- Users - oVirt List Archives

Re: [ovirt-users] Users Digest, Vol 71, Issue 32
by Moacir Ferreira 07 Aug '17

07 Aug '17

--_000_VI1P190MB0285B6350EDE6A9547A049BDC8B50VI1P190MB0285EURP_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Fernando, Since I have 3 servers then each one will have a connection to the other tw= o. In this case I could setup 3 subnets, one for each link, avoiding in thi= s way to implement bridging (and Spanning Tree) on the servers. My idea is = that when I build the server I should use the IP addresses of the 40Gb NICs= to setup Gluster and everything should to be ok. Anyway, I will test it on= a virtual environment before installing. Thanks, Moacir ---------------------------------------------------------------------- Message: 1 Date: Mon, 7 Aug 2017 10:08:32 -0300 From: FERNANDO FREDIANI <fernando.frediani(a)upx.com> To: users(a)ovirt.org Subject: Re: [ovirt-users] Good practices Message-ID: <8dd168a0-d5ab-bdf4-5c5d-197909afc515(a)upx.com> Content-Type: text/plain; charset=3D"windows-1252"; Format=3D"flowed" Moacir, I beleive for using the 3 servers directly connected to each others without switch you have to have a Bridge on each server for every 2 physical interfaces to allow the traffic passthrough in layer2 (Is it possible to create this from the oVirt Engine Web Interface?). If your ovirtmgmt network is separate from other (should really be) that should be fine to do. Fernando On 07/08/2017 07:13, Moacir Ferreira wrote: > > Hi, in-line responses. > > > Thanks, > > Moacir > > > ------------------------------------------------------------------------ > *From:* Yaniv Kaul <ykaul(a)redhat.com> > *Sent:* Monday, August 7, 2017 7:42 AM > *To:* Moacir Ferreira > *Cc:* users(a)ovirt.org > *Subject:* Re: [ovirt-users] Good practices > > > On Sun, Aug 6, 2017 at 5:49 PM, Moacir Ferreira > <moacirferreira(a)hotmail.com <mailto:moacirferreira@hotmail.com>> wrote: > > I am willing to assemble a oVirt "pod", made of 3 servers, each > with 2 CPU sockets of 12 cores, 256GB RAM, 7 HDD 10K, 1 SSD. The > idea is to use GlusterFS to provide HA for the VMs. The 3 servers > have a dual 40Gb NIC and a dual 10Gb NIC. So my intention is to > create a loop like a server triangle using the 40Gb NICs for > virtualization files (VMs .qcow2) access and to move VMs around > the pod (east /west traffic) while using the 10Gb interfaces for > giving services to the outside world (north/south traffic). > > > Very nice gear. How are you planning the network exactly? Without a > switch, back-to-back? (sounds OK to me, just wanted to ensure this is > what the 'dual' is used for). However, I'm unsure if you have the > correct balance between the interface speeds (40g) and the disks (too > many HDDs?). > > Moacir:The idea is to have a very high performance network for the > distributed file system and to prevent bottlenecks when we move one VM > from a node to another. Using 40Gb NICs I can just connect the servers > back-to-back. In this case I don't need the expensive 40Gb switch, I > get very high speed and no contention between north/south traffic with > east/west. > > > This said, my first question is: How should I deploy GlusterFS in > such oVirt scenario? My questions are: > > > 1 - Should I create 3 RAID (i.e.: RAID 5), one on each oVirt node, > and then create a GlusterFS using them? > > I would assume RAID 1 for the operating system (you don't want a > single point of failure there?) and the rest JBODs. The SSD will be > used for caching, I reckon? (I personally would add more SSDs instead > of HDDs, but it does depend on the disk sizes and your space requirements= . > > Moacir: Yes, I agree that I need a RAID-1 for the OS. Now, generic > JBOD or a JBOD assembled using RAID-5 "disks" createdby the server's > disk controller? > > 2 - Instead, should I create a JBOD array made of all server's disks? > > 3 - What is the best Gluster configuration to provide for HA while > not consuming too much disk space? > > > Replica 2 + Arbiter sounds good to me. > Moacir:I agree, and that is what I am using. > > 4 - Does a oVirt hypervisor pod like I am planning to build, and > the virtualization environment, benefits from tiering when using a > SSD disk? And yes, will Gluster do it by default or I have to > configure it to do so? > > > Yes, I believe using lvmcache is the best way to go. > > Moacir: Are you sure? I say that because the qcow2 files will be > quite big. So if tiering is "file based" the SSD would have to be > very, very big unless Gluster tiering do it by "chunks of data". > > > At the bottom line, what is the good practice for using GlusterFS > in small pods for enterprises? > > > Don't forget jumbo frames. libgfapi (coming hopefully in 4.1.5). > Sharding (enabled out of the box if you use a hyper-converged setup > via gdeploy). > *Moacir:* Yes! This is another reason to have separate networks for > north/south and east/west. In that way I can use the standard MTU on > the 10Gb NICs and jumbo frames on the file/move 40Gb NICs. > > Y. > > > You opinion/feedback will be really appreciated! > > Moacir > > > _______________________________________________ > Users mailing list > Users(a)ovirt.org <mailto:Users@ovirt.org> > http://lists.ovirt.org/mailman/listinfo/users > <http://lists.ovirt.org/mailman/listinfo/users> > > > > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users

1 0

oVirt LDAP user authentication troubleshooting
by NUNIN Roberto 07 Aug '17

07 Aug '17

--_000_de4cb7680af64919af7be187e7761b68DENU01MS0077phoenixloc_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I've two oVirt 4.1.4.2-1 pods used for labs. These two pods are configured in the same way (three node with gluster) Trying to setup LDAP auth, towards the same OpenLDAP server, setup ends cor= rectly in both engine VM. When I try to perform system permission modification, only one of these is = recognizing the LDAP groups and allow setup and next users belonging to def= ined groups to log-in and perform assigned level tasks. On the second engine, system permissions, even if it recognize the LDAP dom= ain (it appear in the selection box for search base) do not find nothing, g= roups or individuals. How to analyze this ? I wasn't able to find logs useful for troubleshooting= . Setup ended correctly with both Login and Search tasks complete successful. Thanks Roberto ________________________________ Questo messaggio e' indirizzato esclusivamente al destinatario indicato e p= otrebbe contenere informazioni confidenziali, riservate o proprietarie. Qua= lora la presente venisse ricevuta per errore, si prega di segnalarlo immedi= atamente al mittente, cancellando l'originale e ogni sua copia e distruggen= do eventuali copie cartacee. Ogni altro uso e' strettamente proibito e potr= ebbe essere fonte di violazione di legge. This message is for the designated recipient only and may contain privilege= d, proprietary, or otherwise private information. If you have received it i= n error, please notify the sender immediately, deleting the original and al= l copies and destroying any hard copies. Any other use is strictly prohibit= ed and may be unlawful. --_000_de4cb7680af64919af7be187e7761b68DENU01MS0077phoenixloc_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"IT" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> I’ve two oVirt 4.1.4.2-1 pods us= ed for labs.<o:p></o:p> <o:p> </o:p> These two pods are configured in the s= ame way (three node with gluster)<o:p></o:p> <o:p> </o:p> Trying to setup LDAP auth, towards the= same OpenLDAP server, setup ends correctly in both engine VM.<o:p></o:p></= span> When I try to perform system permissio= n modification, only one of these is recognizing the LDAP groups and allow = setup and next users belonging to defined groups to log-in and perform assigned level tasks.<o:p></o:p> <o:p> </o:p> On the second engine, system permissio= ns, even if it recognize the LDAP domain (it appear in the selection box fo= r search base) do not find nothing, groups or individuals.<o:p></o:p></span= > How to analyze this ? I wasn’t a= ble to find logs useful for troubleshooting.<o:p></o:p> <o:p> </o:p> Setup ended correctly with both Login = and Search tasks complete successful.<o:p></o:p> Thanks<o:p></o:p> <o:p> </o:p> Roberto<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <s= pan style=3D"font-family:"Arial",sans-serif;mso-fareast-language:= IT"><o:p> </o:p> <o:p> </o:p> </div> <hr> Questo messaggio e' indirizzato esclusivamente al destinatario indicato e p= otrebbe contenere informazioni confidenziali, riservate o proprietarie. Qua= lora la presente venisse ricevuta per errore, si prega di segnalarlo immedi= atamente al mittente, cancellando l'originale e ogni sua copia e distruggendo eventuali copie cartacee. Ogni= altro uso e' strettamente proibito e potrebbe essere fonte di violazione d= i legge. This message is for the designated recipient only and may contain privilege= d, proprietary, or otherwise private information. If you have received it i= n error, please notify the sender immediately, deleting the original and al= l copies and destroying any hard copies. Any other use is strictly prohibited and may be unlawful. </body> </html> --_000_de4cb7680af64919af7be187e7761b68DENU01MS0077phoenixloc_--

2 1

Install external certificate
by Marcelo Leandro 07 Aug '17

07 Aug '17

Good morning I bought a external certificate, in godaddy , and they send to me only one archive crt. I saw this: https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL/ I don't know how I can generate a certificate p12. Can someone help me ? Thanks. Marcelo Leandro

2 1

[ANN] oVirt 4.1.5 Second Release Candidate is now available
by Sandro Bonazzola 07 Aug '17

07 Aug '17

The oVirt Project is pleased to announce the availability of the Second Release Candidate of oVirt 4.1.5 for testing, as of August 4th, 2017 This is pre-release software. Please take a look at our community page[1] to know how to ask questions and interact with developers and users. All issues or bugs should be reported via oVirt Bugzilla[2]. This pre-release should not to be used in production. This update is the second release candidate of the fifth in a series of stabilization updates to the 4.1 series. 4.1.5 brings more than 20 enhancements and more than 50 bugfixes, including more than 20 high or urgent severity fixes, on top of oVirt 4.1 series This release is available now for: * Fedora 24 (tech preview) * Red Hat Enterprise Linux 7.3 or later * CentOS Linux (or similar) 7.3 or later This release supports Hypervisor Hosts running: * Red Hat Enterprise Linux 7.3 or later * CentOS Linux (or similar) 7.3 or later * oVirt Node 4.1 * Fedora 24 (tech preview) See the release notes draft [3] for installation / upgrade instructions and a list of new features and bugs fixed. Notes: - oVirt Appliance is already available - oVirt Live is already available[4] - oVirt Node is already available[4] Additional Resources: * Read more about the oVirt 4.1.5 release highlights: http://www.ovirt.org/release/4.1.5/ * Get more oVirt Project updates on Twitter: https://twitter.com/ovirt * Check out the latest project news on the oVirt blog: http://www.ovirt.org/blog/ [1] https://www.ovirt.org/community/ [2] https://bugzilla.redhat.com/enter_bug.cgi?classification=oVirt [3] http://www.ovirt.org/release/4.1.5/ [4] http://resources.ovirt.org/pub/ovirt-4.1-pre/iso/ -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

2 2

Cannot set a quota to limit resources for each user
by Soumya Koduri 06 Aug '17

06 Aug '17

Hi, We have a use-case to limit VM resources for each user and were following guidelines specified in the admin guide to set quota and limit resources for each user [section: 16.8. Using Quota to Limit Resources by User]. However looks like that quota is shared by all the users added as consumers. Suppose I have created a quota (say quota1) to limit the storage capacity to 100GB for each user. Once I add user1 and user2 as consumers to that quota, seems like both users combined are entitled to 100GB. Is my understanding correct? Please let me know if there is any way to configure a single quota which could be applied for each user individually (i.e, in the above eg., each user should be limited to 100GB storage capacity). Or is the only way this can be done is by creating separate quota for each user [which seems like tedious process and cannot scale]? Thanks, Soumya

4 4

Created cluster, deleted Data-Center, Recreated Data-Center, Attempted to re-create Cluster (Same Name As Old Cluster), Now Fails
by Schorschi 06 Aug '17

06 Aug '17

Created cluster object, deleted Data-Center object, Recreated Data-Center object, Attempted to re-create Cluster object (Same Name As Old Cluster), Now Fails. Error message... Error while executing action: Cannot create Cluster. Cluster name is already in use. How to I remove existing cluster entry in ovirt database? Thanks.

2 1

Deleting old export backups in oVirt
by Wesley Stewart 03 Aug '17

03 Aug '17

I am using a script to make weekly backups of my VMs, but I really dont need more than 1-2 weeks per VM. I pulled open my NFS share where the export domain points to, but all the VM's have a long guid and I cannot see which folder corresponds to which backup. For example, when I click "Import" and then "load" one of the backup VMs listed is: Ubuntu_Server_BACKUP_20170731_012832 All I see are folders that look like: "f42fd734-e5e6-964e-87D1-8dbc554f0e19" Going into the folder there is a "META" file, which I can open, but there is no reference to the actual VM name. Is there an easy way to tell which folder goes to which VM? -Wesley

1 0

supervdsmd IOError to /dev/stdout
by Richard Chan 03 Aug '17

03 Aug '17

After an upgrade to 4.0 I have a single host that cannot start supervdsmd because of IOError on /dev/stdout. All other hosts upgraded correctly. In the systemd unit I have to hack StandardOutput=null. Any thing I have overlooked? The hosts are all identical and it is just this one that has this weird behaviour. -- Richard Chan

4 7

oVirt 4.1.2 update but rubygem-fluent-plugin-viaq_data_model package missing
by Fabrice Moyen 03 Aug '17

03 Aug '17

2 3

Lost disk image on guest
by Paul-Erik Törrönen 03 Aug '17

03 Aug '17

Updated the ovirt to latest stable and after the host reboot (hardware was relocated) all of the VMs on the host are ok except one which has lost it's disk image (it still exists physically on the storage device). Uploading this image to the storage fails (I get the usual initiating - 0/XXXMB uploaded - Paused by system, the ovirt-imageio-proxy is running on the engine and has nothing in it's log), and I'm also unable to create any new disks when editing the problematic VM (the Attach/Create/+/--buttons are all grayed out). The question is: Is the only course to 'fix' this situation to delete the whole VM and install it from scratch? Poltsi

1 0