Hi -

Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm getting this issue.

Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a fix. Also seen a fix applied here: https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f but not sure if this has been released?

What are my options, not quite sure how to downgrade libvirt in oVirt Node. I was planning on trying to install 4.4.9, but not sure if the ansible scripts will update it automatically when adding it to the cluster.

Francesco - Did you get this resolved?

Cheers,

Chris.

-----Original Message-----
From: Milan Zamazal <mzamazal@redhat.com> 
Sent: 14 February 2022 18:04
To: Francesco Lorenzini <francesco@shellrent.com>
Cc: francesco--- via Users <users@ovirt.org>
Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

Francesco Lorenzini <francesco@shellrent.com> writes:

Hi Milan,

thank you for your answer.

So there is no other way/workaround? We must wait the fix in the 
engine and then upgrade? Maybe a downgrade of libvirt(?).

I can't think about any other workaround, without modifying sources, than downgrading libvirt, until the fixed Engine is installed.

I was looking up some config file in the host under /etc/libvirt and 
found the parameters vnc_password in qemu.conf file. I'm not sure that 
setting a password per host in this config file works, casue it is 
still passed via xml...

In theory, you could set the default password there and remove passwords from the domain XMLs using Vdsm hooks.  You would have to do it on all the hosts or handle migrations accordingly.  Downgrading libvirt looks much easier.

The default VNC password. Only 8 bytes are significant for # VNC 
passwords. This parameter is only used if the per-domain # XML config 
does not already provide a password.

Francesco

Il 14/02/2022 12:41, Milan Zamazal ha scritto:

francesco--- via Users<users@ovirt.org>  writes:

Hi all,

I'm using websockify + noVNC for expose the vm console via browser getting  the graphicsconsoles ticket via API. Everything works fine for every other host that I have (more than 200), the console works either via oVirt engine and via browser) but just for a single host (CentOS Stream release 8, oVirt 4.4.9) the console works only via engine but when I try the connection via browser I get the following error (vdsm log of the host):

  ERROR FINISH updateDevice error=unsupported configuration: VNC password is 12 characters long, only 8 permitted
  Traceback (most recent call last):
    File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in method
      ret = func(*args, **kwargs)
    File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in updateDevice
      return self.vm.updateDevice(params)
    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in updateDevice
      return self._updateGraphicsDevice(params)
    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in _updateGraphicsDevice
      params['params']
    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in _setTicketForGraphicDev
      self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)
    File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, in f
      ret = attr(*args, **kwargs)
    File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", line 131, in wrapper
      ret = f(*args, **kwargs)
    File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, in wrapper
      return func(inst, *args, **kwargs)
    File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in updateDeviceFlags
      raise libvirtError('virDomainUpdateDeviceFlags() failed')
  libvirt.libvirtError: unsupported configuration: VNC password is 
12 characters long, only 8 permitted


The error is pretty much self explanatory but, I can't manage to 
figure out why only on this server

Hi,

this happens with libvirt 8.0.

and I wonder if I can set the length of the generated vnc password 
somewhere.

I don't think so, it must be fixed in Engine.  See 
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b7
01105f9e1066b09f
for more details.

Regards,
Milan
_______________________________________________
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-leave@ovirt.org Privacy 
Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/messag
e/XJMULDXFHBYK3GNICAJRASQCSLBIFJV7/

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/CE3A2WTEHVE2NPMPYTQS5WAVHEESND4X/
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ESU5O3JPYMOWWE6MFKL4JYYD5G3ND4SM/

--

--
		Francesco Lorenzini System Administrator & DevOps Engineer Shellrent Srl Via dell'Edilizia, 19 - 36100 Vicenza Tel. 0444321155