- Users - oVirt List Archives

Upgrade to Ovirt 3.5.0 Authentication Fails to IPA
by Cameron Christensen 19 Nov '14

19 Nov '14

--=-7FGTMvtERpsX2N9uBb42 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello, I upgraded to ovirt 3.5.0 and can no longer authenticate to IPA. Starting up ovrit-engine the extension manager fails to properly load the service that handles Kerberos/LDAP. engine.log: ... 2014-11-10 11:29:25,106 INFO [org.ovirt.engine.core.dal.job.ExecutionMessageDirector] (MSC service thread 1-10) Start initializing ExecutionMessageDirector 2014-11-10 11:29:25,108 INFO [org.ovirt.engine.core.dal.job.ExecutionMessageDirector] (MSC service thread 1-10) Finished initializing ExecutionMessageDirector 2014-11-10 11:29:25,145 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Loading extension 'builtin-authn-internal' 2014-11-10 11:29:25,146 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Extension 'builtin-authn-internal' loaded 2014-11-10 11:29:25,148 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Loading extension 'internal' 2014-11-10 11:29:25,150 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Extension 'internal' loaded 2014-11-10 11:29:25,154 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Loading extension 'builtin-authn-EXAMPLE.ORG' 2014-11-10 11:29:25,215 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Extension 'builtin-authn-EXAMPLE.ORG' loaded 2014-11-10 11:29:25,218 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Loading extension 'EXAMPLE.ORG' 2014-11-10 11:29:25,264 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Extension 'EXAMPLE.ORG' loaded 2014-11-10 11:29:25,265 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Initializing extension 'EXAMPLE.ORG' 2014-11-10 11:29:25,265 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Extension 'EXAMPLE.ORG' initialized 2014-11-10 11:29:25,266 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Initializing extension 'builtin-authn-internal' 2014-11-10 11:29:25,266 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Extension 'builtin-authn-internal' initialized 2014-11-10 11:29:25,267 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Initializing extension 'builtin-authn-EXAMPLE.ORG' 2014-11-10 11:29:25,267 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Extension 'builtin-authn-EXAMPLE.ORG' initialized 2014-11-10 11:29:25,268 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Initializing extension 'internal' 2014-11-10 11:29:25,268 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Extension 'internal' initialized 2014-11-10 11:29:25,268 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Start of enabled extensions list 2014-11-10 11:29:25,269 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Instance name: 'EXAMPLE.ORG', Extension name: 'Kerberos/Ldap Authz (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' 2014-11-10 11:29:25,270 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Instance name: 'builtin-authn-internal', Extension name: 'Internal Authn (Built-in)', Version: 'N/A', Notes: '', License: 'AS L 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' 2014-11-10 11:29:25,270 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Instance name: 'builtin-authn-EXAMPLE.ORG', Extension name: 'Kerberos/Ldap Authn (Built-in)', Version: 'N/A', Notes: '', Licen se: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' 2014-11-10 11:29:25,271 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) Instance name: 'internal', Extension name: 'Internal Authz (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' 2014-11-10 11:29:25,272 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-10) End of enabled extensions list 2014-11-10 11:29:25,404 INFO [org.ovirt.engine.core.bll.aaa.DbUserCacheManager] (MSC service thread 1-10) Start initializing DbUserCacheManager 2014-11-10 11:29:25,405 INFO [org.ovirt.engine.core.bll.aaa.DbUserCacheManager] (MSC service thread 1-10) Finished initializing DbUserCacheManager 2014-11-10 11:29:25,414 INFO [org.ovirt.engine.core.bll.tasks.AsyncTaskManager] (MSC service thread 1-10) Initialization of AsyncTaskManager completed successfully. 2014-11-10 11:29:25,416 INFO [org.ovirt.engine.core.vdsbroker.ResourceManager] (MSC service thread 1-10) Start initializing ResourceManager 2014-11-10 11:29:25,458 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase= ] (DefaultQuartzScheduler_Worker-1) Failed to run command LdapSearchUserByQ= ueryCommand. Domain is EXAMPLE.ORG. User is user1(a)EXAMPLE.ORG. 2014-11-10 11:29:25,459 ERROR [org.ovirt.engine.core.bll.aaa.SyncUsers] (DefaultQuartzScheduler_Worker-1) Error during user synchronization of extension EXAMPLE.ORG. Exception message is No enum constant org.ovirt.engine.extensions.aaa.bui ltin.kerberosldap.LDAPSecurityAuthentication. Trying to authenticate with user2 from IPA produces this error: engine.log: 2014-11-10 11:30:08,777 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase= ] (ajp--127.0.0.1-8702-2) Failed to run command LdapAuthenticateUserCommand= . Domain is EXAMPLE.ORG. User is user2. 2014-11-10 11:30:08,779 ERROR [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand] (ajp--127.0.0.1-8702-2) Error during CanDoActionFailure.: Class: class org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException Input:=20 {Extkey[name=3DAAA_AUTHN_CREDENTIALS;type=3Dclass java.lang.String;uuid=3DAAA_AUTHN_CREDENTIALS[03b96485-4bb5-4592-8167-810a5= c909706];]=3D***, Extkey[name=3DEXTENSION_INVOKE_CONTEXT;type=3Dclass org.o= virt.engine.api.extensions.ExtMap;uuid=3DEXTENSION_INVOKE_CONTEXT[886d2ebb-= 312a-49ae-9cc3-e1f849834b7d];]=3D{Extkey[name=3DEXTENSION_INTERFACE_VERSION= _MAX;type=3Dclass java.lang.Integer;uuid=3DEXTENSION_INTERFACE_VERSION_MAX[= f4cff49f-2717-4901-8ee9-df362446e3e7];]=3D0, Extkey[name=3DEXTENSION_LICENS= E;type=3Dclass java.lang.String;uuid=3DEXTENSION_LICENSE[8a61ad65-054c-4e31= -9c6d-1ca4d60a4c18];]=3DASL 2.0, Extkey[name=3DEXTENSION_HOME_URL;type=3Dcl= ass java.lang.String;uuid=3DEXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d1= 92e18304];]=3Dhttp://www.ovirt.org, Extkey[name=3DEXTENSION_LOCALE;type=3Dc= lass java.lang.String;uuid=3DEXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d= 778bb29];]=3Den_US, Extkey[name=3DEXTENSION_NAME;type=3Dclass java.lang.Str= ing;uuid=3DEXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=3DKerbero= s/Ldap Authn (Built-in), Extkey[name=3DEXTENSION_INTERFACE_VERSION_MIN;type= =3Dclass java.lang.Integer;uuid=3DEXTENSION_INTERFACE_VERSION_MIN[2b84fc91-= 305b-497b-a1d7-d961b9d2ce0b];]=3D0, Extkey[name=3DEXTENSION_CONFIGURATION;t= ype=3Dclass java.util.Properties;uuid=3DEXTENSION_CONFIGURATION[2d48ab72-f0= a1-4312-b4ae-5068a226b0fc];]=3D***, Extkey[name=3DEXTENSION_AUTHOR;type=3Dc= lass java.lang.String;uuid=3DEXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e0701= 8b7fbcc];]=3DThe oVirt Project, Extkey[name=3DEXTENSION_INSTANCE_NAME;type= =3Dclass java.lang.String;uuid=3DEXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5= -a245-8674327f011b];]=3Dbuiltin-authn-EXAMPLE.ORG, Extkey[name=3DEXTENSION_= BUILD_INTERFACE_VERSION;type=3Dclass java.lang.Integer;uuid=3DEXTENSION_BUI= LD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=3D0, Extkey[na= me=3DEXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=3Dinterface java.util.Coll= ection;uuid=3DEXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9= b-ebff01e35263];]=3D[, config.authn.user.password], Extkey[name=3DAAA_AUTHN= _CAPABILITIES;type=3Dclass java.lang.Long;uuid=3DAAA_AUTHN_CAPABILITIES[9d1= 6bee3-10fd-46f2-83f9-3d3c54cf258d];]=3D12, Extkey[name=3DEXTENSION_GLOBAL_C= ONTEXT;type=3Dclass org.ovirt.engine.api.extensions.ExtMap;uuid=3DEXTENSION= _GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=3D*skip*, Extkey[na= me=3DEXTENSION_VERSION;type=3Dclass java.lang.String;uuid=3DEXTENSION_VERSI= ON[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=3DN/A, Extkey[name=3DEXTENSION_M= ANAGER_TRACE_LOG;type=3Dinterface org.slf4j.Logger;uuid=3DEXTENSION_MANAGER= _TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=3Dorg.slf4j.impl.Slf4jLo= gger(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace.Kerberos/= Ldap Authn (Built-in).builtin-authn-EXAMPLE.ORG), Extkey[name=3DEXTENSION_P= ROVIDES;type=3Dinterface java.util.Collection;uuid=3DEXTENSION_PROVIDES[8cf= 373a6-65b5-4594-b828-0e275087de91];]=3D[org.ovirt.engine.api.extensions.aaa= .Authn]}, Extkey[name=3DAAA_AUTHN_USER;type=3Dclass java.lang.String;uuid= =3DAAA_AUTHN_USER[1ceaba26-1bdc-4663-a3c6-5d926f9dd8f0];]=3Duser2, Extkey[n= ame=3DEXTENSION_INVOKE_COMMAND;type=3Dclass org.ovirt.engine.api.extensions= .ExtUUID;uuid=3DEXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f2= 8d];]=3DAAA_AUTHN_AUTHENTICATE_CREDENTIALS[d9605c75-6b43-4b00-b32c-06bdfa80= 244c]} Output: {Extkey[name=3DEXTENSION_INVOKE_RESULT;type=3Dclass java.lang.Integer;uuid=3DEXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-09= 9c772ddd4e];]=3D2, Extkey[name=3DEXTENSION_INVOKE_MESSAGE;type=3Dclass java= .lang.String;uuid=3DEXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb7= 2f5893];]=3DNo enum constant org.ovirt.engine.extensions.aaa.builtin.kerber= osldap.LDAPSecurityAuthentication.} engine-manage-domains shows the IPA domain but I cannot delete the domain or edit it. # engine-manage-domains list Domain: EXAMPLE.ORG User name: null Manage Domains completed successfully # engine-manage-domains delete --domain=3DEXAMPLE.ORG Domain example.org doesn't exist in the configuration. Any ideas on fixing? Regards, Cameron --=-7FGTMvtERpsX2N9uBb42 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAABAgAGBQJUZiJKAAoJEM1PCzopIAOtj+4IAKqqzUwJopm2lptCLicVzS3O 2rdWqgA6XGTr7b0NOHRNyFk6dxgcw0Au9Nf5RMykpiw3GKxDAQ64BKvNmxncGSL2 HudZ/+iTtwFsgxU87jGOYD/l9Gq9uaxheH8VdkwY6R4sCCUGLmM9oDo33TYz2k/a my+m7CsBYdfzJFRrcNdHcaRWFtJ9GKxiuUyCPhAPYRHW1Z86EZk1BbVb6gr/hyTG 56NZAgPa5nCBXchdETm+60JVwc3G/PY/Txo0oUxpd9CrBPLpxe45jojWSZuFAtk4 FX2gw0sNMo1CCaKOXumnJONF5pVpmcPH6VVZDtnPhs7Jbk5ntNpg2urqkejOR+M= =SDGw -----END PGP SIGNATURE----- --=-7FGTMvtERpsX2N9uBb42--

4 7

[QE][ACTION REQUIRED] oVirt 3.6.0 status
by Sandro Bonazzola 19 Nov '14

19 Nov '14

Hi, Release criteria discussion started on 2014-10-22 and should have ended last week as per current release process [1]. Since oVirt sync meeting wasn't held last week, it has been postponed to today 2014-11-19. Current options are: 1) keeping the same release criteria we had for 3.5 [2] 2) review the proposed changes [3] and prepare new release criteria for 3.6 Release management for 3.6.0 has been created [4] The key milestones for this release must be scheduled: Key Milestones Release criteria discussion start: 2014-10-22 Release criteria ready: 2014-11-19 Feature freeze: 60 Days before release First Test Day: 45 days before release Release Candidate: 30 days before release Release: 6 months after oVirt 3.5.0 release External Project Schedules Fedora 21: 2014-12-09 Fedora 22: 2015-XX-XX GlusterFS 3.7: 2015-04-29 OpenStack Kilo: 2015-04-30 Two different proposals have been made about above scheduling [5]: 1) extend the cycle to 10 months for allowing to include a large feature set 2) reduce the cycle to less than 6 months and split features over 3.6 and 3.7 Feature proposed for 3.6.0 must now be collected in the 3.6 google doc [9] and reviewed by maintainers. A tracker bug for 3.6.0 has been created [6] and currently shows no blockers. There are 412 bugs [7] targeted to 3.6.0. Excluding node and documentation bugs we have 392 bugs [8] targeted to 3.6.0. [1] http://www.ovirt.org/Release_process [2] http://www.ovirt.org/OVirt_3.5_release-management#Release_Criteria [3] http://lists.ovirt.org/pipermail/devel/2014-September/008695.html [4] http://www.ovirt.org/OVirt_3.6_Release_Management [5] http://lists.ovirt.org/pipermail/users/2014-November/028875.html [6] https://bugzilla.redhat.com/show_bug.cgi?id=1155425 [7] http://goo.gl/zwkF3r [8] http://goo.gl/ZbUiMc [9] http://goo.gl/9X3G49 -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

[QE][ACTION NEEDED] oVirt 3.5.1 RC status - branching
by Sandro Bonazzola 19 Nov '14

19 Nov '14

Hi, We're going to start composing oVirt 3.5.1 RC on *2014-11-25 08:00 UTC* from 3.5 branch. In order to stabilize the release a new branch ovirt-engine-3.5.1 will be created from the same git hash used for composing the RC. Maintainers: - Please be sure that 3.5 snapshot allow to create VMs before *2014-11-24 15:00 UTC* - Please be sure that no pending patches are going to block the release before *2014-11-24 15:00 UTC* - If any patch must block the RC release please raise the issue as soon as possible. A bug tracker [1] has been opened and shows 2 open blocker: Bug ID Whiteboard Status Summary 1164218 POST glfs_set_volfile_server() method causes segmentation fault when bad arguments are passed. 1159839 storage POST New FC LUNs are not detected on hypervisor without a reboot 1162640 gluster POST supervdsm segfault in libgfapi while querying volume status detail 1160846 sla NEW Can't add disk to VM without specifying disk profile when the storage domain has more than one disk profile The following bugs have been keyworded as Regression and not marked as blockers: Bug ID Whiteboard Status Summary 1162640 gluster POST supervdsm segfault in libgfapi while querying volume status detail 1164215 infra NEW vdsm sos plugin doesn't work 1159314 sla NEW Error accessing ha metadata while deploying second host 1138144 storage NEW [BLOCKED]Failed to autorecover storage domain after unblocking connection with host 1118349 storage NEW [vdsm] Creating DataCenter 3.5 using master domain V1 fails with InquireNotSupportedError There are still 150 bugs [2] targeted to 3.5.1. Excluding node and documentation bugs we still have 123 bugs [3] targeted to 3.5.1. Maintainers / Assignee: - Please review bugs marked as Regression and add to blocker if they're real regressions. - Please add the bugs to the tracker if you think that 3.5.1 should not be released without them fixed. - Please update the target to 3.5.2 or later for bugs that won't be in 3.5.1: it will ease gathering the blocking bugs for next releases. - Please fill release notes, the page has been created here [4] Community: - If you're testing oVirt 3.5 nightly snapshot, please add yourself to the test page [5] [1] http://bugzilla.redhat.com/1155170 [2] http://goo.gl/7G0PDV [3] http://goo.gl/6gUbVr [4] http://www.ovirt.org/OVirt_3.5.1_Release_Notes [5] http://www.ovirt.org/Testing/oVirt_3.5.1_Testing -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

Engine is still unreachable
by Sandvik Agustin 19 Nov '14

19 Nov '14

Hi!, I have install ovirt 3.4 on centos 6.6 following this documentation http://community.redhat.com/blog/2014/03/up-and-running-with-ovirt-3-4/ I have already completed the installation of ovirt engine inside of the vm, when going back to hosted-engine --deploy terminal and choosing 1 the hosted-engine --deploy says: (1, 2, 3)[1]: 1 [ ERROR ] Engine is still unreachable Engine health status page is not yet reachable. To continue make a selection from the options below: (1) Continue setup - engine installation is complete (2) Power off and restart the VM (3) Abort setup what should I do? how to fix this? Thanks in advance, sandvik

3 3

Recommendations for Storage Pool sizes
by Groten, Ryan 18 Nov '14

18 Nov '14

--_000_61A8344D117D814CA4DA393472F38CF4019BEC6D4ACD1001M360cor_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I've been looking around for any best practices/recommendations on how larg= e a storage domain can be but can't seem to find anything. For example, right now I have a 3TB domain made up of 3 1TB luns. That dom= ain has about 200 thin disks created from it. When I want to add more space, is there any reason I should not simply incr= ease the existing pool? Or is it better to create a new pool? Thanks, Ryan --_000_61A8344D117D814CA4DA393472F38CF4019BEC6D4ACD1001M360cor_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m=3D"http://sc= hemas.microsoft.com/office/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-= html40"><head><META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; chars= et=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 (filtere= d medium)"><style></style></head><body lang=3DEN-CA link=3Dblue vli= nk=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span style=3D'f= ont-size:10.0pt;font-family:"Century Gothic","sans-serif"'>I’ve been = looking around for any best practices/recommendations on how large a storag= e domain can be but can’t seem to find anything.<o:p></o:p></span></p= ><p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Century = Gothic","sans-serif"'><o:p> </o:p></span></p><p class=3DMsoNormal><spa= n style=3D'font-size:10.0pt;font-family:"Century Gothic","sans-serif"'>For = example, right now I have a 3TB domain made up of 3 1TB luns.  That do= main has about 200 thin disks created from it.<o:p></o:p></span></p><p clas= s=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Century Gothic",= "sans-serif"'><o:p> </o:p></span></p><p class=3DMsoNormal><span style= =3D'font-size:10.0pt;font-family:"Century Gothic","sans-serif"'>When I want= to add more space, is there any reason I should not simply increase the ex= isting pool?  Or is it better to create a new pool?<o:p></o:p></span><= /p><p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Centur= y Gothic","sans-serif"'><o:p> </o:p></span></p><p class=3DMsoNormal><s= pan style=3D'font-size:10.0pt;font-family:"Century Gothic","sans-serif"'>Th= anks,<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:10= .0pt;font-family:"Century Gothic","sans-serif"'>Ryan<o:p></o:p></span></p><= p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Century Go= thic","sans-serif"'><o:p> </o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Century Gothic","sans-serif"'><o:p>&= nbsp;</o:p></span></p></div></body></html>= --_000_61A8344D117D814CA4DA393472F38CF4019BEC6D4ACD1001M360cor_--

1 0

Ubuntu/Debian support?
by Itamar Heim 18 Nov '14

18 Nov '14

So, a quick non-scientific poll... Motivation: It has been suggested that adding ubuntu or debian distro support could broaden the reach of the oVirt community. To date, there has been some work towards this goal, but it is not "coming to a conclusion". Questions that comes to mind: 1) Is this still an issue? 2) Can we afford to dilute the focus we have as it is hard enough to stabilize the currently supported distro's? is it worth the potential impact? 3) Would it have maintainers catering to it so it won't be left behind / delay development? 4) Why bother with host support, ovirt-node can be used? 5) Why bother with engine support, a virtual appliance or a docker image could be used? 6) if we do it, should we focus on Ubuntu or Debian distro first? 7) if we do it, should we focus on host or engine first? Thoughts? Thanks, Itamar

7 8

separate ovirtmgmt from glusterfs traffic
by Demeter Tibor 18 Nov '14

18 Nov '14

------=_Part_2135316_487269704.1415878900070 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Hi, I have a 3 node gluster based cluster. There are 3x3 Nic with bonding. Sometimes the management is very slow because high gluster traffic. Is it possible to separate ovirtmgmt network from glusterfs traffic? I have only one interface (ovirtmgmt) for all of services (migration, etc). I just wondering I will make three VLANs for these services and use the QoS function. But how can specify glusterfs for use an other vlan for gluster traffic an a other one for management? Also, I have more questions about this: - If I specify a VLAN on ovirtmgmt, then what happend on nodes? I'm afraid the nodes will lost the connection with each other nodes. - Is it possible on a live system? What will happen with the mounted glustefs based datastores? - What does "vm network" mean on ovirtmgmt interface? Can I use this for seperate network traffic? My plan is - vlan.101 ovirtmgmt - vlan 102 glusterfs - vlan 103 migration - vlan 104 display What is the recommended procedure of this? Thanks in advance, Regards, Tibor ------=_Part_2135316_487269704.1415878900070 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><body><div style=3D"font-family: times new roman, new york, times, se= rif; font-size: 12pt; color: #000000"><div>Hi,</div><div><br></div><div>I h= ave a 3 node gluster based cluster. There are 3x3 Nic with bonding. Sometim= es the management is very slow because high gluster traffic. </div><di= v><br></div><div>Is it possible to separate ovirtmgmt network from glusterf= s traffic?</div><div>I have only one interface (ovirtmgmt) for all of servi= ces (migration, etc).</div><div>I just wondering I will make three VLANs fo= r these services and use the QoS function. But how can specify glusterfs fo= r use an other vlan for gluster traffic an a other one for management?&nbsp= ;</div><div>Also, I have more questions about this:</div><div><br></div><di= v>- If I specify a VLAN on ovirtmgmt, then what happend on nodes? I'm afrai= d the nodes will lost the connection with each other nodes.</div><div>- Is = it possible on a live system? What will happen with the mounted glustefs ba= sed datastores?</div><div>- What does "vm network" mean on ovirtmgmt interf= ace? Can I use this for seperate network traffic?</div><div><br></div><div>= <br></div><div>My plan is </div><div>- vlan.101 ovirtmgmt</div><div>- = vlan 102 glusterfs</div><div>- vlan 103 migration</div><div>- vlan 104 disp= lay</div><div><br></div><div>What is the recommended procedure of this?&nbs= p;</div><div><br></div><div>Thanks in advance,</div><div><br></div><div>Reg= ards,</div><div><br></div><div>Tibor</div><div><br></div><div><br></div></d= iv></body></html> ------=_Part_2135316_487269704.1415878900070--

4 7

Optaplanner Problem
by s k 18 Nov '14

18 Nov '14

--_d447f566-9b4b-4058-b5e2-f041e4e7bf42_ Content-Type: text/plain; charset="iso-8859-7" Content-Transfer-Encoding: quoted-printable Hello=2C I upgraded oVirt to version 3.5.0 today and I also installed Optaplanner in= a separate VM. While the installation was successful the Optimizer tab in = oVirt Engine doesn't report the correct information. Although there are VMs= that are shutdown and the hosts are not balanced in terms of memory usage = the Optimized tab reports the following: SOLUTION STATUS Status: Waiting for data... Solution is being refreshed every 30 seconds. Freeze solution VMS THAT SHOULD BE STARTED No VM starts are requested at this moment. MIGRATION / START STEPS No migrations are needed at this moment. The state is stable. TARGET STATE host vm memory [all in GB] used available =20 No information is displayed in TARGET STATE. = --_d447f566-9b4b-4058-b5e2-f041e4e7bf42_ Content-Type: text/html; charset="iso-8859-7" Content-Transfer-Encoding: quoted-printable <html> <head> <style></style></head> <body class=3D'hmmessage'><div dir=3D'ltr'>Hello=2C<div><br></div><div><br>= </div><div>I upgraded oVirt to version 3.5.0 today and I also installed Opt= aplanner in a separate VM. While the installation was successful the Optimi= zer tab in oVirt Engine doesn't report the correct information. Although th= ere are VMs that are shutdown and the hosts are not balanced in terms of me= mory usage the Optimized tab reports the following:</div><div><br></div><di= v><br></div><div><div>SOLUTION STATUS</div><div><br></div><div>&nbsp=3BStat= us: Waiting for data...</div><div><br></div><div>&nbsp=3BSolution is being = refreshed every 30 seconds.</div><div><br></div><div>&nbsp=3BFreeze solutio= n</div><div><br></div><div>VMS THAT SHOULD BE STARTED</div><div><br></div><= div>No VM starts are requested at this moment.</div><div><br></div><div>MIG= RATION / START STEPS</div><div><br></div><div>No migrations are needed at t= his moment. The state is stable.</div><div><br></div><div>TARGET STATE</div= ><div><br></div><div>host<span class=3D"Apple-tab-span" style=3D"white-spac= e:pre"> </span>vm<span class=3D"Apple-tab-span" style=3D"white-space:pre"> = </span>memory [all in GB]<span class=3D"Apple-tab-span" style=3D"white-spac= e:pre"> </span>&nbsp=3B</div><div>&nbsp=3B<span class=3D"Apple-tab-span" st= yle=3D"white-space:pre"> </span> <span class=3D"Apple-tab-span" style=3D"wh= ite-space:pre"> </span>used<span class=3D"Apple-tab-span" style=3D"white-sp= ace:pre"> </span>available<span class=3D"Apple-tab-span" style=3D"white-spa= ce:pre"> </span>&nbsp=3B</div></div><div><br></div><div><br></div><div><br>= </div><div>No information is displayed in TARGET STATE.</div> </= div></body> </html>= --_d447f566-9b4b-4058-b5e2-f041e4e7bf42_--

4 4

iptables management
by Chris Adams 18 Nov '14

18 Nov '14

During setup, I allowed the script to change iptables rules. Is this necessary? Also, is it an "active" management (where oVirt will make changes), or just a one-time thing? I ask because I have some other iptables setup I want (such as limited SSH access), and I don't want to make changes to iptables that oVirt will override later or anything like that. -- Chris Adams <cma(a)cmadams.net>

3 4

Re: [ovirt-users] Fake power management?
by mots 17 Nov '14

17 Nov '14

------=_Part_31_861888835.1416222010953 Content-Type: multipart/alternative; boundary="=_cjtqlQp4QSYnJhuKs0Xg4VLTs9O15oco497qtVs9HKP3duB5" This is a multi-part message in MIME format. Your mail reader does not understand MIME message format. --=_cjtqlQp4QSYnJhuKs0Xg4VLTs9O15oco497qtVs9HKP3duB5 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Yes, pacemaker manages the engine. That part is working fine, the engine = restarts on the remaining node without problems.=20=0D=0AIt's just that t= he guests don't come back up until the powered down node has been fenced = manually.=0D=0A=0D=0A-----Urspr=C3=BCngliche Nachricht-----=0D=0A> Von:Ba= rak Azulay <bazulay(a)redhat.com <mailto:bazulay@redhat.com> >=0D=0A> Gesen= det: Mon 17 November 2014 11:35=0D=0A> An: Patrick Lottenbach <pl(a)a-bot.c= h <mailto:pl@a-bot.ch> >=0D=0A> CC: users(a)ovirt.org <mailto:users@ovirt.o= rg>=20=0D=0A> Betreff: Re: [ovirt-users] Fake power management=3F=0D=0A>=20= =0D=0A>=20=0D=0A>=20=0D=0A> ----- Original Message -----=0D=0A> > From: "= mots" <mots(a)nepu.moe <mailto:mots@nepu.moe> >=0D=0A> > To: users(a)ovirt.or= g <mailto:users@ovirt.org>=20=0D=0A> > Sent: Friday, November 14, 2014 4:= 54:08 PM=0D=0A> > Subject: [ovirt-users] Fake power management=3F=0D=0A> = >=20=0D=0A> > Fake power management=3F Hello,=0D=0A> >=20=0D=0A> > I'm bu= ilding a small demonstration system for our sales team to take to a=0D=0A= > > customer so that they can show them our solutions.=0D=0A> > Hardware:= Two Intel NUC's, a 4 port switch and a laptop.=0D=0A> > Engine: Runs as = a VM on one of the NUCs, which one it runs on is determined=0D=0A> > by p= acemaker.=0D=0A> > Storage: Also managed by pacemaker, it's drbd backed a= nd accessed with iscsi.=0D=0A> > oVirt version: 3.5=0D=0A> > OS: CentOS 6= =2E6=0D=0A> >=20=0D=0A> > The idea is to have our sales representative (o= r the potential customer=0D=0A> > himself) randomly pull the plug on one = of the NUCs to show that the system=0D=0A> > stays operational when part = of the hardware fails.=0D=0A>=20=0D=0A> I assume you are aware that the e= ngine might fence the node it is running on ...=20=0D=0A> Or do you use p= acemaker to run the engine as well =3F=0D=0A>=20=0D=0A> > My problem is t= hat I don't have any way to implement power management, so the=0D=0A> > E= ngine can't fence nodes and won't restart guests that were running on the= =0D=0A> > node which lost power. In pacemaker I can just configure fencin= g over SSH or=0D=0A> > even disable the requirement to do so completely. = Is there something similar=0D=0A> > for oVirt, so that the Engine will co= nsider a node which it can't connect to=0D=0A> > to be powered down=3F=0D= =0A> >=20=0D=0A> > Regards,=0D=0A> >=20=0D=0A> > mots=0D=0A> >=20=0D=0A> = > _______________________________________________=0D=0A> > Users mailing = list=0D=0A> > Users(a)ovirt.org <mailto:Users@ovirt.org>=20=0D=0A> > http:/= /lists.ovirt.org/mailman/listinfo/users <http://lists.ovirt.org/mailman/l= istinfo/users>=20=0D=0A> >=20=0D=0A>=20=0D=0A=0D=0A --=_cjtqlQp4QSYnJhuKs0Xg4VLTs9O15oco497qtVs9HKP3duB5 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://ww= w.w3.org/TR/html4/loose.dtd"><html>=0A<head>=0A <meta name=3D"Generator"= content=3D"Zarafa WebApp v7.1.10-44973">=0A <meta http-equiv=3D"Content= -Type" content=3D"text/html; charset=3Dutf-8">=0A <title>AW: [ovirt-user= s] Fake power management=3F</title>=0A</head>=0A<body>=0A<font face=3D"ta= homa" size=3D"2">Yes, pacemaker manages the engine. That part is working = fine, the engine restarts on the remaining node without problems. <br>It'= s just that the guests don't come back up until the powered down node has= been fenced manually.</font><br><pre style=3D"white-space: -moz-pre-wrap= ; white-space: -pre-wrap; white-space: -o-pre-wrap; white-space: pre-wrap= ; word-wrap: break-word;" wrap=3D"">-----Urspr=C3=BCngliche Nachricht----= -<br>> Von:Barak Azulay <<a href=3D"mailto:bazulay@redhat.com">bazu= lay(a)redhat.com</a>><br>> Gesendet: Mon 17 November 2014 11:35<br>&g= t; An: Patrick Lottenbach <<a href=3D"mailto:pl@a-bot.ch">pl(a)a-bot.ch<= /a>><br>> CC: <a href=3D"mailto:users@ovirt.org">users(a)ovirt.org</a= ><br>> Betreff: Re: [ovirt-users] Fake power management=3F<br>> <br= >> <br>> <br>> ----- Original Message -----<br>> > From: "= mots" <<a href=3D"mailto:mots@nepu.moe">mots(a)nepu.moe</a>><br>> = > To: <a href=3D"mailto:users@ovirt.org">users(a)ovirt.org</a><br>> &= gt; Sent: Friday, November 14, 2014 4:54:08 PM<br>> > Subject: [ovi= rt-users] Fake power management=3F<br>> > <br>> > Fake power = management=3F Hello,<br>> > <br>> > I'm building a small demo= nstration system for our sales team to take to a<br>> > customer so= that they can show them our solutions.<br>> > Hardware: Two Intel = NUC's, a 4 port switch and a laptop.<br>> > Engine: Runs as a VM on= one of the NUCs, which one it runs on is determined<br>> > by pace= maker.<br>> > Storage: Also managed by pacemaker, it's drbd backed = and accessed with iscsi.<br>> > oVirt version: 3.5<br>> > OS:= CentOS 6.6<br>> > <br>> > The idea is to have our sales repr= esentative (or the potential customer<br>> > himself) randomly pull= the plug on one of the NUCs to show that the system<br>> > stays o= perational when part of the hardware fails.<br>> <br>> I assume you= are aware that the engine might fence the node it is running on ... <br>= > Or do you use pacemaker to run the engine as well =3F<br>> <br>&g= t; > My problem is that I don't have any way to implement power manage= ment, so the<br>> > Engine can't fence nodes and won't restart gues= ts that were running on the<br>> > node which lost power. In pacema= ker I can just configure fencing over SSH or<br>> > even disable th= e requirement to do so completely. Is there something similar<br>> &gt= ; for oVirt, so that the Engine will consider a node which it can't conne= ct to<br>> > to be powered down=3F<br>> > <br>> > Regar= ds,<br>> > <br>> > mots<br>> > <br>> > __________= _____________________________________<br>> > Users mailing list<br>= > > <a href=3D"mailto:Users@ovirt.org">Users(a)ovirt.org</a><br>> = > <a href=3D"http://lists.ovirt.org/mailman/listinfo/users" target=3D"= _blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>> > <b= r>> </pre>=0A</body>=0A</html> --=_cjtqlQp4QSYnJhuKs0Xg4VLTs9O15oco497qtVs9HKP3duB5-- ------=_Part_31_861888835.1416222010953 Content-Type: application/pgp-signature; name=signature.asc Content-Transfer-Encoding: 7bit Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: CIPHERMAIL (2.8.6-4) iQEcBAEBCAAGBQJUadU6AAoJELfzdzVzTtoKVGUH/2KQF6ZTNH7DpnXmG7K4wo9c nB924coImSQfGkFJjvIisRSG6vTnwk+z0uFjptulLl4o3NoPaDLs0IlvjpSvyGwf zFXLbOOls/SBVKOY5Nx7iAjEwIH4DXe06v2dYwJngQGnuyQv7pMDNUAz4uMXCup8 QjV39XbOYXQoLIfHUcGOJB824f2+LgRTrDr4HdZcyE0SHUfJaque3jdCDveXZFkB d0c0RKgB/r8wYBz+T7zIfutxtvKHYp1P5WmpbQ1J1Fr8XZKWgC7l3f7ubJyeldvK wyqZqokR+s1yptnUfLJUJEthnqFK0l+Fq2Vm9vuVpZsvwcn5QgQg+Kn1hmWCT7A= =qpmj -----END PGP SIGNATURE----- ------=_Part_31_861888835.1416222010953--

2 1