- Users - oVirt List Archives

Query on Cluster CPU type in OLVM
by dushyantk.sun＠gmail.com 10 Feb '25

10 Feb '25

1. Does selecting particular "Cluster CPU Type:" while creating cluster has any performance impact on vms. 2. I have Dell and HP servers, while creating cluster if i select intel broadwell or cascadelake cpu type, it shows "Host CPU Type Is Not Compatible With Cluster Properties" 3. Since Intel Nehalem is lowest CPU family version and supporting for old dell/HP, i selected it for my cluster. HOwever vm shows CPU model name "Intel Core i7 9xx (Nehalem Class Core i7)" however same host in vmware shows " Intel(R) Xeon(R) Gold 6252 CPU @ 2.10GHz" How we can fix this CPu model name.

2 1

Q: Master storage domain on failed hardware
by Andrei Verovski 06 Feb '25

06 Feb '25

Hi, Is it possible to to activate data center if master storage domain is not available anymore? For example when server hosting master storage domain dies. Thanks and with best regards Andrei

2 1

export very slow
by Enrico Becchetti 06 Feb '25

06 Feb '25

Dear all, I have an Ovirt cluster with 3 Dell R7525 nodes and about 70 virtual machines. I have been using ovirtbackup (python) for a long time to save the VMs. Unfortunately it has always been a very slow process that with time and the ever-increasing size of the VMs has become unusable. The oVirt cluster has two storage domains. "DATA" is a the fibre channel type (8Gbs) with 18TB and an EXPORT domain NFS managed by a dual-processor server HPE Proliant with 4x1Gbs. I'll give you an example. I have a vm with four vdisk for a 1.8TB and these are the steps performed to backup this VM. As you will see it takes many hours to get the clone from the snapshot and then many hours to copy the clone to the NFS storage. How can I reduce the time needed to save ? Thank you ! Best Regards Enrico ----------------------------------------------------------------- Feb 2, 2025, 6:26:47 AM Snapshot 'Snapshot for backup script' creation for VM 'GRAYLOG-9' was initiated by admin@internal-authz. 45 admin@internal-authz infn-vm10.management GRAYLOG-9 Blank INFNPG DELL 70bbb81b-ed44-4700-839a-96c1df8daeea oVirt ----------------------------------------------------------------- Feb 2, 2025, 6:27:22 AM Snapshot 'Snapshot for backup script' creation for VM 'GRAYLOG-9' has been completed. 68 admin@internal-authz infn-vm10.management GRAYLOG-9 Blank INFNPG DELL 70bbb81b-ed44-4700-839a-96c1df8daeea oVirt ----------------------------------------------------------------- Feb 2, 2025, 6:27:37 AM VM GRAYLOG-9_BCK_020244 creation was initiated by admin@internal-authz. 37 admin@internal-authz GRAYLOG-9_BCK_020244 Blank INFNPG DATA_FC_P2050 DELL edde40d9-2a26-4d88-8a02-bd928c1ded4a oVirt ----------------------------------------------------------------- Feb 2, 2025, 1:59:30 PM VM GRAYLOG-9_BCK_020244 creation has been completed. 53 admin@internal-authz GRAYLOG-9_BCK_020244 Blank INFNPG DATA_FC_P2050 DELL edde40d9-2a26-4d88-8a02-bd928c1ded4a oVirt ----------------------------------------------------------------- Feb 2, 2025, 1:59:34 PM Snapshot 'Snapshot for backup script' deletion for VM 'GRAYLOG-9' was initiated by admin@internal-authz. 342 admin@internal-authz infn-vm10.management GRAYLOG-9 Blank INFNPG DELL fcfc6291-a55f-431a-8b4c-87cb8e3615ff oVirt ----------------------------------------------------------------- Feb 2, 2025, 2:04:00 PM Snapshot 'Snapshot for backup script' deletion for VM 'GRAYLOG-9' has been completed. 356 admin@internal-authz infn-vm10.management GRAYLOG-9 Blank INFNPG DELL fcfc6291-a55f-431a-8b4c-87cb8e3615ff oVirt ----------------------------------------------------------------- Feb 2, 2025, 2:04:08 PM Starting export Vm GRAYLOG-9_BCK_020244 to VMS_EXPORT 1162 admin@internal-authz GRAYLOG-9_BCK_020244 INFNPG VMS_EXPORT DELL b964e3b3-df13-4b82-8128-00984eea380b oVirt ----------------------------------------------------------------- Feb 4, 2025, 5:27:50 AM Vm GRAYLOG-9_BCK_020244 was exported successfully to VMS_EXPORT 1150 admin@internal-authz GRAYLOG-9_BCK_020244 INFNPG VMS_EXPORT DELL b964e3b3-df13-4b82-8128-00984eea380b oVirt ----------------------------------------------------------------- Feb 4, 2025, 5:27:53 AM VM GRAYLOG-9_BCK_020244 configuration was updated by admin@internal-authz. 35 admin@internal-authz GRAYLOG-9_BCK_020244 Blank INFNPG DELL 44480c68-10ad-4660-bd9b-297043210503 oVirt ----------------------------------------------------------------- Feb 4, 2025, 5:28:00 AM VM GRAYLOG-9_BCK_020244 was successfully removed by admin@internal-authz. 113 admin@internal-authz GRAYLOG-9_BCK_020244 Blank INFNPG DELL d141ad60-6cf8-4e77-b438-26b5481f4256 oVirt -----------------------------------------------------------------

3 5

vms shutdown during boot
by eevans＠digitaldatatechs.com 02 Feb '25

02 Feb '25

I have an issue with getting vms to run. I get this error: VM is down with error. Exit message: Lost connection with qemu process. 2025-02-02 13:27:55,131-05 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ForkJoinPool-1-worker-13) [5ad46633] EVENT_ID: VM_DOWN_ERROR(119), VM DBServer-2-18-2024 is down with error. Exit message: Lost connection with qemu process. I see this in the RedHat portal but I don't have entitement or I wouldn't be here. My setup Centos 9 with Ovirt 4.5 with a seperate node controlling the gluster server and ovirt and three nodes managed by the fourth. I ran this same setup in the past with no problem. I hope one of the RH folks will post the fix. It is a verified issue on the REDHAT portal I appreciate any help yu can give me.

1 0

Re: Help With CPU Type
by Jorge Visentini 31 Jan '25

31 Jan '25

Hi. If you do this right, you will need downtime because the VM's processor model will change, even though the VM's processor is only showing the family. Another thing that can happen is that you change the family and the host becomes non-operational in the cluster, so you would have to test that at least. But you can roll back to the original cluster family. I have done this in the past and as far as I remember, the only thing that causes a warning on the VM is that it is running on a different cluster, that's all. Please correct me if I'm wrong. Cheers! Em qui., 23 de jan. de 2025 às 02:13, Daniel Martins via Users < users(a)ovirt.org> escreveu: > Hi There, > > > > Please may you assist me with the below? > > > > I need to remove an oVirt host within a cluster that is using CPU Type > Intel Westmere IBRS SSBD Family. Once the host is removed i need to change > the CPU type to Intel Broadwell which the remaining hosts Use. > > > > So my question is will there need to be down time on the Virtual machines > to change this? > > > > Regards, > > > > > > > > > > > > > > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/IEJW5M6KUHWW5… > -- Att, Jorge Visentini +55 55 98432-9868

1 0

Edit/Change MAC Address Pools
by milad.norouzi1370＠gmail.com 31 Jan '25

31 Jan '25

According to this link: https://www.ovirt.org/documentation/administration_guide/index.html#sect-MA…, we can edit the MAC address pool. Question: If I edit the MAC address pool, what effect will it have on the existing VMs' MAC addresses? Is there any mention in the documentation or elsewhere that indicates this change could be harmful to current configurations?

2 1

oVirt does not get keycloak groups
by Christian Fischer 31 Jan '25

31 Jan '25

Hi everyone. I have setup a oVirt Installation with Keycloak for a PoC-Evaluation but i'm actually struggling with Keycloak Groups sync to oVirt. I Added Active Directory Users and also a Group Mapper for LDAP Groups -> in Keycloak i see all Users and also that they belong to Groups but the Group-Membership is not populated to oVirt back. As a result i can't grant Permissions groupwise - only per user. For the initial group-sync i ticked the Option "Drop non-existing groups during sync" which also deleted the ovirt-administrator group. Maybe this is the main Problem here. I created this group again and unchecked this option but it still does not sync the groups. What do you recommend? Purge the system and do a clean install or is there another easy fix out there? Thanks, have a nice weekend. Greetings Christian

1 0

Questions and Suggestions for oVirt
by Daniel Gurgel 30 Jan '25

30 Jan '25

With the new leadership of the project, most users who admire and support oVirt would like to know the roadmap and future plans. From my perspective, I understand that Red Hat discontinued its support purely for financial reasons. Therefore, this is probably one of the key areas where oVirt needs to strengthen. Wouldn't it be worth seeking support and collaboration with Veeam and Oracle, given its "OLVM"? Especially considering that, after the VMware/Broadcom licensing changes, Oracle has been aggressively offering OLVM to customers as a migration alternative. A positive development was Veeam Backup & Replication recently adding support for OLVM. This has increased interest in the solution, but there are still limitations, such as migration/backup/restore between different hypervisors (interestingly, this feature is available for Proxmox/KVM, which uses similar technology). These are some of the main questions from customers: 1. When will it be updated to Enterprise Linux 9 or 10? 2. What support will be available for new technologies? 3. How about a change in the Engine/Manager, allowing VMs to be managed even when the Engine is unavailable! (Sorry, but this is one of oVirt's biggest bottlenecks, and inevitably, comparisons with VMware/VCenter arise.) 4. Support for VM migration between Datacenters should also be carefully considered. **Note**: The oVirt website needs to be more user-friendly for general users. I also suggest a fundraising campaign—I would be happy to contribute, and I believe the entire user base would as well!

1 0

Re: [EXT]Re: Re: [SOLVED] Re: Re: How to re-enroll (or renew) host certificates for a single-host hosted-engine deployment?
by Cosmin Cioranu 29 Jan '25

29 Jan '25

I have checked the solution and it works, apart from the console feature of the virtual machine. In my case, once a got control over the host, migrated all the vms and then Maintenance and then Enroll Certificate. So: an updated version ``` set -x ## Make the script echo everything out, so if it fails you know where set -e ## Make the script STOP on any error set my_date="$(date +"%Y%m%d%H%M%S")" # Backup the existing CA files /bin/cp -p /etc/pki/ovirt-engine/private/ca.pem /etc/pki/ovirt-engine/private/ca.pem.$my_date /bin/cp -p /etc/pki/ovirt-engine/ca.pem{,.$my_date} /bin/mv /etc/pki/ovirt-engine/certs/ca.der{,.$my_date} # Sign the key openssl x509 -signkey /etc/pki/ovirt-engine/private/ca.pem -in /etc/pki/ovirt-engine/ca.pem -out /etc/pki/ovirt-engine/ca.pem.new -days 3650 -sha256 openssl x509 -in /etc/pki/ovirt-engine/ca.pem.new -text > /etc/pki/ovirt-engine/ca.pem.new.full # Put the files into place /bin/mv -f /etc/pki/ovirt-engine/ca.pem.new.full /etc/pki/ovirt-engine/ca.pem /bin/cp -p /etc/pki/ovirt-engine/ca.pem.new /etc/pki/ovirt-engine/certs/ca.der ``` Now you need to copy the new CA file over to the host: Source: ENGINE `/etc/pki/ovirt-engine/ca.pem` Dest: HOST `/tmp/new-ca.pem` ########### On the oVirt Host ########### # Create a CSR using the information from the existing certificate and the existing key: openssl x509 -x509toreq -in /etc/pki/libvirt/clientcert.pem -out /tmp/HOST.csr -signkey /etc/pki/libvirt/private/clientkey.pem Now you need to copy the new CA file over to the host: Source: HOST `/tmp/HOST.csr` Dest: ENGINE `/etc/pki/ovirt-engine/requests/full.hostname.com.req` ########### On the ENGINE HOST ########### # Now sign it: /usr/share/ovirt-engine/bin/pki-enroll-request.sh --name=full.hostname.com # NB -- adding --san results in an error: --san=host.na.me (So no Subject Alternate Names) Now you need to copy the new Certificate file over to the host: Source: ENGINE /etc/pki/ovirt-engine/certs/full.hostname.com.cer Dest: HOST /tmp/new-cert.pem ########### On the oVirt Host ########### (see bellow the written script) #!/bin/bash #set -x set -e mydate="$(date +"%Y%m%d%H%M%S")" echo "[.] reference ${mydate}" for x in /tmp/new-ca.pem /tmp/new-cert.pem ; do echo -n "[.] checking $x" if [ ! -e "$x" ]; then echo "[not found]" exit else echo "[found]" fi done for x in /etc/pki/libvirt/clientcert.pem /etc/pki/vdsm/certs/vdsmcert.pem /etc/pki/vdsm/libvirt-migrate/server-cert.pem /etc/pki/vdsm/libvirt-spice/server-cert.pem /etc/pki/vdsm/libvirt-vnc/server-cert.pem; do echo -n "copying $x to ${x}.${mydate}" /bin/mv -n $x ${x}.${mydate} echo "[done]"; echo -n "[.] copying /tmp/new-cert.pem to $x" /bin/cp /tmp/new-cert.pem ${x} echo "[done]" echo -n "[.] setting permissions to $x 644 root:kvm" chmod 644 ${x} chown root:kvm ${x} echo "[done]" done for x in /etc/pki/vdsm/libvirt-migrate/ca-cert.pem /etc/pki/vdsm/certs/cacert.pem /etc/pki/vdsm/libvirt-vnc/ca-cert.pem /etc/pki/vdsm/libvirt-spice/ca-cert.pem /etc/pki/CA/cacert.pem; do echo -n "copying $x to ${x}.${mydate}" /bin/mv -n $x ${x}.${mydate} echo "[done]" echo -n "[.] copying /tmp/new-ca.pem to $x" /bin/cp /tmp/new-ca.pem ${x} echo "[done]"; echo -n "[.] setting permissions to $x 644 root:kvm" chmod 644 ${x} chown root:kvm ${x} echo "[done]" done for x in /etc/pki/vdsm/keys/vdsmkey.pem; do echo -n "copying $x to ${x}.${mydate}" /bin/mv -n $x ${x}.${mydate} echo "[done]" echo -n "[.] copying /etc/pki/libvirt/private/clientkey.pem to $x" /bin/cp /etc/pki/libvirt/private/clientkey.pem ${x} echo "[done]"; echo -n "[.] setting permissions to $x 644 root:kvm" chmod 644 ${x} chown root:kvm ${x} echo "[done]" done echo "[.] Checks " openssl x509 -in /etc/pki/libvirt/clientcert.pem -noout -dates openssl x509 -in /etc/pki/vdsm/certs/cacert.pem -noout -dates openssl x509 -in /etc/pki/vdsm/certs/vdsmcert.pem -noout -dates openssl x509 -in /etc/pki/vdsm/libvirt-migrate/ca-cert.pem -noout -dates openssl x509 -in /etc/pki/vdsm/libvirt-migrate/client-cert.pem -noout -dates openssl x509 -in /etc/pki/vdsm/libvirt-migrate/server-cert.pem -noout -dates openssl x509 -in /etc/pki/vdsm/libvirt-spice/ca-cert.pem -noout -dates openssl x509 -in /etc/pki/vdsm/libvirt-spice/server-cert.pem -noout -dates ```` Note: I whould backup the entire pki folder on both node and engine.

1 0

snapshot solution: Existing snapshots that were taken after this one will be erased.
by dhanaraj.ramesh＠yahoo.com 29 Jan '25

29 Jan '25

Hi Team, when I want to commit the older snapshots I'm getting warning stating " Existing snapshots that were taken after this one will be erased.". is there any way we can retain the latest snapshots as is in the chain? I knew cloning and template export options are there to secure that latest snapshot data but these are will consume additional space in storage and take time.

4 3