Re: [ovirt-users] [3.6] User can't create a VM. No permission for EDIT_ADMIN_VM_PROPERTIES
As I was able to understand this error mean that user tried to rewrite the destination host of VM. But the problem is that there is no setting like this in the user interface. User can't change the destination 100%. It is not hardcoded in the template settings because he was trying to run Base template (which is not attached to any host). On Mon, Nov 23, 2015 at 8:36 AM, Maksim Naumovwrote: > Hello > > I faced with the problem. The user can;t create a VM. The user has > PowerUserRole on Cluster. He tried to create a VM with a base template and > had no success. > > Here some lines from log. Have no idea why it wants > for EDIT_ADMIN_VM_PROPERTIES permission for user? > > 2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] Checking whether user > 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member > of, have the following permissions: ID: > a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group CREATE_VM > with role type USER, ID: ---- Type: > VmTemplateAction group CREATE_VM with role type USER, ID: > a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group > EDIT_ADMIN_VM_PROPERTIES with role type ADMIN > 2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] Found permission > '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on > 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615' > 2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] Found permission > '0004-0004-0004-0004-0355' for user when running 'AddVm', on > 'Template' with id '----' > 2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] No permission found for user when running > action 'AddVm', on object 'Cluster' for action group > 'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'. > 2015-11-20 16:42:10,894 WARN [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user > vincent.en...@hitmeister.de@hitmeister.de. Reasons: > VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION > > -- > Maksim Naumov > Hitmeister GmbH > Softwareentwickler > > Habsburgerring 2 > 50674 Köln > > E: maksim.nau...@hitmeister.de > www.hitmeister.de > > HRB 59046, Amtsgericht Köln > Geschäftsführer: Dr. Gerald Schönbucher > -- Maksim Naumov Hitmeister GmbH Softwareentwickler Habsburgerring 2 50674 Köln E: maksim.nau...@hitmeister.de www.hitmeister.de HRB 59046, Amtsgericht Köln Geschäftsführer: Dr. Gerald Schönbucher ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] report option gone missing
On Sun, Nov 22, 2015 at 9:20 PM, Rik Theyswrote: > Hi, > > I was able to resolve my issue by adding the reports.cer file to the > /etc/pki/ovirt-engine/.truststore file. It seems the certificate got > updated by an engine update but was not added automatically to the > truststore. Thanks for the report! Please open a bug about this, attach relevant logs (including engine setup logs and yum.log), and try to describe the exact flow leading to this. Thanks again, -- Didi > > Regards, > > Rik > > -- > Rik Theys > System Engineer > KU Leuven - Dept. Elektrotechniek (ESAT) > Kasteelpark Arenberg 10 bus 2440 - B-3001 Leuven-Heverlee > +32(0)16/32.11.07 > > <> > > On Sun, 22 Nov 2015, Shirly Radco wrote: > >> Hi Rik, >> >> The ovirt-engine-dwhd process is responsible for collecting the data from >> the engine to the oviry_engine_history database where samples data is stored >> and then aggregated to Hourly and daily. >> >> If this service is running and there are no errors in the log then you >> should be able to see up to date data in the statistics tables in the >> history database (They end with samples/hourly/daily). >> >> Please check these table are up to date. >> >> http://www.ovirt.org/Ovirt_DWH >> >> >> The ovirt-engine-reportsd is the service of the reports server. If it is >> running and it is configured with a FQDN you should be able to log in >> through http://FQDN:8090/jasperserver/ >> >> If you want to remove the reports you can just run >> >> $yum remove ovirt-engine-reports >> >> and run >> $ engine-setup >> >> and when you install it again >> $ yum install ovirt-engine-reports >> >> run again >> $ engine-setup >> >> to configure the reports. >> >> >> http://www.ovirt.org/Ovirt_Reports >> >> Please let me know how it goes. >> >> Best regards, >> --- >> Shirly Radco >> BI Software Engineer >> Red Hat Israel Ltd. >> >> >> - Original Message - >>> >>> From: "Rik Theys" >>> To: users@ovirt.org >>> Sent: Thursday, November 19, 2015 5:35:52 PM >>> Subject: Re: [ovirt-users] report option gone missing >>> >>> Hi, >>> >>> I was able to login on the ovirt-engine-reports web application as >>> 'admin' but don't see any reports there. >>> >>> What is the procedure to fully remove the reporting from the system and >>> start anew? Will a remove of the package automatically clean up the >>> databases and such? >>> >>> Rik >>> >>> On 11/19/2015 04:25 PM, Rik Theys wrote: Hi, At some point I had the oVirt reporting configured on my engine and it worked. I had a "reports" option in the menu and could generate reports for various resources. At some point I've noticed that the "reports" option was no longer there but did not have time to investigate. I believe it happened when I migrated the engine host from CentOS 6 to 7 using engine-backup and restore. How can I debug this? In the ovirt-engine-dwh log I used to see the following error: Exception in component tJDBCRollback_4 org.postgresql.util.PSQLException: FATAL: terminating connection due to administrator command at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2157) at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:1886) at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:255) at org.postgresql.jdbc2.AbstractJdbc2Connection.executeTransactionCommand(AbstractJdbc2Connection.java:793) at org.postgresql.jdbc2.AbstractJdbc2Connection.rollback(AbstractJdbc2Connection.java:846) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_4Process(HistoryETL.java:2079) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_3Process(HistoryETL.java:1997) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_2Process(HistoryETL.java:1882) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_1Process(HistoryETL.java:1767) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tPostjob_1Process(HistoryETL.java:1647) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.runJobInTOS(HistoryETL.java:10785) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.main(HistoryETL.java:10277) 2015-11-19 15:42:02|rza8ri|rza8ri|rza8ri|OVIRT_ENGINE_DWH|HistoryETL|Default|6|Java Exception|tJDBCRollback_4|org.postgresql.util.PSQLException:FATAL: term But after rebooting the engine host it now only lists 'Service Started'. The ovirt-engine-reportsd is also running. Which of these two processes (reportsd vs dwhd) is generating the reports (and showing it in
Re: [ovirt-users] MAC OS
On 11/20/2015 04:14 PM, Nir Soffer wrote: On Mon, Nov 16, 2015 at 12:43 PM, Ollie Armstrongwrote: As far as I am aware, the OS X EULA requires installation to be on Apple branded hardware. So unless you're oVirt Host is running on Apple hardware you'd be breaking the EULA of OS X. This is likely why it isn't part of the OS option list in oVirt. Yea, but this between the user and Apple, oVirt does not care what do you run on your vms. On 16 November 2015 at 04:56, Budur Nagaraju wrote: Does oVirt supports Mac OS ? if so which option do I need to select under "operating system " . I don't think this option matter. oVirt supports anything that qemu and kvm support. Quick search suggests that it works: http://www.contrib.andrew.cmu.edu/~somlo/OSXKVM/ Some features require guest agent, which is probably not available for OS X, but I guess it is possible to port the ovirt-guest-agent to OS X. Yeah it's not available at this point. Some things might work out of the box others will probably need fixing, the guest agent wasn't ported yet to any *BSD either. However the biggest problem for the port will be the VirtIO support without that, there won't be a guest agent for OSX. Adding Vinzenz (ovirt-geust-agnent maintainer). Nir -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R & D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] [3.6] User can't create a VM. No permission for EDIT_ADMIN_VM_PROPERTIES
Hello I faced with the problem. The user can;t create a VM. The user has PowerUserRole on Cluster. He tried to create a VM with a base template and had no success. Here some lines from log. Have no idea why it wants for EDIT_ADMIN_VM_PROPERTIES permission for user? 2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Checking whether user 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member of, have the following permissions: ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group CREATE_VM with role type USER, ID: ---- Type: VmTemplateAction group CREATE_VM with role type USER, ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group EDIT_ADMIN_VM_PROPERTIES with role type ADMIN 2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Found permission '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615' 2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] Found permission '0004-0004-0004-0004-0355' for user when running 'AddVm', on 'Template' with id '----' 2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] No permission found for user when running action 'AddVm', on object 'Cluster' for action group 'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'. 2015-11-20 16:42:10,894 WARN [org.ovirt.engine.core.bll.AddVmCommand] (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user vincent.en...@hitmeister.de@hitmeister.de. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION -- Maksim Naumov Hitmeister GmbH Softwareentwickler Habsburgerring 2 50674 Köln E: maksim.nau...@hitmeister.de www.hitmeister.de HRB 59046, Amtsgericht Köln Geschäftsführer: Dr. Gerald Schönbucher ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Greetings and observations from an oVirt noob
On Mon, Nov 23, 2015 at 3:17 AM, Kenneth Marshwrote: > Hello all, > > I do development operations for a part of a software division of a large > multinational. I'm an experienced user of VMWare and Amazon AWS, soon to be > pushed onto Azure, and I've found a common thread among all solutions - they > are all expensive enough that my budget will certainly not be approved with > them. I'm deferred to the IT part of the organisation, which operates too > slowly and inefficiently (in terms of both cost and time) for my > requirements. This is what led me to RHEV, and ultimately to oVirt. This is > a feasibility study for what may ultimately be a RHEV-based data center in a > new office, and if I succeed we will be doing more on a fixed budget by > using more RHEV and less Azure. > > I spent the weekend working with oVirt and I'm very impressed. I had no idea > such a comprehensive enterprise-class solution was even available. Being a > complete newcomer, I started without a clue and after a weekend had set up a > nearly-working data centre including an oVirt hypervisor node, all on old > Dell notebooks loaned to me temporarily by our IT group. I started with RHEV > but decided to use oVirt for two reasons - one being to see what's possible > with the latest and greatest, the other because RHEV required some licensing > I've not yet purchased. Long term it'll have to be RHEV for enterprise > support reasons I'm sure many are familiar with. > > There are a few things I found, from a newcomer's perspective, very unclear. > > What is oVirt, vs oVirt engine, vs oVirt node, vs oVirt host. Try to find > documentation on any of these and get spammed with references to the others. > I think I've worked out that these are the collective suite of products, the > management centre, the bare-metal hypervisor, and participating member > servers, respectively. You got it mostly right. Did you have a look at [1]? The engine is the process that manages the whole thing. It exposes an admin interface (web+api), monitors the hosts and VMs, etc. A host and node are where VMs run. In many cases these terms are interchangeable, although usually "node" is a host installed with the ovirt-node image, whereas an "ovirt host" is a host installed with a "normal" OS and later provisioned to be used (by installing stuff on it, usually using the "New Host" wizard in the web ui). [1] http://www.ovirt.org/Architecture Also adding Mikey. > Which versions of CentOS/Fedora/oVirt Node are compatible at which oVirt > compatibility level? This would normally be addressed in the release notes. I assume you refer to 3.6, released a few weeks ago. The release notes page [2] does mention specific versions of fedora and el. I agree it could be written more clearly. The Download page [3] lists them too. [2] http://www.ovirt.org/OVirt_3.6_Release_Notes [3] http://www.ovirt.org/Download > It was also confusing to discover oVirt node 3.2.1 is compatible at the 3.5 3.2.1? Where is this one referenced? RN [2] has a section "ovirt node" with links to pre-release (has ovirt-node-iso-3.6-0.999.201510221942) and final (still empty). Adding Fabian. > level. The answer to this remains unclear but I'm trying to use Fedora 22 > across the board now with oVirt node 3.2.1 and this seems to be working, > although I haven't gotten a server node into a cluster yet, only oVirt > nodes. Not sure I fully understand. ovirt node includes its own OS, and IIUC we only ship one based on el7. Technically it's probably possible to build one with fedora, never tried that. > Storage domains - much doco about them being needed and how to configure > them but nothing about what they are or why they are needed. I would have Architecture [1] above does have some text about that, and links at [4] which has more. Some more info: Generally speaking, and until 3.5, storage was separated from what we call "compute nodes" (those running VMs). You can bring your own external storage, be it a mere linux machine serving its disks through nfs/iscsi/etc., or some "dedicated" storage boxes (netapp/emc/etc.). You can also use gluster. The engine also manages gluster storage. In 3.6 there was some work to allow using the same hosts for both. Some of it was finished, some postponed to 4.0. You can check e.g. [5][6]. [4] http://www.ovirt.org/Vdsm_Storage_Terminology [5] http://www.ovirt.org/Features/GlusterFS-Hyperconvergence [6] http://www.ovirt.org/Features/Self_Hosted_Engine_Hyper_Converged_Gluster_Support > expected an oVirt node to be capable of both data and ISO storage but > apparently there needs to be an NFS or iSCSI filesystem there first? And > there's local storage vs shared, another concept much talked about how to > prepare and add it but not explained why one would want to do that or what > it means. > > I think with further internet combing and by trial-and-error I'm very likely > to figure it all out. I hope all goes well and implement this
Re: [ovirt-users] Delete disk references without deleting the disk
Hi Nir, I wonder if it can be made any more efficient, I think this method is clear enough. The only thing not clear to me was that while deleting the storage domain, it doesn't touch it's contents. On Sun, Nov 22, 2015 at 9:00 PM, Nir Sofferwrote: > On Sun, Nov 22, 2015 at 6:14 PM, Johan Kooijman > wrote: > > Hi all, > > > > I have about 100 old VM's in my cluster. They're powered down, ready for > > deletion. What I want to do is delete the VM's including disks without > > actually deleting the disk images from the storage array itself. Is that > > possible? > > Select the vm, click "remove", in the confirmation dialog, uncheck the > "Delete disks" > checkbox, confirm. > > > At the end I want to be able to delete the storage domain (which > > then should not hold any data, as far as ovirt is concerned). > > Ovirt deleted the vms, but is keeping the disks, so the storage domain > does hold all > the disks. > > > > > Reason for this: it's a ZFS pool with dedup enabled, deleting the images > one > > by one will kill the array with 100% iowa for some time. > > So what do you need is to destroy the storage domain, which will > remove all the entities > associated with it, but will keep the storage without any change. > > Do this: > 1. Select the storage tab > 2. select the domain > 3. In the data center sub tab, click "maintenance" > 4. When domain is in maintenance, click "detach" > 5. Right click the domain and choose "destroy" > > This will remove the storage domain from engine database, leaving > the contents of the domain. > > You can now delete the contents using favorite system tools. > > Now, if we want to add support for this in ovirt, how would you delete > the entire domain in a more efficient way? > > Nir > -- Met vriendelijke groeten / With kind regards, Johan Kooijman ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Greetings and observations from an oVirt noob
Hello all, I do development operations for a part of a software division of a large multinational. I'm an experienced user of VMWare and Amazon AWS, soon to be pushed onto Azure, and I've found a common thread among all solutions - they are all expensive enough that my budget will certainly not be approved with them. I'm deferred to the IT part of the organisation, which operates too slowly and inefficiently (in terms of both cost and time) for my requirements. This is what led me to RHEV, and ultimately to oVirt. This is a feasibility study for what may ultimately be a RHEV-based data center in a new office, and if I succeed we will be doing more on a fixed budget by using more RHEV and less Azure. I spent the weekend working with oVirt and I'm very impressed. I had no idea such a comprehensive enterprise-class solution was even available. Being a complete newcomer, I started without a clue and after a weekend had set up a nearly-working data centre including an oVirt hypervisor node, all on old Dell notebooks loaned to me temporarily by our IT group. I started with RHEV but decided to use oVirt for two reasons - one being to see what's possible with the latest and greatest, the other because RHEV required some licensing I've not yet purchased. Long term it'll have to be RHEV for enterprise support reasons I'm sure many are familiar with. There are a few things I found, from a newcomer's perspective, very unclear. - What is oVirt, vs oVirt engine, vs oVirt node, vs oVirt host. Try to find documentation on any of these and get spammed with references to the others. I think I've worked out that these are the collective suite of products, the management centre, the bare-metal hypervisor, and participating member servers, respectively. - Which versions of CentOS/Fedora/oVirt Node are compatible at which oVirt compatibility level? This would normally be addressed in the release notes. It was also confusing to discover oVirt node 3.2.1 is compatible at the 3.5 level. The answer to this remains unclear but I'm trying to use Fedora 22 across the board now with oVirt node 3.2.1 and this seems to be working, although I haven't gotten a server node into a cluster yet, only oVirt nodes. - Storage domains - much doco about them being needed and how to configure them but nothing about what they are or why they are needed. I would have expected an oVirt node to be capable of both data and ISO storage but apparently there needs to be an NFS or iSCSI filesystem there first? And there's local storage vs shared, another concept much talked about how to prepare and add it but not explained why one would want to do that or what it means. I think with further internet combing and by trial-and-error I'm very likely to figure it all out. I hope all goes well and implement this stuff in our new data centre and then I'd be keen to contribute some of my own tech writing. Meanwhile, I hope to be active on this mailing list and I thank everyone in advance for sharing their oVirt experience. For any who are looking at the doco thanks much for the plethora of stuff out there already and I hope the above bullet points help you understand where doco most needs more attention. At least from the perspective of one who has just come across oVirt. Kind Regards, Ken Marsh Brisbane, Australia ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [Need help] Want to write my graduate thesis related to ovirt
Hi Doron, I write C the most, but I have write a little bit of Java(when I try to write an android app), so I think I can learn it quickly. Cheers, John On Sun, Nov 22, 2015 at 11:46 PM, Doron Fediuckwrote: > > > On Tue, Nov 3, 2015 at 2:24 PM, John Hunter wrote: > >> ping, anybody help? >> >> On Tue, Nov 3, 2015 at 10:54 AM, John Hunter wrote: >> >>> Hi guys, >>> >>> I am college student who is going to graduate next year, major in CS, I >>> want to >>> work on my graduate thesis related to ovirt. >>> >>> For now I need a project which I can work on for the next 6 month, so I >>> need >>> an idealist which I can reference to write a proposal. >>> >>> I have contributed to #dri-devel during my Google Summer of Code >>> project, so I >>> know how opensource groups works, though workflow are kind of different. >>> >>> I am appreciate if anyone could help, and I hope some one could be my >>> mentor. >>> >>> BR, >>> Zhao Junwang >>> >>> -- >>> Best regards >>> Junwang Zhao >>> Department of Computer Science >>> Peking University >>> Beijing, 100871, PRC >>> >> >> >> >> -- >> Best regards >> Junwang Zhao >> Department of Computer Science >> Peking University >> Beijing, 100871, PRC >> >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> >> > Hi John, > sorry for the delay. > > We have several options. > How are you with writing Java code? > > Doron > -- Best regards Junwang Zhao Department of Computer Science Peking University Beijing, 100871, PRC ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Delete disk references without deleting the disk
Hi all, I have about 100 old VM's in my cluster. They're powered down, ready for deletion. What I want to do is delete the VM's including disks without actually deleting the disk images from the storage array itself. Is that possible? At the end I want to be able to delete the storage domain (which then should not hold any data, as far as ovirt is concerned). Reason for this: it's a ZFS pool with dedup enabled, deleting the images one by one will kill the array with 100% iowa for some time. -- Met vriendelijke groeten / With kind regards, Johan Kooijman ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [Need help] Want to write my graduate thesis related to ovirt
On Tue, Nov 3, 2015 at 2:24 PM, John Hunterwrote: > ping, anybody help? > > On Tue, Nov 3, 2015 at 10:54 AM, John Hunter wrote: > >> Hi guys, >> >> I am college student who is going to graduate next year, major in CS, I >> want to >> work on my graduate thesis related to ovirt. >> >> For now I need a project which I can work on for the next 6 month, so I >> need >> an idealist which I can reference to write a proposal. >> >> I have contributed to #dri-devel during my Google Summer of Code project, >> so I >> know how opensource groups works, though workflow are kind of different. >> >> I am appreciate if anyone could help, and I hope some one could be my >> mentor. >> >> BR, >> Zhao Junwang >> >> -- >> Best regards >> Junwang Zhao >> Department of Computer Science >> Peking University >> Beijing, 100871, PRC >> > > > > -- > Best regards > Junwang Zhao > Department of Computer Science > Peking University > Beijing, 100871, PRC > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > Hi John, sorry for the delay. We have several options. How are you with writing Java code? Doron ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [3.6] Unable to create VM in user portal
- Original Message - > From: "Maksim Naumov"> To: "users" > Sent: Friday, November 20, 2015 5:46:41 PM > Subject: Re: [ovirt-users] [3.6] Unable to create VM in user portal > > I found the following LOG entrie > > What is this EDIT_ADMIN_VM_PROPERTIES ? Hi You are probably trying to set the list of hosts dedicated to run this VM or host CPU pinning For those you must be administrator > > > 2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] Checking whether user > 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member of, > have the following permissions: ID: a303bbca-af20-4de5-9eff-01c52d3bf615 > Type: VdsGroupsAction group CREATE_VM with role type USER, ID: > ---- Type: VmTemplateAction group CREATE_VM > with role type USER, ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type: > VdsGroupsAction group EDIT_ADMIN_VM_PROPERTIES with role type ADMIN > 2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] Found permission > '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on > 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615' > 2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] Found permission > '0004-0004-0004-0004-0355' for user when running 'AddVm', on > 'Template' with id '----' > 2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] No permission found for user when running > action 'AddVm', on object 'Cluster' for action group > 'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'. > 2015-11-20 16:42:10,894 WARN [org.ovirt.engine.core.bll.AddVmCommand] > (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user > vincent.en...@hitmeister.de@ hitmeister.de . Reasons: > VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION > > > > On Fri, Nov 20, 2015 at 3:29 PM, Maksim Naumov < maksim.nau...@hitmeister.de > > wrote: > > > > Hello > > User in the User portal un able to create virtual machine. Everytime I see en > error " User is not authorized to perform this action. " > I tried different roles: VmCreator + DiskCreator, PowerUserRole, > UserVmManager even a new role with all the permissions - no way! > > Can you give a 100% working example how should I setup role for user to be > abte to create a VM? > > Thank you > > -- > Maksim Naumov > Hitmeister GmbH > Softwareentwickler > > Habsburgerring 2 > 50674 Köln > > E: maksim.nau...@hitmeister.de > www.hitmeister.de > > HRB 59046, Amtsgericht Köln > Geschäftsführer: Dr. Gerald Schönbucher > > > > -- > Maksim Naumov > Hitmeister GmbH > Softwareentwickler > > Habsburgerring 2 > 50674 Köln > > E: maksim.nau...@hitmeister.de > www.hitmeister.de > > HRB 59046, Amtsgericht Köln > Geschäftsführer: Dr. Gerald Schönbucher > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] report option gone missing
Hi Rik, The ovirt-engine-dwhd process is responsible for collecting the data from the engine to the oviry_engine_history database where samples data is stored and then aggregated to Hourly and daily. If this service is running and there are no errors in the log then you should be able to see up to date data in the statistics tables in the history database (They end with samples/hourly/daily). Please check these table are up to date. http://www.ovirt.org/Ovirt_DWH The ovirt-engine-reportsd is the service of the reports server. If it is running and it is configured with a FQDN you should be able to log in through http://FQDN:8090/jasperserver/ If you want to remove the reports you can just run $yum remove ovirt-engine-reports and run $ engine-setup and when you install it again $ yum install ovirt-engine-reports run again $ engine-setup to configure the reports. http://www.ovirt.org/Ovirt_Reports Please let me know how it goes. Best regards, --- Shirly Radco BI Software Engineer Red Hat Israel Ltd. - Original Message - > From: "Rik Theys"> To: users@ovirt.org > Sent: Thursday, November 19, 2015 5:35:52 PM > Subject: Re: [ovirt-users] report option gone missing > > Hi, > > I was able to login on the ovirt-engine-reports web application as > 'admin' but don't see any reports there. > > What is the procedure to fully remove the reporting from the system and > start anew? Will a remove of the package automatically clean up the > databases and such? > > Rik > > On 11/19/2015 04:25 PM, Rik Theys wrote: > > Hi, > > > > At some point I had the oVirt reporting configured on my engine and it > > worked. I had a "reports" option in the menu and could generate > > reports for various resources. > > > > At some point I've noticed that the "reports" option was no longer > > there but did not have time to investigate. I believe it happened when > > I migrated the engine host from CentOS 6 to 7 using engine-backup and > > restore. > > > > How can I debug this? > > > > In the ovirt-engine-dwh log I used to see the following error: > > > > Exception in component tJDBCRollback_4 > > org.postgresql.util.PSQLException: FATAL: terminating connection due > > to administrator command > > at > > org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2157) > > at > > org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:1886) > > at > > org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:255) > > at > > org.postgresql.jdbc2.AbstractJdbc2Connection.executeTransactionCommand(AbstractJdbc2Connection.java:793) > > at > > org.postgresql.jdbc2.AbstractJdbc2Connection.rollback(AbstractJdbc2Connection.java:846) > > at > > ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_4Process(HistoryETL.java:2079) > > at > > ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_3Process(HistoryETL.java:1997) > > at > > ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_2Process(HistoryETL.java:1882) > > at > > ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_1Process(HistoryETL.java:1767) > > at > > ovirt_engine_dwh.historyetl_3_5.HistoryETL.tPostjob_1Process(HistoryETL.java:1647) > > at > > ovirt_engine_dwh.historyetl_3_5.HistoryETL.runJobInTOS(HistoryETL.java:10785) > > at > > ovirt_engine_dwh.historyetl_3_5.HistoryETL.main(HistoryETL.java:10277) > > 2015-11-19 > > 15:42:02|rza8ri|rza8ri|rza8ri|OVIRT_ENGINE_DWH|HistoryETL|Default|6|Java > > Exception|tJDBCRollback_4|org.postgresql.util.PSQLException:FATAL: term > > > > But after rebooting the engine host it now only lists 'Service Started'. > > > > The ovirt-engine-reportsd is also running. > > > > Which of these two processes (reportsd vs dwhd) is generating the > > reports (and showing it in the engine admin interface)? > > > > In /var/log/ovirt-engine-reports, the reports.log file is empty, the > > server.log reports Deployed ovirt-engine-reports.war as the last line > > (without any obvious errors). Only jasperserver.log shows: > > > > 015-11-19 15:41:53,304 ERROR DiskStorageFactory,MSC service thread > > 1-2:948 - Could not flush disk cache. Initial cause was > > /tmp/dataSnapshots/snapshot%0043ontents.index (No such file or directory) > > java.io.FileNotFoundException: > > /tmp/dataSnapshots/snapshot%0043ontents.index (No such file or directory) > > at java.io.FileOutputStream.open(Native Method) > > at java.io.FileOutputStream.(FileOutputStream.java:221) > > at java.io.FileOutputStream.(FileOutputStream.java:171) > > at > > net.sf.ehcache.store.disk.DiskStorageFactory$IndexWriteTask.call(DiskStorageFactory.java:1120) > > at > > net.sf.ehcache.store.disk.DiskStorageFactory.unbind(DiskStorageFactory.java:946) > > at > > net.sf.ehcache.store.disk.DiskStore.dispose(DiskStore.java:616)
Re: [ovirt-users] Delete disk references without deleting the disk
On Sun, Nov 22, 2015 at 6:14 PM, Johan Kooijmanwrote: > Hi all, > > I have about 100 old VM's in my cluster. They're powered down, ready for > deletion. What I want to do is delete the VM's including disks without > actually deleting the disk images from the storage array itself. Is that > possible? Select the vm, click "remove", in the confirmation dialog, uncheck the "Delete disks" checkbox, confirm. > At the end I want to be able to delete the storage domain (which > then should not hold any data, as far as ovirt is concerned). Ovirt deleted the vms, but is keeping the disks, so the storage domain does hold all the disks. > > Reason for this: it's a ZFS pool with dedup enabled, deleting the images one > by one will kill the array with 100% iowa for some time. So what do you need is to destroy the storage domain, which will remove all the entities associated with it, but will keep the storage without any change. Do this: 1. Select the storage tab 2. select the domain 3. In the data center sub tab, click "maintenance" 4. When domain is in maintenance, click "detach" 5. Right click the domain and choose "destroy" This will remove the storage domain from engine database, leaving the contents of the domain. You can now delete the contents using favorite system tools. Now, if we want to add support for this in ovirt, how would you delete the entire domain in a more efficient way? Nir ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] report option gone missing
Hi, I was able to resolve my issue by adding the reports.cer file to the /etc/pki/ovirt-engine/.truststore file. It seems the certificate got updated by an engine update but was not added automatically to the truststore. Regards, Rik -- Rik Theys System Engineer KU Leuven - Dept. Elektrotechniek (ESAT) Kasteelpark Arenberg 10 bus 2440 - B-3001 Leuven-Heverlee +32(0)16/32.11.07 <> On Sun, 22 Nov 2015, Shirly Radco wrote: Hi Rik, The ovirt-engine-dwhd process is responsible for collecting the data from the engine to the oviry_engine_history database where samples data is stored and then aggregated to Hourly and daily. If this service is running and there are no errors in the log then you should be able to see up to date data in the statistics tables in the history database (They end with samples/hourly/daily). Please check these table are up to date. http://www.ovirt.org/Ovirt_DWH The ovirt-engine-reportsd is the service of the reports server. If it is running and it is configured with a FQDN you should be able to log in through http://FQDN:8090/jasperserver/ If you want to remove the reports you can just run $yum remove ovirt-engine-reports and run $ engine-setup and when you install it again $ yum install ovirt-engine-reports run again $ engine-setup to configure the reports. http://www.ovirt.org/Ovirt_Reports Please let me know how it goes. Best regards, --- Shirly Radco BI Software Engineer Red Hat Israel Ltd. - Original Message - From: "Rik Theys"To: users@ovirt.org Sent: Thursday, November 19, 2015 5:35:52 PM Subject: Re: [ovirt-users] report option gone missing Hi, I was able to login on the ovirt-engine-reports web application as 'admin' but don't see any reports there. What is the procedure to fully remove the reporting from the system and start anew? Will a remove of the package automatically clean up the databases and such? Rik On 11/19/2015 04:25 PM, Rik Theys wrote: Hi, At some point I had the oVirt reporting configured on my engine and it worked. I had a "reports" option in the menu and could generate reports for various resources. At some point I've noticed that the "reports" option was no longer there but did not have time to investigate. I believe it happened when I migrated the engine host from CentOS 6 to 7 using engine-backup and restore. How can I debug this? In the ovirt-engine-dwh log I used to see the following error: Exception in component tJDBCRollback_4 org.postgresql.util.PSQLException: FATAL: terminating connection due to administrator command at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2157) at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:1886) at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:255) at org.postgresql.jdbc2.AbstractJdbc2Connection.executeTransactionCommand(AbstractJdbc2Connection.java:793) at org.postgresql.jdbc2.AbstractJdbc2Connection.rollback(AbstractJdbc2Connection.java:846) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_4Process(HistoryETL.java:2079) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_3Process(HistoryETL.java:1997) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_2Process(HistoryETL.java:1882) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tJDBCRollback_1Process(HistoryETL.java:1767) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.tPostjob_1Process(HistoryETL.java:1647) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.runJobInTOS(HistoryETL.java:10785) at ovirt_engine_dwh.historyetl_3_5.HistoryETL.main(HistoryETL.java:10277) 2015-11-19 15:42:02|rza8ri|rza8ri|rza8ri|OVIRT_ENGINE_DWH|HistoryETL|Default|6|Java Exception|tJDBCRollback_4|org.postgresql.util.PSQLException:FATAL: term But after rebooting the engine host it now only lists 'Service Started'. The ovirt-engine-reportsd is also running. Which of these two processes (reportsd vs dwhd) is generating the reports (and showing it in the engine admin interface)? In /var/log/ovirt-engine-reports, the reports.log file is empty, the server.log reports Deployed ovirt-engine-reports.war as the last line (without any obvious errors). Only jasperserver.log shows: 015-11-19 15:41:53,304 ERROR DiskStorageFactory,MSC service thread 1-2:948 - Could not flush disk cache. Initial cause was /tmp/dataSnapshots/snapshot%0043ontents.index (No such file or directory) java.io.FileNotFoundException: /tmp/dataSnapshots/snapshot%0043ontents.index (No such file or directory) at java.io.FileOutputStream.open(Native Method) at java.io.FileOutputStream.(FileOutputStream.java:221) at java.io.FileOutputStream.(FileOutputStream.java:171) at