Re: [ovirt-users] oVirt SDK v4 backwards compatibility

[Karli Sjöberg]

On Tue, 2016-11-08 at 02:20 -0500, Tomas Jelinek wrote:
> 
> - Original Message -
> > From: "Rafael Martins" 
> > To: "Karli Sjöberg" 
> > Cc: users@ovirt.org
> > Sent: Monday, November 7, 2016 7:06:33 PM
> > Subject: Re: [ovirt-users] oVirt SDK v4 backwards compatibility
> > 
> > - Original Message -
> > > From: "Karli Sjöberg" 
> > > To: "Rafael Martins" 
> > > Cc: users@ovirt.org
> > > Sent: Monday, November 7, 2016 6:13:33 PM
> > > Subject: Re: [ovirt-users] oVirt SDK v4 backwards compatibility
> > > 
> > > 
> > > Den 7 nov. 2016 15:53 skrev Rafael Martins :
> > > > 
> > > > - Original Message -
> > > > > From: "Karli Sjöberg" 
> > > > > To: users@ovirt.org
> > > > > Sent: Monday, November 7, 2016 3:06:10 PM
> > > > > Subject: [ovirt-users] oVirt SDK v4 backwards compatibility
> > > > > 
> > > > > Heya!
> > > > > 
> > > > > Quick question, if I have on my computer installed a newer
> > > > > version
> > > > > Python SDK than what´s installed on the engine (4.0.3 locally
> > > > > and 3.6.X
> > > > > in engine), is it possible to connect?
> > > > 
> > > > It is not possible, but you can still install the RPM for the
> > > > version 3
> > > > of
> > > > the SDK. Please note that the code of the SDK versions is not
> > > > compatible.
> > > 
> > > Ok, as I thought. But how does others handle that, like moVirt
> > > e.g? Is
> > > there
> > > a best-practice for backwards compatibility?
> 
> moVirt is not using the SDKs, it is talking to API directly. But the
> general rule for the clients 
> (moVirt but also ManageIQ) works like this:
> - check the version of the API right at the beginning
> - according to the found version use either the new or the old api

Ah, I see. OK, that answers my question pretty clearly, correct me if
I'm wrong; for anyone who wishes to write something in python, you 
have two SDK's installed (or, talk to the API directly) and check the
API version to determine which SDK you should use?

Is there a standard ("correct") way of checking the API version?

/K

> 
> > 
> > Right now if you use the old SDK you should be able to "talk" with
> > both 3.6
> > and 4.0, because 4.0 api provides backward compatibility with 3.6.
> > But I'm
> > not sure if you can rely on this. Juan may have more details for
> > you.
> > 
> > Thanks,
> > Rafael
> > 
> > > /K
> > > 
> > > > 
> > > > > TIA
> > > > > Karli Sjöberg
> > > > > ___
> > > > > Users mailing list
> > > > > Users@ovirt.org
> > > > > http://lists.ovirt.org/mailman/listinfo/users
> > > > > 
> > 
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> > 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] expired cert for aaa

[Yedidyah Bar David]

On Mon, Nov 7, 2016 at 9:15 PM, cmc  wrote:
> To reply to my own email:
>
> This is now fixed.
>
> I originally ran these steps for the upgrade:
>
> # yum install http://resources.ovirt.org/pub/yum-repo/ovirt-release40.rpm
> # yum update "ovirt-engine-setup*"
> # engine-setup
>
> There were no errors reported during the process. I could login as the
> internal user without any errors. It was just using an external provider,
> which made me think it was an aaa issue, so I looked
> at the certificate exported from AD which had an expiry of 2063.
>
> I tried running engine-setup again, and this fixed the issue. I have no idea
> what happened along the way, I will check the logs. I notice it reports:
>
> [ INFO  ] Upgrading CA

engine-setup always emits this message. You might find more details in the
setup logs regarding what it actually did.

>
> so it looks like it creates a cert. Why it would have created one with such
> a short expiry date is a mystery to me.
>
> Hope this helps anyone who might come across this issue

Thanks for the report!

Can you please share both setup logs? Thanks.

Also, most files should be backed up by engine-setup prior to being
changed/removed. So you can check the backups. E.g.:

# openssl x509 -in /etc/pki/ovirt-engine/ca.pem.20160120160548 -noout -enddate
notAfter=May 22 07:32:23 2025 GMT
# openssl x509 -in /etc/pki/ovirt-engine/ca.pem -noout -enddate
notAfter=Mar  6 09:46:44 2026 GMT

Or,

find /etc/pki/ovirt-engine -name "*.cer*" -o -name "*.pem*" | while
read file; do echo $file $(openssl x509 -in $file -noout -enddate);
done

Best,
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt SDK v4 backwards compatibility

[Tomas Jelinek]

- Original Message -
> From: "Rafael Martins" 
> To: "Karli Sjöberg" 
> Cc: users@ovirt.org
> Sent: Monday, November 7, 2016 7:06:33 PM
> Subject: Re: [ovirt-users] oVirt SDK v4 backwards compatibility
> 
> - Original Message -
> > From: "Karli Sjöberg" 
> > To: "Rafael Martins" 
> > Cc: users@ovirt.org
> > Sent: Monday, November 7, 2016 6:13:33 PM
> > Subject: Re: [ovirt-users] oVirt SDK v4 backwards compatibility
> > 
> > 
> > Den 7 nov. 2016 15:53 skrev Rafael Martins :
> > >
> > > - Original Message -
> > > > From: "Karli Sjöberg" 
> > > > To: users@ovirt.org
> > > > Sent: Monday, November 7, 2016 3:06:10 PM
> > > > Subject: [ovirt-users] oVirt SDK v4 backwards compatibility
> > > >
> > > > Heya!
> > > >
> > > > Quick question, if I have on my computer installed a newer version
> > > > Python SDK than what´s installed on the engine (4.0.3 locally and 3.6.X
> > > > in engine), is it possible to connect?
> > >
> > > It is not possible, but you can still install the RPM for the version 3
> > > of
> > > the SDK. Please note that the code of the SDK versions is not compatible.
> > 
> > Ok, as I thought. But how does others handle that, like moVirt e.g? Is
> > there
> > a best-practice for backwards compatibility?

moVirt is not using the SDKs, it is talking to API directly. But the general 
rule for the clients 
(moVirt but also ManageIQ) works like this:
- check the version of the API right at the beginning
- according to the found version use either the new or the old api

> 
> Right now if you use the old SDK you should be able to "talk" with both 3.6
> and 4.0, because 4.0 api provides backward compatibility with 3.6. But I'm
> not sure if you can rely on this. Juan may have more details for you.
> 
> Thanks,
> Rafael
> 
> > /K
> > 
> > >
> > > > TIA
> > > > Karli Sjöberg
> > > > ___
> > > > Users mailing list
> > > > Users@ovirt.org
> > > > http://lists.ovirt.org/mailman/listinfo/users
> > > >
> > 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] OVA import of FC21 VM hangs during virt-v2v conversion?

[Derek Atkins]

Hi,

My last VM imported in 2 minutes.  This one has been sitting for three
hours.  I think this is a bug.

Just in case it helps, here's a larger piece of the virt-v2v log
(see the end)

-derek

On Mon, November 7, 2016 12:54 pm, Derek Atkins wrote:
> Hi,
>
> I've successfully imported several VMs already, so I thought I had the
> process down.  Each import completed relatively quickly.  So that's why
> this one was such a surprise.
>
> I've got a Fedora 21 VM packaged into an OVA.  I copy it to my ovirt
> host and then [Virtual Machines] -> Import -> [OVA] and select the ova
> file.  Follow the process, assign the correct storage location, and let
> it go.  Usually it takes only a few minutes, but it's been sitting in
> the conversion process for over 20 minutes already (multiple attempts
> end in the same place).  It's only a 4GB disk; the other imports were
> all around the same size and took significantly longer.
>
> I tried running virt-v2v by hand:
>
> LIBGUESTFS_BACKEND=direct virt-v2v -v -x -i ova fedora21.ova -of raw -o
> null
>
> and it hung here:
>
> guestfsd: main_loop: new request, len 0x28
> guestfsd: main_loop: proc 26 (aug_close) took 0.03 seconds
> libguestfs: trace: v2v: aug_close = 0
> libguestfs: trace: v2v: selinux_relabel
> "/etc/selinux/targeted/contexts/files/file_contexts" "/" "force:true"
> guestfsd: main_loop: new request, len 0x6c
> commandrvf: stdout=n stderr=y flags=0x0
> commandrvf: setfiles -F -e /sysroot/dev -e /sysroot/proc -e
> /sysroot/selinux -e /sysroot/sys -r /sysroot -q
> /sysroot/etc/selinux/targeted/contexts/files/file_contexts /sysroot/
> Can't stat exclude path "/sysroot/selinux", No such file or directory -
> ignoring.
> ^C
>
> Any ideas why this VM is different from all the other VMs?
>
> -derek

[snip]
installed kernel packages in this guest:
(kernel-core, 3.17.8-300.fc21, x86_64,
/boot/vmlinuz-3.17.8-300.fc21.x86_64,
/boot/initramfs-3.17.8-300.fc21.x86_64.img, virtio=true, xen=false,
debug=false)
(kernel-core, 3.17.4-301.fc21, x86_64,
/boot/vmlinuz-3.17.4-301.fc21.x86_64,
/boot/initramfs-3.17.4-301.fc21.x86_64.img, virtio=true, xen=false,
debug=false)
libguestfs: trace: v2v: glob_expand "/vmlinuz-*"
guestfsd: main_loop: new request, len 0x3c
guestfsd: main_loop: proc 113 (glob_expand) took 0.00 seconds
libguestfs: trace: v2v: glob_expand = []
libguestfs: trace: v2v: glob_expand "/boot/vmlinuz-*"
guestfsd: main_loop: new request, len 0x40
guestfsd: main_loop: proc 113 (glob_expand) took 0.00 seconds
libguestfs: trace: v2v: glob_expand =
["/boot/vmlinuz-0-rescue-aebaf0a54c334c40a3f2a001266b032e",
"/boot/vmlinuz-3.17.4-301.fc21.x86_64",
"/boot/vmlinuz-3.17.8-300.fc21.x86_64"]
libguestfs: trace: v2v: glob_expand "/boot/kernel-*"
guestfsd: main_loop: new request, len 0x40
guestfsd: main_loop: proc 113 (glob_expand) took 0.00 seconds
libguestfs: trace: v2v: glob_expand = []
libguestfs: trace: v2v: exists "/sbin/grubby"
guestfsd: main_loop: new request, len 0x38
libguestfs: trace: v2v: exists = 1
libguestfs: trace: v2v: command "grubby --default-kernel"
guestfsd: main_loop: proc 36 (exists) took 0.00 seconds
guestfsd: main_loop: new request, len 0x4c
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: mount --bind /dev /sysroot/dev
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: mount --bind /dev/pts /sysroot/dev/pts
mount: mount point /sysroot/dev/pts does not exist
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: mount --bind /proc /sysroot/proc
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: mount --bind /sys/fs/selinux /sysroot/selinux
mount: mount point /sysroot/selinux does not exist
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: mount --bind /sys /sysroot/sys
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: mount --bind /sys/fs/selinux /sysroot/sys/fs/selinux
mount: mount point /sysroot/sys/fs/selinux does not exist
renaming /sysroot/etc/resolv.conf to /sysroot/etc/bojotzks
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: cp /etc/resolv.conf /sysroot/etc/resolv.conf
commandrvf: stdout=y stderr=y flags=0x4
commandrvf: grubby --default-kernel
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: umount /sysroot/sys
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: umount /sysroot/proc
commandrvf: stdout=n stderr=n flags=0x0
commandrvf: umount /sysroot/dev
renaming /sysroot/etc/bojotzks to /sysroot/etc/resolv.conf
guestfsd: main_loop: proc 50 (command) took 0.13 seconds
libguestfs: trace: v2v: command = "/boot/vmlinuz-3.17.8-300.fc21.x86_64\n"
libguestfs: trace: v2v: statns "/boot/vmlinuz-3.17.8-300.fc21.x86_64"
guestfsd: main_loop: new request, len 0x50
guestfsd: main_loop: proc 421 (statns) took 0.00 seconds
libguestfs: trace: v2v: statns = 
libguestfs: trace: v2v: statns
"/boot/vmlinuz-0-rescue-aebaf0a54c334c40a3f2a001266b032e"
guestfsd: main_loop: new request, len 0x64
guestfsd: main_loop: proc 421 (statns) took 0.00 seconds
libguestfs: trace: v2v: statns = 
libguestfs: trace: v2v: statns 

Re: [ovirt-users] CpuProfileCreator

[cmc]

Hi Martin,

This appears to have resolved the issue, though I had a panic when the
upgrade broke the certificate. I re-ran engine setup and it fixed the cert
issue.

Cheers,

cam


On Mon, Nov 7, 2016 at 1:27 PM, cmc  wrote:

> Hi Martin,
>
> The version is: oVirt Engine Version: 4.0.2.7-1.el7.centos
>
> I had a look through the changelog up until 4.0.4 as I was contemplating
> upgrading but may have missed it.
>
> Thanks,
>
> Cam
>
> On Fri, Nov 4, 2016 at 12:42 PM, Martin Sivak  wrote:
>
>> Hi,
>>
>> what version of the product are you running? We recently fixed a related
>> issue:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1369046
>>
>> Did you upgrade form 3.6 to 4.0 recently?
>>
>> Regards
>>
>> Martin Sivak
>>
>> On Thu, Nov 3, 2016 at 1:48 PM, cmc  wrote:
>> > Hi,
>> >
>> > I'm having problems creating VMs with the following error message:
>> >
>> >  "User doesn't have permissions to assign the cpu profile"
>> >
>> > From the log:
>> >
>> > 2016-11-03 12:26:36,918 WARN  [org.ovirt.engine.core.bll.AddVmCommand]
>> > (default task-346) [] Validation of action 'AddVm' failed for user
>> > c...@fscfc.co.uk@fscfc.co.uk-authz. Reasons:
>> > VAR__ACTION__ADD,VAR__TYPE__VM,ACTION_TYPE_NO_PERMISSION_TO_
>> ASSIGN_CPU_PROFILE,$cpuProfileId
>> > 7e921369-83c1-46b2-86bd-1056d996873e,$cpuProfileName Wells-4th
>> >
>> > The user I am logged in as is part of a group which has the following
>> > permissions:
>> >
>> > SuperUser
>> > ClusterAdmin
>> > DatacenterAdmin
>> > CpuProfileCreator
>> >
>> > I added the last one even though I thought ClusterAdmin and
>> DatacenterAdmin
>> > would cover it.
>> >
>> > When I go to Clusters->CpuProfile for this cluster, it does show all of
>> > these permissions.
>> >
>> > What am I doing wrong here?
>> >
>> > Thanks for any help,
>> >
>> > Cam
>> >
>> >
>> >
>> >
>> >
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>> >
>>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] expired cert for aaa

[cmc]

To reply to my own email:

This is now fixed.

I originally ran these steps for the upgrade:

# yum install http://resources.ovirt.org/pub/yum-repo/ovirt-release40.rpm
# yum update "ovirt-engine-setup*"
# engine-setup

There were no errors reported during the process. I could login as the
internal user without any errors. It was just using an external provider,
which made me think it was an aaa issue, so I looked
at the certificate exported from AD which had an expiry of 2063.

I tried running engine-setup again, and this fixed the issue. I have no
idea what happened along the way, I will check the logs. I notice it
reports:

[ INFO  ] Upgrading CA

so it looks like it creates a cert. Why it would have created one with such
a short expiry date is a mystery to me.

Hope this helps anyone who might come across this issue

Cheers,

Cam

On Mon, Nov 7, 2016 at 7:03 PM, cmc  wrote:

> Hi,
>
> I upgraded my engine host from 4.0.2.7 to 4.0.4 and when I attempt to
> login via a aaa provider I get:
>
>  java.security.cert.CertificateExpiredException: NotAfter: Fri Nov 04
> 00:19:18 GMT 2016,
>
> What certificate is this referring to? The certificate from the aaa
> provider expires in 2063.
>
> It was fine until the upgrade.
>
> Thanks for any help,
>
> Cam
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] expired cert for aaa

[cmc]

Hi,

I upgraded my engine host from 4.0.2.7 to 4.0.4 and when I attempt to login
via a aaa provider I get:

 java.security.cert.CertificateExpiredException: NotAfter: Fri Nov 04
00:19:18 GMT 2016,

What certificate is this referring to? The certificate from the aaa
provider expires in 2063.

It was fine until the upgrade.

Thanks for any help,

Cam
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] HostedEngine with HA

[Carlos Rodrigues]

I made more tests and i have two hosts (hosted_engine1
and hosted_engine2) configured to be hosted engine and after sent down
the network interface (ifdown bond0 and i have ovirtmgmt over bond0)
on hosted_engine1, the hosted_engined2 try to start engine:


==> /var/log/ovirt-hosted-engine-ha/agent.log <==
MainThread::INFO::2016-11-07 
18:17:18,598::ovf_store::103::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(scan)
 Found OVF_STORE: imgUUID:8f567072-82d7-4a80-b643-76a1e1d273ef, 
volUUID:7b12f649-b8cd-426a-95d8-37bb223ac86f
MainThread::INFO::2016-11-07 
18:17:18,875::ovf_store::112::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(getEngineVMOVF)
 Extracting Engine VM OVF from the OVF_STORE
MainThread::INFO::2016-11-07 
18:17:18,896::ovf_store::119::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(getEngineVMOVF)
 OVF_STORE volume path: 
/rhev/data-center/mnt/blockSD/4c0104e0-dc8d-44b6-ab70-9d46599eb7f6/images/8f567072-82d7-4a80-b643-76a1e1d273ef/7b12f649-b8cd-426a-95d8-37bb223ac86f
 
MainThread::INFO::2016-11-07 
18:17:18,991::config::226::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file)
 Found an OVF for HE VM, trying to convert
MainThread::INFO::2016-11-07 
18:17:18,994::config::231::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file)
 Got vm.conf from OVF_STORE
MainThread::INFO::2016-11-07 
18:17:18,994::hosted_engine::1148::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_clean_vdsm_state)
 Ensuring VDSM state is clear for engine VM
MainThread::INFO::2016-11-07 
18:17:19,011::hosted_engine::1160::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_clean_vdsm_state)
 Vdsm state for VM clean
MainThread::INFO::2016-11-07 
18:17:19,011::hosted_engine::1109::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_start_engine_vm)
 Starting vm using `/usr/sbin/hosted-engine --vm-start`
MainThread::INFO::2016-11-07 
18:17:19,410::hosted_engine::1115::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_start_engine_vm)
 stdout: 
fe6a0618-62aa-434d-b9b8-459603a690ce
Status = WaitForLaunch
nicModel = rtl8139,pv
statusTime = 4905357140
emulatedMachine = pc
pid = 0
vmName = HostedEngine
devices = [{'index': '0', 'iface': 'virtio', 'format': 'raw', 
'bootOrder': '1', 'address': 'None', 'volumeID': 
'5e24a8ba-ff1f-409b-918c-b0c31565ae89', 'imageID': 
'23ec5c8d-d154-488b-8dd2-de29a0fd941d', 'readonly': 'false', 'domainID': 
'4c0104e0-dc8d-44b6-ab70-9d46599eb7f6', 'deviceId': 
'23ec5c8d-d154-488b-8dd2-de29a0fd941d', 'poolID': 
'----', 'device': 'disk', 'shared': 
'exclusive', 'propagateErrors': 'off', 'type': 'disk'}, {'nicModel': 'pv', 
'macAddr': '00:16:3e:1c:f3:7c', 'linkActive': 'true', 'network': 'ovirtmgmt', 
'deviceId': '113617eb-d506-4df1-b542-26248ffd8027', 'address': 'None', 
'device': 'bridge', 'type': 'interface'}, {'index': '2', 'iface': 'ide', 
'readonly': 'true', 'deviceId': '8c3179ac-b322-4f5c-9449-c52e3665e0ae', 
'address': {'bus': '1', 'controller': '0', 'type': 'drive', 'target': '0', 
'unit': '0'}, 'device': 'cdrom', 'shared': 'false', 'path': '', 'type': 'disk'}]
guestDiskMapping = {}
vmType = kvm
displaySecurePort = -1
memSize = 4096
displayPort = -1
clientIp = 
spiceSecureChannels = 
smain,sdisplay,sinputs,scursor,splayback,srecord,ssmartcard,susbredir
smp = 2
displayIp = 0
display = vnc

MainThread::INFO::2016-11-07 
18:17:19,411::hosted_engine::1116::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_start_engine_vm)
 stderr: /usr/share/vdsm/vdsClient.py:33: DeprecationWarning: vdscli uses 
xmlrpc. since ovirt 3.6 xmlrpc is deprecated, please use vdsm.jsonrpcvdscli
  from vdsm import utils, vdscli, constants
/usr/share/vdsm/vdsClient.py:33: DeprecationWarning: vdscli uses xmlrpc. since 
ovirt 3.6 xmlrpc is deprecated, please use vdsm.jsonrpcvdscli
  from vdsm import utils, vdscli, constants

MainThread::INFO::2016-11-07 
18:17:19,411::hosted_engine::1128::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_start_engine_vm)
 Engine VM started on localhost
MainThread::INFO::2016-11-07 
18:17:19,416::brokerlink::111::ovirt_hosted_engine_ha.lib.brokerlink.BrokerLink::(notify)
 Trying: notify time=1478542639.42 type=state_transition 
detail=EngineStart-EngineStarting hostname='ied-blade11.install.eurotux.local'
MainThread::INFO::2016-11-07 
18:17:19,681::brokerlink::120::ovirt_hosted_engine_ha.lib.brokerlink.BrokerLink::(notify)
 Success, was notification of state_transition (EngineStart-EngineStarting) 
sent? sent
MainThread::INFO::2016-11-07 
18:17:19,681::hosted_engine::612::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_initialize_vdsm)
 Initializing VDSM

But i get the following error and don't see the hosted_engine1
receiving fence:

==> /var/log/ovirt-hosted-engine-ha/broker.log <==

Re: [ovirt-users] oVirt SDK v4 backwards compatibility

[Rafael Martins]

- Original Message -
> From: "Karli Sjöberg" 
> To: "Rafael Martins" 
> Cc: users@ovirt.org
> Sent: Monday, November 7, 2016 6:13:33 PM
> Subject: Re: [ovirt-users] oVirt SDK v4 backwards compatibility
> 
> 
> Den 7 nov. 2016 15:53 skrev Rafael Martins :
> >
> > - Original Message -
> > > From: "Karli Sjöberg" 
> > > To: users@ovirt.org
> > > Sent: Monday, November 7, 2016 3:06:10 PM
> > > Subject: [ovirt-users] oVirt SDK v4 backwards compatibility
> > >
> > > Heya!
> > >
> > > Quick question, if I have on my computer installed a newer version
> > > Python SDK than what´s installed on the engine (4.0.3 locally and 3.6.X
> > > in engine), is it possible to connect?
> >
> > It is not possible, but you can still install the RPM for the version 3 of
> > the SDK. Please note that the code of the SDK versions is not compatible.
> 
> Ok, as I thought. But how does others handle that, like moVirt e.g? Is there
> a best-practice for backwards compatibility?

Right now if you use the old SDK you should be able to "talk" with both 3.6 and 
4.0, because 4.0 api provides backward compatibility with 3.6. But I'm not sure 
if you can rely on this. Juan may have more details for you.

Thanks,
Rafael

> /K
> 
> >
> > > TIA
> > > Karli Sjöberg
> > > ___
> > > Users mailing list
> > > Users@ovirt.org
> > > http://lists.ovirt.org/mailman/listinfo/users
> > >
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Unexpected SSL errors (unexpected eof) in vdsm log?

[Derek Atkins]

Trying to track down some issues I'm seeing and I've noticed a log full
of SSL Errors:

JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:04,402::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:08,135::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:11,896::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:15,532::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:29,155::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:36,418::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:36,612::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:40,418::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:44,158::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof
JsonRpc (StompReactor)::ERROR::2016-11-07 
13:03:47,878::betterAsyncore::113::vds.dispatcher::(recv) SSL error during 
reading data: unexpected eof

Any idea where this is coming from, and how to fix it?

-derek
-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] OVA import of FC21 VM hangs during virt-v2v conversion?

[Derek Atkins]

Hi,

I've successfully imported several VMs already, so I thought I had the
process down.  Each import completed relatively quickly.  So that's why
this one was such a surprise.

I've got a Fedora 21 VM packaged into an OVA.  I copy it to my ovirt
host and then [Virtual Machines] -> Import -> [OVA] and select the ova
file.  Follow the process, assign the correct storage location, and let
it go.  Usually it takes only a few minutes, but it's been sitting in
the conversion process for over 20 minutes already (multiple attempts
end in the same place).  It's only a 4GB disk; the other imports were
all around the same size and took significantly longer.

I tried running virt-v2v by hand:

LIBGUESTFS_BACKEND=direct virt-v2v -v -x -i ova fedora21.ova -of raw -o null

and it hung here:

guestfsd: main_loop: new request, len 0x28
guestfsd: main_loop: proc 26 (aug_close) took 0.03 seconds
libguestfs: trace: v2v: aug_close = 0
libguestfs: trace: v2v: selinux_relabel 
"/etc/selinux/targeted/contexts/files/file_contexts" "/" "force:true"
guestfsd: main_loop: new request, len 0x6c
commandrvf: stdout=n stderr=y flags=0x0
commandrvf: setfiles -F -e /sysroot/dev -e /sysroot/proc -e /sysroot/selinux -e 
/sysroot/sys -r /sysroot -q 
/sysroot/etc/selinux/targeted/contexts/files/file_contexts /sysroot/
Can't stat exclude path "/sysroot/selinux", No such file or directory - 
ignoring.
^C

Any ideas why this VM is different from all the other VMs?

-derek

-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Problem creating ovirtmgmt bridge

[Edward Haas]

On Mon, Nov 7, 2016 at 3:39 PM, Chris Cowley 
wrote:

> I am installing on a 3 node cluster, with gluster as my storage. Each node
> has a pair of bonds. At the moment, my intention is to use bond0 for all VM
> traffic, with management (and thus ovirtmgmt) on bond1 along with Gluster
> (bond1..
>
> Sadly hosted-engine --deploy dies saying:
>
> ```
> Failed to execute stage 'Misc configuration': Failed to setup networks
> {'ovirtmgmt': {'ipaddr': u'10.110.84.11', 'netmask': u'255.255.255.0',
> 'bonding': 'bond1', 'bootproto': u'none', 'gateway': u'10.110.84.1',
> 'defaultRoute': True}}. Error code: "-32603" message: "Attempt to call
> function:  0x38e5050>> with arguments: ({u'ovirtmgmt': {u'ipaddr': u'10.110.84.11',
> u'bonding': u'bond1', u'netmask': u'255.255.255.0', u'bootproto': u'none',
> u'gateway': u'10.110.84.1', u'defaultRoute': True}}, {},
> {u'connectivityCheck': False}) error: 'NoneType' object is not iterable"
> ```
>
> Is my way of configuring my network even possible? Or do I need to
> re-think things
>
>
Please provide vdsm.log and supervdsm.log from the node that failed for you.


> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt SDK v4 backwards compatibility

[Karli Sjöberg]

Den 7 nov. 2016 15:53 skrev Rafael Martins :
>
> - Original Message -
> > From: "Karli Sjöberg" 
> > To: users@ovirt.org
> > Sent: Monday, November 7, 2016 3:06:10 PM
> > Subject: [ovirt-users] oVirt SDK v4 backwards compatibility
> >
> > Heya!
> >
> > Quick question, if I have on my computer installed a newer version
> > Python SDK than what´s installed on the engine (4.0.3 locally and 3.6.X
> > in engine), is it possible to connect?
>
> It is not possible, but you can still install the RPM for the version 3 of 
> the SDK. Please note that the code of the SDK versions is not compatible.

Ok, as I thought. But how does others handle that, like moVirt e.g? Is there a 
best-practice for backwards compatibility?

/K

>
> > TIA
> > Karli Sjöberg
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Ovirt 4.0.4 - Solaris 11u3 Guest - No networking

[Alfred Angelov]

Hello all,

I have browsed the list and found that this issue has been worked on back
in 2013 in ovirt 3.4; and the fix was to add hook scripts that would remove
the -cpu parameter before VM start.

I tried all different (non-Virtio) network drivers with the same problem,
the network does not work.

Anyone got a workaround or guide how to create a working Solaris 11 guest
inside ovirt?
-- 
*Alfred Angelov*
IT Manager

www.foxt.com | alfred.ange...@foxt.com  | +46 73 363 00 63
Connect with me on Linkedin 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Uploading an image with qcow2 compat 1.1 is unsupported for storage format type V3

[Nathanaël Blanchet]

Hi all, how can I get informations about supported formats with the 
image upload feature ?


All my domain storages are v3, does it exist v4? If yes, how can I 
upgrade them to a superior format?


Do I need to convert my non compatible 1.1 qcow2 appliance to an other 
format?


This is what I found : 
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Virtualization_Deployment_and_Administration_Guide/sect-Using_qemu_img-Supported_qemu_img_formats.html



Thank you


--
Nathanaël Blanchet

Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt SDK v4 backwards compatibility

[Rafael Martins]

- Original Message -
> From: "Karli Sjöberg" 
> To: users@ovirt.org
> Sent: Monday, November 7, 2016 3:06:10 PM
> Subject: [ovirt-users] oVirt SDK v4 backwards compatibility
> 
> Heya!
> 
> Quick question, if I have on my computer installed a newer version
> Python SDK than what´s installed on the engine (4.0.3 locally and 3.6.X
> in engine), is it possible to connect?

It is not possible, but you can still install the RPM for the version 3 of the 
SDK. Please note that the code of the SDK versions is not compatible.
 
> TIA
> Karli Sjöberg
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] oVirt SDK v4 backwards compatibility

[Karli Sjöberg]

Heya!

Quick question, if I have on my computer installed a newer version
Python SDK than what´s installed on the engine (4.0.3 locally and 3.6.X
in engine), is it possible to connect?

TIA
Karli Sjöberg
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Problem creating ovirtmgmt bridge

[Chris Cowley]

I am installing on a 3 node cluster, with gluster as my storage. Each node
has a pair of bonds. At the moment, my intention is to use bond0 for all VM
traffic, with management (and thus ovirtmgmt) on bond1 along with Gluster
(bond1..

Sadly hosted-engine --deploy dies saying:

```
Failed to execute stage 'Misc configuration': Failed to setup networks
{'ovirtmgmt': {'ipaddr': u'10.110.84.11', 'netmask': u'255.255.255.0',
'bonding': 'bond1', 'bootproto': u'none', 'gateway': u'10.110.84.1',
'defaultRoute': True}}. Error code: "-32603" message: "Attempt to call
function: > with arguments: ({u'ovirtmgmt': {u'ipaddr': u'10.110.84.11',
u'bonding': u'bond1', u'netmask': u'255.255.255.0', u'bootproto': u'none',
u'gateway': u'10.110.84.1', u'defaultRoute': True}}, {},
{u'connectivityCheck': False}) error: 'NoneType' object is not iterable"
```

Is my way of configuring my network even possible? Or do I need to re-think
things
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] CpuProfileCreator

[cmc]

Hi Martin,

The version is: oVirt Engine Version: 4.0.2.7-1.el7.centos

I had a look through the changelog up until 4.0.4 as I was contemplating
upgrading but may have missed it.

Thanks,

Cam

On Fri, Nov 4, 2016 at 12:42 PM, Martin Sivak  wrote:

> Hi,
>
> what version of the product are you running? We recently fixed a related
> issue:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1369046
>
> Did you upgrade form 3.6 to 4.0 recently?
>
> Regards
>
> Martin Sivak
>
> On Thu, Nov 3, 2016 at 1:48 PM, cmc  wrote:
> > Hi,
> >
> > I'm having problems creating VMs with the following error message:
> >
> >  "User doesn't have permissions to assign the cpu profile"
> >
> > From the log:
> >
> > 2016-11-03 12:26:36,918 WARN  [org.ovirt.engine.core.bll.AddVmCommand]
> > (default task-346) [] Validation of action 'AddVm' failed for user
> > c...@fscfc.co.uk@fscfc.co.uk-authz. Reasons:
> > VAR__ACTION__ADD,VAR__TYPE__VM,ACTION_TYPE_NO_PERMISSION_
> TO_ASSIGN_CPU_PROFILE,$cpuProfileId
> > 7e921369-83c1-46b2-86bd-1056d996873e,$cpuProfileName Wells-4th
> >
> > The user I am logged in as is part of a group which has the following
> > permissions:
> >
> > SuperUser
> > ClusterAdmin
> > DatacenterAdmin
> > CpuProfileCreator
> >
> > I added the last one even though I thought ClusterAdmin and
> DatacenterAdmin
> > would cover it.
> >
> > When I go to Clusters->CpuProfile for this cluster, it does show all of
> > these permissions.
> >
> > What am I doing wrong here?
> >
> > Thanks for any help,
> >
> > Cam
> >
> >
> >
> >
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] can't import vm from KVM host

[Shahar Havivi]

Hi Nelson,

Sorry for the long wait (I was on PTO).
I just test the patch with the following disk xml:








I did manage to see the disk with its actual size,
I was able to import the VM as well when I choose:
"Allocation Policy": "Preallocated"
(not the "Thin Provision" as is the default.
Currently we need to pre allocated kvm block disk and cannot use the thin
provision (we may need to disable it in the UI).

Did you try that?
It may related to the reason that the dev path you have is a /dev/mapper/ and
this is the reason that libvirt not returning the disk size? (Tomas?)

 Shahar.


On 20.10.16 14:10, Nelson Lameiras wrote:
> Hello,
> 
> Any update on this issue?
> Can I do anything to help?
> 
> cordialement, regards, 
> Nelson LAMEIRAS 
> 
> Lyra Network 
> Service Projets et Processus 
> Tel : +33 (0) 5 32 09 09 70 
> 109 rue de l’innovation 
> 31670 Labège - France 
> www.lyra-network.com
> 
> - Original Message -
> From: "Michal Skrivanek" 
> To: "Tomas Golembiovsky" 
> Cc: "Nelson Lameiras" , users@ovirt.org
> Sent: Tuesday, October 11, 2016 4:11:36 PM
> Subject: Re: [ovirt-users] can't import vm from KVM host
> 
> > On 11 Oct 2016, at 16:01, Tomáš Golembiovský  wrote:
> > 
> > Hi,
> > 
> > On Mon, 10 Oct 2016 12:21:47 +0200 (CEST)
> > Nelson Lameiras  wrote:
> > 
> >> hello michal,
> >> 
> >> Yes, both paths are correct and working on the source host since the VM 
> >> starts and works correctly on source host. Nevertheless I have checked 
> >> with fdisk and mount to assure that these devices are indeed reachable.
> >> 
> >> Please understand that my setup is the following:
> >> source host : KVM (hosting the VM to migrate)
> >> target host : oVirt 4.0.4 (patched)
> >> 
> >> The error "no storage vol with matching path '/dev/sdc'" is returned by 
> >> the target host script /usr/lib/python2.7/site-packages/vdsm/v2v.py.
> >> This almost seems normal since the device /dev/sdc is not mounted on 
> >> target host (where script is running) but only on source host.
> >> 
> >> Can this be the source of the error ?
> > 
> > To me this looks more like a bug in the engine, not in VDSM.
> > 
> > The exception in the VDSM log is OK and it is not fatal. It is actually
> > to be expected for block devices. VDSM is trying to find out the size of
> > the disk, but the way it does that is tailored for volumes in storage
> > pool. But the block device is not a volume in a storage pool and that is
> > why libvirt complains. We can potentially skip the check for block
> > devices to avoid error in the log, or provide some other logic of
> > getting the size.
> > 
> > 
> > But the real problem is this error in engine.log:
> > 
> >> 2016-09-29 14:13:48,637 ERROR 
> >> [org.ovirt.engine.core.bll.GetVmsFromExternalProviderQuery] (default 
> >> task-30) [] Exception: 
> >> org.ovirt.engine.core.common.errors.EngineException: EngineException: 
> >> java.lang.NumberFormatException: null (Failed with error ENGINE and code 
> >> 5001)
> > 
> > We don't send the size (or rather send null value) for the disk and
> > engine does not like that. I assume engine does not really consider all
> > the optional VM properties as optional.
> 
> is it really optional in schema?
> even if it is, indeed it’s wrong:)
> 
> the best would be to handle it on v2v.py side first to avoid libvirt err, but 
> i don’t know if we can get that info via libvirt in any other way:/
> 
> > 
> > 
> > 
> >Tomas
> > 
> > -- 
> > Tomáš Golembiovský 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Multiple Data Storage Domains

[Sahina Bose]

On Mon, Nov 7, 2016 at 3:27 PM, Gary Pedretty  wrote:

> [root@fai-kvm-1-gfs admin]# gluster volume status data2
> Status of volume: data2
> Gluster process TCP Port  RDMA Port  Online
>  Pid
> 
> --
> Brick fai-kvm-1-vmn.ravnalaska.net:/kvm2/gl
> uster/data2/brick   49156 0  Y
> 3484
> Brick fai-kvm-2-vmn.ravnalaska.net:/kvm2/gl
> uster/data2/brick   49156 0  Y
> 34791
> Brick fai-kvm-3-vmn.ravnalaska.net:/kvm2/gl
> uster/data2/brick   49156 0  Y
> 177340
> Brick fai-kvm-4-vmn.ravnalaska.net:/kvm2/gl
> uster/data2/brick   49152 0  Y
> 146038
> NFS Server on localhost 2049  0  Y
> 40844
> Self-heal Daemon on localhost   N/A   N/AY
> 40865
> NFS Server on fai-kvm-2-gfs.ravnalaska.net  2049  0  Y
> 99905
> Self-heal Daemon on fai-kvm-2-gfs.ravnalask
> a.net   N/A   N/AY
> 99915
> NFS Server on fai-kvm-4-gfs.ravnalaska.net  2049  0  Y
> 176305
> Self-heal Daemon on fai-kvm-4-gfs.ravnalask
> a.net   N/A   N/AY
> 176326
> NFS Server on fai-kvm-3-gfs.ravnalaska.net  2049  0  Y
> 226271
> Self-heal Daemon on fai-kvm-3-gfs.ravnalask
> a.net   N/A   N/AY
> 226287
>
> Task Status of Volume data2
> 
> --
> There are no active volume tasks
>
>
> [root@fai-kvm-1-gfs admin]# gluster volume info data2
>
> Volume Name: data2
> Type: Striped-Replicate
> Volume ID: 20f85c9a-541b-4df4-9dba-44c5179bbfb0
> Status: Started
> Number of Bricks: 1 x 2 x 2 = 4
> Transport-type: tcp
> Bricks:
> Brick1: fai-kvm-1-vmn.ravnalaska.net:/kvm2/gluster/data2/brick
> Brick2: fai-kvm-2-vmn.ravnalaska.net:/kvm2/gluster/data2/brick
> Brick3: fai-kvm-3-vmn.ravnalaska.net:/kvm2/gluster/data2/brick
> Brick4: fai-kvm-4-vmn.ravnalaska.net:/kvm2/gluster/data2/brick
> Options Reconfigured:
> performance.readdir-ahead: on
> performance.quick-read: off
> performance.read-ahead: off
> performance.io-cache: off
> performance.stat-prefetch: off
> cluster.eager-lock: enable
> network.remote-dio: enable
> cluster.quorum-type: auto
> cluster.server-quorum-type: server
> storage.owner-uid: 36
> storage.owner-gid: 36
>
>
> See attached file for the mount log.
>


Striped-Replicate is no longer supported in GlusterFS upstream. Instead,
you should be using a Distribute-Replicate with sharding enabled. Also when
using a gluster volume as storage domain, it is recommended to use replica
3.

>From the mount logs, there is no indication as to why the volume is
unmounted frequently. Could you try again with a replica 3 volume that has
sharding enabled?


>
> Gary
>
>
> 
> Gary Pedrettyg...@ravnalaska.net
> 
> Systems Manager  www.flyravn.com
> Ravn Alaska   /\907-450-7251
> 5245 Airport Industrial Road /  \/\ 907-450-7238 fax
> Fairbanks, Alaska  99709/\  /\ \ Second greatest commandment
> Serving All of Alaska  /  \/  /\  \ \/\   “Love your neighbor as
> Really loving the record green up date! Summmer!!   yourself” Matt 22:39
> 
>
>
>
>
>
>
>
>
>
>
>
>
> On Nov 6, 2016, at 9:50 PM, Sahina Bose  wrote:
>
> However your volume configuration seems suspect -"stripe 2 replica 2". Can
> you provide gluster volume info of your second storage domain gluster
> volume? The mount logs of the volume (under 
> /var/log/glusterfs/rhev-datacenter...log)
> from the host where the volume is being mounted will also help.
>
>
>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Multiple Data Storage Domains

[Gary Pedretty]

[root@fai-kvm-1-gfs admin]# gluster volume status data2Status of volume: data2Gluster process                             TCP Port  RDMA Port  Online  Pid--Brick fai-kvm-1-vmn.ravnalaska.net:/kvm2/gluster/data2/brick                           49156     0          Y       3484Brick fai-kvm-2-vmn.ravnalaska.net:/kvm2/gluster/data2/brick                           49156     0          Y       34791Brick fai-kvm-3-vmn.ravnalaska.net:/kvm2/gluster/data2/brick                           49156     0          Y       177340Brick fai-kvm-4-vmn.ravnalaska.net:/kvm2/gluster/data2/brick                           49152     0          Y       146038NFS Server on localhost                     2049      0          Y       40844Self-heal Daemon on localhost               N/A       N/A        Y       40865NFS Server on fai-kvm-2-gfs.ravnalaska.net  2049      0          Y       99905Self-heal Daemon on fai-kvm-2-gfs.ravnalaska.net                                       N/A       N/A        Y       99915NFS Server on fai-kvm-4-gfs.ravnalaska.net  2049      0          Y       176305Self-heal Daemon on fai-kvm-4-gfs.ravnalaska.net                                       N/A       N/A        Y       176326NFS Server on fai-kvm-3-gfs.ravnalaska.net  2049      0          Y       226271Self-heal Daemon on fai-kvm-3-gfs.ravnalaska.net                                       N/A       N/A        Y       226287Task Status of Volume data2--There are no active volume tasks[root@fai-kvm-1-gfs admin]# gluster volume info data2Volume Name: data2Type: Striped-ReplicateVolume ID: 20f85c9a-541b-4df4-9dba-44c5179bbfb0Status: StartedNumber of Bricks: 1 x 2 x 2 = 4Transport-type: tcpBricks:Brick1: fai-kvm-1-vmn.ravnalaska.net:/kvm2/gluster/data2/brickBrick2: fai-kvm-2-vmn.ravnalaska.net:/kvm2/gluster/data2/brickBrick3: fai-kvm-3-vmn.ravnalaska.net:/kvm2/gluster/data2/brickBrick4: fai-kvm-4-vmn.ravnalaska.net:/kvm2/gluster/data2/brickOptions Reconfigured:performance.readdir-ahead: onperformance.quick-read: offperformance.read-ahead: offperformance.io-cache: offperformance.stat-prefetch: offcluster.eager-lock: enablenetwork.remote-dio: enablecluster.quorum-type: autocluster.server-quorum-type: serverstorage.owner-uid: 36storage.owner-gid: 36See attached file for the mount log.Gary
more rhev-data-center-mnt-glusterSD-glustermount2:data2.log-20161106
[2016-11-04 22:54:32.118587] I [MSGID: 100030] [glusterfsd.c:2338:main] 
0-/usr/sbin/glusterfs: Started running /usr/sbin/glusterfs version 3.7.16 
(args: /usr/sbin/glusterfs --volfile-server=glustermou
nt2 --volfile-server=fai-kvm-1-vmn.ravnalaska.net 
--volfile-server=fai-kvm-2-vmn.ravnalaska.net 
--volfile-server=fai-kvm-3-vmn.ravnalaska.net 
--volfile-server=fai-kvm-4-vmn.ravnalaska.net --volfile-id
=data2 /rhev/data-center/mnt/glusterSD/glustermount2:data2)
[2016-11-04 22:54:32.128807] I [MSGID: 101190] 
[event-epoll.c:632:event_dispatch_epoll_worker] 0-epoll: Started thread with 
index 1
[2016-11-04 22:54:32.138959] I [MSGID: 101190] 
[event-epoll.c:632:event_dispatch_epoll_worker] 0-epoll: Started thread with 
index 2
[2016-11-04 22:54:32.139878] I [MSGID: 114020] [client.c:2113:notify] 
0-data2-client-0: parent translators are ready, attempting connect on transport
[2016-11-04 22:54:32.142057] I [MSGID: 114020] [client.c:2113:notify] 
0-data2-client-1: parent translators are ready, attempting connect on transport
[2016-11-04 22:54:32.142331] I [rpc-clnt.c:1960:rpc_clnt_reconfig] 
0-data2-client-0: changing port to 49156 (from 0)
[2016-11-04 22:54:32.143961] I [MSGID: 114020] [client.c:2113:notify] 
0-data2-client-2: parent translators are ready, attempting connect on transport
[2016-11-04 22:54:32.146123] I [MSGID: 114057] 
[client-handshake.c:1437:select_server_supported_programs] 0-data2-client-0: 
Using Program GlusterFS 3.3, Num (1298437), Version (330)
[2016-11-04 22:54:32.146308] I [rpc-clnt.c:1960:rpc_clnt_reconfig] 
0-data2-client-1: changing port to 49156 (from 0)
[2016-11-04 22:54:32.147618] I [MSGID: 114020] [client.c:2113:notify] 
0-data2-client-3: parent translators are ready, attempting connect on transport
[2016-11-04 22:54:32.149874] I [MSGID: 114046] 
[client-handshake.c:1213:client_setvolume_cbk] 0-data2-client-0: Connected to 
data2-client-0, attached to remote volume '/kvm2/gluster/data2/brick'.
[2016-11-04 22:54:32.149891] I [MSGID: 114047] 
[client-handshake.c:1224:client_setvolume_cbk] 0-data2-client-0: Server and 
Client lk-version numbers are not same, reopening the fds
[2016-11-04 22:54:32.149941] I [MSGID: 108005] [afr-common.c:4299:afr_notify] 
0-data2-replicate-0: Subvolume 'data2-client-0' came back up; going online.
[2016-11-04 22:54:32.15] I [MSGID: 114035] 
[client-handshake.c:193:client_set_lk_version_cbk] 0-data2-client-0: Server lk 
version = 1
[2016-11-04 22:54:32.150080] I [MSGID: 114057] 

Re: [ovirt-users] external users problem

[Baptiste Agasse]

Hi, 

- Le 4 Nov 16, à 18:22, Greg Sheremeta  a écrit : 

> Sorry for the delay. Did anyone help out on this yet? If not, I can look now.

No problem. No evolution on this side, if you can take a look, it will be nice. 

Thank you. 

> Greg

> On Mon, Oct 24, 2016 at 8:52 AM, Martin Perina < mper...@redhat.com > wrote:

>> Alex/Greg, could you please take a look?

>> Thanks

>> Martin

>> On Mon, Oct 24, 2016 at 2:02 PM, Baptiste Agasse <
>> baptiste.aga...@lyra-network.com > wrote:

>>> Hi,

>>> - Le 24 Oct 16, à 11:25, Martin Perina < mper...@redhat.com > a écrit :

 On Mon, Oct 24, 2016 at 11:18 AM, Baptiste Agasse <
 baptiste.aga...@lyra-network.com > wrote:

> Hi Ondra,

> - Le 24 Oct 16, à 10:36, Ondra Machacek omach...@redhat.com a écrit :

> > On 10/21/2016 12:00 PM, Baptiste Agasse wrote:
> >> Hi all,

> >> We use ovirt 4.0.4 with FreeIPA as external provider. The external 
> >> provider was
> >> configured via the 'ovirt-engine-extension-aaa-ldap-setup' command. The
> >> authentication works fine, but in the webui, when you go on the 
> >> 'Active User
> >> Sessions', all users uuid is showed as 
> >> '----'.
> >> Other problem, maybe related, when a user create a VM, by default a 
> >> permission
> >> is created with the role of 'UserVmManager'. On the 'Permissions' 
> >> pane, we see
> >> a line with no value for User, Authorization provider, Namespace. The 
> >> only
> >> value set on this line is the role (UserVmManager in that case). When 
> >> we try to
> >> remove this line, an exception occurs in the webui that prevent 
> >> deletion of
> >> this line.

> > I've never see such issue with FreeIPA. Can you please share what's
> > your IPA version?

> > Can you also please share the log of error which occurs, when you try
> > to remove the permission?

> We have multiple ovirt envs, all ovirt version are the same as described, 
> but
> FreeIPA servers are in different versions on these envs. We have one env 
> with
> FreeIPA on CentOS 6 (ipa-server-3.0.0-42.el6.centos.x86_64) and the other 
> on
> FreeIPA on CentOS 7 (ipa-server-4.2.0-15.0.1.el7.centos.6.1.x86_64). The 
> both
> envs have the same problem. On our envs, the role mapping in oVirt is 
> done on
> user groups and not on individual users.

> For the permission problem, the problem only occurs when the VM is 
> created via
> the user webui. Creating VM with API or admin webui is OK. When we try to
> remove the permission, an UI exception occurs and no logs on the 
> engine.log
> side. I've attached screenshots and ui.log.

 ​Unfortunately by default UI code is obfuscated, so we cannot find exact 
 issue.
 Could you please perform following steps and send us new ui.log?

 1. Install UI debug packages
 yum install ovirt-engine-webadmin-portal-debuginfo
 ovirt-engine-userportal-debuginfo​

 ​2. Restart ovirt-engine
 systemctl restart ovirt-engine

 3. Reproduce the error and share up-to-date ui.log with use

 If needed more info about UI logs can be found at
 http://www.ovirt.org/develop/developer-guide/engine/engine-debug-obfuscated-ui/

>>> I've reproduced the error, see attached engine.log at VM creation time and 
>>> the
>>> ui.log when trying to remove inconsistent permission.

>>> Thanks.

 Thanks

 Martin Perina
 ​



> >> This behavior is verified on all our oVirt environments (oVirt 4.0.4 + 
> >> FreeIPA)

> >> Someone hit the same problem ?

> >> Have a nice day.

> >> Regards.

> Regards.

> --
> Baptiste AGASSE

> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

>>> --
>>> Baptiste AGASSE

> --
> Greg Sheremeta, MBA
> Red Hat, Inc.
> Sr. Software Engineer
> gsher...@redhat.com

-- 
Baptiste AGASSE 
Lyra Network France, Senior GNU/Linux engineer 
109 Rue de l'innovation, 31670 Labège - France 
Phone: (+33)5.67.22.31.87 
Fax: (+33)5.67.22.31.61 
E-mail: baptiste.aga...@lyra-network.com 
Website: http://www.lyra-network.com 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users