[ovirt-users] Re: Network profile filtering

[Pascal DeMilly]

Thank you Dominik,

I finally got it to work by disabling VLAN ID on the port. I guess the VLAN
ID takes precedence to this filter

No I was not aware I could mix and match 4.3 and 4.4. I will look into it.
Any documents you have in mind I should consult. Too many results from
google saying otherwise


Thank again

Pascal

On Fri, Nov 13, 2020 at 7:28 AM Dominik Holler  wrote:

>
>
> On Fri, Nov 13, 2020 at 4:19 PM Pascal DeMilly 
> wrote:
>
>> Thank you
>>
>> That is exactly what I was looking for.  Any chance it could be back
>> ported to 4.3. Maybe list the rules and I could use rest API to add it to
>> my court install
>>
>
> On ovirt-4.3 there is only
> *Bug 1009608*  - [RFE]
> Limit east-west traffic of VMs with network filter
> The isolated ports cannot be backported to oVirt 4.3, because the isolated
> ports require a new feature from CentOS 8 kernel and CentOS 8.3 libvirt.
>
>
>>
>> I'm not eager to move yet to 4.4 since I'm reading on this list lot of
>> people have issue migrating  and I have 20 hosts running currently
>>
>>
>
> Are you aware that you could upgrade oVirt Engine and go on with the oVirt
> 4.3 hosts?
> This way you could have some new CentOS 8 based oVirt-4.4 hosts which use
> the new features, and leave the other hosts on CentOS 7 based oVirt 4.3 .
>
>
>
>>
>>
>> Get Outlook for Android 
>>
>> --
>> *From:* Dominik Holler 
>> *Sent:* Friday, November 13, 2020 6:21:56 AM
>> *To:* Pascal DeMilly 
>> *Cc:* users 
>> *Subject:* Re: [ovirt-users] Network profile filtering
>>
>>
>>
>> On Fri, Nov 13, 2020 at 5:13 AM  wrote:
>>
>> I am using ovirt 4.3. I am in need to isolate all my VM from each other
>> (without using VLAN) except to a virtual gateway which is also the DHCP
>> server.
>>
>> Basically only allowing traffic from 1 MAC address to another MAC
>> address. Everything else should be filter out by ovirt filtering subsystem
>>
>> How will I go about that? I can see in network profile the ability to set
>> different filter but can't find a way to create new filter.
>>
>>
>> Does the Doc Text of
>> *Bug 1009608*  - [RFE]
>> Limit east-west traffic of VMs with network filter
>> https://bugzilla.redhat.com/show_bug.cgi?id=1009608
>> explain the configuration of the filter?
>>
>> Please note that there will be isolated ports
>>
>> https://www.ovirt.org/develop/release-management/features/network/isolated-ports.html
>> available in ovirt-4.4.3 on CentOS 8.3 , which might address your
>> scenario even better.
>>
>>
>>
>> Thanks for your help
>>
>> Pascal
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QIYX2SA7TBEFGAACQBLPHOZCKI7WOQHM/
>>
>> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HNYBXYKZZM4RXTIAVRBC7QWJWUIBH65M/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3ACEVRYMTNV3TFIU5ZMK76EHNQOQTOCC/

[ovirt-users] Re: Fail to upgrade cluster from 4.3 to 4.4

[Gianluca Cecchi]

On Fri, Nov 13, 2020 at 6:33 PM Gianluca Cecchi 
wrote:

> Hello,
> my environment was oVirt 4.3.10 with an external engine and 3 hosts.
> I have updated to 4.4.3 the whole infra, but know if I go and update the
> cluster to 4.4 I get the message in this window:
>
> https://drive.google.com/file/d/1hfs4FC8uZ-EjiCzQyitA3945U0Knnz2m/view?usp=sharing
>
> What is the reason for it?
>
> My Cluster is with Cluster CPU Type: "Intel Westmere IBRS SSBD Family"
>
> The signalled 'hostmaster' VM is a powered off VM used in the past to test
> nested virtualization and in "Virtual Machines" page aside it I see an
> exclamation mark with "The VM CPU doesn't match the Cluster Cpu Type"
>
> The VM is set as custom, optimized for Server
> Custom Chipset/Firmware Type "Cluster default (i440FX Chipset with BIOS)"
> Custom Emulated Machine (in grey): "Cluster default(pc-i440fx-rhel7.6.0)"
> Custom CPU (in grey): "Cluster default(Intel Westmere IBRS SSBD Family)"
>
> What I'm expected to change?
>
> Thanks,
> Gianluca
>
>
there is another field in System, Advanced Parameters (of cpu); this field
is "Custom Compatibility Version", but for all my VMs it is blank, also for
the "problematic one
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LCERG3NPHIX57AMVHPQCPMDPB4AR6ZO3/

[ovirt-users] Fail to upgrade cluster from 4.3 to 4.4

[Gianluca Cecchi]

Hello,
my environment was oVirt 4.3.10 with an external engine and 3 hosts.
I have updated to 4.4.3 the whole infra, but know if I go and update the
cluster to 4.4 I get the message in this window:
https://drive.google.com/file/d/1hfs4FC8uZ-EjiCzQyitA3945U0Knnz2m/view?usp=sharing

What is the reason for it?

My Cluster is with Cluster CPU Type: "Intel Westmere IBRS SSBD Family"

The signalled 'hostmaster' VM is a powered off VM used in the past to test
nested virtualization and in "Virtual Machines" page aside it I see an
exclamation mark with "The VM CPU doesn't match the Cluster Cpu Type"

The VM is set as custom, optimized for Server
Custom Chipset/Firmware Type "Cluster default (i440FX Chipset with BIOS)"
Custom Emulated Machine (in grey): "Cluster default(pc-i440fx-rhel7.6.0)"
Custom CPU (in grey): "Cluster default(Intel Westmere IBRS SSBD Family)"

What I'm expected to change?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RZUC5V3X72APFSLJQN5DGAXAM4IRHSKS/

[ovirt-users] Re: Terraform provider build

[Sandro Bonazzola]

Il giorno gio 12 nov 2020 alle ore 22:34 Muhsin Tawafig 
ha scritto:

> Hi Trying to test terraform ovirt provider
> keep getting failure on pulling modules ( on centos 7 & 8 )
> #make
> ==> Checking that code complies with gofmt requirements...
> go install
> go: github.com/hashicorp/go-getter@v1.4.2-0.20200106182914-9813cbd4eb02:
> Get "
> https://proxy.golang.org/github.com/hashicorp/go-getter/@v/v1.4.2-0.20200106182914-9813cbd4eb02.mod":
> net/http: TLS handshake timeout
> make: *** [build] Error 1
>
> Any help is appretiated
>

+Eli Mesika  , +Gal Zaidman ,
+iterjpnic   can you help here?




> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/OJFJBSW4Z5T4STCN5BWBD63Q7QW54XMH/
>


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com


*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
*
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JMRA6ODB6IHFANUBP2IY6KL5MIVQM3X7/

[ovirt-users] Re: Failed to add new host to oVirt 4.4.3.11-1.el8

[Sandro Bonazzola]

Il giorno ven 13 nov 2020 alle ore 10:19 Winfried de Heiden  ha
scritto:

> Hi all,
>
> Adding a brand new installed oVirt node to oVirt 4.4.3.11-1.el8 fails;
> engine.log will tell:
>
> 2020-11-13 10:05:40,777+01 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (EE-ManagedThreadFactory-engine-Thread-5)
> [80e3f255-f8b9-4d5f-9be2-ebb59fec28db] EVENT_ID:
> VDS_ANSIBLE_INSTALL_STARTED(560), Ansible host-deploy playbook execution
> has started on host Bigvirt.
> 2020-11-13 10:05:40,784+01 ERROR
> [org.ovirt.engine.core.common.utils.ansible.AnsibleExecutor]
> (EE-ManagedThreadFactory-engine-Thread-5)
> [80e3f255-f8b9-4d5f-9be2-ebb59fec28db] Exception: Failed to read the
> runner-service response. Unexpected character ('<' (code 60)): expected a
> valid value (number, String, array, object, 'true', 'false' or 'null')
>  at [Source: org.apache.http.conn.EofSensorInputStream@6cc9953a; line: 1,
> column: 2]
> 2020-11-13 10:05:40,785+01 ERROR
> [org.ovirt.engine.core.bll.hostdeploy.InstallVdsInternalCommand]
> (EE-ManagedThreadFactory-engine-Thread-5)
> [80e3f255-f8b9-4d5f-9be2-ebb59fec28db] Host installation failed for host
> 'df87842f-0852-4a3a-898b-2b724b068199', 'Bigvirt': Failed to execute
> Ansible host-deploy role: Failed to read the runner-service response.
> Unexpected character ('<' (code 60)): expected a valid value (number,
> String, array, object, 'true', 'false' or 'null')
>
> Anyone got a clue?
>

+Martin Necas  , +Dana Elfassy  can
you please have a look here?



>
> Winfried
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/D52HIEX5DWGXYQKOTUVBMY7TFNDIRWTJ/
>


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com


*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
*
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TIAYCX36FFMWE2YVY6CARMQOIQNLBCOP/

[ovirt-users] Re: oVirt Node Crash

[Sandro Bonazzola]

Il giorno ven 13 nov 2020 alle ore 17:37 Sandro Bonazzola <
sbona...@redhat.com> ha scritto:

>
>
> Il giorno ven 13 nov 2020 alle ore 13:38 Anton Louw via Users <
> users@ovirt.org> ha scritto:
>
>>
>>
>> Hi Everybody,
>>
>>
>>
>> I have built a new host which has been running fine for the last couple
>> of days. I noticed today that the host crashed, but it is not giving me a
>> reason as to why.
>>
>>
>>
>> It happened at 13:45 today, but I have given time before that on the logs
>> as well.
>>
>>
>>
>> Is there something I am missing here?
>>
>
> Not related to the crash, but I see in the logs that 5 out of 20 guests
> have qemu guest agent not responding.
>
> Also you seem to have some issues with some firewalld rules. (Maybe +Dominik
> Holler  would like to have a look)
>
> I don't see anything explaining why the host got rebooted.
>
> Still related to guest agent I find a bit alarming the following lines:
> Nov 13 13:29:34 jb2-node03 libvirtd: 2020-11-13 11:29:34.294+: 12603:
> error : qemuDomainAgentAvailable:9144 : Guest agent is not responding: QEMU
> guest agent is not connected
> Nov 13 13:29:34 jb2-node03 vdsm[13843]: ERROR Shutdown by QEMU Guest Agent
> failed#012Traceback (most recent call last):#012  File
> "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 5304, in
> qemuGuestAgentShutdown#012
>  self._dom.shutdownFlags(libvirt.VIR_DOMAIN_SHUTDOWN_GUEST_AGENT)#012  File
> "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line 100, in
> f#012ret = attr(*args, **kwargs)#012  File
> "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", line
> 131, in wrapper#012ret = f(*args, **kwargs)#012  File
> "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 94, in
> wrapper#012return func(inst, *args, **kwargs)#012  File
> "/usr/lib64/python2.7/site-packages/libvirt.py", line 2517, in
> shutdownFlags#012if ret == -1: raise libvirtError
> ('virDomainShutdownFlags() failed', dom=self)#012libvirtError: Guest agent
> is not responding: QEMU guest agent is not connected
> Nov 13 13:29:42 jb2-node03 kernel: vlan0077: port 11(vnet15) entered
> disabled state
> Nov 13 13:29:42 jb2-node03 kernel: device vnet15 left promiscuous mode
> Nov 13 13:29:42 jb2-node03 kernel: vlan0077: port 11(vnet15) entered
> disabled state
> Nov 13 13:29:42 jb2-node03 NetworkManager[6027]:   [1605266982.6539]
> device (vnet15): state change: disconnected -> unmanaged (reason
> 'unmanaged', sys-iface-state: 'removed')
> Nov 13 13:29:42 jb2-node03 NetworkManager[6027]:   [1605266982.6550]
> device (vnet15): released from master device vlan0077
> Nov 13 13:29:42 jb2-node03 libvirtd: 2020-11-13 11:29:42.669+: 12557:
> error : qemuMonitorIO:718 : internal error: End of file from qemu monitor
>
> +Arik Hadas  any clue?
>
> About the crash, can you please provide full sos report from the host? the
> log you provided is not enough to understand what caused the reported crash
>

Also, given python2 is used here, I assume you're on 4.3 or older. I would
recommend to upgrade to 4.4 as soon as practical.



>
>
>
>
>>
>>
>> Thanks
>>
>> *Anton Louw*
>> *Cloud Engineer: Storage and Virtualization* at *Vox*
>> --
>> *T:*  087 805  | *D:* 087 805 1572
>> *M:* N/A
>> *E:* anton.l...@voxtelecom.co.za
>> *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
>> www.vox.co.za
>>
>> [image: F] 
>> [image: T] 
>> [image: I] 
>> [image: L] 
>> [image: Y] 
>>
>> [image: #VoxBrand]
>> 
>> *Disclaimer*
>>
>> The contents of this email are confidential to the sender and the
>> intended recipient. Unless the contents are clearly and entirely of a
>> personal nature, they are subject to copyright in favour of the holding
>> company of the Vox group of companies. Any recipient who receives this
>> email in error should immediately report the error to the sender and
>> permanently delete this email from all storage devices.
>>
>> This email has been scanned for viruses and malware, and may have been
>> automatically archived by *Mimecast Ltd*, an innovator in Software as a
>> Service (SaaS) for business. Providing a *safer* and *more useful* place
>> for your human generated data. Specializing in; Security, archiving and
>> compliance. To find out more Click Here
>> .
>>
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> 

[ovirt-users] Re: oVirt Node Crash

[Sandro Bonazzola]

Il giorno ven 13 nov 2020 alle ore 13:38 Anton Louw via Users <
users@ovirt.org> ha scritto:

>
>
> Hi Everybody,
>
>
>
> I have built a new host which has been running fine for the last couple of
> days. I noticed today that the host crashed, but it is not giving me a
> reason as to why.
>
>
>
> It happened at 13:45 today, but I have given time before that on the logs
> as well.
>
>
>
> Is there something I am missing here?
>

Not related to the crash, but I see in the logs that 5 out of 20 guests
have qemu guest agent not responding.

Also you seem to have some issues with some firewalld rules. (Maybe +Dominik
Holler  would like to have a look)

I don't see anything explaining why the host got rebooted.

Still related to guest agent I find a bit alarming the following lines:
Nov 13 13:29:34 jb2-node03 libvirtd: 2020-11-13 11:29:34.294+: 12603:
error : qemuDomainAgentAvailable:9144 : Guest agent is not responding: QEMU
guest agent is not connected
Nov 13 13:29:34 jb2-node03 vdsm[13843]: ERROR Shutdown by QEMU Guest Agent
failed#012Traceback (most recent call last):#012  File
"/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 5304, in
qemuGuestAgentShutdown#012
 self._dom.shutdownFlags(libvirt.VIR_DOMAIN_SHUTDOWN_GUEST_AGENT)#012  File
"/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line 100, in
f#012ret = attr(*args, **kwargs)#012  File
"/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", line
131, in wrapper#012ret = f(*args, **kwargs)#012  File
"/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 94, in
wrapper#012return func(inst, *args, **kwargs)#012  File
"/usr/lib64/python2.7/site-packages/libvirt.py", line 2517, in
shutdownFlags#012if ret == -1: raise libvirtError
('virDomainShutdownFlags() failed', dom=self)#012libvirtError: Guest agent
is not responding: QEMU guest agent is not connected
Nov 13 13:29:42 jb2-node03 kernel: vlan0077: port 11(vnet15) entered
disabled state
Nov 13 13:29:42 jb2-node03 kernel: device vnet15 left promiscuous mode
Nov 13 13:29:42 jb2-node03 kernel: vlan0077: port 11(vnet15) entered
disabled state
Nov 13 13:29:42 jb2-node03 NetworkManager[6027]:   [1605266982.6539]
device (vnet15): state change: disconnected -> unmanaged (reason
'unmanaged', sys-iface-state: 'removed')
Nov 13 13:29:42 jb2-node03 NetworkManager[6027]:   [1605266982.6550]
device (vnet15): released from master device vlan0077
Nov 13 13:29:42 jb2-node03 libvirtd: 2020-11-13 11:29:42.669+: 12557:
error : qemuMonitorIO:718 : internal error: End of file from qemu monitor

+Arik Hadas  any clue?

About the crash, can you please provide full sos report from the host? the
log you provided is not enough to understand what caused the reported crash




>
>
> Thanks
>
> *Anton Louw*
> *Cloud Engineer: Storage and Virtualization* at *Vox*
> --
> *T:*  087 805  | *D:* 087 805 1572
> *M:* N/A
> *E:* anton.l...@voxtelecom.co.za
> *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
> www.vox.co.za
>
> [image: F] 
> [image: T] 
> [image: I] 
> [image: L] 
> [image: Y] 
>
> [image: #VoxBrand]
> 
> *Disclaimer*
>
> The contents of this email are confidential to the sender and the intended
> recipient. Unless the contents are clearly and entirely of a personal
> nature, they are subject to copyright in favour of the holding company of
> the Vox group of companies. Any recipient who receives this email in error
> should immediately report the error to the sender and permanently delete
> this email from all storage devices.
>
> This email has been scanned for viruses and malware, and may have been
> automatically archived by *Mimecast Ltd*, an innovator in Software as a
> Service (SaaS) for business. Providing a *safer* and *more useful* place
> for your human generated data. Specializing in; Security, archiving and
> compliance. To find out more Click Here
> .
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/XMRUDMRBYZKUJQXVPPAEAJIP7N3JPRLY/
>


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com


*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
*

[ovirt-users] Re: Network profile filtering

[Dominik Holler]

On Fri, Nov 13, 2020 at 4:19 PM Pascal DeMilly 
wrote:

> Thank you
>
> That is exactly what I was looking for.  Any chance it could be back
> ported to 4.3. Maybe list the rules and I could use rest API to add it to
> my court install
>

On ovirt-4.3 there is only
*Bug 1009608*  - [RFE]
Limit east-west traffic of VMs with network filter
The isolated ports cannot be backported to oVirt 4.3, because the isolated
ports require a new feature from CentOS 8 kernel and CentOS 8.3 libvirt.


>
> I'm not eager to move yet to 4.4 since I'm reading on this list lot of
> people have issue migrating  and I have 20 hosts running currently
>
>

Are you aware that you could upgrade oVirt Engine and go on with the oVirt
4.3 hosts?
This way you could have some new CentOS 8 based oVirt-4.4 hosts which use
the new features, and leave the other hosts on CentOS 7 based oVirt 4.3 .



>
>
> Get Outlook for Android 
>
> --
> *From:* Dominik Holler 
> *Sent:* Friday, November 13, 2020 6:21:56 AM
> *To:* Pascal DeMilly 
> *Cc:* users 
> *Subject:* Re: [ovirt-users] Network profile filtering
>
>
>
> On Fri, Nov 13, 2020 at 5:13 AM  wrote:
>
> I am using ovirt 4.3. I am in need to isolate all my VM from each other
> (without using VLAN) except to a virtual gateway which is also the DHCP
> server.
>
> Basically only allowing traffic from 1 MAC address to another MAC address.
> Everything else should be filter out by ovirt filtering subsystem
>
> How will I go about that? I can see in network profile the ability to set
> different filter but can't find a way to create new filter.
>
>
> Does the Doc Text of
> *Bug 1009608*  - [RFE]
> Limit east-west traffic of VMs with network filter
> https://bugzilla.redhat.com/show_bug.cgi?id=1009608
> explain the configuration of the filter?
>
> Please note that there will be isolated ports
>
> https://www.ovirt.org/develop/release-management/features/network/isolated-ports.html
> available in ovirt-4.4.3 on CentOS 8.3 , which might address your scenario
> even better.
>
>
>
> Thanks for your help
>
> Pascal
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QIYX2SA7TBEFGAACQBLPHOZCKI7WOQHM/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HNYBXYKZZM4RXTIAVRBC7QWJWUIBH65M/

[ovirt-users] Re: Network profile filtering

[Pascal DeMilly]

Thank you

That is exactly what I was looking for.  Any chance it could be back ported to 
4.3. Maybe list the rules and I could use rest API to add it to my court install

I'm not eager to move yet to 4.4 since I'm reading on this list lot of people 
have issue migrating  and I have 20 hosts running currently



Get Outlook for Android


From: Dominik Holler 
Sent: Friday, November 13, 2020 6:21:56 AM
To: Pascal DeMilly 
Cc: users 
Subject: Re: [ovirt-users] Network profile filtering



On Fri, Nov 13, 2020 at 5:13 AM 
mailto:pas...@butterflyit.com>> wrote:
I am using ovirt 4.3. I am in need to isolate all my VM from each other 
(without using VLAN) except to a virtual gateway which is also the DHCP server.

Basically only allowing traffic from 1 MAC address to another MAC address. 
Everything else should be filter out by ovirt filtering subsystem

How will I go about that? I can see in network profile the ability to set 
different filter but can't find a way to create new filter.


Does the Doc Text of
Bug 1009608 - [RFE] Limit 
east-west traffic of VMs with network filter
https://bugzilla.redhat.com/show_bug.cgi?id=1009608
explain the configuration of the filter?

Please note that there will be isolated ports
https://www.ovirt.org/develop/release-management/features/network/isolated-ports.html
available in ovirt-4.4.3 on CentOS 8.3 , which might address your scenario even 
better.


Thanks for your help

Pascal
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to 
users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QIYX2SA7TBEFGAACQBLPHOZCKI7WOQHM/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y7DZ7UINXTQIY626RAS3263AYROLDE3P/

[ovirt-users] Re: ovirt glusterfs

[Strahil Nikolov via Users]

It clearly indicates the problem - enable SELINUX.

Best Regards,
Strahil Nikolov






В петък, 13 ноември 2020 г., 17:08:57 Гринуич+2,  
написа: 





Hello,
I try use Gluster deploymont. I've the message error:
failed: [llrovirttest02.in2p3.fr] (item={u'path': u'/gluster_bricks/engine', 
u'vgname': u'gluster_vg_sdb', u'lvname': u'gluster_lv_engine'}) => 
{"ansible_loop_var": "item", "changed": false, "item": {"lvname": 
"gluster_lv_engine", "path": "/gluster_bricks/engine", "vgname": 
"gluster_vg_sdb"}, "msg": "SELinux is disabled on this host."}

Could you help me ?

Thanks,

Anne Garcia
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VAEIKJN7HS2H2E3AUNAHAR2UMS5HLABN/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/M6LDJQXFVK3DRVRPYY4SBVRZ4M47NAT2/

[ovirt-users] ovirt glusterfs

[garcialiang . anne]

Hello,
I try use Gluster deploymont. I've the message error:
failed: [llrovirttest02.in2p3.fr] (item={u'path': u'/gluster_bricks/engine', 
u'vgname': u'gluster_vg_sdb', u'lvname': u'gluster_lv_engine'}) => 
{"ansible_loop_var": "item", "changed": false, "item": {"lvname": 
"gluster_lv_engine", "path": "/gluster_bricks/engine", "vgname": 
"gluster_vg_sdb"}, "msg": "SELinux is disabled on this host."}

Could you help me ?

Thanks,

Anne Garcia
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VAEIKJN7HS2H2E3AUNAHAR2UMS5HLABN/

[ovirt-users] Re: Network profile filtering

[Dominik Holler]

On Fri, Nov 13, 2020 at 5:13 AM  wrote:

> I am using ovirt 4.3. I am in need to isolate all my VM from each other
> (without using VLAN) except to a virtual gateway which is also the DHCP
> server.
>
> Basically only allowing traffic from 1 MAC address to another MAC address.
> Everything else should be filter out by ovirt filtering subsystem
>
> How will I go about that? I can see in network profile the ability to set
> different filter but can't find a way to create new filter.
>
>
Does the Doc Text of
*Bug 1009608*  - [RFE]
Limit east-west traffic of VMs with network filter
https://bugzilla.redhat.com/show_bug.cgi?id=1009608
explain the configuration of the filter?

Please note that there will be isolated ports
https://www.ovirt.org/develop/release-management/features/network/isolated-ports.html
available in ovirt-4.4.3 on CentOS 8.3 , which might address your scenario
even better.



> Thanks for your help
>
> Pascal
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QIYX2SA7TBEFGAACQBLPHOZCKI7WOQHM/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/V4WUYEBTI6XJ6XD3Z7I66K6WVG7377T2/

[ovirt-users] Re: Unable to attach VLAN-based logical networks to a bond oVirt 4.4

[Dominik Holler]

On Thu, Nov 12, 2020 at 12:43 PM  wrote:

> When attempting to add a VLAN to a bonded interface (Broadcom NICs) in
> oVirt Management portal the process fails as per:
> https://bugzilla.redhat.com/show_bug.cgi?id=1860479
>
> This issue has rendered mu upgrade to 4.4 useless. Does anyone have a
> patched kernel to resolve this please?
>
>
According to the bug, the fix should be included in Red Hat's Linux
kernel-4.18.0-240.6.el8.
This matches the current kernel in CentOS Stream.
Does the current kernel from CentOS stream fix the problem in your
environment?





> Regards
>
> Shimme
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DUT5ETZBVMKH2T4KZ4WR2FW6FQLYTM5C/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/W5IEHS7W3RTDBUQRO4IUUMCESATYXOPU/

[ovirt-users] oVirt Node Crash

[Anton Louw via Users]

Hi Everybody,

I have built a new host which has been running fine for the last couple of 
days. I noticed today that the host crashed, but it is not giving me a reason 
as to why.

It happened at 13:45 today, but I have given time before that on the logs as 
well.

Is there something I am missing here?

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization
__
D: 087 805 1572 | M: N/A
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
anton.l...@voxtelecom.co.za

www.vox.co.za






<>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XMRUDMRBYZKUJQXVPPAEAJIP7N3JPRLY/

[ovirt-users] Re: Ballooning disabled when creating a VmPool

[Nicolás]

Hi,

I opened [1]. If this is not the right place/component/product please 
change it accordingly.


Thanks.

Regards,

Nico

  [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1897532

El 12/11/20 a las 12:21, Nicolás escribió:

Hi Michal,

No, in the GUI it behaves as it should (ballooning is enabled after 
creating the pool).


Could you please point out where should I fill-in the bug? (bugzilla 
or github...)


Thanks!

El 12/11/20 a las 10:56, Michal Skrivanek escribió:

Hi Nicolas,
it does sound like a bug, ballooning shouldn’t be disabled in this case.
does it behave the same in GUI?

Thanks,
michal

On 12 Nov 2020, at 11:49, Nicolás > wrote:


Sorry, I forgot to add the screenshot!

El 11/11/20 a las 12:32, Nicolás escribió:

Hi,

We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) 
to handle our pools.


Pools are based on a template which has ballooning enabled. 
However, when deploying a VmPool based on that template, has the 
"Ballooning enabled" field disabled, uneditable and an icon which 
states: "The field is not attached to any instance type" 
(screenshot attached).


We're handling a big number of VMs based on pools (> 1500), and we 
think this should be enabled.


However, I don't see a field in the types.VmPool definition that 
allows that.


Is that even doable? Our Python code is similar to this:

newpool = types.VmPool(name='test',
cluster=cl,
template=t,
max_user_vms=1,
                         size=1,
type=types.VmPoolType.MANUAL)
vmpool_serv.add(newpool)

  * cl is a types.Cluster instance with ballooning_enabled=True
  * t is a types.Template instance with Ballooning enabled.

Thanks.

Nico


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/


12-17-02.png>___

Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org 


Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PFO66W2AVDEPMZ74BG76IWJ4DRSY7TSF/





___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TQXOVXAJHSKKPC7DWRGKVZEUB4HBSV5D/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GS34TT7IMWCRMZQBS445AAMN6IPQOUJZ/

[ovirt-users] Failed to add new host to oVirt 4.4.3.11-1.el8

[Winfried de Heiden]

Hi all,

Adding a brand new installed oVirt node to oVirt 4.4.3.11-1.el8 fails; 
engine.log will tell:


2020-11-13 10:05:40,777+01 INFO 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engine-Thread-5) 
[80e3f255-f8b9-4d5f-9be2-ebb59fec28db] EVENT_ID: 
VDS_ANSIBLE_INSTALL_STARTED(560), Ansible host-deploy playbook execution 
has started on host Bigvirt.
2020-11-13 10:05:40,784+01 ERROR 
[org.ovirt.engine.core.common.utils.ansible.AnsibleExecutor] 
(EE-ManagedThreadFactory-engine-Thread-5) 
[80e3f255-f8b9-4d5f-9be2-ebb59fec28db] Exception: Failed to read the 
runner-service response. Unexpected character ('<' (code 60)): expected 
a valid value (number, String, array, object, 'true', 'false' or 'null')
 at [Source: org.apache.http.conn.EofSensorInputStream@6cc9953a; line: 
1, column: 2]
2020-11-13 10:05:40,785+01 ERROR 
[org.ovirt.engine.core.bll.hostdeploy.InstallVdsInternalCommand] 
(EE-ManagedThreadFactory-engine-Thread-5) 
[80e3f255-f8b9-4d5f-9be2-ebb59fec28db] Host installation failed for host 
'df87842f-0852-4a3a-898b-2b724b068199', 'Bigvirt': Failed to execute 
Ansible host-deploy role: Failed to read the runner-service response. 
Unexpected character ('<' (code 60)): expected a valid value (number, 
String, array, object, 'true', 'false' or 'null')


Anyone got a clue?


Winfried

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/D52HIEX5DWGXYQKOTUVBMY7TFNDIRWTJ/