[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Tony Brian Albers
FYI we still have:

Springdale Open Enterprise Linux (http://springdale.math.ias.edu)

Oracle Enterprise Linux (https://www.oracle.com/linux/)

So all is not lost. They are both rebuilds of RHEL from the SRPMS.

/tony


-- 
Tony Albers - Systems Architect - IT Development Royal Danish Library, 
Victor Albecks Vej 1, 8000 Aarhus C, Denmark
Tel: +45 2566 2383 - CVR/SE: 2898 8842 - EAN: 5798000792142
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TBZKR7BGORA36UYES2JM7XNU7VMD2GW2/


[ovirt-users]回复: Re: 回复: Re: 回复: Re: what error?

2020-12-08 Thread tommy
Yeah!

I got it.




-邮件原件-
发件人: users-boun...@ovirt.org  代表 YANJIANG Dong
发送时间: 2020年12月9日 15:21
收件人: users@ovirt.org
主题: [ovirt-users]Re: 回复: Re: 回复: Re: what error?

Hello, Tommy,

Check minimum storage requirements !!!
检查一下你的硬盘分配容量是否满足最低要求!!!

https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_cockpit_web_interface/#Storage_Requirements_SHE_cockpit_deploy


2.2.3. Storage Requirements
Hosts require storage to store configuration, logs, kernel dumps, and for use 
as swap space. Storage can be local or network-based. oVirt Node (oVirt Node) 
can boot with one, some, or all of its default allocations in network storage. 
Booting from network storage can result in a freeze if there is a network 
disconnect. Adding a drop-in multipath configuration file can help address 
losses in network connectivity. If oVirt Node boots from SAN storage and loses 
connectivity, the files become read-only until network connectivity restores. 
Using network storage might result in a performance downgrade.

The minimum storage requirements of oVirt Node are documented in this section. 
The storage requirements for Enterprise Linux hosts vary based on the amount of 
disk space used by their existing configuration but are expected to be greater 
than those of oVirt Node.

The minimum storage requirements for host installation are listed below. 
However, use the default allocations, which use more storage space.

/ (root) - 6 GB

/home - 1 GB

/tmp - 1 GB

/boot - 1 GB

/var - 15 GB

/var/crash - 10 GB

/var/log - 8 GB

/var/log/audit - 2 GB

swap - 1 GB (for the recommended swap size, see 
https://access.redhat.com/solutions/15244)

Anaconda reserves 20% of the thin pool size within the volume group for future 
metadata expansion. This is to prevent an out-of-the-box configuration from 
running out of space under normal usage conditions. Overprovisioning of thin 
pools during installation is also not supported.

Minimum Total - 55 GB

If you are also installing the Engine Appliance for self-hosted engine 
installation, /var/tmp must be at least 5 GB.

If you plan to use memory overcommitment, add enough swap space to provide 
virtual memory for all of virtual machines. See Memory Optimization.

BR
Stone
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: 
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7M3REBAUHHVTPR3Q2GCULQ3X36BQPP45/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YQOAXSN63AISYOVKQ5Z2PHCLU66AVJW7/


[ovirt-users]Re: 回复: Re: 回复: Re: what error?

2020-12-08 Thread YANJIANG Dong
Hello, Tommy,

Check minimum storage requirements !!!
检查一下你的硬盘分配容量是否满足最低要求!!!

https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_cockpit_web_interface/#Storage_Requirements_SHE_cockpit_deploy


2.2.3. Storage Requirements
Hosts require storage to store configuration, logs, kernel dumps, and for use 
as swap space. Storage can be local or network-based. oVirt Node (oVirt Node) 
can boot with one, some, or all of its default allocations in network storage. 
Booting from network storage can result in a freeze if there is a network 
disconnect. Adding a drop-in multipath configuration file can help address 
losses in network connectivity. If oVirt Node boots from SAN storage and loses 
connectivity, the files become read-only until network connectivity restores. 
Using network storage might result in a performance downgrade.

The minimum storage requirements of oVirt Node are documented in this section. 
The storage requirements for Enterprise Linux hosts vary based on the amount of 
disk space used by their existing configuration but are expected to be greater 
than those of oVirt Node.

The minimum storage requirements for host installation are listed below. 
However, use the default allocations, which use more storage space.

/ (root) - 6 GB

/home - 1 GB

/tmp - 1 GB

/boot - 1 GB

/var - 15 GB

/var/crash - 10 GB

/var/log - 8 GB

/var/log/audit - 2 GB

swap - 1 GB (for the recommended swap size, see 
https://access.redhat.com/solutions/15244)

Anaconda reserves 20% of the thin pool size within the volume group for future 
metadata expansion. This is to prevent an out-of-the-box configuration from 
running out of space under normal usage conditions. Overprovisioning of thin 
pools during installation is also not supported.

Minimum Total - 55 GB

If you are also installing the Engine Appliance for self-hosted engine 
installation, /var/tmp must be at least 5 GB.

If you plan to use memory overcommitment, add enough swap space to provide 
virtual memory for all of virtual machines. See Memory Optimization.

BR
Stone
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7M3REBAUHHVTPR3Q2GCULQ3X36BQPP45/


[ovirt-users] when adding AD group as super user in permission none of the users in the group are able to perform admin access , not even able to spin up the vm

2020-12-08 Thread dhanaraj.ramesh--- via Users
I recently added AD group as a super admin role in ovirt but unfortunately none 
of them able to perform admin operation, not able to do anything. am i missing 
something? 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GWN3355WUKHCVZNKVDFCWUQZXOCBXYQR/


[ovirt-users] Re: Error creating host certificate with SubjectAltName with -ki-enroll-request.sh

2020-12-08 Thread Yedidyah Bar David
On Tue, Dec 8, 2020 at 5:32 PM Derek Atkins  wrote:
>
>
> On Tue, December 8, 2020 10:17 am, Yedidyah Bar David wrote:
> > On Tue, Dec 8, 2020 at 5:09 PM Derek Atkins  wrote:
> >>
> [snip]
> >> Is there any chance this could be added to the --help output?
> >> An actual example would have been very useful.
> >
> > Frankly, I'd prefer people (like you) that need to use these
> > utilities manually, to search the net if they have problems,
> > than spending hours debating about how long --help should be,
> > what should be included in it and what not, what link we might
> > provide for further reference (and please note that I didn't
> > include such a link in my original reply - simply because I
> > failed to find one that seemed "most suitable"), etc. That said,
> > patches are welcome! If you think you can improve the current
> > text in a conflict-free way, which everyone will agree to, please
> > go ahead and push a patch! :-)
>
> I'll take a look at doing that.

Thanks.

>
> I did google some before asking here, but there were very few hits for
> usage of pki-enroll-request.sh -- although I admit I did not try many
> different search terms.  Most of the results were not ovirt related nor
> related to this script at all.

Of course. Many people had to struggle with SAN, together with oVirt,
when it became more common, and gradually replaced CN in Subject.

>
> > BTW: What I personally do, is to search the code and/or relevant
> > logs to see what other tools (the engine, engine-setup, in this
> > case) do, as "reference examples".
>
> That presumes having ready access to (in this case) ovirt sources -- which
> you obviously do but I do not.  As a user, I don't feel I should need to
> go refer to the sources to determine how a utility program should be
> properly used.  IMHO that's what documentation is used for.  However I
> will keep that in mind for my next issue ;)

Of course I agree, that users are not *expected* to search the sources.
But with open-source, at least they *can* :-).

And, BTW, my emphasis was on searching the logs. This is often more
helpful than searching the sources, if the logs are good.

>
> But I do understand your PoV -- for GnuCash I often reference the sources
> when answering people's questions.  However that's a case where I am (or
> was) one of the developers so I do have the sources handy.  :)

Exactly. I think it's more a matter of habit.

When I was a sysadmin, I used to search sources much less than today
(as a developer), also in cases where I am a "casual user", in projects
not closely involving my main work.

>
> Thanks again.  I am all set now!

Thanks for the report, and best regards,
-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5YYYPNTVMSQVQDWAOB5NRRVAKNDAUKCC/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Adam Xu

IBM is destroying Red hat. Sad.

在 2020/12/9 6:05, Derek Atkins 写道:

Hmm.
I appear to be having Slack issues.
Even though I am logged into my slack and have it running, when I click
this link I get a "sign in to your workspace" -- and I can't get to this
channel.
Maybe it's not public and is limited somehow?
Or maybe Slack doesn't like me?
-derek

On Tue, December 8, 2020 4:21 pm, Strahil Nikolov wrote:

Actually,

you are not the only one thinking about it.
You can check a lot of users (including me) are joining the following
slack channel: https://app.slack.com/client/T0YKGK200/D01H5BZ85LG

Best Regards,
Strahil Nikolov

В 16:01 -0500 на 08.12.2020 (вт), Derek Atkins написа:

On Tue, December 8, 2020 3:49 pm, Christopher Cox wrote:

On 12/8/20 2:20 PM, Michael Watters wrote:

This was one of my fears regarding the IBM acquisition.  I guess
we
can't complain too much, it's not like anybody *pays* for
CentOS.  :)

Yes, but this greatly limits oVirt use to temporal dev labs only.

Maybe oVirt should look into what it would take to one of the long
term
Devian
based distros

So... stupid question, but...   What would it take for a group of
interested individuals to "take over" the current CentOS-as-RHEL-
rebuild
processes currently in place?  I honestly have no idea how much
person-hour effort it it is to maintain CentOS, or what other
resources
(build machines / infrastructure) are required?


...snippity

-derek
--
Derek Atkins 617-623-3745
de...@ihtfp.com www.ihtfp.com
Computer and Internet Security Consultant
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IVROYZSBEM3GSWGON452YKOF7U5HXNTY/




___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GWSU5N7MCQWNCLY2BY2PLGXLJ3DSLSW7/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread thilburn
I to would like to see if Ubuntu could become a bit more main stream with oVirt 
now that CentOS is gone. I'm sure we won't hear anything until 2021 the oVirt 
staff need to figure out what to do now.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7HHQH2XIHK2VPV4TTERO2NH7DGEYUWV4/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread WK


On 12/8/2020 12:20 PM, Michael Watters wrote:

This was one of my fears regarding the IBM acquisition.  I guess we
can't complain too much, it's not like anybody *pays* for CentOS.  :)


yes, but "we" do provide feedback and bug reports from a LOT of 
different environments which directly helps RHEL. That is not an 
insignificant benefit to IBM.


I'm sure IBM will pick up a few paid RHEL licenses with this move, but 
I'm not sure the amount will be material enough to show up on the income 
statement. Experienced admins can easily adapt to Debian/Ubuntu/Suse etc.


In contrast, they lose the projects who started off with CentOS but 
switched to RHEL paid support when they had special needs or the 
production environment dictated that they have a 'real' license with 
Support. We have a few customers who did precisely that.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZXILONFZDZO7IISBGMEXHPA5HSU4BQZ4/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Derek Atkins
Hmm.
I appear to be having Slack issues.
Even though I am logged into my slack and have it running, when I click
this link I get a "sign in to your workspace" -- and I can't get to this
channel.
Maybe it's not public and is limited somehow?
Or maybe Slack doesn't like me?
-derek

On Tue, December 8, 2020 4:21 pm, Strahil Nikolov wrote:
> Actually,
>
> you are not the only one thinking about it.
> You can check a lot of users (including me) are joining the following
> slack channel: https://app.slack.com/client/T0YKGK200/D01H5BZ85LG
>
> Best Regards,
> Strahil Nikolov
>
> В 16:01 -0500 на 08.12.2020 (вт), Derek Atkins написа:
>> On Tue, December 8, 2020 3:49 pm, Christopher Cox wrote:
>> > On 12/8/20 2:20 PM, Michael Watters wrote:
>> > > This was one of my fears regarding the IBM acquisition.  I guess
>> > > we
>> > > can't complain too much, it's not like anybody *pays* for
>> > > CentOS.  :)
>> >
>> > Yes, but this greatly limits oVirt use to temporal dev labs only.
>> >
>> > Maybe oVirt should look into what it would take to one of the long
>> > term
>> > Devian
>> > based distros
>>
>> So... stupid question, but...   What would it take for a group of
>> interested individuals to "take over" the current CentOS-as-RHEL-
>> rebuild
>> processes currently in place?  I honestly have no idea how much
>> person-hour effort it it is to maintain CentOS, or what other
>> resources
>> (build machines / infrastructure) are required?
>>
>> > ...snippity
>>
>> -derek
>> --
>>Derek Atkins 617-623-3745
>>de...@ihtfp.com www.ihtfp.com
>>Computer and Internet Security Consultant
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/IVROYZSBEM3GSWGON452YKOF7U5HXNTY/
>
>


-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GYOQ4DA4BE2VVR2W22ERF7BAH6UWB5EY/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Strahil Nikolov via Users
Actually,

you are not the only one thinking about it.
You can check a lot of users (including me) are joining the following
slack channel: https://app.slack.com/client/T0YKGK200/D01H5BZ85LG

Best Regards,
Strahil Nikolov

В 16:01 -0500 на 08.12.2020 (вт), Derek Atkins написа:
> On Tue, December 8, 2020 3:49 pm, Christopher Cox wrote:
> > On 12/8/20 2:20 PM, Michael Watters wrote:
> > > This was one of my fears regarding the IBM acquisition.  I guess
> > > we
> > > can't complain too much, it's not like anybody *pays* for
> > > CentOS.  :)
> > 
> > Yes, but this greatly limits oVirt use to temporal dev labs only.
> > 
> > Maybe oVirt should look into what it would take to one of the long
> > term
> > Devian
> > based distros
> 
> So... stupid question, but...   What would it take for a group of
> interested individuals to "take over" the current CentOS-as-RHEL-
> rebuild
> processes currently in place?  I honestly have no idea how much
> person-hour effort it it is to maintain CentOS, or what other
> resources
> (build machines / infrastructure) are required?
> 
> > ...snippity
> 
> -derek
> -- 
>Derek Atkins 617-623-3745
>de...@ihtfp.com www.ihtfp.com
>Computer and Internet Security Consultant
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/IVROYZSBEM3GSWGON452YKOF7U5HXNTY/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CGOWJ3TCZPFMU753XGJOYZR3RHML2I7W/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread marcel d'heureuse
Should we use Gentoo as baseline for ovirt? you can freeze this very easy but 
it's hard to manage. 

Ubuntu ltd will be a try for ovirt. 
our lab we will leave centos 7 up to june 24.

than we have to move 

br
marcel

Am 8. Dezember 2020 22:01:51 MEZ schrieb Derek Atkins :
>
>On Tue, December 8, 2020 3:49 pm, Christopher Cox wrote:
>> On 12/8/20 2:20 PM, Michael Watters wrote:
>>> This was one of my fears regarding the IBM acquisition.  I guess we
>>> can't complain too much, it's not like anybody *pays* for CentOS. 
>:)
>>
>> Yes, but this greatly limits oVirt use to temporal dev labs only.
>>
>> Maybe oVirt should look into what it would take to one of the long
>term
>> Devian
>> based distros
>
>So... stupid question, but...   What would it take for a group of
>interested individuals to "take over" the current
>CentOS-as-RHEL-rebuild
>processes currently in place?  I honestly have no idea how much
>person-hour effort it it is to maintain CentOS, or what other resources
>(build machines / infrastructure) are required?
>
>> ...snippity
>
>-derek
>-- 
>   Derek Atkins 617-623-3745
>   de...@ihtfp.com www.ihtfp.com
>   Computer and Internet Security Consultant
>___
>Users mailing list -- users@ovirt.org
>To unsubscribe send an email to users-le...@ovirt.org
>Privacy Statement: https://www.ovirt.org/privacy-policy.html
>oVirt Code of Conduct:
>https://www.ovirt.org/community/about/community-guidelines/
>List Archives:
>https://lists.ovirt.org/archives/list/users@ovirt.org/message/IVROYZSBEM3GSWGON452YKOF7U5HXNTY/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5PUHCU6EU62M2WMXQNENGO4YFP3XBIYR/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Derek Atkins

On Tue, December 8, 2020 3:49 pm, Christopher Cox wrote:
> On 12/8/20 2:20 PM, Michael Watters wrote:
>> This was one of my fears regarding the IBM acquisition.  I guess we
>> can't complain too much, it's not like anybody *pays* for CentOS.  :)
>
> Yes, but this greatly limits oVirt use to temporal dev labs only.
>
> Maybe oVirt should look into what it would take to one of the long term
> Devian
> based distros

So... stupid question, but...   What would it take for a group of
interested individuals to "take over" the current CentOS-as-RHEL-rebuild
processes currently in place?  I honestly have no idea how much
person-hour effort it it is to maintain CentOS, or what other resources
(build machines / infrastructure) are required?

> ...snippity

-derek
-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IVROYZSBEM3GSWGON452YKOF7U5HXNTY/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Christopher Cox

On 12/8/20 2:20 PM, Michael Watters wrote:

This was one of my fears regarding the IBM acquisition.  I guess we
can't complain too much, it's not like anybody *pays* for CentOS.  :)


Yes, but this greatly limits oVirt use to temporal dev labs only.

Maybe oVirt should look into what it would take to one of the long term Devian 
based distros


...snippity
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GWFN3FJSJ6I4JK6OGQ7GEIR22PLOWNJZ/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Michael Watters
This was one of my fears regarding the IBM acquisition.  I guess we
can't complain too much, it's not like anybody *pays* for CentOS.  :)

On 12/8/2020 3:14 PM, Strahil Nikolov via Users wrote:
> Yeah,
> the main problem is that Stream won't be as stable as RHEL (which also
> has tons of bugs) and you will have to fight with bugs in the OS as if
> I'm running a Fedota and on top of that - we have to be extra careful
> for oVirt.
> Also the Stream is quite new and we can't say if it will be as CentOS
> was in the past.
>
> Best Regards,
> Strahil Nikolov
>
> В 14:56 -0500 на 08.12.2020 (вт), Alex McWhirter написа:
>> On 2020-12-08 14:37, Strahil Nikolov via Users wrote:
>>> Hello All,
>>>
>>> I'm really worried about the following news:
>>> https://blog.centos.org/2020/12/future-is-centos-stream/
>>>
>>> Did anyone tried to port oVirt to SLES/openSUSE or any Debian-based
>>> distro ?
>>>
>>> Best Regards,
>>> Strahil Nikolov
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HZC4D4OSYL64DX5VYXDJCHDNRZDRGIT6/
>> I fail to see a major issue honestly. If current RHEL is 8.3, CentOS 
>> Stream is essentially the RC for 8.4... oVirt in and of itself is
>> also 
>> an upstream project, targeting upstream in advance is likely
>> beneficial 
>> for all parties involved.
>>
>> CentOS has been lagging behind RHEL quite a lot, creating it's own
>> set 
>> of issues. Being ahead of the curve is more beneficial than
>> detrimental 
>> IMO. The RHEL sources are still being published to the CentOS git,
>> oVirt 
>> node could be built against that, time will tell.
>>
>> Supported or not, i bet someone forks it anyways.
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/SM3JM6DHDCRJGH4LMGIKYOLCJKGWJKS4/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/535INKZGF22FIMJIVIADYNBUJ6J3P26U/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FMEYSKCAV5WUJ7XNG3E2QS36NONBPSHF/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Vinícius Ferrão via Users
CentOS Stream is unstable at best.

I’ve used it recently and it was just a mess. There’s no binary compatibility 
with the current point release and there’s no version pinning. So it will be 
really difficult to keep track of things.

I’m really curious how oVirt will handle this.

From: Wesley Stewart 
Sent: Tuesday, December 8, 2020 4:56 PM
To: Strahil Nikolov 
Cc: users 
Subject: [ovirt-users] Re: CentOS 8 is dead

This is a little concerning.

But it seems pretty easy to convert:
https://www.centos.org/centos-stream/

However I would be curious to see if someone tests this with having an active 
ovirt node!

On Tue, Dec 8, 2020 at 2:39 PM Strahil Nikolov via Users 
mailto:users@ovirt.org>> wrote:
Hello All,

I'm really worried about the following news:
https://blog.centos.org/2020/12/future-is-centos-stream/

Did anyone tried to port oVirt to SLES/openSUSE or any Debian-based
distro ?

Best Regards,
Strahil Nikolov
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to 
users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HZC4D4OSYL64DX5VYXDJCHDNRZDRGIT6/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZLTWP255MVLDGSBYEG266FDMGZKOE4J5/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Strahil Nikolov via Users
Yeah,
the main problem is that Stream won't be as stable as RHEL (which also
has tons of bugs) and you will have to fight with bugs in the OS as if
I'm running a Fedota and on top of that - we have to be extra careful
for oVirt.
Also the Stream is quite new and we can't say if it will be as CentOS
was in the past.

Best Regards,
Strahil Nikolov

В 14:56 -0500 на 08.12.2020 (вт), Alex McWhirter написа:
> On 2020-12-08 14:37, Strahil Nikolov via Users wrote:
> > Hello All,
> > 
> > I'm really worried about the following news:
> > https://blog.centos.org/2020/12/future-is-centos-stream/
> > 
> > Did anyone tried to port oVirt to SLES/openSUSE or any Debian-based
> > distro ?
> > 
> > Best Regards,
> > Strahil Nikolov
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> > https://lists.ovirt.org/archives/list/users@ovirt.org/message/HZC4D4OSYL64DX5VYXDJCHDNRZDRGIT6/
> 
> I fail to see a major issue honestly. If current RHEL is 8.3, CentOS 
> Stream is essentially the RC for 8.4... oVirt in and of itself is
> also 
> an upstream project, targeting upstream in advance is likely
> beneficial 
> for all parties involved.
> 
> CentOS has been lagging behind RHEL quite a lot, creating it's own
> set 
> of issues. Being ahead of the curve is more beneficial than
> detrimental 
> IMO. The RHEL sources are still being published to the CentOS git,
> oVirt 
> node could be built against that, time will tell.
> 
> Supported or not, i bet someone forks it anyways.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/SM3JM6DHDCRJGH4LMGIKYOLCJKGWJKS4/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/535INKZGF22FIMJIVIADYNBUJ6J3P26U/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Wesley Stewart
This is a little concerning.

But it seems pretty easy to convert:
https://www.centos.org/centos-stream/

However I would be curious to see if someone tests this with having an
active ovirt node!

On Tue, Dec 8, 2020 at 2:39 PM Strahil Nikolov via Users 
wrote:

> Hello All,
>
> I'm really worried about the following news:
> https://blog.centos.org/2020/12/future-is-centos-stream/
>
> Did anyone tried to port oVirt to SLES/openSUSE or any Debian-based
> distro ?
>
> Best Regards,
> Strahil Nikolov
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HZC4D4OSYL64DX5VYXDJCHDNRZDRGIT6/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/W2AUQ3UFT6SHPDTRXPVHQUL2VKKCAUSR/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Alex McWhirter

On 2020-12-08 14:37, Strahil Nikolov via Users wrote:

Hello All,

I'm really worried about the following news:
https://blog.centos.org/2020/12/future-is-centos-stream/

Did anyone tried to port oVirt to SLES/openSUSE or any Debian-based
distro ?

Best Regards,
Strahil Nikolov
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HZC4D4OSYL64DX5VYXDJCHDNRZDRGIT6/


I fail to see a major issue honestly. If current RHEL is 8.3, CentOS 
Stream is essentially the RC for 8.4... oVirt in and of itself is also 
an upstream project, targeting upstream in advance is likely beneficial 
for all parties involved.


CentOS has been lagging behind RHEL quite a lot, creating it's own set 
of issues. Being ahead of the curve is more beneficial than detrimental 
IMO. The RHEL sources are still being published to the CentOS git, oVirt 
node could be built against that, time will tell.


Supported or not, i bet someone forks it anyways.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SM3JM6DHDCRJGH4LMGIKYOLCJKGWJKS4/


[ovirt-users] CentOS 8 is dead

2020-12-08 Thread Strahil Nikolov via Users
Hello All,

I'm really worried about the following news: 
https://blog.centos.org/2020/12/future-is-centos-stream/

Did anyone tried to port oVirt to SLES/openSUSE or any Debian-based
distro ?

Best Regards,
Strahil Nikolov
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HZC4D4OSYL64DX5VYXDJCHDNRZDRGIT6/


[ovirt-users] Re: difference between CPU server and client family

2020-12-08 Thread Michal Skrivanek
qemu CPUs are mostly mapping to microarchitectures, for this one there’s 
excessive number of details at [1] :)

but yours seems to be CofeeLake (8th gen) which is not really supported yet in 
that version. Well, you didn’t say anything about what your version is, so I 
don’t know for sure…

It’s usually a compromise between what the hardware has and what has been 
implemented just yet

Thanks,
michal



[1] https://en.wikichip.org/wiki/intel/microarchitectures/skylake_(server)

> On 8 Dec 2020, at 17:09, jb  wrote:
> 
> I get this output:
> 
> "cpuFlags": 
> "sse4_2,hle,mpx,pti,pge,pbe,rtm,popcnt,cpuid,md-clear,lm,invtsc,invpcid_single,ibrs,tsc_deadline_timer,movbe,avx2,ibpb,pse36,umip,hypervisor,erms,fpu,bts,monitor,cmov,arch-capabilities,nx,mca,abm,pschange-mc-no,aes,ht,xsaves,ds_cpl,nonstop_tsc,adx,epb,bmi2,hwp,hwp_act_window,dtherm,aperfmperf,vme,invpcid,art,nopl,fsgsbase,pts,sep,cx8,msr,acpi,x2apic,xgetbv1,fma,flush_l1d,vmx,sse2,pat,constant_tsc,ssbd,sdbg,rdrand,clflushopt,cx16,ept,tsc_adjust,intel_pt,pse,de,stibp,sse,vpid,hwp_epp,ida,xsavec,arat,pae,clflush,tm,rdtscp,lahf_lm,cpuid_fault,pclmulqdq,fxsr,flexpriority,mtrr,syscall,ssse3,pdcm,3dnowprefetch,sse4_1,smep,rep_good,est,tpr_shadow,smap,dts,skip-l1dfl-vmentry,tm2,vnmi,hwp_notify,tsc_known_freq,mmx,dtes64,xsave,arch_perfmon,avx,rdseed,smx,ss,xtpr,f16c,bmi1,pni,pdpe1gb,apic,mce,xtopology,xsaveopt,pebs,pcid,tsc,md_clear,amd-ssbd,pln,spec_ctrl,model_Conroe,model_kvm32,model_Penryn,model_Skylake-Client-noTSX-IBRS,model_IvyBridge-IBRS,model_Broadwell-noTSX-IBRS,model_Opteron_G2,model_n270,model_SandyBridge-IBRS,model_pentium,model_kvm64,model_Westmere,model_Haswell-noTSX-IBRS,model_Haswell,model_pentium2,model_pentium3,model_Westmere-IBRS,model_Opteron_G1,model_Skylake-Client-IBRS,model_Nehalem,model_coreduo,model_Skylake-Client,model_qemu64,model_Haswell-IBRS,model_Haswell-noTSX,model_Broadwell-IBRS,model_IvyBridge,model_core2duo,model_486,model_Nehalem-IBRS,model_Broadwell-noTSX,model_SandyBridge,model_Broadwell,model_qemu32",
> "cpuModel": "Intel(R) Xeon(R) E-2246G CPU @ 3.60GHz",
> "cpuSockets": "1",
> "cpuSpeed": "4499.377",
> "cpuThreads": "12",
> "deferred_preallocation": true,
> 
> 
> 
> Does this says something to you?
> 
> 
> 
> 
> 
> Am 08.12.20 um 17:02 schrieb Vinícius Ferrão:
>> AFAIK Client is for the i3/i5/i7/i9 families and the other one is for Xeon 
>> platforms.
>> 
>> But you have pretty unusually Xeon, so it may be missing some flags that 
>> will properly classify the CPU.
>> 
>> You can run this on the host to check what’s detected:
>> 
>> [root]# vdsm-client Host getCapabilities
>> 
>> Sent from my iPhone
>> 
>>> On 8 Dec 2020, at 10:52, jb  
>>>  wrote:
>>> 
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/XXI2TXLN6BW4PISDQXQGNZL5WB32CGKV/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PGVY4QZUDW2XUKEYM6CVNLVNVUDSABTR/


[ovirt-users] Re: Another illegal disk snapshot problem!

2020-12-08 Thread Christopher Cox

On 12/8/20 5:30 AM, Magnus Isaksson wrote:

Hi

We have the same issue as you, and we are also using vProtect.
I have no solution, but I'm very interested in how to address this.

Some VM:s we do have managed to remove the illegal snapshots after changing 
storage for the VM:s disks, but we have 3-4 VM:s that will not want to remove 
the illegal snapshot.

As for us, this issue has escalated the last couple of months.

Is it only us who have these issues or does people not take backup of their 
VM:s? Feels like more people should have these issues.


We backup our oVirt VMs just like we backup physical hosts.

With that said, it's a backup system I wrote some 12 years ago.

We're in the process of moving from oVirt to VMware and our home grown backup 
system has made moving very very easy.  I've migrated several VMs across.


There's more than one way to skin a cat.  Snapshots don't buy you much with 
regards to integral integrity.  They aren't (and never will be) application 
logic aware (for example).  And at the virtual disk level, it obviously becomes 
even more of "black box".


(I'm mainly answering the question do "people not take backup of their VMs?")

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QOAEPZFHD2YFMH3OGKOFN7QXT4AJZ6AT/


[ovirt-users] Re: difference between CPU server and client family

2020-12-08 Thread jb

I get this output:

"cpuFlags": 
"sse4_2,hle,mpx,pti,pge,pbe,rtm,popcnt,cpuid,md-clear,lm,invtsc,invpcid_single,ibrs,tsc_deadline_timer,movbe,avx2,ibpb,pse36,umip,hypervisor,erms,fpu,bts,monitor,cmov,arch-capabilities,nx,mca,abm,pschange-mc-no,aes,ht,xsaves,ds_cpl,nonstop_tsc,adx,epb,bmi2,hwp,hwp_act_window,dtherm,aperfmperf,vme,invpcid,art,nopl,fsgsbase,pts,sep,cx8,msr,acpi,x2apic,xgetbv1,fma,flush_l1d,vmx,sse2,pat,constant_tsc,ssbd,sdbg,rdrand,clflushopt,cx16,ept,tsc_adjust,intel_pt,pse,de,stibp,sse,vpid,hwp_epp,ida,xsavec,arat,pae,clflush,tm,rdtscp,lahf_lm,cpuid_fault,pclmulqdq,fxsr,flexpriority,mtrr,syscall,ssse3,pdcm,3dnowprefetch,sse4_1,smep,rep_good,est,tpr_shadow,smap,dts,skip-l1dfl-vmentry,tm2,vnmi,hwp_notify,tsc_known_freq,mmx,dtes64,xsave,arch_perfmon,avx,rdseed,smx,ss,xtpr,f16c,bmi1,pni,pdpe1gb,apic,mce,xtopology,xsaveopt,pebs,pcid,tsc,md_clear,amd-ssbd,pln,spec_ctrl,model_Conroe,model_kvm32,model_Penryn,model_Skylake-Client-noTSX-IBRS,model_IvyBridge-IBRS,model_Broadwell-noTSX-IBRS,model_Opteron_G2,model_n270,model_SandyBridge-IBRS,model_pentium,model_kvm64,model_Westmere,model_Haswell-noTSX-IBRS,model_Haswell,model_pentium2,model_pentium3,model_Westmere-IBRS,model_Opteron_G1,model_Skylake-Client-IBRS,model_Nehalem,model_coreduo,model_Skylake-Client,model_qemu64,model_Haswell-IBRS,model_Haswell-noTSX,model_Broadwell-IBRS,model_IvyBridge,model_core2duo,model_486,model_Nehalem-IBRS,model_Broadwell-noTSX,model_SandyBridge,model_Broadwell,model_qemu32",

    "cpuModel": "Intel(R) Xeon(R) E-2246G CPU @ 3.60GHz",
    "cpuSockets": "1",
    "cpuSpeed": "4499.377",
    "cpuThreads": "12",
    "deferred_preallocation": true,


Does this says something to you?



Am 08.12.20 um 17:02 schrieb Vinícius Ferrão:
AFAIK Client is for the i3/i5/i7/i9 families and the other one is for 
Xeon platforms.


But you have pretty unusually Xeon, so it may be missing some flags 
that will properly classify the CPU.


You can run this on the host to check what’s detected:

[root]# vdsm-client Host getCapabilities


Sent from my iPhone


On 8 Dec 2020, at 10:52, jb  wrote:

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XXI2TXLN6BW4PISDQXQGNZL5WB32CGKV/


[ovirt-users] Re: difference between CPU server and client family

2020-12-08 Thread Vinícius Ferrão via Users
AFAIK Client is for the i3/i5/i7/i9 families and the other one is for Xeon 
platforms.

But you have pretty unusually Xeon, so it may be missing some flags that will 
properly classify the CPU.

You can run this on the host to check what’s detected:


[root]# vdsm-client Host getCapabilities

Sent from my iPhone

On 8 Dec 2020, at 10:52, jb  wrote:

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RM3AE7FLYVNDIESMXCGUAABHWIEK5AG2/


[ovirt-users] Re: Error creating host certificate with SubjectAltName with -ki-enroll-request.sh

2020-12-08 Thread Derek Atkins

On Tue, December 8, 2020 10:17 am, Yedidyah Bar David wrote:
> On Tue, Dec 8, 2020 at 5:09 PM Derek Atkins  wrote:
>>
[snip]
>> Is there any chance this could be added to the --help output?
>> An actual example would have been very useful.
>
> Frankly, I'd prefer people (like you) that need to use these
> utilities manually, to search the net if they have problems,
> than spending hours debating about how long --help should be,
> what should be included in it and what not, what link we might
> provide for further reference (and please note that I didn't
> include such a link in my original reply - simply because I
> failed to find one that seemed "most suitable"), etc. That said,
> patches are welcome! If you think you can improve the current
> text in a conflict-free way, which everyone will agree to, please
> go ahead and push a patch! :-)

I'll take a look at doing that.

I did google some before asking here, but there were very few hits for
usage of pki-enroll-request.sh -- although I admit I did not try many
different search terms.  Most of the results were not ovirt related nor
related to this script at all.

> BTW: What I personally do, is to search the code and/or relevant
> logs to see what other tools (the engine, engine-setup, in this
> case) do, as "reference examples".

That presumes having ready access to (in this case) ovirt sources -- which
you obviously do but I do not.  As a user, I don't feel I should need to
go refer to the sources to determine how a utility program should be
properly used.  IMHO that's what documentation is used for.  However I
will keep that in mind for my next issue ;)

But I do understand your PoV -- for GnuCash I often reference the sources
when answering people's questions.  However that's a case where I am (or
was) one of the developers so I do have the sources handy.  :)

Thanks again.  I am all set now!

-derek

-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AK42QT53KEZ4BXSCXX6K4VXDVRBRGN3R/


[ovirt-users] Re: Error creating host certificate with SubjectAltName with -ki-enroll-request.sh

2020-12-08 Thread Yedidyah Bar David
On Tue, Dec 8, 2020 at 5:09 PM Derek Atkins  wrote:
>
> Hi Didi,
>
> On Tue, December 8, 2020 10:03 am, Yedidyah Bar David wrote:
> > On Tue, Dec 8, 2020 at 4:25 PM Derek Atkins  wrote:
> >>
> >> Hi,
> >>
> >> I'm running a single-host, hosted-engine Ovirt deployment, version
> >> 4.3.10
> >> (upgraded from 4.0->4.1->4.2) and it's complaining that my host cert
> >> does
> >> not have a SubjectAltName.
> >>
> >> If I try to use pki-enroll-request.sh to rebuild the host cert and
> >> follow
> >> the instructions to add a --san, I get an error:
> >>
> >> /usr/share/ovirt-engine/bin/pki-enroll-request.sh --name=host.na.me
> >> --san=host.na.me
> >
> > Please try with '--san=DNS:host.na.me'.
>
> AHA, thank you...  Thank worked.
>
> >> Using configuration from openssl.conf
> >> Check that the request matches the signature
> >> Signature ok
> >> The Subject's Distinguished Name is as follows
> >> organizationName  :PRINTABLE:'My Org Name'
> >> commonName:PRINTABLE:'host.na.me'
> >> ERROR: adding extensions in section v3_ca_san
> >> 139875647600528:error:2207507C:X509 V3
> >> routines:v2i_GENERAL_NAME_ex:missing value:v3_alt.c:531:
> >> 139875647600528:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error
> >> in
> >> extension:v3_conf.c:95:name=subjectAltName, value=host.na.me
> >> Cannot sign certificate
> >>
> >> Am I using this script incorrectly?
> >
> > You are using it well. --san argument is passed as-is to openssl's
> > 'subjectAltName', which requires a prefix to tell its type. Search the
> > net for 'openssl subjectAltName' for other examples.
>
> Is there any chance this could be added to the --help output?
> An actual example would have been very useful.

Frankly, I'd prefer people (like you) that need to use these
utilities manually, to search the net if they have problems,
than spending hours debating about how long --help should be,
what should be included in it and what not, what link we might
provide for further reference (and please note that I didn't
include such a link in my original reply - simply because I
failed to find one that seemed "most suitable"), etc. That said,
patches are welcome! If you think you can improve the current
text in a conflict-free way, which everyone will agree to, please
go ahead and push a patch! :-)

BTW: What I personally do, is to search the code and/or relevant
logs to see what other tools (the engine, engine-setup, in this
case) do, as "reference examples".

Best regards,
-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LBCZW3HZNGJIXZCONQJSE4IJZ7LB74FM/


[ovirt-users] Re: Error creating host certificate with SubjectAltName with -ki-enroll-request.sh

2020-12-08 Thread Derek Atkins
Hi Didi,

On Tue, December 8, 2020 10:03 am, Yedidyah Bar David wrote:
> On Tue, Dec 8, 2020 at 4:25 PM Derek Atkins  wrote:
>>
>> Hi,
>>
>> I'm running a single-host, hosted-engine Ovirt deployment, version
>> 4.3.10
>> (upgraded from 4.0->4.1->4.2) and it's complaining that my host cert
>> does
>> not have a SubjectAltName.
>>
>> If I try to use pki-enroll-request.sh to rebuild the host cert and
>> follow
>> the instructions to add a --san, I get an error:
>>
>> /usr/share/ovirt-engine/bin/pki-enroll-request.sh --name=host.na.me
>> --san=host.na.me
>
> Please try with '--san=DNS:host.na.me'.

AHA, thank you...  Thank worked.

>> Using configuration from openssl.conf
>> Check that the request matches the signature
>> Signature ok
>> The Subject's Distinguished Name is as follows
>> organizationName  :PRINTABLE:'My Org Name'
>> commonName:PRINTABLE:'host.na.me'
>> ERROR: adding extensions in section v3_ca_san
>> 139875647600528:error:2207507C:X509 V3
>> routines:v2i_GENERAL_NAME_ex:missing value:v3_alt.c:531:
>> 139875647600528:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error
>> in
>> extension:v3_conf.c:95:name=subjectAltName, value=host.na.me
>> Cannot sign certificate
>>
>> Am I using this script incorrectly?
>
> You are using it well. --san argument is passed as-is to openssl's
> 'subjectAltName', which requires a prefix to tell its type. Search the
> net for 'openssl subjectAltName' for other examples.

Is there any chance this could be added to the --help output?
An actual example would have been very useful.

Thanks again!

> Best regards,
> --
> Didi

-derek


-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UU4NAMQXEGUDLYG2WJJILTJZ3QRYVCRA/


[ovirt-users] Re: Error creating host certificate with SubjectAltName with -ki-enroll-request.sh

2020-12-08 Thread Yedidyah Bar David
On Tue, Dec 8, 2020 at 4:25 PM Derek Atkins  wrote:
>
> Hi,
>
> I'm running a single-host, hosted-engine Ovirt deployment, version 4.3.10
> (upgraded from 4.0->4.1->4.2) and it's complaining that my host cert does
> not have a SubjectAltName.
>
> If I try to use pki-enroll-request.sh to rebuild the host cert and follow
> the instructions to add a --san, I get an error:
>
> /usr/share/ovirt-engine/bin/pki-enroll-request.sh --name=host.na.me
> --san=host.na.me

Please try with '--san=DNS:host.na.me'.

> Using configuration from openssl.conf
> Check that the request matches the signature
> Signature ok
> The Subject's Distinguished Name is as follows
> organizationName  :PRINTABLE:'My Org Name'
> commonName:PRINTABLE:'host.na.me'
> ERROR: adding extensions in section v3_ca_san
> 139875647600528:error:2207507C:X509 V3
> routines:v2i_GENERAL_NAME_ex:missing value:v3_alt.c:531:
> 139875647600528:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in
> extension:v3_conf.c:95:name=subjectAltName, value=host.na.me
> Cannot sign certificate
>
> Am I using this script incorrectly?

You are using it well. --san argument is passed as-is to openssl's
'subjectAltName', which requires a prefix to tell its type. Search the
net for 'openssl subjectAltName' for other examples.

Best regards,
-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TVLEO7WSZYWLNXVQTW5F2RPVL4WRFE3U/


[ovirt-users] [SOLVED] Re: Re: How to re-enroll (or renew) host certificates for a single-host hosted-engine deployment?

2020-12-08 Thread Derek Atkins
Hi,

On Mon, December 7, 2020 4:02 pm, Derek Atkins wrote:
> Hi Michal,
>
> On Mon, December 7, 2020 11:43 am, Michal Skrivanek wrote:
>>
[snip]
> And for the record, after putting the new certificates into place by
> hand,
> just restarting a VM was sufficient to get Spice to pull in the new
> cert(s).  So, technically, it LOOKS like I don't have to reboot the whole
> system (although I plan to do that tonight) -- I could just shutdown and
> re-run each VM.
>
>> HTH,
>> michal
>
> Thank you for all your support and everything you do for this project,
> Michal.  We very much appreciate it!

For the record, I rebooted the host last night and once everything came
back, the new certs were all in place and everything was happy Except
for the fact that my host cert does not have a SAN (SubjectAltName) so the
engine is *still* complaining about it.  See my other email about that.



FYI, here are the commands I used to refresh everything (modulo restarting
everything):

set my_date="$(date +"%Y%m%d%H%M%S")"

##  On the ENGINE, rebuild the CA Cert:

cp -p /etc/pki/ovirt-engine/private/ca.pem
/etc/pki/ovirt-engine/private/ca.pem.$my_date
cp -p /etc/pki/ovirt-engine/ca.pem{,.$my_date}
openssl x509 -signkey /etc/pki/ovirt-engine/private/ca.pem -in
/etc/pki/ovirt-engine/ca.pem -out /etc/pki/ovirt-engine/ca.pem.new -days
3650 -sha256
openssl x509 -in /etc/pki/ovirt-engine/ca.pem.new -text >
/etc/pki/ovirt-engine/ca.pem.new.full
mv /etc/pki/ovirt-engine/ca.pem.new.full /etc/pki/ovirt-engine/ca.pem
mv /etc/pki/ovirt-engine/certs/ca.der{,.$my_date}
cp -p /etc/pki/ovirt-engine/ca.pem.new /etc/pki/ovirt-engine/certs/ca.der


#  On ovirt host, create a CSR:
#   openssl x509 -x509toreq -in /etc/pki/libvirt/clientcert.pem -out
/tmp/HOST.csr -signkey /etc/pki/libvirt/private/clientkey.pem
mv /etc/pki/ovirt-engine/certs/host.na.me.cer{,.$my_date}
mv /etc/pki/ovirt-engine/requests/host.na.me.req{,.$my_date}

# copy new CSR into place on the engine:
#/etc/pki/ovirt-engine/requests/host.na.me.req
#  and sign it:
/usr/share/ovirt-engine/bin/pki-enroll-request.sh --name=host.na.me

#  NB -- adding --san results in an error: --san=host.na.me


# copy new Host cert from /etc/pki/ovirt-engine/certs/host.na.me.cer
#to host:new_cert
#   and copy CA cert to host:cacert.pem
# ON OVIRT Host:
mv /etc/pki/libvirt/clientcert.pem{,.$my_date}
mv /etc/pki/vdsm/certs/vdsmcert.pem{,.$my_date}
mv /etc/pki/vdsm/libvirt-spice/server-cert.pem{,.$my_date}
cp -p new_cert /etc/pki/libvirt/clientcert.pem
cp -p new_cert /etc/pki/vdsm/certs/vdsmcert.pem
cp -p new_cert /etc/pki/vdsm/libvirt-spice/server-cert.pem
chown root:kvm /etc/pki/libvirt/clientcert.pem
/etc/pki/vdsm/certs/vdsmcert.pem
/etc/pki/vdsm/libvirt-spice/server-cert.pem
#
# Copy new CA cert into place on Host:
mv /etc/pki/CA/cacert.pem{,$my_date}
cp -p cacert.pem /etc/pki/CA/cacert.pem
chgrp kvm /etc/pki/CA/cacert.pem
mv /etc/pki/vdsm/certs/cacert.pem{,.$my_date}
mv /etc/pki/vdsm/libvirt-spice/ca-cert.pem{,.$my_date}
mv /etc/pki/ovirt-engine/ca.pem{,.$my_date}
cp -p /etc/pki/CA/cacert.pem /etc/pki/vdsm/certs/cacert.pem
cp -p /etc/pki/CA/cacert.pem /etc/pki/vdsm/libvirt-spice/ca-cert.pem
cp -p /etc/pki/CA/cacert.pem /etc/pki/ovirt-engine/ca.pem


At this point I shut down all VMs, rebooted the host, and restarted all
the VMs and everything came back happy (except for the lack of the
SubjectAltName).


Also note that you will need to remove the trusted cert from your
browser(s) and re-add the new CA cert -- otherwise you will get a browser
error complaining about the change in certificate from the same Issuer and
with the same Serial#.

-derek

-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XJ6CE262KXWE3X5CGX55YXYCUFFVYRM6/


[ovirt-users] Error creating host certificate with SubjectAltName with -ki-enroll-request.sh

2020-12-08 Thread Derek Atkins
Hi,

I'm running a single-host, hosted-engine Ovirt deployment, version 4.3.10
(upgraded from 4.0->4.1->4.2) and it's complaining that my host cert does
not have a SubjectAltName.

If I try to use pki-enroll-request.sh to rebuild the host cert and follow
the instructions to add a --san, I get an error:

/usr/share/ovirt-engine/bin/pki-enroll-request.sh --name=host.na.me
--san=host.na.me
Using configuration from openssl.conf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
organizationName  :PRINTABLE:'My Org Name'
commonName:PRINTABLE:'host.na.me'
ERROR: adding extensions in section v3_ca_san
139875647600528:error:2207507C:X509 V3
routines:v2i_GENERAL_NAME_ex:missing value:v3_alt.c:531:
139875647600528:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in
extension:v3_conf.c:95:name=subjectAltName, value=host.na.me
Cannot sign certificate

Am I using this script incorrectly?

Thanks,

-derek

-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JRNYDRPFACRQK6FU3YN6XMJ276N3HJYQ/


[ovirt-users] difference between CPU server and client family

2020-12-08 Thread jb

Hello,

is there a big difference between *Secure Intel Skylake Server Family* 
CPUs and *Secure Intel Skylake Client Family* CPUs.


I ask because I use a Intel Xeon E-2246G in our servers and when I 
install the cluster, the client cpu model was automatically selected. 
I'm not sure now if it makes a different, when I change the cluster cpu 
type to the server model and if this is possible with this cpu.



Best regards

Jonathan

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VZ6FZZ5INC6YQUJTIAKZZVKOCC5AA2IG/


[ovirt-users]Re: 回复: Re: what error?

2020-12-08 Thread jb

Under Partition Schema:

LVM Thin Provisioning




Am 08.12.20 um 12:11 schrieb tommy:

how to config lvm thin?


 原始邮件 
发件人: jb 
日期: 2020年12月8日周二 19:00
收件人: users@ovirt.org
主 题: [ovirt-users] Re: what error?

If you want to use custom partitioning, you have to use LVM Thin,
not the normal LVM Layout.

Am 08.12.20 um 10:28 schrieb tommy:

thanks!



___
Users mailing list --users@ovirt.org  
To unsubscribe send an email tousers-le...@ovirt.org  

Privacy Statement:https://www.ovirt.org/privacy-policy.html  

oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/  

List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/WIH44A6VMSZLKG6IHIMGIVLTOEJUIUSL/
  


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/776CJXOVHGIRKNP423ADMIOXSAUUFI4T/


[ovirt-users] Re: Another illegal disk snapshot problem!

2020-12-08 Thread Benny Zlotnik
>[root@ov-engine ~]# tail -f /var/log/ovirt-engine/engine.log | grep ERROR
grepping error is ok, but it does not show the reason for the failure,
which will probably be on the vdsm host (you can use flow_id
9b2283fe-37cc-436c-89df-37c81abcb2e1 to find the correct file
Need to see the underlying error causing: VDSGenericException:
VDSErrorException: Failed to SnapshotVDS, error =
Snapshot failed, code = 48

>Using unlock_entity.sh -t all sets the status back to 1 (confirmed in
>DB) and then trying to create does not change it back to illegal, but
>trying to delete that snapshot fails and sets it back to 4.
I see, can you share the removal failure log (similar information as
requested above)

regarding backup, I don't have a good answer, hopefully someone else
has suggestions
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MJHKYBPBTINAWY4VDSLLZZPWYI2O3SHB/


[ovirt-users] Re: Another illegal disk snapshot problem!

2020-12-08 Thread Joseph Goldman

On 8/12/2020 10:55 pm, Benny Zlotnik wrote:

Do you know why your snapshot creation failed? Do you have logs with the error?

Here is the log (grepped for ERROR only to keep it a bit less verbose):

[root@ov-engine ~]# tail -f /var/log/ovirt-engine/engine.log | grep ERROR
2020-12-08 22:03:13,679+10 ERROR 
[org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-72) 
[9b2283fe-37cc-436c-89df-37c81abcb2e1] Failed in 'SnapshotVDS' method
2020-12-08 22:03:13,710+10 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engineScheduled-Thread-72) 
[9b2283fe-37cc-436c-89df-37c81abcb2e1] EVENT_ID: 
VDS_BROKER_COMMAND_FAILURE(10,802), VDSM ov-node1 command SnapshotVDS 
failed: Snapshot failed
2020-12-08 22:03:13,710+10 ERROR 
[org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-72) 
[9b2283fe-37cc-436c-89df-37c81abcb2e1] Command 
'SnapshotVDSCommand(HostName = ov-node1, 
SnapshotVDSCommandParameters:{hostId='40b344e3-0508-48f4-9c86-589faa630adb', 
vmId='2a0df965-8434-4074-85cf-df12a69648e7'})' execution failed: 
VDSGenericException: VDSErrorException: Failed to SnapshotVDS, error = 
Snapshot failed, code = 48
2020-12-08 22:03:14,885+10 ERROR 
[org.ovirt.engine.core.bll.snapshots.CreateSnapshotForVmCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-15) 
[9b2283fe-37cc-436c-89df-37c81abcb2e1] Ending command 
'org.ovirt.engine.core.bll.snapshots.CreateSnapshotForVmCommand' with 
failure.
2020-12-08 22:03:14,932+10 ERROR 
[org.ovirt.engine.core.bll.snapshots.CreateSnapshotDiskCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-15) 
[9b2283fe-37cc-436c-89df-37c81abcb2e1] Ending command 
'org.ovirt.engine.core.bll.snapshots.CreateSnapshotDiskCommand' with 
failure.
2020-12-08 22:03:14,953+10 ERROR 
[org.ovirt.engine.core.bll.snapshots.CreateSnapshotCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-15) 
[9b2283fe-37cc-436c-89df-37c81abcb2e1] Ending command 
'org.ovirt.engine.core.bll.snapshots.CreateSnapshotCommand' with failure.
2020-12-08 22:03:14,977+10 ERROR 
[org.ovirt.engine.core.vdsbroker.vdsbroker.HSMRevertTaskVDSCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-15) 
[9b2283fe-37cc-436c-89df-37c81abcb2e1] Trying to revert unknown task 
'4c2ec360-5a00-4bae-bc25-9d8c2d698172'
2020-12-08 22:03:16,309+10 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engineScheduled-Thread-15) [] EVENT_ID: 
USER_CREATE_SNAPSHOT_FINISHED_FAILURE(69), Failed to complete snapshot 
'Test' creation for VM 'prod-DC1'.

On paper the situation does not look too bad, as the only discrepancy
between the database and vdsm is the status of the image, and since
it's legal on vdsm, changing it legal in database should work (image
status 1)
Using unlock_entity.sh -t all sets the status back to 1 (confirmed in 
DB) and then trying to create does not change it back to illegal, but 
trying to delete that snapshot fails and sets it back to 4.

Active Image is not the same image that has a parentid of all 0

Can you elaborate on this? The image with the empty parent is usually
the base image (the first active image), the active image will usually
be the leaf (unless the VM is in preview or something similar)

 This is probably just my misunderstanding of the snapshot structure.

Of course do not make any changes without backing up first
Whats the best way to back up this (running) VM without snapshots? Can I 
just copy the folder and disk? Is there a way to copy it so it doesn't 
copy it as a 100G file (when only 20G used)?

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z3FBWNGWNQ3U4UAPXD7CXLLIRP25Y3BS/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YZ53RQIGHWVCWEFL4OQ3CH6OWGGIJDIK/


[ovirt-users] Re: Another illegal disk snapshot problem!

2020-12-08 Thread Benny Zlotnik
Do you know why your snapshot creation failed? Do you have logs with the error?

On paper the situation does not look too bad, as the only discrepancy
between the database and vdsm is the status of the image, and since
it's legal on vdsm, changing it legal in database should work (image
status 1)

>Active Image is not the same image that has a parentid of all 0
Can you elaborate on this? The image with the empty parent is usually
the base image (the first active image), the active image will usually
be the leaf (unless the VM is in preview or something similar)

Of course do not make any changes without backing up first
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z3FBWNGWNQ3U4UAPXD7CXLLIRP25Y3BS/


[ovirt-users] Re: Another illegal disk snapshot problem!

2020-12-08 Thread Magnus Isaksson
Hi

We have the same issue as you, and we are also using vProtect.
I have no solution, but I'm very interested in how to address this.

Some VM:s we do have managed to remove the illegal snapshots after changing 
storage for the VM:s disks, but we have 3-4 VM:s that will not want to remove 
the illegal snapshot.
As for us, this issue has escalated the last couple of months.

Is it only us who have these issues or does people not take backup of their 
VM:s? Feels like more people should have these issues.

//Magnus

From: Joseph Goldman 
Sent: 08 December 2020 10:57
To: users@ovirt.org 
Subject: [ovirt-users] Another illegal disk snapshot problem!

Hi List,

 oVirt 4.3

 I know there have been threads about this before - but I am unable to find the 
exact scenario I am facing.

 I have a VM with 3 snapshots - Active, and 2 dated ones (technically created 
by vProtect)

 After trying to do a fresh snapshot in the GUI it failed out and marked one of 
the old snapshot disks as 'illegal' - then the other tried to follow suit.

 I tried 'unlocking' the entity using the unlock_entity.sh tool but any action 
reverts them back to illegal.

 Following previous advice - I can see the VDSM status is all showing LEGAL:

image:23710238-07c2-46f3-96c0-9061fe1c3e0d

 - c3dadf14-bb4e-45a7-8bee-b9a01fe29ae1
   status: OK, voltype: INTERNAL, format: RAW, legality: LEGAL, 
type: SPARSE, capacity: 107374182400, truesize: 18402942976

 - a6d4533b-b0b0-475d-a436-26ce99a38d94
   status: OK, voltype: INTERNAL, format: COW, legality: LEGAL, 
type: SPARSE, capacity: 107374182400, truesize: 21521768448

 - 4b6f7ca1-b70d-4893-b473-d8d30138bb6b
   status: OK, voltype: LEAF, format: COW, legality: LEGAL, type: 
SPARSE, capacity: 107374182400, truesize: 12617457664


 The 2 bold entries are the 'illegal' snapshots.

 Looking in the DB see's:

select
  image_guid,parentid
  ,imagestatus
  ,vm_snapshot_id
  ,volume_type
  ,volume_format
  ,active
from images
where image_group_id='23710238-07c2-46f3-96c0-9061fe1c3e0d';

  image_guid  |   parentid   | 
imagestatus |vm_snapshot_id| volume_type | 
volume_format | active
--+--+-+--+-+---+
 4b6f7ca1-b70d-4893-b473-d8d30138bb6b | a6d4533b-b0b0-475d-a436-26ce99a38d94 |  
 1 | d5044ae5-dc48-4700-9e46-d61e676c73fc |   2 | 4 
| t
 c3dadf14-bb4e-45a7-8bee-b9a01fe29ae1 | ---- |  
 4 | 57337968-28da-4b03-ac40-134a347d8c11 |   2 | 5 
| f
 a6d4533b-b0b0-475d-a436-26ce99a38d94 | c3dadf14-bb4e-45a7-8bee-b9a01fe29ae1 |  
 4 | d2d82724-9fe7-452c-a114-f8d70b20 |   2 | 4 
| f

So from here previous advice has been to do things such as delete the 
snapshot/disk etc but thats when they showed as illegal status. I also notice 
the Active Image is not the same image that has a parentid of all 0's so im 
not sure on the process of possibly deleting the other snapshots and disks 
cleanly and/or safely.

Deleting or any tasks in the gui 100% fails and its at a point that if I shut 
down the (critical) VM it will not come back on because of these status'.

On top of this what is a good way to take a clean, manual backup of current in 
use disk before I start playing with this in case worse comes to worse I have 
to try build it as a new server (As at this point I can't trust my vProtect 
backups)

Any help appreciated.

Thanks,
Joe
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FFV2QW6Y46EKOHJXWVK7K3B3ECADOIJE/


[ovirt-users]回复: Re: what error?

2020-12-08 Thread ‪‪‪tommy‬
how to config lvm thin? 原始邮件 发件人: jb 日期: 2020年12月8日周二 19:00收件人: users@ovirt.org主题: [ovirt-users] Re: what error?
If you want to use custom partitioning, you have to use LVM Thin,
  not the normal LVM Layout. 

Am 08.12.20 um 10:28 schrieb tommy:


  
  thanks!




  
  
  
  ___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/WIH44A6VMSZLKG6IHIMGIVLTOEJUIUSL/


  
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HD43PPUPVQLMNQR5JQLXJPM4FSWDHQ2B/


[ovirt-users] Re: what error?

2020-12-08 Thread jb
If you want to use custom partitioning, you have to use LVM Thin, not 
the normal LVM Layout.


Am 08.12.20 um 10:28 schrieb tommy:

thanks!



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WIH44A6VMSZLKG6IHIMGIVLTOEJUIUSL/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4JRBW2G6SQKSXEUECR3UAQHQHQ332YRG/


[ovirt-users] Another illegal disk snapshot problem!

2020-12-08 Thread Joseph Goldman

Hi List,

 oVirt 4.3

 I know there have been threads about this before - but I am unable to 
find the exact scenario I am facing.


 I have a VM with 3 snapshots - Active, and 2 dated ones (technically 
created by vProtect)


 After trying to do a fresh snapshot in the GUI it failed out and 
marked one of the old snapshot disks as 'illegal' - then the other tried 
to follow suit.


 I tried 'unlocking' the entity using the unlock_entity.sh tool but any 
action reverts them back to illegal.


 Following previous advice - I can see the VDSM status is all showing 
LEGAL:


    image: 23710238-07c2-46f3-96c0-9061fe1c3e0d

 - *c3dadf14-bb4e-45a7-8bee-b9a01fe29ae1*
*status: OK, voltype: INTERNAL, format: RAW, legality: LEGAL, type: 
SPARSE, capacity: 107374182400, truesize: 18402942976**

*
 - *a6d4533b-b0b0-475d-a436-26ce99a38d94**
**   status: OK, voltype: INTERNAL, format: COW, legality: 
LEGAL, type: SPARSE, capacity: 107374182400, truesize: 21521768448*


 - 4b6f7ca1-b70d-4893-b473-d8d30138bb6b
   status: OK, voltype: LEAF, format: COW, legality: LEGAL, 
type: SPARSE, capacity: 107374182400, truesize: 12617457664



 The 2 bold entries are the 'illegal' snapshots.

 Looking in the DB see's:

select
  image_guid,parentid
  ,imagestatus
  ,vm_snapshot_id
  ,volume_type
  ,volume_format
  ,active
from images
where image_group_id='23710238-07c2-46f3-96c0-9061fe1c3e0d';

  image_guid  | parentid   | 
imagestatus | vm_snapshot_id    | volume_type | volume_format | 
active

--+--+-+--+-+---+
 4b6f7ca1-b70d-4893-b473-d8d30138bb6b | 
a6d4533b-b0b0-475d-a436-26ce99a38d94 |   1 | 
d5044ae5-dc48-4700-9e46-d61e676c73fc |   2 | 4 | t
 c3dadf14-bb4e-45a7-8bee-b9a01fe29ae1 | 
---- |   4 | 
57337968-28da-4b03-ac40-134a347d8c11 |   2 | 5 | f
 a6d4533b-b0b0-475d-a436-26ce99a38d94 | 
c3dadf14-bb4e-45a7-8bee-b9a01fe29ae1 |   4 | 
d2d82724-9fe7-452c-a114-f8d70b20 |   2 | 4 | f


So from here previous advice has been to do things such as delete the 
snapshot/disk etc but thats when they showed as illegal status. I also 
notice the Active Image is not the same image that has a parentid of all 
0's so im not sure on the process of possibly deleting the other 
snapshots and disks cleanly and/or safely.


Deleting or any tasks in the gui 100% fails and its at a point that if I 
shut down the (critical) VM it will not come back on because of these 
status'.


On top of this what is a good way to take a clean, manual backup of 
current in use disk before I start playing with this in case worse comes 
to worse I have to try build it as a new server (As at this point I 
can't trust my vProtect backups)


Any help appreciated.

Thanks,
Joe
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/27VY74ZJFTGE3WFEU4X4FJQ7LZKC4UDQ/


[ovirt-users] Re: BUG: after upgrading 4.4.2 to 4.4.3 ISO Domain show empty list

2020-12-08 Thread Adam Xu

Hi Hadas

install virtio-win in the engine host solve the iso domain problem. Thanks.

在 2020/12/8 16:49, Arik Hadas 写道:



On Tue, Dec 8, 2020 at 10:44 AM Adam Xu > wrote:


Hi ovirt

This is a big bug. I can not install any OS now because both iso
domain and iso file in Data Domain can not be visible for VM.

在 2020/11/27 20:51, Dmitry Kharlamov 写道:

Recreated ISO domain, but ISO images are still not displayed.
When loading the ISO files in the Data Domain, is also not visible for VM.



Could you please follow [1] and see if it solves the problem with the 
ISO domain?


[1] https://bugzilla.redhat.com/show_bug.cgi?id=1904947#c3 




___
Users mailing list --users@ovirt.org  
To unsubscribe send an email tousers-le...@ovirt.org  

Privacy Statement:https://www.ovirt.org/privacy-policy.html  

oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ 
 
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/NQWS5L4EAZHUBAYKXDQWRP65QKRRCUAU/
  


___
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org

Privacy Statement: https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/

List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/L7AZDJURVSETJ22GIVDM3G3GFNV7J26I/




___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/X63NACVDEC4JPQIRZWOHZIQEKBHHTTKD/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PSJM2IUEMPN7KE4OW57CD34KAPKELQ6Z/


[ovirt-users] Re: BUG: after upgrading 4.4.2 to 4.4.3 ISO Domain show empty list

2020-12-08 Thread Arik Hadas
On Tue, Dec 8, 2020 at 10:44 AM Adam Xu  wrote:

> Hi ovirt
>
> This is a big bug. I can not install any OS now because both iso domain
> and iso file in Data Domain can not be visible for VM.
> 在 2020/11/27 20:51, Dmitry Kharlamov 写道:
>
> Recreated ISO domain, but ISO images are still not displayed.
> When loading the ISO files in the Data Domain, is also not visible for VM.
>
>
Could you please follow [1] and see if it solves the problem with the ISO
domain?

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1904947#c3


> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NQWS5L4EAZHUBAYKXDQWRP65QKRRCUAU/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/L7AZDJURVSETJ22GIVDM3G3GFNV7J26I/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/X63NACVDEC4JPQIRZWOHZIQEKBHHTTKD/


[ovirt-users] Re: BUG: after upgrading 4.4.2 to 4.4.3 ISO Domain show empty list

2020-12-08 Thread Adam Xu

Hi ovirt

This is a big bug. I can not install any OS now because both iso domain 
and iso file in Data Domain can not be visible for VM.


在 2020/11/27 20:51, Dmitry Kharlamov 写道:

Recreated ISO domain, but ISO images are still not displayed.
When loading the ISO files in the Data Domain, is also not visible for VM.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NQWS5L4EAZHUBAYKXDQWRP65QKRRCUAU/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/L7AZDJURVSETJ22GIVDM3G3GFNV7J26I/


[ovirt-users] Re: unable to edit vm properties created from pool

2020-12-08 Thread Arik Hadas
On Tue, Dec 8, 2020 at 10:21 AM Lucie Leistnerova 
wrote:

> Hello,
> On 12/4/20 2:46 PM, mhu...@gmail.com wrote:
>
> Hi all,
>
> Is there any way how to edit cpu/memory/boot and stuff like that once the VM 
> has been created by the pool? All option when trying to edit VM are greyed 
> out. We are unable to edit any option for vm in pool.
>
> No, it is intended behaviour. You cannot edit specific VM in the pool. VM
> pool is a bunch of identical VMs that user can randomly take and run.
>

+1


> When you want to change all the pool VMs, you need to remove the pool,
> update the template and create new pool.
>
Or alternatively, if you set the pool to the latest version of a template,
you can create a new version for the template and the VMs would be upgraded
"automatically" when they restart.


> (oVirt Open Virtualization Manager, Software Version:4.4.3.12-1.el8)
>
> Thanks
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QDFR6DOEKFJBYUR3BXSDOKKTHRFJ2HB4/
>
> Best regards,
> --
>
> Lucie Leistnerova
> Associate Manager, Quality Engineering, RHV - QE Core & Tools
> GChat: lleistne @ Virtualization
> 
> [image: Red Hat EMEA] 
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/K5AOCXIYNI2NPOQM26SK5WDXTV6H6YCM/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NMHW4MXFIEOUYOTDTSOW5Z6MZKUXNYEY/


[ovirt-users] Re: unable to edit vm properties created from pool

2020-12-08 Thread Lucie Leistnerova

Hello,

On 12/4/20 2:46 PM, mhu...@gmail.com wrote:

Hi all,

Is there any way how to edit cpu/memory/boot and stuff like that once the VM 
has been created by the pool? All option when trying to edit VM are greyed out. 
We are unable to edit any option for vm in pool.
No, it is intended behaviour. You cannot edit specific VM in the pool. 
VM pool is a bunch of identical VMs that user can randomly take and run.


When you want to change all the pool VMs, you need to remove the pool, 
update the template and create new pool.




(oVirt Open Virtualization Manager, Software Version:4.4.3.12-1.el8)

Thanks
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QDFR6DOEKFJBYUR3BXSDOKKTHRFJ2HB4/

Best regards,
--

Lucie Leistnerova
Associate Manager, Quality Engineering, RHV - QE Core & Tools
GChat: lleistne @ Virtualization 

Red Hat EMEA 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/K5AOCXIYNI2NPOQM26SK5WDXTV6H6YCM/