- Devel - oVirt List Archives

Minor PR submitted to clean up a 404 on the website
by Geoff O'Callaghan 26 Feb '24

26 Feb '24

Hi Dev Team I'm not sure if my email made it to the list, so re-posting for the ovirt list archives site. I reported and issue and created a PR to fix it. Just a minor problem. Removed broken github link and added link to public repos by gocallag · Pull Request #3170 · oVirt/ovirt-site If someone could review/merge that would be great. I have a few others lined up, just want to get the process right. Thanks Geoff

1 0

Minor PR submitted to clean up a 404 on the website
by Geoff O'Callaghan 26 Feb '24

26 Feb '24

Hi Dev Team I reported and issue and created a PR to fix it. Just a minor problem. Removed broken github link and added link to public repos by gocallag · Pull Request #3170 · oVirt/ovirt-site<https://github.com/oVirt/ovirt-site/pull/3170> If someone could review/merge that would be great. I have a few others lined up, just want to get the process right. Thanks Geoff

1 0

ovirt-engine continue to be released as a new version.
by 박연호 21 Feb '24

21 Feb '24

This is a user who uses ovirt well. RHV is known as EOS June 30, 2024 I'm sending you an e-mail because I was wondering if you have any plans for ovirt to continue to be released as a new version. Thank you.

1 0

Foreman needs a release of ovirt-engine-sdk-ruby
by ewoud+ovirt＠kohlvanwijngaarden.nl 02 Feb '24

02 Feb '24

Hello everyone, Foreman is a bit late in updating Ruby to a newer version. Looking ahead we're aiming at Ruby 3.1+ but ovirt-engine-sdk-ruby doesn't compile on it. https://github.com/oVirt/ovirt-engine-sdk-ruby/pull/3 was merged in September 2022 and a request to release it was opened a year ago: https://github.com/oVirt/ovirt-engine-sdk-ruby/issues/4 The Foreman community is currently discussing dropping oVirt support: https://community.theforeman.org/t/proposal-to-drop-support-for-ovirt/36324 Is there anyone who can still perform this release, or should we proceed with removal? Regards, Ewoud Kohl van Wijngaarden

2 1

Foreman needs a release of ovirt-engine-sdk-ruby
by Ewoud Kohl van Wijngaarden 29 Jan '24

29 Jan '24

Hello everyone, Foreman is a bit late in updating Ruby to a newer version. Looking ahead we're aiming at Ruby 3.1+ but ovirt-engine-sdk-ruby doesn't compile on it. https://github.com/oVirt/ovirt-engine-sdk-ruby/pull/3 was merged in September 2022 and a request to release it was opened a year ago: https://github.com/oVirt/ovirt-engine-sdk-ruby/issues/4 The Foreman community is currently discussing dropping oVirt support: https://community.theforeman.org/t/proposal-to-drop-support-for-ovirt/36324 Is there anyone who can still perform this release, or should we proceed with removal? Regards, Ewoud Kohl van Wijngaarden

2 1

How is oVirt Node ISO (CentOS Stream 8 or 9) kernel or boot parameters different to other distros - EFI boot freeze.
by john＠alwayson.net.au 24 Jan '24

24 Jan '24

Related to my question posted in the Users forum, I'm trying to understand why the oVirt Node ISO based on CentOS Stream 8 or 9 freezes immediately on my hardware. These distros work: oVirt Node ISO based on CentOS Stream 7 works. Fedora 39 works RHEL 9 works. Hardware is Apple Mac Pro 2013: Intel Xeon CPU E5-1650v2 6-core 64G (4x8) 1866MHz DDR3 ECC memory Dual AMD FirePro D700 graphics processors with 6GB of GDDR5 VRAM PCIe-based SSD NVME (Linux recognises /dev/nvme0n1) thanks John

1 0

[VDSM] Started getting virNetTLSContextCheckCertTimes:154 : The server certificate /etc/pki/vdsm/certs/vdsmcert.pem has expired
by Edward Haas 11 Jan '24

11 Jan '24

Hi, I have a VM which acts as an oVirt host with VDSM installed. I use it for testing without connecting it to Engine. Recently VDSM fails to come up and I see this error: Sep 26 17:58:18 localhost libvirtd: 2018-09-26 14:58:18.978+0000: 12176: error : virNetTLSContextCheckCertTimes:154 : The server certificate /etc/pki/vdsm/certs/vdsmcert.pem has expired Any hint on how to generate or fetch a new certificate without the help of Engine? Thanks, Edy.

3 5

oVirt 4.6 OS versions
by Diggy Mc 31 Dec '23

31 Dec '23

Has it yet been decided what OS and versions will be used for oVirt 4.6 node and hosted engine?

2 2

oVirt 4.6 OS versions
by d03＠bornfree.org 11 Dec '23

11 Dec '23

Has it been decided which OS and version will be used for the oVirt 4.6 Hosted Engine and for oVirt Node?

1 0

Re: Jackson-databind related changes
by Martin Perina 15 Sep '23

15 Sep '23

Hi, oVirt Engine is using JBoss Modules feature to load libraries, so when a library version is mentioned in pom.xml it's unrelated to which version is being using during runtime. Here's the detailed description: 1. jackson-databind 2.12.7 mentioned pom.xml is actually being used only when building the project directly with maven (development purposes) https://github.com/oVirt/vdsm-jsonrpc-java/blob/master/pom.xml.in#L61 https://github.com/oVirt/vdsm-jsonrpc-java/blob/master/client/pom.xml.in 2. When building the project as a part of RPM build, then maven (respectively xmvn) is invoked to use only libraries installed locally as a part of RPM dependencies https://github.com/oVirt/vdsm-jsonrpc-java/blob/master/vdsm-jsonrpc-java.sp… So on CS8 we can easily find out the jackson-databind package version being used during RPM build # dnf repoquery --whatprovides 'jackson-databind >= 2.10.0' jackson-databind-0:2.10.0-1.module_el8.4.0+595+e59c9af2.noarch jackson-databind-0:2.10.0-1.module_el8.4.0+782+1d1c31a0.noarch 3. On runtime vdsm-jsonrpc-java is being loaded using JBoss Modules as a part of oVirt Engine: https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/dependenc… which shows that vdsm-jsonrpc-java depends on com.fasterxml.jackson.core.jackson-databind module, which is included in the relevant WildFly release. Currently oVirt Engine is using WildFly 24.0.1, so you can see jackson-databind version using following command: # rpm -ql ovirt-engine-wildfly | grep 'jackson-databind-' /usr/share/ovirt-engine-wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/jackson-databind-2.12.3.jar So if you want to bump jackson-databind version for oVirt Engine runtime you have two possibilities: 1. You can deliver updated JBoss module as a part of ovirt-engine-wildfly-overlay RPM: https://github.com/oVirt/ovirt-engine-wildfly/overlay 2. You can try to bump WildFly to latest version in ovirt-engine-wildfly RPM: https://github.com/oVirt/ovirt-engine-wildfly/ Please be awate that at the moment it's not possible to use latest WildFly version, because oVirt Engine is using classic security model, which was removed in favor of Elytron in WildFly 25. So to bump WildFly version, you would need to implement changes in oVirt Engine to use Elytron. Regarding verification the best way is to verify functionality by execution of oVirt System Tests: https://github.com/ovirt/ovirt-system-tests Regards, Martin On Thu, Sep 14, 2023 at 11:44 PM Shubha Kulkarni <shubha.kulkarni(a)oracle.com> wrote: > Hi All > > > > I am yet to get any feedback on my query. So I thought I will reach out > again to see if any one has comment on this - > > > > Background: > > I see the commit for CVE-2020-36518 to vdsm-json-rpc to bump jackson > version to 2.12.7 > > > https://github.com/oVirt/vdsm-jsonrpc-java/commit/d1f423809fd491da7b5324b30… > > This change in only made in pom.xml is made with "default" scope (i.e > compile). > > > > Queries: > > #1. So at runtime, that means this jar should be explicitly packaged > somewhere else. I am wondering how is this newer jackson jar is picked up? > Does it have anything to do with the change outside pom.xml that I don't > see? > > > > #2. Ideally, I would like to verify that vdsm-jsonrpc-java application is > using jackson-core2.12.7 and jackson-databaind 2.12.7-1 when installed on > engine system. What is the best way to do it? > > > > Thanks > > > > *From:* Shubha Kulkarni > *Sent:* Thursday, September 7, 2023 1:47 PM > *To:* devel(a)ovirt.org > *Subject:* Jackson-databind related changes > > > > Hello! > > > > There have been changes added to ovirt-engine and vdsm-jsonrpc-java repos > to address security vulnerabilities in jackson-databind package. I see that > the change is made to bump up version of jackson-databind package to > 2.12.7.1. > > I am wondering what is the rpm version for ovirt-engine and > vdsm-jsonrpc-java that has these fixes? Also, I am curious what is the best > way to validate these changes? > > > > Thanks, > > Shubha > _______________________________________________ > Devel mailing list -- devel(a)ovirt.org > To unsubscribe send an email to devel-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UDIWOPJMWDCRB… > -- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o.

2 1