4:48 a.m.
I need to migrate an ovirt-engine from an All-In-One (AIO) setup to a dedicated machine.
So with an old mailing message I've tried to do it but not finished yet, that's
why I ask for help.
I've written a wiki page for the experience so that it becomes a howto which can be
found here:
http://www.ovirt.org/User:Adrian15/oVirt_engine_migration
At the last step the one that finally starts ovirt-engine I've decided to ask help
here just in case I was missing something important.
So here are my doubts.
* Original message that inspired the howto is here:
http://www.mail-archive.com/users@ovirt.org/msg00670.html
* What packages should I delete safely from an AIO setup so that it's just an
hypervisor once I've migrate the ovirt-engine part?
* Is the right way the one I've used to recreate the database?
** Origin
pg_dump -U postgres engine | gzip > engine_db.gz
** Destination
pg_dump -U postgres -s -f tempdb.dump engine
dropdb -U postgres engine
createdb -U postgres engine
zcat engine_db.gz | psql -U postgres engine
* Let's read: http://www.mail-archive.com/users@ovirt.org/msg00682.html : WRT
certificates, note that hostname should nt change, or SSL will be invalidated.
Did he mean the SSL when you connect via http or https to the manager which currently
doesn't bother me?
Or maybe the SSL to connect to other hosts and communicate to vdsm (sorry if I'm
saying something nonsense. I don't understand oVirt architecture completely) which
bothers me?
* Certificates is: /etc/pki/ovirt-engine ? Something more?
* Conf is: /etc/ovirt-engine ? Something more?
Thank you!
--
--
Adrián Gibanel
I.T. Manager
+34 675 683 301
www.btactic.com
Ens podeu seguir a/Nos podeis seguir en:
i
Abans d´imprimir aquest missatge, pensa en el medi ambient. El medi ambient és cosa de
tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio ambiente es
cosa de todos.
AVIS:
El contingut d'aquest missatge i els seus annexos és confidencial. Si no en sou el
destinatari, us fem saber que està prohibit utilitzar-lo, divulgar-lo i/o copiar-lo sense
tenir l'autorització corresponent. Si heu rebut aquest missatge per error, us agrairem
que ho feu saber immediatament al remitent i que procediu a destruir el missatge .
AVISO:
El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario,
les hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la
autorización correspondiente. Si han recibido este mensaje por error, les agradeceríamos
que lo hagan saber inmediatamente al remitente y que procedan a destruir el mensaje .
11:40 a.m.
On 01/22/2013 02:48 AM, Adrian Gibanel wrote:
I need to migrate an ovirt-engine from an All-In-One (AIO) setup to a
dedicated machine.
So with an old mailing message I've tried to do it but not finished yet, that's
why I ask for help.
I've written a wiki page for the experience so that it becomes a howto which can be
found here:
http://www.ovirt.org/User:Adrian15/oVirt_engine_migration
At the last step the one that finally starts ovirt-engine I've decided to ask help
here just in case I was missing something important.
So here are my doubts.
* Original message that inspired the howto is here:
http://www.mail-archive.com/users@ovirt.org/msg00670.html
* What packages should I delete safely from an AIO setup so that it's just an
hypervisor once I've migrate the ovirt-engine part?
All the ovirt-engine-* packages can be safely deleted, they are not used
by hypervisors.
There are a lot of other packages that can be removed that are
dependencies of ovirt-engine, like httpd, jboss-as and
java-1.7.0-openjdk, and many of the dependencies that they bring, so a
good way to start that cleanup is this:
yum remove 'ovirt-engine-*' 'httpd' 'java-1.7.0-openjdk'
'jboss-as'
That will remove more than 300 packages, as it will transitively include
all the Java packages. If you want to do further cleanups you can take a
look at the "package-cleanup" tool, but be careful or you may end up
with an useless system.
* Is the right way the one I've used to recreate the database?
** Origin
pg_dump -U postgres engine | gzip > engine_db.gz
** Destination
pg_dump -U postgres -s -f tempdb.dump engine
dropdb -U postgres engine
createdb -U postgres engine
zcat engine_db.gz | psql -U postgres engine
The default installation of ovirt-engine creates the "engine" database
owned by the "engine" user, but you are creating it owned by
"postgres"
instead. I think this won't break anything, but if you want to create it
exactly the same you can use the -O option of createdb:
createdb -U postgres -O engine engine
* Let's read: http://www.mail-archive.com/users@ovirt.org/msg00682.html : WRT
certificates, note that hostname should nt change, or SSL will be invalidated.
Did he mean the SSL when you connect via http or https to the manager which currently
doesn't bother me?
Or maybe the SSL to connect to other hosts and communicate to vdsm (sorry if I'm
saying something nonsense. I don't understand oVirt architecture completely) which
bothers me?
* Certificates is: /etc/pki/ovirt-engine ? Something more?
There is some information on how to change certificates here:
http://lists.ovirt.org/pipermail/users/2012-October/004167.html
It is not trivial, so better if you don't change the host name.
* Conf is: /etc/ovirt-engine ? Something more?
Yes, /etc/sysconfig/ovirt-engine, but you should be able to use the one
generated during your new installation. The only difference will be the
database password.
--
Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
3ºD, 28016 Madrid, Spain
Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.
12:47 p.m.
----- Mensaje original -----
De: "Juan Hernandez" <jhernand(a)redhat.com>
Para: "Adrian Gibanel" <adrian.gibanel(a)btactic.com>
CC: "users" <users(a)ovirt.org>
Enviados: Martes, 22 de Enero 2013 9:40:29
Asunto: Re: [Users] Help on an almost migrated ovirt-engine
On 01/22/2013 02:48 AM, Adrian Gibanel wrote:
> I need to migrate an ovirt-engine from an All-In-One (AIO) setup to
> a dedicated machine.
>
> So with an old mailing message I've tried to do it but not finished
> yet, that's why I ask for help.
>
> I've written a wiki page for the experience so that it becomes a
> howto which can be found here:
>
> http://www.ovirt.org/User:Adrian15/oVirt_engine_migration
>
> At the last step the one that finally starts ovirt-engine I've
> decided to ask help here just in case I was missing something
> important.
>
> So here are my doubts.
>
> * Original message that inspired the howto is here:
> http://www.mail-archive.com/users@ovirt.org/msg00670.html
> * What packages should I delete safely from an AIO setup so that
> it's just an hypervisor once I've migrate the ovirt-engine part?
yum remove 'ovirt-engine-*' 'httpd'
'java-1.7.0-openjdk' 'jboss-as'
I've updated the howto. Thank you!
> * Is the right way the one I've used to recreate the
database?
> ** Origin
> pg_dump -U postgres engine | gzip > engine_db.gz
> ** Destination
> pg_dump -U postgres -s -f tempdb.dump engine
> dropdb -U postgres engine
> createdb -U postgres engine
> zcat engine_db.gz | psql -U postgres engine
I think this won't break anything, but if you want to create
it
exactly the same you can use the -O option of createdb:
createdb -U postgres -O engine engine
I've finally come with:
* Origin:
pg_dump -U postgres engine | gzip > engine_db.gz
* Destination:
dropdb -U postgres engine
createdb -U postgres -O engine engine
zcat engine_db.gz | psql -U postgres engine
The last command was run finally with postgres user because using engine user I had these
warnings:
WARNING: no privileges could be revoked for "public"
REVOKE
WARNING: no privileges could be revoked for "public"
REVOKE
WARNING: no privileges were granted for "public"
GRANT
WARNING: no privileges were granted for "public"
GRANT
> * Let's read:
> http://www.mail-archive.com/users@ovirt.org/msg00682.html : WRT
> certificates, note that hostname should nt change, or SSL will be
> invalidated.
> Did he mean the SSL when you connect via http or https to the
> manager which currently doesn't bother me?
> Or maybe the SSL to connect to other hosts and communicate to vdsm
> (sorry if I'm saying something nonsense. I don't understand oVirt
> architecture completely) which bothers me?
> * Certificates is: /etc/pki/ovirt-engine ? Something more?
There is some information on how to change certificates here:
It is not trivial, so better if you don't change the host name.
Can you please ellaborate why I should make sure that all these certificates know about
the new host name?
If this was a plain ssh key it would just work by copying and pasting its private key
file. That's why my doubts.
I don't mind if https at the browser complains about having one certificate for one
domain and being another one.
Maybe communication with vdsm on hypervisors will not work at all?
> * Conf is: /etc/ovirt-engine ? Something more?
Yes, /etc/sysconfig/ovirt-engine, but you should be able to use the
one
generated during your new installation. The only difference will be
the
database password.
Ok. I'll check that later. I understand that if no
difference is found apart from the database password then no need to modify it in the
destination.
Thank you!
--
--
Adrián Gibanel
I.T. Manager
+34 675 683 301
www.btactic.com
Ens podeu seguir a/Nos podeis seguir en:
i
Abans d´imprimir aquest missatge, pensa en el medi ambient. El medi ambient és cosa de
tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio ambiente es
cosa de todos.
AVIS:
El contingut d'aquest missatge i els seus annexos és confidencial. Si no en sou el
destinatari, us fem saber que està prohibit utilitzar-lo, divulgar-lo i/o copiar-lo sense
tenir l'autorització corresponent. Si heu rebut aquest missatge per error, us agrairem
que ho feu saber immediatament al remitent i que procediu a destruir el missatge .
AVISO:
El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario,
les hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la
autorización correspondiente. Si han recibido este mensaje por error, les agradeceríamos
que lo hagan saber inmediatamente al remitente y que procedan a destruir el mensaje .
1:03 p.m.
On Tue, Jan 22, 2013 at 10:47 AM, Adrian Gibanel wrote:
I've finally come with:
* Origin:
pg_dump -U postgres engine | gzip > engine_db.gz
* Destination:
dropdb -U postgres engine
createdb -U postgres -O engine engine
zcat engine_db.gz | psql -U postgres engine
In another thread regarding all-in-one db problems I had (around
29/12/12), Doron came to tell
Backup to a file called mybackup may be created by:
- cd to /usr/share/ovirt-engine/dbscripts
- ./backup.sh -u postgres -f mybackup
..
Just in case you ever wish to use the backupfile, us this procedure:
- cd to /usr/share/ovirt-engine/dbscripts
- ./restore.sh -u postgres -f mybackup -r
and I successfully tested it on the same host.
I think it could be done the same with the second part on the new host...
Gianluca
2:59 p.m.
------=_Part_390_9523072.1358855957618
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
I've updated the howto with your instructions. I prefer the most standard o=
Virt instructions. If there are backup and restore scripts it's because of =
there's a good reason.=20
In my oVirt 3.1 installation backup.sh didn't seem to have an -f option so =
I've done it just with the default filename.=20
I've also made a reference to oVirt 3.2 -f option.=20
Thank you!=20
----- Mensaje original -----
De: "Gianluca Cecchi" <gianluca.cecchi(a)gmail.com>
Para: "Adrian Gibanel" <adrian.gibanel(a)btactic.com>
CC: "users" <users(a)ovirt.org>
Enviados: Martes, 22 de Enero 2013 11:03:49
Asunto: Re: [Users] Help on an almost migrated ovirt-engine
On Tue, Jan 22, 2013 at 10:47 AM, Adrian Gibanel wrote:
> I've finally come with:
In another thread regarding all-in-one db problems I had (around
29/12/12), Doron came to tell
Backup to a file called mybackup may be created by:
- cd to /usr/share/ovirt-engine/dbscripts
- ./backup.sh -u postgres -f mybackup
..
Just in case you ever wish to use the backupfile, us this procedure:
- cd to /usr/share/ovirt-engine/dbscripts
- ./restore.sh -u postgres -f mybackup -r
and I successfully tested it on the same host.
I think it could be done the same with the second part on the new
host...
Gianluca
--=20
Adri=C3=A1n Gibanel=20
I.T. Manager=20
+34 675 683 301=20
www.btactic.com=20
Ens podeu seguir a/Nos podeis seguir en:=20
i=20
Abans d=C2=B4imprimir aquest missatge, pensa en el medi ambient. El medi am=
bient =C3=A9s cosa de tothom. / Antes de imprimir el mensaje piensa en el m=
edio ambiente. El medio ambiente es cosa de todos.=20
AVIS:=20
El contingut d'aquest missatge i els seus annexos =C3=A9s confidencial. Si =
no en sou el destinatari, us fem saber que est=C3=A0 prohibit utilitzar-lo,=
divulgar-lo i/o copiar-lo sense tenir l'autoritzaci=C3=B3 corresponent. Si=
heu rebut aquest missatge per error, us agrairem que ho feu saber immediat=
ament al remitent i que procediu a destruir el missatge .=20
AVISO:=20
El contenido de este mensaje y de sus anexos es confidencial. Si no es el d=
estinatario, les hacemos saber que est=C3=A1 prohibido utilizarlo, divulgar=
lo y/o copiarlo sin tener la autorizaci=C3=B3n correspondiente. Si han reci=
bido este mensaje por error, les agradecer=C3=ADamos que lo hagan saber inm=
ediatamente al remitente y que procedan a destruir el mensaje .=20
------=_Part_390_9523072.1358855957618
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html><head><style type=3D'text/css'>p { margin: 0;
}</style></head><body><=
div style=3D'font-family: arial,helvetica,sans-serif; font-size: 10pt; colo=
r: #000000'>I've updated the howto with your instructions. I prefer the mos=
t standard oVirt instructions. If there are backup and restore scripts it's=
because of there's a good reason.<br><br>In my oVirt 3.1 installation
back=
up.sh didn't seem to have an -f option so I've done it just with the defaul=
t filename.<br>I've also made a reference to oVirt 3.2 -f
option.<br><br>Th=
ank you!<br><hr id=3D"zwchr"><blockquote
style=3D"border-left:2px solid rgb=
(16, 16, 255);margin-left:5px;padding-left:5px;color:#000;font-weight:norma=
l;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-s=
erif;font-size:12pt;"><b>De: </b>"Gianluca Cecchi"
<gianluca.cecchi@gmai=
l.com><br><b>Para: </b>"Adrian Gibanel"
&lt;adrian.gibanel(a)btactic.com&g=
t;<br><b>CC: </b>"users"
&lt;users(a)ovirt.org&gt;<br><b>Enviados: </b>Martes=
, 22 de Enero 2013 11:03:49<br><b>Asunto: </b>Re: [Users] Help on an
almost=
migrated ovirt-engine<br><br>On Tue, Jan 22, 2013 at 10:47 AM, Adrian Giba=
nel wrote:<br>> I've finally come with:<br><br>In another
thread regardi=
ng all-in-one db problems I had (around<br>29/12/12), Doron came to tell<br=
<br>Backup to a file called mybackup may be created
by:<br>- cd to /usr/sh=
are/ovirt-engine/dbscripts<br>- ./backup.sh -u
postgres -f mybackup<br><br>=
..<br><br>Just in case you ever wish to use the backupfile, us this procedu=
re:<br>- cd to /usr/share/ovirt-engine/dbscripts<br>- ./restore.sh -u postg=
res -f mybackup -r<br><br>and I successfully tested it on the same
host.<br=
I think it could be done the same with the second part on the new
host...<=
br><br>Gianluca<br></blockquote><br><br><br>--
<br><div><span name=3D"x"></=
span><font style=3D"font-weight: bold;" size=3D"3"><a
style=3D"color: rgb(0=
, 0, 0);" href=3D"http://www.btactic.com/"><span
id=3D"DWT100"><font class=
=3D"Apple-style-span" face=3D"verdana, helvetica,
sans-serif"><span class=
=3D"Apple-style-span" style=3D"background-color: rgb(255, 255,
255);"></spa=
n></font></span></a></font><font style=3D"font-family:
'Times New Roman';" =
color=3D"#5f5f5f" face=3D"Arial" size=3D"1"><font
size=3D"3"><span style=3D=
"font-family: verdana,helvetica,sans-serif; color: rgb(0, 0, 0);"><font
sty=
le=3D"font-family: helvetica;" size=3D"2"><strong>Adri=C3=A1n
Gibanel</stro=
ng><br>I.T. Manager<br><br>+34 675 683 301<br><a
href=3D"http://btactic.com=
/">www.btactic.com</a></font><br><br></span></font></font><font
color=3D"#0=
08000" face=3D"Arial" size=3D"1"><img
src=3D"http://www.btactic.com/signatu=
rabtacticmail/btacticsignature.png" style=3D"border-width:
0px;"><br></font=
<font class=3D"Apple-style-span"
face=3D"Arial"><b><span class=3D"Apple-st=
yle-span"
style=3D"font-family: Verdana; font-weight: normal;"><span id=3D"=
bc4bed34-88ab-466b-a731-c40f5c09ab6c"><font color=3D"#5f5f5f"
face=3D"Arial=
" size=3D"1"><br>Ens podeu seguir a/Nos podeis seguir
en:<br>
<br>
</font></span><a
href=3D"http://www.facebook.com/pages/btactic/118651634826=
400?v=3Dapp_9953271133"><img style=3D"border: 0pt none;"
src=3D"http://www.=
btactic.com/wp-content/themes/btactic/img/facebookfoot.jpg"></... i <a
href=
=3D"http://twitter.com/btactic"><img style=3D"border: 0pt none;"
src=3D"htt=
p://www.btactic.com/wp-content/themes/btactic/img/twitterfoot.jpg"&g...
an></b></font><br><font color=3D"#008000"
face=3D"Arial" size=3D"1"><br></f=
ont><div><font color=3D"#008000" face=3D"Arial"
size=3D"1">Abans d=C2=B4imp=
rimir
aquest missatge, pensa en el medi ambient. El medi ambient =C3=A9s cosa de=
=20
tothom.
/ Antes de imprimir el mensaje piensa en el medio ambiente. El medio=20
ambiente
es cosa de todos. </font><font color=3D"#5f5f5f"
face=3D"Arial" size=3D"1">=
<br>
<br>
AVIS: <br>
El contingut d'aquest missatge i els seus annexos =C3=A9s confidencial. Si =
no
en sou el destinatari, us fem saber que est=C3=A0 prohibit utilitzar-lo,=20
divulgar-lo
i/o copiar-lo sense tenir l'autoritzaci=C3=B3 corresponent. Si heu rebut=20
aquest
missatge per error, us agrairem que ho feu saber immediatament <span class=
=3D"Object" id=3D"OBJ_PREFIX_DWT103">al remitent
i que procediu a destruir el missatge</span>.<br>
<br>
AVISO:<br>
El contenido de este mensaje y de sus anexos es confidencial. Si no es
el destinatario, les hacemos saber que est=C3=A1 prohibido utilizarlo,=20
divulgarlo
y/o copiarlo sin tener la autorizaci=C3=B3n correspondiente. Si han recibid=
o
este mensaje por error, les agradecer=C3=ADamos que lo hagan saber=20
inmediatamente
<span class=3D"Object" id=3D"OBJ_PREFIX_DWT104">al remitente y
que procedan=
a
destruir el mensaje</span>.</font>
</div><span
name=3D"x"></span><br></div></div></body></html>
------=_Part_390_9523072.1358855957618--
5:02 a.m.
New subject: [Users] oVirt engine migration howto and some doubts
A happy update on my ovirt-engine migration quest.
I've finally convinced myself that I had to change oVirt-engine hostname with all
these certificate instructions that jhernand mentioned.
My doubts are about the passwords mentioned in:
http://wiki.ovirt.org/How_to_change_engine_host_name
Are you supposed to change them? Or some of them are somehow default oVirt passwords?
So I've finally do it. oVirt-engine seems to find again all its hosts. I haven't
tried to interact with virtual machines (too late right now here) but everything seems ok.
The oVirt engine migration howto is found here:
http://www.ovirt.org/User:Adrian15/oVirt_engine_migration
The only thing that bothers me is finding:
WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-6) calling
GetConfigurationValueQuery (SearchResultsLimit) with null version, using default general
for version
at engine.log. It might have been always there in the OldAIO but just noticed right now?
Should I bother?
Some thoughts:
* An extra step that nobody predicted was opening ports so that vdsm, libvirt tls, guest
consoles, migration and snmp were available. It would seem AIO firewall setup doesn't
open them by default and I understand it why... because it's locally, although not
opening migration ports makes me think if we cannot achieve migration on default AIO
installation. Maybe it's a bug on the all-in-one script that prepares the engine-setup
execution?
* As I've commented I'm glad that oVirt 3.2 database dump script let's you
select a file and doesn't save a fixed filename one.
Feedback is welcome so that the wiki page can be improved. Maybe someone can rewrite it to
adapt it to official oVirt language and official oVirt wiki style.
----- Mensaje original -----
De: "Adrian Gibanel" <adrian.gibanel(a)btactic.com>
Para: "users" <users(a)ovirt.org>
CC: "Itamar Heim" <iheim(a)redhat.com>, dfediuck(a)redhat.com
Enviados: Martes, 22 de Enero 2013 2:48:47
Asunto: Help on an almost migrated ovirt-engine
I need to migrate an ovirt-engine from an All-In-One (AIO) setup to
a
dedicated machine.
So with an old mailing message I've tried to do it but not
finished
yet, that's why I ask for help.
I've written a wiki page for the experience so that it becomes a
howto which can be found here:
--
--
Adrián Gibanel
I.T. Manager
+34 675 683 301
www.btactic.com
Ens podeu seguir a/Nos podeis seguir en:
i
Abans d´imprimir aquest missatge, pensa en el medi ambient. El medi ambient és cosa de
tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio ambiente es
cosa de todos.
AVIS:
El contingut d'aquest missatge i els seus annexos és confidencial. Si no en sou el
destinatari, us fem saber que està prohibit utilitzar-lo, divulgar-lo i/o copiar-lo sense
tenir l'autorització corresponent. Si heu rebut aquest missatge per error, us agrairem
que ho feu saber immediatament al remitent i que procediu a destruir el missatge .
AVISO:
El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario,
les hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la
autorización correspondiente. Si han recibido este mensaje por error, les agradeceríamos
que lo hagan saber inmediatamente al remitente y que procedan a destruir el mensaje .
4321
days inactive
4322
days old
5 comments
3 participants
participants (3)
-
Adrian Gibanel -
Gianluca Cecchi -
Juan Hernandez