- Users - oVirt List Archives

Re: [External] : open v-switch woes
by Marcos Sungaila 11 Nov '24

11 Nov '24

Rephrasing my last e-mail: Working with open vswitch at the ovirt infrastructure level is NOT an easy task. Marcos From: Marcos Sungaila via Users <users(a)ovirt.org> Sent: Monday, November 11, 2024 9:57 AM To: Tim Walsh <mr_tim_walsh(a)hotmail.com>; users(a)ovirt.org Subject: [ovirt-users] Re: [External] : open v-switch woes Tim, Working with open vswitch at the ovirt infrastructure level is an easy task. Here you have some steps to start with it. Deploying an OVN enabled system have the following requirements: * Stand-alone Engine installed on a bare metal or a VM outside the ovirt cluster. Running SHE is not possible since the default cluster will use Linux bridges, not openvswitch * No extra packages are required * After the Engine is deployed, create a new cluster, set the switch type to OVS and the default network provider to ovirt-provider-ovn * Add a host to the new cluster, note that migrating a host from a Linux bridge cluster to OVS may fail and may require you to clean-up all network configuration before joining the host to the right cluster. * In the network menu, you will need to create an ovn network for each tagged vlan, as well as for the untagged network you may have * If you enable network port security, you will need to create security groups and security rules before any communication can happen between instances, and to/from external ips Marcos From: Tim Walsh <mr_tim_walsh(a)hotmail.com<mailto:mr_tim_walsh@hotmail.com>> Sent: Friday, October 25, 2024 6:00 PM To: Marcos Sungaila <marcos.sungaila(a)oracle.com<mailto:marcos.sungaila@oracle.com>>; users(a)ovirt.org<mailto:users@ovirt.org> Subject: Re: [External] : [ovirt-users] open v-switch woes Yes, not only a desire to replicate the functionality of V-Switches on VM-Ware, but also to have an isolated test environment. Create a virtual firewall (using Opensense or pfSense or something) and create VMs behind the firewall that can all talk to each other, but the firewall only passes out the application traffic (for example a web app on Nginx, or Remote Desktop to the private Environment). Microsoft Hyper-V has "private" and "internal" switches that can be set up, (and thats the case on either a standalone or a cluster) so I figured oVirt must have something similar if not the same. these may or may not necessarily be tagged to a VLAN on a physical switch. Thanks, Tim ________________________________ From: Marcos Sungaila <marcos.sungaila(a)oracle.com<mailto:marcos.sungaila@oracle.com>> Sent: Thursday, October 24, 2024 4:22 PM To: Tim Walsh <mr_tim_walsh(a)hotmail.com<mailto:mr_tim_walsh@hotmail.com>>; users(a)ovirt.org<mailto:users@ovirt.org> <users(a)ovirt.org<mailto:users@ovirt.org>> Subject: RE: [External] : [ovirt-users] open v-switch woes Hey Tim, Deploying an OVN-enabled cluster is not that trivial. There are many caveats to make it run. Is there any special use case you need to address to use OVS/OVN? Marcos From: Tim Walsh <mr_tim_walsh(a)hotmail.com<mailto:mr_tim_walsh@hotmail.com>> Sent: Thursday, October 24, 2024 12:28 AM To: users(a)ovirt.org<mailto:users@ovirt.org> Subject: [External] : [ovirt-users] open v-switch woes Hey community, I'm trying to get open v-switch set up to work like it does in VMware. I am running Rocky Linux 8.9 and oVirt 4.5.5 (el8) I got the repos but online feedback recommends installing openvswitch, and ovn-northd, ovn-central and ovn-host I got openvswitch installed, but the other three: ovn-northd, ovn-central and ovn-host seemt o be elusive even after adding the CentOS-Advanced-Virtualization.repo and uipdating all "CentOS-" repost to point to "vault" instead of "mirrorlist" Can someo0ne help me with what I'm missing? I've tried Bing CoPilot and ChatGPT LOL but they say add that repo and install those packages. Thanks, Tim

1 0

Re: [External] : open v-switch woes
by Marcos Sungaila 11 Nov '24

11 Nov '24

Tim, Working with open vswitch at the ovirt infrastructure level is an easy task. Here you have some steps to start with it. Deploying an OVN enabled system have the following requirements: * Stand-alone Engine installed on a bare metal or a VM outside the ovirt cluster. Running SHE is not possible since the default cluster will use Linux bridges, not openvswitch * No extra packages are required * After the Engine is deployed, create a new cluster, set the switch type to OVS and the default network provider to ovirt-provider-ovn * Add a host to the new cluster, note that migrating a host from a Linux bridge cluster to OVS may fail and may require you to clean-up all network configuration before joining the host to the right cluster. * In the network menu, you will need to create an ovn network for each tagged vlan, as well as for the untagged network you may have * If you enable network port security, you will need to create security groups and security rules before any communication can happen between instances, and to/from external ips Marcos From: Tim Walsh <mr_tim_walsh(a)hotmail.com> Sent: Friday, October 25, 2024 6:00 PM To: Marcos Sungaila <marcos.sungaila(a)oracle.com>; users(a)ovirt.org Subject: Re: [External] : [ovirt-users] open v-switch woes Yes, not only a desire to replicate the functionality of V-Switches on VM-Ware, but also to have an isolated test environment. Create a virtual firewall (using Opensense or pfSense or something) and create VMs behind the firewall that can all talk to each other, but the firewall only passes out the application traffic (for example a web app on Nginx, or Remote Desktop to the private Environment). Microsoft Hyper-V has "private" and "internal" switches that can be set up, (and thats the case on either a standalone or a cluster) so I figured oVirt must have something similar if not the same. these may or may not necessarily be tagged to a VLAN on a physical switch. Thanks, Tim ________________________________ From: Marcos Sungaila <marcos.sungaila(a)oracle.com<mailto:marcos.sungaila@oracle.com>> Sent: Thursday, October 24, 2024 4:22 PM To: Tim Walsh <mr_tim_walsh(a)hotmail.com<mailto:mr_tim_walsh@hotmail.com>>; users(a)ovirt.org<mailto:users@ovirt.org> <users(a)ovirt.org<mailto:users@ovirt.org>> Subject: RE: [External] : [ovirt-users] open v-switch woes Hey Tim, Deploying an OVN-enabled cluster is not that trivial. There are many caveats to make it run. Is there any special use case you need to address to use OVS/OVN? Marcos From: Tim Walsh <mr_tim_walsh(a)hotmail.com<mailto:mr_tim_walsh@hotmail.com>> Sent: Thursday, October 24, 2024 12:28 AM To: users(a)ovirt.org<mailto:users@ovirt.org> Subject: [External] : [ovirt-users] open v-switch woes Hey community, I'm trying to get open v-switch set up to work like it does in VMware. I am running Rocky Linux 8.9 and oVirt 4.5.5 (el8) I got the repos but online feedback recommends installing openvswitch, and ovn-northd, ovn-central and ovn-host I got openvswitch installed, but the other three: ovn-northd, ovn-central and ovn-host seemt o be elusive even after adding the CentOS-Advanced-Virtualization.repo and uipdating all "CentOS-" repost to point to "vault" instead of "mirrorlist" Can someo0ne help me with what I'm missing? I've tried Bing CoPilot and ChatGPT LOL but they say add that repo and install those packages. Thanks, Tim

1 0

Re: [External] : Adding ISO doesn't work
by sol-pl-cm＠nttdata.com 08 Nov '24

08 Nov '24

Hi, Unfortunately, the proposed solution did not help. "Connection to ovirt-imageio service has failed. Ensure that ovirt-engine certificate is registered as a valid CA in the browser." and status "Paused by system" if I try to send the ISO anyway. Is there anything else I can check or improve?

2 1

Images upload - Content Security Policy
by jiri.mikulas＠mibcon.cz 08 Nov '24

08 Nov '24

Hello I'm using Oracle Linux with ovirt-engine 4.5.5-1.22.el8 Operating System: Oracle Linux Server 8.10 Kernel: Linux 5.15.0-301.163.5.2.el8uek.x86_64 After upgrading from ovirt-engine version 4.5.5-1.21.el8 to version 4.5.5-1.22.el8, there seems to be an issue with uploading images. When trying to test the connection for uploading images using Storage -> Domains -> MyStorage -> Disks -> Upload I debugged network communication in "chrome inspect" and received the error: "Refused to connect to https://ovirt-engine:54323/info/ because it appears in neither the connect-src directive nor the default-src directive of the Content Security Policy." Has anyone encountered this problem? I have the CA certificate properly imported since version 4.5.5-1.21.el8, where the uploads worked normally. Regards Jiri

2 1

Adding ISO doesn't work
by sol-pl-cm＠nttdata.com 08 Nov '24

08 Nov '24

I have a problem adding ISO. Fresh installation of OracleLinux-R8-U10 with Ovirt Version:4.5.5-1.22.el8 installed on it. I've already gone through all possible forums and threads with a similar problem, but none of them have been solved, and I haven't been able to solve the ISO problem either. Engine is installed as a virtual machine on VMware and manages two KVM hosts (also a fresh install). I replaced the certificates for the test, but it didn't help and I went back to the old configuration. I keep getting a certificate error when running the test, even though I added it to the browser. I tested on different browsers. "Connection to ovirt-imageio service has failed. Ensure that ovirt-engine certificate is registered as a valid CA in the browser." Can I get help here?

2 1

Need advice before building a new oVirt Environment
by gbigras＠telesat.com 08 Nov '24

08 Nov '24

My question will be down below but before that here is some background info: I currently have a functioning oVirt env (v4.5.7) with two self-hosted nodes (hand-me-down servers) and shared storage (TrueNAS server) with three data domains: one for the EngineVM (iSCSI), one for the VMs (iSCSI) and one for ISO files (NFS). The powers that be, want to move away from TrueNAS and hand-me-downs and have new servers and a new NAS appliance (most likely NetApp). They are the ones who did not want to spend the money on new gear but now they have changed their minds. I wish that I could have started my oVirt env on the new equipment. This new equipment will take at best 2 months to arrive. In the meantime, I have to create various VMs in my existing environment. Once my new gear arrives, what is the recommended approach: 1 - Start from scratch with a new datacenter/cluster env? Can I migrate VMs from one DC to another? The docs seem to say no. I'm guessing, I would have to export first, then import. 2 - Can my new equipment be part of the same DC but a different cluster? I was thinking that option #2 is the right approach. I could start with storage (ie: new NetApp) as part of the new cluster. Once that is part of the cluster, I can add hosts then finally migrate VMs. What say you? thank you in advance.

4 3

Ovirt Storage Monitoring behind RAID
by ankit＠eurus.net 05 Nov '24

05 Nov '24

Hi Folks, I have recently build Ovirt 4.5 cluster with server(DellXC 360 and 730xd) as storage using iscsi target where i want to monitor disks behing RAID(Perc Card). How can i monitor disks in ovirt itself ? Thanks. AS

2 1

Preparing to issue an oVirt release post Red Hat offboarding
by Sandro Bonazzola 01 Nov '24

01 Nov '24

Hi, Oracle fixed CVE-2024-7259 ( https://github.com/oVirt/ovirt-engine/security/advisories/GHSA-8xjm-j7fq-3w… ) in oVirt Engine and would be nice to issue an oVirt Engine release including the fix. As the current master also includes support for new cluster level 4.8, VDSM needs to be released as well providing cluster level 4.8. As you know, Red Hat offboarded the project and as such there are no more people officially assigned to the project from the company, despite a few of the historical developers still spend some of their free time helping out. I can help building the packages and getting them out on my free time but I have no capacity for doing any testing or documentation updates or release notes related to this release. Last oVirt Engine (4.5.6) was also released last February without any formal release announce. Any volunteer to look into differences between current master and current stable release and see if anything else needs to be released other than ovirt-engine and vdsm? Any volunteer to write release notes and update the website accordingly? Any volunteer to run ovirt-system-test on https://github.com/oVirt/ovirt-engine/pull/970 and https://github.com/oVirt/vdsm/pull/422 as OST doesn't run anymore on GitHub? Regards, -- Sandro Bonazzola

3 5

Installation of hosts on RHEL9
by Fabrice Bacchella 31 Oct '24

31 Oct '24

Hi, I’m migrating to oVirst 4.7 and RHEL9. The engine is up and running but I have problems testing adding new hosts. It fails running the command: sudo vdsm-tool ovn-config $IP $FQDN. The message is Traceback (most recent call last): File "/usr/lib/python3.9/site-packages/vdsm/tool/ovn_config.py", line 118, in get_network return networks[net_name] KeyError: '$FQDN' And indeed if I print net_caps in the method net_caps of ovn_config, it says: {'networks': {} ... I have been unable to understand where this information is coming from, what is missing in my host ? Are they the networks as configured in the engine ?

1 1

HostedEngine VM doesn't start because in QXL video type mode
by Mario Indelicato 31 Oct '24

31 Oct '24

Hi, I don't know how this happened but after an host reboot, the HostedEngine VM didn't started anymore. The error in the log is: "unsupported configuration: domain configuration does not support video model 'qxl'" This is a single host test environment, OS is Rocky 9.4, so I know it's expected that QXL video is not supported anymore. I tried editing the HostedEngine VM configuration via virsh, but when I start the VM it keeps trying to use QXL. Also the VM conf in "/var/run/ovirt-hosted-engine-ha/vm.conf" says the video type is always QXL. I tried dumping the XML configuration, edit the XML, undefined e re-define the VM from the updated XML, but still it uses QXL!!! I'm resigned myself that the only solution is to re-deploy the HostedEngine from scratch. Unless some of you can provide an alternative solution. Many thanks in advance Mario

1 0