October 2024 - Users - oVirt List Archives

Re: [External] : Lost console access to VMs after updating
by Simon Coter 28 Oct '24

28 Oct '24

Malcom, here the solution to your actual issue: Replace the following file with the attached one: # /etc/httpd/conf.d/olvm45-security-fixes.conf The final fix will be there with release ending with .23. Restart ovirt-engine and httpd services: # systemctl daemon-reload # systemctl restart ovirt-engine # systemctl restart httpd Simon On Oct 14, 2024, at 11:04 PM, Marcos Sungaila via Users <users(a)ovirt.org> wrote: Hi Malcolm, Select the Cluster line at Compute > Cluster and edit it. Then check if in the Console left tab, the Enable VNC Encryption is set. If enabled, you will need to disable it, and using the web UI, put a host into Maintenance mode, then click the Installation button > Reinstall. Marcos -----Original Message----- From: malcolm.strydom(a)pacxa.com <malcolm.strydom(a)pacxa.com> Sent: Monday, October 14, 2024 11:44 AM To: users(a)ovirt.org Subject: [External] : [ovirt-users] Lost console access to VMs after updating We have a couple OLVM instances. Completely separate with their own managers (ovirt-engine). One is lab and one is prod. I updated the lab engine from 4.5.4-1.0.31.el8 to 4.5.5-1.22.el8 and as soon as that was done and it rebooted I no longer can open VM consoles. This was the update process followed: https://docs.oracle.com/en/virtualization/oracle-linux-virtualization-manag… In troubleshooting I checked for the SASL db which appears to be /etc/libvirt/passwd.db # grep sasldb_path /etc/sasl2/libvirt.conf sasldb_path: /etc/libvirt/passwd.db I can verify the vdsm user and realm is in there # sasldblistusers2 -f /etc/libvirt/passwd.db vdsm@ovirt: userPassword We are using noVNC in the browser and when I click on a vm and then console it opens a new window and just has the "connecting" message. I switched to Native VNC client and downloaded the console.vv file which looks normal inside and when I try and open it with vnc viewer or remote-viewer etc. I get a window that connects, authenticates with the password found in the console.vv but then presented with a display that says "Guest has not initialized the display (yet)." Thinking perhaps I need to update the KVM hosts too I proceeded with the update document listed above but even with the hosts updated nothing has changed. If I tail /var/log/messages when opening a console connection all I see is this: Oct 14 10:33:52 olvm2 kernel: sd 6:0:0:1: Warning! Received an indication that the LUN reached a thin provisioning soft threshold. Oct 14 10:34:41 olvm2 saslpasswd2[55701]: error deleting entry from sasldb: BDB0073 DB_NOTFOUND: No matching key/data pair found Oct 14 10:34:41 olvm2 saslpasswd2[55701]: error deleting entry from sasldb: BDB0073 DB_NOTFOUND: No matching key/data pair found Oct 14 10:34:41 olvm2 saslpasswd2[55701]: error deleting entry from sasldb: BDB0073 DB_NOTFOUND: No matching key/data pair found Oct 14 10:34:41 olvm2 saslpasswd2[55701]: error deleting entry from sasldb: BDB0073 DB_NOTFOUND: No matching key/data pair found I checked the production OLVM cluster which has not been updated and has a properly functioning vnc consoles and it produces the exact same errors shown above in the logs when opening a console. So I don't think that error is the cause if the issue although likely something that needs to be fixed. If I check the VM guest log when opening a console I get nothing. tail -f /var/log/libvirt/qemu/<vm_hostname>.log Has anyone else run into this issue when updating? Any ideas on what more I can look at or troubleshoot? Thanks Malcolm _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://urldefense.com/v3/__https://www.ovirt.org/privacy-policy.html__;!!A… oVirt Code of Conduct: https://urldefense.com/v3/__https://www.ovirt.org/community/about/community… List Archives: https://urldefense.com/v3/__https://lists.ovirt.org/archives/list/users@ovi… _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://urldefense.com/v3/__https://www.ovirt.org/privacy-policy.html__;!!A… oVirt Code of Conduct: https://urldefense.com/v3/__https://www.ovirt.org/community/about/community… List Archives: https://urldefense.com/v3/__https://lists.ovirt.org/archives/list/users@ovi…

2 1

Add existing KVM host to oVirt
by gabrielappugliese＠gmail.com 26 Oct '24

26 Oct '24

Hello, I just installed oVirt as a standalone Manager with local databases and i deployed it on a VM thats inside the KVM host i want to add to it. I get its not best practoce but its for a personal lab and i setup ssh to only allow root from the vm where oVirt is installed...anyways i attempted to add the host but its failing with this error ... No package ovirt-hosted-engine-setup available ... to make "ovirt-hosted-engine-setup" available im assuming i have to enable the repositories (Following this guide https://ovirt.org/download/install_on_rhel.html) to make it available but will doing all that allow me to add the kvm host which already has VMs deployed on it able to be managed by ovirt? would this help me achieve what im trying todo? https://ovirt.org/documentation/installing_ovirt_as_a_standalone_manager_wi… Thanks in advance

1 0

Re: [External] : open v-switch woes
by Tim Walsh 25 Oct '24

25 Oct '24

Yes, not only a desire to replicate the functionality of V-Switches on VM-Ware, but also to have an isolated test environment. Create a virtual firewall (using Opensense or pfSense or something) and create VMs behind the firewall that can all talk to each other, but the firewall only passes out the application traffic (for example a web app on Nginx, or Remote Desktop to the private Environment). Microsoft Hyper-V has "private" and "internal" switches that can be set up, (and thats the case on either a standalone or a cluster) so I figured oVirt must have something similar if not the same. these may or may not necessarily be tagged to a VLAN on a physical switch. Thanks, Tim ________________________________ From: Marcos Sungaila <marcos.sungaila(a)oracle.com> Sent: Thursday, October 24, 2024 4:22 PM To: Tim Walsh <mr_tim_walsh(a)hotmail.com>; users(a)ovirt.org <users(a)ovirt.org> Subject: RE: [External] : [ovirt-users] open v-switch woes Hey Tim, Deploying an OVN-enabled cluster is not that trivial. There are many caveats to make it run. Is there any special use case you need to address to use OVS/OVN? Marcos From: Tim Walsh <mr_tim_walsh(a)hotmail.com> Sent: Thursday, October 24, 2024 12:28 AM To: users(a)ovirt.org Subject: [External] : [ovirt-users] open v-switch woes Hey community, I'm trying to get open v-switch set up to work like it does in VMware. I am running Rocky Linux 8.9 and oVirt 4.5.5 (el8) I got the repos but online feedback recommends installing openvswitch, and ovn-northd, ovn-central and ovn-host I got openvswitch installed, but the other three: ovn-northd, ovn-central and ovn-host seemt o be elusive even after adding the CentOS-Advanced-Virtualization.repo and uipdating all "CentOS-" repost to point to "vault" instead of "mirrorlist" Can someo0ne help me with what I'm missing? I've tried Bing CoPilot and ChatGPT LOL but they say add that repo and install those packages. Thanks, Tim

1 0

Re: [External] : I did a fresh install but what is username and password?
by himalaje2022＠gmail.com 25 Oct '24

25 Oct '24

Hello. I did installed "ovirt-node-ng-installer-latest-el9.iso" and that is all. I'm able to login now to Cockpit on port 9090 but only when I manualy set ip adress in form. https://{ip_address}:9090/={ip_address}/system There is no way to login normaly. When I just try https://{ip_address}:9090 then it want to login to Server: some-hostname-ovirt and it doesn't work. I should do reverse engineering to understand why it doesn't work but I don't have time for it at the moment. In my configuration I need to use specific VLAN in network configuration. Maybe that is why there is no way to login. I have never used Keycloak. I'm not new in Linux world but I'm a noob in RHEL world. I would prefer to use Proxmox instead of trying to configure oVirt but it will not work with MegaRaid unless I will reflash the controller. Debian have huge problems with Praid CP400i and my old server still have some potential to be working as VM host. Is there any tutorial what to do in oVirt? Maybe some oVirt for absolute dummies? Is oVirt the kind of system that needs to be carved in marble? I'm not able to do advanced stuff on it now. It will take me a lot of time to get to this point. At the moment I'm interested in creation basic server for VM to see will it work fine but it seams it is not so easy to start with.

1 0

Re: Preparing to issue an oVirt release post Red Hat offboarding
by Nathanaël Blanchet 25 Oct '24

25 Oct '24

Hello what about the implication of team.blue which announced a job advert to continue to develop ovirt? It has been published in July but is not available anymore. It is sad to say that without professional dev such a big project can't really be long-term. Really great project but to complex to be maintained by volunteers on their free time. Le 18 oct. 2024 10:55, Sandro Bonazzola <sbonazzo(a)redhat.com> a écrit : Hi, Oracle fixed CVE-2024-7259 ( https://github.com/oVirt/ovirt-engine/security/advisories/GHSA-8xjm-j7fq-3w… ) in oVirt Engine and would be nice to issue an oVirt Engine release including the fix. As the current master also includes support for new cluster level 4.8, VDSM needs to be released as well providing cluster level 4.8. As you know, Red Hat offboarded the project and as such there are no more people officially assigned to the project from the company, despite a few of the historical developers still spend some of their free time helping out. I can help building the packages and getting them out on my free time but I have no capacity for doing any testing or documentation updates or release notes related to this release. Last oVirt Engine (4.5.6) was also released last February without any formal release announce. Any volunteer to look into differences between current master and current stable release and see if anything else needs to be released other than ovirt-engine and vdsm? Any volunteer to write release notes and update the website accordingly? Any volunteer to run ovirt-system-test on https://github.com/oVirt/ovirt-engine/pull/970 and https://github.com/oVirt/vdsm/pull/422 as OST doesn't run anymore on GitHub? Regards, -- Sandro Bonazzola _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/SEWUGOUXI6D6C… Le 18 oct. 2024 10:55, Sandro Bonazzola <sbonazzo(a)redhat.com> a écrit : Hi, Oracle fixed CVE-2024-7259 ( https://github.com/oVirt/ovirt-engine/security/advisories/GHSA-8xjm-j7fq-3w… ) in oVirt Engine and would be nice to issue an oVirt Engine release including the fix. As the current master also includes support for new cluster level 4.8, VDSM needs to be released as well providing cluster level 4.8. As you know, Red Hat offboarded the project and as such there are no more people officially assigned to the project from the company, despite a few of the historical developers still spend some of their free time helping out. I can help building the packages and getting them out on my free time but I have no capacity for doing any testing or documentation updates or release notes related to this release. Last oVirt Engine (4.5.6) was also released last February without any formal release announce. Any volunteer to look into differences between current master and current stable release and see if anything else needs to be released other than ovirt-engine and vdsm? Any volunteer to write release notes and update the website accordingly? Any volunteer to run ovirt-system-test on https://github.com/oVirt/ovirt-engine/pull/970 and https://github.com/oVirt/vdsm/pull/422 as OST doesn't run anymore on GitHub? Regards, -- Sandro Bonazzola _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/SEWUGOUXI6D6C…

2 1

Re: [External] : open v-switch woes
by Marcos Sungaila 24 Oct '24

24 Oct '24

Hey Tim, Deploying an OVN-enabled cluster is not that trivial. There are many caveats to make it run. Is there any special use case you need to address to use OVS/OVN? Marcos From: Tim Walsh <mr_tim_walsh(a)hotmail.com> Sent: Thursday, October 24, 2024 12:28 AM To: users(a)ovirt.org Subject: [External] : [ovirt-users] open v-switch woes Hey community, I'm trying to get open v-switch set up to work like it does in VMware. I am running Rocky Linux 8.9 and oVirt 4.5.5 (el8) I got the repos but online feedback recommends installing openvswitch, and ovn-northd, ovn-central and ovn-host I got openvswitch installed, but the other three: ovn-northd, ovn-central and ovn-host seemt o be elusive even after adding the CentOS-Advanced-Virtualization.repo and uipdating all "CentOS-" repost to point to "vault" instead of "mirrorlist" Can someo0ne help me with what I'm missing? I've tried Bing CoPilot and ChatGPT LOL but they say add that repo and install those packages. Thanks, Tim

1 0

Importing Storage Domain's Export from one Data Center to Another
by calebmibaker＠outlook.com 24 Oct '24

24 Oct '24

Is it possible to perform disaster recovery importing a Storage Domain's Export from one Data Center to another in a manually fashion without Ansible? I'm trying to import Data Center 1's Storage Domain Export by cloning the storage domain export and importing it into Data Center 2's environment through IP address & NFS name within the oVirt's web portal. However, I receive this error message: there is no storage domain under the specified path. Below is what I have done to tried to troubleshoot the issue. After looking into the documentation, I haven't seen information for this method. Should I consider another option? Is there a preferred way of testing DR within an environment? -I have detach both of the export storage domains from both data centers before importing the cloned export. -Changing import settings -I have adjusted the metadata information within the cloned export after mounting it and reviewing the logs.

2 1

Migration of oVirt Engine and Hosts from CentOS 8 to CentOS 9
by narutospinal＠gmail.com 24 Oct '24

24 Oct '24

Dear, I would like help with the following question: I need to migrate my oVirt Engine and oVirt Hosts from CentOS 8 to CentOS 9. My plan is to back up the database using the engine-backup command. For example: engine-backup --mode=backup --file=db_backup My next step will be to install the oVirt Engine on CentOS 9 and restore the backup. For example: engine-backup --mode=restore --file=db_backup --log=backup_restore.log --change-db-credentials --db-host=didi-lap --db-user=engine --db-password=your_password --db-name=engine Finally, I will add a new oVirt Host with CentOS 9 and migrate the virtual machines. Are there any considerations I should be aware of? Could you please guide me?

2 1

I did a fresh install but what is username and password?
by himalaje2022＠gmail.com 24 Oct '24

24 Oct '24

Hello. Why there is no info on oVirt website about installation process and how to login? Ideas like: ovirt-aaa-jdbc-tool user password-reset admin --password-valid-to="2035-12-31 12:00:00Z" are not helpfull because ovirt-aaa-jdbc-tool: command not found Is there a way to use this system? I have no idea why Linus Torvalds don't like Debian... it is a loot simpler than the other systems.

2 1

Re: Latest 4.5.5 centos node install username password not working.
by himalaje2022＠gmail.com 24 Oct '24

24 Oct '24

# ovirt-aaa-jdbc-tool -bash: ovirt-aaa-jdbc-tool: command not found I did manage to login to Cockpit using IP address: https://{ip}:9090/={ip}/system/services It had problems with hostname. I'm not sure why. It may be related with hardware firewall configuration and multiple vlans I use. Cockpit works with root and password but only if ip address is given. I did also try using login with @ sight and it didn't help. Command ovirt-aaa-jdbc-tool doesn't work. I also can't install nano, "ovirt-aaa-jdbc-tool", and mc. But internet connection is working and I can resolve DNS addresses. Maybe RHEL type of Linux is not so bad but I'm not familiar with it.

1 0