- Users - oVirt List Archives

unsupported configuration: Unable to find security driver for model selinux
by Charles Kozler 10 Sep '17

10 Sep '17

Hello, I recently installed ovirt cluster on 3 nodes and saw that I could only migrate one way Reviewing the logs I found this 2017-08-31 09:04:30,685-0400 ERROR (migsrc/1eca84bd) [virt.vm] (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') unsupported configuration: Unable to find security driver for model selinux (migration:287) 2017-08-31 09:04:30,698-0400 ERROR (migsrc/1eca84bd) [virt.vm] (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') Failed to migrate (migration:429) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 411, in run self._startUnderlyingMigration(time.time()) File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 487, in _startUnderlyingMigration self._perform_with_conv_schedule(duri, muri) File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 563, in _perform_with_conv_schedule self._perform_migration(duri, muri) File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 529, in _perform_migration self._vm._dom.migrateToURI3(duri, params, flags) File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line 69, in f ret = attr(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 123, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 944, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1939, in migrateToURI3 if ret == -1: raise libvirtError ('virDomainMigrateToURI3() failed', dom=self) libvirtError: unsupported configuration: Unable to find security driver for model selinux Which led me to this https://bugzilla.redhat.com/show_bug.cgi?id=1013617 I could migrate from node1 -> node 2 but not node2 -> node1, so obviously I had something different with node 1. In this case, it was selinux On node 1 it is set to disabled but on node 2 it is set to permissive. I am not sure how they got different but I wanted to update this list with this finding Node 2 was setup directly via web UI in the engine with host -> new. Perhaps I manually set node 1 to disabled Does ovirt / libvirt expect permissive? Or does it expect enforcing? Or does it need to be both the same matching? thanks!

2 2

Discard After Delete: Why not the default?
by Troels Arvin 10 Sep '17

10 Sep '17

Hello, In the settings for a storage domain, in "Advanced Options", there is an option "Discard After Delete". The default is that the checkbox is not set. The documentation at https://www.ovirt.org/develop/release-management/features/storage/discard- after-delete/ and https://www.ovirt.org/develop/release-management/features/storage/pass- discard-from-guest-to-underlying-storage/ does not mention why the option is not the default. What drawback does the "Dicard After Delete" feature have, since it's not the default? -- Regards, Troels Arvin

2 1

Replacing engine SSL cert
by Chris Adams 10 Sep '17

10 Sep '17

I'm writing a script to install a new SSL key/cert pair (from Let's Encrypt) for the engine web UI on oVirt 4.1. I'm looking at this, but it's a little confusing. https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL/ It sounds like steps 1 and 3 are referring to the CA-supplied intermediate cert(s), not the actual issue cert for the server. Is that right? Does anything actually use the PCKS12 format file referred to in step 4? I don't normally see that format from regular CAs; they usually provide cert+intermediate(s) in PEM format. With Apache 2.4, it is normal to just put the cert+intermediate(s) chain in one file and configure Apache with SSLCertificateFile. You aren't supposed to put the CA-supplied cert in the SSLCACertificateFile like oVirt appears to do; that's intended to be used for validating client certs, not the intermediate(s) for the server cert. It really just looks like the cert+intermediate(s) should go in /etc/pki/ovirt-engine/certs/apache.cer, the corresponding key put in /etc/pki/ovirt-engine/keys/apache.key.nopass, and then Apache needs to be restarted. Since oVirt doesn't use the engine web UI cert for anything internally (right?), do any of the other steps on the above page matter? -- Chris Adams <cma(a)cmadams.net>

2 1

How to configure Centos7 to serve as host
by Arthur Stilben 09 Sep '17

09 Sep '17

Hello everyone! I'm trying to configure a Centos 7 machine to serve as a host, but I'm not successful. I already get the message "Host Host1 moved to Non-Operational state as host CPU type is not supported in this cluster compatibility version or is not supported at all". Here the commands that I used to configure the host: $ sudo yum install http://resources.ovirt.org/pub/yum-repo/ovirt-release41.rpm $ sudo yum install vdsm $ sudo yum install centos-release-ovirt41 $ sudo systemctl disable firewalld $ sudo systemctl disable NetworkManager $ sudo vim /etc/selinux/config ... SELINUX=permissive ... $ sudo vim /etc/hosts ... 10.142.0.3 ovirthost-1.c.sharp-quest-137201.internal ovirthost-1 # Added by Google 10.142.0.2 ovirtengine-1.c.sharp-quest-137201.internal ovirtengine-1 ... Att, -- Arthur Rodrigues Stilben

2 1

Cannot install ovirt guest agent- repo does not exists
by Yohan JAROSZ 08 Sep '17

08 Sep '17

Dear Vinzenz, dear list It seems that the repo evilissimo is not here anymore: http://download.opensuse.org/repositories/home:/ So we can’t install overt agent as stated in the docs: https://www.ovirt.org/documentation/how-to/guest-agent/install-the-guest-ag… (http://download.opensuse.org/repositories/home:/evilissimo:/ubuntu:/16.04/x…) best, Yo. ---------------------------------------------------------------- Yohan Jarosz Scientific Collaborator UNIVERSITÉ DU LUXEMBOURG LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE Campus Belval | House of Biomedicine 7, avenue des Hauts-Fourneaux L-4362 Esch-sur-Alzette T +352 46 66 44 6669 F +352 46 66 44 3 6669 yohan.jarosz(a)uni.lu http://lcsb.uni.lu LCSB - Accelerating Biomedicine!: https://www.youtube.com/watch?v=oLUE6DjSB7Y ----- This message is confidential and may contain privileged information. It is intended for the named recipient only. If you receive it in error please notify me and permanently delete the original message and any copies. -----

2 2

ovirt 4.1 hosted engine hyper converged on glusterfs 3.8.10 : "engine" storage domain alway complain about "unsynced" elements
by yayo (j) 08 Sep '17

08 Sep '17

Hi all, We have an ovirt cluster hyperconverged with hosted engine on 3 full replicated node . This cluster have 2 gluster volume: - data: volume for the Data (Master) Domain (For vm) - engine: volume fro the hosted_storage Domain (for hosted engine) We have this problem: "engine" gluster volume have always unsynced elements and we cant' fix the problem, on command line we have tried to use the "heal" command but elements remain always unsynced .... Below the heal command "status": [root@node01 ~]# gluster volume heal engine info Brick node01:/gluster/engine/brick /.shard/8aa74564-6740-403e-ad51-f56d9ca5d7a7.48 /.shard/8aa74564-6740-403e-ad51-f56d9ca5d7a7.64 /.shard/8aa74564-6740-403e-ad51-f56d9ca5d7a7.60 /.shard/8aa74564-6740-403e-ad51-f56d9ca5d7a7.2 /.shard/8aa74564-6740-403e-ad51-f56d9ca5d7a7.68 /8f215dd2-8531-4a4f-b6ed-ea789dd8821b/images/19d71267-52a4-42a3-bb1e-e3145361c0c2/7a215635-02f3-47db-80db-8b689c6a8f01 /8f215dd2-8531-4a4f-b6ed-ea789dd8821b/images/88d41053-a257-4272-9e2e-2f3de0743b81/6573ed08-d3ed-4d12-9227-2c95941e1ad6 /.shard/8aa74564-6740-403e-ad51-f56d9ca5d7a7.61 /.shard/8aa74564-6740-403e-ad51-f56d9ca5d7a7.1 /8f215dd2-8531-4a4f-b6ed-ea789dd8821b/dom_md/ids /.shard/8aa74564-6740-403e-ad51-f56d9ca5d7a7.20 /__DIRECT_IO_TEST__ Status: Connected Number of entries: 12 Brick node02:/gluster/engine/brick /8f215dd2-8531-4a4f-b6ed-ea789dd8821b/images/19d71267-52a4-42a3-bb1e-e3145361c0c2/7a215635-02f3-47db-80db-8b689c6a8f01 <gfid:9a601373-bbaa-44d8-b396-f0b9b12c026f> /8f215dd2-8531-4a4f-b6ed-ea789dd8821b/dom_md/ids <gfid:1e309376-c62e-424f-9857-f9a0c3a729bf> <gfid:e3565b50-1495-4e5b-ae88-3bceca47b7d9> <gfid:4e33ac33-dddb-4e29-b4a3-51770b81166a> /__DIRECT_IO_TEST__ <gfid:67606789-1f34-4c15-86b8-c0d05b07f187> <gfid:9ef88647-cfe6-4a35-a38c-a5173c9e8fc0> /8f215dd2-8531-4a4f-b6ed-ea789dd8821b/images/88d41053-a257-4272-9e2e-2f3de0743b81/6573ed08-d3ed-4d12-9227-2c95941e1ad6 <gfid:9ad720b2-507d-4830-8294-ec8adee6d384> <gfid:d9853e5d-a2bf-4cee-8b39-7781a98033cf> Status: Connected Number of entries: 12 Brick node04:/gluster/engine/brick Status: Connected Number of entries: 0 running the "gluster volume heal engine" don't solve the problem... Some extra info: We have recently changed the gluster from: 2 (full repliacated) + 1 arbiter to 3 full replicated cluster but i don't know this is the problem... The "data" volume is good and healty and have no unsynced entry. Ovirt refuse to put the node02 and node01 in "maintenance mode" and complains about "unsynced elements" How can I fix this? Thank you

4 20

oVirt selft-hosted with NFS on top gluster
by Abi Askushi 08 Sep '17

08 Sep '17

Hi All, I've playing with ovirt self hosted engine setup and I even use it to production for several VM. The setup I have is 3 server with gluster storage in replica 2+1 (1 arbiter). The data storage domain where VMs are stored is mounted with gluster through ovirt. The performance I get for the VMs is very low and I was thinking to switch and mount the same storage through NFS instead of glusterfs. The only think I am hesitant is how can I ensure high availability of the storage when I loose one server? I was thinking to have at /etc/hosts sth like below: 10.100.100.1 nfsmount 10.100.100.2 nfsmount 10.100.100.3 nfsmount then use nfsmount as the server name when adding this domain through ovirt GUI. Are there any other more elegant solutions? What do you do for such cases? Note: gluster has the back-vol-file option which provides a lean way to have redundancy on the mount point and I am using this when mounting with glusterfs. Thanx

2 8

Update notes
by Karli Sjöberg 08 Sep '17

08 Sep '17

2 1

Valid approach to backup/DR with Geo Replication?
by Michael Kleinpaste 07 Sep '17

07 Sep '17

Has anyone used the Geo Replication to facilitate Backups/DR? I'm looking to validate my thoughts since Geo Replication is a function in oVirt now. I'm considering this instead of the snap, clone, export, backup, delete clone, delete snap method. Thoughts? -- *Michael Kleinpaste* Senior Systems Administrator SharperLending, LLC. www.SharperLending.com Michael.Kleinpaste(a)SharperLending.com (509) 324-1230 Fax: (509) 324-1234

1 0

[ANN] oVirt 4.1.6 Third Release Candidate is now available
by Lev Veyde 07 Sep '17

07 Sep '17

The oVirt Project is pleased to announce the availability of the Third Release Candidate of oVirt 4.1.6, as of September 7th, 2017 This update is the sixth in a series of stabilization updates to the 4.1 series. Starting from 4.1.5 oVirt supports libgfapi [5]. Using libgfapi provides a real performance boost for ovirt when using GlusterFS . Due to a known issue [6], using this will break live storage migration. This is expected to be fixed soon. If you do not use live storage migration you can give it a try. Use [7] for more details on how to enable it. This release is available now for: * Red Hat Enterprise Linux 7.3 or later * CentOS Linux (or similar) 7.3 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.3 or later * CentOS Linux (or similar) 7.3 or later * oVirt Node 4.1 See the release notes draft [3] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is already available Additional Resources: * Read more about the oVirt 4.1.6 release highlights: http://www.ovirt.org/release/4.1.6/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] https://www.ovirt.org/community/ [2] https://bugzilla.redhat.com/enter_bug.cgi?classification=oVirt [3] http://www.ovirt.org/release/4.1.6/ [4] http://resources.ovirt.org/pub/ovirt-4.1-pre/iso/ [5] http://staged-gluster-docs.readthedocs.io/en/release3.7.0beta1/Features/lib… [6] https://bugzilla.redhat.com/show_bug.cgi?id=1306562 [7] http://www.ovirt.org/develop/release-management/features/storage/glusterfs-… -- Lev Veyde Software Engineer, RHCE | RHCVA | MCITP Red Hat Israel <https://www.redhat.com> lev(a)redhat.com | lveyde(a)redhat.com <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 0