Hi Francesco – I was using the latest oVirt Node ISO Image 4.4.10 (released on 3rd March), I believe this is a genuine bug in the oVirt Node ISO they have included libvirt 8! I reinstalled with the February release of oVirt Node ISO (same version 4.4.10) which has libvirt 7.10.0 and this has worked! So, my problem is resolved. I’ll look to raise a bug report when I get a minute. Cheers, Chris. From: Francesco Lorenzini <francesco(a)shellrent.com&gt; Sent: 15 March 2022 08:14 To: Christopher Law <chris(a)chrislaw.me>; Milan Zamazal <mzamazal(a)redhat.com&gt; Cc: francesco--- via Users <users(a)ovirt.org&gt; Subject: Re: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted Hi Chris (sorry for the previous mispel), I installed oVirt 4.4.8 on top on CentOS 8 (Stream and standard), never used Node ISO. Maybe enabling external repo? In a "test" server try to install the following rpm and then downgrade libvirt: http://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm Regards, Francesco Il 14/03/2022 18:31, Christopher Law ha scritto: Thanks Francesco, it looks like a fix has been put into oVirt 4.5 which is scheduled for general release on the 12th April. I’m using an oVirt Node ISO (4.4.10) install on the host are you doing the same or did you install oVirt on top of a standard centos install yourself? I did try a dnf downgrade libvirt but it said there were no previous packages available. Just doing a re-install so will try your provided commands in a moment. Cheers, Chris. From: Francesco Lorenzini <francesco@shellrent.com><mailto:francesco@shellrent.com> Sent: 14 March 2022 17:23 To: Christopher Law <chris@chrislaw.me><mailto:chris@chrislaw.me>; Milan Zamazal <mzamazal@redhat.com><mailto:mzamazal@redhat.com> Cc: francesco--- via Users <users@ovirt.org><mailto:users@ovirt.org> Subject: Re: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted Hi Crhis, I didn't resolve properly, I found that downgrading libvirt was the fastest workaround. Just downgrade libvirt via yum/dnf to to version 7.10. I added the downgrade in an Ansible task, if you are practical: - name: Ensure libvirt-7.10.0 is installed yum: name: libvirt-7.10.0 state: present update_cache: true allow_downgrade: true ignore_errors: true or via cli : yum install libvirt-7.10.0 Post dowgrade we performed a restart of vdsm (or super-vdsm, or both, I don't remember). The downgrade is quite safe, we didn't encounter any problem with existing hosts and new deployed one. Francesco Il 14/03/2022 15:58, Christopher Law ha scritto: Hi - Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm getting this issue. Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a fix. Also seen a fix applied here: https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b70110... but not sure if this has been released? What are my options, not quite sure how to downgrade libvirt in oVirt Node. I was planning on trying to install 4.4.9, but not sure if the ansible scripts will update it automatically when adding it to the cluster. Francesco - Did you get this resolved? Cheers, Chris. -----Original Message----- From: Milan Zamazal <mzamazal@redhat.com><mailto:mzamazal@redhat.com> Sent: 14 February 2022 18:04 To: Francesco Lorenzini <francesco@shellrent.com><mailto:francesco@shellrent.com> Cc: francesco--- via Users <users@ovirt.org><mailto:users@ovirt.org> Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted Francesco Lorenzini <francesco@shellrent.com><mailto:francesco@shellrent.com> writes: Hi Milan, thank you for your answer. So there is no other way/workaround? We must wait the fix in the engine and then upgrade? Maybe a downgrade of libvirt(?). I can't think about any other workaround, without modifying sources, than downgrading libvirt, until the fixed Engine is installed. I was looking up some config file in the host under /etc/libvirt and found the parameters vnc_password in qemu.conf file. I'm not sure that setting a password per host in this config file works, casue it is still passed via xml... In theory, you could set the default password there and remove passwords from the domain XMLs using Vdsm hooks. You would have to do it on all the hosts or handle migrations accordingly. Downgrading libvirt looks much easier. The default VNC password. Only 8 bytes are significant for # VNC passwords. This parameter is only used if the per-domain # XML config does not already provide a password. Francesco Il 14/02/2022 12:41, Milan Zamazal ha scritto: francesco--- via Users<users@ovirt.org><mailto:users@ovirt.org> writes: Hi all, I'm using websockify + noVNC for expose the vm console via browser getting the graphicsconsoles ticket via API. Everything works fine for every other host that I have (more than 200), the console works either via oVirt engine and via browser) but just for a single host (CentOS Stream release 8, oVirt 4.4.9) the console works only via engine but when I try the connection via browser I get the following error (vdsm log of the host): ERROR FINISH updateDevice error=unsupported configuration: VNC password is 12 characters long, only 8 permitted Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in method ret = func(*args, **kwargs) File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in updateDevice return self.vm.updateDevice(params) File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in updateDevice return self._updateGraphicsDevice(params) File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in _updateGraphicsDevice params['params'] File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in _setTicketForGraphicDev self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0) File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, in f ret = attr(*args, **kwargs) File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", line 131, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in updateDeviceFlags raise libvirtError('virDomainUpdateDeviceFlags() failed') libvirt.libvirtError: unsupported configuration: VNC password is 12 characters long, only 8 permitted The error is pretty much self explanatory but, I can't manage to figure out why only on this server Hi, this happens with libvirt 8.0. and I wonder if I can set the length of the generated vnc password somewhere. I don't think so, it must be fixed in Engine. See https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b7 01105f9e1066b09f for more details. Regards, Milan _______________________________________________ Users mailing list --users@ovirt.org<mailto:--users@ovirt.org> To unsubscribe send an email tousers-leave@ovirt.org<mailto:tousers-leave@ovirt.org> Privacy Statement:https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/messag e/XJMULDXFHBYK3GNICAJRASQCSLBIFJV7/ _______________________________________________ Users mailing list -- users@ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/CE3A2WTEHVE... _______________________________________________ Users mailing list -- users@ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ESU5O3JPYMO... -- -- [Shellrent - Il primo hosting italiano Security First] Francesco Lorenzini System Administrator & DevOps Engineer Shellrent Srl Via dell'Edilizia, 19 - 36100 Vicenza Tel. 0444321155<tel:+390444321155> _______________________________________________ Users mailing list -- users@ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/5DPNKIT6TEX... -- -- [Shellrent - Il primo hosting italiano Security First] Francesco Lorenzini System Administrator & DevOps Engineer Shellrent Srl Via dell'Edilizia, 19 - 36100 Vicenza Tel. 0444321155<tel:+390444321155>