- Users - oVirt List Archives

How to connect 2 hosts
by adamantini.peratikou＠ouc.ac.cy 22 Jan '19

22 Jan '19

I have the following configuraton: 1 cluster, 2 Hosts I would like to use a Vm-router under Host 1 to act as a dhcp server for both HOST1 and HOST2 VMs is it possible?

4 7

User Management
by Sakhi Hadebe 22 Jan '19

22 Jan '19

Hi, I need some pointers to documentation that will help me to configure users to have access and some rights (access to console, starting and shutting down own VMs) on their VMs on the VM portal. I have created a user using the ovirt-aaa-jdbc-tool utility, but I am unable to login to the cockpit portal. It gives an error: *The user shadebe@internal is not **authorized** to perform login* User details: [root@hostedengine ~]# ovirt-aaa-jdbc-tool query --what=user --pattern="name=s*" -- User shadebe(a35e8e14-d32b-4ff9-89e0-fd090a87146a) -- Namespace: * Name: shadebe ID: a35e8e14-d32b-4ff9-89e0-fd090a87146a Display Name: Email: sakhi(a)sanren.ac.za First Name: Sakhi Last Name: Hadebe Department: Title: Description: Account Disabled: false Account Locked: false Account Unlocked At: 1970-01-01 00:00:00Z Account Valid From: 2019-01-16 09:08:48Z Account Valid To: 2219-01-16 09:08:48Z Account Without Password: false Last successful Login At: 2019-01-16 09:32:52Z Last unsuccessful Login At: 2019-01-16 09:32:36Z Password Valid To: 2029-01-16 10:30:00Z Please help. -- Regards, Sakhi Hadebe Engineer: South African National Research Network (SANReN)Competency Area, Meraka, CSIR Tel: +27 12 841 2308 <+27128414213> Fax: +27 12 841 4223 <+27128414223> Cell: +27 71 331 9622 <+27823034657> Email: sakhi(a)sanren.ac.za <shadebe(a)csir.co.za>

2 2

[ANN] oVirt 4.2.8 is now generally available
by Sandro Bonazzola 22 Jan '19

22 Jan '19

The oVirt Project is pleased to announce the general availability of oVirt 4.2.8, as of January 22nd, 2019. This update is the eighth and last in a series of stabilization updates to the 4.2 series. Please note that no further updates will be issued for the 4.2 series. We encourage users to upgrade to 4.3 series when generally available to receive new features and updates. This release is available now for: * Red Hat Enterprise Linux 7.6 or later * CentOS Linux (or similar) 7.6 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.6 or later * CentOS Linux (or similar) 7.6 or later * oVirt Node 4.2 See the release notes [1] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is available - oVirt Node update is available, ISO will be available soon [2] - oVirt Tools Setup ISO is available[2] oVirt Node has been updated including: - oVirt 4.2.8: http://www.ovirt.org/release/4.2.8/ - Release for CentOS Linux 7 (1810) ( https://lists.centos.org/pipermail/centos-announce/2018-December/023082.html ) - Ansible 2.7.5: https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.… Relevant CentOS Errata included: - CEBA-2019:0037 CentOS 7 tzdata BugFix Update ( https://lists.centos.org/pipermail/centos-announce/2019-January/023142.html ) - CESA-2019:0049 Important CentOS 7 systemd Security Update ( https://lists.centos.org/pipermail/centos-announce/2019-January/023143.html ) - CESA-2018:3651 Moderate CentOS 7 kernel Security Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023132.html ) - CEBA-2018:3338 CentOS 7 sos BugFix Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023125.html ) - CEBA-2018:3664 CentOS 7 selinux-policy BugFix Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023124.html ) - CESA-2018:3738 Important CentOS 7 ruby Security Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023122.html ) - CESA-2018:3347 Critical CentOS 7 python-paramiko Security Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023119.html ) - CESA-2018:3665 Important CentOS 7 NetworkManager Security Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023116.html ) - CEBA-2018:3442 CentOS 7 lvm2 BugFix Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023112.html ) - CEBA-2018:3669 CentOS 7 libvirt BugFix Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023110.html ) - CEBA-2018:3659 CentOS 7 libguestfs BugFix Update ( https://lists.centos.org/pipermail/centos-announce/2018-December/023108.html ) Additional Resources: * Read more about the oVirt 4.2.8 release highlights: http://www.ovirt.org/release/4.2.8/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] http://www.ovirt.org/release/4.2.8/ [2] http://resources.ovirt.org/pub/ovirt-4.2/iso/ -- SANDRO BONAZZOLA MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig>

1 0

Unable to start or create a virtual machine
by Shikhar Verma 22 Jan '19

22 Jan '19

Hi, I have created the virtual machine from ovirt manager but when I am trying to get the console of the vm to do the installation of it but it is only giving two two line and even i have tried as run once and selected CD ROM as first priority and attached the ISO of centos7 SeaBIOS (version 1.11.0-2.e17) Machine UUID ------- Also, from manager, newly launched vm is showing green.. And from the host machine, it is showing this error Jan 21 19:23:24 servera libvirtd: 2019-01-21 13:53:24.286+0000: 12800: error : qemuDomainAgentAvailable:9133 : Guest agent is not responding: QEMU guest agent is not connected I am using the latest version version of ovirt-engine & host as well. Setup I have create on my Laptop using vmware workstation: Centos server : Manager : server.example.com (192.168.28.128) Centos : Host : servera.example.com 192.168.28.130 Centos : NFS Server : utility.example.com 192.168.28.129 (create fs's as /exports and exported as /exports/iso & /exports/data1 ) In /exports/iso ==> I have rhel 7 & centos 7 iso images and /exports/data1 ( will be using for disk images of vms) From Manager : I have added host and also create domains one as datadomain (/exports/data1) and another one is isodomain (/exports/iso) Now issue i am facing when I am trying to create a vm, it is allowing me to create vm but console is blank.

1 0

Vdo based storage domain
by Leo David 21 Jan '19

21 Jan '19

Hi everyone, I have read and tried to understand how vdo works, and it seems pretty impressive, but i feel like i am missing something. At the end of the day, my question is: Can I entirelly rely on the 10 times increased usable space ? As and example, I have created a 4.8tb volume based on 3x480gb samsung sm863a enterprise ssd devices. (full replica 3). Should I be confident that I can use 4.8tb for my storage domain (vms data store) without concerning about data repetabilitty in the future ? I am just trying to think as an end-user consumer that cannot predict if data that will be written to the device will be compresable or not, and only see 4.8tb as trully usable space. Any thoughts, any experience to share ? Im sorry if my question sounds noob, but i'm just trying to get under end user's hat. Thank you very much, Have a good day ! Leo

1 0

failed to attach a samba active directory
by adam_xu＠adagene.com.cn 21 Jan '19

21 Jan '19

Hello ovirt developers. I have attached a samba ad dc successfully more then 10 times before via this link https://www.ovirt.org/documentation/admin-guide/chap-Users_and_Roles.html but this time, when I try to attach a samba ad dc, I got some certificate error. my test engine version: 4.2.7 or 4.2.8 (both have been tested) full procedure like below: # ovirt-engine-extension-aaa-ldap-setup [ INFO ] Stage: Initializing [ INFO ] Stage: Environment setup Configuration files: ['/etc/ovirt-engine-extension-aaa-ldap-setup.conf.d/10-packaging.conf'] Log file: /tmp/ovirt-engine-extension-aaa-ldap-setup-20190122102450-0b1sjq.log Version: otopi-1.7.8 (otopi-1.7.8-1.el7) [ INFO ] Stage: Environment packages setup [ INFO ] Stage: Programs detection [ INFO ] Stage: Environment customization Welcome to LDAP extension configuration program Available LDAP implementations: 1 - 389ds 2 - 389ds RFC-2307 Schema 3 - Active Directory 4 - IBM Security Directory Server 5 - IBM Security Directory Server RFC-2307 Schema 6 - IPA 7 - Novell eDirectory RFC-2307 Schema 8 - OpenLDAP RFC-2307 Schema 9 - OpenLDAP Standard Schema 10 - Oracle Unified Directory RFC-2307 Schema 11 - RFC-2307 Schema (Generic) 12 - RHDS 13 - RHDS RFC-2307 Schema 14 - iPlanet Please select: 3 Please enter Active Directory Forest name: ntbaobei.com [ INFO ] Resolving Global Catalog SRV record for ntbaobei.com NOTE: It is highly recommended to use secure protocol to access the LDAP server. Protocol startTLS is the standard recommended method to do so. Only in cases in which the startTLS is not supported, fallback to non standard ldaps protocol. Use plain for test environments only. Please select protocol to use (startTLS, ldaps, plain) [startTLS]: Please select method to obtain PEM encoded CA certificate (File, URL, Inline, System, Insecure): File File path: /etc/pki/ca-trust/extracted/pem/ca.pem [ INFO ] Resolving SRV record 'ntbaobei.com' [ INFO ] Connecting to LDAP using 'ldap://dc1.ntbaobei.com:389' [ INFO ] Executing startTLS [ INFO ] Connection succeeded Enter search user DN (for example uid=username,dc=example,dc=com or leave empty for anonymous): vmail(a)ntbaobei.com Enter search user password: [ INFO ] Attempting to bind using 'vmail(a)ntbaobei.com' Are you going to use Single Sign-On for Virtual Machines (Yes, No) [Yes]: NOTE: Profile name has to match domain name, otherwise Single Sign-On for Virtual Machines will not work. Please specify profile name that will be visible to users [ntbaobei.com] [ INFO ] Stage: Setup validation NOTE: It is highly recommended to test drive the configuration before applying it into engine. Login sequence is executed automatically, but it is recommended to also execute Search sequence manually after successful Login sequence. Please provide credentials to test login flow: Enter user name: xingya_xu Enter user password: [ INFO ] Executing login sequence... Login output: 2019-01-22 10:26:06,777+08 INFO ======================================================================== 2019-01-22 10:26:06,800+08 INFO ============================ Initialization ============================ 2019-01-22 10:26:06,801+08 INFO ======================================================================== 2019-01-22 10:26:06,841+08 INFO Loading extension 'ntbaobei.com-authn' 2019-01-22 10:26:06,911+08 INFO Extension 'ntbaobei.com-authn' loaded 2019-01-22 10:26:06,917+08 INFO Loading extension 'ntbaobei.com' 2019-01-22 10:26:06,953+08 INFO Extension 'ntbaobei.com' loaded 2019-01-22 10:26:06,954+08 INFO Initializing extension 'ntbaobei.com-authn' 2019-01-22 10:26:06,960+08 INFO [ovirt-engine-extension-aaa-ldap.authn::ntbaobei.com-authn] Creating LDAP pool 'authz' 2019-01-22 10:26:07,324+08 WARNING Exception: The connection reader was unable to successfully complete TLS negotiation: SSLHandshakeException(sun.security.validator.ValidatorException: No trusted certificate found), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58 2019-01-22 10:26:07,325+08 INFO [ovirt-engine-extension-aaa-ldap.authn::ntbaobei.com-authn] Creating LDAP pool 'authn' 2019-01-22 10:26:08,748+08 WARNING Exception: The connection reader was unable to successfully complete TLS negotiation: SSLHandshakeException(sun.security.validator.ValidatorException: No trusted certificate found), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58 2019-01-22 10:26:08,773+08 WARNING Ignoring records from pool: 'authz' 2019-01-22 10:26:08,774+08 WARNING Ignoring records from pool: 'authz' 2019-01-22 10:26:08,775+08 INFO Extension 'ntbaobei.com-authn' initialized 2019-01-22 10:26:08,776+08 INFO Initializing extension 'ntbaobei.com' 2019-01-22 10:26:08,776+08 INFO [ovirt-engine-extension-aaa-ldap.authz::ntbaobei.com] Creating LDAP pool 'authz' 2019-01-22 10:26:09,414+08 INFO [ovirt-engine-extension-aaa-ldap.authz::ntbaobei.com] LDAP pool 'authz' information: vendor='Samba Team (https://www.samba.org)' version='4.8.8-SerNet-RedHat-18.el7' 2019-01-22 10:26:09,415+08 INFO [ovirt-engine-extension-aaa-ldap.authz::ntbaobei.com] Creating LDAP pool 'gc' 2019-01-22 10:26:10,148+08 WARNING Exception: The connection reader was unable to successfully complete TLS negotiation: SSLHandshakeException(sun.security.validator.ValidatorException: No trusted certificate found), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58 2019-01-22 10:26:10,179+08 INFO [ovirt-engine-extension-aaa-ldap.authz::ntbaobei.com] Creating LDAP pool 'authz(a)ntbaobei.com' 2019-01-22 10:26:10,269+08 WARNING Exception: The connection reader was unable to successfully complete TLS negotiation: SSLHandshakeException(sun.security.validator.ValidatorException: No trusted certificate found), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58 2019-01-22 10:26:10,270+08 WARNING Ignoring records from pool: 'authz(a)ntbaobei.com' 2019-01-22 10:26:10,282+08 WARNING Ignoring records from pool: 'authz(a)ntbaobei.com' 2019-01-22 10:26:10,283+08 INFO [ovirt-engine-extension-aaa-ldap.authz::ntbaobei.com] Available Namespaces: [] 2019-01-22 10:26:10,283+08 INFO Extension 'ntbaobei.com' initialized 2019-01-22 10:26:10,284+08 INFO Start of enabled extensions list 2019-01-22 10:26:10,284+08 INFO Instance name: 'ntbaobei.com', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmp01ChKj/extensions.d/ntbaobei.com.properties', Initialized: 'true' 2019-01-22 10:26:10,285+08 INFO Instance name: 'ntbaobei.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmp01ChKj/extensions.d/ntbaobei.com-authn.properties', Initialized: 'true' 2019-01-22 10:26:10,285+08 INFO End of enabled extensions list 2019-01-22 10:26:10,285+08 INFO ======================================================================== 2019-01-22 10:26:10,285+08 INFO ============================== Execution =============================== 2019-01-22 10:26:10,286+08 INFO ======================================================================== 2019-01-22 10:26:10,286+08 INFO Iteration: 0 2019-01-22 10:26:10,287+08 INFO Profile='ntbaobei.com' authn='ntbaobei.com-authn' authz='ntbaobei.com' mapping='null' 2019-01-22 10:26:10,287+08 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='ntbaobei.com' user='testusernamehere' 2019-01-22 10:26:10,290+08 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='ntbaobei.com' result=GENERAL_ERROR 2019-01-22 10:26:10,296+08 SEVERE Authn.Result code is: GENERAL_ERROR [ ERROR ] Login sequence failed Please investigate details of the failure (search for lines containing SEVERE log level). Select test sequence to execute (Done, Abort, Login, Search) [Abort]: [ ERROR ] Failed to execute stage 'Setup validation': Aborted by user [ INFO ] Stage: Clean up Log file is available at /tmp/ovirt-engine-extension-aaa-ldap-setup-20190122102450-0b1sjq.log: [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination I have copy the CA certificate file from samba ad dc to /etc/pki/ca-trust/extracted/pem/ca.pem in the engine server. I think the warning "SSLHandshakeException(sun.security.validator.ValidatorException: No trusted certificate found), " is the reason why I can not pass user login test? I once passed the user login test in some older version such as 4.2.6. I can still pass the user login test using startTLS Insecure way. full log has been attached to this mail. thanks. yours Adam

1 0

Re: oVirt Node install - kickstart postintall
by Ryan Barry 21 Jan '19

21 Jan '19

The quick answer is that operations in %post must be performed before 'nodectl init'. If that's done, they'll happily stick. On Mon, Jan 14, 2019, 9:29 PM Brad Riemann <Brad.Riemann(a)cloud5.com wrote: > Can you send over the whole %post segment i via pastebin? I think i've run > across something similar that i addressed, but just want to be sure. > > > Brad Riemann > Sr. System Architect > Cloud5 Communications > > ------------------------------ > *From:* jeanbaptiste(a)nfrance.com <jeanbaptiste(a)nfrance.com> > *Sent:* Friday, January 11, 2019 1:51:14 AM > *To:* users(a)ovirt.org > *Subject:* [ovirt-users] oVirt Node install - kickstart postintall > > CAUTION: This email originated from outside of CLOUD5. Do not click links > or open attachments unless you recognize the sender and know the content is > safe. > > > Hello everybody, > > Since days, I'm trying to install oVirt (via Foreman) in network mode > (TFTP net install). > All is great, but I want to make some actions in postinstall (%post). > Some actions are relatated to /etc/sysconfig/network-interfaces and > another action is related to root authorized_keys. > > When I try to add pub-key to a created authorized_keys for root, I work > (verified into anaconda. > But after installation and anaconda reboot, I've noticed all my %post > actions in /(root) are discared. After reboot, there is nothing in > /root/.ssh for example. > Whereas, in /etc, all my modications are preserved. > > I thought to a Selinux relative issue, but It is not relative to Selinux > > I miss something. Please can you help to understand how oVirt install / > partition work ? > > thanks for all > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/BCQEKHCPSFDEF… > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/TGT7K3N245SH3… >

2 1

multiple engines (active passive)
by maoz zadok 21 Jan '19

21 Jan '19

Hello users, After a painful experience with a crashed engine and a problematic recovery from a backup, I was thinking to create one more engine in standby mode in the same network, that will automatically recover backup files from the active engine on a daily/hourly basis. This way I'll run recovery tests every day automatically and easily switch in case of engine failure with a DNS record change to the passive engine. So the main question, is it harmful to have more then one engine alive if only one is been modified? can the standby engine affect the host nodes?

9 10

Re: GlusterFS and oVirt
by Strahil 20 Jan '19

20 Jan '19

1 0

How to import from another oVirt / RHV environment
by Gianluca Cecchi 20 Jan '19

20 Jan '19

Hello, I have two different oVirt 4.2 environments and I want to migrate some big VMs from one to another. I'm not able to detach and attach the block based domain where are the disks of source. And I cannot use export domain functionality. But the 2 environments, both hosts and engines, are able to communicate. Can I use in some way the import Virtual Machine functionality with the "KVM(via Libvirt)" source type? Or is there (eventually via command line) a way to use virt-v2v in this case? Thanks, Gianluca

3 9