April 2022 - Users - oVirt List Archives

[ANN] oVirt Node 4.5.0.1 Async update
by Sandro Bonazzola 26 Apr '22

26 Apr '22

oVirt Node 4.5.0.1 Async update On April 26th 2022 the oVirt project released an async update of oVirt Node (4.5.0.1) delivering important impact security fixes, several bug fixes and enhancements. The update is already available on resources.ovirt.org and should land on oVirt mirrors within 24 hours. Security fixes included in oVirt Node NG 4.5.0 Async1 compared to latest oVirt 4.5.0 GA: - CVE-2022-1015 <https://bugzilla.redhat.com/show_bug.cgi?id=2065323> - important - kernel: arbitrary code execution in linux/net/netfilter/nf_tables_api.c - CVE-2022-0435 <https://bugzilla.redhat.com/show_bug.cgi?id=2048738> - important - kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS - CVE-2022-25636 <https://bugzilla.redhat.com/show_bug.cgi?id=2056830> - important - kernel: heap out of bounds write in nf_dup_netdev.c - CVE-2021-4028 <https://bugzilla.redhat.com/show_bug.cgi?id=2027201> - important - kernel: use-after-free in RDMA listen() - CVE-2022-1016 <https://bugzilla.redhat.com/show_bug.cgi?id=2066614> - moderate - kernel: uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM oVirt Node has been updated, including: - Ansible Core 2.12.3: https://github.com/ansible/ansible/blob/stable-2.12/changelogs/CHANGELOG-v2… - CentOS Stream 8 latest updates - Full list of changes compared to oVirt Node 4.5.0 GA: 4.5.0 GA 4.5.0 Async #1 ansible-core 2.12.2-2.el8 2.12.3-1.el8 binutils 2.30-113.el8 2.30-114.el8 fribidi 1.0.4-8.el8 1.0.4-9.el8 ipa-client 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 ipa-client-common 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 ipa-common 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 ipa-selinux 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 ipxe-roms-qemu 20181214-8.git133f4c47.el8 20181214-9.git133f4c47.el8 kernel 4.18.0-373.el8 4.18.0-383.el8 kernel-core 4.18.0-373.el8 4.18.0-383.el8 kernel-modules 4.18.0-373.el8 4.18.0-383.el8 kernel-tools 4.18.0-373.el8 4.18.0-383.el8 kernel-tools-libs 4.18.0-373.el8 4.18.0-383.el8 krb5-libs 1.18.2-14.el8 1.18.2-17.el8 krb5-workstation 1.18.2-14.el8 1.18.2-17.el8 libestr 0.1.10-1.el8 0.1.10-3.el8 libkadm5 1.18.2-14.el8 1.18.2-17.el8 nmstate 1.2.1-1.el8 1.3.0-0.alpha.20220407.el8 nmstate-plugin-ovsdb 1.2.1-1.el8 1.3.0-0.alpha.20220407.el8 openvswitch2.15 2.15.0-81.el8s 2.15.0-88.el8s openvswitch2.15-ipsec 2.15.0-81.el8s 2.15.0-88.el8s ovirt-node-ng-image-update-placeholder 4.5.0-4.el8 4.5.0.1-1.el8 ovirt-release-host-node 4.5.0-4.el8 4.5.0.1-1.el8 python3-ipaclient 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 python3-ipalib 4.9.8-2.module_el8.6.0+1054+cdb51b28 4.9.8-6.module_el8.6.0+1104+ba556574 python3-libnmstate 1.2.1-1.el8 1.3.0-0.alpha.20220407.el8 python3-openvswitch2.15 2.15.0-81.el8s 2.15.0-88.el8s python3-perf 4.18.0-373.el8 4.18.0-383.el8 python3-sanlock 3.8.4-1.el8 3.8.4-3.el8 rsyslog 8.2102.0-7.el8 8.2102.0-9.el8 rsyslog-elasticsearch 8.2102.0-7.el8 8.2102.0-9.el8 rsyslog-mmjsonparse 8.2102.0-7.el8 8.2102.0-9.el8 rsyslog-mmnormalize 8.2102.0-7.el8 8.2102.0-9.el8 rsyslog-openssl 8.2102.0-7.el8 8.2102.0-9.el8 sanlock 3.8.4-1.el8 3.8.4-3.el8 sanlock-lib 3.8.4-1.el8 3.8.4-3.el8 virt-install 3.2.0-3.el8 3.2.0-4.el8 virt-manager-common 3.2.0-3.el8 3.2.0-4.el8 virt-what 1.18-13.el8 1.18-14.el8 Additional resources: - Read more about the oVirt 4.5.0 release highlights: https://www.ovirt.org/release/4.5.0/ - Get more oVirt project updates on Twitter: https://twitter.com/ovirt - Check out the latest project news on the oVirt blog: https://blogs.ovirt.org/ -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0

AMD Ryzen 5600G unsupported?
by Gilboa Davara 26 Apr '22

26 Apr '22

Hello all, I'm building adding a Ryzen 5 5600G workstation to an existing AMD Threadripper cluster (The existing machine use the 3960X CPU) and the cluster rejects the new host as it fails to recognize the host CPU as either "Secure AMD Epyc" or "AMD Epyc". All hosts are using a fully updated CentOS 8 Streams. I assume the 5XXX family has yet to be supported by oVirt. Can I somehow force oVirt / HE to recognize the new host? - Gilboa

2 5

Error 500 on Hosted Engine admin portal!!!
by Patrick Lomakin 26 Apr '22

26 Apr '22

Hi everyone! Did the oVirt team check the 4.5 update before release? I've update my production latest 4.4.10 version and get Error 500 on admin page. Clean installation on another bare-metal node using Ovirt Node 4.5 and hosted-engine console setup (installing through the web installer several versions of Ovirt traditionally makes the connection break and disconnects access to the host by means of the IP address) get an error 500 after healthcheck. What I will do in this situation? Httpd log: [Sat Apr 23 15:54:59.826076 2022] [core:notice] [pid 1526:tid 140201844767040] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND' [Sat Apr 23 15:55:05.685872 2022] [proxy:error] [pid 2125:tid 140201102243584] (111)Connection refused: AH00957: AJP: attempt to connect to 127.0.0.1:8702 (127.0.0.1) failed [Sat Apr 23 15:55:05.685924 2022] [proxy_ajp:error] [pid 2125:tid 140201102243584] [client 192.168.0.14:43194] AH00896: failed to make connection to backend: 127.0.0.1 [Sat Apr 23 15:55:15.831754 2022] [proxy:error] [pid 2125:tid 140201110636288] (111)Connection refused: AH00957: AJP: attempt to connect to 127.0.0.1:8702 (127.0.0.1) failed [Sat Apr 23 15:55:15.831811 2022] [proxy_ajp:error] [pid 2125:tid 140201110636288] [client 192.168.0.14:43196] AH00896: failed to make connection to backend: 127.0.0.1 [Sat Apr 23 16:21:57.720678 2022] [proxy:error] [pid 7761:tid 140200894203648] (111)Connection refused: AH00957: AJP: attempt to connect to 127.0.0.1:8702 (127.0.0.1) failed [Sat Apr 23 16:21:57.720745 2022] [proxy_ajp:error] [pid 7761:tid 140200894203648] [client 192.168.0.14:43516] AH00896: failed to make connection to backend: 127.0.0.1 [Sat Apr 23 16:30:57.738971 2022] [proxy:error] [pid 7761:tid 140200877418240] (111)Connection refused: AH00957: AJP: attempt to connect to 127.0.0.1:8702 (127.0.0.1) failed [Sat Apr 23 16:30:57.739043 2022] [proxy_ajp:error] [pid 7761:tid 140200877418240] [client 192.168.0.14:43640] AH00896: failed to make connection to backend: 127.0.0.1 [Sat Apr 23 16:32:27.838795 2022] [proxy:error] [pid 7761:tid 140200978130688] (111)Connection refused: AH00957: AJP: attempt to connect to 127.0.0.1:8702 (127.0.0.1) failed [Sat Apr 23 16:32:27.838881 2022] [proxy_ajp:error] [pid 7761:tid 140200978130688] [client 192.168.0.14:43658] AH00896: failed to make connection to backend: 127.0.0.1 [Sat Apr 23 16:37:49.357585 2022] [core:notice] [pid 1497:tid 139855753558336] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0 [Sat Apr 23 16:37:49.361573 2022] [suexec:notice] [pid 1497:tid 139855753558336] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) [Sat Apr 23 16:37:49.388188 2022] [so:warn] [pid 1497:tid 139855753558336] AH01574: module proxy_module is already loaded, skipping [Sat Apr 23 16:37:49.391763 2022] [lbmethod_heartbeat:notice] [pid 1497:tid 139855753558336] AH02282: No slotmem from mod_heartmonitor [Sat Apr 23 16:37:49.399281 2022] [mpm_event:notice] [pid 1497:tid 139855753558336] AH00489: Apache/2.4.37 (centos) OpenSSL/1.1.1k mod_auth_gssapi/1.6.1 mod_wsgi/4.6.4 Python/3.6 configured -- resuming normal operations [Sat Apr 23 16:37:49.399320 2022] [core:notice] [pid 1497:tid 139855753558336] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND' [Sat Apr 23 23:20:37.254289 2022] [proxy:error] [pid 6183:tid 139854109198080] (111)Connection refused: AH00957: AJP: attempt to connect to 127.0.0.1:8702 (127.0.0.1) failed [Sat Apr 23 23:20:37.254354 2022] [proxy_ajp:error] [pid 6183:tid 139854109198080] [client 192.168.0.13:52982] AH00896: failed to make connection to backend: 127.0.0.1 server.log: 2022-04-23 16:38:20,655+03 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "engine.ear")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.subunit.\"engine.ear\".\"bll.jar\".component.Backend.START" => "java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance 2022-04-23 16:38:20,752+03 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: WildFly Full 24.0.1.Final (WildFly Core 16.0.1.Final) started (with errors) in 22155ms - Started 1670 of 1890 services (6 services failed or missing dependencies, 393 services are lazy, passive or on-demand) 2022-04-23 23:20:50,622+03 ERROR [org.jboss.msc.service.fail] (ServerService Thread Pool -- 47) MSC000001: Failed to start service jboss.deployment.subunit."engine.ear"."bll.jar".component.Backend.START: org.jboss.msc.service.StartException in service jboss.deployment.subunit."engine.ear"."bll.jar".component.Backend.START: java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance 2022-04-23 23:20:50,630+03 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "engine.ear")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.subunit.\"engine.ear\".\"bll.jar\".component.Backend.START" => "java.lang.IllegalStateException: WFLYEE0042: Failed to construct component instance 2022-04-23 23:20:50,706+03 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: WildFly Full 24.0.1.Final (WildFly Core 16.0.1.Final) started (with errors) in 15267ms - Started 1670 of 1890 services (6 services failed or missing dependencies, 393 services are lazy, passive or on-demand)

7 6

Cannot remove geo-replication session
by simon＠justconnect.ie 25 Apr '22

25 Apr '22

On CentOS 8 - 4.4.5 I removed a geo-replication session from a volume from the command line but ovirt manager 'volume' is still showing the geo-replication session. I cannot remove this session as it says it doesn't exist (which is correct). Geo Rep session deletion failed: rc=30800 out=() err=['Geo-replication session between data01 and bdtovirthci01-strg::pgs_data01 does not exist_']

1 1

Windows VMs randomly wont boot after compatibility change
by David Sekne 25 Apr '22

25 Apr '22

Hello, I have noticed that some of our Windows VM's (2012 - 2022) randomly won't boot when reboot is initiated from guest OS. As far as I can tell this started happening after we raised the cluster compatibility from 4.4 to 4.5 (it's 4.6 now). To fix it a VM needs to be stopped and started. We are running oVirt 4.4.10. I cannot really see much from the logs if grepping for a specific VM that had these issues. Example VM ID is: daf33e97-a76f-4b82-b4f2-20fa4891c88b Im attaching logs: - Initial hypervisor where VM was running on (reboot is initiated at 4:06:38 AM): vdsm-1.log - Second hypervisor where VM was started after it was stopped and started back (this was done 7:45:43 AM): vdsm-2.log - Engine log: engine.log Has someone noticed any similar issues and can provide some feedback / help? Regards, David

2 4

How to configure oVirt for OKD 4.10
by marcellus major 24 Apr '22

24 Apr '22

Recently, I watched a video made by Gal Zadman detailing how to install OKD on oVirt Is there any documentation detailing how Gal configured the oVirt environment prior to installation of OKD? Thanks

3 2

oVirt Node 4.5 - Installing gluster single node stops immediately
by Patrick Lomakin 23 Apr '22

23 Apr '22

Hi guys! I've tried to deploy ovirt single node with gluster via GUI but have a problem immediately. A log file that shows after installation was empty. But in journalctl I found that: Apr 23 20:06:45 host1 cockpit-ws[22948]: ERROR! couldn't resolve module/action 'vdo'. This often indicates a misspelling, missing collection, or incorrect module path. Apr 23 20:06:45 host1 cockpit-ws[22948]: The error appears to be in '/etc/ansible/roles/gluster.infra/roles/backend_setup/tasks/vdo_create.yml': line 53, column 3, but may Apr 23 20:06:45 host1 cockpit-ws[22948]: be elsewhere in the file depending on the exact syntax problem. Apr 23 20:06:45 host1 cockpit-ws[22948]: The offending line appears to be: Apr 23 20:06:45 host1 cockpit-ws[22948]: - name: Create VDO with specified size Apr 23 20:06:45 host1 cockpit-ws[22948]: ^ here

1 1

Command line management and ansible error
by fs3000＠pm.me 23 Apr '22

23 Apr '22

Hello guys, So i read in the documentation that managing VMs is not done with ovirt-shell anymore, ansible should be used instead. Ansible can manage VMs via modules, connecting to the Manager VM. However, how can i start the Manager VM itself, if it stopped? (it just happened to me) Catch 22 problem :) Anyway, i tried using the ovirt_vm_info modulei in ansible, but it resulted in an error, because the web interface is running with a self signed certificate, configured by the engine setup: " An exception occurred during task execution. To see the full traceback, use -vvv. The error was: ovirtsdk4.Error: Error while sending HTTP request: (60, 'SSL certificate problem: self signed certificate in certificate chain') fatal: [192.168.0.200]: FAILED! => {"changed": false, "msg": "Error while sending HTTP request: (60, 'SSL certificate problem: self signed certificate in certificate chain')"} " I know this is a curl error. In the shell, the option -k or --insecure can be used. How to use that option in the ansible module? Thanks in advance for any pointers on this!

3 5

ovirt 4.5.0 - template Issue
by Winfried de Heiden 22 Apr '22

22 Apr '22

Hi all, For some reason, I am not able to create or import tempates. Creating a template from an existing VM (using the UI) will result in the ui.log: 2022-04-22 10:45:30,273+02 ERROR [org.ovirt.engine.ui.frontend.server.gwt.OvirtRemoteLoggingService] (default task-13) [] Permutation name: 1EBF700FBD4B5CDF0BCDABD7F03C4FA9 2022-04-22 10:45:30,273+02 ERROR [org.ovirt.engine.ui.frontend.server.gwt.OvirtRemoteLoggingService] (default task-13) [] Uncaught exception: com.google.gwt.core.client.JavaScriptException: (TypeError) : Cannot read properties of undefined (reading 'a') Trying to import a template will result in ui.log: 2022-04-22 12:17:02,383+02 ERROR [org.ovirt.engine.ui.frontend.server.gwt.OvirtRemoteLoggingService] (default task-20) [] Permutation name: 45A889347BD114EA48B9B9409FF70ADC 2022-04-22 12:17:02,383+02 ERROR [org.ovirt.engine.ui.frontend.server.gwt.OvirtRemoteLoggingService] (default task-20) [] Uncaught exception: com.google.gwt.core.client.JavaScriptException: (TypeError) : e is null New bug? Anyone? Winfried

2 1

Re: engine.rar
by Sandro Bonazzola 22 Apr '22

22 Apr '22

Il giorno ven 22 apr 2022 alle ore 11:54 Nazeem Durgahee < nazeem.durgahee(a)harelmallac.com> ha scritto: > Hi Sandro, > > > > This what I am getting while trying to upgrade. > > > > Complete! > > [root@fscdrs-ovirt-001 ~]# dnf install -y centos-release-ovirt45 > > Last metadata expiration check: 0:02:50 ago on Fri 22 Apr 2022 01:51:06 PM > +04. > > No match for argument: centos-release-ovirt45 > > Error: Unable to find a match: centos-release-ovirt45 > I assume you are on Oracle Linux for hosts as well, not using oVirt Node, right? In such case, you need Oracle Linux 8.6 Beta as a first step. I never used Oracle Linux but I guess it means enabling this beta repo https://yum.oracle.com/repo/OracleLinux/OL8/beta/x86_64/ Perhaps @Simon Coter <simon.coter(a)oracle.com> , @Marcos Sungaila <marcos.sungaila(a)oracle.com> or someone else from Oracle can assist you with this. Then, you'll need to follow https://ovirt.org/download/install_on_rhel.html for adding CentOS Stream extras repositories before trying to install centos-release-ovirt45. Perhaps you or someone else using Oracle Linux can help updating https://ovirt.org/download/install_on_rhel.html for the Oracle Linux case once you succeed installing there? > > > *From:* Sandro Bonazzola <sbonazzo(a)redhat.com> > *Sent:* Thursday, April 21, 2022 12:17 PM > *To:* Nazeem Durgahee <nazeem.durgahee(a)harelmallac.com> > *Cc:* Veeroo Dowlut <Veeroo.Dowlut(a)harelmallac.com>; Govind Mooroogen < > govind.mooroogen(a)harelmallac.com>; users(a)ovirt.org > *Subject:* Re: [ovirt-users] engine.rar > > > > > > > > Il giorno gio 21 apr 2022 alle ore 10:13 Nazeem Durgahee < > nazeem.durgahee(a)harelmallac.com> ha scritto: > > > HI, > > We have ovirt 4.4.10 running on oracle linux 8 but we are having issues > with netbackup whereby it is not removing the snapshot after VM backup. > > Kindly find attached engine log. > > > > Can you please upgrade to 4.5.0 and try to reproduce? > > More info: > > * https://blogs.ovirt.org/2022/04/ovirt-4-5-0-is-now-generally-available/ > > * https://blogs.ovirt.org/2022/04/ovirt-4-4-end-of-life/ > > > > -- > > *Sandro Bonazzola* > > MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV > > Red Hat EMEA <https://www.redhat.com/> > > sbonazzo(a)redhat.com > > <https://www.redhat.com/> > > *Red Hat respects your work life balance. Therefore there is no need to > answer this email out of your office hours.* > > > -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 0