[ovirt-users] Re: oVirt Performance (Horrific)

[Donny Davis]

Can you explain your expectations for where you are trying to get?

Ovirt uses KVM under the hood and performs very well for many
organizations. I am sure its just a configuration thing.

On Thu, Feb 28, 2019 at 12:48 PM  wrote:

> Hi everybody, my coworker and I have some decent hardware that would make
> great single servers, and then we through in a 10gb switch with 2x10gbps
> cards in 4 boxes.
>
> We have 2  excellent boxes - super micro board (disabled speed step) with
> 14 core intel i9's 7940x's, 128 GB ram (3200),  1tb m.2 samsung 870 evo's,
> 1tb ssd samsung, 1 8TB WD Gold, 1 6TB WD gold.
> Then we have 2 boxes (1 with 8 core i7-9700k, 1 with 6 core i7-8700) 128GB
> ram in one, 64GB ram in the other all 3000MHz with the same 1tb ssd,6tb wd
> gold, 8tb wd gold drives as the other boxes and 10gbps cards.
>
> Our problem is performance.  We used the slower boxes for KVM(libvirt) and
> FreeNAS at first which was great performance wise. Then we bought the new
> super micro boxes and converted to oVirt + Gluster and did some basic write
> test using dd writing zero's to files from 1GB up to 50GB and were happy
> with the numbers writing directly to the gluster. But then we stuck a
> windows VM on it and turned it on...I'll stop there..because turning it on
> stopped any performance testing. This thing blew goat cheese. It was so
> slow the oVirt guest agent doesn't even start along with MS SQL server
> engine sometimes and other errors.
>
> So naturally, we removed the gluster from the equation.  We took one of
> the 8TB WD Gold drives, made it a linux NFS share and gave it to oVirt to
> put VM's on as an NFS Domain. Just a single drive.  Migrated the disk with
> the fresh windows 10 installation to it configured as VirtIO-SCSI, and
> booted the vm with 16GB ram, 8:1:1 cpu's.  To our surprise it still blew.
> Just ran a winsat disk -drive c: for example purposes and the spice viewer
> repeatedly freezing, had the resource monitor open watching the 10,000ms
> disk response times with results...results were I rebooted because the
> results disappeared I didn't run it as administrator. And opening a command
> prompt is painful, the disk is still in use The task manager has no words
> on it.  Disk is writing like 1MBps. command prompt finally showed up and
> looked blank with the cursor offset with no words anywhere.
> So the reboot took .. Well turning off took 2 minutes. Booting took 6
> minutes 30 seconds ish.  Logging in: 1m+
>
> So 9-10 minutes to reboot and log back in a fresh windows install. Then 2
> minutes to open a command prompt, task manager and resource monitor.
> During the write test disk i/o on the vm was less than 8, from the graph
> looks like 6MBps.  Network traffic is like 20Mbps average, cpu is near
> zero, a couple spikes up to 30MBps on the disk.  I ran this same thing on
> my disk and it finished in <1m.  Ran it on the vm...still running after 30
> minutes.  I'll wait for the results to post them here.  Ok It's been 30
> minutes and it's still writing.  I don't see the writes in the resource
> monitor, windows is doing a bunch of random app updates or something with
> candy crush on a fresh install and, ok so I hit enter a bunch of times on
> the prompt and it moved down to a flush-seq...and now it shows up in the
> resource monitor doing something again...I just ran this on my pc and it
> finished in less than a minute... whatever it's doing it's almost running
> at 1MB/s
>
> I think something went wrong because it only shows like 2 minutes passing
> at any test and then a total of 37 minutes.  And at no time did the windows
> resource graphs or any of the oVirt node system graphs show more than like
> 6MB/s and definitely not 50 or 1GBps... flat out lies here.
> C:\Windows\system32>winsat disk -drive c
> Windows System Assessment Tool
> > Running: Feature Enumeration ''
> > Run Time 00:00:00.00
> > Running: Storage Assessment '-drive c -ran -read'
> > Run Time 00:00:12.95
> > Running: Storage Assessment '-drive c -seq -read'
> > Run Time 00:00:20.59
> > Running: Storage Assessment '-drive c -seq -write'
> > Run Time 00:02:04.56
> > Run Time 00:02:04.56
> > Running: Storage Assessment '-drive c -flush -seq'
> > Run Time 00:01:02.75
> > Running: Storage Assessment '-drive c -flush -ran'
> > Run Time 00:01:50.20
> > Dshow Video Encode Time  0.0 s
> > Dshow Video Decode Time  0.0 s
> > Media Foundation Decode Time 0.0 s
> > Disk  Random 16.0 Read   5.25 MB/s  5.1
> > Disk  Sequential 64.0 Read   1220.56 MB/s  8.6
> > Disk  Sequential 64.0 Write  53.61 MB/s  5.5
> > Average Read Time with Sequential Writes 22.994 ms  1.9
> > Latency: 95th Percentile 85.867 ms  1.9
> > Latency: Maximum 325.666 ms  6.5
> > Average Read Time with Random Writes 29.548 ms  

[ovirt-users] Re: Ovirt Cluster completely unstable

[Donny Davis]

Is it this bug

https://bugzilla.redhat.com/show_bug.cgi?id=1651246


On Thu, Feb 14, 2019 at 11:50 AM Jayme  wrote:

> [2019-02-14 02:20:29.611099] I [login.c:110:gf_auth] 0-auth/login: allowed
> user names: 7b741fe4-72ca-41ba-8efb-7add1e4fe6f3
> [2019-02-14 02:20:29.611131] I [MSGID: 115029]
> [server-handshake.c:537:server_setvolume] 0-non_prod_b-server: accepted
> client from
> CTX_ID:ee716e24-e187-4b57-a371-cab544f41162-GRAPH_ID:0-PID:30671-HOST:host2.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> (version: 5.3)
> [2019-02-14 02:20:29.619521] I [MSGID: 115036]
> [server.c:469:server_rpc_notify] 0-non_prod_b-server: disconnecting
> connection from
> CTX_ID:ee716e24-e187-4b57-a371-cab544f41162-GRAPH_ID:0-PID:30671-HOST:host2.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> [2019-02-14 02:20:29.619867] I [MSGID: 101055]
> [client_t.c:435:gf_client_unref] 0-non_prod_b-server: Shutting down
> connection
> CTX_ID:ee716e24-e187-4b57-a371-cab544f41162-GRAPH_ID:0-PID:30671-HOST:host2.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 19988 times between [2019-02-14 02:19:31.377315] and
> [2019-02-14 02:21:14.033991]
> [2019-02-14 02:21:30.303440] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 10 times between [2019-02-14 02:21:30.303440] and
> [2019-02-14 02:23:20.421140]
> [2019-02-14 02:23:33.142281] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 34 times between [2019-02-14 02:23:33.142281] and
> [2019-02-14 02:25:29.115156]
> [2019-02-14 02:25:30.326469] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> [2019-02-14 02:25:53.973830] I [addr.c:54:compare_addr_and_update]
> 0-/gluster_bricks/non_prod_b/non_prod_b: allowed = "*", received addr =
> "10.11.0.222"
> [2019-02-14 02:25:53.973896] I [login.c:110:gf_auth] 0-auth/login: allowed
> user names: 7b741fe4-72ca-41ba-8efb-7add1e4fe6f3
> [2019-02-14 02:25:53.973928] I [MSGID: 115029]
> [server-handshake.c:537:server_setvolume] 0-non_prod_b-server: accepted
> client from
> CTX_ID:4a6b8860-8274-4b3b-b400-d66cbfb97349-GRAPH_ID:0-PID:33522-HOST:host2.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> (version: 5.3)
> [2019-02-14 02:25:54.627728] I [MSGID: 115036]
> [server.c:469:server_rpc_notify] 0-non_prod_b-server: disconnecting
> connection from
> CTX_ID:4a6b8860-8274-4b3b-b400-d66cbfb97349-GRAPH_ID:0-PID:33522-HOST:host2.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> [2019-02-14 02:25:54.628149] I [MSGID: 101055]
> [client_t.c:435:gf_client_unref] 0-non_prod_b-server: Shutting down
> connection
> CTX_ID:4a6b8860-8274-4b3b-b400-d66cbfb97349-GRAPH_ID:0-PID:33522-HOST:host2.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> [2019-02-14 02:25:56.396855] I [addr.c:54:compare_addr_and_update]
> 0-/gluster_bricks/non_prod_b/non_prod_b: allowed = "*", received addr =
> "10.11.0.220"
> [2019-02-14 02:25:56.396926] I [login.c:110:gf_auth] 0-auth/login: allowed
> user names: 7b741fe4-72ca-41ba-8efb-7add1e4fe6f3
> [2019-02-14 02:25:56.396957] I [MSGID: 115029]
> [server-handshake.c:537:server_setvolume] 0-non_prod_b-server: accepted
> client from
> CTX_ID:963c2196-108c-485d-aca6-a236906d2acf-GRAPH_ID:0-PID:33635-HOST:host0.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> (version: 5.3)
> [2019-02-14 02:25:56.404566] I [MSGID: 115036]
> [server.c:469:server_rpc_notify] 0-non_prod_b-server: disconnecting
> connection from
> CTX_ID:963c2196-108c-485d-aca6-a236906d2acf-GRAPH_ID:0-PID:33635-HOST:host0.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> [2019-02-14 02:25:56.404866] I [MSGID: 101055]
> [client_t.c:435:gf_client_unref] 0-non_prod_b-server: Shutting down
> connection
> CTX_ID:963c2196-108c-485d-aca6-a236906d2acf-GRAPH_ID:0-PID:33635-HOST:host0.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 25 times between [2019-02-14 02:25:30.326469] and
> [2019-02-14 02:27:25.965601]
> [2019-02-14 02:28:10.538374] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 38 times between [2019-02-14 02:28:10.538374] and
> [2019-02-14 02:29:22.622679]
> [2019-02-14 02:29:48.891040] E [MSGID: 101191]
> 

[ovirt-users] Re: Port 9090 Redirect Nginx Proxy

[Donny Davis]

I think haproxy is probably more appropriate for your use case. Use TCP
mode, and you should be good to go.


Donny Davis

"Ease is a greater threat to progress  than hardship"

On Mon, Dec 17, 2018, 1:29 PM  I've run into a small issue I'm looking to resolve. I currently have 5
> hosts I'm working to configure as oVirt Hosts and a single oVirt Manager to
> manage them all. The oVirt Manager can talk to the hosts, the hosts show
> up, they can be managed, etc.
>
> Our client PCs reside on a different network (and this can't be changed).
> We used to just add the interfaces to communicate on the new network but
> because of IP spaces and DFARS/NIST requirements, we are moving away from
> this. I've set up a reverse proxy so only a single machine serves as the
> gateway between the networks. This works for everything except one small
> issue. If you click "Host Console" from the ovirt manager, it opens up a
> new page with port 9090 to the cockpit page of the host.
>
> I have this working except I am getting a blank page for cockpit after
> logging in. What's even more odd, I can use the reverse proxy settings to
> browse to the 443 port and redirect to 9090 and i can load everything fine,
> but 9090 to 9090 does not work. I've looked at other threads and posts,
> including the GitLab thing, which got me here, but can't get this last
> missing piece. Is anybody able to provide any assistance? Based off
> research it looks like something I could edit in the cockpit.conf file,
> except ovirt apparently doesn't make the cockpit.conf file... and trying to
> force it through the GUI by adding /settings to the URL says page not found.
>
> Alternatively I could edit the oVirt Mgr to point to client to the 443
> port and that'd work, if I knew where to edit those hyperlinks upon click.
>
> P.S. this is a test/develop internal network env which is why i have
> proxy_ssl_verify off.
>
> Nginx Reverse Proxy config:
> map $http_upgrade $connection_upgrade {
> default upgrade;
> '' close;
> }
>
> upstream websocket {
> server host11.:9090;
> }
>
> server {
>listen 80;
>server_namehost11.;
>return 301 https://$server_name$request_uri;
> }
>
> #Allows user to go directly to server (I work!)
> server {
> listen 443;
> server_name host11.;
>
> ssl on;
> ssl_certificate ;
> ssl_certificate_key ;
> proxy_ssl_verify off;
>
> location / {
> proxy_pass https://websocket;
> proxy_http_version 1.1;
> proxy_buffering off;
> proxy_set_header X-Real-IP  $remote_addr;
> proxy_set_header Host $host;
> proxy_set_header X-Forwarded-For $remote_addr;
>
> # needed for websocket
> proxy_set_header Upgrade $http_upgrade;
> proxy_set_header Connection $connection_upgrade;
>
> # change scheme of "Origin" to https
> proxy_set_header Origin https://$host;
>
> gzip off;
> }
>
> }
>
> #allows ovirtmgr host console redirect (I don't work)
> server {
> listen 9090;
> server_name host11.;
>
> ssl on;
> ssl_certificate ;
> ssl_certificate_key ;
> proxy_ssl_verify off;
>
> location / {
> proxy_pass https://websocket;
> proxy_http_version 1.1;
> proxy_buffering off;
> proxy_set_header X-Real-IP  $remote_addr;
> proxy_set_header Host $host;
> proxy_set_header X-Forwarded-For $remote_addr;
>
> # needed for websocket
> proxy_set_header Upgrade $http_upgrade;
> proxy_set_header Connection $connection_upgrade;
>
> # change scheme of "Origin" to https
> proxy_set_header Origin https://$host;
>
> gzip off;
> }
>
> }
>
>
> Host Error Log:
> #Log in Page
> Dec 17 11:22:15 ovirt11 systemd: Cannot add dependency job for unit
> lvm2-lvmetad.socket, ignoring: Unit is masked.
> Dec 17 11:22:15 ovirt11 systemd: Starting Cockpit Web Service...
> Dec 17 11:22:15 ovirt11 systemd: Started Cockpit Web Service.
> Dec 17 11:22:16 ovirt11 cockpit-ws: Using certificate:
> /etc/cockpit/ws-certs.d/0-self-signed.cert
> Dec 17 11:22:16 ovirt11 kernel: HTTPS SYN: IN=ovirtmgmt OUT=
> MAC=b8:2a:72:de:a3:76:00:50:56:8b:01:ca:08:00 SRC=192.168.100.251
> DST=192.168.100.111 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=18185 DF PROTO=TCP
>

[ovirt-users] Re: The built in group Everyone is troublesome.

[Donny Davis]

Are you are trying to accomplish a multi-tenant like experience? One where
users only see the VM's that they have provisioned?


On Tue, Dec 4, 2018 at 10:21 AM Jacob Green  wrote:

>  So all my VMs are inheriting system permissions from group
> everyone and giving all my users access to all my VMs, in ovirt 4.2. Is
> there a best practices guide or any recommendation on how to clear this
> up? Clicking remove on everyone does not work because Ovirt won't allow
> me to remove a built in account.
>
>
> Thank you
>
> --
> Jacob Green
>
> Systems Admin
>
> American Alloy Steel
>
> 713-300-5690
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/A5MW7PLHH5YGBVA7WSRZ24NO2IBY4ICD/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZNRHUG5PGODH466NK3F6M6AVW47YOG25/

[ovirt-users] Re: Hyperconverged Ovirt + ZFS

[Donny Davis]

Why not just use the built in stuff like VDO. What benefits does ZFS bring
for the use case?
For most vm based workloads ZFS is the opposite of ideal over the lifecycle
of a VM. COW filesystems have downsides over time.




On Thu, Nov 15, 2018 at 6:09 PM Darrell Budic 
wrote:

> I did this in the past and didn’t have any trouble with gluster/ZFS, but
> 4.2.x probably does more validation.
>
> I recommend these settings on your zfs volumes, I set mine at the root(v0
> here) and let them inherit:
>
> required:
> v0xattr sa local
> v0acltype   posixacl   local
> optional but I recommend them:
> v0relatime  on local
> v0compression   lz4local
>
> For gluster, I think it checks that it’s been “optimized for virt
> storage”. Either apply the virt group or set the options you’ll find in
> /var/lib/glusterd/groups/virt.
>
> Note that I don’t recommend the default settings for
> cluster.shd-max-threads & cluster.shd-wait-qlength. They can swamp your
> machines during heals unless you have a lot of cores and ram. You get a
> slightly faster heal, but often have VMs pausing for storage or other odd
> ball storage related errors. I prefer max-threads = 1 or maybe 2,
> and wait-qlength=1024 or 2048. These are per volume, so they hit harder
> than you think they will if you have a lot of volumes running.
>
> Also make sure the gluster volumes themselves got set to 36.36 for
> owner.group, doesn’t matter for the bricks. Can do it with volume settings
> or mount the volume and set it manually.
>
> Hope it helps!
>
>   -Darrell
>
>
> On Nov 15, 2018, at 6:28 AM, Thomas Simmons  wrote:
>
> Hello All,
>
> I recently took a new job in a RedHat shop and I'd like to move all of my
> homelab systems to RedHat upstream products to better align with what I
> manage at work. I had a "custom" (aka - hacked together) 3-node
> Hyperconverged XenServer cluster and would like to get this moved over to
> Ovirt (I'm currently testing with 4.2.7). Unfortunately, my storage is
> limited to software RAID with a 128GB SSD for cache. If at all possible, I
> would prefer to use ZFS (RAIDZ+ZIL+L2ARC) instead of MD RAID + lvmcache,
> however I'm not able to get this working and I'm not sure why. My ZFS and
> Gluster configuration is working - at least where I can manually mount all
> of my gluster volumes from all of my nodes, however, hosted-engine --deploy
> fails. I understand this isn't an out of the box configuration for Ovirt,
> however I see no reason why this shouldn't work. I would think this would
> be no different than using any other Gluster volume for the engine
> datastore, Am I missing something that would prevent this from working?
>
> [ INFO  ] TASK [Add glusterfs storage domain]
> [ ERROR ] Error: Fault reason is "Operation Failed". Fault detail is
> "[Storage Domain target is unsupported]". HTTP response code is 400.
> [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false,
> "deprecations": [{"msg": "The 'ovirt_storage_domains' module is being
> renamed 'ovirt_storage_domain'", "version": 2.8}], "msg": "Fault reason is
> \"Operation Failed\". Fault detail is \"[Storage Domain target is
> unsupported]\". HTTP response code is 400."}
>
> Even though it fails, it appears to have mounted and written
> __DIRECT_IO_TEST__ to my Gluster volume:
>
> [root@vmh1 ~]# mount -t glusterfs localhost:/engine /mnt/engine/
> [root@vmh1 ~]# ls /mnt/engine/
> __DIRECT_IO_TEST__
>
> If I cancel and try to run the deploy again, I get a different failure:
>
> [ ERROR ] Error: Fault reason is "Operation Failed". Fault detail is
> "[Error creating a storage domain]". HTTP response code is 400.
> [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false,
> "deprecations": [{"msg": "The 'ovirt_storage_domains' module is being
> renamed 'ovirt_storage_domain'", "version": 2.8}], "msg": "Fault reason is
> \"Operation Failed\". Fault detail is \"[Error creating a storage
> domain]\". HTTP response code is 400."}
>
> Gluster seems ok...
>
> [root@vmh1 /]# gluster volume info engine
>
> Volume Name: engine
> Type: Replicate
> Volume ID: 2e34f8f5-0129-4ba5-983f-1eb5178deadc
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x 3 = 3
> Transport-type: tcp
> Bricks:
> Brick1: vmh1-ib:/zpool1/engine
> Brick2: vmh2-ib:/zpool1/engine
> Brick3: vmh3-ib:/zpool1/engine
> Options Reconfigured:
> transport.address-family: inet
> nfs.disable: on
> performance.client-io-threads: off
>
> ZFS looks good too...
>
> [root@vmh1 ~]# ansible ovirthosts -m shell -a 'zpool status' -b
> vmh1 | CHANGED | rc=0 >>
>   pool: zpool1
>  state: ONLINE
>   scan: none requested
> config:
>
> NAMESTATE READ WRITE CKSUM
> zpool1  ONLINE   0 0 0
>   sdc   ONLINE   0 0 0
>   sdd   ONLINE   0 0 0
>   sde   ONLINE   0 0 0
> logs
>   sdb2  ONLINE   0 0 0
> 

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

[Donny Davis]

Is binding allowed in your 389ds instance?


On Fri, Nov 2, 2018, 8:11 AM Jeremy Tourville  The backend is 389 DS, no this is not Govt related.  This will be used as
> a training platform for my local ISSA chapter.  This is a new 389 DS
> server.  I followed the instructions at
> https://www.unixmen.com/install-and-configure-ldap-server-in-centos-7/
> The server is "stock" with the exceptions of the settings for startTLS and
> adding certificates, etc (basically, whatever is needed to integrate with
> the Ovirt Engine.)
> I am using my Admin account to perform the bind.  What I don't understand
> is why everything else in the aaa setup script works except the login
> sequence.  It would seem like my certificates are correct, correct use of
> the admin DN, etc.  The funny part is I can login to the server using the
> admin account and password yet the same admin account and password fail
> when using the aaa setup script.  But, that is why I am using the expert
> knowledge on the list!  Maybe I have overlooked a simple prerequisite
> setting needed for setup somewhere?
>
> I'll wait for someone to chime in on possible reasons to get this message:
> SEVERE  Authn.Result code is: CREDENTIALS_INVALID
> [ ERROR ] Login sequence failed
>
>
> __
>
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/TGT7ASCWSUTU6TDT2HIBLBCRL2CEF3G6/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FMUMHLPMX7JZKYJKWYO465KMKA3JCMA4/

[ovirt-users] Re: re-enabling networkmanager

[Donny Davis]

So you are trying to capture utilization stats from your network?

On Mon, Oct 22, 2018, 6:37 AM fsoyer  wrote:

> Hi Donny,
> thank you for this precision, but I don't want to manage network from
> Cockpit, just view the graphs of network usage in it, and eventually logs
> (can be interesting !).
> That's why I ask about risks to activate NM after configuring the networks
> in engine UI : what are the opinions ?
>
> --
>
> Cordialement,
>
> *Frank Soyer *
> Mob. 06 72 28 38 53 - Fix. 05 49 50 52 34
> <http://www.systea.net>
>
> *Systea IG*
> Administration systèmes, réseaux et bases de données
> www.systea.net
> Membre du réseau Les Professionnels du Numérique <http://www.spn.asso.fr>
> <http://www.kogite.fr>
>
> *KoGite*
> Hébergement de proximité
> www.kogite.fr
>
>
>
> Le Dimanche, Octobre 21, 2018 14:05 CEST, Donny Davis <
> do...@fortnebula.com> a écrit:
>
>
> Use the Ovirt engine to manage your networks. VDSM takes over at boot
> time, and the only way for this to happen is if you use the engine
>
> On Fri, Oct 19, 2018 at 9:26 AM fsoyer  wrote:
>
>> Hi,
>> I have installed a 4.2 cluster on CentOS 7 nodes but I have follow an
>> (old) procedure of mine done with 4.0 : so, I have disabled Network Manager
>> before installing oVirt.
>> The networks created and validated in the engine UI are :
>> ovirmgmt on bond0 (2 slaves) failover mode
>> storagemanager on bond1 (2 slaves), jumbo frames, aggregation mode,
>> serving Gluster.
>> Today, I installed Cockpit on the node to have the nodes consoles. But it
>> say that it cannot manage the network without NM.
>> So my question is : is there any risk to re-enabled NM on the nodes ? Can
>> it broke anything done by the UI ?
>>
>> --
>>
>> Cordialement,
>>
>> *Frank Soyer *
>> Mob. 06 72 28 38 53 - Fix. 05 49 50 52 34
>> <http://www.systea.net>
>>
>> *Systea IG*
>> Administration systèmes, réseaux et bases de données
>> www.systea.net
>> Membre du réseau Les Professionnels du Numérique <http://www.spn.asso.fr>
>> <http://www.kogite.fr>
>>
>> *KoGite*
>> Hébergement de proximité
>> www.kogite.fr
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GOWGDMXIQ2VLHW2NAL2SSRQLXFKD7753/
>
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/P5L2CFQ6NGT6GAQFWH42AQMHLJ7CA6I2/

[ovirt-users] Re: high load on hosts

[Donny Davis]

What is the workload from the VM? Is it an IO bound workload?

On Sun, Oct 21, 2018 at 9:19 AM Jayme  wrote:

> Yes I understand how virtualization works, but what I'm saying is that my
> hosts each have 16 cores, 256gb ram, 10GBe networking and all SSD storage
> with VMs allocation only a fraction of the available resources, yet high
> load on a single VM with 2 cpus and 4gb ram allocated can cause the host
> load to rise above 30. I'm trying to determine why one VM with limited
> resources can cause the load on the host to go up so much.
>
> On Sat, Oct 20, 2018 at 8:32 PM Donny Davis  wrote:
>
>> Also the nature of Converged compute and storage will cause more usage on
>> a host than you are used to seeing... Storage costs cpu/ram cycles too
>>
>> On Sat, Oct 20, 2018 at 7:29 PM Donny Davis  wrote:
>>
>>> I am not trying to be sarcastic here, but the host resources are
>>> controlled by what you allocate to the vm... that is kinda how
>>> virtualization works
>>>
>>> On Fri, Oct 19, 2018 at 8:47 AM Jayme  wrote:
>>>
>>>> I'm wondering how I can best limit the ability of VMs to overrun the
>>>> load on hosts.  I have a fairly stock 4.2 HCI setup with three well spec'ed
>>>> servers, 10Gbe/SSDs, plenty of ram and CPU with only a hand full of light
>>>> use VMs.  I notice when the occasional demanding job is run on a VM I'm
>>>> seeing load average on host node shoot up in to the 20-30s, how can a
>>>> single "medium" vm cause host load to rise so high?
>>>>
>>>>
>>>> ___
>>>> Users mailing list -- users@ovirt.org
>>>> To unsubscribe send an email to users-le...@ovirt.org
>>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>>> oVirt Code of Conduct:
>>>> https://www.ovirt.org/community/about/community-guidelines/
>>>> List Archives:
>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/LVSVFSI2KXURMXHQXYDAAUU5JCLG53MM/
>>>>
>>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FSO3BOWVQCB62OTZ6TRVTNZCK4YJJL2I/

[ovirt-users] Re: re-enabling networkmanager

[Donny Davis]

Use the Ovirt engine to manage your networks. VDSM takes over at boot time,
and the only way for this to happen is if you use the engine

On Fri, Oct 19, 2018 at 9:26 AM fsoyer  wrote:

> Hi,
> I have installed a 4.2 cluster on CentOS 7 nodes but I have follow an
> (old) procedure of mine done with 4.0 : so, I have disabled Network Manager
> before installing oVirt.
> The networks created and validated in the engine UI are :
> ovirmgmt on bond0 (2 slaves) failover mode
> storagemanager on bond1 (2 slaves), jumbo frames, aggregation mode,
> serving Gluster.
> Today, I installed Cockpit on the node to have the nodes consoles. But it
> say that it cannot manage the network without NM.
> So my question is : is there any risk to re-enabled NM on the nodes ? Can
> it broke anything done by the UI ?
>
> --
>
> Cordialement,
>
> *Frank Soyer *
> Mob. 06 72 28 38 53 - Fix. 05 49 50 52 34
> 
>
> *Systea IG*
> Administration systèmes, réseaux et bases de données
> www.systea.net
> Membre du réseau Les Professionnels du Numérique 
> 
>
> *KoGite*
> Hébergement de proximité
> www.kogite.fr
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GOWGDMXIQ2VLHW2NAL2SSRQLXFKD7753/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TISFSVEMY7FZWM7MFNMIH4UYWZWQMV4J/

[ovirt-users] Re: high load on hosts

[Donny Davis]

Also the nature of Converged compute and storage will cause more usage on a
host than you are used to seeing... Storage costs cpu/ram cycles too

On Sat, Oct 20, 2018 at 7:29 PM Donny Davis  wrote:

> I am not trying to be sarcastic here, but the host resources are
> controlled by what you allocate to the vm... that is kinda how
> virtualization works
>
> On Fri, Oct 19, 2018 at 8:47 AM Jayme  wrote:
>
>> I'm wondering how I can best limit the ability of VMs to overrun the load
>> on hosts.  I have a fairly stock 4.2 HCI setup with three well spec'ed
>> servers, 10Gbe/SSDs, plenty of ram and CPU with only a hand full of light
>> use VMs.  I notice when the occasional demanding job is run on a VM I'm
>> seeing load average on host node shoot up in to the 20-30s, how can a
>> single "medium" vm cause host load to rise so high?
>>
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/LVSVFSI2KXURMXHQXYDAAUU5JCLG53MM/
>>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/75KQZPYHDSXJKN3YCNTRII24VQAXF7JI/

[ovirt-users] Re: high load on hosts

[Donny Davis]

I am not trying to be sarcastic here, but the host resources are controlled
by what you allocate to the vm... that is kinda how virtualization works

On Fri, Oct 19, 2018 at 8:47 AM Jayme  wrote:

> I'm wondering how I can best limit the ability of VMs to overrun the load
> on hosts.  I have a fairly stock 4.2 HCI setup with three well spec'ed
> servers, 10Gbe/SSDs, plenty of ram and CPU with only a hand full of light
> use VMs.  I notice when the occasional demanding job is run on a VM I'm
> seeing load average on host node shoot up in to the 20-30s, how can a
> single "medium" vm cause host load to rise so high?
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/LVSVFSI2KXURMXHQXYDAAUU5JCLG53MM/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WDMWM2UFLJ4D2RDIQ64VGKJ4IFIPKIOL/

[ovirt-users] Re: Host restarting for unknown reasons

[Donny Davis]

I am sure there would be some challenges there because you cannot delete
that vm, its protected... However the rest of your stuff should run just
fine. I have never done it myself, most people head the opposite direction.

On Thu, Sep 27, 2018 at 8:31 PM Michael Mast  wrote:

> I figured as much, but wasn't sure if there would be any changes needed to
> the database so the engine will know it is no longer self hosted.
>
> On Thu, Sep 27, 2018, 20:28 Donny Davis  wrote:
>
>> Use the backup and restore procedure to move your engine maybe
>>
>> On Thu, Sep 27, 2018 at 4:08 PM Michael Mast  wrote:
>>
>>> We had it happen again, but this time on the other host. This started
>>> happening not long after I tried to update the engine, and I think I
>>> screwed that up. The instructions I was working off of was outdated and a
>>> lot of the links on the ovirt site are broken. My theory is that the
>>> engines were not "synced" since a copy runs on each host. This would cause
>>> the engine on one host to come online and think the other is not
>>> responding, at this point it forces the other host offline using iDRAC
>>> (This is in the logs how it reboots the other hsot) and forces all VMs over.
>>>
>>> So what I did was remove one host from the cluster, re-install CentOS7,
>>> and re-add it to the cluster. This way the engine config would be copied
>>> from the primary host and keep them synced. If this does not work the next
>>> step is to convert the hosted engine into a dedicated engine. Are there any
>>> good guides for making this conversion?
>>> --
>>> -
>>> Michael Mast
>>>
>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/2EDXBKVNRMFDYSLP5CHUDMXVZ5NCLXFI/
>>>
>> --
> -
> Michael Mast
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WIBEO3CQONZD2WFPDTF3OGYWC3WATPAY/

[ovirt-users] Re: Host restarting for unknown reasons

[Donny Davis]

Use the backup and restore procedure to move your engine maybe

On Thu, Sep 27, 2018 at 4:08 PM Michael Mast  wrote:

> We had it happen again, but this time on the other host. This started
> happening not long after I tried to update the engine, and I think I
> screwed that up. The instructions I was working off of was outdated and a
> lot of the links on the ovirt site are broken. My theory is that the
> engines were not "synced" since a copy runs on each host. This would cause
> the engine on one host to come online and think the other is not
> responding, at this point it forces the other host offline using iDRAC
> (This is in the logs how it reboots the other hsot) and forces all VMs over.
>
> So what I did was remove one host from the cluster, re-install CentOS7,
> and re-add it to the cluster. This way the engine config would be copied
> from the primary host and keep them synced. If this does not work the next
> step is to convert the hosted engine into a dedicated engine. Are there any
> good guides for making this conversion?
> --
> -
> Michael Mast
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/2EDXBKVNRMFDYSLP5CHUDMXVZ5NCLXFI/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YT3UKFUXT365DHQHHOAX7XOZVVDITAWL/

[ovirt-users] Re: Libvirt import to oVirt 3.5?

[Donny Davis]

I would use virt-v2v to solve that problem

On Thu, Sep 27, 2018 at 11:15 AM Mark Steele  wrote:

> Hello,
>
> Is there a mechanism for importing VM's from a KEMU Libvirt host to oVirt
> 3.5?
>
> I see there is an import menu item for import on 4.1 but not on my
> installation of 3.5.
>
> Best regards,
>
> ***
> *Mark Steele*
> CIO / VP Technical Operations | TelVue Corporation
> TelVue - We Share Your Vision
> 16000 Horizon Way, Suite 100 | Mt. Laurel, NJ 08054
> 800.885.8886 x128 | mste...@telvue.com | http://www.telvue.com
> twitter: http://twitter.com/telvue | facebook:
> https://www.facebook.com/telvue
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/6FOVXD4PXIKIJ2UXB6WW4L7VTDRFOGYV/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ORYDXJKPY7HP5GHS5HHDFNILYJFO5JZE/

[ovirt-users] Re: could ovirt manage physics machine

[Donny Davis]

Do you mean physical machine maybe?

If that is the case, then check out theforeman.org

I am thinking that might be useful to you

On Tue, Sep 18, 2018 at 11:38 PM du_hon...@yeah.net 
wrote:

>
> HI everyone
>  I want to manage physics machine by oVirt， but I do not find any info ,
> could give me some suggestion?
>
> Regards
>
> Hongyu Du
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YSGR2DG3D6DQQSWYEI4OWE3KT7CH2VYY/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VWYAQ37RIJD223VMSXPBK4NGFIWUQ4M2/

[ovirt-users] Re: oVirt + gluster with JBOD

[Donny Davis]

You could always go expand the volume after deployment by adding more disks
to the logical volume it creates.

On Wed, Sep 12, 2018, 11:38 PM Jayme  wrote:

> Eduardo, there is one thing you should be aware of.  The jbod disks aren't
> all pooled together to create one large storage domain. I had to spread my
> data domains over the devices such as a data domain on /dev/SDA and data2
> on sdb etc not a big problem with only two disks per server but with ten it
> could get ugly
>
> On Thu, Sep 13, 2018, 4:52 AM Eduardo Mayoral,  wrote:
>
>> Thanks for your answers!
>>
>> Yes, my plan is a replica-3 too. The cluster will be bigger, though, 4 or
>> 5 nodes with 10 disks each -> 40 to 50 bricks.
>> Again, thanks for your help.
>>
>> --
>> Eduardo Mayoral.
>>
>> On 12/09/18 20:54, Jayme wrote:
>>
>> Should also note that I am using replica 3 configuration with no arbiter
>> for extra redundancy.
>>
>> On Wed, Sep 12, 2018 at 3:53 PM Jayme  wrote:
>>
>>> I am running a three server oVirt hyperconverged setup with JBOD disks.
>>> Two 2TB SSDs in JBOD per server.  The configuration is working very well
>>> for me so far.
>>>
>>>
>>>
>>> On Wed, Sep 12, 2018 at 2:36 PM Donny Davis 
>>> wrote:
>>>
>>>> JBOD is on the drop down when you do the setup for the volumes
>>>>
>>>> On Wed, Sep 12, 2018, 1:50 AM Eduardo Mayoral 
>>>> wrote:
>>>>
>>>>> Hi!
>>>>>
>>>>>   I am thinking about using some spare servers I have for a
>>>>> hyperconverged oVirt + gluster. Only problem with these servers is that
>>>>> the RAID card is not specially good, so I am considering using gluster
>>>>> in a JBOD configuration. JBOD is supported for recent versions of
>>>>> gluster, but I am not sure if this configuration is supported by oVirt,
>>>>> or if there are any special considerations I should take into account.
>>>>>
>>>>> Anyone running oVirt + gluster with JBOD who can comment on this?
>>>>>
>>>>> Thanks!
>>>>>
>>>>> --
>>>>>
>>>>> Eduardo Mayoral.
>>>>>
>>>>> ___
>>>>> Users mailing list -- users@ovirt.org
>>>>> To unsubscribe send an email to users-le...@ovirt.org
>>>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>>>> oVirt Code of Conduct:
>>>>> https://www.ovirt.org/community/about/community-guidelines/
>>>>> List Archives:
>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/2DTIGZ5VOKG52ZHCZTTCHGPT5NFKYSTP/
>>>>>
>>>> ___
>>>> Users mailing list -- users@ovirt.org
>>>> To unsubscribe send an email to users-le...@ovirt.org
>>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>>> oVirt Code of Conduct:
>>>> https://www.ovirt.org/community/about/community-guidelines/
>>>> List Archives:
>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YGQUVKGP3S34JRB4CPWIRXZ2YDR27NFQ/
>>>>
>>>
>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WAHY6ICZZXRQMFRZ72SMFXAPEQZ3CE3N/

[ovirt-users] Re: Gluster deployment - Arbiter volume - different disk size - volumes sizes

[Donny Davis]

I just use engine and data in mine

On Wed, Sep 12, 2018, 1:33 AM femi adegoke  wrote:

> For the engine, you will need at least 58 GB. I always use 62 just to be
> on the safe side. If you use 50, your install will fail.
>
> You don't need an ISO domain. ISO files can be stored in "data" or
> "vmstore".
>
> Each vm you create should have 2 disks, 1 for the o/s & 1 for the data.
> The o/s disk goes in "vmstore", the data disk goes in "data".
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/XQ4AWPVS5GG263TFPLK67MHNBWRSSHI6/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GUQZG2RNOL435GBCEV27W2MEXNERDPTR/

[ovirt-users] Re: oVirt + gluster with JBOD

[Donny Davis]

JBOD is on the drop down when you do the setup for the volumes

On Wed, Sep 12, 2018, 1:50 AM Eduardo Mayoral  wrote:

> Hi!
>
>   I am thinking about using some spare servers I have for a
> hyperconverged oVirt + gluster. Only problem with these servers is that
> the RAID card is not specially good, so I am considering using gluster
> in a JBOD configuration. JBOD is supported for recent versions of
> gluster, but I am not sure if this configuration is supported by oVirt,
> or if there are any special considerations I should take into account.
>
> Anyone running oVirt + gluster with JBOD who can comment on this?
>
> Thanks!
>
> --
>
> Eduardo Mayoral.
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/2DTIGZ5VOKG52ZHCZTTCHGPT5NFKYSTP/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YGQUVKGP3S34JRB4CPWIRXZ2YDR27NFQ/

[ovirt-users] Re: Managing multiple oVirt installs?

[Donny Davis]

Go-to the glance registry that ships with ovirt. There is a manageiq image
in there. It ships as an appliance, so there is no install required.

You can also get an image from the manageiq site for ovirt and upload it

On Tue, Sep 4, 2018, 12:06 AM femi adegoke  wrote:

> Donny,
>
> Have you installed manageiq in oVirt?
> Can you share any useful tips/blog posts/notes etc.?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/FODXM24E7OGYH46RP5DFG62UHTU53LPP/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/M3MDJUNWI4NGSA6VWVRNV7DWAIPHQWDN/

[ovirt-users] Re: Managing multiple oVirt installs?

[Donny Davis]

manageiq is a good answer even if you only have to manage one site. It gets
a lot of useful data.


On Mon, Sep 3, 2018 at 6:34 PM, Nir Soffer  wrote:

> On Mon, Sep 3, 2018 at 3:40 AM femi adegoke 
> wrote:
>
>> Let's say you have multiple oVirt installs.
>>
>> How can they all be "managed" by using a single engine web UI (so I don't
>> have to login 5 different times)?
>>
>
> I never tried it, but http://manageiq.org/ can manage mulitple oVirt or
> other
> virtualization and container management systems.
>
> Here is the docs for RHV, which is basically oVirt with support:
> http://manageiq.org/docs/reference/latest/doc-Installing_on_Red_Hat_
> Virtualization/miq/
>
> Nir
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-
> guidelines/
> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/
> message/CNL4TMG2VOWHBZZNVTLGDLAL2ILC3ERF/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/POLEWLQVRG6EDTF6TM4PO2CZGJEW27PL/

[ovirt-users] Re: VDO + HCI = failed reboots

[Donny Davis]

nodectl info
layers:
  ovirt-node-ng-4.2.5.1-0.20180825.0:
ovirt-node-ng-4.2.5.1-0.20180825.0+1
bootloader:
  default: ovirt-node-ng-4.2.5.1-0.20180825.0+1
  entries:
ovirt-node-ng-4.2.5.1-0.20180825.0+1:
  index: 0
  title: ovirt-node-ng-4.2.5.1-0.20180825.0+1
  kernel:
/boot/ovirt-node-ng-4.2.5.1-0.20180825.0+1/vmlinuz-3.10.0-862.11.6.el7.x86_64
  args: "ro crashkernel=auto  rd.lvm.lv=onn/swap rhgb quiet
ixgbe.allow_unsupported_sfp=1
rd.lvm.lv=onn/ovirt-node-ng-4.2.5.1-0.20180825.0+1
img.bootid=ovirt-node-ng-4.2.5.1-0.20180825.0+1"
  initrd:
/boot/ovirt-node-ng-4.2.5.1-0.20180825.0+1/initramfs-3.10.0-862.11.6.el7.x86_64.img
  root: /dev/onn/ovirt-node-ng-4.2.5.1-0.20180825.0+1
current_layer: ovirt-node-ng-4.2.5.1-0.20180825.0+1


On Tue, Aug 28, 2018 at 8:00 AM, Donny Davis  wrote:

> I downloaded the latest build from jenkins
>
> On Tue, Aug 28, 2018 at 7:59 AM, Donny Davis  wrote:
>
>> gdeploy-2.0.8-1.el7.noarch
>>
>> On Tue, Aug 28, 2018 at 7:42 AM, Sahina Bose  wrote:
>>
>>>
>>>
>>> On Mon, Aug 27, 2018 at 5:49 PM, Donny Davis 
>>> wrote:
>>>
>>>> I just spun up the latest and greatest ovirt has to offer, and I am
>>>> building out an HCI cluster. The deployment went wonderfully. I had dns
>>>> setup for everything, and it just worked. Great job team!
>>>>
>>>> I just wanted to add in something i noticed after rebooting the nodes.
>>>> The gluster service, and volumes would not come back up after rebooting. I
>>>> found that there needs to be an entry in the fstab for the gluster logical
>>>> volumes to tell them to start the vdo service. So without this, the node
>>>> will fail to boot if you are using vdo.
>>>>
>>>> inode64,noatime,nodiratime,discard,x-systemd.requires=vdo.service
>>>>
>>>> the defaults are this
>>>> inode64,noatime,nodiratime
>>>>
>>>
>>> This was fixed in gdeploy - https://bugzilla.redhat.com/sh
>>> ow_bug.cgi?id=1548399
>>>
>>> Can you tell us the version of gdeploy you used?
>>>
>>> # rpm -qa | grep gdeploy
>>>
>>>
>>>>
>>>> Hopefully it helps someone else
>>>>
>>>> :)
>>>> Cheers
>>>>
>>>> ___
>>>> Users mailing list -- users@ovirt.org
>>>> To unsubscribe send an email to users-le...@ovirt.org
>>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>>> oVirt Code of Conduct: https://www.ovirt.org/communit
>>>> y/about/community-guidelines/
>>>> List Archives: https://lists.ovirt.org/archiv
>>>> es/list/users@ovirt.org/message/K7MXXDAVPR23IR7ASXT5P73AA3W3AWVW/
>>>>
>>>>
>>>
>>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SJQZGTYYNG4BIBLESVVZTLOBMOQFXD35/

[ovirt-users] Re: VDO + HCI = failed reboots

[Donny Davis]

I downloaded the latest build from jenkins

On Tue, Aug 28, 2018 at 7:59 AM, Donny Davis  wrote:

> gdeploy-2.0.8-1.el7.noarch
>
> On Tue, Aug 28, 2018 at 7:42 AM, Sahina Bose  wrote:
>
>>
>>
>> On Mon, Aug 27, 2018 at 5:49 PM, Donny Davis 
>> wrote:
>>
>>> I just spun up the latest and greatest ovirt has to offer, and I am
>>> building out an HCI cluster. The deployment went wonderfully. I had dns
>>> setup for everything, and it just worked. Great job team!
>>>
>>> I just wanted to add in something i noticed after rebooting the nodes.
>>> The gluster service, and volumes would not come back up after rebooting. I
>>> found that there needs to be an entry in the fstab for the gluster logical
>>> volumes to tell them to start the vdo service. So without this, the node
>>> will fail to boot if you are using vdo.
>>>
>>> inode64,noatime,nodiratime,discard,x-systemd.requires=vdo.service
>>>
>>> the defaults are this
>>> inode64,noatime,nodiratime
>>>
>>
>> This was fixed in gdeploy - https://bugzilla.redhat.com/sh
>> ow_bug.cgi?id=1548399
>>
>> Can you tell us the version of gdeploy you used?
>>
>> # rpm -qa | grep gdeploy
>>
>>
>>>
>>> Hopefully it helps someone else
>>>
>>> :)
>>> Cheers
>>>
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>> oVirt Code of Conduct: https://www.ovirt.org/communit
>>> y/about/community-guidelines/
>>> List Archives: https://lists.ovirt.org/archiv
>>> es/list/users@ovirt.org/message/K7MXXDAVPR23IR7ASXT5P73AA3W3AWVW/
>>>
>>>
>>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FKAGRSLU4NCVBQVSJQQMSSOYPNQ5JMFH/

[ovirt-users] Re: VDO + HCI = failed reboots

[Donny Davis]

gdeploy-2.0.8-1.el7.noarch

On Tue, Aug 28, 2018 at 7:42 AM, Sahina Bose  wrote:

>
>
> On Mon, Aug 27, 2018 at 5:49 PM, Donny Davis  wrote:
>
>> I just spun up the latest and greatest ovirt has to offer, and I am
>> building out an HCI cluster. The deployment went wonderfully. I had dns
>> setup for everything, and it just worked. Great job team!
>>
>> I just wanted to add in something i noticed after rebooting the nodes.
>> The gluster service, and volumes would not come back up after rebooting. I
>> found that there needs to be an entry in the fstab for the gluster logical
>> volumes to tell them to start the vdo service. So without this, the node
>> will fail to boot if you are using vdo.
>>
>> inode64,noatime,nodiratime,discard,x-systemd.requires=vdo.service
>>
>> the defaults are this
>> inode64,noatime,nodiratime
>>
>
> This was fixed in gdeploy - https://bugzilla.redhat.com/
> show_bug.cgi?id=1548399
>
> Can you tell us the version of gdeploy you used?
>
> # rpm -qa | grep gdeploy
>
>
>>
>> Hopefully it helps someone else
>>
>> :)
>> Cheers
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: https://www.ovirt.org/communit
>> y/about/community-guidelines/
>> List Archives: https://lists.ovirt.org/archiv
>> es/list/users@ovirt.org/message/K7MXXDAVPR23IR7ASXT5P73AA3W3AWVW/
>>
>>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5HPWQVD7KIWSU7L5HLZGYDHS7GGVJDA3/

[ovirt-users] Re: Migrating to HCI

[Donny Davis]

I just deployed using the wizards and it was magic. It just worked for me.
Make sure dns is up properly though

On Mon, Aug 27, 2018 at 3:58 PM, Vincent Royer 
wrote:

> I have 2 hosts using NFS storage
>
> I want to migrate to HCI and add a third host.  Have added the 10Gbe cards
> and drives to the 3 target hosts and setup a separate physical network for
> storage.
>
> Can I:
>
> - deploy a single-node HCI to host 3
> - export the VMs to an NFS export domain
> - Import the VMs to the HCI node
> - wipe the first 2 hosts and re-deploy them to the HCI DC
>
> Is there a guide for this?
>
> or should I just export the VMs, blow away all the nodes, and deploy as a
> 3-node HCI using the wizards?  I'm hoping to minimize downtime of the VMs
> to under one day.
>
> *Vince*
>
>
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-
> guidelines/
> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/
> message/SR3CSIMCJKTQPN7QUMTZ3R4BFJUTAV44/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ERGPCTI35FFK4V7PA2FMYPJK4DDGF5OC/

[ovirt-users] VDO + HCI = failed reboots

[Donny Davis]

I just spun up the latest and greatest ovirt has to offer, and I am
building out an HCI cluster. The deployment went wonderfully. I had dns
setup for everything, and it just worked. Great job team!

I just wanted to add in something i noticed after rebooting the nodes. The
gluster service, and volumes would not come back up after rebooting. I
found that there needs to be an entry in the fstab for the gluster logical
volumes to tell them to start the vdo service. So without this, the node
will fail to boot if you are using vdo.

inode64,noatime,nodiratime,discard,x-systemd.requires=vdo.service

the defaults are this
inode64,noatime,nodiratime


Hopefully it helps someone else

:)
Cheers
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/K7MXXDAVPR23IR7ASXT5P73AA3W3AWVW/

[ovirt-users] Re: LDAP Authentication issues

[Donny Davis]

I am happy to help where I can. I would also not recommend tinkering around
in the database, but I am happy to hear you have it all running. :)

Everything you should every be doing in the engine is available via the
API/UI. Just some general advice.



On Mon, Jun 11, 2018 at 9:31 AM, Callum Smith  wrote:

> Dear All & Donny,
>
> Thank you for the clarifications, very useful indeed.
>
> A note for future users who go down this path and dont want to restore or
> reinstall:
>
> Cleaning out the `permissions` table in the database and restoring the
> defaults will solve the issue, but you need to restore the SuperUser
> permission on the admin@internal account:
>
> Learning from here:
> https://www.ovirt.org/develop/developer-guide/action-permissions-overview/
>
> Clean out your `roles_groups` and `permissions`
> DELETE FROM `permissions`;
> DELETE FROM `roles_groups`;
>
> Restore the defaults:
> https://github.com/oVirt/ovirt-engine/blob/master/
> packaging/dbscripts/data/00600_insert_permissions.sql
> https://github.com/oVirt/ovirt-engine/blob/master/
> packaging/dbscripts/data/00700_insert_roles_groups.sql
>
> Re-assign the SuperUser role to the admin@internal user:
> Either: https://github.com/oVirt/ovirt-engine/blob/
> master/packaging/bin/ovirt-engine-role.sh
> Or just go straight into your localhost psql on your engine, replacing
> information as appropriate:
> Get your external_id from the users table and use it in the function:
> SELECT external_id FROM `users` WHERE `name` = 'admin' AND `domain` =
> 'internal-authz';
> select attach_user_to_role('admin','internal-authz','*','#
> external_id#','SuperUser');
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 11 Jun 2018, at 11:57, Donny Davis  wrote:
>
> https://lists.ovirt.org/pipermail/users/2015-January/030981.html
>
> This is the thread where I discussed a bit of the permissions thing. I am
> sure things have changed since 3.5.1, but should get you down the right
> path.
>
> On Mon, Jun 11, 2018 at 6:54 AM, Callum Smith 
> wrote:
>
>> Yes, in process of trying to fix/identify things - need to undo this.
>>
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 11 Jun 2018, at 11:48, Donny Davis  wrote:
>>
>> did you add system permissions to the everyone group?
>>
>> On Mon, Jun 11, 2018 at 6:42 AM, Callum Smith 
>> wrote:
>>
>>> Happy for you to link me a guide, googlefu is failing me.
>>>
>>> How do i get around this "It's not allowed to remove system permissions
>>> assigned to built-in Everyone group" - to remove permissions erroneously
>>> added.
>>>
>>> Regards,
>>> Callum
>>>
>>> --
>>>
>>> Callum Smith
>>> Research Computing Core
>>> Wellcome Trust Centre for Human Genetics
>>> University of Oxford
>>> e. cal...@well.ox.ac.uk
>>>
>>> On 11 Jun 2018, at 11:38, Donny Davis  wrote:
>>>
>>> You can create a profile that has the proper permissions to allow what
>>> you are looking for, and then assign that profile to the groups you wish.
>>> I wrote a post on this quite a while back on how to setup oVirt to
>>> appear to be multi-tenant.
>>>
>>> Happy to see you don't have an ldap issue :)
>>>
>>> >This will be a problem for us to now create group permissions for all
>>> 100+ groups since Everyone === No-one. -sigh-
>>>
>>>
>>> On Mon, Jun 11, 2018 at 6:34 AM, Callum Smith 
>>> wrote:
>>>
>>>> Ah, this appears to be an issue with the proxy - setting up the spice
>>>> proxy as indicated in the guides is causing this issue, and likely will
>>>> need support.
>>>>
>>>> https://www.ovirt.org/documentation/admin-guide/chap-Proxies/
>>>>
>>>> Regards,
>>>> Callum
>>>>
>>>> --
>>>>
>>>> Callum Smith
>>>> Research Computing Core
>>>> Wellcome Trust Centre for Human Genetics
>>>> University of Oxford
>>>> e. cal...@well.ox.ac.uk
>>>>
>>>> On 11 Jun 2018, at 11:29, Callum Smith  wrote:
>>>>
>>>> Ok, the user now logs in! This will be a problem for us to now create
>>>

[ovirt-users] Re: LDAP Authentication issues

[Donny Davis]

https://lists.ovirt.org/pipermail/users/2015-January/030981.html

This is the thread where I discussed a bit of the permissions thing. I am
sure things have changed since 3.5.1, but should get you down the right
path.

On Mon, Jun 11, 2018 at 6:54 AM, Callum Smith  wrote:

> Yes, in process of trying to fix/identify things - need to undo this.
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 11 Jun 2018, at 11:48, Donny Davis  wrote:
>
> did you add system permissions to the everyone group?
>
> On Mon, Jun 11, 2018 at 6:42 AM, Callum Smith 
> wrote:
>
>> Happy for you to link me a guide, googlefu is failing me.
>>
>> How do i get around this "It's not allowed to remove system permissions
>> assigned to built-in Everyone group" - to remove permissions erroneously
>> added.
>>
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 11 Jun 2018, at 11:38, Donny Davis  wrote:
>>
>> You can create a profile that has the proper permissions to allow what
>> you are looking for, and then assign that profile to the groups you wish.
>> I wrote a post on this quite a while back on how to setup oVirt to appear
>> to be multi-tenant.
>>
>> Happy to see you don't have an ldap issue :)
>>
>> >This will be a problem for us to now create group permissions for all
>> 100+ groups since Everyone === No-one. -sigh-
>>
>>
>> On Mon, Jun 11, 2018 at 6:34 AM, Callum Smith 
>> wrote:
>>
>>> Ah, this appears to be an issue with the proxy - setting up the spice
>>> proxy as indicated in the guides is causing this issue, and likely will
>>> need support.
>>>
>>> https://www.ovirt.org/documentation/admin-guide/chap-Proxies/
>>>
>>> Regards,
>>> Callum
>>>
>>> --
>>>
>>> Callum Smith
>>> Research Computing Core
>>> Wellcome Trust Centre for Human Genetics
>>> University of Oxford
>>> e. cal...@well.ox.ac.uk
>>>
>>> On 11 Jun 2018, at 11:29, Callum Smith  wrote:
>>>
>>> Ok, the user now logs in! This will be a problem for us to now create
>>> group permissions for all 100+ groups since Everyone === No-one. -sigh-
>>>
>>> A new issue, when in the VM portal as the LDAP user, i get HTTP basic
>>> auth login prompts, and a "Authorization expired" error, then a page
>>> reload. Nothing in the logs seem to indicate an issue.
>>>
>>> Regards,
>>> Callum
>>>
>>> --
>>>
>>> Callum Smith
>>> Research Computing Core
>>> Wellcome Trust Centre for Human Genetics
>>> University of Oxford
>>> e. cal...@well.ox.ac.uk
>>>
>>> On 11 Jun 2018, at 11:26, Donny Davis  wrote:
>>>
>>> Try giving your user system permissions as a superuser and see if it
>>> goes away.
>>>
>>> I wouldn't leave it like that, but it will help isolate your issue. I
>>> don't think you have an ldap issue... the log entry is telling you that
>>> user has no permissions
>>> >The user callum@Biomedical Research Computing is not authorized to
>>> perform login
>>>
>>> On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith 
>>> wrote:
>>>
>>>> Dear Donny,
>>>>
>>>> No, though the user shows the permissions inherited from the Everyone
>>>> group:
>>>> 
>>>> Regards,
>>>> Callum
>>>>
>>>> --
>>>>
>>>> Callum Smith
>>>> Research Computing Core
>>>> Wellcome Trust Centre for Human Genetics
>>>> University of Oxford
>>>> e. cal...@well.ox.ac.uk
>>>>
>>>> On 11 Jun 2018, at 11:21, Donny Davis  wrote:
>>>>
>>>> Just a shot in the dark, but after you setup ldap did you go in as the
>>>> default admin and give an ldap account permissions?
>>>>
>>>> On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
>>>> wrote:
>>>>
>>>>> Dear All,
>>>>>
>>>>> Could this be as our LDAP is fairly short on attributes?
>>>>>
>>>>> 2018-06-11 11:00:52,856+01 INFO  
>>>>> [org.ovir

[ovirt-users] Re: LDAP Authentication issues

[Donny Davis]

did you add system permissions to the everyone group?

On Mon, Jun 11, 2018 at 6:42 AM, Callum Smith  wrote:

> Happy for you to link me a guide, googlefu is failing me.
>
> How do i get around this "It's not allowed to remove system permissions
> assigned to built-in Everyone group" - to remove permissions erroneously
> added.
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 11 Jun 2018, at 11:38, Donny Davis  wrote:
>
> You can create a profile that has the proper permissions to allow what you
> are looking for, and then assign that profile to the groups you wish.
> I wrote a post on this quite a while back on how to setup oVirt to appear
> to be multi-tenant.
>
> Happy to see you don't have an ldap issue :)
>
> >This will be a problem for us to now create group permissions for all
> 100+ groups since Everyone === No-one. -sigh-
>
>
> On Mon, Jun 11, 2018 at 6:34 AM, Callum Smith 
> wrote:
>
>> Ah, this appears to be an issue with the proxy - setting up the spice
>> proxy as indicated in the guides is causing this issue, and likely will
>> need support.
>>
>> https://www.ovirt.org/documentation/admin-guide/chap-Proxies/
>>
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 11 Jun 2018, at 11:29, Callum Smith  wrote:
>>
>> Ok, the user now logs in! This will be a problem for us to now create
>> group permissions for all 100+ groups since Everyone === No-one. -sigh-
>>
>> A new issue, when in the VM portal as the LDAP user, i get HTTP basic
>> auth login prompts, and a "Authorization expired" error, then a page
>> reload. Nothing in the logs seem to indicate an issue.
>>
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 11 Jun 2018, at 11:26, Donny Davis  wrote:
>>
>> Try giving your user system permissions as a superuser and see if it goes
>> away.
>>
>> I wouldn't leave it like that, but it will help isolate your issue. I
>> don't think you have an ldap issue... the log entry is telling you that
>> user has no permissions
>> >The user callum@Biomedical Research Computing is not authorized to
>> perform login
>>
>> On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith 
>> wrote:
>>
>>> Dear Donny,
>>>
>>> No, though the user shows the permissions inherited from the Everyone
>>> group:
>>> 
>>> Regards,
>>> Callum
>>>
>>> --
>>>
>>> Callum Smith
>>> Research Computing Core
>>> Wellcome Trust Centre for Human Genetics
>>> University of Oxford
>>> e. cal...@well.ox.ac.uk
>>>
>>> On 11 Jun 2018, at 11:21, Donny Davis  wrote:
>>>
>>> Just a shot in the dark, but after you setup ldap did you go in as the
>>> default admin and give an ldap account permissions?
>>>
>>> On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
>>> wrote:
>>>
>>>> Dear All,
>>>>
>>>> Could this be as our LDAP is fairly short on attributes?
>>>>
>>>> 2018-06-11 11:00:52,856+01 INFO  
>>>> [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand]
>>>> (default task-5) [5dff9eb0] Running command: CreateUserSessionCommand
>>>> internal: false.
>>>> 2018-06-11 11:00:52,884+01 ERROR [org.ovirt.engine.core.dal.dbb
>>>> roker.auditloghandling.AuditLogDirector] (default task-5) [5dff9eb0]
>>>> EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical Research
>>>> Computing connecting from '--ipaddr--' failed to log in.
>>>> 2018-06-11 11:00:52,884+01 ERROR 
>>>> [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet]
>>>> (default task-5) [] The user callum@Biomedical Research Computing is
>>>> not authorized to perform login
>>>>
>>>> I note that a number of variables are included in this action, but
>>>> which are required and which are optional is the question:
>>>>
>>>> https://github.com/oVirt/ovirt-engine/blob/master/backend/ma
>>>> nager/modules/aaa/src/main/java/org/ovirt/engin

[ovirt-users] Re: LDAP Authentication issues

[Donny Davis]

You can create a profile that has the proper permissions to allow what you
are looking for, and then assign that profile to the groups you wish.
I wrote a post on this quite a while back on how to setup oVirt to appear
to be multi-tenant.

Happy to see you don't have an ldap issue :)

>This will be a problem for us to now create group permissions for all 100+
groups since Everyone === No-one. -sigh-


On Mon, Jun 11, 2018 at 6:34 AM, Callum Smith  wrote:

> Ah, this appears to be an issue with the proxy - setting up the spice
> proxy as indicated in the guides is causing this issue, and likely will
> need support.
>
> https://www.ovirt.org/documentation/admin-guide/chap-Proxies/
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 11 Jun 2018, at 11:29, Callum Smith  wrote:
>
> Ok, the user now logs in! This will be a problem for us to now create
> group permissions for all 100+ groups since Everyone === No-one. -sigh-
>
> A new issue, when in the VM portal as the LDAP user, i get HTTP basic auth
> login prompts, and a "Authorization expired" error, then a page reload.
> Nothing in the logs seem to indicate an issue.
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 11 Jun 2018, at 11:26, Donny Davis  wrote:
>
> Try giving your user system permissions as a superuser and see if it goes
> away.
>
> I wouldn't leave it like that, but it will help isolate your issue. I
> don't think you have an ldap issue... the log entry is telling you that
> user has no permissions
> >The user callum@Biomedical Research Computing is not authorized to
> perform login
>
> On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith 
> wrote:
>
>> Dear Donny,
>>
>> No, though the user shows the permissions inherited from the Everyone
>> group:
>> 
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 11 Jun 2018, at 11:21, Donny Davis  wrote:
>>
>> Just a shot in the dark, but after you setup ldap did you go in as the
>> default admin and give an ldap account permissions?
>>
>> On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
>> wrote:
>>
>>> Dear All,
>>>
>>> Could this be as our LDAP is fairly short on attributes?
>>>
>>> 2018-06-11 11:00:52,856+01 INFO  
>>> [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand]
>>> (default task-5) [5dff9eb0] Running command: CreateUserSessionCommand
>>> internal: false.
>>> 2018-06-11 11:00:52,884+01 ERROR [org.ovirt.engine.core.dal.dbb
>>> roker.auditloghandling.AuditLogDirector] (default task-5) [5dff9eb0]
>>> EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical Research
>>> Computing connecting from '--ipaddr--' failed to log in.
>>> 2018-06-11 11:00:52,884+01 ERROR 
>>> [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet]
>>> (default task-5) [] The user callum@Biomedical Research Computing is
>>> not authorized to perform login
>>>
>>> I note that a number of variables are included in this action, but which
>>> are required and which are optional is the question:
>>>
>>> https://github.com/oVirt/ovirt-engine/blob/master/backend/ma
>>> nager/modules/aaa/src/main/java/org/ovirt/engine/core/aaa/
>>> servlet/SsoPostLoginServlet.java#L88
>>>
>>> Regards,
>>> Callum
>>>
>>> --
>>>
>>> Callum Smith
>>> Research Computing Core
>>> Wellcome Trust Centre for Human Genetics
>>> University of Oxford
>>> e. cal...@well.ox.ac.uk
>>>
>>> On 11 Jun 2018, at 09:35, Callum Smith  wrote:
>>>
>>> What would be the next step to help solve this issue? All users
>>> authenticating through LDAP get "This user is not authorised to perform
>>> authentication".
>>>
>>> Regards,
>>> Callum
>>>
>>> --
>>>
>>> Callum Smith
>>> Research Computing Core
>>> Wellcome Trust Centre for Human Genetics
>>> University of Oxford
>>> e. cal...@well.ox.ac.uk
>>>
>>> On 5 Jun 2018, at 11:42, Callum Smith  wrote:
>>>
>>> Ok I spoke too soon, I have resolved the groups, 

[ovirt-users] Re: LDAP Authentication issues

[Donny Davis]

Try giving your user system permissions as a superuser and see if it goes
away.

I wouldn't leave it like that, but it will help isolate your issue. I don't
think you have an ldap issue... the log entry is telling you that user has
no permissions
>The user callum@Biomedical Research Computing is not authorized to perform
login

On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith  wrote:

> Dear Donny,
>
> No, though the user shows the permissions inherited from the Everyone
> group:
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 11 Jun 2018, at 11:21, Donny Davis  wrote:
>
> Just a shot in the dark, but after you setup ldap did you go in as the
> default admin and give an ldap account permissions?
>
> On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
> wrote:
>
>> Dear All,
>>
>> Could this be as our LDAP is fairly short on attributes?
>>
>> 2018-06-11 11:00:52,856+01 INFO  
>> [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand]
>> (default task-5) [5dff9eb0] Running command: CreateUserSessionCommand
>> internal: false.
>> 2018-06-11 11:00:52,884+01 ERROR [org.ovirt.engine.core.dal.dbb
>> roker.auditloghandling.AuditLogDirector] (default task-5) [5dff9eb0]
>> EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical Research
>> Computing connecting from '--ipaddr--' failed to log in.
>> 2018-06-11 11:00:52,884+01 ERROR 
>> [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet]
>> (default task-5) [] The user callum@Biomedical Research Computing is not
>> authorized to perform login
>>
>> I note that a number of variables are included in this action, but which
>> are required and which are optional is the question:
>>
>> https://github.com/oVirt/ovirt-engine/blob/master/backend/
>> manager/modules/aaa/src/main/java/org/ovirt/engine/core/
>> aaa/servlet/SsoPostLoginServlet.java#L88
>>
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 11 Jun 2018, at 09:35, Callum Smith  wrote:
>>
>> What would be the next step to help solve this issue? All users
>> authenticating through LDAP get "This user is not authorised to perform
>> authentication".
>>
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 5 Jun 2018, at 11:42, Callum Smith  wrote:
>>
>> Ok I spoke too soon, I have resolved the groups, but authentication still
>> isn't working for LDAP users, same error as before (114).
>>
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 5 Jun 2018, at 10:14, Callum Smith  wrote:
>>
>> Dear Ondra, all,
>>
>> Managed to solve this once i got my head around the properties file.
>> Conceptually the problem is that users are typically not a member of their
>> primary group in a POSIX scenario, and their primary group is set by the
>> gidNumber of the user's record, with additional group memberships specified
>> by memberUid entries against a posixGroup entry.
>>
>> search.rfc2307-resolve-groups-memberUid.search-request.filter =
>> &(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_enc
>> oded})(gidNumber=${seq:_rfc2307_gid_encoded}))
>>
>> search.rfc2307-resolve-principal-uid.search-request.attributes = uid,
>> gidNumber
>>
>> sequence.bmrc-resolve-groups.010.description = set dn
>> sequence.bmrc-resolve-groups.010.type = var-set
>> sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
>> sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
>> sequence.bmrc-resolve-groups.010.description = resolve uid
>> sequence.bmrc-resolve-groups.020.type = fetch-record
>> sequence.bmrc-resolve-groups.020.fetch-record.search =
>> rfc2307-resolve-principal-uid
>> sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name = _rfc2307_uid
>> sequence.bmrc-resolve-groups.030.description = resolve gid
>> sequence.bmrc-resolve-groups.030.type = fetch-record
>> sequence.bmrc-resolve-groups.030.fetch-record.search =
>> rfc2307-resolve-principal-ui

[ovirt-users] Re: LDAP Authentication issues

[Donny Davis]

Just a shot in the dark, but after you setup ldap did you go in as the
default admin and give an ldap account permissions?

On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith  wrote:

> Dear All,
>
> Could this be as our LDAP is fairly short on attributes?
>
> 2018-06-11 11:00:52,856+01 INFO  
> [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand]
> (default task-5) [5dff9eb0] Running command: CreateUserSessionCommand
> internal: false.
> 2018-06-11 11:00:52,884+01 ERROR [org.ovirt.engine.core.dal.
> dbbroker.auditloghandling.AuditLogDirector] (default task-5) [5dff9eb0]
> EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical Research
> Computing connecting from '--ipaddr--' failed to log in.
> 2018-06-11 11:00:52,884+01 ERROR 
> [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet]
> (default task-5) [] The user callum@Biomedical Research Computing is not
> authorized to perform login
>
> I note that a number of variables are included in this action, but which
> are required and which are optional is the question:
>
> https://github.com/oVirt/ovirt-engine/blob/master/
> backend/manager/modules/aaa/src/main/java/org/ovirt/
> engine/core/aaa/servlet/SsoPostLoginServlet.java#L88
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 11 Jun 2018, at 09:35, Callum Smith  wrote:
>
> What would be the next step to help solve this issue? All users
> authenticating through LDAP get "This user is not authorised to perform
> authentication".
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 5 Jun 2018, at 11:42, Callum Smith  wrote:
>
> Ok I spoke too soon, I have resolved the groups, but authentication still
> isn't working for LDAP users, same error as before (114).
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 5 Jun 2018, at 10:14, Callum Smith  wrote:
>
> Dear Ondra, all,
>
> Managed to solve this once i got my head around the properties file.
> Conceptually the problem is that users are typically not a member of their
> primary group in a POSIX scenario, and their primary group is set by the
> gidNumber of the user's record, with additional group memberships specified
> by memberUid entries against a posixGroup entry.
>
> search.rfc2307-resolve-groups-memberUid.search-request.filter =
> &(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_
> encoded})(gidNumber=${seq:_rfc2307_gid_encoded}))
>
> search.rfc2307-resolve-principal-uid.search-request.attributes = uid,
> gidNumber
>
> sequence.bmrc-resolve-groups.010.description = set dn
> sequence.bmrc-resolve-groups.010.type = var-set
> sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
> sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
> sequence.bmrc-resolve-groups.010.description = resolve uid
> sequence.bmrc-resolve-groups.020.type = fetch-record
> sequence.bmrc-resolve-groups.020.fetch-record.search =
> rfc2307-resolve-principal-uid
> sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name = _rfc2307_uid
> sequence.bmrc-resolve-groups.030.description = resolve gid
> sequence.bmrc-resolve-groups.030.type = fetch-record
> sequence.bmrc-resolve-groups.030.fetch-record.search =
> rfc2307-resolve-principal-uid
> sequence.bmrc-resolve-groups.030.fetch-record.map.gidNumber.name =
> _rfc2307_gid
> sequence.bmrc-resolve-groups.040.description = query groups
> sequence.bmrc-resolve-groups.040.type = search-open
> sequence.bmrc-resolve-groups.040.search-open.search =
> rfc2307-resolve-groups-memberUid
> sequence.bmrc-resolve-groups.040.search-open.variable =
> queryRFC2307ByMemberUid
>
> sequence.rfc2307-resolve-groups.020.call.name = bmrc-resolve-groups
>
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 4 Jun 2018, at 15:07, Callum Smith  wrote:
>
> Dear Ondra,
>
> I went for openldap-rfc2307 as that best describes our ldap setup. The
> issue seems to be that the gidNumber is set, but users are not a member of
> their primary group within the LDAP. So, user's gidNumber represents
> primary group and posixGroup membership (memberUid) represents their
> secondary groups. What's the best way to approach this (fix the filters on
> oVirt end or change the LDAP? This is a question of what is most compliant
> with standards really).
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 29 May 2018, at 11:29, Ondra Machacek  wrote:
>
> What's you LDAP and what profile did you choose? This looks like you have
> chosen incorect profile during setup. 

Re: [ovirt-users] Major Performance Issues with gluster

[Donny Davis]

Try hitting the optimize for virt option in the volumes tab on oVirt for
this volume.

This might help with some of it, but that should have been done before you
connected it as a storage domain. The sharding feature helps with
performance, and so do some of the other options that are present on your
other volumes.

On Mon, Mar 19, 2018, 12:28 PM Jim Kusznir  wrote:

> Here's gluster volume info:
>
> [root@ovirt2 ~]# gluster volume info
>
> Volume Name: data
> Type: Replicate
> Volume ID: e670c488-ac16-4dd1-8bd3-e43b2e42cc59
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x (2 + 1) = 3
> Transport-type: tcp
> Bricks:
> Brick1: ovirt1.nwfiber.com:/gluster/brick2/data
> Brick2: ovirt2.nwfiber.com:/gluster/brick2/data
> Brick3: ovirt3.nwfiber.com:/gluster/brick2/data (arbiter)
> Options Reconfigured:
> changelog.changelog: on
> geo-replication.ignore-pid-check: on
> geo-replication.indexing: on
> server.allow-insecure: on
> performance.readdir-ahead: on
> performance.quick-read: off
> performance.read-ahead: off
> performance.io-cache: off
> performance.stat-prefetch: off
> cluster.eager-lock: enable
> network.remote-dio: enable
> cluster.quorum-type: auto
> cluster.server-quorum-type: server
> storage.owner-uid: 36
> storage.owner-gid: 36
> features.shard: on
> features.shard-block-size: 512MB
> performance.low-prio-threads: 32
> cluster.data-self-heal-algorithm: full
> cluster.locking-scheme: granular
> cluster.shd-wait-qlength: 1
> cluster.shd-max-threads: 8
> network.ping-timeout: 30
> user.cifs: off
> nfs.disable: on
> performance.strict-o-direct: on
>
> Volume Name: data-hdd
> Type: Replicate
> Volume ID: d342a3ab-16f3-49f0-bbcf-f788be8ac5f1
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x 3 = 3
> Transport-type: tcp
> Bricks:
> Brick1: 172.172.1.11:/gluster/brick3/data-hdd
> Brick2: 172.172.1.12:/gluster/brick3/data-hdd
> Brick3: 172.172.1.13:/gluster/brick3/data-hdd
> Options Reconfigured:
> changelog.changelog: on
> geo-replication.ignore-pid-check: on
> geo-replication.indexing: on
> transport.address-family: inet
> performance.readdir-ahead: on
>
> Volume Name: engine
> Type: Replicate
> Volume ID: 87ad86b9-d88b-457e-ba21-5d3173c612de
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x (2 + 1) = 3
> Transport-type: tcp
> Bricks:
> Brick1: ovirt1.nwfiber.com:/gluster/brick1/engine
> Brick2: ovirt2.nwfiber.com:/gluster/brick1/engine
> Brick3: ovirt3.nwfiber.com:/gluster/brick1/engine (arbiter)
> Options Reconfigured:
> changelog.changelog: on
> geo-replication.ignore-pid-check: on
> geo-replication.indexing: on
> performance.readdir-ahead: on
> performance.quick-read: off
> performance.read-ahead: off
> performance.io-cache: off
> performance.stat-prefetch: off
> cluster.eager-lock: enable
> network.remote-dio: off
> cluster.quorum-type: auto
> cluster.server-quorum-type: server
> storage.owner-uid: 36
> storage.owner-gid: 36
> features.shard: on
> features.shard-block-size: 512MB
> performance.low-prio-threads: 32
> cluster.data-self-heal-algorithm: full
> cluster.locking-scheme: granular
> cluster.shd-wait-qlength: 1
> cluster.shd-max-threads: 6
> network.ping-timeout: 30
> user.cifs: off
> nfs.disable: on
> performance.strict-o-direct: on
>
> Volume Name: iso
> Type: Replicate
> Volume ID: b1ba15f5-0f0f-4411-89d0-595179f02b92
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x (2 + 1) = 3
> Transport-type: tcp
> Bricks:
> Brick1: ovirt1.nwfiber.com:/gluster/brick4/iso
> Brick2: ovirt2.nwfiber.com:/gluster/brick4/iso
> Brick3: ovirt3.nwfiber.com:/gluster/brick4/iso (arbiter)
> Options Reconfigured:
> performance.readdir-ahead: on
> performance.quick-read: off
> performance.read-ahead: off
> performance.io-cache: off
> performance.stat-prefetch: off
> cluster.eager-lock: enable
> network.remote-dio: off
> cluster.quorum-type: auto
> cluster.server-quorum-type: server
> storage.owner-uid: 36
> storage.owner-gid: 36
> features.shard: on
> features.shard-block-size: 512MB
> performance.low-prio-threads: 32
> cluster.data-self-heal-algorithm: full
> cluster.locking-scheme: granular
> cluster.shd-wait-qlength: 1
> cluster.shd-max-threads: 6
> network.ping-timeout: 30
> user.cifs: off
> nfs.disable: on
> performance.strict-o-direct: on
>
> --
>
> When I try and turn on profiling, I get:
>
> [root@ovirt2 ~]# gluster volume profile data-hdd start
> Another transaction is in progress for data-hdd. Please try again after
> sometime.
>
> I don't know what that other transaction is, but I am having some "odd
> behavior" this morning, like a vm disk move between data and data-hdd that
> stuck at 84% overnight.
>
> I've been asking on IRC how to "un-stick" this transfer, as the VM cannot
> be started, and I can't seem to do anything about it.
>
> --Jim
>
> On Mon, Mar 19, 2018 at 2:14 AM, Sahina Bose  wrote:
>
>>
>>
>> On Mon, Mar 19, 2018 at 7:39 AM, Jim Kusznir  wrote:
>>
>>> 

Re: [ovirt-users] Cannot Remove Disk

[Donny Davis]

Error while executing action: Cannot edit Quota. Quota is not valid.

On Fri, Feb 9, 2018 at 5:33 AM, Andrej Krejcir <akrej...@redhat.com> wrote:

> The error can mean that a quota does not exist for the DC, or was saved in
> an invalid state.
>
> Try these steps in the UI:
> - Set the quota mode to Audit on the DC
> - Check the DC details page, quota tab, if there is a quota defined
>   - If not, create one
>   - If it is, try editing it and save it. The UI will save a valid quota.
>
> - Set the quota mode back to Disabled.
>
> On 9 February 2018 at 00:00, Donny Davis <do...@fortnebula.com> wrote:
>
>> So now when I create a new disk on the same domain with quota disabled, I
>> get
>>
>>- Cannot edit Virtual Disk. Quota is not valid.
>>
>>
>> This is a new machine, created after the above issue was solved
>>
>> On Thu, Feb 8, 2018 at 11:56 AM, Donny Davis <do...@fortnebula.com>
>> wrote:
>>
>>> Disabling the quota for that DC did the trick. The funny part is it was
>>> never enabled. I put it in audit mode, tried a delete, got the error... and
>>> then disabled it.
>>>
>>> Worked, I am a happy camper... Thanks guys.
>>>
>>> On Thu, Feb 8, 2018 at 11:51 AM, Andrej Krejcir <akrej...@redhat.com>
>>> wrote:
>>>
>>>> Or, it should be enough to disable the quota in the data center, then
>>>> change it for the disk and reenable it again.
>>>>
>>>> On 8 February 2018 at 17:42, Andrej Krejcir <akrej...@redhat.com>
>>>> wrote:
>>>>
>>>>> Do the operations work in the UI?
>>>>> If not, then the DB has to be changed manually:
>>>>>
>>>>> $ psql engine
>>>>>
>>>>> UPDATE image_storage_domain_map sd_map
>>>>> SET quota_id = NULL
>>>>> FROM images
>>>>> WHERE sd_map.image_id = images.image_guid
>>>>>   AND images.image_group_id = 'ID_OF_THE_DISK';
>>>>>
>>>>>
>>>>> On 8 February 2018 at 17:06, Donny Davis <do...@fortnebula.com> wrote:
>>>>>
>>>>>> Any operation on the disk throws this error, to include changing the
>>>>>> quota.
>>>>>>
>>>>>> On Thu, Feb 8, 2018 at 11:03 AM, Andrej Krejcir <akrej...@redhat.com>
>>>>>> wrote:
>>>>>>
>>>>>>> The error message means that the data center (storage pool) where
>>>>>>> the quota is defined is different from the data center where the disk 
>>>>>>> is.
>>>>>>>
>>>>>>> It seems like a bug, as it should not be possible to assign a quota
>>>>>>> to a disk from a different data center.
>>>>>>>
>>>>>>> To fix it, try setting the quota of the disk to any quota from the
>>>>>>> same data center.
>>>>>>>
>>>>>>> ​Regards,
>>>>>>> Andrej​
>>>>>>>
>>>>>>>
>>>>>>> On 8 February 2018 at 16:37, Martin Sivak <msi...@redhat.com> wrote:
>>>>>>>
>>>>>>>> Andrej, this might be related to the recent fixes of yours in that
>>>>>>>> area. Can you take a look please?
>>>>>>>>
>>>>>>>> Best regards
>>>>>>>>
>>>>>>>> Martin Sivak
>>>>>>>>
>>>>>>>> On Thu, Feb 8, 2018 at 4:18 PM, Donny Davis <do...@fortnebula.com>
>>>>>>>> wrote:
>>>>>>>> > Ovirt 4.2 has been humming away quite nicely for me in the last
>>>>>>>> few months,
>>>>>>>> > and now I am hitting an issue when try to touch any api call that
>>>>>>>> has to do
>>>>>>>> > with a specific disk. This disk resides on a hyperconverged DC,
>>>>>>>> and none of
>>>>>>>> > the other disks seem to be affected. Here is the error thrown.
>>>>>>>> >
>>>>>>>> > 2018-02-08 10:13:20,005-05 ERROR
>>>>>>>> > [org.ovirt.engine.core.bll.storage.disk.RemoveDiskCommand]
>>>>>>>> (default task-22)
>>>>>>>> > [7b48d1ec-53a7-497a-af8e-938f30a321cf] Error during
>>>>>>>> ValidateFailure.:
>>>>>>>> > org.ovirt.engine.core.bll.quota.InvalidQuotaParametersException:
>>>>>>>> Quota
>>>>>>>> > 6156b8dd-50c9-4e8f-b1f3-4a6449b02c7b does not match storage pool
>>>>>>>> > 5a497956-0380-021e-0025-035e
>>>>>>>> >
>>>>>>>> >
>>>>>>>> >
>>>>>>>> > Any ideas what can be done to fix this?
>>>>>>>> >
>>>>>>>> > ___
>>>>>>>> > Users mailing list
>>>>>>>> > Users@ovirt.org
>>>>>>>> > http://lists.ovirt.org/mailman/listinfo/users
>>>>>>>> >
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Cannot Remove Disk

[Donny Davis]

So now when I create a new disk on the same domain with quota disabled, I
get

   - Cannot edit Virtual Disk. Quota is not valid.


This is a new machine, created after the above issue was solved

On Thu, Feb 8, 2018 at 11:56 AM, Donny Davis <do...@fortnebula.com> wrote:

> Disabling the quota for that DC did the trick. The funny part is it was
> never enabled. I put it in audit mode, tried a delete, got the error... and
> then disabled it.
>
> Worked, I am a happy camper... Thanks guys.
>
> On Thu, Feb 8, 2018 at 11:51 AM, Andrej Krejcir <akrej...@redhat.com>
> wrote:
>
>> Or, it should be enough to disable the quota in the data center, then
>> change it for the disk and reenable it again.
>>
>> On 8 February 2018 at 17:42, Andrej Krejcir <akrej...@redhat.com> wrote:
>>
>>> Do the operations work in the UI?
>>> If not, then the DB has to be changed manually:
>>>
>>> $ psql engine
>>>
>>> UPDATE image_storage_domain_map sd_map
>>> SET quota_id = NULL
>>> FROM images
>>> WHERE sd_map.image_id = images.image_guid
>>>   AND images.image_group_id = 'ID_OF_THE_DISK';
>>>
>>>
>>> On 8 February 2018 at 17:06, Donny Davis <do...@fortnebula.com> wrote:
>>>
>>>> Any operation on the disk throws this error, to include changing the
>>>> quota.
>>>>
>>>> On Thu, Feb 8, 2018 at 11:03 AM, Andrej Krejcir <akrej...@redhat.com>
>>>> wrote:
>>>>
>>>>> The error message means that the data center (storage pool) where the
>>>>> quota is defined is different from the data center where the disk is.
>>>>>
>>>>> It seems like a bug, as it should not be possible to assign a quota to
>>>>> a disk from a different data center.
>>>>>
>>>>> To fix it, try setting the quota of the disk to any quota from the
>>>>> same data center.
>>>>>
>>>>> ​Regards,
>>>>> Andrej​
>>>>>
>>>>>
>>>>> On 8 February 2018 at 16:37, Martin Sivak <msi...@redhat.com> wrote:
>>>>>
>>>>>> Andrej, this might be related to the recent fixes of yours in that
>>>>>> area. Can you take a look please?
>>>>>>
>>>>>> Best regards
>>>>>>
>>>>>> Martin Sivak
>>>>>>
>>>>>> On Thu, Feb 8, 2018 at 4:18 PM, Donny Davis <do...@fortnebula.com>
>>>>>> wrote:
>>>>>> > Ovirt 4.2 has been humming away quite nicely for me in the last few
>>>>>> months,
>>>>>> > and now I am hitting an issue when try to touch any api call that
>>>>>> has to do
>>>>>> > with a specific disk. This disk resides on a hyperconverged DC, and
>>>>>> none of
>>>>>> > the other disks seem to be affected. Here is the error thrown.
>>>>>> >
>>>>>> > 2018-02-08 10:13:20,005-05 ERROR
>>>>>> > [org.ovirt.engine.core.bll.storage.disk.RemoveDiskCommand]
>>>>>> (default task-22)
>>>>>> > [7b48d1ec-53a7-497a-af8e-938f30a321cf] Error during
>>>>>> ValidateFailure.:
>>>>>> > org.ovirt.engine.core.bll.quota.InvalidQuotaParametersException:
>>>>>> Quota
>>>>>> > 6156b8dd-50c9-4e8f-b1f3-4a6449b02c7b does not match storage pool
>>>>>> > 5a497956-0380-021e-0025-035e
>>>>>> >
>>>>>> >
>>>>>> >
>>>>>> > Any ideas what can be done to fix this?
>>>>>> >
>>>>>> > ___
>>>>>> > Users mailing list
>>>>>> > Users@ovirt.org
>>>>>> > http://lists.ovirt.org/mailman/listinfo/users
>>>>>> >
>>>>>>
>>>>>
>>>>>
>>>>
>>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Cannot Remove Disk

[Donny Davis]

Disabling the quota for that DC did the trick. The funny part is it was
never enabled. I put it in audit mode, tried a delete, got the error... and
then disabled it.

Worked, I am a happy camper... Thanks guys.

On Thu, Feb 8, 2018 at 11:51 AM, Andrej Krejcir <akrej...@redhat.com> wrote:

> Or, it should be enough to disable the quota in the data center, then
> change it for the disk and reenable it again.
>
> On 8 February 2018 at 17:42, Andrej Krejcir <akrej...@redhat.com> wrote:
>
>> Do the operations work in the UI?
>> If not, then the DB has to be changed manually:
>>
>> $ psql engine
>>
>> UPDATE image_storage_domain_map sd_map
>> SET quota_id = NULL
>> FROM images
>> WHERE sd_map.image_id = images.image_guid
>>   AND images.image_group_id = 'ID_OF_THE_DISK';
>>
>>
>> On 8 February 2018 at 17:06, Donny Davis <do...@fortnebula.com> wrote:
>>
>>> Any operation on the disk throws this error, to include changing the
>>> quota.
>>>
>>> On Thu, Feb 8, 2018 at 11:03 AM, Andrej Krejcir <akrej...@redhat.com>
>>> wrote:
>>>
>>>> The error message means that the data center (storage pool) where the
>>>> quota is defined is different from the data center where the disk is.
>>>>
>>>> It seems like a bug, as it should not be possible to assign a quota to
>>>> a disk from a different data center.
>>>>
>>>> To fix it, try setting the quota of the disk to any quota from the same
>>>> data center.
>>>>
>>>> ​Regards,
>>>> Andrej​
>>>>
>>>>
>>>> On 8 February 2018 at 16:37, Martin Sivak <msi...@redhat.com> wrote:
>>>>
>>>>> Andrej, this might be related to the recent fixes of yours in that
>>>>> area. Can you take a look please?
>>>>>
>>>>> Best regards
>>>>>
>>>>> Martin Sivak
>>>>>
>>>>> On Thu, Feb 8, 2018 at 4:18 PM, Donny Davis <do...@fortnebula.com>
>>>>> wrote:
>>>>> > Ovirt 4.2 has been humming away quite nicely for me in the last few
>>>>> months,
>>>>> > and now I am hitting an issue when try to touch any api call that
>>>>> has to do
>>>>> > with a specific disk. This disk resides on a hyperconverged DC, and
>>>>> none of
>>>>> > the other disks seem to be affected. Here is the error thrown.
>>>>> >
>>>>> > 2018-02-08 10:13:20,005-05 ERROR
>>>>> > [org.ovirt.engine.core.bll.storage.disk.RemoveDiskCommand] (default
>>>>> task-22)
>>>>> > [7b48d1ec-53a7-497a-af8e-938f30a321cf] Error during
>>>>> ValidateFailure.:
>>>>> > org.ovirt.engine.core.bll.quota.InvalidQuotaParametersException:
>>>>> Quota
>>>>> > 6156b8dd-50c9-4e8f-b1f3-4a6449b02c7b does not match storage pool
>>>>> > 5a497956-0380-021e-0025-035e
>>>>> >
>>>>> >
>>>>> >
>>>>> > Any ideas what can be done to fix this?
>>>>> >
>>>>> > ___
>>>>> > Users mailing list
>>>>> > Users@ovirt.org
>>>>> > http://lists.ovirt.org/mailman/listinfo/users
>>>>> >
>>>>>
>>>>
>>>>
>>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Cannot Remove Disk

[Donny Davis]

Again, any operation on the disk throws the error. The UI, API both throw
the exception

On Thu, Feb 8, 2018 at 11:42 AM, Andrej Krejcir <akrej...@redhat.com> wrote:

> Do the operations work in the UI?
> If not, then the DB has to be changed manually:
>
> $ psql engine
>
> UPDATE image_storage_domain_map sd_map
> SET quota_id = NULL
> FROM images
> WHERE sd_map.image_id = images.image_guid
>   AND images.image_group_id = 'ID_OF_THE_DISK';
>
>
> On 8 February 2018 at 17:06, Donny Davis <do...@fortnebula.com> wrote:
>
>> Any operation on the disk throws this error, to include changing the
>> quota.
>>
>> On Thu, Feb 8, 2018 at 11:03 AM, Andrej Krejcir <akrej...@redhat.com>
>> wrote:
>>
>>> The error message means that the data center (storage pool) where the
>>> quota is defined is different from the data center where the disk is.
>>>
>>> It seems like a bug, as it should not be possible to assign a quota to a
>>> disk from a different data center.
>>>
>>> To fix it, try setting the quota of the disk to any quota from the same
>>> data center.
>>>
>>> ​Regards,
>>> Andrej​
>>>
>>>
>>> On 8 February 2018 at 16:37, Martin Sivak <msi...@redhat.com> wrote:
>>>
>>>> Andrej, this might be related to the recent fixes of yours in that
>>>> area. Can you take a look please?
>>>>
>>>> Best regards
>>>>
>>>> Martin Sivak
>>>>
>>>> On Thu, Feb 8, 2018 at 4:18 PM, Donny Davis <do...@fortnebula.com>
>>>> wrote:
>>>> > Ovirt 4.2 has been humming away quite nicely for me in the last few
>>>> months,
>>>> > and now I am hitting an issue when try to touch any api call that has
>>>> to do
>>>> > with a specific disk. This disk resides on a hyperconverged DC, and
>>>> none of
>>>> > the other disks seem to be affected. Here is the error thrown.
>>>> >
>>>> > 2018-02-08 10:13:20,005-05 ERROR
>>>> > [org.ovirt.engine.core.bll.storage.disk.RemoveDiskCommand] (default
>>>> task-22)
>>>> > [7b48d1ec-53a7-497a-af8e-938f30a321cf] Error during ValidateFailure.:
>>>> > org.ovirt.engine.core.bll.quota.InvalidQuotaParametersException:
>>>> Quota
>>>> > 6156b8dd-50c9-4e8f-b1f3-4a6449b02c7b does not match storage pool
>>>> > 5a497956-0380-021e-0025-035e
>>>> >
>>>> >
>>>> >
>>>> > Any ideas what can be done to fix this?
>>>> >
>>>> > ___
>>>> > Users mailing list
>>>> > Users@ovirt.org
>>>> > http://lists.ovirt.org/mailman/listinfo/users
>>>> >
>>>>
>>>
>>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Cannot Remove Disk

[Donny Davis]

Any operation on the disk throws this error, to include changing the quota.

On Thu, Feb 8, 2018 at 11:03 AM, Andrej Krejcir <akrej...@redhat.com> wrote:

> The error message means that the data center (storage pool) where the
> quota is defined is different from the data center where the disk is.
>
> It seems like a bug, as it should not be possible to assign a quota to a
> disk from a different data center.
>
> To fix it, try setting the quota of the disk to any quota from the same
> data center.
>
> ​Regards,
> Andrej​
>
>
> On 8 February 2018 at 16:37, Martin Sivak <msi...@redhat.com> wrote:
>
>> Andrej, this might be related to the recent fixes of yours in that
>> area. Can you take a look please?
>>
>> Best regards
>>
>> Martin Sivak
>>
>> On Thu, Feb 8, 2018 at 4:18 PM, Donny Davis <do...@fortnebula.com> wrote:
>> > Ovirt 4.2 has been humming away quite nicely for me in the last few
>> months,
>> > and now I am hitting an issue when try to touch any api call that has
>> to do
>> > with a specific disk. This disk resides on a hyperconverged DC, and
>> none of
>> > the other disks seem to be affected. Here is the error thrown.
>> >
>> > 2018-02-08 10:13:20,005-05 ERROR
>> > [org.ovirt.engine.core.bll.storage.disk.RemoveDiskCommand] (default
>> task-22)
>> > [7b48d1ec-53a7-497a-af8e-938f30a321cf] Error during ValidateFailure.:
>> > org.ovirt.engine.core.bll.quota.InvalidQuotaParametersException: Quota
>> > 6156b8dd-50c9-4e8f-b1f3-4a6449b02c7b does not match storage pool
>> > 5a497956-0380-021e-0025-035e
>> >
>> >
>> >
>> > Any ideas what can be done to fix this?
>> >
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>> >
>>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Cannot Remove Disk

[Donny Davis]

Ovirt 4.2 has been humming away quite nicely for me in the last few months,
and now I am hitting an issue when try to touch any api call that has to do
with a specific disk. This disk resides on a hyperconverged DC, and none of
the other disks seem to be affected. Here is the error thrown.

2018-02-08 10:13:20,005-05 ERROR
[org.ovirt.engine.core.bll.storage.disk.RemoveDiskCommand] (default
task-22) [7b48d1ec-53a7-497a-af8e-938f30a321cf] Error during
ValidateFailure.:
org.ovirt.engine.core.bll.quota.InvalidQuotaParametersException: Quota
6156b8dd-50c9-4e8f-b1f3-4a6449b02c7b does not match storage pool
5a497956-0380-021e-0025-035e



Any ideas what can be done to fix this?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] disk copy exception

[Donny Davis]

So when I run a copy operation it is successful. Move and export do not
work.


On Fri, Jan 26, 2018 at 6:57 AM, Donny Davis <do...@fortnebula.com> wrote:

> When I try to do it via the API I get a more descriptive response
> Cannot export Virtual Disk. Disk configuration (${volumeFormat}
> ${volumeType}) is incompatible with the storage domain type.
>
> Makes sense, it was imported from 4.1
>
> So now the question is how can I fix this storage domain
>
> On Fri, Jan 26, 2018 at 6:43 AM, Donny Davis <do...@fortnebula.com> wrote:
>
>> I am trying to copy a disk that was from a storage domain that was
>> imported from 4.1 to a newer storage domain and this exception is thrown in
>> the UI
>>
>>
>> Uncaught exception occurred. Please try reloading the page. Details:
>> Exception caught: (TypeError) : Cannot read property 'g' of null
>> Please have your administrator check the UI logs
>>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] disk copy exception

[Donny Davis]

When I try to do it via the API I get a more descriptive response
Cannot export Virtual Disk. Disk configuration (${volumeFormat}
${volumeType}) is incompatible with the storage domain type.

Makes sense, it was imported from 4.1

So now the question is how can I fix this storage domain

On Fri, Jan 26, 2018 at 6:43 AM, Donny Davis <do...@fortnebula.com> wrote:

> I am trying to copy a disk that was from a storage domain that was
> imported from 4.1 to a newer storage domain and this exception is thrown in
> the UI
>
>
> Uncaught exception occurred. Please try reloading the page. Details:
> Exception caught: (TypeError) : Cannot read property 'g' of null
> Please have your administrator check the UI logs
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] disk copy exception

[Donny Davis]

I am trying to copy a disk that was from a storage domain that was imported
from 4.1 to a newer storage domain and this exception is thrown in the UI


Uncaught exception occurred. Please try reloading the page. Details:
Exception caught: (TypeError) : Cannot read property 'g' of null
Please have your administrator check the UI logs
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Permission on Vm and User portal

[Donny Davis]

I have been trying to get this worked out myself.

Firstly someone with a system permission will be able to see things from
the system level. I have been adding the permission at the cluster level,
but I also just can't seem to figure out the user portal in 4.2. they can
either see it all or nothing, even vms they create.

I have been using the permissions from this post to no avail.
These permissions have worked fine since 3.x days

http://lists.ovirt.org/pipermail/users/2015-January/030981.html



On Jan 25, 2018 11:57 AM, "carl langlois"  wrote:

> Hi all,
>
> In 4.1 i was able to assign 1 user to one VM and in the user portal that
> same user was only seeing this specific VM. But with 4.2 i have trouble
> with permission.
>
> The way i add permission to a specific user is go click on the VM in the
> admin portal, then go in permission and add the user(active directory
> user). If i log back with this user on the user portal i do not see the VM
> that was given the permission.
> But if i add the same user in the system permission tab in the admin
> portal and give it the UserRole and log back to the user portal, now he can
> see all the VM but i only want the user to see is vm not all others ...
>
> there is a difference when the is add from the two different place.. is
> the attribute :
> when add from the sytem permission it add the (System) in the inherited
> permission colum,
> when add from the VM permission tab it does not have that..
>
>
> Any hints would appreciated.
>
> Carl
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Need input please.

[Donny Davis]

Have you tried to remove that host and readd it?

Also there is a bug that throws the same error, not sure if its related.
Did you have your hosts in maintenance prior to upgrading?

https://bugzilla.redhat.com/show_bug.cgi?id=1258589

On Sat, Jan 6, 2018 at 10:52 AM, carl langlois 
wrote:

> Hi
> I have put the new engine_enrolfail.log that conain the error when
> re-installing .
>
>
> https://drive.google.com/drive/folders/1tZHLIMV0ctGyeDPcGMlJa6evk6fkr
> Cz8?usp=sharing
>
>
> Thanks
>
> On Sat, Jan 6, 2018 at 10:18 AM, Benny Zlotnik 
> wrote:
>
>> Can you please provide the log with the error?
>>
>> On Sat, Jan 6, 2018 at 5:09 PM, carl langlois 
>> wrote:
>>
>>> Hi again,
>>>
>>> I manage to go a little bit further.. I was not able to set one host to
>>> maintenance because they had running vm.. so i force it to mark it as
>>> reboot  and flush any vm and now i can try to reinstall the host.. but now
>>> i am getting error when the installation try to enroll certificate..
>>>
>>> Any idea?
>>>
>>> Thanks
>>> Carl
>>>
>>>
>>> On Sat, Jan 6, 2018 at 9:41 AM, carl langlois 
>>> wrote:
>>>
 Hi,

 Thanks for the quick reply.

 Version before the update was the latest 4.1.
 The storage is NFS.
 The host are plain 7.4 Centos.i keep them up to date
 if i remenber the initail deploy of the engine vm was full OS

 The step to upgrade was:

 SSH to hosted engine vm ,
 yum install 4.2 release
 run engine-setup.
 this where i think something when wrong.
 the engine setup was not able to update some certificate.. a quick
 search on the internet and found that moving the ca.pem from the
 /etc/pki/ovrit-engine made the engine-setup work..

 from that point the hosted_engine seem to work fine but all hosts and
 data center are not operational.

 One of my main concern is losing all the template and users vm..



 Engine and vdsm log of one host are here..

 In the engine log there is a lot of this error..

 2018-01-06 08:31:40,459-05 ERROR [org.ovirt.engine.core.vdsbrok
 er.vdsbroker.GetCapabilitiesVDSCommand] 
 (EE-ManagedThreadFactory-engineScheduled-Thread-9)
 [] Command 'GetCapabilitiesVDSCommand(HostName = hosted_engine_2,
 VdsIdAndVdsVDSCommandParametersBase:{hostId='7d2b3f49-0fbb-493b-8f3c-5283566e830d',
 vds='Host[hosted_engine_2,7d2b3f49-0fbb-493b-8f3c-5283566e830d]'})'
 execution failed: VDSGenericException: VDSNetworkException: General
 SSLEngine problem.

 https://drive.google.com/drive/folders/1tZHLIMV0ctGyeDPcGMlJ
 a6evk6fkrCz8?usp=sharing

 Thanks for your support

 Carl



 On Sat, Jan 6, 2018 at 8:50 AM, Gianluca Cecchi <
 gianluca.cec...@gmail.com> wrote:

> On Sat, Jan 6, 2018 at 2:42 PM, carl langlois 
> wrote:
>
>> Hi again all,
>>
>> I really need your input on recovering my failed upgrade to 4.2.
>>
>>
>>
> First two things to do to get appropriate help would be, in my opinion:
>
> 1) provide a detailed description of your environment
> exact version before the update; kind of storage (Gluster, NFS, iSCSI,
> FC), kind of hosts (plain OS and which version or node-ng and which 
> version
> before and after), kind of deploy executed for hosted engine VM at initial
> install time (appliance, full OS).
> Describe steps used for upgrading.
>
> 2) upload to a shared file services all the possible logs:
> engine logs before and after the upgrade and logs of engine-setup run
> during update
> vdsm logs before and after the upgrade
>
>
> Gianluca
>
>

>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Upgrade to 4.2

[Donny Davis]

I would put one of them in maintenance and run a reinstall. I am unsure of
the upgrade anomalies from 4.1 to 4.2 because i started on 4.2 with this
cluster. However it has worked for me in the past

On Fri, Jan 5, 2018 at 4:33 PM, carl langlois 
wrote:

> Hi all,
>
> I have upgrade to 4.2 and have some problem getting everithing up and
> running again.
>
> The upgrade was made from latest 4.1. For now the engine dashboard can be
> access but all hosts, data center are all the status to "Not responsive"
> ...
>
> for now the only thing i found is
> ERROR ssl handshake: SSLError, address:
>
> from a systemctl status vdsmd
>
>
> Any help would be appreciated
>
> Carl
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Q: ext4 noatime/nidiratime for oVirt node mount points

[Donny Davis]

I was just curious, and I concur that there is no logic in not just using
the defaults.

On Thu, Jan 4, 2018 at 1:46 PM, Yaniv Kaul <yk...@redhat.com> wrote:

>
>
> On Jan 4, 2018 7:01 PM, "Donny Davis" <do...@fortnebula.com> wrote:
>
> Yaniv,
>
> If there was a central logging server, would the hypervisors send them
> there and stop writing to disk (given its setup properly), or does it write
> them anyway?
>
>
> We ship logs to the central logging, not instead of logging them locally.
> I reckon you could mount /var/log somewhere remotely, but I do not think
> it makes sense.
> Our logging is not intensive and has log rotation configured, so I'm not
> sure what the issue is. A r/o partition or a cheap SD card with limited
> write wear?
> Y.
>
>
>
> https://www.ovirt.org/documentation/admin-guide/chap-Log_Files/
>
> On Thu, Jan 4, 2018 at 11:43 AM, Yaniv Kaul <yk...@redhat.com> wrote:
>
>>
>>
>> On Thu, Jan 4, 2018 at 5:04 PM, Donny Davis <do...@fortnebula.com> wrote:
>>
>>> That makes more sense. Have you measured the write load on the disks
>>> from just the hypervisor processes. I have included a screen shot from
>>> mine, and the load is very low in the Kilobytes/sec
>>>
>>
>> And those are probably the logs, which will be written anyway...
>> Y.
>>
>>
>>>
>>> I am not sure of the implications of changing these parameters, and I do
>>> not see an perceivable benefits from doing so.
>>>
>>> [image: Inline image 1]
>>>
>>> On Thu, Jan 4, 2018 at 9:51 AM, andreil1 <andre...@starlett.lv> wrote:
>>>
>>>>
>>>>
>>>> On 4 Jan 2018, at 14:52, Donny Davis <do...@fortnebula.com> wrote:
>>>>
>>>> What is the purpose in putting these directives in for the hypervisor?
>>>>
>>>>
>>>> I have small node where system and data domains located on the same
>>>> RAID.
>>>> Data domains are on separate partitions.
>>>> These options allow minimise disk access activity.
>>>>
>>>>
>>>> On Thu, Jan 4, 2018 at 6:46 AM, andreil1 <andre...@starlett.lv> wrote:
>>>>
>>>>> Hi !
>>>>>
>>>>> Is it safe to turn on these options (noatime, nodiratime) in oVirt
>>>>> node fstab for these mount points?
>>>>> /home
>>>>> /
>>>>> /tmp
>>>>> /var
>>>>> /var/log
>>>>> /var/log/audit
>>>>>
>>>>> Node 4.2 installed on CentOS, not with node DVD.
>>>>>
>>>>> Thanks.
>>>>>
>>>>> ___
>>>>> Users mailing list
>>>>> Users@ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>
>>>>
>>>>
>>>>
>>>> ___
>>>> Users mailing list
>>>> Users@ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>
>>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Q: ext4 noatime/nidiratime for oVirt node mount points

[Donny Davis]

Yaniv,

If there was a central logging server, would the hypervisors send them
there and stop writing to disk (given its setup properly), or does it write
them anyway?


https://www.ovirt.org/documentation/admin-guide/chap-Log_Files/

On Thu, Jan 4, 2018 at 11:43 AM, Yaniv Kaul <yk...@redhat.com> wrote:

>
>
> On Thu, Jan 4, 2018 at 5:04 PM, Donny Davis <do...@fortnebula.com> wrote:
>
>> That makes more sense. Have you measured the write load on the disks from
>> just the hypervisor processes. I have included a screen shot from mine, and
>> the load is very low in the Kilobytes/sec
>>
>
> And those are probably the logs, which will be written anyway...
> Y.
>
>
>>
>> I am not sure of the implications of changing these parameters, and I do
>> not see an perceivable benefits from doing so.
>>
>> [image: Inline image 1]
>>
>> On Thu, Jan 4, 2018 at 9:51 AM, andreil1 <andre...@starlett.lv> wrote:
>>
>>>
>>>
>>> On 4 Jan 2018, at 14:52, Donny Davis <do...@fortnebula.com> wrote:
>>>
>>> What is the purpose in putting these directives in for the hypervisor?
>>>
>>>
>>> I have small node where system and data domains located on the same RAID.
>>> Data domains are on separate partitions.
>>> These options allow minimise disk access activity.
>>>
>>>
>>> On Thu, Jan 4, 2018 at 6:46 AM, andreil1 <andre...@starlett.lv> wrote:
>>>
>>>> Hi !
>>>>
>>>> Is it safe to turn on these options (noatime, nodiratime) in oVirt node
>>>> fstab for these mount points?
>>>> /home
>>>> /
>>>> /tmp
>>>> /var
>>>> /var/log
>>>> /var/log/audit
>>>>
>>>> Node 4.2 installed on CentOS, not with node DVD.
>>>>
>>>> Thanks.
>>>>
>>>> ___
>>>> Users mailing list
>>>> Users@ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>
>>>
>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Q: ext4 noatime/nidiratime for oVirt node mount points

[Donny Davis]

That makes more sense. Have you measured the write load on the disks from
just the hypervisor processes. I have included a screen shot from mine, and
the load is very low in the Kilobytes/sec

I am not sure of the implications of changing these parameters, and I do
not see an perceivable benefits from doing so.

[image: Inline image 1]

On Thu, Jan 4, 2018 at 9:51 AM, andreil1 <andre...@starlett.lv> wrote:

>
>
> On 4 Jan 2018, at 14:52, Donny Davis <do...@fortnebula.com> wrote:
>
> What is the purpose in putting these directives in for the hypervisor?
>
>
> I have small node where system and data domains located on the same RAID.
> Data domains are on separate partitions.
> These options allow minimise disk access activity.
>
>
> On Thu, Jan 4, 2018 at 6:46 AM, andreil1 <andre...@starlett.lv> wrote:
>
>> Hi !
>>
>> Is it safe to turn on these options (noatime, nodiratime) in oVirt node
>> fstab for these mount points?
>> /home
>> /
>> /tmp
>> /var
>> /var/log
>> /var/log/audit
>>
>> Node 4.2 installed on CentOS, not with node DVD.
>>
>> Thanks.
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Q: ext4 noatime/nidiratime for oVirt node mount points

[Donny Davis]

What is the purpose in putting these directives in for the hypervisor?

On Thu, Jan 4, 2018 at 6:46 AM, andreil1  wrote:

> Hi !
>
> Is it safe to turn on these options (noatime, nodiratime) in oVirt node
> fstab for these mount points?
> /home
> /
> /tmp
> /var
> /var/log
> /var/log/audit
>
> Node 4.2 installed on CentOS, not with node DVD.
>
> Thanks.
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Migrating VM's from downed host

[Donny Davis]

There should be a way to poweroff the VM. Then you will be able to restart
it on another host. If you right click on the virtual machine, what options
are you presented with

On Fri, Dec 29, 2017 at 7:23 AM, Mark Steele  wrote:

> Good morning,
>
> We lost one of our hosts this morning and all of the VM's in that host are
> in a hung state with a '?' in their status.
>
> The Host itself is powered off due to a failed backplane and is reporting
> 'Host hv-01 is not responding. It will stay in Connecting state for a grace
> period of 136 seconds and after that an attempt to fence will be issued.' -
> that message has been repeating every three minutes. We have tried to
> manually power cycle the blade but that is not working.
>
> We are running 3.5.0.1-1.el6
>
> - is there a way to force that host to release it's VM's?
> - is there a way to manually move the VM's?
>
> The menu for the VM's only has 'Add' and 'Edit' available.
>
> Best regards,
>
> ***
> *Mark Steele*
> CIO / VP Technical Operations | TelVue Corporation
> TelVue - We Share Your Vision
> 16000 Horizon Way, Suite 100 | Mt. Laurel, NJ 08054
> 800.885.8886 x128 <(800)%20885-8886> | mste...@telvue.com | http://
> www.telvue.com
> twitter: http://twitter.com/telvue | facebook: https://www.
> facebook.com/telvue
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Assign external IP to VM

[Donny Davis]

Are you using built in nics on your hypervisor? If so, then pci passthrough
will likely pass both as they as possibly on the same pci device. At least
that is how my dells work. Honestly you should just be able to put nic two
on its own network untagged and then assign that network to the hypervisor
with the connection. Without SR-IOV support those nics will be dedicated to
that VM.

Just depends on your use case. What is the big picture?

On Tue, Dec 26, 2017 at 9:12 PM Alex Bartonek  wrote:

> Yes, enabled io-mmu.   I'm not sure if what I'm doing is right though.  So
> if there is a better way of accomplishing what I'm trying to do, send me to
> some reading material so I dont take up too much of everyone's time.  I'll
> read up on it.  If its a simple do-this-and-that, then I'll try it.
>
> Thanks!
>
>
> Sent with ProtonMail  Secure Email.
>
>  Original Message 
> Subject: Re: [ovirt-users] Assign external IP to VM
> Local Time: December 26, 2017 7:17 PM
> UTC Time: December 27, 2017 1:17 AM
> From: do...@fortnebula.com
> To: Alex Bartonek 
> users@ovirt.org 
>
> Looks like you are trying to use SR-IOV. Did you enable iommu on the
> hypervisors? Do your hypervisors support SR-IOV.
>
> On Tue, Dec 26, 2017 at 5:38 PM, Alex Bartonek  wrote:
>
>> Need some guidance on this one.
>>
>> Config:
>> 1U with 2 NICs.
>> NIC 1 plugged to local switch - gets local IP
>> NIC 2 plugged direct to cable modem - need to set IP inside VM to public
>> static IP
>> VM will be CentOS, already know how to configure NIC once I can get the
>> 2nd NIC assigned to it.
>>
>> Do I use PCI passthru?  Or where do I start to get this configured?  I
>> did setup NIC 2 under Network --> Networks.   Created a NIC called
>> "external_NIC".  External NIC has description and then I configured 2 DNS
>> servers which are given to me by the ISP.
>>
>> Under Compute --> Hosts -->  --> Network Interfaces (I have both
>> NICs showing as up) --> Setup Host Networks ---> NIC 2 is the interface -->
>> Assignment of Logical networks is "external_NIC".
>>
>> I was assuming I was done, so I go to my VM add NIC 2, click run and I
>> see:
>>
>> Cannot run VM. There is no host that satisfies current scheduling
>> constraints. See below for details:
>>
>>- The host  did not satisfy internal filter Network because
>>there are no free virtual functions which are suitable for virtual nic(s)
>>nic2. A virtual function is considered as suitable if the VF's
>>configuration of its physical function contains the virtual nic's
>>network/network label.
>>
>> Need guidance on what to read to get this working.
>>
>> Thanks!
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Assign external IP to VM

[Donny Davis]

Looks like you are trying to use SR-IOV. Did you enable iommu on the
hypervisors? Do your hypervisors support SR-IOV.

On Tue, Dec 26, 2017 at 5:38 PM, Alex Bartonek  wrote:

> Need some guidance on this one.
>
> Config:
> 1U with 2 NICs.
> NIC 1 plugged to local switch - gets local IP
> NIC 2 plugged direct to cable modem - need to set IP inside VM to public
> static IP
> VM will be CentOS, already know how to configure NIC once I can get the
> 2nd NIC assigned to it.
>
> Do I use PCI passthru?  Or where do I start to get this configured?  I did
> setup NIC 2 under Network --> Networks.   Created a NIC called
> "external_NIC".  External NIC has description and then I configured 2 DNS
> servers which are given to me by the ISP.
>
> Under Compute --> Hosts -->  --> Network Interfaces (I have both
> NICs showing as up) --> Setup Host Networks ---> NIC 2 is the interface -->
> Assignment of Logical networks is "external_NIC".
>
> I was assuming I was done, so I go to my VM add NIC 2, click run and I see:
>
> Cannot run VM. There is no host that satisfies current scheduling
> constraints. See below for details:
>
>- The host  did not satisfy internal filter Network because
>there are no free virtual functions which are suitable for virtual nic(s)
>nic2. A virtual function is considered as suitable if the VF's
>configuration of its physical function contains the virtual nic's
>network/network label.
>
> Need guidance on what to read to get this working.
>
> Thanks!
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.2 + Win 7 64bit VM + Blue Iris no workie

[Donny Davis]

http://lists.ovirt.org/pipermail/users/2016-July/074936.html

On Tue, Dec 26, 2017 at 6:07 PM, Alex Bartonek  wrote:

> This is a first time install of 4.2, first time build of a Win 7 64bit vm,
> first time oVirt user.  :-)
> Blue Iris works fine under XenServer but thats what I'm migrating away
> from.
>
> VM is nothing special.  4gb ram assigned, OS set as "Win 7 64 bit", 1
> virtual cpu everything else is default.  Virtio drivers installed after
> first boot.  I'll re-install Win 7 64bit, have it take a dump and then post
> the dump details.
>
>
> Copy of the dump analysis:
> http://textuploader.com/dcpbp
>
>  Original Message 
> Subject: Re: [ovirt-users] ovirt 4.2 + Win 7 64bit VM + Blue Iris no workie
> Local Time: December 26, 2017 3:36 PM
> UTC Time: December 26, 2017 9:36 PM
> From: yk...@redhat.com
> To: Alex Bartonek 
> Ovirt Users 
>
>
>
> On Dec 26, 2017 10:49 PM, "Alex Bartonek"  wrote:
>
> I have a dl360 g5 with a Xeon 5160 cpu, installed 4.2, Win 7 64 bit in a
> VM.  Installed the virtio drivers also.   Plain jane Win 7 setup, nothing
> extra.  Installed Blue Iris.  When I run Blue Iris, it blue screens.
> Anyone got Blue Iris to work under 4.2 in a Windows VM?
>
>
> There are many missing details, it'd be interesting to begin with the blue
> screen details and the VM configuration.
> Did it work with previous versions?
> Y.
>
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt Node 4.1 question, writing files to /root and RPMs

[Donny Davis]

have you gotten an image update yet?

On Thu, Dec 14, 2017 at 8:08 PM, Matt Simonsen  wrote:

> Hello all,
>
> I read at https://www.ovirt.org/develop/projects/node/troubleshooting/
> that "Changes made from the command line are done at your own risk. Making
> changes has the potential to leave your system in an unusable state." It
> seems clear that RPMs should not be installed.
>
> Is this accurate for https://www.ovirt.org/node/ ?
>
> We have added smartctl and hpacucli in order to do disk and RAID
> monitoring. So far our node servers have retained changes across reboots,
> which is the primary reason I'm wondering if perhaps this applies to an
> older version of oVirt Node.
>
> If what we have been doing is not supported, what is the suggested method
> to do do hardware monitoring (in particular disks)?
>
> Thanks
> Matt
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Q: Partitioning - oVirt 4.1 & GlusterFS 2-node System

[Donny Davis]

I would start here
https://ovirt.org/blog/2017/04/up-and-running-with-ovirt-4.1-and-gluster-storage/

Pretty good basic guidance.

Also with software defined storage its recommended their are at least two
"storage" nodes and one arbiter node to maintain quorum.

On Wed, Dec 13, 2017 at 3:45 PM, Andrei V  wrote:

> Hi,
>
> I'm going to setup relatively simple 2-node system with oVirt 4.1,
> GlusterFS, and several VMs running.
> Each node going to be installed on dual Xeon system with single RAID 5.
>
> oVirt node installer uses relatively simple default partitioning scheme.
> Should I leave it as is, or there are better options?
> I never used GlusterFS before, so any expert opinion is very welcome.
>
> Thanks in advance.
> Andrei
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] critical production issue for a vm

[Donny Davis]

This is just a shot in the dark,  but have you tried to use the disk copy
feature? You can copy the disks back to where they were and try starting
the VM

On Thu, Dec 7, 2017 at 7:48 AM, Nathanaël Blanchet  wrote:

>
>
> Le 06/12/2017 à 15:56, Maor Lipchuk a écrit :
>
>
>
> On Wed, Dec 6, 2017 at 12:30 PM, Nicolas Ecarnot 
> wrote:
>
>> Le 06/12/2017 à 11:21, Nathanaël Blanchet a écrit :
>>
>>> Hi all,
>>>
>>> I'm about to lose one very important vm. I shut down this vm for
>>> maintenance and then I moved the four disks to a new created lun. This vm
>>> has 2 snapshots.
>>>
>>> After successful move, the vm refuses to start with this message:
>>>
>>> Bad volume specification {u'index': 0, u'domainID':
>>> u'961ea94a-aced-4dd0-a9f0-266ce1810177', 'reqsize': '0', u'format':
>>> u'cow', u'bootOrder': u'1', u'discard': False, u'volumeID':
>>> u'a0b6d5cb-db1e-4c25-aaaf-1bbee142c60b', 'apparentsize': '2147483648
>>> <%28214%29%20748-3648>', u'imageID': 
>>> u'4a95614e-bf1d-407c-aa72-2df414abcb7a',
>>> u'specParams': {}, u'readonly': u'false', u'iface': u'virtio', u'optional':
>>> u'false', u'deviceId': u'4a95614e-bf1d-407c-aa72-2df414abcb7a',
>>> 'truesize': '2147483648 <%28214%29%20748-3648>', u'poolID':
>>> u'48ca3019-9dbf-4ef3-98e9-08105d396350', u'device': u'disk', u'shared':
>>> u'false', u'propagateErrors': u'off', u'type': u'disk'}.
>>>
>>> I tried to merge the snaphots, export , clone from snapshot, copy disks,
>>> or deactivate disks and every action fails when it is about disk.
>>>
>>> I began to dd lv group to get a new vm intended to a standalone
>>> libvirt/kvm, the vm quite boots up but it is an outdated version before the
>>> first snapshot. There is a lot of disks when doing a "lvs | grep 961ea94a"
>>> supposed to be disks snapshots. Which of them must I choose to get the last
>>> vm before shutting down? I'm not used to deal snapshot with virsh/libvirt,
>>> so some help will be much appreciated.
>>>
>>
> The disks which you want to copy should contain the entire volume chain.
> Based on the log you mentioned, It looks like this image is problematic:
>
>   storage id: '961ea94a-aced-4dd0-a9f0-266ce1810177',
>   imageID': u'4a95614e-bf1d-407c-aa72-2df414abcb7a
>   volumeID': u'a0b6d5cb-db1e-4c25-aaaf-1bbee142c60b'
>
> What if you try to deactivate this image and try to run the VM, will it
> run?
>
> I already tried to do what you suggest, but it is the same, and more this
> disk is part of a volume groupe, so I can't boot the vm without it.
>
>
>
>
>
>>
>>> Is there some unknown command to recover this vm into ovirt?
>>>
>>> Thank you in advance.
>>>
>>>
>>>
>
>
>
>
>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>> Beside specific oVirt answers, did you try to get informations about the
>> snapshot tree with qemu-img info --backing-chain on the adequate /dev/...
>> logical volume?
>> As you know how to dd from LVs, you could extract every needed snapshots
>> files and rebuild your VM outside of oVirt.
>> Then take time to re-import it later and safely.
>>
>> --
>> Nicolas ECARNOT
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
>
> ___
> Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>
>
> --
> Nathanaël Blanchet
>
> Supervision réseau
> Pôle Infrastrutures Informatiques
> 227 avenue Professeur-Jean-Louis-Viala
> 34193 MONTPELLIER CEDEX 5 
> Tél. 33 (0)4 67 54 84 55
> Fax  33 (0)4 67 54 84 14blanc...@abes.fr
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow performance with export storage on glusterfs

[Donny Davis]

What about mounting over nfs instead of the fuse client. Or maybe libgfapi.
Is that available for export domains

On Fri, Nov 24, 2017 at 3:48 AM Jiří Sléžka  wrote:

> On 11/24/2017 06:41 AM, Sahina Bose wrote:
> >
> >
> > On Thu, Nov 23, 2017 at 4:56 PM, Jiří Sléžka  > > wrote:
> >
> > Hi,
> >
> > On 11/22/2017 07:30 PM, Nir Soffer wrote:
> > > On Mon, Nov 20, 2017 at 5:22 PM Jiří Sléžka  
> > > >> wrote:
> > >
> > > Hi,
> > >
> > > I am trying realize why is exporting of vm to export storage on
> > > glusterfs such slow.
> > >
> > > I am using oVirt and RHV, both instalations on version 4.1.7.
> > >
> > > Hosts have dedicated nics for rhevm network - 1gbps, data
> > storage itself
> > > is on FC.
> > >
> > > GlusterFS cluster lives separate on 4 dedicated hosts. It has
> > slow disks
> > > but I can achieve about 200-400mbit throughput in other
> > applications (we
> > > are using it for "cold" data, backups mostly).
> > >
> > > I am using this glusterfs cluster as backend for export
> > storage. When I
> > > am exporting vm I can see only about 60-80mbit throughput.
> > >
> > > What could be the bottleneck here?
> > >
> > > Could it be qemu-img utility?
> > >
> > > vdsm  97739  0.3  0.0 354212 29148 ?S  0:06
> > > /usr/bin/qemu-img convert -p -t none -T none -f raw
> > >
> >
>   
> /rhev/data-center/2ff6d0ee-a10b-473d-b77c-be9149945f5f/ff3cd56a-1005-4426-8137-8f422c0b47c1/images/ba42cbcc-c068-4df8-af3d-00f2077b1e27/c57acd5f-d6cf-48cc-ad0c-4a7d979c0c1e
> > > -O raw
> > >
> >  /rhev/data-center/mnt/glusterSD/10.20.30.41:
> _rhv__export/81094499-a392-4ea2-b081-7c6288fbb636/images/ba42cbcc-c068-4df8-af3d-00f2077b1e27/c57acd5f-d6cf-48cc-ad0c-4a7d979c0c1e
> > >
> > > Any idea how to make it work faster or what throughput should I
> > > expected?
> > >
> > >
> > > gluster storage operations are using fuse mount - so every write:
> > > - travel to the kernel
> > > - travel back to the gluster fuse helper process
> > > - travel to all 3 replicas - replication is done on client side
> > > - return to kernel when all writes succeeded
> > > - return to caller
> > >
> > > So gluster will never set any speed record.
> > >
> > > Additionally, you are copying from raw lv on FC - qemu-img cannot
> do
> > > anything
> > > smart and avoid copying unused clusters. Instead if copies
> > gigabytes of
> > > zeros
> > > from FC.
> >
> > ok, it does make sense
> >
> > > However 7.5-10 MiB/s sounds too slow.
> > >
> > > I would try to test with dd - how much time it takes to copy
> > > the same image from FC to your gluster storage?
> > >
> > > dd
> > >
> if=/rhev/data-center/2ff6d0ee-a10b-473d-b77c-be9149945f5f/ff3cd56a-1005-4426-8137-8f422c0b47c1/images/ba42cbcc-c068-4df8-af3d-00f2077b1e27/c57acd5f-d6cf-48cc-ad0c-4a7d979c0c1e
> > > of=/rhev/data-center/mnt/glusterSD/10.20.30.41:
> _rhv__export/81094499-a392-4ea2-b081-7c6288fbb636/__test__
> > > bs=8M oflag=direct status=progress
> >
> > unfrotunately dd performs the same
> >
> > 1778384896 bytes (1.8 GB) copied, 198.565265 s, 9.0 MB/s
> >
> >
> > > If dd can do this faster, please ask on qemu-discuss mailing list:
> > > https://lists.nongnu.org/mailman/listinfo/qemu-discuss
> > 
> > >
> > > If both give similar results, I think asking in gluster mailing
> list
> > > about this can help. Maybe your gluster setup can be optimized.
> >
> > ok, this is definitly on the gluster side. Thanks for your guidance.
> >
> > I will investigate the gluster side and also will try Export on NFS
> > share.
> >
> >
> > [Adding gluster users ml]
> >
> > Please provide "gluster volume info" output for the rhv_export gluster
> > volume and also volume profile details (refer to earlier mail from Shani
> > on how to run this) while performing the dd operation above.
>
> you can find all this output on https://pastebin.com/sBK01VS8
>
> as mentioned in other posts. Gluster cluster uses really slow (green)
> disks but without direct io it can achieve throughput around 400mbit/s.
>
> This storage is used mostly for backup purposes. It is not used as a vm
> storage.
>
> In my case it would be nice not to use direct io in export case but I
> understand why it might not be wise.
>
> Cheers,
>
> Jiri
>
> >
> >
> >
> >
> > Cheers,
> >
> > Jiri
> >
> >
> > >
> > > Nir
> > >
> > >
> > >
> > > Cheers,
> > >
> > > Jiri
> > >
> > >
> > > 

Re: [ovirt-users] Having issue with external IPA

[Donny Davis]

Does the user you are using have permissions to add people? Why not just
use IPA to add the user accounts?

On Mon, Oct 2, 2017 at 2:26 AM, Ondra Machacek  wrote:

> On Sun, Oct 1, 2017 at 1:07 PM, Yan Naing Myint
>  wrote:
> > Hello guys,
> >
> > I'm having problem with adding users from my FreeIPA server to oVirt.
> > 1. Status of ovirt-engine-extension-aaa-ldap-setup is success with RHDS
> > 2. I cannot add IPA users in oVirt webadmin panel
> > 3. In oVirt web admin panel it says "Error while executing action
> AddUser:
> > Internal Engine Error"
> >
> > What will be the problem or is it a bug?
>
> Can you please share the log from the following command?
>
>  $ ovirt-engine-extensions-tool --log-level=FINEST
> --log-file=/tmp/aaa.log aaa search --entity-name=mgorca
> --extension-name=cyberwings.local
>
> > Is there any suggestion of how do it make it work?
> >
> > in the engine.log it says;
> >
> > 2017-10-01 17:30:52,436+06 ERROR
> > [org.ovirt.engine.core.bll.aaa.AddUserCommand] (default task-113)
> > [bf5822eb-39da-49e5-b2ab-9865f71346a3] Transaction rolled-back for
> command
> > 'org.ovirt.engine.core.bll.aaa.AddUserCommand'.
> > 2017-10-01 17:30:52,459+06 WARN
> > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> > (default task-113) [bf5822eb-39da-49e5-b2ab-9865f71346a3] EVENT_ID:
> > USER_FAILED_ADD_ADUSER(327), Correlation ID:
> > bf5822eb-39da-49e5-b2ab-9865f71346a3, Call Stack: null, Custom ID: null,
> > Custom Event ID: -1, Message: Failed to add User 'mgorca' to the system.
> >
> > in cyberwings.local.properties
> >
> > ovirt.engine.extension.name = cyberwings.local
> > ovirt.engine.extension.bindings.method = jbossmodule
> > ovirt.engine.extension.binding.jbossmodule.module =
> > org.ovirt.engine-extensions.aaa.ldap
> > ovirt.engine.extension.binding.jbossmodule.class =
> > org.ovirt.engineextensions.aaa.ldap.AuthzExtension
> > ovirt.engine.extension.provides = org.ovirt.engine.api.
> extensions.aaa.Authz
> > config.profile.file.1 = ../aaa/cyberwings.local.properties
> > config.globals.baseDN.simple_baseDN = dc=cyberwings,dc=local
> >
> > in cyberwings.local-authn.properties
> > ovirt.engine.extension.name = cyberwings.local-authn
> > ovirt.engine.extension.bindings.method = jbossmodule
> > ovirt.engine.extension.binding.jbossmodule.module =
> > org.ovirt.engine-extensions.aaa.ldap
> > ovirt.engine.extension.binding.jbossmodule.class =
> > org.ovirt.engineextensions.aaa.ldap.AuthnExtension
> > ovirt.engine.extension.provides = org.ovirt.engine.api.
> extensions.aaa.Authn
> > ovirt.engine.aaa.authn.profile.name = cyberwings.local
> > ovirt.engine.aaa.authn.authz.plugin = cyberwings.local
> > config.profile.file.1 = ../aaa/cyberwings.local.properties
> > config.globals.baseDN.simple_baseDN = dc=cyberwings,dc=local
> >
> >
> > --
> > Yan Naing Myint
> > CEO
> > Server & Network Engineer
> > Cyber Wings Co., Ltd
> > http://cyberwings.asia
> > 09799950510
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt HA behavior

[Donny Davis]

Alex is correct. This is what the storage lease feature was designed for.

On Mon, Sep 18, 2017 at 6:00 PM Alex K  wrote:

> Enabling VM leases could be an answer to this. Will test tomorrow.
>
> Thanx,
> Alex
>
> On Sep 18, 2017 7:50 PM, "Alex K"  wrote:
>
> Hi All,
>
> I have the following issue with the HA behavior of oVirt 4.1 and need to
> check with you if there is any work around from your experience.
>
> I have 3 servers (A, B, C) with hosted engine in self hosted setup on top
> gluster with replica 3 + 1 arbiter. All good except one point:
>
> The hosts have been configured with power management using IPMI (server
> iLO).
> If I disconnect power from one host (say C) (or disconnect all network
> cables of the host) the two other hosts go to a loop where they try to
> verify the status of the host C by issuing power management commands to the
> host C. Since power of host is off the server iLO does not respond on the
> network and the power management of host C fails, leaving the VMs that were
> running on the host C in an unknown state and they are never restarted to
> the other hosts.
>
> Is there any fencing option to change this behavior so as if both
> available hosts fail to do power management of the unresponsive host to
> decide that the host is down and to restart the VMs of that host to the
> other available hosts.
>
> I could also add additional power management through UPS to avoid this
> issue but this is not currently an option and I am interested to see if
> this behavior can be tweaked.
>
> Thanx,
> Alex
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] mode 4 bonding for VMs with NetworkManager anyone?

[Donny Davis]

As long as the switch is setup for 802.3AD (LACP) then you should be fine.
I used the UI to setup my bond's and here is the output from my hypervisor

[root@virtnode-3 ~]# systemctl status NetworkManager

● NetworkManager.service - Network Manager

   Loaded: loaded (/usr/lib/systemd/system/NetworkManager.service; enabled;
vendor preset: enabled)

   Active: active (running) since Mon 2017-09-11 19:07:06 UTC; 1 day 16h ago

 Docs: man:NetworkManager(8)

 Main PID: 952 (NetworkManager)

   CGroup: /system.slice/NetworkManager.service

   └─952 /usr/sbin/NetworkManager --no-daemon


Sep 11 20:12:15 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160735.0612]
ifcfg-rh: Ignoring connection /etc/sysconfig/network-scripts/ifcfg-storage
(53b19d46-6b08-f...me:storage.

Sep 11 20:12:16 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160736.8563]
device (p3p1): link connected

Sep 11 20:12:17 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160737.0798]
device (p3p2): link connected

Sep 11 20:12:17 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160737.0839]
device (bond0): link connected

Sep 11 20:12:17 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160737.7324]
ifcfg-rh: new connection /etc/sysconfig/network-scripts/ifcfg-bond0.600
(cad7be9f-9e8c-bcab-4...m bond0.600")

Sep 11 20:12:17 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160737.7324]
ifcfg-rh: Ignoring connection
/etc/sysconfig/network-scripts/ifcfg-bond0.600
(cad7be9f-9e8c-b...me:bond0.600.

Sep 11 20:12:17 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160737.7533]
manager: (bond0.600): new VLAN device
(/org/freedesktop/NetworkManager/Devices/37)

Sep 11 20:12:17 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160737.7705]
manager: (storage): new Bridge device
(/org/freedesktop/NetworkManager/Devices/38)

Sep 11 20:12:17 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160737.7905]
device (bond0.600): link connected

Sep 11 20:12:17 virtnode-3.fortnebula.com NetworkManager[952]: 
[1505160737.8477]
device (storage): link connected

Hint: Some lines were ellipsized, use -l to show in full.

[root@virtnode-3 ~]# rpm -qa vdsm

vdsm-4.19.28-1.el7.centos.x86_64

[root@virtnode-3 ~]#

On Wed, Sep 13, 2017 at 7:46 AM, Gianluca Cecchi <gianluca.cec...@gmail.com>
wrote:

> On Wed, Sep 13, 2017 at 1:43 PM, Donny Davis <do...@fortnebula.com> wrote:
>
>> Just use the UI to manage your network interfaces.
>>
>>
> Just used and prolems arose...
> hence the question ;-)
>
> In the mean time, as I have no control on network configuration from a
> switch point of view, I have asked network guys to verify.
> My question was to verify that NM + 802.3AD is used ok from others
>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] mode 4 bonding for VMs with NetworkManager anyone?

[Donny Davis]

Just use the UI to manage your network interfaces.

On Wed, Sep 13, 2017 at 6:23 AM, Gianluca Cecchi 
wrote:

> Hello,
> I'm testing ovirt node, both 4.1.5 and 4.1.6rc2.
> I see that in both versions the network stack is configured with
> NetworkManager enabled.
>
> With plain CentOS I always disabled NetworkManager and only used classical
> network service alone, so I have not background with NM, related to
> hypervisor.
>
> I have configured a vlan (untagged) for VMs, using bonding mode=4
> (802.3ad).
>
> I have some problems with my VMs: they are reachable from some parts and
> not from others.
>
> In parallel I have already asked network guys to crosscheck network
> configurations of the datacenter, but I would like to have confirmation
> that other ones are already using with success the combination of:
>
> - NetworkManager on hypervisor
> - bonding mode = 4 for VMs traffic
>
> Another question for another aspect I never understood: with an
> environment in the past (before 3.5 times if I remember well) I used
> 802.3ad but I had to set lacp_rate=1 (fast) because I had connection
> problems with the default lacp_rate=0 (slow) parameter.
> I see that still the default is lacp_rate=0
> Could it be the same this time? Is there any reason to set default
> lacp_rate=0 in oVirt (or the reverse... ;-)?
>
> Thanks in advance,
> Gianluca
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Hyper converged network setup

[Donny Davis]

Can you ping the VM when it comes up?

On Wed, Sep 13, 2017 at 7:40 AM, Tailor, Bharat <
bha...@synergysystemsindia.com> wrote:

> I am not using any DNS server. I have made entries in /etc/hosts for all
> Nodes and for engine VM also.
>
> Regrards
> Bharat Kumar
>
> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
> Udaipur (Raj.)
> 313001
> Mob: +91-9950-9960-25
>
>
>
>
>
> On Wed, Sep 13, 2017 at 5:02 PM, Donny Davis <do...@fortnebula.com> wrote:
>
>> Bharat,
>>
>> Are you using DNS for host names or /etc/hosts
>>
>> I personally place the engines hostname with ip address in /etc/hosts on
>> all the hypervisors in case my DNS services go down.
>> I also put the hypervisors in /etc/hosts too
>>
>> Hope this helps.
>>
>> On Wed, Sep 13, 2017 at 6:04 AM, Yaniv Kaul <yk...@redhat.com> wrote:
>>
>>>
>>>
>>> On Wed, Sep 13, 2017 at 8:42 AM, Tailor, Bharat <
>>> bha...@synergysystemsindia.com> wrote:
>>>
>>>> Hi Charles & Donny,
>>>>
>>>> Thank you so much.
>>>>
>>>> @Donny my 3rd node's IP is 192.168.100.17(Mentioned wrong in above
>>>> mail).
>>>> I was trying to install ovirt ova on test2.localdomain. I've cleared
>>>> all the steps and at last I got a message like "Engine is still
>>>> unreachable". Kindly help me to troubleshoot it.
>>>>
>>>> @Ykaul How can I register myself in mailing list?
>>>>
>>>
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>> Y.
>>>
>>>
>>>>
>>>> Regrards
>>>> Bharat Kumar
>>>>
>>>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>>>> Udaipur (Raj.)
>>>> 313001
>>>> Mob: +91-9950-9960-25
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Wed, Sep 13, 2017 at 3:06 AM, Charles Kozler <ckozler...@gmail.com>
>>>> wrote:
>>>>
>>>>> Bharat -
>>>>>
>>>>> 1. Yes. Will need to configure switch port as a trunk and setup your
>>>>> VLANs and VLAN ID's
>>>>> 2. Yes
>>>>> 3. You can still access the hosts. The engine itself crashing or being
>>>>> down wont stop your VMs or hosts or anything (unless fencing). You can use
>>>>> virsh
>>>>> 4. My suggestion here is start immediately after a fresh server
>>>>> install and yum update. Installer does a lot and checks a lot and wont 
>>>>> like
>>>>> things: ex - you setup ovirtmgmt bridged network yourself
>>>>> 5. Yes. See #1, usually what I do is each ovirt node I have I set an
>>>>> IP of .5, then .6, and so on. This way I can be sure my network itself is
>>>>> working before adding a VM and attaching that NIC to it
>>>>>
>>>>> On Tue, Sep 12, 2017 at 4:41 PM, Donny Davis <do...@fortnebula.com>
>>>>> wrote:
>>>>>
>>>>>> 1. Yes, you can do this
>>>>>> 2. Yes, In linux it's called bonding and this can be done from the UI
>>>>>> 3. You can get around using the Engine machine if required with virsh
>>>>>> or virt-manager - however I would just wait for the manager to migrate 
>>>>>> and
>>>>>> start on another host in the cluster
>>>>>> 4.  The deployment will take care of everything for you. You just
>>>>>> need an IP
>>>>>> 5. Yes, you can use vlans or virtual networking(NSXish) called OVS in
>>>>>> oVirt.
>>>>>>
>>>>>> I noticed on your deployment machines 2 and 3 have the same IP. Might
>>>>>> want to fix that before deploying
>>>>>>
>>>>>> Happy trails
>>>>>> ~D
>>>>>>
>>>>>>
>>>>>> On Tue, Sep 12, 2017 at 2:00 PM, Tailor, Bharat <
>>>>>> bha...@synergysystemsindia.com> wrote:
>>>>>>
>>>>>>> Hi Charles,
>>>>>>>
>>>>>>> Thank you so much to share a cool stuff with us.
>>>>>>>
>>>>>>> My doubts are still not cleared.
>>>>>>>
>>>>>>>
>>>>>>>1. What If I have only single Physical network adaptor? Can't I
>>>>>>> 

Re: [ovirt-users] Hyper converged network setup

[Donny Davis]

Bharat,

Are you using DNS for host names or /etc/hosts

I personally place the engines hostname with ip address in /etc/hosts on
all the hypervisors in case my DNS services go down.
I also put the hypervisors in /etc/hosts too

Hope this helps.

On Wed, Sep 13, 2017 at 6:04 AM, Yaniv Kaul <yk...@redhat.com> wrote:

>
>
> On Wed, Sep 13, 2017 at 8:42 AM, Tailor, Bharat <
> bha...@synergysystemsindia.com> wrote:
>
>> Hi Charles & Donny,
>>
>> Thank you so much.
>>
>> @Donny my 3rd node's IP is 192.168.100.17(Mentioned wrong in above mail).
>> I was trying to install ovirt ova on test2.localdomain. I've cleared all
>> the steps and at last I got a message like "Engine is still unreachable".
>> Kindly help me to troubleshoot it.
>>
>> @Ykaul How can I register myself in mailing list?
>>
>
> http://lists.ovirt.org/mailman/listinfo/users
>
> Y.
>
>
>>
>> Regrards
>> Bharat Kumar
>>
>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>> Udaipur (Raj.)
>> 313001
>> Mob: +91-9950-9960-25
>>
>>
>>
>>
>>
>> On Wed, Sep 13, 2017 at 3:06 AM, Charles Kozler <ckozler...@gmail.com>
>> wrote:
>>
>>> Bharat -
>>>
>>> 1. Yes. Will need to configure switch port as a trunk and setup your
>>> VLANs and VLAN ID's
>>> 2. Yes
>>> 3. You can still access the hosts. The engine itself crashing or being
>>> down wont stop your VMs or hosts or anything (unless fencing). You can use
>>> virsh
>>> 4. My suggestion here is start immediately after a fresh server install
>>> and yum update. Installer does a lot and checks a lot and wont like things:
>>> ex - you setup ovirtmgmt bridged network yourself
>>> 5. Yes. See #1, usually what I do is each ovirt node I have I set an IP
>>> of .5, then .6, and so on. This way I can be sure my network itself is
>>> working before adding a VM and attaching that NIC to it
>>>
>>> On Tue, Sep 12, 2017 at 4:41 PM, Donny Davis <do...@fortnebula.com>
>>> wrote:
>>>
>>>> 1. Yes, you can do this
>>>> 2. Yes, In linux it's called bonding and this can be done from the UI
>>>> 3. You can get around using the Engine machine if required with virsh
>>>> or virt-manager - however I would just wait for the manager to migrate and
>>>> start on another host in the cluster
>>>> 4.  The deployment will take care of everything for you. You just need
>>>> an IP
>>>> 5. Yes, you can use vlans or virtual networking(NSXish) called OVS in
>>>> oVirt.
>>>>
>>>> I noticed on your deployment machines 2 and 3 have the same IP. Might
>>>> want to fix that before deploying
>>>>
>>>> Happy trails
>>>> ~D
>>>>
>>>>
>>>> On Tue, Sep 12, 2017 at 2:00 PM, Tailor, Bharat <
>>>> bha...@synergysystemsindia.com> wrote:
>>>>
>>>>> Hi Charles,
>>>>>
>>>>> Thank you so much to share a cool stuff with us.
>>>>>
>>>>> My doubts are still not cleared.
>>>>>
>>>>>
>>>>>1. What If I have only single Physical network adaptor? Can't I
>>>>>use it for management network & production network both.
>>>>>2. If I have two Physical network adaptor, Can I configure NIC
>>>>>teaming as like Vmware ESXi.
>>>>>3. What If my ovirt machine fails during production period? In
>>>>>vmware we can access ESXi hosts and VM without Vcenter and do all the
>>>>>stuffs. Can we do the same with Ovirt & KVM.
>>>>>4. To deploy ovirt engine VM, what kind of configuration I'll have
>>>>>to do on network adaptors? (eg. just configure IP on physical network 
>>>>> or
>>>>>have to create br0 for it.)
>>>>>5. Can I make multiple VM networks for vlan configuration?
>>>>>
>>>>>
>>>>> Regrards
>>>>> Bharat Kumar
>>>>>
>>>>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>>>>> Udaipur (Raj.)
>>>>> 313001
>>>>> Mob: +91-9950-9960-25
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> On Tue, Sep 12, 2017 at 9:30 PM, Charles Kozler <ckozler...@gmail.com>
>>>>> wrote:
>>>>>
>>

Re: [ovirt-users] Hyper converged network setup

[Donny Davis]

1. Yes, you can do this
2. Yes, In linux it's called bonding and this can be done from the UI
3. You can get around using the Engine machine if required with virsh or
virt-manager - however I would just wait for the manager to migrate and
start on another host in the cluster
4.  The deployment will take care of everything for you. You just need an IP
5. Yes, you can use vlans or virtual networking(NSXish) called OVS in
oVirt.

I noticed on your deployment machines 2 and 3 have the same IP. Might want
to fix that before deploying

Happy trails
~D


On Tue, Sep 12, 2017 at 2:00 PM, Tailor, Bharat <
bha...@synergysystemsindia.com> wrote:

> Hi Charles,
>
> Thank you so much to share a cool stuff with us.
>
> My doubts are still not cleared.
>
>
>1. What If I have only single Physical network adaptor? Can't I use it
>for management network & production network both.
>2. If I have two Physical network adaptor, Can I configure NIC teaming
>as like Vmware ESXi.
>3. What If my ovirt machine fails during production period? In vmware
>we can access ESXi hosts and VM without Vcenter and do all the stuffs. Can
>we do the same with Ovirt & KVM.
>4. To deploy ovirt engine VM, what kind of configuration I'll have to
>do on network adaptors? (eg. just configure IP on physical network or have
>to create br0 for it.)
>5. Can I make multiple VM networks for vlan configuration?
>
>
> Regrards
> Bharat Kumar
>
> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
> Udaipur (Raj.)
> 313001
> Mob: +91-9950-9960-25
>
>
>
>
>
> On Tue, Sep 12, 2017 at 9:30 PM, Charles Kozler 
> wrote:
>
>>
>> Interestingly enough I literally just went through this same thing with a
>> slight variation.
>>
>> Note to the below: I am not sure if this would be considerd best practice
>> or good for something long term support but I made due with what I had
>>
>> I had 10Gb cards for my storage network but no 10Gb switch, so I direct
>> connected them with some fun routing and /etc/hosts settings. I also didnt
>> want my storage network on a routed network (have firewalls in the way of
>> VLANs) and I wanted the network separate from my ovirtmgmt - and, as I
>> said, had no switches for 10Gb. Here is what you need at a bare minimum.
>> Adapt / change it as you need
>>
>> 1 dedicated NIC on each node for ovirtmgmt. Ex: eth0
>>
>> 1 dedicated NIC to direct connect node 1 and node 2 - eth1 node1
>> 1 dedicated NIC to direct connect node 1 and node 3 - eth2 node1
>>
>> 1 dedicated NIC to direct connect node 2 and node 1 - eth1 node2
>> 1 dedicated NIC to direct connect node 2 and node 3 - eth2 node2
>>
>> 1 dedicated NIC to direct connect node 3 and node 1 - eth1 node3
>> 1 dedicated NIC to direct connect node 3 and node 2 - eth2 node3
>>
>> You'll need custom routes too:
>>
>> Route to node 3 from node 1 via eth2
>> Route to node 3 from node 2 via eth2
>> Route to node 2 from node 3 via eth2
>>
>> Finally, entries in your /etc/hosts which match to your routes above
>>
>> Then, advisably, a dedicated NIC per box for VM network but you can
>> leverage ovirtmgmt if you are just proofing this out
>>
>> At this point if you can reach all of your nodes via this direct connect
>> IPs then you setup gluster as you normally would referencing your entries
>> in /etc/hosts when you call "gluster volume create"
>>
>> In my setup, as I said, I had 2x 2 port PCIe 10Gb cards per server so I
>> setup LACP as well as you can see below
>>
>> This is what my Frankenstein POC looked like: http://i.imgur.com/iURL9
>> jv.png
>>
>> You can optionally choose to setup this network in ovirt as well (and add
>> the NICs to each host) but dont configure it as a VM network. Then you can
>> also, with some other minor tweaks, use these direct connects as migration
>> networks rather than ovirtmgmt or VM network
>>
>> On Tue, Sep 12, 2017 at 9:12 AM, Tailor, Bharat <
>> bha...@synergysystemsindia.com> wrote:
>>
>>> Hi,
>>>
>>> I am trying to deploy 3 hosts hyper converged setup.
>>> I am using Centos and installed KVM on all hosts.
>>>
>>> Host-1
>>> Hostname - test1.localdomain
>>>  eth0 - 192.168.100.15/24
>>> GW - 192.168.100.1
>>>
>>> Hoat-2
>>> Hostname - test2.localdomain
>>> eth0 - 192.168.100.16/24
>>> GW - 192.168.100.1
>>>
>>> Host-3
>>> Hostname - test3.localdomain
>>> eth0 - 192.168.100.16/24
>>> GW - 192.168.100.1
>>>
>>> I have created two gluster volume "engine" & "data" with replica 3.
>>> I have add fqdn entry in /etc/hosts for all host for DNS resolution.
>>>
>>> I want to deploy Ovirt engine self hosted OVA to manage all the hosts
>>> and production VM and my ovirt-engine VM should have HA enabled.
>>>
>>> I found multiple docs over internet to deply Self-hosted-engine-ova but
>>> I don't what kind of network configuration I've to do on Centos network
>>> card & KVM. As KVM docs suggest that I've to create a bridge network for
>>> Pnic to Vnic bridge. If I configure a bridge br0 for eth0 bridge that I

Re: [ovirt-users] Hyperconverged Setup and Gluster healing

[Donny Davis]

I personally want three copies of my data, more akin to RAID 6(ish) so in
my case replica 3 makes perfect sense.

On Mon, Apr 24, 2017 at 11:34 AM, Denis Chaplygin 
wrote:

> Hello!
>
> On Mon, Apr 24, 2017 at 5:08 PM, FERNANDO FREDIANI <
> fernando.fredi...@upx.com> wrote:
>
>> Hi Denis, understood.
>> What if in the case of adding a fourth host to the running cluster, will
>> the copy of data be kept only twice in any of the 4 servers ?
>>
>
> replica volumes can be build only from 2 or 3 bricks. There is no way to
> make a replica volume from a 4 bricks.
>
> But you may combine distributed volumes and replica volumes [1]:
>
> gluster volume create test-volume replica 2 transport tcp server1:/b1 
> server2:/b2 server3:/b3 server4:/b4
>
> test-volume would be like a RAID10 - you will have two replica volumes
> b1+b2 and b3+b4 combined into a single distributed volume. In that case you
> will
> have only two copies of your data. Part of your data will be stored twice
> on b1 and b2 and another one part will be stored twice at b3 and b4
> You will be able to extend that distributed volume by adding new replicas.
>
>
> [1] https://gluster.readthedocs.io/en/latest/Administrator%
> 20Guide/Setting%20Up%20Volumes/#creating-distributed-replicated-volumes
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Software Raid not possible in oVirt Node 4.0 ?

[Donny Davis]

That looks like an anaconda issue, can you wipe the start and end of your
disks with dd and try again
On Jul 6, 2016 5:12 AM, "Roger Meier"  wrote:

> Hi,
>
> I defined software raid in the storage stage during the installation. How
> can i access the logfiles? Because
> when i try to switch via ctrl+alt i don't find any shell prompt like on
> the normal installation of CentOS, etc.
> I can try to do a video, and strip it down. Which parts do you need from
> the installation, only the part when
> i create the partitions?
>
> Greetings
> Roger
>
> On 03.07.2016 11:10, Yaniv Dary wrote:
>
> Did you define software raid in the storage stage of the installation?
> Can you attach logs and maybe a short vid of what you are trying to do?
>
> Yaniv Dary
> Technical Product Manager
> Red Hat Israel Ltd.
> 34 Jerusalem Road
> Building A, 4th floor
> Ra'anana, Israel 4350109
>
> Tel : +972 (9) 7692306
> 8272306
> Email: yd...@redhat.com
> IRC : ydary
>
>
> On Fri, Jul 1, 2016 at 11:39 AM, Roger Meier 
> wrote:
>
>> Hello together,
>>
>> I tried to install the new oVirt Node 4.0 from:
>> http://resources.ovirt.org/pub/ovirt-4.0/iso/ovirt-node-ng-installer/
>> Mostly of the configuration in the installer is the default settings,
>> expect that i wan't to setup a software raid 1,
>> with the two disks on the server. I have done this before with CentOS
>> 7.3 installation and this parition setup worked as expected. But here
>> with the Node Installer , it failed.
>>
>> A screenshot of the Error message attached. Is this not supported at the
>> moment?  Or is their a special setting, which i missed for the Node 4.0
>> ? Or is this perhaps a bug? For reporting
>> https://bugzilla.redhat.com/enter_bug.cgi?product=ovirt ?
>>
>> Greetings
>> Roger Meier
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] free-IPA Multi-Master Authentication Problem

[Donny Davis]

How did you setup the authentication. DId you use AAA or
engine-manage-domains ?

Do you *have* to use kerberos, or can you just use ldap?

If you have no requirement to use kerberos, then I would just use simple
AAA ldap.

How are you load balancing the IPA servers?  Does fail over work for other
things? IE client machines connected to the IPA realm?

On Tue, Jun 7, 2016 at 9:49 AM, Kilian Ries  wrote:

> Indeed there was a faulty record for the IPA2 - i corrected that. Now the
> engine-log shows the correct ldap-address:
>
> ###
>
> 2016-06-07 15:20:43,940 ERROR
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapSearchExceptionHandler]
> (ajp--127.0.0.1-8702-3) Ldap authentication failed. Please check that the
> login name , password and path are correct.
> 2016-06-07 15:20:43,946 ERROR
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher]
> (ajp--127.0.0.1-8702-3) Failed ldap search server ldap://
> auth02.intern.eu:389 using user kr...@intern.eu due to Kerberos error.
> Please check log for further details.. We should not try the next server
> 2016-06-07 15:20:43,951 ERROR
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapAuthenticateUserCommand]
> (ajp--127.0.0.1-8702-3) Failed authenticating user: kries to domain
> intern.eu. Ldap Query Type is getUserByName
> 2016-06-07 15:20:43,954 ERROR
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapAuthenticateUserCommand]
> (ajp--127.0.0.1-8702-3) Kerberos error. Please check log for further
> details.
> 2016-06-07 15:20:43,957 ERROR
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase]
> (ajp--127.0.0.1-8702-3) Failed to run command LdapAuthenticateUserCommand.
> Domain is intern.eu. User is kries.
> 2016-06-07 15:20:43,961 INFO
> [org.ovirt.engine.core.bll.aaa.LoginBaseCommand] (ajp--127.0.0.1-8702-3)
> Cant login user "kries" with authentication profile "intern.eu" because
> the authentication failed.
> 2016-06-07 15:20:43,968 ERROR
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (ajp--127.0.0.1-8702-3) Correlation ID: null, Call Stack: null, Custom
> Event ID: -1, Message: User kr...@intern.eu failed to log in.
> 2016-06-07 15:20:43,971 WARN
> [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand]
> (ajp--127.0.0.1-8702-3) CanDoAction of action LoginAdminUser failed for
> user kr...@intern.eu. Reasons: USER_FAILED_TO_AUTHENTICATE
>
> ###
>
> I'm still not able to login to oVirt via IPA2
>
> krb5kdc and dirsrv-acces Log don't show anything new.
>
> 
> Von: Ondra Machacek 
> Gesendet: Montag, 6. Juni 2016 14:31
> An: Kilian Ries; users@ovirt.org
> Betreff: Re: AW: [ovirt-users] free-IPA Multi-Master Authentication Problem
>
> It looks fine, thanks.
> Looking at the oVirt log I see IPA server FQDN:
>
>   auth02.intern.customer-virt.eu.intern.customer-virt.eu
>
> Looking at krb realm, I guess this should be -
> auth02.intern.customer-virt.eu
>
> Do you use SRV records or did you pass --ldap-servers to manage-domains?
> If SRV, then you maybe misconfigured DNS, if --ldap-servers, you should
> edit configuration with proper FQDN.
>
> On 06/06/2016 11:00 AM, Kilian Ries wrote:
> > Hello,
> >
> > here is the krb5kdc log from IPA2:
> >
> >
> > ###
> > Jun 03 17:18:22 auth02.intern.customer-virt.eu krb5kdc[1283](info):
> AS_REQ (1 etypes {23}) 192.168.210.45: NEEDED_PREAUTH:
> kr...@intern.customer-virt.eu for krbtgt/
> intern.customer-virt...@intern.customer-virt.eu, Additional
> pre-authentication required
> > Jun 03 17:18:22 auth02.intern.customer-virt.eu krb5kdc[1283](info):
> closing down fd 12
> > Jun 03 17:18:22 auth02.intern.customer-virt.eu krb5kdc[1283](info):
> AS_REQ (1 etypes {23}) 192.168.210.45: ISSUE: authtime 1464967102, etypes
> {rep=23 tkt=18 ses=23}, kr...@intern.customer-virt.eu for krbtgt/
> intern.customer-virt...@intern.customer-virt.eu
> > Jun 03 17:18:22 auth02.intern.customer-virt.eu krb5kdc[1283](info):
> closing down fd 12
> > Jun 03 17:18:40 auth02.intern.customer-virt.eu krb5kdc[1283](info):
> AS_REQ (1 etypes {23}) 192.168.210.45: NEEDED_PREAUTH:
> kr...@intern.customer-virt.eu for krbtgt/
> intern.customer-virt...@intern.customer-virt.eu, Additional
> pre-authentication required
> > Jun 03 17:18:40 auth02.intern.customer-virt.eu krb5kdc[1283](info):
> closing down fd 12
> > Jun 03 17:18:40 auth02.intern.customer-virt.eu krb5kdc[1284](info):
> AS_REQ (1 etypes {23}) 192.168.210.45: ISSUE: authtime 1464967120, etypes
> {rep=23 tkt=18 ses=23}, kr...@intern.customer-virt.eu for krbtgt/
> intern.customer-virt...@intern.customer-virt.eu
> > Jun 03 17:18:40 auth02.intern.customer-virt.eu krb5kdc[1284](info):
> closing down fd 12
> > Jun 03 17:18:40 auth02.intern.customer-virt.eu krb5kdc[1283](info):
> AS_REQ (1 etypes {23}) 192.168.210.45: NEEDED_PREAUTH:
> kr...@intern.customer-virt.eu for krbtgt/
> intern.customer-virt...@intern.customer-virt.eu, Additional

Re: [ovirt-users] VDI experience to share?

[Donny Davis]

You can also use ansible to provision your 802.1x network gear along with
the client machines, this way everything is provisioned the same way every
time.

On Wed, Jun 15, 2016 at 6:21 AM, Donny Davis <do...@fortnebula.com> wrote:

> Do you have a requirement for 3d acceleration on the VDI guests?
>
> On Wed, Jun 15, 2016 at 6:18 AM, Giorgio Bersano <
> giorgio.bers...@gmail.com> wrote:
>
>> Hi everyone,
>> I've been asked to deploy a VDI solution based on our oVirt
>> infrastructure.
>> What we have in production is a 3.6 manager (standalone, not HE) with
>> a 3.5 cluster (CentOS 6) and a 3.6 cluster (CentOS 7), iSCSI storage,
>> fully redundant networking.
>>
>> What is not clear to me is the client side, especially because we have
>> been asked to implement a thin client solution but I've been almost
>> unable to find suitable devices.
>>
>> Is there anyone in this list willing to share his/her experience on
>> this topic? Probably my search skill is low but I've only seen
>> references to IGEL. Other brands?
>> There is another strong requirement: our network infrastructure makes
>> use of 802.1x to authenticate client devices and it would be highly
>> advisable to respect that constraint.
>>
>> TIA,
>> Giorgio.
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VDI experience to share?

[Donny Davis]

Do you have a requirement for 3d acceleration on the VDI guests?

On Wed, Jun 15, 2016 at 6:18 AM, Giorgio Bersano 
wrote:

> Hi everyone,
> I've been asked to deploy a VDI solution based on our oVirt infrastructure.
> What we have in production is a 3.6 manager (standalone, not HE) with
> a 3.5 cluster (CentOS 6) and a 3.6 cluster (CentOS 7), iSCSI storage,
> fully redundant networking.
>
> What is not clear to me is the client side, especially because we have
> been asked to implement a thin client solution but I've been almost
> unable to find suitable devices.
>
> Is there anyone in this list willing to share his/her experience on
> this topic? Probably my search skill is low but I've only seen
> references to IGEL. Other brands?
> There is another strong requirement: our network infrastructure makes
> use of 802.1x to authenticate client devices and it would be highly
> advisable to respect that constraint.
>
> TIA,
> Giorgio.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] how to build and install ovirt to the Product Environment

[Donny Davis]

There is no sense in building the packages yourself, when the oVirt
community takes care of that for you. Especially if you are talking about a
production workload.

On Tue, Jun 14, 2016 at 2:57 AM, Martin Perina  wrote:

>
>
> On Tue, Jun 14, 2016 at 2:26 AM, Dewey Du  wrote:
>
>> Yes, RPMs runs well. But I want to build from source and install it on
>> production also.
>>
>
> ​Hi,
>
> in that case I'd recommend building RPMs from source and install them. But
> be aware that engine is only one part whole set of RPMs which oVirt project
> contains. Anyway if you want to build an RPM from source, please take a
> look at README.adoc in root directory in short here are steps:
>
>   make dist
>   rpmbuild -ts ovirt-engine-X.Y.Z.tar.gz
>   yum-builddep   #  should be replace with real name of
> .src.rpm from previous step
>   rpmbuild -tb ​
>
> ​ovirt-engine-X.Y.Z.tar.gz
>
> Created RPMs are stored in $HOME/rpmbuild/RPMS
>
>
> Be aware that if you want to install those RPMs you will still need other
> RPMs from oVirt project like otopi, ovirt-host-deploy, ovirt-setup-lib,
> ovirt-engine-extension-aaa-jdbc an others. Building all of them is quite
> huge task, so that's why I recomended you RPM installation.
>
> Martin Perina
>
> ​
>
>>
>> On Tue, Jun 14, 2016 at 12:36 AM, Martin Perina 
>> wrote:
>>
>>>
>>>
>>> On Mon, Jun 13, 2016 at 6:27 PM, Nir Soffer  wrote:
>>>
 For such issues better use de...@ovirt.org mailing list:
 http://lists.ovirt.org/mailman/listinfo/devel

 Nir

 On Mon, Jun 13, 2016 at 6:58 PM, Dewey Du  wrote:
 > To build and install ovirt-engine at your home folder under
 ovirt-engine
 > directory execute the folllowing command:
 >
 > $ make clean install-dev PREFIX="${PREFIX}"
 >
 > What about installing a Product Environment. Is the folllowing command
 > right?

>>>
>>> ​Do you want to use oVirt in production? If so, then I'd highly
>>> recommend to use latest stable version installed from RPMs. More info can
>>> be found at
>>>
>>> http://www.ovirt.org/download/
>>>
>>> Martin Perina
>>> ​
>>>
>>>
 >
 > $ make clean install PREFIX="${PREFIX}"
 >
 >
 > ___
 > Users mailing list
 > Users@ovirt.org
 > http://lists.ovirt.org/mailman/listinfo/users
 >
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

>>>
>>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 3.6.1 with FreeIPA Auth domain performance

[Donny Davis]

I use Freeipa without issue on AAA Ldap

Here is a simple write up that may help you understand how aaa ldap works.
This is out dated, so don't just copy and paste however it will help
you get the gist

https://ipv6cloud.wordpress.com/2014/12/16/ovirt-simple-ldap-aaa/

On Fri, Jan 22, 2016 at 2:08 PM, Justin Bushey <jbus...@inforelay.com>
wrote:

> Ondra,
>
> Thanks again. You've definitely saved me from spending too much time going
> down a bunny hole.
>
> -- Justin
>
> On Fri, Jan 22, 2016 at 4:35 AM, Ondra Machacek <omach...@redhat.com>
> wrote:
>
>> Hi,
>>
>> the best thing you can do is to migrate to new AAA ldap[1],
>> as anyway you will have to do so in 4.0, as manage-domains
>> will be removed, so I think better invest time to migration,
>> then to searching for root cause. We will be happy to help
>> you with migration. You can also try migration tool[2].
>>
>> Ondra
>>
>> [1]
>> https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README
>> [2]
>> https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases
>>
>>
>> On 01/22/2016 09:37 AM, Justin Bushey wrote:
>>
>>> Hello,
>>>
>>> I just wanted to see if anyone else has seen issues with using FreeIPA
>>> as an authentication domain with oVirt 3.6.1. Specifically, I'm seeing
>>> extremely slow performance when authenticating as an IPA user, between
>>> 5-10 minutes to get logged into the UI. On the KDC side I'm seeing
>>> ticket requests from the oVirt host, which succeed and are repeated.
>>> Eventually authentication succeeds to the Web UI.
>>>
>>> The IPA domain was added using `engine-manage-domains` with the IPA
>>> provider option. I could configure direct LDAP authentication if
>>> absolutely need be, but this is really bugging me.
>>>
>>> Google hasn't turned up any similar issues so I wanted to check if
>>> anyone else has seen anything like this. I can post logs tomorrow if
>>> anyone wants to assist me in troubleshooting ;)
>>>
>>> Thanks,
>>>
>>> Justin Bushey
>>> InfoRelay Online Systems, Inc.
>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Hosted Engine CPU Type Change

[Donny Davis]

How would you go about changing the cpu_type setting in HE after it is
installed

-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] HE (3.6) on gluster storage, chicken and egg status

[Donny Davis]

I would say you would be much better off picking two hosts to do your HE on
and setting up drdb for the HE storage. You will have fewer problems with
your HE.


On Thu, Dec 31, 2015 at 1:41 AM, Sahina Bose <sab...@redhat.com> wrote:

>
>
> On 12/28/2015 12:43 AM, Roy Golan wrote:
>
>
>
> On Sun, Dec 27, 2015 at 7:07 PM, Fil Di Noto <fdin...@gmail.com> wrote:
>
>> I've managed to get hosted-engine running but could use some direction
>> for what comes next.
>>
>> Summary:
>> 4 Hosts, CentOS 7.2, oVirt 3.6 (from ovirt.org repo)
>> All hosts are in default/default datacenter/cluster
>> All 4 hosts are running glusterd
>> HE is installed on glusterfs volume, replica 3, on hosts 1,2, and 3. (
>> started with replica 4, but removed 4th brick to satisfy HE --deploy)
>>
>> Status:
>> All hosts are active
>> Datacenter is not initialized
>>
>> Issues:
>> Attach hosted_storage to Default datacenter fails
>> New volume dialog doesn't allow me to select a datacenter (list is empty)
>>
>> Questions:
>> 1. Why doesn't replica 4 work as a glusterfs volume, is this just
>> because of the installer or is there a more fundamental reason?
>>
>
> 3 way replica is the officially supported replica count for VM store use
> case. If you wish to work with replica 4, you can update the
> supported_replica_count in vdsm.conf
>
> 2. I assume the reason I can't create new volumes is because I don't
>> have a data storage domain configured yet. I want all of my data
>> storage to be glusterfs. How do I escape this chicken/egg puzzle?
>>
>
>  No chicken and egg here I think. You want a volume to be used as your
> master data domain and creating a new volume in a new gluster-cluster is
> independent of your datacenter status.
>
> You mentioned your hosts are on default cluster - so make sure your
> cluster support gluster service (you should have picked gluster as a
> service during engine install)
>
>
>
> If you mean, creating new gluster volumes - you need to make sure the
> gluster service is enabled on the Default cluster. The cluster that HE
> creates, has only virt service enabled by default. Engine should have been
> installed in "Both" mode like Roy mentioned.
>
>
>
>
>
>
> 3. What question should I be asking that I am not?
>>
>> Thanks
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
>
> ___
> Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Corruped disks

[Donny Davis]

What is the storage solution you are using?

On Fri, Nov 27, 2015 at 1:13 AM, Koen Vanoppen <vanoppen.k...@gmail.com>
wrote:

> If we have this behaviour again, I'll let you know with logs. The OS is
> always Centos. But let us just wait, until it happens again so I can send
> logs with it.
> Thanks in advance!
>
> Kind regards,
>
> Koen
>
> On 26 November 2015 at 16:39, Yaniv Dary <yd...@redhat.com> wrote:
>
>> We will need logs and a bug to track the issue. Also info on the OS of
>> the guest will help.
>>
>> Yaniv Dary
>> Technical Product Manager
>> Red Hat Israel Ltd.
>> 34 Jerusalem Road
>> Building A, 4th floor
>> Ra'anana, Israel 4350109
>>
>> Tel : +972 (9) 7692306
>> 8272306
>> Email: yd...@redhat.com
>> IRC : ydary
>>
>>
>> On Wed, Oct 14, 2015 at 3:42 PM, Koen Vanoppen <vanoppen.k...@gmail.com>
>> wrote:
>>
>>> Dear all,
>>>
>>> lately we are experience some strange behaviour on our vms...
>>> Every now and then we have disks that went corrupt. Is there a chance
>>> that ovirt is the issue here or...? It happens (luckily) on our DEV/UAT
>>> cluster. Since the last 4 weeks, we already had 6 vm's that went totaly
>>> corrupt...
>>>
>>> Kind regards,
>>>
>>> Koen
>>>
>>> _______
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] excessively long log in time

[Donny Davis]

You can check your engine logs in /var/log/ovirt-engine/engine.log for
reasons why its still taking so long to login. 

On Fri, 2015-11-13 at 09:16 -0500, Jeb Baxley wrote:
> Hey Everyone,
> 
> Thanks for all of your help.  i found biggest part of the problem. 
> Before I used AAA-ldap-setup, I used engine-manage-domains.  This was
> was creating a conflict, essentially the managed-domain wass going
> first and after it timed-out it would use the aaa-ldap connection. 
> After I removed the managed-domain and restart the ovirt-engine, the
> logins started to work much much faster.  it's around 10 secs now. 
> Still would prefer to be less than a second, but way better than a
> minute.
> 
>  
>       Jeb Baxleyabout.me/jeb.baxley
>   
>  
> 
> On Thu, Nov 12, 2015 at 7:30 PM, Jeb Baxley <jeb.bax...@gmail.com>
> wrote:
> > I used AAA, specificaly the aaa-ldap-setup script.  it went very
> > quickly and the login check and the search check went very quickly
> > - less than a second.
> > 
> > the engine ( the ovirt installation that manages the ovirt nodes)
> > can resolve itself.  I just did a nslookup and it pulls from the
> > IPA DNS.  
> > 
> >  
> >     Jeb Baxleyabout.me/jeb.baxley
> >     
> >  
> > 
> > On Thu, Nov 12, 2015 at 4:48 PM, Alexander Wels <aw...@redhat.com>
> > wrote:
> > > On Thursday, November 12, 2015 04:46:43 PM Donny Davis wrote:
> > > > Are you using AAA or manage-domains?
> > > >
> > > 
> > > Also are you 150% sure your engine can resolve itself (Maybe DNS
> > > issue or
> > > /etc/hosts not configured right?)
> > > 
> > > > On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote:
> > > > > Hey Everyone,
> > > > >
> > > > > I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really
> > > long
> > > > > login times.  I know it's not my IPA servers, as login times
> > > are
> > > > > farily quick for the servers that are attached to the domain.
> > > > >
> > > > > I can even do a kinit very quickly on all of the ovirt
> > > nodes.  So any
> > > > > ideas?  Where can I find logs about IPA logins for ovirt?
> > > > >
> > > > >
> > > > >     >  >    > Jeb Baxleyabout.me/jeb.baxley
> > > > >
> > > > >  >  >       >       >
> > > > >
> > > > > ___
> > > > > Users mailing list
> > > > > Users@ovirt.org
> > > > > http://lists.ovirt.org/mailman/listinfo/users
> > > 
> > > 
> > 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] excessively long log in time

[Donny Davis]

Are you using AAA or manage-domains?
On Thu, 2015-11-12 at 15:48 -0500, Jeb Baxley wrote:
> Hey Everyone,
> 
> I'm using FreeIPA with Ovirt 3.6 and I'm seeing some really long
> login times.  I know it's not my IPA servers, as login times are
> farily quick for the servers that are attached to the domain.
> 
> I can even do a kinit very quickly on all of the ovirt nodes.  So any
> ideas?  Where can I find logs about IPA logins for ovirt?
>  
>   >  >> Jeb Baxleyabout.me/jeb.baxley
>  >>   >   >   
>  
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] migrate hosted engine on NFS to FC on oVirt 3.6

[Donny Davis]

You can always detach a domain, and then import it if you create a new
hosted engine on the FC storage. All you vm data should be preserved.

On Sat, Nov 7, 2015 at 7:53 AM, Paul Groeneweg | Pazion <p...@pazion.nl>
wrote:

> Is there a way to migrate an hosted engine running on NFS to our FC SAN
> Datastorage.
>
> The Datastorage is now already used with the VMS, so we would like to move
> the hosted engine along the other VMs.
>
> If migration is not possible, is there an option to create a new hosted
> engine on our FC SAN with preserving the current VMs?
>
> Best Regards,
> Paul Groeneweg
>
>  ***disclaimer***
> "This e-mail and any attachments thereto may contain information which is
> confidential and/or protected by intellectual property rights and are
> intended for the sole use of the recipient(s) named above. Any use of the
> information contained herein (including, but not limited to, total or
> partial reproduction, communication or distribution in any form) by persons
> other than the designated recipient(s) is prohibited. If you have received
> this e-mail in error, please notify the sender either by telephone or by
> e-mail and delete the material from any computer. Thank you for your
> cooperation."
> --
> Met vriendelijke groeten,
>
> Paul Groeneweg
> Pazion
> Webdevelopment  -  Hosting  -  Apps
>
> T +31 26 3020038
> M +31 614 277 577
> E  p...@pazion.nl
>
>  ***disclaimer***
> "This e-mail and any attachments thereto may contain information which is
> confidential and/or protected by intellectual property rights and are
> intended for the sole use of the recipient(s) named above. Any use of the
> information contained herein (including, but not limited to, total or
> partial reproduction, communication or distribution in any form) by persons
> other than the designated recipient(s) is prohibited. If you have received
> this e-mail in error, please notify the sender either by telephone or by
> e-mail and delete the material from any computer. Thank you for your
> cooperation."
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] feedback-on-oVirt-engine-3.5.5-1.el6

[Donny Davis]

Just use ipmilan, it works for me

On Sat, Nov 7, 2015 at 2:34 AM, zengguitian <zengguit...@qianhezi.cn> wrote:

> dear
>hi, i have no i dea why my ovirt-engine no have the power manager
> for  "drac7" to choise ?
>
> --
> zengguitian
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Support for QinQ

[Donny Davis]

You would be better off using something like openvswtich and vxlan's for
your purpose. oVirt does support OpenStack Networking... which will give
you what you are looking for in a lab env... tenant networks

On Wed, Oct 7, 2015 at 12:27 PM, Sigbjorn Lie <sigbj...@nixtra.com> wrote:

> Ok. Thanks for your quick response. Sorry for my late reply back :)
>
> I had a request to have multiple concurrent labs of testing end point
> equipment which required to see a vlan trunk having the exact same vlan
> numbers across all the labs. The vlans coming from each lab had to be
> mapped to different vms. The different lab networks could not be joined.
> This required adding the vlan trunk from each lab into a qinq trunk which
> connects to the same hypervisor. Or using networking equipment having the
> ability to rewrite the vlans of the lab vlan trunks into other vlan numbers
> before they reach the hypervisor.
>
>
> Regards,
> Siggi
>
>
>
> Den 7. september 2015 16:27:33 CEST, skrev Dan Kenigsberg <
> dan...@redhat.com>:
>>
>> On Mon, Sep 07, 2015 at 02:45:04PM +0200, Sigbjorn Lie wrote:
>>
>>>  Hi list,
>>>
>>>  I've been looking around the web for QinQ support in Ovirt. I see that 
>>> QinQ is supported in CentOS
>>>  6.x and above. However I cannot see any documented support in Ovirt. I've 
>>> come across the page
>>>  below which details QinQ as a future feature.
>>>
>>>  Is QinQ still a future feature, or is it possible to use QinQ with Ovirt 
>>> today somehow?
>>>
>>>  http://www.ovirt.org/Networking
>>>
>>
>> I'm afraid we do not support QinQ, and it's not on our immediate
>> roadmap.
>>
>> However, we would love to understand your use case (do you want to
>> tunnel VM traffic within QinQ? why?)
>>
>> I believe you can use network custom properties and
>> before/after_network_setup
>> hookpoint in order to tinker with this
>> yourself.
>>
>> Regards,
>> Dan.
>>
>>
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity.
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] LDAP authentication with TLS

[Donny Davis]

What are you using as the var.server parameter... does it match the cert...

On Wed, Oct 7, 2015 at 2:43 PM, Alon Bar-Lev <alo...@redhat.com> wrote:

>
> Summary:
> Using legacy ldaps protocol the user's expected certificate was retrieved.
> Using startTLS a different and a self signed certificate was retrieved.
> Two different identities via the two interfaces which should have returned
> a single identity.
>
> - Original Message -
> > From: "Alon Bar-Lev" <alo...@redhat.com>
> > To: "Steve Dainard" <sdain...@spd1.com>
> > Cc: "users" <users@ovirt.org>
> > Sent: Wednesday, October 7, 2015 12:01:59 AM
> > Subject: Re: [ovirt-users] LDAP authentication with TLS
> >
> > Hi,
> >
> > Can you please send me the profile, the keystore you created and the
> output
> > of:
> >
> > openssl s_client -connect server:636 -showcerts < /dev/null
> >
> > Thanks!
> >
> > - Original Message -
> > > From: "Steve Dainard" <sdain...@spd1.com>
> > > To: "users" <users@ovirt.org>
> > > Sent: Tuesday, October 6, 2015 11:50:41 PM
> > > Subject: [ovirt-users] LDAP authentication with TLS
> > >
> > > Hello,
> > >
> > > Trying to configure Ovirt 3.5.3.1-1.el7.centos for LDAP authentication.
> > >
> > > I've configured the appropriate aaa profile but I'm getting TLS errors
> > >  when I search for users to add via ovirt:
> > >
> > > The connection reader was unable to successfully complete TLS
> > > negotiation: javax_net_ssl_SSLHandshakeException:
> > > sun_security_validator_ValidatorException: No trusted certificate
> > > found caused by sun_security_validator_ValidatorException: No trusted
> > > certificate found
> > >
> > > I added the external CA certificate using keytool as per
> > > https://github.com/oVirt/ovirt-engine-extension-aaa-ldap with
> > > appropriate adjustments of course:
> > >
> > > keytool -importcert -noprompt -trustcacerts -alias myrootca \
> > >-file myrootca.pem -keystore myrootca.jks -storepass changeit
> > >
> > > I know this certificate works, and can connect to LDAP with TLS as I'm
> > > using the same LDAP configuration/certificate with SSSD.
> > >
> > > Can anyone clarify whether I should be adding the external CA
> > > certificate or the LDAP host certificate with keytool or any other
> > > suggestions?
> > >
> > > Thanks,
> > > Steve
> > > ___
> > > Users mailing list
> > > Users@ovirt.org
> > > http://lists.ovirt.org/mailman/listinfo/users
> > >
> >
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Managing two DCs with ovirt

[Donny Davis]

+1 to Barak's statement... Another option is foreman to manage both

On Tue, Oct 6, 2015 at 1:35 PM, Barak Korren <bkor...@redhat.com> wrote:

> You could combine method #1 with ManageIQ [1] to get unified management.
>
> Barak.
>
> [1] http://manageiq.org/
>
> On 6 October 2015 at 19:25, Darrell Budic <bu...@onholyground.com> wrote:
> > I use method 1. One thing to consider is that the engine manages HA VMs,
> migrations, etc. It doesn’t need much bandwidth, but if it can’t talk to
> nodes, no migrations can happen, either for load balancing or in case of a
> node or storage failure.
> >
> > If you had very solid networking, it’s probably fine, but I find it
> works better in my situation to run a self hosted engine for each cluster.
> >
> >   -Darrell
> >
> >> On Oct 5, 2015, at 2:17 PM, wodel youchi <wodel.you...@gmail.com>
> wrote:
> >>
> >> Hi,
> >>
> >> I need some help to decide which is better / feasible with ovirt to
> manage two or more distant DCs.
> >>
> >> Let say that we have two distant DCs to virtualize with ovirt.
> >>
> >> we have two options to manage them:
> >>
> >> 1- install two engines, one on each DC, the good side is, if one DC is
> down, we can still manage the other one. the down side we will have two
> consoles to manage.
> >>
> >> 2- install one engine to manage the two DCs, the good side is the use
> of one console to rule them all :-) the down side is if the DC containing
> the engine become down, there is way to manage the other one.
> >>
> >> is there (will be there in the future) a way for example to create a
> slave engine in the second DC which can takeover and let the admin to
> manage the second DC?
> >>
> >> thanks in advance
> >> ___
> >> Users mailing list
> >> Users@ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
>
>
>
> --
> Barak Korren
> bkor...@redhat.com
> RHEV-CI Team
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] moving storage away from a single point of failure

[Donny Davis]

I don't have a large gluster enviroment deployed on hardware, so I have no
data.

On Fri, Sep 25, 2015 at 2:55 AM, Nicolas Ecarnot <nico...@ecarnot.net>
wrote:

> Le 25/09/2015 01:57, Donny Davis a écrit :
>
>> Gluster is pretty stable, you shouldn't have any issues. It works best
>> when there are more than 2 or 3 nodes though.
>>
>
> Hi,
>
> On a site, I have an oVirt setup made of 3 nodes acting as compute+storage
> based on gluster, plus another standalone engine.
> The replica-3 seems to do some good job even when I test-stressed them
> brutaly.
> But as I have the opportunity to add more storage nodes, I'm interested in
> the comment above.
>
> When adding another node, what is the effect on the duration of a rebuild
> when recovering from a crash? What is the effect on perfs?
>
> Regards,
>
> --
> Nicolas ECARNOT
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Permission Issues

[Donny Davis]

Are you trying to set this up so it appears as though each user is in their
own tenant?

Make sure you are assigning your create user permission set to the correct
objects, IE assign that permission to the storage, and cluster or
datacenter you want them to operate on.

On Fri, Sep 25, 2015 at 1:48 AM, Budur Nagaraju <nbud...@gmail.com> wrote:

> I understood that ,but now facing different issue,without selecting the
> permission "attach disk profile" user won't be able to create instance,if I
> disable the option user can't create the instance.
>
> Now the issue is by selecting the permission, users will be able to add
> new additional HDD space from to the deployed instance which I do not
> want,is there any way to resolve this /
>
> On Fri, Sep 25, 2015 at 11:13 AM, Oved Ourfali <oourf...@redhat.com>
> wrote:
>
>> You should put the user role on the relevant VM. Permissions in ovirt are
>> a combination of user, role and object.
>>
>> If you put the UserRole on the cluster, the user will see all VMs in the
>> cluster. If on a VM, he will only see this VM, if on the DC he will see all
>> VMs in this DC, and if on the entire system then he will see all VMs in the
>> system.
>>
>> Hope I helped,
>> Oved
>> On Sep 24, 2015 9:07 AM, "Budur Nagaraju" <nbud...@gmail.com> wrote:
>>
>>> HI
>>>
>>> I have created a user with the "user role permissions" when logged in
>>> able to view all the vms ,by default this should not happen ,is there any
>>> solution to resolve this ?
>>>
>>> Thanks,
>>> Nagaraju
>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Power Management

[Donny Davis]

Is there any way to physically turn servers off in the cluster policy.

IE. I have ten nodes, migrate and turn off under utilized servers

Thanks

Donny D
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Systemd-Script to put the node in "maintenance" on shutdown

[Donny Davis]

I was just trying to do the same thing, I was going to use power
management, and the api.

I asked if this feature already exists in the cluster policy.

With the cluster policy you can control how the vms get distributed, and
then I was going to write a script on the engine that would use the api to
put the host in maintenance, then use the api to tell power management to
turn off the host... When load gets above 75%, the script would power a
server on, and then take it out of maintenance. The cluster policy would
take care of the rest.

Anyone else doing something like this?

-Donny D
On Sep 24, 2015 2:18 AM, "Nir Soffer"  wrote:

> On Fri, Sep 18, 2015 at 4:26 PM, Luca Bertoncello <
> l.bertonce...@queo-group.com> wrote:
>
>> Hi again,
>>
>> I'm trying to write a systemd-script (for CentOS7) in order to
>> automatically put the host in "maintenance" on shutdown and to activate it
>> after boot.
>> I wrote a python-script that to that and it works so that I can start it
>> and see the host in "maintenance" and having all VMs migrated.
>>
>> Unfortunately I can't call this script on shutdown/reboot and wait until
>> all VMs are migrated and the host is in maintenance.
>>
>
> I don't think this will work, since you must put the host into
> maintenance, and wait until all vms were migrated before you reboot the
> host.
>
> All this can be done only by controlling engine, not from the host that is
> going to shutdown.
>
> If you want to trigger this from the host itself, I would write an
> ovirt-shutdown tool, ask engine to put the host into maintenance, wait
> until all vms migrate, and the invoke the real shutdown command.
>
> I guess it would be more useful to run this tool not on the host you want
> to reboot but on another machine.
>
> It may be possible to somehow get systemd to use this tool instead of the
> shutdown command, but I don't think it is a good idea. This will make your
> host fail to shutdown if your tool is buggy.
>
> Maybe ask on systemd mailing list about this.
>
>
>>
>> Here my script:
>>
>> [Unit]
>> Description=oVirt interface for managing host
>> After=remote-fs.target vdsmd.service multipathd.service libvirtd.service
>> time-sync.target iscsid.service rpcbind.service supervdsmd.service
>> sanlock.service vdsm-network.service
>> Wants=remote-fs.target vdsmd.service multipathd.service libvirtd.service
>> time-sync.target iscsid.service rpcbind.service supervdsmd.service
>> sanlock.service vdsm-network.service
>>
>> [Service]
>> Type=simple
>> RemainAfterExit=yes
>> ExecStart=/usr/local/bin/ovirt-maintenance.sh active
>> ExecStop=/usr/local/bin/ovirt-maintenance.sh maintenance
>> KillMode=none
>>
>> [Install]
>> WantedBy=multi-user.target
>>
>> Could someone help me and say what I'm doing wrong?
>>
>> Thanks a lot
>>
>> Mit freundlichen Grüßen
>>
>> Luca Bertoncello
>>
>> --
>> Besuchen Sie unsere Webauftritte:
>>
>> www.queo.bizAgentur für Markenführung und Kommunikation
>> www.queoflow.comIT-Consulting und Individualsoftwareentwicklung
>>
>> Luca Bertoncello
>> Administrator
>> Telefon:+49 351 21 30 38 0
>> Fax:+49 351 21 30 38 99
>> E-Mail: l.bertonce...@queo-group.com
>>
>> queo GmbH
>> Tharandter Str. 13
>> 01159 Dresden
>> Sitz der Gesellschaft: Dresden
>> Handelsregistereintrag: Amtsgericht Dresden HRB 22352
>> Geschäftsführer: Rüdiger Henke, André Pinkert
>> USt-IdNr.: DE234220077
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Virtual appliance import question/problem

[Donny Davis]

You could go old school and create an empty VM, with the right number of
disks, how you want it to be setup, then dd if=/your/disks/one/at/a/time
of=/the/empty/disks/created/by/ovirt

This happens on the storage server
On Sep 24, 2015 5:58 PM, "Maurice James"  wrote:

> It seems that oVirt is not recognizing the qcow2 images. I must convert it
> to raw which will not work for me because they are too large when expanded
>
>
> --
> *From: *"Nir Soffer" 
> *To: *"Maurice James" 
> *Cc: *"Shahar Havivi" , "users" 
> *Sent: *Wednesday, September 23, 2015 2:40:36 PM
> *Subject: *Re: [ovirt-users] Virtual appliance import question/problem
>
> On Wed, Sep 23, 2015 at 9:26 PM, Maurice James 
> wrote:
>
>>
>> What about the problem with the IDE drives?
>>
>
> I think ide is limited to 4 drives, not sure why you see a limit of 3
> drives.
>
> Vdsm logs showing the errors you get would be very helpful to understand
> this.
>
> Please open an ovirt bug for this, and attach vdsm logs.
>
> But if you can use ide drives (hdX?), why not use virtio (vdX)? You can
> have 16 of these.
>
>
>> "The second problem is that these disks are scsi and ti does not seem to
>> work using the virtio-scsi selection. I tried selecting the IDE option, but
>> there is a limit to the number of IDE disks that I can use."
>>
>>
>>
>> --
>> *From: *"Nir Soffer" 
>> *To: *"Maurice James" 
>> *Cc: *"Shahar Havivi" , "users" 
>> *Sent: *Wednesday, September 23, 2015 1:16:49 PM
>>
>> *Subject: *Re: [ovirt-users] Virtual appliance import question/problem
>>
>> On Wed, Sep 23, 2015 at 2:36 PM, Maurice James 
>> wrote:
>>
>>>
>>> To convert the images I used:
>>> qemu-img convert 250.qcow2 -O raw 250.img -p
>>>
>>
>> Sure this will expand the file to the full size, but why do you need raw
>> image? ovirt works with qcow images.
>>
>>
>>> oVirt will not allow me to have more than 3 IDE devices on a VM
>>>
>>
>> What do you mean by "it does not seem to work using the virtio-scsi
>> selection."?
>>
>>
>>> Doesnt 3.6 only work on RHEL/Centos 7?
>>>
>>
>> And Fedora 21/22.
>>
>>
>>>
>>>
>>>
>>> --
>>> *From: *"Nir Soffer" 
>>> *To: *"Maurice James" , "Shahar Havivi" <
>>> shav...@redhat.com>
>>> *Cc: *"users" 
>>> *Sent: *Tuesday, September 22, 2015 7:37:58 PM
>>> *Subject: *Re: [ovirt-users] Virtual appliance import question/problem
>>>
>>>
>>> On Mon, Sep 21, 2015 at 7:57 PM, Maurice James 
>>> wrote:
>>>
 I have a virtual mail security appliance that I am trying to import
 into oVirt 3.5.4. The appliance was built for kvm. it has a total of 5 scsi
 disks. I can convert and copy the OS disk only because it expands its self
 to full size.

 The first problem that I have is that the disks expand to their full
 size when I convert the to an oVirt format

>>>
>>> How do you convert to ovirt format?
>>>
>>>


 OS Disk
 mail.qcow2 (74M) converts to main.img (294M)


 Storage disks
 250.qcow2 (256K) converts to 250.img  (250GB)
 1024.qcow2 (256K) converts to 1024.img (1TB)
 2048.qcow2 (256K) converts to 2048.img (2TB)
 4096.qvow2 (256K) converts to 4096.img (4TB)
 8192.qcow2 (256K) converts to 8192.img (8TB)



 The second problem is that these disks are scsi and ti does not seem to
 work using the virtio-scsi selection. I tried selecting the IDE option, but
 there is a limit to the number of IDE disks that I can use.

>>>
>>> Can you provide more details about "does not seem to work"?
>>>
>>>


 Virtualbox has no issues running the appliance that was distributed in
 the ova format. Any help would be appreciated

>>>
>>> ovirt-3.6 beta supports import from ova format; maybe you like to try it?
>>>
>>> Nir
>>>
>>>



 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


>>>
>>>
>>
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Older hardware deployment

[Donny Davis]

What errors are you getting?
On Sep 22, 2015 5:47 PM, "Chas Ecomm"  wrote:

> I’ve searched on this issue all over the place and not found a full answer.
>
>
>
> I’ve got a lab with older Dell PE860 servers with Pentium D processors.
> We are attempting to prove out that we can move from VMware to KVM and
> oVirt, but with 3.5 we can’t get these servers to enter into a cluster due
> to the age of the processors.
>
>
>
> I’ve seen it referenced in a few list entries to modify ‘the database’ to
> put CPUInfo entries in for the processor capabilities of this processor,
> but it is unclear to me and I’ve been unable to find any documentation that
> speaks to what database and how to modify it safely.
>
>
>
> I know we could update these servers and get better power consumption,
> heat generation, etc., but it’s not in the cards and I can’t move my newer
> servers until we prove it out with these older ones, which ran ESXi 5.5
> with absolutely no issue.  This cluster will be a functional test and small
> tools cluster ultimately, so I don’t really care about their lower end
> specs, either.
>
>
>
> Would installing something older than 3.5 help me here?  Or is there some
> doc somewhere I’ve just not found that describes this process of updating
> the DB with these CPU parameters.
>
>
>
> TIA!!
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] noVNC error

[Donny Davis]

downgrade the novnc package
http://lists.ovirt.org/pipermail/users/2015-May/032933.html

Cheers
Donny D

On Mon, Sep 21, 2015 at 1:13 PM, Michael Kleinpaste <
michael.kleinpa...@sharperlending.com> wrote:

> So when I used oVirt 3.4.x noVNC worked wonderfully.  We're running
> 3.5.1.1-1.el6 now and when I try to connect to a VMs console via noVNC I
> get this error.
>
> [image: Screen Shot 2015-09-21 at 10.09.23 AM.png]
> I've downloaded the ca.crt file and installed it but I still get an HTTPS
> error when connecting to the oVirt management console.  Looking at the SSL
> information Chrome says the following:
>
> "The identity of this website has been verified by
> ovirtm01.sharperlending.aws.96747. No Certificate Transparency information
> was supplied by the server.
>
> The certificate chain for this website contains at least one certificate
> that was signed using a deprecated signature algorithm based on SHA-1."
>
> Is this a known issue?
>
> Thanks,
> --
> *Michael Kleinpaste*
> Senior Systems Administrator
> SharperLending, LLC.
> www.SharperLending.com
> michael.kleinpa...@sharperlending.com
> (509) 324-1230   Fax: (509) 324-1234
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt-guest-agent

[Donny Davis]

Can't you get these metrics from nagios?
On Aug 10, 2015 1:47 PM, Arsène Gschwind arsene.gschw...@unibas.ch
wrote:

 I would also be interested for that feature since we run some VM with high
 I/O load it would be great to see those metrics in the interface.

 rgds,
 Arsène

 On 08/10/2015 04:49 PM, Matthew Lagoe wrote:

 I have had a RFE with Redhat for about 3 years on this exact item, so it
 doesn’t seem to be a high priority, that said more people asking for it is
 a good thing.







 *From:* users-boun...@ovirt.org [mailto:users-boun...@ovirt.org
 users-boun...@ovirt.org] *On Behalf Of *Johan Kooijman
 *Sent:* Monday, August 10, 2015 06:16 AM
 *To:* users
 *Subject:* [ovirt-users] ovirt-guest-agent



 Hi,



 Would it be possible add the io stats of a vm into ovirt-guest-agent for
 making that data available in the interface of oVirt?



 I could help out by getting the stats into the client package, the server
 side would be a bigger issue to me.



 --

 Met vriendelijke groeten / With kind regards,
 Johan Kooijman


 ___
 Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users



 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] iSCSI question... LUNS-Targets balnk

[Donny Davis]

What does the engine log say, how about the vdsm logs?

go into your host that you have selected to do the iscsi mount and do a

tail -f /var/log/vdsm/vdsm.log

Then then go through the connect sequence. You should get a better idea.

Did you put any acls on the iscsi mount to allow the hosts to connect?
On Aug 10, 2015 12:36 PM, Alan Murrell li...@murrell.ca wrote:

 I cleared my iSCSI config and ran through the setup again.  Once again, I
 am able to connect to it the LUN from my Win7 PC, but not from oVirt.

 oVirt is able to discover the target, but when I click Login, which is
 does successfully, there are no LUNs displayed.

 Do I need to install something else on my oVirt host?  I have been
 assuming that oVirt has it's own iSCSI Initiator, but maybe I need to
 install one?

 -Alan

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] iSCSI question... LUNS-Targets balnk

[Donny Davis]

I think you nailed it. There are no disks available to mount. They are
already mounted to the host.
On Aug 10, 2015 1:20 PM, Alan Murrell li...@murrell.ca wrote:

 Quoting Donny Davis do...@cloudspin.me:

 tail -f /var/log/vdsm/vdsm.log

 Then then go through the connect sequence. You should get a better idea.


 It shows a successful connect, but keeps trying to do a scan.  About every
 30 seconds, the following entry shows up:

 --- START ---
 Thread-12294::DEBUG::2015-08-10
 10:13:09,286::misc::741::Storage.SamplingMethod::(__call__) Trying to enter
 sampling method (storage.iscsi.rescan)
 Thread-12294::DEBUG::2015-08-10
 10:13:09,286::iscsi::424::Storage.ISCSI::(rescan) Performing SCSI scan,
 this will take up to 30 seconds
 Thread-12294::DEBUG::2015-08-10
 10:13:09,286::iscsiadm::97::Storage.Misc.excCmd::(_runCmd) /usr/bin/sudo -n
 /sbin/iscsiadm -m session -R (cwd None)
 --- END ---

 so it seems it never quite finished the scan.


 Did you put any acls on the iscsi mount to allow the hosts to connect?


 I did.  I was able to get my oVirt host's iSCSI Initiator Name from it's
 General tab/page System  Hosts, and created the ACL for it in
 targetcli:

 -- START ---
 cd
 /iscsi/iqn.2003-01.org.linux-iscsi.yvr001svr01.x8664:sn.33a56c3324e0/tpg1/acls
 create iqn.1994-05.com.redhat:ba4cc8b3368e
 --- END ---

 The output indicated that the ACL was created and mapped to LUN 0.  I ran
 the exact same command for my Win 7 PC (using it's iSCSI Initiator Name, of
 course).

 I did not setup any sort of CHAP authentication.

 There is one thing I have noticed in viewing my /var/log/messages on my
 host/storage that may have an effect.  As you may or may not know, I am
 running a single-server with hosted engine.  My storage is also on this
 server.

 What I have noticed is that my host/storage server is mounting the iSCSI
 target automatically as '/dev/sdd', so I am not sure if that may be
 affecting oVirt's ability to scan, if it is already connected to by the
 very same host?

 (I hope this makes sense?  If not, let me know and I can try to answer
 your questions better)

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt+gluster+NFS : storage hicups

[Donny Davis]

I have the same setup, and my only issue is at the switch level with CTDB.
The IP does failover, however until I issue a ping from the interface ctdb
is connected to, the storage will not connect.

If i go to the host with the CTDB vip, and issue a ping from the interface
ctdb is on, everything works as described.

On Thu, Aug 6, 2015 at 5:18 PM, Nicolas Ecarnot nico...@ecarnot.net wrote:

 Hi Tim,

 Nice to read that someone else is fighting with a similar setup :)

 Le 06/08/2015 16:36, Tim Macy a écrit :

 Nicolas,  I have the same setup dedicated physical system running engine
 on CentOS 6.6 three hosts running CentOS 7.1 with Gluster and KVM, and
 firewall is disabled on all hosts.  I also followed the same documents
 to build my environment so I assume they are very similar.  I have on
 occasion had the same errors and have also found that ctdb rebalanceip
 floating ip is the only way to resolve the problem.


 Indeed, when I'm stopping/continuing my ctdb services, the main action is
 a move of the vIP.
 So we agree there is definitively something to dig there!
 Either directly, either as a side effect.

 I must admit I'd be glad to search further before following the second
 part of your answer.

  I intend to
 remove ctdb since it is not needed with the configuration we are
 running.  CTDB is only needed for hosted engine on a floating NFS mount,


 And in a less obvious manner, it also allows to gently remove a host from
 the vIP managers pool, before removing it on the gluster layer.
 Not a great advantage, but worth mentionning.

 so you should be able change the gluster storage domain mount paths to
 localhost:name.  The only thing that has prevented me from making
 this change is that my environment is live with running VM's.  Please
 let me know if you go this route.


 I'm more than interested to choose this way, if :
 - I find no time to investigate the floating vIP issue
 - I can simplify this setup
 - This can lead to increased perf

 About the master storage domain path, should I use only pure gluster and
 completely forget about NFS?


 --
 Nicolas ECARNOT
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [ATN] LDAP Users please read

[Donny Davis]

AAA ldap has been working great for me for quite some time now. Good work
Alon
On Aug 4, 2015 3:56 AM, Alon Bar-Lev alo...@redhat.com wrote:

 Hello LDAP Users,

 If you migrated from 3.4 or if you used engine-managed-domains to add LDAP
 support into engine - this message is for you.

 In 3.5 we introduced a new LDAP provider[1][2], it is superset of the
 previous implementation, highlights includes:
  * Better response times.
  * Simplicity, Use of LDAP protocol only - kerberos is no longer needed.
  * More LDAP implementations are supported.
  * Flexible configuration, can be customized on site to support special
 setups.
  * Supportability, better logs and feedbacks to enable remote support.
  * Variety of fallback policies, examples: srvrecord, failover,
 round-robin and more.
  * Active Directory: supports multiple domain in forest.

 In 3.5 the previous LDAP provider is marked as legacy, users' issues will
 be resolved by migration to the new provider.

 Upgrade to 4.0 will not be possible if legacy provider is being used.

 The new provider is working without any issue for quite some time, we
 would like to eliminate the remaining usage of the legacy provider as soon
 as possible.

 A tool was created[3] to automate the process, it should perform
 everything in safe and automatic process, while enables customization if
 such required. The one prerequisite that we could not automate easily is
 obtaining the CA certificate used by the LDAP server to communicate using
 SSL/TLS, you should acquire this manually and provide it as parameter.

 We (Ondra CCed and I) will help anyone that is experiencing issues with
 the process, please do not delay migration to the point it becomes
 emergency.

 Let's define a virtual goal -- in 1 month no legacy LDAP usage anywhere.

 Regards,
 Alon Bar-Lev.

 [1] http://www.ovirt.org/Features/AAA
 [2]
 https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0
 [3]
 https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VM Migration Fails

[Donny Davis]

OK, I was just wondering.

I'm glad to see you got it fixed.
On Aug 3, 2015 6:07 PM, s k sokratis1...@outlook.com wrote:

 Because it breaks other custom configuration (non-oVirt related).


 I will probably try SELinux in enforcing mode when migrating to CentOS 7
 hosts.

 --
 Date: Mon, 3 Aug 2015 13:21:48 -0400
 Subject: RE: [ovirt-users] VM Migration Fails
 From: do...@cloudspin.me
 To: sokratis1...@outlook.com
 CC: users@ovirt.org

 Is there any reason that you have SE Linux in permissive. oVirt will run
 with SE Linux in enforcing
 On Aug 3, 2015 1:09 PM, s k sokratis1...@outlook.com wrote:

 I checked the vdsm.log and the source host was throwing this error:

 libvirtError: unsupported configuration: Unable to find security driver
 for label selinux


 I fixed it by disabling selinux (it was running in permissive mode before)
 and rebooting the host since selinux was also disabled on the other host.


 --
 Date: Mon, 3 Aug 2015 12:41:57 -0400
 Subject: Re: [ovirt-users] VM Migration Fails
 From: do...@cloudspin.me
 To: sokratis1...@outlook.com
 CC: users@ovirt.org

 Can you send the log from each node

 /var/log/vdsm/vdsm.log
 On Aug 3, 2015 12:39 PM, s k sokratis1...@outlook.com wrote:

 Hi,


 I'm having trouble migrating VMs in a 2-node cluster. VMs can start
 normally on both nodes if they are shutdown first but live migration fails
 and the following is thrown in the engine.log:



 2015-08-03 19:28:28,566 ERROR
 [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo]
 (DefaultQuartzScheduler_Worker-42) [46f46347] Rerun vm
 2ceb9c65-1920-49fe-9db1-6c9470e50a65. Called from vds ovirt-srv-02
 2015-08-03 19:28:28,615 ERROR
 [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateStatusVDSCommand]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Failed in MigrateStatusVDS
 method
 2015-08-03 19:28:28,617 ERROR
 [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateStatusVDSCommand]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Command
 MigrateStatusVDSCommand(HostName = ovirt-srv-02, HostId =
 be3da0c4-f898-4aa4-89c7-239282a03959,
 vmId=2ceb9c65-1920-49fe-9db1-6c9470e50a65) execution failed. Exception:
 VDSErrorException: VDSGenericException: VDSErrorException: Failed to
 MigrateStatusVDS, error = Fatal error during migration, code = 12
 2015-08-03 19:28:28,623 ERROR
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Correlation ID: 43b38529,
 Job ID: 21468e21-c78c-41ea-bc99-c56ff4526820, Call Stack: null, Custom
 Event ID: -1, Message: Migration failed due to Error: Fatal error during
 migration. Trying to migrate to another Host (VM: testvm01, Source:
 ovirt-srv-02, Destination: ovirt-srv-03).


 Both nodes run on CentOS 6.6 with the following versions:


 OS Version: *RHEL - 6 - 6.el6.centos.12.2*
 Kernel Version: *2.6.32 - 504.30.3.el6.x86_64*
 KVM Version: *0.12.1.2 - 2.448.el6_6.4*
 LIBVIRT Version: *libvirt-0.10.2-46.el6_6.6*
 VDSM Version: *vdsm-4.16.20-1.git3a90f62.el6*


 Any thoughts?


 Thanks,


 Sokratis

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VM Migration Fails

[Donny Davis]

Can you send the log from each node

/var/log/vdsm/vdsm.log
On Aug 3, 2015 12:39 PM, s k sokratis1...@outlook.com wrote:

 Hi,


 I'm having trouble migrating VMs in a 2-node cluster. VMs can start
 normally on both nodes if they are shutdown first but live migration fails
 and the following is thrown in the engine.log:



 2015-08-03 19:28:28,566 ERROR
 [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo]
 (DefaultQuartzScheduler_Worker-42) [46f46347] Rerun vm
 2ceb9c65-1920-49fe-9db1-6c9470e50a65. Called from vds ovirt-srv-02
 2015-08-03 19:28:28,615 ERROR
 [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateStatusVDSCommand]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Failed in MigrateStatusVDS
 method
 2015-08-03 19:28:28,617 ERROR
 [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateStatusVDSCommand]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Command
 MigrateStatusVDSCommand(HostName = ovirt-srv-02, HostId =
 be3da0c4-f898-4aa4-89c7-239282a03959,
 vmId=2ceb9c65-1920-49fe-9db1-6c9470e50a65) execution failed. Exception:
 VDSErrorException: VDSGenericException: VDSErrorException: Failed to
 MigrateStatusVDS, error = Fatal error during migration, code = 12
 2015-08-03 19:28:28,623 ERROR
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Correlation ID: 43b38529,
 Job ID: 21468e21-c78c-41ea-bc99-c56ff4526820, Call Stack: null, Custom
 Event ID: -1, Message: Migration failed due to Error: Fatal error during
 migration. Trying to migrate to another Host (VM: testvm01, Source:
 ovirt-srv-02, Destination: ovirt-srv-03).


 Both nodes run on CentOS 6.6 with the following versions:


 OS Version: *RHEL - 6 - 6.el6.centos.12.2*
 Kernel Version: *2.6.32 - 504.30.3.el6.x86_64*
 KVM Version: *0.12.1.2 - 2.448.el6_6.4*
 LIBVIRT Version: *libvirt-0.10.2-46.el6_6.6*
 VDSM Version: *vdsm-4.16.20-1.git3a90f62.el6*


 Any thoughts?


 Thanks,


 Sokratis

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VM Migration Fails

[Donny Davis]

Is there any reason that you have SE Linux in permissive. oVirt will run
with SE Linux in enforcing
On Aug 3, 2015 1:09 PM, s k sokratis1...@outlook.com wrote:

 I checked the vdsm.log and the source host was throwing this error:

 libvirtError: unsupported configuration: Unable to find security driver
 for label selinux


 I fixed it by disabling selinux (it was running in permissive mode before)
 and rebooting the host since selinux was also disabled on the other host.


 --
 Date: Mon, 3 Aug 2015 12:41:57 -0400
 Subject: Re: [ovirt-users] VM Migration Fails
 From: do...@cloudspin.me
 To: sokratis1...@outlook.com
 CC: users@ovirt.org

 Can you send the log from each node

 /var/log/vdsm/vdsm.log
 On Aug 3, 2015 12:39 PM, s k sokratis1...@outlook.com wrote:

 Hi,


 I'm having trouble migrating VMs in a 2-node cluster. VMs can start
 normally on both nodes if they are shutdown first but live migration fails
 and the following is thrown in the engine.log:



 2015-08-03 19:28:28,566 ERROR
 [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo]
 (DefaultQuartzScheduler_Worker-42) [46f46347] Rerun vm
 2ceb9c65-1920-49fe-9db1-6c9470e50a65. Called from vds ovirt-srv-02
 2015-08-03 19:28:28,615 ERROR
 [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateStatusVDSCommand]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Failed in MigrateStatusVDS
 method
 2015-08-03 19:28:28,617 ERROR
 [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateStatusVDSCommand]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Command
 MigrateStatusVDSCommand(HostName = ovirt-srv-02, HostId =
 be3da0c4-f898-4aa4-89c7-239282a03959,
 vmId=2ceb9c65-1920-49fe-9db1-6c9470e50a65) execution failed. Exception:
 VDSErrorException: VDSGenericException: VDSErrorException: Failed to
 MigrateStatusVDS, error = Fatal error during migration, code = 12
 2015-08-03 19:28:28,623 ERROR
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
 (org.ovirt.thread.pool-8-thread-38) [46f46347] Correlation ID: 43b38529,
 Job ID: 21468e21-c78c-41ea-bc99-c56ff4526820, Call Stack: null, Custom
 Event ID: -1, Message: Migration failed due to Error: Fatal error during
 migration. Trying to migrate to another Host (VM: testvm01, Source:
 ovirt-srv-02, Destination: ovirt-srv-03).


 Both nodes run on CentOS 6.6 with the following versions:


 OS Version: *RHEL - 6 - 6.el6.centos.12.2*
 Kernel Version: *2.6.32 - 504.30.3.el6.x86_64*
 KVM Version: *0.12.1.2 - 2.448.el6_6.4*
 LIBVIRT Version: *libvirt-0.10.2-46.el6_6.6*
 VDSM Version: *vdsm-4.16.20-1.git3a90f62.el6*


 Any thoughts?


 Thanks,


 Sokratis

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Poor guest write speeds

[Donny Davis]

Thank you for reporting back.

I don't have to use async with my NFS share. Its not the same comparison,
but just for metrics I am running an

 HP dl380 with 2x6cores and 24GB of ram, with 16 disks in raidz2 with 4
vdevs. Backend is ZFS. Connections are 10GBE

I get great performance from my setup.

On Sat, Aug 1, 2015 at 9:00 PM, Matthew Lagoe matthew.la...@subrigo.net
wrote:

 You can run without async so long as your nfs server can handle sync writes
 quickly

 -Original Message-
 From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf
 Of
 Alan Murrell
 Sent: Saturday, August 01, 2015 05:37 PM
 To: users
 Subject: Re: [ovirt-users] Poor guest write speeds

 Hi Donny (and everyone else who uses NFS-backed storage)

 You mentioned that you get really good performance in oVirt and I am
 curious
 what you use for your NFS options in exportfs?  The 'async'
 option fixed my performance issues, but of course this would not be a
 recommended option in a production environment, at least unless the NFS
 server was running with a BBU on the RAID card.

 Just curious.  Thanks! :-)

 -Alan

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




-- 
Donny Davis
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Hanging Tasks

[Donny Davis]

Just wait for them to timeout. They can be killed from the CLI. What is the
task?
On Jul 30, 2015 9:30 AM, Arsène Gschwind arsene.gschw...@unibas.ch
wrote:

 Hi,

 I've searched around but couldn't find a solution.
 Is there a way to kill/remove hanging tasks in the oVirt admin portal?

 Thanks for any hint.
 rgds,
 Arsène
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Hanging Tasks

[Donny Davis]

You can use the vdsClient CLI to remove tasks.
On Jul 30, 2015 9:37 AM, Arsène Gschwind arsene.gschw...@unibas.ch
wrote:

  The tasks are : Handling non responsive Host xxx
 They hang since July 22. and I think they will not timeout...

 Do I have to use the engine CLI to kill them?

 Thanks for your help.
 rgds,
 Arsène

 On 07/30/2015 03:31 PM, Donny Davis wrote:

 Just wait for them to timeout. They can be killed from the CLI. What is
 the task?
 On Jul 30, 2015 9:30 AM, Arsène Gschwind arsene.gschw...@unibas.ch
 wrote:

 Hi,

 I've searched around but couldn't find a solution.
 Is there a way to kill/remove hanging tasks in the oVirt admin portal?

 Thanks for any hint.
 rgds,
 Arsène
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VM Live Backup

[Donny Davis]

You could write a script to interface with the api that creates a snapshot
and then exports or copies that to a backup nfs share And then run that
on a cron job
On Jul 30, 2015 5:18 PM, Prof. Dr. Michael Schefczyk 
mich...@schefczyk.net wrote:

 Dear All,

 One feature that I am really missing in oVirt is a foolproof (i.e., in a
 way that even I will be able to implement) scheduled (cron would be good)
 live VM backup that outputs ideally qcow2 files per disk plus an
 xml-configuration file that one could upload to a regular KVM host, in case
 that should be required. As far as I understand, that is not yet on the
 roadmap, correct? For my plain SOHO KVM hosts, I am using a script to do
 just that. While I almost never need the backups - files with a human
 readable text name which I know how to use on any freshly installed KVM
 host in case of a crash emergency -, I feel better keeping them available
 for some time period.

 Regards,

 Michael
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Invitation: [3.6 deep dive] moVirt - Android mobile client for oVirt @ Wed Aug 12, 2015 14:00 - 15:00 (red hat)

[Donny Davis]

So excited to see moVirt
On Jul 29, 2015 8:42 AM, Michal Skrivanek mskri...@redhat.com wrote:

 more details »
 https://www.google.com/calendar/event?action=VIEWeid=ZnVyMWgybnE1cGdjOTlrOW8yOThlcXVsaGMgdXNlcnNAb3ZpcnQub3Jntok=MTkjbXNrcml2YW5AcmVkaGF0LmNvbWY1Nzc0NjkyMmE3OGRjYWRlZGQ0MjI0ZGJjMTM1NDI1YjQ0MTljMzMctz=Europe/Praguehl=en
 [3.6 deep dive] moVirt - Android mobile client for oVirt
 scheduled 2015-08-12 12:00pm GMT

 Abstract:
 moVirt is a mobile (android) client for the oVirt. It is not trying to be
 a simplified version of webadmin/userportal but instead is aiming to be a
 handy companion application making use of the device itself. It has three
 main features:
 (1) monitoring and notifications (making use of the fact that the mobile
 deviec is always with us),
 (2) bridging the physical world of servers with virtual world of oVirt
 using techniques of augmented reality and
 (3) dashboard (making use of the nice big screens of today's devices). In
 this session, the moVirt project will be presented and the future plans
 will be uncovered.

 hangout link: https://plus.google.com/events/c0mjammhafagaqe4f2marv7po3k
 youtube link: https://www.youtube.com/watch?v=6w9t1wxNKBE
 project page: https://github.com/matobet/movirt
 https://www.google.com/url?q=https%3A%2F%2Fgithub.com%2Fmatobet%2Fmovirtusd=2usg=AFQjCNGwJbPpYTBjFY8AE6pFN5AK8kqa9A
 *When*
 Wed Aug 12, 2015 14:00 – 15:00 Central European Time - Prague
 *Where*
 https://plus.google.com/events/c0mjammhafagaqe4f2marv7po3k (map
 https://maps.google.com/maps?q=https://plus.google.com/events/c0mjammhafagaqe4f2marv7po3khl=en
 )
 *Calendar*
 red hat
 *Who*
 •
 Michal Skrivanek - organizer
 •
 de...@ovirt.org
 •
 Itamar Heim
 •
 users@ovirt.org
 •
 Barak Azulay

 Going?   *Yes
 https://www.google.com/calendar/event?action=RESPONDeid=ZnVyMWgybnE1cGdjOTlrOW8yOThlcXVsaGMgdXNlcnNAb3ZpcnQub3Jnrst=1tok=MTkjbXNrcml2YW5AcmVkaGF0LmNvbWY1Nzc0NjkyMmE3OGRjYWRlZGQ0MjI0ZGJjMTM1NDI1YjQ0MTljMzMctz=Europe/Praguehl=en
 - Maybe
 https://www.google.com/calendar/event?action=RESPONDeid=ZnVyMWgybnE1cGdjOTlrOW8yOThlcXVsaGMgdXNlcnNAb3ZpcnQub3Jnrst=3tok=MTkjbXNrcml2YW5AcmVkaGF0LmNvbWY1Nzc0NjkyMmE3OGRjYWRlZGQ0MjI0ZGJjMTM1NDI1YjQ0MTljMzMctz=Europe/Praguehl=en
 - No
 https://www.google.com/calendar/event?action=RESPONDeid=ZnVyMWgybnE1cGdjOTlrOW8yOThlcXVsaGMgdXNlcnNAb3ZpcnQub3Jnrst=2tok=MTkjbXNrcml2YW5AcmVkaGF0LmNvbWY1Nzc0NjkyMmE3OGRjYWRlZGQ0MjI0ZGJjMTM1NDI1YjQ0MTljMzMctz=Europe/Praguehl=en*
 more options »
 https://www.google.com/calendar/event?action=VIEWeid=ZnVyMWgybnE1cGdjOTlrOW8yOThlcXVsaGMgdXNlcnNAb3ZpcnQub3Jntok=MTkjbXNrcml2YW5AcmVkaGF0LmNvbWY1Nzc0NjkyMmE3OGRjYWRlZGQ0MjI0ZGJjMTM1NDI1YjQ0MTljMzMctz=Europe/Praguehl=en

 Invitation from Google Calendar https://www.google.com/calendar/

 You are receiving this courtesy email at the account users@ovirt.org
 because you are an attendee of this event.

 To stop receiving future updates for this event, decline this event.
 Alternatively you can sign up for a Google account at
 https://www.google.com/calendar/ and control your notification settings
 for your entire calendar.

 Forwarding this invitation could allow any recipient to modify your RSVP
 response. Learn More
 https://support.google.com/calendar/answer/37135#forwarding.

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users