- Users - oVirt List Archives

Re: [Users] virt-v2v
by suporte＠logicworks.pt 19 Apr '13

19 Apr '13

------=_Part_126_13514993.1366361089702 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable The VM is a Linux based Sophos UTM Manager, with a kernel based on version = 3.3.8, Do you think it can be a problem?=20 ----- Original Message ----- From: "Jonathan Horne" <jhorne(a)skopos.us>=20 To: suporte(a)logicworks.pt=20 Sent: Quinta-feira, 18 de Abril de 2013 19:02:32=20 Subject: Re: [Users] virt-v2v=20 what is the OS of the virtual machine you are migrating?=20 i had some errors myself, they were related to ovirt not providing the nece= ssary virtio driver for a windows guest migration. (i can create a windows = machine at the console, but i cannot migrate one in without the virtio pack= age).=20 this isn't the same error as that, but it might be related, so thats why i = ask what is your OS of your virtual machine?=20 =09Skopos Website=09JONATHAN HORNE | Systems Administrator | Skopos Web=20 e: jhorne(a)skopos.us t: 214.520.4600 x 5042 f: 214.520.5079 LinkedIn From: " suporte(a)logicworks.pt " < suporte(a)logicworks.pt >=20 Date: Thursday, April 18, 2013 12:55 PM=20 To: Jonathan Horne < jhorne(a)skopos.us >=20 Subject: Re: [Users] virt-v2v=20 Yes, I got it. Now I have no more the error complaining about the storage p= ool, but, in fact, it starts the job until 100% and then send another error= message:=20 KVM_NAME.qcow2: 100% [=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D]D 0h09m54s=20 virt-v2v: Failed to launch guestfs appliance. Try running again with LIBGUE= STFS_DEBUG=3D1 for more information=20 Any idea?=20 ----- Original Message ----- From: "Jonathan Horne" < jhorne(a)skopos.us >=20 To: suporte(a)logicworks.pt=20 Sent: Quinta-feira, 18 de Abril de 2013 18:17:40=20 Subject: RE: [Users] virt-v2v=20 Showmount -e [ipadress-of-nas]=20 From: suporte(a)logicworks.pt [ mailto:suporte@logicworks.pt ]=20 Sent: Thursday, April 18, 2013 4:26 AM=20 To: Shu Ming=20 Cc: Jonathan Horne; Users(a)ovirt.org=20 Subject: Re: [Users] virt-v2v=20 Yes, that's right, but the problem was with the syntax.=20 After running the command, at the end I get this error message:=20 virt-v2v: Failed to launch guestfs appliance. Try running again with LIBGUE= STFS_DEBUG=3D1 for more information=20 Any idea?=20 ----- Original Message ----- From: "Shu Ming" < shuming(a)linux.vnet.ibm.com >=20 To: suporte(a)logicworks.pt=20 Cc: "Jonathan Horne" < jhorne(a)skopos.us >, Users(a)ovirt.org=20 Sent: Quinta-feira, 18 de Abril de 2013 3:11:10=20 Subject: Re: [Users] virt-v2v=20 You can get the mount path from the admin portal.=20 system--->storage--->select a storage domain--->In the general tab page,=20 you can have the nfs export path.=20 suporte(a)logicworks.pt :=20 > well, I run the virt-v2v from the engine server, if I do a showmount=20 > -e it will show me the iso domain. The NFS/export storage is located=20 > at a NAS on the LAN, so I think I need the path to that NAS, how can I=20 > found it?=20 >=20 >=20 > ------------------------------------------------------------------------= =20 > *De: *"Jonathan Horne" < jhorne(a)skopos.us >=20 > *Para: *suporte(a)logicworks.pt , Users(a)ovirt.org=20 > *Enviadas: *Quarta-feira, 17 Abril, 2013 20:33:29=20 > *Assunto: *RE: virt-v2v=20 >=20 > I imagine =E2=80=9Cshowmount -e=E2=80=9D will show you the NFS path. I re= cently=20 > imported some VMs from KvM, and my syntax was like this:=20 >=20 > virt-v2v -i libvirt -ic qemu+ ssh://root@source-server/system -o rhev=20 > -os ovirt-exportnfs-server:/opt/nfs -of qcow2 -oa sparse -n ovirtmgmt=20 > exactname-of-kvm-vm=20 >=20 > jonathan=20 >=20 > *From: *users-bounces(a)ovirt.org [ mailto:users-bounces@ovirt.org ] *On=20 > Behalf Of *suporte(a)logicworks.pt=20 > *Sent:* Wednesday, April 17, 2013 12:06 PM=20 > *To:* Users(a)ovirt.org=20 > *Subject:* [Users] virt-v2v=20 >=20 > Hi,=20 >=20 > Im trying to migrate a VM from a qemu kvm server. I'm not sure of the=20 > correct syntax:=20 >=20 > virt-v2v -ic qemu+ ssh://root@/server_ip_addr//system -op=20 > /export_domain/ --bridge ovirtmgmt /kvm_vm_name/=20 >=20 > I have setup a NFS/export storage on the manager, for the export=20 > domain. How can I find the correct path of the export_domain?=20 >=20 > regards=20 >=20 > --=20 >=20 > ------------------------------------------------------------------------= =20 >=20 > Jose Ferradeira=20 > http://www.logicworks.pt=20 >=20 >=20 > ------------------------------------------------------------------------= =20 > This is a PRIVATE message. If you are not the intended recipient,=20 > please delete without copying and kindly advise us by e-mail of the=20 > mistake in delivery. NOTE: Regardless of content, this e-mail shall=20 > not operate to bind SKOPOS to any order or other contract unless=20 > pursuant to explicit written agreement or government initiative=20 > expressly permitting the use of e-mail for such purpose.=20 > I imagine =E2=80=9Cshowmount -e=E2=80=9D will show you the NFS path. I re= cently=20 > imported some VMs from KvM, and my syntax was like this:=20 >=20 > virt-v2v -i libvirt -ic qemu+ ssh://root@source-server/system -o rhev=20 > -os ovirt-exportnfs-server:/opt/nfs -of qcow2 -oa sparse -n ovirtmgmt=20 > exactname-of-kvm-vm=20 >=20 > jonathan=20 >=20 > From: users-bounces(a)ovirt.org [ mailto:users-bounces@ovirt.org ] On=20 > Behalf Of suporte(a)logicworks.pt=20 > Sent: Wednesday, April 17, 2013 12:06 PM=20 > To: Users(a)ovirt.org=20 > Subject: [Users] virt-v2v=20 >=20 > Hi,=20 >=20 > Im trying to migrate a VM from a qemu kvm server. I'm not sure of the=20 > correct syntax:=20 >=20 > virt-v2v -ic qemu+ ssh://root@server_ip_addr/system -op export_domain=20 > --bridge ovirtmgmt kvm_vm_name=20 >=20 > I have setup a NFS/export storage on the manager, for the export=20 > domain. How can I find the correct path of the export_domain?=20 >=20 > regards=20 >=20 > --=20 > ________________________________=20 > Jose Ferradeira=20 > http://www.logicworks.pt=20 >=20 >=20 > ________________________________=20 > This is a PRIVATE message. If you are not the intended recipient,=20 > please delete without copying and kindly advise us by e-mail of the=20 > mistake in delivery. NOTE: Regardless of content, this e-mail shall=20 > not operate to bind SKOPOS to any order or other contract unless=20 > pursuant to explicit written agreement or government initiative=20 > expressly permitting the use of e-mail for such purpose.=20 >=20 >=20 >=20 > _______________________________________________=20 > Users mailing list=20 > Users(a)ovirt.org=20 > http://lists.ovirt.org/mailman/listinfo/users=20 --=20 ---=20 =E8=88=92=E6=98=8E Shu Ming=20 Open Virtualization Engineerning; CSTL, IBM Corp.=20 Tel: 86-10-82451626 Tieline: 9051626 E-mail: shuming(a)cn.ibm.com or shuming@= linux.vnet.ibm.com=20 Address: 3/F Ring Building, ZhongGuanCun Software Park, Haidian District, B= eijing 100193, PRC=20 This is a PRIVATE message. If you are not the intended recipient, please de= lete without copying and kindly advise us by e-mail of the mistake in deliv= ery. NOTE: Regardless of content, this e-mail shall not operate to bind SKO= POS to any order or other contract unless pursuant to explicit written agre= ement or government initiative expressly permitting the use of e-mail for s= uch purpose.=20 This is a PRIVATE message. If you are not the intended recipient, please de= lete without copying and kindly advise us by e-mail of the mistake in deliv= ery. NOTE: Regardless of content, this e-mail shall not operate to bind SKO= POS to any order or other contract unless pursuant to explicit written agre= ement or government initiative expressly permitting the use of e-mail for s= uch purpose.=20 ------=_Part_126_13514993.1366361089702 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><= div style=3D'font-family: arial,helvetica,sans-serif; font-size: 10pt; colo= r: #000000'>The VM is a Linux based Sophos UTM Manager, with a kernel based= on version 3.3.8, Do you think it can be a problem?<br><br><hr id=3D"zwchr= "><div style=3D"color: rgb(0, 0, 0); font-weight: normal; font-style: norma= l; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-siz= e: 12pt;"><b>From: </b>"Jonathan Horne" <jhorne(a)skopos.us><br><b>To: = </b>suporte(a)logicworks.pt<br><b>Sent: </b>Quinta-feira, 18 de Abril de 2013= 19:02:32<br><b>Subject: </b>Re: [Users] virt-v2v<br><br> <link href=3D"/zimbra/css/msgview.css?v=3D130318080117" rel=3D"stylesheet"> <div> <div>what is the OS of the virtual machine you are migrating?</div> <div><br> </div> <div>i had some errors myself, they were related to ovirt not providing the= necessary virtio driver for a windows guest migration.  (i can create= a windows machine at the console, but i cannot migrate one in without the = virtio package).</div> <div><br> </div> <div>this isn't the same error as that, but it might be related, so thats w= hy i ask what is your OS of your virtual machine?</div> <div> <div></div> <table style=3D"font-family: Times; margin-top: 10px; margin-left: 1px; mar= gin-bottom: 10px; width: 580px;" border=3D"0"> <tbody> <tr> <td width=3D"40"><a href=3D"http://www.skoposfinancial.com/" target=3D"_bla= nk"><img src=3D"http://dl.dropbox.com/u/67303051/Logo_Signature.gif" alt=3D= "Skopos Website" src=3D"http://dl.dropbox.com/u/67303051/Logo_Signature.gif= " height=3D"55" width=3D"151"></a></td> <td><span style=3D"font-family: 'Trebuchet MS',helvetica,San-Serif; font-si= ze: 12px; color: rgb(128, 128, 128); line-height: 22px;"><b style=3D"color:= rgb(173, 41, 17); text-transform: uppercase; letter-spacing: 2px;">JONATHA= N HORNE </b> |  Systems Administrator  | <a href= =3D"http://www.skoposfinancial.com" title=3D"visit Skopos Web" style=3D"tex= t-decoration: none; border-bottom: 1px dotted rgb(136, 136, 136); color: rg= b(136, 136, 136);" target=3D"_blank">Skopos Web</a></span><br> <span style=3D"font-family: 'Trebuchet MS',helvetica,San-Serif; font-size: = 11px; color: rgb(178, 178, 178);"><b style=3D"color: rgb(136, 136, 136);">e= :</b>  <a href=3D"mailto:jhorne@skopos.us" title=3D"email %FN%" s= tyle=3D"text-decoration: none; border-bottom: 1px dotted rgb(178, 178, 178)= ; color: rgb(178, 178, 178);" target=3D"_blank">jhorne(a)skopos.us</a> &= nbsp;<b style=3D"color: rgb(136, 136, 136);">t:</b>  214.520.4600 x 5042  <b style=3D"color: rgb(136, 136, 136);">f:</b> &nbs= p;214.520.5079 <a href=3D"http://www.linkedin.com/company/skopos-finan= cial" target=3D"_blank"><img src=3D"http://dl.dropbox.com/u/67303051/LI.jpe= g" title=3D"visit Skopos LinkedIn" alt=3D"LinkedIn" src=3D"http://dl.dropbo= x.com/u/67303051/LI.jpeg" height=3D"14" width=3D"13"> <p></p> </a></span></td> </tr> </tbody> </table> </div> </div> <div><br> </div> <span id=3D"OLK_SRC_BODY_SECTION"> <div style=3D"font-family: Calibri; font-size: 11pt; text-align: left; colo= r: black; border-width: 1pt medium medium; border-style: solid none none; b= order-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; pa= dding: 3pt 0in 0in;"> <span style=3D"font-weight: bold;">From: </span>"<a href=3D"mailto:suporte@= logicworks.pt" target=3D"_blank">suporte(a)logicworks.pt</a>" <<a href=3D"= mailto:suporte@logicworks.pt" target=3D"_blank">suporte(a)logicworks.pt</a>&g= t;<br> <span style=3D"font-weight: bold;">Date: </span>Thursday, April 18, 2013 12= :55 PM<br> <span style=3D"font-weight: bold;">To: </span>Jonathan Horne <<a href=3D= "mailto:jhorne@skopos.us" target=3D"_blank">jhorne(a)skopos.us</a>><br> <span style=3D"font-weight: bold;">Subject: </span>Re: [Users] virt-v2v<br> </div> <div><br> </div> <div><style></style> <div> <div style=3D"font-family: arial,helvetica,sans-serif; font-size: 10pt; col= or: rgb(0, 0, 0);"> Yes, I got it. Now I have no more the error complaining about the storage p= ool, but, in fact, it starts the job until 100% and then send another error= message:<br> KVM_NAME.qcow2: 100% [=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D]D 0h09m54s<br> virt-v2v: Failed to launch guestfs appliance. Try running again with LIBGUE= STFS_DEBUG=3D1 for more information<br> <br> Any idea?<br> <br> <hr id=3D"zwchr"> <div style=3D"color: rgb(0, 0, 0); font-weight: normal; font-style: normal;= text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size:= 12pt;"> <b>From: </b>"Jonathan Horne" <<a href=3D"mailto:jhorne@skopos.us" targe= t=3D"_blank">jhorne(a)skopos.us</a>><br> <b>To: </b><a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">supor= te(a)logicworks.pt</a><br> <b>Sent: </b>Quinta-feira, 18 de Abril de 2013 18:17:40<br> <b>Subject: </b>RE: [Users] virt-v2v<br> <br> <style></style> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span style=3D"font-size: 11pt; font-family: Calibri= ,sans-serif; color: rgb(31, 73, 125);">Showmount -e [ipadress-of-nas] </span></p> <p class=3D"MsoNormal"><span style=3D"font-size: 11pt; font-family: Calibri= ,sans-serif; color: rgb(31, 73, 125);"> </span></p> <div> <div style=3D"border-right: medium none; border-width: 1pt medium medium; b= order-style: solid none none; padding: 3pt 0in 0in;"> <p class=3D"MsoNormal"><b><span style=3D"font-size: 10pt; font-family: Taho= ma,sans-serif;">From:</span></b><span style=3D"font-size: 10pt; font-family= : Tahoma,sans-serif;"> <a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">suporte@logicwor= ks.pt</a> [<a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">mailt= o:suporte@logicworks.pt</a>] <br> <b>Sent:</b> Thursday, April 18, 2013 4:26 AM<br> <b>To:</b> Shu Ming<br> <b>Cc:</b> Jonathan Horne; <a href=3D"mailto:Users@ovirt.org" target=3D"_bl= ank">Users(a)ovirt.org</a><br> <b>Subject:</b> Re: [Users] virt-v2v</span></p> </div> </div> <p class=3D"MsoNormal"> </p> <div> <p class=3D"MsoNormal" style=3D"margin-bottom: 12pt;"><span style=3D"font-s= ize: 10pt; font-family: Arial,sans-serif; color: black;">Yes, that's right,= but the problem was with the syntax.<br> After running the command, at the end I get this error message:<br> <br> virt-v2v: Failed to launch guestfs appliance. Try running again with LIBGUE= STFS_DEBUG=3D1 for more information<br> <br> Any idea?</span></p> <div class=3D"MsoNormal" style=3D"text-align: center;" align=3D"center"><sp= an style=3D"font-size: 10pt; font-family: Arial,sans-serif; color: black;"> <hr id=3D"zwchr" align=3D"center" size=3D"2" width=3D"100%"> </span></div> <div> <p class=3D"MsoNormal" style=3D"margin-bottom: 12pt;"><b><span style=3D"fon= t-family: Helvetica,sans-serif; color: black;">From: </span></b><span style=3D"font-family: Helvetica,sans-serif; color: black;"= >"Shu Ming" <<a href=3D"mailto:shuming@linux.vnet.ibm.com" target=3D"_bl= ank">shuming(a)linux.vnet.ibm.com</a>><br> <b>To: </b><a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">supor= te(a)logicworks.pt</a><br> <b>Cc: </b>"Jonathan Horne" <<a href=3D"mailto:jhorne@skopos.us" target= =3D"_blank">jhorne(a)skopos.us</a>>, <a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users(a)ovirt.org</a><br= > <b>Sent: </b>Quinta-feira, 18 de Abril de 2013 3:11:10<br> <b>Subject: </b>Re: [Users] virt-v2v<br> <br> You can get the mount path from the admin portal.<br> system--->storage--->select a storage domain--->In the general tab= page, <br> you can have the nfs export path.<br> <a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">suporte@logicwor= ks.pt</a>:<br> > well, I run the virt-v2v from the engine server, if I do a showmount <= br> > -e it will show me the iso domain. The NFS/export storage is located <= br> > at a NAS on the LAN, so I think I need the path to that NAS, how can I= <br> > found it?<br> ><br> ><br> > ----------------------------------------------------------------------= --<br> > *De: *"Jonathan Horne" <<a href=3D"mailto:jhorne@skopos.us" target= =3D"_blank">jhorne(a)skopos.us</a>><br> > *Para: <a href=3D"mailto:*suporte@logicworks.pt" target=3D"_blank">*su= porte(a)logicworks.pt</a>, <a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users(a)ovirt.org</a><br= > > *Enviadas: *Quarta-feira, 17 Abril, 2013 20:33:29<br> > *Assunto: *RE: virt-v2v<br> ><br> > I imagine =E2=80=9Cshowmount -e=E2=80=9D will show you the NFS path. I= recently <br> > imported some VMs from KvM, and my syntax was like this:<br> ><br> > virt-v2v -i libvirt -ic qemu+<a>ssh://root@source-server/system</a> -o= rhev <br> > -os ovirt-exportnfs-server:/opt/nfs -of qcow2 -oa sparse -n ovirtmgmt = <br> > exactname-of-kvm-vm<br> ><br> > jonathan<br> ><br> > *From:<a href=3D"mailto:*users-bounces@ovirt.org" target=3D"_blank">*u= sers-bounces(a)ovirt.org</a> [<a href=3D"mailto:users-bounces@ovirt.org" targ= et=3D"_blank">mailto:users-bounces@ovirt.org</a>] *On <br> > Behalf Of <a href=3D"mailto:*suporte@logicworks.pt" target=3D"_blank">= *suporte(a)logicworks.pt</a><br> > *Sent:* Wednesday, April 17, 2013 12:06 PM<br> > *To:* <a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users@ovirt= .org</a><br> > *Subject:* [Users] virt-v2v<br> ><br> > Hi,<br> ><br> > Im trying to migrate a VM from a qemu kvm server. I'm not sure of the = <br> > correct syntax:<br> ><br> > virt-v2v -ic qemu+<a>ssh://root@/server_ip_addr//system</a> -op <br> > /export_domain/ --bridge ovirtmgmt /kvm_vm_name/<br> ><br> > I have setup a NFS/export storage on the manager, for the export <br> > domain. How can I find the correct path of the export_domain?<br> ><br> > regards<br> ><br> > -- <br> ><br> > ----------------------------------------------------------------------= --<br> ><br> > Jose Ferradeira<br> > <a href=3D"http://www.logicworks.pt" target=3D"_blank">http://www.logi= cworks.pt</a><br> ><br> ><br> > ----------------------------------------------------------------------= --<br> > This is a PRIVATE message. If you are not the intended recipient, <br> > please delete without copying and kindly advise us by e-mail of the <b= r> > mistake in delivery. NOTE: Regardless of content, this e-mail shall <b= r> > not operate to bind SKOPOS to any order or other contract unless <br> > pursuant to explicit written agreement or government initiative <br> > expressly permitting the use of e-mail for such purpose.<br> > I imagine =E2=80=9Cshowmount -e=E2=80=9D will show you the NFS path. I= recently <br> > imported some VMs from KvM, and my syntax was like this:<br> ><br> > virt-v2v -i libvirt -ic qemu+<a>ssh://root@source-server/system</a> -o= rhev <br> > -os ovirt-exportnfs-server:/opt/nfs -of qcow2 -oa sparse -n ovirtmgmt = <br> > exactname-of-kvm-vm<br> ><br> > jonathan<br> ><br> > From: <a href=3D"mailto:users-bounces@ovirt.org" target=3D"_blank">use= rs-bounces(a)ovirt.org</a> [<a href=3D"mailto:users-bounces@ovirt.org" target= =3D"_blank">mailto:users-bounces@ovirt.org</a>] On <br> > Behalf Of <a href=3D"mailto:suporte@logicworks.pt" target=3D"_blank">s= uporte(a)logicworks.pt</a><br> > Sent: Wednesday, April 17, 2013 12:06 PM<br> > To: <a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users(a)ovirt.o= rg</a><br> > Subject: [Users] virt-v2v<br> ><br> > Hi,<br> ><br> > Im trying to migrate a VM from a qemu kvm server. I'm not sure of the = <br> > correct syntax:<br> ><br> > virt-v2v -ic qemu+<a>ssh://root@server_ip_addr/system</a> -op export_d= omain <br> > --bridge ovirtmgmt kvm_vm_name<br> ><br> > I have setup a NFS/export storage on the manager, for the export <br> > domain. How can I find the correct path of the export_domain?<br> ><br> > regards<br> ><br> > --<br> > ________________________________<br> > Jose Ferradeira<br> > <a href=3D"http://www.logicworks.pt" target=3D"_blank">http://www.logi= cworks.pt</a><br> ><br> ><br> > ________________________________<br> > This is a PRIVATE message. If you are not the intended recipient, <br> > please delete without copying and kindly advise us by e-mail of the <b= r> > mistake in delivery. NOTE: Regardless of content, this e-mail shall <b= r> > not operate to bind SKOPOS to any order or other contract unless <br> > pursuant to explicit written agreement or government initiative <br> > expressly permitting the use of e-mail for such purpose.<br> ><br> ><br> ><br> > _______________________________________________<br> > Users mailing list<br> > <a href=3D"mailto:Users@ovirt.org" target=3D"_blank">Users(a)ovirt.org</= a><br> > <a href=3D"http://lists.ovirt.org/mailman/listinfo/users" target=3D"_b= lank">http://lists.ovirt.org/mailman/listinfo/users</a><br> <br> <br> -- <br> ---<br> </span><span style=3D"font-family: '=EF=BC=AD=EF=BC=B3 =E3=82=B4=E3=82=B7= =E3=83=83=E3=82=AF','MS Gothic'; color: black;">=E8=88=92=E6=98=8E</span><s= pan style=3D"font-family: Helvetica,sans-serif; color: black;"> Shu Ming<br= > Open Virtualization Engineerning; CSTL, IBM Corp.<br> Tel: 86-10-82451626  Tieline: 9051626 E-mail: <a href=3D"mailto:shumin= g(a)cn.ibm.com" target=3D"_blank"> shuming(a)cn.ibm.com</a> or <a href=3D"mailto:shuming@linux.vnet.ibm.com" tar= get=3D"_blank"> shuming(a)linux.vnet.ibm.com</a><br> Address: 3/F Ring Building, ZhongGuanCun Software Park, Haidian District, B= eijing 100193, PRC<br> <br> </span></p> </div> <p class=3D"MsoNormal"><span style=3D"font-size: 10pt; font-family: Arial,s= ans-serif; color: black;"> </span></p> </div> </div> <br> <hr> <font color=3D"Gray" face=3D"Arial" size=3D"1">This is a PRIVATE message. I= f you are not the intended recipient, please delete without copying and kin= dly advise us by e-mail of the mistake in delivery. NOTE: Regardless of con= tent, this e-mail shall not operate to bind SKOPOS to any order or other contract unless pursuant to explicit wri= tten agreement or government initiative expressly permitting the use of e-m= ail for such purpose.</font></div> <br> </div> </div> </div> </span><br> <hr> <font color=3D"Gray" face=3D"Arial" size=3D"1">This is a PRIVATE message. I= f you are not the intended recipient, please delete without copying and kin= dly advise us by e-mail of the mistake in delivery. NOTE: Regardless of con= tent, this e-mail shall not operate to bind SKOPOS to any order or other contract unless pursuant to explicit wri= tten agreement or government initiative expressly permitting the use of e-m= ail for such purpose.</font> </div><br></div></body></html> ------=_Part_126_13514993.1366361089702--

1 0

[Users] Master Storage Domain in status locked.
by Jonas Israelsson 19 Apr '13

19 Apr '13

Greetings. Due to an unfortunate storage misconfiguration (iscsi) the Ovirt-node was unable to mount it's master storage domain after a power outage. During the troubleshooting I believe I have managed to get the domain in some weird state where it now remains in status locked. If trying to take (only) host/node online it goes back to non-operational since it's unable to mount the master storage domain. Rebooting the node and or the engine makes no difference. Everything storage wise should be OK now. Any idea on how to recover ? vdsm.log attached With kind regards Jonas

1 0

Re: [Users] Certificates and PKI seem to be broken after yum update
by Chris Smith 19 Apr '13

19 Apr '13

Since I'm not able to reinstall the host from the ovirt-engine web interface, as another thought I wanted to see if I could bring up a third host and add it to the cluster. I have a host Fedora 17 box ready to go but I can't add it to the cluster. It states that there are no available server in the cluster to probe the new host. What about approaching it from the other direction. Would I be able to stand up an ovirt-h node on the same hardware and then add it to ovirt from the host itself, using the setup menu? Could it then obtain spm status and bring the storage domain online? On Thu, Apr 18, 2013 at 7:20 PM, Chris Smith <whitehat237(a)gmail.com> wrote: > engine.log attached > > On Thu, Apr 18, 2013 at 7:11 PM, Alon Bar-Lev <alonbl(a)redhat.com> wrote: >> Need to know precise error, please attach engine.log. >> >> >> ----- Original Message ----- >>> From: "Chris Smith" <whitehat237(a)gmail.com> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >>> Cc: Users(a)ovirt.org >>> Sent: Friday, April 19, 2013 2:03:59 AM >>> Subject: Re: [Users] Certificates and PKI seem to be broken after yum update >>> >>> So as of now, I can put the host into maintenance mode using the >>> ovirt-engine web interface. I can also try and activate it. It >>> states that the host was activated. The host never actually comes up >>> or contends for SPM status, and the data center never actually comes >>> online. >>> >>> If I put the host into maintenance mode and try to reinstall it, it >>> throws an error and size must be between 0 and 50. >>> >>> On Thu, Apr 18, 2013 at 6:51 PM, Alon Bar-Lev <alonbl(a)redhat.com> wrote: >>> > I am not sure I understand the status. >>> > >>> > Everything is working or not. >>> > If not, what exactly fails? >>> > Why do you run it 'again'? >>> > >>> > What happens if you reinstall host? Go to maintenance and select reinstall? >>> > >>> > I cannot understand how all this results from upgrade, something had >>> > changed, the CA certificate installed on the host is probably not the CA >>> > certificate of the engine. >>> > >>> > ----- Original Message ----- >>> >> From: "Chris Smith" <whitehat237(a)gmail.com> >>> >> To: "Alon Bar-Lev" <alonbl(a)redhat.com>, Users(a)ovirt.org >>> >> Sent: Friday, April 19, 2013 1:45:23 AM >>> >> Subject: Re: [Users] Certificates and PKI seem to be broken after yum >>> >> update >>> >> >>> >> On Thu, Apr 18, 2013 at 6:44 PM, Chris Smith <whitehat237(a)gmail.com> >>> >> wrote: >>> >> > I made a backup of the .truststore, and then followed the steps and >>> >> > then rebooted both the ovirt-engine and one of the hosts, and >>> >> > everything worked properly. >>> >> > >>> >> > If I run it again, or enter the wrong password it throws an error >>> >> > about the key store already existing, or that the password was wrong >>> >> > so I'm pretty sure it's good. >>> >> > >>> >> > vdsm.log on the host still shows: >>> >> > >>> >> > Traceback (most recent call last): >>> >> > File "/usr/lib64/python2.7/SocketServer.py", line 582, in >>> >> > process_request_thread >>> >> > self.finish_request(request, client_address) >>> >> > File "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py", >>> >> > line 66, in finish_request >>> >> > request.do_handshake() >>> >> > File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake >>> >> > self._sslobj.do_handshake() >>> >> > SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL >>> >> > routines:SSL3_READ_BYTES:sslv3 alert certificate unknown >>> >> > >>> >> > engine.log on the host shows: >>> >> > >>> >> > 2013-04-18 18:42:43,632 ERROR >>> >> > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >> > (QuartzScheduler_Worker-68) Failed to decryptData must start with zero >>> >> > 2013-04-18 18:42:43,642 ERROR >>> >> > [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] >>> >> > (QuartzScheduler_Worker-68) XML RPC error in command >>> >> > GetCapabilitiesVDS ( Vds: transporter ), the error was: >>> >> > java.util.concurrent.ExecutionException: >>> >> > java.lang.reflect.InvocationTargetException, >>> >> > SunCertPathBuilderException: unable to find valid certification path >>> >> > to requested target >>> >> > >>> >> > >>> >> > On Thu, Apr 18, 2013 at 4:06 AM, Alon Bar-Lev <alonbl(a)redhat.com> wrote: >>> >> >> >>> >> >> You should ask these question in separate thread so people may pick >>> >> >> them >>> >> >> up. >>> >> >> >>> >> >> For the .truststore, try to remove it and then execute: >>> >> >> >>> >> >> # rm -f /etc/pki/ovirt-engine/.truststore >>> >> >> # keytool -import -noprompt -trustcacerts -alias cacert -keypass mypass >>> >> >> -file /etc/pki/ovirt-engine/certs/ca.der -keystore >>> >> >> /etc/pki/ovirt-engine/.truststore -storepass mypass >>> >> >> # chown ovirt:ovirt /etc/pki/ovirt-engine/.truststore >>> >> >> >>> >> >> It should recreate the truststore with the ca certificate you have. >>> >> >> >>> >> >> ----- Original Message ----- >>> >> >>> From: "Chris Smith" <whitehat237(a)gmail.com> >>> >> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >>> >> >>> Cc: Users(a)ovirt.org >>> >> >>> Sent: Thursday, April 18, 2013 7:18:27 AM >>> >> >>> Subject: Re: [Users] Certificates and PKI seem to be broken after yum >>> >> >>> update >>> >> >>> >>> >> >>> If it would be easier than re-setting up the certificates, I'm also >>> >> >>> willing to just start over and rebuild, but I would like to export the >>> >> >>> VM's I have first. >>> >> >>> One of them is a spacewalk server, another runs DNS, and DHCP for my >>> >> >>> test network, and I have an asterisk server. I would like to avoid >>> >> >>> having to re-create all of them. >>> >> >>> >>> >> >>> The VM's are up and running now, so I could export all of the >>> >> >>> configurations / backup the file systems, etc. >>> >> >>> >>> >> >>> Preferably I could export the VM's to an NFS export domain, or a >>> >> >>> mounted NFS share so that I can import them to the new storage domain, >>> >> >>> after I run engine-cleanup and get everything set back up. Is there >>> >> >>> an easy way to do this? Is it possible to create and attach an NFS >>> >> >>> export domain directly from the CLI without access to the ovirt >>> >> >>> manager without communication between the manager and hosts due to the >>> >> >>> pki issue? Can I export the VM's directly from the hosts to a >>> >> >>> standard NFS share? >>> >> >>> >>> >> >>> Is there an equivalent xml and image file for the VM? >>> >> >>> >>> >> >>> My storage domain is iscsi and is served out from another server over >>> >> >>> 4 bonded 1 Gbps copper links. >>> >> >>> >>> >> >>> >>> >> >>> >>> >> >>> On Wed, Apr 17, 2013 at 11:46 PM, Chris Smith <whitehat237(a)gmail.com> >>> >> >>> wrote: >>> >> >>> > I checked the .truststore on the ovirt engine, and it seems fine. >>> >> >>> > >>> >> >>> > [root@reliant ovirt-engine]# ls -l .truststore >>> >> >>> > -rwxr-x---. 1 ovirt ovirt 918 Apr 6 21:56 .truststore >>> >> >>> > >>> >> >>> > It's not zero bytes anyway. >>> >> >>> > >>> >> >>> > It's also the same size as the .truststore in the ovirt engine >>> >> >>> > backups. >>> >> >>> > >>> >> >>> > [root@reliant ovirt-engine-backups]# find ./ -name .truststore -exec >>> >> >>> > ls >>> >> >>> > -l >>> >> >>> > {} \; >>> >> >>> > -rwxr-x---. 1 ovirt ovirt 918 Aug 26 2012 >>> >> >>> > ./ovirt-engine-2013_03_23_03_09_09/ovirt-engine/.truststore >>> >> >>> > -rwxr-x---. 1 root root 918 Mar 24 12:42 >>> >> >>> > ./ovirt-engine-2013_03_24_11_15_19/ovirt-engine-2013_03_23_03_09_09/ovirt-engine/.truststore >>> >> >>> > >>> >> >>> > I haven't looked at the installCA.sh script yet. >>> >> >>> > >>> >> >>> > On Mon, Apr 8, 2013 at 2:58 AM, Alon Bar-Lev <alonbl(a)redhat.com> >>> >> >>> > wrote: >>> >> >>> >> This error means that the /etc/pki/ovirt-engine/.truststore is >>> >> >>> >> unreadable >>> >> >>> >> or does not contain the /etc/pki/ovirt-engine/ca.pem certificate. >>> >> >>> >> >>> >> >>> >> Unfortunately, the pki administration is weak in current >>> >> >>> >> implementation, >>> >> >>> >> you can trace the installation script and checkout the calls to >>> >> >>> >> installCA.sh to how to reproduce, please note that password are >>> >> >>> >> encrypted >>> >> >>> >> in database using the private key locate in .keystore so if you are >>> >> >>> >> to >>> >> >>> >> re-generate anything remember to keep the engine private key. >>> >> >>> >> >>> >> >>> >> However, if you succeed in login, the remaining problem you have is >>> >> >>> >> the >>> >> >>> >> .truststore permissions and/or content. >>> >> >>> >> >>> >> >>> >> Regards, >>> >> >>> >> Alon Bar-Lev. >>> >> >>> >> >>> >> >>> >> ----- Original Message ----- >>> >> >>> >>> From: "Chris Smith" <whitehat237(a)gmail.com> >>> >> >>> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >>> >> >>> >>> Cc: Users(a)ovirt.org >>> >> >>> >>> Sent: Monday, April 8, 2013 9:46:46 AM >>> >> >>> >>> Subject: Re: [Users] Certificates and PKI seem to be broken after >>> >> >>> >>> yum >>> >> >>> >>> update >>> >> >>> >>> >>> >> >>> >>> After setting the .keystore owner and group owner to ovirt, and >>> >> >>> >>> rebooting, I now have a new error in engine.log >>> >> >>> >>> >>> >> >>> >>> 2013-04-08 02:39:16,787 ERROR >>> >> >>> >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >> >>> >>> (QuartzScheduler_Worker-95) Failed to decryptData must start with >>> >> >>> >>> zero >>> >> >>> >>> 2013-04-08 02:39:16,845 ERROR >>> >> >>> >>> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] >>> >> >>> >>> (QuartzScheduler_Worker-95) XML RPC error in command >>> >> >>> >>> GetCapabilitiesVDS ( Vds: transporter ), the error was: >>> >> >>> >>> java.util.concurrent.ExecutionException: >>> >> >>> >>> java.lang.reflect.InvocationTargetException, >>> >> >>> >>> SunCertPathBuilderException: unable to find valid certification >>> >> >>> >>> path >>> >> >>> >>> to requested target >>> >> >>> >>> >>> >> >>> >>> Are there other files that may have been affected that I can also >>> >> >>> >>> correct ownership or permissions on? >>> >> >>> >>> >>> >> >>> >>> On the host side, I get certificate unknown in vdsm.log >>> >> >>> >>> >>> >> >>> >>> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake >>> >> >>> >>> self._sslobj.do_handshake() >>> >> >>> >>> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL >>> >> >>> >>> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown >>> >> >>> >>> Thread-757809::ERROR::2013-04-08 >>> >> >>> >>> 02:44:05,424::SecureXMLRPCServer::73::root::(handle_error) client >>> >> >>> >>> ('172.16.23.8', 54489) >>> >> >>> >>> Traceback (most recent call last): >>> >> >>> >>> File "/usr/lib64/python2.7/SocketServer.py", line 582, in >>> >> >>> >>> process_request_thread >>> >> >>> >>> self.finish_request(request, client_address) >>> >> >>> >>> File >>> >> >>> >>> "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py", >>> >> >>> >>> line 66, in finish_request >>> >> >>> >>> request.do_handshake() >>> >> >>> >>> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake >>> >> >>> >>> self._sslobj.do_handshake() >>> >> >>> >>> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL >>> >> >>> >>> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown >>> >> >>> >>> >>> >> >>> >>> Is there a procedure for just re-establishing PKI and certs for >>> >> >>> >>> the >>> >> >>> >>> engine and hosts? >>> >> >>> >>> >>> >> >>> >>> On Sun, Apr 7, 2013 at 4:58 AM, Alon Bar-Lev <alonbl(a)redhat.com> >>> >> >>> >>> wrote: >>> >> >>> >>> > >>> >> >>> >>> > OK... you are running a very old version of engine (3.1). >>> >> >>> >>> > >>> >> >>> >>> > The upgrade did not upgraded into 3.2, so nothing as far as I >>> >> >>> >>> > know >>> >> >>> >>> > should >>> >> >>> >>> > have been changed. >>> >> >>> >>> > >>> >> >>> >>> > But the .keystore permissions is owned by root now, so some >>> >> >>> >>> > other >>> >> >>> >>> > package >>> >> >>> >>> > (maybe selinux-policy) changed permissions... >>> >> >>> >>> > >>> >> >>> >>> > The simplest way to test is to: >>> >> >>> >>> > # cp -a /etc/pki/ovirt-engine /etc/pki/ovirt-engine.backup1 >>> >> >>> >>> > # chown -R ovirt:ovirt /etc/pki/ovirt-engine >>> >> >>> >>> > >>> >> >>> >>> > But if that file permissions was changed, I can only assume >>> >> >>> >>> > other >>> >> >>> >>> > files >>> >> >>> >>> > were also changes... >>> >> >>> >>> > >>> >> >>> >>> > Regards, >>> >> >>> >>> > Alon >>> >> >>> >>> > >>> >> >>> >>> > ----- Original Message ----- >>> >> >>> >>> >> From: "Chris Smith" <whitehat237(a)gmail.com> >>> >> >>> >>> >> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >>> >> >>> >>> >> Cc: Users(a)ovirt.org >>> >> >>> >>> >> Sent: Sunday, April 7, 2013 11:51:17 AM >>> >> >>> >>> >> Subject: Re: [Users] Certificates and PKI seem to be broken >>> >> >>> >>> >> after >>> >> >>> >>> >> yum >>> >> >>> >>> >> update >>> >> >>> >>> >> >>> >> >>> >>> >> I did a yum update and rebooted. >>> >> >>> >>> >> >>> >> >>> >>> >> engine-upgrade was run on 24-March >>> >> >>> >>> >> >>> >> >>> >>> >> When run now, it states that there are no updates available. >>> >> >>> >>> >> >>> >> >>> >>> >> [root@reliant ~]# engine-upgrade >>> >> >>> >>> >> Loaded plugins: versionlock >>> >> >>> >>> >> Checking for updates... (This may take several minutes) >>> >> >>> >>> >> No updates available >>> >> >>> >>> >> >>> >> >>> >>> >> >>> >> >>> >>> >> [root@reliant ovirt-engine]# cat >>> >> >>> >>> >> ovirt-engine-upgrade_2013_03_24_12_04_06.log >>> >> >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found >>> >> >>> >>> >> existing >>> >> >>> >>> >> pgpass file, fetching DB host value >>> >> >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found >>> >> >>> >>> >> existing >>> >> >>> >>> >> pgpass file, fetching DB port value >>> >> >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found >>> >> >>> >>> >> existing >>> >> >>> >>> >> pgpass file, fetching DB admin value >>> >> >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::302::root:: Yum >>> >> >>> >>> >> list >>> >> >>> >>> >> updates >>> >> >>> >>> >> started >>> >> >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::273::root:: Yum >>> >> >>> >>> >> unlock >>> >> >>> >>> >> started >>> >> >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::285::root:: Yum >>> >> >>> >>> >> unlock >>> >> >>> >>> >> completed successfully >>> >> >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::308::root:: Getting >>> >> >>> >>> >> list >>> >> >>> >>> >> of packages to upgrade >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::engine-upgrade::260::root:: Yum >>> >> >>> >>> >> lock >>> >> >>> >>> >> started >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-backend' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-backend-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-config' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-config-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-genericapi' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-genericapi-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-notification-service' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-notification-service-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-restapi' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-restapi-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-tools-common' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-tools-common-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-userportal' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-userportal-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >> >>> >>> >> command --> '/bin/rpm -q ovirt-engine-webadmin-portal' >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >> >>> >>> >> ovirt-engine-webadmin-portal-3.1.0-4.fc17.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::286::root:: cmd = >>> >> >>> >>> >> /bin/rpm >>> >> >>> >>> >> -q ovirt-engine ovirt-engine-backend ovirt-engine-config >>> >> >>> >>> >> ovirt-engine-genericapi ovirt-engine-notification-service >>> >> >>> >>> >> ovirt-engine-restapi ovirt-engine-tools-common >>> >> >>> >>> >> ovirt-engine-userportal >>> >> >>> >>> >> ovirt-engine-webadmin-portal >> >>> >> >>> >>> >> /etc/yum/pluginconf.d/versionlock.list >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::291::root:: output = >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::292::root:: stderr = >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::293::root:: retcode = >>> >> >>> >>> >> 0 >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::270::root:: Yum >>> >> >>> >>> >> lock >>> >> >>> >>> >> completed successfully >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::320::root:: No >>> >> >>> >>> >> packages >>> >> >>> >>> >> marked for update >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::324::root:: >>> >> >>> >>> >> Installed >>> >> >>> >>> >> packages: >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::325::root:: >>> >> >>> >>> >> ['ovirt-engine-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-backend-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-config-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-dbscripts-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-genericapi-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-notification-service-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-restapi-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-setup-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-tools-common-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-userportal-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-engine-webadmin-portal-3.1.0-4.fc17.noarch', >>> >> >>> >>> >> 'ovirt-image-uploader-3.1.0-0.git9c42c8.fc17.noarch', >>> >> >>> >>> >> 'ovirt-iso-uploader-3.1.0-0.git1841d9.fc17.noarch', >>> >> >>> >>> >> 'ovirt-log-collector-3.1.0-0.git10d719.fc17.noarch', >>> >> >>> >>> >> 'vdsm-bootstrap-4.10.0-13.fc17.noarch'] >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::327::root:: Yum >>> >> >>> >>> >> list >>> >> >>> >>> >> updated completed successfully >>> >> >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::609::root:: No >>> >> >>> >>> >> updates >>> >> >>> >>> >> available >>> >> >>> >>> >> >>> >> >>> >>> >> >>> >> >>> >>> >> Here's what's installed. >>> >> >>> >>> >> >>> >> >>> >>> >> [root@reliant yum.repos.d]# yum list installed | grep ovirt >>> >> >>> >>> >> ovirt-engine.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-backend.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-cli.noarch 3.2.0.5-1.fc17 >>> >> >>> >>> >> @updates >>> >> >>> >>> >> ovirt-engine-config.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-dbscripts.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-genericapi.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-notification-service.noarch >>> >> >>> >>> >> 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-restapi.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-sdk.noarch 3.2.0.2-1.fc17 >>> >> >>> >>> >> @updates >>> >> >>> >>> >> ovirt-engine-setup.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-tools-common.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-userportal.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-engine-webadmin-portal.noarch 3.1.0-4.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-image-uploader.noarch 3.1.0-0.git9c42c8.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-iso-uploader.noarch 3.1.0-0.git1841d9.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-log-collector.noarch 3.1.0-0.git10d719.fc17 >>> >> >>> >>> >> @ovirt-stable >>> >> >>> >>> >> ovirt-release-fedora.noarch 4-2 >>> >> >>> >>> >> @/ovirt-release-fedora.noarch >>> >> >>> >>> >> >>> >> >>> >>> >> On Sun, Apr 7, 2013 at 2:16 AM, Alon Bar-Lev >>> >> >>> >>> >> <alonbl(a)redhat.com> >>> >> >>> >>> >> wrote: >>> >> >>> >>> >> > How exactly did you upgrade? >>> >> >>> >>> >> > >>> >> >>> >>> >> > Usually yum upgrade will not touch ovirt-engine packages as >>> >> >>> >>> >> > it >>> >> >>> >>> >> > is in >>> >> >>> >>> >> > yum >>> >> >>> >>> >> > version lock. >>> >> >>> >>> >> > From which version to which version have you upgraded? >>> >> >>> >>> >> > Have you run engine-upgrade utility? >>> >> >>> >>> >> > If you did not, please run it. >>> >> >>> >>> >> > If you did, please attach logs from >>> >> >>> >>> >> > /var/log/ovirt-engine/ovirt-engine-upgrade* >>> >> >>> >>> >> > >>> >> >>> >>> >> > Thanks! >>> >> >>> >>> >> > >>> >> >>> >>> >> > ----- Original Message ----- >>> >> >>> >>> >> >> From: "Chris Smith" <whitehat237(a)gmail.com> >>> >> >>> >>> >> >> To: Users(a)ovirt.org >>> >> >>> >>> >> >> Sent: Sunday, April 7, 2013 5:09:46 AM >>> >> >>> >>> >> >> Subject: [Users] Certificates and PKI seem to be broken >>> >> >>> >>> >> >> after >>> >> >>> >>> >> >> yum >>> >> >>> >>> >> >> update >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> I have lost the ability to manage the hosts or VM's using >>> >> >>> >>> >> >> ovirt >>> >> >>> >>> >> >> engine web interface after performing yum update on the >>> >> >>> >>> >> >> ovirt-engine >>> >> >>> >>> >> >> host, and on one Fedora 17 host. The data center is >>> >> >>> >>> >> >> offline, >>> >> >>> >>> >> >> and I >>> >> >>> >>> >> >> can't place the hosts into maintenance mode. I don't think >>> >> >>> >>> >> >> that >>> >> >>> >>> >> >> there >>> >> >>> >>> >> >> are any actions I can perform in the web interface at all. >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> From the logs it seems that PKI is broken between the engine >>> >> >>> >>> >> >> and >>> >> >>> >>> >> >> the >>> >> >>> >>> >> >> hosts. >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> I am wondering how I can restore or re-generate all of the >>> >> >>> >>> >> >> certificates and get the hosts communicating with the >>> >> >>> >>> >> >> ovirt-engine >>> >> >>> >>> >> >> again so that I can bring the data center back online. >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> I found this page which deals with changing the engine >>> >> >>> >>> >> >> hostname, >>> >> >>> >>> >> >> and >>> >> >>> >>> >> >> thus re-creating the certificates and keystore on the >>> >> >>> >>> >> >> ovirt-engine >>> >> >>> >>> >> >> node, and was wondering if this could help. Could I follow >>> >> >>> >>> >> >> this >>> >> >>> >>> >> >> process but keep the same hostname for the ovirt-engine >>> >> >>> >>> >> >> node? >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> http://wiki.ovirt.org/How_to_change_engine_host_name >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> Currently I have 3 VM's running on two hosts. The VM's are >>> >> >>> >>> >> >> up, >>> >> >>> >>> >> >> but >>> >> >>> >>> >> >> I >>> >> >>> >>> >> >> can't do anything with them in ovirt-engine. >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> Here's the latest activity from engine.log from the >>> >> >>> >>> >> >> ovirt-engine >>> >> >>> >>> >> >> node: >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> 2013-04-06 21:58:47,472 ERROR >>> >> >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >> >>> >>> >> >> (QuartzScheduler_Worker-61) Failed to >>> >> >>> >>> >> >> decryptjava.io.FileNotFoundException: >>> >> >>> >>> >> >> /etc/pki/ovirt-engine/.keystore >>> >> >>> >>> >> >> (Permission denied) >>> >> >>> >>> >> >> 2013-04-06 21:58:47,478 ERROR >>> >> >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >> >>> >>> >> >> (QuartzScheduler_Worker-62) Can't load keystore from file >>> >> >>> >>> >> >> "/etc/pki/ovirt-engine/.keystore".: >>> >> >>> >>> >> >> java.io.FileNotFoundException: >>> >> >>> >>> >> >> /etc/pki/ovirt-engine/.keystore (Permission denied) >>> >> >>> >>> >> >> at java.io.FileInputStream.open(Native Method) >>> >> >>> >>> >> >> [rt.jar:1.7.0_09-icedtea] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> java.io.FileInputStream.<init>(FileInputStream.java:138) >>> >> >>> >>> >> >> [rt.jar:1.7.0_09-icedtea] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.engineencryptutils.EncryptionUtils.getKeyStore(EncryptionUtils.java:214) >>> >> >>> >>> >> >> [engine-encryptutils.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.engineencryptutils.EncryptionUtils.decrypt(EncryptionUtils.java:139) >>> >> >>> >>> >> >> [engine-encryptutils.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsStaticDAODbFacadeImpl.decryptPassword(VdsStaticDAODbFacadeImpl.java:139) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:253) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:169) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.springframework.jdbc.core.RowMapperResultSetExtractor.extractData(RowMapperResultSetExtractor.java:92) >>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate$1.doInPreparedStatement(JdbcTemplate.java:653) >>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.execute(JdbcTemplate.java:591) >>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:641) >>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:670) >>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:702) >>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.executeCallInternal(PostgresDbEngineDialect.java:155) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.doExecute(PostgresDbEngineDialect.java:121) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.springframework.jdbc.core.simple.SimpleJdbcCall.execute(SimpleJdbcCall.java:164) >>> >> >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeImpl(SimpleJdbcCallsHandler.java:124) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadAndReturnMap(SimpleJdbcCallsHandler.java:75) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadList(SimpleJdbcCallsHandler.java:66) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeRead(SimpleJdbcCallsHandler.java:58) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:36) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:31) >>> >> >>> >>> >> >> [engine-dal.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.vdsbroker.VdsManager$1.runInTransaction(VdsManager.java:219) >>> >> >>> >>> >> >> [engine-vdsbroker.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInSuppressed(TransactionSupport.java:168) >>> >> >>> >>> >> >> [engine-utils.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:107) >>> >> >>> >>> >> >> [engine-utils.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.vdsbroker.VdsManager.OnTimer(VdsManager.java:215) >>> >> >>> >>> >> >> [engine-vdsbroker.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> sun.reflect.GeneratedMethodAccessor13.invoke(Unknown >>> >> >>> >>> >> >> Source) [:1.7.0_09-icedtea] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >>> >> >>> >>> >> >> [rt.jar:1.7.0_09-icedtea] >>> >> >>> >>> >> >> at java.lang.reflect.Method.invoke(Method.java:601) >>> >> >>> >>> >> >> [rt.jar:1.7.0_09-icedtea] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:64) >>> >> >>> >>> >> >> [engine-scheduler.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.quartz.core.JobRunShell.run(JobRunShell.java:213) >>> >> >>> >>> >> >> [quartz.jar:] >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) >>> >> >>> >>> >> >> [quartz.jar:] >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> 2013-04-06 21:58:47,576 ERROR >>> >> >>> >>> >> >> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] >>> >> >>> >>> >> >> (QuartzScheduler_Worker-61) XML RPC error in command >>> >> >>> >>> >> >> GetCapabilitiesVDS ( Vds: defiant ), the error was: >>> >> >>> >>> >> >> java.util.concurrent.ExecutionException: >>> >> >>> >>> >> >> java.lang.reflect.InvocationTargetException, >>> >> >>> >>> >> >> SSLPeerUnverifiedException: peer not authenticated >>> >> >>> >>> >> >> 2013-04-06 21:58:47,606 ERROR >>> >> >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >> >>> >>> >> >> (QuartzScheduler_Worker-62) Failed to >>> >> >>> >>> >> >> decryptjava.io.FileNotFoundException: >>> >> >>> >>> >> >> /etc/pki/ovirt-engine/.keystore >>> >> >>> >>> >> >> (Permission denied) >>> >> >>> >>> >> >> 2013-04-06 21:58:47,671 ERROR >>> >> >>> >>> >> >> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] >>> >> >>> >>> >> >> (QuartzScheduler_Worker-62) XML RPC error in command >>> >> >>> >>> >> >> GetCapabilitiesVDS ( Vds: transporter ), the error was: >>> >> >>> >>> >> >> java.util.concurrent.ExecutionException: >>> >> >>> >>> >> >> java.lang.reflect.InvocationTargetException, >>> >> >>> >>> >> >> SSLPeerUnverifiedException: peer not authenticated >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> Here's the message I seem to get over and over on the fedora >>> >> >>> >>> >> >> 17 >>> >> >>> >>> >> >> host in >>> >> >>> >>> >> >> vdsm.log >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL >>> >> >>> >>> >> >> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown >>> >> >>> >>> >> >> Thread-562520::ERROR::2013-04-06 >>> >> >>> >>> >> >> 22:08:44,268::SecureXMLRPCServer::73::root::(handle_error) >>> >> >>> >>> >> >> client >>> >> >>> >>> >> >> ('172.16.23.8', 36127) >>> >> >>> >>> >> >> Traceback (most recent call last): >>> >> >>> >>> >> >> File "/usr/lib64/python2.7/SocketServer.py", line 582, in >>> >> >>> >>> >> >> process_request_thread >>> >> >>> >>> >> >> self.finish_request(request, client_address) >>> >> >>> >>> >> >> File >>> >> >>> >>> >> >> "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py", >>> >> >>> >>> >> >> line 66, in finish_request >>> >> >>> >>> >> >> request.do_handshake() >>> >> >>> >>> >> >> File "/usr/lib64/python2.7/ssl.py", line 305, in >>> >> >>> >>> >> >> do_handshake >>> >> >>> >>> >> >> self._sslobj.do_handshake() >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> I'm also wondering about the permission denied on the >>> >> >>> >>> >> >> .keystore >>> >> >>> >>> >> >> directory. What should the permissions be? Here's what >>> >> >>> >>> >> >> they >>> >> >>> >>> >> >> are >>> >> >>> >>> >> >> currently. >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> [root@reliant pki]# ls -ldZ /etc/pki/ovirt-engine/.keystore >>> >> >>> >>> >> >> -rwxr-x---. root root unconfined_u:object_r:cert_t:s0 >>> >> >>> >>> >> >> /etc/pki/ovirt-engine/.keystore >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> I also seem to have a backup of the ovirt-engine directory >>> >> >>> >>> >> >> at >>> >> >>> >>> >> >> the >>> >> >>> >>> >> >> time >>> >> >>> >>> >> >> the update was performed, but replacing ovirt-engine with >>> >> >>> >>> >> >> the >>> >> >>> >>> >> >> backup >>> >> >>> >>> >> >> does no good. >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> I appreciate any assistance, and please let me know what >>> >> >>> >>> >> >> other >>> >> >>> >>> >> >> information I can post to help with this. >>> >> >>> >>> >> >> >>> >> >>> >>> >> >> Thanks >>> >> >>> >>> >> >> _______________________________________________ >>> >> >>> >>> >> >> Users mailing list >>> >> >>> >>> >> >> Users(a)ovirt.org >>> >> >>> >>> >> >> http://lists.ovirt.org/mailman/listinfo/users >>> >> >>> >>> >> >> >>> >> >>> >>> >> >>> >> >>> >>> >>> >> >>> >>> >> >>>

2 1

Re: [Users] Certificates and PKI seem to be broken after yum update
by Chris Smith 18 Apr '13

18 Apr '13

On Thu, Apr 18, 2013 at 6:44 PM, Chris Smith <whitehat237(a)gmail.com> wrote: > I made a backup of the .truststore, and then followed the steps and > then rebooted both the ovirt-engine and one of the hosts, and > everything worked properly. > > If I run it again, or enter the wrong password it throws an error > about the key store already existing, or that the password was wrong > so I'm pretty sure it's good. > > vdsm.log on the host still shows: > > Traceback (most recent call last): > File "/usr/lib64/python2.7/SocketServer.py", line 582, in > process_request_thread > self.finish_request(request, client_address) > File "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py", > line 66, in finish_request > request.do_handshake() > File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake > self._sslobj.do_handshake() > SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL > routines:SSL3_READ_BYTES:sslv3 alert certificate unknown > > engine.log on the host shows: > > 2013-04-18 18:42:43,632 ERROR > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] > (QuartzScheduler_Worker-68) Failed to decryptData must start with zero > 2013-04-18 18:42:43,642 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] > (QuartzScheduler_Worker-68) XML RPC error in command > GetCapabilitiesVDS ( Vds: transporter ), the error was: > java.util.concurrent.ExecutionException: > java.lang.reflect.InvocationTargetException, > SunCertPathBuilderException: unable to find valid certification path > to requested target > > > On Thu, Apr 18, 2013 at 4:06 AM, Alon Bar-Lev <alonbl(a)redhat.com> wrote: >> >> You should ask these question in separate thread so people may pick them up. >> >> For the .truststore, try to remove it and then execute: >> >> # rm -f /etc/pki/ovirt-engine/.truststore >> # keytool -import -noprompt -trustcacerts -alias cacert -keypass mypass -file /etc/pki/ovirt-engine/certs/ca.der -keystore /etc/pki/ovirt-engine/.truststore -storepass mypass >> # chown ovirt:ovirt /etc/pki/ovirt-engine/.truststore >> >> It should recreate the truststore with the ca certificate you have. >> >> ----- Original Message ----- >>> From: "Chris Smith" <whitehat237(a)gmail.com> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >>> Cc: Users(a)ovirt.org >>> Sent: Thursday, April 18, 2013 7:18:27 AM >>> Subject: Re: [Users] Certificates and PKI seem to be broken after yum update >>> >>> If it would be easier than re-setting up the certificates, I'm also >>> willing to just start over and rebuild, but I would like to export the >>> VM's I have first. >>> One of them is a spacewalk server, another runs DNS, and DHCP for my >>> test network, and I have an asterisk server. I would like to avoid >>> having to re-create all of them. >>> >>> The VM's are up and running now, so I could export all of the >>> configurations / backup the file systems, etc. >>> >>> Preferably I could export the VM's to an NFS export domain, or a >>> mounted NFS share so that I can import them to the new storage domain, >>> after I run engine-cleanup and get everything set back up. Is there >>> an easy way to do this? Is it possible to create and attach an NFS >>> export domain directly from the CLI without access to the ovirt >>> manager without communication between the manager and hosts due to the >>> pki issue? Can I export the VM's directly from the hosts to a >>> standard NFS share? >>> >>> Is there an equivalent xml and image file for the VM? >>> >>> My storage domain is iscsi and is served out from another server over >>> 4 bonded 1 Gbps copper links. >>> >>> >>> >>> On Wed, Apr 17, 2013 at 11:46 PM, Chris Smith <whitehat237(a)gmail.com> wrote: >>> > I checked the .truststore on the ovirt engine, and it seems fine. >>> > >>> > [root@reliant ovirt-engine]# ls -l .truststore >>> > -rwxr-x---. 1 ovirt ovirt 918 Apr 6 21:56 .truststore >>> > >>> > It's not zero bytes anyway. >>> > >>> > It's also the same size as the .truststore in the ovirt engine backups. >>> > >>> > [root@reliant ovirt-engine-backups]# find ./ -name .truststore -exec ls -l >>> > {} \; >>> > -rwxr-x---. 1 ovirt ovirt 918 Aug 26 2012 >>> > ./ovirt-engine-2013_03_23_03_09_09/ovirt-engine/.truststore >>> > -rwxr-x---. 1 root root 918 Mar 24 12:42 >>> > ./ovirt-engine-2013_03_24_11_15_19/ovirt-engine-2013_03_23_03_09_09/ovirt-engine/.truststore >>> > >>> > I haven't looked at the installCA.sh script yet. >>> > >>> > On Mon, Apr 8, 2013 at 2:58 AM, Alon Bar-Lev <alonbl(a)redhat.com> wrote: >>> >> This error means that the /etc/pki/ovirt-engine/.truststore is unreadable >>> >> or does not contain the /etc/pki/ovirt-engine/ca.pem certificate. >>> >> >>> >> Unfortunately, the pki administration is weak in current implementation, >>> >> you can trace the installation script and checkout the calls to >>> >> installCA.sh to how to reproduce, please note that password are encrypted >>> >> in database using the private key locate in .keystore so if you are to >>> >> re-generate anything remember to keep the engine private key. >>> >> >>> >> However, if you succeed in login, the remaining problem you have is the >>> >> .truststore permissions and/or content. >>> >> >>> >> Regards, >>> >> Alon Bar-Lev. >>> >> >>> >> ----- Original Message ----- >>> >>> From: "Chris Smith" <whitehat237(a)gmail.com> >>> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >>> >>> Cc: Users(a)ovirt.org >>> >>> Sent: Monday, April 8, 2013 9:46:46 AM >>> >>> Subject: Re: [Users] Certificates and PKI seem to be broken after yum >>> >>> update >>> >>> >>> >>> After setting the .keystore owner and group owner to ovirt, and >>> >>> rebooting, I now have a new error in engine.log >>> >>> >>> >>> 2013-04-08 02:39:16,787 ERROR >>> >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >>> (QuartzScheduler_Worker-95) Failed to decryptData must start with zero >>> >>> 2013-04-08 02:39:16,845 ERROR >>> >>> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] >>> >>> (QuartzScheduler_Worker-95) XML RPC error in command >>> >>> GetCapabilitiesVDS ( Vds: transporter ), the error was: >>> >>> java.util.concurrent.ExecutionException: >>> >>> java.lang.reflect.InvocationTargetException, >>> >>> SunCertPathBuilderException: unable to find valid certification path >>> >>> to requested target >>> >>> >>> >>> Are there other files that may have been affected that I can also >>> >>> correct ownership or permissions on? >>> >>> >>> >>> On the host side, I get certificate unknown in vdsm.log >>> >>> >>> >>> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake >>> >>> self._sslobj.do_handshake() >>> >>> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL >>> >>> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown >>> >>> Thread-757809::ERROR::2013-04-08 >>> >>> 02:44:05,424::SecureXMLRPCServer::73::root::(handle_error) client >>> >>> ('172.16.23.8', 54489) >>> >>> Traceback (most recent call last): >>> >>> File "/usr/lib64/python2.7/SocketServer.py", line 582, in >>> >>> process_request_thread >>> >>> self.finish_request(request, client_address) >>> >>> File "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py", >>> >>> line 66, in finish_request >>> >>> request.do_handshake() >>> >>> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake >>> >>> self._sslobj.do_handshake() >>> >>> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL >>> >>> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown >>> >>> >>> >>> Is there a procedure for just re-establishing PKI and certs for the >>> >>> engine and hosts? >>> >>> >>> >>> On Sun, Apr 7, 2013 at 4:58 AM, Alon Bar-Lev <alonbl(a)redhat.com> wrote: >>> >>> > >>> >>> > OK... you are running a very old version of engine (3.1). >>> >>> > >>> >>> > The upgrade did not upgraded into 3.2, so nothing as far as I know >>> >>> > should >>> >>> > have been changed. >>> >>> > >>> >>> > But the .keystore permissions is owned by root now, so some other >>> >>> > package >>> >>> > (maybe selinux-policy) changed permissions... >>> >>> > >>> >>> > The simplest way to test is to: >>> >>> > # cp -a /etc/pki/ovirt-engine /etc/pki/ovirt-engine.backup1 >>> >>> > # chown -R ovirt:ovirt /etc/pki/ovirt-engine >>> >>> > >>> >>> > But if that file permissions was changed, I can only assume other files >>> >>> > were also changes... >>> >>> > >>> >>> > Regards, >>> >>> > Alon >>> >>> > >>> >>> > ----- Original Message ----- >>> >>> >> From: "Chris Smith" <whitehat237(a)gmail.com> >>> >>> >> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >>> >>> >> Cc: Users(a)ovirt.org >>> >>> >> Sent: Sunday, April 7, 2013 11:51:17 AM >>> >>> >> Subject: Re: [Users] Certificates and PKI seem to be broken after yum >>> >>> >> update >>> >>> >> >>> >>> >> I did a yum update and rebooted. >>> >>> >> >>> >>> >> engine-upgrade was run on 24-March >>> >>> >> >>> >>> >> When run now, it states that there are no updates available. >>> >>> >> >>> >>> >> [root@reliant ~]# engine-upgrade >>> >>> >> Loaded plugins: versionlock >>> >>> >> Checking for updates... (This may take several minutes) >>> >>> >> No updates available >>> >>> >> >>> >>> >> >>> >>> >> [root@reliant ovirt-engine]# cat >>> >>> >> ovirt-engine-upgrade_2013_03_24_12_04_06.log >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found existing >>> >>> >> pgpass file, fetching DB host value >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found existing >>> >>> >> pgpass file, fetching DB port value >>> >>> >> 2013-03-24 12:04:06::DEBUG::common_utils::585::root:: found existing >>> >>> >> pgpass file, fetching DB admin value >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::302::root:: Yum list >>> >>> >> updates >>> >>> >> started >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::273::root:: Yum unlock >>> >>> >> started >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::285::root:: Yum unlock >>> >>> >> completed successfully >>> >>> >> 2013-03-24 12:04:07::DEBUG::engine-upgrade::308::root:: Getting list >>> >>> >> of packages to upgrade >>> >>> >> 2013-03-24 12:04:27::DEBUG::engine-upgrade::260::root:: Yum lock >>> >>> >> started >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine-backend' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-backend-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine-config' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-config-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine-genericapi' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-genericapi-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine-notification-service' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-notification-service-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine-restapi' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-restapi-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine-tools-common' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-tools-common-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine-userportal' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-userportal-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::309::root:: Executing >>> >>> >> command --> '/bin/rpm -q ovirt-engine-webadmin-portal' >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::335::root:: output = >>> >>> >> ovirt-engine-webadmin-portal-3.1.0-4.fc17.noarch >>> >>> >> >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::336::root:: stderr = >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::337::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:27::DEBUG::common_utils::286::root:: cmd = /bin/rpm >>> >>> >> -q ovirt-engine ovirt-engine-backend ovirt-engine-config >>> >>> >> ovirt-engine-genericapi ovirt-engine-notification-service >>> >>> >> ovirt-engine-restapi ovirt-engine-tools-common ovirt-engine-userportal >>> >>> >> ovirt-engine-webadmin-portal >> /etc/yum/pluginconf.d/versionlock.list >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::291::root:: output = >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::292::root:: stderr = >>> >>> >> 2013-03-24 12:04:28::DEBUG::common_utils::293::root:: retcode = 0 >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::270::root:: Yum lock >>> >>> >> completed successfully >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::320::root:: No packages >>> >>> >> marked for update >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::324::root:: Installed >>> >>> >> packages: >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::325::root:: >>> >>> >> ['ovirt-engine-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-backend-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-config-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-dbscripts-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-genericapi-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-notification-service-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-restapi-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-setup-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-tools-common-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-userportal-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-engine-webadmin-portal-3.1.0-4.fc17.noarch', >>> >>> >> 'ovirt-image-uploader-3.1.0-0.git9c42c8.fc17.noarch', >>> >>> >> 'ovirt-iso-uploader-3.1.0-0.git1841d9.fc17.noarch', >>> >>> >> 'ovirt-log-collector-3.1.0-0.git10d719.fc17.noarch', >>> >>> >> 'vdsm-bootstrap-4.10.0-13.fc17.noarch'] >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::327::root:: Yum list >>> >>> >> updated completed successfully >>> >>> >> 2013-03-24 12:04:28::DEBUG::engine-upgrade::609::root:: No updates >>> >>> >> available >>> >>> >> >>> >>> >> >>> >>> >> Here's what's installed. >>> >>> >> >>> >>> >> [root@reliant yum.repos.d]# yum list installed | grep ovirt >>> >>> >> ovirt-engine.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-backend.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-cli.noarch 3.2.0.5-1.fc17 >>> >>> >> @updates >>> >>> >> ovirt-engine-config.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-dbscripts.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-genericapi.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-notification-service.noarch >>> >>> >> 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-restapi.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-sdk.noarch 3.2.0.2-1.fc17 >>> >>> >> @updates >>> >>> >> ovirt-engine-setup.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-tools-common.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-userportal.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-engine-webadmin-portal.noarch 3.1.0-4.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-image-uploader.noarch 3.1.0-0.git9c42c8.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-iso-uploader.noarch 3.1.0-0.git1841d9.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-log-collector.noarch 3.1.0-0.git10d719.fc17 >>> >>> >> @ovirt-stable >>> >>> >> ovirt-release-fedora.noarch 4-2 >>> >>> >> @/ovirt-release-fedora.noarch >>> >>> >> >>> >>> >> On Sun, Apr 7, 2013 at 2:16 AM, Alon Bar-Lev <alonbl(a)redhat.com> >>> >>> >> wrote: >>> >>> >> > How exactly did you upgrade? >>> >>> >> > >>> >>> >> > Usually yum upgrade will not touch ovirt-engine packages as it is in >>> >>> >> > yum >>> >>> >> > version lock. >>> >>> >> > From which version to which version have you upgraded? >>> >>> >> > Have you run engine-upgrade utility? >>> >>> >> > If you did not, please run it. >>> >>> >> > If you did, please attach logs from >>> >>> >> > /var/log/ovirt-engine/ovirt-engine-upgrade* >>> >>> >> > >>> >>> >> > Thanks! >>> >>> >> > >>> >>> >> > ----- Original Message ----- >>> >>> >> >> From: "Chris Smith" <whitehat237(a)gmail.com> >>> >>> >> >> To: Users(a)ovirt.org >>> >>> >> >> Sent: Sunday, April 7, 2013 5:09:46 AM >>> >>> >> >> Subject: [Users] Certificates and PKI seem to be broken after yum >>> >>> >> >> update >>> >>> >> >> >>> >>> >> >> I have lost the ability to manage the hosts or VM's using ovirt >>> >>> >> >> engine web interface after performing yum update on the >>> >>> >> >> ovirt-engine >>> >>> >> >> host, and on one Fedora 17 host. The data center is offline, and I >>> >>> >> >> can't place the hosts into maintenance mode. I don't think that >>> >>> >> >> there >>> >>> >> >> are any actions I can perform in the web interface at all. >>> >>> >> >> >>> >>> >> >> From the logs it seems that PKI is broken between the engine and >>> >>> >> >> the >>> >>> >> >> hosts. >>> >>> >> >> >>> >>> >> >> I am wondering how I can restore or re-generate all of the >>> >>> >> >> certificates and get the hosts communicating with the ovirt-engine >>> >>> >> >> again so that I can bring the data center back online. >>> >>> >> >> >>> >>> >> >> I found this page which deals with changing the engine hostname, >>> >>> >> >> and >>> >>> >> >> thus re-creating the certificates and keystore on the ovirt-engine >>> >>> >> >> node, and was wondering if this could help. Could I follow this >>> >>> >> >> process but keep the same hostname for the ovirt-engine node? >>> >>> >> >> >>> >>> >> >> http://wiki.ovirt.org/How_to_change_engine_host_name >>> >>> >> >> >>> >>> >> >> Currently I have 3 VM's running on two hosts. The VM's are up, but >>> >>> >> >> I >>> >>> >> >> can't do anything with them in ovirt-engine. >>> >>> >> >> >>> >>> >> >> >>> >>> >> >> Here's the latest activity from engine.log from the ovirt-engine >>> >>> >> >> node: >>> >>> >> >> >>> >>> >> >> 2013-04-06 21:58:47,472 ERROR >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >>> >> >> (QuartzScheduler_Worker-61) Failed to >>> >>> >> >> decryptjava.io.FileNotFoundException: >>> >>> >> >> /etc/pki/ovirt-engine/.keystore >>> >>> >> >> (Permission denied) >>> >>> >> >> 2013-04-06 21:58:47,478 ERROR >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >>> >> >> (QuartzScheduler_Worker-62) Can't load keystore from file >>> >>> >> >> "/etc/pki/ovirt-engine/.keystore".: java.io.FileNotFoundException: >>> >>> >> >> /etc/pki/ovirt-engine/.keystore (Permission denied) >>> >>> >> >> at java.io.FileInputStream.open(Native Method) >>> >>> >> >> [rt.jar:1.7.0_09-icedtea] >>> >>> >> >> at java.io.FileInputStream.<init>(FileInputStream.java:138) >>> >>> >> >> [rt.jar:1.7.0_09-icedtea] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.engineencryptutils.EncryptionUtils.getKeyStore(EncryptionUtils.java:214) >>> >>> >> >> [engine-encryptutils.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.engineencryptutils.EncryptionUtils.decrypt(EncryptionUtils.java:139) >>> >>> >> >> [engine-encryptutils.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dao.VdsStaticDAODbFacadeImpl.decryptPassword(VdsStaticDAODbFacadeImpl.java:139) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:253) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:169) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.springframework.jdbc.core.RowMapperResultSetExtractor.extractData(RowMapperResultSetExtractor.java:92) >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >>> >> >> at >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate$1.doInPreparedStatement(JdbcTemplate.java:653) >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >>> >> >> at >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.execute(JdbcTemplate.java:591) >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >>> >> >> at >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:641) >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >>> >> >> at >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:670) >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >>> >> >> at >>> >>> >> >> org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:702) >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.executeCallInternal(PostgresDbEngineDialect.java:155) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.doExecute(PostgresDbEngineDialect.java:121) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.springframework.jdbc.core.simple.SimpleJdbcCall.execute(SimpleJdbcCall.java:164) >>> >>> >> >> [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeImpl(SimpleJdbcCallsHandler.java:124) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadAndReturnMap(SimpleJdbcCallsHandler.java:75) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadList(SimpleJdbcCallsHandler.java:66) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeRead(SimpleJdbcCallsHandler.java:58) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:36) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:31) >>> >>> >> >> [engine-dal.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.vdsbroker.VdsManager$1.runInTransaction(VdsManager.java:219) >>> >>> >> >> [engine-vdsbroker.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInSuppressed(TransactionSupport.java:168) >>> >>> >> >> [engine-utils.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:107) >>> >>> >> >> [engine-utils.jar:] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.vdsbroker.VdsManager.OnTimer(VdsManager.java:215) >>> >>> >> >> [engine-vdsbroker.jar:] >>> >>> >> >> at sun.reflect.GeneratedMethodAccessor13.invoke(Unknown >>> >>> >> >> Source) [:1.7.0_09-icedtea] >>> >>> >> >> at >>> >>> >> >> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >>> >>> >> >> [rt.jar:1.7.0_09-icedtea] >>> >>> >> >> at java.lang.reflect.Method.invoke(Method.java:601) >>> >>> >> >> [rt.jar:1.7.0_09-icedtea] >>> >>> >> >> at >>> >>> >> >> org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:64) >>> >>> >> >> [engine-scheduler.jar:] >>> >>> >> >> at org.quartz.core.JobRunShell.run(JobRunShell.java:213) >>> >>> >> >> [quartz.jar:] >>> >>> >> >> at >>> >>> >> >> org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) >>> >>> >> >> [quartz.jar:] >>> >>> >> >> >>> >>> >> >> 2013-04-06 21:58:47,576 ERROR >>> >>> >> >> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] >>> >>> >> >> (QuartzScheduler_Worker-61) XML RPC error in command >>> >>> >> >> GetCapabilitiesVDS ( Vds: defiant ), the error was: >>> >>> >> >> java.util.concurrent.ExecutionException: >>> >>> >> >> java.lang.reflect.InvocationTargetException, >>> >>> >> >> SSLPeerUnverifiedException: peer not authenticated >>> >>> >> >> 2013-04-06 21:58:47,606 ERROR >>> >>> >> >> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> >>> >> >> (QuartzScheduler_Worker-62) Failed to >>> >>> >> >> decryptjava.io.FileNotFoundException: >>> >>> >> >> /etc/pki/ovirt-engine/.keystore >>> >>> >> >> (Permission denied) >>> >>> >> >> 2013-04-06 21:58:47,671 ERROR >>> >>> >> >> [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] >>> >>> >> >> (QuartzScheduler_Worker-62) XML RPC error in command >>> >>> >> >> GetCapabilitiesVDS ( Vds: transporter ), the error was: >>> >>> >> >> java.util.concurrent.ExecutionException: >>> >>> >> >> java.lang.reflect.InvocationTargetException, >>> >>> >> >> SSLPeerUnverifiedException: peer not authenticated >>> >>> >> >> >>> >>> >> >> >>> >>> >> >> Here's the message I seem to get over and over on the fedora 17 >>> >>> >> >> host in >>> >>> >> >> vdsm.log >>> >>> >> >> >>> >>> >> >> SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL >>> >>> >> >> routines:SSL3_READ_BYTES:sslv3 alert certificate unknown >>> >>> >> >> Thread-562520::ERROR::2013-04-06 >>> >>> >> >> 22:08:44,268::SecureXMLRPCServer::73::root::(handle_error) client >>> >>> >> >> ('172.16.23.8', 36127) >>> >>> >> >> Traceback (most recent call last): >>> >>> >> >> File "/usr/lib64/python2.7/SocketServer.py", line 582, in >>> >>> >> >> process_request_thread >>> >>> >> >> self.finish_request(request, client_address) >>> >>> >> >> File >>> >>> >> >> "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py", >>> >>> >> >> line 66, in finish_request >>> >>> >> >> request.do_handshake() >>> >>> >> >> File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake >>> >>> >> >> self._sslobj.do_handshake() >>> >>> >> >> >>> >>> >> >> I'm also wondering about the permission denied on the .keystore >>> >>> >> >> directory. What should the permissions be? Here's what they are >>> >>> >> >> currently. >>> >>> >> >> >>> >>> >> >> [root@reliant pki]# ls -ldZ /etc/pki/ovirt-engine/.keystore >>> >>> >> >> -rwxr-x---. root root unconfined_u:object_r:cert_t:s0 >>> >>> >> >> /etc/pki/ovirt-engine/.keystore >>> >>> >> >> >>> >>> >> >> I also seem to have a backup of the ovirt-engine directory at the >>> >>> >> >> time >>> >>> >> >> the update was performed, but replacing ovirt-engine with the >>> >>> >> >> backup >>> >>> >> >> does no good. >>> >>> >> >> >>> >>> >> >> I appreciate any assistance, and please let me know what other >>> >>> >> >> information I can post to help with this. >>> >>> >> >> >>> >>> >> >> Thanks >>> >>> >> >> _______________________________________________ >>> >>> >> >> Users mailing list >>> >>> >> >> Users(a)ovirt.org >>> >>> >> >> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >> >> >>> >>> >> >>> >>> >>>

2 3

[Users] unable to make a template from VM
by Alex Leonhardt 18 Apr '13

18 Apr '13

Hi All, Anyone seen the attached error ? I'm suddenly unable to make a template from a VM that has a pre-allocated disk. The VM is based on a different template also still in the system, which I am also unable to remove. The error in engine.log only says this: 2013-04-16 08:17:24,497 WARN [org.ovirt.engine.core.bll.AddVmTemplateCommand] (ajp--0.0.0.0-8009-2) [4021a4d2] CanDoAction of action AddVmTemplate failed. Reasons:VAR__ACTION__ADD,VAR__TYPE__VM_TEMPLATE,ACTION_TYPE_FAILED_VM_HAS_NO_DISKS There is nothing special coming up in the vdsm.log / to filter out debug messages, i've changed log levels to INFO and higher earlier today - still, when this error occurs, the only message I can see in vdsm.log are the usual "can I write to the storage domain" ones .. Thread-493::INFO::2013-04-16 08:17:42,873::logUtils::37::dispatcher::(wrapper) Run and protect: getSpmStatus(spUUID='353b073e-dfb0-46e6-8ac5-344ff251ca91', options=None) Thread-493::INFO::2013-04-16 08:17:42,874::logUtils::39::dispatcher::(wrapper) Run and protect: getSpmStatus, Return response: {'spm_st': {'spmId': 1, 'spmStatus': 'SPM', 'spmLver': 19}} Thread-494::INFO::2013-04-16 08:17:42,886::logUtils::37::dispatcher::(wrapper) Run and protect: getStoragePoolInfo(spUUID='353b073e-dfb0-46e6-8ac5-344ff251ca91', options=None) Thread-494::INFO::2013-04-16 08:17:42,888::logUtils::39::dispatcher::(wrapper) Run and protect: getStoragePoolInfo, Return response: {'info': {'spm_id': 1, 'master_uuid': '7d0f78ff-aa25-4b64-a2ea-c8a65beda616', 'name': 'ALE-LAB', 'version': '2', 'domains': u'35fd8ea5-8bbc-4343-881e-3f78626420e3:Active,55758a74-5c36-4364-bcb0-acae969acd64:Active,7d0f78ff-aa25-4b64-a2ea-c8a65beda616:Active,84e33e25-f4af-4b3c-9780-8a116a737236:Active,2c7fc39e-767c-4c97-946f-321468451c61:Active', 'pool_status': 'connected', 'isoprefix': u'/rhev/data-center/353b073e-dfb0-46e6-8ac5-344ff251ca91/55758a74-5c36-4364-bcb0-acae969acd64/images/11111111-1111-1111-1111-111111111111', 'type': 'ISCSI', 'master_ver': 4, 'lver': 19}, 'dominfo': {u'35fd8ea5-8bbc-4343-881e-3f78626420e3': {'status': u'Active', 'diskfree': '163208757248', 'alerts': [], 'disktotal': '261858787328'}, u'55758a74-5c36-4364-bcb0-acae969acd64': {'status': u'Active', 'diskfree': '318918098944', 'alerts': [], 'disktotal': '802458435584'}, u'7d0f78ff-aa25-4b64-a2ea-c8a65beda616': {'status': u'Active', 'diskfree': '23756537856', 'alerts': [], 'disktotal': '73014444032'}, u'84e33e25-f4af-4b3c-9780-8a116a737236': {'status': u'Active', 'diskfree': '49153048576', 'alerts': [], 'disktotal': '246076669952'}, u'2c7fc39e-767c-4c97-946f-321468451c61': {'status': u'Active', 'diskfree': '26306674688', 'alerts': [], 'disktotal': '104555610112'}}} Any help please ? FWIW, I am able to export the host to the export domain. Alex -- | RHCE | Sen Sys Engineer / Platform Architect | www.vcore.co | www.vsearchcloud.com |

2 4

Re: [Users] [oss-security] CVE-2012-XXYY Request -- google-authenticator: Information disclosure due insecure requirement on the secrets file
by Michael Pasternak 18 Apr '13

18 Apr '13

FYI On 04/18/2013 01:45 PM, Jan Lieskovsky wrote: > Hello Kurt, Steve, Alexander, vendors, > > as noted in [1]: > > An information disclosure file was found in the way google-authenticator, > a pluggable authentication module (PAM) which allows login using one-time > passcodes conforming to the open standards developed by the Initiative for > Open Authentication (OATH), performed management of its secret / state file > in certain configurations. Due the lack of 'user=' option the secret file > was previously required to be user-readable, allowing (in certain cases) > a local attacker to obtain the (pre)shared client-to-authentication-server > secret, possibly leading to victim's account impersonation. > > A different vulnerability than CVE-2013-0258. > > References: > [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129 > [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129#10 > [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129#20 > [4] https://bugzilla.redhat.com/show_bug.cgi?id=953505 > > Relevant upstream patch: > [5] https://code.google.com/p/google-authenticator/source/detail?r=c3414e9857ad… > > @Alexander - since I am not sure I have described the attack vector above > properly, please correct me if / where required. > > @Kurt * the CVE-2012- identifier should be allocated to this issue, since > the security implications of this problem are for the first time > mentioned here: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129#10 (2012-09-22), > > * from what I have looked, there doesn't seem to be: > http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=authenticator > > a CVE identifier allocated to this issue yet (as noted above > CVE-2013-0258 from that list is different issue). > > => could you allocate one? > > Thank you && Regards, Jan. > -- > Jan iankko Lieskovsky / Red Hat Security Response Team -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 0

[Users] oVirt storage is down and doesn't come up
by Limor Gavish 18 Apr '13

18 Apr '13

Hi, For some reason, without doing anything, all the storage domains became down and restarting VDSM or the entire machine do not bring it up. I am not using lvm The following errors appear several times in vdsm.log (full logs are attached): Thread-22::WARNING::2013-04-12 19:00:08,597::lvm::378::Storage.LVM::(_reloadvgs) lvm vgs failed: 5 [] [' Volume group "1083422e-a5db-41b6-b667-b9ef1ef244f0" not found'] Thread-22::DEBUG::2013-04-12 19:00:08,598::lvm::402::OperationMutex::(_reloadvgs) Operation 'lvm reload operation' released the operation mutex Thread-22::DEBUG::2013-04-12 19:00:08,681::resourceManager::615::ResourceManager::(releaseResource) Trying to release resource 'Storage.5849b030-626e-47cb-ad90-3ce782d831b3' Thread-22::DEBUG::2013-04-12 19:00:08,681::resourceManager::634::ResourceManager::(releaseResource) Released resource 'Storage.5849b030-626e-47cb-ad90-3ce782d831b3' (0 active users) Thread-22::DEBUG::2013-04-12 19:00:08,681::resourceManager::640::ResourceManager::(releaseResource) Resource 'Storage.5849b030-626e-47cb-ad90-3ce782d831b3' is free, finding out if anyone is waiting for it. Thread-22::DEBUG::2013-04-12 19:00:08,682::resourceManager::648::ResourceManager::(releaseResource) No one is waiting for resource 'Storage.5849b030-626e-47cb-ad90-3ce782d831b3', Clearing records. Thread-22::ERROR::2013-04-12 19:00:08,682::task::850::TaskManager.Task::(_setError) Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::Unexpected error Traceback (most recent call last): File "/usr/share/vdsm/storage/task.py", line 857, in _run return fn(*args, **kargs) File "/usr/share/vdsm/logUtils.py", line 45, in wrapper res = f(*args, **kwargs) File "/usr/share/vdsm/storage/hsm.py", line 939, in connectStoragePool masterVersion, options) File "/usr/share/vdsm/storage/hsm.py", line 986, in _connectStoragePool res = pool.connect(hostID, scsiKey, msdUUID, masterVersion) File "/usr/share/vdsm/storage/sp.py", line 695, in connect self.__rebuild(msdUUID=msdUUID, masterVersion=masterVersion) File "/usr/share/vdsm/storage/sp.py", line 1232, in __rebuild masterVersion=masterVersion) File "/usr/share/vdsm/storage/sp.py", line 1576, in getMasterDomain raise se.StoragePoolMasterNotFound(self.spUUID, msdUUID) StoragePoolMasterNotFound: Cannot find master domain: 'spUUID=5849b030-626e-47cb-ad90-3ce782d831b3, msdUUID=1083422e-a5db-41b6-b667-b9ef1ef244f0' Thread-22::DEBUG::2013-04-12 19:00:08,685::task::869::TaskManager.Task::(_run) Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::Task._run: e35a22ac-771a-4916-851f-2fe9d60a0ae6 ('5849b030-626e-47cb-ad90-3ce782d831b3', 1, '5849b030-626e-47cb-ad90-3ce782d831b3', '1083422e-a5db-41b6-b667-b9ef1ef244f0', 3942) {} failed - stopping task Thread-22::DEBUG::2013-04-12 19:00:08,685::task::1194::TaskManager.Task::(stop) Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::stopping in state preparing (force False) Thread-22::DEBUG::2013-04-12 19:00:08,685::task::974::TaskManager.Task::(_decref) Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::ref 1 aborting True Thread-22::INFO::2013-04-12 19:00:08,686::task::1151::TaskManager.Task::(prepare) Task=`e35a22ac-771a-4916-851f-2fe9d60a0ae6`::aborting: Task is aborted: 'Cannot find master domain' - code 304 *[wil@bufferoverflow ~]$ **sudo vgs --noheadings --units b --nosuffix --separator \| -o uuid,name,attr,size,free,extent_size,extent_count,free_count,tags,vg_mda_size,vg_mda_free * No volume groups found *[wil@bufferoverflow ~]$ **mount* proc on /proc type proc (rw,nosuid,nodev,noexec,relatime) sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime) devtmpfs on /dev type devtmpfs (rw,nosuid,size=8131256k,nr_inodes=2032814,mode=755) securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime) tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev) devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000) tmpfs on /run type tmpfs (rw,nosuid,nodev,mode=755) tmpfs on /sys/fs/cgroup type tmpfs (rw,nosuid,nodev,noexec,mode=755) cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd) cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset) cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpuacct,cpu) cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory) cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices) cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer) cgroup on /sys/fs/cgroup/net_cls type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls) cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio) cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,perf_event) /dev/sda3 on / type ext4 (rw,relatime,data=ordered) rpc_pipefs on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw,relatime) debugfs on /sys/kernel/debug type debugfs (rw,relatime) sunrpc on /proc/fs/nfsd type nfsd (rw,relatime) hugetlbfs on /dev/hugepages type hugetlbfs (rw,relatime) systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=34,pgrp=1,timeout=300,minproto=5,maxproto=5,direct) mqueue on /dev/mqueue type mqueue (rw,relatime) tmpfs on /tmp type tmpfs (rw) configfs on /sys/kernel/config type configfs (rw,relatime) binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw,relatime) /dev/sda5 on /home type ext4 (rw,relatime,data=ordered) /dev/sda1 on /boot type ext4 (rw,relatime,data=ordered) kernelpanic.home:/home/KP_Data_Domain on /rhev/data-center/mnt/kernelpanic.home:_home_KP__Data__Domain type nfs (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.100.101.100,mountvers=3,mountport=20048,mountproto=udp,local_lock=none,addr=10.100.101.100) bufferoverflow.home:/home/BO_ISO_Domain on /rhev/data-center/mnt/bufferoverflow.home:_home_BO__ISO__Domain type nfs (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.100.101.108,mountvers=3,mountport=20048,mountproto=udp,local_lock=none,addr=10.100.101.108) *[wil@bufferoverflow ~]$ **sudo find / -name 5849b030-626e-47cb-ad90-3ce782d831b3* /run/vdsm/pools/5849b030-626e-47cb-ad90-3ce782d831b3 *[wil@bufferoverflow ~]$* *sudo find / -name 1083422e-a5db-41b6-b667-b9ef1ef244f0* /home/BO_Ovirt_Storage/1083422e-a5db-41b6-b667-b9ef1ef244f0 I will extremely appreciate any help, Limor Gavish

4 7

[Users] Problem setting up spice
by Olivier Boulin 18 Apr '13

18 Apr '13

hi, i'm totally an Ovirt newbie. I've installed an all-in-one version to test and i've got a problem with spice. I found this : http://www.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal but the link to the spice.cab cabinet is down. Is this page obsolete ? If yes, how do i open a console from a windows 7 client ? Thanks in advance

2 1

[Users] oVirt 3.2 and MD3600i
by martin.kralicek＠accenture.com 18 Apr '13

18 Apr '13

--_000_A14EC602F2E1DD4984ABE308D49EA2D226D0A2B1048CH1MPN116204_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, Has somebody experience with Dell MD3600i and oVirt 3.2.1? Host and oVirt are deployed on Fedora 18. My infrastructure contains: 2 x powerconnect 6224 and this storage with two= controllers Both switch are in stack mode and storage is connect with four 10Gb ports i= n same subnet (is better to use it without stack as two subnet?) So, where is problem...I can create iSCSI storage domain, everything seems = to be OK but when I want to add next host they cannot access this iSCSI tar= get (in storage management tools is already added to host group) And during this process I can see only on host console IO error, buffer err= or and kernel BUG: soft lockup - CPU stuck etc... Exists recommended way how involved iSCSI? Thanks for any suggestions Martin ________________________________ This message is for the designated recipient only and may contain privilege= d, proprietary, or otherwise confidential information. If you have received= it in error, please notify the sender immediately and delete the original.= Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and it= s affiliates, including e-mail and instant messaging (including content), m= ay be scanned by our systems for the purposes of information security and a= ssessment of internal compliance with Accenture policy. ___________________________________________________________________________= ___________ www.accenture.com --_000_A14EC602F2E1DD4984ABE308D49EA2D226D0A2B1048CH1MPN116204_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 12 (filtered medium)"> <style></style> </head> <body lang=3D"CS" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> <p class=3D"MsoNormal">Hello,<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Has somebody experience with Dell MD3600i and oVirt = 3.2.1?<o:p></o:p></p> <p class=3D"MsoNormal">Host and oVirt are deployed on Fedora 18.<o:p></o:p>= </p> <p class=3D"MsoNormal">My infrastructure contains: 2 x powerconnect 6224 an= d this storage with two controllers<o:p></o:p></p> <p class=3D"MsoNormal">Both switch are in stack mode and storage is connect= with four 10Gb ports in same subnet (is better to use it without stack as = two subnet?)<o:p></o:p></p> <p class=3D"MsoNormal">So, where is problem...I can create iSCSI storage do= main, everything seems to be OK but when I want to add next host they canno= t access this iSCSI target (in storage management tools is already added to= host group)<o:p></o:p></p> <p class=3D"MsoNormal">And during this process I can see only on host conso= le IO error, buffer error and kernel BUG: soft lockup – CPU stuck etc= ...<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Exists recommended way how involved iSCSI?<o:p></o:p= ></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Thanks for any suggestions<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Martin<o:p></o:p></p> </div> <br> <hr> <font face=3D"Arial" color=3D"Gray" size=3D"1">This message is for the desi= gnated recipient only and may contain privileged, proprietary, or otherwise= confidential information. If you have received it in error, please notify = the sender immediately and delete the original. Any other use of the e-mail by you is prohibited.<br> <br> Where allowed by local law, electronic communications with Accenture and it= s affiliates, including e-mail and instant messaging (including content), m= ay be scanned by our systems for the purposes of information security and a= ssessment of internal compliance with Accenture policy.<br> <br> ___________________________________________________________________________= ___________<br> <br> www.accenture.com<br> </font> </body> </html> --_000_A14EC602F2E1DD4984ABE308D49EA2D226D0A2B1048CH1MPN116204_--

4 4

[Users] Fwd: Problem setting up spice
by Juan Jose 18 Apr '13

18 Apr '13

---------- Forwarded message ---------- From: Juan Jose <jj197005(a)gmail.com> Date: Thu, Apr 18, 2013 at 12:53 PM Subject: Re: [Users] Problem setting up spice To: Olivier Boulin <olivier.boulin(a)dijon.iufm.fr> Hello Olivier, You need to install virt-viewer in you client platform, 32 or 64 bits, and to be sure that host and engine are resolvable from your windows 7 client system. I have tested this with IE 9.0 and it's work properly. You can download virt-viewer from this page: http://spice-space.org/download.html. I hope this help you. Juanjo. On Thu, Apr 18, 2013 at 11:06 AM, Olivier Boulin < olivier.boulin(a)dijon.iufm.fr> wrote: > hi, i'm totally an Ovirt newbie. I've installed an all-in-one version to > test and i've got a problem with spice. > > I found this : http://www.ovirt.org/How_to_** > Connect_to_SPICE_Console_With_**Portal<http://www.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal> > > but the link to the spice.cab cabinet is down. Is this page obsolete ? > > If yes, how do i open a console from a windows 7 client ? > > Thanks in advance > ______________________________**_________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/**mailman/listinfo/users<http://lists.ovirt.org/mailman/listinfo/users> >

1 0

[Users] How to remove storage domain
by Gianluca Cecchi 18 Apr '13

18 Apr '13

Hello, oVirt 3.2.1 on f18. I have an FC datacenter where I have several storage domains. I want to remove one storage domain, so I move all its disks to other ones (disk --> move) At the end its state is active, but the "remove" option is greyed out. I can only do "destroy". What to do to have the "delete" option possible? Thanks, Gianluca

2 5

[Users] Certificates and PKI seem to be broken after yum update
by Chris Smith 18 Apr '13

18 Apr '13

I have lost the ability to manage the hosts or VM's using ovirt engine web interface after performing yum update on the ovirt-engine host, and on one Fedora 17 host. The data center is offline, and I can't place the hosts into maintenance mode. I don't think that there are any actions I can perform in the web interface at all. >From the logs it seems that PKI is broken between the engine and the hosts. I am wondering how I can restore or re-generate all of the certificates and get the hosts communicating with the ovirt-engine again so that I can bring the data center back online. I found this page which deals with changing the engine hostname, and thus re-creating the certificates and keystore on the ovirt-engine node, and was wondering if this could help. Could I follow this process but keep the same hostname for the ovirt-engine node? http://wiki.ovirt.org/How_to_change_engine_host_name Currently I have 3 VM's running on two hosts. The VM's are up, but I can't do anything with them in ovirt-engine. Here's the latest activity from engine.log from the ovirt-engine node: 2013-04-06 21:58:47,472 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-61) Failed to decryptjava.io.FileNotFoundException: /etc/pki/ovirt-engine/.keystore (Permission denied) 2013-04-06 21:58:47,478 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-62) Can't load keystore from file "/etc/pki/ovirt-engine/.keystore".: java.io.FileNotFoundException: /etc/pki/ovirt-engine/.keystore (Permission denied) at java.io.FileInputStream.open(Native Method) [rt.jar:1.7.0_09-icedtea] at java.io.FileInputStream.<init>(FileInputStream.java:138) [rt.jar:1.7.0_09-icedtea] at org.ovirt.engine.core.engineencryptutils.EncryptionUtils.getKeyStore(EncryptionUtils.java:214) [engine-encryptutils.jar:] at org.ovirt.engine.core.engineencryptutils.EncryptionUtils.decrypt(EncryptionUtils.java:139) [engine-encryptutils.jar:] at org.ovirt.engine.core.dao.VdsStaticDAODbFacadeImpl.decryptPassword(VdsStaticDAODbFacadeImpl.java:139) [engine-dal.jar:] at org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:253) [engine-dal.jar:] at org.ovirt.engine.core.dao.VdsDAODbFacadeImpl$VdsRowMapper.mapRow(VdsDAODbFacadeImpl.java:169) [engine-dal.jar:] at org.springframework.jdbc.core.RowMapperResultSetExtractor.extractData(RowMapperResultSetExtractor.java:92) [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] at org.springframework.jdbc.core.JdbcTemplate$1.doInPreparedStatement(JdbcTemplate.java:653) [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] at org.springframework.jdbc.core.JdbcTemplate.execute(JdbcTemplate.java:591) [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] at org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:641) [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] at org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:670) [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] at org.springframework.jdbc.core.JdbcTemplate.query(JdbcTemplate.java:702) [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] at org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.executeCallInternal(PostgresDbEngineDialect.java:155) [engine-dal.jar:] at org.ovirt.engine.core.dal.dbbroker.PostgresDbEngineDialect$PostgresSimpleJdbcCall.doExecute(PostgresDbEngineDialect.java:121) [engine-dal.jar:] at org.springframework.jdbc.core.simple.SimpleJdbcCall.execute(SimpleJdbcCall.java:164) [spring-jdbc-2.5.6.SEC02.jar:2.5.6.SEC02] at org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeImpl(SimpleJdbcCallsHandler.java:124) [engine-dal.jar:] at org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadAndReturnMap(SimpleJdbcCallsHandler.java:75) [engine-dal.jar:] at org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeReadList(SimpleJdbcCallsHandler.java:66) [engine-dal.jar:] at org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler.executeRead(SimpleJdbcCallsHandler.java:58) [engine-dal.jar:] at org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:36) [engine-dal.jar:] at org.ovirt.engine.core.dao.VdsDAODbFacadeImpl.get(VdsDAODbFacadeImpl.java:31) [engine-dal.jar:] at org.ovirt.engine.core.vdsbroker.VdsManager$1.runInTransaction(VdsManager.java:219) [engine-vdsbroker.jar:] at org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInSuppressed(TransactionSupport.java:168) [engine-utils.jar:] at org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:107) [engine-utils.jar:] at org.ovirt.engine.core.vdsbroker.VdsManager.OnTimer(VdsManager.java:215) [engine-vdsbroker.jar:] at sun.reflect.GeneratedMethodAccessor13.invoke(Unknown Source) [:1.7.0_09-icedtea] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_09-icedtea] at java.lang.reflect.Method.invoke(Method.java:601) [rt.jar:1.7.0_09-icedtea] at org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:64) [engine-scheduler.jar:] at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:] at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) [quartz.jar:] 2013-04-06 21:58:47,576 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] (QuartzScheduler_Worker-61) XML RPC error in command GetCapabilitiesVDS ( Vds: defiant ), the error was: java.util.concurrent.ExecutionException: java.lang.reflect.InvocationTargetException, SSLPeerUnverifiedException: peer not authenticated 2013-04-06 21:58:47,606 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-62) Failed to decryptjava.io.FileNotFoundException: /etc/pki/ovirt-engine/.keystore (Permission denied) 2013-04-06 21:58:47,671 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.VdsBrokerCommand] (QuartzScheduler_Worker-62) XML RPC error in command GetCapabilitiesVDS ( Vds: transporter ), the error was: java.util.concurrent.ExecutionException: java.lang.reflect.InvocationTargetException, SSLPeerUnverifiedException: peer not authenticated Here's the message I seem to get over and over on the fedora 17 host in vdsm.log SSLError: [Errno 1] _ssl.c:504: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown Thread-562520::ERROR::2013-04-06 22:08:44,268::SecureXMLRPCServer::73::root::(handle_error) client ('172.16.23.8', 36127) Traceback (most recent call last): File "/usr/lib64/python2.7/SocketServer.py", line 582, in process_request_thread self.finish_request(request, client_address) File "/usr/lib/python2.7/site-packages/vdsm/SecureXMLRPCServer.py", line 66, in finish_request request.do_handshake() File "/usr/lib64/python2.7/ssl.py", line 305, in do_handshake self._sslobj.do_handshake() I'm also wondering about the permission denied on the .keystore directory. What should the permissions be? Here's what they are currently. [root@reliant pki]# ls -ldZ /etc/pki/ovirt-engine/.keystore -rwxr-x---. root root unconfined_u:object_r:cert_t:s0 /etc/pki/ovirt-engine/.keystore I also seem to have a backup of the ovirt-engine directory at the time the update was performed, but replacing ovirt-engine with the backup does no good. I appreciate any assistance, and please let me know what other information I can post to help with this. Thanks

2 8

[Users] Export domain was working... then... NFS, rpc.statd issues
by Nicolas Ecarnot 17 Apr '13

17 Apr '13

Hi, [oVirt 3.1, F17] My good old NFS export domain was OK, but getting too small for our needs. Then I unmounted it, created another bigger one somewhere else, and tried to mount the new one. Long things short, the NFS is not mounted and the relevant error is here: Thread-1422222::DEBUG::2013-04-16 10:08:25,973::__init__::1249::Storage.Misc.excCmd::(_log) '/usr/bin/sudo -n /usr/bin/mount -t nfs -o soft,nosharecache,timeo=600,retrans=6 serv-vm-adm7.xxx:/data/vmex /rhev/data-center/mnt/serv-vm-adm7.xxx:_data_vmex' (cwd None) Thread-1422222::ERROR::2013-04-16 10:08:26,047::hsm::1932::Storage.HSM::(connectStorageServer) Could not connect to storageServer Traceback (most recent call last): File "/usr/share/vdsm/storage/hsm.py", line 1929, in connectStorageServer File "/usr/share/vdsm/storage/storageServer.py", line 256, in connect File "/usr/share/vdsm/storage/storageServer.py", line 179, in connect File "/usr/share/vdsm/storage/mount.py", line 190, in mount File "/usr/share/vdsm/storage/mount.py", line 206, in _runcmd MountError: (32, ";mount.nfs: rpc.statd is not running but is required for remote locking.\nmount.nfs: Either use '-o nolock' to keep locks local, or start statd.\nmount.nfs: an incorrect mount option was specified\n") I confirm trying to manually mount the same from the node, and using the nolock option does work. While googling, I checked the /etc/services : no problem. I don't know what to change, what I did wrong, what to improve? -- Nicolas Ecarnot [Very rare msg from me using HTML and colors... I'm ready to wear a tie ;)]

2 1

[Users] DNS reverse configuration
by Eduardo Ramos 17 Apr '13

17 Apr '13

This is a multi-part message in MIME format. --------------030000020905080205090702 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi all! I'm trying to connect my ovirt-engine in a samba4 server. Samba4 is ActiveDirectory complaint. But when I use engine-manage-domains, it returns me a strange message: [root@ovirt-dir eduardo]# engine-manage-domains -action=add -domain=gsr.inpe.br -provider=activeDirectory -user=Administrator -interactive Enter password: Error: Authentication Failed. Error in DNS configuration. Please verify the oVirt Engine host has a valid reverse DNS (PTR) record.. Problematic domain is: getconnection: driver class name=org.postgresql.xa.pgxadatasourcegetconnection: url=jdbc:postgresql://localhost:5432/enginegetconnection: considering encrypted passord. secdomain=encryptdbpasswordexecute: beginning execution of action action_get.fetching key=domainname ver=general Failure while applying Kerberos configuration. Details: Authentication Failed. Error in DNS configuration. Please verify the oVirt Engine host has a valid reverse DNS (PTR) record. Using host command, I got the following results: [root@ovirt-dir eduardo]# host ovirt-dir.gsr.inpe.br ovirt-dir.gsr.inpe.br has address 150.163.80.125 [root@ovirt-dir eduardo]# host 150.163.80.125 125.80.163.150.in-addr.arpa domain name pointer ovirt-dir.gsr.inpe.br. [root@ovirt-dir eduardo]# host -t srv _kerberos._tcp.gsr.inpe.br _kerberos._tcp.gsr.inpe.br has SRV record 1 0 88 samba4.gsr.inpe.br. [root@ovirt-dir eduardo]# host samba4.gsr.inpe.br samba4.gsr.inpe.br has address 150.163.73.109 [root@ovirt-dir eduardo]# host 150.163.73.109 109.73.163.150.in-addr.arpa domain name pointer samba4.gsr.inpe.br. As you can see, it is everything ok. No DNS problem. Someone have any idea? Thanks. --------------030000020905080205090702 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi all!<br> <br> I'm trying to connect my ovirt-engine in a samba4 server. Samba4 is ActiveDirectory complaint. But when I use engine-manage-domains, it returns me a strange message:<br> <br> <small>[root@ovirt-dir eduardo]# engine-manage-domains -action=add -domain=gsr.inpe.br -provider=activeDirectory -user=Administrator -interactive<br> Enter password:<br> <br> Error: Authentication Failed. Error in DNS configuration. Please verify the oVirt Engine host has a valid reverse DNS (PTR) record.. Problematic domain is: getconnection: driver class name=org.postgresql.xa.pgxadatasourcegetconnection: url=jdbc:postgresql://localhost:5432/enginegetconnection: considering encrypted passord. secdomain=encryptdbpasswordexecute: beginning execution of action action_get.fetching key=domainname ver=general<br> Failure while applying Kerberos configuration. Details: Authentication Failed. Error in DNS configuration. Please verify the oVirt Engine host has a valid reverse DNS (PTR) record.<br> <br> <big><big><small>Using host command, I got the following results:<br> <small><br> [root@ovirt-dir eduardo]# host ovirt-dir.gsr.inpe.br<br> ovirt-dir.gsr.inpe.br has address 150.163.80.125<br> <br> [root@ovirt-dir eduardo]# host 150.163.80.125<br> 125.80.163.150.in-addr.arpa domain name pointer ovirt-dir.gsr.inpe.br.<br> <br> [root@ovirt-dir eduardo]# host -t srv _kerberos._tcp.gsr.inpe.br<br> _kerberos._tcp.gsr.inpe.br has SRV record 1 0 88 samba4.gsr.inpe.br.<br> <br> [root@ovirt-dir eduardo]# host samba4.gsr.inpe.br<br> samba4.gsr.inpe.br has address 150.163.73.109<br> <br> [root@ovirt-dir eduardo]# host 150.163.73.109<br> 109.73.163.150.in-addr.arpa domain name pointer samba4.gsr.inpe.br.<br> <br> <big>As you can see, it is everything ok. No DNS problem.<br> <br> Someone have any idea?<br> <br> Thanks.<br> </big></small></small></big></big></small> </body> </html> --------------030000020905080205090702--

6 11

[Users] oVirt Weekly Meeting Minutes -- 2013-04-10
by Mike Burns 17 Apr '13

17 Apr '13

Minutes: http://ovirt.org/meetings/ovirt/2013/ovirt.2013-04-10-14.01.html Minutes (text): http://ovirt.org/meetings/ovirt/2013/ovirt.2013-04-10-14.01.txt Log: http://ovirt.org/meetings/ovirt/2013/ovirt.2013-04-10-14.01.log.html ========================= #ovirt: oVirt Weekly Sync ========================= Meeting started by mburns at 14:01:09 UTC. The full logs are available at http://ovirt.org/meetings/ovirt/2013/ovirt.2013-04-10-14.01.log.html . Meeting summary --------------- * Agenda and Roll Call (mburns, 14:01:17) * Agenda (mburns, 14:01:26) * release updates for 3.2 (mburns, 14:01:39) * release updates for 3.3 (mburns, 14:01:41) * conferences and workshops (mburns, 14:01:48) * Sub Project Status (mburns, 14:02:00) * Other Topics (mburns, 14:02:05) * oVirt 3.2 Updates (mburns, 14:03:35) * 3.2 EL6 packages are now available in the stable repositories (as of this morning) (mburns, 14:03:54) * 3.2.2 build should be available in the next couple weeks (mburns, 14:10:11) * work for vms not running on el6 out of the box is underway (mburns, 14:10:28) * oVirt 3.3 Updates (mburns, 14:13:03) * LINK: http://www.ovirt.org/OVirt_3.3_release-management (mburns, 14:13:29) * new features for Virt, SLA, Node, Gluster posted (mburns, 14:14:04) * every feature has a feature page posted as well (mburns, 14:14:20) * a couple more to be posted still -- novnc, spice html5, el6 machine-type bug (mburns, 14:15:10) * reminder: feature freeze is May 31 (mburns, 14:16:23) * direct host feature dropped -- determined to be not useful (mburns, 14:19:43) * node features are primarily running on a different schedule, targeting GA May 31 (mburns, 14:22:00) * exception being the vdsm plugin for ovirt-node which will ship on oVirt Project schedule (mburns, 14:22:27) * Conferences and Workshops (mburns, 14:23:42) * schedule is available http://www.ovirt.org/Intel_Workshop_May_2013 (mburns, 14:24:52) * visa information going out shortly (mburns, 14:25:02) * speakers with approved talks have been notified (mburns, 14:25:15) * slides are due 22-April if your presentation was approved (mburns, 14:25:49) * you should start booking flights and hotels now if you're attending and haven't already (mburns, 14:26:40) * please contack theron if you need visa letters (mburns, 14:28:41) * visa letters should be going out today (mburns, 14:28:50) * Marketing group (mburns, 14:31:23) * the oVirt Marketing group kicked off last week (mburns, 14:31:37) * planning an ovirt/cloud conf to occur in San Francisco in late August (mburns, 14:31:57) * venue secured, prospectus drafted (mburns, 14:32:18) * prospectus to be sent later this week to all oVirt companies (mburns, 14:32:34) * there will be multiple tracks (3-4) (mburns, 14:34:20) * need to get more papers submitted than for our past workshops (mburns, 14:34:35) * conference won't be pure oVirt, but need to make sure oVirt is represented (mburns, 14:35:51) * more info will be shared as the marketing group moves forward (mburns, 14:36:52) * Sub-project status (mburns, 14:38:33) * Sub-project status -- Infra (mburns, 14:38:39) * LINK: http://resources.ovirt.org/meetings/ovirt/2013/ovirt.2013-04-08-14.04.html (ewoud, 14:40:29) * work is still in progress installing servers (mburns, 14:40:37) * not much else to report (mburns, 14:40:43) * issues installing at rackspace (mburns, 14:41:22) * waiting on new IPs from alterway (mburns, 14:41:28) * Other Topics (mburns, 14:42:45) Meeting ended at 14:44:58 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * mburns (81) * theron (21) * oschreib (13) * lvernia (5) * ewoud (4) * mskrivanek (3) * ovirtbot (3) * doron (1) * ofri (1) * fsimonce (1) * dustins (1) * dneary (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot

2 2

[Users] Contribute to the project
by Candido Raphael 17 Apr '13

17 Apr '13

--Apple-Mail=_9C83B5F5-9F3E-45B2-A63F-D6407A28D53F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, I wonder how I can contribute to the project, I live in Brazil and I = see here that the project is not yet known and highly publicized, wish I could help in = disseminating the same here in my country. I wonder if there is interest in releasing it here in Brazil. Thank you. I await return. Sincerely, Raphael Souza Infrastructure Analyst Be Free, use Linux! --Apple-Mail=_9C83B5F5-9F3E-45B2-A63F-D6407A28D53F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html><head></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); "><br></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); "><br></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); ">Hi, I wonder how I can = contribute to the project, I live in Brazil and I see here that = the</div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 119px; text-indent: -119px; font: = normal normal normal 12px/normal Courier; color: rgb(76, 76, 76); = ">project is not yet known and highly publicized, wish I could help = in disseminating the same here</div><div style=3D"margin-top: 0px; = margin-right: 0px; margin-bottom: 0px; margin-left: 119px; text-indent: = -119px; font: normal normal normal 12px/normal Courier; color: rgb(76, = 76, 76); ">in my country.</div><div style=3D"margin-top: 0px; = margin-right: 0px; margin-bottom: 0px; margin-left: 119px; text-indent: = -119px; font: normal normal normal 12px/normal Courier; color: rgb(76, = 76, 76); "><br></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 119px; text-indent: -119px; font: = normal normal normal 12px/normal Courier; color: rgb(76, 76, 76); ">I = wonder if there is interest in releasing it here in Brazil.</div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); "><br></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); ">Thank you.</div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); ">I await return.</div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); "><br></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); "><br></div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); ">Sincerely,</div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); ">Raphael Souza</div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 119px; text-indent: -119px; font: normal normal normal = 12px/normal Courier; color: rgb(76, 76, 76); ">Infrastructure = Analyst</div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 119px; text-indent: -119px; font: = normal normal normal 12px/normal Courier; color: rgb(76, 76, 76); ">Be = Free, use Linux!</div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 119px; text-indent: -119px; font: = normal normal normal 12px/normal Courier; color: rgb(76, 76, 76); = "><br></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 119px; text-indent: -119px; font: = normal normal normal 12px/normal Courier; color: rgb(76, 76, 76); = "><br></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 119px; text-indent: -119px; font: = normal normal normal 12px/normal Courier; color: rgb(76, 76, 76); = "><br></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 119px; text-indent: -119px; font: = normal normal normal 12px/normal Courier; color: rgb(76, 76, 76); = "><br></div><div style=3D"margin-top: 0px; margin-right: 0px; = margin-bottom: 0px; margin-left: 119px; text-indent: -119px; font: = normal normal normal 12px/normal Courier; color: rgb(76, 76, 76); = "><br></div></body></html>= --Apple-Mail=_9C83B5F5-9F3E-45B2-A63F-D6407A28D53F--

2 1

[Users] vdsm unresponsive with python exception
by Tony Feldmann 16 Apr '13

16 Apr '13

I am having a strange issue in my ovirt cluster. I have 2 hosts, 1 running engine and added as a host and one other system added as a host. Both systems are running gluster across local disks for shared storage. Everything was working fine until last night, where my system that is also running the engine when unresponsive in the admin page. All vms were still running that were on the host. I shut down the vms that were on the host from within the guest os as I was not able to do anything to the vm with the host in unresponsive state. After getting the vms off and rebooting the host, the vdsmd service says that it is running, but it continually restarts the vdsm process and dumps out these messages: detected unhandled Python exception in '/usr/share/vdsm/vdsm'. All services say they are up and running but the host stays in unresponsive state and the vdsm process keeps respawning. There is also no data in the vdsm.log. Can anyone shed any light on this for me? Thanks, Tony

4 7

[Users] Problem on boot after deleting last snaphot
by Gianluca Cecchi 16 Apr '13

16 Apr '13

Hello, snapshot testing in 3.2.1 on f18 host with http://gerrit.ovirt.org/#/c/13172/ (enable template from snapshot) - create one vm named prova_snap from centos 6 template and choose preallocated storage - power on - create test_snap1 with vm powered on Snapshot test_snap1 creation for VM prova_snap has been completed. I have now: Current OK Active VM 2013-Apr-16, 14:09 OK test_snap1 - create some files - shutdown VM VM shutdown initiated by admin@internal on VM prova_snap (Host: f18ovn03). VM prova_snap is down. Exit message: User shut down - snapshots --> select "test_snap1" --> preview Snapshot-Preview for VM prova_snap was initiated by admin@internal. Snapshot-Preview for VM prova_snap has been completed. And I have under "Description" field of snapshots view test_snap1 (Preview Mode) (in coloured bold) 2013-Apr-16, 14:09 In Preview test_snap1 (Preview Mode) - Power on VM --> ok the files created after the snapshot are not there. - Shutdown VM and undo the operation to come back (forward actually) to the active state Restoring VM prova_snap from snapshot started by user admin@internal. VM prova_snap restoring from Snapshot has been completed. - Power On VM Ok, all files are there again. - create test_snap2 with vm powered on Snapshot test_snap2 creation for VM prova_snap was initiated by admin@internal. Snapshot test_snap2 creation for VM prova_snap has been completed. Now I have Current OK Active VM 2013-Apr-16, 16:21 OK test_snap2 2013-Apr-16, 14:09 OK test_snap1 - create some files /testfile_aftersnap2 - shutdown VM - snapshots --> select again the first snapshot named "test_snap1" --> preview Snapshot-Preview for VM prova_snap was initiated by admin@internal. Snapshot-Preview for VM prova_snap has been completed. Now I have: 2013-Apr-16, 16:25 OK Active VM before the preview 2013-Apr-16, 16:21 OK test_snap2 2013-Apr-16, 14:09 In Preview test_snap1 (Preview Mode) - Power on VM --> ok the files created after the snapshots are not there. - Shutdown VM and commit so that subsequent snapshots (in my case test_snap2) should be erased Restoring VM prova_snap from snapshot started by user admin@internal. VM prova_snap restoring from Snapshot has been completed. Now I correctly have only this: Current OK Active VM 2013-Apr-16, 14:09 OK test_snap1 - Power on VM And now I should be in situation as right after test_snap1 creation if I power on te VM --> OK Now I would like to delete the remaining snapshot (test_snap1) and begin a new story... So: - Power off the VM - Delete snapshot Are you sure you want to delete snapshot from Tue Apr 16 14:09:10 GMT+200 2013 with description 'test_snap1'? yes during the process Total DISK READ: 46660.26 K/s | Total DISK WRITE: 46468.59 K/s PID PRIO USER DISK READ> DISK WRITE SWAPIN IO COMMAND 20610 idle vdsm 46036.93 K/s 46457.74 K/s 0.00 % 30.67 % qemu-img convert -t n~cb-2eb88d4ede9a_MERGE 2457 be/4 sanlock 336.65 K/s 0.00 K/s 0.00 % 0.03 % sanlock daemon -U sanlock -G sanlock 4173 be/3 vdsm 0.33 K/s 0.00 K/s 0.00 % 0.00 % python /usr/share/vdsm~eFileHandler.pyc 43 40 2830 be/4 root 0.00 K/s 11.84 K/s 0.00 % 0.00 % libvirtd --listen 875 be/3 root 0.00 K/s 0.00 K/s 0.00 % 0.52 % [jbd2/dm-12-8] 3141 be/3 vdsm 0.00 K/s 1.32 K/s 0.00 % 0.00 % python /usr/share/vdsm/vdsm ps: vdsm 20610 3141 7 16:43 ? 00:00:01 /usr/bin/qemu-img convert -t none -f qcow2 /rhev/data-center/5849b030-626e-47cb-ad90-3ce782d831b3/3fb66ba1-cfcb-4341-8960-46f0e8cf6e83/images/78c29803-45d5-46fb-bdd6-39647c067c28/b1e4782f-ff51-4a25-94cb-2eb88d4ede9a -O raw /rhev/data-center/5849b030-626e-47cb-ad90-3ce782d831b3/3fb66ba1-cfcb-4341-8960-46f0e8cf6e83/images/78c29803-45d5-46fb-bdd6-39647c067c28/b1e4782f-ff51-4a25-94cb-2eb88d4ede9a_MERGE Snapshot test_snap1 deletion on VM prova_snap was initiated by admin@internal. (in tasks: executing --> Merging snapshots of disk prova_snap_Disk1 ) Snapshot test_snap1 deletion on VM prova_snap has been completed. (elapsed about 4 minutes) Now in snapshots pane: Current OK Active VM But the VM doesn't boot, so it seems that the final operation corrupted the MBR perhaps.... see this screenshot where there is console window and disks pane: https://docs.google.com/file/d/0BwoPbcrMv8mvRDlLZEw1dmlvM0U/edit?usp=sharing Any hint? Anyone can replicate and reproduce? Thanks Gianluca

1 0

[Users] High Availability
by suporte＠logicworks.pt 16 Apr '13

16 Apr '13

What should I need to configure to put HA working? I mean, when a host broke all the VM automatically move to another host. Do I need to have Power management enabled? Thanks

8 16

Re: [Users] [Spice-devel] 3.2 final and status of spice console in ie
by Juan Jose 14 Apr '13

14 Apr '13

Yes, User portal works fine at the moment. I want to install spice-guest-tools to improve the windows VM integration in client machine. After that I will try to add a server user validation. Many thanks, Juanjo. On Wed, Apr 10, 2013 at 6:46 AM, Karli Sjöberg <Karli.Sjoberg(a)slu.se> wrote: > ** > tis 2013-04-09 klockan 17:11 +0200 skrev Juan Jose: > > Yes host or node, is my machine that has the hypervisor and yes I tried > open console from Admin-Portal and It didn't work. Now both are working in > a Win7 client with IE 9. > > Is the User-portal working as well? > > > > > > Many thanks again, > > > > Juanjo. > > > > On Tue, Apr 9, 2013 at 2:53 PM, Karli Sjöberg <Karli.Sjoberg(a)slu.se> > wrote: > > tis 2013-04-09 klockan 13:49 +0200 skrev Juan Jose: > > > Hello David, > > > My problem was that I needed to add my host to > \windows\system32\driver\etc\hosts file moreover to have virt-viewer > installed in the Windows 7 client. Now I can open the console after that. > > When you say "host", I´m guessing you mean the hypervisor that is > running the VM you want to access. Have you tried opening console through > *Admin*-portal, *User*-portal, or both? And they all work? > > /Karli > > > > Many thanks, > > > Juanjo. > > > > > On Mon, Apr 8, 2013 at 4:23 PM, David Jaša <djasa(a)redhat.com> wrote: > > Hi Juan, > > Juan Jose píše v Po 08. 04. 2013 v 14:36 +0200: > > > > Hello evrybody, > > > > > > I'm testing open console in a Windows 7 client with IE 9 and when I > > try to click in console when I'm inside User Portal with wirt-viewer > > installad, it is launched but and virt-viewer give me the message > > "Unable to connect to graphic server" and It can't connect to my VM. > > Any suggest? > > > I've described the debugging steps on this list in the past, please look > them up and go through spicex.log. If that isn't sufficient, please use > debug-helper.exe (IIRC I described it in another mail here) to get > remote-viewer debug output. > > HTH, > > David > > > > > > > Many thanks in avanced, > > > > > > Juanjo. > > > > > > On Thu, Mar 21, 2013 at 1:49 PM, Gianluca Cecchi > > <gianluca.cecchi(a)gmail.com> wrote: > > On Wed, Mar 20, 2013 at 10:43 PM, Jeff Bailey wrote: > > > On 3/20/2013 5:20 AM, Christophe Fergeau wrote: > > >> > > >> On Tue, Mar 19, 2013 at 05:11:56PM -0400, Jeff Bailey > > wrote: > > > > > > > > Heh, heh, maybe it's a secret. :) > > > > > > Actually, I believe I got it from > > http://elmarco.fedorapeople.org/spice.cab > > > and it seems to be version 5.0.2.2. > > > > > > > > > > > As already pointed in another mail of this same thread from > > Michal > > Skrivanek (about a month ago), the info is at > > > http://wiki.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal > > and the page indeed contains the same link to spice.cab file > > you are referring > > so possibly difficult to find but not a secret... ;-) > > > > Gianluca > > _______________________________________________ > > Users mailing list > > Users(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/users > > > > > > > > _______________________________________________ > > Users mailing list > > Users(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/users > > > -- > > David Jaša, RHCE > > SPICE QE based in Brno > GPG Key: 22C33E24 > Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24 > > > > > > > > -- > > Med Vänliga Hälsningar > > ------------------------------------------------------------------------------- > Karli Sjöberg > Swedish University of Agricultural Sciences > Box 7079 (Visiting Address Kronåsvägen 8) > S-750 07 Uppsala, Sweden > Phone: +46-(0)18-67 15 66 > karli.sjoberg(a)slu.se <karli.sjoberg(a)adm.slu.se> > > > > > -- > > Med Vänliga Hälsningar > > ------------------------------------------------------------------------------- > Karli Sjöberg > Swedish University of Agricultural Sciences > Box 7079 (Visiting Address Kronåsvägen 8) > S-750 07 Uppsala, Sweden > Phone: +46-(0)18-67 15 66 > karli.sjoberg(a)slu.se <karli.sjoberg(a)adm.slu.se> >

3 9

[Users] host goes to non-operational because interface down message
by Gianluca Cecchi 14 Apr '13

14 Apr '13

Hello, I have a newly created datacenter in 3.2.1 with f18 host where ovirtmgmt is set as vlan. host is installed but after some minutes I get this messages: Host management02 moved to Non-Operational state because interfaces 'em1.311' are down but are needed by networks 'ovirtmgmt' in the current cluster from an operating system point of view it seems that all is ok on the host [root@management02 ~]# ip addr list 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:15:17:b4:99:3c brd ff:ff:ff:ff:ff:ff 3: em2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:15:17:b4:99:3d brd ff:ff:ff:ff:ff:ff inet 213.205.41.202/26 brd 213.205.41.255 scope global em2 4: em1.311@em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master ovirtmgmt state UP link/ether 00:15:17:b4:99:3c brd ff:ff:ff:ff:ff:ff 5: ovirtmgmt: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP link/ether 00:15:17:b4:99:3c brd ff:ff:ff:ff:ff:ff inet 10.39.71.12/26 brd 10.39.71.63 scope global ovirtmgmt 7: ;vdsmdummy;: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN link/ether 36:98:c3:39:5f:43 brd ff:ff:ff:ff:ff:ff 8: bond0: <BROADCAST,MULTICAST,MASTER> mtu 1500 qdisc noop state DOWN link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 9: bond4: <BROADCAST,MULTICAST,MASTER> mtu 1500 qdisc noop state DOWN link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 10: bond1: <BROADCAST,MULTICAST,MASTER> mtu 1500 qdisc noop state DOWN link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 11: bond2: <BROADCAST,MULTICAST,MASTER> mtu 1500 qdisc noop state DOWN link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 12: bond3: <BROADCAST,MULTICAST,MASTER> mtu 1500 qdisc noop state DOWN link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff [root@management02 ~]# ethtool em1 Settings for em1: Supported ports: [ FIBRE ] Supported link modes: 1000baseT/Full Supported pause frame use: No Supports auto-negotiation: Yes Advertised link modes: 1000baseT/Full Advertised pause frame use: Symmetric Advertised auto-negotiation: Yes Speed: 1000Mb/s Duplex: Full Port: FIBRE PHYAD: 0 Transceiver: internal Auto-negotiation: on Supports Wake-on: pumbg Wake-on: g Current message level: 0x00000007 (7) drv probe link Link detected: yes [root@management02 ~]# ethtool em1.311 Settings for em1.311: Supported ports: [ FIBRE ] Supported link modes: 1000baseT/Full Supported pause frame use: No Supports auto-negotiation: Yes Advertised link modes: 1000baseT/Full Advertised pause frame use: Symmetric Advertised auto-negotiation: Yes Speed: 1000Mb/s Duplex: Full Port: FIBRE PHYAD: 0 Transceiver: internal Auto-negotiation: on Link detected: yes On engine [root@management01 ~]# ip addr list 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:15:17:b1:1f:e8 brd ff:ff:ff:ff:ff:ff 3: em2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:15:17:b1:1f:e9 brd ff:ff:ff:ff:ff:ff inet 213.205.41.201/26 brd 213.205.41.255 scope global em2 4: em1.192@em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP link/ether 00:15:17:b1:1f:e8 brd ff:ff:ff:ff:ff:ff inet 192.168.230.1/24 brd 192.168.230.255 scope global em1.192 5: em1.311@em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP link/ether 00:15:17:b1:1f:e8 brd ff:ff:ff:ff:ff:ff inet 10.39.71.11/26 brd 10.39.71.63 scope global em1.311 [root@management01 ~]# ethtool em1 Settings for em1: Supported ports: [ FIBRE ] Supported link modes: 1000baseT/Full Supported pause frame use: No Supports auto-negotiation: Yes Advertised link modes: 1000baseT/Full Advertised pause frame use: Symmetric Advertised auto-negotiation: Yes Speed: 1000Mb/s Duplex: Full Port: FIBRE PHYAD: 0 Transceiver: internal Auto-negotiation: on Supports Wake-on: pumbg Wake-on: g Current message level: 0x00000007 (7) drv probe link Link detected: yes [root@management01 ~]# ethtool em1.311 Settings for em1.311: Supported ports: [ FIBRE ] Supported link modes: 1000baseT/Full Supported pause frame use: No Supports auto-negotiation: Yes Advertised link modes: 1000baseT/Full Advertised pause frame use: Symmetric Advertised auto-negotiation: Yes Speed: 1000Mb/s Duplex: Full Port: FIBRE PHYAD: 0 Transceiver: internal Auto-negotiation: on Link detected: yes what can be the cause? what is the check that runs and move the host to non-operational? Thanks Gianluca

3 3

[Users] How to import KVM machines into oVirt iSCSI
by Nicolas Ecarnot 12 Apr '13

12 Apr '13

Hi, Reading the docs all day long helped me to setup a nice Data center in iSCSI mode, connected to a big LUN in a san. Many many points are working, mostly thanks to you, people of this list. Apart from this oVirt setup (1 manager, 3 nodes, 1 san), I have a completely separated ubuntu hypervisor running a standalone local KVM with a local storage. I have not a clear view of how I will manage to import these VM into oVirt. Of course, I've read about ovirt-v2v (and its huge amount of dependencies...), but I'm not sure this is the way I have to follow? As far as I've understood, v2v seems to be dedicated to connection between oVirt datacenters, or vmware or Xen plateforms, but I see nothing about the connection to a distant standalone KVM hypervisor. One more thing that is unclear to me, and seems related, is the notion of export / import domain. I read that this principle could allow me to export (then to backup) my VMs. This could help me to import some VMs. But I read that this export domain has to be the same type of my datacenter (iscsi), so this is not helping me with my standalone kvm hypervisor. I'd be glad to get some light on these points. -- Nicolas Ecarnot

5 7

[Users] Ipa server inside ovirt itself. ..
by Gianluca Cecchi 12 Apr '13

12 Apr '13

Hello, I have a test environment where I am short of hw. My engine is based on fedora 18 and I would like to test freeipa on centos 6. What are the drawbacks of creating a vm that is also one authentication domain for ovirt itself (apart the obvious ones)? Can i set it so that is the first to start? Can i set a subset of VMs to start only if this one is up and is giving ipa service (for example through a test connect command? ) Thanks Gianluca

2 1

Re: [Users] host goes to non-operational because interface down message
by Mark Wu 12 Apr '13

12 Apr '13

Gianluca, Thanks for your so detailed report. But unfortunately I can't find any clue related to this network interface status problem. Sorry for that. Maybe other guy can add more comments. At this moment, I suspect the link of em1.311 and probably its underlying interface em1 went down occasionally and came up in a short time. Is it possible? You could check the system log '/var/log/messages' to find related messages. > Thanks for your input Mark. > At the moment all is well again with the host; anyway I'm going to > give a long explanation of what I did below and so possible reasons > for that situation. > There is also feed for developers answers in that ... > > I cannot connect at the moment to the host to cut and paste in text > but I have access to java console and here is a screenshot containing > the line you requested (captured now that all is ok and host up and > runnign with two VMs): > > https://docs.google.com/file/d/0BwoPbcrMv8mvdmdIMUxTRVRVUzg/edit?usp=sharing > > Which fields are expected to be indicators of problems, as I had yesterday? You can check the 'state' filed in each interface. > > > The story: > > oVirt is 3.2.1 > - create a datacenter of type local_on_host > - create a cluster > - the ovirtmgmt is intended to be vlan tagged but I forget it... damn... > - I add a host (f18) where I prepared network configured with vlan > > ifcfg-em1 > ifcfg-em1.311 > > - the host deploy completes successfully --> here in my opinion a > possible bug because ovirtmgmt is not tagged? > - host reboots and apparently all is ok > - I can create local_on_host SD and ISO > - all is up and running without any VM yet > > The host is a blade inside an IMS enclosure and I discover that > actually I can configure the storage assigned (second disk of the > blade) as FC and that there is also multipath for this kind of servers > (see the other thread of mine). > > The optimal would be to deactivate all and redefine the DC as > Fibrechannel type but it seems not so easy.... > > I probably make an error at this point because instead of directly > putting host into maintenance I follow these steps in the gui: > - expand my DC at the left > - expand STORAGE of that DC on the left > - select my storage domain (LSTORAGE) on the left > > On the right pane I select the line of LSTORAGE and in the bottom > pane I select the "datacenter" label where I then select the line of > my DC. > I choose "maintenance" > > --> what is it supposed I have done this way? > Put storage domain in maintenance or DC or what? > > Is it supposed to be a correct operation what I've done if the DC is > Up and this is the only SD I have? > Or would it be correct to receive an error from the system? > > Because I don't receive any error and I see the SD down and host that > keeps staying with the status "Preparing to maintenance" > > I don't remember correctly my steps here, possibly restart of host > that is recognized then as unassigned. > After that I cannot "force remove" the DC and I cannot remove the > cluster or host because it is not in maintenance. > > After I also reboot the engine service and restart the host, it comes > up normally with all the DC with the old config. > At this point I can put host in maintenance and force remove the DC > I create a new DC with same name but with type FC and ovirtmgmt as > vlan tagged and I see that the existing cluster is still present, so I > attach it to the new DC (that has the same name as before). > I also find that there is my host that seems to automatically be in > this cluster. > > But at this point when I activate it, it comes up but after a few > minutes I get the message I posted at the beginning > In host details, its network interfaces keep down. > Tried different restarts of host. > So I decide to put host into maintenance and select into the gui to > "reinstall" it. > After this all goes well again.. > > Sorry for the long story > > Gianluca > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users >

1 0

[Users] fedora 18 kernel problems (was Re: oVirt 3.2 and MD3600i)
by Gianluca Cecchi 11 Apr '13

11 Apr '13

On Tue, Apr 9, 2013 at 9:10 PM, Joop wrote: > > For the first part I don't have an answer but the softlockups sound familiar > and the only solution I have found sofar that works reliable is to switch > back to kernel 3.6.10 > I higher kernel level will sometimes work after a reboot but more often it > will cause softlockups as soon as multipathd is started. Hello, is there any bugzilla tracked for this? At my part I openend https://bugzilla.redhat.com/show_bug.cgi?id=947255 because with some servers I have also the problem that I'm put into a dracut shell with kernel higher than stock f18 initial one. Are there other ones? Anyone already tried latest kernels such as 3.8.5-201.fc18.x86_64? What is the kernel shipped with ovirt-node iso? Can we use it eventually on a standard fedora 18 system? BTW: with my home pc where I have model name : AMD Athlon(tm) II X4 630 Processor and an all-in-one 3.2.1 installation over fedora 18, I have no problems with 3.8.5-201.fc18.x86_64 kernel. Thanks, Gianluca

1 0

[Users] ovirt and web portals favicon
by Gianluca Cecchi 11 Apr '13

11 Apr '13

Hello, not a big deal, but could ovirt have its own logo and so map it to the favicon on portals? At the moment I see the well known Red Hat logo.... fedora has its own even if sponsored by Red Hat as I imagine oVirt is... Just for knowledge, not debate... PS: at the moment it seems the ovirt.org has no favicon, so it could be the occasion to make both... Thanks, Gianluca

4 4

[Users] VM crashes and doesn't recover
by Limor Gavish 10 Apr '13

10 Apr '13

Hello, I am using Ovirt 3.2 on Fedora 18: [wil@bufferoverflow ~]$ rpm -q vdsm vdsm-4.10.3-7.fc18.x86_64 (the engine is built from sources). I seem to have hit this bug: https://bugzilla.redhat.com/show_bug.cgi?id=922515 in the following configuration: Single host (no migrations) Created a VM, installed an OS inside (Fedora18) stopped the VM. created template from it. Created an additional VM from the template using thin provision. Started the second VM. in addition to the errors in the logs the storage domains (both data and ISO) crashed, i.e went to "unknown" and "inactive" states respectively. (see the attached engine.log) I attached the VDSM and engine logs. is there a way to work around this problem? It happens repeatedly. Yuval Meir

7 13

[Users] Spice usb pass-through
by Ryan Wilkinson 10 Apr '13

10 Apr '13

When using a Fedora with Firefox client to access an Ovirt vm, any ideas on how to avoid having to enter root password for the Fedora client when utilizing a local usb device via pass-through?

2 1

[Users] VDI using oVirt
by John Baldwin 09 Apr '13

09 Apr '13

Any good guides on setting up VDI using oVirt??? John Baldwin Sr. UnIx System Admin, Clearwater, FL

2 1

[Users] 3.2 final and status of spice console in ie
by Gianluca Cecchi 09 Apr '13

09 Apr '13

Hello, what is the status of support for spice console with ie9 (32bit on win7 32bit in my case) and 3.2 final? I have a windows xp vm but when I try to login to console from win7+ie9 I don't get any activex request to install.... ie exact version: https://docs.google.com/file/d/0BwoPbcrMv8mvVHZhYnczY3lKaTA/edit?usp=sharing If after a few minutes I click again on console button I get Error: A Request to the Server failed with the following Status Code: 400 Tried with both admin and user portal. Thanks, Gianluca

10 35

[Users] Ims shared disks and ovirt storage
by Gianluca Cecchi 09 Apr '13

09 Apr '13

Hello, I have the chance to work on Intel blades where I have option to confihure shared disks between them at enclosure level. Their controller is scsi. How could I configure as shared storage in ovirt? I presume neither Fc nor iscsi are possible. .. so what can i do in your opinion? Thanks in advance Gianluca

2 3

[Users] DNS for IPA in oVirt
by René Koch (ovido) 09 Apr '13

09 Apr '13

Hi list, I don't want to ask my question in the mail thread of Eduardo to avoid mixing topics. Can you give me more detailed information on how oVirt is using DNS internally and how IPA users can work in the following scenario: # engine-manage-domains -action=list Domain: ovido.at User name: admin(a)OVIDO.AT Manage Domains completed successfully # cat /etc/hosts | grep engine 10.0.100.195 ovirt-engine.lab.ovido.at # ip a 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:1a:4a:00:64:14 brd ff:ff:ff:ff:ff:ff inet 10.0.100.195/24 brd 10.0.100.255 scope global eth0 # host ovirt-engine.lab.ovido.at ovirt-engine.lab.ovido.at has address 10.0.100.24 # host 10.0.100.24 24.100.0.10.in-addr.arpa domain name pointer ovirt-engine.lab.ovido.at. So in my case I have correct DNS settings (forward and reverse), but my ovirt-engine host has a totally different IP address. I didn't test SSO with Kerberos in user portal (maybe this want work), but authentication with IPA user in user portal and admin portal is working fine even with these totally wrong DNS configuration. Regards, René

2 3

[Users] oVirt Presentations
by René Koch (ovido) 09 Apr '13

09 Apr '13

Hello list, I just want to inform you that I'll be talking about RHEV and oVirt on 2 (maybe 3) events in Austria and Germany in the next weeks (45min presentation slots). The first one is at the Open Source Data Center Conference in Nuremberg, Germany which takes place from April, 17th to April, 18th: http://www.netways.de/en/osdc/osdc2013/ Details on my presentation (presentation language is German): http://www.netways.de/index.php?id=3732&L=1 Main focus will be Red Hat Enterprise Virtualization, but will also talk about oVirt. The second event is at the Graz Linux Days in Austria on April, 20th: http://www.linuxtage.at/ (Sorry, there's no English version available) Details on my presentation (in German): http://glt13-programm.linuxtage.at/events/174.de.html As this event is a non-profit community event I'll be focusing on oVirt, but will also talk about differences to RHEV. Eventually I'll be talking about oVirt on the Linux Weeks in Vienna, Austria, too. This event is from May, 2nd to May, 4th: http://www.linuxwochen.at/ At the moment the call for papers is still running... If there's someone from Germany or Austria on this list and attends on one of these events please let me know :) Regards, René

1 0

[Users] api question / create vm from template
by Alex Leonhardt 09 Apr '13

09 Apr '13

hi, i've been successful in creating a VM from a template, however, that VM is a thin-provisioned one ? is it possible to make it a cloned / pre-provisioned ? otherwise i wont be able to update/remove the template when i need to ? this is on ovirt 3.1 thanks alex -- | RHCE | Sen Sys Engineer / Platform Architect | www.vcore.co | www.vsearchcloud.com |

3 4

[Users] SPM is always contending
by Andy Singleton 08 Apr '13

08 Apr '13

After the node acting as spm was (accidentally) put into maintenance mode, the spm role is always contending. The original node doesnt take the role back either. About 10 instances were still running on the node when it was put into maintenance. I have ovirt 3.1.0-4 with a targetcli iscsi store. Here are the contents of the engine.log. Andy 2013-04-04 15:25:23,979 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (QuartzScheduler_Worker-96) [5449512a] spmStart polling ended. spm status: Free 2013-04-04 15:25:23,993 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (QuartzScheduler_Worker-96) [5449512a] START, HSMClearTaskVDSCommand(vd sId = d265245e-3cc5-11e2-bce7-001018fc3b14, taskId=7c1cf7c6-21d4-4504-882d-3d465742b6ef), log id: d2da8ba 2013-04-04 15:25:24,011 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (QuartzScheduler_Worker-96) [5449512a] FINISH, HSMClearTaskVDSCommand, log id: d2da8ba 2013-04-04 15:25:24,012 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (QuartzScheduler_Worker-96) [5449512a] FINISH, SpmStartVDSCommand, return: org.ovirt.engine.core.common.businessentities.SpmStatusResult@30a05218, log id: 5980d6f4 2013-04-04 15:25:24,014 INFO [org.ovirt.engine.core.bll.storage.SetStoragePoolStatusCommand] (QuartzScheduler_Worker-96) [6d6dbe98] Running command: SetStoragePoolStat usCommand internal: true. Entities affected : ID: 0ba15357-9b3b-4a76-8dac-b2b66b922174 Type: StoragePool 2013-04-04 15:25:24,843 ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (QuartzScheduler_Worker-96) [6d6dbe98] IrsBroker::Failed::GetStoragePoolInfoV DS due to: IrsSpmStartFailedException: IRSGenericException: IRSErrorException: SpmStart failed 2013-04-04 15:25:24,900 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (QuartzScheduler_Worker-96) [6d6dbe98] Irs placed on server null failed. Proc eed Failover 2013-04-04 15:25:34,977 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (QuartzScheduler_Worker-96) [6d6dbe98] hostFromVds::selectedVds - moon-palace , spmStatus Free, storage pool Primary 2013-04-04 15:25:35,806 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (QuartzScheduler_Worker-96) [6d6dbe98] starting spm on vds moon-palace, stora ge pool Primary, prevId -1, LVER 2520 2013-04-04 15:25:35,851 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (QuartzScheduler_Worker-96) [6d6dbe98] START, SpmStartVDSCommand(vdsId = 3d 88c8b0-84bc-11e2-96b1-001018fc3b14, storagePoolId = 0ba15357-9b3b-4a76-8dac-b2b66b922174, prevId=-1, prevLVER=2520, storagePoolFormatType=V2, recoveryMode=Manual, SCSIF encing=false), log id: 30f4f64e 2013-04-04 15:25:45,901 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (QuartzScheduler_Worker-96) [6d6dbe98] spmStart polling started: taskId = 6 8002cff-478d-4c2c-8839-b935d8a858b1 2013-04-04 15:26:11,903 INFO [org.ovirt.engine.core.bll.VdsLoadBalancer] (QuartzScheduler_Worker-81) [45db3aaa] VdsLoadBalancer: Starting load balance for cluster: BP_ Primary, algorithm: EvenlyDistribute. 2013-04-04 15:26:12,807 INFO [org.ovirt.engine.core.bll.VdsLoadBalancer] (QuartzScheduler_Worker-81) [45db3aaa] VdsLoadBalancer: high util: 51, low util: 0, duration: 2, threashold: 80 2013-04-04 15:26:12,845 INFO [org.ovirt.engine.core.bll.VdsLoadBalancingAlgorithm] (QuartzScheduler_Worker-81) [45db3aaa] VdsLoadBalancer: number of relevant vdss (no migration, no pending): 3. 2013-04-04 15:26:12,846 INFO [org.ovirt.engine.core.bll.VdsCpuVdsLoadBalancingAlgorithm] (QuartzScheduler_Worker-81) [45db3aaa] VdsLoadBalancer: number of over utilize d vdss found: 0. 2013-04-04 15:26:12,846 INFO [org.ovirt.engine.core.bll.VdsCpuVdsLoadBalancingAlgorithm] (QuartzScheduler_Worker-81) [45db3aaa] VdsLoadBalancer: max cpu limit: 40, num ber of ready to migration vdss: 3 2013-04-04 15:26:19,024 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (QuartzScheduler_Worker-96) [6d6dbe98] spmStart polling ended: taskId = 680 02cff-478d-4c2c-8839-b935d8a858b1 task status = finished 2013-04-04 15:26:19,024 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (QuartzScheduler_Worker-96) [6d6dbe98] Start SPM Task failed - result: clea nSuccess, message: VDSGenericException: VDSErrorException: Failed in vdscommand to HSMGetTaskStatusVDS, error = BlockSD master file system FSCK error This log sequence repeats indefinitely

2 1

[Users] Trouble in ovirt during install new host.
by Kasen 08 Apr '13

08 Apr '13

Hi! I update ovirt from 3.1 to 3.2 and now i have trouble. When I want install new host in ovirt, its install failed. In log i see next: 2013-04-08 11:09:55 DEBUG otopi.context context._executeMethod:127 method exception Traceback (most recent call last): File "/tmp/ovirt-JvvRifwHtC/pythonlib/otopi/context.py", line 117, in _executeMethod method['method']() File "/tmp/ovirt-JvvRifwHtC/otopi-plugins/ovirt-host-deploy/vdsm/bridge.py", line 671, in _validation addresses=addresses, RuntimeError: Cannot connect engine host 'localhost.localdomain' at any of the addresses ['127.0.0.1', '127.0.0.1', '127.0.0.1', '::1', '::1', '::1']' 2013-04-08 11:09:55 ERROR otopi.context context._executeMethod:136 Failed to execute stage 'Setup validation': Cannot connect engine host 'localhost.localdomain' at any of the addresses ['127.0.0.1', '127.0.0.1', '127.0.0.1', '::1', '::1', '::1']' and 2013-04-08 11:09:55 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:213 DIALOG:SEND ***Q:VALUE VDSM/engineHost 2013-04-08 11:09:55 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:213 DIALOG:SEND ### 2013-04-08 11:09:55 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:213 DIALOG:SEND ### Please specify value for 'VDSM/engineHost': 2013-04-08 11:09:55 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:213 DIALOG:SEND ### Response is VALUE VDSM/engineHost=type:value or ABORT VDSM/engineHost 2013-04-08 11:09:55 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:213 DIALOG:RECEIVE VALUE VDSM/engineHost=str:localhost.localdomain How and where i must specified VDSM/engineHost? Best regards, Kasen.

2 2

Re: [Users] SPM is always contending - resolved
by Andy Singleton 07 Apr '13

07 Apr '13

Problem resolved. The clue was obviously in the engine.log (FSCK error) but I couldn't see what was needing an fsck or why this would prevent the storage of every vm from being mounted. I still dont understand the whole of the ovirt storage mechanism. More information was in the node vdsm.log - It pointed here. /dev/mapper/9ed5a2fe--ae4c--433f--a15f--2c710ed5156f-master One fsck later problem resolved. Thanks Andy

2 2

[Users] Fwd: cannot assign network without IP address
by Alona Kaplan 07 Apr '13

07 Apr '13

It seems like an old bug. Since oVirt3.1 a lot of bugs were fixed in the edit nic dialog. Maybe consider using ovirt3.2? Alona. ----- Original Message ----- > From: "Vincent Van der Kussen" <vincent(a)vanderkussen.org> > To: users(a)ovirt.org > Sent: Wednesday, April 3, 2013 9:38:23 AM > Subject: [Users] cannot assign network without IP address > > Hi, > > I'm using oVirt 3.1 on CentOS 6.3 and have the following issue > > If I add a logical network to the datacenter i cannot assign it to a host > without giving it an IP address. > > I just want to use the logical network as a bridge without specifying an IP > address (None option in the network settings). > > This is the error message : > > Error while executing action Setup Networks: Illegal or Incomplete IP > Address > > > In the log on the engine i see the following error : > > VDSGenericException: VDSNetworkException: Specified netmask or gateway but > not ip > > To me this is complete bogus since none of my nics have any ip settings > defined. > Only the ovirtmgmt network has this which is copied from the initial network > setup > during the ovirt-engine install > > I also found this post which discusses the same problem : > > http://www.mail-archive.com/users@ovirt.org/msg06261.html > > When adding the logical network to the datacenter I can also not unset the > "VM Network" option. > > In our RHEV setup we can do this perfectly. > > > Regards, > Vincent > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users >

2 1

[Users] deploying ovirt-engine from src
by lof yer 07 Apr '13

07 Apr '13

After following the steps in http://www.ovirt.org/Building_oVirt_engine, I met some problems in deploying it. Here's the status while I visit http://localhost:8700/webadmin/webadmin/WebAdmin.html HTTP Status 500 - ------------------------------ *type* Exception report *message* *description* *The server encountered an internal error () that prevented it from fulfilling this request.* *exception* javax.servlet.ServletException: Servlet execution threw an exception org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132) *root cause* java.lang.NoClassDefFoundError: Could not initialize class org.ovirt.engine.ui.frontend.server.gwt.plugin.PluginDataManager$Holder org.ovirt.engine.ui.frontend.server.gwt.plugin.PluginDataManager.getInstance(PluginDataManager.java:74) org.ovirt.engine.ui.frontend.server.gwt.WebAdminHostPageServlet.getPluginData(WebAdminHostPageServlet.java:85) org.ovirt.engine.ui.frontend.server.gwt.WebAdminHostPageServlet.doGet(WebAdminHostPageServlet.java:53) javax.servlet.http.HttpServlet.service(HttpServlet.java:734) javax.servlet.http.HttpServlet.service(HttpServlet.java:847) org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132) *note* *The full stack trace of the root cause is available in the JBoss Web/7.0.13.Final logs.* ------------------------------ JBoss Web/7.0.13.Final What does it mean? And What should I do next? Thanks!!

2 1

[Users] Query regarding storagedomins
by Romil Gupta 07 Apr '13

07 Apr '13

Hi , *I want to fetch the storagedomains details based on the datacenter id using ovirt-engine-sdk-3.2.0.2-1.* Datacenter details: <data_centers> <data_center id="e1165cdf-2c42-48a9-87ca-5c3f5cfa8fb3" href="/api/datacenters/e1165cdf-2c42-48a9-87ca-5c3f5cfa8fb3"> <name>datacenter1</name> <description/> <link rel="storagedomains" href="/api/datacenters/e1165cdf-2c42-48a9-87ca-5c3f5cfa8fb3/storagedomains"/> <link rel="permissions" href="/api/datacenters/e1165cdf-2c42-48a9-87ca-5c3f5cfa8fb3/permissions"/> </data_center> <data_center id="347748d0-b72b-439f-bb2b-bd5c82041158" href="/api/datacenters/347748d0-b72b-439f-bb2b-bd5c82041158"> <name>Default</name> <description/> <link rel="storagedomains" href="/api/datacenters/347748d0-b72b-439f-bb2b-bd5c82041158/storagedomains"/> <link rel="permissions" href="/api/datacenters/347748d0-b72b-439f-bb2b-bd5c82041158/permissions"/> </data_center> </data_centers> I want to know how I could get the storagedomains details using the above xml ? *_session = API(url=rhevm_uri, username=rhevm_username, password=rhevm_password, insecure=True) * *print "Connected to RHEVM Successful"* *datacenters = _session.datacenters.list()* *for dc in datacenters:* * print dc.name* * print dc.id* * links = dc.link* * for l in links:* * print l.rel* * print l.href* *but this wont give any storagedomain details :(* I tried this : storages = _session.storagedomains.list() for storage in storages: print storage.name <storage_domains> <storage_domain id="e3e3b0cd-48a4-4bb8-a75b-07813f2c165e" href="/api/storagedomains/e3e3b0cd-48a4-4bb8-a75b-07813f2c165e"> <name>rhevmiso</name> <link rel="permissions" href="/api/storagedomains/e3e3b0cd-48a4-4bb8-a75b-07813f2c165e/permissions"/> <link rel="files" href="/api/storagedomains/e3e3b0cd-48a4-4bb8-a75b-07813f2c165e/files"/> <type>iso</type> <master>false</master> <storage> <type>nfs</type> <address>*.*.*.*</address> <path>/iso/rhevmisonfs</path> </storage> <available>767725404160</available> <used>94489280512</used> <committed>0</committed> <storage_format>v1</storage_format> </storage_domain> <storage_domain id="baa46f57-13e0-4159-ace1-f04e61e1e937" href="/api/storagedomains/baa46f57-13e0-4159-ace1-f04e61e1e937"> <name>rhevmVMdata</name> <link rel="permissions" href="/api/storagedomains/baa46f57-13e0-4159-ace1-f04e61e1e937/permissions"/> <link rel="files" href="/api/storagedomains/baa46f57-13e0-4159-ace1-f04e61e1e937/files"/> <type>data</type> <master>true</master> <storage> <type>nfs</type> <address>*.*.*.*</address> <path>/iso/rhevmnfs</path> </storage> <available>767725404160</available> <used>94489280512</used> <committed>100931731456</committed> <storage_format>v1</storage_format> </storage_domain> </storage_domains> but it wont contains datacenter ID :( help me out ! -- *Thanks & Regards,* *Romil Gupta *

3 4

[Users] Custom columns in VM list (engine admin) ?
by Ernest Beinrohr 05 Apr '13

05 Apr '13

This is a multi-part message in MIME format. --------------080005070104070301000505 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Hi, is it possible to add columns to the VM list view in ovirt-engine administrator? I'd like to add a memory columns (max, current) and also some IO stats and. In RHEL 5 virt-manager show something like this: http://i.imgur.com/e18DJtf.png -- Ernest Beinrohr, AXON PRO Ing <http://www.beinrohr.sk/ing.php>, RHCE <http://www.beinrohr.sk/rhce.php>, RHCVA <http://www.beinrohr.sk/rhce.php>, LPIC <http://www.beinrohr.sk/lpic.php>, +421-2--6241-0360 <callto://+421-2--6241-0360>, +421-903--482-603 <callto://+421-903--482-603> icq:28153343, skype:oernii-work <callto://oernii-work>, jabber:oernii@jabber.org ------------------------------------------------------------------------ “The bureaucracy is expanding to meet the needs of the expanding bureaucracy.” ― Oscar Wilde --------------080005070104070301000505 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi, is it possible to add columns to the VM list view in <br> ovirt-engine administrator? I'd like to add a memory <br> columns (max, current) and also some IO stats and.<br> <br> <br> In RHEL 5 virt-manager show something like this:<br> <a class="moz-txt-link-freetext" href="http://i.imgur.com/e18DJtf.png">http://i.imgur.com/e18DJtf.png</a><br> <br> <div class="moz-signature">-- <br> <div id="oernii_footer" style="color: gray;"> <span style="font-family: Lucida Console, Luxi Mono, Courier, monospace; font-size: 90%;"> Ernest Beinrohr, AXON PRO<br> <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/ing.php">Ing</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/rhce.php">RHCE</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/rhce.php">RHCVA</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/lpic.php">LPIC</a>, <a style="text-decoration: none; color: gray;" href="callto://+421-2--6241-0360">+421-2--6241-0360</a>, <a style="text-decoration: none; color: gray;" href="callto://+421-903--482-603">+421-903--482-603</a><br> icq:28153343, <a style="text-decoration: none; color: gray;" href="callto://oernii-work">skype:oernii-work</a>, <a class="moz-txt-link-abbreviated" href="mailto:jabber:oernii@jabber.org">jabber:oernii@jabber.org</a> <br> </span> <hr style="height: 1px; width: 95%"> “The bureaucracy is expanding to meet the needs of the expanding bureaucracy.” ― Oscar Wilde </div> </div> </body> </html> --------------080005070104070301000505--

3 2

[Users] Fast way to see all snapshots on my infra?
by Gianluca Cecchi 05 Apr '13

05 Apr '13

Hello, is there any way to see a recap of all the snapshots in my DCs and Clusters? Both from webadmin gui or REST API or query on engine db? Thanks, Gianluca

2 3

[Users] User Portal
by suporte＠logicworks.pt 05 Apr '13

05 Apr '13

------=_Part_92_13710243.1363783104563 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit How can I add users to the user portal? Thanks -- Jose Ferradeira http://www.logicworks.pt ------=_Part_92_13710243.1363783104563 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: verdana,helvetica,sans-serif; font-size: 10pt; color: #330066'>How can I add users to the user portal?<br><br>Thanks<br><br>-- <br><div><span name="x"></span><hr style="width: 100%; height: 2px;">Jose Ferradeira<br>http://www.logicworks.pt<br><span name="x"></span><br></div></div></body></html> ------=_Part_92_13710243.1363783104563--

7 19

[Users] Feature request: allow usbtablet and vram config via UI
by Dead Horse 04 Apr '13

04 Apr '13

Allow for a usbtablet input device to be enabled and used. Perhaps via the console configuration UI for a VM in the admin and user portals. -Highly useful in the event that a guest OS does not have the spice agent loaded nor is it available for said guest OS. -Also in the case of guest OS that simply does not want to work and play well with <input type='mouse' bus='ps2'> - All Operating systems since ~1998 understand <input type='tablet' bus='usb'/> and will deal with mouse events in absolute mode. Allow for vram and vram_ size to be configurable for CIrrus(VNC) and QXL(Spice) console types. Again probably best suited to have this on console configuration UI for a VM in the admin and user portals. - Default VRAM sizes are not enough to allow for larger resolutions and pixel depths at times. - Especially the case in multiple monitor SPICE, fullscreen, or VNC consoles - More VRAM is useful in the case of attempting to run accelerated applications within a QXL configured guest. The above can be altered via VDSM hooks however this is rather painful. Additionally these options or similar are configurable in other competing solutions. - DHC

2 4

[Users] error 400
by Ryan Wilkinson 04 Apr '13

04 Apr '13

Keep getting the following error from IE when logged into the Ovirt admin console: Error: A Request to the Server failed with the following Status Code: 400 I'm getting it from an all-in-one setup and also from a seperate Engine/ host configuration.

2 1

[Users] Fedora 18 and jboss-as update
by Gianluca Cecchi 04 Apr '13

04 Apr '13

Hello, having all-in-one 3.2.1 based on f18 I'm now proposed an update of jboss to version 7.1.1-17.fc18 Some time ago I remember someone writing about problems with jboss updates but I don't remember if with nightly or in general... Currently I have jboss-as-7.1.1-13.fc18.noarch Can I safely update it? The same for not all-in-one installations? anyone already updated ? Thanks in advance, Gianluca

1 0

[Users] way to edit iSCSI storage domain?
by Yuriy Demchenko 04 Apr '13

04 Apr '13

Hi, is there any way to edit iSCSI storage domain: change/add targets ? (lun, id, sn and actual content wouldn't be affected) Without VM export/import process - downtime should be as little as possible. I'm researching possibility to use oVirt in env where I have only FC storage, connected to 2 servers (and sadly, second server will be available later, hence my question about changing targets in oVirt) and bunch of blades, on which i would like to run virtualization (no fc storage connectivity) - so idea is to share storage via iSCSI/tgtd and use multipathd with failover mode to protect from storage corruption. -- Yuriy Demchenko

3 8

Re: [Users] About Ovirt Java SDK Question
by Michael Pasternak 04 Apr '13

04 Apr '13

Hi, On 04/03/2013 12:55 PM, 田德富 wrote: > *hi,* > ** > * The "*Ovirt Java SDK" *whether to support Android?* > * if support, how to do.* > ** > * thanks.* > ** At the moment Java-SDK is not supported on Android, as Android dalvik VM does not support javax which is SDK core infrastructure. -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 0

Re: [Users] 答复: 答复: about python sdk
by Michael Pasternak 04 Apr '13

04 Apr '13

what error do you see? On 04/03/2013 03:48 AM, leaboy@126 wrote: > 3.1 > > -----邮件原件----- > 发件人: Michael Pasternak [mailto:mpastern@redhat.com] > 发送时间: 2013年4月2日 18:43 > 收件人: leaboy@126 > 抄送: users(a)ovirt.org > 主题: Re: 答复: about python sdk > > On 04/02/2013 01:07 PM, leaboy@126 wrote: >> I'm sorry, the problem is still exist. There is only admin@internal can >> login, the user(UserRole) added in my domain can't >> login. When I changed it's role to UserpUser, it can login well. >> PS: I have get the latest sdk and assigned the 'filter' True. > > what is the version of your backend? > >> >> -----邮件原件----- >> 发件人: Michael Pasternak [mailto:mpastern@redhat.com] >> 发送时间: 2013年4月2日 17:04 >> 收件人: leaboy@126 >> 抄送: users(a)ovirt.org >> 主题: Re: about python sdk >> >> On 04/02/2013 11:21 AM, leaboy@126 wrote: >>> Hello: >>> >>> When I use samples-portals to connect to overt-engine, I find >> only super-user can login, >>> >>> And other user role can’t. So I don’t know whether overt-sdk doesn’t >> support other user role , >>> >>> or some error in my test Environment. >>> >>> >>> >>> When I login http://localhost:8700/api, here is super-user too. >>> >> >> please use latest sdk and make sure 'filter' argument in the sdk >> constructor is set to 'True' if you wish using non-sdmin api. >> > > -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 0

[Users] does ovirt is integrated with svirt
by bigclouds 03 Apr '13

03 Apr '13

------=_Part_176374_909024336.1364979338218 Content-Type: text/plain; charset=GBK Content-Transfer-Encoding: 7bit hi,all does ovirt is integrated with svirt? thanks ------=_Part_176374_909024336.1364979338218 Content-Type: text/html; charset=GBK Content-Transfer-Encoding: 7bit <div style="line-height:1.7;color:#000000;font-size:14px;font-family:arial"><div>hi,all</div><div>does ovirt is integrated with svirt?</div><div> </div><div>thanks</div></div><br><br><span title="neteasefooter"><span id="netease_mail_footer"></span></span> ------=_Part_176374_909024336.1364979338218--

3 2