September 2022 - Users - oVirt List Archives

adding foreman as an external provider
by eevans＠digitaldatatechs.com 01 Oct '22

01 Oct '22

I had an ovirt engine failure which corrupted my foreman/katello vm. My ovirt-engine is 4.3 and I was using foreman 3.0 with Katello 4.5. Once the ovirt-engine was repaired, still 4.3, I updated the foreman katello install to foreman 3.3 and Katello 4.5. I can connect from foreman to Ovirt as a compute resource but cannot add foreman to ovirt as an external provider. The engine.log: 2022-09-30 15:51:24,213-04 ERROR [org.ovirt.engine.core.bll.host.provider.foreman.ForemanHostProviderProxy] (default task-158) [12e3a290-09e7-42b3-a849-e57b56bc338d] Exception is https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… 2022-09-30 15:51:24,214-04 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (default task-158) [12e3a290-09e7-42b3-a849-e57b56bc338d] Command 'org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' failed: EngineException: https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… (Failed with error PROVIDER_FAILURE and code 5050) 2022-09-30 15:52:26,240-04 ERROR [org.ovirt.engine.core.bll.host.provider.foreman.ForemanHostProviderProxy] (default task-162) [33322f35-2e34-4e64-bda7-dd43c5d9c157] Exception is https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… 2022-09-30 15:52:26,240-04 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (default task-162) [33322f35-2e34-4e64-bda7-dd43c5d9c157] Command 'org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' failed: EngineException: https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… (Failed with error PROVIDER_FAILURE and code 5050) 2022-09-30 15:54:53,279-04 ERROR [org.ovirt.engine.core.bll.host.provider.foreman.ForemanHostProviderProxy] (default task-164) [8d49c923-9269-4637-a858-659ede223c0a] Exception is https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… 2022-09-30 15:54:53,280-04 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (default task-164) [8d49c923-9269-4637-a858-659ede223c0a] Command 'org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' failed: EngineException: https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… (Failed with error PROVIDER_FAILURE and code 5050) 2022-09-30 16:19:31,467-04 ERROR [org.ovirt.engine.core.bll.host.provider.foreman.ForemanHostProviderProxy] (default task-164) [320557dc-da95-4cb2-9a58-735fe960dc78] Exception is https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… 2022-09-30 16:19:31,468-04 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (default task-164) [320557dc-da95-4cb2-9a58-735fe960dc78] Command 'org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' failed: EngineException: https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… (Failed with error PROVIDER_FAILURE and code 5050) 2022-09-30 16:29:40,606-04 ERROR [org.ovirt.engine.core.bll.host.provider.foreman.ForemanHostProviderProxy] (default task-5) [2e10f6a6-36e3-4812-a029-c64c2bf927e8] Exception is https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… 2022-09-30 16:29:40,607-04 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (default task-5) [2e10f6a6-36e3-4812-a029-c64c2bf927e8] Command 'org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' failed: EngineException: https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… (Failed with error PROVIDER_FAILURE and code 5050) 2022-09-30 16:54:19,240-04 ERROR [org.ovirt.engine.core.bll.host.provider.foreman.ForemanHostProviderProxy] (default task-2) [5c103548-4b63-48a7-a76e-89175d76dd62] Exception is https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… 2022-09-30 16:54:19,240-04 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (default task-2) [5c103548-4b63-48a7-a76e-89175d76dd62] Command 'org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' failed: EngineException: https://katello.digitaldatatechs.com:443/api/v2/discovered_hosts?format=jso… (Failed with error PROVIDER_FAILURE and code 5050) 2022-09-30 16:55:02,397-04 ERROR [org.ovirt.engine.core.bll.host.provider.foreman.ForemanHostProviderProxy] (default task-4) [5f2e8594-6b91-4ff6-8bdb-73df987ccf94] Exception is Server returned HTTP response code: 401 for URL: https://katello.digitaldatatechs.com:443/api/v2 2022-09-30 16:55:02,398-04 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (default task-4) [5f2e8594-6b91-4ff6-8bdb-73df987ccf94] Command 'org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' failed: EngineException: Server returned HTTP response code: 401 for URL: https://katello.digitaldatatechs.com:443/api/v2 (Failed with error PROVIDER_FAILURE and code 5050) The foreman host name and IP are the same. I believe it's a certificate error vnd renamed the katello certs with a .bak suffix. I'm not sure ifit's a compatability issue but I researched it to death and so far came up empty. Any help would be appreciated. Thanks, Eric

1 0

Permissions
by boris.golemovic＠eir.ie 29 Sep '22

29 Sep '22

Hi Does anybody have any solution that I want give some user or group permissions to create vm and fully manage only vm what he creates. So users should not be able to see or make any changes on vm what are not created by him/groups where user belong,

2 1

Storage domain deletion not possible because not possible to detach
by Diego Ercolani 28 Sep '22

28 Sep '22

(I'm always talking about the last ovirt version that is currently engine: 4.5.2.5-1.el8, node: ovirt-node-ng-4.5.2-0.20220810.0) I tried to add an iSCSI storage domain adding a new vlan network where the storage is attached.... this gave a completely mess-up of the storage engine. I would like to restart the procedure again and to accomplish this I have do remove the storage domain. To do this, I added manually the vlan to the nodes as I'm configured using linux bridge simple networking, so I discovered I have not to manage ovs environment. I currently have the storage domain in maintenance mode and I've successfully regenerated the discovery informations as the network to connecto to the storage is online. But I cannot detach the storage and I cannot activate the storage domain, so I'm completely stuck. This is the related log in the engine while I was trying to detach the storage: 2022-09-26 07:20:48,043Z ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.DetachStorageDomainVDSCommand] (EE-ManagedThreadFactory-engine-Thread-55008) [7a5a5413-36d0-4a15-b555-c9801f92483d] Command 'DetachStorageDomainVDSCommand( DetachStorageDomainVDSCommandParameters:{storagePoolId='da146814-f823-40e0-bd7b-8478dcfa38cd', ignoreFailoverLimit='false', storageDomainId='aac79175-ab2b-4b5b-a6e4-9feef9ce17ab', masterDomainId='00000000-0000-0000-0000-000000000000', masterVersion='8', force='false'})' execution failed: IRSGenericException: IRSErrorException: Storage domain not in pool: 'domain=aac79175-ab2b-4b5b-a6e4-9feef9ce17ab, pool=da146814-f823-40e0-bd7b-8478dcfa38cd' as you can see it seem there is a problem in the engine database. I saw here (https://lists.ovirt.org/pipermail/users/2015-January/030504.html) that someone worked directly on the engine db to delete the storage domain but I read somewhere else that the domain information is also mapped in a lvm volume metadata. What can I do from here? Thank you.

1 1

Editing vm devices
by Patrick Hibbs 28 Sep '22

28 Sep '22

Hello, I was trying to get some guest os hardware working and ultimately had to use the qemu-cmdline vdsm hook to set the pci bus id and address for a given vm device. I noticed that ovirt had a vmdevices tab in the Admin UI with this information in it, but it could not be edited. After looking through things I found this: https://www.ovirt.org/develop/release-management/features/virt/expose-vm-de… Apparently ovirt had at one point planned on allowing the administrator to change individual vm device properties, and some of this support such as the property persistence in the ovirt database, was already implemented. The only thing that seems to be missing is marking the fields in the Admin UI as editable, and the hook to update the database from those fields. Does anyone know if there are any plans on actually finishing this feature and getting it into a ovirt release? Or if not, why? The linked page is outdated, and claims the original target was ovirt 3.6. -Patrick Hibbs

2 2

ovirtmgmt Bridge - Which NIC? - Advice Please
by Matthew J Black 28 Sep '22

28 Sep '22

I need a quick piece of advice, please. I'm at setting up the oVirt Engine VM (ie doing a "hosted-engine --deploy") stage. The Host has 3 NICs. NIC_1 and NIC_2 are bonded (bond1) and run 2 VLANs (on bond1.1 and bond1.2). VLAN_1 is to be used as the "everyday connection VLAN for the VMs" (including the oVirt Engine VM - I think). VLAN_2 is *only* to be used for data traffic to-and-from our Ceph Cluster (ie via the Ceph iSCSI Gateway Nodes). NIC_3 (running VLAN_3) is to be used for oVirt-host-to-oVirt-host comms (including "local" Gluster traffic - yes, the (oVirt) hosts are running a couple of Gluster drives). My question is: Which interface should we use for the "ovirtmgmt" Bridge? I suspect it should be NIC_3 (VLAN_3), and I'm 99.999% sure it *shouldn't* be bond1.2 (VLAN_2), but it might be bond1.1 (VLAN_1), so I thought I'd better get peoples' input. You see, I'm not sure what the purpose of the "ovirtmgmt" bridge is. Is it for humans to talk to the oVirt Engine, or is it for the oVirt Engine to talk to the VMs (and hosts), or is it for some other purpose, or is it for some combination of the these? (I have read the doco on the ovirtmgmt bridge, and I'm still somewhat confused.) So, if someone wouldn't mind getting back to me about this, I'd appreciate it. Cheers Dulux-Oz

3 2

Backup/restore of Hosted Engine VM
by Volenbovskyi, Konstantin 27 Sep '22

27 Sep '22

Hi, I am aware that there is a procedure of backup/restore documented in https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.2/ht… , but I would like to have also else as well when it comes to backup (and restore) of hosted engine VM and avoid using hosted-engine --deploy / engine-backup Is anyone doing Libvirt snapshot or any other similar thing to back up ovengine VM? Part of that is the XML of the HE VM should be intact, so currently I am considering https://libvirt.org/kbase/live_full_disk_backup.html#full-backup-with-older… and https://gist.github.com/cabal95/e36c06e716d3328b512 BR, Konstantin

2 1

No online ovirt conference this year?
by Nathanaël Blanchet 27 Sep '22

27 Sep '22

Hello ovirt community, Will there be an upcoming ovirt conference this year? Last year it took place on mi- September. Cheers,

2 1

Manually Remove Snapshots
by Clint Boggio 26 Sep '22

26 Sep '22

I've got a VM with a pair of snapshots that won't delete and I'm needing a procedure to manually remove the snapshots. I don't need the VM and so while i'd prefer not to destroy it, it wouldn't be critical if I did damage the VM in the process. When I try to delete the snapshots that procedure fails, and when I try to delete the disk that procedure fails. Any pointers would be greatly appreciated.

2 6

Hosted-Engine VM wont start after physical CPU change
by douglasddr8＠gmail.com 25 Sep '22

25 Sep '22

I currently have a selfhosted engine with two cascadelake xeon silver 4208 cpu with 8 cores I changed both to two skylake xeon platinum 8160 with 24cores After initialization the vm hosted-engine wont start, I found in the logs that the cpu is not compatible because its not contain the avx512vnni flag Is it possible to work around the problem or these processors cannot be used?

1 0

Certificate expiration
by Joseph Gelinas 23 Sep '22

23 Sep '22

Hi, The certificates on our oVirt stack recently expired, while all the VMs are still up, I can't put the cluster into global maintenance via ovirt-engine, or do anything via ovirt-engine for that matter. Just get event logs about cert validity. VDSM ovirt-1.xxxxx.com command Get Host Capabilities failed: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed VDSM ovirt-2.xxxxx.com command Get Host Capabilities failed: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed VDSM ovirt-3.xxxxx.com command Get Host Capabilities failed: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed Under Compute -> Hosts, all are status Unassigned. Default data center is status Non Responsive. I have tried a couple of solutions to regenerate the certificates without much luck and have copied the originals back in place. https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/ht… https://access.redhat.com/solutions/2409751 I have seen things saying running engine-setup will generate new certs, however engine doesn't think the cluster is in global maintenance so won't run that, I believe I can get around the check with `engine-setup --otopi-environment=OVESETUP_CONFIG/continueSetupOnHEVM=bool:True` but is that the right thing to do? Will it deploy the certs on to the hosts as well so things communicate properly? Looks like one is supposed to put a node into maintenance and reenroll it after doing the engine-setup, but will it even be able to put the nodes into maintenance given I can't do anything with them now? Appreciate any ideas.

3 18