- Users - oVirt List Archives

Ovirt-Hosted-Engine-Install-Purge Ansible Script Snippet
by RabidCicada 14 Jun '18

14 Jun '18

All, I put together a full purge ansible script for CentOS. I figured I'd share it here. I ran into many issues with spurious failures of installs when I would try to reinstall ovirt on CentOS after having "removed" it. I was developing an automated install of our own software along with ovirt but along the way I had to reinstall on the same box numerous times. Initially I'd get spurious failures from leftover cruft that would get in the way. I eventually found this:https://www.ovirt.org/documentation/how-to/hosted-engine/#recoving-fro… and then crafted my own ansible purge script. It uses ovirts own engine cleanup script first if it exists, then fully cleans every other thing that can affect it. Tested on CentOS, probably will work on other distros without too much trouble. Hopefully someone saves themselves some grief - name: Clean Old Install #This attempts to remove all old cruft from previous install attempts #The reason we include the ovirt packages is so that they can be reinstall #At potentially newer versions along with dependency packages block: - name: Detect existing cleanup script shell: which ovirt-hosted-engine-cleanup | cat register: ohes_cleanup - name: Debug ohes_cleanup.stdout debug: var: ohes_cleanup.stdout - name: Run Ovirt's Hosted Engine Cleanup Script shell: ovirt-hosted-engine-cleanup -q when: ohes_cleanup.stdout != "" - name: Clean old packages package: name: "{{item}}" state: absent with_items: - "*vdsm*" - "*ovirt*" - "*libvirt*" - "*cockpit*" - name: Remove old configs etc shell: "rm -rf /etc/{{item}}" args: warn: False with_items: - "/etc/*ovirt*" - "/etc/*vdsm*" - "/etc/libvirt/qemu/HostedEngine*" - "/etc/*libvirt*" - "/etc/guacamole" - "/etc/pki/vdsm" - "/etc/pki/libvirt" - "/etc/pki/CA" - "/etc/pki/keystore" - "/etc/ovirt-hosted-engine" - "/var/lib/libvirt/" - "/var/lib/vdsm/" - "/var/lib/ovirt-hosted-engine-*" - "/var/log/ovirt-hosted-engine-setup/" - "/var/cache/libvirt/" - "/etc/libvirt/nwfilter/vdsm-no-mac-spoofing.xml" - "/var/cache/tomcat/temp/*" - "/var/cache/tomcat/work/Catalina/localhost/*" - "/usr/share/tomcat/webapps/guacamole" - "/usr/share/tomcat/webapps/guacamole.war" - "/etc/guacamole/extensions/guacamole*" - name: Clean old repo files shell: "rm -rf /etc/yum.repos.d/{{item}}" args: warn: False with_items: - "ovirt*" - "virt*" - name: clean interface configs shell: "rm -rf /etc/sysconfig/network-scripts/ifcfg-ovirtmgmt" args: warn: False - name: clean network stuff shell: "{{item}}" args: warn: False with_items: - "brctl delbr ovirtmgmt | cat" - "ip link del ovirtmgmt | cat" - "ip link del dummy0 | cat" - "ip link del virbr0 | cat" - "ip link del virbr0-nic | cat" - 'ip link del \;vdsmdummy\; | cat'

1 1

LDAP logins do not work
by Michael Watters 14 Jun '18

14 Jun '18

I've ran the ovirt-engine-extension-aaa-ldap-setup command to configure LDAP authentication using Active Directory however I am unable to authenticate using valid credentials. Here is the output show while testing the login flow. [ INFO ] Executing login sequence... Login output: 2018-06-13 11:27:17,931-04 INFO ======================================================================== 2018-06-13 11:27:17,960-04 INFO ============================ Initialization ============================ 2018-06-13 11:27:17,960-04 INFO ======================================================================== 2018-06-13 11:27:17,999-04 INFO Loading extension 'example.com-authn' 2018-06-13 11:27:18,072-04 INFO Extension 'example.com-authn' loaded 2018-06-13 11:27:18,077-04 INFO Loading extension 'example.com-authz' 2018-06-13 11:27:18,089-04 INFO Extension 'example.com-authz' loaded 2018-06-13 11:27:18,090-04 INFO Initializing extension 'example.com-authn' 2018-06-13 11:27:18,091-04 INFO [ovirt-engine-extension-aaa-ldap.authn::example.com-authn] Creating LDAP pool 'authz' 2018-06-13 11:27:19,574-04 WARNING Exception: 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839 2018-06-13 11:27:19,576-04 INFO [ovirt-engine-extension-aaa-ldap.authn::example.com-authn] Creating LDAP pool 'authn' 2018-06-13 11:27:20,668-04 INFO [ovirt-engine-extension-aaa-ldap.authn::example.com-authn] LDAP pool 'authn' information: vendor='null' version='null' 2018-06-13 11:27:20,674-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:20,676-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:20,676-04 INFO Extension 'example.com-authn' initialized 2018-06-13 11:27:20,677-04 INFO Initializing extension 'example.com-authz' 2018-06-13 11:27:20,679-04 INFO [ovirt-engine-extension-aaa-ldap.authz::example.com-authz] Creating LDAP pool 'authz' 2018-06-13 11:27:21,270-04 WARNING Exception: 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839 2018-06-13 11:27:21,273-04 INFO [ovirt-engine-extension-aaa-ldap.authz::example.com-authz] Creating LDAP pool 'gc' 2018-06-13 11:27:22,065-04 WARNING Exception: 80090308: LdapErr: DSID-0C090400, comment: AcceptSecurityContext error, data 52e, v1db1 2018-06-13 11:27:22,069-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:22,072-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:22,085-04 WARNING Ignoring records from pool: 'authz' 2018-06-13 11:27:22,086-04 INFO [ovirt-engine-extension-aaa-ldap.authz::example.com-authz] Available Namespaces: [] 2018-06-13 11:27:22,087-04 INFO Extension 'example.com-authz' initialized 2018-06-13 11:27:22,088-04 INFO Start of enabled extensions list 2018-06-13 11:27:22,089-04 INFO Instance name: 'example.com-authz', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.7', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.7-1.el7.centos', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpPQluAI/extensions.d/example.com-authz.properties', Initialized: 'true' 2018-06-13 11:27:22,089-04 INFO Instance name: 'example.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.7', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.7-1.el7.centos', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpPQluAI/extensions.d/example.com-authn.properties', Initialized: 'true' 2018-06-13 11:27:22,090-04 INFO End of enabled extensions list 2018-06-13 11:27:22,090-04 INFO ======================================================================== 2018-06-13 11:27:22,090-04 INFO ============================== Execution =============================== 2018-06-13 11:27:22,091-04 INFO ======================================================================== 2018-06-13 11:27:22,091-04 INFO Iteration: 0 2018-06-13 11:27:22,093-04 INFO Profile='example.com' authn='example.com-authn' authz='example.com-authz' mapping='null' 2018-06-13 11:27:22,094-04 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='example.com' user='d861703' 2018-06-13 11:27:22,251-04 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='example.com' result=CREDENTIALS_INCORRECT 2018-06-13 11:27:22,262-04 SEVERE Authn.Result code is: CREDENTIALS_INCORRECT [ ERROR ] Login sequence failed Does anybody know what LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839 means? Is this a TLS issue? I am quite certain the password I'm using is correct.

2 4

VM created is reachable from only oVirt node
by sweettriplek＠gmail.com 14 Jun '18

14 Jun '18

VM running with centos is not reaching to any other network other than oVirt node. I tried to apply no network filer, clean-filter while creating vNIC interfaces but no luck. Setup configurations: - oVirt Engine and Node running on different machines - OVirt running on cent OS Please help me to resolve this issue, thanks in advance.

2 2

guests crashing during live migration(NUMA config issue)
by Balg, Andreas 14 Jun '18

14 Jun '18

Hello, during updates of our physical nodes running ovirt 4.2.3 I had to live- migrate all VMs to evacuate them from the hosts. This caused roughly 10% of guests to end up crashed /shutdown after live migration. Errors in the Logs are: 2018-05-31T15:15:51.273805Z qemu-kvm: warning: All CPU(s) up to maxcpus should be described in NUMA config, ability to start up with partial NUMA mappings is obsoleted and will be removed in future 2018-05-31T15:16:54.596554Z qemu-kvm: Unknown combination of migration flags: 0 2018-05-31T15:16:54.597196Z qemu-kvm: error while loading state section id 3(ram) 2018-05-31T15:16:54.598491Z qemu-kvm: load of migration failed: Invalid argument 2018-05-31 15:16:55.010+0000: shutting down, reason=crashed is there anything I can do about this? The hardware of all nodes is 100% identical -- Andreas Balg

3 6

VM is reachable only from oVirt node
by sweettriplek＠gmail.com 14 Jun '18

14 Jun '18

VM running with centos is not reaching to any other network other than oVirt node. I tried to apply no network filer, clean-filter while creating vNIC interfaces but no luck. Setup configurations: - oVirt Engine and Node running on different machines - OVirt running on cent OS Please help me to resolve this issue, thanks in advance.

1 0

VM is reachable only from oVirt node
by sweettriplek＠gmail.com 14 Jun '18

14 Jun '18

VM running with centos is not reaching to any other network other than oVirt node. I tried to apply no network filer, clean-filter while creating vNIC interfaces but no luck. Setup configurations: - oVirt Engine and Node running on different machines - OVirt running on cent OS Please help me to resolve this issue, thanks in advance.

1 0

Hosted engine cannot migrate
by Callum Smith 14 Jun '18

14 Jun '18

Dear All, Getting an issue where the HE can't b migrated, the log is full of: "VM HostedEngine is down with error. Exit message: resource busy: Failed to acquire lock: Lease is held by another host." engine.log attached Regards, Callum -- Callum Smith Research Computing Core Wellcome Trust Centre for Human Genetics University of Oxford e. callum(a)well.ox.ac.uk<mailto:callum@well.ox.ac.uk>

2 6

VM hanging at boot - [drm] Initialized qxl
by Leo David 14 Jun '18

14 Jun '18

Hello everyone, I have some Centos7 vms created from template ( CentOS 7 Generic Cloud Image v1802 for x86_64 ) I have alocated planty of resources to them, but they all have this issue when starting, they hang with the following message in console about 5-7 minutes. [drm] Initialized qxl 0.1.0 20120117 for 0000:00:02:0 on mirror 0 After a while, vm eventually boots up... Running self-hosted ovirt-node 4.2 Does anyone know what could be the issue for this behavior ? Thank you ! -- Best regards, Leo David

1 1

Question re: MaxFreeMemoryforOverUtlized and MinFreeMemoryforUnderUtilized
by Alastair Neil 14 Jun '18

14 Jun '18

Can someone clarify these setting for me, I am having difficulty parsing what exactly they mean. They seem to me to be backwards. If I wish to set a threshold at which I want my host to be consider over utilized, not schedule any new VMs, and migrate VMs away, then surely I should specify a minimum threshold of free memory. I.E. if free memory drops below my threshold (OR memory use exceed a maximum threshold) migrate VM's off of this system. Conversely if a system is underutilized I should set a maximum threshold of free memory (Or minimum used memory). Thanks, --Alastair

2 3

Centos7.5 or Ovirt node for new hci build?
by Jayme 13 Jun '18

13 Jun '18

I'm about to build a 3 host Ovirt hyperconverged cluster and was wondering if it's recommended to use straight up Centos or would Ovirt node be a better choice? Thanks

2 1