- Devel - oVirt List Archives

Re: Jackson-databind related changes
by Sandro Bonazzola 15 Sep '23

15 Sep '23

@Martin Perina <mperina(a)redhat.com> can you help here? Il giorno gio 14 set 2023 alle ore 23:44 Shubha Kulkarni < shubha.kulkarni(a)oracle.com> ha scritto: > Hi All > > > > I am yet to get any feedback on my query. So I thought I will reach out > again to see if any one has comment on this - > > > > Background: > > I see the commit for CVE-2020-36518 to vdsm-json-rpc to bump jackson > version to 2.12.7 > > > https://github.com/oVirt/vdsm-jsonrpc-java/commit/d1f423809fd491da7b5324b30… > > This change in only made in pom.xml is made with "default" scope (i.e > compile). > > > > Queries: > > #1. So at runtime, that means this jar should be explicitly packaged > somewhere else. I am wondering how is this newer jackson jar is picked up? > Does it have anything to do with the change outside pom.xml that I don't > see? > > > > #2. Ideally, I would like to verify that vdsm-jsonrpc-java application is > using jackson-core2.12.7 and jackson-databaind 2.12.7-1 when installed on > engine system. What is the best way to do it? > > > > Thanks > > > > *From:* Shubha Kulkarni > *Sent:* Thursday, September 7, 2023 1:47 PM > *To:* devel(a)ovirt.org > *Subject:* Jackson-databind related changes > > > > Hello! > > > > There have been changes added to ovirt-engine and vdsm-jsonrpc-java repos > to address security vulnerabilities in jackson-databind package. I see that > the change is made to bump up version of jackson-databind package to > 2.12.7.1. > > I am wondering what is the rpm version for ovirt-engine and > vdsm-jsonrpc-java that has these fixes? Also, I am curious what is the best > way to validate these changes? > > > > Thanks, > > Shubha > _______________________________________________ > Devel mailing list -- devel(a)ovirt.org > To unsubscribe send an email to devel-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UDIWOPJMWDCRB… > -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING Red Hat In-Vehicle Operating System Red Hat EMEA <https://www.redhat.com/> <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0

Re: Jackson-databind related changes
by Shubha Kulkarni 15 Sep '23

15 Sep '23

Hi All I am yet to get any feedback on my query. So I thought I will reach out again to see if any one has comment on this - Background: I see the commit for CVE-2020-36518 to vdsm-json-rpc to bump jackson version to 2.12.7 https://github.com/oVirt/vdsm-jsonrpc-java/commit/d1f423809fd491da7b5324b30… This change in only made in pom.xml is made with "default" scope (i.e compile). Queries: #1. So at runtime, that means this jar should be explicitly packaged somewhere else. I am wondering how is this newer jackson jar is picked up? Does it have anything to do with the change outside pom.xml that I don't see? #2. Ideally, I would like to verify that vdsm-jsonrpc-java application is using jackson-core2.12.7 and jackson-databaind 2.12.7-1 when installed on engine system. What is the best way to do it? Thanks From: Shubha Kulkarni Sent: Thursday, September 7, 2023 1:47 PM To: devel(a)ovirt.org Subject: Jackson-databind related changes Hello! There have been changes added to ovirt-engine and vdsm-jsonrpc-java repos to address security vulnerabilities in jackson-databind package. I see that the change is made to bump up version of jackson-databind package to 2.12.7.1. I am wondering what is the rpm version for ovirt-engine and vdsm-jsonrpc-java that has these fixes? Also, I am curious what is the best way to validate these changes? Thanks, Shubha

1 0

Jackson-databind related changes
by Shubha Kulkarni 07 Sep '23

07 Sep '23

Hello! There have been changes added to ovirt-engine and vdsm-jsonrpc-java repos to address security vulnerabilities in jackson-databind package. I see that the change is made to bump up version of jackson-databind package to 2.12.7.1. I am wondering what is the rpm version for ovirt-engine and vdsm-jsonrpc-java that has these fixes? Also, I am curious what is the best way to validate these changes? Thanks, Shubha

1 0

Error: Adding new Host to ovirt-engine
by Ahmad Khiet 14 Aug '23

14 Aug '23

Hi, Can't add new host to ovirt engine, because the following error: 2019-06-12 12:23:09,664 p=4134 u=engine | TASK [ovirt-host-deploy-facts : Set facts] ************************************* 2019-06-12 12:23:09,684 p=4134 u=engine | ok: [10.35.1.17] => { "ansible_facts": { "ansible_python_interpreter": "/usr/bin/python2", "host_deploy_vdsm_version": "4.40.0" }, "changed": false } 2019-06-12 12:23:09,697 p=4134 u=engine | TASK [ovirt-provider-ovn-driver : Install ovs] ********************************* 2019-06-12 12:23:09,726 p=4134 u=engine | fatal: [10.35.1.17]: FAILED! => {} MSG: The conditional check 'cluster_switch == "ovs" or (ovn_central is defined and ovn_central | ipaddr and ovn_engine_cluster_version is version_compare('4.2', '>='))' failed. The error was: The ipaddr filter requires python's netaddr be installed on the ansible controller The error appears to be in '/home/engine/apps/engine/share/ovirt-engine/playbooks/roles/ovirt-provider-ovn-driver/tasks/configure.yml': line 3, column 5, but may be elsewhere in the file depending on the exact syntax problem. The offending line appears to be: - block: - name: Install ovs ^ here 2019-06-12 12:23:09,728 p=4134 u=engine | PLAY RECAP ********************************************************************* 2019-06-12 12:23:09,728 p=4134 u=engine | 10.35.1.17 : ok=3 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0 whats missing!? Thanks -- Ahmad Khiet Red Hat <https://www.redhat.com/> akhiet(a)redhat.com M: +972-54-6225629 <https://red.ht/sig>

7 10

Please review open PRs
by Sandro Bonazzola 12 Jul '23

12 Jul '23

Hi, there are currently 71 PRs open within oVirt project, waiting for a review: https://github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovirt+archived%3Afalse If you'd like to get them moving forward, please review them. You don't need to be one of the people with merge rights there in order to review. Your feedback may still help getting the PR in or getting it improved or getting it rejected. Thanks, -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING - Red Hat In-Vehicle Operating System Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0

Ovirt Admin VM Portal url Not Loading on the Browser After Successful HE Deployment.
by igwevic70＠gmail.com 18 May '23

18 May '23

Hi there, I need some help here, please. I am new to ovirt and I am trying to setup ovirt 4.5.4 a test env. I have successfully deployed HE using "hosted-engine --deploy" after days of encountering a lot of issues, but the current issue now is that I can't access the VM Portal ie WebUI, where I can create VM from the Admin portal. One thing I noticed is that during the deployment process, it supplies a temporary url link like "https://ovirt-node-03.projectplus.com:6900/ovirt-engine" to access the web but when the deployment is done, it kills the this url and it becomes unavailable with no web access again Can someone please please, help me to understand what's going on. I have done this deployment nearly 10x but still getting the same thing, I can just have webui access to the Admin Portal. Thanks in advance for your help. Vik.

1 0

oVirt VM manager not showing any network status
by Dean L 16 May '23

16 May '23

Currently running oVirt VM manager Version 4.5.5-0.master.20230504084909.gitd37b4f7ad9.el8. Noticed that the network status for all the VMs has been showing 0%. ... Dean

1 0

Invalid value '-1' for 'cpu.max': Invalid argument
by lejeczek 15 May '23

15 May '23

Hi guys. with latest stable ovirt node, hosted engine setup fails at, I guess late stage: ... [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Notify the user about a failure] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Host is not up, please check logs, perhaps also on the engine machine"} as setup sits & waits for a while, before it errors out, I see this in logs: ... 12687 still running (84875) Invalid value '-1' for 'cpu.max': Invalid argument 12687 still running (84870) 12687 still running (84865) 12687 still running (84860) Invalid value '-1' for 'cpu.max': Invalid argument ... and logs continue after engine setup has finished. I've browsed around but resolutions I found did not help, also I suspect it might be a bug thus any comments on how to fix it, are very much appreciated - btw, why BZs reports should go? many thanks, L.

2 1

Console Disconnect Action
by Shubha Kulkarni 12 May '23

12 May '23

Hello, I am experimenting with the feature ‘console disconnect action’ . It provides four actions on disconnect.  Lock screen - This is the default option. For all Linux machines and for Windows desktops this locks the currently active user session. For Windows servers, this locks the desktop and the currently active user.  Logout user - For all Linux machines and Windows desktops, this logs out the currently active user session. For Windows servers, the desktop and the currently active user are logged out.  Shutdown virtual machine - Initiates a graceful virtual machine shutdown.  Reboot virtual machine - Initiates a graceful virtual machine reboot. In my testing, the shutdown and reboot options worked. However, lock screen and logout user option did not work for me. I looked around and found out that qemu-guest agent has no command to log off a user. I see ovirt-guest-agent has some code to logout user as described below - https://github.com/oVirt/ovirt-guest-agent/blob/master/ovirt-guest-agent/Lo… However, it turns out that the ovirt-guest-agent is not supported anymore. So I am wondering how the ‘lock screen’ and ‘logout user’ is implemented and whether it is still supported/supposed to work? Thanks, Shubha

1 0

this is probably a bug: cannot import name 'Callable' from 'collection
by lejeczek 12 May '23

12 May '23

Hi guys Just to let you know that both stable & testing fail to setup hosted engine very early in the process, in Centos 9 [ ERROR ] b'[WARNING]: Skipping plugin (/usr/share/ovirt-hosted-engine-\n' [ ERROR ] b'setup/he_ansible/callback_plugins/2_ovirt_logger.py), cannot load: cannot\n' [ ERROR ] b"import name 'Callable' from 'collections'\n" [ ERROR ] b'(/usr/lib64/python3.11/collections/__init__.py)\n' [ ERROR ] b"ERROR! Unexpected Exception, this is probably a bug: cannot import name 'Callable' from 'collections' (/usr/lib64/python3.11/collections/__init__.py)\n" [ ERROR ] Failed to execute stage 'Environment customization': Failed executing ansible-playbook [ INFO ] Stage: Clean up [ INFO ] Cleaning temporary resources [ ERROR ] b'[WARNING]: Skipping plugin (/usr/share/ovirt-hosted-engine-\n' [ ERROR ] b'setup/he_ansible/callback_plugins/2_ovirt_logger.py), cannot load: cannot\n' [ ERROR ] b"import name 'Callable' from 'collections'\n" [ ERROR ] b'(/usr/lib64/python3.11/collections/__init__.py)\n' [ ERROR ] b"ERROR! Unexpected Exception, this is probably a bug: cannot import name 'Callable' from 'collections' (/usr/lib64/python3.11/collections/__init__.py)\n" [ ERROR ] Failed to execute stage 'Clean up': Failed executing ansible-playbook [ INFO ] Generating answer file '/var/lib/ovirt-hosted-engine-setup/answers/answers-20230511181231.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Hosted Engine deployment failed I ain't ! a python programmer, but what the Internet says, seems to be the case: from collections import Callable VS from collections.abc import Callable and if it's that trivial indeed, perhaps a quick official fix then? many thanks, L.

1 0