remote-viewer Spice Problem on MacOS

Hi all, we are currently experiencing a weird problem with oVirt and the spice console on MacOS: Occasionally when our Mac Users are connecting to a Spice Console of any oVirt VM it opens the usual window but just displays the message: "Connected to graphic server". When a Linux user now connects to it and closes the connection the Mac user can also connect again normally. I have tried https://www.spice-space.org/osx-client.html and https://rizvir.com/articles/ovirt-mac-console/ with exactly the same behaviour. The Issue appears on several different MacOS Versions and we believe it started after our upgrade to oVirt 4.2. MacOS Version: 10.13.5 oVirt Version: 4.2.3.8-1.el7 Any help or suggestion is greatly appreciated. Best regards, Hendrik

On 18 Jun 2018, at 11:09, hpeyerl@plusline.net wrote:
Hi all,
we are currently experiencing a weird problem with oVirt and the spice console on MacOS: Occasionally when our Mac Users are connecting to a Spice Console of any oVirt VM it opens the usual window but just displays the message: "Connected to graphic server". When a Linux user now connects to it and closes the connection the Mac user can also connect again normally.
I have tried https://www.spice-space.org/osx-client.html and https://rizvir.com/articles/ovirt-mac-console/ with exactly the same behaviour. The Issue appears on several different MacOS Versions and we believe it started after our upgrade to oVirt 4.2.
you need something like [1]. It was always the case with spice’s client on mac If it is only occasionally used on mac, alternatively you can use SPICE+VNC and connect to VNC on mac an SPICE on linux/windows Thanks, michal [1] https://github.com/juhoffma/rhev-console-launcher
MacOS Version: 10.13.5 oVirt Version: 4.2.3.8-1.el7
Any help or suggestion is greatly appreciated.
Best regards, Hendrik _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZQS676FGIRSLSX...

you need something like [1]. It was always the case with spice’s client on mac If it is only occasionally used on mac, alternatively you can use SPICE+VNC and connect to VNC on mac an SPICE on linux/windows
Thanks, michal
Hi Michal, thanks for your quick reply, sadly the rhev-console-launcher will also depend and open the remote-viewer that we currently have issues with. VNC is only a very last resort especially since the virt-viewer has been working for us for over 2 years now. Thanks, Hendrik

We have the same issue potentially. In fact, for some VMs, we get even an error now (even though it works from Windows). In the error log on the hypervisor, we get a “SSL error”. This is in libvirtd logs. @Hendrik, do you have perhaps same error? 140085012483328:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640: (process:375537): Spice-WARNING **: reds-stream.c:469:reds_stream_ssl_accept: SSL_accept failed, error=1 I did post to this mailing list 2 weeks ago, but received 0 replies. Thank you, Christophe
On 18 Jun 2018, at 13:22, hpeyerl@plusline.net wrote:
you need something like [1]. It was always the case with spice’s client on mac If it is only occasionally used on mac, alternatively you can use SPICE+VNC and connect to VNC on mac an SPICE on linux/windows
Thanks, michal
Hi Michal,
thanks for your quick reply, sadly the rhev-console-launcher will also depend and open the remote-viewer that we currently have issues with. VNC is only a very last resort especially since the virt-viewer has been working for us for over 2 years now.
Thanks, Hendrik _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4G7DUEHTVC7E47...

On 2018-06-18 08:11, Christophe TREFOIS wrote:
We have the same issue potentially.
In fact, for some VMs, we get even an error now (even though it works from Windows).
In the error log on the hypervisor, we get a “SSL error”. This is in libvirtd logs.
@Hendrik, do you have perhaps same error?
140085012483328:error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640: (process:375537): Spice-WARNING **: reds-stream.c:469:reds_stream_ssl_accept: SSL_accept failed, error=1
I get pretty much the same error. I do have some other interesting data points though. i just upgraded my production cluster from 4.1 to 4.2 and it then started showing this error. On the other hand, I have my secondary cluster which was installed directly to 4.2 with no upgrades. It does not suffer from the same issue. The error: ------------- 2018-06-18 11:14:02.175 defaults[57134:17925419] The domain/default pair of (.GlobalPreferences, AppleCollationOrder) does not exist /Applications/RemoteViewer.app/Contents/MacOS/RemoteViewer: line 79: test: argument expected (RemoteViewer-bin:57126): GSpice-WARNING **: Error receiving data: Connection reset by peer (RemoteViewer-bin:57126): GSpice-WARNING **: main-1:0: SSL_connect: error:00000005:lib(0):func(0):DH lib -------------- This is with the latest OSX build of the RemoteViewer application available at "http://people.freedesktop.org/~teuf/spice-gtk-osx/dmg/0.5.7/RemoteViewer-0.5..." -- Brian Ismay CENIC Sr. Systems Administrator jismay@cenic.org

I've been seeing similar behavior but when running virt-viewer on windows. I only noticed it after updating to 4.2 but for me it seems to only happen with guests running CentOS 7.5 and then only after a while like it's related to the console going blank from being idle. Using aspice from movirt has no problem and using vnc also works fine. Connecting with either of those, hitting a key and then disconnecting and switching to the windows spice client fixes it for a while. Updating to remote-viewer 6.0-256 made no difference. On 6/18/2018 5:09 AM, hpeyerl@plusline.net wrote:
Hi all,
we are currently experiencing a weird problem with oVirt and the spice console on MacOS: Occasionally when our Mac Users are connecting to a Spice Console of any oVirt VM it opens the usual window but just displays the message: "Connected to graphic server". When a Linux user now connects to it and closes the connection the Mac user can also connect again normally.
I have tried https://www.spice-space.org/osx-client.html and https://rizvir.com/articles/ovirt-mac-console/ with exactly the same behaviour. The Issue appears on several different MacOS Versions and we believe it started after our upgrade to oVirt 4.2.
MacOS Version: 10.13.5 oVirt Version: 4.2.3.8-1.el7
Any help or suggestion is greatly appreciated.
Best regards, Hendrik _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZQS676FGIRSLSX...

Count me affected too, but like others here, only started having problems after upgrading from 4.1.8 to 4.2.3 . I've also noticed the it seems to affect mostly/only my CentOS (all 7.5) VMs, but only after they've been up for a while. I also have several Fedora 27/28 VMs and those don't seem to be affected. I'm running virt-viewer on Fedora 28 (virt-viewer-6.0-3.fc28.x86_64). I've had better luck with moVirt, but have been fighting an issue[0] there that may or may not be related. Again, the moVirt issue only appeared after upgrading to 4.2. [0] Console option not always available (https://github.com/oVirt/moVirt/issues/303) On 2018-06-18 15:21, Jeff Bailey wrote:
I've been seeing similar behavior but when running virt-viewer on windows. I only noticed it after updating to 4.2 but for me it seems to only happen with guests running CentOS 7.5 and then only after a while like it's related to the console going blank from being idle. Using aspice from movirt has no problem and using vnc also works fine. Connecting with either of those, hitting a key and then disconnecting and switching to the windows spice client fixes it for a while. Updating to remote-viewer 6.0-256 made no difference.
On 6/18/2018 5:09 AM, hpeyerl@plusline.net wrote:
Hi all,
we are currently experiencing a weird problem with oVirt and the spice console on MacOS: Occasionally when our Mac Users are connecting to a Spice Console of any oVirt VM it opens the usual window but just displays the message: "Connected to graphic server". When a Linux user now connects to it and closes the connection the Mac user can also connect again normally.
I have tried https://www.spice-space.org/osx-client.html and https://rizvir.com/articles/ovirt-mac-console/ with exactly the same behaviour. The Issue appears on several different MacOS Versions and we believe it started after our upgrade to oVirt 4.2.
MacOS Version: 10.13.5 oVirt Version: 4.2.3.8-1.el7
Any help or suggestion is greatly appreciated.
Best regards, Hendrik _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZQS676FGIRSLSX...
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/MWFTUGIDZ74ZS2...
-- John Florian

That is infact a very interesting Information as we basically only run CentOS VMs, I have tried to connect to our CentOS 7.4 VMs and that actually worked everytime. I did manage to get an error from the debug output of my RemoteViewer.app: GSpice-CRITICAL **: display_handle_monitors_config: assertion `config->count > 0' failed I'm going to further investigate what differences CentOS 7.5 brought that could lead to this, my first Idea is that this could be related to screensavers. I'll keep you guys posted. Thanks, Hendrik

I have found a temporary? solution that seems to be working for us. As I predicted it is indeed the lockscreen that leads to the problem. Per default the VMs will lock the screen after 10 minutes at which time I was not able to connect to it anymore. Here is how i disabled the lockscreen: Set it during the runtime: TERM=linux setterm -blank 0 -powerdown 0 -powersave off >/dev/tty0 </dev/tty0 Set it persistent: Add 'consoleblank=0' to '/etc/default/grub' and rebuild the grub: grub2-mkconfig -o /boot/grub2/grub.cfg I am not sure if this is actually considerd a bug and if I should post it to a bugtracker - if so can anyone point me to where it should be reported. Thanks, Hendrik

On 19 Jun 2018, at 14:17, Hendrik Peyerl <hpeyerl@plusline.net> wrote:
I have found a temporary? solution that seems to be working for us.
As I predicted it is indeed the lockscreen that leads to the problem. Per default the VMs will lock the screen after 10 minutes at which time I was not able to connect to it anymore. Here is how i disabled the lockscreen:
Set it during the runtime: TERM=linux setterm -blank 0 -powerdown 0 -powersave off >/dev/tty0 </dev/tty0
Set it persistent: Add 'consoleblank=0' to '/etc/default/grub' and rebuild the grub: grub2-mkconfig -o /boot/grub2/grub.cfg
I am not sure if this is actually considerd a bug and if I should post it to a bugtracker - if so can anyone point me to where it should be reported.
quite likely. Any connectivity issue should no really be dependent on what you do in guest It might be a bug specific to the alpha-quality mac viewer though Still, please bring that up to SPICE team - https://www.spice-space.org/support.html Thanks, michal
Thanks, Hendrik _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/TS4BNXZ6H2GNO7...

On 21 Jun 2018, at 14:20, Michal Skrivanek <michal.skrivanek@redhat.com> wrote:
On 19 Jun 2018, at 14:17, Hendrik Peyerl <hpeyerl@plusline.net> wrote:
I have found a temporary? solution that seems to be working for us.
As I predicted it is indeed the lockscreen that leads to the problem. Per default the VMs will lock the screen after 10 minutes at which time I was not able to connect to it anymore. Here is how i disabled the lockscreen:
Set it during the runtime: TERM=linux setterm -blank 0 -powerdown 0 -powersave off >/dev/tty0 </dev/tty0
Set it persistent: Add 'consoleblank=0' to '/etc/default/grub' and rebuild the grub: grub2-mkconfig -o /boot/grub2/grub.cfg
I am not sure if this is actually considerd a bug and if I should post it to a bugtracker - if so can anyone point me to where it should be reported.
quite likely. Any connectivity issue should no really be dependent on what you do in guest It might be a bug specific to the alpha-quality mac viewer though
actually the other emails confirm the same behavior with windows and fedora versions of the client…so..even more important to report I guess
Still, please bring that up to SPICE team - https://www.spice-space.org/support.html
Thanks, michal
Thanks, Hendrik _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/TS4BNXZ6H2GNO7...

On 2018-06-21 08:20, Michal Skrivanek wrote:
Any connectivity issue should no really be dependent on what you do in guest Agreed Still, please bring that up to SPICE team -https://www.spice-space.org/support.html
I was just trying to do so myself. If I do a Simple Search at https://bugs.freedesktop.org/query.cgi I can choose the "Spice" product, but I found nothing. So I attempted to file a new bug and I must pick a product on which to enter the bug, but there "Spice" is not an option. Huh?

+Spice devel mailing list. On Thu, Jun 21, 2018, 11:57 PM John Florian <jflorian@doubledog.org> wrote:
On 2018-06-21 08:20, Michal Skrivanek wrote:
Any connectivity issue should no really be dependent on what you do in guest Agreed Still, please bring that up to SPICE team - https://www.spice-space.org/support.html
I was just trying to do so myself. If I do a Simple Search at https://bugs.freedesktop.org/query.cgi I can choose the "Spice" product, but I found nothing. So I attempted to file a new bug and I must pick a product on which to enter the bug, but there "Spice" is not an option. Huh? _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZZKIRK3CHZTJ6A...

+Spice devel mailing list.
On Thu, Jun 21, 2018, 11:57 PM John Florian < jflorian@doubledog.org > wrote:
On 2018-06-21 08:20, Michal Skrivanek wrote:
Any connectivity issue should no really be dependent on what you do in guest
Agreed
Still, please bring that up to SPICE team - https://www.spice-space.org/support.html
I was just trying to do so myself. If I do a Simple Search at
https://bugs.freedesktop.org/query.cgi I can choose the "Spice" product,
but I found nothing. So I attempted to file a new bug and I must pick a
product on which to enter the bug, but there "Spice" is not an option. Huh?
Question: what is this about? Title: "remote-viewer Spice Problem on MacOS" but I see no description of a Mac OS issue. "Any connectivity issue should no really be dependent on what you do in guest", what is this referring to? "So I attempted to file a new bug and I must pick a product on which to enter the bug..." maybe this is related to the fact that we moved to gitab, see https://gitlab.freedesktop.org/groups/spice/-/issues. Can somebody confirm this is the possible reason? Frediano

On Mon, Jun 25, 2018 at 06:15:30AM -0400, Frediano Ziglio wrote:
+Spice devel mailing list.
On Thu, Jun 21, 2018, 11:57 PM John Florian < jflorian@doubledog.org > wrote:
On 2018-06-21 08:20, Michal Skrivanek wrote:
Any connectivity issue should no really be dependent on what you do in guest
Agreed
Still, please bring that up to SPICE team - https://www.spice-space.org/support.html
I was just trying to do so myself. If I do a Simple Search at
https://bugs.freedesktop.org/query.cgi I can choose the "Spice" product,
but I found nothing. So I attempted to file a new bug and I must pick a
product on which to enter the bug, but there "Spice" is not an option. Huh?
Question: what is this about?
Yup, I was wondering the same ;) The full thread would be https://lists.ovirt.org/archives/list/users@ovirt.org/thread/ZQS676FGIRSLSXK... Christophe

I have now opened a Bugreport, not sure if it's in the correct section, but lets pray ;) https://gitlab.freedesktop.org/spice/spice/issues/22
participants (10)
-
Christophe Fergeau
-
Christophe TREFOIS
-
Frediano Ziglio
-
Hendrik Peyerl
-
hpeyerl@plusline.net
-
J Brian Ismay
-
Jeff Bailey
-
John Florian
-
Michal Skrivanek
-
Yaniv Kaul