10:13 a.m.
--Apple-Mail=_546B81EA-FA0E-4CAF-B4FE-5C1B51D7CC1D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
On 16 Jun 2016, at 09:07, Yaniv Kaul <ykaul(a)redhat.com> wrote:
=20
=20
=20
On Thu, Jun 16, 2016 at 9:29 AM, Yedidyah Bar David <didi(a)redhat.com =
<mailto:didi@redhat.com>> wrote:
On Thu, Jun 16, 2016 at 9:10 AM, Yaniv Kaul <ykaul(a)redhat.com =
<mailto:ykaul@redhat.com>> wrote:
>
>
> On Thu, Jun 16, 2016 at 8:53 AM, Yedidyah Bar David <didi(a)redhat.com =
<mailto:didi@redhat.com>> wrote:
>>
>> On Thu, Jun 16, 2016 at 5:33 AM, Sandvik Agustin
>> <agustinsandvik(a)gmail.com <mailto:agustinsandvik@gmail.com>> wrote:
>> > Hi users,
>> >
>> > Good day, is it possible to configure two ovirt-engine to manage =
one
>> > hypervisor? My purpose for this is what if the first
ovirt-engine =
fails,
>> > I
>> > still have the 2nd ovirt-engine to manage hypervisor.
>> >
>> > is this possible? or any suggestion similar to my purpose?
>>
>> The "normal" solution is hosted-engine, which has HA - the engine
>> runs in a VM, and HA daemons monitor it and the hosts, and if there
>> is a problem they can start it on another host.
>>
>> There were discussions in the past, which you can find in the list
>> archives,
>> about running two engines against a single database, and current =
bottom
>> line
>> is that it's not supported, will not work, and iiuc will require =
some
>> significant development investment to support.
>>
>> You might manage to have an active/passive solution - install an =
engine
>> on two machines, configure both to use the same remote
database, =
but
>> make sure only one of them is active at any given time. Not
sure if =
that's
>> considered "fully supported", but might come
close.
even when you make it work when cert issues are sorted out, you need to =
be very careful not to bring both engines up managing a same host, they =
will fight over it and the monitoring is going to be received only by =
one of the engines, which in turn may cause HA VMs restart and split =
brains all over the place.
>
>
> That's not enough - they need to share the same set of =
certificates...
=20
Best is to simply clone the machine after initial setup then change
what's needed, or backup/restore only files (engine-backup =
--mode=3Dbackup
--scope=3Dfiles).
=20
Didn't check, but I do not think they actually need all the certs of
all hosts - that is, that it's not mandatory to keep /etc/pki synced
between them after initial setup. Didn't try that myself.
=20
I'm not sure what happens when you provision a host from Mgmt A, then =
move to
Mgmt B and provision another from it:
1. Mgmt A won't be aware of that host, from cert req perspective.
May =
not be such a big deal - donno.
2. Can Mgmt A provision another host? Need to ensure the certificate
=
serial numbers are OK, etc.
=20
They really need to share the CA DB.
The backup-restore sounds like good approach to me.
Y.
=20
=20
> Y.
>
>>
>>
>> You can find on the net docs/resources about creating a redundant
>> postgresql cluster.
>>
>> Best,
>> --
>> Didi
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org <mailto:Users@ovirt.org>
>> http://lists.ovirt.org/mailman/listinfo/users =
<http://lists.ovirt.org/mailman/listinfo/users>
>
>
=20
=20
=20
--
Didi
=20
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
--Apple-Mail=_546B81EA-FA0E-4CAF-B4FE-5C1B51D7CC1D
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
charset=us-ascii
<html><head><meta http-equiv="Content-Type"
content="text/html charset=us-ascii"></head><body
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break:
after-white-space;" class=""><br
class=""><div><blockquote type="cite"
class=""><div class="">On 16 Jun 2016, at 09:07, Yaniv Kaul
<<a href="mailto:ykaul@redhat.com"
class="">ykaul(a)redhat.com</a>&gt; wrote:</div><br
class="Apple-interchange-newline"><div class=""><div
dir="ltr" class=""><br class=""><div
class="gmail_extra"><br class=""><div
class="gmail_quote">On Thu, Jun 16, 2016 at 9:29 AM, Yedidyah Bar David
<span dir="ltr" class=""><<a
href="mailto:didi@redhat.com" target="_blank"
class="">didi(a)redhat.com</a>&gt;</span> wrote:<br
class=""><blockquote class="gmail_quote" style="margin:0 0
0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span
class="">On Thu, Jun 16, 2016 at 9:10 AM, Yaniv Kaul <<a
href="mailto:ykaul@redhat.com"
class="">ykaul(a)redhat.com</a>&gt; wrote:<br
class="">
><br class="">
><br class="">
> On Thu, Jun 16, 2016 at 8:53 AM, Yedidyah Bar David <<a
href="mailto:didi@redhat.com"
class="">didi(a)redhat.com</a>&gt; wrote:<br
class="">
>><br class="">
>> On Thu, Jun 16, 2016 at 5:33 AM, Sandvik Agustin<br
class="">
>> <<a href="mailto:agustinsandvik@gmail.com"
class="">agustinsandvik(a)gmail.com</a>&gt; wrote:<br
class="">
>> > Hi users,<br class="">
>> ><br class="">
>> > Good day, is it possible to configure two ovirt-engine to manage
one<br class="">
>> > hypervisor? My purpose for this is what if the first
ovirt-engine fails,<br class="">
>> > I<br class="">
>> > still have the 2nd ovirt-engine to manage hypervisor.<br
class="">
>> ><br class="">
>> > is this possible? or any suggestion similar to my purpose?<br
class="">
>><br class="">
>> The "normal" solution is hosted-engine, which has HA - the
engine<br class="">
>> runs in a VM, and HA daemons monitor it and the hosts, and if there<br
class="">
>> is a problem they can start it on another host.<br
class="">
>><br class="">
>> There were discussions in the past, which you can find in the list<br
class="">
>> archives,<br class="">
>> about running two engines against a single database, and current
bottom<br class="">
>> line<br class="">
>> is that it's not supported, will not work, and iiuc will require
some<br class="">
>> significant development investment to support.<br
class="">
>><br class="">
>> You might manage to have an active/passive solution - install an
engine<br class="">
>> on two machines, configure both to use the same remote database,
but<br class="">
>> make sure only one of them is active at any given time. Not sure if
that's<br class="">
>> considered "fully supported", but might come close.<br
class=""></span></blockquote></div></div></div></div></blockquote><div><br
class=""></div>even when you make it work when cert issues are sorted
out, you need to be very careful not to bring both engines up managing a same host, they
will fight over it and the monitoring is going to be received only by one of the engines,
which in turn may cause HA VMs restart and split brains all over the
place.</div><div><br class=""><blockquote
type="cite" class=""><div class=""><div
dir="ltr" class=""><div class="gmail_extra"><div
class="gmail_quote"><blockquote class="gmail_quote"
style="margin:0 0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex"><span class="">
><br class="">
><br class="">
> That's not enough - they need to share the same set of certificates...<br
class="">
<br class="">
</span>Best is to simply clone the machine after initial setup then change<br
class="">
what's needed, or backup/restore only files (engine-backup --mode=backup<br
class="">
--scope=files).<br class="">
<br class="">
Didn't check, but I do not think they actually need all the certs of<br
class="">
all hosts - that is, that it's not mandatory to keep /etc/pki synced<br
class="">
between them after initial setup. Didn't try that myself.<br
class=""></blockquote><div class=""><br
class=""></div><div class="">I'm not sure what
happens when you provision a host from Mgmt A, then move to Mgmt B and provision another
from it:</div><div class="">1. Mgmt A won't be aware of that
host, from cert req perspective. May not be such a big deal -
donno.</div></div></div></div></div></blockquote></div><div><blockquote
type="cite" class=""><div class=""><div
dir="ltr" class=""><div class="gmail_extra"><div
class="gmail_quote"><div class="">2. Can Mgmt A provision
another host? Need to ensure the certificate serial numbers are OK,
etc.</div><div class=""><br
class=""></div><div class="">They really need to share
the CA DB.</div><div class="">The backup-restore sounds like good
approach to me.</div><div class="">Y.</div><div
class=""><br class=""></div><blockquote
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div class="HOEnZb"><div class="h5"><br
class="">
> Y.<br class="">
><br class="">
>><br class="">
>><br class="">
>> You can find on the net docs/resources about creating a redundant<br
class="">
>> postgresql cluster.<br class="">
>><br class="">
>> Best,<br class="">
>> --<br class="">
>> Didi<br class="">
>> _______________________________________________<br
class="">
>> Users mailing list<br class="">
>> <a href="mailto:Users@ovirt.org"
class="">Users(a)ovirt.org</a><br class="">
>> <a href="http://lists.ovirt.org/mailman/listinfo/users"
rel="noreferrer" target="_blank"
class="">http://lists.ovirt.org/mailman/listinfo/users</a...
class="">
><br class="">
><br class="">
<br class="">
<br class="">
<br class="">
</div></div><span class="HOEnZb"><font
color="#888888" class="">--<br class="">
Didi<br class="">
</font></span></blockquote></div><br
class=""></div></div>
_______________________________________________<br class="">Users mailing
list<br class=""><a href="mailto:Users@ovirt.org"
class="">Users(a)ovirt.org</a><br
class="">http://lists.ovirt.org/mailman/listinfo/users<br
class=""></div></blockquote></div><br
class=""></body></html>
--Apple-Mail=_546B81EA-FA0E-4CAF-B4FE-5C1B51D7CC1D--