[ovirt-users] Re: Local (Deployment) VM Can't Reach "centos-ceph-pacific" Repo
Follow Up: So after doing more research, etc, I've discovered the following: - Because the install failed the V-Bridge (virbr0 - 192.168.222.1) and the Local VM (HostedEngineLocal - 192.168.222.77) still exist on the Host. - SSHing into the Local VM I discovered that I could ping out to an ip address, but not to a hostname (I used mirrorlist.centos.org, as the initial error in this run was complaining that the Local VM couldn't download the centos-ceph-pacific meta-data). - The Local VM's /etc/resolv.conf file has a single entry pointing to the V-Bridge. - I did a "dig" to mirrorlist.centos.org and that command returned the correct ip addresses, etc, and used the V-Bridge to do it. HOWEVER, with some further experimentation (eg doing 2 pings to the same host in a row, as well as other experiments) the underlying issue *seems* to be that the dns requests are timing out - once the Local VM has resolved the hostname<=>ip address mapping everything *seems* to run OK. So, I'm wondering if any of the following solutions are viable (of course, I could be completely off-track): - Is there some way of adding the DNS servers that the deployment script asks about to the Local VM's /etc/resolv.conf file (ie bypass the V-Bridge when doing a DNS lookup to make the response time faster)? - There is a `timeout` setting (default: 30 sec) in dnf config file. Is there some way of changing this to a larger value on the Local VM. - Use the `--ansible-extra-vars=he_pause_host=true` (or similar) flag to pause the install, go into the Local VM and make one or both of the above changes. If *anyone* has any ideas I'd love to hear them. Cheers Dulux-Oz ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/GJGPSMIIWIKREIQNAADFVWXUJICAPJJZ/
[ovirt-users] Re: Engine's certification is about to expire at .... Please renew the engine's certification.
I think you can do that by running engine-setup --offline Greetings Klaas On 10/14/22 09:40, nico...@devels.es wrote: Thanks Patrick. We're not planning to upgrade the engine yet, would this solution still be valid if I re-run the engine-setup process without upgrading to 4.5? Thanks again. El 2022-10-13 19:17, Patrick Hibbs escribió: Hello, That means the engine certificate signed by the internal engine CA is about to expire. (It's used to communicate with VDSM and VNC connections.) The engine should auto renew it during the next upgrade. If you have downtime, you can renew it manually by rerunning engine-setup on the engine host. The custom cert you give to apache is not affected by this renewal, but the engine will start having issues if it's internal cert isn't renewed. Do keep in mind that some users have reported having issues when renewing this cert, (engine-setup not actually renewing it properly, hosts loosing connectivity, etc.) so I would plan on there being a complete service interruption, e.g. all VMs inaccessible / down, during the renewal process. (Maybe do it over a weekend.) -Patrick Hibbs On Thu, 2022-10-13 at 11:14 +0100, nico...@devels.es wrote: Hi, I'm running oVirt 4.4 and recently I got a message in the events list like this: Engine's certification is about to expire at 2022-10-30. Please renew the engine's certification. What does that exactly mean? And how can it be renewed? I'm using a custom TLS certificate both for web access and websocket proxy. Does it need to be renewed anyways? Thanks. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y6VVJOL47YPYGNMXXWUK24F752PRKMLV/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/SK4HD755QPUFVXOWPIJ56NMM5F65GP6N/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/QM3CTGTR566MBD5HBMZKW4GR7NHWXWCQ/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/KQ7U4M53MOJSUV5JCKHOYIHE64N7XAXC/
[ovirt-users] Re: Engine's certification is about to expire at .... Please renew the engine's certification.
Thanks Patrick. We're not planning to upgrade the engine yet, would this solution still be valid if I re-run the engine-setup process without upgrading to 4.5? Thanks again. El 2022-10-13 19:17, Patrick Hibbs escribió: Hello, That means the engine certificate signed by the internal engine CA is about to expire. (It's used to communicate with VDSM and VNC connections.) The engine should auto renew it during the next upgrade. If you have downtime, you can renew it manually by rerunning engine-setup on the engine host. The custom cert you give to apache is not affected by this renewal, but the engine will start having issues if it's internal cert isn't renewed. Do keep in mind that some users have reported having issues when renewing this cert, (engine-setup not actually renewing it properly, hosts loosing connectivity, etc.) so I would plan on there being a complete service interruption, e.g. all VMs inaccessible / down, during the renewal process. (Maybe do it over a weekend.) -Patrick Hibbs On Thu, 2022-10-13 at 11:14 +0100, nico...@devels.es wrote: Hi, I'm running oVirt 4.4 and recently I got a message in the events list like this: Engine's certification is about to expire at 2022-10-30. Please renew the engine's certification. What does that exactly mean? And how can it be renewed? I'm using a custom TLS certificate both for web access and websocket proxy. Does it need to be renewed anyways? Thanks. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y6VVJOL47YPYGNMXXWUK24F752PRKMLV/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/SK4HD755QPUFVXOWPIJ56NMM5F65GP6N/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/QM3CTGTR566MBD5HBMZKW4GR7NHWXWCQ/
