9:09 p.m.
This is a cryptographically signed message in MIME format.
--------------ms020104090401090603070301
Content-Type: multipart/alternative;
boundary="------------000204000805040205010909"
This is a multi-part message in MIME format.
--------------000204000805040205010909
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
oVirt Users:
My work is currently deploying oVirt 4.0.5 into our Development
environment. I see there use to be a maintained Openstack Neutron image
that could be used with oVirt to provide SDN functionality. I'm
suspecting that the reason for the image no longer being maintained is
because it became a hassle to keep updated and patched. From what I
understand the current idea is to just point your oVirt installation to
an already installed Openstack setup. I can easily install an image and
install the latest Openstack (Keystone/Neutron) and then point oVirt to
it, but I want to understand if that is the proper way to move forward.
Is there a general consensus with the way oVirt is moving in regards to
Software Defined Networking and Neutron in general? Just want to ensure
I understand it clearly before just installing my own Neutron if there
is going to be another method.
Any feedback is appreciated.
Devin Acosta RHCA
--------------000204000805040205010909
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<html><head>
<meta http-equiv=3D"content-type" content=3D"text/html;
charset=3DISO-885=
9-1"></head><body
style=3D"font-family: Larabiefont; font-size: 11pt;"
text=3D"#000000"=20
bgcolor=3D"#FFFFFF">
<div style=3D"font-size: 11pt;font-family: Larabiefont;"><span=20
style=3D"font-family: Larabiefont;">oVirt Users:<br><br>My work
is=20
currently deploying oVirt 4.0.5 into our Development environment. I see=20
there use to be a maintained Openstack Neutron image that could be used=20
with oVirt to provide SDN functionality. I'm suspecting that the reason=20
for the image no longer being maintained is because it became a hassle=20
to keep updated and patched. From what I understand the current idea is=20
to just point your oVirt installation to an already installed Openstack=20
setup. I can easily install an image and install the latest Openstack=20
(Keystone/Neutron) and then point oVirt to it, but I want to understand=20
if that is the proper way to move forward. Is there a general consensus=20
with the way oVirt is moving in regards to Software Defined Networking=20
and Neutron in general? Just want to ensure I understand it clearly=20
before just installing my own Neutron if there is going to be another=20
method.<br><br>Any feedback is appreciated.<br><br>Devin Acosta
RHCA<br>=A0=
<br></span></div>
</body>
</html>
--------------000204000805040205010909--
--------------ms020104090401090603070301
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms020104090401090603070301--
3:43 a.m.
We are working on a native path to SDN via OVN (experimental at this point):
https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
Using Neutron is an option, but at some point the native option might be
easier to use (we want to add a UI for it and tighter integration).
Yaniv Dary
Technical Product Manager
Red Hat Israel Ltd.
34 Jerusalem Road
Building A, 4th floor
Ra'anana, Israel 4350109
Tel : +972 (9) 7692306
8272306
Email: ydary(a)redhat.com
IRC : ydary
On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin(a)pabstatencio.com>
wrote:
oVirt Users:
My work is currently deploying oVirt 4.0.5 into our Development
environment. I see there use to be a maintained Openstack Neutron image
that could be used with oVirt to provide SDN functionality. I'm suspecting
that the reason for the image no longer being maintained is because it
became a hassle to keep updated and patched. From what I understand the
current idea is to just point your oVirt installation to an already
installed Openstack setup. I can easily install an image and install the
latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want
to understand if that is the proper way to move forward. Is there a general
consensus with the way oVirt is moving in regards to Software Defined
Networking and Neutron in general? Just want to ensure I understand it
clearly before just installing my own Neutron if there is going to be
another method.
Any feedback is appreciated.
Devin Acosta RHCA
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
10:42 p.m.
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and it sounds
like something I want to try. However the document seems to be not
complete, and I'm not sure i fully understand how it should be deployed.
When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and try to
install on the oVIRT nodes it complains about needing other packages such
as:
- openvswitch-ovn-central
- python-openvswitch
- firewalld-system
- openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the RPMS for
openvswitch-ovn-central. Also I presume like Neutron I would install OVN on
a Master node and then install some clients on the nodes? Can you provide
me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary(a)redhat.com> wrote:
We are working on a native path to SDN via OVN (experimental at this
point):
https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
Using Neutron is an option, but at some point the native option might be
easier to use (we want to add a UI for it and tighter integration).
Yaniv Dary
Technical Product Manager
Red Hat Israel Ltd.
34 Jerusalem Road
Building A, 4th floor
Ra'anana, Israel 4350109
Tel : +972 (9) 7692306
8272306
Email: ydary(a)redhat.com
IRC : ydary
On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin(a)pabstatencio.com>
wrote:
> oVirt Users:
>
> My work is currently deploying oVirt 4.0.5 into our Development
> environment. I see there use to be a maintained Openstack Neutron image
> that could be used with oVirt to provide SDN functionality. I'm suspecting
> that the reason for the image no longer being maintained is because it
> became a hassle to keep updated and patched. From what I understand the
> current idea is to just point your oVirt installation to an already
> installed Openstack setup. I can easily install an image and install the
> latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want
> to understand if that is the proper way to move forward. Is there a general
> consensus with the way oVirt is moving in regards to Software Defined
> Networking and Neutron in general? Just want to ensure I understand it
> clearly before just installing my own Neutron if there is going to be
> another method.
>
> Any feedback is appreciated.
>
> Devin Acosta RHCA
>
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
4:15 a.m.
Adding Marcin to help with this.
Yaniv Dary
Technical Product Manager
Red Hat Israel Ltd.
34 Jerusalem Road
Building A, 4th floor
Ra'anana, Israel 4350109
Tel : +972 (9) 7692306
8272306
Email: ydary(a)redhat.com
IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin(a)pabstatencio.com> wrote:
Yaniv,
I am looking at the page that talks about ovirt-provider-ovn, and it
sounds like something I want to try. However the document seems to be not
complete, and I'm not sure i fully understand how it should be deployed.
When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and try
to install on the oVIRT nodes it complains about needing other packages
such as:
- openvswitch-ovn-central
- python-openvswitch
- firewalld-system
- openvswitch-ovn-host
I don't see anywhere where it talks about getting access to the RPMS for
openvswitch-ovn-central. Also I presume like Neutron I would install OVN on
a Master node and then install some clients on the nodes? Can you provide
me additional information on this?
On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary(a)redhat.com> wrote:
> We are working on a native path to SDN via OVN (experimental at this
> point):
> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
>
> Using Neutron is an option, but at some point the native option might be
> easier to use (we want to add a UI for it and tighter integration).
>
> Yaniv Dary
> Technical Product Manager
> Red Hat Israel Ltd.
> 34 Jerusalem Road
> Building A, 4th floor
> Ra'anana, Israel 4350109
>
> Tel : +972 (9) 7692306
> 8272306
> Email: ydary(a)redhat.com
> IRC : ydary
>
>
> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin(a)pabstatencio.com>
> wrote:
>
>> oVirt Users:
>>
>> My work is currently deploying oVirt 4.0.5 into our Development
>> environment. I see there use to be a maintained Openstack Neutron image
>> that could be used with oVirt to provide SDN functionality. I'm suspecting
>> that the reason for the image no longer being maintained is because it
>> became a hassle to keep updated and patched. From what I understand the
>> current idea is to just point your oVirt installation to an already
>> installed Openstack setup. I can easily install an image and install the
>> latest Openstack (Keystone/Neutron) and then point oVirt to it, but I want
>> to understand if that is the proper way to move forward. Is there a general
>> consensus with the way oVirt is moving in regards to Software Defined
>> Networking and Neutron in general? Just want to ensure I understand it
>> clearly before just installing my own Neutron if there is going to be
>> another method.
>>
>> Any feedback is appreciated.
>>
>> Devin Acosta RHCA
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
5:54 a.m.
Devin,
The openvswitch OVN packages must be build manually at the moment. It is still not
available either in the repos, nor as a download.
For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not
'firewalld-filesystem'?
This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the blogpost is already
somewhat outdated (even though it's not even a month old). I will try to update it
asap.
Thanks,
Marcin
BUILDING PROVIDER RPMS:
----------------------
git clone https://gerrit.ovirt.org/ovirt-provider-ovn
make rpm
BUILDING OVN RPMS:
------------------
Clone the repository:
git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn:
yum -y install gcc make python-devel openssl-devel kernel-devel graphviz
kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build rpmdevtools
bash-completion autoconf automake libtool PyQt4 groff libcap-ng-devel python-twisted-core
python-zope-interface graphviz openssl-devel selinux-policy-devel
Build the ovn rpms:
cd ovs
./boot.sh
./configure
make dist
cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES
cd $HOME/rpmbuild/SOURCES
tar xzf openvswitch-<version>.tar.gz
cd openvswitch-<version>
rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
----- Original Message -----
From: "Yaniv Dary" <ydary(a)redhat.com>
To: "Devin Acosta" <devin(a)pabstatencio.com>, "Marcin Mirecki"
<mmirecki(a)redhat.com>
Cc: "users" <Users(a)ovirt.org>
Sent: Thursday, December 1, 2016 11:15:00 AM
Subject: Re: [ovirt-users] oVirt 4 and Neutron
Adding Marcin to help with this.
Yaniv Dary
Technical Product Manager
Red Hat Israel Ltd.
34 Jerusalem Road
Building A, 4th floor
Ra'anana, Israel 4350109
Tel : +972 (9) 7692306
8272306
Email: ydary(a)redhat.com
IRC : ydary
On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin(a)pabstatencio.com> wrote:
>
> Yaniv,
>
> I am looking at the page that talks about ovirt-provider-ovn, and it
> sounds like something I want to try. However the document seems to be not
> complete, and I'm not sure i fully understand how it should be deployed.
> When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and try
> to install on the oVIRT nodes it complains about needing other packages
> such as:
>
> - openvswitch-ovn-central
> - python-openvswitch
> - firewalld-system
> - openvswitch-ovn-host
>
> I don't see anywhere where it talks about getting access to the RPMS for
> openvswitch-ovn-central. Also I presume like Neutron I would install OVN on
> a Master node and then install some clients on the nodes? Can you provide
> me additional information on this?
>
>
>
> On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary(a)redhat.com> wrote:
>
>> We are working on a native path to SDN via OVN (experimental at this
>> point):
>> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
>>
>> Using Neutron is an option, but at some point the native option might be
>> easier to use (we want to add a UI for it and tighter integration).
>>
>> Yaniv Dary
>> Technical Product Manager
>> Red Hat Israel Ltd.
>> 34 Jerusalem Road
>> Building A, 4th floor
>> Ra'anana, Israel 4350109
>>
>> Tel : +972 (9) 7692306
>> 8272306
>> Email: ydary(a)redhat.com
>> IRC : ydary
>>
>>
>> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin(a)pabstatencio.com>
>> wrote:
>>
>>> oVirt Users:
>>>
>>> My work is currently deploying oVirt 4.0.5 into our Development
>>> environment. I see there use to be a maintained Openstack Neutron image
>>> that could be used with oVirt to provide SDN functionality. I'm
>>> suspecting
>>> that the reason for the image no longer being maintained is because it
>>> became a hassle to keep updated and patched. From what I understand the
>>> current idea is to just point your oVirt installation to an already
>>> installed Openstack setup. I can easily install an image and install the
>>> latest Openstack (Keystone/Neutron) and then point oVirt to it, but I
>>> want
>>> to understand if that is the proper way to move forward. Is there a
>>> general
>>> consensus with the way oVirt is moving in regards to Software Defined
>>> Networking and Neutron in general? Just want to ensure I understand it
>>> clearly before just installing my own Neutron if there is going to be
>>> another method.
>>>
>>> Any feedback is appreciated.
>>>
>>> Devin Acosta RHCA
>>>
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users(a)ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>
>
> --
>
> Devin Acosta
> Red Hat Certified Architect, LinuxStack
> 602-354-1220 || devin(a)linuxguru.co
>
11:19 a.m.
I have manually created the RPM's successfully, I just want to clarify a
few items so I make sure I'm deploying this according to best practice.
I presume the OVN Controller should just be some VM that is on the
ovirtmgmt network, or is there a preferred place to install the OVN
controller software? I then also assume I install the OVN agents onto all
the oVirt Nodes. My take on this is that this OVN replaces the more complex
Neutron/OVS installation, and makes for a more simple deployment. I see
that when you go to add the External Provider, does OVN Controller use
authentication, is there any information I would need to have besides
knowing which node it's on in order to add it to external provider? Would I
need to have any bridges or OVS configured on the nodes for this to work or
just install the services and get them configured and it just works?
Your assistance is appreciated.
On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki(a)redhat.com> wrote:
Devin,
The openvswitch OVN packages must be build manually at the moment. It is
still not available either in the repos, nor as a download.
For now please use the procedure attached below to build the OVN rpm's.
I am not sure where 'firewalld-system' comes from. Is it not
'firewalld-filesystem'?
This should be available from the standard repo.
The ovirt-provider-ovn is being developed quite actively, and the blogpost
is already somewhat outdated (even though it's not even a month old). I
will try to update it asap.
Thanks,
Marcin
BUILDING PROVIDER RPMS:
----------------------
git clone https://gerrit.ovirt.org/ovirt-provider-ovn
make rpm
BUILDING OVN RPMS:
------------------
Clone the repository:
git clone https://github.com/openvswitch/ovs
Install the following packages, as they are need to build ovn:
yum -y install gcc make python-devel openssl-devel kernel-devel graphviz
kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build
rpmdevtools bash-completion autoconf automake libtool PyQt4 groff
libcap-ng-devel python-twisted-core python-zope-interface graphviz
openssl-devel selinux-policy-devel
Build the ovn rpms:
cd ovs
./boot.sh
./configure
make dist
cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES
cd $HOME/rpmbuild/SOURCES
tar xzf openvswitch-<version>.tar.gz
cd openvswitch-<version>
rpmbuild -bb rhel/openvswitch-fedora.spec
The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
--------------------
----- Original Message -----
> From: "Yaniv Dary" <ydary(a)redhat.com>
> To: "Devin Acosta" <devin(a)pabstatencio.com>, "Marcin
Mirecki" <
mmirecki(a)redhat.com>
> Cc: "users" <Users(a)ovirt.org>
> Sent: Thursday, December 1, 2016 11:15:00 AM
> Subject: Re: [ovirt-users] oVirt 4 and Neutron
>
> Adding Marcin to help with this.
>
> Yaniv Dary
> Technical Product Manager
> Red Hat Israel Ltd.
> 34 Jerusalem Road
> Building A, 4th floor
> Ra'anana, Israel 4350109
>
> Tel : +972 (9) 7692306
> 8272306
> Email: ydary(a)redhat.com
> IRC : ydary
>
>
> On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin(a)pabstatencio.com>
wrote:
>
> >
> > Yaniv,
> >
> > I am looking at the page that talks about ovirt-provider-ovn, and it
> > sounds like something I want to try. However the document seems to be
not
> > complete, and I'm not sure i fully understand how it should be
deployed.
> > When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm" and
try
> > to install on the oVIRT nodes it complains about needing other packages
> > such as:
> >
> > - openvswitch-ovn-central
> > - python-openvswitch
> > - firewalld-system
> > - openvswitch-ovn-host
> >
> > I don't see anywhere where it talks about getting access to the RPMS
for
> > openvswitch-ovn-central. Also I presume like Neutron I would install
OVN on
> > a Master node and then install some clients on the nodes? Can you
provide
> > me additional information on this?
> >
> >
> >
> > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary(a)redhat.com> wrote:
> >
> >> We are working on a native path to SDN via OVN (experimental at this
> >> point):
> >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
> >>
> >> Using Neutron is an option, but at some point the native option might
be
> >> easier to use (we want to add a UI for it and tighter integration).
> >>
> >> Yaniv Dary
> >> Technical Product Manager
> >> Red Hat Israel Ltd.
> >> 34 Jerusalem Road
> >> Building A, 4th floor
> >> Ra'anana, Israel 4350109
> >>
> >> Tel : +972 (9) 7692306
> >> 8272306
> >> Email: ydary(a)redhat.com
> >> IRC : ydary
> >>
> >>
> >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <devin(a)pabstatencio.com
>
> >> wrote:
> >>
> >>> oVirt Users:
> >>>
> >>> My work is currently deploying oVirt 4.0.5 into our Development
> >>> environment. I see there use to be a maintained Openstack Neutron
image
> >>> that could be used with oVirt to provide SDN functionality. I'm
> >>> suspecting
> >>> that the reason for the image no longer being maintained is because
it
> >>> became a hassle to keep updated and patched. From what I understand
the
> >>> current idea is to just point your oVirt installation to an already
> >>> installed Openstack setup. I can easily install an image and install
the
> >>> latest Openstack (Keystone/Neutron) and then point oVirt to it, but I
> >>> want
> >>> to understand if that is the proper way to move forward. Is there a
> >>> general
> >>> consensus with the way oVirt is moving in regards to Software Defined
> >>> Networking and Neutron in general? Just want to ensure I understand
it
> >>> clearly before just installing my own Neutron if there is going to be
> >>> another method.
> >>>
> >>> Any feedback is appreciated.
> >>>
> >>> Devin Acosta RHCA
> >>>
> >>>
> >>> _______________________________________________
> >>> Users mailing list
> >>> Users(a)ovirt.org
> >>> http://lists.ovirt.org/mailman/listinfo/users
> >>>
> >>>
> >>
> >
> >
> > --
> >
> > Devin Acosta
> > Red Hat Certified Architect, LinuxStack
> > 602-354-1220 || devin(a)linuxguru.co
> >
>
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
6:16 a.m.
Devin,
I presume the OVN Controller should just be some VM that is on the
ovirtmgmt network, or is there a preferred place to install the OVN
controller software?
Please note the difference between OVN-Central and OVN-Controller:
OVN-Central is the central part of OVN, storing the logical configuration and controlling
the many OVN-Controllers
OVN-Controller is the piece of software which resides on the ovirt-hosts, and manages the
local OVS setup on the host.
OVN-Central
/ | \
/ | \
/ | \
/ | \
OVN-Controller OVN-Controller OVN-Controller
OVN-central can be installed anywhere , as long as it can communicate with the engine and
all the hosts.
During development we install it along the ovirt engine for convinience.
OVN-Controller must be installed on every ovirt host.
I then also assume I install the OVN agents onto all
the oVirt Nodes.
Short answer: Yes
Longe answer: If you plan not to use external networks on some clusters, you
can skip its hosts.
You can choose the clusters which support the external network by assigning the
network to clusters.
I see
that when you go to add the External Provider, does OVN Controller use
authentication, is there any information I would need to have besides
knowing which node it's on in order to add it to external provider?
For now it is only the url of the provider.
The provider is still under development, authentication is still just an
empty mock.
Would I
need to have any bridges or OVS configured on the nodes for this to work or
just install the services and get them configured and it just works?
We are using the default 'br-int' bridge which OVN is using. All should be
configured
when OVS/OVN is installed.
Let me know if I can help with anything else.
Marcin
----- Original Message -----
From: "Devin Acosta" <devin(a)pabstatencio.com>
To: "Marcin Mirecki" <mmirecki(a)redhat.com>
Cc: "users" <Users(a)ovirt.org>, "Yaniv Dary"
<ydary(a)redhat.com>
Sent: Thursday, December 1, 2016 6:19:07 PM
Subject: Re: [ovirt-users] oVirt 4 and Neutron
I have manually created the RPM's successfully, I just want to clarify a
few items so I make sure I'm deploying this according to best practice.
I presume the OVN Controller should just be some VM that is on the
ovirtmgmt network, or is there a preferred place to install the OVN
controller software? I then also assume I install the OVN agents onto all
the oVirt Nodes. My take on this is that this OVN replaces the more complex
Neutron/OVS installation, and makes for a more simple deployment. I see
that when you go to add the External Provider, does OVN Controller use
authentication, is there any information I would need to have besides
knowing which node it's on in order to add it to external provider? Would I
need to have any bridges or OVS configured on the nodes for this to work or
just install the services and get them configured and it just works?
Your assistance is appreciated.
On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki(a)redhat.com> wrote:
> Devin,
>
> The openvswitch OVN packages must be build manually at the moment. It is
> still not available either in the repos, nor as a download.
> For now please use the procedure attached below to build the OVN rpm's.
>
> I am not sure where 'firewalld-system' comes from. Is it not
> 'firewalld-filesystem'?
> This should be available from the standard repo.
>
> The ovirt-provider-ovn is being developed quite actively, and the blogpost
> is already somewhat outdated (even though it's not even a month old). I
> will try to update it asap.
>
> Thanks,
> Marcin
>
>
> BUILDING PROVIDER RPMS:
> ----------------------
> git clone https://gerrit.ovirt.org/ovirt-provider-ovn
> make rpm
>
>
>
>
> BUILDING OVN RPMS:
> ------------------
>
> Clone the repository:
>
> git clone https://github.com/openvswitch/ovs
>
> Install the following packages, as they are need to build ovn:
>
> yum -y install gcc make python-devel openssl-devel kernel-devel graphviz
> kernel-debug-devel autoconf automake rpm-build redhat-rpm-config rpm-build
> rpmdevtools bash-completion autoconf automake libtool PyQt4 groff
> libcap-ng-devel python-twisted-core python-zope-interface graphviz
> openssl-devel selinux-policy-devel
>
> Build the ovn rpms:
>
> cd ovs
> ./boot.sh
> ./configure
> make dist
> cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES
> cd $HOME/rpmbuild/SOURCES
> tar xzf openvswitch-<version>.tar.gz
> cd openvswitch-<version>
> rpmbuild -bb rhel/openvswitch-fedora.spec
>
> The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
>
> --------------------
>
>
>
>
>
>
>
> ----- Original Message -----
> > From: "Yaniv Dary" <ydary(a)redhat.com>
> > To: "Devin Acosta" <devin(a)pabstatencio.com>, "Marcin
Mirecki" <
> mmirecki(a)redhat.com>
> > Cc: "users" <Users(a)ovirt.org>
> > Sent: Thursday, December 1, 2016 11:15:00 AM
> > Subject: Re: [ovirt-users] oVirt 4 and Neutron
> >
> > Adding Marcin to help with this.
> >
> > Yaniv Dary
> > Technical Product Manager
> > Red Hat Israel Ltd.
> > 34 Jerusalem Road
> > Building A, 4th floor
> > Ra'anana, Israel 4350109
> >
> > Tel : +972 (9) 7692306
> > 8272306
> > Email: ydary(a)redhat.com
> > IRC : ydary
> >
> >
> > On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin(a)pabstatencio.com>
> wrote:
> >
> > >
> > > Yaniv,
> > >
> > > I am looking at the page that talks about ovirt-provider-ovn, and it
> > > sounds like something I want to try. However the document seems to be
> not
> > > complete, and I'm not sure i fully understand how it should be
> deployed.
> > > When I downloaded the "ovirt-provider-ovn-driver-0-1.noarch.rpm"
and
> try
> > > to install on the oVIRT nodes it complains about needing other packages
> > > such as:
> > >
> > > - openvswitch-ovn-central
> > > - python-openvswitch
> > > - firewalld-system
> > > - openvswitch-ovn-host
> > >
> > > I don't see anywhere where it talks about getting access to the RPMS
> for
> > > openvswitch-ovn-central. Also I presume like Neutron I would install
> OVN on
> > > a Master node and then install some clients on the nodes? Can you
> provide
> > > me additional information on this?
> > >
> > >
> > >
> > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary(a)redhat.com>
wrote:
> > >
> > >> We are working on a native path to SDN via OVN (experimental at this
> > >> point):
> > >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
> > >>
> > >> Using Neutron is an option, but at some point the native option might
> be
> > >> easier to use (we want to add a UI for it and tighter integration).
> > >>
> > >> Yaniv Dary
> > >> Technical Product Manager
> > >> Red Hat Israel Ltd.
> > >> 34 Jerusalem Road
> > >> Building A, 4th floor
> > >> Ra'anana, Israel 4350109
> > >>
> > >> Tel : +972 (9) 7692306
> > >> 8272306
> > >> Email: ydary(a)redhat.com
> > >> IRC : ydary
> > >>
> > >>
> > >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta
<devin(a)pabstatencio.com
> >
> > >> wrote:
> > >>
> > >>> oVirt Users:
> > >>>
> > >>> My work is currently deploying oVirt 4.0.5 into our Development
> > >>> environment. I see there use to be a maintained Openstack Neutron
> image
> > >>> that could be used with oVirt to provide SDN functionality.
I'm
> > >>> suspecting
> > >>> that the reason for the image no longer being maintained is
because
> it
> > >>> became a hassle to keep updated and patched. From what I
understand
> the
> > >>> current idea is to just point your oVirt installation to an
already
> > >>> installed Openstack setup. I can easily install an image and
install
> the
> > >>> latest Openstack (Keystone/Neutron) and then point oVirt to it,
but I
> > >>> want
> > >>> to understand if that is the proper way to move forward. Is there
a
> > >>> general
> > >>> consensus with the way oVirt is moving in regards to Software
Defined
> > >>> Networking and Neutron in general? Just want to ensure I
understand
> it
> > >>> clearly before just installing my own Neutron if there is going to
be
> > >>> another method.
> > >>>
> > >>> Any feedback is appreciated.
> > >>>
> > >>> Devin Acosta RHCA
> > >>>
> > >>>
> > >>> _______________________________________________
> > >>> Users mailing list
> > >>> Users(a)ovirt.org
> > >>> http://lists.ovirt.org/mailman/listinfo/users
> > >>>
> > >>>
> > >>
> > >
> > >
> > > --
> > >
> > > Devin Acosta
> > > Red Hat Certified Architect, LinuxStack
> > > 602-354-1220 || devin(a)linuxguru.co
> > >
> >
>
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
12:44 p.m.
Marcin,
I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt
network, I also installed the OVN-Provider on this same instance. I then
installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN
provider driver, and configured the vdsm ovn-controller {central-ip}
{ovirt-node-ip} on each of the boxes. It appears to be running but what I
am noticing is that the ovs-vswitchd process is pegged at 100% on all the
oVirt nodes.
So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for
the other 2 nodes in it's configuration. It seems to be that way across all
3 nodes, they know about the other nodes in the cluster. I was able to
create a network inside of oVIRT using the external provider. After i
create a subnet inside oVirt I do get an error at the top but seems to be
ok?
[image: Inline image 2]
(Output from Node3 IP 75, of: ovs-vsctl show)
61af799c-a621-445e-8183-23dcb38ea3cc
Bridge br-int
fail_mode: secure
Port "ovn-c0dc09-0"
Interface "ovn-c0dc09-0"
type: geneve
options: {csum="true", key=flow,
remote_ip="172.10.10.73"}
Port "ovn-456949-0"
Interface "ovn-456949-0"
type: geneve
options: {csum="true", key=flow,
remote_ip="172.10.10.74"}
Port br-int
Interface br-int
type: internal
ovs_version: "2.6.90"
Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85
ovs-vswitchd
[root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log
2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout at
vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout at
vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout at
vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout at
vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout at
vswitchd/bridge.c:3031 (99% CPU usage)
One other thing that I notice is that when I got to Provision a Virtual
Machine from the Main Data Center, my Networks don't show under the NIC
where I could select them? Am I missing something on this?
Thanks very much for your help.
Devin Acosta
On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki(a)redhat.com> wrote:
Devin,
> I presume the OVN Controller should just be some VM that is on the
> ovirtmgmt network, or is there a preferred place to install the OVN
> controller software?
Please note the difference between OVN-Central and OVN-Controller:
OVN-Central is the central part of OVN, storing the logical configuration
and controlling the many OVN-Controllers
OVN-Controller is the piece of software which resides on the ovirt-hosts,
and manages the local OVS setup on the host.
OVN-Central
/ | \
/ | \
/ | \
/ | \
OVN-Controller OVN-Controller OVN-Controller
OVN-central can be installed anywhere , as long as it can communicate with
the engine and all the hosts.
During development we install it along the ovirt engine for convinience.
OVN-Controller must be installed on every ovirt host.
>I then also assume I install the OVN agents onto all
> the oVirt Nodes.
Short answer: Yes
Longe answer: If you plan not to use external networks on some clusters,
you
can skip its hosts.
You can choose the clusters which support the external network by
assigning the
network to clusters.
> I see
> that when you go to add the External Provider, does OVN Controller use
> authentication, is there any information I would need to have besides
> knowing which node it's on in order to add it to external provider?
For now it is only the url of the provider.
The provider is still under development, authentication is still just an
empty mock.
>Would I
> need to have any bridges or OVS configured on the nodes for this to work
or
> just install the services and get them configured and it just works?
We are using the default 'br-int' bridge which OVN is using. All should be
configured
when OVS/OVN is installed.
Let me know if I can help with anything else.
Marcin
----- Original Message -----
> From: "Devin Acosta" <devin(a)pabstatencio.com>
> To: "Marcin Mirecki" <mmirecki(a)redhat.com>
> Cc: "users" <Users(a)ovirt.org>, "Yaniv Dary"
<ydary(a)redhat.com>
> Sent: Thursday, December 1, 2016 6:19:07 PM
> Subject: Re: [ovirt-users] oVirt 4 and Neutron
>
> I have manually created the RPM's successfully, I just want to clarify a
> few items so I make sure I'm deploying this according to best practice.
>
> I presume the OVN Controller should just be some VM that is on the
> ovirtmgmt network, or is there a preferred place to install the OVN
> controller software? I then also assume I install the OVN agents onto all
> the oVirt Nodes. My take on this is that this OVN replaces the more
complex
> Neutron/OVS installation, and makes for a more simple deployment. I see
> that when you go to add the External Provider, does OVN Controller use
> authentication, is there any information I would need to have besides
> knowing which node it's on in order to add it to external provider?
Would I
> need to have any bridges or OVS configured on the nodes for this to work
or
> just install the services and get them configured and it just works?
>
>
> Your assistance is appreciated.
>
> On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki(a)redhat.com>
wrote:
>
> > Devin,
> >
> > The openvswitch OVN packages must be build manually at the moment. It
is
> > still not available either in the repos, nor as a download.
> > For now please use the procedure attached below to build the OVN rpm's.
> >
> > I am not sure where 'firewalld-system' comes from. Is it not
> > 'firewalld-filesystem'?
> > This should be available from the standard repo.
> >
> > The ovirt-provider-ovn is being developed quite actively, and the
blogpost
> > is already somewhat outdated (even though it's not even a month old). I
> > will try to update it asap.
> >
> > Thanks,
> > Marcin
> >
> >
> > BUILDING PROVIDER RPMS:
> > ----------------------
> > git clone https://gerrit.ovirt.org/ovirt-provider-ovn
> > make rpm
> >
> >
> >
> >
> > BUILDING OVN RPMS:
> > ------------------
> >
> > Clone the repository:
> >
> > git clone https://github.com/openvswitch/ovs
> >
> > Install the following packages, as they are need to build ovn:
> >
> > yum -y install gcc make python-devel openssl-devel kernel-devel
graphviz
> > kernel-debug-devel autoconf automake rpm-build redhat-rpm-config
rpm-build
> > rpmdevtools bash-completion autoconf automake libtool PyQt4 groff
> > libcap-ng-devel python-twisted-core python-zope-interface graphviz
> > openssl-devel selinux-policy-devel
> >
> > Build the ovn rpms:
> >
> > cd ovs
> > ./boot.sh
> > ./configure
> > make dist
> > cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES
> > cd $HOME/rpmbuild/SOURCES
> > tar xzf openvswitch-<version>.tar.gz
> > cd openvswitch-<version>
> > rpmbuild -bb rhel/openvswitch-fedora.spec
> >
> > The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
> >
> > --------------------
> >
> >
> >
> >
> >
> >
> >
> > ----- Original Message -----
> > > From: "Yaniv Dary" <ydary(a)redhat.com>
> > > To: "Devin Acosta" <devin(a)pabstatencio.com>, "Marcin
Mirecki" <
> > mmirecki(a)redhat.com>
> > > Cc: "users" <Users(a)ovirt.org>
> > > Sent: Thursday, December 1, 2016 11:15:00 AM
> > > Subject: Re: [ovirt-users] oVirt 4 and Neutron
> > >
> > > Adding Marcin to help with this.
> > >
> > > Yaniv Dary
> > > Technical Product Manager
> > > Red Hat Israel Ltd.
> > > 34 Jerusalem Road
> > > Building A, 4th floor
> > > Ra'anana, Israel 4350109
> > >
> > > Tel : +972 (9) 7692306
> > > 8272306
> > > Email: ydary(a)redhat.com
> > > IRC : ydary
> > >
> > >
> > > On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <devin(a)pabstatencio.com
>
> > wrote:
> > >
> > > >
> > > > Yaniv,
> > > >
> > > > I am looking at the page that talks about ovirt-provider-ovn, and
it
> > > > sounds like something I want to try. However the document seems to
be
> > not
> > > > complete, and I'm not sure i fully understand how it should be
> > deployed.
> > > > When I downloaded the
"ovirt-provider-ovn-driver-0-1.noarch.rpm"
and
> > try
> > > > to install on the oVIRT nodes it complains about needing other
packages
> > > > such as:
> > > >
> > > > - openvswitch-ovn-central
> > > > - python-openvswitch
> > > > - firewalld-system
> > > > - openvswitch-ovn-host
> > > >
> > > > I don't see anywhere where it talks about getting access to the
RPMS
> > for
> > > > openvswitch-ovn-central. Also I presume like Neutron I would
install
> > OVN on
> > > > a Master node and then install some clients on the nodes? Can you
> > provide
> > > > me additional information on this?
> > > >
> > > >
> > > >
> > > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary <ydary(a)redhat.com>
wrote:
> > > >
> > > >> We are working on a native path to SDN via OVN (experimental at
this
> > > >> point):
> > > >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
> > > >>
> > > >> Using Neutron is an option, but at some point the native option
might
> > be
> > > >> easier to use (we want to add a UI for it and tighter
integration).
> > > >>
> > > >> Yaniv Dary
> > > >> Technical Product Manager
> > > >> Red Hat Israel Ltd.
> > > >> 34 Jerusalem Road
> > > >> Building A, 4th floor
> > > >> Ra'anana, Israel 4350109
> > > >>
> > > >> Tel : +972 (9) 7692306
> > > >> 8272306
> > > >> Email: ydary(a)redhat.com
> > > >> IRC : ydary
> > > >>
> > > >>
> > > >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <
devin(a)pabstatencio.com
> > >
> > > >> wrote:
> > > >>
> > > >>> oVirt Users:
> > > >>>
> > > >>> My work is currently deploying oVirt 4.0.5 into our
Development
> > > >>> environment. I see there use to be a maintained Openstack
Neutron
> > image
> > > >>> that could be used with oVirt to provide SDN functionality.
I'm
> > > >>> suspecting
> > > >>> that the reason for the image no longer being maintained is
because
> > it
> > > >>> became a hassle to keep updated and patched. From what I
understand
> > the
> > > >>> current idea is to just point your oVirt installation to an
already
> > > >>> installed Openstack setup. I can easily install an image and
install
> > the
> > > >>> latest Openstack (Keystone/Neutron) and then point oVirt to
it,
but I
> > > >>> want
> > > >>> to understand if that is the proper way to move forward. Is
there a
> > > >>> general
> > > >>> consensus with the way oVirt is moving in regards to
Software
Defined
> > > >>> Networking and Neutron in general? Just want to ensure I
understand
> > it
> > > >>> clearly before just installing my own Neutron if there is
going
to be
> > > >>> another method.
> > > >>>
> > > >>> Any feedback is appreciated.
> > > >>>
> > > >>> Devin Acosta RHCA
> > > >>>
> > > >>>
> > > >>> _______________________________________________
> > > >>> Users mailing list
> > > >>> Users(a)ovirt.org
> > > >>> http://lists.ovirt.org/mailman/listinfo/users
> > > >>>
> > > >>>
> > > >>
> > > >
> > > >
> > > > --
> > > >
> > > > Devin Acosta
> > > > Red Hat Certified Architect, LinuxStack
> > > > 602-354-1220 || devin(a)linuxguru.co
> > > >
> > >
> >
>
>
>
> --
>
> Devin Acosta
> Red Hat Certified Architect, LinuxStack
> 602-354-1220 || devin(a)linuxguru.co
>
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
1:02 p.m.
On Friday, December 2, 2016 11:44:48 AM EST Devin Acosta wrote:
Marcin,
I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt
network, I also installed the OVN-Provider on this same instance. I then
installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN
provider driver, and configured the vdsm ovn-controller {central-ip}
{ovirt-node-ip} on each of the boxes. It appears to be running but what I
am noticing is that the ovs-vswitchd process is pegged at 100% on all the
oVirt nodes.
So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for
the other 2 nodes in it's configuration. It seems to be that way across all
3 nodes, they know about the other nodes in the cluster. I was able to
create a network inside of oVIRT using the external provider. After i
create a subnet inside oVirt I do get an error at the top but seems to be
ok?
I can't help you with the OVN stuff, but the error at the top indicates some
kind of bug in the UI code. If you haven't done so already can you install the
web admin symbol maps and restart your engine
yum install ovirt-engine-webadmin-portal-debuginfo
Then recreate the issues. Then the UI.log on the engine machine will contain a
deobfuscated stack trace that can help us in determining the cause of the UI
issue.
[image: Inline image 2]
(Output from Node3 IP 75, of: ovs-vsctl show)
61af799c-a621-445e-8183-23dcb38ea3cc
Bridge br-int
fail_mode: secure
Port "ovn-c0dc09-0"
Interface "ovn-c0dc09-0"
type: geneve
options: {csum="true", key=flow,
remote_ip="172.10.10.73"}
Port "ovn-456949-0"
Interface "ovn-456949-0"
type: geneve
options: {csum="true", key=flow,
remote_ip="172.10.10.74"}
Port br-int
Interface br-int
type: internal
ovs_version: "2.6.90"
Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85
ovs-vswitchd
[root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log
2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout at
vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout at
vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout at
vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout at
vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout at
vswitchd/bridge.c:3031 (99% CPU usage)
One other thing that I notice is that when I got to Provision a Virtual
Machine from the Main Data Center, my Networks don't show under the NIC
where I could select them? Am I missing something on this?
Thanks very much for your help.
Devin Acosta
On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki(a)redhat.com> wrote:
> Devin,
>
> > I presume the OVN Controller should just be some VM that is on the
> > ovirtmgmt network, or is there a preferred place to install the OVN
> > controller software?
>
> Please note the difference between OVN-Central and OVN-Controller:
> OVN-Central is the central part of OVN, storing the logical configuration
> and controlling the many OVN-Controllers
> OVN-Controller is the piece of software which resides on the ovirt-hosts,
> and manages the local OVS setup on the host.
>
> OVN-Central
>
> / | \
>
> / | \
>
> / | \
>
> / | \
>
> OVN-Controller OVN-Controller OVN-Controller
>
>
> OVN-central can be installed anywhere , as long as it can communicate with
> the engine and all the hosts.
> During development we install it along the ovirt engine for convinience.
>
> OVN-Controller must be installed on every ovirt host.
>
> >I then also assume I install the OVN agents onto all
> >
> > the oVirt Nodes.
>
> Short answer: Yes
>
> Longe answer: If you plan not to use external networks on some clusters,
> you
> can skip its hosts.
> You can choose the clusters which support the external network by
> assigning the
> network to clusters.
>
> > I see
> > that when you go to add the External Provider, does OVN Controller use
> > authentication, is there any information I would need to have besides
> > knowing which node it's on in order to add it to external provider?
>
> For now it is only the url of the provider.
> The provider is still under development, authentication is still just an
> empty mock.
>
> >Would I
> >
> > need to have any bridges or OVS configured on the nodes for this to work
>
> or
>
> > just install the services and get them configured and it just works?
>
> We are using the default 'br-int' bridge which OVN is using. All should be
> configured
> when OVS/OVN is installed.
>
> Let me know if I can help with anything else.
> Marcin
>
>
>
> ----- Original Message -----
>
> > From: "Devin Acosta" <devin(a)pabstatencio.com>
> > To: "Marcin Mirecki" <mmirecki(a)redhat.com>
> > Cc: "users" <Users(a)ovirt.org>, "Yaniv Dary"
<ydary(a)redhat.com>
> > Sent: Thursday, December 1, 2016 6:19:07 PM
> > Subject: Re: [ovirt-users] oVirt 4 and Neutron
> >
> > I have manually created the RPM's successfully, I just want to clarify a
> > few items so I make sure I'm deploying this according to best practice.
> >
> > I presume the OVN Controller should just be some VM that is on the
> > ovirtmgmt network, or is there a preferred place to install the OVN
> > controller software? I then also assume I install the OVN agents onto
> > all
> > the oVirt Nodes. My take on this is that this OVN replaces the more
>
> complex
>
> > Neutron/OVS installation, and makes for a more simple deployment. I see
> > that when you go to add the External Provider, does OVN Controller use
> > authentication, is there any information I would need to have besides
> > knowing which node it's on in order to add it to external provider?
>
> Would I
>
> > need to have any bridges or OVS configured on the nodes for this to work
>
> or
>
> > just install the services and get them configured and it just works?
> >
> >
> > Your assistance is appreciated.
> >
> > On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki(a)redhat.com>
>
> wrote:
> > > Devin,
> > >
> > > The openvswitch OVN packages must be build manually at the moment. It
>
> is
>
> > > still not available either in the repos, nor as a download.
> > > For now please use the procedure attached below to build the OVN
> > > rpm's.
> > >
> > > I am not sure where 'firewalld-system' comes from. Is it not
> > > 'firewalld-filesystem'?
> > > This should be available from the standard repo.
> > >
> > > The ovirt-provider-ovn is being developed quite actively, and the
>
> blogpost
>
> > > is already somewhat outdated (even though it's not even a month old).
> > > I
> > > will try to update it asap.
> > >
> > > Thanks,
> > > Marcin
> > >
> > >
> > > BUILDING PROVIDER RPMS:
> > > ----------------------
> > >
> > > git clone https://gerrit.ovirt.org/ovirt-provider-ovn
> > > make rpm
> > >
> > > BUILDING OVN RPMS:
> > > ------------------
> > >
> > > Clone the repository:
> > > git clone https://github.com/openvswitch/ovs
> > >
> > > Install the following packages, as they are need to build ovn:
> > > yum -y install gcc make python-devel openssl-devel kernel-devel
>
> graphviz
>
> > > kernel-debug-devel autoconf automake rpm-build redhat-rpm-config
>
> rpm-build
>
> > > rpmdevtools bash-completion autoconf automake libtool PyQt4 groff
> > > libcap-ng-devel python-twisted-core python-zope-interface graphviz
> > > openssl-devel selinux-policy-devel
> > >
> > > Build the ovn rpms:
> > > cd ovs
> > > ./boot.sh
> > > ./configure
> > > make dist
> > > cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES
> > > cd $HOME/rpmbuild/SOURCES
> > > tar xzf openvswitch-<version>.tar.gz
> > > cd openvswitch-<version>
> > > rpmbuild -bb rhel/openvswitch-fedora.spec
> > >
> > > The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
> > >
> > > --------------------
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > ----- Original Message -----
> > >
> > > > From: "Yaniv Dary" <ydary(a)redhat.com>
> > > > To: "Devin Acosta" <devin(a)pabstatencio.com>,
"Marcin Mirecki" <
> > >
> > > mmirecki(a)redhat.com>
> > >
> > > > Cc: "users" <Users(a)ovirt.org>
> > > > Sent: Thursday, December 1, 2016 11:15:00 AM
> > > > Subject: Re: [ovirt-users] oVirt 4 and Neutron
> > > >
> > > > Adding Marcin to help with this.
> > > >
> > > > Yaniv Dary
> > > > Technical Product Manager
> > > > Red Hat Israel Ltd.
> > > > 34 Jerusalem Road
> > > > Building A, 4th floor
> > > > Ra'anana, Israel 4350109
> > > >
> > > > Tel : +972 (9) 7692306
> > > >
> > > > 8272306
> > > >
> > > > Email: ydary(a)redhat.com
> > > > IRC : ydary
> > > >
> > > >
> > > > On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta
<devin(a)pabstatencio.com
> > >
> > > wrote:
> > > > > Yaniv,
> > > > >
> > > > > I am looking at the page that talks about ovirt-provider-ovn,
and
>
> it
>
> > > > > sounds like something I want to try. However the document seems
to
>
> be
>
> > > not
> > >
> > > > > complete, and I'm not sure i fully understand how it should
be
> > >
> > > deployed.
> > >
> > > > > When I downloaded the
"ovirt-provider-ovn-driver-0-1.noarch.rpm"
>
> and
>
> > > try
> > >
> > > > > to install on the oVIRT nodes it complains about needing other
>
> packages
>
> > > > > such as:
> > > > >
> > > > > - openvswitch-ovn-central
> > > > > - python-openvswitch
> > > > > - firewalld-system
> > > > > - openvswitch-ovn-host
> > > > >
> > > > > I don't see anywhere where it talks about getting access to
the
>
> RPMS
>
> > > for
> > >
> > > > > openvswitch-ovn-central. Also I presume like Neutron I would
>
> install
>
> > > OVN on
> > >
> > > > > a Master node and then install some clients on the nodes? Can
you
> > >
> > > provide
> > >
> > > > > me additional information on this?
> > > > >
> > > > >
> > > > >
> > > > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary
<ydary(a)redhat.com>
>
> wrote:
> > > > >> We are working on a native path to SDN via OVN (experimental
at
>
> this
>
> > > > >> point):
> > > > >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
> > > > >>
> > > > >> Using Neutron is an option, but at some point the native
option
>
> might
>
> > > be
> > >
> > > > >> easier to use (we want to add a UI for it and tighter
>
> integration).
>
> > > > >> Yaniv Dary
> > > > >> Technical Product Manager
> > > > >> Red Hat Israel Ltd.
> > > > >> 34 Jerusalem Road
> > > > >> Building A, 4th floor
> > > > >> Ra'anana, Israel 4350109
> > > > >>
> > > > >> Tel : +972 (9) 7692306
> > > > >>
> > > > >> 8272306
> > > > >>
> > > > >> Email: ydary(a)redhat.com
> > > > >> IRC : ydary
> > > > >>
> > > > >>
> > > > >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <
>
> devin(a)pabstatencio.com
>
> > > > >> wrote:
> > > > >>> oVirt Users:
> > > > >>>
> > > > >>> My work is currently deploying oVirt 4.0.5 into our
Development
> > > > >>> environment. I see there use to be a maintained
Openstack
> > > > >>> Neutron
> > >
> > > image
> > >
> > > > >>> that could be used with oVirt to provide SDN
functionality. I'm
> > > > >>> suspecting
> > > > >>> that the reason for the image no longer being maintained
is
>
> because
>
> > > it
> > >
> > > > >>> became a hassle to keep updated and patched. From what
I
>
> understand
>
> > > the
> > >
> > > > >>> current idea is to just point your oVirt installation to
an
>
> already
>
> > > > >>> installed Openstack setup. I can easily install an image
and
>
> install
>
> > > the
> > >
> > > > >>> latest Openstack (Keystone/Neutron) and then point oVirt
to it,
>
> but I
>
> > > > >>> want
> > > > >>> to understand if that is the proper way to move forward.
Is
>
> there a
>
> > > > >>> general
> > > > >>> consensus with the way oVirt is moving in regards to
Software
>
> Defined
>
> > > > >>> Networking and Neutron in general? Just want to ensure
I
>
> understand
>
> > > it
> > >
> > > > >>> clearly before just installing my own Neutron if there
is going
>
> to be
>
> > > > >>> another method.
> > > > >>>
> > > > >>> Any feedback is appreciated.
> > > > >>>
> > > > >>> Devin Acosta RHCA
> > > > >>>
> > > > >>>
> > > > >>> _______________________________________________
> > > > >>> Users mailing list
> > > > >>> Users(a)ovirt.org
> > > > >>> http://lists.ovirt.org/mailman/listinfo/users
> > > > >
> > > > > --
> > > > >
> > > > > Devin Acosta
> > > > > Red Hat Certified Architect, LinuxStack
> > > > > 602-354-1220 || devin(a)linuxguru.co
> >
> > --
> >
> > Devin Acosta
> > Red Hat Certified Architect, LinuxStack
> > 602-354-1220 || devin(a)linuxguru.co
2:23 p.m.
Marcin,
So an update on my situation, I restarted all OpenVSwitch processes on all
boxes and was able to get the CPU issue with ovs-vswitchd to return to
normal. So I believe all those issues are resolved. I can create
networks/subnets, minus that one strange UI issue which I'll work with
Alexander Wels to resolve. When I still go to launch a Virtual Machine,
should I be seeing the subnets that I created? Am I missing something? It
seems like i'm about 95% there and I am just missing something.
On Fri, Dec 2, 2016 at 11:44 AM, Devin Acosta <devin(a)pabstatencio.com>
wrote:
Marcin,
I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt
network, I also installed the OVN-Provider on this same instance. I then
installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN
provider driver, and configured the vdsm ovn-controller {central-ip}
{ovirt-node-ip} on each of the boxes. It appears to be running but what I
am noticing is that the ovs-vswitchd process is pegged at 100% on all the
oVirt nodes.
So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for
the other 2 nodes in it's configuration. It seems to be that way across all
3 nodes, they know about the other nodes in the cluster. I was able to
create a network inside of oVIRT using the external provider. After i
create a subnet inside oVirt I do get an error at the top but seems to be
ok?
[image: Inline image 2]
(Output from Node3 IP 75, of: ovs-vsctl show)
61af799c-a621-445e-8183-23dcb38ea3cc
Bridge br-int
fail_mode: secure
Port "ovn-c0dc09-0"
Interface "ovn-c0dc09-0"
type: geneve
options: {csum="true", key=flow,
remote_ip="172.10.10.73"}
Port "ovn-456949-0"
Interface "ovn-456949-0"
type: geneve
options: {csum="true", key=flow,
remote_ip="172.10.10.74"}
Port br-int
Interface br-int
type: internal
ovs_version: "2.6.90"
Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85
ovs-vswitchd
[root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log
2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout
at vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout
at vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout
at vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout
at vswitchd/bridge.c:3031 (100% CPU usage)
2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log messages
in last 6 seconds (most recently, 0 seconds ago) due to excessive rate
2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout
at vswitchd/bridge.c:3031 (99% CPU usage)
One other thing that I notice is that when I got to Provision a Virtual
Machine from the Main Data Center, my Networks don't show under the NIC
where I could select them? Am I missing something on this?
Thanks very much for your help.
Devin Acosta
On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki(a)redhat.com>
wrote:
> Devin,
>
> > I presume the OVN Controller should just be some VM that is on the
> > ovirtmgmt network, or is there a preferred place to install the OVN
> > controller software?
>
> Please note the difference between OVN-Central and OVN-Controller:
> OVN-Central is the central part of OVN, storing the logical configuration
> and controlling the many OVN-Controllers
> OVN-Controller is the piece of software which resides on the ovirt-hosts,
> and manages the local OVS setup on the host.
>
> OVN-Central
> / | \
> / | \
> / | \
> / | \
> OVN-Controller OVN-Controller OVN-Controller
>
>
> OVN-central can be installed anywhere , as long as it can communicate
> with the engine and all the hosts.
> During development we install it along the ovirt engine for convinience.
>
> OVN-Controller must be installed on every ovirt host.
>
>
> >I then also assume I install the OVN agents onto all
> > the oVirt Nodes.
>
> Short answer: Yes
>
> Longe answer: If you plan not to use external networks on some clusters,
> you
> can skip its hosts.
> You can choose the clusters which support the external network by
> assigning the
> network to clusters.
>
> > I see
> > that when you go to add the External Provider, does OVN Controller use
> > authentication, is there any information I would need to have besides
> > knowing which node it's on in order to add it to external provider?
>
> For now it is only the url of the provider.
> The provider is still under development, authentication is still just an
> empty mock.
>
> >Would I
> > need to have any bridges or OVS configured on the nodes for this to
> work or
> > just install the services and get them configured and it just works?
>
> We are using the default 'br-int' bridge which OVN is using. All should
> be configured
> when OVS/OVN is installed.
>
> Let me know if I can help with anything else.
> Marcin
>
>
>
> ----- Original Message -----
> > From: "Devin Acosta" <devin(a)pabstatencio.com>
> > To: "Marcin Mirecki" <mmirecki(a)redhat.com>
> > Cc: "users" <Users(a)ovirt.org>, "Yaniv Dary"
<ydary(a)redhat.com>
> > Sent: Thursday, December 1, 2016 6:19:07 PM
> > Subject: Re: [ovirt-users] oVirt 4 and Neutron
> >
> > I have manually created the RPM's successfully, I just want to clarify a
> > few items so I make sure I'm deploying this according to best practice.
> >
> > I presume the OVN Controller should just be some VM that is on the
> > ovirtmgmt network, or is there a preferred place to install the OVN
> > controller software? I then also assume I install the OVN agents onto
> all
> > the oVirt Nodes. My take on this is that this OVN replaces the more
> complex
> > Neutron/OVS installation, and makes for a more simple deployment. I see
> > that when you go to add the External Provider, does OVN Controller use
> > authentication, is there any information I would need to have besides
> > knowing which node it's on in order to add it to external provider?
> Would I
> > need to have any bridges or OVS configured on the nodes for this to
> work or
> > just install the services and get them configured and it just works?
> >
> >
> > Your assistance is appreciated.
> >
> > On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki(a)redhat.com>
> wrote:
> >
> > > Devin,
> > >
> > > The openvswitch OVN packages must be build manually at the moment. It
> is
> > > still not available either in the repos, nor as a download.
> > > For now please use the procedure attached below to build the OVN
> rpm's.
> > >
> > > I am not sure where 'firewalld-system' comes from. Is it not
> > > 'firewalld-filesystem'?
> > > This should be available from the standard repo.
> > >
> > > The ovirt-provider-ovn is being developed quite actively, and the
> blogpost
> > > is already somewhat outdated (even though it's not even a month old).
> I
> > > will try to update it asap.
> > >
> > > Thanks,
> > > Marcin
> > >
> > >
> > > BUILDING PROVIDER RPMS:
> > > ----------------------
> > > git clone https://gerrit.ovirt.org/ovirt-provider-ovn
> > > make rpm
> > >
> > >
> > >
> > >
> > > BUILDING OVN RPMS:
> > > ------------------
> > >
> > > Clone the repository:
> > >
> > > git clone https://github.com/openvswitch/ovs
> > >
> > > Install the following packages, as they are need to build ovn:
> > >
> > > yum -y install gcc make python-devel openssl-devel kernel-devel
> graphviz
> > > kernel-debug-devel autoconf automake rpm-build redhat-rpm-config
> rpm-build
> > > rpmdevtools bash-completion autoconf automake libtool PyQt4 groff
> > > libcap-ng-devel python-twisted-core python-zope-interface graphviz
> > > openssl-devel selinux-policy-devel
> > >
> > > Build the ovn rpms:
> > >
> > > cd ovs
> > > ./boot.sh
> > > ./configure
> > > make dist
> > > cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES
> > > cd $HOME/rpmbuild/SOURCES
> > > tar xzf openvswitch-<version>.tar.gz
> > > cd openvswitch-<version>
> > > rpmbuild -bb rhel/openvswitch-fedora.spec
> > >
> > > The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
> > >
> > > --------------------
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > ----- Original Message -----
> > > > From: "Yaniv Dary" <ydary(a)redhat.com>
> > > > To: "Devin Acosta" <devin(a)pabstatencio.com>,
"Marcin Mirecki" <
> > > mmirecki(a)redhat.com>
> > > > Cc: "users" <Users(a)ovirt.org>
> > > > Sent: Thursday, December 1, 2016 11:15:00 AM
> > > > Subject: Re: [ovirt-users] oVirt 4 and Neutron
> > > >
> > > > Adding Marcin to help with this.
> > > >
> > > > Yaniv Dary
> > > > Technical Product Manager
> > > > Red Hat Israel Ltd.
> > > > 34 Jerusalem Road
> > > > Building A, 4th floor
> > > > Ra'anana, Israel 4350109
> > > >
> > > > Tel : +972 (9) 7692306
> > > > 8272306
> > > > Email: ydary(a)redhat.com
> > > > IRC : ydary
> > > >
> > > >
> > > > On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <
> devin(a)pabstatencio.com>
> > > wrote:
> > > >
> > > > >
> > > > > Yaniv,
> > > > >
> > > > > I am looking at the page that talks about ovirt-provider-ovn,
and
> it
> > > > > sounds like something I want to try. However the document seems
> to be
> > > not
> > > > > complete, and I'm not sure i fully understand how it should
be
> > > deployed.
> > > > > When I downloaded the
"ovirt-provider-ovn-driver-0-1.noarch.rpm"
> and
> > > try
> > > > > to install on the oVIRT nodes it complains about needing other
> packages
> > > > > such as:
> > > > >
> > > > > - openvswitch-ovn-central
> > > > > - python-openvswitch
> > > > > - firewalld-system
> > > > > - openvswitch-ovn-host
> > > > >
> > > > > I don't see anywhere where it talks about getting access to
the
> RPMS
> > > for
> > > > > openvswitch-ovn-central. Also I presume like Neutron I would
> install
> > > OVN on
> > > > > a Master node and then install some clients on the nodes? Can
you
> > > provide
> > > > > me additional information on this?
> > > > >
> > > > >
> > > > >
> > > > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary
<ydary(a)redhat.com>
> wrote:
> > > > >
> > > > >> We are working on a native path to SDN via OVN (experimental
at
> this
> > > > >> point):
> > > > >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
> > > > >>
> > > > >> Using Neutron is an option, but at some point the native
option
> might
> > > be
> > > > >> easier to use (we want to add a UI for it and tighter
> integration).
> > > > >>
> > > > >> Yaniv Dary
> > > > >> Technical Product Manager
> > > > >> Red Hat Israel Ltd.
> > > > >> 34 Jerusalem Road
> > > > >> Building A, 4th floor
> > > > >> Ra'anana, Israel 4350109
> > > > >>
> > > > >> Tel : +972 (9) 7692306
> > > > >> 8272306
> > > > >> Email: ydary(a)redhat.com
> > > > >> IRC : ydary
> > > > >>
> > > > >>
> > > > >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <
> devin(a)pabstatencio.com
> > > >
> > > > >> wrote:
> > > > >>
> > > > >>> oVirt Users:
> > > > >>>
> > > > >>> My work is currently deploying oVirt 4.0.5 into our
Development
> > > > >>> environment. I see there use to be a maintained
Openstack
> Neutron
> > > image
> > > > >>> that could be used with oVirt to provide SDN
functionality. I'm
> > > > >>> suspecting
> > > > >>> that the reason for the image no longer being maintained
is
> because
> > > it
> > > > >>> became a hassle to keep updated and patched. From what I
> understand
> > > the
> > > > >>> current idea is to just point your oVirt installation to
an
> already
> > > > >>> installed Openstack setup. I can easily install an image
and
> install
> > > the
> > > > >>> latest Openstack (Keystone/Neutron) and then point oVirt
to it,
> but I
> > > > >>> want
> > > > >>> to understand if that is the proper way to move forward.
Is
> there a
> > > > >>> general
> > > > >>> consensus with the way oVirt is moving in regards to
Software
> Defined
> > > > >>> Networking and Neutron in general? Just want to ensure I
> understand
> > > it
> > > > >>> clearly before just installing my own Neutron if there is
going
> to be
> > > > >>> another method.
> > > > >>>
> > > > >>> Any feedback is appreciated.
> > > > >>>
> > > > >>> Devin Acosta RHCA
> > > > >>>
> > > > >>>
> > > > >>> _______________________________________________
> > > > >>> Users mailing list
> > > > >>> Users(a)ovirt.org
> > > > >>> http://lists.ovirt.org/mailman/listinfo/users
> > > > >>>
> > > > >>>
> > > > >>
> > > > >
> > > > >
> > > > > --
> > > > >
> > > > > Devin Acosta
> > > > > Red Hat Certified Architect, LinuxStack
> > > > > 602-354-1220 || devin(a)linuxguru.co
> > > > >
> > > >
> > >
> >
> >
> >
> > --
> >
> > Devin Acosta
> > Red Hat Certified Architect, LinuxStack
> > 602-354-1220 || devin(a)linuxguru.co
> >
>
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
4:15 p.m.
Ok i figured out my issue, the network wasn't configured under the Cluster
section to be allowed to see, I have now been able to spin up my own
network/subnet and then spin up 2 instances both getting DHCP addresses and
able to talk to each other. The ONLY issue i'm seeing is that random UI
error that i have e-mailed over to Alexander about. I'll let you know if i
have any other questions. I think for now I'm golden.
On Fri, Dec 2, 2016 at 1:23 PM, Devin Acosta <devin(a)pabstatencio.com> wrote:
Marcin,
So an update on my situation, I restarted all OpenVSwitch processes on all
boxes and was able to get the CPU issue with ovs-vswitchd to return to
normal. So I believe all those issues are resolved. I can create
networks/subnets, minus that one strange UI issue which I'll work with
Alexander Wels to resolve. When I still go to launch a Virtual Machine,
should I be seeing the subnets that I created? Am I missing something? It
seems like i'm about 95% there and I am just missing something.
On Fri, Dec 2, 2016 at 11:44 AM, Devin Acosta <devin(a)pabstatencio.com>
wrote:
> Marcin,
>
> I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt
> network, I also installed the OVN-Provider on this same instance. I then
> installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN
> provider driver, and configured the vdsm ovn-controller {central-ip}
> {ovirt-node-ip} on each of the boxes. It appears to be running but what I
> am noticing is that the ovs-vswitchd process is pegged at 100% on all the
> oVirt nodes.
>
> So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for
> the other 2 nodes in it's configuration. It seems to be that way across all
> 3 nodes, they know about the other nodes in the cluster. I was able to
> create a network inside of oVIRT using the external provider. After i
> create a subnet inside oVirt I do get an error at the top but seems to be
> ok?
>
>
> [image: Inline image 2]
>
> (Output from Node3 IP 75, of: ovs-vsctl show)
>
> 61af799c-a621-445e-8183-23dcb38ea3cc
> Bridge br-int
> fail_mode: secure
> Port "ovn-c0dc09-0"
> Interface "ovn-c0dc09-0"
> type: geneve
> options: {csum="true", key=flow,
remote_ip="172.10.10.73"}
> Port "ovn-456949-0"
> Interface "ovn-456949-0"
> type: geneve
> options: {csum="true", key=flow,
remote_ip="172.10.10.74"}
> Port br-int
> Interface br-int
> type: internal
> ovs_version: "2.6.90"
>
>
>
> Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
>
> PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+
> COMMAND
> 1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85
> ovs-vswitchd
>
>
> [root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log
> 2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log
> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
> rate
> 2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout
> at vswitchd/bridge.c:3031 (100% CPU usage)
> 2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log
> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
> rate
> 2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout
> at vswitchd/bridge.c:3031 (100% CPU usage)
> 2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log
> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
> rate
> 2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout
> at vswitchd/bridge.c:3031 (100% CPU usage)
> 2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log
> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
> rate
> 2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout
> at vswitchd/bridge.c:3031 (100% CPU usage)
> 2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log
> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
> rate
> 2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout
> at vswitchd/bridge.c:3031 (99% CPU usage)
>
>
> One other thing that I notice is that when I got to Provision a Virtual
> Machine from the Main Data Center, my Networks don't show under the NIC
> where I could select them? Am I missing something on this?
>
> Thanks very much for your help.
>
> Devin Acosta
>
>
> On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki(a)redhat.com>
> wrote:
>
>> Devin,
>>
>> > I presume the OVN Controller should just be some VM that is on the
>> > ovirtmgmt network, or is there a preferred place to install the OVN
>> > controller software?
>>
>> Please note the difference between OVN-Central and OVN-Controller:
>> OVN-Central is the central part of OVN, storing the logical
>> configuration and controlling the many OVN-Controllers
>> OVN-Controller is the piece of software which resides on the
>> ovirt-hosts, and manages the local OVS setup on the host.
>>
>> OVN-Central
>> / | \
>> / | \
>> / | \
>> / | \
>> OVN-Controller OVN-Controller OVN-Controller
>>
>>
>> OVN-central can be installed anywhere , as long as it can communicate
>> with the engine and all the hosts.
>> During development we install it along the ovirt engine for convinience.
>>
>> OVN-Controller must be installed on every ovirt host.
>>
>>
>> >I then also assume I install the OVN agents onto all
>> > the oVirt Nodes.
>>
>> Short answer: Yes
>>
>> Longe answer: If you plan not to use external networks on some clusters,
>> you
>> can skip its hosts.
>> You can choose the clusters which support the external network by
>> assigning the
>> network to clusters.
>>
>> > I see
>> > that when you go to add the External Provider, does OVN Controller use
>> > authentication, is there any information I would need to have besides
>> > knowing which node it's on in order to add it to external provider?
>>
>> For now it is only the url of the provider.
>> The provider is still under development, authentication is still just an
>> empty mock.
>>
>> >Would I
>> > need to have any bridges or OVS configured on the nodes for this to
>> work or
>> > just install the services and get them configured and it just works?
>>
>> We are using the default 'br-int' bridge which OVN is using. All should
>> be configured
>> when OVS/OVN is installed.
>>
>> Let me know if I can help with anything else.
>> Marcin
>>
>>
>>
>> ----- Original Message -----
>> > From: "Devin Acosta" <devin(a)pabstatencio.com>
>> > To: "Marcin Mirecki" <mmirecki(a)redhat.com>
>> > Cc: "users" <Users(a)ovirt.org>, "Yaniv Dary"
<ydary(a)redhat.com>
>> > Sent: Thursday, December 1, 2016 6:19:07 PM
>> > Subject: Re: [ovirt-users] oVirt 4 and Neutron
>> >
>> > I have manually created the RPM's successfully, I just want to clarify
>> a
>> > few items so I make sure I'm deploying this according to best practice.
>> >
>> > I presume the OVN Controller should just be some VM that is on the
>> > ovirtmgmt network, or is there a preferred place to install the OVN
>> > controller software? I then also assume I install the OVN agents onto
>> all
>> > the oVirt Nodes. My take on this is that this OVN replaces the more
>> complex
>> > Neutron/OVS installation, and makes for a more simple deployment. I
>> see
>> > that when you go to add the External Provider, does OVN Controller use
>> > authentication, is there any information I would need to have besides
>> > knowing which node it's on in order to add it to external provider?
>> Would I
>> > need to have any bridges or OVS configured on the nodes for this to
>> work or
>> > just install the services and get them configured and it just works?
>> >
>> >
>> > Your assistance is appreciated.
>> >
>> > On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki <mmirecki(a)redhat.com>
>> wrote:
>> >
>> > > Devin,
>> > >
>> > > The openvswitch OVN packages must be build manually at the moment.
>> It is
>> > > still not available either in the repos, nor as a download.
>> > > For now please use the procedure attached below to build the OVN
>> rpm's.
>> > >
>> > > I am not sure where 'firewalld-system' comes from. Is it not
>> > > 'firewalld-filesystem'?
>> > > This should be available from the standard repo.
>> > >
>> > > The ovirt-provider-ovn is being developed quite actively, and the
>> blogpost
>> > > is already somewhat outdated (even though it's not even a month
>> old). I
>> > > will try to update it asap.
>> > >
>> > > Thanks,
>> > > Marcin
>> > >
>> > >
>> > > BUILDING PROVIDER RPMS:
>> > > ----------------------
>> > > git clone https://gerrit.ovirt.org/ovirt-provider-ovn
>> > > make rpm
>> > >
>> > >
>> > >
>> > >
>> > > BUILDING OVN RPMS:
>> > > ------------------
>> > >
>> > > Clone the repository:
>> > >
>> > > git clone https://github.com/openvswitch/ovs
>> > >
>> > > Install the following packages, as they are need to build ovn:
>> > >
>> > > yum -y install gcc make python-devel openssl-devel kernel-devel
>> graphviz
>> > > kernel-debug-devel autoconf automake rpm-build redhat-rpm-config
>> rpm-build
>> > > rpmdevtools bash-completion autoconf automake libtool PyQt4 groff
>> > > libcap-ng-devel python-twisted-core python-zope-interface graphviz
>> > > openssl-devel selinux-policy-devel
>> > >
>> > > Build the ovn rpms:
>> > >
>> > > cd ovs
>> > > ./boot.sh
>> > > ./configure
>> > > make dist
>> > > cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES
>> > > cd $HOME/rpmbuild/SOURCES
>> > > tar xzf openvswitch-<version>.tar.gz
>> > > cd openvswitch-<version>
>> > > rpmbuild -bb rhel/openvswitch-fedora.spec
>> > >
>> > > The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
>> > >
>> > > --------------------
>> > >
>> > >
>> > >
>> > >
>> > >
>> > >
>> > >
>> > > ----- Original Message -----
>> > > > From: "Yaniv Dary" <ydary(a)redhat.com>
>> > > > To: "Devin Acosta" <devin(a)pabstatencio.com>,
"Marcin Mirecki" <
>> > > mmirecki(a)redhat.com>
>> > > > Cc: "users" <Users(a)ovirt.org>
>> > > > Sent: Thursday, December 1, 2016 11:15:00 AM
>> > > > Subject: Re: [ovirt-users] oVirt 4 and Neutron
>> > > >
>> > > > Adding Marcin to help with this.
>> > > >
>> > > > Yaniv Dary
>> > > > Technical Product Manager
>> > > > Red Hat Israel Ltd.
>> > > > 34 Jerusalem Road
>> > > > Building A, 4th floor
>> > > > Ra'anana, Israel 4350109
>> > > >
>> > > > Tel : +972 (9) 7692306
>> > > > 8272306
>> > > > Email: ydary(a)redhat.com
>> > > > IRC : ydary
>> > > >
>> > > >
>> > > > On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <
>> devin(a)pabstatencio.com>
>> > > wrote:
>> > > >
>> > > > >
>> > > > > Yaniv,
>> > > > >
>> > > > > I am looking at the page that talks about
ovirt-provider-ovn,
>> and it
>> > > > > sounds like something I want to try. However the document
seems
>> to be
>> > > not
>> > > > > complete, and I'm not sure i fully understand how it
should be
>> > > deployed.
>> > > > > When I downloaded the
"ovirt-provider-ovn-driver-0-1.noarch.rpm"
>> and
>> > > try
>> > > > > to install on the oVIRT nodes it complains about needing
other
>> packages
>> > > > > such as:
>> > > > >
>> > > > > - openvswitch-ovn-central
>> > > > > - python-openvswitch
>> > > > > - firewalld-system
>> > > > > - openvswitch-ovn-host
>> > > > >
>> > > > > I don't see anywhere where it talks about getting access
to the
>> RPMS
>> > > for
>> > > > > openvswitch-ovn-central. Also I presume like Neutron I would
>> install
>> > > OVN on
>> > > > > a Master node and then install some clients on the nodes? Can
you
>> > > provide
>> > > > > me additional information on this?
>> > > > >
>> > > > >
>> > > > >
>> > > > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary
<ydary(a)redhat.com>
>> wrote:
>> > > > >
>> > > > >> We are working on a native path to SDN via OVN
(experimental at
>> this
>> > > > >> point):
>> > > > >> https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
>> > > > >>
>> > > > >> Using Neutron is an option, but at some point the native
option
>> might
>> > > be
>> > > > >> easier to use (we want to add a UI for it and tighter
>> integration).
>> > > > >>
>> > > > >> Yaniv Dary
>> > > > >> Technical Product Manager
>> > > > >> Red Hat Israel Ltd.
>> > > > >> 34 Jerusalem Road
>> > > > >> Building A, 4th floor
>> > > > >> Ra'anana, Israel 4350109
>> > > > >>
>> > > > >> Tel : +972 (9) 7692306
>> > > > >> 8272306
>> > > > >> Email: ydary(a)redhat.com
>> > > > >> IRC : ydary
>> > > > >>
>> > > > >>
>> > > > >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <
>> devin(a)pabstatencio.com
>> > > >
>> > > > >> wrote:
>> > > > >>
>> > > > >>> oVirt Users:
>> > > > >>>
>> > > > >>> My work is currently deploying oVirt 4.0.5 into our
Development
>> > > > >>> environment. I see there use to be a maintained
Openstack
>> Neutron
>> > > image
>> > > > >>> that could be used with oVirt to provide SDN
functionality. I'm
>> > > > >>> suspecting
>> > > > >>> that the reason for the image no longer being
maintained is
>> because
>> > > it
>> > > > >>> became a hassle to keep updated and patched. From
what I
>> understand
>> > > the
>> > > > >>> current idea is to just point your oVirt installation
to an
>> already
>> > > > >>> installed Openstack setup. I can easily install an
image and
>> install
>> > > the
>> > > > >>> latest Openstack (Keystone/Neutron) and then point
oVirt to
>> it, but I
>> > > > >>> want
>> > > > >>> to understand if that is the proper way to move
forward. Is
>> there a
>> > > > >>> general
>> > > > >>> consensus with the way oVirt is moving in regards to
Software
>> Defined
>> > > > >>> Networking and Neutron in general? Just want to
ensure I
>> understand
>> > > it
>> > > > >>> clearly before just installing my own Neutron if
there is
>> going to be
>> > > > >>> another method.
>> > > > >>>
>> > > > >>> Any feedback is appreciated.
>> > > > >>>
>> > > > >>> Devin Acosta RHCA
>> > > > >>>
>> > > > >>>
>> > > > >>> _______________________________________________
>> > > > >>> Users mailing list
>> > > > >>> Users(a)ovirt.org
>> > > > >>> http://lists.ovirt.org/mailman/listinfo/users
>> > > > >>>
>> > > > >>>
>> > > > >>
>> > > > >
>> > > > >
>> > > > > --
>> > > > >
>> > > > > Devin Acosta
>> > > > > Red Hat Certified Architect, LinuxStack
>> > > > > 602-354-1220 || devin(a)linuxguru.co
>> > > > >
>> > > >
>> > >
>> >
>> >
>> >
>> > --
>> >
>> > Devin Acosta
>> > Red Hat Certified Architect, LinuxStack
>> > 602-354-1220 || devin(a)linuxguru.co
>> >
>>
>
>
>
> --
>
> Devin Acosta
> Red Hat Certified Architect, LinuxStack
> 602-354-1220 || devin(a)linuxguru.co
>
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
6:39 a.m.
Devin,
The ovs-vswitchd process pegged at 100% is a known OVS problem. It is interesting however
that you see it on all the hosts at the same time. Can you please report this against
OVS?
I assume the OVS team should take interest in this (they will also know what additional
info to ask about).
Could you please send me the ui.log and engine.log (/var/log/ovirt-engine) and
/var/log/ovirt-provider-ovn.log (from the host where the provider is located)
when you see the UI error again?
One other thing that I notice is that when I got to Provision a
Virtual Machine from the Main Data Center, my Networks don't show under the NIC where
I could select them? Am I missing something on this?
Could you please elaborate on
this? I am not quite sure I understand this.
Could it be that the network is not assigned to the cluster?
Marcin
----- Original Message -----
Sent: Friday, December 2, 2016 11:15:22 PM
Subject: Re: [ovirt-users] oVirt 4 and Neutron
Ok i figured out my issue, the network wasn't configured under the Cluster
section to be allowed to see, I have now been able to spin up my own
network/subnet and then spin up 2 instances both getting DHCP addresses and
able to talk to each other. The ONLY issue i'm seeing is that random UI
error that i have e-mailed over to Alexander about. I'll let you know if i
have any other questions. I think for now I'm golden.
On Fri, Dec 2, 2016 at 1:23 PM, Devin Acosta <devin(a)pabstatencio.com> wrote:
> Marcin,
>
> So an update on my situation, I restarted all OpenVSwitch processes on all
> boxes and was able to get the CPU issue with ovs-vswitchd to return to
> normal. So I believe all those issues are resolved. I can create
> networks/subnets, minus that one strange UI issue which I'll work with
> Alexander Wels to resolve. When I still go to launch a Virtual Machine,
> should I be seeing the subnets that I created? Am I missing something? It
> seems like i'm about 95% there and I am just missing something.
>
>
> On Fri, Dec 2, 2016 at 11:44 AM, Devin Acosta <devin(a)pabstatencio.com>
> wrote:
>
>> Marcin,
>>
>> I installed the OVN-Central on a dedicated VM that lives on the ovirtmgmt
>> network, I also installed the OVN-Provider on this same instance. I then
>> installed the OVN-Controllers on all 3 of my oVirt Nodes, with the OVN
>> provider driver, and configured the vdsm ovn-controller {central-ip}
>> {ovirt-node-ip} on each of the boxes. It appears to be running but what I
>> am noticing is that the ovs-vswitchd process is pegged at 100% on all the
>> oVirt nodes.
>>
>> So for instance from oVirt Node 3 (IP 75) the ovs-vsctl shows the IPs for
>> the other 2 nodes in it's configuration. It seems to be that way across
>> all
>> 3 nodes, they know about the other nodes in the cluster. I was able to
>> create a network inside of oVIRT using the external provider. After i
>> create a subnet inside oVirt I do get an error at the top but seems to be
>> ok?
>>
>>
>> [image: Inline image 2]
>>
>> (Output from Node3 IP 75, of: ovs-vsctl show)
>>
>> 61af799c-a621-445e-8183-23dcb38ea3cc
>> Bridge br-int
>> fail_mode: secure
>> Port "ovn-c0dc09-0"
>> Interface "ovn-c0dc09-0"
>> type: geneve
>> options: {csum="true", key=flow,
remote_ip="172.10.10.73"}
>> Port "ovn-456949-0"
>> Interface "ovn-456949-0"
>> type: geneve
>> options: {csum="true", key=flow,
remote_ip="172.10.10.74"}
>> Port br-int
>> Interface br-int
>> type: internal
>> ovs_version: "2.6.90"
>>
>>
>>
>> Example where the (ovs-vswitchd) is running at 100% on all 3 oVirt Nodes.
>>
>> PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+
>> COMMAND
>> 1768 root 10 -10 49680 10808 9388 R 100.0 0.0 24:48.85
>> ovs-vswitchd
>>
>>
>> [root@ovirt01 openvswitch]# tail -f ovs-vswitchd.log
>> 2016-12-02T18:27:12.174Z|00604|poll_loop|INFO|Dropped 557231 log
>> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
>> rate
>> 2016-12-02T18:27:12.174Z|00605|poll_loop|INFO|wakeup due to 0-ms timeout
>> at vswitchd/bridge.c:3031 (100% CPU usage)
>> 2016-12-02T18:27:18.174Z|00606|poll_loop|INFO|Dropped 536053 log
>> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
>> rate
>> 2016-12-02T18:27:18.174Z|00607|poll_loop|INFO|wakeup due to 0-ms timeout
>> at vswitchd/bridge.c:3031 (100% CPU usage)
>> 2016-12-02T18:27:24.174Z|00608|poll_loop|INFO|Dropped 536369 log
>> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
>> rate
>> 2016-12-02T18:27:24.174Z|00609|poll_loop|INFO|wakeup due to 0-ms timeout
>> at vswitchd/bridge.c:3031 (100% CPU usage)
>> 2016-12-02T18:27:30.174Z|00610|poll_loop|INFO|Dropped 532134 log
>> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
>> rate
>> 2016-12-02T18:27:30.174Z|00611|poll_loop|INFO|wakeup due to 1-ms timeout
>> at vswitchd/bridge.c:3031 (100% CPU usage)
>> 2016-12-02T18:27:36.174Z|00612|poll_loop|INFO|Dropped 531659 log
>> messages in last 6 seconds (most recently, 0 seconds ago) due to excessive
>> rate
>> 2016-12-02T18:27:36.174Z|00613|poll_loop|INFO|wakeup due to 0-ms timeout
>> at vswitchd/bridge.c:3031 (99% CPU usage)
>>
>>
>> One other thing that I notice is that when I got to Provision a Virtual
>> Machine from the Main Data Center, my Networks don't show under the NIC
>> where I could select them? Am I missing something on this?
>>
>> Thanks very much for your help.
>>
>> Devin Acosta
>>
>>
>> On Fri, Dec 2, 2016 at 5:16 AM, Marcin Mirecki <mmirecki(a)redhat.com>
>> wrote:
>>
>>> Devin,
>>>
>>> > I presume the OVN Controller should just be some VM that is on the
>>> > ovirtmgmt network, or is there a preferred place to install the OVN
>>> > controller software?
>>>
>>> Please note the difference between OVN-Central and OVN-Controller:
>>> OVN-Central is the central part of OVN, storing the logical
>>> configuration and controlling the many OVN-Controllers
>>> OVN-Controller is the piece of software which resides on the
>>> ovirt-hosts, and manages the local OVS setup on the host.
>>>
>>> OVN-Central
>>> / | \
>>> / | \
>>> / | \
>>> / | \
>>> OVN-Controller OVN-Controller OVN-Controller
>>>
>>>
>>> OVN-central can be installed anywhere , as long as it can communicate
>>> with the engine and all the hosts.
>>> During development we install it along the ovirt engine for convinience.
>>>
>>> OVN-Controller must be installed on every ovirt host.
>>>
>>>
>>> >I then also assume I install the OVN agents onto all
>>> > the oVirt Nodes.
>>>
>>> Short answer: Yes
>>>
>>> Longe answer: If you plan not to use external networks on some clusters,
>>> you
>>> can skip its hosts.
>>> You can choose the clusters which support the external network by
>>> assigning the
>>> network to clusters.
>>>
>>> > I see
>>> > that when you go to add the External Provider, does OVN Controller use
>>> > authentication, is there any information I would need to have besides
>>> > knowing which node it's on in order to add it to external
provider?
>>>
>>> For now it is only the url of the provider.
>>> The provider is still under development, authentication is still just an
>>> empty mock.
>>>
>>> >Would I
>>> > need to have any bridges or OVS configured on the nodes for this to
>>> work or
>>> > just install the services and get them configured and it just works?
>>>
>>> We are using the default 'br-int' bridge which OVN is using. All
should
>>> be configured
>>> when OVS/OVN is installed.
>>>
>>> Let me know if I can help with anything else.
>>> Marcin
>>>
>>>
>>>
>>> ----- Original Message -----
>>> > From: "Devin Acosta" <devin(a)pabstatencio.com>
>>> > To: "Marcin Mirecki" <mmirecki(a)redhat.com>
>>> > Cc: "users" <Users(a)ovirt.org>, "Yaniv Dary"
<ydary(a)redhat.com>
>>> > Sent: Thursday, December 1, 2016 6:19:07 PM
>>> > Subject: Re: [ovirt-users] oVirt 4 and Neutron
>>> >
>>> > I have manually created the RPM's successfully, I just want to
clarify
>>> a
>>> > few items so I make sure I'm deploying this according to best
practice.
>>> >
>>> > I presume the OVN Controller should just be some VM that is on the
>>> > ovirtmgmt network, or is there a preferred place to install the OVN
>>> > controller software? I then also assume I install the OVN agents onto
>>> all
>>> > the oVirt Nodes. My take on this is that this OVN replaces the more
>>> complex
>>> > Neutron/OVS installation, and makes for a more simple deployment. I
>>> see
>>> > that when you go to add the External Provider, does OVN Controller use
>>> > authentication, is there any information I would need to have besides
>>> > knowing which node it's on in order to add it to external
provider?
>>> Would I
>>> > need to have any bridges or OVS configured on the nodes for this to
>>> work or
>>> > just install the services and get them configured and it just works?
>>> >
>>> >
>>> > Your assistance is appreciated.
>>> >
>>> > On Thu, Dec 1, 2016 at 3:54 AM, Marcin Mirecki
<mmirecki(a)redhat.com>
>>> wrote:
>>> >
>>> > > Devin,
>>> > >
>>> > > The openvswitch OVN packages must be build manually at the
moment.
>>> It is
>>> > > still not available either in the repos, nor as a download.
>>> > > For now please use the procedure attached below to build the OVN
>>> rpm's.
>>> > >
>>> > > I am not sure where 'firewalld-system' comes from. Is it
not
>>> > > 'firewalld-filesystem'?
>>> > > This should be available from the standard repo.
>>> > >
>>> > > The ovirt-provider-ovn is being developed quite actively, and the
>>> blogpost
>>> > > is already somewhat outdated (even though it's not even a
month
>>> old). I
>>> > > will try to update it asap.
>>> > >
>>> > > Thanks,
>>> > > Marcin
>>> > >
>>> > >
>>> > > BUILDING PROVIDER RPMS:
>>> > > ----------------------
>>> > > git clone https://gerrit.ovirt.org/ovirt-provider-ovn
>>> > > make rpm
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > BUILDING OVN RPMS:
>>> > > ------------------
>>> > >
>>> > > Clone the repository:
>>> > >
>>> > > git clone https://github.com/openvswitch/ovs
>>> > >
>>> > > Install the following packages, as they are need to build ovn:
>>> > >
>>> > > yum -y install gcc make python-devel openssl-devel kernel-devel
>>> graphviz
>>> > > kernel-debug-devel autoconf automake rpm-build redhat-rpm-config
>>> rpm-build
>>> > > rpmdevtools bash-completion autoconf automake libtool PyQt4 groff
>>> > > libcap-ng-devel python-twisted-core python-zope-interface
graphviz
>>> > > openssl-devel selinux-policy-devel
>>> > >
>>> > > Build the ovn rpms:
>>> > >
>>> > > cd ovs
>>> > > ./boot.sh
>>> > > ./configure
>>> > > make dist
>>> > > cp openvswitch-<version>.tar.gz $HOME/rpmbuild/SOURCES
>>> > > cd $HOME/rpmbuild/SOURCES
>>> > > tar xzf openvswitch-<version>.tar.gz
>>> > > cd openvswitch-<version>
>>> > > rpmbuild -bb rhel/openvswitch-fedora.spec
>>> > >
>>> > > The built rpms will reside here: ~/rpmbuild/RPMS/x86_64/
>>> > >
>>> > > --------------------
>>> > >
>>> > >
>>> > >
>>> > >
>>> > >
>>> > >
>>> > >
>>> > > ----- Original Message -----
>>> > > > From: "Yaniv Dary" <ydary(a)redhat.com>
>>> > > > To: "Devin Acosta" <devin(a)pabstatencio.com>,
"Marcin Mirecki" <
>>> > > mmirecki(a)redhat.com>
>>> > > > Cc: "users" <Users(a)ovirt.org>
>>> > > > Sent: Thursday, December 1, 2016 11:15:00 AM
>>> > > > Subject: Re: [ovirt-users] oVirt 4 and Neutron
>>> > > >
>>> > > > Adding Marcin to help with this.
>>> > > >
>>> > > > Yaniv Dary
>>> > > > Technical Product Manager
>>> > > > Red Hat Israel Ltd.
>>> > > > 34 Jerusalem Road
>>> > > > Building A, 4th floor
>>> > > > Ra'anana, Israel 4350109
>>> > > >
>>> > > > Tel : +972 (9) 7692306
>>> > > > 8272306
>>> > > > Email: ydary(a)redhat.com
>>> > > > IRC : ydary
>>> > > >
>>> > > >
>>> > > > On Thu, Dec 1, 2016 at 6:42 AM, Devin Acosta <
>>> devin(a)pabstatencio.com>
>>> > > wrote:
>>> > > >
>>> > > > >
>>> > > > > Yaniv,
>>> > > > >
>>> > > > > I am looking at the page that talks about
ovirt-provider-ovn,
>>> and it
>>> > > > > sounds like something I want to try. However the
document seems
>>> to be
>>> > > not
>>> > > > > complete, and I'm not sure i fully understand how it
should be
>>> > > deployed.
>>> > > > > When I downloaded the
"ovirt-provider-ovn-driver-0-1.noarch.rpm"
>>> and
>>> > > try
>>> > > > > to install on the oVIRT nodes it complains about needing
other
>>> packages
>>> > > > > such as:
>>> > > > >
>>> > > > > - openvswitch-ovn-central
>>> > > > > - python-openvswitch
>>> > > > > - firewalld-system
>>> > > > > - openvswitch-ovn-host
>>> > > > >
>>> > > > > I don't see anywhere where it talks about getting
access to the
>>> RPMS
>>> > > for
>>> > > > > openvswitch-ovn-central. Also I presume like Neutron I
would
>>> install
>>> > > OVN on
>>> > > > > a Master node and then install some clients on the
nodes? Can you
>>> > > provide
>>> > > > > me additional information on this?
>>> > > > >
>>> > > > >
>>> > > > >
>>> > > > > On Tue, Nov 22, 2016 at 1:43 AM, Yaniv Dary
<ydary(a)redhat.com>
>>> wrote:
>>> > > > >
>>> > > > >> We are working on a native path to SDN via OVN
(experimental at
>>> this
>>> > > > >> point):
>>> > > > >>
https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
>>> > > > >>
>>> > > > >> Using Neutron is an option, but at some point the
native option
>>> might
>>> > > be
>>> > > > >> easier to use (we want to add a UI for it and
tighter
>>> integration).
>>> > > > >>
>>> > > > >> Yaniv Dary
>>> > > > >> Technical Product Manager
>>> > > > >> Red Hat Israel Ltd.
>>> > > > >> 34 Jerusalem Road
>>> > > > >> Building A, 4th floor
>>> > > > >> Ra'anana, Israel 4350109
>>> > > > >>
>>> > > > >> Tel : +972 (9) 7692306
>>> > > > >> 8272306
>>> > > > >> Email: ydary(a)redhat.com
>>> > > > >> IRC : ydary
>>> > > > >>
>>> > > > >>
>>> > > > >> On Tue, Nov 22, 2016 at 5:09 AM, Devin Acosta <
>>> devin(a)pabstatencio.com
>>> > > >
>>> > > > >> wrote:
>>> > > > >>
>>> > > > >>> oVirt Users:
>>> > > > >>>
>>> > > > >>> My work is currently deploying oVirt 4.0.5 into
our Development
>>> > > > >>> environment. I see there use to be a maintained
Openstack
>>> Neutron
>>> > > image
>>> > > > >>> that could be used with oVirt to provide SDN
functionality. I'm
>>> > > > >>> suspecting
>>> > > > >>> that the reason for the image no longer being
maintained is
>>> because
>>> > > it
>>> > > > >>> became a hassle to keep updated and patched.
From what I
>>> understand
>>> > > the
>>> > > > >>> current idea is to just point your oVirt
installation to an
>>> already
>>> > > > >>> installed Openstack setup. I can easily install
an image and
>>> install
>>> > > the
>>> > > > >>> latest Openstack (Keystone/Neutron) and then
point oVirt to
>>> it, but I
>>> > > > >>> want
>>> > > > >>> to understand if that is the proper way to move
forward. Is
>>> there a
>>> > > > >>> general
>>> > > > >>> consensus with the way oVirt is moving in
regards to Software
>>> Defined
>>> > > > >>> Networking and Neutron in general? Just want to
ensure I
>>> understand
>>> > > it
>>> > > > >>> clearly before just installing my own Neutron if
there is
>>> going to be
>>> > > > >>> another method.
>>> > > > >>>
>>> > > > >>> Any feedback is appreciated.
>>> > > > >>>
>>> > > > >>> Devin Acosta RHCA
>>> > > > >>>
>>> > > > >>>
>>> > > > >>> _______________________________________________
>>> > > > >>> Users mailing list
>>> > > > >>> Users(a)ovirt.org
>>> > > > >>> http://lists.ovirt.org/mailman/listinfo/users
>>> > > > >>>
>>> > > > >>>
>>> > > > >>
>>> > > > >
>>> > > > >
>>> > > > > --
>>> > > > >
>>> > > > > Devin Acosta
>>> > > > > Red Hat Certified Architect, LinuxStack
>>> > > > > 602-354-1220 || devin(a)linuxguru.co
>>> > > > >
>>> > > >
>>> > >
>>> >
>>> >
>>> >
>>> > --
>>> >
>>> > Devin Acosta
>>> > Red Hat Certified Architect, LinuxStack
>>> > 602-354-1220 || devin(a)linuxguru.co
>>> >
>>>
>>
>>
>>
>> --
>>
>> Devin Acosta
>> Red Hat Certified Architect, LinuxStack
>> 602-354-1220 || devin(a)linuxguru.co
>>
>
>
>
> --
>
> Devin Acosta
> Red Hat Certified Architect, LinuxStack
> 602-354-1220 || devin(a)linuxguru.co
>
--
Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || devin(a)linuxguru.co
2701
days inactive
2714
days old
11 comments
4 participants
participants (4)
-
Alexander Wels -
Devin Acosta -
Marcin Mirecki -
Yaniv Dary