- Devel - oVirt List Archives

CVE-2018-3639 qemu-kvm-ev-2.10.0-21.el7_5.4.1 is now available for testing
by Sandro Bonazzola 28 Jun '18

28 Jun '18

Hi, qemu-kvm-ev-2.10.0-21.el7_5.4.1 has been tagged for testing. If nothing shows up, I'll tag it for release on Monday July 2nd. Here's the changelog: * Thu Jun 28 2018 Sandro Bonazzola <sbonazzo(a)redhat.com> - ev-2.10.0-21.el7_5.4.1 - Removing RH branding from package name * Sat Jun 09 2018 Miroslav Rezanina <mrezanin(a)redhat.com> - rhev-2.10.0-21.el7_5.4 - kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1571370] - kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1571370] - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584370] - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584370] - kvm-cpus-Fix-event-order-on-resume-of-stopped-guest.patch [bz#1582122] - kvm-spec-Enable-Native-Ceph-support-on-all-architectures.patch [bz#1588001] - Resolves: bz#1571370 (Pegas1.1 Alpha: SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-rhev) [rhel-7.5.z]) - Resolves: bz#1582122 (IOERROR pause code lost after resuming a VM while I/O error is still present [rhel-7.5.z]) - Resolves: bz#1584370 (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: AMD: speculative store bypass [rhel-7.5.z]) - Resolves: bz#1588001 (Enable Native Ceph support on non x86_64 CPUs [rhel-7.5.z]) For testing: $ sudo yum install centos-release-qemu-ev $ sudo yum-config-manager --enable centos-qemu-ev-test $ sudo yum update "qemu-kvm-ev*" and use it as usual. Thanks, -- SANDRO BONAZZOLA MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig>

1 0

[VDSM] Why hooks are required for installing vdsm?
by Nir Soffer 28 Jun '18

28 Jun '18

Trying to update vdsm master, my update script fail with: installing... error: Failed dependencies: vdsm = 4.30.0-429.git05bfb8731.fc28 is needed by (installed) vdsm-hook-fcoe-4.30.0-429.git05bfb8731.fc28.noarch vdsm = 4.30.0-429.git05bfb8731.fc28 is needed by (installed) vdsm-hook-ethtool-options-4.30.0-429.git05bfb8731.fc28.noarch I tried to remove these hooks, since I'm not interested in any of them, but removing them try to remove 136 packages including libvirt. Why do we have these dependencies? hook should be optional. Who owns these hooks? Nir

2 4

Ovirt master build failing in my local (fedora27)
by Gobinda Das 27 Jun '18

27 Jun '18

Hi, I am trying to build ovirt master code in my local but build is failing with following error: ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/ovirt_engine_setup/engine_common/postgres.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/ovirt_engine_setup/engine_common/database.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/ovirt_engine_setup/remote_engine.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-common/base/core/postinstall.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-setup/websocket_proxy/pki.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-setup/websocket_proxy/config.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-setup/ovirt-engine/upgrade/asynctasks.py Imports are incorrectly sorted. ERROR: /home/godas/workspace/ovirt-engine/packaging/setup/plugins/ovirt-engine-setup/vmconsole_proxy_helper/config.py Imports are incorrectly sorted. + echo ERROR: The following check failed: I have cleared my DB as well and also did yum update. -- Thanks, Gobinda

2 2

Adding Fedora 28 host to engine 4.2 (NotImplementedError: Packager install not implemented)
by Nir Soffer 27 Jun '18

27 Jun '18

I'm trying to add a host running Fedora 28 to engine 4.2, and installation fails with: 2018-06-20 01:14:26,137+0300 DEBUG otopi.context context._executeMethod:143 method exception Traceback (most recent call last): File "/tmp/ovirt-Z5BGYej3Qa/pythonlib/otopi/context.py", line 133, in _executeMethod method['method']() File "/tmp/ovirt-Z5BGYej3Qa/otopi-plugins/ovirt-host-deploy/vdsm/vdsmid.py", line 84, in _packages self.packager.install(('dmidecode',)) File "/tmp/ovirt-Z5BGYej3Qa/pythonlib/otopi/packager.py", line 102, in install raise NotImplementedError(_('Packager install not implemented')) NotImplementedError: Packager install not implemented 2018-06-20 01:14:26,138+0300 ERROR otopi.context context._executeMethod:152 Failed to execute stage 'Environment packages setup': Packager install not implemented Do we have a way to workaround this? I must have a host when I can build and test virt-v2v upstream from source, and virt-v2v requires python 3. So I need some workaround to get the host connected to engine. Nir

7 28

UI plugin API updates
by Vojtech Szocs 26 Jun '18

26 Jun '18

Hi everyone, just a heads-up on recent UI plugin API changes. *oVirt 4.2* 4.2.5+ will support "icon" option when adding new menu item & content via addMainTab API function [1]. Both Font Awesome and PatternFly icons are supported [2]. api.addMainTab('Test', 'fooBar', 'plugin/plugin-name/test.html', { icon: 'fa-lock' // icon: 'pficon-security' }); [1] https://bugzilla.redhat.com/1591730 [2] https://www.patternfly.org/styles/icons/ *oVirt** master* You can now use showToast API function [3] to render "toast" notifications in top right corner of the page. api.showToast('success', 'Operation completed successfully.'); The first parameter can be "info" (white), "success" (green), "warning" (yellow) or "danger" (red). [3] https://gerrit.ovirt.org/#/c/92354/ Regards, Vojtech

1 0

ovirt extensions -- weekly report
by Greg Sheremeta 25 Jun '18

25 Jun '18

ovirt extensions -- weekly report Hi, Note: A team is working on a feature to make ansible roles/playbooks runnable via the administration portal. This is the first edition of my weekly status report on the project. Note2: if you cannot access a document, please let me know. I will be converting them all away from google docs so they are public by default. project book: ovirt extensions project book [1] trello: none (yet - ?) The project has 3 sub-parts, currently: migrate-vm cluster-upgrade central considerations (long-running operations, APIs, notifications) *migrate-vm* design document: [2] design discussion moved to github: [3] patches: [4] Status: Design complete (comments welcome though!) UI patch posted and *in code review*. Action items * *Greg, Tomas, Scott*: code review *cluster-upgrade* design document: [5] design discussion moved to github: PR [6] Status: *in design review.* Please comment freely on the PR! Action items: * *all* - design review * *Greg*: code UI (haven't begun) *central considerations* design document: [7] design discussions on github: [8] patches: [9] Status: *in coding (notifications + API)* Action items: * *Greg*: coding notifications drawer * *Ondra*: coding ansible remote API [1] ovirt extensions project book - Google Docs https://docs.google.com/document/d/1n4VlosdPnIZL81wx0sEIrkAfBehuV5DfOU7eH9i… [2] Migrate VMs Modal - Google Docs https://docs.google.com/document/d/1NF46ZJSOcGFrLWx18Ujsckoob19ANfBlpisB6_f… [3] ovirt-design - Migrate Virtual Machines https://ovirt.github.io/ovirt-design/admin-ui/compute/migrate-vms [4] topic:vm-migrate | gerrit.ovirt Code Review https://gerrit.ovirt.org/#/q/status:open+project:ovirt-engine-dashboard+bra… [5] Cluster Upgrade - Google Docs https://docs.google.com/document/d/1kRDAeu0-wIKbSNieXenQY5qevwNlyCnpyZdeUX-… [6] Adding design proposal around Upgrading a Cluster by lizsurette · Pull Request #5 · oVirt/ovirt-design https://github.com/oVirt/ovirt-design/pull/5 [7] ovirt-engine-ui-extensions - overall design considerations and notes - Google Docs https://docs.google.com/document/d/1GMurjSMtzLaZFktH_Ysge4lRIpLd0nosuV1m8IR… [8] ovirt-design/notifications.md at master · oVirt/ovirt-design https://github.com/oVirt/ovirt-design/blob/master/admin-ui/framework/notifi… [9] Change I73f35974: [WIP!!] webadmin: notifications drawer | gerrit.ovirt Code Review https://gerrit.ovirt.org/#/c/92443/ Change Ib7198f91: services: Add /ansible service for remote execution | gerrit.ovirt Code Review https://gerrit.ovirt.org/#/c/92404/ Best wishes, Greg -- GREG SHEREMETA SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX Red Hat NA <https://www.redhat.com/> gshereme(a)redhat.com IRC: gshereme <https://red.ht/sig>

2 2

vm portal UI redesign -- weekly report
by Greg Sheremeta 24 Jun '18

24 Jun '18

vm portal UI redesign -- weekly report Hi, Note: A team is working on redesigning the UI of vm portal. This is the first edition of my weekly status report on this project. [tl;dr pretty screens: https://github.com/oVirt/ovirt-design/pull/6] project book: n/a (using github issues [1] and ovirt-design [2]) trello: none (Note: we have been using a google doc [3], but because it's not publicly visible upstream, we are transitioning to github [2].) Status: * last week we iterated on Jenny's design updates. * Tomas posted a patch to give us everything needed in the API. * The inline edit page is very close to final UI. * Liz is beginning interaction design on Add VM. * Current designs a missing the network graph -- that can come back. It should look identical to the CPU and Memory, a single total Bandwidth. So three pies. * 'Other OS' icon looks awesome but will neutralize the color (gray) * change 'asleep' --> 'suspended' * Marek + Bohdan + Scott are now coding. * Scott can begin immediately with cards that talk to the stats service, and probably others, and will demo a prototype this week *Action items* *Scott*: prototype of the VM details page - functioning CPU, Memory, and Network cards - and as much as possible of everything else :) *Jenny*: - confirmation popups for 'Remove' VM and other actions (ask Marek / Scott for all such actions -- stop, force stop, delete, others?) - console dialog (console options, edit connection type) - options dialog (ssh key) - add a network card, connect it to a network (just a listbox) - button bar changing when VM is in different states - add disks - create snapshot - gray the Other OS icon *Liz*: - new VM flow (could feature explode -- may want to mimic cockpit's design) *Marek / Bohdan*: - continue coding / creating github issues [1] github issues: Redesign main page · Issue #641 · oVirt/ovirt-web-ui https://github.com/oVirt/ovirt-web-ui/issues/641 Designer review of VM Detail page · Issue #596 · oVirt/ovirt-web-ui https://github.com/oVirt/ovirt-web-ui/issues/596 convert 'force' actions to secondary dropdown pattern · Issue #588 · oVirt/ovirt-web-ui https://github.com/oVirt/ovirt-web-ui/issues/588 use modal dialog pattern instead of popover · Issue #587 · oVirt/ovirt-web-ui https://github.com/oVirt/ovirt-web-ui/issues/587 [2] https://github.com/oVirt/ovirt-design/pull/6 [3] https://docs.google.com/presentation/d/1UavAccggYAqLeXZYnVpyiE6h5tnCJJQMq_f… Best wishes, Greg -- GREG SHEREMETA SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX Red Hat NA <https://www.redhat.com/> gshereme(a)redhat.com IRC: gshereme <https://red.ht/sig>

1 0

Deprecating direct RPM downloads from Jenkins
by Barak Korren 24 Jun '18

24 Jun '18

Hi there, TL;DR: Is your build/CI/other process consuming RPMs directly from Jenkins? Could it be changed to consume from other available places? In STDCI V1 we supported obtaining of the latest CI build for a particular project in a particular branch on a particular platform directly from Jenkins, by using the "latestSuccessfulBuild" dynamic link that Jenkins generates. This was possible in STDCI V1 because we had one-to-one correlation between jenkins jobs and project/branch/platform combinations. That is no longer the case in STDCI V2 where each project gets just two fixed jobs that adjust themselves automatically to run needed functionality. We could implement some equivalent functionality in STDCI V2 by for e.g. uploading builds to some predictable locations on an artifact server, but that will take some non-trivial amount of work, so it leads us to the question if this functionality is really needed. There are a couple of alternatives locations to get recently built packages from: - The 'tested' repo which contains all the packages that passed CQ/OST - The 'snapshot' repo which contains a nightly snapshot of 'tested'. So given the options above, if you have a build/CI/other process that currently consumes builds from Jenkins, could it be changed to consume from the other available locations? -- Barak Korren RHV DevOps team , RHCE, RHCi Red Hat EMEA redhat.com | TRIED. TESTED. TRUSTED. | redhat.com/trusted

4 4

Can't install latest master (OST) - due to deps failure
by Yaniv Kaul 21 Jun '18

21 Jun '18

Error: Package: ovirt-host-deploy-java-1.8.0-0.0.master.20180620111438.git925eabd.el7.noarch (alocalsync) Requires: ovirt-host-deploy = 1.8.0-0.0.master.20180620111438.git925eabd.el7 Available: ovirt-host-deploy-1.8.0-0.0.master.20180531090832.git9811a30.el7.noarch (alocalsync) ovirt-host-deploy = 1.8.0-0.0.master.20180531090832.git9811a30.el7

4 4

nimbus-jose-jwt - Nimbus JOSE+JWT
by Sandro Bonazzola 20 Jun '18

20 Jun '18

Hi, since commit 832b848ca78a7ff349b4ebfe15aaabf9794075d2 we use nimbus-jost-jwt for Bug 1416491 <https://bugzilla.redhat.com/show_bug.cgi?id=1416491> - [RFE] Add support for OpenID Connect in engine SSO. We bundled the library within ovirt-engine-backend rpm not having it packaged as standalone system library. The library is now available in Fedora Rawhide and is in testing for Fedora 28[1]. I opened Bug 1591828 <https://bugzilla.redhat.com/show_bug.cgi?id=1591828> - Stop bundling nimbus-jose-jwt 4.13.1, rebase on latest 5.12. to track removal of the bundled library and use the system provided one. Ravi, since you're the owner of the feature, can you please test the library in Fedora, provide karma? I can help fixing the spec file for using system library as part of bug #1591828 <https://bugzilla.redhat.com/show_bug.cgi?id=1591828>. Thanks, [1] https://bodhi.fedoraproject.org/updates/nimbus-jose-jwt-5.12-2.fc28 -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig>

2 3