Re: [ovirt-users] VM has been paused due to storage I/O problem

[Nir Soffer]

On Tue, Jan 31, 2017 at 6:09 PM, Gianluca Cecchi
 wrote:
> On Tue, Jan 31, 2017 at 3:23 PM, Nathanaël Blanchet 
> wrote:
>>
>> exactly the same issue by there with FC EMC domain storage...
>>
>>
>
> I'm trying to mitigate inserting a timeout for my SAN devices but I'm not
> sure of its effectiveness as CentOS 7 behavior  of "multipathd -k" and then
> "show config" seems different from CentOS 6.x
> In fact my attempt for multipath.conf is this
>
>
> # VDSM REVISION 1.3
> # VDSM PRIVATE
>
> defaults {
> polling_interval5
> no_path_retry   fail
> user_friendly_names no
> flush_on_last_del   yes
> fast_io_fail_tmo5
> dev_loss_tmo30
> max_fds 4096
> }
>
> # Remove devices entries when overrides section is available.
> devices {
> device {
> # These settings overrides built-in devices settings. It does not
> apply
> # to devices without built-in settings (these use the settings in
> the
> # "defaults" section), or to devices defined in the "devices"
> section.
> # Note: This is not available yet on Fedora 21. For more info see
> # https://bugzilla.redhat.com/1253799
> all_devsyes
> no_path_retry   fail
> }
> device {
> vendor "IBM"
> product "^1814"
> product_blacklist "Universal Xport"
> path_grouping_policy "group_by_prio"
> path_checker "rdac"
> features "0"
> hardware_handler "1 rdac"
> prio "rdac"
> failback immediate
> rr_weight "uniform"
> no_path_retry "12"

Hi Gianluca,

This should be a number, not a string, maybe multipath is having trouble
parsing this and it ignores your value?

> }
> }
>
> So I put exactly the default device config for my IBM/1814 device but
> no_path_retry set to 12.

Why 12?

This will do 12 retries, 5 seconds each when no path is available. This will
block lvm commands for 60 seconds when no path is available, blocking
other stuff in vdsm. Vdsm is not designed to handle this.

I recommend value of 4.

But note that this will is not related to the fact that your devices are not
initialize properly after boot.

> In CentOS 6.x when you do something like this, "show config" gives you the
> modified entry only for your device section.
> Instead in CentOS 7.3 it seems I get anyway the default one for IBM/1814 and
> also the customized one at the end of the output

Maybe your device configuration does not match exactly the builtin config.

>
> Two facts:
> - before I could reproduce the problem if I selected
> Maintenance
> Power Mgmt ---> Restart
> (tried 3 times with same behavior)
>
> Instead if I executed in separate steps
> Maintenance
> Power Mgmt --> Stop
> wait a moment
> Power Mgmt --> Start
>
> I didn't get problems (tried only one time...)

Maybe waiting a moment helps the storage/switches to clean up
properly after a server is shut down?

Does your power management trigger a proper shutdown?
I would avoid using it for normal shutdown.

>
> With this "new" multipath config (to be confirmed if in effect, how?) I
> don't get the VM paused problem even with Restart option of Power Mgmt
> In active host messages I see these ones when the other reboots:
>
> Jan 31 16:50:01 ovmsrv06 systemd: Started Session 705 of user root.
> Jan 31 16:50:01 ovmsrv06 systemd: Starting Session 705 of user root.
> Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sde
> - rdac checker reports path is up
> Jan 31 16:53:47 ovmsrv06 multipathd: 8:64: reinstated
> Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: load
> table [0 41943040 multipath 1 queue_if_no_path 1 rdac 2 1 service-time 0 2 1
> 8:224 1 65:0 1 service-time 0 2 1 8:64 1 8:160 1]
> Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdo
> - rdac checker reports path is ghost
> Jan 31 16:53:47 ovmsrv06 multipathd: 8:224: reinstated
> Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdk
> - rdac checker reports path is up
> Jan 31 16:53:47 ovmsrv06 multipathd: 8:160: reinstated
> Jan 31 16:53:47 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
> queueing MODE_SELECT command
> Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdq
> - rdac checker reports path is ghost
> Jan 31 16:53:47 ovmsrv06 multipathd: 65:0: reinstated
> Jan 31 16:53:48 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
> MODE_SELECT returned with sense 05/91/36
> Jan 31 16:53:48 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
> queueing MODE_SELECT command
> Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
> MODE_SELECT returned with sense 05/91/36
> Jan 31 

Re: [ovirt-users] Safe to install/use epel repository?

[Yedidyah Bar David]

On Tue, Jan 31, 2017 at 6:27 PM, Gianluca Cecchi
 wrote:
> This in CentOS 7.3 plain hosts used as hypervisors and intended for oVirt
> 4.0 and 4.1 hosts.

Generally speaking, we add epel with specific packages to ovirt-release*.rpm,
and do not support all of epel. In practice, the only problem I personally
know of is with epel packages that also exist in other ovirt-release* repos,
perhaps in different versions.

A recent example we bumped into:

https://gerrit.ovirt.org/71386

ovirt-live uses its own set of repos, and used all of epel, and epel has
a newer version of collectd than in the opstools repo (which is what we
use). But it doesn't have collectd-write_http. So jenkins failed:

http://jenkins.ovirt.org/job/ovirt-live_4.1-create-iso/70/console

> In particular for performance related packages such as
> bwm-ng
> iftop
> htop
> nethogs

Perhaps add them with includepkgs, to be on the safe side, and not
all of epel.

Best,
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Safe to install/use epel repository?

[Doug Ingham]

On 31 January 2017 at 13:27, Gianluca Cecchi 
wrote:

> This in CentOS 7.3 plain hosts used as hypervisors and intended for oVirt
> 4.0 and 4.1 hosts.
> In particular for performance related packages such as
> bwm-ng
> iftop
> htop
> nethogs
> and the like.
> Thanks,
> Gianluca
>

We've been running CentOS 7 with the epel, ovirt, gluster & zabbix repos on
all of our hosts.for a good few months now, without issue.

-- 
D
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Remove Disk Profiles Profile

[Cameron Christensen]

Hello,

I am trying to remove a disk profiles profile. The operation is failing
with this error:

Operation Canceled
Error while executing action: Cannot remove Disk Profile. Several Disks (2)
are using this Profile:
OVF_STORE,
OVF_STORE
- Please remove it from all Disks that are using it and try again.

I do not see any means of changing the disk profile another profile or
removing it from these OVF_STORE disks.

Any suggestions?

-- 
Regards,

Cameron
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] oVIRT Triangle with Gear icon?

[Devin Acosta]

Just curious I've noticed that from time to time I have a VM that shows a
triangle with a little gear to the side? I can't seem to find anywhere what
this means?

-- 

Devin Acosta
Red Hat Certified Architect, LinuxStack
602-354-1220 || de...@linuxguru.co
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] AAA Auth FreeIPA does not show users

[Matt .]

Hi Ondra,

I would add something like "Enter search user DN (uid=user,cn=... OR
empty for anonymous):"

The reason why is that I have seen other software erroring on the
whole DN as it putted the rest behind it and as you say you use IPA,
it looksup your base it's pretty understandable that you think, OK the
base or whatever will be added as when you select IPA there is know
that ovirt knows the scheme what is used.

Cheers,

Matt

2017-01-31 17:51 GMT+01:00 Ondra Machacek :
> There is prompt:
>
>  "Enter search user DN (empty for anonymous):"
>
> Which says you should input 'DN'. Any ideas how we can improve,
> that prompt so users are not confused?
>
> Thanks.
>
> On Tue, Jan 31, 2017 at 5:32 PM, Matt .  wrote:
>> OK solved. You cannot use anonymous in the full way. Also you need the
>> full DN for the search user.
>>
>> Thanks for the heads up!
>>
>> Matt
>>
>> 2017-01-31 13:03 GMT+01:00 Ondra Machacek :
>>> Hi,
>>>
>>> I've just tried with:
>>>
>>>  # ipa --version
>>> VERSION: 4.4.0, API_VERSION: 2.213
>>>
>>> And all worked good. Can you please share the logs,
>>> which Martin asked for, so we can investigate?
>>>
>>> Thanks,
>>> Ondra
>>>
>>> On Tue, Jan 31, 2017 at 12:50 PM, Matt .  wrote:
 Hi,

 True. Are you able to check if it still is good for IPA 4.4 usage, it
 could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed
 something ? Would be great!

 Thanks,

 Matt

 2017-01-31 11:30 GMT+01:00 Martin Perina :
>
>
> On Tue, Jan 31, 2017 at 11:17 AM, Matt .  wrote:
>>
>> Hi Martin,
>>
>> Thanks for the explanation. But what happens on those tests during the
>> setup the same happens as showed in oVirt.
>
>
> Exactly, you can execute those tests even before publishing new profile to
> engine and if something doesn't work you can fix even before users notice
> that something is wrong.
>
> Also please bear in mind that there are variety of small differences in
> schema across different setups even for the same LDAP server. So setup 
> tool
> uses only basic configurations, if you need something more complicated you
> need to edit configuration manually.
>
> Thanks
>
> Martin Perina
>
>>
>>
>> Default IPA should just work I guess.
>>
>> I will test your command and report back.
>>
>> Cheers,
>>
>> Matt
>>
>> 2017-01-31 10:24 GMT+01:00 Martin Perina :
>> > Hi,
>> >
>> > it seem that your schema doesn't match the defaults or you home some
>> > configuration issue. Could you please execute following and send us the
>> > output for your IPA setup?
>> >
>> >   ovirt-engine-extensions-tool --log-level=FINE aaa
>> > authz-fetch_principal_record --authz-flag=resolve-groups-recursive
>> > --authz-flag=resolve-groups --extension-name=
>> > --principal-name=
>> >
>> > The above will search for a user by  and tries to fetch all
>> > groups
>> > he is member of.
>> >
>> > Btw you can test both "search users/groups" and "login a user" during
>> > aaa-ldap-setup tool (and it's recommended to do so) and the output from
>> > those commands should provide you the same details.
>> >
>> > Thanks
>> >
>> > Martin Perina
>> >
>> >
>> >
>> > On Mon, Jan 30, 2017 at 9:27 PM, Matt .  wrote:
>> >>
>> >> Hi,
>> >>
>> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the
>> >> groups are shown but the users are not.
>> >>
>> >> When I chose 389ds, the users are shown but not the groups.
>> >>
>> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA
>> >> 4.4 version from Fedora
>> >>
>> >> Cheers,
>> >>
>> >> Matt
>> >> ___
>> >> Users mailing list
>> >> Users@ovirt.org
>> >> http://lists.ovirt.org/mailman/listinfo/users
>> >
>> >
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt Node TUI

[Fabian Deutsch]

On Tue, Jan 31, 2017 at 2:02 AM, Douglas Schilling Landgraf
 wrote:
> Oi Fernando,
>
> On 01/30/2017 12:32 PM, Fernando Frediani wrote:
>>
>> Hi Douglas, thanks.
>>
>> No, just said if I have no network connectivity to the box for some
>> reason only tool to use is shell to try to get it back online correct ?
>
>
> Yes, you might use manual settings or TUI tools like nmtui as any other
> Linux distro.

Yes - nmtui or nmcli are the tools you can use here to get your host
hooked up to the network.

- fabian

>
>> It TUI thought to be back sometime or Cockpit will be the ongoing tool
>> for that ? (I find it nice the TUI interface too).
>
>
> I don't see any movement to bring back oVirt TUI. At moment, the Cockpit is
> the preferable.
>
>
>>
>> Fernando
>>
>> On 30/01/2017 13:55, Douglas Schilling Landgraf wrote:
>>>
>>> Ola Fernando!
>>>
>>> On 01/30/2017 09:23 AM, Fernando Frediani wrote:

 What happened with the TUI ?

 Have just installed a 4.1 oVirt Node and it seems it is CLI only and I
 only see a shell login. Is it correct ?
 I read some pages on ovirt.org saying the old TUI was problematic and it
 was being redesign but that seems old.

 Or do I understand correctly and everything is now handled by Cockpit ?
>>>
>>>
>>> That's correct. Cockpit is the preferred option.
>>>
 Then if I have no network CLI is my friend ?
>>>
>>>
>>> Not sure if I understood the question but in Cockpit, there is Network
>>> tab. Web-browser: NODE_IP_ADDRESS:9090 -> Networking
>>>
>>> Or are looking for something like nmcli/nmtui?
>>>
>>> --
>>> Cheers
>>> Douglas
>>
>>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] AAA Auth FreeIPA does not show users

[Ondra Machacek]

There is prompt:

 "Enter search user DN (empty for anonymous):"

Which says you should input 'DN'. Any ideas how we can improve,
that prompt so users are not confused?

Thanks.

On Tue, Jan 31, 2017 at 5:32 PM, Matt .  wrote:
> OK solved. You cannot use anonymous in the full way. Also you need the
> full DN for the search user.
>
> Thanks for the heads up!
>
> Matt
>
> 2017-01-31 13:03 GMT+01:00 Ondra Machacek :
>> Hi,
>>
>> I've just tried with:
>>
>>  # ipa --version
>> VERSION: 4.4.0, API_VERSION: 2.213
>>
>> And all worked good. Can you please share the logs,
>> which Martin asked for, so we can investigate?
>>
>> Thanks,
>> Ondra
>>
>> On Tue, Jan 31, 2017 at 12:50 PM, Matt .  wrote:
>>> Hi,
>>>
>>> True. Are you able to check if it still is good for IPA 4.4 usage, it
>>> could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed
>>> something ? Would be great!
>>>
>>> Thanks,
>>>
>>> Matt
>>>
>>> 2017-01-31 11:30 GMT+01:00 Martin Perina :


 On Tue, Jan 31, 2017 at 11:17 AM, Matt .  wrote:
>
> Hi Martin,
>
> Thanks for the explanation. But what happens on those tests during the
> setup the same happens as showed in oVirt.


 Exactly, you can execute those tests even before publishing new profile to
 engine and if something doesn't work you can fix even before users notice
 that something is wrong.

 Also please bear in mind that there are variety of small differences in
 schema across different setups even for the same LDAP server. So setup tool
 uses only basic configurations, if you need something more complicated you
 need to edit configuration manually.

 Thanks

 Martin Perina

>
>
> Default IPA should just work I guess.
>
> I will test your command and report back.
>
> Cheers,
>
> Matt
>
> 2017-01-31 10:24 GMT+01:00 Martin Perina :
> > Hi,
> >
> > it seem that your schema doesn't match the defaults or you home some
> > configuration issue. Could you please execute following and send us the
> > output for your IPA setup?
> >
> >   ovirt-engine-extensions-tool --log-level=FINE aaa
> > authz-fetch_principal_record --authz-flag=resolve-groups-recursive
> > --authz-flag=resolve-groups --extension-name=
> > --principal-name=
> >
> > The above will search for a user by  and tries to fetch all
> > groups
> > he is member of.
> >
> > Btw you can test both "search users/groups" and "login a user" during
> > aaa-ldap-setup tool (and it's recommended to do so) and the output from
> > those commands should provide you the same details.
> >
> > Thanks
> >
> > Martin Perina
> >
> >
> >
> > On Mon, Jan 30, 2017 at 9:27 PM, Matt .  wrote:
> >>
> >> Hi,
> >>
> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the
> >> groups are shown but the users are not.
> >>
> >> When I chose 389ds, the users are shown but not the groups.
> >>
> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA
> >> 4.4 version from Fedora
> >>
> >> Cheers,
> >>
> >> Matt
> >> ___
> >> Users mailing list
> >> Users@ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> >
> >


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] AAA Auth FreeIPA does not show users

[Matt .]

OK solved. You cannot use anonymous in the full way. Also you need the
full DN for the search user.

Thanks for the heads up!

Matt

2017-01-31 13:03 GMT+01:00 Ondra Machacek :
> Hi,
>
> I've just tried with:
>
>  # ipa --version
> VERSION: 4.4.0, API_VERSION: 2.213
>
> And all worked good. Can you please share the logs,
> which Martin asked for, so we can investigate?
>
> Thanks,
> Ondra
>
> On Tue, Jan 31, 2017 at 12:50 PM, Matt .  wrote:
>> Hi,
>>
>> True. Are you able to check if it still is good for IPA 4.4 usage, it
>> could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed
>> something ? Would be great!
>>
>> Thanks,
>>
>> Matt
>>
>> 2017-01-31 11:30 GMT+01:00 Martin Perina :
>>>
>>>
>>> On Tue, Jan 31, 2017 at 11:17 AM, Matt .  wrote:

 Hi Martin,

 Thanks for the explanation. But what happens on those tests during the
 setup the same happens as showed in oVirt.
>>>
>>>
>>> Exactly, you can execute those tests even before publishing new profile to
>>> engine and if something doesn't work you can fix even before users notice
>>> that something is wrong.
>>>
>>> Also please bear in mind that there are variety of small differences in
>>> schema across different setups even for the same LDAP server. So setup tool
>>> uses only basic configurations, if you need something more complicated you
>>> need to edit configuration manually.
>>>
>>> Thanks
>>>
>>> Martin Perina
>>>


 Default IPA should just work I guess.

 I will test your command and report back.

 Cheers,

 Matt

 2017-01-31 10:24 GMT+01:00 Martin Perina :
 > Hi,
 >
 > it seem that your schema doesn't match the defaults or you home some
 > configuration issue. Could you please execute following and send us the
 > output for your IPA setup?
 >
 >   ovirt-engine-extensions-tool --log-level=FINE aaa
 > authz-fetch_principal_record --authz-flag=resolve-groups-recursive
 > --authz-flag=resolve-groups --extension-name=
 > --principal-name=
 >
 > The above will search for a user by  and tries to fetch all
 > groups
 > he is member of.
 >
 > Btw you can test both "search users/groups" and "login a user" during
 > aaa-ldap-setup tool (and it's recommended to do so) and the output from
 > those commands should provide you the same details.
 >
 > Thanks
 >
 > Martin Perina
 >
 >
 >
 > On Mon, Jan 30, 2017 at 9:27 PM, Matt .  wrote:
 >>
 >> Hi,
 >>
 >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the
 >> groups are shown but the users are not.
 >>
 >> When I chose 389ds, the users are shown but not the groups.
 >>
 >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA
 >> 4.4 version from Fedora
 >>
 >> Cheers,
 >>
 >> Matt
 >> ___
 >> Users mailing list
 >> Users@ovirt.org
 >> http://lists.ovirt.org/mailman/listinfo/users
 >
 >
>>>
>>>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Safe to install/use epel repository?

[Gianluca Cecchi]

This in CentOS 7.3 plain hosts used as hypervisors and intended for oVirt
4.0 and 4.1 hosts.
In particular for performance related packages such as
bwm-ng
iftop
htop
nethogs
and the like.
Thanks,
Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VM has been paused due to storage I/O problem

[Gianluca Cecchi]

On Tue, Jan 31, 2017 at 3:23 PM, Nathanaël Blanchet 
wrote:

> exactly the same issue by there with FC EMC domain storage...
>
>
I'm trying to mitigate inserting a timeout for my SAN devices but I'm not
sure of its effectiveness as CentOS 7 behavior  of "multipathd -k" and then
"show config" seems different from CentOS 6.x
In fact my attempt for multipath.conf is this


# VDSM REVISION 1.3
# VDSM PRIVATE

defaults {
polling_interval5
no_path_retry   fail
user_friendly_names no
flush_on_last_del   yes
fast_io_fail_tmo5
dev_loss_tmo30
max_fds 4096
}

# Remove devices entries when overrides section is available.
devices {
device {
# These settings overrides built-in devices settings. It does not
apply
# to devices without built-in settings (these use the settings in
the
# "defaults" section), or to devices defined in the "devices"
section.
# Note: This is not available yet on Fedora 21. For more info see
# https://bugzilla.redhat.com/1253799
all_devsyes
no_path_retry   fail
}
device {
vendor "IBM"
product "^1814"
product_blacklist "Universal Xport"
path_grouping_policy "group_by_prio"
path_checker "rdac"
features "0"
hardware_handler "1 rdac"
prio "rdac"
failback immediate
rr_weight "uniform"
no_path_retry "12"
}
}

So I put exactly the default device config for my IBM/1814 device but
no_path_retry set to 12.

In CentOS 6.x when you do something like this, "show config" gives you the
modified entry only for your device section.
Instead in CentOS 7.3 it seems I get anyway the default one for IBM/1814
and also the customized one at the end of the output

Two facts:
- before I could reproduce the problem if I selected
Maintenance
Power Mgmt ---> Restart
(tried 3 times with same behavior)

Instead if I executed in separate steps
Maintenance
Power Mgmt --> Stop
wait a moment
Power Mgmt --> Start

I didn't get problems (tried only one time...)

With this "new" multipath config (to be confirmed if in effect, how?) I
don't get the VM paused problem even with Restart option of Power Mgmt
In active host messages I see these ones when the other reboots:

Jan 31 16:50:01 ovmsrv06 systemd: Started Session 705 of user root.
Jan 31 16:50:01 ovmsrv06 systemd: Starting Session 705 of user root.
Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sde
- rdac checker reports path is up
Jan 31 16:53:47 ovmsrv06 multipathd: 8:64: reinstated
Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098:
load table [0 41943040 multipath 1 queue_if_no_path 1 rdac 2 1 service-time
0 2 1 8:224 1 65:0 1 service-time 0 2 1 8:64 1 8:160 1]
Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdo
- rdac checker reports path is ghost
Jan 31 16:53:47 ovmsrv06 multipathd: 8:224: reinstated
Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdk
- rdac checker reports path is up
Jan 31 16:53:47 ovmsrv06 multipathd: 8:160: reinstated
Jan 31 16:53:47 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
queueing MODE_SELECT command
Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdq
- rdac checker reports path is ghost
Jan 31 16:53:47 ovmsrv06 multipathd: 65:0: reinstated
Jan 31 16:53:48 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
MODE_SELECT returned with sense 05/91/36
Jan 31 16:53:48 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
queueing MODE_SELECT command
Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
MODE_SELECT returned with sense 05/91/36
Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
queueing MODE_SELECT command
Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1,
MODE_SELECT completed
Jan 31 16:53:49 ovmsrv06 kernel: sd 2:0:1:4: rdac: array Z1_DS4700, ctlr 1,
queueing MODE_SELECT command
Jan 31 16:53:49 ovmsrv06 kernel: sd 2:0:1:4: rdac: array Z1_DS4700, ctlr 1,
MODE_SELECT completed
Jan 31 16:53:52 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sde
- rdac checker reports path is ghost
Jan 31 16:53:52 ovmsrv06 multipathd: 8:64: reinstated
Jan 31 16:53:52 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098:
load table [0 41943040 multipath 1 queue_if_no_path 1 rdac 2 1 service-time
0 2 1 8:224 1 65:0 1 service-time 0 2 1 8:64 1 8:160 1]
Jan 31 16:53:52 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdo
- rdac checker reports path is up
Jan 31 16:53:52 ovmsrv06 multipathd: 8:224: reinstated
Jan 31 16:53:52 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdk
- rdac checker reports path is ghost

Re: [ovirt-users] slave of bond changed state question

[Gianluca Cecchi]

On Tue, Jan 31, 2017 at 4:17 PM, Ondrej Svoboda  wrote:

> Hi Gianluca,
>
> I have just tried to create a bond manually and set one of its slaves
> down. I received a notification (in the bar at the bottom, the one that
> carries Alerts, Events, and Tasks) after a while. You can find the
> notification in Events, but not in Alerts.
>
> I can see there are three levels of Events (green "info" level, yellow
> exclamation mark -- warnings, and red cross -- critical).
>
> I think this is expected behaviour. Please let me know if you need to know
> more :-)
>
> Cheers,
> Ondra
>
>
>
OK. So for example, even this kind of message:

VM ol65 has been paused due to storage I/O problem.

that has a cross at left (critical), is anyway classified as an event and
not as an alert?
Is there a list of what is classified as alert?
Thanks,
Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0.6 guests 'Not Responding'

[Pavel Gashev]

Mark,

Could you please file a bug report?

Restart of vdsmd service would help to resolve the “executor queue full” state.


From:  on behalf of Mark Greenall 

Date: Monday 30 January 2017 at 15:26
To: "users@ovirt.org" 
Subject: [ovirt-users] Ovirt 4.0.6 guests 'Not Responding'

Hi,

Host server: Dell PowerEdge R815 (40 cores and 768GB memory)
Stoage: Dell Equallogic (Firmware V8.1.4)
OS: Centos 7.3 (although the same thing happens on 7.2)
Ovirt: 4.0.6.3-1

We have several Ovirt clusters. Two of the hosts (in separate clusters) are 
showing as up in Hosted Engine but the guests running on them are showing as 
Not Responding. I can connect to the guests via ssh, etc but can’t interact 
with them from the Ovirt GUI. It was fine on Saturday (28th Jan) morning but 
looks like something happened Sunday morning around 07:14 as we suddenly see 
the following in engine.log on one host:

2017-01-29 07:14:26,952 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(DefaultQuartzScheduler1) [53ca8dc5] VM 
'd0aa990f-e6aa-4e79-93ce-011fe1372fb0'(lnd-ion-lindev-01) moved from 'Up' --> 
'NotResponding'
2017-01-29 07:14:27,069 WARN  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, 
Custom Event ID: -1, Message: VM lnd-ion-lindev-01 is not responding.
2017-01-29 07:14:27,070 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(DefaultQuartzScheduler1) [53ca8dc5] VM 
'788bfc0e-1712-469e-9a0a-395b8bb3f369'(lnd-ion-windev-02) moved from 'Up' --> 
'NotResponding'
2017-01-29 07:14:27,088 WARN  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, 
Custom Event ID: -1, Message: VM lnd-ion-windev-02 is not responding.
2017-01-29 07:14:27,089 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(DefaultQuartzScheduler1) [53ca8dc5] VM 
'd7eaa4ec-d65e-45c0-bc4f-505100658121'(lnd-ion-windev-04) moved from 'Up' --> 
'NotResponding'
2017-01-29 07:14:27,103 WARN  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, 
Custom Event ID: -1, Message: VM lnd-ion-windev-04 is not responding.
2017-01-29 07:14:27,104 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(DefaultQuartzScheduler1) [53ca8dc5] VM 
'5af875ad-70f9-4f49-9640-ee2b9927348b'(lnd-anv9-sup1) moved from 'Up' --> 
'NotResponding'
2017-01-29 07:14:27,121 WARN  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, 
Custom Event ID: -1, Message: VM lnd-anv9-sup1 is not responding.
2017-01-29 07:14:27,121 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(DefaultQuartzScheduler1) [53ca8dc5] VM 
'b3b7c5f3-0b5b-4d8f-9cc8-b758cc1ce3b9'(lnd-db-dev-03) moved from 'Up' --> 
'NotResponding'
2017-01-29 07:14:27,136 WARN  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, 
Custom Event ID: -1, Message: VM lnd-db-dev-03 is not responding.
2017-01-29 07:14:27,137 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(DefaultQuartzScheduler1) [53ca8dc5] VM 
'6c0a6e17-47c3-4464-939b-e83984dbeaa6'(lnd-db-dev-04) moved from 'Up' --> 
'NotResponding'
2017-01-29 07:14:27,167 WARN  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, 
Custom Event ID: -1, Message: VM lnd-db-dev-04 is not responding.
2017-01-29 07:14:27,168 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(DefaultQuartzScheduler1) [53ca8dc5] VM 
'ab15bb08-1244-4dc1-a4f1-f6e94246aa23'(lnd-ion-lindev-05) moved from 'Up' --> 
'NotResponding'


Checking the vdsm logs this morning on the hosts I see a lot of the following 
messages:

jsonrpc.Executor/0::WARNING::2017-01-30 
09:34:15,989::vm::4890::virt.vm::(_setUnresponsiveIfTimeout) 
vmId=`ab15bb08-1244-4dc1-a4f1-f6e94246aa23`::monitor became unresponsive 
(command timeout, age=94854.48)
jsonrpc.Executor/0::WARNING::2017-01-30 
09:34:15,990::vm::4890::virt.vm::(_setUnresponsiveIfTimeout) 
vmId=`20a51347-ef08-47a9-9982-32b2047991e1`::monitor became unresponsive 
(command timeout, age=94854.48)
jsonrpc.Executor/0::WARNING::2017-01-30 
09:34:15,991::vm::4890::virt.vm::(_setUnresponsiveIfTimeout) 
vmId=`2cd8698d-a0f9-43b7-9a89-92a93e920eb7`::monitor became unresponsive 
(command timeout, age=94854.49)
jsonrpc.Executor/0::WARNING::2017-01-30 
09:34:15,992::vm::4890::virt.vm::(_setUnresponsiveIfTimeout) 
vmId=`5af875ad-70f9-4f49-9640-ee2b9927348b`::monitor became unresponsive 
(command timeout, age=94854.49)

and

vdsm.Scheduler::WARNING::2017-01-30 

Re: [ovirt-users] VM has been paused due to storage I/O problem

[Nathanaël Blanchet]

exactly the same issue by there with FC EMC domain storage...


Le 31/01/2017 à 15:20, Gianluca Cecchi a écrit :

Hello,
my test environment is composed by 2 old HP blades BL685c G1 (ovmsrv05 
and ovmsrv06) and they are connected in a SAN with FC-switches to an 
old IBM DS4700 storage array.

Apart from being old, they seem all ok from an hw point of view.
I have configured oVirt 4.0.6 and an FCP storage domain.
The hosts are plain CentOS 7.3 servers fully updated.
It is not an hosted engine environment: the manager is a vm outside of 
the cluster.

I have configured power mgmt on both and it works good.

I have at the moment  only one VM for test and it is doing quite nothing.

Starting point: ovmsrv05 is in maintenance (since about 2 days) and 
the VM is running on ovmsrv06.
I update qemu-kvm package on ovmsrv05 and then I restart it from web 
admin gui:

Power Mgmt --> Restart

Sequence of events in pane and the problem in subject:
Jan 31, 2017 10:29:43 AM Host ovmsrv05 power management was verified 
successfully.

Jan 31, 2017 10:29:43 AM Status of host ovmsrv05 was set to Up.
Jan 31, 2017 10:29:38 AM Executing power management status on Host 
ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:29:29 AM Activation of host ovmsrv05 initiated by 
admin@internal-authz.

Jan 31, 2017 10:28:05 AM VM ol65 has recovered from paused back to up.
Jan 31, 2017 10:27:55 AM VM ol65 has been paused due to storage I/O 
problem.

Jan 31, 2017 10:27:55 AM VM ol65 has been paused.
Jan 31, 2017 10:25:52 AM Host ovmsrv05 was restarted by 
admin@internal-authz.
Jan 31, 2017 10:25:52 AM Host ovmsrv05 was started by 
admin@internal-authz.
Jan 31, 2017 10:25:52 AM Power management start of Host ovmsrv05 
succeeded.
Jan 31, 2017 10:25:50 AM Executing power management status on Host 
ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:25:37 AM Executing power management start on Host 
ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:25:37 AM Power management start of Host ovmsrv05 
initiated.

Jan 31, 2017 10:25:37 AM Auto fence for host ovmsrv05 was started.
Jan 31, 2017 10:25:37 AM All VMs' status on Non Responsive Host 
ovmsrv05 were changed to 'Down' by admin@internal-authz
Jan 31, 2017 10:25:36 AM Host ovmsrv05 was stopped by 
admin@internal-authz.

Jan 31, 2017 10:25:36 AM Power management stop of Host ovmsrv05 succeeded.
Jan 31, 2017 10:25:34 AM Executing power management status on Host 
ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:25:15 AM Executing power management stop on Host 
ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.

Jan 31, 2017 10:25:15 AM Power management stop of Host ovmsrv05 initiated.
Jan 31, 2017 10:25:12 AM Executing power management status on Host 
ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.


Watching the timestamps, the culprit seems the reboot time of ovmsrv05 
that detects some LUNs in owned state and other ones in unowned

Full messages of both hosts here:
https://drive.google.com/file/d/0BwoPbcrMv8mvekZQT1pjc0NMRlU/view?usp=sharing
and
https://drive.google.com/file/d/0BwoPbcrMv8mvcjBCYVdFZWdXTms/view?usp=sharing

At this time there are 4 LUNs globally seen by the two hosts but only 
1 of them is currently configured as the only storage domain in oVirt 
cluster.


[root@ovmsrv05 ~]# multipath -l | grep ^36
3600a0b8000299aa8d08b55014119 dm-5 IBM ,1814  FAStT
3600a0b8000299902cd3c5501458f dm-3 IBM ,1814  FAStT
3600a0b8000299902ccf855011198 dm-2 IBM ,1814  FAStT
3600a0b8000299aa8d08955014098 dm-4 IBM ,1814  FAStT

the configured one:
[root@ovmsrv05 ~]# multipath -l 3600a0b8000299aa8d08b55014119
3600a0b8000299aa8d08b55014119 dm-5 IBM ,1814  FAStT
size=4.0T features='0' hwhandler='1 rdac' wp=rw
|-+- policy='service-time 0' prio=0 status=active
| |- 0:0:1:3 sdl 8:176 active undef running
| `- 2:0:1:3 sdp 8:240 active undef running
`-+- policy='service-time 0' prio=0 status=enabled
  |- 0:0:0:3 sdd 8:48  active undef running
  `- 2:0:0:3 sdi 8:128 active undef running

In mesages of booting node, arounf the problem registered by the storage:
[root@ovmsrv05 ~]# grep owned /var/log/messages
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:1: rdac: LUN 1 (RDAC) (owned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:2: rdac: LUN 2 (RDAC) (owned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:3: rdac: LUN 3 (RDAC) 
(unowned)

Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:1: rdac: LUN 1 (RDAC) (owned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:4: rdac: LUN 4 (RDAC) 
(unowned)

Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:2: rdac: LUN 2 (RDAC) (owned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:1:1: rdac: LUN 1 (RDAC) 
(unowned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:3: rdac: LUN 3 (RDAC) 
(unowned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:4: rdac: LUN 4 (RDAC) 
(unowned)
Jan 31 

[ovirt-users] slave of bond changed state question

[Gianluca Cecchi]

Hello,
in 4.0.6 I see that if a slave of a bond goes down, I receive a
notification (don't know when introduced):

Slave enp5s0 of bond bond0 on host ovmsrv05, changed state to down

I see the exclamation mark at the left hand side of the line, but actually
it seems it is not registered as an alert.
In fact if I pass to alert tab I don't see it. In alert tab I see for
example messages related to power mgmt when I was initially configuring it,
such as:

Failed to verify Power Management configuration for Host omsrv05.

Is this the expected behavior? What is the relation between exclamation
mark icon at left and alerts?

Thanks in advance,
Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] VM has been paused due to storage I/O problem

[Gianluca Cecchi]

Hello,
my test environment is composed by 2 old HP blades BL685c G1 (ovmsrv05 and
ovmsrv06) and they are connected in a SAN with FC-switches to an old IBM
DS4700 storage array.
Apart from being old, they seem all ok from an hw point of view.
I have configured oVirt 4.0.6 and an FCP storage domain.
The hosts are plain CentOS 7.3 servers fully updated.
It is not an hosted engine environment: the manager is a vm outside of the
cluster.
I have configured power mgmt on both and it works good.

I have at the moment  only one VM for test and it is doing quite nothing.

Starting point: ovmsrv05 is in maintenance (since about 2 days) and the VM
is running on ovmsrv06.
I update qemu-kvm package on ovmsrv05 and then I restart it from web admin
gui:
Power Mgmt --> Restart

Sequence of events in pane and the problem in subject:
Jan 31, 2017 10:29:43 AM Host ovmsrv05 power management was verified
successfully.
Jan 31, 2017 10:29:43 AM Status of host ovmsrv05 was set to Up.
Jan 31, 2017 10:29:38 AM Executing power management status on Host ovmsrv05
using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:29:29 AM Activation of host ovmsrv05 initiated by
admin@internal-authz.
Jan 31, 2017 10:28:05 AM VM ol65 has recovered from paused back to up.
Jan 31, 2017 10:27:55 AM VM ol65 has been paused due to storage I/O problem.
Jan 31, 2017 10:27:55 AM VM ol65 has been paused.
Jan 31, 2017 10:25:52 AM Host ovmsrv05 was restarted by
admin@internal-authz.
Jan 31, 2017 10:25:52 AM Host ovmsrv05 was started by admin@internal-authz.
Jan 31, 2017 10:25:52 AM Power management start of Host ovmsrv05 succeeded.
Jan 31, 2017 10:25:50 AM Executing power management status on Host ovmsrv05
using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:25:37 AM Executing power management start on Host ovmsrv05
using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:25:37 AM Power management start of Host ovmsrv05 initiated.
Jan 31, 2017 10:25:37 AM Auto fence for host ovmsrv05 was started.
Jan 31, 2017 10:25:37 AM All VMs' status on Non Responsive Host ovmsrv05
were changed to 'Down' by admin@internal-authz
Jan 31, 2017 10:25:36 AM Host ovmsrv05 was stopped by admin@internal-authz.
Jan 31, 2017 10:25:36 AM Power management stop of Host ovmsrv05 succeeded.
Jan 31, 2017 10:25:34 AM Executing power management status on Host ovmsrv05
using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:25:15 AM Executing power management stop on Host ovmsrv05
using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.
Jan 31, 2017 10:25:15 AM Power management stop of Host ovmsrv05 initiated.
Jan 31, 2017 10:25:12 AM Executing power management status on Host ovmsrv05
using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212.

Watching the timestamps, the culprit seems the reboot time of ovmsrv05 that
detects some LUNs in owned state and other ones in unowned
Full messages of both hosts here:
https://drive.google.com/file/d/0BwoPbcrMv8mvekZQT1pjc0NMRlU/view?usp=sharing
and
https://drive.google.com/file/d/0BwoPbcrMv8mvcjBCYVdFZWdXTms/view?usp=sharing

At this time there are 4 LUNs globally seen by the two hosts but only 1 of
them is currently configured as the only storage domain in oVirt cluster.

[root@ovmsrv05 ~]# multipath -l | grep ^36
3600a0b8000299aa8d08b55014119 dm-5 IBM ,1814  FAStT
3600a0b8000299902cd3c5501458f dm-3 IBM ,1814  FAStT
3600a0b8000299902ccf855011198 dm-2 IBM ,1814  FAStT
3600a0b8000299aa8d08955014098 dm-4 IBM ,1814  FAStT

the configured one:
[root@ovmsrv05 ~]# multipath -l 3600a0b8000299aa8d08b55014119
3600a0b8000299aa8d08b55014119 dm-5 IBM ,1814  FAStT
size=4.0T features='0' hwhandler='1 rdac' wp=rw
|-+- policy='service-time 0' prio=0 status=active
| |- 0:0:1:3 sdl 8:176 active undef running
| `- 2:0:1:3 sdp 8:240 active undef running
`-+- policy='service-time 0' prio=0 status=enabled
  |- 0:0:0:3 sdd 8:48  active undef running
  `- 2:0:0:3 sdi 8:128 active undef running

In mesages of booting node, arounf the problem registered by the storage:
[root@ovmsrv05 ~]# grep owned /var/log/messages
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:1: rdac: LUN 1 (RDAC) (owned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:2: rdac: LUN 2 (RDAC) (owned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:3: rdac: LUN 3 (RDAC) (unowned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:1: rdac: LUN 1 (RDAC) (owned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:4: rdac: LUN 4 (RDAC) (unowned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:2: rdac: LUN 2 (RDAC) (owned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:1:1: rdac: LUN 1 (RDAC) (unowned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:3: rdac: LUN 3 (RDAC) (unowned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:4: rdac: LUN 4 (RDAC) (unowned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:1:2: rdac: LUN 2 (RDAC) (unowned)
Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:1:1: rdac: LUN 1 (RDAC) (unowned)

Re: [ovirt-users] VMWare VSAN like setup with oVirt

[Yaniv Kaul]

On Tue, Jan 31, 2017 at 2:20 PM, Fernando Frediani <
fernando.fredi...@upx.com.br> wrote:

> Hello
>
> Note that Gluster hasn't all the VSAN features yet so you will be able to
> replicate data.
>
> Also I personally think replica=3 is overkill and waste of space for mos
> scenarios. 2 should be enough and give a raid 1 like.


I'm not sure it's like RAID 1. In RAID 1, when one disk fails, I'm pretty
sure I know where the correct data is.
In Gluster, if you have a split brain, where's the correct data?

I suggest perhaps using an arbiter.
Y.


>
>
>
> On 31/01/2017 06:29, Nicolas Ecarnot wrote:
>
>> Le 31/01/2017 à 09:15, Anantha Raghava a écrit :
>>
>>> Hi,
>>>
>>> We are trying to create a setup that uses the internal disks of the
>>> hosts / nodes, yet provide the high availability, replication and
>>> failover using oVirt. The setup we are typing to build is close to
>>> VMWare VSAN which allows for all the above just using the internal disks
>>> of the ESXi servers.
>>>
>>> Can we achieve something similar with oVirt with Gluster?
>>>
>>
>> Absolutely. One of our oVirt setup is done this way.
>> Three hosts are set up as glusterFS servers (replica-3), as well as oVirt
>> nodes.
>> We choose to add a fourth host as an standalone engine, but you can
>> choose to use a VM for that (hyperconverge setup).
>>
>> I have no experience on similar setup with a random number of nodes,
>> neither if this can be achievable (some kind of network RAID-10)... (?)
>>
>>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Fence Agent cisco_ucs not working anymore since 4.0.5

[Florian Schmid]

Hello,

changing in API and even database directly is working well, but in my opinion 
this should also work in UI, because you can't edit the host anymore!
And when you editing the host, there is no error, that you have to change the 
options in fence agent. When you don't be aware of this issue, you will be 
never able anymore to change host stuff in UI with ovirt 4.0.

I also heard, that 4.0.7 will be never released! Really? So this bug will never 
be fixed?

BR Florian

- Ursprüngliche Mail -
Von: "Alexander Wels" 
An: users@ovirt.org
CC: "Florian Schmid" 
Gesendet: Montag, 23. Januar 2017 14:12:23
Betreff: Re: [ovirt-users] Fence Agent cisco_ucs not working anymore since 4.0.5

On Sunday, January 22, 2017 8:43:57 PM EST Florian Schmid wrote:
> Hello,
> 
> thank you very much for these bug reports! Good to here, that there will be
> a fix in 4.0.7.
> 
> Do you maybe know a workaround until this version comes out?
> 

This is a problem with the UI validation, you can use the REST api to set 
this. Yes this should be fixed in 4.0.7

> I tried already to add it manually in database, but I cannot really test it.
> 4.1 RC, I can't test, because I have no unused blades around, sorry!
> 
> BR Florian
> 
> 
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VMWare VSAN like setup with oVirt

[Fernando Frediani]

Hello

Note that Gluster hasn't all the VSAN features yet so you will be able 
to replicate data.


Also I personally think replica=3 is overkill and waste of space for mos 
scenarios. 2 should be enough and give a raid 1 like.



On 31/01/2017 06:29, Nicolas Ecarnot wrote:

Le 31/01/2017 à 09:15, Anantha Raghava a écrit :

Hi,

We are trying to create a setup that uses the internal disks of the
hosts / nodes, yet provide the high availability, replication and
failover using oVirt. The setup we are typing to build is close to
VMWare VSAN which allows for all the above just using the internal disks
of the ESXi servers.

Can we achieve something similar with oVirt with Gluster?


Absolutely. One of our oVirt setup is done this way.
Three hosts are set up as glusterFS servers (replica-3), as well as 
oVirt nodes.
We choose to add a fourth host as an standalone engine, but you can 
choose to use a VM for that (hyperconverge setup).


I have no experience on similar setup with a random number of nodes, 
neither if this can be achievable (some kind of network RAID-10)... (?)




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] AAA Auth FreeIPA does not show users

[Ondra Machacek]

Hi,

I've just tried with:

 # ipa --version
VERSION: 4.4.0, API_VERSION: 2.213

And all worked good. Can you please share the logs,
which Martin asked for, so we can investigate?

Thanks,
Ondra

On Tue, Jan 31, 2017 at 12:50 PM, Matt .  wrote:
> Hi,
>
> True. Are you able to check if it still is good for IPA 4.4 usage, it
> could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed
> something ? Would be great!
>
> Thanks,
>
> Matt
>
> 2017-01-31 11:30 GMT+01:00 Martin Perina :
>>
>>
>> On Tue, Jan 31, 2017 at 11:17 AM, Matt .  wrote:
>>>
>>> Hi Martin,
>>>
>>> Thanks for the explanation. But what happens on those tests during the
>>> setup the same happens as showed in oVirt.
>>
>>
>> Exactly, you can execute those tests even before publishing new profile to
>> engine and if something doesn't work you can fix even before users notice
>> that something is wrong.
>>
>> Also please bear in mind that there are variety of small differences in
>> schema across different setups even for the same LDAP server. So setup tool
>> uses only basic configurations, if you need something more complicated you
>> need to edit configuration manually.
>>
>> Thanks
>>
>> Martin Perina
>>
>>>
>>>
>>> Default IPA should just work I guess.
>>>
>>> I will test your command and report back.
>>>
>>> Cheers,
>>>
>>> Matt
>>>
>>> 2017-01-31 10:24 GMT+01:00 Martin Perina :
>>> > Hi,
>>> >
>>> > it seem that your schema doesn't match the defaults or you home some
>>> > configuration issue. Could you please execute following and send us the
>>> > output for your IPA setup?
>>> >
>>> >   ovirt-engine-extensions-tool --log-level=FINE aaa
>>> > authz-fetch_principal_record --authz-flag=resolve-groups-recursive
>>> > --authz-flag=resolve-groups --extension-name=
>>> > --principal-name=
>>> >
>>> > The above will search for a user by  and tries to fetch all
>>> > groups
>>> > he is member of.
>>> >
>>> > Btw you can test both "search users/groups" and "login a user" during
>>> > aaa-ldap-setup tool (and it's recommended to do so) and the output from
>>> > those commands should provide you the same details.
>>> >
>>> > Thanks
>>> >
>>> > Martin Perina
>>> >
>>> >
>>> >
>>> > On Mon, Jan 30, 2017 at 9:27 PM, Matt .  wrote:
>>> >>
>>> >> Hi,
>>> >>
>>> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the
>>> >> groups are shown but the users are not.
>>> >>
>>> >> When I chose 389ds, the users are shown but not the groups.
>>> >>
>>> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA
>>> >> 4.4 version from Fedora
>>> >>
>>> >> Cheers,
>>> >>
>>> >> Matt
>>> >> ___
>>> >> Users mailing list
>>> >> Users@ovirt.org
>>> >> http://lists.ovirt.org/mailman/listinfo/users
>>> >
>>> >
>>
>>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Unable to add additional hosts to Ovirt 4.0.6

[Alfred Angelov]

Hello,

When I first installed ovirt onto 8 nodes it was the 4.0.1 version, since
then I have upgraded it to 4.0.6 (I doubt that that is the issue thou).

I wanted to add some more nodes to a different cluster (AMD based CPUs),
but the install just hangs at the last step it would seem (it just keeps on
saying "Installing", but the logs say its finished).

I am adding the relevant log excerpt:

017-01-31 12:42:18 DEBUG otopi.context context.dumpEnvironment:774
ENVIRONMENT DUMP - END
2017-01-31 12:42:18 DEBUG otopi.context context._executeMethod:128 Stage
pre-terminate METHOD otopi.plugins.otopi.dialog.cli.Plugin._pre_terminate
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QStart: TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ###
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ### Processing ended, use 'quit'
to quit
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ### COMMAND>
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QHidden: FALSE
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ***Q:STRING TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QEnd: TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:RECEIVEenv-get -k BASE/error
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ***D:VALUE BASE/error=bool:False
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QStart: TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ###
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ### Processing ended, use 'quit'
to quit
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ### COMMAND>
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QHidden: FALSE
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ***Q:STRING TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QEnd: TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:RECEIVEenv-get -k
ODEPLOY/installIncomplete
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ***D:VALUE
ODEPLOY/installIncomplete=bool:False
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QStart: TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ###
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ### Processing ended, use 'quit'
to quit
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ### COMMAND>
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QHidden: FALSE
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ***Q:STRING TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QEnd: TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:RECEIVEenv-get -k SYSTEM/reboot
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ***D:VALUE SYSTEM/reboot=bool:False
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QStart: TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ###
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ### Processing ended, use 'quit'
to quit
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ### COMMAND>
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QHidden: FALSE
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   ***Q:STRING TERMINATION_COMMAND
2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine
dialog.__logString:204 DIALOG:SEND   **%QEnd: TERMINATION_COMMAND
2017-01-31 12:42:18 

Re: [ovirt-users] AAA Auth FreeIPA does not show users

[Matt .]

Hi,

True. Are you able to check if it still is good for IPA 4.4 usage, it
could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed
something ? Would be great!

Thanks,

Matt

2017-01-31 11:30 GMT+01:00 Martin Perina :
>
>
> On Tue, Jan 31, 2017 at 11:17 AM, Matt .  wrote:
>>
>> Hi Martin,
>>
>> Thanks for the explanation. But what happens on those tests during the
>> setup the same happens as showed in oVirt.
>
>
> Exactly, you can execute those tests even before publishing new profile to
> engine and if something doesn't work you can fix even before users notice
> that something is wrong.
>
> Also please bear in mind that there are variety of small differences in
> schema across different setups even for the same LDAP server. So setup tool
> uses only basic configurations, if you need something more complicated you
> need to edit configuration manually.
>
> Thanks
>
> Martin Perina
>
>>
>>
>> Default IPA should just work I guess.
>>
>> I will test your command and report back.
>>
>> Cheers,
>>
>> Matt
>>
>> 2017-01-31 10:24 GMT+01:00 Martin Perina :
>> > Hi,
>> >
>> > it seem that your schema doesn't match the defaults or you home some
>> > configuration issue. Could you please execute following and send us the
>> > output for your IPA setup?
>> >
>> >   ovirt-engine-extensions-tool --log-level=FINE aaa
>> > authz-fetch_principal_record --authz-flag=resolve-groups-recursive
>> > --authz-flag=resolve-groups --extension-name=
>> > --principal-name=
>> >
>> > The above will search for a user by  and tries to fetch all
>> > groups
>> > he is member of.
>> >
>> > Btw you can test both "search users/groups" and "login a user" during
>> > aaa-ldap-setup tool (and it's recommended to do so) and the output from
>> > those commands should provide you the same details.
>> >
>> > Thanks
>> >
>> > Martin Perina
>> >
>> >
>> >
>> > On Mon, Jan 30, 2017 at 9:27 PM, Matt .  wrote:
>> >>
>> >> Hi,
>> >>
>> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the
>> >> groups are shown but the users are not.
>> >>
>> >> When I chose 389ds, the users are shown but not the groups.
>> >>
>> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA
>> >> 4.4 version from Fedora
>> >>
>> >> Cheers,
>> >>
>> >> Matt
>> >> ___
>> >> Users mailing list
>> >> Users@ovirt.org
>> >> http://lists.ovirt.org/mailman/listinfo/users
>> >
>> >
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] "Setup Host Networks" fails (was: Ovirt 4 failing to setup CentOS 7.2 host (everything default))

[Eidmantas Ivanauskas]

Thank you for tidying up the thread. Never used these mailing lists (at all on 
any platform), so I am trying to minimize damage ;).

Here are some additional logs from the host. (upon using Setup Host Networks).

### messages
.
Jan 31 10:44:28 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Down
Jan 31 10:44:29 CentOS-73-64-minimal systemd: Started /usr/sbin/ifup enp4s0.
Jan 31 10:44:29 CentOS-73-64-minimal systemd: Starting /usr/sbin/ifup enp4s0.
Jan 31 10:44:29 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_UP): enp4s0: 
link is not ready
Jan 31 10:44:29 CentOS-73-64-minimal kernel: 8021q: adding VLAN 0 to HW filter 
on device enp4s0
Jan 31 10:44:33 CentOS-73-64-minimal daemonAdapter: libvirt: Network Driver 
error : Network not found: no network with matching name 'vdsm-ovirtmgmt'
Jan 31 10:44:33 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Up 1000 
Mbps Full Duplex, Flow Control: Rx/Tx
Jan 31 10:44:33 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_CHANGE): 
enp4s0: link becomes ready
Jan 31 10:46:34 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Down
Jan 31 10:46:34 CentOS-73-64-minimal systemd: Started /usr/sbin/ifup enp4s0.
Jan 31 10:46:34 CentOS-73-64-minimal systemd: Starting /usr/sbin/ifup enp4s0.
Jan 31 10:46:34 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_UP): enp4s0: 
link is not ready
Jan 31 10:46:34 CentOS-73-64-minimal kernel: 8021q: adding VLAN 0 to HW filter 
on device enp4s0
Jan 31 10:46:38 CentOS-73-64-minimal journal: vdsm vds ERROR connectivity check 
failed#012Traceback (most recent call last):#012  File 
"/usr/share/vdsm/API.py", line 1473, in setupNetworks#012
supervdsm.getProxy().setupNetworks(networks, bondings, options)#012  File 
"/usr/lib/python2.7/site-packages/vdsm/supervdsm.py", line 53, in __call__#012  
  return callMethod()#012  File 
"/usr/lib/python2.7/site-packages/vdsm/supervdsm.py", line 51, in #012  
  **kwargs)#012  File "", line 2, in setupNetworks#012  File 
"/usr/lib64/python2.7/multiprocessing/managers.py", line 773, in 
_callmethod#012raise convert_to_error(kind, result)#012ConfigNetworkError: 
(10, 'connectivity check failed')
Jan 31 10:46:39 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Up 1000 
Mbps Full Duplex, Flow Control: Rx/Tx
Jan 31 10:46:39 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_CHANGE): 
enp4s0: link becomes ready







 journalctl

Jan 31 11:05:07 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Down
Jan 31 11:05:07 CentOS-73-64-minimal systemd[1]: Started /usr/sbin/ifup enp4s0.
Jan 31 11:05:07 CentOS-73-64-minimal systemd[1]: Starting /usr/sbin/ifup enp4s0.
Jan 31 11:05:07 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_UP): enp4s0: 
link is not ready
Jan 31 11:05:07 CentOS-73-64-minimal kernel: 8021q: adding VLAN 0 to HW filter 
on device enp4s0
Jan 31 11:05:11 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Up 1000 
Mbps Full Duplex, Flow Control: Rx/Tx
Jan 31 11:05:11 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_CHANGE): 
enp4s0: link becomes ready
Jan 31 11:05:11 CentOS-73-64-minimal daemonAdapter[11064]: libvirt: Network 
Driver error : Network not found: no network with matching name 'vdsm-ovirtmgmt'
Jan 31 11:07:12 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Down
Jan 31 11:07:12 CentOS-73-64-minimal systemd[1]: Started /usr/sbin/ifup enp4s0.
Jan 31 11:07:12 CentOS-73-64-minimal systemd[1]: Starting /usr/sbin/ifup enp4s0.
Jan 31 11:07:12 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_UP): enp4s0: 
link is not ready
Jan 31 11:07:12 CentOS-73-64-minimal kernel: 8021q: adding VLAN 0 to HW filter 
on device enp4s0
Jan 31 11:07:16 CentOS-73-64-minimal vdsm[11340]: vdsm vds ERROR connectivity 
check failed
  Traceback (most recent call 
last):
File 
"/usr/share/vdsm/API.py", line 1473, in setupNetworks
  
supervdsm.getProxy().setupNetworks(networks, bondings, options)
File 
"/usr/lib/python2.7/site-packages/vdsm/supervdsm.py", line 53, in __call__
  return callMethod()
File 
"/usr/lib/python2.7/site-packages/vdsm/supervdsm.py", line 51, in 
  **kwargs)
File "", line 2, in 
setupNetworks
File 
"/usr/lib64/python2.7/multiprocessing/managers.py", line 773, in _callmethod
  raise 
convert_to_error(kind, result)
  ConfigNetworkError: (10, 
'connectivity check failed')
Jan 31 11:07:17 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Up 1000 
Mbps Full Duplex, Flow 

Re: [ovirt-users] VMWare VSAN like setup with oVirt

[Anantha Raghava]

Hello Didi,

Thanks for sharing the link. We are now reviewing this link and 
preparing the environment. Will setup and let you all know.


--

Thanks & Regards,


Anantha Raghava

eXzaTech Consulting And Services Pvt. Ltd.


Do not print this e-mail unless required. Save Paper & trees.

On Tuesday 31 January 2017 02:38 PM, Yedidyah Bar David wrote:

On Tue, Jan 31, 2017 at 10:32 AM, Anantha Raghava
 wrote:

Thanks Nicholas for quick reply. Will attempt and revert in case of I get
stuck midway.

You might want to review the following blog post:

https://www.ovirt.org/blog/2016/08/up-and-running-with-ovirt-4-0-and-gluster-storage/


--

Thanks & Regards,


Anantha Raghava eXzaTech Consulting And Services Pvt. Ltd.

DISCLAIMER:
This e-mail communication and any attachments may be privileged and
confidential to eXza Technology Consulting & Services, and are intended only
for the use of the recipients named above If you are not the addressee you
may not copy, forward, disclose or use any part of it. If you have received
this message in error, please delete it and all copies from your system and
notify the sender immediately by return e-mail. Internet communications
cannot be guaranteed to be timely, secure, error or virus-free. The sender
does not accept liability for any errors or omissions.


Do not print this e-mail unless required. Save Paper & trees.

On Tuesday 31 January 2017 01:59 PM, Nicolas Ecarnot wrote:

Le 31/01/2017 à 09:15, Anantha Raghava a écrit :

Hi,

We are trying to create a setup that uses the internal disks of the
hosts / nodes, yet provide the high availability, replication and
failover using oVirt. The setup we are typing to build is close to
VMWare VSAN which allows for all the above just using the internal disks
of the ESXi servers.

Can we achieve something similar with oVirt with Gluster?


Absolutely. One of our oVirt setup is done this way.
Three hosts are set up as glusterFS servers (replica-3), as well as oVirt
nodes.
We choose to add a fourth host as an standalone engine, but you can choose
to use a VM for that (hyperconverge setup).

I have no experience on similar setup with a random number of nodes, neither
if this can be achievable (some kind of network RAID-10)... (?)



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users






___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] AAA Auth FreeIPA does not show users

[Martin Perina]

On Tue, Jan 31, 2017 at 11:17 AM, Matt .  wrote:

> Hi Martin,
>
> Thanks for the explanation. But what happens on those tests during the
> setup the same happens as showed in oVirt.
>

​Exactly, you can execute those tests even before publishing new profile to
engine and if something doesn't work you can fix even before users notice
that something is wrong.

Also please bear in mind that there are variety of small differences in
schema across different setups even for the same LDAP server. So setup tool
uses only basic configurations, if you need something more complicated you
need to edit configuration manually.

Thanks

Martin Perina


>
> Default IPA should just work I guess.
>
> I will test your command and report back.
>
> Cheers,
>
> Matt
>
> 2017-01-31 10:24 GMT+01:00 Martin Perina :
> > Hi,
> >
> > it seem that your schema doesn't match the defaults or you home some
> > configuration issue. Could you please execute following and send us the
> > output for your IPA setup?
> >
> >   ovirt-engine-extensions-tool --log-level=FINE aaa
> > authz-fetch_principal_record --authz-flag=resolve-groups-recursive
> > --authz-flag=resolve-groups --extension-name=
> > --principal-name=
> >
> > The above will search for a user by  and tries to fetch all
> groups
> > he is member of.
> >
> > Btw you can test both "search users/groups" and "login a user" during
> > aaa-ldap-setup tool (and it's recommended to do so) and the output from
> > those commands should provide you the same details.
> >
> > Thanks
> >
> > Martin Perina
> >
> >
> >
> > On Mon, Jan 30, 2017 at 9:27 PM, Matt .  wrote:
> >>
> >> Hi,
> >>
> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the
> >> groups are shown but the users are not.
> >>
> >> When I chose 389ds, the users are shown but not the groups.
> >>
> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA
> >> 4.4 version from Fedora
> >>
> >> Cheers,
> >>
> >> Matt
> >> ___
> >> Users mailing list
> >> Users@ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> >
> >
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] AAA Auth FreeIPA does not show users

[Matt .]

Hi Martin,

Thanks for the explanation. But what happens on those tests during the
setup the same happens as showed in oVirt.

Default IPA should just work I guess.

I will test your command and report back.

Cheers,

Matt

2017-01-31 10:24 GMT+01:00 Martin Perina :
> Hi,
>
> it seem that your schema doesn't match the defaults or you home some
> configuration issue. Could you please execute following and send us the
> output for your IPA setup?
>
>   ovirt-engine-extensions-tool --log-level=FINE aaa
> authz-fetch_principal_record --authz-flag=resolve-groups-recursive
> --authz-flag=resolve-groups --extension-name=
> --principal-name=
>
> The above will search for a user by  and tries to fetch all groups
> he is member of.
>
> Btw you can test both "search users/groups" and "login a user" during
> aaa-ldap-setup tool (and it's recommended to do so) and the output from
> those commands should provide you the same details.
>
> Thanks
>
> Martin Perina
>
>
>
> On Mon, Jan 30, 2017 at 9:27 PM, Matt .  wrote:
>>
>> Hi,
>>
>> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the
>> groups are shown but the users are not.
>>
>> When I chose 389ds, the users are shown but not the groups.
>>
>> Is something wrong with the FreeIPA implementation ? I'm on latest IPA
>> 4.4 version from Fedora
>>
>> Cheers,
>>
>> Matt
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] AAA Auth FreeIPA does not show users

[Martin Perina]

Hi,

it seem that your schema doesn't match the defaults or you home some
configuration issue. Could you please execute following and send us the
output for your IPA setup?

  ovirt-engine-extensions-tool --log-level=FINE aaa
authz-fetch_principal_record --authz-flag=resolve-groups-recursive
--authz-flag=resolve-groups --extension-name=
--principal-name=

The above will search for a user by  and tries to fetch all
groups he is member of.

Btw you can test both "search users/groups" and "login a user" during
aaa-ldap-setup tool (and it's recommended to do so) and the output from
those commands should provide you the same details.

Thanks

Martin Perina



On Mon, Jan 30, 2017 at 9:27 PM, Matt .  wrote:

> Hi,
>
> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the
> groups are shown but the users are not.
>
> When I chose 389ds, the users are shown but not the groups.
>
> Is something wrong with the FreeIPA implementation ? I'm on latest IPA
> 4.4 version from Fedora
>
> Cheers,
>
> Matt
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] multi attached export domain

[Nathanaël Blanchet]

Hello,

In the case I want to export a vm to the export domain so as to reimport 
in an other datacenter, I must detach and then reattach it, which can be 
a long operation (is this normal?). To reduce that time, it should be 
interesting to attach this domain to both datacenters. Is there any 
reason not to be allowed to do such a thing?



--
Nathanaël Blanchet

Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VMWare VSAN like setup with oVirt

[Yedidyah Bar David]

On Tue, Jan 31, 2017 at 10:32 AM, Anantha Raghava
 wrote:
> Thanks Nicholas for quick reply. Will attempt and revert in case of I get
> stuck midway.

You might want to review the following blog post:

https://www.ovirt.org/blog/2016/08/up-and-running-with-ovirt-4-0-and-gluster-storage/

>
> --
>
> Thanks & Regards,
>
>
> Anantha Raghava eXzaTech Consulting And Services Pvt. Ltd.
>
> DISCLAIMER:
> This e-mail communication and any attachments may be privileged and
> confidential to eXza Technology Consulting & Services, and are intended only
> for the use of the recipients named above If you are not the addressee you
> may not copy, forward, disclose or use any part of it. If you have received
> this message in error, please delete it and all copies from your system and
> notify the sender immediately by return e-mail. Internet communications
> cannot be guaranteed to be timely, secure, error or virus-free. The sender
> does not accept liability for any errors or omissions.
>
>
> Do not print this e-mail unless required. Save Paper & trees.
>
> On Tuesday 31 January 2017 01:59 PM, Nicolas Ecarnot wrote:
>
> Le 31/01/2017 à 09:15, Anantha Raghava a écrit :
>
> Hi,
>
> We are trying to create a setup that uses the internal disks of the
> hosts / nodes, yet provide the high availability, replication and
> failover using oVirt. The setup we are typing to build is close to
> VMWare VSAN which allows for all the above just using the internal disks
> of the ESXi servers.
>
> Can we achieve something similar with oVirt with Gluster?
>
>
> Absolutely. One of our oVirt setup is done this way.
> Three hosts are set up as glusterFS servers (replica-3), as well as oVirt
> nodes.
> We choose to add a fourth host as an standalone engine, but you can choose
> to use a VM for that (hyperconverge setup).
>
> I have no experience on similar setup with a random number of nodes, neither
> if this can be achievable (some kind of network RAID-10)... (?)
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] "Setup Host Networks" fails (was: Ovirt 4 failing to setup CentOS 7.2 host (everything default))

[Yedidyah Bar David]

On Tue, Jan 31, 2017 at 9:43 AM, Eidmantas Ivanauskas
 wrote:
> I could SSH into it, because (as per supervdsm log) the original network
> config was restored.
>
> Engine and host are in completely different continents (America, Europe)
>
>
>
> I cleared both engine.log and host logs. Went into Ovirt GUI and ‘Setup Host
> Networks
>  and dragged  ovirtmgmt  in my GUI to bind with the main ethernet adapter.
>
> As always, the console freezes (as network connection is lost after those
> retries and the original config is restored).
>
> engine.log
> http://pastebin.com/kT6WSq2W
>
> and host-deploy doesn’t add any extra info. I guess it’s because I am
> actually not deploying the host, but rather doing ‘Setup Host Networks’
> attachment of ‘ovirtmgmt’?

OK. Re-adding Eduard and changing subject. Best,

>
>
> Thanks so much for replying.
>
>
>
> On Jan 31, 2017, at 9:28 AM, Sandro Bonazzola  wrote:
>
>
>
> On Mon, Jan 30, 2017 at 6:05 PM, Eidmantas Ivanauskas
>  wrote:
>>
>> Hey guys,
>>
>> Trying to setup a new Ovirt Engine + a separate CentOS 7.2 based Host.
>> After adding the host, SSH freezes (possibly due to the log below), then the
>> GUI just displays ‘Non Operational’.
>
>
> Please note that following CentOS 7.3 release, 7.2 is not supported anymore.
> Latest qemu-kvm-ev 2.6 requires CentOS 7.3.
>
>
>
> [root@CentOS-73-64-minimal ~]# cat /etc/centos-release
> CentOS Linux release 7.3.1611 (Core)
> [root@CentOS-73-64-minimal ~]#
>
> It was 7.3 after all, not 7.2. Sorry.
>
>
>>
>> The engine is running in Hetzner DC which allows for only MAC based
>> routing, but I don’t think this part of the setup is connected. I heard
>> people having issues routing additional IP pools.
>>
>> Here’s the supervdsm.log from the host server.
>>
>> http://pastebin.com/irfShv9n
>>
>> What am I missing here? It’s been a long long day.
>> Thanks.
>> Eid
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
>
> --
> Sandro Bonazzola
> Better technology. Faster innovation. Powered by community collaboration.
> See how it works at redhat.com
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VMWare VSAN like setup with oVirt

[Anantha Raghava]

Thanks Nicholas for quick reply. Will attempt and revert in case of I 
get stuck midway.


--

Thanks & Regards,


Anantha Raghava

eXzaTech Consulting And Services Pvt. Ltd.


DISCLAIMER:
This e-mail communication and any attachments may be privileged and 
confidential to eXza Technology Consulting & Services, and are intended 
only for the use of the recipients named above If you are not the 
addressee you may not copy, forward, disclose or use any part of it. If 
you have received this message in error, please delete it and all copies 
from your system and notify the sender immediately by return e-mail. 
Internet communications cannot be guaranteed to be timely, secure, error 
or virus-free. The sender does not accept liability for any errors or 
omissions.



Do not print this e-mail unless required. Save Paper & trees.

On Tuesday 31 January 2017 01:59 PM, Nicolas Ecarnot wrote:

Le 31/01/2017 à 09:15, Anantha Raghava a écrit :

Hi,

We are trying to create a setup that uses the internal disks of the
hosts / nodes, yet provide the high availability, replication and
failover using oVirt. The setup we are typing to build is close to
VMWare VSAN which allows for all the above just using the internal disks
of the ESXi servers.

Can we achieve something similar with oVirt with Gluster?


Absolutely. One of our oVirt setup is done this way.
Three hosts are set up as glusterFS servers (replica-3), as well as 
oVirt nodes.
We choose to add a fourth host as an standalone engine, but you can 
choose to use a VM for that (hyperconverge setup).


I have no experience on similar setup with a random number of nodes, 
neither if this can be achievable (some kind of network RAID-10)... (?)




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VMWare VSAN like setup with oVirt

[Nicolas Ecarnot]

Le 31/01/2017 à 09:15, Anantha Raghava a écrit :

Hi,

We are trying to create a setup that uses the internal disks of the
hosts / nodes, yet provide the high availability, replication and
failover using oVirt. The setup we are typing to build is close to
VMWare VSAN which allows for all the above just using the internal disks
of the ESXi servers.

Can we achieve something similar with oVirt with Gluster?


Absolutely. One of our oVirt setup is done this way.
Three hosts are set up as glusterFS servers (replica-3), as well as 
oVirt nodes.
We choose to add a fourth host as an standalone engine, but you can 
choose to use a VM for that (hyperconverge setup).


I have no experience on similar setup with a random number of nodes, 
neither if this can be achievable (some kind of network RAID-10)... (?)


--
Nicolas ECARNOT
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] VMWare VSAN like setup with oVirt

[Anantha Raghava]

Hi,

We are trying to create a setup that uses the internal disks of the 
hosts / nodes, yet provide the high availability, replication and 
failover using oVirt. The setup we are typing to build is close to 
VMWare VSAN which allows for all the above just using the internal disks 
of the ESXi servers.


Can we achieve something similar with oVirt with Gluster?

--

Thanks & Regards,


Anantha Raghava

eXzaTech Consulting And Services Pvt. Ltd.

DISCLAIMER:

This e-mail communication and any attachments may be privileged and 
confidential to eXza Technology Consulting & Services, and are intended 
only for the use of the recipients named above If you are not the 
addressee you may not copy, forward, disclose or use any part of it. If 
you have received this message in error, please delete it and all copies 
from your system and notify the sender immediately by return e-mail. 
Internet communications cannot be guaranteed to be timely, secure, error 
or virus-free. The sender does not accept liability for any errors or 
omissions.



Do not print this e-mail unless required. Save Paper & trees.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Add host to oVirt: unprovisioned without using username/password in vdsm-tool

[Matt .]

I also see that a Approved Host doesn't show it's network interfaces
on the "Network Interfaces" tab. I'm investigating this but I'm not
sure where it goes wrong.

2017-01-31 8:30 GMT+01:00 Matt . :
> Hi,
>
> I found out that a browser times out when you select an "Pending
> Approval" host, the browser becomes unresponsive for a while.
>
> This could be because of the installed cockpit module maybe, I'm not
> sure but I see more bad response on selecting hosts where the cockpit
> package is not installed but the tab in oVirt is loaded.
>
> Regards,
>
> Matt
>
> 2017-01-30 16:54 GMT+01:00 Matt . :
>> Hi Douglas,
>>
>> I think we discussed this in 2013 as well, thanks for catching up...
>> you were mentioned on irc already by rgolan :)
>>
>> I needed the --check-fqdn false which fixed it.
>>
>> Very nice and thanks for the example :) Will check further what the
>> possibilities are!
>>
>>
>> Cheers,
>>
>> Matt
>>
>> 2017-01-30 16:46 GMT+01:00 Douglas Schilling Landgraf :
>>> Hello Matt,
>>>
>>> On 01/30/2017 08:52 AM, Matt . wrote:

 In a puppetized environment it's just too easy to include a
 manifest/class that will use the ssh key for that manifest, I want to
 avoid that and control the acceptance from the GUI when a possible
 host is added to to engine but not capable to join the cluster yet.
>>>
>>>
>>> I would suggest:
>>>
>>> # vdsm-tool register --engine-fqdn myengine.localdomain
>>>
>>> or without the check of fqdn:
>>>
>>> # vdsm-tool register --engine-fqdn IP_ADDRESS --check-fqdn false
>>>
>>> Later you might want to approve the host via GUI, SDK or REST API.
>>>
>>> A quick example of rest api:
>>> https://github.com/dougsland/ovirt-restapi-scripts/commit/91dcb3fcd2cae6570aed06dc3471c4d79caefbc8
>>>
>>>
>>>
 The idea how I used it was very plain and simple, the host exists in
 oVirt but was unprovisioned, you clicked install and there it went. If
 that would be possible again or is in some way I would like to know.



 2017-01-30 14:07 GMT+01:00 Yaniv Kaul :
>
>
>
> On Mon, Jan 30, 2017 at 12:03 PM, Matt .  wrote:
>>
>>
>> Could do but then there is still some password like thingy around in
>> my provisioning system, a key is just a fingerprint which is matched.
>
>
>
> It's not JUST a fingerprint. It's the fingerprint of a SSH key we use for
> the authentication.
>
>>
>> What is also the case is that I want to decide in the engine if it's
>> valid to be provisioned or not.
>
>
>
> So don't add that SSH key to hosts that you don't want to provision.
> We don't have this extra phase of 'approving a host when you add it'.
> If you have permissions to add a host, it'll be added - via the Engine,
> by
> the Engine.
>
>>
>>
>> Security wise it's not ideal if you ask me, that is why I did it using
>> the URL, http/https was possible.
>>
>> No clue there ?
>
>
>
> I'm probably missing the use case here.
> Y.
>
>>
>>
>> Thanks!
>>
>> Matt
>>
>> 2017-01-30 10:32 GMT+01:00 Yaniv Kaul :
>>>
>>> Have you tried using SSH public key auth.?
>>> Y.
>>>
>>>
>>> On Mon, Jan 30, 2017 at 9:57 AM, Matt .  wrote:


 Hi All,

 In the past I was using an URL to add my hosts to over so they exists
 in the ovirt WebGui but they were unprovisioned so I needed to install
 them only.

 This is what I used:




 http://OVIRTENGINE_FQDN/OvirtEngineWeb/register?vds_ip=HOSTFQDN=54321_name=HOSTNAME_unique_id=%60dmidecode%20-s%20system-uuid%60=&__VIEWSTATE='

 Is there some way to accomplish this still without using a user/pass
 combiation ?

 Thanks!

 Matt
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>>
>
>
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

>>>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users