- Users - oVirt List Archives

Authentication with Active Directory
by Alireza Eskandari 02 Aug '22

02 Aug '22

Hi all, I'm trying to connect an active directory to my ovirt for authentication. But the base DN of my active directory is not the default one so I need to specify it in ovirt configuration to find users. How can I configure it? In my current configuration when I try to login, I get this message: server_error: Cannot resolve principal 'xxxx(a)yy.zz' Regards, Alireza

1 0

ovirt-engine manager, certificate issue
by david 02 Aug '22

02 Aug '22

hello I have a problem to log in to ovirt-engine manager in my browser the warning message in the browser display me this text: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed to solve this problem I am offered to run engine-setup and here is a question: the engine-setup will have no impact to the hosts(hypervisors) working? ovirt version 4.4.4.7-1.el8 thanks

7 7

Make QXL the default
by Colin Coe 02 Aug '22

02 Aug '22

Hey all We've just updated to RHV4.4SP1 (aka 4.5) from v4.4 and now our ansible workflows are failing with: cannot run VM. Selected display type is not supported by the operating system The OS are RHEL6 and RHEL7 (no, I can't change this as the software stack only works with these) I couldn't find anything in the ansible ovirt collection to change from VGA to QXL. Any ideas on how I can make QXL the default instead of VGA? Maybe a DB change? Thanks

3 4

Issue with oVirt 4.5 and Data Warehouse installed on a Separate Machine
by Igor Davidoff 02 Aug '22

02 Aug '22

Hello, i have an issue with 'engine-seup' step on DWH (separate server) aufter upgrade from 4.4.10 to 4.5. It looks like the ovirt-engine-setup are looking for rpm-package 'ovirt-engine' instead of 'ovirt-engine-dwh'. the reporting error is: " --== END OF CONFIGURATION ==-- [ INFO ] Stage: Setup validation [ ERROR ] Failed to execute stage 'Setup validation': Command '/usr/bin/rpm' failed to execute [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20220502100751-fqwb07.log [WARNING] Remote engine was not configured to be able to access DWH, please check the logs. [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20220502101130-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed " in Setup log i found: " 2022-05-02 10:11:30,000+0000 DEBUG otopi.context context._executeMethod:127 Stage validation METHOD otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages.Plugin._validation 2022-05-02 10:11:30,001+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages plugin.executeRaw:813 execute: ('/usr/bin/rpm', '-q', '--queryformat=%{version}-%{release}', 'ovirt-engine'), executable='None', cwd='None', env=None 2022-05-02 10:11:30,013+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages plugin.executeRaw:863 execute-result: ('/usr/bin/rpm', '-q', '--queryformat=%{version}-%{release}', 'ovirt-engine'), rc=1 2022-05-02 10:11:30,013+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages plugin.execute:921 execute-output: ('/usr/bin/rpm', '-q', '--queryformat=%{version}-%{release}', 'ovirt-engine') stdout: package ovirt-engine is not installed 2022-05-02 10:11:30,013+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages plugin.execute:926 execute-output: ('/usr/bin/rpm', '-q', '--queryformat=%{version}-%{release}', 'ovirt-engine') stderr: 2022-05-02 10:11:30,013+0000 DEBUG otopi.context context._executeMethod:145 method exception Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/otopi/context.py", line 132, in _executeMethod method['method']() File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine-common/distro-rpm/packages.py", line 463, in _validation oenginecons.Const.ENGINE_PACKAGE_NAME, File "/usr/lib/python3.6/site-packages/otopi/plugin.py", line 931, in execute command=args[0], RuntimeError: Command '/usr/bin/rpm' failed to execute 2022-05-02 10:11:30,015+0000 ERROR otopi.context context._executeMethod:154 Failed to execute stage 'Setup validation': Command '/usr/bin/rpm' failed to execute " usually the upgrade of minor versions in 4.4 was just: # yum update ovirt\*setup\* # engine-setup # yum update as it did not work, i tried the fresh installation of centos8 stream and recovery of DWH Database and configuration: # engine-backup --mode=restore --file=backup.bck --provision-all-databases -> no luck the last idea was fresh installation centos8 stream + fresh installation of ovirt-engine-dwh 4.5 (without recovery) -> the same error. the engine side works fine. i compared the current setup logs with the installation and all the minor upgrades of ovirt-engine-dwh before 4.5 and only found the rpm-validation for the package 'ovirt-engine-dwh': " 2022-02-08 16:11:29,846+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages plugin.executeRaw:813 execute: ('/usr/bin/rpm', '-q', 'ovirt-engine-dwh'), executable='None', cwd='None', env=None 2022-02-08 16:11:29,877+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages plugin.executeRaw:863 execute-result: ('/usr/bin/rpm', '-q', 'ovirt-engine-dwh'), rc=0 2022-02-08 16:11:29,878+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages plugin.execute:921 execute-output: ('/usr/bin/rpm', '-q', 'ovirt-engine-dwh') stdout: ovirt-engine-dwh-4.4.10-1.el8.noarch 2022-02-08 16:11:29,878+0000 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine_common.distro-rpm.packages plugin.execute:926 execute-output: ('/usr/bin/rpm', '-q', 'ovirt-engine-dwh') stderr: 2022-02-08 16:11:29,878+0000 DEBUG otopi.transaction transaction.commit:152 committing 'DWH Engine database Transaction' " It looks like engine-setup knows it is the DWH-Server, but is trying to validate the wrong rpm package. Any Ideas, how to work around this. Thank you!

2 5

Obsoleting Packages in 'dnf check-update' on RHEL 8.6 hosts
by Scott Worthington 01 Aug '22

01 Aug '22

Hello, My 4.5.1.3-1.el8 oVirt homelab cluster is running on RHEL 8.6 hosts and a RHEL 8.6 stand-alone engine. During the installation, I followed the instructions for RHEL 8.6: https://ovirt.org/download/install_on_rhel.html After the installation is complete, all packages are up-to-date, and everything is running, I run a 'dnf check-upgrade' and I find there are two packages that are listed under "Obsoleting Packages": """ Last metadata expiration check: 0:43:06 ago on Mon 01 Aug 2022 08:08:50 AM EDT. Obsoleting Packages centos-stream-release.noarch 8.6-1.el8 @@System centos-stream-release.noarch 8.6-1.el8 @@System centos-stream-release.noarch 8.6-1.el8 @@System redhat-release.x86_64 8.6-0.1.el8 @rhel-8-for-x86_64-baseos-rpms """ For the hosts, it makes it appear that the hosts always have an upgrade pending in the oVirt Engine UI. "centos-strea-release.noarch" appears to contain similar files to the original RHEL 8.6 package "redhat-release-8.6.0.1.el8" except for the addition of "centos*" named files. Any thoughts on how to change this behavior so that it doesn't appear to have packages to upgrade because a 'dnf update' does nothing to these "Obsoleting Packages"? Thanks in advance.

1 0

Dark Mode
by Dean L 01 Aug '22

01 Aug '22

Is there a way to place oVirt in Dark Mode? It's one of those things I really like about moVirt. :) Thanks!

1 0

Gluster volume "deleted" by accident --- Is it possible to recover?
by itforums51＠gmail.com 01 Aug '22

01 Aug '22

hi everyone, I have a 3x node ovirt 4.4.6 cluster in HC setup. Today I was intending to extend the data and vmstore volume adding another brick each; then by accident I pressed the "cleanup" button. Basically it looks that the volume were deleted. I am wondering whether there is a process of trying to recover these volumes and therefore all VMs (including the Hosted-Engine). ``` lvs LV VG Attr LSize Pool Origin Data% Meta% Move Log Cpy%Sync Convert gluster_lv_data gluster_vg_sda4 Vwi---t--- 500.00g gluster_thinpool_gluster_vg_sda4 gluster_lv_data-brick1 gluster_vg_sda4 Vwi-aot--- 500.00g gluster_thinpool_gluster_vg_sda4 0.45 gluster_lv_engine gluster_vg_sda4 -wi-a----- 100.00g gluster_lv_vmstore gluster_vg_sda4 Vwi---t--- 500.00g gluster_thinpool_gluster_vg_sda4 gluster_lv_vmstore-brick1 gluster_vg_sda4 Vwi-aot--- 500.00g gluster_thinpool_gluster_vg_sda4 0.33 gluster_thinpool_gluster_vg_sda4 gluster_vg_sda4 twi-aot--- <7.07t 11.46 0.89 ``` I would appreciate any advice. TIA

2 2

oVirt Survey Summer 2022 responses are now available
by Sandro Bonazzola 01 Aug '22

01 Aug '22

Thanks to the 109 participants in the oVirt Survey Summer 2022! The survey is now over and results are publicly available at https://docs.google.com/forms/d/1eQcbSqC6JQ2mvbPUcD7S_0pZW8hy_De4PCwkBYrP6m… Thanks -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D PERFORMANCE & SCALE Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0

Engine update failing 4.5.1.3-1 -> 4.5.2-1
by xavierl＠rogers.com 29 Jul '22

29 Jul '22

Hi there, I'm trying to update my engine version so I can mitigate a bug which was in the previous update and is failing. The log file is proving to be very difficult to pinpoint the cause of the error however I can provide it. Wondering if anyone else has had this issue and if there's a way to fix it while preserving the VMs I have on this single host setup. [ INFO ] Stage: Setup validation During execution engine service will be stopped (OK, Cancel) [OK]: [ INFO ] Hosted Engine HA is in Global Maintenance mode. Setup version: 4.5.2-1.el8 Engine version: 4.5.1.3-1.el8 [ ERROR ] Failed to execute stage 'Setup validation': Setup and (updated) Engine versions must match [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20220728194403-9ev4xe.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20220728194429-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed

3 5

ovirt vms NotResponding related to firewalls
by Bill James 29 Jul '22

29 Jul '22

we recently added a bunch of firewalls around vlans where our VMs live and it may be causing a lot of confusion to ovirt management node? Though I don't know why firewall would cause intermittent problems. We see a lot of errors like: (in engine.log) 2022-07-28 19:39:47,923-07 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (ForkJoinPool-1-worker-1) [] VM '6e177451-d43f-4e 91-85ad-6b8f3bcfc4ad'(epayfraud2.j2noc.com) moved from 'NotResponding' --> 'Up' ... 2022-07-28 19:39:53,676-07 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineSch eduled-Thread-58) [] EVENT_ID: VM_NOT_RESPONDING(126), VM epayfraud 2.j2noc.com is not responding. ... 2022-07-28 19:40:36,189-07 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (ForkJoinPool-1-worker-10) [] VM '6e177451-d43f-4e91-85ad-6b8f3bcfc4ad'( epayfraud2.j2noc.com) moved from 'NotResponding' --> 'Up' I guess my first question is how does ovirt determine if VM is up or not, is it the management node or the host VM is running on and what ports does it use to determine health?

1 1

Six node HCI
by Gaurang Patel 29 Jul '22

29 Jul '22

Hi, I am very new to Ovirt 6 Node Gluster. We can create three node cluster successfully with the 4.5.1 version but after expanding the gluster cluster with additional 3 nodes, Ovirt-engine is going to not responding mode. If you can help me with step by step document would be very greatful to us. Thank in advance. Gaurang Patel DISCLAIMER : The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future.

1 0

Re: Veeam Backup for RHV (oVirt)
by markeczzz＠gmail.com 29 Jul '22

29 Jul '22

Ah, I see.. Then, is there any good guide or documentation how to revert from Keycloak to AAA? All I could find is how to move from AAA to Keycloak, but not reverse.

2 4

Import machines
by Demeter Tibor 28 Jul '22

28 Jul '22

Dear Listmembers, Is it possible to import ovirt 4.3's VMs into a new ovirt environment via our old storage domains? I have an old 4.3 self-hosted system with 3 storage domain, but it seems very difficult upgrade until 4.5. I just wondering, what if I do install a complety new system and just attach the old storge domains to that. Is it will work ? If yes, what will do it with our VM-s and networks. Thanks in advance, Regards. Tibor

2 1

Veeam Backup for RHV (oVirt)
by markeczzz＠gmail.com 27 Jul '22

27 Jul '22

Hi! Not really sure if this is right place to ask, but.. I am trying to use Veeam Backup for Red Hat Virtualization on oVirt 4.5.1. I have been using it on version 4.4.10.7 and it works ok there. On Veeam Release page it says that supported OS is RHV 4.4SP1 (oVirt 4.5). When i try to do backup, this is what i get from Veeam backup. No errors in vdsm.log and engine.log.. 2022-07-27 08:08:44.153 00039 [19545] INFO | [LoggingEventsManager_39]: Add to storage LoggingEvent [id: 34248685-a193-4df5-8ff2-838f738e211c, Type: BackupStartedNew] 2022-07-27 08:08:44.168 00039 [19545] INFO | [TaskManager_39]: Create and run new async task. [call method:'RunBackupChain'] 2022-07-27 08:08:44.168 00039 [19545] INFO | [AsyncTask_39]: New AsynTask created [id:'aafa22ac-ff2e-4647-becb-dca88e3eb67f', description:'', type:'BACKUP_VM_POLICY'] 2022-07-27 08:08:44.168 00039 [19545] INFO | [AsyncTask_39]: Prepare AsynTask to run [id:'aafa22ac-ff2e-4647-becb-dca88e3eb67f'] 2022-07-27 08:08:44.176 00031 [19545] INFO | [BackupPolicy_31]: Refresh VMs for policy '6e090c98-d44b-4785-acb4-82a627da5d9b' 2022-07-27 08:08:44.176 00031 [19545] INFO | [BackupPolicy_31]: Begin updating list of active VMs for policy '6e090c98-d44b-4785-acb4-82a627da5d9b' [forceRefresh = True] 2022-07-27 08:08:44.176 00031 [19545] INFO | [RhevCluster_31]: Test connection to cluster [IP: engine.example.org, Port: 443, User: admin@ovirt@internalsso] 2022-07-27 08:08:44.189 00039 [19545] INFO | [TaskManager_39]: AsyncTask registered. [id:'aafa22ac-ff2e-4647-becb-dca88e3eb67f'] 2022-07-27 08:08:44.371 00031 [19545] INFO | [RhevCluster_31]: Test connection to cluster success. Status: Success. Message: 2022-07-27 08:08:44.556 00031 [19545] INFO | [BackupPolicyManager_31]: Refreshing the policies data... 2022-07-27 08:08:44.556 00031 [19545] INFO | [BackupPolicy_31]: Begin updating list of active VMs for policy '6e090c98-d44b-4785-acb4-82a627da5d9b' [forceRefresh = False] 2022-07-27 08:08:44.556 00031 [19545] INFO | [BackupPolicy_31]: List of active VMs updated for policy '6e090c98-d44b-4785-acb4-82a627da5d9b' [forceRefresh = False]. Number of active VMs '1' 2022-07-27 08:08:44.556 00031 [19545] INFO | [BackupPolicyManager_31]: Policies data has been refreshed. 2022-07-27 08:08:44.556 00031 [19545] INFO | [BackupPolicy_31]: List of active VMs updated for policy '6e090c98-d44b-4785-acb4-82a627da5d9b' [forceRefresh = True]. Number of active VMs '1' 2022-07-27 08:08:44.556 00031 [19545] INFO | [BackupPolicy_31]: Found the '1' VMs to backup in policy '6e090c98-d44b-4785-acb4-82a627da5d9b' 2022-07-27 08:08:44.564 00031 [19545] INFO | [BackupPolicy_31]: * Parallel policy runner has started * for policy [Name:'test5', ID: '6e090c98-d44b-4785-acb4-82a627da5d9b' 2022-07-27 08:08:44.564 00031 [19545] INFO | [VeeamBackupServer_31]: Test connection to backup server [IP: 'veeambr.example.org', Port: '10006', User: 'rhvproxy'] 2022-07-27 08:08:44.931 00031 [19545] INFO | [VeeamBackupServer_31]: Test connection to backup server [IP: 'veeambr.example.org', Port: '10006']. Connection status: ConnectionSuccess. Version: 11.0.1.1261 2022-07-27 08:08:45.423 00031 [19545] INFO | [BackupPolicy_31]: Successfully called CreateVeeamPolicySession for job [UID: '6e090c98-d44b-4785-acb4-82a627da5d9b'], session [UID: 'aafa22ac-ff2e-4647-becb-dca88e3eb67f'] 2022-07-27 08:08:45.820 00031 [19545] INFO | [BackupPolicy_31]: Successfully called RetainPolicyVms for job [UID: '6e090c98-d44b-4785-acb4-82a627da5d9b'] with VMs: 50513a65-6ccc-479b-9b61-032e0961b016 2022-07-27 08:08:45.820 00031 [19545] INFO | [BackupPolicy_31]: Start calculating maxPointsCount 2022-07-27 08:08:45.820 00031 [19545] INFO | [BackupPolicy_31]: End calculating maxPointsCount. Result = 7 2022-07-27 08:08:45.820 00031 [19545] INFO | [BackupPolicy_31]: Starting validate repository schedule. Repository [UID: '237e41d6-7c67-4a1f-80bf-d7c73c481209', MaxPointsCount: '7', IsPeriodicFullRequired: 'False'] 2022-07-27 08:08:46.595 00031 [19545] INFO | [BackupPolicy_31]: End validate repository schedule. Result: [IsScheduleValid: 'True', ErrorMessage: ''] 2022-07-27 08:08:46.597 00031 [19545] INFO | [SessionManager_31]: Start registering a new session[Id: 'b6f3f0e1-7aab-41cb-b0e7-10f5b2ed6708'] 2022-07-27 08:08:46.639 00031 [19545] INFO | [SessionManager_31]: Session registered. [Id:'b6f3f0e1-7aab-41cb-b0e7-10f5b2ed6708'] 2022-07-27 08:08:46.639 00031 [19545] INFO | [BackupPolicy_31]: Backup VM [id:'50513a65-6ccc-479b-9b61-032e0961b016'] starting... 2022-07-27 08:08:46.639 00031 [19545] INFO | [BackupPolicy_31]: RetentionMergeDisabled: false 2022-07-27 08:08:46.640 00031 [19545] INFO | [TaskManager_31]: Create new async task. [call method:'DoBackup'] 2022-07-27 08:08:46.640 00031 [19545] INFO | [AsyncTask_31]: New AsynTask created [id:'15a63192-f3d2-4e3a-af56-240f3733bded', description:'', type:'BACKUP_VM'] 2022-07-27 08:08:46.640 00031 [19545] INFO | [AsyncTask_31]: Prepare AsynTask to run [id:'15a63192-f3d2-4e3a-af56-240f3733bded'] 2022-07-27 08:08:46.661 00031 [19545] INFO | [TaskManager_31]: AsyncTask registered. [id:'15a63192-f3d2-4e3a-af56-240f3733bded'] 2022-07-27 08:08:47.295 00031 [19545] ERROR | [BackupPolicy_31]: Backup VM [id:'50513a65-6ccc-479b-9b61-032e0961b016'] failed. Error ('test: VM UUID=50513a65-6ccc-479b-9b61-032e0961b016 was not found: * Line 1, Column 1 Syntax error: value, object or array expected. * Line 1, Column 1 A valid JSON document must be either an array or an object value. ') Are there any changes between version 4.5 and 4.5.1 that are preventing using this? Any solution? Regards,

3 2

oVirt 4.2 host cert expired
by Don Dupuis 27 Jul '22

27 Jul '22

Hello I have an environment with quite a lot of hosts using local storage domains. The engine and hosts cert expired. I ran engine-setup on the ovirt-engine so that the engine cert would get updated and then followed this https://access.redhat.com/solutions/3532921 to manually update the hosts certs so that hopefully the engine can talk to vdsm and then carry out the cert enrollment process, but no luck. I am getting is error in vdsm.log: 2022-07-26 18:32:12,743-0500 INFO (Reactor thread) [ProtocolDetector.AcceptorImpl] Accepted connection from ::ffff: 192.168.50.26:58194 (protocoldetector:61) 2022-07-26 18:32:12,760-0500 ERROR (Reactor thread) [ProtocolDetector.SSLHandshakeDispatcher] ssl handshake: SSLError, address: ::ffff:192.168.50.26 (sslutils:263) and the engine.log: 2022-07-26 03:30:13,242-05 INFO [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp Reactor) [] Connecting to host01/192.168.50.72 2022-07-26 03:30:13,257-05 ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages General SSLEngine problem 2022-07-26 03:30:13,260-05 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-12) [] EVENT_ID: VDS_BROKER_COMMAND_FAILURE(10,802), VDSM host01 command Get Host Capabilities failed: General SSLEngine problem I substituted host01 for the real FQDN for this post. I can't get the hosts in a mode so that I can put it in maintenance mode and I also want to be carefull about reinstalling because the vms are stored on local storage domain on host. Fingerprints match on the certs and when I sign the vdsmcert on the engine and then copy back to the proper localtions, libvirtd and vdsmd restart fine, just the SSL ERROR. Anyone have any ideas on how to solve this cert issue? Thanks Don

1 1

Intel xeon gold 6346 supported
by atatur.yildirim＠gmail.com 26 Jul '22

26 Jul '22

Hello all, Is intel xeon gold 6346 cpu supported in ovirt, I couldn't exactly determine from the docs. Thank you..

2 3

Support for OpenStack Glance is now deprecated
by francesco＠shellrent.com 25 Jul '22

25 Jul '22

Hi all, as I read in the documentation https://www.ovirt.org/documentation/administration_guide/index.html: "Support for OpenStack Glance is now deprecated. This functionality will be removed in a later release." Do you know any alternative to Glance for a "single point" images archives for creating template that could be integrated with oVirt or do I need to use storage domain for achieve a similar result? Thank you for your time and help, Francesco

1 0

Failed to connect to the host via ssh: root@192.168.4.17: Permission denied (publickey, gssapi-keyex, gssapi-with-mic, password).
by konstantinluschaev＠ya.ru 24 Jul '22

24 Jul '22

An attempt to deploy a new host fails. Deploy I see the following error in the deploy log: 192.168.4.17: Failed to connect to host via ssh: root(a)192.168.4.17 : Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password). Despite the fact that the root user logs into the host via ssh from the ovirt-engine without any problems. So I understand that ansible scripts cannot get through ssh. Do you have any ideas about this? ovirt-engine version 4.4.10.6-1.el8 Centos Stream 8 host - CentOS Stream 8

3 2

oVirt over gluster: Replacing a dead host
by Gilboa Davara 23 Jul '22

23 Jul '22

Hello all, I'm attempting to replace a dead host in a replica 2 + arbiter gluster setup and replace it with a new host. I've already set up a new host (same hostname..localdomain) and got into the cluster. $ gluster peer status Number of Peers: 2 Hostname: office-wx-hv3-lab-gfs Uuid: 4e13f796-b818-4e07-8523-d84eb0faa4f9 State: Peer in Cluster (Connected) Hostname: office-wx-hv1-lab-gfs.localdomain <------ This is a new host. Uuid: eee17c74-0d93-4f92-b81d-87f6b9c2204d State: Peer in Cluster (Connected) $ gluster volume info GV2Data Volume Name: GV2Data Type: Replicate Volume ID: c1946fc2-ed94-4b9f-9da3-f0f1ee90f303 Status: Stopped Snapshot Count: 0 Number of Bricks: 1 x (2 + 1) = 3 Transport-type: tcp Bricks: Brick1: office-wx-hv1-lab-gfs:/mnt/LogGFSData/brick <------ This is the dead host. Brick2: office-wx-hv2-lab-gfs:/mnt/LogGFSData/brick Brick3: office-wx-hv3-lab-gfs:/mnt/LogGFSData/brick (arbiter) ... Looking at the docs, it seems that I need to remove the dead brick. $ gluster volume remove-brick GV2Data office-wx-hv1-lab-gfs:/mnt/LogGFSData/brick start Running remove-brick with cluster.force-migration enabled can result in data corruption. It is safer to disable this option so that files that receive writes during migration are not migrated. Files that are not migrated can then be manually copied after the remove-brick commit operation. Do you want to continue with your current cluster.force-migration settings? (y/n) y volume remove-brick start: failed: Removing bricks from replicate configuration is not allowed without reducing replica count explicitly So I guess I need to drop from replica 2 + arbiter to replica 1 + arbiter (?). $ gluster volume remove-brick GV2Data replica 1 office-wx-hv1-lab-gfs:/mnt/LogGFSData/brick start Running remove-brick with cluster.force-migration enabled can result in data corruption. It is safer to disable this option so that files that receive writes during migration are not migrated. Files that are not migrated can then be manually copied after the remove-brick commit operation. Do you want to continue with your current cluster.force-migration settings? (y/n) y volume remove-brick start: failed: need 2(xN) bricks for reducing replica count of the volume from 3 to 1 ... What am I missing? - Gilboa

3 10

Task Run PKI enroll request for vdsm and QEMU failed to execute. Ovirt 4.5.1
by xavierl＠rogers.com 22 Jul '22

22 Jul '22

Hi there, I am currently at a loss as to why I am unable to install additional nodes and am receiving the error: "Task Run PKI enroll request for vdsm and QEMU failed to execute" Running oVirt node 4.5.1 and would appreciate any assistance as there's no other forums discussing this issue. I have Logs ready at request. Cheers

3 4

ovirt-aaa-jdbc-tool and Keycloak
by Gilboa Davara 22 Jul '22

22 Jul '22

Hello all, I have a number of oVirt clusters that were recently upgraded to v.4.5.1. As far as I can see, once keycloak is enabled, local users can no longer login. (only admin@ovirt works). Assuming I need to continue using local AAA users (created using ovirt-aaa-jdbc-tool), should I disable keycloak support? How do I do it? (engine-setup?). - Gilboa

1 0

Creating template from VM oVirt 4.5.1
by markeczzz＠gmail.com 22 Jul '22

22 Jul '22

Hi! I am trying to create Template from VM, but when I click on OK button, nothing happens, no error, nothing. I guess this is this bug, but is there any https://github.com/oVirt/ovirt-engine/pull/360, but I am not sure how to fix it, as I am already at latest version (4.5.1.3-1.el8). Regards,

3 10

Help needed
by less foobar 22 Jul '22

22 Jul '22

I'm installing self hosted engine and there is an error that I can't understand can somebody help me? The logs are here: https://termbin.com/vht61

3 6

HostedEngine Upgrade from 4.4.5.10 fails - dnf distrosync
by simon＠justconnect.ie 22 Jul '22

22 Jul '22

Hi All, No matter what I try I cannot update/upgrade my hosted engine. All mirrors are local and have been updated. I have changed the repo files to Stream and carried out a dnf update --nobest But I cannot go any further. # rpm -q ovirt-engine ovirt-engine-4.4.5.10-1.el8.noarch # cat /etc/centos* [root@ddmcomhartestengine yum.repos.d]# dnf distrosync Last metadata expiration check: 0:02:12 ago on Thu 21 Jul 2022 11:12:18 PM UTC. Error: Problem 1: package collectd-write_syslog-5.11.0-2.el8.x86_64 requires collectd(x86-64) = 5.11.0-2.el8, but none of the providers can be installed - collectd-5.11.0-2.el8.x86_64 does not belong to a distupgrade repository - problem with installed package collectd-write_syslog-5.11.0-2.el8.x86_64 - package collectd-5.11.0-2.el8.x86_64 is filtered out by exclude filtering Problem 2: package python3-ansible-runner-1.4.6-1.el8.noarch requires python3dist(pexpect) >= 4.6, but none of the providers can be installed - python3-pexpect-4.7.0-4.el8.noarch does not belong to a distupgrade repository - problem with installed package python3-ansible-runner-1.4.6-1.el8.noarch - package python3-pexpect-4.7.0-4.el8.noarch is filtered out by exclude filtering Problem 3: package python3-ansible-runner-1.4.6-1.el8.noarch requires python3dist(pexpect) >= 4.6, but none of the providers can be installed - cannot install both python3-pexpect-4.3.1-3.el8.noarch and python3-pexpect-4.7.0-4.el8.noarch - package ansible-runner-service-1.0.7-1.el8.noarch requires python3-ansible-runner, but none of the providers can be installed - cannot install the best update candidate for package python3-pexpect-4.7.0-4.el8.noarch - problem with installed package ansible-runner-service-1.0.7-1.el8.noarch - package python3-ansible-runner-1.4.6-1.el8.noarch is filtered out by exclude filtering - package python3-pexpect-4.7.0-4.el8.noarch is filtered out by exclude filtering Problem 4: package collectd-write_syslog-5.11.0-2.el8.x86_64 requires collectd(x86-64) = 5.11.0-2.el8, but none of the providers can be installed - cannot install both collectd-5.9.0-5.el8.x86_64 and collectd-5.11.0-2.el8.x86_64 - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-write_syslog, but none of the providers can be installed - cannot install the best update candidate for package collectd-5.11.0-2.el8.x86_64 - problem with installed package ovirt-engine-4.4.5.10-1.el8.noarch - package collectd-write_syslog-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-2.el8.x86_64 is filtered out by exclude filtering Problem 5: package collectd-write_syslog-5.11.0-2.el8.x86_64 requires collectd(x86-64) = 5.11.0-2.el8, but none of the providers can be installed - cannot install both collectd-5.9.0-5.el8.x86_64 and collectd-5.11.0-2.el8.x86_64 - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-write_syslog, but none of the providers can be installed - package collectd-disk-5.9.0-5.el8.x86_64 requires collectd(x86-64) = 5.9.0-5.el8, but none of the providers can be installed - package ovirt-engine-backend-4.4.5.10-1.el8.noarch requires ovirt-engine = 4.4.5.10-1.el8, but none of the providers can be installed - cannot install the best update candidate for package collectd-disk-5.11.0-2.el8.x86_64 - problem with installed package ovirt-engine-backend-4.4.5.10-1.el8.noarch - package ovirt-engine-4.4.5.10-1.el8.noarch is filtered out by exclude filtering - package collectd-write_syslog-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-2.el8.x86_64 is filtered out by exclude filtering Problem 6: package collectd-write_syslog-5.11.0-2.el8.x86_64 requires collectd(x86-64) = 5.11.0-2.el8, but none of the providers can be installed - cannot install both collectd-5.9.0-5.el8.x86_64 and collectd-5.11.0-2.el8.x86_64 - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-write_syslog, but none of the providers can be installed - package collectd-postgresql-5.9.0-5.el8.x86_64 requires collectd(x86-64) = 5.9.0-5.el8, but none of the providers can be installed - package ovirt-engine-dbscripts-4.4.5.10-1.el8.noarch requires ovirt-engine = 4.4.5.10-1.el8, but none of the providers can be installed - cannot install the best update candidate for package collectd-postgresql-5.11.0-2.el8.x86_64 - problem with installed package ovirt-engine-dbscripts-4.4.5.10-1.el8.noarch - package ovirt-engine-4.4.5.10-1.el8.noarch is filtered out by exclude filtering - package collectd-write_syslog-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-2.el8.x86_64 is filtered out by exclude filtering Problem 7: package collectd-write_syslog-5.11.0-2.el8.x86_64 requires collectd(x86-64) = 5.11.0-2.el8, but none of the providers can be installed - cannot install both collectd-5.9.0-5.el8.x86_64 and collectd-5.11.0-2.el8.x86_64 - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-write_syslog, but none of the providers can be installed - package collectd-write_http-5.9.0-5.el8.x86_64 requires collectd(x86-64) = 5.9.0-5.el8, but none of the providers can be installed - package ovirt-engine-restapi-4.4.5.10-1.el8.noarch requires ovirt-engine = 4.4.5.10-1.el8, but none of the providers can be installed - cannot install the best update candidate for package collectd-write_http-5.11.0-2.el8.x86_64 - problem with installed package ovirt-engine-restapi-4.4.5.10-1.el8.noarch - package ovirt-engine-4.4.5.10-1.el8.noarch is filtered out by exclude filtering - package collectd-write_syslog-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-2.el8.x86_64 is filtered out by exclude filtering Problem 8: cannot install both collectd-5.9.0-5.el8.x86_64 and collectd-5.11.0-2.el8.x86_64 - package collectd-write_syslog-5.11.0-2.el8.x86_64 requires collectd(x86-64) = 5.11.0-2.el8, but none of the providers can be installed - package collectd-disk-5.9.0-5.el8.x86_64 requires collectd(x86-64) = 5.9.0-5.el8, but none of the providers can be installed - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-write_syslog, but none of the providers can be installed - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-disk, but none of the providers can be installed - package ovirt-engine-setup-plugin-ovirt-engine-4.4.5.10-1.el8.noarch requires ovirt-engine >= 4.4.0, but none of the providers can be installed - collectd-disk-5.11.0-2.el8.x86_64 does not belong to a distupgrade repository - problem with installed package ovirt-engine-setup-plugin-ovirt-engine-4.4.5.10-1.el8.noarch - package ovirt-engine-4.4.0.3-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.1-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.10-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.2-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.3-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.4-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.5-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.6-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.7-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.1.8-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.10.4-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.10.5-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.10.6-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.10.7-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.2.6-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.10-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.11-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.12-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.3-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.4-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.5-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.6-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.7-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.8-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.3.9-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.4-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.4.1-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.4.2-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.4.3-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.4.4-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.4.5-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.4.7-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.5.10-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.5.11-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.6.6-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.6.7-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.6.8-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.7.6-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.7.7-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.8.4-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.8.5-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.8.6-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.9.3-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.9.4-1.el8.noarch is filtered out by exclude filtering - package ovirt-engine-4.4.9.5-1.el8.noarch is filtered out by exclude filtering - package collectd-disk-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-disk-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-disk-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-disk-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-disk-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-2.el8.x86_64 is filtered out by exclude filtering Problem 9: cannot install both collectd-5.9.0-5.el8.x86_64 and collectd-5.11.0-2.el8.x86_64 - package collectd-write_syslog-5.11.0-2.el8.x86_64 requires collectd(x86-64) = 5.11.0-2.el8, but none of the providers can be installed - package collectd-postgresql-5.9.0-5.el8.x86_64 requires collectd(x86-64) = 5.9.0-5.el8, but none of the providers can be installed - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-write_syslog, but none of the providers can be installed - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-postgresql, but none of the providers can be installed - package ovirt-engine-tools-4.4.5.10-1.el8.noarch requires ovirt-engine = 4.4.5.10-1.el8, but none of the providers can be installed - collectd-postgresql-5.11.0-2.el8.x86_64 does not belong to a distupgrade repository - problem with installed package ovirt-engine-tools-4.4.5.10-1.el8.noarch - package ovirt-engine-4.4.5.10-1.el8.noarch is filtered out by exclude filtering - package collectd-postgresql-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-postgresql-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-postgresql-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-postgresql-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-postgresql-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-2.el8.x86_64 is filtered out by exclude filtering Problem 10: cannot install both collectd-5.9.0-5.el8.x86_64 and collectd-5.11.0-2.el8.x86_64 - package collectd-write_syslog-5.11.0-2.el8.x86_64 requires collectd(x86-64) = 5.11.0-2.el8, but none of the providers can be installed - package collectd-write_http-5.9.0-5.el8.x86_64 requires collectd(x86-64) = 5.9.0-5.el8, but none of the providers can be installed - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-write_syslog, but none of the providers can be installed - package ovirt-engine-4.4.5.10-1.el8.noarch requires collectd-write_http, but none of the providers can be installed - package ovirt-engine-webadmin-portal-4.4.5.10-1.el8.noarch requires ovirt-engine = 4.4.5.10-1.el8, but none of the providers can be installed - collectd-write_http-5.11.0-2.el8.x86_64 does not belong to a distupgrade repository - problem with installed package ovirt-engine-webadmin-portal-4.4.5.10-1.el8.noarch - package ovirt-engine-4.4.5.10-1.el8.noarch is filtered out by exclude filtering - package collectd-write_http-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.12.0-7.el8s.x86_64 is filtered out by exclude filtering - package collectd-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-write_http-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_http-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-write_http-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_http-5.11.0-2.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.10.0-3.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-1.el8.x86_64 is filtered out by exclude filtering - package collectd-write_syslog-5.11.0-2.el8.x86_64 is filtered out by exclude filtering (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) [root@ddmcomhartestengine yum.repos.d]# If I add --allowerasing then I get the following: [root@ddmcomhartestengine yum.repos.d]# dnf distrosync --allowerasing Last metadata expiration check: 0:00:22 ago on Thu 21 Jul 2022 11:12:18 PM UTC. Dependencies resolved. ================================================================================================================================================================================================ Package Architecture Version Repository Size ================================================================================================================================================================================================ Reinstalling: python3-websocket-client noarch 0.56.0-5.el8 epel 61 k Removing dependent packages: ansible-runner-service noarch 1.0.7-1.el8 @ovirt-4.4-centos-ovirt44 259 k collectd-write_syslog x86_64 5.11.0-2.el8 @ovirt-4.4-centos-opstools 22 k ovirt-engine noarch 4.4.5.10-1.el8 @ovirt-4.4 38 M ovirt-engine-backend noarch 4.4.5.10-1.el8 @ovirt-4.4 8.2 M ovirt-engine-dbscripts noarch 4.4.5.10-1.el8 @ovirt-4.4 1.6 M ovirt-engine-restapi noarch 4.4.5.10-1.el8 @ovirt-4.4 25 M ovirt-engine-setup noarch 4.4.5.10-1.el8 @ovirt-4.4 671 ovirt-engine-setup-plugin-cinderlib noarch 4.4.5.10-1.el8 @ovirt-4.4 66 k ovirt-engine-setup-plugin-imageio noarch 4.4.5.10-1.el8 @ovirt-4.4 21 k ovirt-engine-setup-plugin-ovirt-engine noarch 4.4.5.10-1.el8 @ovirt-4.4 783 k ovirt-engine-setup-plugin-vmconsole-proxy-helper noarch 4.4.5.10-1.el8 @ovirt-4.4 60 k ovirt-engine-tools noarch 4.4.5.10-1.el8 @ovirt-4.4 467 k ovirt-engine-ui-extensions noarch 1.2.5-1.el8 @ovirt-4.4 38 M ovirt-engine-vmconsole-proxy-helper noarch 4.4.5.10-1.el8 @ovirt-4.4 16 k ovirt-engine-webadmin-portal noarch 4.4.5.10-1.el8 @ovirt-4.4 294 M python3-ansible-runner noarch 1.4.6-1.el8 @ovirt-4.4-centos-ovirt44 341 k Downgrading: collectd x86_64 5.9.0-5.el8 epel 716 k collectd-disk x86_64 5.9.0-5.el8 epel 35 k collectd-postgresql x86_64 5.9.0-5.el8 epel 46 k collectd-write_http x86_64 5.9.0-5.el8 epel 43 k javapackages-filesystem noarch 5.3.0-1.module_el8.0.0+11+5b8c10bd appstream 30 k javapackages-tools noarch 5.3.0-1.module_el8.0.0+11+5b8c10bd appstream 44 k nodejs x86_64 1:10.23.1-1.module_el8.4.0+645+9ce14ba2 appstream 8.9 M nodejs-full-i18n x86_64 1:10.23.1-1.module_el8.4.0+645+9ce14ba2 appstream 7.3 M npm x86_64 1:6.14.10-1.10.23.1.1.module_el8.4.0+645+9ce14ba2 appstream 3.7 M python3-bcrypt x86_64 3.1.6-2.el8.1 epel 44 k python3-cairo x86_64 1.16.3-6.el8 appstream 90 k python3-lockfile noarch 1:0.11.0-13.el8.1 epel 38 k python3-paramiko noarch 2.4.3-1.el8 epel 289 k python3-pbr noarch 5.1.2-3.el8 epel 88 k python3-pexpect noarch 4.3.1-3.el8 appstream 138 k python3-psutil x86_64 5.4.3-11.el8 appstream 373 k python3-pyasn1 noarch 0.3.7-6.el8 appstream 126 k python3-pyasn1-modules noarch 0.3.7-6.el8 appstream 110 k python3-pyyaml x86_64 3.12-12.el8 baseos 193 k python3-six noarch 1.11.0-8.el8 baseos 38 k Enabling module streams: javapackages-runtime 201801 Transaction Summary ================================================================================================================================================================================================ Remove 16 Packages Downgrade 20 Packages Total download size: 22 M Is this ok [y/N]: Any ideas please? Thanks Simon...

1 0

cockpit-ovirt-dashboard
by less foobar 21 Jul '22

21 Jul '22

When you try to follow the documentation for rhel 9 you can't install the cockpit-ovirt-dashboard. The package is missing. Even on ovirt version 9 the dashboard is missing from the cockpit interface.

2 2

node non-operational can't connect to gluster domains
by Staniforth, Paul 20 Jul '22

20 Jul '22

Hello I have a problem activating a host running ovirt-node-ng-4.4.10.2. The engine is running 4.5.1.3-1.el8 The error message in the host event log has Activation of host *.* initiated by admin@internal-authz. Failed to connect Host *.* to the Storage Domains hosted_storage. Failed to connect Host *.* to the Storage Domains extra,vmstore,data. Failed to connect Host *.* to Storage Servers Failed to connect Host *.* to Storage Pool Default Host *.* cannot access the Storage Domain(s) <UNKNOWN> attached to the Data Center Default. Setting Host state to Non-Operational If I manually mount the gluster domains it activates. The othe 2 nodes activate without intervention. Thanks Paul S. To view the terms under which this email is distributed, please go to:- https://leedsbeckett.ac.uk/disclaimer/email

1 0

Template import in 4.5
by Gianluca Cecchi 20 Jul '22

20 Jul '22

Hello, I have a problem importing templates in downstream product 4.4-SP1 that should match in some way oVirt 4.5.x. I get a ui exception preventing me from importing the template. I have already opened a case for it (03270063). Just wondering if it can be a general problem and in particular an oVirt problem too. I have not at hand an oVirt 4.5 env. Can anyone in oVirt 4.5.x confirm that Template Import through export domains work as expected in that environment? In my case the template has been exported from a 4.4.x environment, so the perfect match would be to export a template in 4.4 and then import it in 4.5 Thanks in advance Gianluca

3 4

Incorrect Max CPU's per VM in libvirt if cluster compatibility 4.6 or 4.7
by David Sekne 20 Jul '22

20 Jul '22

Hello, I recently upgraded our cluster from 4.3 to 4.5 (4.5.1.3-1.el8), I raised the cluster compatibility afterwards to 4.7 as well. I noticed that the CPU hot plugging does not work above 16 CPU's if cluster compatibility is set to 4.6 or 4.7. Error I get is: Failed to hot set number of CPUS to VM testVM-3. Underlying error message: invalid argument: requested vcpus is greater than max allowable vcpus for the live domain: 32 > 16 Issue here I believe is that the MaxNumOfVmSockets values set on the engine per cluster version is not correctly set on libvirt when VM is started. My values on the engine: MaxNumOfVmSockets: 32 version: 4.2 MaxNumOfVmSockets: 32 version: 4.3 MaxNumOfVmSockets: 32 version: 4.4 MaxNumOfVmSockets: 32 version: 4.5 MaxNumOfVmSockets: 64 version: 4.6 MaxNumOfVmSockets: 10000 version: 4.7 Values on libvirt for VM's for all cluster compatibility versions: 4.3 <vcpu placement='static' current='4'>32</vcpu> 4.4 <vcpu placement='static' current='4'>32</vcpu> 4.5 <vcpu placement='static' current='4'>32</vcpu> 4.6 <vcpu placement='static' current='4'>16</vcpu> 4.7 <vcpu placement='static' current='4'>16</vcpu> Is anyone else experiencing this issue (possible BUG)? Regards, David

2 4

GUIDE: oVirt 4.4.7 to 4.4.10 Upgrade + Switch to CentOS Stream
by Andrei Verovski 19 Jul '22

19 Jul '22

Hi, Having a LOT of trouble upgrading oVirt to 4.4.10 while switching to CentOS Stream, I posted a short guide in my blog. https://www.vacuum-tube.eu/wp/?p=399 Look at entry: [2022-07-19] oVirt 4.4.7 to 4.4.10 Upgrade + Switch to CentOS Stream Thanks for everyone who helped me !

1 0

extract qcow2 or raw disks from ovirt OVA
by dhanaraj.ramesh＠yahoo.com 19 Jul '22

19 Jul '22

Hi Team May I know how do I extract qcow2 or raw disks out of ovirt OVA file please. Basically I want to move some of the vms to Nutanix AHV or Vmware cluster, for that I need either qcow2 or raw disks of each of the running vms.

2 1

SSO error during hosted engine deployment with 4.5.1
by Dax Kelson 19 Jul '22

19 Jul '22

On the final setup of using the cockpit ovirt wizard to install the hosted engine with 4.5.1, this occurs: [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Obtain SSO token using username/password credentials] [ ERROR ] fatal: [localhost]: FAILED! => {"msg": "The field 'environment' has an invalid value, which includes an undefined variable. The error was: 'he_admin_username' is undefined\n\nThe error appears to be in '/usr/share/ansible/collections/ansible_collections/ovirt/ovirt/roles/hosted_engine_setup/tasks/auth_sso.yml': line 2, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n---\n- name: Obtain SSO token using username/password credentials\n ^ here\n"}

3 2

Grafana login
by markeczzz＠gmail.com 19 Jul '22

19 Jul '22

Hi! I have installed oVirt 4.5.1 and I am using KeyCloak to login. I have created users in keycloak and with them i can login to ovirt Manager, but I can't login to Grafana. Also, I can login to Keycloak only with user "admin" and not with newly created users. I have tried to add @ovirt or @ovirt@internal, but every time i get "Invalid username or password" I haven't really changed default options in keycloak and can't find good manual for ovirt + keyclock. Can anyone tell me how to create user in keycloak that cant login to Grafana? Regards,

3 3

Please help: Failure Restoring Data on Clean Engine After Migration
by Andrei Verovski 19 Jul '22

19 Jul '22

Hi, I have oVirt engine 4.4.7 running on dedicated PC (not hosted engine). After several unsuccessful upgrade attempts of 4.4.7 to 4.4.10 decided to install clean 4.4.10 and migrate data. On old engine engine-backup --scope=all --mode=backup On new engine engine-backup --mode=restore --provision-all-databases --no-restore-permissions --file=ovirt-engine-backup-20220713160717.backup Result: [ ERROR ] Failed to execute stage 'Environment setup': Cannot connect to database for grafana using existing credentials: ovirt_engine_history_grafana@localhost:5432 How to Remove Grafana Completely During Engine Migration, or skip it during backup? In fact it would be nice to delete it on active 4.4.7 setup, I don’t need it anyway. Thanks in advance. # — LOG ——————————————————————— Start of engine-backup with mode 'restore' scope: all archive file: ovirt-engine-backup-20220713160717.backup log file: /var/log/ovirt-engine-backup/ovirt-engine-restore-20220714170603.log Preparing to restore: - Unpacking file 'ovirt-engine-backup-20220713160717.backup' Restoring: - Files Provisioning PostgreSQL users/databases: - user 'engine', database 'engine' - user 'ovirt_engine_history', database 'ovirt_engine_history' Restoring: - Engine database 'engine' - Cleaning up temporary tables in engine database 'engine' - Updating DbJustRestored VdcOption in engine database - Resetting DwhCurrentlyRunning in dwh_history_timekeeping in engine database - Resetting HA VM status ------------------------------------------------------------------------------ Please note: The engine database was backed up at 2022-07-13 16:07:21.000000000 +0300 . Objects that were added, removed or changed after this date, such as virtual machines, disks, etc., are missing in the engine, and will probably require recovery or recreation. ------------------------------------------------------------------------------ - DWH database 'ovirt_engine_history' - Grafana database '/var/lib/grafana/grafana.db' You should now run engine-setup. Done. [root@node00 ovirt-engine-backup]# engine-setup [ INFO ] Stage: Initializing [ INFO ] Stage: Environment setup Configuration files: /etc/ovirt-engine-setup.conf.d/10-packaging-jboss.conf, /etc/ovirt-engine-setup.conf.d/10-packaging.conf, /etc/ovirt-engine-setup.conf.d/20-setup-ovirt-post.conf Log file: /var/log/ovirt-engine/setup/ovirt-engine-setup-20220714170757-7072xx.log Version: otopi-1.9.6 (otopi-1.9.6-1.el8) [ INFO ] The engine DB has been restored from a backup [ ERROR ] Failed to execute stage 'Environment setup': Cannot connect to database for grafana using existing credentials: ovirt_engine_history_grafana@localhost:5432 [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20220714170757-7072xx.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20220714170806-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed

3 7

How to Fix: oVirt 4.4.10 Internal server error 500 after engine-setup (vdsm-jsonrpc-java )
by Andrei Verovski 19 Jul '22

19 Jul '22

Hi, Finally I managed to migrate 4.4.7 to fresh installation of 4.4.10. However, after successful engine-setup I’ve got 500 - Internal Server Error I found this: https://bugzilla.redhat.com/show_bug.cgi?id=1918022 Bug 1918022 - oVirt Manager is not loading after engine-setup Article suggested to downgrade vdsm-jsonrpc-java to 1.5.x. However, this is not possible: dnf --showduplicates list vdsm-jsonrpc-java dnf install vdsm-jsonrpc-java-1.5.7-1.el8 Last metadata expiration check: 0:39:52 ago on Fri 15 Jul 2022 02:32:36 PM EEST. Error: Problem: problem with installed package ovirt-engine-backend-4.4.10.7-1.el8.noarch - package ovirt-engine-backend-4.4.10.7-1.el8.noarch requires vdsm-jsonrpc-java >= 1.6.0, but none of the providers can be installed - cannot install both vdsm-jsonrpc-java-1.5.7-1.el8.noarch and vdsm-jsonrpc-java-1.6.0-1.el8.noarch - cannot install both vdsm-jsonrpc-java-1.6.0-1.el8.noarch and vdsm-jsonrpc-java-1.5.7-1.el8.noarch How to fix this? Thanks in advance. ***************** SERVER LOG ********************* 2022-07-15 14:45:44,969+03 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "engine.ear")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.subunit.\"engine.ear\".\"bll.jar\".component.Backend.START" => "java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance Caused by: java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance Caused by: javax.ejb.EJBException: org.jboss.weld.exceptions.WeldException: WELD-000049: Unable to invoke protected void org.ovirt.engine.core.bll.TagsDirector.init() on org.ovirt.engine.core.bll.TagsDirector@648487d3 Caused by: org.jboss.weld.exceptions.WeldException: WELD-000049: Unable to invoke protected void org.ovirt.engine.core.bll.TagsDirector.init() on org.ovirt.engine.core.bll.TagsDirector@648487d3 Caused by: java.lang.reflect.InvocationTargetException Caused by: org.springframework.dao.InvalidDataAccessApiUsageException: Unable to determine the correct call signature - no procedure/function/signature for 'gettagsbyparent_id'"}} 2022-07-15 14:45:44,981+03 INFO [org.jboss.as.server] (ServerService Thread Pool -- 25) WFLYSRV0010: Deployed "restapi.war" (runtime-name : "restapi.war") 2022-07-15 14:45:44,982+03 INFO [org.jboss.as.server] (ServerService Thread Pool -- 25) WFLYSRV0010: Deployed "engine.ear" (runtime-name : "engine.ear") 2022-07-15 14:45:44,982+03 INFO [org.jboss.as.server] (ServerService Thread Pool -- 25) WFLYSRV0010: Deployed "apidoc.war" (runtime-name : "apidoc.war") 2022-07-15 14:45:44,982+03 INFO [org.jboss.as.server] (ServerService Thread Pool -- 25) WFLYSRV0010: Deployed "ovirt-web-ui.war" (runtime-name : "ovirt-web-ui.war") 2022-07-15 14:45:45,015+03 INFO [org.jboss.as.controller] (Controller Boot Thread) WFLYCTL0183: Service status report WFLYCTL0186: Services which failed to start: service jboss.deployment.subunit."engine.ear"."bll.jar".component.Backend.START: java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance WFLYCTL0448: 2 additional services are down due to their dependencies being missing or failed

1 1

No valid network interface has been found
by naiajae＠icloud.com 19 Jul '22

19 Jul '22

Hey im kinda new to ovirt im getting this error when i try to create a "hosted engine" i hope this is where i can get help "FULL MSG" No valid network interface has been found If you are using Bonds or VLANs Use the following naming conventions: - VLAN interfaces: physical_device.VLAN_ID (for example, eth0.23, eth1.128, enp3s0.50) - Bond interfaces: bond*number* (for example, bond0, bond1) - VLANs on bond interfaces: bond*number*.VLAN_ID (for example, bond0.50, bond1.128) * Supported bond modes: active-backup, balance-xor, broadcast, 802.3ad * Networking teaming is not supported and will cause errors

1 0

Console does not work on run once
by suporte＠logicworks.pt 18 Jul '22

18 Jul '22

Hi, In run once, when open console nothing shows. But it works on any other VM. Version 4.5.1.3-1.el8 Any idea? -- Jose Ferradeira http://www.logicworks.pt

1 1

Cannot deserialize - engine doesn't start
by Giulio Casella 18 Jul '22

18 Jul '22

Hi guys, I'm in big troubles. Since last night my ovirt engine is unavailable (won't correctly start). Process ovirt-engine is running, and systemd doesn't complain (systemctl status is ok). Digging in engine.log I can find an error: 2022-07-13 09:57:48,314+02 ERROR [org.ovirt.engine.core.utils.serialization.json.JsonObjectDeserializer] (ServerService Thread Pool -- 45) [] Cannot deserialize { "@class" : "org.ovirt.engine.core.common.action.CreateSnapshotDiskParameters", "commandId" : [ "org.ovirt.engine.core.compat.Guid", { "uuid" : "6ae544f6-b608-4d8d-9f99-eabd5d5db0ad" } ], [...cut...] "domain" : "my.dom.ain"[truncated 5971 chars]; line: 72, column: 89] (through reference chain: org.ovirt.engine.core.common.action.CreateSnapshotDiskParameters["diskImagesMap"]) 2022-07-13 09:57:48,315+02 ERROR [org.ovirt.engine.core.bll.InitBackendServicesOnStartupBean] (ServerService Thread Pool -- 45) [] Failed to initialize backend: org.jboss.weld.exceptions.WeldException: WELD-000049: Unable to invoke public void org.ovirt.engine.core.bll.tasks.CommandContextsCacheImpl.initContextsMap() on org.ovirt.engine.core.bll.tasks.CommandContextsCacheImpl@3f52ccce [...cut...] During the night there was a job that was moving a disk (2.5TB) from a storage domain to another. I think it's related. Any ideas? TIA, gc

2 10

oVirt 4.5.1 Hyperconverge Gluster install fails
by david.lennox＠frontlinedigital.com.au 18 Jul '22

18 Jul '22

Hello all, I am hoping someone can help me with a oVirt installation that has just gotten the better of me after weeks of trying. After setting up ssh-keys and making sure each host is known to the primary host (sr-svr04), I go though Cockpit and "Configure Gluster storage and oVirt hosted engine", enter all of the details with <host>.san.lennoxconsulting.com.au for the storage network FQDN and <host>.core.lennoxconsulting.com.au for the public interfaces. Connectivity on each of the VLAN's test out as basically working (everything is pingable and ssh connections work) and the hosts are generally usable on the network. But the install ultimately dies with the following ansible error: ----------- gluster-deployment.log --------- : : TASK [gluster.infra/roles/backend_setup : Create volume groups] **************** task path: /etc/ansible/roles/gluster.infra/roles/backend_setup/tasks/vg_create.yml:63 failed: [sr-svr04.san.lennoxconsulting.com.au] (item={'key': 'gluster_vg_sdb', 'value': [{'vgname': 'gluster_vg_sdb', 'pvname': '/dev/sdb'}]}) => {"ansible_loop_var": "item", "changed": true, "cmd": ["vgcreate", "--dataalignment", "1536K", "-s", "1536K", "gluster_vg_sdb", "/dev/sdb"], "delta": "0:00:00.058528", "end": "2022-07-16 16:18:37.018563", "item": {"key": "gluster_vg_sdb", "value": [{"pvname": "/dev/sdb", "vgname": "gluster_vg_sdb"}]}, "msg": "non-zero return code", "rc": 5, "start": "2022-07-16 16:18:36.960035", "stderr": " A volume group called gluster_vg_sdb already exists.", "stderr_lines": [" A volume group called gluster_vg_sdb already exists."], "stdout": "", "stdout_lines": []} failed: [sr-svr05.san.lennoxconsulting.com.au] (item={'key': 'gluster_vg_sdb', 'value': [{'vgname': 'gluster_vg_sdb', 'pvname': '/dev/sdb'}]}) => {"ansible_loop_var": "item", "changed": true, "cmd": ["vgcreate", "--dataalignment", "1536K", "-s", "1536K", "gluster_vg_sdb", "/dev/sdb"], "delta": "0:00:00.057186", "end": "2022-07-16 16:18:37.784063", "item": {"key": "gluster_vg_sdb", "value": [{"pvname": "/dev/sdb", "vgname": "gluster_vg_sdb"}]}, "msg": "non-zero return code", "rc": 5, "start": "2022-07-16 16:18:37.726877", "stderr": " A volume group called gluster_vg_sdb already exists.", "stderr_lines": [" A volume group called gluster_vg_sdb already exists."], "stdout": "", "stdout_lines": []} failed: [sr-svr06.san.lennoxconsulting.com.au] (item={'key': 'gluster_vg_sdb', 'value': [{'vgname': 'gluster_vg_sdb', 'pvname': '/dev/sdb'}]}) => {"ansible_loop_var": "item", "changed": true, "cmd": ["vgcreate", "--dataalignment", "1536K", "-s", "1536K", "gluster_vg_sdb", "/dev/sdb"], "delta": "0:00:00.062212", "end": "2022-07-16 16:18:37.250371", "item": {"key": "gluster_vg_sdb", "value": [{"pvname": "/dev/sdb", "vgname": "gluster_vg_sdb"}]}, "msg": "non-zero return code", "rc": 5, "start": "2022-07-16 16:18:37.188159", "stderr": " A volume group called gluster_vg_sdb already exists.", "stderr_lines": [" A volume group called gluster_vg_sdb already exists."], "stdout": "", "stdout_lines": []} NO MORE HOSTS LEFT ************************************************************* NO MORE HOSTS LEFT ************************************************************* PLAY RECAP ********************************************************************* sr-svr04.san.lennoxconsulting.com.au : ok=32 changed=13 unreachable=0 failed=1 skipped=27 rescued=0 ignored=1 sr-svr05.san.lennoxconsulting.com.au : ok=31 changed=12 unreachable=0 failed=1 skipped=27 rescued=0 ignored=1 sr-svr06.san.lennoxconsulting.com.au : ok=31 changed=12 unreachable=0 failed=1 skipped=27 rescued=0 ignored=1 ----------- gluster-deployment.log --------- A "gluster v status" gives me no volumes present and that is where I am stuck! Any ideas of what I start trying next? I have tried this with oVirt Node 4.5.1 el8 and el9 images as well as 4.5 el8 images so it has got to be somewhere in my infrastructure configuration but I am out of ideas. My hardware configuration is 3 x HP DL360's with oVirt Node 4.5.1 el8 installed on 2x146gb RAID1 array and a gluster 6x900gb RAID5 array. Network configuration is: root@sr-svr04 ~]# ip addr show up 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eno1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether 1c:98:ec:29:41:68 brd ff:ff:ff:ff:ff:ff 3: eno2: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master bond0 state UP group default qlen 1000 link/ether 1c:98:ec:29:41:68 brd ff:ff:ff:ff:ff:ff permaddr 1c:98:ec:29:41:69 4: eno3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 1c:98:ec:29:41:6a brd ff:ff:ff:ff:ff:ff 5: eno4: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000 link/ether 1c:98:ec:29:41:6b brd ff:ff:ff:ff:ff:ff 6: eno3.3@eno3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 1c:98:ec:29:41:6a brd ff:ff:ff:ff:ff:ff inet 192.168.3.11/24 brd 192.168.3.255 scope global noprefixroute eno3.3 valid_lft forever preferred_lft forever inet6 fe80::ec:d7be:760e:8eda/64 scope link noprefixroute valid_lft forever preferred_lft forever 7: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 1c:98:ec:29:41:68 brd ff:ff:ff:ff:ff:ff 8: bond0.4@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 1c:98:ec:29:41:68 brd ff:ff:ff:ff:ff:ff inet 192.168.4.11/24 brd 192.168.4.255 scope global noprefixroute bond0.4 valid_lft forever preferred_lft forever inet6 fe80::f503:a54:8421:ea8b/64 scope link noprefixroute valid_lft forever preferred_lft forever 9: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000 link/ether 52:54:00:5b:fd:ac brd ff:ff:ff:ff:ff:ff inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0 valid_lft forever preferred_lft forever The public network is core.lennoxconsulting.com.au which is 192.168.4.0/24 and the storage network is san.lennoxconsulting.com.au which is 192.168.3.0/24 Any help to move forward please is appreciated. - Dave.

2 2

Engine storage Domain path change
by michael＠wiswm.com 17 Jul '22

17 Jul '22

Hello I installed oVirt on 3 servers(hv1,hv2,hv3) with Self Hosted Engine couple years ago. Gluster is used as storage for VMs. The engine has its own storage volume. Then I added 3 more servers(hv4,hv5,hv6). Now I would like to replace the first 3 servers. I added 3 more servers(hv7,hv8,hv9). I created new gluster volumes on hv7-hv9, moved disks from old volumes. Now the question is how to migrate engine storage? I decided to do it on Gluster level by replacing each of the brick from the old servers(hv1-hv3) with new ones (hv7-hv9). I successfully replaced bricks from hv1 and hv2 to hv7 and hv8. InoVirt engine storage Domain is created with the path hv3:/engine. I am afraid to replace hv3 brick with hv9, to not break the HostedEngine VM. To change storage Domain path I need to move it to Maintenance, but it will unmount it from all the hosts and HostedEngine will stop working. Is there any otherway to change a storage Domain path? I already changed storage value in /etc/ovirt-hosted-engine/hosted-engine.conf. I did something like this: # on hv7 hosted-engine --vm-shutdown # on all hosts systemctl stop ovirt-ha-agent systemctl stop ovirt-ha-broker hosted-engine --disconnect-storage sed -i 's/hv3/hv7/g' /etc/ovirt-hosted-engine/hosted-engine.conf hosted-engine --connect-storage systemctl restart ovirt-ha-broker systemctl status ovirt-ha-broker systemctl restart ovirt-ha-agent # on hv7 hosted-engine --vm-start and now the Hosted Engine is up and running and Gluster engine volume is mounted like hv7:/engine So the main question remains - how to change the engine storage Domain path?

2 1

Stuck in Manager upgrade. Can't set Cluster to maintenance mode.
by johannes.lutz＠diamontech.de 16 Jul '22

16 Jul '22

Hi Folks, like many others, the ovirt hosted engine certificates expired on my installation. We tried to follow this knowledge base article: https://access.redhat.com/solutions/6865861 I set the host which runs the hosted engine via the "hosted-engine --set-maintenance --mode=global" command into the global maintenance mode. Then i try to execute the "engine-setup --offline" command. There we anwser all questions and the script recognizes the expired certificates. But when we try to execute the last step it aborts with following error message. Output of engine-setup --offline: [WARNING] Failed to read or parse '/etc/pki/ovirt-engine/keys/apache.p12' Perhaps it was changed since last Setup. Error was: Mac verify error: invalid password? One or more of the certificates should be renewed, because they expire soon, or include an invalid expiry date, or they were created with validity period longer than 398 days, or do not include the subjectAltName extension, which can cause them to be rejected by recent browsers and up to date hosts. See https://www.ovirt.org/develop/release-management/features/infra/pki-renew/ for more details. Renew certificates? (Yes, No) [No]: Yes --== APACHE CONFIGURATION ==-- --== SYSTEM CONFIGURATION ==-- --== MISC CONFIGURATION ==-- --== END OF CONFIGURATION ==-- [ INFO ] Stage: Setup validation During execution engine service will be stopped (OK, Cancel) [OK]: Ok [ ERROR ] It seems that you are running your engine inside of the hosted-engine VM and are not in "Global Maintenance" mode. In that case you should put the system into the "Global Maintenance" mode before running engine-setup, or the hosted-engine HA agent might kill the machine, which might corrupt your data. [ ERROR ] Failed to execute stage 'Setup validation': Hosted Engine setup detected, but Global Maintenance is not set. [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20220701205812-yu1osl.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20220701205843-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed Any ideas how to get the hosted engine into global maintenance mode? Thanks for your help in advance! Best Regard J. Lutz

3 3

Not able to login as admin after successfull deployment of hosted engine (OVirt 4.5.1)
by Ralf Schenk 15 Jul '22

15 Jul '22

Hello List, I successfully deployed a fresh hosted-engine, but I'm not able to login to Administration-Portal. I'm perferctly sure about the password I had to type multiple times.... I'm running ovirt-node-ng-4.5.1-0.20220622.0 and deployed engine via cli-based ovirt-hosted-engine-setup. Neither "admin" nor "admin@internal" are working (A profile cannot be choosen as in earlier versions). I can login to the monitoring part (grafana !) and also Cockpit but not Administration-Portal nor VM-Portal. I can ssh into the engine and lookup the user-database which has the user. root@engine02 ~]# ovirt-aaa-jdbc-tool query --what=user Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false -- User admin(2be16cf0-5eb7-4b0e-923e-7bdc7bc2aa6f) -- Namespace: * Name: admin ID: 2be16cf0-5eb7-4b0e-923e-7bdc7bc2aa6f Display Name: Email: root@localhost First Name: admin Last Name: Department: Title: Description: Account Disabled: false Account Locked: false Account Unlocked At: 1970-01-01 00:00:00Z Account Valid From: 2022-07-15 18:23:47Z Account Valid To: 2222-07-15 18:23:47Z Account Without Password: false Last successful Login At: 1970-01-01 00:00:00Z Last unsuccessful Login At: 1970-01-01 00:00:00Z Password Valid To: 2222-05-28 18:23:49Z However no groups by default ??? [root@engine02 ~]# ovirt-aaa-jdbc-tool query --what=group Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Any solution ? I don't want to repeat the hosted-engine deployment a fourth time after I mastered all problems with NFS permissions, GUI deployment not accepting my Bond which is perfectly ok called "bond0" etc.... Bye -- Databay AG Logo *Ralf Schenk * fon: 02405 / 40 83 70 mail: rs(a)databay.de web: www.databay.de <https://www.databay.de> Databay AG Jens-Otto-Krag-Str. 11 52146 Würselen Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202 Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.Kfm. Philipp Hermanns Aufsichtsratsvorsitzender: Dr. Jan Scholzen

2 2

Q: oVirt 4.4.10 and vdsm-jsonrpc-java (Internal server error 500 after engine-setup)
by Andrei Verovski 15 Jul '22

15 Jul '22

Hi, Finally I managed to migrate 4.4.7 to fresh installation of 4.4.10. However, after successful engine-setup I’ve got 500 - Internal Server Error I found this: https://bugzilla.redhat.com/show_bug.cgi?id=1918022 Bug 1918022 - oVirt Manager is not loading after engine-setup Article suggested to downgrade vdsm-jsonrpc-java to 1.5.x. However, this is not possible: dnf --showduplicates list vdsm-jsonrpc-java dnf install vdsm-jsonrpc-java-1.5.7-1.el8 Last metadata expiration check: 0:39:52 ago on Fri 15 Jul 2022 02:32:36 PM EEST. Error: Problem: problem with installed package ovirt-engine-backend-4.4.10.7-1.el8.noarch - package ovirt-engine-backend-4.4.10.7-1.el8.noarch requires vdsm-jsonrpc-java >= 1.6.0, but none of the providers can be installed - cannot install both vdsm-jsonrpc-java-1.5.7-1.el8.noarch and vdsm-jsonrpc-java-1.6.0-1.el8.noarch - cannot install both vdsm-jsonrpc-java-1.6.0-1.el8.noarch and vdsm-jsonrpc-java-1.5.7-1.el8.noarch How to fix this? Thanks in advance. ***************** SERVER LOG ********************* 2022-07-15 14:45:44,969+03 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "engine.ear")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.subunit.\"engine.ear\".\"bll.jar\".component.Backend.START" => "java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance Caused by: java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance Caused by: javax.ejb.EJBException: org.jboss.weld.exceptions.WeldException: WELD-000049: Unable to invoke protected void org.ovirt.engine.core.bll.TagsDirector.init() on org.ovirt.engine.core.bll.TagsDirector@648487d3 Caused by: org.jboss.weld.exceptions.WeldException: WELD-000049: Unable to invoke protected void org.ovirt.engine.core.bll.TagsDirector.init() on org.ovirt.engine.core.bll.TagsDirector@648487d3 Caused by: java.lang.reflect.InvocationTargetException Caused by: org.springframework.dao.InvalidDataAccessApiUsageException: Unable to determine the correct call signature - no procedure/function/signature for 'gettagsbyparent_id'"}} 2022-07-15 14:45:44,981+03 INFO [org.jboss.as.server] (ServerService Thread Pool -- 25) WFLYSRV0010: Deployed "restapi.war" (runtime-name : "restapi.war") 2022-07-15 14:45:44,982+03 INFO [org.jboss.as.server] (ServerService Thread Pool -- 25) WFLYSRV0010: Deployed "engine.ear" (runtime-name : "engine.ear") 2022-07-15 14:45:44,982+03 INFO [org.jboss.as.server] (ServerService Thread Pool -- 25) WFLYSRV0010: Deployed "apidoc.war" (runtime-name : "apidoc.war") 2022-07-15 14:45:44,982+03 INFO [org.jboss.as.server] (ServerService Thread Pool -- 25) WFLYSRV0010: Deployed "ovirt-web-ui.war" (runtime-name : "ovirt-web-ui.war") 2022-07-15 14:45:45,015+03 INFO [org.jboss.as.controller] (Controller Boot Thread) WFLYCTL0183: Service status report WFLYCTL0186: Services which failed to start: service jboss.deployment.subunit."engine.ear"."bll.jar".component.Backend.START: java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance WFLYCTL0448: 2 additional services are down due to their dependencies being missing or failed

1 0

Seeking best performance on oVirt cluster
by David Johnson 14 Jul '22

14 Jul '22

Good morning all, I am trying to get the best performance out of my cluster possible, Here are the details of what I have now: Ovirt version: 4.4.10.7-1.el8 Bare metal for the ovirt engine two hosts TrueNAS cluster storage 1 NFS share 3 vdevs, 6 drives in raidz2 in each vdev 2 nvme drives for silog Storage network is 10 GBit all static IP addresses Tonight, I built a new VM from a template. It had 5 attached disks totalling 100 GB. It took 30 minutes to deploy the new VM from the template. Global utilization was 9%. The SPM has 50% of its memory free and never showed more than 12% network utilization 62 out of 65 TB are available on the newly created NFS backing store (no fragmentation). The TureNAS system is probably overprovisioned for our use. There were peak throughputs of up to 4 GBytes/second (on a 10 GBit network), but overall throughput on the NAS and the network were low. ARC hits were 95 to 100% L2 hits were 0 to 70% Here's the NFS usage stats: [image: image.png] I believe the first peak is where the silog buffered the initial burst of instructions, followed by sustained IO as the VM volumes were built in parallel, and then finally tapering off to the one 50 GB volume that took 40 minutes to copy. The indications of the NFS stats graph are that the network performance is just fine. Here are the disk IO stats covering the same time frame, plus a bit before to show a spike IO: [image: image.png] The spike at 2250 (10 minutes before I started building my VM) shows that the spinners actually hit write speed of almost 20 MBytes per second briefly, then settled in at a sustained 3 to 4 MBytes per second. The silog absorbs several spikes, but remains mostly idle, with activity measured in kilobytes per second. The HGST HUS726060AL5210 drives boast a spike throughput of 12 GB/S, and sustained throughput of 227 Mbps. ------ Now to the questions: 1. Am I asking the on the right list? Does this look like something where tuning ovirt might make a difference, or is this more likely a configuration issue with my storage appliances? 2. Am I expecting too much? Is this well within the bounds of acceptable (expected) performance? 3. How would I go about identifying the bottleneck, should I need to dig deeper? Thanks, David Johnson

8 15

unable to create iso domain
by Moritz Baumann 14 Jul '22

14 Jul '22

Hi I have removed the iso domain of an existing data center, and now I am unable to create a new iso domain /var/log/ovirt-engine/engine.log shows: 2022-07-14 08:04:40,684+02 INFO [org.ovirt.engine.core.bll.storage.connection.AddStorageServerConnectionCommand] (default task-34) [8db814e3-43ab-4921-ad35-2b3acd51c385] Lock Acquired to object 'EngineLock:{exclusiveLocks='[ovirt.storage.inf.ethz.ch:/export/ovirt/iso=STORAGE_CONNECTION]', sharedLocks=''}' 2022-07-14 08:04:40,689+02 WARN [org.ovirt.engine.core.bll.storage.connection.AddStorageServerConnectionCommand] (default task-34) [8db814e3-43ab-4921-ad35-2b3acd51c385] Validation of action 'AddStorageServerConnection' failed for user xxx@ethz.ch@ethz.ch-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__STORAGE__CONNECTION,$connectionId c39c64ef-fb8b-4e87-9803-420c7fb2dd4a,$storageDomainName ,ACTION_TYPE_FAILED_STORAGE_CONNECTION_ALREADY_EXISTS 2022-07-14 08:04:40,690+02 INFO [org.ovirt.engine.core.bll.storage.connection.AddStorageServerConnectionCommand] (default task-34) [8db814e3-43ab-4921-ad35-2b3acd51c385] Lock freed to object 'EngineLock:{exclusiveLocks='[ovirt.scratch.inf.ethz.ch:/export/ovirt/iso=STORAGE_CONNECTION]', sharedLocks=''}' 2022-07-14 08:04:40,756+02 INFO [org.ovirt.engine.core.bll.storage.connection.DisconnectStorageServerConnectionCommand] (default task-34) [4148e0fd-58ae-4375-8dc8-a08f47402ed6] Running command: DisconnectStorageServerConnectionCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_STORAGE_DOMAIN with role type ADMIN 2022-07-14 08:04:40,756+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.DisconnectStorageServerVDSCommand] (default task-34) [4148e0fd-58ae-4375-8dc8-a08f47402ed6] START, DisconnectStorageServerVDSCommand(HostName = ovirt-node01, StorageServerConnectionManagementVDSParameters:{hostId='d942c8fe-9a0c-4761-9be2-2f88b622070b', storagePoolId='00000000-0000-0000-0000-000000000000', storageType='NFS', connectionList='[StorageServerConnections:{id='null', connection='ovirt.storage.inf.ethz.ch:/export/ovirt/iso', iqn='null', vfsType='null', mountOptions='null', nfsVersion='null', nfsRetrans='null', nfsTimeo='null', iface='null', netIfaceName='null'}]', sendNetworkEventOnFailure='true'}), log id: 3043bbfd 2022-07-14 08:04:43,017+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.DisconnectStorageServerVDSCommand] (default task-34) [4148e0fd-58ae-4375-8dc8-a08f47402ed6] FINISH, DisconnectStorageServerVDSCommand, return: {00000000-0000-0000-0000-000000000000=100}, log id: 3043bbfd [root@ovirt-engine ovirt-engine]# showmount -e ovirt.storage.inf.ethz.ch | grep ovirt Export list for ovirt.scratch.inf.ethz.ch: /export/ovirt/export @ovirt-storage /export/ovirt/data @ovirt-storage /export/ovirt/iso @ovirt-storage the other two domains still work just fine and the netgroup contains all ovirt-nodes. storage-node1[0]:/export/ovirt/iso# ls -la total 2 drwx------. 2 vdsm kvm 2 Jul 14 07:58 . drwxr-xr-x. 5 root root 5 Aug 19 2020 .. storage-node1[0]:/export/ovirt/iso# df . Filesystem 1K-blocks Used Available Use% Mounted on fs1/ovirt/iso 524288000 256 524287744 1% /export/ovirt/iso storage-node1[0]:/export/ovirt/iso# storage-node1[0]:/export/ovirt/iso# exportfs -v | grep ovirt/ -A1 /export/ovirt/iso @ovirt-storage(sync,wdelay,hide,no_subtree_check,fsid=215812,sec=sys:krb5:krb5i:krb5p,rw,secure,root_squash,no_all_squash) /export/ovirt/data @ovirt-storage(sync,wdelay,hide,no_subtree_check,fsid=215811,sec=sys:krb5:krb5i:krb5p,rw,secure,root_squash,no_all_squash) -- /export/ovirt/export @ovirt-storage(sync,wdelay,hide,no_subtree_check,fsid=215813,sec=sys:krb5:krb5i:krb5p,rw,secure,root_squash,no_all_squash) It appears that there is stille some reference to an iso domain (c39c64ef-fb8b-4e87-9803-420c7fb2dd4a ??) in the database. How can I get rid of it ? Best Moritz

1 1

4.3.10 cannot start VMs because of an error with USB
by Pascal D 14 Jul '22

14 Jul '22

I am still running 4.3.10 and suddenly I get this error everytime I restart a VM, any Vm on any host (I have 13 hosts in 2 different clusters) VM FLEETGEN-PCC-001 is down with error. Exit message: XML error: there is no hub at port 1 in USB address bus: 0 port: 1.1. Any idea what could be different. Template hasn't changed

2 1

Import KVM VMs on individual iSCSI luns
by spierce＠cts1.com 13 Jul '22

13 Jul '22

Greetings, Is it possible with oVirt to import existing VMs where the underlying storage is on raw iSCSI luns and to keep them on those luns? The historical scenario is that we have Virtual farms in multiple sites managed by an ancient Orchestration tool that does not support modern OS's as the hypervisor. - In each site, there are clusters of hypervisors/Hosts that have visibility to the same iSCSI luns. - Each VM has it's own set of iscsi luns that are totally dedicated to that VM - Each VM is using LVM to manage the disk - Each Host has LVM filtering configured to NOT manage the VM's iscsi luns - The VMs can be live migrated from any Hypervisor within the cluster to any other Hypervisor in that same cluster We are attempting to bring this existing environment into oVirt without replacing the storage model. Is there any documentation that will serve as a guide for this scenario? In a lab environment, we have successfully - Added 2 hypervisors (hosts) and oVirt can see their VMs as external-ovtest1 and external-ovtest2 - Removed the LVM filtering on the hosts - Created a storage domain that is able to see the iscsi luns, but we have not yet done the 'add' of each lun Is it possible to import these luns as raw block devices without LVM being layered on top of them? Is it required to actually import the luns into a storage domain, or can the VM's still be imported if all luns are visible on all hosts in the cluster? In the grand scheme of things, are we trying to do something that is not possible with oVirt? If it is possible, we would greatly appreciate tips, pointers, links to docs etc that will help us migrate this environment to oVirt. Thanks in Advance - S

3 2

Q: Instaling Ovirt Engine 4.4.10 on Clean CentOS 8 Stream
by Andrei Verovski 13 Jul '22

13 Jul '22

Hi, Since I run into a lot of problems upgrading 4.4.7 to 4.4.10, is it OK to install clean CentOS-Stream-8-x86_64-20220712-dvd1.iso and restore from backup? 4.4.10 release long before Stream 20220712, may I run again into similar problems, or I need to use earlier snapshot of Stream 8 ? I use dedicated engine PC, not hosted engine. Thanks in advance for any suggestion(s) Andrei

1 0

DO I HAVE TO PAY MONEY OR DO PEOPLE PAY MONEY TO GET LITTLE INFORMATION?
by abiolaemma01＠gmail.com 13 Jul '22

13 Jul '22

I might be asking the wrong question. Am sorry if i am. DO I HAVE TO PAY SOME MONEY FOR ME TO GET SOME INFORMATION OR HELP ON THIS FORUM? I men information about the oVirt product and how to fix the bugs.

4 7

Keycloak - the default OpenID/SSO provider for oVirt Engine
by Artur Socha 13 Jul '22

13 Jul '22

Hi, With Ovirt 4.5.1 release [1], the Keycloak based authentication is enabled by default for fresh/new installations. Here [2] you can find some usage scenarios describing when/how it is enabled. In short - if you just want to login to oVirt Admin / VM / Monitoring portal, please use 'admin@ovirt' user and the password provided during engine-setup. There is ongoing work to make it more explicit [3] and it will be addressed soon. For Rest API access, the full user with profile name is required as username: admin@ovirt@internalsso Here is a sample 'curl' illustrating the flow: $ curl -k -H "Accept: application/json" ' https://ENGINE_FQDN/ovirt-engine/sso/oauth/token?grant_type=password&userna… ' And the token response: {"access_token":"eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJEdS10MlVQd0JaZ0gtRU1JUkRTRHFxNFZIOUhZbnc4Nkk5QUlGOERxZ1l3In0.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.Ov2IJ-ghtXSB6eb7osWZgT_yeb4prBgVzUU9vAY_VMoDr-ie5bMYBUyinYvNHWpBbYaFGNjg6bC7PHz3-s5H1rxXN1wH13wtIlO4obUbPt8wEb58Slrr42kXBoLLLDrXE3Af9LlabtNjJ0z-a5reSUZmOdVYiJl9sEF4YwG9177mwUSJz7VLQAI1hKN1pg6Ox1sJj2fBwdBqjIiRXsw-KBwoMQx9JmuMk9wCr5-gI5f8I-9Vqizb8Lf5ZJ4SMf35Wy3R8dwQeXXau_7t5zDe9wO9wnc9RfOMCuDCc359-oLDFmtrahgrMjmDx5YrQHol6jC43S_7gQ_2IPLE_TlqiQ","scope":"ovirt-app-api ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access","exp":"9223372036854775807","token_type":"bearer"}% Now lets use access token to authenticate and fetch hosts: $ curl -k -H "Accept: application/json" -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJEdS10MlVQd0JaZ0gtRU1JUkRTRHFxNFZIOUhZbnc4Nkk5QUlGOERxZ1l3In0.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.Ov2IJ-ghtXSB6eb7osWZgT_yeb4prBgVzUU9vAY_VMoDr-ie5bMYBUyinYvNHWpBbYaFGNjg6bC7PHz3-s5H1rxXN1wH13wtIlO4obUbPt8wEb58Slrr42kXBoLLLDrXE3Af9LlabtNjJ0z-a5reSUZmOdVYiJl9sEF4YwG9177mwUSJz7VLQAI1hKN1pg6Ox1sJj2fBwdBqjIiRXsw-KBwoMQx9JmuMk9wCr5-gI5f8I-9Vqizb8Lf5ZJ4SMf35Wy3R8dwQeXXau_7t5zDe9wO9wnc9RfOMCuDCc359-oLDFmtrahgrMjmDx5YrQHol6jC43S_7gQ_2IPLE_TlqiQ" 'https://ENGINE_FQDN/ovirt-engine/api/hosts' In order to change default Keycloak configuration or set up any additional identity providers you need to access the Keycloak Administration Panel ( https://YOUR_ENGINE_FQDN/ovirt-engine-auth/admin) By default, on a fresh installation, you can login using 'admin' and the password provided during engine-setup. Keycloak allows to easily use all the features that were previously supported by oVirt in-house authentication implementation plus many more almost for free - multi factor authentication, 3rd party identity providers (ie. github, google, facebook etc.) just to name a few. For more information please see the Keycloak's documentation [4]. [1] https://www.ovirt.org/release/4.5.1/#keycloak-sso-setup-for-ovirt-engine [2] https://github.com/oVirt/ovirt-engine-keycloak/blob/master/keycloak_usage.md [3] https://bugzilla.redhat.com/show_bug.cgi?id=2101474 [4] https://www.keycloak.org/archive/documentation-15.0.html Please, let us know if you have any questions/concerns. Last, but not least, any contributions or bug reports are more than welcomed! thanks! Artur -- Artur Socha Senior Software Engineer, RHV Red Hat

1 0

Q: oVirt 4.4.7 -> 4.4.10 Upgrade Woes
by Andrei Verovski 13 Jul '22

13 Jul '22

Hi, I’m running dedicated oVirt Engine (separate PC, not hosted engine) and trying to upgrade 4.4.7 -> 4.4.10. Quite cumbersome process, since CentOS 8.x was switched to Stream. OK, then, DNF upgrade went successfully, and after sudo dnf install https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm and engine-upgrade I run setup. Here are the problems. For whatever reason pki keys get auto-deleted during upgrade: [WARNING] Unable to ensure permissions on /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 2] No such file or directory: '/etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass' [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 2] No such file or directory: '/etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass’ Restored these keys from backup (entire “keys” directory). Still no luck. [WARNING] Unable to ensure permissions on /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf [ INFO ] Upgrading CA [ INFO ] Renewing engine certificate [ ERROR ] Failed to execute stage 'Misc configuration': Command '/usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh' failed to execute No matter if I choose renew keys or not, this failure still present. Logs attached (its quite big). How to solve this problem? Thanks in advance.

1 0