- Users - oVirt List Archives

[Users] Best practice for securing oVirt's NFS mounts
by Prakash Surya 12 Mar '14

12 Mar '14

Hi, All the documentation I've seen states that the oVirt NFS storage should use the "all_squash,anonuid=36,anongid=36" options. Obviously this isn't secure, so I'm curious how others have locked down their NFS storage? Is the best option to just limit access to these NFS exports to the IP addresses of the hypervisor nodes (and maybe the engine)? Is there a better way to go about this? -- Cheers, Prakash

3 4

[Users] oVirt Weekly Meeting Minutes -- 2014-03-12
by Brian Proffitt 12 Mar '14

12 Mar '14

Minutes: http://ovirt.org/meetings/ovirt/2014/ovirt.2014-03-12-15.00.html Minutes (text): http://ovirt.org/meetings/ovirt/2014/ovirt.2014-03-12-15.00.txt Log: http://ovirt.org/meetings/ovirt/2014/ovirt.2014-03-12-15.00.log.html ========================= #ovirt: oVirt Weekly Sync ========================= Meeting started by bkp at 15:00:26 UTC (full logs at http://ovirt.org/meetings/ovirt/2014/ovirt.2014-03-12-15.00.log.html) Meeting summary * Agenda and roll Call (bkp, 15:01:27) ** infra update (bkp, 15:01:27) ** 3.3 update releases (bkp, 15:01:27) ** 3.4 progress (bkp, 15:01:27) ** conferences and workshops (bkp, 15:01:27) ** other topics (bkp, 15:01:29) * infra update (bkp, 15:03:11) ** infra Space improvements on jobs performed on slaves (bkp, 15:10:11) ** infra Jobs modified to filter out infra issues from devel issues (bkp, 15:10:41) ** infra some jobs will start to verify -1 some patches when 'Unstable', meaning a devel error was found and it must be solved prior to merge (bkp, 15:11:18) * 3.3 releases update (bkp, 15:11:34) ** 3.3.4 released last week (bkp, 15:12:22) ** 3.3.5 development started (bkp, 15:12:32) ** http://www.ovirt.org/OVirt_3.3.z_release-management links to tracker, release note place holder and test page (bkp, 15:13:07) * 3.4 progress (bkp, 15:14:56) ** 3.4.0 RC2 released yesterday (bkp, 15:15:28) ** 3.4 GA postponed by one week giving people more time for testing latest bug fix introduced since test day (bkp, 15:16:10) ** 3.4 updates Networking. No blockers in GA build (fixes made it into build). (bkp, 15:21:03) ** 3.4 updates, UX. No updates. (bkp, 15:25:07) ** 3.4 updates Storage. All set for 3.4, handling incoming BZs as they come. (bkp, 15:30:35) ** 3.4 updates Storage. Considering backport of REST API for snapshots from 3.5 to 3.4, so that Single Disk Snapshots (a 3.4 RFE) would be easier to test (bkp, 15:31:30) ** 3.4 updates Storage. REST API backport for 3.4.1 presumably. It's already merged in the master branch (the upcoming 3.5), still need to verify how much of a mess a backport would be. (bkp, 15:32:04) ** 3.4 updates PPC. Some bugs, non-blockers. PPC64 is ok for 3.4, considering release notes for it (bkp, 15:37:14) ** 3.4 updates PPC. Will confirm VDSM compatability on Fedora and CentOS and will report back. (bkp, 15:40:33) ** 3.4 updates Integration. Users are reporting issues while running setup on x86_64, seeing i686 packages being installed (investigating) (bkp, 15:42:30) ** 3.4 updates Integration. Stabilizing RC for next week GA (bkp, 15:42:50) ** 3.4 updates Gluster. Ramesh has sent a WIP patch for external events actions (bkp, 15:44:46) ** 3.4 updates SLA. No team member reporting. (bkp, 15:48:03) ** 3.4 updates Infra. No team member reporting. (bkp, 15:48:10) ** 3.4 updates Virt. No team member reporting. (bkp, 15:48:16) * conferences and workshops (bkp, 15:48:52) ** Weekly conference and call-for-papers mail going out on [users] and [arch] (bkp, 15:50:14) ** Community: Building a library of content for presentations, starting with topics. Feedback welcome (bkp, 15:50:39) * other topics (bkp, 15:51:02) ** Press release and release notes are ready for 3.4. (bkp, 15:53:21) ** New Download page ready for publication at 3.4 release. Review page at http://www.ovirt.org/DraftDownload (bkp, 15:53:29) ** Web site revamp is in order. Planning meetings on IRC coming. (bkp, 15:53:46) Meeting ended at 15:54:54 UTC (full logs). Action items (none) People present (lines said) bkp (95) sbonazzo (18) lvernia (7) lbianc (6) amureini (5) shubhendu (4) dcaro (4) Psi-Jack (2) ecohen (2) ovirtbot (2) sbonazzo1 (1) rbarry (1) fabiand (1) Generated by MeetBot 0.1.4. -- Brian Proffitt - oVirt Community Manager Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 312 477 4320 / Cell: +1 574 383 9BKP IRC: bkp

1 0

[Users] Win8 on oVirt
by Michael Wagenknecht 12 Mar '14

12 Mar '14

Hi, I try to install Windows 8 32 bit on our oVirt 3.3.2 environmet. I googled that two CPU Flags (SEP and NX) have to be set. But I cannot manipulate the CPU Flags in the GUI. Is there an other way to set the SEP and NX Flags for the VM? Best Regards, Michael

6 28

[Users] ovirt engine in high availability
by Gianluca Cecchi 11 Mar '14

11 Mar '14

Hello, I have made a base testing environment putting engine in HA. I think it could complement self hosted engine. As this could be of interest for enterprise based installations, I used CentOS 6.5 as OS environment for engine. Even if in upcoming RH EL 7 it seems corosync will substitute cman, in this 6.5 test I have used cman/pacemaker with pcs commands. The engine servers are two vSphere VMs, so I tested the configuration both without stonith and with vSphere CLi sdk and fence_vmware fenging agent. Also, as this kind of environment could be suitable for DR too, I set up the filesystem resource with drbd in active/passive. There are many possible configurations; to stick with similar environment as the standalone engine, I configured the whole stack of resources in one group, also with the nfs share for the default ISO-DOMAIN. Actually in this kind of environment it would be preferable to have a dedicated nfs resource on another ip so that it doesn't influence the ovirt-engine resource that is more critical. In the same way one could choose to put the PostgreSQL resource as a separate one, optimizing and balancing nodes' utilization. At the moment I successfully tested on ovirt-engine-3.3.3-2.el6.noarch and I have not yet configured any hypervisor hosts. I will do next days. I plan to test also upgrades to 3.3.4 and 3.4.0, to see if maintenance activity would reveal too complex and be a show stopper. In the mean time what I tested to be transparent with a client session connected to webadmin portal is: - relocation of resources - power off of the passive node - power off of the master node With transparent I mean that in the same browser window the user gets the login page (the same as when it goes timeout) and after login it gets the same situation as before. Obviously the PostgreSQL rdbms has stopped (or crashed in third case) and so problems could arise as if you stopped your db or powered off your server in single server environment. If there is interest I can post my configuration steps into a wiki page on oVirt web site (after learning the formatting syntax... ;-).. the page name could be something like "clustered_engine". In the mean time if you have any scenario I can test to verify consistency you are welcome. Gianluca

2 1

[Users] [Events] Call for Papers Update: March 11, 2014
by Brian Proffitt 11 Mar '14

11 Mar '14

The following is a list of industry events that oVirt community members may want to attend and give presentations. If you are interested in speaking, or if you know of other events not on this list, please contact me at bkp(a)redhat.com. --- LinuxCon/CloudOpen Japan May 20-22 Tokyo, Japan http://events.linuxfoundation.org/events/linuxcon-japan Call for papers deadline: 3/14/2014 Call for papers URL: http://events.linuxfoundation.org/events/linuxcon-japan/program/cfp LISA Nov. 9-14 Seattle, WA https://www.usenix.org/conference/lisa14 Call for papers deadline: 4/14/2014 Call for papers URL: https://www.usenix.org/conference/lisa14/call-for-participation DockerConf June 6 London, UK http://dockerconf.com/ Call for papers: Open (deadline not known) Call for papers URL: http://bit.ly/1fnHtSA LinuxCon/CloudOpen NA Aug. 20-22 Chicago, IL http://events.linuxfoundation.org/events/linuxcon-north-america Call for papers deadline: 5/2/2014 Call for papers URL: http://events.linuxfoundation.org/events/linuxcon-north-america/program/cfp LinuxCon/CloudOpen Europe Oct. 13-15 http://events.linuxfoundation.org/events/cloudopen-europe Dusseldorf, Germany Call for papers deadline: 7/11/2014 Call for papers URL: http://events.linuxfoundation.org/events/cloudopen-europe/program/cfp KVM Forum Oct. 14-16 Dusseldorf, Germany http://events.linuxfoundation.org/events/kvm-forum Call for papers: Not Open Linux.conf.au Jan. 12-16, 2015 Auckland, NZ Call for papers: Not Open -- Brian Proffitt - oVirt Community Manager Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 312 477 4320 / Cell: +1 574 383 9BKP IRC: bkp @ OFTC

1 0

[Users] Adding a Second disk to a virtual windows 2008 R2 server
by Andy Michielsen 11 Mar '14

11 Mar '14

Hello, What is the way to go to add a second disk to my virtual windows server 2008R2 ? I'm using ovirt 3.3.3 on a centos 6.5 server. The windows server is in use so I 'm not at liberty to reïnstall a new one without loosing a lot of time. Kind regards.

2 1

[Users] Disk Migration Permissions
by Maurice James 11 Mar '14

11 Mar '14

--_f6cbe220-bf5e-4549-9a1f-326f3df52a07_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable What permissions do I need to allow a user to be able to live migrate a dis= k from one storage domain to another? I have a group with the Power User an= d Super user permissions on the cluster and they get the following error wh= en attempting to migrate a disk Error while executing action: User is not authorized to perform this action= . 3.3.3-2.el6 = --_f6cbe220-bf5e-4549-9a1f-326f3df52a07_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <style></style></head> <body class=3D'hmmessage'><div dir=3D'ltr'>What permissions do I need to al= low a user to be able to live migrate a disk from one storage domain to ano= ther? I have a group with the Power User and Super user permissions on the = cluster and they get the following error when attempting to migrate a disk<= div><br></div><div><span style=3D"font-family: 'Arial Unicode MS'=2C Arial= =2C sans-serif=3B font-size: 10pt=3B">Error while executing action: User is= not authorized to perform this action.</span></div><div><span style=3D"fon= t-family: 'Arial Unicode MS'=2C Arial=2C sans-serif=3B font-size: 10pt=3B">= <br></span></div><div><span style=3D"font-family: 'Arial Unicode MS'=2C Ari= al=2C sans-serif=3B font-size: 10pt=3B"><br></span></div><div><span style= =3D"font-family: 'Arial Unicode MS'=2C Arial=2C sans-serif=3B font-size: 10= pt=3B text-align: -webkit-center=3B">3.3.3-2.el6</span></div> </= div></body> </html>= --_f6cbe220-bf5e-4549-9a1f-326f3df52a07_--

2 2

[Users] Foreman and oVirt 3.4 fails
by Andrew Lau 11 Mar '14

11 Mar '14

Hi, Is anyone using Foreman with oVirt 3.4? Post upgrade, I appear to be having some issues with Foreman reporting " undefined method `text' for nil:NilClass" I'm not sure if this ends up being a Foreman issue or oVirt, or it could just be my install gone bad.. however last time it was the oVirt API had been updated which caused issues with Foreman so I thought I'd post here first. Thanks, Andrew

3 3

[Users] Confused about Gluster usage
by Martijn Grendelman 11 Mar '14

11 Mar '14

Hi, I have been running oVirt 3.3.3 with a single node in a NFS type data center. Now, I would like to set up a second node. Both nodes have plenty of storage, but they're only connected to each other over 1 Gbit. I'm running nodes on CentOS 6.5. What I would like to accomplish is: * use a Gluster-backed DATA domain on my existing NFS datacenter * load balancing by even spread of VMs over the two nodes * leveraging the speed of local storage, so running a VM over NFS to the other node is undesireable So I was thinking I want the storage to be replicated, so that I can take a node down for maintenance without having to migrate all the storage to another node. I was thinking: GlusterFS. But I am confused on how to set it up. I understand I cannot use the libgfapi native integration due to dependency problems on CentOS. I have set up a replicated Gluster volume manually. How can I use my two nodes with this Gluster volume? What are the necessary steps? I did try a couple of things; most notably I was able to create a 2nd data center with POSIX storage, and mount the Gluster volume there, but that doesn't work for the first node. Alternatively, it would also be fine to migrate all existing VMs to the POSIX datacenter and then move the existing node from the old NFS data center to the new POSIX data center. Is that possible without exporting/importing all the VMs? Cheers, Martijn.

2 1

[Users] Supported Billing Software for oVirt
by Dewangga 11 Mar '14

11 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there, I'm new using oVirt 3.3, and I planned to make cloud environment using payment gateway. For example, Hostbill are support Openstack, basic things are for provision. http://hostbillapp.com/hostbill/ And, is there any billing software/management support oVirt? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJTE0mLAAoJEEyntV5BtO+QO/cH/0Akcj/MWj4wihjHUKcoEfWU DBUvL+yiPAY9jRnd6jyGXfEGe8rFekS1PhdF+D+tpih1s8rt6PPC0bSnpVJmCaro I5FvJiQD8W6ZMilKdHEPfc1TGIqM2+nd3uyaGVis7tcxySebfpheJ/k7qxzxZHUf YQqtKOLbTKttRu2t4vSbaQa76LEUdr74GQV+/XTHWQ2yGFHCul7lI3Rv+CT14mH/ +y+AWUQVmO3euaCt8IpYvpy5AZe55ytSSLYplBueyVE8fhMwhwME+qDqHp5lx8j6 PfDuxJfcHvZK1KrQrq55U6aUc2mkf6vi29l5aRWE4svq12aweJvvGvN1NsMvIAM= =ViEx -----END PGP SIGNATURE-----

4 4