May 2025 - Users - oVirt List Archives

Veeam - Move data over other network than ovirtmgmt
by domien.vanrompaey＠dynamate.be 18 Jun '25

18 Jun '25

Hi all I was wondering if anyone managed to get Veeam working with a dedicated backup VLAN instead of sending traffic over the ovirtmgmt interface. We have an OLVM setup (version 4.5.5-1.42.el8) with 3 hosts in 1 cluster for now. Each host has a 1Gbps NIC pair in a seperate management LAN that is only used for ovirtmgmt Each host also has a 10Gbps NIC Bond where all the VLAN's are trunked including a dedicated Backup VLAN. The hosts do not have an IP in this Backup VLAN configured (is this needed?) Each host also has 2 NICs dedicated to storage backend (iSCSI Multipathing) Our Veeam Appliance and workers are setup in the Backup VLAN and they can communicate with the backup repository that is also in this VLAN. When we take a backup, however, we see that the ovirtmgmt network is maxed out on trafic, which probably shouldn't happen. We come from a VMWare environment where the backup proxies handle all the trafic through the backup VLAN without relying on the management network and I was expecting it to work similarly Has anyone managed to get this working as I envision it? Or is the solution to simply link ovirtmgmt to the 10Gbps bond and skip the dedicated mgmt networking? I've also opened a ticket with Veeam for this, but for now I'm just getting questions from them and no real answers. If I get a useful solution from them I will also post it here

4 3

Please let me know how to resolve the below error!
by d_hashima＠sagaidc.co.jp 12 Jun '25

12 Jun '25

Error Content [ ERROR ] fatal: [localhost -> 192.168.1.252]: FAILED! => {"changed": false, "msg": "Failed to download metadata for repo 'centos-ceph-pacific': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=storage-cep… [Could not resolve host: mirrorlist.centos.org]", "rc": 1, "results": []} environment CentOS Stream release ovirt-node-ng-installer-4.5.5-2023113015.el9.iso I am building it with ovirt-node-ng-installer-4.5.5-2023113015.el9.iso and plan to install oVirt Engine there. I am building it on a virtual server.

5 10

ovirt-hosted-engine deploy hangs
by bleuze＠enkon.com 02 Jun '25

02 Jun '25

This is on a brand new Oracle Linux ver8.10 install on a physical server. I have completed all the perquisite steps in the instructions at https://docs.oracle.com/en/virtualization/oracle-linux-virtualization-manag… I run the deployment script: hosted-engine --deploy --4 Answer all the questions and let it run. It runs for about an hour and then hangs at the step: [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Create temporary lock file] [ INFO ] changed: [localhost -> localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Pause execution until /tmp/ansible.yo6aij1p_he_setup_lock is removed, delete it once ready to proceed] The first time I let it run all night and it was still hung in the morning. I have tried this using the cli command above. I have also tried it using the cockput gui method, both procedures hang at the same place. I have to run /usr/sbin/ovirt-hosted-engine-cleanup after each failure before trying again I can't find any clues in the logs but perhaps someone can tell me what to look for. I am happy to post the logs here as well. I assume this is at the point where the temporary Self Hosted engine has been created and is ready to be migrated to the shared storage. The lock placed there until it is successfully moved. But the instructions say that I should be prompted for the "storage you would like to use" I don't get that promtp. It is hung somewhere before it gets to that stage. What I do know is that the temporary Self hosted engines is created because I can ssh into and login as root Next I will try again but this time use the --ansible-extra-vars option to fill in all the variables at the beginning. I don't know what else to try

1 1

Unable to access the Console via web browser.
by natchawi28＠gmail.com 26 May '25

26 May '25

I'm currently experiencing a usage issue. I'm unable to access the Console via web browser. A banner appears at the top stating: 'Something went wrong, connection is closed.' Upon further investigation, I found that the ovirt-websocket-proxy service shows the following message: handler exception: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:897) OS Version: Oracle 8.10 Ovirt engine: 4.4

2 1

Potential CentosStream 9 resilientstorage repo issues
by lmd＠gto.net 26 May '25

26 May '25

Good Morning! I wanted to report that I think there are issues with CentOS Stream 9 ResilientStorage repos (added by package "ovirt-release-ovirt45" and also enabled in the hosted-engine appliance) that causes anything related to DNF and this repo to fail as captured below. Digging in, it looks like centos.org is advertising a metalink.xml (at least for my Toronto, Ontario location) that is timetamped 1747062205 (Monday, May 12, 2025 3:03:25 PM GMT). Mirrors are not in good shape: * centos.org themselves are advertising a repomd.xml for ResilientStorage with timestamp 1747752818 (Tuesday, May 20, 2025 2:53:38 PM) * ca.mirrors.cicku.me are advertising an identical repomd.xml of centos.org * mirror.cpsc.ucalgary.ca is advertisting a 0-byte repomd.xml * mirrors.lug.mtu.edu is advertising an old repomd.xml of timestamp 1744645925 (Monday, April 14, 2025 3:52:05 PM) The SHA512 sum of all published repomd.xml files does not match metalink, therefore all mirrors fail. I haven't tried to exclude the repo from the HE but I wanted to post a note here in case someone else is running into this. I anticipate that Centos.org will fix this at some point, but based on dates it could be that this has been broken for ~3 days already (2025-May-20 2:53PM GMT). I am not sure where to post to raise awareness with CentOS.org or the group responsible for the ResilientStorage repo. If someone knows please let me know - or if someone on the oVirt team could notify a contact, I would be obliged if you could let them know. Thank you kindly, Dan > Errors during downloading metadata for repository 'resilientstorage': - Downloading successful, but checksum doesn't match. Calculated: 87c76b87fe36bfa60fcd8edbc52934559d8af59850efa3f0c04904e0a757d35d9d9bc0edb6114126971709afa4670d77d2de501c949a4f5e5b6144409f7efa77(sha512) Expected: 17ef9ff2c8fc04667ed55a33dc02476a59e236e7da7f19d86c586e2fbab75fa1bd7b1e68d1a1ad4657e84c2791f5f0bf78f30be53db8b5eb7fc83227c819185f(sha512) - Downloading successful, but checksum doesn't match. Calculated: 45c8d2dfc4fe245817d3f5ce5be99505a841b1d328ef14c12ba3b789277bf271a2e36cb981ce66cd0c30f652670504f40907dc05aa8bc9858d506b1989093846(sha512) Expected: 17ef9ff2c8fc04667ed55a33dc02476a59e236e7da7f19d86c586e2fbab75fa1bd7b1e68d1a1ad4657e84c2791f5f0bf78f30be53db8b5eb7fc83227c819185f(sha512) Error: Failed to download metadata for repo 'resilientstorage': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried [devops@l51amew9]$

2 4

Cannot create a data nfs domain.
by mobiyef772＠daxiake.com 26 May '25

26 May '25

I cannot create a data nfs domain, but I can create a iso nfs domain. When I check my nfs share on hosts: >> python3 nfs-check.py 192.168.80.10:/var/nfs/data/ovirt-images >> Current hostname: ovirt-n1.lab.io - IP addr 10.0.65.20 >> Trying to /bin/mount -t nfs 192.168.80.10:/var/nfs/data/ovirt-images... >> Executing NFS tests.. >> Removing vdsmTest file.. >> Status of tests [OK] >> Disconnecting from NFS Server.. >> Done! In web I get: Error while executing action New NFS Storage Domain: Unexpected exception, but ovirt-engine created: ovirt-images: |-130c14d7-3d83-410e-a862-2232f5327eea |---dom_md |---images in log: >>> engine.log:2025-05-26 11:46:45,515+03 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.DisconnectStorageServerVDSCommand] (default task-14) [52d4985c-0ed1-4b7f-aa67-d2d72c1847fb] START, >>> DisconnectStorageServerVDSCommand(HostName = ovirt-n1.lab.io, StorageServerConnectionManagementVDSParameters:{hostId='da7c47b1-0e7d-42be-b3da-19ea6e513e5f', storagePoolId='00000000-0000-0000-0000-000000000000', storageType='NFS', connectionList='[StorageServerConnections:{id='70506050-af3e-4061-aca2-c80d7bcb1893', connection='192.168.80.10:/var/nfs/data/ovirt-images', iqn='null', vfsType='null', mountOptions='null', nfsVersion='AUTO', nfsRetrans='null', nfsTimeo='null', iface='null', netIfaceName='null'}]', sendNetworkEventOnFailure='true'}), log id: 6d537e69 >>> engine.log:2025-05-26 11:46:47,813+03 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.DisconnectStorageServerVDSCommand] (default task-14) [52d4985c-0ed1-4b7f-aa67-d2d72c184L7fb] FINISH, DisconnectStorageServerVDSCommand, return: {70506050-af3e-4061-aca2-c80d7bcb1893=0}, log id: 6d537e69 Why?

1 0

ovirt-engine-deploy error
by hiroki.tamai.fu＠nttdocomo.com 19 May '25

19 May '25

Hi, everyone. This is my first time using ovirt and I encountered this error in ovirt-engine-deploy. ERROR LOG =========================================================================== [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Create ISO disk] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Fix local VM directory permission] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Create local VM] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": true, "cmd": ["virt-install", "-n", "HostedEngineLocal", "--os-variant", "rhel8.0", "--virt-type", "kvm", "--memory", "16384", "--vcpus", "4", "--network", "network=default,mac=00:16:3e:7e:2b:e0,model=virtio", "--disk", "/var/tmp/localvm4swegum3/images/799d4506-f930-41ba-9c0d-1fe7af6af1bc/5d3a11a5-88c9-45d6-a3a6-e4819ce36702", "--import", "--disk", "path=/var/tmp/localvm4swegum3/seed.iso,device=cdrom", "--autoconsole", "text", "--rng", "/dev/random", "--graphics", "none", "--sound", "none", "--controller", "usb,model=none", "--memballoon", "none", "--boot", "hd,bootmenu.enable=on,bios.useserial=on", "--clock", "kvmclock_present=yes", "--serial=pty,log.file=/var/log/libvirt/qemu/HostedEngineLocal-console.log"], "delta": "0:00:01.611656", "end": "2024-12-04 08:55:40.844092", "msg": "non-zero return code", "rc": 1, "start": "2024-12-04 08:55:39.232436", "stderr": "ERROR Failed to connect socket to '/var/run/libvirt/virtnetworkd-soc k': No such file or directory\nDomain installation does not appear to have been successful.\nIf it was, you can restart your domain by running:\n virsh --connect qemu:///system start HostedEngineLocal\notherwise, please restart your installation.", "stderr_lines": ["ERROR Failed to connect socket to '/var/run/libvirt/virtnetworkd-sock': No such file or directory", "Domain installation does not appear to have been successful.", "If it was, you can restart your domain by running:", " virsh --connect qemu:///system start HostedEngineLocal", "otherwise, please restart your installation."], "stdout": "\nStarting install...", "stdout_lines": ["", "Starting install..."]} [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : include_tasks] =========================================================================== I restored the virtnetworkd-sock file with reference to this ticket, but the deployment still fails with the same error. https://github.com/crc-org/crc/issues/2839 If anyone has encountered a similar issue, could you please let me know how you resolved it? Deploying with the Self-Hosted Engine and using ovirt4.5 el9. Thank you.

2 1

Re: [External] : Re: hosted-engine --deploy fails with "The task includes an option with an undefined variable. The error was: 'local_vm_ip' is undefined"
by Marcos Sungaila 16 May '25

16 May '25

Hi Glenn, The playbooks are not compatible with newer ansible versions, try downgrading the ansible/ansible-core package in use. Or you can go deeper and review the playbooks to make it compatible with the ansible version in use. Marcos From: Glenn Paden <glpaden(a)hotmail.com> Sent: Tuesday, April 8, 2025 7:49 PM To: users(a)ovirt.org Subject: [External] : [ovirt-users] Re: hosted-engine --deploy fails with "The task includes an option with an undefined variable. The error was: 'local_vm_ip' is undefined" I have has this happen a number of times with ovirt versions. I have yet to find a solution. Did you?

1 0

Re: [External] : Is it possible to add CPU Profiles?
by Simon Coter 15 May '25

15 May '25

Hi Domien, you can just proceed on your installation even if the CPU is getting recognized as AMD EPYC-MILAN. We’re working on an update that will introduce the support for latest Intel and AMD CPUs; once released you will have the option to switch it. Simon On May 14, 2025, at 8:45 AM, Domien Van Rompaey via Users <users(a)ovirt.org> wrote: Hi there We are starting up a cluster with AMD Genoa CPU’s (AMD EPYC 9454) on Oracle Linux (oVirt 4.5.5-1.42.el8). For now the only (recent) CPU profile that works is AMD EPYC-MILAN. We have the libvirt/cpu_map XML file and know to place it in the /usr/share/libvirt/cpu_map folder on the hosts, but I’m not sure how oVirt will react to this. Does anyone have any experience with this? Met vriendelijke groeten, Domien Van Rompaey Security Engineer Cloud & ICT‑infrastructure | Security Tel +32 51 76 00 00 [https://website-api.dynamate.be/public/E-mailhandtekening/DYNAMATE-handteke…]<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> www.dynamate.be<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> [https://website-api.dynamate.be/public/E-mailhandtekening/instagram-60-150.…]<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> [https://website-api.dynamate.be/public/E-mailhandtekening/facebook-60-150.p…]<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> [https://website-api.dynamate.be/public/E-mailhandtekening/linkedin-60-150-2…]<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> _______________________________________________ Users mailing list -- users(a)ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://urldefense.com/v3/__https://www.ovirt.org/privacy-policy.html__;!!A… oVirt Code of Conduct: https://urldefense.com/v3/__https://www.ovirt.org/community/about/community… List Archives: https://urldefense.com/v3/__https://lists.ovirt.org/archives/list/users@ovi…

2 1

Re: Is it possible to add CPU Profiles?
by Jean-Louis Dupond 15 May '25

15 May '25

Hi Domien, Good to see some Belgian's here ;) Afaik Oracle added CPU types (like the AMD Genoa) based on our patch upstream: https://github.com/oVirt/ovirt-engine/pull/978/files So you should be able to select AMD Genoa as CPU type within oVirt. What error you have when choosing that CPU type? Or you can't choose it or ? Jean-Louis On 5/14/25 08:45, Domien Van Rompaey via Users wrote: > > Hi there > > We are starting up a cluster with AMD Genoa CPU’s (AMD EPYC 9454) on > Oracle Linux (oVirt 4.5.5-1.42.el8). > For now the only (recent) CPU profile that works is AMD EPYC-MILAN. > > We have the libvirt/cpu_map XML file and know to place it in the > /usr/share/libvirt/cpu_map folder on the hosts, but I’m not sure how > oVirt will react to this. > > Does anyone have any experience with this? > > Met vriendelijke groeten, > > *Domien Van Rompaey*** > > Security Engineer > > Cloud & ICT‑infrastructure | Security > > Tel +32 51 76 00 00 > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.christiaens.net%2F&…> > > www.dynamate.be > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.dynamate.be%2F&tena…> > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.instagram.com%2Fwea…> > > > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.facebook.com%2Fwear…> > > > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.linkedin.com%2Fcomp…> > > > _______________________________________________ > Users mailing list --users(a)ovirt.org > To unsubscribe send an email tousers-leave(a)ovirt.org > Privacy Statement:https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ > List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/EV5S…

2 1

Is it safe to install bitdefender on ovirt and nodes ?
by Cyril VINH-TUNG 14 May '25

14 May '25

Hello everyone Has anybody already installed bitdefender or some EDR agent onto ovirt and nodes ? What would you recommand ? Pros and cons Thanks in advance Best regards -------------------------------- Cyril VINH-TUNG INVITU Computer & Network Engineering BP 32 - 98713 Papeete - French Polynesia Tél: +689 40 46 11 99 contact(a)invitu.com

2 1

Is it possible to add CPU Profiles?
by Domien Van Rompaey 14 May '25

14 May '25

Hi there We are starting up a cluster with AMD Genoa CPU’s (AMD EPYC 9454) on Oracle Linux (oVirt 4.5.5-1.42.el8). For now the only (recent) CPU profile that works is AMD EPYC-MILAN. We have the libvirt/cpu_map XML file and know to place it in the /usr/share/libvirt/cpu_map folder on the hosts, but I’m not sure how oVirt will react to this. Does anyone have any experience with this? Met vriendelijke groeten, Domien Van Rompaey Security Engineer Cloud & ICT‑infrastructure | Security Tel +32 51 76 00 00 [https://website-api.dynamate.be/public/E-mailhandtekening/DYNAMATE-handteke…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.christiaens.net%2F&…> www.dynamate.be<https://eu.content.exclaimer.net?url=https%3A%2F%2Fwww.dynamate.be%2F&tenan…> [https://website-api.dynamate.be/public/E-mailhandtekening/instagram-60-150.…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.instagram.com%2Fwea…> [https://website-api.dynamate.be/public/E-mailhandtekening/facebook-60-150.p…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.facebook.com%2Fwear…> [https://website-api.dynamate.be/public/E-mailhandtekening/linkedin-60-150-2…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.linkedin.com%2Fcomp…>

1 0

Re: [External] : build ovirt in docker container
by Jorge Visentini 13 May '25

13 May '25

So... I don't know where this link comes from and if it is being used for any functionality or purpose. https://quay.io/organization/ovirt Regarding orchestration, I think it is too early to decide. It could even be ansible with docker or podman... similar to kolla-ansible for osp. Anyway, these are just my ramblings. Em sex., 9 de mai. de 2025 às 01:58, Marcos Sungaila via Users < users(a)ovirt.org> escreveu: > Hi Jorge, > > > > This is a great initiative and I believe it is worth enough for the > challenge you have ahead. > > > > A solid first step in this process is to work with small, dedicated > containers, each tailored to a specific application or service. This > approach ensures modularity, reduces complexity, and facilitates > troubleshooting when needed. > > > > Once you have the basic containerization structure, the next step involves > modularizing the application by breaking down the engine monolithic > application into multiple independent containers. This will offer enhanced > scalability, flexibility, and efficiency in managing updates and > deployments. > > > > For such a project, using a container orchestration platform such as > Kubernetes is recommended. Helm, a package manager for Kubernetes, can > streamline deployment by managing configurations and automating complex > processes. Using Helm to run an Engine server ensures smoother deployment > and operational consistency. > > > > Do you already have a path in mind? > > > > Marcos > > > > *From:* Jorge Visentini <jorgevisentini(a)gmail.com> > *Sent:* Wednesday, May 7, 2025 5:26 PM > *To:* users <users(a)ovirt.org> > *Subject:* [External] : [ovirt-users] build ovirt in docker container > > > > hey... > > > > Is it crazy of me to try to compile everything in a single (big) > container, or at least divide the closest services into containers? > > Is there any initiative in this direction? > I swear, I didn't smoke anything to have this idea 🙏🤣 > > > > I ask this because I'm in the initial process of creating a build in rocky > linux 9. > By the way, if anyone has basic documentation for this porting from centos > 9 stream to rl9, it would be very welcome. > Here we use Mellanox 3 and 4, and Emulex, so I need to standardize the > kernel to compile the drivers lol > > > > many thanks > > -- > > Att, > > Jorge Visentini > +55 55 98432-9868 > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/HGYNNFC5XPBED… > -- Att, Jorge Visentini +55 55 98432-9868

2 1

Barebone Hosted Engine Deployment fails
by kevin＠kllmnn.de 12 May '25

12 May '25

Hey people, I hope someone can help me identify if there's something I'm doing wrong or if there's a bug. Originally I wanted to re-deploy my self-hosted engine, as it is still on version 4.5.5 with CentOS 8, and therefore can't be updated anymore. To get a fresh backup of the currently running config I did the following: 1. On physical host `hosted-engine --set-maintenance --mode=global` 2. On engine VM `systemctl stop ovirt-engine` and then 3. `engine-backup --scope=all --mode=backup --file=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.bck --log=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.log` (where `/mnt/ovirt-engine-backup/` is a NFS share) 4. On physical host `hosted-engine --vm-shutdown` Then I set up a new physical host with CentOS 9 Stream (Build 20250320), enabled and installed the oVirt repository as mentioned at https://www.ovirt.org/download/install_on_rhel.html, then ran: `hosted-engine --deploy --4 --restore-from-file=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.bck` (of course mounting the NFS share prior to this). But after giving it all the information it needed it fails after 15-20 minutes with several errors in the logfile, which I cannot identify the primary/root cause of. The first error that appears is this one: ``` 2025-03-25 11:19:35,427+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Include after engine-setup custom tasks files for the engine VM] 2025-03-25 11:19:36,730+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Wait for the engine to reach a stable condition] 2025-03-25 11:19:37,431+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 skipping: [localhost] 2025-03-25 11:19:38,133+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Configure LibgfApi support] 2025-03-25 11:19:38,835+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 skipping: [localhost] 2025-03-25 11:19:39,536+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Save original OvfUpdateIntervalInMinutes] 2025-03-25 11:19:42,041+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 changed: [localhost -> 192.168.222.170] 2025-03-25 11:19:42,742+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Set OVF update interval to 1 minute] 2025-03-25 11:19:45,147+0100 DEBUG otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:109 {'changed': True, 'stdout': 'Index 1 out of bounds for length 1', 'stderr': 'Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false', 'rc': 1, 'cmd': ['engine-config', '-s', 'OvfUpdateIntervalInMinutes=1'], 'start': '2025-03-25 11:19:43.872322', 'end': '2025-03-25 11:19:44.941216', 'delta': '0:00:01.068894', 'msg': 'non-zero return code', 'invocation': {'module_args': {'_raw_params': 'engine-config -s OvfUpdateIntervalInMinutes=1', '_uses_shell': False, 'stdin_add_newline': True, 'strip_empty_ends': True, 'argv': None, 'chdir': None, 'executable': None, 'creates': None, 'removes': None, 'stdin': None}}, 'stdout_lines': ['Index 1 out of bounds for length 1'], 'stderr_lines': ['Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false'], '_ansible_no_log': False, '_ansible_delegated_vars': {'ansible_host': '192.168.222.170', 'ansible_port': None, 'ansible_user': 'root', 'ansible_ connection': 'smart'}} 2025-03-25 11:19:45,248+0100 ERROR otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:113 fatal: [localhost -> 192.168.222.170]: FAILED! => {"changed": true, "cmd": ["engine-config", "-s", "OvfUpdateIntervalInMinutes=1"], "delta": "0:00:01.068894", "end": "2025-03-25 11:19:44.941216", "msg": "non-zero return code", "rc": 1, "start": "2025-03-25 11:19:43.872322", "stderr": "Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false", "stderr_lines": ["Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false"], "stdout": "Index 1 out of bounds for length 1", "stdout_lines": ["Index 1 out of bounds for length 1"]} ``` The full log is available here: https://filebin.net/dimi5g2o6q20t4aj I also tried with a completely clean deployment, without restoring from backup (once without and once with using `ovirt-hosted-engine-cleanup` in between). The errors in the log are completely the same. Also I tried to use the oVirt Node master experimental ISO (`ovirt-node-ng-installer-4.5.6-2025031111.c9s.iso`), same issue. Does the problem lie somewhere in my answers for the questions asked by the tool? I cannot identify giving any wrong info. Can someone maybe reproduce the issue?

3 5

Standalone Engine restore to Rocky Linux 9
by KSNull Zero 12 May '25

12 May '25

Hello! There are a lot of errors regarding legacy cipher while restoring engine backup to RL9 during our migration to 4.5. 2025-04-22 08:35:48,773+0300 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.pki.ca plugin.execute:923 execute-output: ('/usr/bin/openssl', 'pkcs12', '-in', '/etc/pki/ovirt-engine/keys/engine.p12', '-passin', 'pass:**FILTERED**', '-nokeys') stderr: Error outputting keys and certificates 00CE347D1F7F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:355:Global default library context, Algorithm (RC2-40-CBC : 0), Properties () RHEL/RL 9 disables the legacy provider for security reasons. What is the best way to solve this problem ? Should i just enable legacy provider in OpenSSL config or re-sign all certs with new ciper (where can i find more information about this) ? Thank you.

5 11

Re: [External] : How to modify the MAC address of a bonding interface after changing the nic card
by luc.lalonde＠polymtl.ca 09 May '25

09 May '25

We've had a similar experience after changing a network card our hypervisor nodes. If you use NMCLI to affect the changes like mentioned above, the hosted-engine will revert to the old settings upon a reboot of the nodes... The only way to get around this in my experience is to make the networking changes from the hosted engine web interface: Compute, Host, Node, Setup Host Networks. If done this way, the changes become persistent... Hope this helps!

1 0

build ovirt in docker container
by Jorge Visentini 08 May '25

08 May '25

hey... Is it crazy of me to try to compile everything in a single (big) container, or at least divide the closest services into containers? Is there any initiative in this direction? I swear, I didn't smoke anything to have this idea 🙏🤣 I ask this because I'm in the initial process of creating a build in rocky linux 9. By the way, if anyone has basic documentation for this porting from centos 9 stream to rl9, it would be very welcome. Here we use Mellanox 3 and 4, and Emulex, so I need to standardize the kernel to compile the drivers lol many thanks -- Att, Jorge Visentini +55 55 98432-9868

2 1

oVirt 4.5: Ansible Self-hosted deployment never created ovirtmgmt bridge
by Pham, Alex 06 May '25

06 May '25

Hello Everyone, I am attempting to install a oVirt Self-hosted engine deployment on a HPE G10 DL360 Server. I am running into a strange issue where the ovirtmgmt bridge is not being created successfully, I have attempted to install around 8 times now and it always gets stuck at the same point: 1. oVirt deploy attempts to create the ovirtmgmt bridge. 2. ovirtmgmt bridge is not created. 3. Deployment fails while waiting for VM to be up. I am attempting the deployment using the ovirt.ovirt collection and the hosted_engine_setup role where the host is set to localhost. The strange thing is I have used this same ansible script and it's accompanying configurations to install oVirt Successfully on this server previously but it is failing after I have performed a cleanup and attempted a reinstallation. Components: HPE G10 DL360 -> Almalinux 8.10 ovirt-ansible-collection.noarch 3.2.0-1.el8 ovirt-engine-appliance.x86_64 4.5-20231201120252.1.el8 I can post the entire engine.log if required but I see the following error that might be relevant 2025-05-06 16:47:08,922-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Running command: UpdateNetworkCommand internal: false. Entities affected : ID: 00000000-0000-0000-0000-000000000009 Type: NetworkAction group CONFIGURE_STORAGE_POOL_NETWORK with role type ADMIN 2025-05-06 16:47:08,958-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE(11,291), Update to network ovirtmgmt was not applied to virtual network interfaces [<UNKNOWN>]. The actual configuration on the interfaces may differ from the displayed one. 2025-05-06 16:47:08,981-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NOTHING_TO_DO(11,143), Start Network ovirtmgmt update on Data Center: Default; no hosts affected 2025-05-06 16:47:09,168-04 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-3) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Command 'UpdateNetwork' id: 'e78f0c08-5b95-483a-afeb-d9b1a8f8c1b3' child commands '[]' executions were completed, status 'SUCCEEDED' 2025-05-06 16:47:10,229-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Ending command 'org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand' successfully. 2025-05-06 16:47:10,267-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NETWORK(1,114), Finished Network ovirtmgmt update on Data Center: Default 2025-05-06 16:47:16,181-04 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-1) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged out 2025-05-06 16:47:16,284-04 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-3) [74b80a72] Running command: TerminateSessionsForTokenCommand internal: true. 2025-05-06 16:47:16,581-04 INFO [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] No permission found for user '467363ac-bd4d-48c7-9ca1-9b7e7d81470a' or one of the groups he is member of, when running action 'AddVds', Required permissions are: Action type: 'ADMIN' Action group: 'CREATE_HOST' Object type: 'Cluster' Object ID: '9bdf3276-2aba-11f0-aebc-4c7e5dafee16'. 2025-05-06 16:47:16,581-04 WARN [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] Validation of action 'AddVds' failed for user admin@ovirt@internalkeycloak-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__HOST,$server ac5conbtafsnatgw01.gw.beta.fsn.nadops.net,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2025-05-06 16:47:16,592-04 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-4) [] Operation Failed: [User is not authorized to perform this action.] 2025-05-06 16:47:19,307-04 INFO [org.ovirt.engine.core.sso.service.ExternalOIDCService] (default task-4) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged into external OP with scopes: ovirt Any help diagnosing this issue would be appreciated. My assumption is that VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE is what is causing the issue but I'm not sure how to get the networks in sync since everything is being done via the internal ovirt ansible collection. Thanks!

1 0

oVirt 4.5: Ansible Self-hosted deployment never created ovirtmgmt bridge
by alex.pham＠hughes.com 06 May '25

06 May '25

Hello Everyone, I am attempting to install a oVirt Self-hosted engine deployment on a HPE G10 DL360 Server. I am running into a strange issue where the ovirtmgmt bridge is not being created successfully, I have attempted to install around 8 times now and it always gets stuck at the same point: 1. oVirt deploy attempts to create the ovirtmgmt bridge. 2. ovirtmgmt bridge is not created. 3. Deployment fails while waiting for VM to be up. I am attempting the deployment using the ovirt.ovirt collection and the hosted_engine_setup role where the host is set to localhost. The strange thing is I have used this same ansible script and it’s accompanying configurations to install oVirt Successfully on this server previously but it is failing after I have performed a cleanup and attempted a reinstallation. Components: HPE G10 DL360 -> Almalinux 8.10 ovirt-ansible-collection.noarch 3.2.0-1.el8 ovirt-engine-appliance.x86_64 4.5-20231201120252.1.el8 I can post the entire engine.log if required but I see the following error that might be relevant 2025-05-06 16:47:08,922-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Running command: UpdateNetworkCommand internal: false. Entities affected : ID: 00000000-0000-0000-0000-000000000009 Type: NetworkAction group CONFIGURE_STORAGE_POOL_NETWORK with role type ADMIN 2025-05-06 16:47:08,958-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE(11,291), Update to network ovirtmgmt was not applied to virtual network interfaces [<UNKNOWN>]. The actual configuration on the interfaces may differ from the displayed one. 2025-05-06 16:47:08,981-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NOTHING_TO_DO(11,143), Start Network ovirtmgmt update on Data Center: Default; no hosts affected 2025-05-06 16:47:09,168-04 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-3) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Command 'UpdateNetwork' id: 'e78f0c08-5b95-483a-afeb-d9b1a8f8c1b3' child commands '[]' executions were completed, status 'SUCCEEDED' 2025-05-06 16:47:10,229-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Ending command 'org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand' successfully. 2025-05-06 16:47:10,267-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NETWORK(1,114), Finished Network ovirtmgmt update on Data Center: Default 2025-05-06 16:47:16,181-04 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-1) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged out 2025-05-06 16:47:16,284-04 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-3) [74b80a72] Running command: TerminateSessionsForTokenCommand internal: true. 2025-05-06 16:47:16,581-04 INFO [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] No permission found for user '467363ac-bd4d-48c7-9ca1-9b7e7d81470a' or one of the groups he is member of, when running action 'AddVds', Required permissions are: Action type: 'ADMIN' Action group: 'CREATE_HOST' Object type: 'Cluster' Object ID: '9bdf3276-2aba-11f0-aebc-4c7e5dafee16'. 2025-05-06 16:47:16,581-04 WARN [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] Validation of action 'AddVds' failed for user admin@ovirt@internalkeycloak-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__HOST,$server ac5conbtafsnatgw01.gw.beta.fsn.nadops.net,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2025-05-06 16:47:16,592-04 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-4) [] Operation Failed: [User is not authorized to perform this action.] 2025-05-06 16:47:19,307-04 INFO [org.ovirt.engine.core.sso.service.ExternalOIDCService] (default task-4) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged into external OP with scopes: ovirt Any help diagnosing this issue would be appreciated. My assumption is that VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE is what is causing the issue but I’m not sure how to get the networks in sync since everything is being done via the internal ovirt ansible collection. Thanks!

1 0

oVirt 4.5: Ansible Self-hosted deployment never created ovirtmgmt bridge
by Alex.Pham＠hughes.com 06 May '25

06 May '25

I am attempting to perform an oVirt self-hosted deployment but it is failing while waiting for the VM to be up because the ovirtmgmt bridge is not being created. I have attempted the install about 8 times now and it fails with the same error every time. ovirtmgmt bridge is not created and it waits for VM to be up until it times out. I am performing the oVirt deployment using the ansible collection ovirt.ovirt with role hosted_engine_setup. ansible-playbook engineDeploy.yml --extra-vars='@./engineconfig.json' --extra-vars='@./enginePasswords.yml' The strange thing is, I had previously successfully installed oVirt on this server using the same engineDeploy.yml and same engineconfig.json and enginePasswords.yml. Nothing has changed with the server or these files as far as I know. Components: Server HPE G10 DL360 - AlmaLinux 8.10 ovirt-ansible-collection.noarch 3.2.0-1.el8 ovirt-engine-appliance.x86_64 4.5-20231201120252.1.el8 I can post the entire engine.log if required but the only error I see in the engine is the following: UpdateNetworkCommand internal: false. Entities affected : ID: 00000000-0000-0000-0000-000000000009 Type: NetworkAction group CONFIGURE_STORAGE_POOL_NETWORK with role type ADMIN 2025-05-06 16:47:08,958-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE(11,291), Update to network ovirtmgmt was not applied to virtual network interfaces [<UNKNOWN>]. The actual configuration on the interfaces may differ from the displayed one. 2025-05-06 16:47:08,981-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NOTHING_TO_DO(11,143), Start Network ovirtmgmt update on Data Center: Default; no hosts affected 2025-05-06 16:47:09,168-04 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-3) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Command 'UpdateNetwork' id: 'e78f0c08-5b95-483a-afeb-d9b1a8f8c1b3' child commands '[]' executions were completed, status 'SUCCEEDED' 2025-05-06 16:47:10,229-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Ending command 'org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand' successfully. 2025-05-06 16:47:10,267-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NETWORK(1,114), Finished Network ovirtmgmt update on Data Center: Default 2025-05-06 16:47:16,181-04 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-1) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged out 2025-05-06 16:47:16,284-04 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-3) [74b80a72] Running command: TerminateSessionsForTokenCommand internal: true. 2025-05-06 16:47:16,581-04 INFO [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] No permission found for user '467363ac-bd4d-48c7-9ca1-9b7e7d81470a' or one of the groups he is member of, when running action 'AddVds', Required permissions are: Action type: 'ADMIN' Action group: 'CREATE_HOST' Object type: 'Cluster' Object ID: '9bdf3276-2aba-11f0-aebc-4c7e5dafee16'. 2025-05-06 16:47:16,581-04 WARN [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] Validation of action 'AddVds' failed for user admin@ovirt@internalkeycloak-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__HOST,$server ac5conbtafsnatgw01.gw.beta.fsn.nadops.net,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2025-05-06 16:47:16,592-04 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-4) [] Operation Failed: [User is not authorized to perform this action.]

1 0

Ovirt version: ( 4.3.10.4-1.el7)
by rudmontaigue＠gmail.com 06 May '25

06 May '25

- The VM on Ovirt ( 4.3.10.4-1.el7) , is built on a storage LUN IBM V5000. Cancelling VM and disc the storage did not perform any update. - Any advice to solved this type of issue?

1 0

Ovirt 4.3.10.4-1el7
by rudmontaigue＠gmail.com 06 May '25

06 May '25

Hello, I am a new user of Ovirt but I use an old version of Ovirt: Ovirt 4.3.10.4-1el7. My question is it possible to transfer a virtual machine from one data center to another on this ovirt version? Thank you in advance for your reply.

1 0

Ovirt 4.3 update to Ovirt 4.5 on alma8
by Pavel Šipoš 01 May '25

01 May '25

Hi, I’m working on upgrading an oVirt 4.3 cluster to the latest 4.5 version. So far, I’ve successfully performed a test upgrade of the oVirt Engine from 4.3 (CentOS 7) to 4.4 (AlmaLinux 8.10). I’ve encountered some noVNC issues, as described here: https://forums.oracle.com/ords/apexds/post/olvm-manager-vm-console-novnc-ex… I’ll probably leave this issue unresolved for now, as I’m planning to continue with the upgrade process. For the next step, I’d like to ask if anyone has experience installing and running an oVirt 4.5 cluster (both engine and hosts) on AlmaLinux 8.x. So far, it seems that I might need to upgrade the OS to AlmaLinux 9 as well, possibly using ELevate. If anyone has recently completed a similar migration, I’d really appreciate any tips or recommendations. Best regards, Pavel

4 6

Do we have RV tool for ovirt similar to vcenter. Trying to fetch VM, Host information and its metadata information.
by dushyantk.sun＠gmail.com 01 May '25

01 May '25

Hi, I am trying to fetch vms,hosts and other component information for reference purpose. However seems like RV tool does not support ovirt. So checking if we have any other way to fetch those information in one api call. Tried builtin grafana but it does not give host information where vm resides.

1 0