Uploading disk images (oVirt 4.3.3.1)
Hi, I have an issue while trying to upload disk images thru the Web UI. "Connection to ovirt-imageio-proxy service has failed. Make sure the service is installed, configured, and ovirt-engine certificate is registered as a valid CA in the browser." My ovirt engine's fqdn is ovirt-engine.mydomain.com however due to network restrictions I had to set rules in order to reach our ovirt-engine ovirt-engine.mydomain.com = 192.168.0.45 For example ovirt-engine.mydomain.otherstuff.com - 192.168.10.109:80, 192.168.10.109:443, 192.168.0.45:80 So as you can see I need to hit the ovirt-engine using ovirt-engine.mydomain.otherstuff.com which I am able to by modifyting the 11-setup-sso.conf file and adding "SSO_ENGINE_URL="https://ovirt-engine.mydomain.otherstuff.com:443/ovirt-engine/" I am able to upload disk images when using http://ovirt-engine.mydomain.com but not able to http://ovirt-engine.mydomain.otherstuff.com I know it might be related to the certificates but I need to be able to upload disk images using both URLs. any ideas?
On Fri, May 31, 2019 at 11:57 PM <adrianquintero@gmail.com> wrote:
Hi, I have an issue while trying to upload disk images thru the Web UI. "Connection to ovirt-imageio-proxy service has failed. Make sure the service is installed, configured, and ovirt-engine certificate is registered as a valid CA in the browser."
My ovirt engine's fqdn is ovirt-engine.mydomain.com however due to network restrictions I had to set rules in order to reach our ovirt-engine ovirt-engine.mydomain.com = 192.168.0.45
For example ovirt-engine.mydomain.otherstuff.com - 192.168.10.109:80, 192.168.10.109:443, 192.168.0.45:80 So as you can see I need to hit the ovirt-engine using ovirt-engine.mydomain.otherstuff.com which I am able to by modifyting the 11-setup-sso.conf file and adding "SSO_ENGINE_URL=" https://ovirt-engine.mydomain.otherstuff.com:443/ovirt-engine/"
I am able to upload disk images when using http://ovirt-engine.mydomain.com but not able to http://ovirt-engine.mydomain.otherstuff.com I know it might be related to the certificates but I need to be able to upload disk images using both URLs.
any ideas?
Hi, While it doesn't address your issue directly, you may want to use muCommander for this - a demo is available in [1]. Note that this is not part of the oVirt project and still under development but the upload functionality works well, without needing to mess with credentials in the browser and it also supports uploading ISO files to data domains (as ISO images). muCommander is not packaged yet with this plugin for oVirt, so if you're interested in that you'll need to clone the code from [2] and build it as shown in [1] (All you need is git and the Java compiler installed. Note it's cross-platform). [1] https://www.youtube.com/watch?v=pJSTjixYOnU [2] git@github.com:mucommander/mucommander.git
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSQKTZ6YCD7XBE...
did you try this? engine-config --get ImageProxyAddress engine-config -s ImageProxyAddress=http://ovirt-engine.mydomain.otherstuff.com:54323 systemctl restart ovirt-engine Le 02/06/2019 à 12:00, Arik Hadas a écrit :
On Fri, May 31, 2019 at 11:57 PM <adrianquintero@gmail.com <mailto:adrianquintero@gmail.com>> wrote:
Hi, I have an issue while trying to upload disk images thru the Web UI. "Connection to ovirt-imageio-proxy service has failed. Make sure the service is installed, configured, and ovirt-engine certificate is registered as a valid CA in the browser."
My ovirt engine's fqdn is ovirt-engine.mydomain.com <http://ovirt-engine.mydomain.com> however due to network restrictions I had to set rules in order to reach our ovirt-engine ovirt-engine.mydomain.com <http://ovirt-engine.mydomain.com> = 192.168.0.45
For example ovirt-engine.mydomain.otherstuff.com <http://ovirt-engine.mydomain.otherstuff.com> - 192.168.10.109:80 <http://192.168.10.109:80>, 192.168.10.109:443 <http://192.168.10.109:443>, 192.168.0.45:80 <http://192.168.0.45:80> So as you can see I need to hit the ovirt-engine using ovirt-engine.mydomain.otherstuff.com <http://ovirt-engine.mydomain.otherstuff.com> which I am able to by modifyting the 11-setup-sso.conf file and adding "SSO_ENGINE_URL="https://ovirt-engine.mydomain.otherstuff.com:443/ovirt-engine/"
I am able to upload disk images when using http://ovirt-engine.mydomain.com but not able to http://ovirt-engine.mydomain.otherstuff.com I know it might be related to the certificates but I need to be able to upload disk images using both URLs.
any ideas?
Hi,
While it doesn't address your issue directly, you may want to use muCommander for this - a demo is available in [1]. Note that this is not part of the oVirt project and still under development but the upload functionality works well, without needing to mess with credentials in the browser and it also supports uploading ISO files to data domains (as ISO images). muCommander is not packaged yet with this plugin for oVirt, so if you're interested in that you'll need to clone the code from [2] and build it as shown in [1] (All you need is git and the Java compiler installed. Note it's cross-platform).
[1] https://www.youtube.com/watch?v=pJSTjixYOnU [2] git@github.com:mucommander/mucommander.git
_______________________________________________ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSQKTZ6YCD7XBE...
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ELH2AOFGZMUFND...
-- Nathanaël Blanchet Supervision réseau Pôle Infrastrutures Informatiques 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet@abes.fr
I tried it, now my engine wont work using https://ovirt-engine.mydomain.com over the browsers just hangs in "loading" It does load from https://ovirt-engine.mydomain.com, but still I get "Connection to ovirt-imageio-proxy service has failed. Make sure the service is installed, configured, and ovirt-engine certificate is registered as a valid CA in the browser." and the cert is valid but points to ovirt-engine.mydomain.com. I did the following: engine-config --get ImageProxyAddress ImageProxyAddress: ovirt-engine.mydomain.com:54323 version: general engine-config -s ImageProxyAddress=ovirt-engine.mydomain.otherstuff.com:54323 systemctl restart ovirt-engine engine-config --get ImageProxyAddress ImageProxyAddress: ovirt-engine.mydomain.otherstuff.com:54323 version: general that did not seem to help so I put it back as it was. engine-config -s ImageProxyAddress=ovirt-engine.mydomain.com:54323 systemctl restart ovirt-engine engine-config --get ImageProxyAddress ImageProxyAddress: ovirt-engine.mydomain.com:54323 version: general
please disregard the part that says it "hangs in loading" , that part works , it was an issue on my browser. however as mentioned still changing the ImageProxyAddress did not work. thanks,
I get the following from the console in developer tools in chrome/firefox: Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://ovirt-engine.mydomain.com:54323/info/. (Reason: CORS request did not succeed). note that I am behind a f5, so one domain is used from outside the f5 and another from within the f5.
Thanks Arik, however I would like to understand how it really works. As mentioned the only thing I did was to add a vps in order to hit the server Real fqdn: ovirt-engine.mydomain.com(192.168.0.45) Using fqdn: ovirt-engine.mydomain.otherstuff.com (192.168.10.109) Mapping: 192.168.10.109:80, 192.168.10.109:443, 192.168.0.45:80 The cert is already in my browser: This certificate is already installed as a certificate authority. engine.log: 2019-06-03 09:08:21,240-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6] Renewing transfer ticket for Upload disk 'ovirt-node-ng-installer-4.3.0-2019020409.el7.iso' (disk id: '48312455-9003-44ee-a4bc-1e6533cc5408', image id: 'ab86967a-1516-45e2-bffd-fb7973a7efd5') 2019-06-03 09:08:21,241-04 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.ExtendImageTicketVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6] START, ExtendImageTicketVDSCommand(HostName = host1.mydomain.com, ExtendImageTicketVDSCommandParameters:{hostId='20ac91be-dec8-4083-b09a-381e0185ddbe', ticketId='b6232936-cd9d-42dd-b794-a16ef6eaed44', timeout='300'}), log id: 77da6b6e 2019-06-03 09:08:21,247-04 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.ExtendImageTicketVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6] FINISH, ExtendImageTicketVDSCommand, return: StatusOnlyReturn [status=Status [code=0, message=Done]], log id: 77da6b6e 2019-06-03 09:08:21,247-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6] Transfer session with ticket id b6232936-cd9d-42dd-b794-a16ef6eaed44 extended, timeout 300 seconds 2019-06-03 09:08:21,253-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.ImageTransferUpdater] (EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6] Updating image transfer 9cbe652c-1249-4eb1-8fe2-3a8387bd324a (image 48312455-9003-44ee-a4bc-1e6533cc5408) phase to Transferring (message: 'Pausing due to client error') 2019-06-03 09:08:21,729-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-1357) [c46ac95d-a684-4860-b49b-6ed720a2df6e] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2019-06-03 09:08:25,730-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-1357) [2660ddba-f9b7-4843-b356-fb6e10485dfb] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2019-06-03 09:08:29,735-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-1357) [a644727a-0b56-4164-8ff2-2697e5de3132] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2019-06-03 09:08:30,889-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-1357) [5bb6e263-c6e8-4e2e-9923-420c20117c83] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2019-06-03 09:08:30,890-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.ImageTransferUpdater] (default task-1357) [5bb6e263-c6e8-4e2e-9923-420c20117c83] Updating image transfer 9cbe652c-1249-4eb1-8fe2-3a8387bd324a (image 48312455-9003-44ee-a4bc-1e6533cc5408) phase to Paused by System (message: 'Sent 0MB') 2019-06-03 09:08:30,904-04 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1357) [5bb6e263-c6e8-4e2e-9923-420c20117c83] EVENT_ID: UPLOAD_IMAGE_NETWORK_ERROR(1,062), Unable to upload image to disk 48312455-9003-44ee-a4bc-1e6533cc5408 due to a network error. Ensure that ovirt-imageio-proxy service is installed and configured and that ovirt-engine's CA certificate is registered as a trusted CA in the browser. The certificate can be fetched from https://ovirt-engine.mydomain.otherstuff.com/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA 2019-06-03 09:08:31,290-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-47) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6] Transfer was paused by system. Upload disk 'ovirt-node-ng-installer-4.3.0-2019020409.el7.iso' (disk id: '48312455-9003-44ee-a4bc-1e6533cc5408', image id: 'ab86967a-1516-45e2-bffd-fb7973a7efd5') 2019-06-03 09:08:33,736-04 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-1357) [2d427408-e140-4e46-b467-bfa13890e05b] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER
participants (3)
-
adrianquintero＠gmail.com -
Arik Hadas -
Nathanaël Blanchet