February 2024 - Users - oVirt List Archives

Using External CA
by Brent Saner 27 Feb '24

27 Feb '24

Hello all- I am looking for a methodology to force oVirt to use certs/keys managed and deployed externally. These are automated by our various automation systems and are configured to match our security policies. Rogue and/or non-transparent and/or standalone CAs in our org do not comply with our security policy. If I pre-deploy certificates and keys, does oVirt engine still need to be a CA? Similarly, our encryption policy requires use of RSA 4096 or ED25519 for SSH. This, as I understand it, is also not compatible with the RSA 2048 generated/used by the engine's internal CA. Is SSHing to this new host using this key necessary, or can I externally enroll a new host into a cluster or - if not - use different SSH key via the engine (likely derived from the above/below-mentioned certs, which may be RSA 4096)? Essentially, could I: 1. Pre-provision certificates and keys in /etc/pki/ovirt-*/ with the appropriate filenames<https://www.ovirt.org/develop/release-management/features/infra/pki.html#fi…> 2. Run engine-setup for the first time (using an answers file)? Will engine-setup balk at the existence of those files, silently overwrite them, or use them? Thanks in advance. Brent Saner SENIOR SYSTEMS ENGINEER Follow us on LinkedIn! brent.saner(a)netfire.com 855-696-3834 Ext. 110 www.netfire.com

1 0

VM disk went un-allocated after storage migration
by rootpentester20＠gmail.com 25 Feb '24

25 Feb '24

Hi Team, I am using Ovirt 4.4, I added new storage LUN and did a storage migration of one VM disk which had 400GB of data. AFter migration, the disk became un-allocated in windows and now it's asking to re-initialize, I am afraid that data has been lost. Is there a way we can recover it back? Thanks

1 0

oVirt Node 4.5.5 web login
by Aditya Prasad 23 Feb '24

23 Feb '24

Hi I am new to oVirt so apologies for ignorance. I have installed oVirt Node 4.5.5 and how to login to Web-Interface (https://<IP>:9090) what is the default user and password.

3 2

actual size greater than virtual size ovirt 4.4
by rootpentester20＠gmail.com 23 Feb '24

23 Feb '24

many VMs in my Ovirt 4.4 infra show actual sizes greater than the virtual size of disks plus used space from inside of the VM is much less than actual size. Thanks

1 0

4.5.5. install ovirt engine stops error node-ansible-async_wrapper.py [16052] still running 55070.
by antonio.riggio＠mail.com 22 Feb '24

22 Feb '24

I noticed when doing the install of the engine it cant be done in the cockpit i dont see the tab in the frame so I did the install command line no problem with that. During the install of the engine it disconnects and in the messages it just continues with node-ansible-async_wrapper.py [16052] still running 55070. Any idea what this means ? How can I get this to install. I have done 4.3 installs in past with no problems.

1 1

importing local storage domain problem
by Gianluca Cecchi 21 Feb '24

21 Feb '24

Hello, I had a lab environment in 4.4.10, composed of only one host and local storage DC and with an external engine. I had 3 disks on this system, with OS in the first one and local storage domains in the second and third one. I detached the storage domains (I forgot to remove them afterwards) from the original env Afterwards I created a completely new engine on 4.5 (not using any backup) and then I reutilized the host installing the OS in the first disk overwriting the previous env. I have mounted the filesystems for the storage domains on the second and third disk as before, but I see that if I try to execute "import storage domain", the local type is not there. And if I select "new storage domain" I receive the error operation canceled Error while executing action New Local Storage Domain: Error in creating a Storage Domain. The selected storage path is not empty (probably contains another Storage Domain). Either remove the existing Storage Domain from this path, or change the Storage path). Is there any file I can delete from the directory tree that reproduces the "removal" action I forgot? Or any workarounds? Thanks in advance, Gianluca

1 1

what does miss to el9 to support engine 4.5?
by Nathanaël Blanchet 21 Feb '24

21 Feb '24

Hello, According to official doc, only el8 is supported for engine. So, has anyone experienced a successfull el9 installation and if not what is the challenge for finalizing it? -- Nathanaël Blanchet Administrateur Systèmes et Réseaux Service Informatique et REseau (SIRE) Département des systèmes d'information 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

3 2

The oVirt Counter
by Sandro Bonazzola 21 Feb '24

21 Feb '24

Hi, for those who remember the Linux Counter project, if you'd like other to know you're using oVirt and know some details about your deployment, here's a way to count you in: https://ovirt.org/community/ovirt-counter.html Enjoy! -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D PERFORMANCE & SCALE Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*

1 1

CVE-2024-1597
by Fabrice Bacchella 21 Feb '24

21 Feb '24

Does oVirt is exposed to CVE-2024-1597 ? To be exposed, the jdbc driver needs to be used with PreferQueryMode=SIMPLE. Is that the situation ?

3 3

NMState verification error when setting up a bonding interface
by Maximilian Grüttemeier 20 Feb '24

20 Feb '24

Hello fellow oVirt Users. I am trying to setup a bond interface on my host, but for whatever reason I am unable to do so trough the host network configuration. Actually I do know the issue, and it’s a bit bizarre as I don’t know what causes it. If you take a look at the following snippet of my supervdsm.log file, you will see that the NMstate verification fails due to a difference between the current config and the desired config. The thing is I have not made any of the additional configuration options. I literally installed the OS, installed the oVirt host and tried to setup a network bond. Has anyone experienced this? Does anyone know how to fix this? ``` Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/vdsm/supervdsm_server.py", line 80, in wrapper res = func(*args, **kwargs) File "/usr/lib/python3.6/site-packages/vdsm/network/api.py", line 193, in setupNetworks _setup_networks(networks, bondings, options) File "/usr/lib/python3.6/site-packages/vdsm/network/api.py", line 217, in _setup_networks netswitch.configurator.setup(networks, bondings, options, in_rollback) File "/usr/lib/python3.6/site-packages/vdsm/network/netswitch/configurator.py", line 53, in setup _setup_nmstate(networks, bondings, options, in_rollback) File "/usr/lib/python3.6/site-packages/vdsm/network/netswitch/configurator.py", line 76, in _setup_nmstate nmstate.setup(desired_state, verify_change=not in_rollback) File "/usr/lib/python3.6/site-packages/vdsm/network/nmstate/api.py", line 29, in setup state_apply(desired_state, verify_change=verify_change) File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 140, in apply plugins, net_state, verify_change, save_to_disk, verify_retry File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 190, in _apply_ifaces_state _verify_change(plugins, net_state) File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 197, in _verify_change net_state.verify(current_state) File "/usr/lib/python3.6/site-packages/libnmstate/net_state.py", line 119, in verify self._ifaces.verify(current_state.get(Interface.KEY)) File "/usr/lib/python3.6/site-packages/libnmstate/ifaces/ifaces.py", line 805, in verify cur_iface.state_for_verify(), libnmstate.error.NmstateVerificationError: desired ======= --- name: ovirtmgmt type: linux-bridge state: up bridge: options: stp: enabled: false port: - name: bond0 vlan: {} ipv4: enabled: true address: - ip: 10.10.120.1 prefix-length: 16 dhcp: false ipv6: enabled: false mtu: 1500 current ======= --- name: ovirtmgmt type: linux-bridge state: up accept-all-mac-addresses: false bridge: options: group-addr: 01:80:C2:00:00:00 group-forward-mask: 0 hash-max: 4096 mac-ageing-time: 300 multicast-last-member-count: 2 multicast-last-member-interval: 100 multicast-querier: false multicast-querier-interval: 25500 multicast-query-interval: 12500 multicast-query-response-interval: 1000 multicast-query-use-ifaddr: false multicast-router: 1 multicast-snooping: true multicast-startup-query-count: 2 multicast-startup-query-interval: 3125 stp: enabled: false forward-delay: 15 hello-time: 2 max-age: 20 priority: 32768 port: [] ethtool: feature: highdma: true rx-gro: true tx-generic-segmentation: true tx-tcp-segmentation: true tx-vlan-hw-insert: true ipv4: enabled: true address: - ip: 10.10.120.1 prefix-length: 16 dhcp: false ipv6: enabled: false lldp: enabled: false mac-address: AC:16:2D:BD:03:D0 mtu: 1500 wait-ip: any difference ========== --- desired +++ current @@ -2,13 +2,38 @@ name: ovirtmgmt type: linux-bridge state: up +accept-all-mac-addresses: false bridge: options: + group-addr: 01:80:C2:00:00:00 + group-forward-mask: 0 + hash-max: 4096 + mac-ageing-time: 300 + multicast-last-member-count: 2 + multicast-last-member-interval: 100 + multicast-querier: false + multicast-querier-interval: 25500 + multicast-query-interval: 12500 + multicast-query-response-interval: 1000 + multicast-query-use-ifaddr: false + multicast-router: 1 + multicast-snooping: true + multicast-startup-query-count: 2 + multicast-startup-query-interval: 3125 stp: enabled: false - port: - - name: bond0 - vlan: {} + forward-delay: 15 + hello-time: 2 + max-age: 20 + priority: 32768 + port: [] +ethtool: + feature: + highdma: true + rx-gro: true + tx-generic-segmentation: true + tx-tcp-segmentation: true + tx-vlan-hw-insert: true ipv4: enabled: true address: @@ -17,4 +42,8 @@ dhcp: false ipv6: enabled: false +lldp: + enabled: false +mac-address: AC:16:2D:BD:03:D0 mtu: 1500 +wait-ip: any ```

1 1