- Users - oVirt List Archives

Re: [ovirt-users] Good practices
by Moacir Ferreira 08 Aug '17

08 Aug '17

--_000_DB6P190MB0280AD888032AB4A6232D576C88A0DB6P190MB0280EURP_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Ok, the 40Gb NIC that I got were for free. But anyway, if you were working = with 6 HDD + 1 SSD per server, then you get 21 disks on your cluster. As da= ta in a JBOD will be built all over the network, then it can be really inte= nsive especially depending on the number of replicas you choose for your ne= eds. Also, when moving a VM alive you must transfer the memory contents of = a VM to another node (just think about moving a VM with 32GB RAM). All toge= ther, it can be a quite large chunk of data moving over the network all the= time. While 40Gb NIC is not a "must", I think it is more affordable as it = cost much less then a good disk controller. But my confusion is that, as said by other fellows, the best "performance m= odel" is when you use a hardware RAIDed brick (i.e.: 5 or 6) to assemble yo= ur GlusterFS. In this case, as I would have to buy a good controller but ha= ve less network traffic, to lower the cost I would then use a separate netw= ork made of 10Gb NICs plus the controller. Moacir > > > Le 8 ao?t 2017 ? 04:08, FERNANDO FREDIANI <fernando.frediani(a)upx.com> a > ?crit : > > > Even if you have a Hardware RAID Controller with Writeback cache you > will have a significant performance penalty and may not fully use all the > resources you mentioned you have. > > > > Nope again,from my experience with HP Smart Array and write back cache, > write, that goes in the cache, are even faster that read that must goes t= o > the disks. of course if the write are too fast and to big, they will over > overflow the cache. But on todays controller they are multi-gigabyte cach= e, > you must write a lot to fill them. And if you can afford 40Gb card, you c= an > afford decent controller. > The last sentence raises an excellent point: balance your resources. Don't spend a fortune on one component while another will end up being your bottleneck. Storage is usually the slowest link in the chain. I personally believe that spending the money on NVMe drives makes more sense than 40Gb (except [1], which is suspiciously cheap!) Y. [1] http://a.co/4hsCTqG --_000_DB6P190MB0280AD888032AB4A6232D576C88A0DB6P190MB0280EURP_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style type=3D"text/css" style=3D"display:none;"></style> </head> <body dir=3D"ltr"> <div id=3D"divtagdefaultwrapper" style=3D"font-size:12pt;color:#000000;font= -family:Calibri,Helvetica,sans-serif;" dir=3D"ltr"> Ok, the 40Gb NIC that I got were for free. But anyway, if you were worki= ng with 6 HDD + 1 SSD per server, then you get 21 disks on your cluster= . As data in a JBOD will be built all over the network, then it can be real= ly intensive especially depending on the number of replicas you choose for your needs. Also, when moving a VM a= live you must transfer the memory contents of a VM to another node (just th= ink about moving a VM with 32GB RAM). All together, it can be a quite large= chunk of data moving over the network all the time. While 40Gb NIC is not a "must", I think it is more= affordable as it cost much less then a good disk controller. But my confusion is that, as said by other fellows, the best "perfo= rmance model" is when you use a hardware RAIDed brick (i.e.: 5 or 6) t= o assemble your GlusterFS. In this case, as I would have to buy a good cont= roller but have less network traffic, to lower the cost I would then use a separate network made of 10Gb NICs plus the co= ntroller. Moacir <div style=3D"color: rgb(49, 55, 57);"> <div class=3D"PlainText"> > > > Le 8 ao?t 2017 ? 04:08, FERNANDO FREDIANI <fernando.frediani@u= px.com> a > ?crit : > > > Even if you have a Hardware RAID Controller with Writeback cache = you > will have a significant performance penalty and may not fully use all = the > resources you mentioned you have. > > > > Nope again,from my experience with HP Smart Array and write back cache= , > write, that goes in the cache, are even faster that read that must goe= s to > the disks. of course if the write are too fast and to big, they will o= ver > overflow the cache. But on todays controller they are multi-gigabyte c= ache, > you must write a lot to fill them. And if you can afford 40Gb card, yo= u can > afford decent controller. > The last sentence raises an excellent point: balance your resources. Don't<= br> spend a fortune on one component while another will end up being your bottleneck. Storage is usually the slowest link in the chain. I personally believe that= spending the money on NVMe drives makes more sense than 40Gb (except [1],<b= r> which is suspiciously cheap!) Y. [1] <a href=3D"http://a.co/4hsCTqG" id=3D"LPlnk802834" previewremoved=3D"tr= ue">http://a.co/4hsCTqG</a> </div> </div> </div> </body> </html> --_000_DB6P190MB0280AD888032AB4A6232D576C88A0DB6P190MB0280EURP_--

1 0

Install ovirt on Azure
by Grzegorz Szypa 08 Aug '17

08 Aug '17

Hi. Did anyone try to install ovirt on Azure Environment? -- G.Sz.

5 4

Domain name in use? After failed domain setup?
by Schorschi . 07 Aug '17

07 Aug '17

Domain name in use? After failed domain setup? I attempted to create a new domain, but I did not realize the master domain was 100% initialized. The new domain creation failed. But it appears the new domain 'name' was used. Now I cannot create the new domain as expected. I get UI error that states, "" which can only be true if the domain name is in the database, because it is definitely no visible in the UI. This is quite frustrated, because it appears the new domain 'creation' logic is broken, if the new domain fails to be created, the database should not have junk domain name, right? I call this an ugly bug. That said, I really need to remove this junk domain name so I can use the correct name as expected. Thanks.

2 2

Problemas with ovirtmgmt network used to connect VMs
by FERNANDO FREDIANI 07 Aug '17

07 Aug '17

Has anyone had problem when using the ovirtmgmt bridge to connect VMs ? I am still facing a bizarre problem where some VMs connected to this bridge stop passing traffic. Checking the problem further I see its mac address stops being learned by the bridge and the problem is resolved only with a VM reboot. When I last saw the problem I run brctl showmacs ovirtmgmt and it shows me the VM's mac adress with agening timer 200.19. After the VM reboot I see the same mac with agening timer 0.00. I don't see it in another environment where the ovirtmgmt is not used for VMs. Does anyone have any clue about this type of behavior ? Fernando

2 7

Python errors with ovirt 4.1.4
by david caughey 07 Aug '17

07 Aug '17

Hi Folks, I'm testing out the new version with the 4.1.4 ovirt iso and am getting errors directly after install: Last login: Wed Aug 2 10:17:56 2017 Traceback (most recent call last): File "/usr/lib64/python2.7/runpy.py", line 162, in _run_module_as_main "__main__", fname, loader, pkg_name) File "/usr/lib64/python2.7/runpy.py", line 72, in _run_code exec code in run_globals File "/usr/lib/python2.7/site-packages/nodectl/__main__.py", line 42, in <module> CliApplication() File "/usr/lib/python2.7/site-packages/nodectl/__init__.py", line 200, in CliApplication return cmdmap.command(args) File "/usr/lib/python2.7/site-packages/nodectl/__init__.py", line 118, in command return self.commands[command](**kwargs) File "/usr/lib/python2.7/site-packages/nodectl/__init__.py", line 102, in motd machine_readable=True).output, self.machine).write() File "/usr/lib/python2.7/site-packages/nodectl/status.py", line 51, in __init__ self._update_info(status) File "/usr/lib/python2.7/site-packages/nodectl/status.py", line 78, in _update_info if "ok" not in status.lower(): AttributeError: Status instance has no attribute 'lower' Admin Console: https://192.168.122.61:9090/ The admin console seems to work fine. Are these issues serious or can they be ignored. BR/David

5 6

ovirt 4.1 : Can't install guest tools for Zentyal 5.0 (based on ubuntu 16.04 xenial)
by yayo (j) 07 Aug '17

07 Aug '17

Hi all, I have this problem: I'm tring to install the guest tools following this guide: https://www.ovirt.org/documentation/how-to/guest-agent/install-the-guest-ag… This is the sources: deb http://it.archive.ubuntu.com/ubuntu/ xenial main restricted deb http://it.archive.ubuntu.com/ubuntu/ xenial-updates main restricted deb http://it.archive.ubuntu.com/ubuntu/ xenial universe deb http://it.archive.ubuntu.com/ubuntu/ xenial-updates universe deb http://it.archive.ubuntu.com/ubuntu/ xenial multiverse deb http://it.archive.ubuntu.com/ubuntu/ xenial-updates multiverse deb http://it.archive.ubuntu.com/ubuntu/ xenial-backports main restricted universe multiverse deb http://archive.zentyal.org/zentyal 5.0 main extra deb http://security.ubuntu.com/ubuntu xenial-security main restricted deb http://security.ubuntu.com/ubuntu xenial-security universe deb http://security.ubuntu.com/ubuntu xenial-security multiverse But when I try to install, I have this error: root@vmdczen01:~# apt-get install ovirt-guest-agent Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: ovirt-guest-agent : Depends: python-apt but it is not going to be installed E: Unable to correct problems, you have held broken packages. I've found that python-apt is in "main" repo: https://packages.ubuntu.com/xenial/amd64/python-apt/download So, what's the problem? Can you help me? Thank you

3 8

Software RAID on oVirt Node
by Vinícius Ferrão 07 Aug '17

07 Aug '17

Hello, On typical deployment scenarios of oVirt which is the recommended RAID technologies for oVirt Node installation? Should I use controller based RAID or mdadm can be used instead? Is this recommended? I’m asking this because other vendors requires hardware RAID, even those 100% based on CentOS, like XenServer. There’s not even a way to install it with mdadm (Software Raid). Thanks, V.

3 3

Re: [ovirt-users] Users Digest, Vol 71, Issue 32
by Moacir Ferreira 07 Aug '17

07 Aug '17

--_000_VI1P190MB0285B6350EDE6A9547A049BDC8B50VI1P190MB0285EURP_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Fernando, Since I have 3 servers then each one will have a connection to the other tw= o. In this case I could setup 3 subnets, one for each link, avoiding in thi= s way to implement bridging (and Spanning Tree) on the servers. My idea is = that when I build the server I should use the IP addresses of the 40Gb NICs= to setup Gluster and everything should to be ok. Anyway, I will test it on= a virtual environment before installing. Thanks, Moacir ---------------------------------------------------------------------- Message: 1 Date: Mon, 7 Aug 2017 10:08:32 -0300 From: FERNANDO FREDIANI <fernando.frediani(a)upx.com> To: users(a)ovirt.org Subject: Re: [ovirt-users] Good practices Message-ID: <8dd168a0-d5ab-bdf4-5c5d-197909afc515(a)upx.com> Content-Type: text/plain; charset=3D"windows-1252"; Format=3D"flowed" Moacir, I beleive for using the 3 servers directly connected to each others without switch you have to have a Bridge on each server for every 2 physical interfaces to allow the traffic passthrough in layer2 (Is it possible to create this from the oVirt Engine Web Interface?). If your ovirtmgmt network is separate from other (should really be) that should be fine to do. Fernando On 07/08/2017 07:13, Moacir Ferreira wrote: > > Hi, in-line responses. > > > Thanks, > > Moacir > > > ------------------------------------------------------------------------ > *From:* Yaniv Kaul <ykaul(a)redhat.com> > *Sent:* Monday, August 7, 2017 7:42 AM > *To:* Moacir Ferreira > *Cc:* users(a)ovirt.org > *Subject:* Re: [ovirt-users] Good practices > > > On Sun, Aug 6, 2017 at 5:49 PM, Moacir Ferreira > <moacirferreira(a)hotmail.com <mailto:moacirferreira@hotmail.com>> wrote: > > I am willing to assemble a oVirt "pod", made of 3 servers, each > with 2 CPU sockets of 12 cores, 256GB RAM, 7 HDD 10K, 1 SSD. The > idea is to use GlusterFS to provide HA for the VMs. The 3 servers > have a dual 40Gb NIC and a dual 10Gb NIC. So my intention is to > create a loop like a server triangle using the 40Gb NICs for > virtualization files (VMs .qcow2) access and to move VMs around > the pod (east /west traffic) while using the 10Gb interfaces for > giving services to the outside world (north/south traffic). > > > Very nice gear. How are you planning the network exactly? Without a > switch, back-to-back? (sounds OK to me, just wanted to ensure this is > what the 'dual' is used for). However, I'm unsure if you have the > correct balance between the interface speeds (40g) and the disks (too > many HDDs?). > > Moacir:The idea is to have a very high performance network for the > distributed file system and to prevent bottlenecks when we move one VM > from a node to another. Using 40Gb NICs I can just connect the servers > back-to-back. In this case I don't need the expensive 40Gb switch, I > get very high speed and no contention between north/south traffic with > east/west. > > > This said, my first question is: How should I deploy GlusterFS in > such oVirt scenario? My questions are: > > > 1 - Should I create 3 RAID (i.e.: RAID 5), one on each oVirt node, > and then create a GlusterFS using them? > > I would assume RAID 1 for the operating system (you don't want a > single point of failure there?) and the rest JBODs. The SSD will be > used for caching, I reckon? (I personally would add more SSDs instead > of HDDs, but it does depend on the disk sizes and your space requirements= . > > Moacir: Yes, I agree that I need a RAID-1 for the OS. Now, generic > JBOD or a JBOD assembled using RAID-5 "disks" createdby the server's > disk controller? > > 2 - Instead, should I create a JBOD array made of all server's disks? > > 3 - What is the best Gluster configuration to provide for HA while > not consuming too much disk space? > > > Replica 2 + Arbiter sounds good to me. > Moacir:I agree, and that is what I am using. > > 4 - Does a oVirt hypervisor pod like I am planning to build, and > the virtualization environment, benefits from tiering when using a > SSD disk? And yes, will Gluster do it by default or I have to > configure it to do so? > > > Yes, I believe using lvmcache is the best way to go. > > Moacir: Are you sure? I say that because the qcow2 files will be > quite big. So if tiering is "file based" the SSD would have to be > very, very big unless Gluster tiering do it by "chunks of data". > > > At the bottom line, what is the good practice for using GlusterFS > in small pods for enterprises? > > > Don't forget jumbo frames. libgfapi (coming hopefully in 4.1.5). > Sharding (enabled out of the box if you use a hyper-converged setup > via gdeploy). > *Moacir:* Yes! This is another reason to have separate networks for > north/south and east/west. In that way I can use the standard MTU on > the 10Gb NICs and jumbo frames on the file/move 40Gb NICs. > > Y. > > > You opinion/feedback will be really appreciated! > > Moacir > > > _______________________________________________ > Users mailing list > Users(a)ovirt.org <mailto:Users@ovirt.org> > http://lists.ovirt.org/mailman/listinfo/users > <http://lists.ovirt.org/mailman/listinfo/users> > > > > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users

1 0

oVirt LDAP user authentication troubleshooting
by NUNIN Roberto 07 Aug '17

07 Aug '17

--_000_de4cb7680af64919af7be187e7761b68DENU01MS0077phoenixloc_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I've two oVirt 4.1.4.2-1 pods used for labs. These two pods are configured in the same way (three node with gluster) Trying to setup LDAP auth, towards the same OpenLDAP server, setup ends cor= rectly in both engine VM. When I try to perform system permission modification, only one of these is = recognizing the LDAP groups and allow setup and next users belonging to def= ined groups to log-in and perform assigned level tasks. On the second engine, system permissions, even if it recognize the LDAP dom= ain (it appear in the selection box for search base) do not find nothing, g= roups or individuals. How to analyze this ? I wasn't able to find logs useful for troubleshooting= . Setup ended correctly with both Login and Search tasks complete successful. Thanks Roberto ________________________________ Questo messaggio e' indirizzato esclusivamente al destinatario indicato e p= otrebbe contenere informazioni confidenziali, riservate o proprietarie. Qua= lora la presente venisse ricevuta per errore, si prega di segnalarlo immedi= atamente al mittente, cancellando l'originale e ogni sua copia e distruggen= do eventuali copie cartacee. Ogni altro uso e' strettamente proibito e potr= ebbe essere fonte di violazione di legge. This message is for the designated recipient only and may contain privilege= d, proprietary, or otherwise private information. If you have received it i= n error, please notify the sender immediately, deleting the original and al= l copies and destroying any hard copies. Any other use is strictly prohibit= ed and may be unlawful. --_000_de4cb7680af64919af7be187e7761b68DENU01MS0077phoenixloc_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"IT" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> I’ve two oVirt 4.1.4.2-1 pods us= ed for labs.<o:p></o:p> <o:p> </o:p> These two pods are configured in the s= ame way (three node with gluster)<o:p></o:p> <o:p> </o:p> Trying to setup LDAP auth, towards the= same OpenLDAP server, setup ends correctly in both engine VM.<o:p></o:p></= span> When I try to perform system permissio= n modification, only one of these is recognizing the LDAP groups and allow = setup and next users belonging to defined groups to log-in and perform assigned level tasks.<o:p></o:p> <o:p> </o:p> On the second engine, system permissio= ns, even if it recognize the LDAP domain (it appear in the selection box fo= r search base) do not find nothing, groups or individuals.<o:p></o:p></span= > How to analyze this ? I wasn’t a= ble to find logs useful for troubleshooting.<o:p></o:p> <o:p> </o:p> Setup ended correctly with both Login = and Search tasks complete successful.<o:p></o:p> Thanks<o:p></o:p> <o:p> </o:p> Roberto<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <s= pan style=3D"font-family:"Arial",sans-serif;mso-fareast-language:= IT"><o:p> </o:p> <o:p> </o:p> </div> <hr> Questo messaggio e' indirizzato esclusivamente al destinatario indicato e p= otrebbe contenere informazioni confidenziali, riservate o proprietarie. Qua= lora la presente venisse ricevuta per errore, si prega di segnalarlo immedi= atamente al mittente, cancellando l'originale e ogni sua copia e distruggendo eventuali copie cartacee. Ogni= altro uso e' strettamente proibito e potrebbe essere fonte di violazione d= i legge. This message is for the designated recipient only and may contain privilege= d, proprietary, or otherwise private information. If you have received it i= n error, please notify the sender immediately, deleting the original and al= l copies and destroying any hard copies. Any other use is strictly prohibited and may be unlawful. </body> </html> --_000_de4cb7680af64919af7be187e7761b68DENU01MS0077phoenixloc_--

2 1

Install external certificate
by Marcelo Leandro 07 Aug '17

07 Aug '17

Good morning I bought a external certificate, in godaddy , and they send to me only one archive crt. I saw this: https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL/ I don't know how I can generate a certificate p12. Can someone help me ? Thanks. Marcelo Leandro

2 1