[ovirt-users] Engine update failing 4.5.1.3-1 -> 4.5.2-1
Hi there, I'm trying to update my engine version so I can mitigate a bug which was in the previous update and is failing. The log file is proving to be very difficult to pinpoint the cause of the error however I can provide it. Wondering if anyone else has had this issue and if there's a way to fix it while preserving the VMs I have on this single host setup. [ INFO ] Stage: Setup validation During execution engine service will be stopped (OK, Cancel) [OK]: [ INFO ] Hosted Engine HA is in Global Maintenance mode. Setup version: 4.5.2-1.el8 Engine version: 4.5.1.3-1.el8 [ ERROR ] Failed to execute stage 'Setup validation': Setup and (updated) Engine versions must match [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20220728194403-9ev4xe.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20220728194429-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZJF4J5BHAP3EQGGIPFYPQFE275UNRMXN/
[ovirt-users] Re: Veeam Backup for RHV (oVirt)
*oVirt Keycloak internal SSO revert procedure:*
*First of all this is rather a Dev approach and in a real Production
environment regular 'restore from previous backup and run setup' approach
should be used. *
*I have tested this only on my very simplified dev environment. *
*Please make sure to backup any existing setup before proceding*
On the engine host:
*1. Disable external SSO in oVirt Engine*
*edit:*
/etc/ovirt-engine/engine.conf.d/12-setup-keycloak.conf
end update the following properties:
KEYCLOAK_BUNDLED=false
ENGINE_SSO_ENABLE_EXTERNAL_SSO=false
*2. Disable HTTPD openidc configuration*
remove/rename /etc/httpd/conf.d/internalsso-openidc.conf
ie.
mv /etc/httpd/conf.d/internalsso-openidc.conf
/etc/httpd/conf.d/internalsso-openidc.conf.disabled
*3. Update oVirt OVN provider (if configured)*
edit
/etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
and remove or comment out the following property:
ovirt-admin-user-name=admin@ovirt@internalsso
*4 Run setup to update all answers and postinstall configurations:*
$ engine-setup –offline
--otopi-environment="OVESETUP_CONFIG/keycloakEnable=bool:False
OVESETUP_CONFIG/keycloakSupported=bool:False"
*5. Update Grafana OAuth configuration (if configured on the same host as
the engine)*
*NOTE: ignore this step if you don’t need SSO for the Monitoring Portal.*
Update highlighted sections
/etc/grafana/grafana.ini
Locate [auth.generic_oauth] section
[auth.generic_oauth]
name = oVirt Engine
Auth
enabled =
true
allow_sign_up =
false
client_id = ovirt-grafana
client_secret = """wnS3xkK0Rd13kw30EhEEnDqn8lk2hLBDB2jlfSAHgHs
"""
scopes = ovirt-app-admin,ovirt-app-portal,ovirt-ext=auth:sequence-priority
role_attribute_path =
email_attribute_name =
email
auth_url = https://ENGINE/ovirt-engine/sso/openid/authorize
token_url = https://ENGINE/ovirt-engine/sso/openid/token
api_url = https://ENGINE/ovirt-engine/sso/openid/userinfo
team_ids =
allowed_organizations =
tls_skip_verify_insecure = false
tls_client_cert =
tls_client_key =
tls_client_ca = /etc/pki/ovirt-engine/apache-ca.pem
send_client_credentials_via_post = false
I was unable to retrieve the originally created client_secret for grafana
client id (ovirt-grafana).
But it is possible to create a new one. Just make sure to backup that
secret for future upgrades.
$ ovirt-register-sso-client-tool --callback-prefix-url='
https://ENGINE_FQDN/ovirt-engine-grafana/’
'--client-ca-location={ca_pem} ' #ie.
/etc/pki/ovirt-engine/ca.pem
'--client-id=ovirt-grafana2 ' # or anything else other than
‘ovirt-grafana’
'--encrypted-userinfo=false '
'--conf-file-name={tmp_conf}' # ie.
/tmp/99-client-register.conf
This command will create and register a new client that can be used for
grafana oauth setup.
The necessary configuration details will be store in filesystem under
location defined by '--conf-file-name={tmp_conf}'
*6. Restart services*
-
ovirt-engine
-
httpd
-
ovirt-provider-ovn (if configured)
-
grafana-server (if configured on the same host as oVirt Engine)
*7. Login to oVirt Admin Panel using legacy AAA credentials (username:
admin, profile: internal, provided password) *
*and update oVirt OVN provider credentials so that username is
'ovirt@internal'*
>From side panel choose:
Administration -> Providers -> ovirt-provider-ovn
Click Edit for ovirt-provider-ovn and update the ‘Username’ field to
contain ‘admin@internal’.
If you run engine-setup with the defaults, the password is the same.
Next, scroll down, click ‘Test’ and make sure it is successful before
submitting the change.
Up to my best knowledge these steps should be sufficient to fully revert to
legacy AAA on the existing Keycloak enabled environment.
Fingers crossed!
Artur
On Thu, Jul 28, 2022 at 8:46 AM Artur Socha wrote:
> Hi,
> I will document the required steps to revert from Keycloak. I only need
> some time to test the procedure.
> Definitely, it is possible.
>
> Stay tuned, I will post it first here (today)
>
> Artur
>
> On Thu, Jul 28, 2022 at 8:30 AM wrote:
>
>> Ah, I see..
>> Then, is there any good guide or documentation how to revert from
>> Keycloak to AAA?
>> All I could find is how to move from AAA to Keycloak, but not reverse.
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/6HNKNAXW2ACO5VAJAH2BTMD3T3BKTUHK/
>>
>
>
> --
> Artur Socha
> Senior Software Engineer, RHV
> Red Hat
>
--
Artur Socha
Senior Software Engineer, RHV
Red Hat
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to
[ovirt-users] Problem with engine deployment
HI everyone, hope all is good. OS: Centos Stream ovirt 4.5 I'm having problems deploying the hosted engine both through cockpit and cli. I have 3 servers, where through cockpit, I have managed to configure and deploy glusterfs without problems. but when I want to deploy the hosted engine it tells me "No valid network interface has been found". the 3 servers have 2 nic each one, I have created a bond in each one with cockpit and with the name bond0 and in XOR mode. if someone can help me, please. ansible packages installed: [root@vs05 pre_checks]# rpq -qa | ansi -bash: ansi: no se encontró la orden -bash: rpq: no se encontró la orden [root@vs05 pre_checks]# rpq -qa |grep ansi -bash: rpq: no se encontró la orden [root@vs05 pre_checks]# rpm -qa |grep ansi ansible-collection-ansible-posix-1.3.0-1.2.el8.noarch ansible-collection-ansible-netcommon-2.2.0-3.2.el8.noarch ansible-collection-ansible-utils-2.3.0-2.2.el8.noarch gluster-ansible-maintenance-1.0.1-12.el8.noarch gluster-ansible-features-1.0.5-15.el8.noarch ovirt-ansible-collection-2.1.0-1.el8.noarch gluster-ansible-cluster-1.0-5.el8.noarch gluster-ansible-repositories-1.0.1-5.el8.noarch ansible-core-2.12.7-1.el8.x86_64 gluster-ansible-roles-1.0.5-28.el8.noarch gluster-ansible-infra-1.0.4-22.el8.noarch ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/T6QLFCQUXGSTPY3FPYDFV3FGSXZNNNZQ/
[ovirt-users] Re: Import machines
You will be able to import the VMs and templates (the VM templates must be on the same storage donain) that have no snapshots. If they do have snapshots - you will have to delete them (so you won't be able to revert.Network settings are inside the manager,so you will have to recreate them or upgrade the existing engine (check the release notes or ask in another thread). Best Regards,Strahil Nikolov On Thu, Jul 28, 2022 at 12:41, Demeter Tibor wrote: Dear Listmembers, Is it possible to import ovirt 4.3's VMs into a new ovirt environment via our old storage domains?I have an old 4.3 self-hosted system with 3 storage domain, but it seems very difficult upgrade until 4.5.I just wondering, what if I do install a complety new system and just attach the old storge domains to that. Is it will work ? If yes, what will do it with our VM-s and networks. Thanks in advance,Regards. Tibor___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3EFH2SRTMGM3SY7RDLTUY35TKE6V7T55/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/MBBNVW6THMFGGJZK3XGNSCJEPL6J6R5Y/
[ovirt-users] Import machines
Dear Listmembers, Is it possible to import ovirt 4.3's VMs into a new ovirt environment via our old storage domains? I have an old 4.3 self-hosted system with 3 storage domain, but it seems very difficult upgrade until 4.5. I just wondering, what if I do install a complety new system and just attach the old storge domains to that. Is it will work ? If yes, what will do it with our VM-s and networks. Thanks in advance, Regards. Tibor ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3EFH2SRTMGM3SY7RDLTUY35TKE6V7T55/
[ovirt-users] Re: Veeam Backup for RHV (oVirt)
Hi, I will document the required steps to revert from Keycloak. I only need some time to test the procedure. Definitely, it is possible. Stay tuned, I will post it first here (today) Artur On Thu, Jul 28, 2022 at 8:30 AM wrote: > Ah, I see.. > Then, is there any good guide or documentation how to revert from Keycloak > to AAA? > All I could find is how to move from AAA to Keycloak, but not reverse. > ___ > Users mailing list -- users@ovirt.org > To unsubscribe send an email to users-le...@ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/6HNKNAXW2ACO5VAJAH2BTMD3T3BKTUHK/ > -- Artur Socha Senior Software Engineer, RHV Red Hat ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/LY33XM7SMBORJSJUQ33C77B2DJDXAI4C/
[ovirt-users] Re: Veeam Backup for RHV (oVirt)
Ah, I see.. Then, is there any good guide or documentation how to revert from Keycloak to AAA? All I could find is how to move from AAA to Keycloak, but not reverse. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/6HNKNAXW2ACO5VAJAH2BTMD3T3BKTUHK/
