May 2025 - Users - oVirt List Archives

Hosted Engine Deployment timeout waiting for VM
by Jonas Liechti 09 Feb '26

09 Feb '26

Hello users, I am currently trying to deploy the self-hosted engine via the web interface but it seems stuck at the task "Wait for the local VM" (https://github.com/oVirt/ovirt-ansible-collection/blob/master/roles/hosted_…) I am unsure what to look at for getting more info as I haven't worked a lot with Ansible before. Do you have any idea how to debug? The temporary IP is added to /etc/hosts and I can also login to the VM via SSH: [root@server-005 ~]# cat /etc/hosts 192.168.1.97 ovirt-engine-test.admin.int.rabe.ch # temporary entry added by hosted-engine-setup for the bootstrap VM 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 10.128.16.5 server-005.admin.int.rabe.ch 10.128.16.6 server-006.admin.int.rabe.ch 10.128.16.7 server-007.admin.int.rabe.ch #10.128.32.2 ovirt-engine-test.admin.int.rabe.ch 10.132.16.5 server-005.storage.int.rabe.ch 10.132.16.6 server-006.storage.int.rabe.ch 10.132.16.7 server-007.storage.int.rabe.ch [root@server-005 ~]# ssh ovirt-engine-test.admin.int.rabe.ch root(a)ovirt-engine-test.admin.int.rabe.ch's password: Web console: https://ovirt-engine-test.admin.int.rabe.ch:9090/ or https://192.168.1.97:9090/ Last login: Mon Apr 18 11:33:53 2022 from 192.168.1.1 [root@ovirt-engine-test ~]# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 00:16:3e:58:7a:a3 brd ff:ff:ff:ff:ff:ff inet 192.168.1.97/24 brd 192.168.1.255 scope global dynamic noprefixroute eth0 valid_lft 2313sec preferred_lft 2313sec inet6 fe80::216:3eff:fe58:7aa3/64 scope link valid_lft forever preferred_lft forever Thank you for any tips for debugging. Jonas

5 7

Unable to install oVirt on RHEL7.5
by SS00514758＠techmahindra.com 15 Jan '26

15 Jan '26

Hi All, I am unable to install oVirt on RHEL7.5, to install it I am taking reference of below link, https://www.ovirt.org/documentation/install-guide/chap-Installing_oVirt.html But though it is not working for me, couple of dependencies is not getting installed, and because of this I am not able to run the ovirt-engine, below are the depencies packages that unable to install, Error: Package: collectd-write_http-5.8.0-6.1.el7.x86_64 (@ovirt-4.2-centos-opstools) Requires: collectd(x86-64) = 5.8.0-6.1.el7 Removing: collectd-5.8.0-6.1.el7.x86_64 (@ovirt-4.2-centos-opstools) collectd(x86-64) = 5.8.0-6.1.el7 Updated By: collectd-5.8.1-1.el7.x86_64 (epel) collectd(x86-64) = 5.8.1-1.el7 Available: collectd-5.7.2-1.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.7.2-1.el7 Available: collectd-5.7.2-3.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.7.2-3.el7 Available: collectd-5.8.0-2.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.8.0-2.el7 Available: collectd-5.8.0-3.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.8.0-3.el7 Available: collectd-5.8.0-5.el7.x86_64 (ovirt-4.2-centos-opstools) collectd(x86-64) = 5.8.0-5.el7 Help me to install this. Looking forward to resolve this issue. Regards Sumit Sahay

8 10

10_allocate_net error
by eevans＠digitaldatatechs.com 18 Dec '25

18 Dec '25

CentOS-Stream-9 Ovirt 4.5 minimal install- engine log: 2025-02-10 07:53:09,247-06 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ForkJoinPool-1-worker-11) [2fa77002] EVENT_ID: VM_DOWN_ERROR(119), VM clonezilla is down with error. Exit message: Hook Error: (b'vm net allocation hook: [unexpected error]: Traceback (most recent call last):\n File "/usr/libexec/vdsm/hooks/before_device_create/10_allocate_net", line 91, in <module>\n main()\n File "/usr/libexec/vdsm/hooks/before_device_create/10_allocate_net", line 79, in main\n allocate_random_network(device_xml)\n File "/usr/libexec/vdsm/hooks/before_device_create/10_allocate_net", line 48, in allocate_random_network\n net = _get_random_network()\n File "/usr/libexec/vdsm/hooks/before_device_create/10_allocate_net", line 36, in _get_random_network\n available_nets = _parse_nets()\n File "/usr/libexec/vdsm/hooks/before_device_create/10_allocate_net", line 32, in _parse_nets\n return [net for net in os.environ[AVAIL_NETS_KEY].split()]\n File "/usr/lib64/python3.9/os.py", line 679, in __getitem__\n raise KeyError(key) from None\nKeyError: \'equivnets\'\n\n\n',). It doesn't matter if it's a fresh install or import. I go to ui and edit vm and change to one of the default size templates, usually large, it boots with no nic and I can add a nic once it's booted and restart it, then it gets an IP and is fine unless you shut it down. In that case, you have to go through setting size and adding nic after vm boot. Any help would be appreciated. Thanks in advance/

2 3

Unable to upload or download iso via admin portal
by Igor Filipovic 09 Dec '25

09 Dec '25

Hi, I'm having a trouble on fresh 4.4.10.7 installation (on oracle linux), I'm not able to upload or download any file using storage domain upload image function. I've imported CA certificate and have tried on several browsers (firefow, chrome,edge), on different computers (and browsers are green - claiming that I'm securely connected), but I'm always getting error regarding CA certificate when I test connection, or when I try to upload ISO image. I've tried to upload ISO image via cli commands (upload_disk.py), and that scenario was successful, however this method It is not very convenient for my co-workers. I have 5 physical hosts, one is dedicated to run ovirt-engine, and other 4 are kvm hypervisors. When I try to upload ISO this is what engine.log logs: 2023-04-08 11:00:28,339+02 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-2) [f6b62add-0a0c-45ee-a985-a76171843382] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: 1eb97088-b805-4616-af55-0ac9d1d7dfbe Type: SystemAction group CREATE_DISK with role type USER 2023-04-08 11:00:28,340+02 INFO [org.ovirt.engine.core.bll.storage.disk.image.ImageTransferUpdater] (default task-2) [f6b62add-0a0c-45ee-a985-a76171843382] Updating image transfer a78b18c5-e395-4c29-aa5c-15ffff8a1cb6 (image 4f758325-ac11-4071-a9fa-d180425e8604) phase to Paused by System (message: 'Sent 0MB') 2023-04-08 11:00:28,363+02 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-2) [f6b62add-0a0c-45ee-a985-a76171843382] EVENT_ID: UPLOAD_IMAGE_NETWORK_ERROR(1,062), Unable to upload image to disk 4f758325-ac11-4071-a9fa-d180425e8604 due to a network error. Ensure ovirt-engine's CA certificate is registered as a trusted CA in the browser. The certificate can be fetched from https://engine-dr.somedomain/ovirt-engine/services/pki-resource?resource=ca… 2023-04-08 11:00:28,363+02 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-2) [f6b62add-0a0c-45ee-a985-a76171843382] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: 1eb97088-b805-4616-af55-0ac9d1d7dfbe Type: SystemAction group CREATE_DISK with role type USER Can you please point me in some direction to try to fix this? Thanks, and best regards Igor

5 5

Installing oVirt on RHEL vs CentOS Stream, Alma or Rocky Linux
by Richard W.M. Jones 06 Oct '25

06 Oct '25

I'm still struggling to get oVirt installed. It absolutely will not install on RHEL 8, the documentation here is flat out wrong: https://www.ovirt.org/documentation/installing_ovirt_as_a_standalone_manage… javapackages-tools is not a module that exists in RHEL 8. Apparently it's a CentOS PowerTools module. Since original CentOS no longer really exists either, does anyone have any opinions or experience with installing oVirt on any of: - CentOS Stream 8 - Alma Linux 8.5 - Rocky Linux Alma in particular looks like a straight replacement for old CentOS. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://people.redhat.com/~rjones/virt-top

8 10

Unable to launch new VM on few hosts due "Max free Memory for scheduling new VMs:" has less value
by dushyantk.sun＠gmail.com 11 Sep '25

11 Sep '25

Few hosts shows unable to launch vms due memory is not available to schedule vm. However vm has enough memory when check free command. If any one come across such issue, please let me know how we can fix it in oracle olvm

1 2

Veeam - Move data over other network than ovirtmgmt
by domien.vanrompaey＠dynamate.be 18 Jun '25

18 Jun '25

Hi all I was wondering if anyone managed to get Veeam working with a dedicated backup VLAN instead of sending traffic over the ovirtmgmt interface. We have an OLVM setup (version 4.5.5-1.42.el8) with 3 hosts in 1 cluster for now. Each host has a 1Gbps NIC pair in a seperate management LAN that is only used for ovirtmgmt Each host also has a 10Gbps NIC Bond where all the VLAN's are trunked including a dedicated Backup VLAN. The hosts do not have an IP in this Backup VLAN configured (is this needed?) Each host also has 2 NICs dedicated to storage backend (iSCSI Multipathing) Our Veeam Appliance and workers are setup in the Backup VLAN and they can communicate with the backup repository that is also in this VLAN. When we take a backup, however, we see that the ovirtmgmt network is maxed out on trafic, which probably shouldn't happen. We come from a VMWare environment where the backup proxies handle all the trafic through the backup VLAN without relying on the management network and I was expecting it to work similarly Has anyone managed to get this working as I envision it? Or is the solution to simply link ovirtmgmt to the 10Gbps bond and skip the dedicated mgmt networking? I've also opened a ticket with Veeam for this, but for now I'm just getting questions from them and no real answers. If I get a useful solution from them I will also post it here

4 3

Please let me know how to resolve the below error!
by d_hashima＠sagaidc.co.jp 12 Jun '25

12 Jun '25

Error Content [ ERROR ] fatal: [localhost -> 192.168.1.252]: FAILED! => {"changed": false, "msg": "Failed to download metadata for repo 'centos-ceph-pacific': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8-stream&arch=x86_64&repo=storage-cep… [Could not resolve host: mirrorlist.centos.org]", "rc": 1, "results": []} environment CentOS Stream release ovirt-node-ng-installer-4.5.5-2023113015.el9.iso I am building it with ovirt-node-ng-installer-4.5.5-2023113015.el9.iso and plan to install oVirt Engine there. I am building it on a virtual server.

5 10

ovirt-hosted-engine deploy hangs
by bleuze＠enkon.com 02 Jun '25

02 Jun '25

This is on a brand new Oracle Linux ver8.10 install on a physical server. I have completed all the perquisite steps in the instructions at https://docs.oracle.com/en/virtualization/oracle-linux-virtualization-manag… I run the deployment script: hosted-engine --deploy --4 Answer all the questions and let it run. It runs for about an hour and then hangs at the step: [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Create temporary lock file] [ INFO ] changed: [localhost -> localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Pause execution until /tmp/ansible.yo6aij1p_he_setup_lock is removed, delete it once ready to proceed] The first time I let it run all night and it was still hung in the morning. I have tried this using the cli command above. I have also tried it using the cockput gui method, both procedures hang at the same place. I have to run /usr/sbin/ovirt-hosted-engine-cleanup after each failure before trying again I can't find any clues in the logs but perhaps someone can tell me what to look for. I am happy to post the logs here as well. I assume this is at the point where the temporary Self Hosted engine has been created and is ready to be migrated to the shared storage. The lock placed there until it is successfully moved. But the instructions say that I should be prompted for the "storage you would like to use" I don't get that promtp. It is hung somewhere before it gets to that stage. What I do know is that the temporary Self hosted engines is created because I can ssh into and login as root Next I will try again but this time use the --ansible-extra-vars option to fill in all the variables at the beginning. I don't know what else to try

1 1

Unable to access the Console via web browser.
by natchawi28＠gmail.com 26 May '25

26 May '25

I'm currently experiencing a usage issue. I'm unable to access the Console via web browser. A banner appears at the top stating: 'Something went wrong, connection is closed.' Upon further investigation, I found that the ovirt-websocket-proxy service shows the following message: handler exception: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:897) OS Version: Oracle 8.10 Ovirt engine: 4.4

2 1

Potential CentosStream 9 resilientstorage repo issues
by lmd＠gto.net 26 May '25

26 May '25

Good Morning! I wanted to report that I think there are issues with CentOS Stream 9 ResilientStorage repos (added by package "ovirt-release-ovirt45" and also enabled in the hosted-engine appliance) that causes anything related to DNF and this repo to fail as captured below. Digging in, it looks like centos.org is advertising a metalink.xml (at least for my Toronto, Ontario location) that is timetamped 1747062205 (Monday, May 12, 2025 3:03:25 PM GMT). Mirrors are not in good shape: * centos.org themselves are advertising a repomd.xml for ResilientStorage with timestamp 1747752818 (Tuesday, May 20, 2025 2:53:38 PM) * ca.mirrors.cicku.me are advertising an identical repomd.xml of centos.org * mirror.cpsc.ucalgary.ca is advertisting a 0-byte repomd.xml * mirrors.lug.mtu.edu is advertising an old repomd.xml of timestamp 1744645925 (Monday, April 14, 2025 3:52:05 PM) The SHA512 sum of all published repomd.xml files does not match metalink, therefore all mirrors fail. I haven't tried to exclude the repo from the HE but I wanted to post a note here in case someone else is running into this. I anticipate that Centos.org will fix this at some point, but based on dates it could be that this has been broken for ~3 days already (2025-May-20 2:53PM GMT). I am not sure where to post to raise awareness with CentOS.org or the group responsible for the ResilientStorage repo. If someone knows please let me know - or if someone on the oVirt team could notify a contact, I would be obliged if you could let them know. Thank you kindly, Dan > Errors during downloading metadata for repository 'resilientstorage': - Downloading successful, but checksum doesn't match. Calculated: 87c76b87fe36bfa60fcd8edbc52934559d8af59850efa3f0c04904e0a757d35d9d9bc0edb6114126971709afa4670d77d2de501c949a4f5e5b6144409f7efa77(sha512) Expected: 17ef9ff2c8fc04667ed55a33dc02476a59e236e7da7f19d86c586e2fbab75fa1bd7b1e68d1a1ad4657e84c2791f5f0bf78f30be53db8b5eb7fc83227c819185f(sha512) - Downloading successful, but checksum doesn't match. Calculated: 45c8d2dfc4fe245817d3f5ce5be99505a841b1d328ef14c12ba3b789277bf271a2e36cb981ce66cd0c30f652670504f40907dc05aa8bc9858d506b1989093846(sha512) Expected: 17ef9ff2c8fc04667ed55a33dc02476a59e236e7da7f19d86c586e2fbab75fa1bd7b1e68d1a1ad4657e84c2791f5f0bf78f30be53db8b5eb7fc83227c819185f(sha512) Error: Failed to download metadata for repo 'resilientstorage': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried [devops@l51amew9]$

2 4

Cannot create a data nfs domain.
by mobiyef772＠daxiake.com 26 May '25

26 May '25

I cannot create a data nfs domain, but I can create a iso nfs domain. When I check my nfs share on hosts: >> python3 nfs-check.py 192.168.80.10:/var/nfs/data/ovirt-images >> Current hostname: ovirt-n1.lab.io - IP addr 10.0.65.20 >> Trying to /bin/mount -t nfs 192.168.80.10:/var/nfs/data/ovirt-images... >> Executing NFS tests.. >> Removing vdsmTest file.. >> Status of tests [OK] >> Disconnecting from NFS Server.. >> Done! In web I get: Error while executing action New NFS Storage Domain: Unexpected exception, but ovirt-engine created: ovirt-images: |-130c14d7-3d83-410e-a862-2232f5327eea |---dom_md |---images in log: >>> engine.log:2025-05-26 11:46:45,515+03 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.DisconnectStorageServerVDSCommand] (default task-14) [52d4985c-0ed1-4b7f-aa67-d2d72c1847fb] START, >>> DisconnectStorageServerVDSCommand(HostName = ovirt-n1.lab.io, StorageServerConnectionManagementVDSParameters:{hostId='da7c47b1-0e7d-42be-b3da-19ea6e513e5f', storagePoolId='00000000-0000-0000-0000-000000000000', storageType='NFS', connectionList='[StorageServerConnections:{id='70506050-af3e-4061-aca2-c80d7bcb1893', connection='192.168.80.10:/var/nfs/data/ovirt-images', iqn='null', vfsType='null', mountOptions='null', nfsVersion='AUTO', nfsRetrans='null', nfsTimeo='null', iface='null', netIfaceName='null'}]', sendNetworkEventOnFailure='true'}), log id: 6d537e69 >>> engine.log:2025-05-26 11:46:47,813+03 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.DisconnectStorageServerVDSCommand] (default task-14) [52d4985c-0ed1-4b7f-aa67-d2d72c184L7fb] FINISH, DisconnectStorageServerVDSCommand, return: {70506050-af3e-4061-aca2-c80d7bcb1893=0}, log id: 6d537e69 Why?

1 0

ovirt-engine-deploy error
by hiroki.tamai.fu＠nttdocomo.com 19 May '25

19 May '25

Hi, everyone. This is my first time using ovirt and I encountered this error in ovirt-engine-deploy. ERROR LOG =========================================================================== [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Create ISO disk] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Fix local VM directory permission] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Create local VM] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": true, "cmd": ["virt-install", "-n", "HostedEngineLocal", "--os-variant", "rhel8.0", "--virt-type", "kvm", "--memory", "16384", "--vcpus", "4", "--network", "network=default,mac=00:16:3e:7e:2b:e0,model=virtio", "--disk", "/var/tmp/localvm4swegum3/images/799d4506-f930-41ba-9c0d-1fe7af6af1bc/5d3a11a5-88c9-45d6-a3a6-e4819ce36702", "--import", "--disk", "path=/var/tmp/localvm4swegum3/seed.iso,device=cdrom", "--autoconsole", "text", "--rng", "/dev/random", "--graphics", "none", "--sound", "none", "--controller", "usb,model=none", "--memballoon", "none", "--boot", "hd,bootmenu.enable=on,bios.useserial=on", "--clock", "kvmclock_present=yes", "--serial=pty,log.file=/var/log/libvirt/qemu/HostedEngineLocal-console.log"], "delta": "0:00:01.611656", "end": "2024-12-04 08:55:40.844092", "msg": "non-zero return code", "rc": 1, "start": "2024-12-04 08:55:39.232436", "stderr": "ERROR Failed to connect socket to '/var/run/libvirt/virtnetworkd-soc k': No such file or directory\nDomain installation does not appear to have been successful.\nIf it was, you can restart your domain by running:\n virsh --connect qemu:///system start HostedEngineLocal\notherwise, please restart your installation.", "stderr_lines": ["ERROR Failed to connect socket to '/var/run/libvirt/virtnetworkd-sock': No such file or directory", "Domain installation does not appear to have been successful.", "If it was, you can restart your domain by running:", " virsh --connect qemu:///system start HostedEngineLocal", "otherwise, please restart your installation."], "stdout": "\nStarting install...", "stdout_lines": ["", "Starting install..."]} [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : include_tasks] =========================================================================== I restored the virtnetworkd-sock file with reference to this ticket, but the deployment still fails with the same error. https://github.com/crc-org/crc/issues/2839 If anyone has encountered a similar issue, could you please let me know how you resolved it? Deploying with the Self-Hosted Engine and using ovirt4.5 el9. Thank you.

2 1

Re: [External] : Re: hosted-engine --deploy fails with "The task includes an option with an undefined variable. The error was: 'local_vm_ip' is undefined"
by Marcos Sungaila 16 May '25

16 May '25

Hi Glenn, The playbooks are not compatible with newer ansible versions, try downgrading the ansible/ansible-core package in use. Or you can go deeper and review the playbooks to make it compatible with the ansible version in use. Marcos From: Glenn Paden <glpaden(a)hotmail.com> Sent: Tuesday, April 8, 2025 7:49 PM To: users(a)ovirt.org Subject: [External] : [ovirt-users] Re: hosted-engine --deploy fails with "The task includes an option with an undefined variable. The error was: 'local_vm_ip' is undefined" I have has this happen a number of times with ovirt versions. I have yet to find a solution. Did you?

1 0

Re: [External] : Is it possible to add CPU Profiles?
by Simon Coter 15 May '25

15 May '25

Hi Domien, you can just proceed on your installation even if the CPU is getting recognized as AMD EPYC-MILAN. We’re working on an update that will introduce the support for latest Intel and AMD CPUs; once released you will have the option to switch it. Simon On May 14, 2025, at 8:45 AM, Domien Van Rompaey via Users <users(a)ovirt.org> wrote: Hi there We are starting up a cluster with AMD Genoa CPU’s (AMD EPYC 9454) on Oracle Linux (oVirt 4.5.5-1.42.el8). For now the only (recent) CPU profile that works is AMD EPYC-MILAN. We have the libvirt/cpu_map XML file and know to place it in the /usr/share/libvirt/cpu_map folder on the hosts, but I’m not sure how oVirt will react to this. Does anyone have any experience with this? Met vriendelijke groeten, Domien Van Rompaey Security Engineer Cloud & ICT‑infrastructure | Security Tel +32 51 76 00 00 [https://website-api.dynamate.be/public/E-mailhandtekening/DYNAMATE-handteke…]<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> www.dynamate.be<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> [https://website-api.dynamate.be/public/E-mailhandtekening/instagram-60-150.…]<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> [https://website-api.dynamate.be/public/E-mailhandtekening/facebook-60-150.p…]<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> [https://website-api.dynamate.be/public/E-mailhandtekening/linkedin-60-150-2…]<https://urldefense.com/v3/__https://eu.content.exclaimer.net/?url=https*3A*…> _______________________________________________ Users mailing list -- users(a)ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave(a)ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://urldefense.com/v3/__https://www.ovirt.org/privacy-policy.html__;!!A… oVirt Code of Conduct: https://urldefense.com/v3/__https://www.ovirt.org/community/about/community… List Archives: https://urldefense.com/v3/__https://lists.ovirt.org/archives/list/users@ovi…

2 1

Re: Is it possible to add CPU Profiles?
by Jean-Louis Dupond 15 May '25

15 May '25

Hi Domien, Good to see some Belgian's here ;) Afaik Oracle added CPU types (like the AMD Genoa) based on our patch upstream: https://github.com/oVirt/ovirt-engine/pull/978/files So you should be able to select AMD Genoa as CPU type within oVirt. What error you have when choosing that CPU type? Or you can't choose it or ? Jean-Louis On 5/14/25 08:45, Domien Van Rompaey via Users wrote: > > Hi there > > We are starting up a cluster with AMD Genoa CPU’s (AMD EPYC 9454) on > Oracle Linux (oVirt 4.5.5-1.42.el8). > For now the only (recent) CPU profile that works is AMD EPYC-MILAN. > > We have the libvirt/cpu_map XML file and know to place it in the > /usr/share/libvirt/cpu_map folder on the hosts, but I’m not sure how > oVirt will react to this. > > Does anyone have any experience with this? > > Met vriendelijke groeten, > > *Domien Van Rompaey*** > > Security Engineer > > Cloud & ICT‑infrastructure | Security > > Tel +32 51 76 00 00 > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.christiaens.net%2F&…> > > www.dynamate.be > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.dynamate.be%2F&tena…> > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.instagram.com%2Fwea…> > > > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.facebook.com%2Fwear…> > > > > <https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.linkedin.com%2Fcomp…> > > > _______________________________________________ > Users mailing list --users(a)ovirt.org > To unsubscribe send an email tousers-leave(a)ovirt.org > Privacy Statement:https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ > List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/EV5S…

2 1

Is it safe to install bitdefender on ovirt and nodes ?
by Cyril VINH-TUNG 14 May '25

14 May '25

Hello everyone Has anybody already installed bitdefender or some EDR agent onto ovirt and nodes ? What would you recommand ? Pros and cons Thanks in advance Best regards -------------------------------- Cyril VINH-TUNG INVITU Computer & Network Engineering BP 32 - 98713 Papeete - French Polynesia Tél: +689 40 46 11 99 contact(a)invitu.com

2 1

Is it possible to add CPU Profiles?
by Domien Van Rompaey 14 May '25

14 May '25

Hi there We are starting up a cluster with AMD Genoa CPU’s (AMD EPYC 9454) on Oracle Linux (oVirt 4.5.5-1.42.el8). For now the only (recent) CPU profile that works is AMD EPYC-MILAN. We have the libvirt/cpu_map XML file and know to place it in the /usr/share/libvirt/cpu_map folder on the hosts, but I’m not sure how oVirt will react to this. Does anyone have any experience with this? Met vriendelijke groeten, Domien Van Rompaey Security Engineer Cloud & ICT‑infrastructure | Security Tel +32 51 76 00 00 [https://website-api.dynamate.be/public/E-mailhandtekening/DYNAMATE-handteke…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.christiaens.net%2F&…> www.dynamate.be<https://eu.content.exclaimer.net?url=https%3A%2F%2Fwww.dynamate.be%2F&tenan…> [https://website-api.dynamate.be/public/E-mailhandtekening/instagram-60-150.…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.instagram.com%2Fwea…> [https://website-api.dynamate.be/public/E-mailhandtekening/facebook-60-150.p…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.facebook.com%2Fwear…> [https://website-api.dynamate.be/public/E-mailhandtekening/linkedin-60-150-2…]<https://eu.content.exclaimer.net/?url=https%3A%2F%2Fwww.linkedin.com%2Fcomp…>

1 0

Re: [External] : build ovirt in docker container
by Jorge Visentini 13 May '25

13 May '25

So... I don't know where this link comes from and if it is being used for any functionality or purpose. https://quay.io/organization/ovirt Regarding orchestration, I think it is too early to decide. It could even be ansible with docker or podman... similar to kolla-ansible for osp. Anyway, these are just my ramblings. Em sex., 9 de mai. de 2025 às 01:58, Marcos Sungaila via Users < users(a)ovirt.org> escreveu: > Hi Jorge, > > > > This is a great initiative and I believe it is worth enough for the > challenge you have ahead. > > > > A solid first step in this process is to work with small, dedicated > containers, each tailored to a specific application or service. This > approach ensures modularity, reduces complexity, and facilitates > troubleshooting when needed. > > > > Once you have the basic containerization structure, the next step involves > modularizing the application by breaking down the engine monolithic > application into multiple independent containers. This will offer enhanced > scalability, flexibility, and efficiency in managing updates and > deployments. > > > > For such a project, using a container orchestration platform such as > Kubernetes is recommended. Helm, a package manager for Kubernetes, can > streamline deployment by managing configurations and automating complex > processes. Using Helm to run an Engine server ensures smoother deployment > and operational consistency. > > > > Do you already have a path in mind? > > > > Marcos > > > > *From:* Jorge Visentini <jorgevisentini(a)gmail.com> > *Sent:* Wednesday, May 7, 2025 5:26 PM > *To:* users <users(a)ovirt.org> > *Subject:* [External] : [ovirt-users] build ovirt in docker container > > > > hey... > > > > Is it crazy of me to try to compile everything in a single (big) > container, or at least divide the closest services into containers? > > Is there any initiative in this direction? > I swear, I didn't smoke anything to have this idea 🙏🤣 > > > > I ask this because I'm in the initial process of creating a build in rocky > linux 9. > By the way, if anyone has basic documentation for this porting from centos > 9 stream to rl9, it would be very welcome. > Here we use Mellanox 3 and 4, and Emulex, so I need to standardize the > kernel to compile the drivers lol > > > > many thanks > > -- > > Att, > > Jorge Visentini > +55 55 98432-9868 > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/HGYNNFC5XPBED… > -- Att, Jorge Visentini +55 55 98432-9868

2 1

Barebone Hosted Engine Deployment fails
by kevin＠kllmnn.de 12 May '25

12 May '25

Hey people, I hope someone can help me identify if there's something I'm doing wrong or if there's a bug. Originally I wanted to re-deploy my self-hosted engine, as it is still on version 4.5.5 with CentOS 8, and therefore can't be updated anymore. To get a fresh backup of the currently running config I did the following: 1. On physical host `hosted-engine --set-maintenance --mode=global` 2. On engine VM `systemctl stop ovirt-engine` and then 3. `engine-backup --scope=all --mode=backup --file=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.bck --log=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.log` (where `/mnt/ovirt-engine-backup/` is a NFS share) 4. On physical host `hosted-engine --vm-shutdown` Then I set up a new physical host with CentOS 9 Stream (Build 20250320), enabled and installed the oVirt repository as mentioned at https://www.ovirt.org/download/install_on_rhel.html, then ran: `hosted-engine --deploy --4 --restore-from-file=/mnt/ovirt-engine-backup/ovirt-engine-4.5.5-backup.bck` (of course mounting the NFS share prior to this). But after giving it all the information it needed it fails after 15-20 minutes with several errors in the logfile, which I cannot identify the primary/root cause of. The first error that appears is this one: ``` 2025-03-25 11:19:35,427+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Include after engine-setup custom tasks files for the engine VM] 2025-03-25 11:19:36,730+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Wait for the engine to reach a stable condition] 2025-03-25 11:19:37,431+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 skipping: [localhost] 2025-03-25 11:19:38,133+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Configure LibgfApi support] 2025-03-25 11:19:38,835+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 skipping: [localhost] 2025-03-25 11:19:39,536+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Save original OvfUpdateIntervalInMinutes] 2025-03-25 11:19:42,041+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 changed: [localhost -> 192.168.222.170] 2025-03-25 11:19:42,742+0100 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:115 TASK [ovirt.ovirt.hosted_engine_setup : Set OVF update interval to 1 minute] 2025-03-25 11:19:45,147+0100 DEBUG otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:109 {'changed': True, 'stdout': 'Index 1 out of bounds for length 1', 'stderr': 'Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false', 'rc': 1, 'cmd': ['engine-config', '-s', 'OvfUpdateIntervalInMinutes=1'], 'start': '2025-03-25 11:19:43.872322', 'end': '2025-03-25 11:19:44.941216', 'delta': '0:00:01.068894', 'msg': 'non-zero return code', 'invocation': {'module_args': {'_raw_params': 'engine-config -s OvfUpdateIntervalInMinutes=1', '_uses_shell': False, 'stdin_add_newline': True, 'strip_empty_ends': True, 'argv': None, 'chdir': None, 'executable': None, 'creates': None, 'removes': None, 'stdin': None}}, 'stdout_lines': ['Index 1 out of bounds for length 1'], 'stderr_lines': ['Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false'], '_ansible_no_log': False, '_ansible_delegated_vars': {'ansible_host': '192.168.222.170', 'ansible_port': None, 'ansible_user': 'root', 'ansible_ connection': 'smart'}} 2025-03-25 11:19:45,248+0100 ERROR otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:113 fatal: [localhost -> 192.168.222.170]: FAILED! => {"changed": true, "cmd": ["engine-config", "-s", "OvfUpdateIntervalInMinutes=1"], "delta": "0:00:01.068894", "end": "2025-03-25 11:19:44.941216", "msg": "non-zero return code", "rc": 1, "start": "2025-03-25 11:19:43.872322", "stderr": "Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false", "stderr_lines": ["Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false"], "stdout": "Index 1 out of bounds for length 1", "stdout_lines": ["Index 1 out of bounds for length 1"]} ``` The full log is available here: https://filebin.net/dimi5g2o6q20t4aj I also tried with a completely clean deployment, without restoring from backup (once without and once with using `ovirt-hosted-engine-cleanup` in between). The errors in the log are completely the same. Also I tried to use the oVirt Node master experimental ISO (`ovirt-node-ng-installer-4.5.6-2025031111.c9s.iso`), same issue. Does the problem lie somewhere in my answers for the questions asked by the tool? I cannot identify giving any wrong info. Can someone maybe reproduce the issue?

3 5

Standalone Engine restore to Rocky Linux 9
by KSNull Zero 12 May '25

12 May '25

Hello! There are a lot of errors regarding legacy cipher while restoring engine backup to RL9 during our migration to 4.5. 2025-04-22 08:35:48,773+0300 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.pki.ca plugin.execute:923 execute-output: ('/usr/bin/openssl', 'pkcs12', '-in', '/etc/pki/ovirt-engine/keys/engine.p12', '-passin', 'pass:**FILTERED**', '-nokeys') stderr: Error outputting keys and certificates 00CE347D1F7F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:355:Global default library context, Algorithm (RC2-40-CBC : 0), Properties () RHEL/RL 9 disables the legacy provider for security reasons. What is the best way to solve this problem ? Should i just enable legacy provider in OpenSSL config or re-sign all certs with new ciper (where can i find more information about this) ? Thank you.

5 11

Re: [External] : How to modify the MAC address of a bonding interface after changing the nic card
by luc.lalonde＠polymtl.ca 09 May '25

09 May '25

We've had a similar experience after changing a network card our hypervisor nodes. If you use NMCLI to affect the changes like mentioned above, the hosted-engine will revert to the old settings upon a reboot of the nodes... The only way to get around this in my experience is to make the networking changes from the hosted engine web interface: Compute, Host, Node, Setup Host Networks. If done this way, the changes become persistent... Hope this helps!

1 0

build ovirt in docker container
by Jorge Visentini 08 May '25

08 May '25

hey... Is it crazy of me to try to compile everything in a single (big) container, or at least divide the closest services into containers? Is there any initiative in this direction? I swear, I didn't smoke anything to have this idea 🙏🤣 I ask this because I'm in the initial process of creating a build in rocky linux 9. By the way, if anyone has basic documentation for this porting from centos 9 stream to rl9, it would be very welcome. Here we use Mellanox 3 and 4, and Emulex, so I need to standardize the kernel to compile the drivers lol many thanks -- Att, Jorge Visentini +55 55 98432-9868

2 1

oVirt 4.5: Ansible Self-hosted deployment never created ovirtmgmt bridge
by Pham, Alex 06 May '25

06 May '25

Hello Everyone, I am attempting to install a oVirt Self-hosted engine deployment on a HPE G10 DL360 Server. I am running into a strange issue where the ovirtmgmt bridge is not being created successfully, I have attempted to install around 8 times now and it always gets stuck at the same point: 1. oVirt deploy attempts to create the ovirtmgmt bridge. 2. ovirtmgmt bridge is not created. 3. Deployment fails while waiting for VM to be up. I am attempting the deployment using the ovirt.ovirt collection and the hosted_engine_setup role where the host is set to localhost. The strange thing is I have used this same ansible script and it's accompanying configurations to install oVirt Successfully on this server previously but it is failing after I have performed a cleanup and attempted a reinstallation. Components: HPE G10 DL360 -> Almalinux 8.10 ovirt-ansible-collection.noarch 3.2.0-1.el8 ovirt-engine-appliance.x86_64 4.5-20231201120252.1.el8 I can post the entire engine.log if required but I see the following error that might be relevant 2025-05-06 16:47:08,922-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Running command: UpdateNetworkCommand internal: false. Entities affected : ID: 00000000-0000-0000-0000-000000000009 Type: NetworkAction group CONFIGURE_STORAGE_POOL_NETWORK with role type ADMIN 2025-05-06 16:47:08,958-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE(11,291), Update to network ovirtmgmt was not applied to virtual network interfaces [<UNKNOWN>]. The actual configuration on the interfaces may differ from the displayed one. 2025-05-06 16:47:08,981-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NOTHING_TO_DO(11,143), Start Network ovirtmgmt update on Data Center: Default; no hosts affected 2025-05-06 16:47:09,168-04 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-3) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Command 'UpdateNetwork' id: 'e78f0c08-5b95-483a-afeb-d9b1a8f8c1b3' child commands '[]' executions were completed, status 'SUCCEEDED' 2025-05-06 16:47:10,229-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Ending command 'org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand' successfully. 2025-05-06 16:47:10,267-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NETWORK(1,114), Finished Network ovirtmgmt update on Data Center: Default 2025-05-06 16:47:16,181-04 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-1) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged out 2025-05-06 16:47:16,284-04 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-3) [74b80a72] Running command: TerminateSessionsForTokenCommand internal: true. 2025-05-06 16:47:16,581-04 INFO [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] No permission found for user '467363ac-bd4d-48c7-9ca1-9b7e7d81470a' or one of the groups he is member of, when running action 'AddVds', Required permissions are: Action type: 'ADMIN' Action group: 'CREATE_HOST' Object type: 'Cluster' Object ID: '9bdf3276-2aba-11f0-aebc-4c7e5dafee16'. 2025-05-06 16:47:16,581-04 WARN [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] Validation of action 'AddVds' failed for user admin@ovirt@internalkeycloak-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__HOST,$server ac5conbtafsnatgw01.gw.beta.fsn.nadops.net,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2025-05-06 16:47:16,592-04 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-4) [] Operation Failed: [User is not authorized to perform this action.] 2025-05-06 16:47:19,307-04 INFO [org.ovirt.engine.core.sso.service.ExternalOIDCService] (default task-4) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged into external OP with scopes: ovirt Any help diagnosing this issue would be appreciated. My assumption is that VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE is what is causing the issue but I'm not sure how to get the networks in sync since everything is being done via the internal ovirt ansible collection. Thanks!

1 0

oVirt 4.5: Ansible Self-hosted deployment never created ovirtmgmt bridge
by alex.pham＠hughes.com 06 May '25

06 May '25

Hello Everyone, I am attempting to install a oVirt Self-hosted engine deployment on a HPE G10 DL360 Server. I am running into a strange issue where the ovirtmgmt bridge is not being created successfully, I have attempted to install around 8 times now and it always gets stuck at the same point: 1. oVirt deploy attempts to create the ovirtmgmt bridge. 2. ovirtmgmt bridge is not created. 3. Deployment fails while waiting for VM to be up. I am attempting the deployment using the ovirt.ovirt collection and the hosted_engine_setup role where the host is set to localhost. The strange thing is I have used this same ansible script and it’s accompanying configurations to install oVirt Successfully on this server previously but it is failing after I have performed a cleanup and attempted a reinstallation. Components: HPE G10 DL360 -> Almalinux 8.10 ovirt-ansible-collection.noarch 3.2.0-1.el8 ovirt-engine-appliance.x86_64 4.5-20231201120252.1.el8 I can post the entire engine.log if required but I see the following error that might be relevant 2025-05-06 16:47:08,922-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Running command: UpdateNetworkCommand internal: false. Entities affected : ID: 00000000-0000-0000-0000-000000000009 Type: NetworkAction group CONFIGURE_STORAGE_POOL_NETWORK with role type ADMIN 2025-05-06 16:47:08,958-04 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE(11,291), Update to network ovirtmgmt was not applied to virtual network interfaces [<UNKNOWN>]. The actual configuration on the interfaces may differ from the displayed one. 2025-05-06 16:47:08,981-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NOTHING_TO_DO(11,143), Start Network ovirtmgmt update on Data Center: Default; no hosts affected 2025-05-06 16:47:09,168-04 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-3) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Command 'UpdateNetwork' id: 'e78f0c08-5b95-483a-afeb-d9b1a8f8c1b3' child commands '[]' executions were completed, status 'SUCCEEDED' 2025-05-06 16:47:10,229-04 INFO [org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] Ending command 'org.ovirt.engine.core.bll.network.dc.UpdateNetworkCommand' successfully. 2025-05-06 16:47:10,267-04 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-5) [d80ddce4-535f-4e12-b3ab-1f59647b37be] EVENT_ID: NETWORK_UPDATE_NETWORK(1,114), Finished Network ovirtmgmt update on Data Center: Default 2025-05-06 16:47:16,181-04 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-1) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged out 2025-05-06 16:47:16,284-04 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-3) [74b80a72] Running command: TerminateSessionsForTokenCommand internal: true. 2025-05-06 16:47:16,581-04 INFO [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] No permission found for user '467363ac-bd4d-48c7-9ca1-9b7e7d81470a' or one of the groups he is member of, when running action 'AddVds', Required permissions are: Action type: 'ADMIN' Action group: 'CREATE_HOST' Object type: 'Cluster' Object ID: '9bdf3276-2aba-11f0-aebc-4c7e5dafee16'. 2025-05-06 16:47:16,581-04 WARN [org.ovirt.engine.core.bll.hostdeploy.AddVdsCommand] (default task-4) [0da5cf58-f89d-4587-ba9c-efb562a7a57e] Validation of action 'AddVds' failed for user admin@ovirt@internalkeycloak-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__HOST,$server ac5conbtafsnatgw01.gw.beta.fsn.nadops.net,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2025-05-06 16:47:16,592-04 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-4) [] Operation Failed: [User is not authorized to perform this action.] 2025-05-06 16:47:19,307-04 INFO [org.ovirt.engine.core.sso.service.ExternalOIDCService] (default task-4) [] User admin@ovirt@internalkeycloak-authz with profile [internalsso] successfully logged into external OP with scopes: ovirt Any help diagnosing this issue would be appreciated. My assumption is that VNICS_OUT_OF_SYNC_ON_NETWORK_UPDATE is what is causing the issue but I’m not sure how to get the networks in sync since everything is being done via the internal ovirt ansible collection. Thanks!

1 0