Hi Crhis,
I didn't resolve properly, I found that downgrading libvirt was the
fastest workaround.
Just downgrade libvirt via yum/dnf to to version 7.10. I added the
downgrade in an Ansible task, if you are practical:
- name: Ensure libvirt-7.10.0 is installed
yum:
name: libvirt-7.10.0
state: present
update_cache: true
allow_downgrade: true
ignore_errors: true
or via cli :
yum install libvirt-7.10.0
Post dowgrade we performed a restart of vdsm (or super-vdsm, or both, I
don't remember). The downgrade is quite safe, we didn't encounter any
problem with existing hosts and new deployed one.
Francesco
Il 14/03/2022 15:58, Christopher Law ha scritto:
Hi -
Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 4.4.10
and added a freshly installed oVirt Node 4.4.10, and I'm getting this issue.
Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a fix. Also
seen a fix applied
here:https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b...
but not sure if this has been released?
What are my options, not quite sure how to downgrade libvirt in oVirt Node. I was
planning on trying to install 4.4.9, but not sure if the ansible scripts will update it
automatically when adding it to the cluster.
Francesco - Did you get this resolved?
Cheers,
Chris.
-----Original Message-----
From: Milan Zamazal<mzamazal(a)redhat.com>
Sent: 14 February 2022 18:04
To: Francesco Lorenzini<francesco(a)shellrent.com>
Cc: francesco--- via Users<users(a)ovirt.org>
Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8
permitted
Francesco Lorenzini<francesco(a)shellrent.com> writes:
> Hi Milan,
>
> thank you for your answer.
>
> So there is no other way/workaround? We must wait the fix in the
> engine and then upgrade? Maybe a downgrade of libvirt(?).
I can't think about any other workaround, without modifying sources, than downgrading
libvirt, until the fixed Engine is installed.
> I was looking up some config file in the host under /etc/libvirt and
> found the parameters vnc_password in qemu.conf file. I'm not sure that
> setting a password per host in this config file works, casue it is
> still passed via xml...
In theory, you could set the default password there and remove passwords from the domain
XMLs using Vdsm hooks. You would have to do it on all the hosts or handle migrations
accordingly. Downgrading libvirt looks much easier.
>> The default VNC password. Only 8 bytes are significant for # VNC
>> passwords. This parameter is only used if the per-domain # XML config
>> does not already provide a password.
> Francesco
>
> Il 14/02/2022 12:41, Milan Zamazal ha scritto:
>> francesco--- via Users<users(a)ovirt.org> writes:
>>
>>> Hi all,
>>>
>>> I'm using websockify + noVNC for expose the vm console via browser
getting the graphicsconsoles ticket via API. Everything works fine for every other host
that I have (more than 200), the console works either via oVirt engine and via browser)
but just for a single host (CentOS Stream release 8, oVirt 4.4.9) the console works only
via engine but when I try the connection via browser I get the following error (vdsm log
of the host):
>>>
>>> ERROR FINISH updateDevice error=unsupported configuration: VNC password is
12 characters long, only 8 permitted
>>> Traceback (most recent call last):
>>> File "/usr/lib/python3.6/site-packages/vdsm/common/api.py",
line 124, in method
>>> ret = func(*args, **kwargs)
>>> File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372,
in updateDevice
>>> return self.vm.updateDevice(params)
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line
3389, in updateDevice
>>> return self._updateGraphicsDevice(params)
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line
3365, in _updateGraphicsDevice
>>> params['params']
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line
5169, in _setTicketForGraphicDev
>>> self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)
>>> File
"/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, in f
>>> ret = attr(*args, **kwargs)
>>> File
"/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", line 131,
in wrapper
>>> ret = f(*args, **kwargs)
>>> File
"/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, in wrapper
>>> return func(inst, *args, **kwargs)
>>> File "/usr/lib64/python3.6/site-packages/libvirt.py", line
3244, in updateDeviceFlags
>>> raise libvirtError('virDomainUpdateDeviceFlags() failed')
>>> libvirt.libvirtError: unsupported configuration: VNC password is
>>> 12 characters long, only 8 permitted
>>>
>>>
>>> The error is pretty much self explanatory but, I can't manage to
>>> figure out why only on this server
>> Hi,
>>
>> this happens with libvirt 8.0.
>>
>>> and I wonder if I can set the length of the generated vnc password
>>> somewhere.
>> I don't think so, it must be fixed in Engine. See
>>
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b7
>> 01105f9e1066b09f
>> for more details.
>>
>> Regards,
>> Milan
>> _______________________________________________
>> Users mailing list --users(a)ovirt.org
>> To unsubscribe send an emailtousers-leave(a)ovirt.org Privacy
>>
Statement:https://www.ovirt.org/privacy-policy.html
>> oVirt Code of
>>
Conduct:https://www.ovirt.org/community/about/community-guidelines/
>> List
>>
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/messag
>> e/XJMULDXFHBYK3GNICAJRASQCSLBIFJV7/
_______________________________________________
Users mailing list --users(a)ovirt.org
To unsubscribe send an email tousers-leave(a)ovirt.org Privacy
Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/CE...
_______________________________________________
Users mailing list --users(a)ovirt.org
To unsubscribe send an email tousers-leave(a)ovirt.org
Privacy
Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/ES...
--
--
Shellrent - Il primo hosting italiano Security First
*Francesco Lorenzini*
/System Administrator & DevOps Engineer/
Shellrent Srl
Via dell'Edilizia, 19 - 36100 Vicenza
Tel. 0444321155 <tel:+390444321155>