- Users - oVirt List Archives

[Users] Cannot set disk interface in user portal
by Dead Horse 08 Oct '13

08 Oct '13

The Add disk UI in the User Portal does not populate the interface pull-down. Nor will it allow the creation of a new virtual disk as a result. The error states insufficient permissions however the user is assigned PowerUserRole at the cluster level and on the associated storage domain(s). Engine built from commit: 31cd5339cfda6ad78f5d3a1ff08ad666f734f814 2013-10-08 12:53:15,378 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-10) Correlation ID: 567417ad, Job ID: 6f774854-920b-4217-9906-a484841b843a, Call Stack: null, Custom Event ID: -1, Message: VM sdfa was created by ovirttest. 2013-10-08 12:53:15,396 INFO [org.ovirt.engine.core.bll.AddVmFromScratchCommand] (ajp--127.0.0.1-8702-10) Lock freed to object EngineLock [exclusiveLocks= key: sdfa value: VM_NAME , sharedLocks= ] 2013-10-08 12:53:15,433 INFO [org.ovirt.engine.core.bll.MultipleActionsRunner] (ajp--127.0.0.1-8702-10) MultipleActionsRunner of type AddVmInterface invoked with no actions 2013-10-08 12:53:15,445 INFO [org.ovirt.engine.core.bll.MultipleActionsRunner] (ajp--127.0.0.1-8702-10) MultipleActionsRunner of type UpdateVmInterface invoked with no actions 2013-10-08 12:53:15,459 INFO [org.ovirt.engine.core.bll.MultipleActionsRunner] (ajp--127.0.0.1-8702-10) MultipleActionsRunner of type RemoveVmInterface invoked with no actions 2013-10-08 12:53:19,540 ERROR [org.ovirt.engine.core.bll.GetVirtioScsiControllersQuery] (ajp--127.0.0.1-8702-10) Query execution failed due to insufficient permissions. 2013-10-08 12:54:29,015 WARN [org.ovirt.engine.core.bll.AddDiskCommand] (ajp--127.0.0.1-8702-10) CanDoAction of action AddDisk failed. Reasons:VAR__ACTION__ADD,VAR__TYPE__VM_DISK,VALIDATION.DISK_INTERFACE.NOT_NULL 2013-10-08 12:54:34,891 ERROR [org.ovirt.engine.core.bll.GetVirtioScsiControllersQuery] (ajp--127.0.0.1-8702-10) Query execution failed due to insufficient permissions. 2013-10-08 12:56:14,937 ERROR [org.ovirt.engine.core.bll.GetVirtioScsiControllersQuery] (ajp--127.0.0.1-8702-9) Query execution failed due to insufficient permissions. 2013-10-08 12:56:27,095 WARN [org.ovirt.engine.core.bll.AddDiskCommand] (ajp--127.0.0.1-8702-4) CanDoAction of action AddDisk failed. Reasons:VAR__ACTION__ADD,VAR__TYPE__VM_DISK,VALIDATION.DISK_INTERFACE.NOT_NULL - DHC

4 4

[Users] Customizing node configuration
by Allen Belletti 08 Oct '13

08 Oct '13

--_000_7fbb63dfa18c4b05af73e117062f6f83BN1PR04MB170namprd04pro_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello All, I've been searching the archives and not yet managed to find anything on th= e subject, so I'm hoping that someone can point me in the right direction. I am using nodes with Intel 10G network cards. The driver for these cards = has been tweaked to complain (and fail to start the interface) if a non-Int= el approved optical transceiver is in use. It's easy to override with the = following options: ixgbe.allow_unsupported_sfp=3D1 The usual ways of doing this are either to place it on the kernel command l= ine at boot time, or in /etc/modprobe.d/ixgbe.conf where it would read "opt= ions ixgbe allow_unsupported_sfp=3D1". Unfortunately I have no idea how to= make either of these permanent on an oVirt node. I'm running the ovirt-node-iso-3.0.1-1.0.2.vdsm.el6.iso image. It has an /= etc/modprobe.d directory where changes do not persist across reboots. It a= lso has /config/etc where I've added modprobe.d and modprobe.d/ixgbe.conf. = By adding this file to /config/files, I've been able to make it appear in = /etc/modprobe.d at boot time. This has no effect. It appears to take plac= e after the ixgbe driver has already been started. If I "rmmod ixgbe" and = "modprobe ixgbe" manually, it works fine. So the general question is, how do I make configuration changes which persi= st across reboots? Surely others have run into the same situation when try= ing to support specific devices. Thanks, Allen Belletti AVP Ed. Tech Engineering Innovation Georgia Gwinnett College 678-407-5093 www.ggc.edu --_000_7fbb63dfa18c4b05af73e117062f6f83BN1PR04MB170namprd04pro_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <style type=3D"text/css" id=3D"owaParaStyle" style=3D"">=0A= =0A= P {margin-top:0;margin-bottom:0;}</style> </head> <body dir=3D"ltr" tabindex=3D"0" fpstyle=3D"1" aria-label=3D"Message body"> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt; color: #0000= 00; margin: 0"> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> Hello All,</div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> <br> </div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> I've been searching the archives and not yet managed to find anything on th= e subject, so I'm hoping that someone can point me in the right direction.<= /div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> <br> </div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> I am using nodes with Intel 10G network cards.  The driver for these c= ards has been tweaked to complain (and fail to start the interface) if a no= n-Intel approved optical transceiver is in use.  It's easy to override= with the following options:</div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> <br> </div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> ixgbe.allow_unsupported_sfp=3D1</div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> <br> </div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> The usual ways of doing this are either to place it on the kernel command l= ine at boot time, or in /etc/modprobe.d/ixgbe.conf where it would read &quo= t;options ixgbe allow_unsupported_sfp=3D1".  Unfortunately I have= no idea how to make either of these permanent on an oVirt node.</div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> <br> </div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> I'm running the ovirt-node-iso-3.0.1-1.0.2.vdsm.el6.iso image.  I= t has an /etc/modprobe.d directory where changes do not persist across rebo= ots.  It also has /config/etc where I've added modprobe.d and modprobe= .d/ixgbe.conf.  By adding this file to /config/files, I've been able to make it appear in /etc/modprobe.d at boot time.  Th= is has no effect.  It appears to take place after the ixgbe driver has= already been started.  If I "rmmod ixgbe" and "modprob= e ixgbe" manually, it works fine.</div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> <br> </div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> So the general question is, how do I make configuration changes which persi= st across reboots?  Surely others have run into the same situation whe= n trying to support specific devices.</div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> <br> </div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> Thanks,</div> <div name=3D"divtagdefaultwrapper" id=3D"divtagdefaultwrapper" style=3D"fon= t-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:#000000;= margin:0"> <div><br> <div style=3D"font-family:Tahoma; font-size:13px"><span lang=3D"en-US"> <div style=3D"margin:0pt"><font face=3D"Calibri,sans-serif" size=3D"2"><spa= n style=3D"font-size:11pt">Allen Belletti<br> </span></font></div> <div style=3D"margin:0pt"><font face=3D"Calibri,sans-serif" size=3D"2"><spa= n style=3D"font-size:11pt">AVP Ed. Tech Engineering Innovation<br> </span></font></div> <div style=3D"margin:0pt"><font face=3D"Calibri,sans-serif" size=3D"2"><spa= n style=3D"font-size:11pt">Georgia Gwinnett College</span></font></div> <div style=3D"margin:0pt"><font face=3D"Calibri,sans-serif" size=3D"2"><spa= n style=3D"font-size:11pt">678-407-5093</span></font></div> <div style=3D"margin:0pt"><font face=3D"Calibri,sans-serif" size=3D"2"><spa= n style=3D"font-size:11pt">www.ggc.edu<br> </span></font></div> </span></div> </div> </div> </div> </body> </html> --_000_7fbb63dfa18c4b05af73e117062f6f83BN1PR04MB170namprd04pro_--

6 13

Re: [Users] new oVirt installation recommendations
by David Sloane 08 Oct '13

08 Oct '13

--_000_ssb45nhrdytnric0e1u5k9h21381244621488emailandroidcom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Sure, but you could use hardware raid 1 with a basic hba. -------- Original message -------- From: Jason Keltz <jas(a)cse.yorku.ca> Date: 10/08/2013 10:52 AM (GMT-05:00) To: David Sloane <dsloane(a)sitespect.com> Cc: users(a)ovirt.org Subject: Re: [Users] new oVirt installation recommendations On 10/08/2013 10:43 AM, David Sloane wrote: > Regarding power management, if you get DRAC (Enterprise or Basic, not sur= e) you should be able to do out-of-band power management. > > If you're going to spend the money for three R620's with 128 GB of RAM ea= ch and dual cpu's, you might be a little better off with a 2nd root HDD for= redundancy. I would have done that, but oVirt node doesn't support md raid1 at this time. As far as I understand, there is no redundancy on the node root disk= . Jason. --_000_ssb45nhrdytnric0e1u5k9h21381244621488emailandroidcom_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html><head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <meta name=3D"Generator" content=3D"Microsoft Exchange Server">  <style></style></head> <body> <body>Sure, but you could use hardware raid 1 with a basic hba. <br><b= r><br>-------- Original message --------<br>From: Jason Keltz <jas(a)cse.y= orku.ca> <br>Date: 10/08/2013 10:52 AM (GMT-05:00) <br>To: David Sloane = <dsloane(a)sitespect.com> <br>Cc: users(a)ovirt.org <br>Subject: Re: [Use= rs] new oVirt installation recommendations <br><br><br></body> <font size=3D"2"><div class=3D"PlainText">On 10/08/2013 10:43 AM, David Slo= ane wrote:<br> > Regarding power management, if you get DRAC (Enterprise or Basic, not = sure) you should be able to do out-of-band power management.<br> ><br> > If you're going to spend the money for three R620's with 128 GB of RAM= each and dual cpu's, you might be a little better off with a 2nd root HDD = for redundancy.<br> I would have done that, but oVirt node doesn't support md raid1 at this <br= > time.  As far as I understand, there is no redundancy on the node root= disk.<br> <br> Jason.<br> <br> <br> </div></font> </body> </html> --_000_ssb45nhrdytnric0e1u5k9h21381244621488emailandroidcom_--

1 0

[Users] Quota for VMs created from templates
by Mitja Mihelič 08 Oct '13

08 Oct '13

Hi! We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM. Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs. Kind regards, Mitja Mihelic -- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78

5 11

[Users] A security issue in ovirt 3.2 on fedora - setup leaves a world-writable /etc/sysconfig/nfs
by Yedidyah Bar David 08 Oct '13

08 Oct '13

Hi all, The setup code of ovirt releases 3.2 and older set wrong permissions for several files, depending on options chosen during setup/upgrade. The potentially-affected files are: /etc/sysconfig/nfs /etc/sysconfig/iptables /etc/httpd/conf/httpd.conf.BACKUP* /etc/httpd/conf.d/ssl.conf.BACKUP* files under the ISO domain copied there by setup, by default under /var/lib/exports The bug does not affect systems with linux kernels older than 3.1, which included undocumented behavior that prevented it from occurring. Here is a link to the kernel patch that dropped this undocumented behavior: https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit… In practice this means that among the distributions supported by ovirt, only ovirt on Fedora is affected. ovirt 3.3 is not affected as-is. Systems upgraded from 3.2 might still have the files with wrong permissions, and should follow the actions below. How to fix an existing system? Change the permissions of existing files by running the following commands as root: chmod 600 /etc/sysconfig/nfs chmod 600 /etc/sysconfig/iptables chmod 600 /etc/httpd/conf/httpd.conf.BACKUP* chmod 600 /etc/httpd/conf.d/ssl.conf.BACKUP* find /var/lib/exports -perm /002 -type f -exec chmod 600 {} \; For the last command, replace "/var/lib/exports" with the appropriate directory, if you did not accept the default during setup and configured another directory to hold the ISO domain. A fix for this bug was pushed to gerrit: http://gerrit.ovirt.org/19557 Security implications: This bug allows local users escalate their privileges by editing /etc/sysconfig/nfs and waiting until the nfs service will be started/stopped (e.g. a reboot of the machine). -- Didi

1 0

[Users] Regression/Bug in 3.2.3-1 Webadmin?
by Sven Kieske 08 Oct '13

08 Oct '13

Hi, we get a notification each minute that "User admin@interal logged in". This bug was reported and fixed in https://bugzilla.redhat.com/show_bug.cgi?id=906046 for rhev. Can someone confirm to me that this fix got backported/ included in oVirt? We still face this issue, see the attached screenshot. Regards Sven

3 5

[Users] Ovirt 3.3 - How to write a network plugin
by Benoit ML 08 Oct '13

08 Oct '13

Hello, I've seen ovirt can support plugin ... so is there any documentation about writing a plugin ? Can we write it in python ? Well because, here, we don't want to install openstack/neutron for network management ... It's too complicated and to heavy. I, your opinion wrong design choice about openvswitch implementation. Thank you in advance. Regards, -- -- Benoit

3 4

[Users] Low cost OOB management device
by Mario Giammarco 08 Oct '13

08 Oct '13

Hello, I would like to try ovirt powermanagement. I have no ILO so I would like to buy some power management device. Since it is a test I would like to stay in 100 euro range. Is it possible? Thanks, Mario

3 4

[Users] ovirt 3.3 and ilo2 for power fencing?
by Gianluca Cecchi 07 Oct '13

07 Oct '13

Hello, is this combination supported? I'm trying to configure Power Management, but I get this: Power Management test failed for Host f18ovn03.Parse error: Ignoring unknown option 'option=status' Unable to connect/login to fencing device What would be correct setup? Any way to test from command line too? The hw is an HP blade BL685 g1 with iLO2 mgmt Thanks in advance. Gianluca

5 11

[Users] upgrade bug(?) 3.1->3.3
by Jim Kinney 07 Oct '13

07 Oct '13

I just upgraded from engine 3.1 to 3.3 on my standalone centos 6.4 system. The 3.3 engine-setup apparently did NOT include the requisite iptables lines for port opening for the spice to function. I did a yum update for the ovirt-engine-setup to get the latest tool. Then I ran engine-setup to let the process upgrade as required. I added the missing ports from a second system I've not yet upgraded and all is well. Just though someone might want to look at a possible issue. -- -- James P. Kinney III * *Every time you stop a school, you will have to build a jail. What you gain at one end you lose at the other. It's like feeding a dog on his own tail. It won't fatten the dog. - Speech 11/23/1900 Mark Twain * http://heretothereideas.blogspot.com/ *

2 5