- Users - oVirt List Archives

CVE-2024-1597
by Fabrice Bacchella 21 Feb '24

21 Feb '24

Does oVirt is exposed to CVE-2024-1597 ? To be exposed, the jdbc driver needs to be used with PreferQueryMode=SIMPLE. Is that the situation ?

3 3

NMState verification error when setting up a bonding interface
by Maximilian Grüttemeier 20 Feb '24

20 Feb '24

Hello fellow oVirt Users. I am trying to setup a bond interface on my host, but for whatever reason I am unable to do so trough the host network configuration. Actually I do know the issue, and it’s a bit bizarre as I don’t know what causes it. If you take a look at the following snippet of my supervdsm.log file, you will see that the NMstate verification fails due to a difference between the current config and the desired config. The thing is I have not made any of the additional configuration options. I literally installed the OS, installed the oVirt host and tried to setup a network bond. Has anyone experienced this? Does anyone know how to fix this? ``` Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/vdsm/supervdsm_server.py", line 80, in wrapper res = func(*args, **kwargs) File "/usr/lib/python3.6/site-packages/vdsm/network/api.py", line 193, in setupNetworks _setup_networks(networks, bondings, options) File "/usr/lib/python3.6/site-packages/vdsm/network/api.py", line 217, in _setup_networks netswitch.configurator.setup(networks, bondings, options, in_rollback) File "/usr/lib/python3.6/site-packages/vdsm/network/netswitch/configurator.py", line 53, in setup _setup_nmstate(networks, bondings, options, in_rollback) File "/usr/lib/python3.6/site-packages/vdsm/network/netswitch/configurator.py", line 76, in _setup_nmstate nmstate.setup(desired_state, verify_change=not in_rollback) File "/usr/lib/python3.6/site-packages/vdsm/network/nmstate/api.py", line 29, in setup state_apply(desired_state, verify_change=verify_change) File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 140, in apply plugins, net_state, verify_change, save_to_disk, verify_retry File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 190, in _apply_ifaces_state _verify_change(plugins, net_state) File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 197, in _verify_change net_state.verify(current_state) File "/usr/lib/python3.6/site-packages/libnmstate/net_state.py", line 119, in verify self._ifaces.verify(current_state.get(Interface.KEY)) File "/usr/lib/python3.6/site-packages/libnmstate/ifaces/ifaces.py", line 805, in verify cur_iface.state_for_verify(), libnmstate.error.NmstateVerificationError: desired ======= --- name: ovirtmgmt type: linux-bridge state: up bridge: options: stp: enabled: false port: - name: bond0 vlan: {} ipv4: enabled: true address: - ip: 10.10.120.1 prefix-length: 16 dhcp: false ipv6: enabled: false mtu: 1500 current ======= --- name: ovirtmgmt type: linux-bridge state: up accept-all-mac-addresses: false bridge: options: group-addr: 01:80:C2:00:00:00 group-forward-mask: 0 hash-max: 4096 mac-ageing-time: 300 multicast-last-member-count: 2 multicast-last-member-interval: 100 multicast-querier: false multicast-querier-interval: 25500 multicast-query-interval: 12500 multicast-query-response-interval: 1000 multicast-query-use-ifaddr: false multicast-router: 1 multicast-snooping: true multicast-startup-query-count: 2 multicast-startup-query-interval: 3125 stp: enabled: false forward-delay: 15 hello-time: 2 max-age: 20 priority: 32768 port: [] ethtool: feature: highdma: true rx-gro: true tx-generic-segmentation: true tx-tcp-segmentation: true tx-vlan-hw-insert: true ipv4: enabled: true address: - ip: 10.10.120.1 prefix-length: 16 dhcp: false ipv6: enabled: false lldp: enabled: false mac-address: AC:16:2D:BD:03:D0 mtu: 1500 wait-ip: any difference ========== --- desired +++ current @@ -2,13 +2,38 @@ name: ovirtmgmt type: linux-bridge state: up +accept-all-mac-addresses: false bridge: options: + group-addr: 01:80:C2:00:00:00 + group-forward-mask: 0 + hash-max: 4096 + mac-ageing-time: 300 + multicast-last-member-count: 2 + multicast-last-member-interval: 100 + multicast-querier: false + multicast-querier-interval: 25500 + multicast-query-interval: 12500 + multicast-query-response-interval: 1000 + multicast-query-use-ifaddr: false + multicast-router: 1 + multicast-snooping: true + multicast-startup-query-count: 2 + multicast-startup-query-interval: 3125 stp: enabled: false - port: - - name: bond0 - vlan: {} + forward-delay: 15 + hello-time: 2 + max-age: 20 + priority: 32768 + port: [] +ethtool: + feature: + highdma: true + rx-gro: true + tx-generic-segmentation: true + tx-tcp-segmentation: true + tx-vlan-hw-insert: true ipv4: enabled: true address: @@ -17,4 +42,8 @@ dhcp: false ipv6: enabled: false +lldp: + enabled: false +mac-address: AC:16:2D:BD:03:D0 mtu: 1500 +wait-ip: any ```

1 1

how fix tail -f /var/log/openvswitch/ovn-controller.log 2024-02-19T15:26:43.908Z|27300|stream_ssl|WARN|SSL_connect: error:14090086:SSL
by oscar.loza＠toshibagcs.com 20 Feb '24

20 Feb '24

hi good day: im updated list time the ovirt certificate but a storage domain under ovirt can' t start show, activating and after some minutes again show "inactive" and under line command show this issues, could you help me to resolve thanks # tail -f /var/log/openvswitch/ovn-controller.log 2024-02-19T15:26:43.908Z|27300|stream_ssl|WARN|SSL_connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed 2024-02-19T15:26:51.918Z|27301|stream_ssl|WARN|SSL_connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed 2024-02-19T15:26:59.928Z|27302|stream_ssl|WARN|SSL_connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed 2024-02-19T15:27:07.938Z|27303|stream_ssl|WARN|SSL_connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed 2024-02-19T15:27:15.948Z|27304|stream_ssl|WARN|SSL_connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed 2024-02-19T15:27:23.958Z|27305|stream_ssl|WARN|SSL_connect: error:14090086:SSL

2 5

Host dummy interface or virtual network
by cedric＠mrtn.ovh 20 Feb '24

20 Feb '24

Hello, I need to know how can I create a dummy interface on host and visibile into oVirt engine, or create a virtual network that both let vm connected to it communicate between them. Someone to help me or explain ? Thks

1 0

CentOS Stream 8 EOL: May 31, 2024
by Diggy Mc 19 Feb '24

19 Feb '24

It has been announced that End-of-Life for CentOS Stream 8 is May 31st, 2024. See announcement: https://blog.centos.org/2023/04/end-dates-are-coming-for-centos-stream-8-an… What does this mean for the future of the hosted-engine which is still based on CentOS Stream 8 ??? My personal vote for the next OS flavor/version for both the hosted-engine and oVirt Node is Rocky Linux 9.

2 1

Unable to upload image to disk - due to a network error
by Alan Aguinaga 19 Feb '24

19 Feb '24

Hi. Is there a way to send an ISO to self hosted server? Because I 've been searching for help and a lot of people complaining about it. 1 - What is the way to send ISOs to oVirt? Are there a command line tool to send ISOs to my server? "The ISO Uploader tool has been deprecated. Red Hat recommends uploading ISO images to the data domain with the Administration Portal or with the REST API. See Section 11.8.1, “Uploading Images to a Data Storage Domain” for details." https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/ht… 2 - ISO sending from portal worked for a smaller image. It could be done for OL 7.9 with 4 GB. But I am trying to upload OL 8.9 ISO with 13.5 GB and it is not finishing. It is not resuming. It started to upload. I have a configured certificate installed and ok tested connection. I got this error: "Unable to upload image to disk a72b0da4-1bbb-453c-b846-701eef9761f6 due to a network error. Ensure ovirt-engine's CA certificate is registered as a trusted CA in the browser. The certificate can be fetched from" It started but not finished: "Sent 1732 of 12812 MB" This message is related to network not to certificate because it is installed otherwise it cannot even started to upload. Are there a user-friendly way to upload a ISO to a server using any command line tool? Latter versions I can send a ISO to a storage pool and it appears in server. Now I read it is impossible. Does it impossible by now? My is 4.4.10.7-1.0.25.el8. I am using NFS share and self hosted engine.

2 1

Ovirt engine deply error- urgently need help
by ihaqikram＠gmail.com 19 Feb '24

19 Feb '24

2024-02-16 21:05:28,499+0000 DEBUG var changed: host "localhost" var "ovirt_sso_auth" type "<type 'dict'>" value: "{ "attempts": 50, "changed": false, "exception": "Traceback (most recent call last):\n File \"/tmp/ansible_ovirt_auth_payload_GY8VTT/ansible_ovirt_auth_payload.zip/ansible/modules/cloud/ovirt/ovirt_auth.py\", line 276, in main\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py\", line 382, in authenticate\n self._sso_token = self._get_access_token()\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py\", line 618, in _get_access_token\n sso_response = self._get_sso_response(self._sso_url, post_data)\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py\", line 703, in _get_sso_response\n self._check_content_type(self.__JSON_CONTENT_TYPE_RE, 'JSON', header_lines)\n File \"/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py\", line 890, in _check_content_type\n raise Error(msg)\nError: The response content type 'text/html; charset=iso-8859-1' isn't the expected JSON\n", "failed": true, "msg": "The response content type 'text/html; charset=iso-8859-1' isn't the expected JSON" }" 2024-02-16 21:05:28,499+0000 DEBUG var changed: host "localhost" var "ansible_play_hosts" type "<type 'list'>" value: "[]" 2024-02-16 21:05:28,499+0000 DEBUG var changed: host "localhost" var "play_hosts" type "<type 'list'>" value: "[]" 2024-02-16 21:05:28,499+0000 DEBUG var changed: host "localhost" var "ansible_play_batch" type "<type 'list'>" value: "[]" 2024-02-16 21:05:28,500+0000 ERROR ansible failed {'status': 'FAILED', 'ansible_type': 'task', 'ansible_task': u'Obtain SSO token using username/password credentials', 'ansible_result': u'type: <type \'dict\'>\nstr: {u\'exception\': u\'Traceback (most recent call last):\\n File "/tmp/ansible_ovirt_auth_payload_GY8VTT/ansible_ovirt_auth_payload.zip/ansible/modules/cloud/ovirt/ovirt_auth.py", line 276, in main\\n File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 382, in authenticate\\n self._ss', 'task_duration': 955, 'ansible_host': u'localhost', 'ansible_playbook': u'/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml'} 2024-02-16 21:05:28,500+0000 DEBUG ansible on_any args <ansible.executor.task_result.TaskResult object at 0x7f70e7500750> kwargs ignore_errors:None 2024-02-16 21:05:28,506+0000 INFO ansible stats { "ansible_playbook": "/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml", "ansible_playbook_duration": "16:00 Minutes", "ansible_result": "type: <type 'dict'>\nstr: {u'localhost': {'ignored': 0, 'skipped': 1, 'ok': 4, 'failures': 1, 'unreachable': 0, 'rescued': 0, 'changed': 0}}", "ansible_type": "finish", "status": "FAILED" } 2024-02-16 21:05:28,506+0000 INFO SUMMARY: Duration Task Name -------- -------- [ < 1 sec ] Execute just a specific set of steps [ 00:01 ] Force facts gathering [ < 1 sec ] Check local VM dir stat [ FAILED ] Obtain SSO token using username/password credentials 2024-02-16 21:05:28,507+0000 DEBUG ansible on_any args <ansible.executor.stats.AggregateStats object at 0x7f70f6095690> kwargs

2 1

Add host into Ovirt-engine failure- Urgently need help with
by Ikram Ulhaq 19 Feb '24

19 Feb '24

I have captured the log below under the events of the host. Not sure why it is failing, as I'm able to SSH into the host form ovirt-engine vm. Host hostb.example.com installation failed. Command returned failure code 1 during SSH session 'root(a)hostb.example.com'.

1 0

IO per VM monitoring
by marek 19 Feb '24

19 Feb '24

hi, i have prometheus based ovirt hosts monitoring (node_exporter, smartcl_exporter, ipmi_exporter) https://prometheus-community.github.io/ansible/branch/main/ and alerts from https://samber.github.io/awesome-prometheus-alerts/ after i started this monitoring i found that one VM is overloading local storage (so i must check IO limiting documentation as a homework :) ) but my question is how do you monitor IO traffic per VM? (IOPS, read/write traffic,..) some qemu/libvirt exporter? some custom text file + node_exporter? thanks for tips Marek

4 7

Ovirt 4.4.10 - Admin account locked after password change
by Andy Lau 19 Feb '24

19 Feb '24

Hello All Recently, I reset the password for the admin account through ovirt-aaa-jdbc-tool. The password changed properly but the admin account will be locked automatically after few hours later. From the engine log, the admin@internal seems login periodically from ovirt engine itself. If I fallback the password with the original one, all working fine. Do anyone has the solution? Screen capture from the engine log: https://polyuit-my.sharepoint.com/:i:/g/personal/tflau_polyu_edu_hk/Edqp2ls…

3 4