- Users - oVirt List Archives

Backporting of Fixes
by Gillingham, Eric J (US 393D) 15 Nov '20

15 Nov '20

I'm still running on oVirt 4.3 due to some hardware that will require some extra effort to move to 4.4 we're not quite ready to do yet, and am currently hitting what I believe to be https://bugzilla.redhat.com/show_bug.cgi?id=1820998 which is fixed in 4.4. I'm wondering if there's a process to request a backport, or should I just open a new bug against 4.3? Thank You - Eric

2 1

oVirt 4.4 vnic profile to substitute vdsm mac spoof hook
by Gianluca Cecchi 15 Nov '20

15 Nov '20

Hello, I have an Openstack Queens environment that is composed by VMs inside oVirt. Initially this oVirt environment was on 4.3 and on director I had to set vdsm mac spoof to be able to give dhcp address to the overcloud nodes. I tried something at that time with vnic profiles but I was not able to have it work as expected, so I used the hook. Now I have migrated this same environment to 4.4.2 and I see that vdsm mac spoof is no more an option: https://bugzilla.redhat.com/show_bug.cgi?id=1703840 I tried some combinations of vnic profiles on director vnic but it seems not to work as a dhcpserver as before. I see DHCPDISCOVER from overcloud node in director messages (while before I saw DHCPREQUEST), I see the DHCPOFFER from director, but I don't see the DHCPACK from the overcloud node... On director I have the br-ctlplane vswitch using its interface eth1: ovs-vsctl show . . . Bridge br-ctlplane Controller "tcp:127.0.0.1:6633" is_connected: true fail_mode: secure Port br-ctlplane Interface br-ctlplane type: internal Port "eth1" Interface "eth1" Port phy-br-ctlplane Interface phy-br-ctlplane type: patch options: {peer=int-br-ctlplane} ovs_version: "2.11.0" [root@director ~]# ovs-ofctl show br-ctlplane OFPT_FEATURES_REPLY (xid=0x2): dpid:0000566f3d480014 n_tables:254, n_buffers:0 capabilities: FLOW_STATS TABLE_STATS PORT_STATS QUEUE_STATS ARP_MATCH_IP actions: output enqueue set_vlan_vid set_vlan_pcp strip_vlan mod_dl_src mod_dl_dst mod_nw_src mod_nw_dst mod_nw_tos mod_tp_src mod_tp_dst 1(eth1): addr:56:6f:3d:48:00:13 config: 0 state: 0 speed: 0 Mbps now, 0 Mbps max 2(phy-br-ctlplane): addr:76:76:8b:08:d4:2f config: 0 state: 0 speed: 0 Mbps now, 0 Mbps max LOCAL(br-ctlplane): addr:56:6f:3d:48:00:14 config: 0 state: 0 speed: 0 Mbps now, 0 Mbps max OFPT_GET_CONFIG_REPLY (xid=0x4): frags=normal miss_send_len=0 [root@director ~]# [root@director ~]# ip addr show dev br-ctlplane 6: br-ctlplane: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000 link/ether 56:6f:3d:48:00:14 brd ff:ff:ff:ff:ff:ff inet 172.23.0.220/24 brd 172.23.0.255 scope global br-ctlplane valid_lft forever preferred_lft forever inet 172.23.0.222/32 scope global br-ctlplane valid_lft forever preferred_lft forever inet 172.23.0.221/32 scope global br-ctlplane valid_lft forever preferred_lft forever inet6 fe80::546f:3dff:fe48:14/64 scope link valid_lft forever preferred_lft forever [root@director ~]# The eth1 interface is configured in oVirt on vlan23. The overcloud nodes have one vnic on vlan 23. I have two dnsmasq processes on director, for ironic and for overcloud nodes: nobody 1527 1 0 Nov14 ? 00:00:00 /sbin/dnsmasq --conf-file=/etc/ironic-inspector/dnsmasq.conf nobody 3288 1 0 Nov14 ? 00:00:00 dnsmasq --no-hosts --no-resolv --pid-file=/var/lib/neutron/dhcp/22a5739b-acb6-4400-8247-080a66895f1a/pid --dhcp-hostsfile=/var/lib/neutron/dhcp/22a5739b-acb6-4400-8247-080a66895f1a/host --addn-hosts=/var/lib/neutron/dhcp/22a5739b-acb6-4400-8247-080a66895f1a/addn_hosts --dhcp-optsfile=/var/lib/neutron/dhcp/22a5739b-acb6-4400-8247-080a66895f1a/opts --dhcp-leasefile=/var/lib/neutron/dhcp/22a5739b-acb6-4400-8247-080a66895f1a/leases --dhcp-match=set:ipxe,175 --local-service --bind-dynamic --dhcp-range=set:subnet-d48e002b-f269-4ed5-a96e-9aeba0b119b9,172.23.0.0,static,255.255.255.0,86400s --dhcp-option-force=option:mtu,1500 --dhcp-lease-max=256 --conf-file=/etc/dnsmasq-ironic.conf --domain=localdomain In messages of director when booting the overcloud node: Nov 15 00:42:45 director dnsmasq-dhcp[3288]: DHCPDISCOVER(tap9fdd5920-62) 172.23.0.232 56:6f:3d:48:00:3c Nov 15 00:42:45 director dnsmasq-dhcp[1527]: 3792136019 DHCPDISCOVER(br-ctlplane) 56:6f:3d:48:00:3c ignored Nov 15 00:42:45 director dnsmasq-dhcp[3288]: DHCPOFFER(tap9fdd5920-62) 172.23.0.232 56:6f:3d:48:00:3c Nov 15 00:42:45 director dnsmasq-dhcp[3288]: DHCPOFFER(tap9fdd5920-62) 172.23.0.232 56:6f:3d:48:00:3c In oVirt 4.3 with the same setup and VDSM MAC spoof hook configured I saw this inside messages of director when booting the overcloud nodes: Oct 18 04:50:05 director dnsmasq-dhcp[3230]: DHCPREQUEST(tap9fdd5920-62) 172.23.0.232 56:6f:3d:48:00:3c Oct 18 04:50:05 director dnsmasq-dhcp[3230]: DHCPACK(tap9fdd5920-62) 172.23.0.232 56:6f:3d:48:00:3c host-172-23-0-232 Questions: what is the filter to give to have it work? is it dynamic the effect at runtime for a running VM to edit its vnic and change its profile? is it dynamic for running VMs that for a vNIC with a certain profile if I go in Networks --> vNIC Profiles --> Edit vNIC Profile and change its network filter value? Thanks for any insight. Gianluca

1 2

Failed to add new host to oVirt 4.4.3.11-1.el8
by Winfried de Heiden 14 Nov '20

14 Nov '20

Hi all, Adding a brand new installed oVirt node to oVirt 4.4.3.11-1.el8 fails; engine.log will tell: 2020-11-13 10:05:40,777+01 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engine-Thread-5) [80e3f255-f8b9-4d5f-9be2-ebb59fec28db] EVENT_ID: VDS_ANSIBLE_INSTALL_STARTED(560), Ansible host-deploy playbook execution has started on host Bigvirt. 2020-11-13 10:05:40,784+01 ERROR [org.ovirt.engine.core.common.utils.ansible.AnsibleExecutor] (EE-ManagedThreadFactory-engine-Thread-5) [80e3f255-f8b9-4d5f-9be2-ebb59fec28db] Exception: Failed to read the runner-service response. Unexpected character ('<' (code 60)): expected a valid value (number, String, array, object, 'true', 'false' or 'null') at [Source: org.apache.http.conn.EofSensorInputStream@6cc9953a; line: 1, column: 2] 2020-11-13 10:05:40,785+01 ERROR [org.ovirt.engine.core.bll.hostdeploy.InstallVdsInternalCommand] (EE-ManagedThreadFactory-engine-Thread-5) [80e3f255-f8b9-4d5f-9be2-ebb59fec28db] Host installation failed for host 'df87842f-0852-4a3a-898b-2b724b068199', 'Bigvirt': Failed to execute Ansible host-deploy role: Failed to read the runner-service response. Unexpected character ('<' (code 60)): expected a valid value (number, String, array, object, 'true', 'false' or 'null') Anyone got a clue? Winfried

3 2

Re: Network profile filtering
by Dominik Holler 13 Nov '20

13 Nov '20

On Fri, Nov 13, 2020 at 4:19 PM Pascal DeMilly <Pascal(a)butterflyit.com> wrote: > Thank you > > That is exactly what I was looking for. Any chance it could be back > ported to 4.3. Maybe list the rules and I could use rest API to add it to > my court install > On ovirt-4.3 there is only *Bug 1009608* <https://bugzilla.redhat.com/show_bug.cgi?id=1009608> - [RFE] Limit east-west traffic of VMs with network filter The isolated ports cannot be backported to oVirt 4.3, because the isolated ports require a new feature from CentOS 8 kernel and CentOS 8.3 libvirt. > > I'm not eager to move yet to 4.4 since I'm reading on this list lot of > people have issue migrating and I have 20 hosts running currently > > Are you aware that you could upgrade oVirt Engine and go on with the oVirt 4.3 hosts? This way you could have some new CentOS 8 based oVirt-4.4 hosts which use the new features, and leave the other hosts on CentOS 7 based oVirt 4.3 . > > > Get Outlook for Android <https://aka.ms/ghei36> > > ------------------------------ > *From:* Dominik Holler <dholler(a)redhat.com> > *Sent:* Friday, November 13, 2020 6:21:56 AM > *To:* Pascal DeMilly <Pascal(a)butterflyit.com> > *Cc:* users <users(a)ovirt.org> > *Subject:* Re: [ovirt-users] Network profile filtering > > > > On Fri, Nov 13, 2020 at 5:13 AM <pascal(a)butterflyit.com> wrote: > > I am using ovirt 4.3. I am in need to isolate all my VM from each other > (without using VLAN) except to a virtual gateway which is also the DHCP > server. > > Basically only allowing traffic from 1 MAC address to another MAC address. > Everything else should be filter out by ovirt filtering subsystem > > How will I go about that? I can see in network profile the ability to set > different filter but can't find a way to create new filter. > > > Does the Doc Text of > *Bug 1009608* <https://bugzilla.redhat.com/show_bug.cgi?id=1009608> - [RFE] > Limit east-west traffic of VMs with network filter > https://bugzilla.redhat.com/show_bug.cgi?id=1009608 > explain the configuration of the filter? > > Please note that there will be isolated ports > > https://www.ovirt.org/develop/release-management/features/network/isolated-… > available in ovirt-4.4.3 on CentOS 8.3 , which might address your scenario > even better. > > > > Thanks for your help > > Pascal > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/QIYX2SA7TBEFG… > >

2 1

Fail to upgrade cluster from 4.3 to 4.4
by Gianluca Cecchi 13 Nov '20

13 Nov '20

Hello, my environment was oVirt 4.3.10 with an external engine and 3 hosts. I have updated to 4.4.3 the whole infra, but know if I go and update the cluster to 4.4 I get the message in this window: https://drive.google.com/file/d/1hfs4FC8uZ-EjiCzQyitA3945U0Knnz2m/view?usp=… What is the reason for it? My Cluster is with Cluster CPU Type: "Intel Westmere IBRS SSBD Family" The signalled 'hostmaster' VM is a powered off VM used in the past to test nested virtualization and in "Virtual Machines" page aside it I see an exclamation mark with "The VM CPU doesn't match the Cluster Cpu Type" The VM is set as custom, optimized for Server Custom Chipset/Firmware Type "Cluster default (i440FX Chipset with BIOS)" Custom Emulated Machine (in grey): "Cluster default(pc-i440fx-rhel7.6.0)" Custom CPU (in grey): "Cluster default(Intel Westmere IBRS SSBD Family)" What I'm expected to change? Thanks, Gianluca

1 1

Terraform provider build
by Muhsin Tawafig 13 Nov '20

13 Nov '20

Hi Trying to test terraform ovirt provider keep getting failure on pulling modules ( on centos 7 & 8 ) #make ==> Checking that code complies with gofmt requirements... go install go: github.com/hashicorp/go-getter@v1.4.2-0.20200106182914-9813cbd4eb02: Get "https://proxy.golang.org/github.com/hashicorp/go-getter/@v/v1.4.2-0.2020010…": net/http: TLS handshake timeout make: *** [build] Error 1 Any help is appretiated

2 1

Network profile filtering
by pascal＠butterflyit.com 13 Nov '20

13 Nov '20

I am using ovirt 4.3. I am in need to isolate all my VM from each other (without using VLAN) except to a virtual gateway which is also the DHCP server. Basically only allowing traffic from 1 MAC address to another MAC address. Everything else should be filter out by ovirt filtering subsystem How will I go about that? I can see in network profile the ability to set different filter but can't find a way to create new filter. Thanks for your help Pascal

3 2

ovirt glusterfs
by garcialiang.anne＠gmail.com 13 Nov '20

13 Nov '20

Hello, I try use Gluster deploymont. I've the message error: failed: [llrovirttest02.in2p3.fr] (item={u'path': u'/gluster_bricks/engine', u'vgname': u'gluster_vg_sdb', u'lvname': u'gluster_lv_engine'}) => {"ansible_loop_var": "item", "changed": false, "item": {"lvname": "gluster_lv_engine", "path": "/gluster_bricks/engine", "vgname": "gluster_vg_sdb"}, "msg": "SELinux is disabled on this host."} Could you help me ? Thanks, Anne Garcia

2 1

Unable to attach VLAN-based logical networks to a bond oVirt 4.4
by simon＠justconnect.ie 13 Nov '20

13 Nov '20

When attempting to add a VLAN to a bonded interface (Broadcom NICs) in oVirt Management portal the process fails as per: https://bugzilla.redhat.com/show_bug.cgi?id=1860479 This issue has rendered mu upgrade to 4.4 useless. Does anyone have a patched kernel to resolve this please? Regards Shimme

2 1

Ballooning disabled when creating a VmPool
by Nicolás 13 Nov '20

13 Nov '20

Hi, We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) to handle our pools. Pools are based on a template which has ballooning enabled. However, when deploying a VmPool based on that template, has the "Ballooning enabled" field disabled, uneditable and an icon which states: "The field is not attached to any instance type" (screenshot attached). We're handling a big number of VMs based on pools (> 1500), and we think this should be enabled. However, I don't see a field in the types.VmPool definition that allows that. Is that even doable? Our Python code is similar to this: newpool = types.VmPool(name='test', cluster=cl, template=t, max_user_vms=1, size=1, type=types.VmPoolType.MANUAL) vmpool_serv.add(newpool) * cl is a types.Cluster instance with ballooning_enabled=True * t is a types.Template instance with Ballooning enabled. Thanks. Nico

2 4