Hey,

Thanks for the answers!

I want to try the perl solution. One, maybe stupid, question: how do i run this perl module?

Do i run it on the Host or from my local machne? I am a litte bit confused.

Could someone explain it to me?

Best regarda

Am 8. Juli 2021 16:05:42 MESZ schrieb Milan Zamazal <mzamazal@redhat.com>:
Sandro Bonazzola <sbonazzo@redhat.com> writes:

Il giorno gio 8 lug 2021 alle ore 13:38 Sandro Bonazzola <
sbonazzo@redhat.com> ha scritto:

+Milan Zamazal <mzamazal@redhat.com> , +Arik Hadas <ahadas@redhat.com> , +Michal
Skrivanek <mskrivan@redhat.com> any hint?


I found https://metacpan.org/pod/Ovirt::Display but I think there should be
an easier way within the engine to configure this.




Il giorno mar 6 lug 2021 alle ore 14:01 Merlin Timm <merlin.timm@posteo.de>
ha scritto:

Good day to all,

I have a question about the console configuration of the VMs:

By default, for each console connection to a VM, a password is set for
120 seconds, after that you can't use it again. We currently have the
following concern:

We want to access and control the VMs via the VNC/Spice of the Ovirt
host. We have already tried to use the password from the console.vv for
the connection and that works so far. Unfortunately we have to do this
every 2 minutes when we want to connect again. We are currently building
an automatic test pipeline and for this we need to access the VMs
remotely before OS start and we want to be independent of a VNC server
on the guest. This is only possible if we could connect to the VNC/Spice
server from the Ovirt host.

My question: would it be possible to fix the password or read it out via
api every time you want to connect?

A one time password is set every time the console is opened, for those
120 seconds. Unfortunately, the 120 seconds limit seems to be hardwired
in Engine sources. So apparently the only chance would be to set the
password directly on the host using VM.updateDevice VDSM API call. It
looks like this normally:

VM.updateDevice(params={'deviceType': 'graphics', 'password': '********', 'disconnectAction': 'NONE', 'params': {'vncUsername': 'vnc-630b9cae-a983-4ab0-a9ac-6b8728f8014d', 'fips': 'false', 'userName': 'admin', 'userId': 'fd2c5e14-a8c3-11eb-951c-2a9574de53b6'}, 'ttl': 120, 'graphicsType': 'spice'})

This way it's possible to set a password and its lifetime (`ttl'
parameter). Of course, it's needed to find out the host the VM runs on,
a way to call the API (running vdsm-client directly on the host may be
the easiest way), how to make/use the *.vv ticket (you can use the same
password all the time) and to accept collisions with different settings
if someone opens the console from the web UI.

In the end result, using the Perl library mentioned by Sandro above may
be an easier solution.

Or another option is to submit a patch to Engine to make the timeout
configurable (look for TICKET_VALIDITY_SECONDS in the sources).

Regards,
Milan

I would appreciate a reply very much!

Best regards
Merlin Timm
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BDPGLBQ4DWE64NATDDFDUB2TZLAHS6SV/



--

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA <https://www.redhat.com/>

sbonazzo@redhat.com
<https://www.redhat.com/>

*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
<https://mojo.redhat.com/docs/DOC-1199578>*




--
Merlin Timm