- Users - oVirt List Archives

Gluster Settings
by Christian Reiss 19 Mar '20

19 Mar '20

Hey folks, quick question. For running Gluster / oVirt I found several places, some outdated (ovirt docs), gluster Mailinglists, oVirt Mailinglists etc that recommend different things. Here is what I found out/configured: features.barrier: disable features.show-snapshot-directory: on features.uss: enable cluster.data-self-heal-algorithm: full cluster.entry-self-heal: on cluster.data-self-heal: on cluster.metadata-self-heal: on cluster.readdir-optimize: on transport.address-family: inet storage.fips-mode-rchecksum: on nfs.disable: on performance.client-io-threads: off network.remote-dio: off performance.strict-o-direct: on client.event-threads: 16 cluster.choose-local: true snap-activate-on-create: enable auto-delete: enable Would you agree or change anything (usual vm workload). Thanks! o/ And keep healthy. -- with kind regards, mit freundlichen Gruessen, Christian Reiss

3 4

VNC Encryption
by Tommaso - Shellrent 19 Mar '20

19 Mar '20

Hi to all. We need to set VNC Encryption to disabled on cluster creation, but we do not find any reference on API or SDK to do this automatically. Someone have any kind of hint to do this? -- -- Shellrent - Il primo hosting italiano Security First *Tommaso De Marchi* /COO - Chief Operating Officer/ Shellrent Srl Via dell'Edilizia, 19 - 36100 Vicenza Tel. 0444321155 <tel:+390444321155> | Fax 04441492177

1 0

How to delete events
by xilazz＠126.com 19 Mar '20

19 Mar '20

Hello everybody, there are some wrong log events in the controller. How can I delete the events information after I have checked it?

5 5

Fwd: [ovirt-devel] RESTAPIv3 support has been removed from oVirt master branch
by Sandro Bonazzola 18 Mar '20

18 Mar '20

Forwarding this to user list, maybe someone developed custom scripts and should be aware that v3 has been dropped in 4.4 so they can check their code for compatibility in advance. ---------- Forwarded message --------- Da: Martin Perina <mperina(a)redhat.com> Date: mer 4 mar 2020 alle ore 16:54 Subject: [ovirt-devel] RESTAPIv3 support has been removed from oVirt master branch To: devel <devel(a)ovirt.org> Cc: Ori Liel <oliel(a)redhat.com> Hi, we have just merged https://gerrit.ovirt.org/105297 which removes support for RESTAPIv3. RESTAPIv3 was deprecated in oVirt 4.0 and it didn't provide access to any new features introduced in oVirt 4. The removal of RESTAPIv3 also means that you cannot use any longer Python/Java SDKv3 or oVirt CLI (all of them were also deprecated since 4.0) with oVirt 4.4. Everyone still using those deprecated libraries/tools need to switch to RESTAPIv4, Python/Java/Ruby/Go SDKv4 or oVirt Ansible modules, which provides access to all upcoming features available in oVirt 4.4 or features provided by previous oVirt 4.y releases. Thanks for understanding, Martin -- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o. _______________________________________________ Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email to devel-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/devel@ovirt.org/message/PNFUBS5WZJZLT… -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/>* <https://www.redhat.com/en/summit?sc_cid=7013a000002D2QxAAK>* *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours. <https://mojo.redhat.com/docs/DOC-1199578>*

1 0

Synology NFS confusion
by Shareef Jalloq 18 Mar '20

18 Mar '20

Hi all, I'm trying to set up a hosted engine on an NFS share provided by a Synology NAS. I've been reading the info and threads regarding the requirement that the share be owned by vdsm:kvm with uid:gid of 36:36, but this seems impossible to set on modern Synology boxes. My understanding of DSM is that the user doesn't have control of the UID and GID of users. You can ssh in and modify /etc/passwd but these files are auto-generated from Synology's own scripts so changes here will not persist across reboots. Is that correct? Secondly, having read lots of posts about permissions and various issues around export settings, why isn't this documented anywhere? There just seems to be lots of contradictory posts. For example, my experience has been: - my Synology vdsm:kvm ids are 1028:65536 - the permissions on the NFS export are 777, anything else gives permissions errors in HE setup - the hosted engine install went fine with these settings. - the nfs-check.py script provided to check the NFS export fails but the installation still completes. So are these issues specific to Synology or is the documentation out there just wrong? #confused Cheers, Shareef.

4 5

Storage issues on hosted-engine gluster volume
by Dario Pilori 18 Mar '20

18 Mar '20

Dear all, after a switch failure, our three-host oVirt hyperconverged setup has strange issues with the gluster replicate-3 volume that contains the hosted-engine VM. Basically, after a host is properly rebooted (but not always after every reboot, it happens quite randomly), the hosted-engine starts, but it is immediately paused. On the other hosts, it runs perfectly. After some digging in the documentation, I realized that this is due to a storage issue. However, the health of the gluster volume is OK, and forcing heal does not fix the problem. The only solution (or workaround, I would say) is to reset the brick on the faulty host and re-format the brick XFS file system. This leaves me with some questions, which are: Why is the volume health OK, while it is clearly not OK? If so, which commands do I need to use to detect gluster issues? And, why is this situation happening? Any suggestion is appreciated. Regards, Dario -- Dario Pilori, PhD I.N.Ri.M. - Istituto Nazionale di Ricerca Metrologica Sistemi Informatici Strada delle Cacce, 91 - 10135 - Torino - Italy Ph: +39 011 3919 459

2 2

Re: Client separation on bridge level
by Hendrik Peyerl 18 Mar '20

18 Mar '20

We do have certain VLANs that all the VMs need as of now, we will be able to do this at some point but I need a solution until then. > On 16. Mar 2020, at 11:08, Staniforth, Paul <P.Staniforth(a)leedsbeckett.ac.uk> wrote: > > Can't you put then on separate VLANs? > > > Regards, > Paul S. > From: Hendrik Peyerl <hpeyerl(a)plusline.net> > Sent: 16 March 2020 09:24 > To: users(a)ovirt.org <users(a)ovirt.org> > Subject: [ovirt-users] Client separation on bridge level > > Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. > > Hello everyone, > > is there a way to seperate the traffic between VMs on the same bridge on one oVirt-node with built-in tools from ovirt? We have VMs using the same bridge which should never be able to talk to each other. > > We are currently using ebtables for that, but its not working very good anymore now that we upgraded to 4.3 with firewalld. > > Any suggestions would be greatly appreciated. > > Best regards, > Hendrik > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… > oVirt Code of Conduct: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt… > List Archives: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovi… > To view the terms under which this email is distributed, please go to:- > http://leedsbeckett.ac.uk/disclaimer/email/

2 2

Unable to open oVirt page past login
by Vrgotic, Marko 17 Mar '20

17 Mar '20

Dear oVirt, One of my Users, working remotely via VPN (10.200.145.169), is having issues to load oVirt Dashboard or any other screen past login page. icmp response time is about 25ms Tracking ovirt-request-log and server.log I noticed following correlation: Once User has opened login page, entered credentials and requested page / dataCenters in this case: https://ovirt-engine.avinity.tv/ovirt-engine/webadmin/?locale=en_US#dataCen… following is logged: tailf /var/log/httpd/ovirt-requests-log | grep "10.200.145.169": [17/Mar/2020:14:54:16 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 8758us" "GET /ovirt-engine/webadmin/?locale=en_US HTTP/1.1" - [17/Mar/2020:14:54:16 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1946us" "GET /ovirt-engine/webadmin/webadmin.nocache.js HTTP/1.1" - [17/Mar/2020:14:54:17 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1318us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/plugin.html HTTP/1.1" - [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1649us" "GET /ovirt-engine/docs/csh/webadmin.json HTTP/1.1" 28 [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1272us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/css/vendor.f6f68cb2.css HTTP/1.1" - [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1561us" "POST /ovirt-engine/webadmin/xsrf HTTP/1.1" 141 [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1850us" "POST /ovirt-engine/webadmin/xsrf HTTP/1.1" 141 [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 826us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/js/manifest.08488e4f.js HTTP/1.1" - [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1453us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/js/vendor.e3652c82.chunk.js HTTP/1.1" - [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 890us" "GET /ovirt-engine/webadmin/plugin/ui-extensions/js/plugin.2a3f9da3.chunk.js HTTP/1.1" - [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: 10971786-086e-44ec-acf3-ff74117671a3" "Duration: 23723us" "POST /ovirt-engine/webadmin/GenericApiGWTService HTTP/1.1" 208 [17/Mar/2020:14:54:18 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 20020204us" "POST /ovirt-engine/webadmin/GenericApiGWTService HTTP/1.1" 226 [17/Mar/2020:14:54:38 +0000] 10.200.145.169 "Correlation-Id: -" "Duration: 1450us" "POST /ovirt-engine/webadmin/xsrf HTTP/1.1" 141 tailf /var/log/ovirt-engine/server.log : 2020-03-17 14:54:38,581Z ERROR [io.undertow.request] (default task-4989) UT005023: Exception handling request to /ovirt-engine/webadmin/GenericApiGWTService: java.lang.RuntimeException: Unable to report failure at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doUnexpectedFailure(AbstractRemoteServiceServlet.java:107) [gwt-servlet.jar:] at org.ovirt.engine.ui.frontend.server.gwt.GenericApiGWTServiceImpl.doUnexpectedFailure(GenericApiGWTServiceImpl.java:212) [frontend.jar:] at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:67) [gwt-servlet.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:706) [jboss-servlet-api_4.0_spec-1.0.0.Final.jar:1.0.0.Final] at org.ovirt.engine.ui.frontend.server.gwt.GenericApiGWTServiceImpl.service(GenericApiGWTServiceImpl.java:78) [frontend.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:791) [jboss-servlet-api_4.0_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.utils.servlet.CachingFilter.doFilter(CachingFilter.java:133) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:73) [branding.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:65) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:132) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:53) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:59) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at org.wildfly.extension.undertow.security.SecurityContextThreadSetupAction.lambda$create$0(SecurityContextThreadSetupAction.java:105) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1502) at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.Connectors.executeRootHandler(Connectors.java:364) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:830) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35) at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1982) at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486) at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377) at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_242] Caused by: java.nio.channels.ClosedChannelException at io.undertow.server.protocol.ajp.AjpServerRequestConduit.doRead(AjpServerRequestConduit.java:230) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.protocol.ajp.AjpServerRequestConduit.read(AjpServerRequestConduit.java:201) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at org.xnio.conduits.ConduitStreamSourceChannel.read(ConduitStreamSourceChannel.java:127) at io.undertow.channels.DetachableStreamSourceChannel.read(DetachableStreamSourceChannel.java:209) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at io.undertow.server.HttpServerExchange$ReadDispatchChannel.read(HttpServerExchange.java:2343) [undertow-core-2.0.21.Final.jar:2.0.21.Final] at org.xnio.channels.Channels.readBlocking(Channels.java:294) at io.undertow.servlet.spec.ServletInputStreamImpl.readIntoBuffer(ServletInputStreamImpl.java:192) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.spec.ServletInputStreamImpl.read(ServletInputStreamImpl.java:168) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at io.undertow.servlet.spec.ServletInputStreamImpl.read(ServletInputStreamImpl.java:154) [undertow-servlet-2.0.21.Final.jar:2.0.21.Final] at com.google.gwt.user.server.rpc.RPCServletUtils.readContent(RPCServletUtils.java:224) [gwt-servlet.jar:] at com.google.gwt.user.server.rpc.RPCServletUtils.readContentAsGwtRpc(RPCServletUtils.java:252) [gwt-servlet.jar:] at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.readContent(AbstractRemoteServiceServlet.java:182) [gwt-servlet.jar:] at com.google.gwt.user.server.rpc.RemoteServiceServlet.processPost(RemoteServiceServlet.java:364) [gwt-servlet.jar:] at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62) [gwt-servlet.jar:] ... 58 more

2 4

adding new gluster volume
by Jayme 17 Mar '20

17 Mar '20

What if any steps do I need to take prior to adding an additional gluster volume to my HCI cluster using new storage devices via the oVirt gui? Will the gui prepare the devices (xfs/lvm etc) or do I need to do that prior?

1 0

Several virtual machines all with the same MAC address ?
by Li Xo 17 Mar '20

17 Mar '20

Hello, I need to replicate some file servers that must have the same MAC address to work properly and which will be placed on different VLANs to avoid MAC conflicts. With VMware and VirtualBox this is quite simple and works without particular problems but it seems that oVirt does not allow it or I did not find how to proceed. So 2 questions: - does it is possible ? - what must be done to allow oVirt to handle it ? Thanks, Li

2 1