnectException: Connection timeout 2019-10-14 14:41:16,488-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-23) [bd47f950-d4f9-42d7-980a-7e99465079dd] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2019-10-14 14:41:16,489-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.ImageTransferUpdater] (default task-23) [bd47f950-d4f9-42d7-980a-7e99465079dd] Updating image transfer 11a1fb8b-22b7-4182-ac7f-b897830fffc3 (image def85ea0-5eb4-463f-83fb-afd788e77379) phase to Paused by System (message: 'Sent 0MB') 2019-10-14 14:41:16,495-04 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-23) [bd47f950-d4f9-42d7-980a-7e99465079dd] EVENT_ID: UPLOAD_IMAGE_NETWORK_ERROR(1,062), Unable to upload image to disk def85ea0-5eb4-463f-83fb-afd788e77379 due to a network error. Ensure that ovirt-imageio-proxy service is installed and configured and that ovirt-engine's CA certificate is registered as a trusted CA in the browser. The certificate can be fetched from https://infra-eple.ac-guadeloupe.fr/ovirt-engine/services/pki-resource?reso… |/ /| |/ *|The certificate seems to be correctely configured :|* |//etc/pki/ovirt-engine/keys/apache.key.nopass : key of our certificate/| |||//etc/pki/ovirt-engine/certs/apache.cer : our certifcate validated by Digicert/| |||//etc/pki/ovirt-engine/ca.pem : the CA from /|/|fetched from https://infra-eple.ac-guadeloupe.fr/ovirt-engine/services/pki-resource?reso… ||/||/ ||//etc/pki/ovirt-engine/certs/engine.cer : the original file producted bye the ovirt engine/|| ||/There is no network paquet going out of the engine when the upload begins, the ovirt engine seems to block before. /|| ||/ /|| *||/Where do you think I make a mistake ?/||* *||/ /||* *||/Sincerely,/||* ||*/Fabrice SOLER/*/ /|| --

3 3