- Devel - oVirt List Archives

planned Jenkins restart
by Evgheni Dereveanchin 31 Oct '18

31 Oct '18

Hi everyone, I'll be performing a planned Jenkins restart within the next hour. No new jobs will be scheduled during this maintenance period. I will inform you once it is over. Regards, Evgheni Dereveanchin

1 1

Decipher traffic between ovirt-engine and ovirt-node (vdsm)
by Anastasiya Ruzhanskaya 29 Oct '18

29 Oct '18

Hello! I was successful in deciphering the traffic between the client and ovirt-engine, actually, only by dumping the premaster key from the browser, which was generated during the session and providing it to wireshark. How it can be done for ovirt-engine and vdsm communication? Should the engine private key be provided? Actually to my surprise I don't see any ssl communication between engine and node when for example turn on the virtual machine, only tcp packets. But this page https://ovirt.org/develop/release-management/features/infra/pki/ states that there should be one. And also should I look for any xml rpc dissector? I know that for example virt-manager uses rpc protocol, I found a dissector for that case, but seems I need another one here.

3 14

ovirt engine certificate password
by Anastasiya Ruzhanskaya 28 Oct '18

28 Oct '18

Hello everyone! I am trying to analyze traffic between ovirt-engine and vdsm. First strange thing is, that it should be encrypted by default . When I listen in wireshark for message from engine to vdsm being on the engine machine, the traffic is not encrypted. It is only tcp. I expect it then be acceptable for wireshark json dissector. But this is not a json. Is this a normal situation or I should set up encryption by myself? However, on the guest machine, I see in wireshark that the traffic between engine and vdsm is encrypted. ( I have a configuration of my computer as a client and two VMs as engine and node). So , I am trying to use engine's private key to decrypt it. The private key is not engine_id_rsa (am I right?), but it is hidden inside .p12 file. To extract the key from this file I need a password. During the ovirt installing I didn't set up any password for this. Is this maybe a default one? How can I extract a private key? So, the final questions are: 1) Should the traffic between engine and vdsm be encrypted by default? 2) How the private key for engine can be extracted?

2 1

Conflicting ovs-2.10 and dpdk libraries
by Miguel Duarte de Mora Barroso 26 Oct '18

26 Oct '18

Hello all, I've seen many of you reach this same problem over the last week when updating ovirt-engine - or node - to the 4.3 candidate. The following is an excerpt of the error: -> Finished Dependency Resolution Error: Package: 1:openvswitch-ovn-common-2.10.0-1.el7.x86_64 (centos-ovirt43-testing) Requires: librte_pmd_mlx4.so.1()(64bit) Available: dpdk-17.11-13.el7.x86_64 (rhel-7.6-extras) librte_pmd_mlx4.so.1()(64bit) Installed: 2:dpdk-17.11-3.el7.x86_64 (@centos-ovirt43-testing) Not found Error: Package: 1:openvswitch-ovn-common-2.10.0-1.el7.x86_64 (centos-ovirt43-testing) Requires: librte_power.so.1()(64bit) Available: dpdk-17.11-13.el7.x86_64 (rhel-7.6-extras) librte_power.so.1()(64bit) Installed: 2:dpdk-17.11-3.el7.x86_64 (@centos-ovirt43-testing) Not found Error: Package: 1:openvswitch-ovn-common-2.10.0-1.el7.x86_64 (centos-ovirt43-testing) Requires: librte_pmd_mlx5.so.1()(64bit) Available: dpdk-17.11-13.el7.x86_64 (rhel-7.6-extras) librte_pmd_mlx5.so.1()(64bit) Installed: 2:dpdk-17.11-3.el7.x86_64 (@centos-ovirt43-testing) Not found ... Should you stumble into this situation, remove the currently installed dpdk version (yum remove "dpdk*") then install it again - this time assuring it is installed from the extras repo. After that, installation should proceed smoothly. Regards, Miguel

1 0

ovirt-engine has been tagged (ovirt-engine-4.2.7.3)
by Tal Nisan 25 Oct '18

25 Oct '18

1 1

Re: [EXTERNAL] Re: List of Queries related to RHV
by Pavan Chavva 25 Oct '18

25 Oct '18

Bumping this thread as the last update from Veritas did not reflect in OVirt Devel list. Best, Pavan. On Wed, Oct 17, 2018 at 10:03 AM Mahesh Falmari <Mahesh.Falmari(a)veritas.com> wrote: > Thanks for the prompt response on these queries. We have few follow-up > queries mentioned inline. > > > > Thanks & Regards, > Mahesh Falmari > > > > *From:* Yaniv Lavi <ylavi(a)redhat.com> > *Sent:* Tuesday, October 16, 2018 7:19 PM > *To:* Mahesh Falmari <Mahesh.Falmari(a)veritas.com> > *Cc:* Nir Soffer <nsoffer(a)redhat.com>; Erez, Daniel <derez(a)redhat.com>; > Tal Nisan <tnisan(a)redhat.com>; Pavan Chavva <pchavva(a)redhat.com>; devel < > devel(a)ovirt.org>; James Olson <James.Olson(a)veritas.com>; Navin Tah < > Navin.Tah(a)veritas.com>; Sudhakar Paulzagade < > Sudhakar.Paulzagade(a)veritas.com>; Abhay Marode <Abhay.Marode(a)veritas.com>; > Suchitra Herwadkar <Suchitra.Herwadkar(a)veritas.com>; Nirmalya Sirkar < > Nirmalya.Sirkar(a)veritas.com>; Abhijeet Barve <Abhijeet.Barve(a)veritas.com> > *Subject:* [EXTERNAL] Re: List of Queries related to RHV > > > > > *YANIV LAVI* > > SENIOR TECHNICAL PRODUCT MANAGER > > Red Hat Israel Ltd. <https://www.redhat.com/> > > 34 Jerusalem Road, Building A, 1st floor > > Ra'anana, Israel 4350109 > > ylavi(a)redhat.com T: +972-9-7692306/8272306 F: +972-9-7692223 > IM: ylavi > > <https://red.ht/sig> > > *TRIED. TESTED. TRUSTED.* <https://redhat.com/trusted> > > @redhatnews <https://twitter.com/redhatnews> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> > > > > On Tue, Oct 16, 2018 at 4:35 PM Mahesh Falmari <Mahesh.Falmari(a)veritas.com> > wrote: > > Hi Nir, > > We have few queries with respect to RHV which we would like to understand > from you. > > > > *1. Does RHV maintains the virtual machine configuration file in back end?* > > Just like we have configuration files for other hypervisors like for > VMware it is .vmx and for Hyper-V, it is .vmcx which captures most of the > virtual machine configuration information in that. On the similar lines, > does RHV also maintains such file? If not, what is the other way to get all > the virtual machine configuration information from a single API? > > > > There is a OVF storage, but this is not meant for consumption. > > Please follow the first section in: > > *https://ovirt.org/develop/release-management/features/storage/backup-restore-disk-snapshots/ > <https://ovirt.org/develop/release-management/features/storage/backup-restor…>* > > This explains how to use the API to get a OVF for a VM. > > > > > > *2. Is VM UUID the only way to uniquely identify virtual machine in the > RHV infrastructure?* > > What we understand is that VM UUID is the way to identify virtual machine > uniquely in the RHV infrastructure. Would like to know any other way than > this? > > > > UUID is the way to do this. > > > > > > *3. Do we have any version associated with the virtual machine?* > > Just like we have hardware version in case of VMware and virtual machine > version in case of Hyper-V, does RHV also associate any such version with > virtual machine? > > > > The HW version is based on the VM machine type. > > [Mahesh] Can you please elaborate more on this? How simply VM machine > type going to determine it’s version? > > > > *4. Is it possible to create virtual machines with QCOW2 as base disks > instead of RAW?* > > We would like to understand if there are any use cases customers prefer > creating virtual machines from QCOW2 as base disks instead of RAW ones. > > > > That is a possibility in cases of thin disk on file storage. > > [Mahesh] Can you please elaborate more on this? > > > > *5. RHV Deployment* > > What kind of deployments you have come across in the field? Does customers > scale their infrastructure by adding more datacenters/clusters/nodes or > they add more RHV managers? What scenarios trigger having more than one RHV > manager? > > > > We are all kind with oVirt. I depends on the use case. > > > > > > *6. Image transfer* > > We are trying to download disk chunks using multiple threads to improve > performance of reading data from RHV. Downloading 2 disk chunks > simultaneously via threads should take approximately the same time. But > from our observations this takes roughly 1.5 times. > Can RHVM server requests in parallel, if so are there any settings that > need to be tweaked? > > Here is an example: > Request 1 for chunk 1 from thread 1, Range: bytes=0-1023 > Request 2 for chunk 2 from thread 2, Range: bytes=1024-2047 > Takes roughly 1.5 seconds, whereas a single request would take 1 second. > Expecting it to take just around 1 second. > > [Mahesh] Seeking response to this query. > > *7. Free and Thaw operation* > > For cinder based VM, API recommended for FS consistent backup. > > - POST /api/vms/<ID>/freezefilesystems > - POST /api/vms/<ID>/thawfilesystems > > Why do we need this whereas it is not required for other storage? > > Creating a snapshot does this for you in a case where you have the oVirt > guest agent install on the guest. > > [Mahesh] Thanks, we would also like to understand is there a way to > control crash/app consistent snapshots through REST APIs? > > > > Thanks & Regards, > Mahesh Falmari > > > > -- PAVAN KUMAR CHAVVA ENGINEERING PARTNER MANAGER Red Hat pchavva(a)redhat.com M: 4793219099 IM: pchavva

2 1

Parsing gwt rpc messages
by Anastasiya Ruzhanskaya 24 Oct '18

24 Oct '18

Hello everyone! I am trying to determine how the person who knows for example all necessary function calls and parameters can determine the content of the message sent. This is an example of the message I am trying to parse (I already separated it on some meaningful parts), numbers in braces just help to make correspondence between payload and strings: 7| 0| 14| (1)https://engine.localdomain/ovirt-engine/webadmin/| //URL (2)E8B2AD24442204349EF795039C3B87E5| // policy name (3)org.ovirt.engine.ui.frontend.gwtservices.GenericApiGWTService| service interface (4)runMultipleActions| name of the method (5)org.ovirt.engine.core.common.action.ActionType/12242454|, (6)java.util.ArrayList/4159755760|, (7)Z| ( two times)) // bool type (8)org.ovirt.engine.core.common.action.ShutdownVmParameters/1694554255| (9)org.ovirt.engine.core.compat.Guid/1992968158| (10)java.util.UUID/2940008275| (11)org.ovirt.engine.core.common.action.ActionParametersBase$EndProcedure/1568822488| (12)java.util.Collections$EmptyMap/4174664486| (13)org.ovirt.engine.core.common.businessentities.VDSStatus/1938301532| (14)org.ovirt.engine.core.compat.TransactionScopeOption/1475850853| (the following is the payload separated and commented in places where I can understand it) 1| 2| 3| 4| 4|- 4 method parameters 5|- first type = ActionType 6|- second type = arraylist 7|- third type = boolean 7|- fourth type = boolean 5(actionType)|9 (shutdown)| 6(arrayList)|1(??)| 8 (shutdown vm parameters, list object)|1|0|0|0|(??) 9 (guid, ?)|10(UUID)|J$m4mk9wVi3|MjeP460Xkpb (vm uuid)|0|5|0|0|0|11|1|0|6|0|0|0|0|0|0|12|0|-6|13|0|1|0|1|14|2|0|0|0|0|0| Until vm uuid parameter it is kind of clear what is happening, but I still wonder what do the parameters 1 and 0 mean in places marked as (??). I understand, that there is a method called runMultipleActions and it has four parameters. I found in source examples of calling this method (ovirt-engine/frontend/webadmin/modules/./frontend/src/test/java/org/ovirt/engine/ui/frontend/FrontendActionTest.java).Then I determine types of these parameters. Then the type of action performed ( I shut down the machine). Then there should be an ArrayList, which contains several objects. I assume that 8(shutdown vm parameters) should follow right after 6 (arraylist), but there a "1" which I can't explain. Also for shutdown parameters: I see in examples that there are not so many boolean parameters in constructor there. Here are four! (1|0|0|0) What do they mean? And how can I cope with the left payload? Thank you in advance for any help! P.S. Also vm ids have another format when for example I do the same actions from web - ui: c8de3f8e-b45e-4a5b-9fa6-e2693dc158b7. Why this is so?

2 3

jobs failure due to same package version with different checksum
by Dafna Ron 24 Oct '18

24 Oct '18

Hi, We have been having failure in master for different projects due to package ovirt-ansible-disaster-recovery-1.1.2-1.el7.noarch.rpm. It seems the package had been changed without a new version set which means we have the same exact package with two different checksum (one in 4.2 and one in master): ovirt-4.2: [dron@resources02 noarch]$ md5sum ovirt-ansible-disaster-recovery-1.1.2-1.el7.noarch.rpm 07b2c6c7ef94e48be3c197e2a1d45d81 ovirt-ansible-disaster-recovery-1.1.2-1.el7.noarch.rpm ovirt-master: [dron@resources02 noarch]$ md5sum ovirt-ansible-disaster-recovery-1.1.2-1.el7.noarch.rpm f6b2e88ae07b64d5071696ade510d961 ovirt-ansible-disaster-recovery-1.1.2-1.el7.noarch.rpm Can you please create a new package with version change to solve this problem? Thanks, Dafna

2 3

How does the host synchronizes existing storage domains when added to engine?
by Tianyuan Wang 24 Oct '18

24 Oct '18

hi all, We are developing for supporting ceph as a new storage domain type. It went well when creating and using. But we cannot add a new host to the engine when there is already a ceph-StorageDomain. The engine reports "VDSM node1 command ConnectStoragePoolVDS failed: Cannot find master domain" and set the node to "Non Operational" status. The vdsm log reports error like this: INFO (jsonrpc/0) [vdsm.api] FINISH connectStoragePool error=Cannot find master domain: u'spUUID=5bc95ba9-01f7-0307-0342-000000000033, msdUUID=a3d6903d-07d5-4794-9667-9dddc3c84fe6' from=::ffff:192.168.122.22,40166, flow_id=43b39e00, task_id=4128f9d4-3c92-46ed-a230-2505d3a8ddb9 (api:50) 2018-10-24 11:06:22,227+0800 ERROR (jsonrpc/0) [storage.TaskManager.Task] (Task='4128f9d4-3c92-46ed-a230-2505d3a8ddb9') Unexpected error (task:875) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882, in _run return fn(*args, **kargs) File "<string>", line 2, in connectStoragePool File "/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 48, in method ret = func(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 1032, in connectStoragePool spUUID, hostID, msdUUID, masterVersion, domainsMap) File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 1094, in _connectStoragePool res = pool.connect(hostID, msdUUID, masterVersion) File "/usr/lib/python2.7/site-packages/vdsm/storage/sp.py", line 704, in connect self.__rebuild(msdUUID=msdUUID, masterVersion=masterVersion) File "/usr/lib/python2.7/site-packages/vdsm/storage/sp.py", line 1275, in __rebuild self.setMasterDomain(msdUUID, masterVersion) File "/usr/lib/python2.7/site-packages/vdsm/storage/sp.py", line 1488, in setMasterDomain raise se.StoragePoolMasterNotFound(self.spUUID, msdUUID) StoragePoolMasterNotFound: Cannot find master domain: u'spUUID=5bc95ba9-01f7-0307-0342-000000000033, msdUUID=a3d6903d-07d5-4794-9667-9dddc3c84fe6' After tracing back, I found that there is no local file path under /rhev/data-center/mnt for the storage domain, so it cannot find storage domain when ConnectStoargeSever runs. It only happens when adding a new host to engine and there is already a ceph-StroageDomain in ovirt. So how does the host synchronized the existing storage domains? And what can I do to fix this? Thanks in advance! Yours Sincerely, Tianyuan

3 2

Live merge of snapshot
by Abhay Marode 23 Oct '18

23 Oct '18

Hi, In case of snapshot creation and deletion of VM with chain of snapshots I observed following behavior while deleting the snapshot, * When VM is powered ON, I could see two events in event manager, 1) initiated snapshot deletion 2) snapshot deletion successful * When VM is powered OFF, I saw three events 1) initiated snapshot deletion 2) merge snapshot 'Active VM' into 'snap1' 3) snapshot deletion successful. Why there is difference in events based on power state of VM? Do we free up the storage in deletion of snapshot? Here are config details: Host OS Version: RHEL - 7.5 - 4.3.el7 OS Description: Red Hat Virtualization Host 4.2.4 (el7.5) Kernel Version: 3.10.0 - 862.6.3.el7.x86_64 KVM Version: 2.10.0 - 21.el7_5.4 LIBVIRT Version: libvirt-3.9.0-14.el7_5.6 VDSM Version: vdsm-4.20.31-1.el7ev SPICE Version: 0.14.0 - 2.el7_5.4 GlusterFS Version: glusterfs-3.8.4-54.10.el7rhgs CEPH Version: librbd1-0.94.5-2.el7 Kernel Features: PTI: 1, IBRS: 0, RETP: 1 Regards, -Abhay

2 1