- Users - oVirt List Archives

[Users] openldap
by Jonas Israelsson 18 Nov '13

18 Nov '13

I saw that openldap is now listed as a provider when invoking engine-manage-domains. I'm eager to find more information about this. Does anyone know if there is any updated documentation floating around somewhere ? Found this: http://www.ovirt.org/LDAP_Quick_Start But the article seem only half-finished. Rgds Jonas

3 5

Re: [Users] openldap
by Jonas Israelsson 18 Nov '13

18 Nov '13

On 18/11/13 17:24, Juan Hernandez wrote: > On 11/18/2013 12:17 PM, Jonas Israelsson wrote: >> On 17/10/13 17:22, Juan Hernandez wrote: >>> On 10/17/2013 05:15 PM, Itamar Heim wrote: >>>> On 10/17/2013 09:57 AM, Jonas Israelsson wrote: >>>>> I saw that openldap is now listed as a provider when invoking >>>>> engine-manage-domains. I'm eager to find more information about this. >>>>> Does anyone know if there is any updated documentation floating around >>>>> somewhere ? >>>>> >>>>> Found this:http://www.ovirt.org/LDAP_Quick_Start >>>>> >>>>> But the article seem only half-finished. >>>>> >>>>> Rgds Jonas >>>>> >>>> this may help you. >>>> https://bugzilla.redhat.com/show_bug.cgi?id=967327#c4 >>>> https://bugzilla.redhat.com/show_bug.cgi?id=967327#c5 >>>> >>>> help finishing the wiki would be great... >>>> >>>> thanks, >>>> Itamar >>>> >>> I am attaching slightly updated notes on how to configure OpenLDAP and >>> Kerberos for both Fedora and RHEL/CentOS. >>> > I just updated the wiki with the latest version of the instructions that > I use. I think they work. Any enhancement is welcome. > >> Anyone knows if ovirt is able to handle that the kdc and directory >> service are running on separate hosts ? In my environment this is the >> case where the kdc is located at a service with it's own name/IP >> (admin.elementary.se), and the directory-service on ldap.elementary.se. >> Even though I see both names are resolved by a name server lookup a >> network sniffer trace shows that later (ldap.elementary.se) used for >> both kerberos and ldap access. >> > By default oVirt uses the Kerberos and LDAP servers that are provided by > DNS. Can you please check what is the result of the following DNS query? > > # dig -t SRV _kerberos._tcp.elementary.se All DNS querys gets the correct answer (both forward and reverse) Engine -- 192.168.24.217 -- dashboard.elementary.se LDAP-Server -- 192.168.24.239 -- ldap.elementary.se KDC -- 192.168.24.240 -- admin.elementary.se dig -t SRV _kerberos._tcp.elementary.se ; <<>> DiG 9.9.3-rpz2+rl.156.01-P2 <<>> -t SRV _kerberos._tcp.elementary.se ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19187 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;_kerberos._tcp.elementary.se. IN SRV ;; ANSWER SECTION: _kerberos._tcp.elementary.se. 3600 IN SRV 0 0 88 admin.elementary.se. ;; AUTHORITY SECTION: elementary.se. 3600 IN NS ns2.elementary.se. elementary.se. 3600 IN NS ns1.elementary.se. ;; ADDITIONAL SECTION: admin.elementary.se. 3600 IN A 192.168.24.240 ns1.elementary.se. 3600 IN A 192.168.24.231 ns2.elementary.se. 3600 IN A 192.168.24.232 ;; Query time: 0 msec ;; SERVER: 192.168.24.231#53(192.168.24.231) ;; WHEN: Mon Nov 18 18:05:05 CET 2013 ;; MSG SIZE rcvd: 180 Still... 18:13:41.232154 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [S], seq 3592225170, win 14600, options [mss 1460,sackOK,TS val 160790012 ecr 0,nop,wscale 7], length 0 18:13:41.232238 IP 192.168.24.239.88 > 192.168.24.217.42362: Flags [S.], seq 2526310478, ack 3592225171, win 14480, options [mss 1460,sackOK,TS val 174749087 ecr 160790012,nop,wscale 7], length 0 18:13:41.232739 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [.], ack 1, win 115, options [nop,nop,TS val 160790013 ecr 174749087], length 0 18:13:41.232787 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [P.], seq 1:141, ack 1, win 115, options [nop,nop,TS val 160790013 ecr 174749087], length 140 18:13:41.232804 IP 192.168.24.239.88 > 192.168.24.217.42362: Flags [.], ack 141, win 122, options [nop,nop,TS val 174749087 ecr 160790013], length 0 18:13:41.245137 IP 192.168.24.239.88 > 192.168.24.217.42362: Flags [P.], seq 1:704, ack 141, win 122, options [nop,nop,TS val 174749090 ecr 160790013], length 703 18:13:41.245517 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [.], ack 704, win 126, options [nop,nop,TS val 160790026 ecr 174749090], length 0 18:13:41.245578 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [F.], seq 141, ack 704, win 126, options [nop,nop,TS val 160790026 ecr 174749090], length 0 18:13:41.246606 IP 192.168.24.239.88 > 192.168.24.217.42362: Flags [F.], seq 704, ack 142, win 122, options [nop,nop,TS val 174749090 ecr 160790026], length 0 >> wouFurthermore this (incorrect) configuration file is created >> >> [libdefaults] >> >> default_realm = ELEMENTARY.SE >> dns_lookup_realm = false >> dns_lookup_kdc = false >> ticket_lifetime = 24h >> renew_lifetime = 7d >> forwardable = no >> default_tkt_enctypes = arcfour-hmac-md5 >> udp_preference_limit = 1 >> >> [realms] >> ELEMENTARY.SE = { >> kdc = ldap.elementary.se >> } >> >> >> [domain_realm] >> elementary.se = ELEMENTARY.SE >> >> >> In my lab both these services are actually placed on the same physical >> server and since the kdc binds to all local interfaces ovirt actually >> does reach the kdc via the incorrect name, this is however not the case >> later in production. >> > This file is generated from the above mentioned DNS queries. Please let > us know what is the content of your SRV DNS records. > >> When trying to add the domain it crashes with the following stack trace >> >> General error has occurednull >> java.lang.NegativeArraySizeException >> at >> sun.security.jgss.krb5.CipherHelper.aes256Encrypt(CipherHelper.java:1367) >> at >> sun.security.jgss.krb5.CipherHelper.encryptData(CipherHelper.java:722) >> at sun.security.jgss.krb5.WrapToken_v2.<init>(WrapToken_v2.java:200) >> at sun.security.jgss.krb5.Krb5Context.wrap(Krb5Context.java:861) >> at sun.security.jgss.GSSContextImpl.wrap(GSSContextImpl.java:385) >> at >> com.sun.security.sasl.gsskerb.GssKrb5Base.wrap(GssKrb5Base.java:104) >> at >> com.sun.jndi.ldap.sasl.SaslOutputStream.write(SaslOutputStream.java:89) >> at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:430) >> at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:555) >> at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1985) >> at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1847) >> at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1772) >> at >> com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386) >> at >> com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356) >> at >> com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339) >> at >> javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267) >> at >> org.ovirt.engine.core.ldap.RootDSEData.<init>(RootDSEData.java:52) >> at >> org.ovirt.engine.core.utils.kerberos.JndiAction.getDomainDN(JndiAction.java:257) >> at >> org.ovirt.engine.core.utils.kerberos.JndiAction.run(JndiAction.java:87) >> at java.security.AccessController.doPrivileged(Native Method) >> at javax.security.auth.Subject.doAs(Subject.java:356) >> at >> org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.promptSuccessfulAuthentication(KerberosConfigCheck.java:174) >> at >> org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.validateKerberosInstallation(KerberosConfigCheck.java:150) >> at >> org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.checkInstallation(KerberosConfigCheck.java:135) >> at >> org.ovirt.engine.core.domains.ManageDomains.checkKerberosConfiguration(ManageDomains.java:746) >> at >> org.ovirt.engine.core.domains.ManageDomains.testConfiguration(ManageDomains.java:917) >> at >> org.ovirt.engine.core.domains.ManageDomains.addDomain(ManageDomains.java:539) >> at >> org.ovirt.engine.core.domains.ManageDomains.runCommand(ManageDomains.java:311) >> at >> org.ovirt.engine.core.domains.ManageDomains.main(ManageDomains.java:206) >> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) >> at >> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) >> at >> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >> at java.lang.reflect.Method.invoke(Method.java:606) >> at org.jboss.modules.Module.run(Module.java:260) >> at org.jboss.modules.Main.main(Main.java:291) >> Failure while testing domain %1$s. Details: %2$s: One of the parameters >> for this error is null and no default message to show >> >> And this gets written to the log >> >> 2013-11-18 10:22:12,479 INFO >> [org.ovirt.engine.core.domains.ManageDomains] Creating kerberos >> configuration for domain(s): elementary.se >> 2013-11-18 10:22:12,493 INFO >> [org.ovirt.engine.core.domains.ManageDomains] Successfully created >> kerberos configuration for domain(s): elementary.se >> 2013-11-18 10:22:12,493 INFO >> [org.ovirt.engine.core.domains.ManageDomains] Testing kerberos >> configuration for domain: elementary.se >> 2013-11-18 10:22:12,569 ERROR >> [org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck] Error: >> exception message: Checksum failed >> 2013-11-18 10:22:12,571 ERROR >> [org.ovirt.engine.core.domains.ManageDomains] Failure while testing >> domain elementary.se. Details: Kerberos error. Please check log for >> further details. >> >> Could this checksum error be a result of the incorrect name being used ? >> > I don't think so. This is a known problem with the Kerberos > implementation in the Java virtual machine. It generates this error when > the SASL minssf configuration parameter is 0. You should be able to > change this OpenLDAP setting as follows: > > # cat > fixssf.ldif <<'.' > dn: cn=config > replace: olcSaslSecProps > olcSaslSecProps: noanonymous,noplain,minssf=1 > - > . > # ldapmodify -H ldapi:/// -Y EXTERNAL -f fixssf.ldif > > OK Great, I'll have a look.

2 5

[Users] Fence-virt support
by Sander Grendelman 18 Nov '13

18 Nov '13

I'm currently building a ovirt test-environment using nested virtualization on libvirt/kvm. For the most part this works great. However, I can't configure fencing/power management because only hardware BMC's/fencing devices are supported. Is this something that could/should be included in a future oVirt version? Or is there another option/workaround to test power management?

3 8

[Users] FC19 and ovirt 3.3
by Zhang, Hongyi 18 Nov '13

18 Nov '13

--_000_B5488210B44F434FA68B7430CC196BCFA7088B2EALAMBAcorpadwrs_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, I now upgrade my machine to use FC19 and oVirt 3.3 engine to manage my oVir= t node. When I tried to attach my ovirt node, I failed and got error message on my = engine side: 2013-11-15 17:27:56,573 INFO [org.ovirt.engine.core.dal.dbbroker.auditlogh= andling.AuditLogDirector] (VdsDeploy) Correlation ID: dd614eb, Call Stack: = null, Custom Event ID: -1, Message: Installing Host node1. Stage: Environme= nt customization. 2013-11-15 17:27:56,574 ERROR [org.ovirt.engine.core.bll.InstallerMessages]= (VdsDeploy) Installation 128.224.147.207: Failed to execute stage 'Environ= ment customization': Command 'initctl' is required but missing 2013-11-15 17:27:56,588 INFO [org.ovirt.engine.core.dal.dbbroker.auditlogh= andling.AuditLogDirector] (VdsDeploy) Correlation ID: dd614eb, Call Stack: = null, Custom Event ID: -1, Message: Failed to install Host node1. Failed to= execute stage 'Environment customization': Command 'initctl' is required b= ut missing. 2013-11-15 17:27:56,589 INFO [org.ovirt.engine.core.bll.InstallerMessages]= (VdsDeploy) Installation 128.224.147.207: Stage: Pre-termination Please someone help me to fix the problem. uname -a Linux engine.wrs.com 3.11.7-200.fc19.x86_64 #1 SMP Mon Nov 4 14:09:03 UTC 2= 013 x86_64 x86_64 x86_64 GNU/Linux And I use: ovirt-engine-setup-3.3.0.1-1.fc19.noarch Thanks, Hongyi --_000_B5488210B44F434FA68B7430CC196BCFA7088B2EALAMBAcorpadwrs_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"EN-US" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> Hello,<o:p></o:p> <o:p> </o:p></sp= an> I now upgrade my mach= ine to use FC19 and oVirt 3.3 engine to manage my oVirt node. <o:p></o:p> <o:p> </o:p></sp= an> When I tried to attac= h my ovirt node, I failed and got error message on my engine side:<o:p></o:= p> <o:p> </o:p></sp= an> 2013-11-15 17:27:56,5= 73 INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLog= Director] (VdsDeploy) Correlation ID: dd614eb, Call Stack: null, Custom Eve= nt ID: -1, Message: Installing Host node1. Stage: Environment customization.<o:p></o:p> 2013-11-15 17:27:56,5= 74 ERROR [org.ovirt.engine.core.bll.InstallerMessages] (VdsDeploy) Installa= tion 128.224.147.207: Failed to execute stage 'Environment customization'</= span>: Command 'initctl' is required but missing<o:p><= /o:p> 2013-11-15 17:27:56,5= 88 INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLog= Director] (VdsDeploy) Correlation ID: dd614eb, Call Stack: null, Custom Eve= nt ID: -1, Message: Failed to install Host node1. Failed to execute stage 'Environment customization': <spa= n style=3D"color:red">Command 'initctl' is required but missing<= span style=3D"color:black">.<o:p></o:p> 2013-11-15 17:27:56,5= 89 INFO  [org.ovirt.engine.core.bll.InstallerMessages] (VdsDeploy) Ins= tallation 128.224.147.207: Stage: Pre-termination<o:p></o:p> <o:p> </o:p> Please someone help me to  fix the problem.<o:p= ></o:p> <o:p> </o:p> uname -a<o:p></o:p> Linux engine.wrs.com 3.11.7-200.fc19.x86_64 #1 SMP M= on Nov 4 14:09:03 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux<o:p></o:p> And I use:<o:p></o:p> ovirt-engine-setup-3.3.0.1-1.fc19.noarch<o:p></o:p><= /p> <o:p> </o:p> Thanks,<o:p></o:p> Hongyi<o:p></o:p> </div> </body> </html> --_000_B5488210B44F434FA68B7430CC196BCFA7088B2EALAMBAcorpadwrs_--

2 3

[Users] oVirt 3.3.2 beta status
by Sandro Bonazzola 18 Nov '13

18 Nov '13

Hi, we're going to branch and build oVirt 3.3.2 beta on Nov 27th. A bug tracker is available at [1] and it shows only 2 bugs blocking the release: Bug 1029792 - VDSM does not report the qemu version in capabilities, if qemu-kvm-rhev is used Bug 1029885 - cloud-init testcase does not work in engine 3.3.1 The following is a list of the bugs still open with target 3.3.2 or 3.3: Whiteboard Bug ID Summary 991267 [RFE] Add TUI information to log file. infra 987982 When adding a host through the REST API, the error message says that "rootPassword" is required, but ... infra 1017267 Plaintext user passwords in async_tasks database infra 1020344 Power Managent with cisco_ucs problem infra 1009899 exportDbSchema scripts generates output file with wrong name infra 1029792 VDSM does not report the qemu version in capabilities, if qemu-kvm-rhev is used integration 1026933 pre-populate ISO domain with virtio-win ISO integration 1026930 Package virtio-win and put it in ovirt repositories integration 1030437 RFE: Configuration of email notifications integration 1022440 AIO - configure the AIO host to be a gluster cluster/host integration 902979 ovirt-live - firefox doesn't trust the installed engine integration 1021805 oVirt Live - use motd to show the admin password network 988002 [oVirt] [network] Add button shouldn't appear on specific network network 987916 [oVirt] [provider] Dialog doesn't update unless focus lost network 987999 [oVirt] [provider] Add button shouldn't appear on specific provider network 906313 [oVirt-webadmin] [setupNetworks] "No valid Operation for <network_name> and Unassigned Logical Networks panel" network 1023722 [oVirt-webadmin][network] Network roles in cluster management should be radio buttons network 997197 Some AppErrors messages are grammatically incorrect (singular vs plural) storage 1016118 async between masterVersion : can't connect to StoragePool storage 987917 [oVirt] [glance] API version not specified in provider dialog storage 1029069 Live storage migration snapshot removal fails, probably due to unexpected qemu-img output ux 906394 [oVirt-webadmin] [network] Loading animation in network main tab 'hosts' and 'vms' subtab is stuck on first view... virt 1007940 Cannot clone from snapshot while using GlusterFS as POSIX Storage Domain Please set the target to 3.3.2 and add the bug to the tracker if you think that 3.3.2 should not be released without it fixed. Please also update the target to 3.3.3 or any next release for bugs that won't be in 3.3.2: it will ease gathering the blocking bugs for next releases. For those who want to help testing the bugs, I suggest to add yourself as QA contact for the bug and add yourself to the testing page [2]. [1] https://bugzilla.redhat.com/1027349 [2] http://www.ovirt.org/Testing/Ovirt_3.3.2_testing -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

2 1

[Users] oVirt 3.3.1 RC
by Sandro Bonazzola 18 Nov '13

18 Nov '13

The oVirt team is pleased to announce that the 3.3.1 Release candidate is now available in beta [1] and will be released on Tue Nov 19th 2013 if no other blockers will be found while we're testing it [2]. Feel free to join us verifying the bugzilla entries actually under verification [3]. Release notes for this update are available on the wiki [4]. A new oVirt Node build will be available soon as well. [1] http://resources.ovirt.org/releases/beta [2] http://www.ovirt.org/Testing/Ovirt_3.3.1_testing [3] http://red.ht/1gQAdEo [4] http://www.ovirt.org/OVirt_3.3.1_release_notes -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

[Users] Fencing virtual machines
by Nicolas Ecarnot 18 Nov '13

18 Nov '13

Hi, In the case I want to setup a virtual cluster amongst many virtual machines, and this virtual cluster needs to fence some VM, what is the best way to achieve this? I guess this has to use something like vdsClient to "unplug" the VM, but I found it hard to find any more information about this. -- Nicolas Ecarnot

4 6

Re: [Users] [Spice-devel] govirt 0.30 plans
by Itamar Heim 18 Nov '13

18 Nov '13

On 11/06/2013 11:15 PM, i iordanov wrote: > Hi Christophe, > > This one may turn out to not be an actual issue. > > I had gotten used to the functionality offered by oVirt Live 0.8 (I > think it bundles oVirt 3.0) where I was able to attach as user > "admin@internal" to virtual machines created in the Administrative > Console (rather than in the User Console). > > It appears that oVirt 3.2 and 3.3 either do not allow this anymore or > something else is amiss. One may not attach to such machines despite > them being reported at /api/vms. > > To make a long story short, I made one of these machines a Template > and created a VM based on it in the User Console of admin@internal. > After that, I was able to connect! > > Do you think there is still anything wrong? Should we be able to > attach to those vms (e.g. win and winbak)? (if you see a behavior change in ovirt, you an also ask/cc on users(a)ovirt.org) in 3.0 we only allowed admin access to the API. in 3.1 we added user level access. main difference is users only get entities they have permissions with User Role on. an user with admin role can ask to get 'all', or just "me as a user" - all VMs which that admin has a User Role to. to not break api backward compatibility, default mode of the API remained 'admin mode', so you need to pass to the API "filter=true" to behave as a user. (we don't like this, and will try to come up with a better solution). i assume from Christophe next reply govirt (sensibly, as its geared for user access) default to user mode api. so you have two options - move to admin mode in govirt, or easier (and probably more consistent if you are aiming your solution for users rather than admins), give admin@internal a UserRole on the VMs, not an Admin Role. HTH, ITamar > > Cheers, > iordan > > > > On Wed, Nov 6, 2013 at 4:22 AM, Christophe Fergeau <cfergeau(a)redhat.com> wrote: >> On Tue, Nov 05, 2013 at 06:03:21PM -0600, i iordanov wrote: >>> What I have done is manually navigated to https://FQDN/api/vms in >>> order to attach the output I get there for you to see if you can spot >>> why libgovirt fails to look up the VMs. The call failed with name set >>> to both "win" and "winbak". >> >> This code is happily parsed by the attached test program, so I'm not sure >> parsing is at fault. You can look at the REST calls by setting the >> REST_DEBUG env variable to 'proxy' >> >> Christophe > > >

3 2

[Users] Ovirt 3.3 removing disk failure
by Saša Friedrich 17 Nov '13

17 Nov '13

When I try to remove viritual disk from ovirt engine I get error "User admin@internal finished removing disk test_vm with storage failure in domain DATA_DOMAIN." VM itself was running fine with no errors. DATA_DOMAIN is GlusterFS replicated volume (on ovirt host). ovirt engine comp (fc19) ovirt-engine.noarch 3.3.0.1-1.fc19 ovirt host (fc19) vdsm.x86_64 4.12.1-4.fc19 vdsm-gluster.noarch 4.12.1-4.fc19 glusterfs-server.x86_64 3.4.1-1.fc19 tnx for help

2 4

[Users] Info on snapshot removal operations and final disk format
by Gianluca Cecchi 17 Nov '13

17 Nov '13

Hello, I'm on oVirt 3.2.3-1 on a Fedora 18 all-in-one test server. I have a Windows XP VM that has a disk in qcow2 format and has a snapshot on it. When I delete the snapshot I see, from the commands intercepted, that the final effect is to have a raw disk (aka preallocated) .... is this correct and always true? Does this mean that even if I create a VM with thin provisioned disks, as soon as I take at least one snapshot and I then delete it I only have raw disks? Or am I missing anything? This what I observed: as soon as I launch delete snapshot operation: raw format of new disk vdsm 30805 1732 6 13:24 ? 00:00:00 /usr/bin/dd if=/dev/zero of=/rhev/data-center/65c9777e-23f1-4f04-8cea-e7c8871dc88b/0a8035e6-e41d-40ff-a154-e0a374f264b2/images/75c54716-5222-4ad6-91f2-8b312eacc4b4/d4fa7785-8a89-4d13-9082-52556ab0b326_MERGE bs=1048576 seek=0 skip=0 conv=notrunc count=11264 oflag=direct after about 5 minutes: convert from qemu format to raw format vdsm 31287 1732 7 13:29 ? 00:00:08 /usr/bin/qemu-img convert -t none -f qcow2 /rhev/data-center/65c9777e-23f1-4f04-8cea-e7c8871dc88b/0a8035e6-e41d-40ff-a154-e0a374f264b2/images/75c54716-5222-4ad6-91f2-8b312eacc4b4/d4fa7785-8a89-4d13-9082-52556ab0b326 -O raw /rhev/data-center/65c9777e-23f1-4f04-8cea-e7c8871dc88b/0a8035e6-e41d-40ff-a154-e0a374f264b2/images/75c54716-5222-4ad6-91f2-8b312eacc4b4/d4fa7785-8a89-4d13-9082-52556ab0b326_MERGE at the end probably there is a rename of the disk file and qemu-img info /rhev/data-center/65c9777e-23f1-4f04-8cea-e7c8871dc88b/0a8035e6-e41d-40ff-a154-e0a374f264b2/images/75c54716-5222-4ad6-91f2-8b312eacc4b4/d4fa7785-8a89-4d13-9082-52556ab0b326 image: /rhev/data-center/65c9777e-23f1-4f04-8cea-e7c8871dc88b/0a8035e6-e41d-40ff-a154-e0a374f264b2/images/75c54716-5222-4ad6-91f2-8b312eacc4b4/d4fa7785-8a89-4d13-9082-52556ab0b326 file format: raw virtual size: 11G (11811160064 bytes) disk size: 9.5G # ll /rhev/data-center/65c9777e-23f1-4f04-8cea-e7c8871dc88b/0a8035e6-e41d-40ff-a154-e0a374f264b2/images/75c54716-5222-4ad6-91f2-8b312eacc4b4/ total 9995476 -rw-rw----. 1 vdsm kvm 1048576 Nov 16 12:09 6ac73ee2-6419-43a4-91e7-7d4ef2026943_MERGE.lease -rw-rw----. 1 vdsm kvm 11811160064 Nov 16 13:32 d4fa7785-8a89-4d13-9082-52556ab0b326 -rw-rw----. 1 vdsm kvm 1048576 Mar 23 2013 d4fa7785-8a89-4d13-9082-52556ab0b326.lease -rw-rw----. 1 vdsm kvm 1048576 Nov 16 13:29 d4fa7785-8a89-4d13-9082-52556ab0b326_MERGE.lease -rw-r--r--. 1 vdsm kvm 274 Nov 16 13:29 d4fa7785-8a89-4d13-9082-52556ab0b326.meta Thanks Gianluca

2 1