Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC

You have only mentioned console access. Do you really need the Administrative Portal or could you live with the User Portal? Do you need VM control through your portal, or only consoles? What is your use scenario? -Bob On Jul 25, 2014 12:33 AM, "Punit Dambiwal" <hypunit(a)gmail.com&gt; wrote: > Hi Dan, > > We require the VM console which provide html5 console...please let me > know can we achieve html5 with the spice..if yes how to integrate it with > API and our own portal...?? > > > On Fri, Jul 25, 2014 at 6:31 AM, Itamar Heim <iheim(a)redhat.com&gt; wrote: > >> On 07/24/2014 02:43 PM, Frantisek Kobzik wrote: >> >>> Hello Punit, >>> >>> this wouldn't be so straightforward. The data that goes from noVNC >>> client to websocket proxy must be digitally signed. In engine, we use >>> SignString query for that. There are 2 possibilities to create such >>> signatures: >>> 1, Expose SignString via rest api, or >>> >> >> this means its a gap we need to close in any case to allow moving the >> portals to work over the REST API? >> >> >> 2, implement this signing mechanism from scratch (for that the "signing >>> machine" would have to posses private key for signing ovirt-websocket-proxy >>> tickets, which I don't like). >>> >>> This is just first idea on how we could do it. Let me think about it a >>> little bit longer, I'll try to ask around and maybe we'll come up with >>> something better. >>> >>> Thanks, >>> Franta. >>> >>> ----- Original Message ----- >>> From: "Punit Dambiwal" <hypunit(a)gmail.com&gt; >>> To: "Shanil S" <xielesshanil(a)gmail.com&gt;, "Dan Kenigsberg" < >>> danken(a)redhat.com&gt;, ahadas(a)redhat.com, "Sven Kieske" < >>> S.Kieske(a)mittwald.de&gt;, "Antoni Segura Puimedon" <asegurap(a)redhat.com&gt;, >>> "Itamar Heim" <iheim(a)redhat.com&gt; >>> Cc: "Michal Skrivanek" <michal.skrivanek(a)redhat.com&gt;, "Frantisek >>> Kobzik" <fkobzik(a)redhat.com&gt;, users(a)ovirt.org >>> Sent: Thursday, July 24, 2014 6:50:02 AM >>> Subject: Re: [ovirt-users] Guest VM Console Creation/Access using REST >>> API and noVNC >>> >>> Hi All, >>> >>> Is there any body in the community...who can help us to resolve this >>> issue... >>> >>> 1. We are using Ovirt 3.4.3 and we are able to access the console from >>> the >>> ovirt panel. >>> 2. We don't want to use the ovirt engine portal for the webUI, we want >>> to >>> use our own portal for user interface. >>> 3. Webbsocket proxy Installed on the same sever where ovirt engine >>> installed. >>> 4. We want to access the VM console from our portal,which is different >>> from >>> this Ovirt cluster. >>> 5. We already allowed our portal server Ip address in the engine as >>> well as >>> all the hypervisior servers.....also selinux on all the servers are >>> disabled mode. >>> 6. Display network is on the ovirtmgmt network and the same network we >>> are >>> using to get the VM console.... >>> 7. We are able to create the ticket and with the help of the ticket >>> details,when we try to access the VM console through our portal it >>> failed >>> with the following error (Failed to connect to server (code: 1006)). >>> 8. Same time we can access the console from any vnc client,which is >>> installed on my local system,but through browser with novnc it through >>> error. >>> 9. We found that there is no direct api function to create console, so >>> how >>> we can create console using our own portal and how we can achieve this >>> ?? >>> 10. If it's not possible then is there any workaround for the same... >>> >>> Our whole project just stuck because of this issue...please help us so >>> we >>> can go ahead with Ovirt.... >>> >>> Thanks, >>> Punit >>> >>> >>> >>> On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil(a)gmail.com&gt; >>> wrote: >>> >>> Hi Michal, >>>> >>>> We are using 3.4.3 and we are able to access the console from the ovirt >>>> panel. We don't want to use the ovirt engine portal for the webUI, we >>>> want >>>> to use our own portal for user interface. We have installed websocket >>>> proxy >>>> on the ovirt engine server and now we want to access the VM console >>>> from >>>> our portal. How we can achieve this ? it is found that there is no >>>> direct >>>> api function to create console, so how we can create console using our >>>> own >>>> portal ? >>>> >>>> >>>> -- >>>> Regards >>>> Shanil >>>> >>>> >>>> On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < >>>> michal.skrivanek(a)redhat.com&gt; wrote: >>>> >>>> >>>>> On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil(a)gmail.com&gt; wrote: >>>>> >>>>> Hi Michal, >>>>>> >>>>>> Thanks for your updates. >>>>>> >>>>>> I am unable to view the above post >>>>>> >>>>> https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an >>>>> access >>>>> denied error. I don't have the login to this, could you please paste >>>>> the >>>>> content here ? >>>>> >>>>> should be fixed now, sorry. try again >>>>> NoVncImpl.java in review 13931 should explain some things… (or Franta >>>>> can, if something's not clear:-) >>>>> >>>>> >>>>>> >>>>>> -- >>>>>> Regards >>>>>> Shanil >>>>>> >>>>>> >>>>>> On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek < >>>>>> >>>>> michal.skrivanek(a)redhat.com&gt; wrote: >>>>> >>>>>> >>>>>> On 22 Jul 2014, at 09:02, Punit Dambiwal wrote: >>>>>> >>>>>> Hi Michal, >>>>>>> >>>>>>> We want to access vm console by using noVNC and Rest api. We are >>>>>>> using >>>>>>> >>>>>> websocket proxy on the same machine where engine runs and we try to >>>>> get the >>>>> console access from the another server that is outside from this >>>>> cluster. >>>>> >>>>>> >>>>>>> But when we try to connect the vnc_auto.html from the server using >>>>>>> >>>>>> host ip, port and the password which we get from the ticket >>>>> creation… it >>>>> shows a Failed to connect to server (code: 1006). >>>>> >>>>>> >>>>>> Hi Punit, >>>>>> did you read about the modification we did for the noVNC package? >>>>>> >>>>> http://www.ovirt.org/Features/noVNC_console >>>>> >>>>>> >>>>>> >>>>>> >>>>>>> The following are the codes which we use to create the ticket… >>>>>>> >>>>>> host,port and the password will get from the ticket and with the same >>>>> details (host,port & password) we are able to connect the console >>>>> using the >>>>> vnc clients(TigerVNC etc.) >>>>> >>>>>> >>>>>> you mean the "ticket" call? that returns you the direct connection >>>>>> >>>>> information >>>>> >>>>>> but you want to connect to websocket proxy(to engine:6100 indeed) and >>>>>> >>>>> pass the above information as an signed encoded url path (where to >>>>> connect >>>>> to from proxy) >>>>> >>>>>> check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and >>>>>> >>>>> associated patches to see how it is being encoded >>>>> >>>>>> >>>>>> Thanks, >>>>>> michal >>>>>> >>>>>> >>>>>>> try { >>>>>>> var host = WebUtil.getQueryVar('host', '<?php echo >>>>>>> >>>>>> $host?>'); >>>>> >>>>>> var port = WebUtil.getQueryVar('port', '<?php echo >>>>>>> >>>>>> $port?>'); >>>>> >>>>>> var path = WebUtil.getQueryVar('path', 'websockify'); >>>>>>> >>>>>>> var password = '<?php echo $password?>'; >>>>>>> >>>>>>> if ((!host) || (!port)) { >>>>>>> updateState('failed', >>>>>>> "Must specify host and port in URL"); >>>>>>> return; >>>>>>> } >>>>>>> >>>>>>> rfb = new RFB({'target': $D('noVNC_canvas'), >>>>>>> 'encrypt': >>>>>>> >>>>>> WebUtil.getQueryVar('encrypt', >>>>> >>>>>> >>>>>>> (window.location.protocol === "https:")), >>>>>>> 'true_color': >>>>>>> >>>>>> WebUtil.getQueryVar('true_color', true), >>>>> >>>>>> 'local_cursor': >>>>>>> >>>>>> WebUtil.getQueryVar('cursor', true), >>>>> >>>>>> 'shared': >>>>>>> >>>>>> WebUtil.getQueryVar('shared', true), >>>>> >>>>>> 'view_only': >>>>>>> >>>>>> WebUtil.getQueryVar('view_only', false), >>>>> >>>>>> 'updateState': updateState, >>>>>>> 'onPasswordRequired': >>>>>>> passwordRequired}); >>>>>>> rfb.connect(host, port, password, path); >>>>>>> }catch(e) {alert(e); >>>>>>> >>>>>>> >>>>>>> Could you please check if there any issues with it and guide me how >>>>>>> to >>>>>>> >>>>>> get rid of this failed to connect error? >>>>> >>>>>> >>>>>>> I have attached the screen shots for further reference… >>>>>>> >>>>>>> Thanks, >>>>>>> Punit >>>>>>> >>>>>>> >>>>>>> >>>>>>> On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil(a)gmail.com&gt; >>>>>>> >>>>>> wrote: >>>>> >>>>>> Hi All, >>>>>>> >>>>>>> We already updated with the logs and the clear picture about the >>>>>>> issue. >>>>>>> >>>>>>> -- >>>>>>> Regards >>>>>>> Shanil >>>>>>> >>>>>>> >>>>>>> On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < >>>>>>> >>>>>> michal.skrivanek(a)redhat.com&gt; wrote: >>>>> >>>>>> >>>>>>> On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit(a)gmail.com&gt; >>>>>>> wrote: >>>>>>> >>>>>>> Hi All, >>>>>>>> >>>>>>>> I am still waiting for the updates...is there any one have the clue >>>>>>>> >>>>>>> to solve this problem.... ??? >>>>> >>>>>> >>>>>>> Hi Punit, >>>>>>> I'm afraid no one can help you debug connectivity issues remotely, >>>>>>> >>>>>> without describing precisely what are you doing and how, and include >>>>> all >>>>> the logs >>>>> >>>>>> >>>>>>> Thanks, >>>>>>> michal >>>>>>> >>>>>>> >>>>>>>> Thanks, >>>>>>>> Punit >>>>>>>> >>>>>>>> >>>>>>>> On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal < >>>>>>>> hypunit(a)gmail.com&gt; >>>>>>>> >>>>>>> wrote: >>>>> >>>>>> Hi All, >>>>>>>> >>>>>>>> We are also struggling with the same problem....can anybody mind to >>>>>>>> >>>>>>> update here the resolution or suggest us the way to get rid of this >>>>> "Failed >>>>> to connect to server (code: 1006" error. >>>>> >>>>>> >>>>>>>> Thanks, >>>>>>>> Punit >>>>>>>> >>>>>>>> >>>>>>>> On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil(a)gmail.com&gt; >>>>>>>> >>>>>>> wrote: >>>>> >>>>>> Hi, >>>>>>>> >>>>>>>> We are waiting for the updates, it will be great if anyone can give >>>>>>>> >>>>>>> the helpful details.. :) >>>>> >>>>>> >>>>>>>> -- >>>>>>>> Regards >>>>>>>> Shanil >>>>>>>> >>>>>>>> >>>>>>>> On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil(a)gmail.com >>>>>>>> > >>>>>>>> >>>>>>> wrote: >>>>> >>>>>> Hi, >>>>>>>> >>>>>>>> we have enabled our portal ip address on the engine and hosts >>>>>>>> >>>>>>> firewall but still the connection failed. so there should be no >>>>> firewall >>>>> issues. >>>>> >>>>>> >>>>>>>> -- >>>>>>>> Regards >>>>>>>> Shanil >>>>>>>> >>>>>>>> >>>>>>>> On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil(a)gmail.com&gt; >>>>>>>> >>>>>>> wrote: >>>>> >>>>>> Hi Sven, >>>>>>>> >>>>>>>> Regarding the ticket "path", Is it the direct combination of host >>>>>>>> >>>>>>> and port ? suppose if the host is 1.2.3.4 and the port is 5100 then >>>>> what >>>>> should be the "path" value ? Is there encryption needs here ? >>>>> >>>>>> >>>>>>>> >>>>>>>> so you have access from the browser to the websocket-proxy, >>>>>>>>>> network >>>>>>>>>> >>>>>>>>> wise? can you ping the proxy? >>>>>>>> and the websocket proxy can reach the host where the vm runs? >>>>>>>> >>>>>>>> yes.. there should be no firewall issue as we can access the >>>>>>>> >>>>>>> console from ovirt engine portal >>>>> >>>>>> >>>>>>>> Do we need to allow our own portal ip address in the ovirt engine >>>>>>>> >>>>>>> and hypervisiors also ??? >>>>> >>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> Regards >>>>>>>> Shanil >>>>>>>> >>>>>>>> >>>>>>>> On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske(a)mittwald.de >>>>>>>> > >>>>>>>> >>>>>>> wrote: >>>>> >>>>>> >>>>>>>> >>>>>>>> Am 16.07.2014 11:30, schrieb Shanil S: >>>>>>>> >>>>>>>>> We will get the ticket details like host,port and password from >>>>>>>>> >>>>>>>> the ticket >>>>> >>>>>> api funcion call but didn't get the "path" value. Will it get it >>>>>>>>> >>>>>>>> from the >>>>> >>>>>> ticket details ? i couldn't find out any from the ticket details. >>>>>>>>> >>>>>>>> >>>>>>>> the "path" is the combination of host and port. >>>>>>>> >>>>>>>> so you have access from the browser to the websocket-proxy, network >>>>>>>> wise? can you ping the proxy? >>>>>>>> and the websocket proxy can reach the host where the vm runs? >>>>>>>> are you sure there are no firewalls in between? >>>>>>>> also you should pay attention on how long your ticket >>>>>>>> is valid, you can specify the duration in minutes in your api call. >>>>>>>> >>>>>>>> -- >>>>>>>> Mit freundlichen Grüßen / Regards >>>>>>>> >>>>>>>> Sven Kieske >>>>>>>> >>>>>>>> Systemadministrator >>>>>>>> Mittwald CM Service GmbH & Co. KG >>>>>>>> Königsberger Straße 6 >>>>>>>> 32339 Espelkamp >>>>>>>> T: +49-5772-293-100 >>>>>>>> F: +49-5772-293-333 >>>>>>>> https://www.mittwald.de >>>>>>>> Geschäftsführer: Robert Meyer >>>>>>>> St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad >>>>>>>> >>>>>>> Oeynhausen >>>>> >>>>>> Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad >>>>>>>> >>>>>>> Oeynhausen >>>>> >>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> Users mailing list >>>>>>>> Users(a)ovirt.org >>>>>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> Users mailing list >>>>>>>> Users(a)ovirt.org >>>>>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> <screen3 Jul. 15.1.jpg> >>>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>> >> > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > _______________________________________________ Users mailing list Users(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/users