20 May
2014
20 May
'14
2:06 p.m.
--_002_0ED03591EAF6DF4490E8BF74F44AABD61240A4F5sterexch02terad_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable On 05/20/2014 09:42 AM, Sandro Bonazzola wrote:=0A= > Il 20/05/2014 15:09, Jiri Moskovcak ha scritto:=0A= >> On 05/20/2014 02:57 PM, Bob Doolittle wrote:=0A= >>> Well that was interesting.=0A= >>> When I ran hosted-engine --connect-storage, the Data Center went green,= =0A= >>> and I could see an unattached ISO domain and ovirt-image-repository (bu= t=0A= >>> no Data domain).=0A= >>> But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage=0A= >>> disappeared again and the Data Center went red.=0A= >>>=0A= >>> In retrospect, there appears to be a problem with iptables/firewalld=0A= >>> that could be related.=0A= >>> I noticed two things:=0A= >>> - firewalld is stopped and disabled on the host=0A= > Correct, hosted engine support iptables only.=0A= > You should have iptables configured and enabled.=0A= >=0A= >>> - I could not manually NFS mount (v3 or v4) from the host to the engine= ,=0A= >>> unless I did "service iptables stop"=0A= >>>=0A= >>> So it doesn't appear to me that hosted-engine did the right things with= =0A= >>> firewalld/iptables. If these problems occurred during the --deploy,=0A= >>> could that result in this situation?=0A= > I don't think so=0A= >=0A= >>> I have temporarily disabled iptables until I get things working, but=0A= >>> clearly that's insufficient to resolve the problem at this point.=0A= >>>=0A= >> - iptables/firewalld is configured during the setup, which is Sandro's d= omain. Sandro, could you please take a look at this?=0A= >=0A= > iptables configuration is performed by the engine when adding the host.= =0A= > please attach iptables-save output from the host and host-deploy logs fr= om the hosted-engine vm.=0A= >=0A= =0A= host-deploy logs are ^^ in this thread.=0A= =0A= I have attached iptables-save output.=0A= =0A= Thanks,=0A= Bob=0A= =0A= =0A= --_002_0ED03591EAF6DF4490E8BF74F44AABD61240A4F5sterexch02terad_ Content-Type: text/plain; name="iptables-save.out" Content-Description: iptables-save.out Content-Disposition: attachment; filename="iptables-save.out"; size=717; creation-date="Tue, 20 May 2014 14:06:38 GMT"; modification-date="Tue, 20 May 2014 14:06:38 GMT" Content-Transfer-Encoding: base64 IyBHZW5lcmF0ZWQgYnkgaXB0YWJsZXMtc2F2ZSB2MS40LjE4IG9uIFR1ZSBNYXkgMjAgMTA6MDU6 MjQgMjAxNAoqZmlsdGVyCjpJTlBVVCBBQ0NFUFQgWzA6MF0KOkZPUldBUkQgQUNDRVBUIFswOjBd CjpPVVRQVVQgQUNDRVBUIFs0MDY6Mjk5MDczNV0KLUEgSU5QVVQgLW0gc3RhdGUgLS1zdGF0ZSBS RUxBVEVELEVTVEFCTElTSEVEIC1qIEFDQ0VQVAotQSBJTlBVVCAtaSBsbyAtaiBBQ0NFUFQKLUEg SU5QVVQgLXAgdGNwIC1tIHRjcCAtLWRwb3J0IDU0MzIxIC1qIEFDQ0VQVAotQSBJTlBVVCAtcCB0 Y3AgLW0gdGNwIC0tZHBvcnQgMjIgLWogQUNDRVBUCi1BIElOUFVUIC1wIHVkcCAtbSB1ZHAgLS1k cG9ydCAxNjEgLWogQUNDRVBUCi1BIElOUFVUIC1wIHRjcCAtbSB0Y3AgLS1kcG9ydCAxNjUxNCAt aiBBQ0NFUFQKLUEgSU5QVVQgLXAgdGNwIC1tIG11bHRpcG9ydCAtLWRwb3J0cyA1OTAwOjY5MjMg LWogQUNDRVBUCi1BIElOUFVUIC1wIHRjcCAtbSBtdWx0aXBvcnQgLS1kcG9ydHMgNDkxNTI6NDky MTYgLWogQUNDRVBUCi1BIElOUFVUIC1qIFJFSkVDVCAtLXJlamVjdC13aXRoIGljbXAtaG9zdC1w cm9oaWJpdGVkCi1BIEZPUldBUkQgLW0gcGh5c2RldiAhIC0tcGh5c2Rldi1pcy1icmlkZ2VkIC1q IFJFSkVDVCAtLXJlamVjdC13aXRoIGljbXAtaG9zdC1wcm9oaWJpdGVkCkNPTU1JVAojIENvbXBs ZXRlZCBvbiBUdWUgTWF5IDIwIDEwOjA1OjI0IDIwMTQK --_002_0ED03591EAF6DF4490E8BF74F44AABD61240A4F5sterexch02terad_--