January 2015 - Users - oVirt List Archives

Change gluster primary
by John Gardeniers 24 Jan '15

24 Jan '15

We are using Gluster as our storage backend. Gluster is configured as 2 node replica. The two nodes are name nix and jupiter. At the Ovirt (RHEV really) end we have the gluster path configured as "nix:/gluster-rhev", with a mount option of "backupvolfile-server=jupiter.om.net". We now need to replace nix with a new server, which cannot have the same name. That new server will be the primary, with jupiter remaining the secondary. We will have all VMs and hypervisors shut down when we make this change. What is the best and/or easiest way to do this? Should we just disconnect the storage and re-attach it using the new gluster primary? If we do that will our VMs just work or do we need to take other steps? An alternative, which I suspect will be somewhat controversial, would be to make a direct edit of the engine database. Would that work any better or does that add more dangers (assuming the edit is done correctly)? regards, John

2 3

raw partition or LV access for migrated guests
by David Mansfield 23 Jan '15

23 Jan '15

Hi, I'm new to oVirt and I'm trying to investigate the feasibility of migrating four (or more) centos 6 libvirt+qemu+kvm hosts into a new (not yet created) oVirt environment. In general, most of the guests are running off of disk images in /var/lib/libvirt/images and from what I can tell there would be a fairly straightforward migration path for these (I've read briefly about virt-v2v and it looks promising). However, we have a few DB server guests which, for performance reasons, have direct access to host partitions (NOT lv, but actual host partitions). There are also a few machines which use a mapped LV as a virtual disk. Is this supported in oVirt? Is there a migration path for these? -- Thanks, David Mansfield Cobite, INC.

1 0

oVirt 3.5.1 ; No Network Access on hosted engine vm
by Mikola Rose 23 Jan '15

23 Jan '15

Hi again.... I think I may have selected the wrong interface during the hosted-engine deploy routine. My VM doe not have network access. The interface is connected and setup within the VM just no network access. Is there a way I can change the bridge interface? Mik

2 1

Testing 2560x1200 from tablet and Opaque
by Gianluca Cecchi 22 Jan '15

22 Jan '15

Hello, I have a CentOS 7 VM on oVirt 3.5 configured as desktop. What is the maximum display size it can get by default without particular customizations? In my case I'm testing from a 12.1" android tablet connected over wifi+openvpn and Opaque app. In Opaque I have a setting called Sync remote to display resolution My tablet resolution is 2560x1600 (btw I don't know if I can change it in Android scaling to any other resolution....) If I mark the setting above it seems it crashes If I deactivate it, I get a small window in upper left corner. I can change VM resolution up to 1920 and I get a bigger window, but I cannot go full screen for example... Anu advise at oVirt side to configure a bigger display size available? My VM has both oVirt Guest agent and spice vdagent installed ad active. Thanks in advance, Gianluca

1 1

REST exception building from master
by Lior Vernia 22 Jan '15

22 Jan '15

Hello, Building from master (i.e. towards 3.6), trying to use REST produces some exceptions - anyone has any clue as to why? Attaching the response (stack trace); this is to a GET operation on /api. Yours, Lior. <html><head><title>JBoss Web/7.0.0.SNAPSHOT - Error report</title><style></style> </head><body><h1>HTTP Status 500 - </h1><HR size="1" noshade="noshade">type Exception reportmessage description The server encountered an internal error () that prevented it from fulfilling this request.exception <pre>javax.servlet.ServletException: Servlet.init() for servlet org.ovirt.engine.api.restapi.BackendApplication threw exception org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671) org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) java.lang.Thread.run(Thread.java:724) </pre>root cause <pre>java.lang.RuntimeException: java.lang.RuntimeException: Unable to instantiate MessageBodyReader org.jboss.resteasy.plugins.providers.RegisterBuiltin.register(RegisterBuiltin.java:35) org.jboss.resteasy.spi.ResteasyDeployment.start(ResteasyDeployment.java:211) org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.init(ServletContainerDispatcher.java:67) org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.init(HttpServletDispatcher.java:36) org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671) org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) java.lang.Thread.run(Thread.java:724) </pre>root cause <pre>java.lang.RuntimeException: Unable to instantiate MessageBodyReader org.jboss.resteasy.spi.ResteasyProviderFactory.registerProvider(ResteasyProviderFactory.java:761) org.jboss.resteasy.plugins.providers.RegisterBuiltin.registerProviders(RegisterBuiltin.java:70) org.jboss.resteasy.plugins.providers.RegisterBuiltin.register(RegisterBuiltin.java:31) org.jboss.resteasy.spi.ResteasyDeployment.start(ResteasyDeployment.java:211) org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.init(ServletContainerDispatcher.java:67) org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.init(HttpServletDispatcher.java:36) org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671) org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) java.lang.Thread.run(Thread.java:724) </pre>root cause <pre>java.lang.RuntimeException: Failed to construct public org.ovirt.engine.api.json.JSONProvider() org.jboss.resteasy.core.ConstructorInjectorImpl.construct(ConstructorInjectorImpl.java:144) org.jboss.resteasy.spi.ResteasyProviderFactory.getProviderInstance(ResteasyProviderFactory.java:1039) org.jboss.resteasy.spi.ResteasyProviderFactory.addMessageBodyReader(ResteasyProviderFactory.java:478) org.jboss.resteasy.spi.ResteasyProviderFactory.registerProvider(ResteasyProviderFactory.java:757) org.jboss.resteasy.plugins.providers.RegisterBuiltin.registerProviders(RegisterBuiltin.java:70) org.jboss.resteasy.plugins.providers.RegisterBuiltin.register(RegisterBuiltin.java:31) org.jboss.resteasy.spi.ResteasyDeployment.start(ResteasyDeployment.java:211) org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.init(ServletContainerDispatcher.java:67) org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.init(HttpServletDispatcher.java:36) org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671) org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) java.lang.Thread.run(Thread.java:724) </pre>root cause <pre>java.lang.NoClassDefFoundError: org/codehaus/jackson/xc/JaxbAnnotationIntrospector org.ovirt.engine.api.json.JSONProvider.<init>(JSONProvider.java:32) sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) java.lang.reflect.Constructor.newInstance(Constructor.java:526) org.jboss.resteasy.core.ConstructorInjectorImpl.construct(ConstructorInjectorImpl.java:132) org.jboss.resteasy.spi.ResteasyProviderFactory.getProviderInstance(ResteasyProviderFactory.java:1039) org.jboss.resteasy.spi.ResteasyProviderFactory.addMessageBodyReader(ResteasyProviderFactory.java:478) org.jboss.resteasy.spi.ResteasyProviderFactory.registerProvider(ResteasyProviderFactory.java:757) org.jboss.resteasy.plugins.providers.RegisterBuiltin.registerProviders(RegisterBuiltin.java:70) org.jboss.resteasy.plugins.providers.RegisterBuiltin.register(RegisterBuiltin.java:31) org.jboss.resteasy.spi.ResteasyDeployment.start(ResteasyDeployment.java:211) org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.init(ServletContainerDispatcher.java:67) org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.init(HttpServletDispatcher.java:36) org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671) org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) java.lang.Thread.run(Thread.java:724) </pre>root cause <pre>java.lang.ClassNotFoundException: org.codehaus.jackson.xc.JaxbAnnotationIntrospector from [Module "org.ovirt.engine.api.restapi-definition:main" from local module loader @131b4c5d (roots: /home/lvernia/target/ovirt-engine/var/lib/ovirt-engine/jboss_runtime/modules/00-modules-common,/home/lvernia/target/ovirt-engine/var/lib/ovirt-engine/jboss_runtime/modules/01-jboss-as-modules)] org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:190) org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468) org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456) org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398) org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120) org.ovirt.engine.api.json.JSONProvider.<init>(JSONProvider.java:32) sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) java.lang.reflect.Constructor.newInstance(Constructor.java:526) org.jboss.resteasy.core.ConstructorInjectorImpl.construct(ConstructorInjectorImpl.java:132) org.jboss.resteasy.spi.ResteasyProviderFactory.getProviderInstance(ResteasyProviderFactory.java:1039) org.jboss.resteasy.spi.ResteasyProviderFactory.addMessageBodyReader(ResteasyProviderFactory.java:478) org.jboss.resteasy.spi.ResteasyProviderFactory.registerProvider(ResteasyProviderFactory.java:757) org.jboss.resteasy.plugins.providers.RegisterBuiltin.registerProviders(RegisterBuiltin.java:70) org.jboss.resteasy.plugins.providers.RegisterBuiltin.register(RegisterBuiltin.java:31) org.jboss.resteasy.spi.ResteasyDeployment.start(ResteasyDeployment.java:211) org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.init(ServletContainerDispatcher.java:67) org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.init(HttpServletDispatcher.java:36) org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671) org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) java.lang.Thread.run(Thread.java:724) </pre>note The full stack trace of the root cause is available in the JBoss Web/7.0.0.SNAPSHOT logs.<HR size="1" noshade="noshade"><h3>JBoss Web/7.0.0.SNAPSHOT</h3></body></html>

3 3

roles for foreman integration user
by Jorick Astrego 22 Jan '15

22 Jan '15

This is a multi-part message in MIME format. ------------MIME-296752662-1385342177-delim Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi=2C Quick question=2C which foreman roles does the foreman integration user require in the foreman=2E I=27ve tried a couple of permission settings but can only get the test to= work when the use has role admin=2E Met vriendelijke groet=2C With kind regards=2C Jorick Astrego Netbulae Virtualization Experts=20 ---------------- =09Tel=3A 053 20 30 270 =09info=40netbulae=2Eeu =09Staalsteden 4-3A =09KvK= 08198180 =09Fax=3A 053 20 30 271 =09www=2Enetbulae=2Eeu =097547 TA Enschede =09BTW= NL821234584B01 ---------------- ------------MIME-296752662-1385342177-delim Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable =3Chtml=3E =3Cbody=3E Hi,  Quick question, which foreman roles does the foreman integration user<= br> require in the foreman.  I've tried a couple of permission settings but can only get the test to&#13= ; work when the use has role admin.   = =3CBR /=3E =3CBR /=3E =3Cb style=3D=22color=3A=23604c78=22=3E=3C/b=3E=3Cbr=3E=3Cspan style=3D=22c= olor=3A=23604c78=3B=22=3E=3Cfont color=3D=22000000=22=3E=3Cspan style=3D=22= mso-fareast-language=3Aen-gb=3B=22 lang=3D=22NL=22=3EMet vriendelijke groet= =2C With kind regards=2C=3Cbr=3E=3Cbr=3E=3C/span=3EJorick Astrego=3C/font= =3E=3C/span=3E=3Cb style=3D=22color=3A=23604c78=22=3E=3Cbr=3E=3Cbr=3ENetbul= ae Virtualization Experts =3C/b=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3B= border-top=3A1px solid =23ccc=3B=22=3E=3Ctable style=3D=22width=3A 522px=22= =3E=3Ctbody=3E=3Ctr=3E=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px= =22=3ETel=3A 053 20 30 270=3C/td=3E =3Ctd style=3D=22width=3A 130px=3Bf= ont-size=3A 10px=22=3Einfo=40netbulae=2Eeu=3C/td=3E =3Ctd style=3D=22wid= th=3A 130px=3Bfont-size=3A 10px=22=3EStaalsteden 4-3A=3C/td=3E =3Ctd sty= le=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EKvK 08198180=3C/td=3E=3C/tr= =3E=3Ctr=3E =3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EFax= =3A 053 20 30 271=3C/td=3E =3Ctd style=3D=22width=3A 130px=3Bfont-size= =3A 10px=22=3Ewww=2Enetbulae=2Eeu=3C/td=3E =3Ctd style=3D=22width=3A 130= px=3Bfont-size=3A 10px=22=3E7547 TA Enschede=3C/td=3E =3Ctd style=3D=22w= idth=3A 130px=3Bfont-size=3A 10px=22=3EBTW NL821234584B01=3C/td=3E=3C/tr=3E= =3C/tbody=3E=3C/table=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3Bborder-top= =3A1px solid =23ccc=3B=22=3E=3CBR /=3E =3C/body=3E =3C/html=3E ------------MIME-296752662-1385342177-delim--

2 6

[ANN] oVirt 3.5.1 Final Release is now available
by Sandro Bonazzola 22 Jan '15

22 Jan '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The oVirt team is pleased to announce that the oVirt 3.5.1 Final Release is now available as of Jan 21st 2015. The release candidate is available now for Fedora 20, Red Hat Enterprise Linux 6.6, CentOS 6.6, (or similar) and Red Hat Enterprise Linux 7, CentOS 7 (or similar). This release of oVirt includes numerous bug fixes. See the release notes [1] for a list of the new features and bugs fixed. Please refer to release notes [1] for Installation / Upgrade instructions. A new oVirt Live and oVirt Node ISO will be available soon as well[2]. Please note that mirrors[3] may need usually one day before being synchronized. Please refer to the release notes for known issues in this release. [1] http://www.ovirt.org/OVirt_3.5.1_Release_Notes [2] http://resources.ovirt.org/pub/ovirt-3.5/iso/ [3] http://www.ovirt.org/Repository_mirrors#Current_mirrors - -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUv89CAAoJEHw3u57E4QAOE5EP/iREEVWYXRt2u2yEZAIopat9 HTTb5ipHn6tc1he3V6pKzbM1LhFM5k0kx57X+EHw7eq2rYaOcmtEKPy8kEXEtXDt jFeWEI6vfi1ZebzZ5W4SkMQWuY6/iX5PUnDHyLDC9/wV/mucHLHsUe67W6Fr0SV+ c78xrv2/kfSITjHTZmZG1NnZRfYiB1MHOMrUxT65jSR/fwHN8+I1SQJbg+ntIUiW XRD9CvnPyy3OGphEeZP0RiqK24A/cUOXv2qeMd7l8jI3aHB5z/JEz7ODPk2pSrUR B4xkBVa60axzPtg4xcTFaN/klzegs4x3RPr0lHTdwipL0r17JA0/hoCJR0N4lZDN CtO41kjcyBKfAcYGM/ODoTmD//symYQdXEwi88c1HOvr/lepHiup6mDQt0fvXngD qvjVAx9r50UkQi3a+HiEw2jqOnwXDyubpC/HwjUl62wZ0uK7e6x5b5GQTAmY/USl Xa2wUNmh9xG81f0BeYcjXOnx/CVRu9gfamtagtb2i+P0sFhI7LnNqYc556cXdz7s rIgfmDO4QjMLiE6b8jYmiRaOb1mK0mBq1s5WHroikRH+JqNtUp7CX0U9OY0rCeaf hj3TCEe/6BT378lb30KZ1ELkgBCs1050xXBozx0W9vfj4PwFEj4vzenpHtpE/A8H 2xPTHrUW0uiQaqlohxeQ =nGaB -----END PGP SIGNATURE-----

3 2

Re: [ovirt-users] oVirt 3.5 and FreeIpa
by Marcelo Donato 22 Jan '15

22 Jan '15

Below the solution. Resolved By "Alon Bar-Lev" <alonbl(a)redhat.com> 1. install ovirt-engine-extension-aaa-ldap, it is available in ovirt-3.5-snapshots repository. 2. create /etc/ovirt-engine/extensions.d/din.intranet-authz.properties ovirt.engine.extension.name = din-intranet-authz ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz config.profile.file.1 = /etc/ovirt-engine/aaa/din.intranet.properties 3. create /etc/ovirt-engine/extensions.d/din.intranet-authn.properties ovirt.engine.extension.name = din-intranet-authn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = din.intranet ovirt.engine.aaa.authn.authz.plugin = din-intranet-authz config.profile.file.1 = /etc/ovirt-engine/aaa/din.intranet.properties 4. create /etc/ovirt-engine/aaa/din.intranet.properties include = <ipa.properties> vars.user = uid=admin,cn=users,cn=accounts,dc=din,dc=intranet vars.password = 123456 vars.server = ipa1.din.intranet pool.default.serverset.single.server = ${global:vars.server} pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password} 5. restart engine. Thanks a lot Alon. -- Ao encaminhar esta mensagem, por favor: 1. Apague o meu e-mail e o meu nome. 2. Apague também os endereços dos amigos antes de reenviar 3. Use Cco ou Bcc para enviar mensagens! Dificulte a disseminação de vírus e spam.

3 7

oVirt node weekly talk
by Tolik Litovsky 21 Jan '15

21 Jan '15

Hello Fabian Can we move the oVirt node weekly talk to another week day? Or just a bit earlier ? Best Regards. Tolik

4 3

firewalld rule for ovirt host?
by Jorick Astrego 21 Jan '15

21 Jan '15

This is a multi-part message in MIME format. ------------MIME-220968237-659321615-delim Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi=2C In the quickstart guide we have the iptables rules for a fedora 19 host=2C= but currently we run firewalld on the host =28Centos 7=29 I=27ve converted the rules to a service xml for the zone but I can=27t figure out the firewalld translation for =22-A FORWARD -m physdev ! --physdev-is-bridged -j REJECT --reject-with icmp-host-prohibited =22 Anyone know how to do this in firewalld=3F Met vriendelijke groet=2C With kind regards=2C Jorick Astrego Netbulae Virtualization Experts=20 ---------------- =09Tel=3A 053 20 30 270 =09info=40netbulae=2Eeu =09Staalsteden 4-3A =09KvK= 08198180 =09Fax=3A 053 20 30 271 =09www=2Enetbulae=2Eeu =097547 TA Enschede =09BTW= NL821234584B01 ---------------- ------------MIME-220968237-659321615-delim Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable =3Chtml=3E =3Cbody=3E Hi,  In the quickstart guide we have the iptables rules for a fedora 19 host,&#1= 3; but currently we run firewalld on the host (Centos 7)  I've converted the rules to a service xml for the zone but I can't figure out the firewalld translation for "-A FORWARD -m physdev != --physdev-is-bridged -j REJECT --reject-with icmp-host-prohibited "&#1= 3;  Anyone know how to do this in firewalld?   = =3CBR /=3E =3CBR /=3E =3Cb style=3D=22color=3A=23604c78=22=3E=3C/b=3E=3Cbr=3E=3Cspan style=3D=22c= olor=3A=23604c78=3B=22=3E=3Cfont color=3D=22000000=22=3E=3Cspan style=3D=22= mso-fareast-language=3Aen-gb=3B=22 lang=3D=22NL=22=3EMet vriendelijke groet= =2C With kind regards=2C=3Cbr=3E=3Cbr=3E=3C/span=3EJorick Astrego=3C/font= =3E=3C/span=3E=3Cb style=3D=22color=3A=23604c78=22=3E=3Cbr=3E=3Cbr=3ENetbul= ae Virtualization Experts =3C/b=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3B= border-top=3A1px solid =23ccc=3B=22=3E=3Ctable style=3D=22width=3A 522px=22= =3E=3Ctbody=3E=3Ctr=3E=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px= =22=3ETel=3A 053 20 30 270=3C/td=3E =3Ctd style=3D=22width=3A 130px=3Bf= ont-size=3A 10px=22=3Einfo=40netbulae=2Eeu=3C/td=3E =3Ctd style=3D=22wid= th=3A 130px=3Bfont-size=3A 10px=22=3EStaalsteden 4-3A=3C/td=3E =3Ctd sty= le=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EKvK 08198180=3C/td=3E=3C/tr= =3E=3Ctr=3E =3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EFax= =3A 053 20 30 271=3C/td=3E =3Ctd style=3D=22width=3A 130px=3Bfont-size= =3A 10px=22=3Ewww=2Enetbulae=2Eeu=3C/td=3E =3Ctd style=3D=22width=3A 130= px=3Bfont-size=3A 10px=22=3E7547 TA Enschede=3C/td=3E =3Ctd style=3D=22w= idth=3A 130px=3Bfont-size=3A 10px=22=3EBTW NL821234584B01=3C/td=3E=3C/tr=3E= =3C/tbody=3E=3C/table=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3Bborder-top= =3A1px solid =23ccc=3B=22=3E=3CBR /=3E =3C/body=3E =3C/html=3E ------------MIME-220968237-659321615-delim--

2 1