Re: [ovirt-users] [Gluster-users] Raid-5 like gluster method?
Hi, Do you recommend this featrue for productive environment? Tibor - Eredeti üzenet - use 3.6 disperse feature, but it is beta2 now, you could use it when it is GA On Wed, Sep 24, 2014 at 2:55 PM, Sahina Bose sab...@redhat.com wrote: [+gluster-users] On 09/24/2014 11:59 AM, Demeter Tibor wrote: Hi, Is there any method in glusterfs, like raid-5? I have three node, each node has 5 TB of disk. I would like utilize all of space with redundancy, like raid-5. If it not possible, can I make raid-6 like redundanci within three node? (two brick/node?). Thanks in advance, Tibor ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Gluster-users mailing list gluster-us...@gluster.org http://supercolony.gluster.org/mailman/listinfo/gluster-users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt Node 3.5 20140912 for the TestDay
- Original Message - Hi. I have a issue with 3.1.0_master (20140912.0) on following hardware: ProLiant BL460c Gen8 FLB Adapter 1: HP FlexFabric 10Gb 2-port 554FLB Adapter I can install node but when booting the server I get I/O errors as if LUN is offline. Hey Raul, can you describe these errors or provide a screenshot/log? Logging into admin (TUI) console is not possible. If I reboot and set the rootpw I can log in and see that /var/log is mounted read-only: mount: cannot remount block device /dev/mapper/HostVG-Logging read-write, is write-protected multipath -ll shows that all paths are OK, but if I look at dmesg ouput, I see device-mapper: multipath: Failing path x:xx. was logged at boot for all paths. I have successfully installed previous node iso version (3.0) and plain CentOS on this hardware. Did you try booting in permissive mode (appending enforcing=0 to the kernel cmdline). Greetings fabian Can you help? - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Fabian Deutsch fdeut...@redhat.com Cc: users users@ovirt.org, de...@ovirt.org Sent: Wednesday, 17 September, 2014 2:50:19 PM Subject: Re: [ovirt-users] oVirt Node 3.5 20140912 for the TestDay On 17.09.2014 13:23, Fabian Deutsch wrote: Hey Daniel, - Original Message - Hello Fabian, I do not know if the feature has made it - can I run a hosted engine with node? Yep - That is one of the things under test :) Great! This is a major node feature for me. Sadly I can't make it in time for the 3rd test day, but latest next week I'll give it a shot (and maybe there will be a 4th test day, since I have FC HBAs in my lab machines - Sven complained about that) Cheers. The iso below includes hosted engine support, that means, Node contains a page which you can use to start the hosted engine setup. Please note that the appliance which is intended for hosted-engine (ovirt-engine-appliance) is currently broken, but hosted-engine setup can be run without using that appliance. You just need to setup your own OS and oVirt. - fabian Thanks! On 16.09.2014 21:57, Fabian Deutsch wrote: Hey, to be able to give Node a go on the oVirt 3.5 TestDay, we provide a fresh build of Node including the 3.5rc2 package here: http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ovirt-node-iso-3.5.0.ovirt35.20140912.el6.iso We did not see any SELinux denials, but if you experience any problems, please try to install Node in permissive mode by appending enfcoring=0 during the installation. Any feedback and bug reports are welcome. On behalf of the Node team - fabian ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.0 status - Go / No Go
Hi, We were supposed to start composing oVirt 3.5.0 GA today 2014-09-29 but we still have 3 blockers. Maintainers: - Please be sure that 3.5 snapshot satisfy release criteria[9] - Please be sure that no pending patches are going to block the release - If any patch must block the GA release please raise the issue as soon as possible. - If any packages need a rebase please raise the issue as soon as possible. - Be aware that packages that doesn't need a rebase must be re-built with final release versioning from the RC3 tag. - Please provide ETA for new blockers for rescheduling an RC4 and a GA release. The bug tracker [1] shows 3 blockers: Bug ID Whiteboard Status Summary 1147085 storage POSTMemory volumes not deleted when removing a vm with snapshots 1146073 sla POSTFailing to Attach a Storage Domain without Disk Profiles to a Data Center 3.5 1127460 storage NEW VM abnormal stop after LV refreshing when using thin provisioning on block storage The following bugs are keyworded as Regression and not marked as blockers[10] Bug ID Whiteboard Status Summary 1142647 gluster NEW supervdsm leaks memory when using glusterfs 1138144 storage NEW Failed to autorecover storage domain after unblocking connection with host 1147085 storage POSTMemory volumes not deleted when removing a vm with snapshots 1118349 storage NEW [vdsm] Creating DataCenter 3.5 using master domain V1 fails with InquireNotSupportedError Feature freeze is now effective, and branch has been created. All new patches must be backported to 3.5 branch too. Features completed are marked in green on Features Status Table [2] There are still 69 bugs [3] targeted to 3.5.0. Excluding node and documentation bugs we still have 46 bugs [4] targeted to 3.5.0. More in detail [5]: Whiteboard NEW ASSIGNEDPOSTTotal docs13 1 0 14 gluster 4 0 2 6 i18n0 0 1 1 infra 1 0 0 1 integration 0 0 1 1 node9 4 0 13 ppc 2 0 4 6 sla 10 0 3 13 storage 2 1 3 6 virt3 1 4 8 Total 44 7 18 69 Maintainers / Assignee: - Please ensure that completed features are marked in green on Features Status Table [2] - If you find a blocker bug please remember to add it to the tracker [1] - Please fill release notes, the page has been created here [6] - Please review results from Third Test Day on the etherpad [7] and on the mailing lists - Please update the target to 3.5.1 or later for bugs that won't be in 3.5.0: it will ease gathering the blocking bugs for next releases. Community: - You're welcome to join us testing last release candidate or nightly builds and getting involved in oVirt Quality Assurance[8] [1] http://bugzilla.redhat.com/1073943 [2] http://goo.gl/4SuYdE [3] http://red.ht/1pVEk7H [4] http://red.ht/1zT2mSq [5] http://red.ht/1q7SqNL [6] http://www.ovirt.org/OVirt_3.5_Release_Notes [7] http://etherpad.ovirt.org/p/3.5-testday-3 [8] http://www.ovirt.org/OVirt_Quality_Assurance [9] http://www.ovirt.org/OVirt_3.5_release-management#Release_Criteria_.28WIP.29 [10] http://goo.gl/uavikG Thanks, -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Problems with datacenter after update to 3.4.4
Hello, After the upgrade to 3.4.4 this weekend I'm having troubles with my datacenter. It is non responsive. No data, iso, or import-export domains can be connected. Please tell me what to do ? Kind regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Messed up UI and missing CSS
On 09/28/2014 09:18 PM, Mooli Tayer wrote: - Original Message - Can you 'sudo yum updatedb' 'locate style.min.css' Any chance this is styles.min.css ? Yes, my mistake and let me know where it lives on your system? Sadly, it doesn't: [root@engine ~]# updatedb [root@engine ~]# locate styles.min.css [root@engine ~]# And can you tell me what the full URL of the 404 is? The full URL for the css is: https://xx/ovirt-engine/webadmin/theme/00-ovirt.brand/patternfly/css/styles.min.css I have one such directory that is named 00-ovirt.brand on the server, and its patternfly/css dir contains the following: patternfly.css patternfly.min.css (The above is on a machine where latest master rpms are installed that exhibits similar behavior, can check again with 3.5 rpms in a few hours) Thanks, Greg - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Greg Sheremeta gsher...@redhat.com, users@ovirt.org Sent: Sunday, September 28, 2014 11:54:25 AM Subject: Messed up UI and missing CSS Hello, I am using rpms from the ovirt-3.5 repositories on ovirt.org, to install and deploy ovirt-engine, and the UI I get in Firefox (f19) looks like the attached screenshot. I'm installing engine rpms on CentOS 6.5, and have patternfly1 rpm installed there as well. When using web inspector, the browser tries to retrieve style.min.css but gets a 404. Is there anything that I am missing? -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] problems with win 2008_64 vm
- Original Message - From: Grant Pasley gr...@xtranet.com.au To: Omer Frenkel ofren...@redhat.com Cc: Markus Stockhausen stockhau...@collogia.de, users@ovirt.org Sent: Monday, September 29, 2014 5:34:45 AM Subject: Re: [ovirt-users] problems with win 2008_64 vm good morning the events sub tab shows the server was started by admin, but nothing further, even when the vm pauses itself. please see attached the vdsm.log file for this host. thanks, grant. thank you, i didnt see anything suspicious in the vdsm.log next step is to check if you see any error/clue in the libvirt.log or even qemu log for the vm? On 9/28/2014 1:34 PM, Omer Frenkel wrote: - Original Message - From: Grant Pasley gr...@xtranet.com.au To: Markus Stockhausen stockhau...@collogia.de Cc: users@ovirt.org Sent: Sunday, September 28, 2014 6:22:15 AM Subject: Re: [ovirt-users] problems with win 2008_64 vm good morning sorry the server is centos 6.5: 2.6.32-431.29.2.el6.x86_64 #x86_64 x86_64 x86_64 GNU/Linux the vm does not get as far as loading windows before pausing, so i cannot deactivate windows settings, although 2008 server does not by default thanks grant does it happen to all the vms or just this one? please look at the events sub tab for this vm, there should be the pause reason if not, please attach vdsm.log for the host that runs the vm On 9/27/2014 8:28 AM, Markus Stockhausen wrote: Are you running FC20 on the hypervisor host and if yes what kernel? Am 27.09.2014 02:39 schrieb Grant Pasley gr...@xtranet.com.au : good morning guys i have an issue with my 2008 vm going to pause within 5 secs of starting it up. new install of ovirt 3.4.4 on hp dl160, installed the windows vm and windows drivers etc and it was running fine. did a reboot last night and went to bed, i see this morning the server is not accessible and when i login to the web gui it is paused. stop vm and restart the server starts firing up and then goes to pause mode with the following message from the ovirt-engine log. i dont think it is a windows problem as the vm pauses before it even starts trying to load windows server: 2014-09-27 10:28:58,738 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-6-thread-49) [74bf3eb0] Correlation ID: 74bf3eb0, Job ID: 5584a4e6-7ce2-4c2f-8278-3b0cdbc48d19, Call Stack: null, Custom Event ID: -1, Message: VM 2008-server was started by admin (Host: local_host). 2014-09-27 10:29:01,667 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-99) VM 2008-server 067fcde9-99ea-46cd-a5b6-46396e0e6f62 moved from WaitForLaunch -- PoweringUp 2014-09-27 10:29:06,211 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-1) [1e9b8c1d] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 067fcde9-99ea-46cd-a5b6-46396e0e6f62 Type: VM 2014-09-27 10:29:06,215 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-1) [1e9b8c1d] START, SetVmTicketVDSCommand(HostName = local_host, HostId = 3e605ec1-a6dd-43c6-9425-cbc21ac63bf4, vmId=067fcde9-99ea-46cd-a5b6-46396e0e6f62, ticket=RzYGHR4OBS8F, validTime=120,m userName=admin, userId=fdfc627c-d875-11e0-90f0-83df133b58cc), log id: 45ae9369 2014-09-27 10:29:06,384 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-1) [1e9b8c1d] FINISH, SetVmTicketVDSCommand, log id: 45ae9369 2014-09-27 10:29:06,413 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-1) [1e9b8c1d] Correlation ID: 1e9b8c1d, Call Stack: null, Custom Event ID: -1, Message: user admin initiated console session for VM 2008-server 2014-09-27 10:29:07,854 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-48) VM 2008-server 067fcde9-99ea-46cd-a5b6-46396e0e6f62 moved from PoweringUp -- Paused thanks grant. This email is free from viruses and malware because avast! Antivirus protection is active. This email is free from viruses and malware because avast! Antivirus protection is active. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] problems with win 2008_64 vm
Just a doubt... is this on a physical infra or is it nested virtualization? Because in the past I had similar problems I was not able to solve with oVirt hypervisors that were VM in vSphere and had the same problems... See http://lists.ovirt.org/pipermail/users/2013-October/016752.html in my case this happened only using spice as console, while with vnc I was able to access ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Problems with datacenter after update to 3.4.4
On 09/29/2014 11:42 AM, Andy Michielsen wrote: Hello Itamar, In attachement I send you my engine log. Kind regards. 2014-09-29 10:29 GMT+02:00 Itamar Heim ih...@redhat.com mailto:ih...@redhat.com: On 09/29/2014 10:02 AM, Andy Michielsen wrote: Hello, After the upgrade to 3.4.4 this weekend I'm having troubles with my datacenter. It is non responsive. No data, iso, or import-export domains can be connected. Please tell me what to do ? Kind regards. _ Users mailing list Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/__mailman/listinfo/users http://lists.ovirt.org/mailman/listinfo/users attach engine logs to begin with. I see a lot of NPEs around ImageSnapshots in various flows in the logs. Allon? 2014-09-29 02:15:28,282 ERROR [org.ovirt.engine.core.bll.OvfDataUpdater] (DefaultQuartzScheduler_Worker-69) Exception while trying to update or remove VMs/Templates ovf in Data Center Default.: java.lang.NullPointerException at org.ovirt.engine.core.bll.ImagesHandler.getAllImageSnapshots(ImagesHandler.java:371) [bll.jar:] at org.ovirt.engine.core.bll.OvfDataUpdater.getAllImageSnapshots(OvfDataUpdater.java:316) [bll.jar:] at org.ovirt.engine.core.bll.OvfDataUpdater.buildMetadataDictionaryForVm(OvfDataUpdater.java:332) [bll.jar:] at org.ovirt.engine.core.bll.OvfDataUpdater.populateVmsMetadataForOvfUpdate(OvfDataUpdater.java:246) [bll.jar:] at org.ovirt.engine.core.bll.OvfDataUpdater.updateOvfForVmsOfStoragePool(OvfDataUpdater.java:132) [bll.jar:] at org.ovirt.engine.core.bll.OvfDataUpdater.ovfUpdate_timer(OvfDataUpdater.java:93) [bll.jar:] at sun.reflect.GeneratedMethodAccessor173.invoke(Unknown Source) [:1.7.0_65] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_65] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_65] at org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:60) [scheduler.jar:] at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:] at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) [quartz.jar:] and 2014-09-28 11:13:52,961 ERROR [org.ovirt.engine.core.bll.RemoveVmCommand] (ajp--127.0.0.1-8702-1) [3fe399f7] Error during CanDoActionFailure.: java.lang.NullPointerException at org.ovirt.engine.core.bll.ImagesHandler.getAllImageSnapshots(ImagesHandler.java:371) [bll.jar:] at org.ovirt.engine.core.bll.ImagesHandler.fillImagesBySnapshots(ImagesHandler.java:517) [bll.jar:] at org.ovirt.engine.core.bll.RemoveVmCommand.getQuotaStorageConsumptionParameters(RemoveVmCommand.java:361) [bll.jar:] at org.ovirt.engine.core.bll.CommandBase.getQuotaConsumptionParameters(CommandBase.java:681) [bll.jar:] at org.ovirt.engine.core.bll.CommandBase.internalValidateAndSetQuota(CommandBase.java:772) [bll.jar:] at org.ovirt.engine.core.bll.CommandBase.internalCanDoAction(CommandBase.java:739) [bll.jar:] at org.ovirt.engine.core.bll.CommandBase.canDoActionOnly(CommandBase.java:325) [bll.jar:] at org.ovirt.engine.core.bll.MultipleActionsRunner.execute(MultipleActionsRunner.java:76) [bll.jar:] and 2014-09-28 11:13:50,795 ERROR [org.ovirt.engine.core.bll.GetAllDisksByVmIdQuery] (ajp--127.0.0.1-8702-4) Query GetAllDisksByVmIdQuery failed. Exception message is null : java.l ang.NullPointerException: java.lang.NullPointerException at org.ovirt.engine.core.bll.ImagesHandler.getAllImageSnapshots(ImagesHandler.java:371) [bll.jar:] at org.ovirt.engine.core.bll.GetAllDisksByVmIdQuery.getAllImageSnapshots(GetAllDisksByVmIdQuery.java:43) [bll.jar:] at org.ovirt.engine.core.bll.GetAllDisksByVmIdQuery.executeQueryCommand(GetAllDisksByVmIdQuery.java:36) [bll.jar:] at org.ovirt.engine.core.bll.QueriesCommandBase.executeCommand(QueriesCommandBase.java:66) [bll.jar:] at org.ovirt.engine.core.dal.VdcCommandBase.execute(VdcCommandBase.java:31) [dal.jar:] at org.ovirt.engine.core.bll.Backend.runQueryImpl(Backend.java:482) [bll.jar:] at org.ovirt.engine.core.bll.Backend.runQuery(Backend.java:459) [bll.jar:] at sun.reflect.GeneratedMethodAccessor52.invoke(Unknown Source) [:1.7.0_65] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 3.4: VDSM Memory consumption
Dan, I just reply to the list since I do not want to clutter BZ: While migrating VMs is easy (and the sampling is already running), can someone tell me the correct polling port to block with iptables? Thanks, On 27.09.2014 13:18, Daniel Helgenberger wrote: Hallo Dan, I just opened a BZ aginst this [1]. Please let me know if I can be of further assistance. I stopped the cron script for now, so vdsm can 'grow nicely' (about 91.5 MB per 6hrs) Cheers, [1] https://bugzilla.redhat.com/show_bug.cgi?id=1147148 On 24.09.2014 19:20, Dan Kenigsberg wrote: On 01.09.2014 18:08, Dan Kenigsberg wrote: On Mon, Sep 01, 2014 at 03:30:53PM +, Daniel Helgenberger wrote: Hello, in my LAB cluster I run into OOM conditions frequently because of a huge VDSM process. The memory stats from my nodes right now: Node A; running one VM: PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 3465 vdsm 0 -20 18.6g 9.8g 8244 S 32.1 50.3 27265:21 vdsm 7439 qemu 20 0 5641m 4.1g 4280 S 22.9 20.9 12737:08 qemu-kvm 2912 root 15 -5 2710m 35m 5968 S 0.0 0.2 0:04.76 supervdsmServer Node B, running 3 VMs including HosedEngine: PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 9079 vdsm 0 -20 9.9g 5.0g 7496 S 49.7 43.0 11858:06 vdsm 3347 qemu 20 0 7749m 1.8g 5264 S 4.3 15.8 3:25.71 qemu-kvm 18463 qemu 20 0 3865m 415m 5516 R 1.6 3.5 359:15.24 qemu-kvm 11755 qemu 20 0 3873m 276m 5336 S 80.5 2.3 21639:39 qemu-kvm Basically VDSM consumes more then all my VMs. I thought of VDSM as a 'supervisor' process for qemu-kvm? I attached recend vdsm logs as well as a screen shot. Thanks for your report. It sounds like Bug 1130045 - Very high memory consumption which we believe is due to python-ioprocess. On Wed, Sep 24, 2014 at 03:39:25PM +, Daniel Helgenberger wrote: Hi Dan, just to get this right, you yourself pointed me to the BZ. I was looking at the duplicate, since the metadata tags 3.4. Sorry my lack of knowlage, I really have no idea whatever there is an ioprocess python binding in 3.4 or not - I just see vdsmd resident size growing in 3.4. The top output below was from 3.4.3; I just upgraded to 3.4.4. But clearly vdsmd should not use 10GB RAM? I'm sorry to have mislead you. The bug I refered to was indeed due to ioprocess, and caused a very dramatic memory leak in 3.5. We have yet another memory leak in 3.5.0, when managing gluster blocks Bug 1142647 - supervdsm leaks memory when using glusterfs 3.4.z does not use ioprocess, and do not have that gluster bug, so you are seeing completely different and much older. These leaks are not so easy to debug - but they are important. I'd love if you open a BZ about it. Please specify the rate of the leak, when does it happen (when a host has VMs? when a host is polled by Engine? On nfs? iscsi? What's `lsof -p pid-of-fat-vdsm`? I think that Francesco has some debug patches to help nail it down - he can provide smarter questions. Dan. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Messed up UI and missing CSS
- Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Mooli Tayer mta...@redhat.com, Greg Sheremeta gsher...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 3:05:26 AM Subject: Re: [ovirt-users] Messed up UI and missing CSS On 09/28/2014 09:18 PM, Mooli Tayer wrote: - Original Message - Can you 'sudo yum updatedb' 'locate style.min.css' Any chance this is styles.min.css ? Yes, my mistake and let me know where it lives on your system? Sadly, it doesn't: [root@engine ~]# updatedb [root@engine ~]# locate styles.min.css [root@engine ~]# And can you tell me what the full URL of the 404 is? The full URL for the css is: https://xx/ovirt-engine/webadmin/theme/00-ovirt.brand/patternfly/css/styles.min.css I have one such directory that is named 00-ovirt.brand on the server, and its patternfly/css dir contains the following: patternfly.css patternfly.min.css (The above is on a machine where latest master rpms are installed that exhibits similar behavior, can check again with 3.5 rpms in a few hours) Thanks. What is the output of 'yum list installed |grep patternfly' ? Thanks, Greg - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Greg Sheremeta gsher...@redhat.com, users@ovirt.org Sent: Sunday, September 28, 2014 11:54:25 AM Subject: Messed up UI and missing CSS Hello, I am using rpms from the ovirt-3.5 repositories on ovirt.org, to install and deploy ovirt-engine, and the UI I get in Firefox (f19) looks like the attached screenshot. I'm installing engine rpms on CentOS 6.5, and have patternfly1 rpm installed there as well. When using web inspector, the browser tries to retrieve style.min.css but gets a 404. Is there anything that I am missing? -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVirt node vdsm certificate issue
Hi. I have configured Engine webservice to use certificate issued by internal CA. According to http://www.ovirt.org/Features/PKI the CA certificates must be in /etc/pki/ovirt-engine/apache-ca.pem. I have kept the self signed (Engine internal) certificate (previously linked from /etc/pki/ovirt-engine/apache-ca.pem to /etc/pki/ovirt-engine/ca.pem) in /etc/pki/ovirt-engine/ca.pem. When I want to approve/install node host, the /etc/pki/ovirt-engine/apache-ca.pem file is downloaded to node as /etc/pki/vdsm/certs/cacert.pem. Because vdsmcert.pem is not signed by this CA, libvirt fails to start. How should I set up Engine local and internal CA files, so that they would not conflict? oVirt Node Hypervisor release 3.0.4 (1.0.201401291204.el6) oVirt Engine Version: 3.4.3-1.el6 Thank you --- Raul Laansoo ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt node vdsm certificate issue
- Original Message - From: Raul Laansoo raul.laan...@bigbank.ee To: users users@ovirt.org Sent: Monday, September 29, 2014 2:40:33 PM Subject: [ovirt-users] oVirt node vdsm certificate issue Hi. I have configured Engine webservice to use certificate issued by internal CA. According to http://www.ovirt.org/Features/PKI the CA certificates must be in /etc/pki/ovirt-engine/apache-ca.pem. I have kept the self signed (Engine internal) certificate (previously linked from /etc/pki/ovirt-engine/apache-ca.pem to /etc/pki/ovirt-engine/ca.pem) in /etc/pki/ovirt-engine/ca.pem. When I want to approve/install node host, the /etc/pki/ovirt-engine/apache-ca.pem file is downloaded to node as /etc/pki/vdsm/certs/cacert.pem. Because vdsmcert.pem is not signed by this CA, libvirt fails to start. How should I set up Engine local and internal CA files, so that they would not conflict? Hello, What have you changed apart from the above? What certificate do you get out of: curl http://@HOST@/ovirt-engine/services/pki-resource?resource=ca-certificate Alon oVirt Node Hypervisor release 3.0.4 (1.0.201401291204.el6) oVirt Engine Version: 3.4.3-1.el6 Thank you --- Raul Laansoo ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt-engine 3.5 rpm missing for el7
On 09/23/2014 05:29 AM, SULLIVAN, Chris (WGK) wrote: Hi, The below response from Sandro on 12/08 in appears to answer the first question: Is there any roadmap for supporting ovirt-engine on centos 7 ? It's not in 3.5 features so it will probably land in 3.6. You can install oVirt Hosted Engine on centos 7 host and use centos 6.5 for the engine VM only. As to the second question – the above response implies that mixing el6 engine with el7 hosts with ovirt 3.5 is ok. However just to confirm, is anyone running this combination and if so did you experience any major issues or missing/broken functionality? Cheers, Chris Sullivan PLEASE CONSIDER THE ENVIRONMENT, DON'T PRINT THIS EMAIL UNLESS YOU REALLY NEED TO. This email and its attachments may contain information which is confidential and/or legally privileged. If you are not the intended recipient of this e-mail please notify the sender immediately by e-mail and delete this e-mail and its attachments from your computer and IT systems. You must not copy, re-transmit, use or disclose (other than to the sender) the existence or contents of this email or its attachments or permit anyone else to do so. *From:*SULLIVAN, Chris (WGK) *Sent:* Tuesday, September 23, 2014 9:55 AM *To:* 'users@ovirt.org' *Subject:* ovirt-engine 3.5 rpm missing for el7 Hi, I’m testing hosted-engine v3.5.0 on el7 and it’s mostly progressing ok, however when I go to install ovirt-engine 3.5 on the hosted engine VM (also running el7) the rpm is missing. I’ve checked the repo locations on resources.ovirt.org and it appears that ovirt-engine is not being built for el7, whereas it exists for el6/f19/f20. Are there plans to build ovirt-engine 3.5 for el7 or are there blockers specific to that OS version? Alternatively, can I mix and el6 engine with el7 hosts all running ovirt 3.5? yes, an .el6 engine can manage .el7 hosts with 3.5 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 3.4: VDSM Memory consumption
- Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Dan Kenigsberg dan...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 12:25:22 PM Subject: Re: [ovirt-users]3.4: VDSM Memory consumption Dan, I just reply to the list since I do not want to clutter BZ: While migrating VMs is easy (and the sampling is already running), can someone tell me the correct polling port to block with iptables? Thanks, Hi Daniel, there is indeed a memory profiling patch under discussion: http://gerrit.ovirt.org/#/c/32019/ but for your case we'll need a backport to 3.4.x and clearer install instructions, which I'll prepare as soon as possible. As for your question: if I understood correctly what you are asking (still catching up the thread), if you are trying to rule out the stats polling made by Engine to this bad leak, one simple way to test is just to shutdown Engine, and let VDSMs run unguarded on hypervisors. You'll be able to command these VDSMs using vdsClient or restarting Engine. In absence of commands from Engine VDSM will just sit idle and it will not do anything to VMs except it's own sampling. If you are on IRC, on freenode/#vdsm or OFTC/#ovirt, please ping me anytime - see my sign below for my IRC nickname. -- Francesco Romani RedHat Engineering Virtualization R D Phone: 8261328 IRC: fromani ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ?3.4: VDSM Memory consumption
On Mon, Sep 29, 2014 at 10:25:22AM +, Daniel Helgenberger wrote: Dan, I just reply to the list since I do not want to clutter BZ: While migrating VMs is easy (and the sampling is already running), can someone tell me the correct polling port to block with iptables? # iptables -A INPUT -p tcp --destination-port 54321 -j REJECT on the host would render it non-responsive in Engine. I wonder if the leak continues. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Messed up UI and missing CSS
On 09/29/2014 02:38 PM, Greg Sheremeta wrote: - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Mooli Tayer mta...@redhat.com, Greg Sheremeta gsher...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 3:05:26 AM Subject: Re: [ovirt-users] Messed up UI and missing CSS On 09/28/2014 09:18 PM, Mooli Tayer wrote: - Original Message - Can you 'sudo yum updatedb' 'locate style.min.css' Any chance this is styles.min.css ? Yes, my mistake and let me know where it lives on your system? Sadly, it doesn't: [root@engine ~]# updatedb [root@engine ~]# locate styles.min.css [root@engine ~]# And can you tell me what the full URL of the 404 is? The full URL for the css is: https://xx/ovirt-engine/webadmin/theme/00-ovirt.brand/patternfly/css/styles.min.css I have one such directory that is named 00-ovirt.brand on the server, and its patternfly/css dir contains the following: patternfly.css patternfly.min.css (The above is on a machine where latest master rpms are installed that exhibits similar behavior, can check again with 3.5 rpms in a few hours) Thanks. What is the output of 'yum list installed |grep patternfly' ? patternfly1.noarch 1.0.3-0.0.master.el6@localsync The rpm is taken from: http://copr-be.cloud.fedoraproject.org/results/gsheremeta/patternfly1/epel-6-x86_64/ Thanks, Greg - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Greg Sheremeta gsher...@redhat.com, users@ovirt.org Sent: Sunday, September 28, 2014 11:54:25 AM Subject: Messed up UI and missing CSS Hello, I am using rpms from the ovirt-3.5 repositories on ovirt.org, to install and deploy ovirt-engine, and the UI I get in Firefox (f19) looks like the attached screenshot. I'm installing engine rpms on CentOS 6.5, and have patternfly1 rpm installed there as well. When using web inspector, the browser tries to retrieve style.min.css but gets a 404. Is there anything that I am missing? -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dima Kuznetsov -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Messed up UI and missing CSS
- Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Greg Sheremeta gsher...@redhat.com Cc: Mooli Tayer mta...@redhat.com, users@ovirt.org Sent: Monday, September 29, 2014 8:37:40 AM Subject: Re: [ovirt-users] Messed up UI and missing CSS On 09/29/2014 02:38 PM, Greg Sheremeta wrote: - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Mooli Tayer mta...@redhat.com, Greg Sheremeta gsher...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 3:05:26 AM Subject: Re: [ovirt-users] Messed up UI and missing CSS On 09/28/2014 09:18 PM, Mooli Tayer wrote: - Original Message - Can you 'sudo yum updatedb' 'locate style.min.css' Any chance this is styles.min.css ? Yes, my mistake and let me know where it lives on your system? Sadly, it doesn't: [root@engine ~]# updatedb [root@engine ~]# locate styles.min.css [root@engine ~]# And can you tell me what the full URL of the 404 is? The full URL for the css is: https://xx/ovirt-engine/webadmin/theme/00-ovirt.brand/patternfly/css/styles.min.css I have one such directory that is named 00-ovirt.brand on the server, and its patternfly/css dir contains the following: patternfly.css patternfly.min.css (The above is on a machine where latest master rpms are installed that exhibits similar behavior, can check again with 3.5 rpms in a few hours) Thanks. What is the output of 'yum list installed |grep patternfly' ? patternfly1.noarch1.0.3-0.0.master.el6@localsync The rpm is taken from: http://copr-be.cloud.fedoraproject.org/results/gsheremeta/patternfly1/epel-6-x86_64/ That's the issue :) I need to delete that copr repo -- sorry for the confusion. Patternfly has an official repository, but your are using my (outdated) personal repo. Switch over to https://copr.fedoraproject.org/coprs/patternfly/patternfly1/ and run 'yum update patternfly1' and you'll be all set. Greg Thanks, Greg - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Greg Sheremeta gsher...@redhat.com, users@ovirt.org Sent: Sunday, September 28, 2014 11:54:25 AM Subject: Messed up UI and missing CSS Hello, I am using rpms from the ovirt-3.5 repositories on ovirt.org, to install and deploy ovirt-engine, and the UI I get in Firefox (f19) looks like the attached screenshot. I'm installing engine rpms on CentOS 6.5, and have patternfly1 rpm installed there as well. When using web inspector, the browser tries to retrieve style.min.css but gets a 404. Is there anything that I am missing? -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dima Kuznetsov -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 3.4: VDSM Memory consumption
Hello Francesco, On 29.09.2014 13:55, Francesco Romani wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Dan Kenigsberg dan...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 12:25:22 PM Subject: Re: [ovirt-users] 3.4: VDSM Memory consumption Dan, I just reply to the list since I do not want to clutter BZ: While migrating VMs is easy (and the sampling is already running), can someone tell me the correct polling port to block with iptables? Thanks, Hi Daniel, there is indeed a memory profiling patch under discussion: http://gerrit.ovirt.org/#/c/32019/ but for your case we'll need a backport to 3.4.x and clearer install instructions, which I'll prepare as soon as possible. I updated the BZ (and are now blocking 54321/tcp on one of my hosts). and verified it is not reachable. As general info: This system I am using is my LAB / Test / eval setup for a final deployment for ovirt (then 3.5) in production; so it will go away some time in the future (a few weeks / months). If I am the only one experiencing this problem then you might be better of allocating resources elsewhere ;) As for your question: if I understood correctly what you are asking (still catching up the thread), if you are trying to rule out the stats polling made by Engine to this bad leak, one simple way to test is just to shutdown Engine, and let VDSMs run unguarded on hypervisors. You'll be able to command these VDSMs using vdsClient or restarting Engine. As I said in my BZ comment this is not an option right now, but if understand the matter correctly IPTABLES reject should ultimately do the same? In absence of commands from Engine VDSM will just sit idle and it will not do anything to VMs except it's own sampling. If you are on IRC, on freenode/#vdsm or OFTC/#ovirt, please ping me anytime - see my sign below for my IRC nickname. Thanks. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt node vdsm certificate issue
Hi Alon. I get our internal CA certificate. It could be that I have made some changes to the configuration I forgot. Regards. Raul. - Original Message - From: Alon Bar-Lev alo...@redhat.com To: Raul Laansoo raul.laan...@bigbank.ee Cc: users users@ovirt.org Sent: Monday, 29 September, 2014 2:45:24 PM Subject: Re: [ovirt-users] oVirt node vdsm certificate issue - Original Message - From: Raul Laansoo raul.laan...@bigbank.ee To: users users@ovirt.org Sent: Monday, September 29, 2014 2:40:33 PM Subject: [ovirt-users] oVirt node vdsm certificate issue Hi. I have configured Engine webservice to use certificate issued by internal CA. According to http://www.ovirt.org/Features/PKI the CA certificates must be in /etc/pki/ovirt-engine/apache-ca.pem. I have kept the self signed (Engine internal) certificate (previously linked from /etc/pki/ovirt-engine/apache-ca.pem to /etc/pki/ovirt-engine/ca.pem) in /etc/pki/ovirt-engine/ca.pem. When I want to approve/install node host, the /etc/pki/ovirt-engine/apache-ca.pem file is downloaded to node as /etc/pki/vdsm/certs/cacert.pem. Because vdsmcert.pem is not signed by this CA, libvirt fails to start. How should I set up Engine local and internal CA files, so that they would not conflict? Hello, What have you changed apart from the above? What certificate do you get out of: curl http://@HOST@/ovirt-engine/services/pki-resource?resource=ca-certificate Alon oVirt Node Hypervisor release 3.0.4 (1.0.201401291204.el6) oVirt Engine Version: 3.4.3-1.el6 Thank you --- Raul Laansoo ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Messed up UI and missing CSS
On 09/29/2014 03:43 PM, Greg Sheremeta wrote: - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Greg Sheremeta gsher...@redhat.com Cc: Mooli Tayer mta...@redhat.com, users@ovirt.org Sent: Monday, September 29, 2014 8:37:40 AM Subject: Re: [ovirt-users] Messed up UI and missing CSS On 09/29/2014 02:38 PM, Greg Sheremeta wrote: - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Mooli Tayer mta...@redhat.com, Greg Sheremeta gsher...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 3:05:26 AM Subject: Re: [ovirt-users] Messed up UI and missing CSS On 09/28/2014 09:18 PM, Mooli Tayer wrote: - Original Message - Can you 'sudo yum updatedb' 'locate style.min.css' Any chance this is styles.min.css ? Yes, my mistake and let me know where it lives on your system? Sadly, it doesn't: [root@engine ~]# updatedb [root@engine ~]# locate styles.min.css [root@engine ~]# And can you tell me what the full URL of the 404 is? The full URL for the css is: https://xx/ovirt-engine/webadmin/theme/00-ovirt.brand/patternfly/css/styles.min.css I have one such directory that is named 00-ovirt.brand on the server, and its patternfly/css dir contains the following: patternfly.css patternfly.min.css (The above is on a machine where latest master rpms are installed that exhibits similar behavior, can check again with 3.5 rpms in a few hours) Thanks. What is the output of 'yum list installed |grep patternfly' ? patternfly1.noarch 1.0.3-0.0.master.el6@localsync The rpm is taken from: http://copr-be.cloud.fedoraproject.org/results/gsheremeta/patternfly1/epel-6-x86_64/ That's the issue :) I need to delete that copr repo -- sorry for the confusion. Patternfly has an official repository, but your are using my (outdated) personal repo. Switch over to https://copr.fedoraproject.org/coprs/patternfly/patternfly1/ and run 'yum update patternfly1' and you'll be all set. Thanks, It works great now! Greg Thanks, Greg - Original Message - From: Dima Kuznetsov dkuzn...@redhat.com To: Greg Sheremeta gsher...@redhat.com, users@ovirt.org Sent: Sunday, September 28, 2014 11:54:25 AM Subject: Messed up UI and missing CSS Hello, I am using rpms from the ovirt-3.5 repositories on ovirt.org, to install and deploy ovirt-engine, and the UI I get in Firefox (f19) looks like the attached screenshot. I'm installing engine rpms on CentOS 6.5, and have patternfly1 rpm installed there as well. When using web inspector, the browser tries to retrieve style.min.css but gets a 404. Is there anything that I am missing? -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dima Kuznetsov -- Dima Kuznetsov -- Dima Kuznetsov ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVirt and Snort
I am attempting to use Snort as an IDS on my network. Currently I have all traffic on my router uplink port mirrored to a port I have plugged into an unused port on an oVirt node. I have created a network that only has access to that port and assigned that network to my snort vm. I am able to see broadcast traffic (DHCP requests, DNS discoveries, ect) when I listen to that port but no direct IP to IP traffic. I believe it has something to do with macspoofing but I am not sure I have set that up correctly for this host. Has anyone seen documentation on properly setting up macspoofing or using snort on a virtual infrastructure like oVirt?? -- Patrick Pierson ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt node vdsm certificate issue
- Original Message - From: Raul Laansoo raul.laan...@bigbank.ee To: Alon Bar-Lev alo...@redhat.com Cc: users users@ovirt.org Sent: Monday, September 29, 2014 3:59:00 PM Subject: Re: [ovirt-users] oVirt node vdsm certificate issue Hi Alon. I get our internal CA certificate. It could be that I have made some changes to the configuration I forgot. So ca.pem is not the engine internal ca certificate, please fix so that apache-ca.pem will contain your ca while ca.pem will remain. Regards. Raul. - Original Message - From: Alon Bar-Lev alo...@redhat.com To: Raul Laansoo raul.laan...@bigbank.ee Cc: users users@ovirt.org Sent: Monday, 29 September, 2014 2:45:24 PM Subject: Re: [ovirt-users] oVirt node vdsm certificate issue - Original Message - From: Raul Laansoo raul.laan...@bigbank.ee To: users users@ovirt.org Sent: Monday, September 29, 2014 2:40:33 PM Subject: [ovirt-users] oVirt node vdsm certificate issue Hi. I have configured Engine webservice to use certificate issued by internal CA. According to http://www.ovirt.org/Features/PKI the CA certificates must be in /etc/pki/ovirt-engine/apache-ca.pem. I have kept the self signed (Engine internal) certificate (previously linked from /etc/pki/ovirt-engine/apache-ca.pem to /etc/pki/ovirt-engine/ca.pem) in /etc/pki/ovirt-engine/ca.pem. When I want to approve/install node host, the /etc/pki/ovirt-engine/apache-ca.pem file is downloaded to node as /etc/pki/vdsm/certs/cacert.pem. Because vdsmcert.pem is not signed by this CA, libvirt fails to start. How should I set up Engine local and internal CA files, so that they would not conflict? Hello, What have you changed apart from the above? What certificate do you get out of: curl http://@HOST@/ovirt-engine/services/pki-resource?resource=ca-certificate Alon oVirt Node Hypervisor release 3.0.4 (1.0.201401291204.el6) oVirt Engine Version: 3.4.3-1.el6 Thank you --- Raul Laansoo ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt and Snort
- Original Message - From: Pat Pierson ihasn2...@gmail.com To: users@ovirt.org Sent: Monday, September 29, 2014 3:07:53 PM Subject: [ovirt-users] oVirt and Snort I am attempting to use Snort as an IDS on my network. Currently I have all traffic on my router uplink port mirrored to a port I have plugged into an unused port on an oVirt node. I have created a network that only has access to that port and assigned that network to my snort vm. I am able to see broadcast traffic (DHCP requests, DNS discoveries, ect) when I listen to that port but no direct IP to IP traffic. I believe it has something to do with macspoofing but I am not sure I have set that up correctly for this host. Has anyone seen documentation on properly setting up macspoofing or using snort on a virtual infrastructure like oVirt?? Did you install the macspoof hook in that machine and set it up for the vnic? -- Patrick Pierson ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [hosted-engine-ha] restart-loop
htmlbodyHi Daniel, I had similar problem when my routing table was corrupted so the host wasn't able to reach the hosted-engine IP address. Are you sure that ovirt host can reach hosted-engine? (routing, fw, ...) Cheers, Luf Daniel Helgenberger píše v So 27. 09. 2014 v 10:40 +: Hello, before filing a BZ against 3.4 branch I wanted to get some input on the following issue: Steps, root shell on one engine-ha hosts, using hosted-engine cmd: 1. set global maintenance 2. shutdown hosted-engine vm (do some work) 3. disable global maintenance Result: My engine was started and immediately powered down again, in a loop. I could only manually brake this with: 1. enable global mt. gain 2. start engine 3. disable global mt. I attached the hosts' engine-ha broker logs as well as agent logs, from today 12:00 to 12:27, right after I 'fixed' this. Note, the engine was started on nodehv02 automatically after i disabled global mt. @ about 12:05 Thanks ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users NOTICE: This email and any attachments may contain confidential and proprietary information of NetSuite Inc. and is for the sole use of the intended recipient for the stated purpose. Any improper use or distribution is prohibited. If you are not the intended recipient, please notify the sender; do not review, copy or distribute; and promptly delete or destroy all transmitted information. Please note that all communications and information transmitted through this email system may be monitored by NetSuite or its agents and that all incoming email is automatically scanned by a third party spam and filtering service /body/html ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt and Snort
Itamar, Wow this is awesome. I set up the port mirror vnic profile (had never used vnic profiles before on oVirt, but it was super easy) and all is working as it should. Thanks for the input! Antoni, I had installed the macspoof hook, thanks for the response. On Mon, Sep 29, 2014 at 10:17 AM, Itamar Heim ih...@redhat.com wrote: On 09/29/2014 04:24 PM, Antoni Segura Puimedon wrote: - Original Message - From: Pat Pierson ihasn2...@gmail.com To: users@ovirt.org Sent: Monday, September 29, 2014 3:07:53 PM Subject: [ovirt-users] oVirt and Snort I am attempting to use Snort as an IDS on my network. Currently I have all traffic on my router uplink port mirrored to a port I have plugged into an unused port on an oVirt node. I have created a network that only has access to that port and assigned that network to my snort vm. I am able to see broadcast traffic (DHCP requests, DNS discoveries, ect) when I listen to that port but no direct IP to IP traffic. I believe it has something to do with macspoofing but I am not sure I have set that up correctly for this host. Has anyone seen documentation on properly setting up macspoofing or using snort on a virtual infrastructure like oVirt?? Did you install the macspoof hook in that machine and set it up for the vnic? why is that needed for listening only? just creating a vnic profile with port mirroring should work out of the box with no hooks? -- Patrick Pierson ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Patrick Pierson ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [hosted-engine-ha] restart-loop
Hello Luf, thanks for the input. Indeed, the network is fine; i can ping the engine fine from both hosts; also name resolution works from engine - hosts as vice versa. On 29.09.2014 16:12, Finstrle, Ludek wrote: Hi Daniel, I had similar problem when my routing table was corrupted so the host wasn't able to reach the hosted-engine IP address. Are you sure that ovirt host can reach hosted-engine? (routing, fw, ...) Cheers, Luf Daniel Helgenberger píše v So 27. 09. 2014 v 10:40 +: Hello, before filing a BZ against 3.4 branch I wanted to get some input on the following issue: Steps, root shell on one engine-ha hosts, using hosted-engine cmd: 1. set global maintenance 2. shutdown hosted-engine vm (do some work) 3. disable global maintenance Result: My engine was started and immediately powered down again, in a loop. I could only manually brake this with: 1. enable global mt. gain 2. start engine 3. disable global mt. I attached the hosts' engine-ha broker logs as well as agent logs, from today 12:00 to 12:27, right after I 'fixed' this. Note, the engine was started on nodehv02 automatically after i disabled global mt. @ about 12:05 Thanks ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users NOTICE: This email and any attachments may contain confidential and proprietary information of NetSuite Inc. and is for the sole use of the intended recipient for the stated purpose. Any improper use or distribution is prohibited. If you are not the intended recipient, please notify the sender; do not review, copy or distribute; and promptly delete or destroy all transmitted information. Please note that all communications and information transmitted through this email system may be monitored and retained by NetSuite or its agents and that all incoming email is automatically scanned by a third party spam and filtering service which may result in deletion of a legitimate e-mail before it is read by the intended recipient. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 3.4: VDSM Memory consumption
- Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Francesco Romani from...@redhat.com Cc: Dan Kenigsberg dan...@redhat.com, users@ovirt.org Sent: Monday, September 29, 2014 2:54:13 PM Subject: Re: [ovirt-users]3.4: VDSM Memory consumption Hello Francesco, On 29.09.2014 13:55, Francesco Romani wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Dan Kenigsberg dan...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 12:25:22 PM Subject: Re: [ovirt-users] 3.4: VDSM Memory consumption Dan, I just reply to the list since I do not want to clutter BZ: While migrating VMs is easy (and the sampling is already running), can someone tell me the correct polling port to block with iptables? Thanks, Hi Daniel, there is indeed a memory profiling patch under discussion: http://gerrit.ovirt.org/#/c/32019/ but for your case we'll need a backport to 3.4.x and clearer install instructions, which I'll prepare as soon as possible. I updated the BZ (and are now blocking 54321/tcp on one of my hosts). and verified it is not reachable. As general info: This system I am using is my LAB / Test / eval setup for a final deployment for ovirt (then 3.5) in production; so it will go away some time in the future (a few weeks / months). If I am the only one experiencing this problem then you might be better of allocating resources elsewhere ;) Thanks for your understanding :) Unfortunately it is true that developer resources aren't so abundant, but it is also true that memleaks should never be discarded easily and without due investigation, considering the nature and the role of VDSM. So, I'm all in for further investigation regarding this issue. As for your question: if I understood correctly what you are asking (still catching up the thread), if you are trying to rule out the stats polling made by Engine to this bad leak, one simple way to test is just to shutdown Engine, and let VDSMs run unguarded on hypervisors. You'll be able to command these VDSMs using vdsClient or restarting Engine. As I said in my BZ comment this is not an option right now, but if understand the matter correctly IPTABLES reject should ultimately do the same? Definitely yes! Just do whatever it is more convenient for you. -- Francesco Romani RedHat Engineering Virtualization R D Phone: 8261328 IRC: fromani ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 3.4: VDSM Memory consumption
Hello Francesco, -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv On 29.09.2014, at 22:19, Francesco Romani from...@redhat.com wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Francesco Romani from...@redhat.com Cc: Dan Kenigsberg dan...@redhat.com, users@ovirt.org Sent: Monday, September 29, 2014 2:54:13 PM Subject: Re: [ovirt-users]3.4: VDSM Memory consumption Hello Francesco, On 29.09.2014 13:55, Francesco Romani wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Dan Kenigsberg dan...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 12:25:22 PM Subject: Re: [ovirt-users]3.4: VDSM Memory consumption Dan, I just reply to the list since I do not want to clutter BZ: While migrating VMs is easy (and the sampling is already running), can someone tell me the correct polling port to block with iptables? Thanks, Hi Daniel, there is indeed a memory profiling patch under discussion: http://gerrit.ovirt.org/#/c/32019/ but for your case we'll need a backport to 3.4.x and clearer install instructions, which I'll prepare as soon as possible. I updated the BZ (and are now blocking 54321/tcp on one of my hosts). and verified it is not reachable. As general info: This system I am using is my LAB / Test / eval setup for a final deployment for ovirt (then 3.5) in production; so it will go away some time in the future (a few weeks / months). If I am the only one experiencing this problem then you might be better of allocating resources elsewhere ;) Thanks for your understanding :) Unfortunately it is true that developer resources aren't so abundant, but it is also true that memleaks should never be discarded easily and without due investigation, considering the nature and the role of VDSM. So, I'm all in for further investigation regarding this issue. As for your question: if I understood correctly what you are asking (still catching up the thread), if you are trying to rule out the stats polling made by Engine to this bad leak, one simple way to test is just to shutdown Engine, and let VDSMs run unguarded on hypervisors. You'll be able to command these VDSMs using vdsClient or restarting Engine. As I said in my BZ comment this is not an option right now, but if understand the matter correctly IPTABLES reject should ultimately do the same? Definitely yes! Just do whatever it is more convenient for you. As you might have already seen in the BZ comment the leak stopped after blocking the port. Though this is clearly no permanent option - please let me know if I can be of any more assistance! -- Francesco Romani RedHat Engineering Virtualization R D Phone: 8261328 IRC: fromani smime.p7s Description: S/MIME cryptographic signature ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ?3.4: VDSM Memory consumption
On Mon, Sep 29, 2014 at 09:02:19PM +, Daniel Helgenberger wrote: Hello Francesco, -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv On 29.09.2014, at 22:19, Francesco Romani from...@redhat.com wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Francesco Romani from...@redhat.com Cc: Dan Kenigsberg dan...@redhat.com, users@ovirt.org Sent: Monday, September 29, 2014 2:54:13 PM Subject: Re: [ovirt-users]3.4: VDSM Memory consumption Hello Francesco, On 29.09.2014 13:55, Francesco Romani wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Dan Kenigsberg dan...@redhat.com Cc: users@ovirt.org Sent: Monday, September 29, 2014 12:25:22 PM Subject: Re: [ovirt-users]3.4: VDSM Memory consumption Dan, I just reply to the list since I do not want to clutter BZ: While migrating VMs is easy (and the sampling is already running), can someone tell me the correct polling port to block with iptables? Thanks, Hi Daniel, there is indeed a memory profiling patch under discussion: http://gerrit.ovirt.org/#/c/32019/ but for your case we'll need a backport to 3.4.x and clearer install instructions, which I'll prepare as soon as possible. I updated the BZ (and are now blocking 54321/tcp on one of my hosts). and verified it is not reachable. As general info: This system I am using is my LAB / Test / eval setup for a final deployment for ovirt (then 3.5) in production; so it will go away some time in the future (a few weeks / months). If I am the only one experiencing this problem then you might be better of allocating resources elsewhere ;) Thanks for your understanding :) Unfortunately it is true that developer resources aren't so abundant, but it is also true that memleaks should never be discarded easily and without due investigation, considering the nature and the role of VDSM. So, I'm all in for further investigation regarding this issue. As for your question: if I understood correctly what you are asking (still catching up the thread), if you are trying to rule out the stats polling made by Engine to this bad leak, one simple way to test is just to shutdown Engine, and let VDSMs run unguarded on hypervisors. You'll be able to command these VDSMs using vdsClient or restarting Engine. As I said in my BZ comment this is not an option right now, but if understand the matter correctly IPTABLES reject should ultimately do the same? Definitely yes! Just do whatever it is more convenient for you. As you might have already seen in the BZ comment the leak stopped after blocking the port. Though this is clearly no permanent option - please let me know if I can be of any more assistance! The immediate suspect in this situation is M2Crypto. Could you verify that by re-opening the firewall and setting ssl=False in vdsm.conf? You should disable ssl on Engine side and restart both Engine and Vdsm (too bad I do not recall how that's done on Engine: Piotr, can you help?). ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [ANN] oVirt 3.4.4 Release is now available
On Tue, Sep 23, 2014 at 11:05 PM, Sandro Bonazzola sbona...@redhat.com wrote: The oVirt development team is pleased to announce the general availability of oVirt 3.4.4 as of Sep 23th 2014. This release solidifies oVirt as a leading KVM management application and open source alternative to VMware vSphere. oVirt is available now for Fedora 19 and Red Hat Enterprise Linux 6.5 (or similar). This release of oVirt includes numerous bug fixes. See the release notes [1] for a list of the new features and bugs fixed. [snip] [1] http://www.ovirt.org/OVirt_3.4.4_Release_Notes [2] http://resources.ovirt.org/pub/ovirt-3.4/iso/ovirt-live-el6-3.4.4.iso Hello, I have just updated to 3.4.4 an oVirt all-in-one environment based on 3.4.1 and Fedora 19 . All went ok, especially for the previously dramatic update of reports/dwh parts. good job! I have some comments for the release notes: 1) the version I had to update was 3.4.1 3.4.1-1.fc19 in the release notes there is only mention for upgrade from 3.4.0 and in that case to remove ovirt-release package after installing ovirt-release34 So in my situation the user is not so confident about how to proceed. Infact in my case I already had ovirt-release34 installed. I only needed to update it. $ rpm -qa ovirt-release\* ovirt-release34-1.0.1-1.noarch I got same output using install or directly using update # yum localinstall http://resources.ovirt.org/pub/yum-repo/ovirt-release34.rpm Resolving Dependencies -- Running transaction check --- Package ovirt-release34.noarch 0:1.0.1-1 will be updated --- Package ovirt-release34.noarch 0:1.0.3-1 will be an update # yum update ovirt-release34 Resolving Dependencies -- Running transaction check --- Package ovirt-release34.noarch 0:1.0.1-1 will be updated --- Package ovirt-release34.noarch 0:1.0.3-1 will be an update So my workflow was the second one ad it seems more intuitive. It could be written that in case of 3.4.x with x0 one only needs the yum update part 2) engine-setup Following the instrucitons to run yum update ovirt-engine-setup* when you run engine-setup, actually you are prompted to update also reports and dwh before proceeding, if you had them before, as it was my case: ... [ INFO ] Checking for product updates... Setup has found updates for some packages, do you wish to update them now? (Yes, No) [Yes]: [ INFO ] Checking for an update for Setup... An update for the Setup packages ovirt-engine-reports-setup ovirt-engine-dwh-setup was found. Please update that package by running: yum update ovirt-engine-reports-setup ovirt-engine-dwh-setup and then execute Setup again. [ ERROR ] Failed to execute stage 'Environment customization': Please update the Setup packages SO it should be written, if one had reports configured before, to run also # yum update ovirt-engine-reports-setup ovirt-engine-dwh-setup Resolving Dependencies -- Running transaction check --- Package ovirt-engine-dwh-setup.noarch 0:3.4.1-1.fc19 will be updated --- Package ovirt-engine-dwh-setup.noarch 0:3.4.4-0.1.fc19 will be an update --- Package ovirt-engine-reports-setup.noarch 0:3.4.1-1.fc19 will be updated --- Package ovirt-engine-reports-setup.noarch 0:3.4.4-0.1.fc19 will be an update Or it could also be modified the previous command adding a * in the middle yum update ovirt-engine-*setup* (actually better to split in two commands in my opinion) NOTE: My reports are ok if I select the reports link in the main page of portals But if I go in webadmin portal and then select dashboard near the top right events tab, I get a page not found error see https://drive.google.com/file/d/0BwoPbcrMv8mvWTdFOGJuekZmbEk/edit?usp=sharing I never used this dashboard link before, so I don't know exactly what it should provide to the user. When I click on dashoard I see this in /var/log/httpd/ssl_request_log [30/Sep/2014:01:12:29 +0200] 192.168.1.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 POST /ovirt-engine/webadmin/GenericApiGWTService HTTP/1.1 196 [30/Sep/2014:01:12:30 +0200] 127.0.0.1 TLSv1 AES256-SHA POST /ovirt-engine/services/get-session-user HTTP/1.1 14 [30/Sep/2014:01:12:30 +0200] 127.0.0.1 TLSv1 AES256-SHA POST /ovirt-engine/services/get-session-user HTTP/1.1 14 [30/Sep/2014:01:12:30 +0200] 127.0.0.1 TLSv1 AES256-SHA POST /ovirt-engine/services/get-session-user HTTP/1.1 14 [30/Sep/2014:01:12:30 +0200] 127.0.0.1 TLSv1 AES256-SHA POST /ovirt-engine/services/get-session-user HTTP/1.1 14 [30/Sep/2014:01:12:30 +0200] 192.168.1.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 POST /ovirt-engine-reports/flow.html?viewAsDashboardFrame=true HTTP/1.1 2239 [30/Sep/2014:01:12:30 +0200] 127.0.0.1 TLSv1 AES256-SHA POST /ovirt-engine/services/get-session-user HTTP/1.1 14 [30/Sep/2014:01:12:30 +0200] 127.0.0.1 TLSv1 AES256-SHA POST /ovirt-engine/services/get-session-user HTTP/1.1 14 [30/Sep/2014:01:12:30 +0200] 192.168.1.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 POST
Re: [ovirt-users] Is it possible to add ISCSI over iser?
Arman, One of my storage domains is iSCSI using iSER. You need the following in vdsm.conf: [irs] iscsi_default_ifaces = iser,default I believe the proper way to set that so it's preserved during node updates is the following # cat /etc/ovirt-host-deploy.conf.d/40-custom-vdsm-config.conf [environment:enforce] VDSM_CONFIG/irs/iscsi_default_ifaces=str:iser,default The filename I believe can be changed, just requires .conf extension Once VDSM is configured to use iser you can add the domain in the GUI using the IPoIB IP address to initiate iSER. ovirtnode01 # iscsiadm -m session iser: [3] 192.168.211.245:3260,1 iqn.2014-04.DOMAIN.vmstore1:ovirt-data_iscsi - Trey On Wed, Sep 24, 2014 at 6:42 AM, Arman Khalatyan arm2...@gmail.com wrote: Hi, I am trying to attach my new storage domain over iser. My server always gets that request is tcp/ip not rdma. Simple work around is login from hosts over iser. Would be good to add a possibility to select the protocol of iscsi:tcp/iser/srp. Thanks, Arman PS for those who was struggling with same trouble: 1) on hosts: add lines in /etc/rdma/rdma.conf # Load iSER module ISER_LOAD=YES 2) service rdma restart (or modprobe ib_iser 3) iscsiadm -m discovery -t st -p 10.10.10.31 -I iser 4) iscsiadm -m node --login 5) check if disks are there iscsiadm -m session -o show lssci [1228:0:0:0] storage IET Controller 0001 - [1228:0:0:1] diskIET VIRTUAL-DISK 0001 /dev/sde lsblk /dev/sde NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sde8:64 0 36.4T 0 disk ââ100090001 (dm-8) 253:80 36.4T 0 mpath ââ18b70b0d--4944--4c73--970d--87a1af353b9f-metadata (dm-9) 253:90 512M 0 lvm ââ18b70b0d--4944--4c73--970d--87a1af353b9f-ids (dm-10) 253:10 0 128M 0 lvm ââ18b70b0d--4944--4c73--970d--87a1af353b9f-leases (dm-11) 253:11 0 2G 0 lvm ââ18b70b0d--4944--4c73--970d--87a1af353b9f-outbox (dm-12) 253:12 0 128M 0 lvm ââ18b70b0d--4944--4c73--970d--87a1af353b9f-inbox (dm-13) 253:13 0 128M 0 lvm ââ18b70b0d--4944--4c73--970d--87a1af353b9f-master (dm-14) 253:14 0 1G 0 lvm ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
