March 2016 - Users - oVirt List Archives

el6 and el7 clusters and SPM
by Sigbjorn Lie 13 Mar '16

13 Mar '16

Hi I am looking to migrate several el6 rhev-h nodes to el7 rhev-h nodes. There are multiple clusters in the datacenter and it will take a while (several months) to have all the clusters in the data center migrated to el7. Is there be any potential issues to look out for with regards to having the SPM for this datacenter running on a el6 or a el7 node in this datacenter? Any cross compatability issues to look out for? RHEV-M is currently at version 3.5.6. We are using FC storage. Regards, Siggi

2 1

vlan range?
by gflwqs gflwqs 13 Mar '16

13 Mar '16

Hi list! How do i expose a vlan range to a vm in ovirt? Thanks! Christian

2 1

QEMU GlusterFS support in oVirt
by Samuli Heinonen 13 Mar '16

13 Mar '16

Hello all, It seems that oVirt 3.6 is still using FUSE to access GlusterFS storage domains instead of using QEMU driver (libgfapi). As far as I know libgfapi support should be available in Libvirt and QEMU packages provided in CentOS 7. Is there any workarounds how to use libgfapi with oVirt before it’s officially available? Best regards, Samuli Heinonen

3 4

MAC spoofing for specific VMs
by Christopher Young 13 Mar '16

13 Mar '16

I'm working on some load-balancing solutions and they appear to require MAC spoofing. I did some searching and reading and as I understand it, you can disable the MAC spoofing protection through a few methods. I was wondering about the best manner to enable this for the VMs that require it and not across the board (if that is even possible). I'd like to just allow my load-balancer VMs to do what they need to, but keep the others untouched as a security mechanism. If anyone has any advice on the best method to handle this scenario, I would greatly appreciate it. It seems that this might turn into some type of feature request, though I'm not sure if this is something that has to be done at the Linux bridge level, the port level, or the VM level. Any explanations into that would also help in my education. Thanks, Chris

3 5

Configuring the SRIOV virsh device
by David LeVene 11 Mar '16

11 Mar '16

--_000_BLUPR0301MB1971508A98EC31035499673AE9B30BLUPR0301MB1971_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hey All, Still trying to work through this VMFEX stuff, and I know what I want the f= ile to look like at the end.. but not sure how to achieve it from the doco = written here http://www.ovirt.org/develop/developer-guide/vdsm/hook/vmfex/ and http://www.ovirt.org/develop/release-management/features/network/ucs-integr= ation/ Currently my device looks like this # virsh -r net-dumpxml vdsm-SRIOV <network> <name>vdsm-SRIOV</name> <forward mode=3D'bridge'/> <bridge name=3D'SRIOV'/> </network> I want it looking like this, then the networking will be as it should be! A port group would be a vNIC Profile from the looks of things... <name>vdsm-SRIOV</name> <forward dev=3D'enp6s0f1' mode=3D'passthrough'> = <-- defined as a passthrough device, not a bridge <interface dev=3D'enp6s0f1'/> <interface dev=3D'enp6s0f2'/> <interface dev=3D'enp6s0f3'/> <interface dev=3D'enp6s0f4'/> < .. list of interfaces available to it which would need to be manually i= nputted as a hook> </forward> <portgroup name=3D'ame1-test1'> <virtualport type=3D'802.1Qbh'> <parameters profileid=3D'profile-ame1-test1'/> </virtualport> </portgroup> <portgroup name=3D'ame1-prep1'> <virtualport type=3D'802.1Qbh'> <parameters profileid=3D'profile-ame1-prep1'/> </virtualport> </portgroup> </network> Cheers David This email and any attachments may contain confidential and proprietary inf= ormation of Blackboard that is for the sole use of the intended recipient. = If you are not the intended recipient, disclosure, copying, re-distribution= or other use of any of this information is strictly prohibited. Please imm= ediately notify the sender and delete this transmission if you received thi= s email in error. --_000_BLUPR0301MB1971508A98EC31035499673AE9B30BLUPR0301MB1971_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"EN-AU" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> Hey All,<o:p></o:p> <o:p> </o:p> Still trying to work through this VMFEX stuff, and I= know what I want the file to look like at the end.. but not sure how to ac= hieve it from the doco written here<o:p></o:p> <o:p> </o:p> <a href=3D"http://www.ovirt.org/develop/developer-gu= ide/vdsm/hook/vmfex/">http://www.ovirt.org/develop/developer-guide/vdsm/hoo= k/vmfex/</a><o:p></o:p> and<o:p></o:p> <a href=3D"http://www.ovirt.org/develop/release-mana= gement/features/network/ucs-integration/">http://www.ovirt.org/develop/rele= ase-management/features/network/ucs-integration/</a><o:p></o:p> <o:p> </o:p> Currently my device looks like this<o:p></o:p> <o:p> </o:p> # virsh -r net-dumpxml vdsm-SRIOV<o:p></o:p> <network><o:p></o:p>   <name>vdsm-SRIOV</name><o:p></o:p= >  <forward mode=3D'bridge'/><o:p></o:p></p= >   <bridge name=3D'SRIOV'/><o:p></o:p> </network><o:p></o:p> <o:p> </o:p> <o:p> </o:p> I want it looking like this, then the networking wil= l be as it should be!<o:p></o:p> A port group would be a vNIC Profile from the looks = of things…<o:p></o:p> <o:p> </o:p>   <name>vdsm-SRIOV</name><o:p></o:p= >   <forward dev=3D'enp6s0f1' mode=3D'passthro= ugh'>           &= nbsp;           &nbs= p;     ß defined as a passthrou= gh device, not a bridge<o:p></o:p>     <interface dev=3D'enp6s0f1'/&g= t;<o:p></o:p>     <interface dev=3D'enp6s0f2'/&g= t;<o:p></o:p>     <interface dev=3D'enp6s0f3'/&g= t;<o:p></o:p>     <interface dev=3D'enp6s0f4'/&g= t;<o:p></o:p> <   .. list of interfaces available to = it which would need to be manually inputted as a hook><o:p></o:p>   </forward><o:p></o:p>   <portgroup name=3D'ame1-test1'><o:p></o= :p>     <virtualport type=3D'802.1Qbh'= ><o:p></o:p>       <parameters profil= eid=3D'profile-ame1-test1'/><o:p></o:p>     </virtualport><o:p></o:p></= p>   </portgroup> <o:p></o:p>   <portgroup name=3D'ame1-prep1'><o:= p></o:p>     <virtualport type=3D'802.1Qbh'= ><o:p></o:p>       <parameters profil= eid=3D'profile-ame1-prep1'/><o:p></o:p>     </virtualport><o:p></o:p></= p>   </portgroup><o:p></o:p> </network><o:p></o:p> <o:p> </o:p> <o:p> </o:p> Cheers<o:p></o:p> David<o:p></o:p> </div> This email and any attachments may contain confidential and proprietary inf= ormation of Blackboard that is for the sole use of the intended recipient. = If you are not the intended recipient, disclosure, copying, re-distribution= or other use of any of this information is strictly prohibited. Please immediately notify the sender and delete th= is transmission if you received this email in error. </body> </html> --_000_BLUPR0301MB1971508A98EC31035499673AE9B30BLUPR0301MB1971_--

2 6

Understand CPU Socket Cores and VCPU
by Taste-Of-IT 10 Mar '16

10 Mar '16

Hello, i have a general Question about Hardware CPU, Socket, Cores and the VCPU, Cores per VSocket and VScoket for virtual Machines. Example i have a single CPU with 4 Cores and 8 Threads. As far as i understand i should configure the virtual machines with that number of socket as the host has. So in this example with max 1 Socket. How is the possibility in VCPUs and VCores? What is the limit in this example? Can i only run max 4 VMs? Thanks for clarifying Taste

2 2

Installation of host hangs and will not finish installation of host
by Jonas Kirk Pedersen 10 Mar '16

10 Mar '16

Im and quite new at using mailing list, but here is my current challenge. I am adding a new host from a fresh install centos 7. Updated with yum -y update and yum install then repo from ovirt v.3.6. Now the installation of the host is stuck at validating for 2 hours. Have tried to restart vdsmd to see if I cant trigger a failure, but no. Did a reboot of the host and that did not help. Now it is powered off and the engine is has registered that there is no connection to the host with error: "VDSM KVM2 command failed: Connection issue null" Is there a way to cancel a running task? -- Jonas Kirk Pedersen ASOM-Net Systemadministrator

2 1

VDSM will not start
by Jonas Kirk Pedersen 10 Mar '16

10 Mar '16

This is a multi-part message in MIME format. --------------080709040101080905010803 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Had a problem where on the host the vdsm service would not start. The following is from #ovirt IRC chat after I emailed the sos report from the host 13:29:06) sbonazzo: jkp looks like an issue while starting supervdsm, I see: (13:29:08) sbonazzo: Mar 9 12:41:30 kvm1 daemonAdapter: OSError: [Errno 2] No such file or directory: '/var/run/vdsm/svdsm.sock' (13:29:08) sbonazzo: Mar 9 12:41:30 kvm1 systemd: start request repeated too quickly for supervdsmd.service (13:29:26) sbonazzo: danken: ybronhei: nsoffer ^^ (13:30:57) sbonazzo: msivak: i see also Mar 9 12:27:18 kvm1 systemd: [/usr/lib/systemd/system/momd.service:11] Unknown lvalue 'Timeout' in section 'Service' (13:31:30) sbonazzo: msivak: maybe epel7 mom should be updated (13:32:33) sbonazzo: after that, vdsm doesn't come up due to Mar 9 12:27:55 kvm1 daemonAdapter: OSError: [Errno 2] No such file or directory: '/var/run/vdsm/svdsm.sock since supervdsmd didn't run (13:34:50) sbonazzo: jkp: can you try to manually start supervdsmd service? (13:35:07) jkp: sbonazzo, it is confirmed that the file is not there. But shouldn't the service create this file -- Yes I'll try (13:35:19) sbonazzo: jkp: yes, it's supposed to (13:39:07) jkp: sbonazzo, still gives me the : OSError: [Errno 2] No such file or directory: '/var/run/vdsm/svdsm.sock' (13:39:35) sbonazzo: jkp does /var/run/vdsm/ exist? (13:40:55) jkp: sbonazzo, yes it contains [root@kvm1 ~]# ls /var/run/vdsm/ lvm sourceRoutes trackedInterfaces v2v Later I received a email Mar 9 10:41:21 kvm1 journal: Module /usr/lib64/libvirt/connection-driver/libvirt_driver_lxc.so not accessible Mar 9 10:41:21 kvm1 journal: The server certificate /etc/pki/vdsm/certs/vdsmcert.pem is not yet active Mar 9 10:41:21 kvm1 systemd: libvirtd.service: main process exited, code=exited, status=6/NOTCONFIGURED Mar 9 10:41:21 kvm1 systemd: Failed to start Virtualization daemon. Mar 9 10:41:21 kvm1 systemd: Dependency failed for Virtual Desktop Server Manager. Mar 9 10:41:21 kvm1 systemd: Dependency failed for MOM instance configured for VDSM purposes. Mar 9 10:41:21 kvm1 systemd: Job mom-vdsm.service/start failed with result 'dependency'. Mar 9 10:41:21 kvm1 systemd: Job vdsmd.service/start failed with result 'dependency'. Mar 9 10:41:21 kvm1 systemd: Dependency failed for Virtual Desktop Server Manager network restoration. Mar 9 10:41:21 kvm1 systemd: Job vdsm-network.service/start failed with result 'dependency'. Mar 9 10:41:21 kvm1 systemd: Unit libvirtd.service entered failed state. Mar 9 10:41:21 kvm1 systemd: libvirtd.service failed. Mar 9 10:41:21 kvm1 systemd-logind: Removed session 4. Mar 9 10:41:21 kvm1 systemd: libvirtd.service holdoff time over, scheduling restart. I see that libvirtd fails to start. It might be due to Engine system clock being deep in the future? What I had failed to notice was that the vdsmcert.pem that was not active. The ntp service running on the Engine was out of sync with a year resulting in that of cause the certificate did not work and then the vdsm would not start. I have a fairly new engine so I removed it and fixed the time issue and all was perfect Thanks for a great help on the chat and on email -- Jonas Kirk Pedersen ASOM-Net Systemadministrator --------------080709040101080905010803 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body text="#000000" bgcolor="#FFFFFF"> Had a problem where on the host the vdsm service would not start. The following is from #ovirt IRC chat after I emailed the sos report from the host 13:29:06) sbonazzo: jkp looks like an issue while starting supervdsm, I see: (13:29:08) sbonazzo: Mar 9 12:41:30 kvm1 daemonAdapter: OSError: [Errno 2] No such file or directory: '/var/run/vdsm/svdsm.sock' (13:29:08) sbonazzo: Mar 9 12:41:30 kvm1 systemd: start request repeated too quickly for supervdsmd.service (13:29:26) sbonazzo: danken: ybronhei: nsoffer ^^ (13:30:57) sbonazzo: msivak: i see also Mar 9 12:27:18 kvm1 systemd: [/usr/lib/systemd/system/momd.service:11] Unknown lvalue 'Timeout' in section 'Service' (13:31:30) sbonazzo: msivak: maybe epel7 mom should be updated (13:32:33) sbonazzo: after that, vdsm doesn't come up due to Mar 9 12:27:55 kvm1 daemonAdapter: OSError: [Errno 2] No such file or directory: '/var/run/vdsm/svdsm.sock since supervdsmd didn't run (13:34:50) sbonazzo: jkp: can you try to manually start supervdsmd service? (13:35:07) jkp: sbonazzo, it is confirmed that the file is not there. But shouldn't the service create this file -- Yes I'll try (13:35:19) sbonazzo: jkp: yes, it's supposed to (13:39:07) jkp: sbonazzo, still gives me the : OSError: [Errno 2] No such file or directory: '/var/run/vdsm/svdsm.sock' (13:39:35) sbonazzo: jkp does /var/run/vdsm/ exist? (13:40:55) jkp: sbonazzo, yes it contains [root@kvm1 ~]# ls /var/run/vdsm/ lvm sourceRoutes trackedInterfaces v2v Later I received a email <pre class="moz-signature" cols="72">Mar 9 10:41:21 kvm1 journal: Module /usr/lib64/libvirt/connection-driver/libvirt_driver_lxc.so not accessible Mar 9 10:41:21 kvm1 journal: The server certificate /etc/pki/vdsm/certs/vdsmcert.pem is not yet active Mar 9 10:41:21 kvm1 systemd: libvirtd.service: main process exited, code=exited, status=6/NOTCONFIGURED Mar 9 10:41:21 kvm1 systemd: Failed to start Virtualization daemon. Mar 9 10:41:21 kvm1 systemd: Dependency failed for Virtual Desktop Server Manager. Mar 9 10:41:21 kvm1 systemd: Dependency failed for MOM instance configured for VDSM purposes. Mar 9 10:41:21 kvm1 systemd: Job mom-vdsm.service/start failed with result 'dependency'. Mar 9 10:41:21 kvm1 systemd: Job vdsmd.service/start failed with result 'dependency'. Mar 9 10:41:21 kvm1 systemd: Dependency failed for Virtual Desktop Server Manager network restoration. Mar 9 10:41:21 kvm1 systemd: Job vdsm-network.service/start failed with result 'dependency'. Mar 9 10:41:21 kvm1 systemd: Unit libvirtd.service entered failed state. Mar 9 10:41:21 kvm1 systemd: libvirtd.service failed. Mar 9 10:41:21 kvm1 systemd-logind: Removed session 4. Mar 9 10:41:21 kvm1 systemd: libvirtd.service holdoff time over, scheduling restart. I see that libvirtd fails to start. It might be due to Engine system clock being deep in the future? </pre> What I had failed to notice was that the vdsmcert.pem that was not active. The ntp service running on the Engine was out of sync with a year resulting in that of cause the certificate did not work and then the vdsm would not start. I have a fairly new engine so I removed it and fixed the time issue and all was perfect Thanks for a great help on the chat and on email <pre class="moz-signature" cols="72"> </pre> <pre class="moz-signature" cols="72">-- Jonas Kirk Pedersen ASOM-Net Systemadministrator </pre> </body> </html> --------------080709040101080905010803--

1 0

The bumpy road to Ceph
by Bond, Darryl 10 Mar '16

10 Mar '16

We intend to migrate off our small Openstack/Ceph cluster to oVirt as it is a better fit for our organisation. We wanted to run oVirt backed on to Ceph storage for quite some time. We waited for the 3.6 development to take it's course and started testing last year. The kolla cinder container implementation changed fundamentally in the middle of the oVirt release process which broke the oVirt 'official' cinder implementation. We had tested oVirt using our Openstack cinder so we knew it basically worked but we didn't want to mix the oVirt and Openstack volumes, ie put oVirt into it's own ceph pool. We waited and waited for the Kolla container ... There didn't seem to be any end in sight, so we chose the following configuration: - Hosted engine on Centos 7.2 with gluster storage - Cinder/Keystone VM on Centos 7.2 using RDO and cinder 'liberty' kept in the same gluster store as the engine and managed by the engine. - Used the oVirt engine Postgres database as the Cinder/Keystone store so we didn't introduce more dependencies with MySQL that Kolla required. (New user and database for the cinder store. Backups exported separate to the engine backups) It's early days yet but here are some observations: - It works very well integrated with oVirt from the point of view of building and managing new VM's - Snapshots and cloning use ceph's features - No simple means to move Vm disks to and from other storage domains. - Not impossible though, it means that you have to delete and import ceph RBD's behind both oVirt and Cinder. It is fairly dangerous as I haven't found a simple way to get the rbd volume name with vdsClient other than 'vdsClient list' running VM's. Openstack at least publishes the volume name (UUID) in the gui, oVirt does not. - Successfully imported VM images from both Openstack and VMWare. - There is a hard dependency between oVirt and Cinder when starting VM's but does not require Cinder to run VMs. Strange really, when the volume name could be stored in oVirt when the volume is created rather than query cinder for each start. Where to from here. Hosting Cinder/Keystone in containers on the engine VM makes sense. We are going to roll our own container(s), given the data will be in the engine Postgres database it should be possible to transition in a clean fassion. Darryl ________________________________ The contents of this electronic message and any attachments are intended only for the addressee and may contain legally privileged, personal, sensitive or confidential information. If you are not the intended addressee, and have received this email, any transmission, distribution, downloading, printing or photocopying of the contents of this message or attachments is strictly prohibited. Any legal privilege or confidentiality attached to this message and attachments is not waived, lost or destroyed by reason of delivery to any person other than intended addressee. If you have received this message and are not the intended addressee you should notify the sender by return email and destroy all copies of the message and any attachments. Unless expressly attributed, the views expressed in this email do not necessarily represent the views of the company.

1 0

Admin lockout
by Clint Boggio 09 Mar '16

09 Mar '16

I had a keyboard problem and entered the wrong password for admin@internal enough times to finally lock the account. How do I recover from this ? OVirt engine 3.6.2

3 3