oVirt system tests are indeed using nested virtualization, but it is done to run oVirt nested on top of a stand-alone KVM host, and not to run nested stuff on top of oVirt. The steps Fred specified can be done manually on all hosts, but oVirt offers a slightly more automated alternative. Simply install the following vdsm hooks (available as packages) on all hosts: vdsm-hook-macspoof vdsm-hook-nestedvt And then reboot the hosts (You will need to put hosts into maintenance mode to do that). Adding Sandro and Fabian to comment about how to persist this configuration across node-ng updates. On 5 March 2017 at 14:20, Fred Rolland <frolland@redhat.com> wrote:

Our system tests are using nested virtualization. [1] Here the relevant part :

Make sure that virtualization extension is enabled on the CPU, otherwise, you might need to enable it in the BIOS. Generally, if virtualization extension is disabled, dmesg log would contain a line similar to:

kvm: disabled by BIOS

Verify nested virtualization is enabled

$ cat /sys/module/kvm_intel/parameters/nested

This command should print `Y` if nested virtualization is enabled, otherwise, enable it the following way:

Edit `/etc/modprobe.d/kvm-intel.conf` and add the following line:

options kvm-intel nested=y

[1] http://ovirt-system-tests.readthedocs.io/en/latest/docs/general/installation...

On Sat, Mar 4, 2017 at 3:46 PM, Luca 'remix_tj' Lorenzetto <lorenzetto.luca@gmail.com> wrote:

...

Hello,

we're installing a small ovirt cluster for hosting some test environments at work. We're interested in testing VM running hypervisors (i.e ovirt itself or a small openstack deployment).

Is there any documentation showing how to enable nested virtualization in ovirt?

I've seen that while adding an host to the cluster there is the opportunity to flag "Nested Virtualization" option, but i didn't understand if other packages and configs are required.

Our environment is running latest ovirt 4.1 installed with ovirt-node-ng.

Luca

-- "E' assurdo impiegare gli uomini di intelligenza eccellente per fare calcoli che potrebbero essere affidati a chiunque se si usassero delle macchine" Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)

"Internet è la più grande biblioteca del mondo. Ma il problema è che i libri sono tutti sparsi sul pavimento" John Allen Paulos, Matematico (1945-vivente)

Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , <lorenzetto.luca@gmail.com> _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

-- Barak Korren bkorren@redhat.com RHCE, RHCi, RHV-DevOps Team https://ifireball.wordpress.com/

On 6 March 2017 at 10:20, Luca 'remix_tj' Lorenzetto <lorenzetto.luca@gmail.com> wrote:

...

The steps Fred specified can be done manually on all hosts, but oVirt offers a slightly more automated alternative. Simply install the following vdsm hooks (available as packages) on all hosts:

vdsm-hook-macspoof vdsm-hook-nestedvt

And then reboot the hosts (You will need to put hosts into maintenance mode to do that).

Hello,

the packages you're referring are not available through yum on hosts. I've seen that only specific packages are included from repos, does these packages are excluded?

Those packages should be available from the oVirt repos as they are built together with the vdsm package. Perhaps node has special exclusions. Referring again to the node maintainers. Sandro? Fabian? -- Barak Korren bkorren@redhat.com RHCE, RHCi, RHV-DevOps Team https://ifireball.wordpress.com/

On Mon, Mar 6, 2017 at 9:20 AM, Luca 'remix_tj' Lorenzetto < lorenzetto.luca@gmail.com> wrote:

On Sun, Mar 5, 2017 at 2:43 PM, Barak Korren <bkorren@redhat.com> wrote:

...

oVirt system tests are indeed using nested virtualization, but it is done to run oVirt nested on top of a stand-alone KVM host, and not to run nested stuff on top of oVirt.

The steps Fred specified can be done manually on all hosts, but oVirt offers a slightly more automated alternative. Simply install the following vdsm hooks (available as packages) on all hosts:

vdsm-hook-macspoof vdsm-hook-nestedvt

And then reboot the hosts (You will need to put hosts into maintenance mode to do that).

Hello,

the packages you're referring are not available through yum on hosts. I've seen that only specific packages are included from repos, does these packages are excluded?

ovirt-node is designed to just update itself as a firmware. any additional packages is treated as 3rd party rpm which will be persisted on upgrade. In order to install the hooks on node you need to enable the ovirt repositories in /etc/yum.repos.d For installing the hooks on al new hosts during deploy you can do on the engine host / vm: # echo vdsm-hook-macspoof > /usr/share/ovirt-host-deploy/plugins/ovirt-host-deploy/vdsmhooks/packages.d/vdsm-hook-macspoof.centos # echo vdsm-hook-nestedvt > /usr/share/ovirt-host-deploy/plugins/ovirt-host-deploy/vdsmhooks/packages.d/vdsm-hook-nestedvt.centos And whenever you'll add a new node, those packages will be installed. Just remember to enable the repository before adding the new host to the engine. Packages and configuration will be persisted on upgrade.

Luca

-- "E' assurdo impiegare gli uomini di intelligenza eccellente per fare calcoli che potrebbero essere affidati a chiunque se si usassero delle macchine" Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)

"Internet è la più grande biblioteca del mondo. Ma il problema è che i libri sono tutti sparsi sul pavimento" John Allen Paulos, Matematico (1945-vivente)

Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , < lorenzetto.luca@gmail.com>

-- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com