- Users - oVirt List Archives

oVirt - Node install on CentOS
by Simon Barrett 13 Jun '14

13 Jun '14

--_000_D86C48DF8800164BBE50B87623F7AC9548391A9Fln2wio001devtra_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Could anyone please confirm the correct process to run oVirt node on a stan= dard CentOS install, rather than using the node iso? I'm currently doing the following: - Install CentOS 6.5 - Install qemu-kvm-rhev rpm's to resolve live snapshot issues on t= he CentOS supplied rpm's - Yum install vdsm ovirt-node-plugin-vdsm vdsm-reg o I have to remove noexec from /tmp or the config fails - I then add the node from the ovirt-engine gui After resolving some problems with group memberships and vdsm requiring sud= o access, all is working. Live snapshots and storage migration are OK (test= ed NFS and Gluster as well). I couldn't really find any docs on how to do this so I just wanted to confi= rm if what I am doing makes sense. I also don't have the text configuration interface that I would normally ge= t on the oVirt node iso. Can I install this and use it on a non node iso in= stall? Many thanks for any assistance. Simon --_000_D86C48DF8800164BBE50B87623F7AC9548391A9Fln2wio001devtra_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"EN-GB" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> <p class=3D"MsoNormal">Could anyone please confirm the correct process to r= un oVirt node on a standard CentOS install, rather than using the node iso?= <o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">I’m currently doing the following:<o:p></o:p><= /p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve= l1 lfo1"><![if !supportLists]><span style=3D"mso-list:Ignore">-<span style= =3D"font:7.0pt "Times New Roman"">     &= nbsp;    </span></span><![endif]>Install CentOS 6.5<o:p></o:p></p> <p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve= l1 lfo1"><![if !supportLists]><span style=3D"mso-list:Ignore">-<span style= =3D"font:7.0pt "Times New Roman"">     &= nbsp;    </span></span><![endif]>Install qemu-kvm-rhev rpm’s to resolve live s= napshot issues on the CentOS supplied rpm’s<o:p></o:p></p> <p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve= l1 lfo1"><![if !supportLists]><span style=3D"mso-list:Ignore">-<span style= =3D"font:7.0pt "Times New Roman"">     &= nbsp;    </span></span><![endif]>Yum install vdsm ovirt-node-plugin-vdsm vdsm-reg<o:= p></o:p></p> <p class=3D"MsoListParagraph" style=3D"margin-left:72.0pt;text-indent:-18.0= pt;mso-list:l0 level2 lfo1"> <![if !supportLists]><span style=3D"font-family:"Courier New""><s= pan style=3D"mso-list:Ignore">o<span style=3D"font:7.0pt "Times New Ro= man"">   </span></span></span><![endif]>I have to remove noexec from /tmp or the con= fig fails<o:p></o:p></p> <p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve= l1 lfo1"><![if !supportLists]><span style=3D"mso-list:Ignore">-<span style= =3D"font:7.0pt "Times New Roman"">     &= nbsp;    </span></span><![endif]>I then add the node from the ovirt-engine gui<o:p><= /o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">After resolving some problems with group memberships= and vdsm requiring sudo access, all is working. Live snapshots and storage= migration are OK (tested NFS and Gluster as well). <o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">I couldn’t really find any docs on how to do t= his so I just wanted to confirm if what I am doing makes sense. <o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">I also don’t have the text configuration inter= face that I would normally get on the oVirt node iso. Can I install this an= d use it on a non node iso install?<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Many thanks for any assistance.<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Simon<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> </div> </body> </html> --_000_D86C48DF8800164BBE50B87623F7AC9548391A9Fln2wio001devtra_--

4 7

novnc error
by Garrett Baltezegar 13 Jun '14

13 Jun '14

Hello everyone, I'm running into an error getting novnc up and running with ovirt, and I'm hoping someone can help. My system is a CentOS minimal x86_64 install running ovirt fine. I have created VMs and I'm able to configure the console options. When I attempt to connect to them, however, I get a Server disconnected (code: 1006) error. I've searched online for a solution, but everything seems to point to simply running the engine-setup configuration utility and installing the ca.crt. I have tried both of these things, but I keep getting the same message, in Internet Explorer, Chrome and Firefox. Disabled iptables and selinux. Connected directly to VM with VNC Checked ovirt-websocket-proxy, and it is running - haven't touched config file - SSL=true Installed ca.crt - multiple times Reinstalled ovirt - clean first, the reinstall. Reinstalled ca.crt Nothing has helped so far. Does anyone have any ideas? I have a straight-forward setup using engine-setup; accepting the default answer most of the time. GlusterFS being one of the non-defaults. I appreciate your suggestions! GB

3 13

python-sdk: attach disk snapshot to another virtual machine
by Michael Ablassmeier 13 Jun '14

13 Jun '14

hi guys, according to an commit in Oct. 2013 there was a patch added to the SDK which allows to attach an existing snapshot to a virtual machine: commit 72e67dd5406f3c193234697ce88d92dbe64759d7 Author: Michael pasternak <mpastern(a)redhat.com> Date: Wed Oct 30 11:24:19 2013 +0200 sdk: regenerate against the latest api [..] - added ability to attach a disk snapshot to the virtual machine [..] I think this may be related to the new backup API: http://www.ovirt.org/Features/Backup-Restore_API_Integration can anyone give me an pointer on how to this through the python-sdk? Or is there an example for this anywhere to be found? Thanks! bye, - michael

2 1

KSM and cross-vm attack
by Jorick Astrego 13 Jun '14

13 Jun '14

This is a multi-part message in MIME format. --------------040006070006020209070007 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi, Maybe I should be posting to the kvm mailing list, but I think people here should know a thing or two about it. I just read the following research paper and although the attack was done on VMWare; from what I read about it, it could be possible with KSM on KVM also. If you really need tight security it looks like it would be better to disable KSM. But don't take my word for it as IANAC (I Am Not A Cryptographer). http://soylentnews.org/article.pl?sid=14/06/12/1349234&from=rss Practical Cross-VM AES Full Key Recovery Attack <http://soylentnews.org/article.pl?sid=14/06/12/1349234> posted by janrinok <http://soylentnews.org/%7Ejanrinok/> on Thursday June 12, @02:53PM ** dbot <http://soylentnews.org/%7Edbot/> writes: Researchers from Worcester Polytechnic Institute (Worcester, MA), have published a paper illustrating a practical full Advanced Encryption Standard key recovery from AES operations preformed in one virtual machine, by another VM <http://eprint.iacr.org/2014/435.pdf> [*PDF*] running on the same hardware at the same time. The attack specifically requires memory de-duplication to be enabled, and they target VMWare's VM software. Combining various attacks on memory de-duplication, and existing side channel attacks: In summary, this works: * shows for the first time that de-duplication enables fine grain cross-VM attacks; * introduces a new Flush+Reload based attack that does not require interrupting the victim after each encryption round; * presents the first practical cross-VM attack on AES; the attack is generic and can be adapted to any table-based block ciphers. They target OpenSSL 1.0.1. It will be interesting to see if the suggested countermeasure, flushing the T table cache after each operation (effective against other Flush+Reload attacks), is added to LibreSSL. Will it be left out, in the name of performance - or will they move to a different implementation of AES (not T table-based)? Kind regards, Jorick Astrego Netbulae --------------040006070006020209070007 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body text="#000000" bgcolor="#FFFFFF"> Hi,<br> <br> Maybe I should be posting to the kvm mailing list, but I think people here should know a thing or two about it.<br> <br> I just read the following research paper and although the attack was done on VMWare; from what I read about it, it could be possible with KSM on KVM also. If you really need tight security it looks like it would be better to disable KSM. <br> <br> But don't take my word for it as IANAC (I Am Not A Cryptographer). <br> <blockquote><a class="moz-txt-link-freetext" href="http://soylentnews.org/article.pl?sid=14/06/12/1349234&amp;from=rss">http://soylentnews.org/article.pl?sid=14/06/12/1349234&amp;from=rss</a><br> <div class="generaltitle"> <div class="title"> <h3> <a href="http://soylentnews.org/article.pl?sid=14/06/12/1349234">Practical Cross-VM AES Full Key Recovery Attack</a> </h3> </div> </div> <div class="body"> posted by <a href="http://soylentnews.org/%7Ejanrinok/"> janrinok</a> on Thursday June 12, @02:53PM   <br> <strong></strong> <div class="intro"> <p class="byline"> <a href="http://soylentnews.org/%7Edbot/">dbot</a> writes:</p> <p>Researchers from Worcester Polytechnic Institute (Worcester, MA), have published a paper illustrating a <a href="http://eprint.iacr.org/2014/435.pdf">practical full Advanced Encryption Standard key recovery from AES operations preformed in one virtual machine, by another VM</a> [<b>PDF</b>] running on the same hardware at the same time.</p> <p>The attack specifically requires memory de-duplication to be enabled, and they target VMWare's VM software. Combining various attacks on memory de-duplication, and existing side channel attacks:</p> <blockquote> <div> <p>In summary, this works:</p> <ul> <li>shows for the first time that de-duplication enables fine grain cross-VM attacks;</li> <li>introduces a new Flush+Reload based attack that does not require interrupting the victim after each encryption round;</li> <li>presents the first practical cross-VM attack on AES; the attack is generic and can be adapted to any table-based block ciphers.</li> </ul> </div> </blockquote> <p>They target OpenSSL 1.0.1.</p> <p>It will be interesting to see if the suggested countermeasure, flushing the T table cache after each operation (effective against other Flush+Reload attacks), is added to LibreSSL. Will it be left out, in the name of performance - or will they move to a different implementation of AES (not T table-based)?</p> </div> </div> </blockquote> Kind regards,<br> <br> Jorick Astrego<br> Netbulae<br> </body> </html> --------------040006070006020209070007--

4 7

Re: [ovirt-users] SLA : RAM scheduling
by Karli Sjöberg 13 Jun '14

13 Jun '14

--_000_5F9E965F5A80BC468BE5F40576769F0979FC230Bexchange21_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpEZW4gMjMgbWFqIDIwMTQgMTc6MTMgc2tyZXYgPT9JU08tODg1OS0xP1E/TmF0aGFuYT1FQmxf QmxhbmNoZXQ/PSA8YmxhbmNoZXRAYWJlcy5mcj46DQo+DQo+DQo+IExlIDIzLzA1LzIwMTQgMTc6 MTEsIE5hdGhhbmHDq2wgQmxhbmNoZXQgYSDDqWNyaXQgOg0KPiA+IEhlbGxvLA0KPiA+IE9uIG92 aXJ0IDMuNCwgaXMgaXQgcG9zc2libGUgdG8gc2NoZWR1bGUgdm1zIGRpc3RyaWJ1dGlvbiBkZXBl bmRpbmcgb24NCj4gPiBob3N0IFJBTSBhdmFpbGliaWxpdHk/DQo+ID4gQ29uY3JldGx5LCBJIGhh ZCB0byBtYW51YWxseSBtb3ZlIHZtcyBhbGwgdGhlIHZtcyB0byB0aGUgc2Vjb25kIGhvc3QNCj4g PiBvZiB0aGUgY2x1c3RlciwgdGhpcyBsZWFkIHRvIHJlYWNoIDkwJSBvY2N1cGF0aW9uIG9mIG1l bW9yeSBvbiB0aGUNCj4gPiBkZXN0aW5hdGlvbiBob3N0LiBXaGVuIG15IGZpcnN0IGhvc3QgaGFz IHJlYm9vdGVkLCBub25lIHZtcyBvZiB0aGUNCj4gPiBzZWNvbmQgaG9zdCBhdXRvbWF0aWNhbGx5 IG1pZ3JhdGVkIHRvIHRoZSBmaXJzdCBvbmUgd2hpY2ggaGFkIGZ1bGwNCj4gPiBSQU0uIEhvdyB0 byBtYWtlIHRoaXMgaGFwcGVuPw0KPiA+DQo+IC4uLiBzbyBhcyB0byBib3RoIGhvc3RzIGJlIFJB TSBldmVubHkgZGlzdHJpYnV0ZWQuLi4gaG9wZSB0byBiZSBlbm91Z2gNCj4gY2xlYXIuLi4NCg0K U291bmRzIGxpa2UgeW91IGp1c3Qgd2FudCB0byBhcHBseSB0aGUgY2x1c3RlciBwb2xpY3kgZm9y IGV2ZW4gZGlzdHJpYnV0aW9uLiBIYXZlIHlvdSBhc3NpZ25lZCBhbnkgcG9saWN5IGZvciB0aGF0 IGNsdXN0ZXI/DQoNCi9LDQoNCj4NCj4gLS0NCj4gTmF0aGFuYcOrbCBCbGFuY2hldA0KPg0KPiBT dXBlcnZpc2lvbiByw6lzZWF1DQo+IFDDtGxlIGV4cGxvaXRhdGlvbiBldCBtYWludGVuYW5jZQ0K PiBEw6lwYXJ0ZW1lbnQgZGVzIHN5c3TDqG1lcyBkJ2luZm9ybWF0aW9uDQo+IDIyNyBhdmVudWUg UHJvZmVzc2V1ci1KZWFuLUxvdWlzLVZpYWxhDQo+IDM0MTkzIE1PTlRQRUxMSUVSIENFREVYIDUN Cj4gVMOpbC4gMzMgKDApNCA2NyA1NCA4NCA1NQ0KPiBGYXggIDMzICgwKTQgNjcgNTQgODQgMTQN Cj4gYmxhbmNoZXRAYWJlcy5mcg0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPiBVc2VycyBtYWlsaW5nIGxpc3QNCj4gVXNlcnNAb3ZpcnQub3Jn DQo+IGh0dHA6Ly9saXN0cy5vdmlydC5vcmcvbWFpbG1hbi9saXN0aW5mby91c2Vycw0K --_000_5F9E965F5A80BC468BE5F40576769F0979FC230Bexchange21_ Content-Type: text/html; charset="utf-8" Content-ID: <04232DB00184AB4AA78CEAFB5A968397(a)ad.slu.se> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KPHAgZGlyPSJsdHIi Pjxicj4NCkRlbiAyMyBtYWogMjAxNCAxNzoxMyBza3JldiA9P0lTTy04ODU5LTE/UT9OYXRoYW5h PUVCbF9CbGFuY2hldD89ICZsdDtibGFuY2hldEBhYmVzLmZyJmd0Ozo8YnI+DQomZ3Q7PGJyPg0K Jmd0Ozxicj4NCiZndDsgTGUgMjMvMDUvMjAxNCAxNzoxMSwgTmF0aGFuYcOrbCBCbGFuY2hldCBh IMOpY3JpdCA6PGJyPg0KJmd0OyAmZ3Q7IEhlbGxvLDxicj4NCiZndDsgJmd0OyBPbiBvdmlydCAz LjQsIGlzIGl0IHBvc3NpYmxlIHRvIHNjaGVkdWxlIHZtcyBkaXN0cmlidXRpb24gZGVwZW5kaW5n IG9uIDxicj4NCiZndDsgJmd0OyBob3N0IFJBTSBhdmFpbGliaWxpdHk/PGJyPg0KJmd0OyAmZ3Q7 IENvbmNyZXRseSwgSSBoYWQgdG8gbWFudWFsbHkgbW92ZSB2bXMgYWxsIHRoZSB2bXMgdG8gdGhl IHNlY29uZCBob3N0IDxicj4NCiZndDsgJmd0OyBvZiB0aGUgY2x1c3RlciwgdGhpcyBsZWFkIHRv IHJlYWNoIDkwJSBvY2N1cGF0aW9uIG9mIG1lbW9yeSBvbiB0aGUgPGJyPg0KJmd0OyAmZ3Q7IGRl c3RpbmF0aW9uIGhvc3QuIFdoZW4gbXkgZmlyc3QgaG9zdCBoYXMgcmVib290ZWQsIG5vbmUgdm1z IG9mIHRoZSA8YnI+DQomZ3Q7ICZndDsgc2Vjb25kIGhvc3QgYXV0b21hdGljYWxseSBtaWdyYXRl ZCB0byB0aGUgZmlyc3Qgb25lIHdoaWNoIGhhZCBmdWxsIDxicj4NCiZndDsgJmd0OyBSQU0uIEhv dyB0byBtYWtlIHRoaXMgaGFwcGVuPzxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgLi4uIHNvIGFz IHRvIGJvdGggaG9zdHMgYmUgUkFNIGV2ZW5seSBkaXN0cmlidXRlZC4uLiBob3BlIHRvIGJlIGVu b3VnaCA8YnI+DQomZ3Q7IGNsZWFyLi4uPC9wPg0KPHAgZGlyPSJsdHIiPlNvdW5kcyBsaWtlIHlv dSBqdXN0IHdhbnQgdG8gYXBwbHkgdGhlIGNsdXN0ZXIgcG9saWN5IGZvciBldmVuIGRpc3RyaWJ1 dGlvbi4gSGF2ZSB5b3UgYXNzaWduZWQgYW55IHBvbGljeSBmb3IgdGhhdCBjbHVzdGVyPzwvcD4N CjxwIGRpcj0ibHRyIj4vSzwvcD4NCjxwIGRpcj0ibHRyIj4mZ3Q7PGJyPg0KJmd0OyAtLSA8YnI+ DQomZ3Q7IE5hdGhhbmHDq2wgQmxhbmNoZXQ8YnI+DQomZ3Q7PGJyPg0KJmd0OyBTdXBlcnZpc2lv biByw6lzZWF1PGJyPg0KJmd0OyBQw7RsZSBleHBsb2l0YXRpb24gZXQgbWFpbnRlbmFuY2U8YnI+ DQomZ3Q7IETDqXBhcnRlbWVudCBkZXMgc3lzdMOobWVzIGQnaW5mb3JtYXRpb248YnI+DQomZ3Q7 IDIyNyBhdmVudWUgUHJvZmVzc2V1ci1KZWFuLUxvdWlzLVZpYWxhPGJyPg0KJmd0OyAzNDE5MyBN T05UUEVMTElFUiBDRURFWCA1Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IDxicj4NCiZndDsgVMOpbC4gMzMgKDApNCA2NyA1NCA4NCA1NTxicj4NCiZndDsgRmF4Jm5i c3A7IDMzICgwKTQgNjcgNTQgODQgMTQ8YnI+DQomZ3Q7IGJsYW5jaGV0QGFiZXMuZnI8YnI+DQom Z3Q7PGJyPg0KJmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXzxicj4NCiZndDsgVXNlcnMgbWFpbGluZyBsaXN0PGJyPg0KJmd0OyBVc2Vyc0BvdmlydC5v cmc8YnI+DQomZ3Q7IGh0dHA6Ly9saXN0cy5vdmlydC5vcmcvbWFpbG1hbi9saXN0aW5mby91c2Vy czxicj4NCjwvcD4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_5F9E965F5A80BC468BE5F40576769F0979FC230Bexchange21_--

8 15

Re: [ovirt-users] fail to shutdown ubuntu guest
by Dan Kenigsberg 13 Jun '14

13 Jun '14

On Fri, Jun 13, 2014 at 09:22:37AM +0800, John Xue wrote: > I went through the xfce GUI options "Settings Manager" - "Power > Manager" to the field "When power button is pressed", set to power > off, but only successful one time, after reboot it was already set to > "Ask". If no one login to guest(just power on from console, and power > off), it always fail. > > I try to modify acpi configuration: > #cat /etc/acpi/events/powerbtn > event=button[ /]power > #action=/etc/acpi/powerbtn.sh > action=/sbin/poweroff > > It work, but I think this isn't a good solution. Any idea? Thanks! > > On Thu, Jun 12, 2014 at 11:50 PM, Dan Kenigsberg <danken(a)redhat.com> wrote: > > On Thu, Jun 12, 2014 at 01:37:19PM +0000, Sven Kieske wrote: > >> are you sure acpid is running inside the guest? > > > > ... or a guest agent? > > yes, both of them are running in guest. > > > > > Can you find the shutdown request on /var/log/vdsm/vdsm.log on the host > > that runs your guest? > > yes, this is the log: > > Thread-158109::DEBUG::2014-06-12 > 16:08:26,589::BindingXMLRPC::965::vds::(wrapper) client > [10.10.10.75]::call vmShutdown with > ('b552d1aa-bc35-4788-a448-1726d4b984d5', '30', 'System Administrator > has initiated shutdown of this Virtual Machine. Virtual Machine is > shutting down.') {} flowID [5939b847] > Thread-158109::DEBUG::2014-06-12 > 16:08:26,590::vm::2532::vm.Vm::(shutdown) > vmId=`b552d1aa-bc35-4788-a448-1726d4b984d5`::guestAgent shutdown > called > Thread-158109::DEBUG::2014-06-12 > 16:08:26,590::guestIF::304::vm.Vm::(desktopShutdown) > vmId=`b552d1aa-bc35-4788-a448-1726d4b984d5`::desktopShutdown called > Thread-158109::DEBUG::2014-06-12 > 16:08:26,591::BindingXMLRPC::972::vds::(wrapper) return vmShutdown > with {'status': {'message': 'Machine shut down', 'code': 0}} I there no attempt to use ACPI lower in the logs? Anyway, it seems that an ACPI even is received by the guest. Could you now share the log of your guest agent, in order to see if it received the shutdown request and handled it somehow?

2 1

VDSM update warning
by Chris 13 Jun '14

13 Jun '14

Hi, After updating VDSM to 4.14.9-0.el6 on a running vdsm node, I saw this warning/error: Updating : vdsm-python-zombiereaper-4.14.9-0.el6.noarch 1/10 Updating : vdsm-python-4.14.9-0.el6.x86_64 2/10 Updating : vdsm-xmlrpc-4.14.9-0.el6.noarch 3/10 Updating : vdsm-cli-4.14.9-0.el6.noarch 4/10 Updating : vdsm-4.14.9-0.el6.x86_64 5/10 Checking configuration status... Traceback (most recent call last): File "/usr/bin/vdsm-tool", line 145, in <module> sys.exit(main()) File "/usr/bin/vdsm-tool", line 142, in main return tool_command[cmd]["command"](*args[1:]) File "/usr/lib64/python2.6/site-packages/vdsm/tool/configurator.py", line 230, in configure service.service_stop(s) File "/usr/lib64/python2.6/site-packages/vdsm/tool/service.py", line 370, in service_stop return _runAlts(_srvStopAlts, srvName) File "/usr/lib64/python2.6/site-packages/vdsm/tool/service.py", line 351, in _runAlts "%s failed" % alt.func_name, out, err) vdsm.tool.service.ServiceOperationError: ServiceOperationError: _serviceStop failed Sending stop signal sanlock (1809): [ OK ] Waiting for sanlock (1809) to stop:[FAILED] Do I need to be worried about it? -- Chris

1 0

Installation of ovirt-node-iso rpm on oVirt Engine
by Faltermeier, Florian 13 Jun '14

13 Jun '14

--_000_64382B11A805E2499F47FBB0E6BA41071DEBA043XMBX1uibkacat_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, I'm planning to update/reinstall my ovirt 3.4 hypervisors via the update me= chanism that provided in the ovirt-engine. I red the documentation about Ovirt Node http://www.ovirt.org/Category:Node The first topic Upgrading -> Through ovirt Engine tells me that I have to i= nstall the "ovirt-node-iso rpm". So where can I find an actual RPM package? I've googled around already but = I didn't found any useful hints. Thank you! Regards, Florian --_000_64382B11A805E2499F47FBB0E6BA41071DEBA043XMBX1uibkacat_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"DE-AT" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span lang=3D"EN-US">Hi all,<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">I’m planning to update/re= install my ovirt 3.4 hypervisors via the update mechanism that provided in = the ovirt-engine.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">I red the documentation about O= virt Node <a href=3D"http://www.ovirt.org/Category:Node"> http://www.ovirt.org/Category:Node</a><o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">The first topic Upgrading ->= Through ovirt Engine tells me that I have to install the “ovirt-node= -iso rpm”.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">So where can I find an actual R= PM package? I’ve googled around already but  I didn’t foun= d any useful hints. <o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"EN-US">Thank you!<o:p></o:p></span></p= > <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Regards,<o:p></o:p></p> <p class=3D"MsoNormal">Florian<o:p></o:p></p> </div> </body> </html> --_000_64382B11A805E2499F47FBB0E6BA41071DEBA043XMBX1uibkacat_--

3 2

Qemu guest agent to install RPMs in guest VM from host machine
by Puneet Bakshi 13 Jun '14

13 Jun '14

Hi, I want to be able to install RPM packages (available in host system at some path) to the guest VM and want this facility to be available as a tool. I am thinking of having a gemu guest agent (qemu-ga) running inside guest VM. I did not find any available command ("virsh qemu-agent-command <guest_vm> ...") which can do the same. I am planning to implement a command in qemu guest agent, which I can invoke from virsh like below. "virsh qemu-agent-command vm_01 \ '{"execute":"guest-rpm-install", \ "arguments":{"path":"/usr/local/bin/ABC.rpm"}} I am able to pass arguments from host to guest VM but how am I supposed to pass the whole RPM image from host to guest (which the guest agent can receive and install)? Regards, ~Puneet

2 1

Live migration - quest VM stall
by Markus Stockhausen 13 Jun '14

13 Jun '14

------=_NextPartTM-000-6b409cfe-38cc-42a4-8291-cb24f54121f9 Content-Type: multipart/alternative; boundary="_000_12EF8D94C6F8734FB2FF37B9FBEDD17358629D8CEXCHANGEcollogi_" --_000_12EF8D94C6F8734FB2FF37B9FBEDD17358629D8CEXCHANGEcollogi_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, at the moment we are investigating stalls of Windows XP VMs during live migration. Our environment consists of: - FC20 hypervisor nodes - qemu 1.6.2 - OVirt 3.4.1 - Guest: Windows XP SP2 - VM Disks: Virtio & IDE tested - SPICE / VNC: both tested - Balloon: With & without tested - Cluster compatibility: 3.4 - CPU Nehalem After 2-10 live migrations the Windows XP guest is no longer responsive. First of all we thougth that it might be related to SPICE because we were no longer able to logon to the console. So we installed XP telnet server in the VM but that showed a similar behaviour: - The telnet welcome dialogue is always available (network seems ok) - Sometime after a live migration if you enter the password the telnet gives no response. In parallel the SPICE console allows to move open windows. But as soon as one clicks on the start the menu the system gives no response. Even after updating to qemu 2.0 with virt-preview respositories the behaviour stays the same. Looks like the system cannot access Any ideas? Markus --_000_12EF8D94C6F8734FB2FF37B9FBEDD17358629D8CEXCHANGEcollogi_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html dir=3D"ltr"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style type=3D"text/css" id=3D"owaParaStyle"></style> </head> <body fpstyle=3D"1" ocsi=3D"0"> <div style=3D"direction: ltr;font-family: Tahoma;color: #000000;font-size: = 10pt;">Hello, <div><br> </div> <div>at the moment we are investigating stalls of Windows XP VMs during</di= v> <div>live migration. Our environment consists of:</div> <div><br> </div> <div>- FC20 hypervisor nodes </div> <div>- qemu 1.6.2</div> <div>- OVirt 3.4.1</div> <div>- Guest: Windows XP SP2</div> <div>- VM Disks: Virtio & IDE tested</div> <div>- SPICE / VNC: both tested</div> <div>- Balloon: With & without tested</div> <div>- Cluster compatibility: 3.4 - CPU Nehalem</div> <div><br> </div> <div>After 2-10 live migrations the Windows XP guest is no longer responsiv= e.</div> <div><br> </div> <div>First of all we thougth that it might be related to SPICE because we w= ere</div> <div>no longer able to logon to the console. So we installed XP telnet serv= er in </div> <div>the VM <span style=3D"font-size: 10pt;">but </span><span sty= le=3D"font-size: 10pt;">that showed a similar behaviour:</span></div> <div><span style=3D"font-size: 10pt;"><br> </span></div> <div><span style=3D"font-size: 10pt;">- The telnet welcome dialogue is alwa= ys available (network seems ok)</span></div> <div><span style=3D"font-size: 10pt;">- </span><span style=3D"font-siz= e: 10pt;">Sometime after a live migration</span><span style=3D"font-size: 1= 0pt;">  if you enter the</span><span style=3D"font-size: 10pt;"> = password the telnet </span></div> <div><span style=3D"font-size: 10pt;">  gives no response.</span></div= > <div><span style=3D"font-size: 10pt;">In parallel the SPICE console allows = to move open windows. But as soon</span></div> <div><span style=3D"font-size: 10pt;">as one clicks on the start the menu t= he system gives no response.</span></div> <div><span style=3D"font-size: 10pt;"><br> </span></div> <div><span style=3D"font-size: 10pt;">Even after updating to qemu 2.0 with = virt-preview respositories the</span></div> <div><span style=3D"font-size: 10pt;">behaviour stays the same. Looks like = the system cannot access</span></div> <div><span style=3D"font-size: 10pt;"><br> </span></div> <div><span style=3D"font-size: 10pt;">Any ideas?</span></div> <div><span style=3D"font-size: 10pt;"><br> </span></div> <div><span style=3D"font-size: 10pt;">Markus</span></div> </div> </body> </html> --_000_12EF8D94C6F8734FB2FF37B9FBEDD17358629D8CEXCHANGEcollogi_-- ------=_NextPartTM-000-6b409cfe-38cc-42a4-8291-cb24f54121f9 Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" **************************************************************************** Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Über das Internet versandte E-Mails können unter fremden Namen erstellt oder manipuliert werden. Deshalb ist diese als E-Mail verschickte Nachricht keine rechtsverbindliche Willenserklärung. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln Vorstand: Kadir Akin Dr. Michael Höhnerbach Vorsitzender des Aufsichtsrates: Hans Kristian Langva Registergericht: Amtsgericht Köln Registernummer: HRB 52 497 This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. e-mails sent over the internet may have been written under a wrong name or been manipulated. That is why this message sent as an e-mail is not a legally binding declaration of intention. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln executive board: Kadir Akin Dr. Michael Höhnerbach President of the supervisory board: Hans Kristian Langva Registry office: district court Cologne Register number: HRB 52 497 **************************************************************************** ------=_NextPartTM-000-6b409cfe-38cc-42a4-8291-cb24f54121f9--

2 1