[Users] Help on an almost migrated ovirt-engine
I need to migrate an ovirt-engine from an All-In-One (AIO) setup to a dedicated machine. So with an old mailing message I've tried to do it but not finished yet, that's why I ask for help. I've written a wiki page for the experience so that it becomes a howto which can be found here: http://www.ovirt.org/User:Adrian15/oVirt_engine_migration At the last step the one that finally starts ovirt-engine I've decided to ask help here just in case I was missing something important. So here are my doubts. * Original message that inspired the howto is here: http://www.mail-archive.com/users@ovirt.org/msg00670.html * What packages should I delete safely from an AIO setup so that it's just an hypervisor once I've migrate the ovirt-engine part? * Is the right way the one I've used to recreate the database? ** Origin pg_dump -U postgres engine | gzip > engine_db.gz ** Destination pg_dump -U postgres -s -f tempdb.dump engine dropdb -U postgres engine createdb -U postgres engine zcat engine_db.gz | psql -U postgres engine * Let's read: http://www.mail-archive.com/users@ovirt.org/msg00682.html : WRT certificates, note that hostname should nt change, or SSL will be invalidated. Did he mean the SSL when you connect via http or https to the manager which currently doesn't bother me? Or maybe the SSL to connect to other hosts and communicate to vdsm (sorry if I'm saying something nonsense. I don't understand oVirt architecture completely) which bothers me? * Certificates is: /etc/pki/ovirt-engine ? Something more? * Conf is: /etc/ovirt-engine ? Something more? Thank you! -- -- Adrián Gibanel I.T. Manager +34 675 683 301 www.btactic.com Ens podeu seguir a/Nos podeis seguir en: i Abans d´imprimir aquest missatge, pensa en el medi ambient. El medi ambient és cosa de tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio ambiente es cosa de todos. AVIS: El contingut d'aquest missatge i els seus annexos és confidencial. Si no en sou el destinatari, us fem saber que està prohibit utilitzar-lo, divulgar-lo i/o copiar-lo sense tenir l'autorització corresponent. Si heu rebut aquest missatge per error, us agrairem que ho feu saber immediatament al remitent i que procediu a destruir el missatge . AVISO: El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario, les hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la autorización correspondiente. Si han recibido este mensaje por error, les agradeceríamos que lo hagan saber inmediatamente al remitente y que procedan a destruir el mensaje .
On 01/22/2013 02:48 AM, Adrian Gibanel wrote:
I need to migrate an ovirt-engine from an All-In-One (AIO) setup to a dedicated machine.
So with an old mailing message I've tried to do it but not finished yet, that's why I ask for help.
I've written a wiki page for the experience so that it becomes a howto which can be found here:
http://www.ovirt.org/User:Adrian15/oVirt_engine_migration
At the last step the one that finally starts ovirt-engine I've decided to ask help here just in case I was missing something important.
So here are my doubts.
* Original message that inspired the howto is here: http://www.mail-archive.com/users@ovirt.org/msg00670.html * What packages should I delete safely from an AIO setup so that it's just an hypervisor once I've migrate the ovirt-engine part?
All the ovirt-engine-* packages can be safely deleted, they are not used by hypervisors. There are a lot of other packages that can be removed that are dependencies of ovirt-engine, like httpd, jboss-as and java-1.7.0-openjdk, and many of the dependencies that they bring, so a good way to start that cleanup is this: yum remove 'ovirt-engine-*' 'httpd' 'java-1.7.0-openjdk' 'jboss-as' That will remove more than 300 packages, as it will transitively include all the Java packages. If you want to do further cleanups you can take a look at the "package-cleanup" tool, but be careful or you may end up with an useless system.
* Is the right way the one I've used to recreate the database? ** Origin pg_dump -U postgres engine | gzip > engine_db.gz ** Destination pg_dump -U postgres -s -f tempdb.dump engine dropdb -U postgres engine createdb -U postgres engine zcat engine_db.gz | psql -U postgres engine
The default installation of ovirt-engine creates the "engine" database owned by the "engine" user, but you are creating it owned by "postgres" instead. I think this won't break anything, but if you want to create it exactly the same you can use the -O option of createdb: createdb -U postgres -O engine engine
* Let's read: http://www.mail-archive.com/users@ovirt.org/msg00682.html : WRT certificates, note that hostname should nt change, or SSL will be invalidated. Did he mean the SSL when you connect via http or https to the manager which currently doesn't bother me? Or maybe the SSL to connect to other hosts and communicate to vdsm (sorry if I'm saying something nonsense. I don't understand oVirt architecture completely) which bothers me? * Certificates is: /etc/pki/ovirt-engine ? Something more?
There is some information on how to change certificates here: http://lists.ovirt.org/pipermail/users/2012-October/004167.html It is not trivial, so better if you don't change the host name.
* Conf is: /etc/ovirt-engine ? Something more?
Yes, /etc/sysconfig/ovirt-engine, but you should be able to use the one generated during your new installation. The only difference will be the database password. -- Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta 3ºD, 28016 Madrid, Spain Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.
----- Mensaje original -----
De: "Juan Hernandez" <jhernand@redhat.com> Para: "Adrian Gibanel" <adrian.gibanel@btactic.com> CC: "users" <users@ovirt.org> Enviados: Martes, 22 de Enero 2013 9:40:29 Asunto: Re: [Users] Help on an almost migrated ovirt-engine
On 01/22/2013 02:48 AM, Adrian Gibanel wrote:
I need to migrate an ovirt-engine from an All-In-One (AIO) setup to a dedicated machine.
So with an old mailing message I've tried to do it but not finished yet, that's why I ask for help.
I've written a wiki page for the experience so that it becomes a howto which can be found here:
http://www.ovirt.org/User:Adrian15/oVirt_engine_migration
At the last step the one that finally starts ovirt-engine I've decided to ask help here just in case I was missing something important.
So here are my doubts.
* Original message that inspired the howto is here: http://www.mail-archive.com/users@ovirt.org/msg00670.html * What packages should I delete safely from an AIO setup so that it's just an hypervisor once I've migrate the ovirt-engine part?
yum remove 'ovirt-engine-*' 'httpd' 'java-1.7.0-openjdk' 'jboss-as'
I've updated the howto. Thank you!
* Is the right way the one I've used to recreate the database? ** Origin pg_dump -U postgres engine | gzip > engine_db.gz ** Destination pg_dump -U postgres -s -f tempdb.dump engine dropdb -U postgres engine createdb -U postgres engine zcat engine_db.gz | psql -U postgres engine
I think this won't break anything, but if you want to create it exactly the same you can use the -O option of createdb:
createdb -U postgres -O engine engine
I've finally come with: * Origin: pg_dump -U postgres engine | gzip > engine_db.gz * Destination: dropdb -U postgres engine createdb -U postgres -O engine engine zcat engine_db.gz | psql -U postgres engine The last command was run finally with postgres user because using engine user I had these warnings: WARNING: no privileges could be revoked for "public" REVOKE WARNING: no privileges could be revoked for "public" REVOKE WARNING: no privileges were granted for "public" GRANT WARNING: no privileges were granted for "public" GRANT
* Let's read: http://www.mail-archive.com/users@ovirt.org/msg00682.html : WRT certificates, note that hostname should nt change, or SSL will be invalidated. Did he mean the SSL when you connect via http or https to the manager which currently doesn't bother me? Or maybe the SSL to connect to other hosts and communicate to vdsm (sorry if I'm saying something nonsense. I don't understand oVirt architecture completely) which bothers me? * Certificates is: /etc/pki/ovirt-engine ? Something more?
There is some information on how to change certificates here:
http://lists.ovirt.org/pipermail/users/2012-October/004167.html
It is not trivial, so better if you don't change the host name.
Can you please ellaborate why I should make sure that all these certificates know about the new host name? If this was a plain ssh key it would just work by copying and pasting its private key file. That's why my doubts. I don't mind if https at the browser complains about having one certificate for one domain and being another one. Maybe communication with vdsm on hypervisors will not work at all?
* Conf is: /etc/ovirt-engine ? Something more?
Yes, /etc/sysconfig/ovirt-engine, but you should be able to use the one generated during your new installation. The only difference will be the database password. Ok. I'll check that later. I understand that if no difference is found apart from the database password then no need to modify it in the destination.
Thank you! -- -- Adrián Gibanel I.T. Manager +34 675 683 301 www.btactic.com Ens podeu seguir a/Nos podeis seguir en: i Abans d´imprimir aquest missatge, pensa en el medi ambient. El medi ambient és cosa de tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio ambiente es cosa de todos. AVIS: El contingut d'aquest missatge i els seus annexos és confidencial. Si no en sou el destinatari, us fem saber que està prohibit utilitzar-lo, divulgar-lo i/o copiar-lo sense tenir l'autorització corresponent. Si heu rebut aquest missatge per error, us agrairem que ho feu saber immediatament al remitent i que procediu a destruir el missatge . AVISO: El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario, les hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la autorización correspondiente. Si han recibido este mensaje por error, les agradeceríamos que lo hagan saber inmediatamente al remitente y que procedan a destruir el mensaje .
On Tue, Jan 22, 2013 at 10:47 AM, Adrian Gibanel wrote:
I've finally come with:
* Origin: pg_dump -U postgres engine | gzip > engine_db.gz * Destination: dropdb -U postgres engine createdb -U postgres -O engine engine zcat engine_db.gz | psql -U postgres engine
In another thread regarding all-in-one db problems I had (around 29/12/12), Doron came to tell Backup to a file called mybackup may be created by: - cd to /usr/share/ovirt-engine/dbscripts - ./backup.sh -u postgres -f mybackup .. Just in case you ever wish to use the backupfile, us this procedure: - cd to /usr/share/ovirt-engine/dbscripts - ./restore.sh -u postgres -f mybackup -r and I successfully tested it on the same host. I think it could be done the same with the second part on the new host... Gianluca
------=_Part_390_9523072.1358855957618 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I've updated the howto with your instructions. I prefer the most standard o= Virt instructions. If there are backup and restore scripts it's because of = there's a good reason.=20 In my oVirt 3.1 installation backup.sh didn't seem to have an -f option so = I've done it just with the default filename.=20 I've also made a reference to oVirt 3.2 -f option.=20 Thank you!=20 ----- Mensaje original -----
De: "Gianluca Cecchi" <gianluca.cecchi@gmail.com> Para: "Adrian Gibanel" <adrian.gibanel@btactic.com> CC: "users" <users@ovirt.org> Enviados: Martes, 22 de Enero 2013 11:03:49 Asunto: Re: [Users] Help on an almost migrated ovirt-engine
On Tue, Jan 22, 2013 at 10:47 AM, Adrian Gibanel wrote:
I've finally come with:
In another thread regarding all-in-one db problems I had (around 29/12/12), Doron came to tell
Backup to a file called mybackup may be created by: - cd to /usr/share/ovirt-engine/dbscripts - ./backup.sh -u postgres -f mybackup
..
Just in case you ever wish to use the backupfile, us this procedure: - cd to /usr/share/ovirt-engine/dbscripts - ./restore.sh -u postgres -f mybackup -r
and I successfully tested it on the same host. I think it could be done the same with the second part on the new host...
Gianluca
--=20 Adri=C3=A1n Gibanel=20 I.T. Manager=20 +34 675 683 301=20 www.btactic.com=20 Ens podeu seguir a/Nos podeis seguir en:=20 i=20 Abans d=C2=B4imprimir aquest missatge, pensa en el medi ambient. El medi am= bient =C3=A9s cosa de tothom. / Antes de imprimir el mensaje piensa en el m= edio ambiente. El medio ambiente es cosa de todos.=20 AVIS:=20 El contingut d'aquest missatge i els seus annexos =C3=A9s confidencial. Si = no en sou el destinatari, us fem saber que est=C3=A0 prohibit utilitzar-lo,= divulgar-lo i/o copiar-lo sense tenir l'autoritzaci=C3=B3 corresponent. Si= heu rebut aquest missatge per error, us agrairem que ho feu saber immediat= ament al remitent i que procediu a destruir el missatge .=20 AVISO:=20 El contenido de este mensaje y de sus anexos es confidencial. Si no es el d= estinatario, les hacemos saber que est=C3=A1 prohibido utilizarlo, divulgar= lo y/o copiarlo sin tener la autorizaci=C3=B3n correspondiente. Si han reci= bido este mensaje por error, les agradecer=C3=ADamos que lo hagan saber inm= ediatamente al remitente y que procedan a destruir el mensaje .=20 ------=_Part_390_9523072.1358855957618 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><= div style=3D'font-family: arial,helvetica,sans-serif; font-size: 10pt; colo= r: #000000'>I've updated the howto with your instructions. I prefer the mos= t standard oVirt instructions. If there are backup and restore scripts it's= because of there's a good reason.<br><br>In my oVirt 3.1 installation back= up.sh didn't seem to have an -f option so I've done it just with the defaul= t filename.<br>I've also made a reference to oVirt 3.2 -f option.<br><br>Th= ank you!<br><hr id=3D"zwchr"><blockquote style=3D"border-left:2px solid rgb= (16, 16, 255);margin-left:5px;padding-left:5px;color:#000;font-weight:norma= l;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-s= erif;font-size:12pt;"><b>De: </b>"Gianluca Cecchi" <gianluca.cecchi@gmai= l.com><br><b>Para: </b>"Adrian Gibanel" <adrian.gibanel@btactic.com&g= t;<br><b>CC: </b>"users" <users@ovirt.org><br><b>Enviados: </b>Martes= , 22 de Enero 2013 11:03:49<br><b>Asunto: </b>Re: [Users] Help on an almost= migrated ovirt-engine<br><br>On Tue, Jan 22, 2013 at 10:47 AM, Adrian Giba= nel wrote:<br>> I've finally come with:<br><br>In another thread regardi= ng all-in-one db problems I had (around<br>29/12/12), Doron came to tell<br=
<br>Backup to a file called mybackup may be created by:<br>- cd to /usr/sh= are/ovirt-engine/dbscripts<br>- ./backup.sh -u postgres -f mybackup<br><br>= ..<br><br>Just in case you ever wish to use the backupfile, us this procedu= re:<br>- cd to /usr/share/ovirt-engine/dbscripts<br>- ./restore.sh -u postg= res -f mybackup -r<br><br>and I successfully tested it on the same host.<br= I think it could be done the same with the second part on the new host...<= br><br>Gianluca<br></blockquote><br><br><br>-- <br><div><span name=3D"x"></= span><font style=3D"font-weight: bold;" size=3D"3"><a style=3D"color: rgb(0= , 0, 0);" href=3D"http://www.btactic.com/"><span id=3D"DWT100"><font class= =3D"Apple-style-span" face=3D"verdana, helvetica, sans-serif"><span class= =3D"Apple-style-span" style=3D"background-color: rgb(255, 255, 255);"></spa= n></font></span></a></font><font style=3D"font-family: 'Times New Roman';" =
color=3D"#5f5f5f" face=3D"Arial" size=3D"1"><font size=3D"3"><span style=3D= "font-family: verdana,helvetica,sans-serif; color: rgb(0, 0, 0);"><font sty= le=3D"font-family: helvetica;" size=3D"2"><strong>Adri=C3=A1n Gibanel</stro= ng><br>I.T. Manager<br><br>+34 675 683 301<br><a href=3D"http://btactic.com= /">www.btactic.com</a></font><br><br></span></font></font><font color=3D"#0= 08000" face=3D"Arial" size=3D"1"><img src=3D"http://www.btactic.com/signatu= rabtacticmail/btacticsignature.png" style=3D"border-width: 0px;"><br></font= ><font class=3D"Apple-style-span" face=3D"Arial"><b><span class=3D"Apple-st= yle-span" style=3D"font-family: Verdana; font-weight: normal;"><span id=3D"= bc4bed34-88ab-466b-a731-c40f5c09ab6c"><font color=3D"#5f5f5f" face=3D"Arial= " size=3D"1"><br>Ens podeu seguir a/Nos podeis seguir en:<br> <br> </font></span><a href=3D"http://www.facebook.com/pages/btactic/118651634826= 400?v=3Dapp_9953271133"><img style=3D"border: 0pt none;" src=3D"http://www.= btactic.com/wp-content/themes/btactic/img/facebookfoot.jpg"></a> i <a href= =3D"http://twitter.com/btactic"><img style=3D"border: 0pt none;" src=3D"htt= p://www.btactic.com/wp-content/themes/btactic/img/twitterfoot.jpg"></a></sp= an></b></font><br><font color=3D"#008000" face=3D"Arial" size=3D"1"><br></f= ont><div><font color=3D"#008000" face=3D"Arial" size=3D"1">Abans d=C2=B4imp= rimir aquest missatge, pensa en el medi ambient. El medi ambient =C3=A9s cosa de= =20 tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio=20 ambiente es cosa de todos. </font><font color=3D"#5f5f5f" face=3D"Arial" size=3D"1">= <br> <br> AVIS: <br> El contingut d'aquest missatge i els seus annexos =C3=A9s confidencial. Si = no en sou el destinatari, us fem saber que est=C3=A0 prohibit utilitzar-lo,=20 divulgar-lo i/o copiar-lo sense tenir l'autoritzaci=C3=B3 corresponent. Si heu rebut=20 aquest missatge per error, us agrairem que ho feu saber immediatament <span class= =3D"Object" id=3D"OBJ_PREFIX_DWT103">al remitent i que procediu a destruir el missatge</span>.<br> <br> AVISO:<br> El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario, les hacemos saber que est=C3=A1 prohibido utilizarlo,=20 divulgarlo y/o copiarlo sin tener la autorizaci=C3=B3n correspondiente. Si han recibid= o este mensaje por error, les agradecer=C3=ADamos que lo hagan saber=20 inmediatamente <span class=3D"Object" id=3D"OBJ_PREFIX_DWT104">al remitente y que procedan= a destruir el mensaje</span>.</font>
</div><span name=3D"x"></span><br></div></div></body></html> ------=_Part_390_9523072.1358855957618--
A happy update on my ovirt-engine migration quest. I've finally convinced myself that I had to change oVirt-engine hostname with all these certificate instructions that jhernand mentioned. My doubts are about the passwords mentioned in: http://wiki.ovirt.org/How_to_change_engine_host_name Are you supposed to change them? Or some of them are somehow default oVirt passwords? So I've finally do it. oVirt-engine seems to find again all its hosts. I haven't tried to interact with virtual machines (too late right now here) but everything seems ok. The oVirt engine migration howto is found here: http://www.ovirt.org/User:Adrian15/oVirt_engine_migration The only thing that bothers me is finding: WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-6) calling GetConfigurationValueQuery (SearchResultsLimit) with null version, using default general for version at engine.log. It might have been always there in the OldAIO but just noticed right now? Should I bother? Some thoughts: * An extra step that nobody predicted was opening ports so that vdsm, libvirt tls, guest consoles, migration and snmp were available. It would seem AIO firewall setup doesn't open them by default and I understand it why... because it's locally, although not opening migration ports makes me think if we cannot achieve migration on default AIO installation. Maybe it's a bug on the all-in-one script that prepares the engine-setup execution? * As I've commented I'm glad that oVirt 3.2 database dump script let's you select a file and doesn't save a fixed filename one. Feedback is welcome so that the wiki page can be improved. Maybe someone can rewrite it to adapt it to official oVirt language and official oVirt wiki style. ----- Mensaje original -----
De: "Adrian Gibanel" <adrian.gibanel@btactic.com> Para: "users" <users@ovirt.org> CC: "Itamar Heim" <iheim@redhat.com>, dfediuck@redhat.com Enviados: Martes, 22 de Enero 2013 2:48:47 Asunto: Help on an almost migrated ovirt-engine
I need to migrate an ovirt-engine from an All-In-One (AIO) setup to a dedicated machine.
So with an old mailing message I've tried to do it but not finished yet, that's why I ask for help.
I've written a wiki page for the experience so that it becomes a howto which can be found here:
-- -- Adrián Gibanel I.T. Manager +34 675 683 301 www.btactic.com Ens podeu seguir a/Nos podeis seguir en: i Abans d´imprimir aquest missatge, pensa en el medi ambient. El medi ambient és cosa de tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio ambiente es cosa de todos. AVIS: El contingut d'aquest missatge i els seus annexos és confidencial. Si no en sou el destinatari, us fem saber que està prohibit utilitzar-lo, divulgar-lo i/o copiar-lo sense tenir l'autorització corresponent. Si heu rebut aquest missatge per error, us agrairem que ho feu saber immediatament al remitent i que procediu a destruir el missatge . AVISO: El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario, les hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la autorización correspondiente. Si han recibido este mensaje por error, les agradeceríamos que lo hagan saber inmediatamente al remitente y que procedan a destruir el mensaje .
participants (3)
-
Adrian Gibanel -
Gianluca Cecchi -
Juan Hernandez