Thanks Francesco, it looks like a fix has been put into oVirt 4.5 which is scheduled for general release on the 12th April.

 

I’m using an oVirt Node ISO (4.4.10) install on the host are you doing the same or did you install oVirt on top of a standard centos install yourself?

 

I did try a dnf downgrade libvirt but it said there were no previous packages available. Just doing a re-install so will try your provided commands in a moment.

 

Cheers,

 

Chris.

 

From: Francesco Lorenzini <francesco@shellrent.com>
Sent: 14 March 2022 17:23
To: Christopher Law <chris@chrislaw.me>; Milan Zamazal <mzamazal@redhat.com>
Cc: francesco--- via Users <users@ovirt.org>
Subject: Re: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

 

Hi Crhis,

I didn't resolve properly, I found that downgrading libvirt was the fastest workaround.

Just downgrade libvirt via yum/dnf to to version 7.10.  I added the downgrade in an Ansible task, if you are practical:

- name: Ensure libvirt-7.10.0 is installed
  yum:
    name: libvirt-7.10.0
    state: present
    update_cache: true
    allow_downgrade: true
  ignore_errors: true

or via cli :

yum install libvirt-7.10.0


Post dowgrade we performed a restart of vdsm (or super-vdsm, or both, I don't remember). The downgrade is quite safe, we didn't encounter any problem with existing hosts and new deployed one.

Francesco

Il 14/03/2022 15:58, Christopher Law ha scritto:

Hi -
 
Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm getting this issue.
 
Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a fix. Also seen a fix applied here: https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f but not sure if this has been released?
 
What are my options, not quite sure how to downgrade libvirt in oVirt Node. I was planning on trying to install 4.4.9, but not sure if the ansible scripts will update it automatically when adding it to the cluster.
 
Francesco - Did you get this resolved?
 
Cheers,
 
Chris.
 
-----Original Message-----
From: Milan Zamazal <mzamazal@redhat.com> 
Sent: 14 February 2022 18:04
To: Francesco Lorenzini <francesco@shellrent.com>
Cc: francesco--- via Users <users@ovirt.org>
Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted
 
Francesco Lorenzini <francesco@shellrent.com> writes:
 
Hi Milan,
 
thank you for your answer.
 
So there is no other way/workaround? We must wait the fix in the 
engine and then upgrade? Maybe a downgrade of libvirt(?).
 
I can't think about any other workaround, without modifying sources, than downgrading libvirt, until the fixed Engine is installed.
 
I was looking up some config file in the host under /etc/libvirt and 
found the parameters vnc_password in qemu.conf file. I'm not sure that 
setting a password per host in this config file works, casue it is 
still passed via xml...
 
In theory, you could set the default password there and remove passwords from the domain XMLs using Vdsm hooks.  You would have to do it on all the hosts or handle migrations accordingly.  Downgrading libvirt looks much easier.
 
The default VNC password. Only 8 bytes are significant for # VNC 
passwords. This parameter is only used if the per-domain # XML config 
does not already provide a password.
 
Francesco
 
Il 14/02/2022 12:41, Milan Zamazal ha scritto:
francesco--- via Users<users@ovirt.org>  writes:
 
Hi all,
 
I'm using websockify + noVNC for expose the vm console via browser getting  the graphicsconsoles ticket via API. Everything works fine for every other host that I have (more than 200), the console works either via oVirt engine and via browser) but just for a single host (CentOS Stream release 8, oVirt 4.4.9) the console works only via engine but when I try the connection via browser I get the following error (vdsm log of the host):
 
  ERROR FINISH updateDevice error=unsupported configuration: VNC password is 12 characters long, only 8 permitted
  Traceback (most recent call last):
    File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in method
      ret = func(*args, **kwargs)
    File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in updateDevice
      return self.vm.updateDevice(params)
    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in updateDevice
      return self._updateGraphicsDevice(params)
    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in _updateGraphicsDevice
      params['params']
    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in _setTicketForGraphicDev
      self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)
    File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, in f
      ret = attr(*args, **kwargs)
    File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", line 131, in wrapper
      ret = f(*args, **kwargs)
    File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, in wrapper
      return func(inst, *args, **kwargs)
    File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in updateDeviceFlags
      raise libvirtError('virDomainUpdateDeviceFlags() failed')
  libvirt.libvirtError: unsupported configuration: VNC password is 
12 characters long, only 8 permitted
 
 
The error is pretty much self explanatory but, I can't manage to 
figure out why only on this server
Hi,
 
this happens with libvirt 8.0.
 
and I wonder if I can set the length of the generated vnc password 
somewhere.
I don't think so, it must be fixed in Engine.  See 
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b7
01105f9e1066b09f
for more details.
 
Regards,
Milan
_______________________________________________
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-leave@ovirt.org Privacy 
Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/messag
e/XJMULDXFHBYK3GNICAJRASQCSLBIFJV7/
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/CE3A2WTEHVE2NPMPYTQS5WAVHEESND4X/
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ESU5O3JPYMOWWE6MFKL4JYYD5G3ND4SM/

 

--

--

 

 

Shellrent - Il primo hosting italiano Security First

Francesco Lorenzini
System Administrator & DevOps Engineer
Shellrent Srl

Via dell'Edilizia, 19 - 36100 Vicenza
Tel. 0444321155