[ovirt-users] Re: Cannot open Vm Console

[Klaas Demter]

Hi,

I think this is:  https://issues.redhat.com/browse/RHEL-7123


Greetings

Klaas


On 1/18/24 09:52, Vittorio wrote:

I got few Vm on my ovirte nodes, but i cant acess to console.
When i downloaded it, the error is the following :

"Failed to complete haandshake Errore in the pull function."
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WEPP6GRCBJSSOJCGBEKSTTHSMYB5OKMO/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YMXLPKT3A4MCZOE4XJFKBIC4XOWEV33P/

[ovirt-users] Re: RHEL 9 (rocky/centos/..) guest console problem

[Klaas Demter]

Hi,

I guess this is:

https://bugzilla.redhat.com/show_bug.cgi?id=2186439

There was a PR for it recently, so maybe it's fixed in the next 
virt-viewer version :)



Greetings

Klaas


On 6/12/23 12:59, marek wrote:

hi,

i know spice/QXL is deprecated

so, i have guest VM with console config VGA/VNC  (tried Bochs/VNC too)

virt-viewer from windows cannot connect to console ("console" button 
in ovirt admin)


if i use VNC params from "console.vv" i can connect to it with 
tigerVNC client (tightVNC does not work)


any ideas what can be wrong?

btw is there option to prolong password in console.vv?  there is note 
in the file "# Password is valid for 120 seconds."


Marek
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4ESXMWID764ERI6YSKVLUDY4GBIKQ2BW/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U463JWAYZFJZXS55EDNJAGOC2DGYU6AS/

[ovirt-users] Re: unable to connect to the graphic server with VNC graphics protocol

[Klaas Demter]

Hi,

I am unsure about your initial problem, all I can say is I have also 
seen this on RHV 4.5 SP1. My workaround is to use ssh serial console.



Greetings

Klaas

On 4/10/23 20:25, Devin A. Bougie wrote:

Hi Murilo,

Yes, when trying with noVNC we get:
Something went wrong, connection is closed

This is getting pretty urgent for us, so any help connecting to the console of 
VMs running on EL9 hosts would be greatly appreciated.

Thanks for following up,
Devin


On Apr 8, 2023, at 4:17 AM, Murilo Morais  wrote:

Devin, good morning! All good? I hope so.

Have you tried accessing VNC through noVNC?

Em sex., 7 de abr. de 2023 às 16:22, Devin A. Bougie  
escreveu:
Hello,

After upgrading our cluster to oVirt 4.5 on EL9 hosts, we had to switch from 
QXL and SPICE to VGA and VNC as EL9 dropped support for SPICE.  However, we are 
now unable to view the console using Windows, Linux, or MacOS.

For example, after downloading and opening console.vv file with Remote Viewer 
(virt-viewer) on Linux, we see:
Unable to connect to the graphic server.

Any help connecting to a VM using a VGA/VNC console from Windows, Mac, or Linux 
would be greatly appreciated.

Many thanks,
Devin
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XWSCMSYHKEQVP64KBP7SQHAIJT3QKJ5O/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4XZQ7QWL7QLAUEONNQX4P7LJGPVVOPTQ/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6XTK73CP2IU7OBADQFDQKZDRTC37B6TG/

[ovirt-users] Re: Best performance for vcpu pinning

[Klaas Demter]

There is a script in the RHV for HANA Guide: 
https://access.redhat.com/sites/default/files/attachments/deploying_sap_hana_on_red_hat_virtualization_4.4_with_lun_pt_6tb_lm_and_cooper_lake.pdf 
(search for "Calculate CPU Pinning")


Greetings

Klaas

On 11/14/22 13:43, Liran Rotenberg wrote:



On Mon, Nov 14, 2022 at 11:12 AM  wrote:

Hello List,

how can I achieve the best performance with vcpu pinning in KVM?

Is it better to have 1:1 mapping between virtual and physical
thread like this:

    
    
    
    
    
    
    
    

Or is it better to allow each vCPU to run on any of the limited
number of physical threads?

e.g.
    
    
    
    
    
    
    
    


The hypervisor host has 2 CPUs. Each CPU has 8 cores and each core
2 Threads. In total this are 32 threads.

 lscpu
Architecture:          x86_64
CPU op-mode(s):        32-bit, 64-bit
Byte Order:            Little Endian
CPU(s):                32
On-line CPU(s) list:   0-31
Thread(s) per core:    2
Core(s) per socket:    8
Socket(s):             2
NUMA node(s):          2
Vendor ID:             GenuineIntel
CPU family:            6
Model:                 85
Model name:            Intel(R) Xeon(R) Gold 6244 CPU @ 3.60GHz
Stepping:              7
CPU MHz:               4213.731
CPU max MHz:           4400.
CPU min MHz:           1200.
BogoMIPS:              7200.00
Virtualization:        VT-x
L1d cache:             32K
L1i cache:             32K
L2 cache:              1024K
L3 cache:              25344K
NUMA node0 CPU(s):     0-7,16-23
NUMA node1 CPU(s):     8-15,24-31

I need to run 2 VMs on this host. One is for production and should
have 24 vCPUs and the other one is for test and should have 8
vCPUs. Test VM workload should not impact Prod VM performance.

Current configuration is:

TEST:

  128
  1
  
    
    
    
    
    
    
    
    
  

  
    
    
      
    
  

PROD:

  192
  1
  
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
  

  
    
    
      
    
  

Versions are:
ovirt-host-4.3.5
libvirt-5.7.0-28.el7.x86_64

Hi Martin,
The recommended approach would be to pin the CPUs into specific 
physical CPUs.

The most important part is to be under the same socket.
VDSM uses physical CPU 1, unless you changed the default VDSM 
settings, so maybe it would be better to use the second socket.
You may also wish to refer to the NUMA topology (using socket 1 that 
would be - NUMA node1 CPU(s):     8-15,24-31).

Overall:
0#8,24_1#9,25_2#10,26 and so on.
This is also with the thought that physical cpu 8 and 24 are two 
threads in the same core. You can check it using VDSM API or just # 
cat /proc/cpuinfo.
Note, that physical CPUs you use with this method are in a shared pool 
and can be used by other VMs.
If you wish it to be exclusive to the VM, you may use the dedicated 
CPU feature under the VM resource allocation tab. Note, it will pin 
the CPUs for you.


Regards,
Liran.


Thanks in advance,
Martin
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/HCNWYSIBMUY7Q3YU25KQL2MUCK42GMJ6/


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/UDWR2WVOLY7SCEXQHZQJJK7RMT4HBE3B/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6XPQQA3CTL5RHJRCBYFKQRYCPGTOXET6/

[ovirt-users] Re: Engine's certification is about to expire at .... Please renew the engine's certification.

[Klaas Demter]

I think you can do that by running engine-setup --offline

Greetings

Klaas


On 10/14/22 09:40, nico...@devels.es wrote:

Thanks Patrick.

We're not planning to upgrade the engine yet, would this solution 
still be valid if I re-run the engine-setup process without upgrading 
to 4.5?


Thanks again.

El 2022-10-13 19:17, Patrick Hibbs escribió:

Hello,

That means the engine certificate signed by the internal engine CA is
about to expire. (It's used to communicate with VDSM and VNC
connections.)

The engine should auto renew it during the next upgrade. If you have
downtime, you can renew it manually by rerunning engine-setup on the
engine host.

The custom cert you give to apache is not affected by this renewal, but
the engine will start having issues if it's internal cert isn't
renewed.

Do keep in mind that some users have reported having issues when
renewing this cert, (engine-setup not actually renewing it properly,
hosts loosing connectivity, etc.) so I would plan on there being a
complete service interruption, e.g. all VMs inaccessible / down, during
the renewal process. (Maybe do it over a weekend.)

-Patrick Hibbs

On Thu, 2022-10-13 at 11:14 +0100, nico...@devels.es wrote:

Hi,

I'm running oVirt 4.4 and recently I got a message in the events list
like this:

   Engine's certification is about to expire at 2022-10-30. Please
renew
the engine's certification.

What does that exactly mean? And how can it be renewed?

I'm using a custom TLS certificate both for web access and websocket
proxy. Does it need to be renewed anyways?

Thanks.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y6VVJOL47YPYGNMXXWUK24F752PRKMLV/ 



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SK4HD755QPUFVXOWPIJ56NMM5F65GP6N/ 


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QM3CTGTR566MBD5HBMZKW4GR7NHWXWCQ/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KQ7U4M53MOJSUV5JCKHOYIHE64N7XAXC/

[ovirt-users] Re: How to configure HA virtual machine on hosts without IPMI

[Klaas Demter]

Don't storage leases solve that problem? I seem to recall a HA VM also 
works when (gets restarted on other node) a hypervisor completely loses 
power, ie there is no response on the fencing device. I'd expect it to 
work the same without a fencing device.



Greetings

Klaas


On 10/11/22 11:46, Martin Perina wrote:

Hi,

there is no other way how to provide reliable HA VMs in oVirt wihout 
any hardware power management. If your servers don't provide any HW 
power management (such as IPMI, ILO, DRAC, ...), then the only option 
is to attach their power supply inputs through UPS with remote access 
and use apc fencing driver to restart servers using UPS.


Martin


On Tue, Oct 11, 2022 at 9:41 AM samuel@horebdata.cn 
 wrote:


Dear Ovirt folks,

I am thinking of deploly an experimental Ovirt 3-node Cluster on
servers without IPMI. As far i know, Ovirts needs each host to
have fence agent working for any HA virtual machine. My question
is, are there any other ways in Ovirt to support fencing without
using IPMI?

thanks a lot,

Samuel



Do Right Thing (做正确的事) / Pursue Excellence (追求卓越) / Help
Others Succeed (成就他人)
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/EXOTNSY5DMLFYEGCPB4QDX4QUBVETCIJ/



--
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.

___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/PS6PVOKZX5AUEW7ZI4PSI45V4NBIOJHS/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RQI3IGEM3FEZC4MRWC7PPBX6UL6SC2U3/

[ovirt-users] Re: Creating an oVirt Engine Appliance on a different EL Distro (eg Rocky Linux)

[Klaas Demter]

I think you're searching for https://github.com/oVirt/ovirt-appliance ; 
I am not sure about details how it's built, you may have more luck to 
get details on the ovirt-devel mailinglist




On 10/2/22 08:45, Matthew J Black wrote:

Hi All,

Here's an interesting question:

What is the process (ie the Step-By-Step process) to create an/the oVirt Engine 
Appliance based on another version of EL (ie in my case, Rocky Linux)?

Is there a "Manual" somewhere? I mean, surely the oVirt Project's Release 
Manager has *something* that they follow to create the relevant rpm file - no?

Cheers

Dulux-Oz
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3HFHNB5WACECARWJOAQRLLOQHAMN5KHF/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/II5TNGGEDKF354OSQBHJD4DTJY3XEDB4/

[ovirt-users] Re: Grafana login

[Klaas Demter]

I thought that was fixed in latest version:

https://bugzilla.redhat.com/show_bug.cgi?id=1996292

https://bugzilla.redhat.com/show_bug.cgi?id=2021497

Maybe report your findings in one of the bzs.


Greetings

Klaas

On 7/18/22 08:16, markec...@gmail.com wrote:

Ok, i finally found a way to login, using username "admin" and password that I 
have created when installing hosted engine.

I thought the Grafana login was connected to Keycloak or the oVirt internal SSO 
database, but as far as I can see, Grafana account is created during the 
installation of Hosted-engine, and subsequent password changes in Keycloak or 
the internal SSO database do not affect the Grafana login credidentials, you 
have to use ones you have created during installation.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/D6Q2JV65JM3Q3NVTRDDHU532V75652VL/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/F7BHAD6DJ66QYTYQCLAZ5F4DSTH6VDU3/

[ovirt-users] Re: Live Migration FAIL

[Klaas Demter]

https://lists.ovirt.org/archives/list/users@ovirt.org/thread/HYHAVG3KDHMNVWNYROIIX2CTHSLFPVU3/#HYHAVG3KDHMNVWNYROIIX2CTHSLFPVU3

https://bugzilla.redhat.com/show_bug.cgi?id=2079311


Greetings

Klaas


On 7/5/22 08:53, m.rohwe...@itm-h.de wrote:

Hi,

on my setup the live migration looks greate but,

all sytems finnished migration tasks and running on other Host, but most of 
them (random instances not every time the same) going into hung (100%cpu insode 
VM an no response), that only reset can fix.

and i cannot find annything.

Greetings
Michael
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2TNQ2F6JEK6MZ377CMAD7CYUDIXSSDSD/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DMS744WNZSDVQZEETPFM6GMGNRUWOCLZ/

[ovirt-users] Re: Host fails to activate

[Klaas Demter]

I'd delete the host (in engine) and start fresh with a working network 
configuration. I'd even consider reinstalling the host completely and 
start off with the proper network configuration from that side as well :)



Greetings

Klaas


On 6/12/22 07:10, David Johnson wrote:

Ok, I know "how" to fix it, but not how to fix it.

The network definitions on the engine and the hosts are out of sync. 
Somehow the engine thinks the ovirtmgt network is attached to the 
storage network, which is a different physical network with a 
different IP address range. The engine is physically unable to connect 
to the storage network.


I have been able to "fix" it on the engines, regain communications, 
and get things started. However, the engine keeps updating the hosts 
and blowing them off the network. When I attempt to fix the work 
mappings via the engine, it refuses to save the mappings because it 
can't communicate with the host on its old mappings.  The same thing 
happens when I try to reinstall.


I can't imagine I'm the only one who's run into this. Please advise.


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/2MU2STJSCMYI6RSX3LIONAJHWLYMVCJC/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MUIZONTBKPF2IV7VKJXUBGTS65CJNH2N/

[ovirt-users] Re: Multiple dependencies unresolved

[Klaas Demter]

As far as I know there is no solution yet, but the "problem" is not with 
the ovirt-release repos, c8s now ships ansible (in a version that is not 
tested with ovirt), c8s did not do that in past :)


On 3/3/22 20:25, John Florian wrote:


So that explains what happened but we still don't have a solution to 
make this go away, correct?


FTR, I did try `dnf reinstall --disablerepo='*' 
https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm` but 
things are no different afterwards.


John Florian
On 2022-03-03 11:37, Klaas Demter wrote:


https://lists.ovirt.org/archives/list/users@ovirt.org/message/OANKECW6C4SM6USKJP7DJIAHUN5RALFI/


On 3/3/22 17:20, John Florian wrote:


FWIW, I'm getting what appears to be the same dependency errors on 
my oVirt Hosts that were installed new on C8S not all that long 
ago.  I have to do upgrades manually with `dnf upgrade --no-best` 
otherwise I get:


[root@orthosie ~]# dnf upgrade
Last metadata expiration check: 1:24:59 ago on Thu 03 Mar 2022 
09:52:40 AM EST.

Error:
 Problem: package cockpit-ovirt-dashboard-0.15.1-1.el8.noarch 
requires ansible, but none of the providers can be installed
  - package ansible-2.9.27-2.el8.noarch conflicts with ansible-core 
> 2.11.0 provided by ansible-core-2.12.2-2.el8.x86_64
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.27-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.27-1.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.17-1.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.18-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.20-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.21-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.23-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.24-2.el8.noarch
  - cannot install the best update candidate for package 
cockpit-ovirt-dashboard-0.15.1-1.el8.noarch
  - cannot install the best update candidate for package 
ansible-2.9.27-2.el8.noarch
  - package ansible-2.9.20-1.el8.noarch is filtered out by exclude 
filtering
  - package ansible-2.9.16-1.el8.noarch is filtered out by exclude 
filtering
  - package ansible-2.9.19-1.el8.noarch is filtered out by exclude 
filtering
  - package ansible-2.9.23-1.el8.noarch is filtered out by exclude 
filtering
  - package ansible-1:2.9.27-4.el8.noarch is filtered out by exclude 
filtering
(try to add '--allowerasing' to command line to replace conflicting 
packages or '--skip-broken' to skip uninstallable packages or 
'--nobest' to use not only best candidate packages)

[root@orthosie ~]# dnf repolist
repo id repo name
appstream CentOS Stream 8 - AppStream
baseos CentOS Stream 8 - BaseOS
dell-system-update_dependent dell-system-update_dependent
dell-system-update_independent dell-system-update_independent
extras CentOS Stream 8 - Extras
ovirt-4.4 Latest oVirt 4.4 Release
ovirt-4.4-centos-advanced-virtualization CentOS-8 - Advanced 
Virtualization

ovirt-4.4-centos-ceph-pacific CentOS-8-stream - Ceph Pacific
ovirt-4.4-centos-gluster8 CentOS-8-stream - Gluster 8
ovirt-4.4-centos-nfv-openvswitch CentOS-8 - NFV OpenvSwitch
ovirt-4.4-centos-openstack-victoria CentOS-8 - OpenStack victoria
ovirt-4.4-centos-opstools CentOS-8 - OpsTools - collectd
ovirt-4.4-centos-opstools-vault CentOS-8 - OpsTools - collectd - vault
ovirt-4.4-centos-ovirt44 CentOS-8 - oVirt 4.4
ovirt-4.4-copr:copr.fedorainfracloud.org:sac:gluster-ansible Copr 
repo for gluster-ansible owned by sac
ovirt-4.4-copr:copr.fedorainfracloud.org:sbonazzo:EL8_collection 
Copr repo for EL8_collection owned by sbonazzo

ovirt-4.4-epel Extra Packages for Enterprise Linux 8 - x86_64
ovirt-4.4-virtio-win-latest virtio-win builds roughly matching what 
will be shipped in upcoming RHEL

powertools CentOS Stream 8 - PowerTools

John Florian
On 2022-02-21 08:05, Andrea Chierici wrote:

Dear all,
lately the engine started notifying me about some "errors":

"Failed to check for available updates on host XYZ with message 
'Task Ensure Python3 is installed for CentOS/RHEL8 hosts failed to 
execute. Please check logs for more details"


I do understand this is not something that can impact my cluster 
stability, since it's only a matter of checking updates, anyway it 
annoys me a lot.
I checked the logs and apparently the issue is related to some 
repos that are missing/unresolved.


Right now on my hosts I have these repos:

ovirt-release44-4.4.8.3-1.el8.noarch
epel-release-8-13.el8.noarch
centos-stream-release-8.6-1.el8.noarch
puppet5-release-5.0.0-5.el8.noarch

The problems come from:
Error

[ovirt-users] Re: Multiple dependencies unresolved

[Klaas Demter]

https://lists.ovirt.org/archives/list/users@ovirt.org/message/OANKECW6C4SM6USKJP7DJIAHUN5RALFI/


On 3/3/22 17:20, John Florian wrote:


FWIW, I'm getting what appears to be the same dependency errors on my 
oVirt Hosts that were installed new on C8S not all that long ago.  I 
have to do upgrades manually with `dnf upgrade --no-best` otherwise I get:


[root@orthosie ~]# dnf upgrade
Last metadata expiration check: 1:24:59 ago on Thu 03 Mar 2022 
09:52:40 AM EST.

Error:
 Problem: package cockpit-ovirt-dashboard-0.15.1-1.el8.noarch requires 
ansible, but none of the providers can be installed
  - package ansible-2.9.27-2.el8.noarch conflicts with ansible-core > 
2.11.0 provided by ansible-core-2.12.2-2.el8.x86_64
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.27-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.27-1.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.17-1.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.18-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.20-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.21-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.23-2.el8.noarch
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.24-2.el8.noarch
  - cannot install the best update candidate for package 
cockpit-ovirt-dashboard-0.15.1-1.el8.noarch
  - cannot install the best update candidate for package 
ansible-2.9.27-2.el8.noarch
  - package ansible-2.9.20-1.el8.noarch is filtered out by exclude 
filtering
  - package ansible-2.9.16-1.el8.noarch is filtered out by exclude 
filtering
  - package ansible-2.9.19-1.el8.noarch is filtered out by exclude 
filtering
  - package ansible-2.9.23-1.el8.noarch is filtered out by exclude 
filtering
  - package ansible-1:2.9.27-4.el8.noarch is filtered out by exclude 
filtering
(try to add '--allowerasing' to command line to replace conflicting 
packages or '--skip-broken' to skip uninstallable packages or 
'--nobest' to use not only best candidate packages)

[root@orthosie ~]# dnf repolist
repo id repo name
appstream CentOS Stream 8 - AppStream
baseos CentOS Stream 8 - BaseOS
dell-system-update_dependent dell-system-update_dependent
dell-system-update_independent dell-system-update_independent
extras CentOS Stream 8 - Extras
ovirt-4.4 Latest oVirt 4.4 Release
ovirt-4.4-centos-advanced-virtualization CentOS-8 - Advanced 
Virtualization

ovirt-4.4-centos-ceph-pacific CentOS-8-stream - Ceph Pacific
ovirt-4.4-centos-gluster8 CentOS-8-stream - Gluster 8
ovirt-4.4-centos-nfv-openvswitch CentOS-8 - NFV OpenvSwitch
ovirt-4.4-centos-openstack-victoria CentOS-8 - OpenStack victoria
ovirt-4.4-centos-opstools CentOS-8 - OpsTools - collectd
ovirt-4.4-centos-opstools-vault CentOS-8 - OpsTools - collectd - vault
ovirt-4.4-centos-ovirt44 CentOS-8 - oVirt 4.4
ovirt-4.4-copr:copr.fedorainfracloud.org:sac:gluster-ansible Copr repo 
for gluster-ansible owned by sac
ovirt-4.4-copr:copr.fedorainfracloud.org:sbonazzo:EL8_collection Copr 
repo for EL8_collection owned by sbonazzo

ovirt-4.4-epel Extra Packages for Enterprise Linux 8 - x86_64
ovirt-4.4-virtio-win-latest virtio-win builds roughly matching what 
will be shipped in upcoming RHEL

powertools CentOS Stream 8 - PowerTools

John Florian
On 2022-02-21 08:05, Andrea Chierici wrote:

Dear all,
lately the engine started notifying me about some "errors":

"Failed to check for available updates on host XYZ with message 'Task 
Ensure Python3 is installed for CentOS/RHEL8 hosts failed to execute. 
Please check logs for more details"


I do understand this is not something that can impact my cluster 
stability, since it's only a matter of checking updates, anyway it 
annoys me a lot.
I checked the logs and apparently the issue is related to some repos 
that are missing/unresolved.


Right now on my hosts I have these repos:

ovirt-release44-4.4.8.3-1.el8.noarch
epel-release-8-13.el8.noarch
centos-stream-release-8.6-1.el8.noarch
puppet5-release-5.0.0-5.el8.noarch

The problems come from:
Error: Failed to download metadata for repo 
'ovirt-4.4-centos-gluster8': Cannot prepare internal mirrorlist: No 
URLs in mirrorlist
Error: Failed to download metadata for repo 
'ovirt-4.4-centos-opstools': Cannot prepare internal mirrorlist: No 
URLs in mirrorlist
Error: Failed to download metadata for repo 
'ovirt-4.4-openstack-victoria': Cannot download repomd.xml: Cannot 
download repodata/repomd.xml: All mirrors were tried


If I disable these repos "yum update" can finish but then I get a 
large number of unresolved dependencies and "problems":

Error:
 Problem 1: package 

[ovirt-users] Re: CPU compatibility issues

[Klaas Demter]

I think this is

https://bugzilla.redhat.com/show_bug.cgi?id=1940672 / 
https://bugzilla.redhat.com/show_bug.cgi?id=1905158



Use the secure* cpu types.


Greetings

Klaas


On 3/1/22 08:50, Adam Xu wrote:


Dear ovirt community,

my cluster cpu type is "Intel Skylake Server Family" . I have 3 hosts 
with "Xeon Silver 4114" and 1 host with "Xeon Gold 5118", everything 
works ok.


I try to add a new host with "Xeon Silver 4314" now. But it failed.

error log:

Host ovirt7 moved to Non-Operational state as host does not meet the 
cluster's minimum CPU level. Missing CPU features : model_Skylake-Server.


How can I add the new host to cluster? Thanks.


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/FBOKK7DRJUJTN4NXW6SA3HLU7ZB7SQV4/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4GONFNR7TDFYJVKJOFG6NAS3JCZDT7NN/

[ovirt-users] Re: Unable to update self hosted Engine due to missing mirrors

[Klaas Demter]

Ansible is now being shipped as part of appstream in rhel8.6/centos 
stream repos. Not sure how this will be solved for ovirt/rhv :) But the 
most likely answer for a workaround is you need to exclude ansible-core 
in appstream repository. Or via cli something along the lines of "dnf 
update -x ansible-core"



Greetings

Klaas


On 2/21/22 16:43, Nathanaël Blanchet wrote:


Le 21/02/2022 à 16:28, Yedidyah Bar David a écrit :

sudo dnf reinstall --disablerepo='*'
https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm


It partially solves  the issue:

Error:
 Problem: package ansible-runner-service-1.0.7-1.el8.noarch requires 
ansible, but none of the providers can be installed
  - package ansible-2.9.27-2.el8.noarch conflicts with ansible-core > 
2.11.0 provided by ansible-core-2.12.2-2.el8.x86_64
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.27-2.el8.noarch


It seems that 4.4.10 upgrades ansible from 2.9 branch to 2.12


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OANKECW6C4SM6USKJP7DJIAHUN5RALFI/

[ovirt-users] Re: Instability after update

[Klaas Demter]

I think the "official" advice is use ovirt-node.

About what is going wrong:

https://gitlab.com/qemu-project/qemu/-/issues/641

https://bugzilla.redhat.com/show_bug.cgi?id=2006409

I think that was the main issue why it was downgraded to 6.0 in ovirt 
4.4.9.2



Greetings

Klaas


On 1/7/22 12:27, Andrea Chierici wrote:

On 07/01/2022 07:57, Ritesh Chikatwar wrote:

try downgrading in all host and give try

I completed the downgrade and the system seems recovered. Thanks 
Ritesh, you saved my weekend!
What about future upgrades? Any clue on what is going bad on recent 
qemu packages?


Thanks again,

Andrea
--
Andrea Chierici - INFN-CNAF 
Viale Berti Pichat 6/2, 40127 BOLOGNA
Office Tel: +39 051 2095463 
SkypeID ataruz
--

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GC3HJID56VKHXMYGOS7WZOEKS4HMFG2N/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MY6DPD4I6VNXF46EMQPEIBMHN77JXXCG/

[ovirt-users] Re: oVirt and log4j vulnerability

[Klaas Demter]

Hi,

no, I am not sure :)

but if it's only the log4j-api package it should not be vulnerable either:

https://issues.apache.org/jira/browse/LOG4J2-3201?focusedCommentId=17456962=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-17456962

But I am guessing for a real answer you need to wait for a maintainer of 
the package :)



Greetings

Klaas


On 12/12/21 15:48, Kapetanakis Giannis wrote:

Are you sure?

lsof -n -P |grep log4j

java    2977 892943 EE-Manage   ovirt  213r  
REG  253,0 301418    2071533 
/usr/share/ovirt-engine-wildfly/modules/system/layers/base/org/apache/logging/log4j/api/main/log4j-api-2.14.0.jar


seems vulnerable to me.
ovirt   2977  1.1 11.9 3955136 1954500 ? Sl   Dec03 157:37 
ovirt-engine --add-modules java.se -server -XX:+TieredCompilation 
-Xms1462M -Xmx1462M -Xss1M -Djava.awt.headless=true 
-Dsun.rmi.dgc.client.gcInterval=360 
-Dsun.rmi.dgc.server.gcInterval=360 
-Djsse.enableSNIExtension=false -Dresteasy.preferJacksonOverJsonB=true 
-Djackson.deserialization.whitelist.packages=org,com,java,javax 
-Dcom.redhat.fips=false -XX:+HeapDumpOnOutOfMemoryError 
-XX:HeapDumpPath=/var/log/ovirt-engine/dump 
-Djava.util.logging.manager=org.jboss.logmanager 
-Dlogging.configuration=file:///var/lib/ovirt-engine/jboss_runtime/config/ovirt-engine-logging.properties 
-Dorg.jboss.resolver.warning=true 
-Djboss.modules.system.pkgs=org.jboss.byteman 
-Djboss.server.default.config=ovirt-engine 
-Djboss.home.dir=/usr/share/ovirt-engine-wildfly 
-Djboss.server.base.dir=/usr/share/ovirt-engine 
-Djboss.server.data.dir=/var/lib/ovirt-engine 
-Djboss.server.log.dir=/var/log/ovirt-engine 
-Djboss.server.config.dir=/var/lib/ovirt-engine/jboss_runtime/config 
-Djboss.server.temp.dir=/var/lib/ovirt-engine/jboss_runtime/tmp 
-Djboss.controller.temp.dir=/var/lib/ovirt-engine/jboss_runtime/tmp 
-jar /usr/share/ovirt-engine-wildfly/jboss-modules.jar -mp 
/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-wildfly/modules 
-jaxpmodule javax.xml.jaxp-provider org.jboss.as.standalone -c 
ovirt-engine.xml


rpm -qf 
/usr/share/ovirt-engine-wildfly/modules/system/layers/base/org/apache/logging/log4j/api/main/log4j-api-2.14.0.jar

ovirt-engine-wildfly-23.0.2-1.el8.x86_64

I believe we should start engine with -Dlog4j2.formatMsgNoLookups=true
for mitigation but I cannot find where to apply this for jboss.

maybe directly in 
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.py 
somewhere in _engineArgs


G

On 12/12/2021 10:25, Klaas Demter wrote:


Hi,

I think this only affects between 2.0 <= and <= 2.14.1 
(https://bugzilla.redhat.com/show_bug.cgi?id=2030932)


ovirt engine uses 1.2.17


So I don't think this hits ovirt 4.4


Greetings

Klaas


On 12/11/21 22:53, Chris Adams wrote:

Can an oVirt developer comment about the log4j vulnerability - is
oVirt's use of log4j vulnerable?


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/TH5FF4AMOB5VO4FUS7TRJIFBP7ISQDCY/




___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/3WY4NXNYOKWN5YX5YDXGOGS2KZVK3IIS/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FHJWJHADUF4VLQVBK4LRGYQMD5ZMNBU5/

[ovirt-users] Re: oVirt and log4j vulnerability

[Klaas Demter]

Hi,

I think this only affects between 2.0 <= and <= 2.14.1 
(https://bugzilla.redhat.com/show_bug.cgi?id=2030932)


ovirt engine uses 1.2.17


So I don't think this hits ovirt 4.4


Greetings

Klaas


On 12/11/21 22:53, Chris Adams wrote:

Can an oVirt developer comment about the log4j vulnerability - is
oVirt's use of log4j vulnerable?___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TH5FF4AMOB5VO4FUS7TRJIFBP7ISQDCY/

[ovirt-users] Re: oVirt installation via PXE

[Klaas Demter]

I think you can follow the rhv docs:

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/installing_red_hat_virtualization_as_a_self-hosted_engine_using_the_command_line/index#Automating_RHVH_Deployment_SHE_cli_deploy


Greetings

Klaas


On 11/23/21 17:35, Jean-Louis Dupond via Users wrote:

Hi,

We would like to install oVirt Node via some automated way.
I think the best option to do this is via a PXE boot, and there run 
the installation.


But I would like to know how you can customize the installation of 
oVirt Node. So no manual intervention is needed.


Is it just creating a kickstart file based from the 
'interactive-defaults.ks' kickstart in the iso and have the 
'ovirt-node-ng-image.squashfs.img' file accessible somewhere?
Are there things that should not be used in the kickstart file? I 
think like disk settings as this is already built-in into oVirt Node?


Other idea's are also welcome :)

Thanks
Jean-Louis

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SVHCY46QXT4IL3YREEIQ52HLAB6DLOUY/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6WFES6ZRAQZHEICXVGWPJWCCMHUKE23I/

[ovirt-users] Re: The service NetworkManager-wait-online fail to start

[Klaas Demter]

Do you have an ethernet interface that is UP but does not have dhcp/ip 
configured? Disable that via network manager or via onboot=no in ifcfg file



Greetings

Klaas


On 10/20/21 10:51, amaz...@hotmail.com wrote:

Hello,
i have install new Ovirt node.
The service NetworkManager-wait-online fail to start:
10:21 Failed to start Network Manager Wait Online. systemd
10:21 NetworkManager-wait-online.service: Failed with result 'exit-code'. 
systemd
10:21 NetworkManager-wait-online.service: Main process exited, code=exited, 
status=1/FAILURE systemd
10:20 Starting Network Manager Wait Online... systemd

When y try:
sh /usr/lib/systemd/system/NetworkManager-wait-online.service :
/usr/lib/systemd/system/NetworkManager-wait-online.service: line 1: [Unit]: comm
/usr/lib/systemd/system/NetworkManager-wait-online.service: line 2: Manager: com
/usr/lib/systemd/system/NetworkManager-wait-online.service: line 3: syntax error
/usr/lib/systemd/system/NetworkManager-wait-online.service: line 3: `Documentati

I'm desperate to find solution!!

thanks
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GNQZH52OLXFJHSBIOJIADNZBIFDU64DU/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UTB46GYRUWXUYHS5NUQJPMHOGCZNKM2O/

[ovirt-users] Re: fresh hyperconverged Gluster setup failed in ovirt 4.4.8

[Klaas Demter]

https://bugzilla.redhat.com/show_bug.cgi?id=2002178 seems this is going 
to be fixed in 4.4.9 :)

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YQZSSWJU4TX62QVVZEG6Q2V3RHDF6W63/

[ovirt-users] Re: fresh hyperconverged Gluster setup failed in ovirt 4.4.8

[Klaas Demter]

Hi,

the bug states that has been done because glusterfs includes it's own 
selinux policy module. So maybe ovirt-host needs a dependency to 
glusterfs-selinux ?




Greetings

Klaas


On 10/7/21 01:04, jinyx...@gmail.com wrote:

I've been having the same issue and I barely have any hair left. I did find 
something though; per selinux-policy changelog:

https://centos.pkgs.org/8-stream/centos-baseos-aarch64/selinux-policy-3.14.3-78.el8.noarch.rpm.html

2021-08-12 - Zdenek Pytela  - 3.14.3-77
...
- Remove glusterd SELinux module from distribution policy
Resolves: rhbz#1816718

selinux-policy no longer contains gluster module thats why the policy can't be 
found. oVirt node iso is based in Stream which is up to date. Installing on a 
CentOS 8 or Almalinux/Rocky distro still uses the older *-67 so applying 
glusterfs selinux policy works fine. This issue deals with node iso.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CSTF7XZ2RJPWEE7HLA57FRUOXEQPDSIM/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DO4WE7YTHLTX5BQWW4GMNAPEXMHN3VBT/

[ovirt-users] Re: about the power management of the hosts

[Klaas Demter]

Hi,

I don't think you're supposed to use IPMI for anything :) Most likely 
candidate for current hardware is redfish -- 
https://en.wikipedia.org/wiki/Redfish_(specification)



Greetings

Klaas


On 9/19/21 17:08, Tommy Sway wrote:


In product env are Inspur Server.

It should use the IPMI.

*From:*users-boun...@ovirt.org  *On Behalf Of 
*Strahil Nikolov via Users

*Sent:* Saturday, September 18, 2021 11:06 PM
*To:* Tommy Sway ; users@ovirt.org
*Subject:* [ovirt-users] Re: about the power management of the hosts

Values are based on the method you want to fence the node.

What type of server do you have ?

Best Regards,

Strahil Nikolov

On Sat, Sep 18, 2021 at 15:31, Tommy Sway

 wrote:

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/7HJHXQ25BKIQJI7V7XYMBGVFFTJHQELZ/


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/CSZADLQJUY6F2YTRTCQR6OQAFD5EANMY/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7HJAM5RA34QNJHYMIDOUKO7KW65YOQAY/

[ovirt-users] Re: Ovirt-4.4.7 Adding host to existing cluster will attempt to run ovirt-hosted-engine-setup

[Klaas Demter]

Hi,

https://lists.ovirt.org/archives/list/users@ovirt.org/message/67ROKZCLHLGWUK6LP2JPOP7KSALEARLV/


Greetings

Klaas


On 8/31/21 12:40, Paul-Erik Törrönen wrote:

On 2021-08-17 11:12, Dana Elfassy wrote:

The execution of the task itself is fine - we're always installing this
package because of dependencies.
As for its failure- looks like an issue with the repositories.
Please run $ yum repolist
on the host and copy the output


Sorry for replying so late, was on a 2-week road-trip.

$ yum repolist
repo id    repo name
appstream    CentOS Stream 8 - 
AppStream

baseos    CentOS Stream 8 - BaseOS
elasticsearch-7.x    Elasticsearch 
repository for 7.x packages
epel-next    Extra Packages for 
Enterprise Linux 8 - Next - x86_64

extras    CentOS Stream 8 - Extras
ovirt-4.4    Latest oVirt 4.4 Release
ovirt-4.4-centos-ceph-pacific    
Ceph packages for x86_64
ovirt-4.4-centos-gluster8    
CentOS-8 - Gluster 8
ovirt-4.4-centos-opstools    
CentOS-8 - OpsTools - collectd
ovirt-4.4-centos-stream-advanced-virtualization 
   Advanced Virtualization CentOS 
Stream packages for x86_64
ovirt-4.4-centos-stream-nfv-openvswitch 
   CentOS-8 - NFV OpenvSwitch
ovirt-4.4-centos-stream-ovirt44    
CentOS-8 Stream - oVirt 4.4
ovirt-4.4-copr:copr.fedorainfracloud.org:mdbarroso:ovsdbapp 
   Copr repo for ovsdbapp owned by 
mdbarroso
ovirt-4.4-copr:copr.fedorainfracloud.org:sac:gluster-ansible 
   Copr repo for gluster-ansible 
owned by sac
ovirt-4.4-copr:copr.fedorainfracloud.org:sbonazzo:EL8_collection 
   Copr repo for EL8_collection 
owned by sbonazzo
ovirt-4.4-epel    Extra Packages 
for Enterprise Linux 8 - x86_64
ovirt-4.4-openstack-train    
OpenStack Train Repository
ovirt-4.4-virtio-win-latest    
virtio-win builds roughly matching what will be shipped in upcoming RHEL
powertools    CentOS Stream 8 - 
PowerTools


Then there's also this:

$ dnf update
Last metadata expiration check: 0:28:17 ago on Tue 31 Aug 2021 
12:45:32 PM EEST.

Error:
 Problem 1: cannot install the best update candidate for package 
ovirt-host-dependencies-4.4.7-1.el8.x86_64
  - nothing provides python3-os-brick needed by 
ovirt-host-dependencies-4.4.8-1.el8.x86_64
 Problem 2: package ovirt-host-4.4.8-1.el8.x86_64 requires 
ovirt-host-dependencies = 4.4.8-1.el8, but none of the providers can 
be installed
  - cannot install the best update candidate for package 
ovirt-host-4.4.7-1.el8.x86_64
  - nothing provides python3-os-brick needed by 
ovirt-host-dependencies-4.4.8-1.el8.x86_64



Poltsi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HD57J4ZHB5QCPNRTWPER4NC3F5JNKMTS/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UGYNIFWP3OUURRR3T5IPF64D4TGB6PW3/

[ovirt-users] Re: upgrading ovirt engine from 4.4.6.7-1.el8 to 4.4.8 latest getting failed

[Klaas Demter]

Hi,

I think that is solved by running

dnf update -y ovirt-release44

before engine-setup


Greetings

Klaas


On 8/23/21 9:21 AM, dhanaraj.ramesh--- via Users wrote:

Since 4.4.8 released I'm trying to upgrade my hosted engine from 4.4.6 to 4.4.8 
but thesetup has been failed

  engine-setup
[ INFO  ] Stage: Initializing
[ INFO  ] Stage: Environment setup
   Configuration files: 
/etc/ovirt-engine-setup.conf.d/10-packaging-jboss.conf, 
/etc/ovirt-engine-setup.conf.d/10-packaging.conf, 
/etc/ovirt-engine-setup.conf.d/20-setup-ovirt-post.conf
   Log file: 
/var/log/ovirt-engine/setup/ovirt-engine-setup-20210823001021-vbtu6d.log
   Version: otopi-1.9.4 (otopi-1.9.4-1.el8)
[ INFO  ] Stage: Environment packages setup
[ INFO  ] Stage: Programs detection
[ INFO  ] Stage: Environment setup (late)
[ INFO  ] Stage: Environment customization

   --== PRODUCT OPTIONS ==--

[ INFO  ] ovirt-provider-ovn already installed, skipping.

   --== PACKAGES ==--

[ INFO  ] Checking for product updates...
[ ERROR ] DNF
   Problem 1: cannot install the best candidate for the job
- nothing provides ceph-common needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
- nothing provides python3-cinderlib needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
   Problem 2: problem with installed package 
ovirt-engine-4.4.6.7-1.el8.noarch
- cannot install the best update candidate for package 
ovirt-engine-4.4.6.7-1.el8.noarch
- nothing provides ceph-common needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
- nothing provides python3-cinderlib needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
[ INFO  ] DNF Performing DNF transaction rollback
[ ERROR ] Failed to execute stage 'Environment customization':
   Problem 1: cannot install the best candidate for the job
- nothing provides ceph-common needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
- nothing provides python3-cinderlib needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
   Problem 2: problem with installed package 
ovirt-engine-4.4.6.7-1.el8.noarch
- cannot install the best update candidate for package 
ovirt-engine-4.4.6.7-1.el8.noarch
- nothing provides ceph-common needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
- nothing provides python3-cinderlib needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
[ INFO  ] Stage: Clean up
   Log file is located at 
/var/log/ovirt-engine/setup/ovirt-engine-setup-20210823001021-vbtu6d.log
[ INFO  ] Generating answer file 
'/var/lib/ovirt-engine/setup/answers/20210823001030-setup.conf'
[ INFO  ] Stage: Pre-termination
[ INFO  ] Stage: Termination
[ ERROR ] Execution of setup failed



setup log file :
2021-08-23 00:10:30,642-0700 ERROR otopi.context context._executeMethod:154 
Failed to execute stage 'Environment customization':
  Problem 1: cannot install the best candidate for the job
   - nothing provides ceph-common needed by ovirt-engine-4.4.8.4-1.el8.noarch
   - nothing provides python3-cinderlib needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
  Problem 2: problem with installed package ovirt-engine-4.4.6.7-1.el8.noarch
   - cannot install the best update candidate for package 
ovirt-engine-4.4.6.7-1.el8.noarch
   - nothing provides ceph-common needed by ovirt-engine-4.4.8.4-1.el8.noarch
   - nothing provides python3-cinderlib needed by 
ovirt-engine-4.4.8.4-1.el8.noarch
2021-08-23 00:10:30,643-0700 DEBUG otopi.plugins.otopi.dialog.human 
human.format:69 newline sent to logger
2021-08-23 00:10:30,643-0700 DEBUG otopi.context context.dumpEnvironment:765 
ENVIRONMENT DUMP - BEGIN
2021-08-23 00:10:30,643-0700 DEBUG otopi.context context.dumpEnvironment:775 
ENV BASE/error=bool:'True'
2021-08-23 00:10:30,643-0700 DEBUG otopi.context context.dumpEnvironment:775 ENV 
BASE/exceptionInfo=list:'[(, DepsolveError(), 
)]'
2021-08-23 00:10:30,645-0700 DEBUG otopi.context context.dumpEnvironment:779 
ENVIRONMENT DUMP - END
2021-08-23 00:10:30,645-0700 INFO otopi.context context.runSequence:616 Stage: 
Clean up
2021-08-23 00:10:30,645-0700 DEBUG otopi.context context.runSequence:620 STAGE 
cleanup
2021-08-23 00:10:30,646-0700 DEBUG otopi.context context._executeMethod:127 
Stage cleanup METHOD 
otopi.plugins.otopi.dialog.answer_file.Plugin._generate_answer_file
2021-08-23 00:10:30,647-0700 DEBUG otopi.context context.dumpEnvironment:765 
ENVIRONMENT DUMP - BEGIN
2021-08-23 00:10:30,647-0700 DEBUG otopi.context context.dumpEnvironment:775 
ENV DIALOG/answerFileContent=str:'# OTOPI answer file, generated by human dialog
[environment:default]
'
2021-08-23 00:10:30,648-0700 DEBUG otopi.context context.dumpEnvironment:779 
ENVIRONMENT DUMP - END
2021-08-23 00:10:30,649-0700 DEBUG otopi.context context._executeMethod:127 
Stage cleanup METHOD 
otopi.plugins.ovirt_engine_common.base.core.misc.Plugin._cleanup
2021-08-23 00:10:30,649-0700 DEBUG otopi.plugins.otopi.dialog.human 
dialog.__logString:204 DIALOG:SEND   

[ovirt-users] Re: Unable to change Mail Recipient for Event Notifications

[Klaas Demter]

Hi,

I can't help you with the immediate question about the notify webui, but 
you can do what I do: I change the email address of my admin user. You 
can do that with "ovirt-aaa-jdbc-tool user edit ..." on the engine VM. 
You will need to relogin with admin user in order for engine to pick up 
on the mail change.



Greetings

Klaas


On 8/23/21 8:36 AM, Rodrigo G. López wrote:

Hello all,


There seems to be a problem with oVirt 4.4.7.7 when modifying the Mail 
Recipient field in the Add Event Notification modal with the `admin' 
user. It defaults to `root@localhost' and I can't change it no matter 
what I try. It happens whether I check some Events for Notification or 
not, and the ovirt-engine-notifier service is also running healthily.



Is this known behavior? What am I missing? I'm following §21 of the 
Administration Guide.




Best,

-rodri



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DFWUG6YJEIYPX3ZVFJF5TEONCGQJJEO6/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5QG45JNZUKKICEW4FLFV4J4V5JLEXVWV/

[ovirt-users] Re: HA VM and vm leases usage with site failure

[Klaas Demter]

Okay, so the SPM is only blocking me if I have thin provisioned block 
storage that needs extending. This is luckily not the case because we 
primarily use NFS. It is something though I have never thought about, in 
my head the storage leases completely solved the "host crashes and power 
management does not answer" until I read your mail :)



Thanks for the detailed explanation Nir!


Greetings

Klaas


On 8/10/21 11:20 AM, Nir Soffer wrote:

On Tue, Aug 10, 2021 at 12:05 PM Klaas Demter  wrote:

I always thought the SPM role is also "managed" by a storage lease :)

The SPM is using a storage lease to ensure we have only one SPM. But due to
the master mount, we cannot start new SPM even if the old SPM does not hold
the lease, since it will corrupt the master filesystem, used to keep SPM tasks.


But that does not seem to be the case.

So this means a storage lease is only useful if the host is not the SPM?
If the SPM host is completely unreachable, not via OS, not via power
management, then the storage lease won't help to restart VMs on other
hosts automatically? This is definitely something I did not consider
when building my environment.

Starting VMs should not depend on the SPM, this is the basic design. If issues
with SPM beaks starting VMs, this is a bug that we need to fix.

The only known dependency is extending thin provisioning disks on block storage.
Without the SPM this cannot happen since the SPM is the only host that
can extend
the logical volumes.


On 8/9/21 6:25 PM, Nir Soffer wrote:

On Thu, Aug 5, 2021 at 5:45 PM Gianluca Cecchi
 wrote:

Hello,
supposing latest 4.4.7 environment installed with an external engine and two 
hosts, one in one site and one in another site.
For storage I have one FC storage domain.
I try to simulate a sort of "site failure scenario" to see what kind of HA I 
should expect.

The 2 hosts have power mgmt configured through fence_ipmilan.

I have 2 VMs, one configured as HA with lease on storage (Resume Behavior: 
kill) and one not marked as HA.

Initially host1 is SPM and it is the host that runs the two VMs.

Fencing of host1 from host2 initially works ok. I can test also from command 
line:
# fence_ipmilan -a 10.10.193.152 -P -l my_fence_user -A password -L operator -S 
/usr/local/bin/pwd.sh -o status
Status: ON

On host2 I then prevent reaching host1 iDRAC:
firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -d 10.10.193.152 -p udp 
--dport 623 -j DROP
firewall-cmd --direct --add-rule ipv4 filter OUTPUT 1 -j ACCEPT

Why do you need to prevent access from host1 to host2? Hosts do not
access each other unless you migrate vms between hosts.


so that:

# fence_ipmilan -a 10.10.193.152 -P -l my_fence_user -A password -L operator -S 
/usr/local/bin/pwd.sh -o status
2021-08-05 15:06:07,254 ERROR: Failed: Unable to obtain correct plug status or 
plug is not available

On host1 I generate panic:
# date ; echo 1 > /proc/sys/kernel/sysrq ; echo c > /proc/sysrq-trigger
Thu Aug  5 15:06:24 CEST 2021

host1 correctly completes its crash dump (kdump integration is enabled) and 
reboots, but I stop it at grub prompt so that host1 is unreachable from host2 
point of view and also power fencing not determined

Crashing the host and preventing it from booting is fine, but isn't it
simpler to stop the host using power management?


At this point I thought that VM lease functionality would have come in place 
and host2 would be able to re-start the HA VM, as it is able to see that the 
lease is not taken from the other host and so it can acquire the lock itself

Once host1 disappears from the system, engine should detect that the HA VM
is at unknown status, and start it on the other host.

But you kill the SPM, and without SPM some operation cannot
work until a new SPM is selected. And for the SPM we don't have a way
to start it on another host *before* the old SPM host reboot, and we can
verify that the old host is not the SPM.


Instead it goes through the attempt to power fence loop
I wait about 25 minutes without any effect but continuous attempts.

After 2 minutes host2 correctly becomes SPM and VMs are marked as unknown

I wonder how host2 became the SPM. This should not be possible before
host 1 is rebooted. Did you use "Confirm host was rebooted" in engine?


At a certain point after the failures in power fencing host1, I see the event:

Failed to power fence host host1. Please check the host status and it's power management 
settings, and then manually reboot it and click "Confirm Host Has Been Rebooted"

If I select host and choose "Confirm Host Has Been Rebooted", then the two VMs 
are marked as down and the HA one is correctly booted by host2.

But this requires my manual intervention.

So you host2 became the SPM after you chose: "Confirm Host Has Been Rebooted"?


Is the behavior above the expected one or the use of VM leases should have 
allowed host2 to bypass fencing inabil

[ovirt-users] Re: HA VM and vm leases usage with site failure

[Klaas Demter]

Hi,

I always thought the SPM role is also "managed" by a storage lease :) 
But that does not seem to be the case.


So this means a storage lease is only useful if the host is not the SPM? 
If the SPM host is completely unreachable, not via OS, not via power 
management, then the storage lease won't help to restart VMs on other 
hosts automatically? This is definitely something I did not consider 
when building my environment.



Greetings

Klaas


On 8/9/21 6:25 PM, Nir Soffer wrote:

On Thu, Aug 5, 2021 at 5:45 PM Gianluca Cecchi
 wrote:

Hello,
supposing latest 4.4.7 environment installed with an external engine and two 
hosts, one in one site and one in another site.
For storage I have one FC storage domain.
I try to simulate a sort of "site failure scenario" to see what kind of HA I 
should expect.

The 2 hosts have power mgmt configured through fence_ipmilan.

I have 2 VMs, one configured as HA with lease on storage (Resume Behavior: 
kill) and one not marked as HA.

Initially host1 is SPM and it is the host that runs the two VMs.

Fencing of host1 from host2 initially works ok. I can test also from command 
line:
# fence_ipmilan -a 10.10.193.152 -P -l my_fence_user -A password -L operator -S 
/usr/local/bin/pwd.sh -o status
Status: ON

On host2 I then prevent reaching host1 iDRAC:
firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -d 10.10.193.152 -p udp 
--dport 623 -j DROP
firewall-cmd --direct --add-rule ipv4 filter OUTPUT 1 -j ACCEPT

Why do you need to prevent access from host1 to host2? Hosts do not
access each other unless you migrate vms between hosts.


so that:

# fence_ipmilan -a 10.10.193.152 -P -l my_fence_user -A password -L operator -S 
/usr/local/bin/pwd.sh -o status
2021-08-05 15:06:07,254 ERROR: Failed: Unable to obtain correct plug status or 
plug is not available

On host1 I generate panic:
# date ; echo 1 > /proc/sys/kernel/sysrq ; echo c > /proc/sysrq-trigger
Thu Aug  5 15:06:24 CEST 2021

host1 correctly completes its crash dump (kdump integration is enabled) and 
reboots, but I stop it at grub prompt so that host1 is unreachable from host2 
point of view and also power fencing not determined

Crashing the host and preventing it from booting is fine, but isn't it
simpler to stop the host using power management?


At this point I thought that VM lease functionality would have come in place 
and host2 would be able to re-start the HA VM, as it is able to see that the 
lease is not taken from the other host and so it can acquire the lock itself

Once host1 disappears from the system, engine should detect that the HA VM
is at unknown status, and start it on the other host.

But you kill the SPM, and without SPM some operation cannot
work until a new SPM is selected. And for the SPM we don't have a way
to start it on another host *before* the old SPM host reboot, and we can
verify that the old host is not the SPM.


Instead it goes through the attempt to power fence loop
I wait about 25 minutes without any effect but continuous attempts.

After 2 minutes host2 correctly becomes SPM and VMs are marked as unknown

I wonder how host2 became the SPM. This should not be possible before
host 1 is rebooted. Did you use "Confirm host was rebooted" in engine?


At a certain point after the failures in power fencing host1, I see the event:

Failed to power fence host host1. Please check the host status and it's power management 
settings, and then manually reboot it and click "Confirm Host Has Been Rebooted"

If I select host and choose "Confirm Host Has Been Rebooted", then the two VMs 
are marked as down and the HA one is correctly booted by host2.

But this requires my manual intervention.

So you host2 became the SPM after you chose: "Confirm Host Has Been Rebooted"?


Is the behavior above the expected one or the use of VM leases should have 
allowed host2 to bypass fencing inability and start the HA VM with lease? 
Otherwise I don't understand the reason to have the lease itself at all

The vm lease allows engine to start HA VM on another host when it cannot
access the original host the VM was running on.

The VM can start only if it is not running on the original host. If
the VM is running
it will keep the lease live, and other hosts will not be able to acquire it.

I suggest you file an ovirt-engine bug with clear instructions on how
to reproduce
the issue.

You can check this presentation on this topic:
https://www.youtube.com/watch?v=WLnU_YsHWtU

Nir
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/J3QWSUZTYHZM74ZESJG7M2VAGZRLY5L2/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to 

[ovirt-users] Re: HA VM and vm leases usage with site failure

[Klaas Demter]

Hi,

I'd say your scenario is exactly what the storage leases are for.

I can tell you that it used to work in 4.3, but I haven't tested/needed 
the feature in quite a while :)


Maybe open a bugzilla and attach relevant logs to get the developer 
attention.



Greetings

Klaas


On 8/5/21 4:42 PM, Gianluca Cecchi wrote:

Hello,
supposing latest 4.4.7 environment installed with an external engine 
and two hosts, one in one site and one in another site.

For storage I have one FC storage domain.
I try to simulate a sort of "site failure scenario" to see what kind 
of HA I should expect.


The 2 hosts have power mgmt configured through fence_ipmilan.

I have 2 VMs, one configured as HA with lease on storage (Resume 
Behavior: kill) and one not marked as HA.


Initially host1 is SPM and it is the host that runs the two VMs.

Fencing of host1 from host2 initially works ok. I can test also from 
command line:
# fence_ipmilan -a 10.10.193.152 -P -l my_fence_user -A password -L 
operator -S /usr/local/bin/pwd.sh -o status

Status: ON

On host2 I then prevent reaching host1 iDRAC:
firewall-cmd --direct --add-rule ipv4 filter OUTPUT 0 -d 10.10.193.152 
-p udp --dport 623 -j DROP

firewall-cmd --direct --add-rule ipv4 filter OUTPUT 1 -j ACCEPT

so that:

# fence_ipmilan -a 10.10.193.152 -P -l my_fence_user -A password -L 
operator -S /usr/local/bin/pwd.sh -o status
2021-08-05 15:06:07,254 ERROR: Failed: Unable to obtain correct plug 
status or plug is not available


On host1 I generate panic:
# date ; echo 1 > /proc/sys/kernel/sysrq ; echo c > /proc/sysrq-trigger
Thu Aug  5 15:06:24 CEST 2021

host1 correctly completes its crash dump (kdump integration is 
enabled) and reboots, but I stop it at grub prompt so that host1 is 
unreachable from host2 point of view and also power fencing not determined


At this point I thought that VM lease functionality would have come in 
place and host2 would be able to re-start the HA VM, as it is able to 
see that the lease is not taken from the other host and so it can 
acquire the lock itself

Instead it goes through the attempt to power fence loop
I wait about 25 minutes without any effect but continuous attempts.

After 2 minutes host2 correctly becomes SPM and VMs are marked as unknown

At a certain point after the failures in power fencing host1, I see 
the event:


Failed to power fence host host1. Please check the host status and 
it's power management settings, and then manually reboot it and click 
"Confirm Host Has Been Rebooted"


If I select host and choose "Confirm Host Has Been Rebooted", then the 
two VMs are marked as down and the HA one is correctly booted by host2.


But this requires my manual intervention.

Is the behavior above the expected one or the use of VM leases should 
have allowed host2 to bypass fencing inability and start the HA VM 
with lease? Otherwise I don't understand the reason to have the lease 
itself at all


Thanks,
Gianluca


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/FK254O4WOPWV56F753BVSK5GYQFZ4E5Q/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SGYIN5U57JJCHHQGJFT3FL2BZ3QTYI4H/

[ovirt-users] Re: Change lease storage domain while VM running

[Klaas Demter]

I wrote an example for changing the lease via python sdk, it was never 
merged though.


https://gerrit.ovirt.org/c/ovirt-engine-sdk/+/99712


Greetings

Klaas

On 7/30/21 4:13 PM, Gianluca Cecchi wrote:

Hello,
on a 4.4.6 environment where I'm moving storage I want to change the 
lease domain for an HA VM.
The VM is running and if I go and edit, change sd and then press ok 
button, I get a window with:


"
Changes that can be applied immediately:

    VM Lease
"

I don't select the "apply later" check box. But then instead when I 
confirm, I get an error window with:


"
vm_name:

    Cannot edit VM. Hot swapping of VM leases is not supported, please 
remove the current lease and then set a new one.

"

Possibly it is possible to hot add a lease but not swap? So I think 
the first window should be changed. Is this a known issue?
No problem if I change the lease storage domain while the VM is 
powered off.


I don't know if it is already fixed in 4.4.7... I'm going to check 
next days..


Gianluca

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2T75KL33773P3QVF7ZHITEPOZYEIKTUH/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UNSXXJOVJB2WDHO4IZMXRJEWXXLHUQVF/

[ovirt-users] Re: Updates Failing

[Klaas Demter]

You need to put the host into maintenance mode if you have multiple 
hosts. If you only have one you need to shutdown all normal VMs and put 
hosted engine into maintenance mode and shut that down as well.


On 7/6/21 9:44 PM, Gary Pedretty wrote:

Getting errors trying to run dnf/yum update due to a vdsm issue.


yum update
Last metadata expiration check: 0:17:33 ago on Tue 06 Jul 2021 
11:17:05 AM AKDT.

Error: Running QEMU processes found, cannot upgrade Vdsm.

Current running version of vdsm is


vdsm-4.40.60.7-1.el8


CentOS Stream
RHEL - 8.5 - 3.el8

kernel
4.18.0 - 310.el8.x86_64



___
Gary Pedretty
IT Manager
Ravn Alaska

Office: 907-266-8451
Mobile: 907-388-2247
Email: gary.pedre...@ravnalaska.com 

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EB36I2F55Z6QTBXJVISZ2GMFCLCQHGLU/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5PJI5HIQ463YP44ZEK7DYTMDBSJX7W2Q/

[ovirt-users] Re: Failing to migrate hosted engine from 4.4.6 host to 4.4.7 host

[Klaas Demter]

https://bugzilla.redhat.com/show_bug.cgi?id=1979624

run: semodule -B; touch /.autorelabel; reboot

report back if it fixes everything


On 7/6/21 5:40 PM, Nur Imam Febrianto wrote:


I’m having similar problem like this. 15 host, 7 of them already 
upgraded to 4.4.7 and I can’t migrate any VM or HE from 4.4.6 host to 
4.4.7.


Regards,

Nur Imam Febrianto

*From: *Sandro Bonazzola 
*Sent: *06 July 2021 19:37
*To: *oVirt Users ; Arik Hadas 

*Subject: *[ovirt-users] Failing to migrate hosted engine from 4.4.6 
host to 4.4.7 host


Hi,

I update the hosted engine to 4.4.7 and one of the 2 nodes where the 
engine is running.


Current status is:

- Hosted engine at 4.4.7 running on Node 0

- Node 0 at 4.4.6

- Node 1 at 4.4.7

Now, moving Node 0 to maintenance successfully moved the SPM from Node 
0 to Node 1 but while trying to migrate hosted engine I get on Node 0 
vdsm.log:


2021-07-06 12:25:07,882+ INFO  (jsonrpc/5) [vdsm.api] START 
repoStats(domains=()) from=:::10.46.8.133,35048, 
task_id=f12d7694-d2b5-4658-9e0d-3f0dc54aca93 (api:48)
2021-07-06 12:25:07,882+ INFO  (jsonrpc/5) [vdsm.api] FINISH repoStats 
return={'1996dc3b-d33f-49cb-b32a-8f7b1d50af5e': {'code': 0, 'lastCheck': '3.0', 
'delay': '0.00114065', 'valid': True, 'version': 5, 'acq
uired': True, 'actual': True}} from=:::10.46.8.133,35048, 
task_id=f12d7694-d2b5-4658-9e0d-3f0dc54aca93 (api:54)
2021-07-06 12:25:07,882+ INFO  (jsonrpc/5) [vdsm.api] START 
multipath_health() from=:::10.46.8.133,35048, 
task_id=6515fac9-830a-4b6a-904e-cc1262e87f01 (api:48)
2021-07-06 12:25:07,882+ INFO  (jsonrpc/5) [vdsm.api] FINISH 
multipath_health return={} from=:::10.46.8.133,35048, 
task_id=6515fac9-830a-4b6a-904e-cc1262e87f01 (api:54)
2021-07-06 12:25:07,883+ ERROR (migsrc/b2072331) [virt.vm] 
(vmId='b2072331-1558-4186-86b4-fa83af8eba95') can't connect to virtlogd: Unable 
to open system token /run/libvirt/common/system.token: Permission de
nied (migration:294)
2021-07-06 12:25:07,888+ INFO  (jsonrpc/5) [api.host] FINISH getStats 
return={'status': {'code': 0, 'message': 'Done'}, 'info': (suppressed)} 
from=:::10.46.8.133,35048 (api:54)
2021-07-06 12:25:08,166+ ERROR (migsrc/b2072331) [virt.vm] 
(vmId='b2072331-1558-4186-86b4-fa83af8eba95') Failed tomigrate  (migration:467)
Traceback (most recent call last):
   File "/usr/lib/python3.6/site-packages/vdsm/virt/migration.py", line 441, in 
_regular_run
     time.time(), machineParams
   File "/usr/lib/python3.6/site-packages/vdsm/virt/migration.py", line 537, in 
_startUnderlyingMigration
     self._perform_with_conv_schedule(duri, muri)
   File "/usr/lib/python3.6/site-packages/vdsm/virt/migration.py", line 626, in 
_perform_with_conv_schedule
     self._perform_migration(duri, muri)
   File "/usr/lib/python3.6/site-packages/vdsm/virt/migration.py", line 555, in 
_perform_migration
     self._migration_flags)
   File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 159, in 
call
     return getattr(self._vm._dom, name)(*a, **kw)
   File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, in 
f
     ret = attr(*args, **kwargs)
   File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", 
line 131, in wrapper
     ret = f(*args, **kwargs)
   File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, in 
wrapper
     return func(inst, *args, **kwargs)
   File "/usr/lib64/python3.6/site-packages/libvirt.py", line 2119, 
inmigrateToURI3
     raise libvirtError('virDomainMigrateToURI3() failed')
libvirt.libvirtError: can't connect to virtlogd: Unable to open system token 
/run/libvirt/common/system.token: Permission denied
2021-07-06 12:25:08,197+ INFO  (jsonrpc/6) [api.virt] START 
getMigrationStatus() from=:::10.46.8.133,35048, flow_id=4e86b85d, 
vmId=b2072331-1558-4186-86b4-fa83af8eba95 (api:48)
2021-07-06 12:25:08,197+ INFO  (jsonrpc/6) [api.virt] FINISH 
getMigrationStatus return={'status': {'code': 0, 'message': 'Done'}, 
'migrationStats': {'status': {'code': 12, 'message': 'Fatal error during migr
ation'}, 'progress': 0}} from=:::10.46.8.133,35048, flow_id=4e86b85d, 
vmId=b2072331-1558-4186-86b4-fa83af8eba95 (api:54)

On node 0:

# ls -lZ /run/libvirt/common/system.token
ls: cannot access '/run/libvirt/common/system.token': No such file or 
directory


On node 1:

# ls -lZ /run/libvirt/common/system.token
-rw---. 1 root root system_u:object_r:virt_var_run_t:s0 32 Jul  6 
09:29 /run/libvirt/common/system.token


any clue?

--

*Sandro Bonazzola*

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

[ovirt-users] Re: what happens to vms when a host shutdowns?

[Klaas Demter]

This should be implemented in 4.2.3 and newer. There are more details in 
the RFE bugzilla:


https://bugzilla.redhat.com/show_bug.cgi?id=1334982

I have never tested it :)




On 7/6/21 1:29 PM, Sandro Bonazzola wrote:



Il giorno mar 6 lug 2021 alle ore 13:03 Nir Soffer > ha scritto:


On Tue, Jul 6, 2021 at 1:11 PM Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:
> We are installing UPS powerchute client on hypervisors.
>
> What is the default vms behaviour of running vms when an
hypervisor is
> ordered to shutdown: do the vms live migrate or do they shutdown
> properly (even the restart on an other host because of HA) ?

In general VMs are not restarted after an unexpected shutdown, but
HA VMs
are restarted after failures.

If the HA VM has a lease, it can restart safely on another host
regardless of
the original host status. If the HA VM does not have a lease, the
system must
wait until the original host is up again to check if the VM is still
running on this
host.

Arik can add more details on this.


I think the question is not related to what happens after the host is 
back.

I think the question is what happens when the host goes down.
To me, the right way to shutdown a host is putting it first to 
maintenance (VM evacuate to other hosts) and then shutdown.
On emergency shutdown without moving the host to maintenance first I 
think libvirt is communicating the host is going down to the guests 
and tries to cleanly shutdown vms while the host is going down.

Arik please confirm :-)


Nir
___
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org

Privacy Statement: https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/

List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/HXVXSLXQYZX6CQPJNXKWLOMY3LQU7XJ5/





--

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com 

 

*Red Hat respects your work life balance. Therefore there is no need 
to answer this email out of your office hours.

*
*

*

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZQFLN7YMFKZIMC6COWSG6COKHKTESOIY/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CG2MGW2VBX255JWJMG6B6TVTY7FUWXIX/

[ovirt-users] Re: libvirt 7.4 update breaking ovirt 4.4.6 on centos 8 stream

[Klaas Demter]

selinux-policy-targeted-3.14.3-71.el8.noarch is now in 8stream repos. So 
this is fixed now.



Greetings

Klaas



On 6/9/21 5:17 PM, Danilo Cesar Lemes de Paula wrote:

+CC Jiri as our libvirt expert.


On Wed, Jun 9, 2021 at 10:12 AM Eduardo Lima <mailto:el...@redhat.com>> wrote:




On Wed, Jun 9, 2021 at 11:06 AM Eduardo Lima mailto:el...@redhat.com>> wrote:



On Wed, Jun 9, 2021 at 4:33 AM Sandro Bonazzola
mailto:sbona...@redhat.com>> wrote:

thanks for the report, looping in +Eduardo Lima
<mailto:etru...@redhat.com> and +Danilo Cesar Lemes de
Paula <mailto:ddepa...@redhat.com> .
Eduardo, Danilo, can you get selinux policy quickly fixed?
If not it's probably better to retire the libvirt build to
avoid further breakages.


I don´t  think so, as it is not a problem with our packages.
Unfortunately this is something that is expected right? As far
as I remember this is one of the major complaints with the
CentOS Stream model, breakage can happen every now and then.
There is no way to ensure stability of the packages there. For
the tested and stable versions, we have the CentOS Virt SIG.


By the way, it does look like downgrading libvirt version will
solve the problem, as discussed on the bug:


https://bugzilla.redhat.com/show_bug.cgi?id=1966842
<https://bugzilla.redhat.com/show_bug.cgi?id=1966842>

Eduardo, next time please wait to get test results before
tagging to release:
Tue Jun  8 14:47:42 2021 libvirt-7.4.0-1.el8s tagged into
virt8s-advancedvirt-common-candidate by etrunko [still active]
Tue Jun  8 16:21:14 2021 libvirt-7.4.0-1.el8s tagged into
virt8s-advancedvirt-common-testing by etrunko [still active]
Tue Jun  8 16:21:17 2021 libvirt-7.4.0-1.el8s tagged into
virt8s-advancedvirt-common-release by etrunko [still active]

we can get you feedback in few hours from oVirt CI
consuming the test builds


Okay, I will send you guys a heads up whenever I have a new
build out. I usually run CentOS Stream SIG updates on Fridays.



Il giorno mar 8 giu 2021 alle ore 21:15 Klaas Demter
mailto:klaasdem...@gmail.com>> ha
scritto:

Hi,

I updated packages on my system today and ovirt is no
longer starting,
turns out this is happening because of a selinux
denial for a new
feature of libvirt-7.4.0-1.el8s.x86_64

https://bugzilla.redhat.com/show_bug.cgi?id=1966842
<https://bugzilla.redhat.com/show_bug.cgi?id=1966842>

a workaround is suggested in the ticket or you can set
selinux to
permissive until selinux-policy is updated.


Greetings

Klaas


___
Users mailing list -- users@ovirt.org
<mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement:
https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/OK4SLP7DC27FOKRHTHMTXLTB4BABRIMB/

<https://lists.ovirt.org/archives/list/users@ovirt.org/message/OK4SLP7DC27FOKRHTHMTXLTB4BABRIMB/>



-- 


Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA <https://www.redhat.com/>

sbona...@redhat.com <mailto:sbona...@redhat.com>

<https://www.redhat.com/> 

*Red Hat respects your work life balance. Therefore there
is no need to answer this email out of your office hours.
*
*

*

As Eduardo said: this is not a libvirt issue.
It's also affecting the development internally. As far as I 
understand, if we didn't update libvirt this week we would still have 
the issue.


Anway, just follow BZ#1966842 
<https://bugzilla.redhat.com/show_bug.cgi?id=1966842> for a heads up 
on a solution. Personally, I'm also blocked by this.


--
Danilo Cesar Lemes de Paula

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement

[ovirt-users] libvirt 7.4 update breaking ovirt 4.4.6 on centos 8 stream

[Klaas Demter]

Hi,

I updated packages on my system today and ovirt is no longer starting, 
turns out this is happening because of a selinux denial for a new 
feature of libvirt-7.4.0-1.el8s.x86_64


https://bugzilla.redhat.com/show_bug.cgi?id=1966842

a workaround is suggested in the ticket or you can set selinux to 
permissive until selinux-policy is updated.



Greetings

Klaas


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OK4SLP7DC27FOKRHTHMTXLTB4BABRIMB/

[ovirt-users] Re: can't login

[Klaas Demter]

I am guessing you use ovirt-node?

https://lists.ovirt.org/archives/list/users@ovirt.org/message/R5KGWWQGSBEEGCV4ZV7IP7BUUPK6AOBP/


There is a known bug in latest version with cockpit.


Greetings

Klaas



On 6/1/21 9:00 AM, raymond.schilpero...@ziggo.nl wrote:

Hello everyone, I installed ovirt yesterday, everything went well. Now I want 
to log in to :9090 I use the same as my login details because it says Log in 
with your server user account.
However, no matter what I do, all I get is the message can't log in. Is there a 
way via ssh to change a password?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ENRV36JFIBUIFXI3S6YGGER6KB5T4J6P/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QNX7XNRGZFBCSQNO4LAB7LSGEZJ5WYMC/

[ovirt-users] Re: unable to login cockpit using root after upgrading to 4.4.6

[Klaas Demter]

I can confirm after this cockpit login works again on ovirt-node 4.4.6.3


Greetings

Klaas



On 5/25/21 5:10 PM, Lev Veyde wrote:

Hi Dhanaraj,

First of all - thanks for informing us about this issue!

We found the source of the issue, and are working on fixing it for the 
next release.


Meanwhile there is a workaround that should fix the situation.
You need to run (with root account) the following command:

chmod u+s /usr/libexec/cockpit-session

Please let us know if that works for you.

Thanks in advance,

On Thu, May 20, 2021 at 9:30 AM dhanaraj.ramesh--- via Users 
mailto:users@ovirt.org>> wrote:


Hi All

if any further logs required let me know I can share the info,
___
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org

Privacy Statement: https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/

List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/4JMVGQYUEIXIDS73GNIEJKRPRZV2CRF5/





--

Lev Veyde

Senior Software Engineer, RHCE | RHCVA | MCITP

Red Hat Israel



l...@redhat.com  | lve...@redhat.com 




TRIED. TESTED. TRUSTED. 

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/R5KGWWQGSBEEGCV4ZV7IP7BUUPK6AOBP/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/O3D4COQOZJG66C3Y2SXLYOQ52RGN33ZF/

[ovirt-users] Re: How to create new users other than admin

[Klaas Demter]

Oh damn yeah,  I only use it to register users that already exist in AD, 
nvm the noise --- sorry :)



Greets

Klaas



On 5/19/21 3:24 PM, Martin Perina wrote:



On Wed, May 19, 2021 at 2:05 PM Klaas Demter <mailto:klaasdem...@gmail.com>> wrote:


Hi,

I would recommend to use ansible, that way you can have your
configuration as code.


https://docs.ansible.com/ansible/latest/collections/ovirt/ovirt/ovirt_user_module.html#ansible-collections-ovirt-ovirt-ovirt-user-module

<https://docs.ansible.com/ansible/latest/collections/ovirt/ovirt/ovirt_user_module.html#ansible-collections-ovirt-ovirt-ovirt-user-module>


This only registers existing user provided by aaa-ldap or aaa-jdbc 
into oVirt Engine, it cannot create new user.



Greetings

Klaas


On 5/19/21 1:01 PM, Martin Perina wrote:

Hi,

ovirt-engine-extension-aaa-jdbc package is installed
automatically as a part of oVirt Engine, so in order to use it,
you need to SSH to oVirt Engine host/VM and execute
ovirt-aaa-jdbc-tool locally:


https://www.ovirt.org/documentation/administration_guide/index.html#sect-Administering_User_Tasks_From_the_commandline

<https://www.ovirt.org/documentation/administration_guide/index.html#sect-Administering_User_Tasks_From_the_commandline>

Anyway aaa-jdbc extension is useful mostl for small installations
within organizations which don't have their users/groups provided
on LDAP server. If your organization has LDAP server, then I
suggest to use aaa-ldap extension:


https://www.ovirt.org/documentation/administration_guide/index.html#Introduction_to_Directory_Servers

<https://www.ovirt.org/documentation/administration_guide/index.html#Introduction_to_Directory_Servers>

Regards,
Martin


On Wed, May 19, 2021 at 12:30 PM mailto:gaurav.go...@gmail.com>> wrote:

Thank you Lucie,

So if I understand correctly, we need to install the AAA JDBC
tool as an additional package on the server running the
hosted engine?

The link you sent me suggests that we have to run
engine-setup? What exactly does this mean and seems rather
complicated for adding a new user.

Anyways, I ran the command "ovirt-hosted-engine-setup" after
googling a bit and it prompted me to create a new VM with
hosted engine. I followed through by providing a FQDN from
our DNS server. However, this procedure failed to create the VM.

Am I doing something wrong? Could you please elaborate what
would be the right steps here?

Thank you
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/3PSOYTK7PWUUJPSVIKAEEUQY4D4PYJYV/

<https://lists.ovirt.org/archives/list/users@ovirt.org/message/3PSOYTK7PWUUJPSVIKAEEUQY4D4PYJYV/>



-- 
Martin Perina

Manager, Software Engineering
Red Hat Czech s.r.o.

___
Users mailing list --users@ovirt.org  <mailto:users@ovirt.org>
To unsubscribe send an email tousers-le...@ovirt.org  
<mailto:users-le...@ovirt.org>
Privacy Statement:https://www.ovirt.org/privacy-policy.html  
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ 
 <https://www.ovirt.org/community/about/community-guidelines/>
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/UPKFCVTLZEV3ZQ3AQ7DSMVFXF744UVGC/
  
<https://lists.ovirt.org/archives/list/users@ovirt.org/message/UPKFCVTLZEV3ZQ3AQ7DSMVFXF744UVGC/>

___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/CLHZCOPAQP3TFAYLDBS5J54DRUDVOQDI/

<https://lists.ovirt.org/archives/list/users@ovirt.org/message/CLHZCOPAQP3TFAYLDBS5J54DRUDVOQDI/>



-

[ovirt-users] Re: How to create new users other than admin

[Klaas Demter]

Hi,

I would recommend to use ansible, that way you can have your 
configuration as code.


https://docs.ansible.com/ansible/latest/collections/ovirt/ovirt/ovirt_user_module.html#ansible-collections-ovirt-ovirt-ovirt-user-module


Greetings

Klaas


On 5/19/21 1:01 PM, Martin Perina wrote:

Hi,

ovirt-engine-extension-aaa-jdbc package is installed automatically as 
a part of oVirt Engine, so in order to use it, you need to SSH to 
oVirt Engine host/VM and execute ovirt-aaa-jdbc-tool locally:


https://www.ovirt.org/documentation/administration_guide/index.html#sect-Administering_User_Tasks_From_the_commandline 



Anyway aaa-jdbc extension is useful mostl for small installations 
within organizations which don't have their users/groups provided on 
LDAP server. If your organization has LDAP server, then I suggest to 
use aaa-ldap extension:


https://www.ovirt.org/documentation/administration_guide/index.html#Introduction_to_Directory_Servers 



Regards,
Martin


On Wed, May 19, 2021 at 12:30 PM > wrote:


Thank you Lucie,

So if I understand correctly, we need to install the AAA JDBC tool
as an additional package on the server running the hosted engine?

The link you sent me suggests that we have to run engine-setup?
What exactly does this mean and seems rather complicated for
adding a new user.

Anyways, I ran the command "ovirt-hosted-engine-setup" after
googling a bit and it prompted me to create a new VM with hosted
engine. I followed through by providing a FQDN from our DNS
server. However, this procedure failed to create the VM.

Am I doing something wrong? Could you please elaborate what would
be the right steps here?

Thank you
___
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org

Privacy Statement: https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/

List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/3PSOYTK7PWUUJPSVIKAEEUQY4D4PYJYV/





--
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UPKFCVTLZEV3ZQ3AQ7DSMVFXF744UVGC/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CLHZCOPAQP3TFAYLDBS5J54DRUDVOQDI/

[ovirt-users] Re: poweroff and reboot with ovirt_vm ansible module

[Klaas Demter]

Shouldn't it be opened against the ovirt collection?

https://github.com/oVirt/ovirt-ansible-collection/issues

On 11/5/18 11:23 AM, Ondra Machacek wrote:

Joey is right, we don't such functionality. But feel free to open an
issue here[1] and we can implement it.

[1] https://github.com/ansible/ansible/issues

On 11/3/18 1:10 AM, Joey Ma wrote:

hi,

AFAIK, setting state=stopped is the only way to poweroff a VM. While to
reboot a VM, you could also follow the steps below:
1. Update a VM with some new properties that requires a restart 
operation,

also with the param: next_run=true
2. Set state=next_run in your playbook and apply it

Then the VM could reboot automatically.

On Sat, Nov 3, 2018 at 1:19 AM Nathanaël Blanchet  
wrote:


Hello, is there a way to poweroff or reboot (without stopped and 
running

state) a vm with the ovirt_vm ansible module?

--
Nathanaël Blanchet

Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EBJOTJJKW3TGI63D2FXAK53ORXEUU3LO/ 






___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/L5PEO3WOODJIB2WOV4HW2JD7UFOX2CVF/



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3HPGM2N7WTTV5SDH6BQ7PVDLRTLUZY2R/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SNUR4QZGTD4RE22WPWNDCVL6FBU76F5J/

[ovirt-users] Re: How to update ovirt-sdk

[Klaas Demter]

it's called differently in 7, I am guessing

https://resources.ovirt.org/pub/ovirt-4.3/rpm/el7Server/x86_64/python-ovirt-engine-sdk4-4.3.4-2.el7.x86_64.rpm

is what you're looking for

On 4/22/21 4:25 PM, Miguel Garcia wrote:

Already tried with yum but such package is not listed in ovirt43 repo but it 
does in ovirt44 andfor that repo only works for el arch.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MYUOS6TEWPN75BDVK7UZJZO7Q2XU2R7C/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6WNUALCW4II6GTZFVCM4HAR4M36FGLTG/

[ovirt-users] Re: power management iLO5

[Klaas Demter]

Hi,

the general recommendation for newer remote management cards that 
support it (like the ilo5/idrac9) is to use redfish. I personally do not 
have HP servers, so I can not give any advise on the specifics for ilo5.


Apart from that recommendation: fence_ilo_ssh also supports ilo5 ( 
https://github.com/ClusterLabs/fence-agents/blob/master/agents/ilo_ssh/fence_ilo_ssh.py 
). IPMI is not really secure, I would say that is why it's not enabled 
by default in the new servers :)



Greetings

Klaas


On 12/24/20 3:18 PM, ozme...@hotmail.com wrote:

Hi,
I've red mail list about IPMI fencing. But clould not find a solution.

We have HP gen 10 servers. they have iLO5 and fencing does not work.

In redhat there is a solution


Issue

 No iLO5 fencing method available in RHV-manager
 Power Management via IPMILAN does not work on HPE Gen 10 systems
 Power Management via iLO4 does not work on HPE Gen 10 systems

Resolution

 The IPMI interface has to be enabled in the security section of a iLO-5 on 
a HPE Gen 10 system in order to use the fence-agents iLO3, iLO4 or IPMILAN.
 A user with Login permissions and Operator level access for IPMI should be 
sufficient for fencing.

Root Cause

The default settings of iLO-5 on a HPE Gen 10 system have disabled IPMI access 
to the management controller. The fence agents for iLO-3 onward default to be 
using IPMI in order to communicate with the management controller. Therefore 
iLO3, iLO4 as well as IPMILAN fail to connect to a iLO-5 management controller.


But, there is no IPMI option in power management.

How can i enable power managemenet properly with iLO5 or IPMI?

Thanks
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JT2JNA2EVOBCYZDDE4T2DZYPJUWA7DPG/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JKJ5YYOWYINO7BXGEGNI7DZWWGGPKOAE/

[ovirt-users] Re: OPNsense / FreeBSD 12.1

[Klaas Demter]

There is an open issue about supporting Q35 in freebsd if you want to 
follow that:


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236922

until that's merged and used in opnsense you'll need to keep it running 
with the old chipset.


On 12/12/20 4:53 PM, jorgevisent...@gmail.com wrote:

Yeahh, it worked!

Thanks man, you saved my work! LOL

Thank you too Alex for your tip!
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AXVUMCEPK45TFRHKN2C4I4HC44IGBJC4/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HJUN36ABQVRR7N7N5KJEMWC3RHIGSFHM/

[ovirt-users] Re: OPNsense / FreeBSD 12.1

[Klaas Demter]

correct that, I did something special: select I440FX Chipset with BIOS :D

On 12/12/20 9:37 AM, Alex K wrote:



On Sat, Dec 12, 2020, 03:37 Jorge Visentini > wrote:


Hi Alex, thank you for your reply.

So ... I didn't see any error messages.
I attached the log output and some prints to get an idea of what
I'm talking about.

I see you have defined the guest to be of OS type RHEL. can you try to 
set it general Linux? I don't remember now if there is a bsd/freebsd 
type that you can set at os type for guest.



Thank you again.

Em sex., 11 de dez. de 2020 às 17:19, Alex K
mailto:rightkickt...@gmail.com>> escreveu:



On Fri, Dec 11, 2020, 20:39 Jorge Visentini
mailto:jorgevisent...@gmail.com>>
wrote:

Hi all.

I tried to install OPNsense 20.7.6 (FreeBSD 12.1) and it
was not possible to detect the NICs.

I tried both the virtio driver and the e1000. Virtio does
not detect and e1000 crashes at startup.
In pure KVM, it works, so I believe there is some
incompatibility with oVirt 4.4.4.

Any tips?

Please check/share the error message you observe at vdsm logs
when starting the VM.


-- 
Att,

Jorge Visentini
+55 55 98432-9868
___
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org

Privacy Statement:
https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/

List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/7EX6TQPUSZ5M6VUJO23W7FTE2XO23Y66/





-- 
Att,

Jorge Visentini
+55 55 98432-9868


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BHZA6VJPA3VUUPX732HRPTDSC24WWHVS/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HJLG2TYDHHEIKJBBZWNIGR34SSENHPD3/

[ovirt-users] Re: OPNsense / FreeBSD 12.1

[Klaas Demter]

I have opnsense 20.7.5 running in ovirt 4.4.3. I selected freebsd 9.2 
x64 as os type and the nics are virtio. I don't recall having to do 
anything special during install but that was a while ago :)



Greetings

Klaas

On 12/12/20 9:37 AM, Alex K wrote:



On Sat, Dec 12, 2020, 03:37 Jorge Visentini > wrote:


Hi Alex, thank you for your reply.

So ... I didn't see any error messages.
I attached the log output and some prints to get an idea of what
I'm talking about.

I see you have defined the guest to be of OS type RHEL. can you try to 
set it general Linux? I don't remember now if there is a bsd/freebsd 
type that you can set at os type for guest.



Thank you again.

Em sex., 11 de dez. de 2020 às 17:19, Alex K
mailto:rightkickt...@gmail.com>> escreveu:



On Fri, Dec 11, 2020, 20:39 Jorge Visentini
mailto:jorgevisent...@gmail.com>>
wrote:

Hi all.

I tried to install OPNsense 20.7.6 (FreeBSD 12.1) and it
was not possible to detect the NICs.

I tried both the virtio driver and the e1000. Virtio does
not detect and e1000 crashes at startup.
In pure KVM, it works, so I believe there is some
incompatibility with oVirt 4.4.4.

Any tips?

Please check/share the error message you observe at vdsm logs
when starting the VM.


-- 
Att,

Jorge Visentini
+55 55 98432-9868
___
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org

Privacy Statement:
https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/

List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/7EX6TQPUSZ5M6VUJO23W7FTE2XO23Y66/





-- 
Att,

Jorge Visentini
+55 55 98432-9868


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BHZA6VJPA3VUUPX732HRPTDSC24WWHVS/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z4YBVUX2I2RXYLVXUP2ASQT7R3K4CDQK/

[ovirt-users] Re: Can't to update cluster to 4.5

[Klaas Demter]

https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZPLFRE7TMLQDSVVTQYU7BYGNAIOKC5HF/

needs centos 8.3 which is not out yet

On 12/1/20 5:59 PM, Patrick Lomakin wrote:

I have a message:
"Data Center Default compatibility version is 4.4, which is lower than latest 
available version 4.5. Please upgrade your Data Center to latest version to successfully 
finish upgrade of your setup".
  When I try to update datacenter Default I got an error: Error while executing 
action: Cannot update Data Center compatibility version to a value that is 
greater than its cluster's version. The following clusters should be upgraded: 
Default. Next step for me is to try to upgrade compatibility of Cluster. But I 
have tried to do this by editing Cluster compatibility version from 4.4 to 4.5, 
but got an error: Error while executing action: Cannot change Cluster 
Compatibility Version to higher version when there are active Hosts with lower 
version. Please, give me some advices how to fix problem.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NUJPUVEBAR5ZDWVL3OMQJXGQY2FP5HPH/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/N4NORNPEV6KPBGPFMZ4MTSIS2OSR22WI/

[ovirt-users] Re: oVirt 4.3.10 RHEL 7.9 support

[Klaas Demter]

You can have a look at what red hat has tested:

https://access.redhat.com/support/policy/updates/rhev

7.9: "Supported with RHV 4.3.11 and above only."

so I would not count on it, it's untested.


Greetings

Klaas



On 10/30/20 12:29 PM, Wesley Stewart wrote:

In pretty sure all of 4.3 is compatible with RHEL7 and Centos7.

I haven't tried the specific versions myself though.

On Thu, Oct 29, 2020, 7:37 AM KSNull Zero > wrote:


Anyone ?
___
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org

Privacy Statement: https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/

List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/YPLSVYRVGHHEBD2OZG6VGT5ES2ZQNDQ4/




___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/O5JCLAONOFGYCZVF6EQU5JCVQPVAXH24/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QXUWVJ24ZCZZHS5K7IXCGXXHP5ETBJGJ/

[ovirt-users] Re: Power on VM - CLI / API

[Klaas Demter]

I would suggest to do it via one of the sdks, for example python 
https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/start_vm.py 
- you can create a simple python script you can start from cli.


Alternatively use ansible, you can also call that from cli.


Greetings

Klaas


On 9/30/20 7:57 PM, Jeremey Wise wrote:


Can anyone post link.  (with examples.. as most documentation for 
oVirt lacks this)..  where I can power on a VM via CLI or API.


As of now I cannot login to oVirt-Engine.  No errors when I restart 
it.. 
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/45KKF5TN5PRQ3R7MDOWIQTSYZXZRVDIZ/


BUt... I need to get VMs booted.

I tried to follow:
http://ovirt.github.io/ovirt-engine-api-model/master/
and my server's API web portal
https://ovirte01.penguinpages.local/ovirt-engine/apidoc/#/documents/003_common_concepts

And.. even get POSTMAN (real newbie at that tool but ran into how to 
add exported .pem key from portal to session issues)



# failed CLI example:   Power on VM "ns01"

###  DRAFT :: 2020-09-30

# Get key from oVirt engine and import.  Ex: from ovirte01  into 
server 'thor


curl -k 
'https://ovirte01.penguinpages.local/ovirt-engine/services/pki-resource?resource=ca-certificate=X509-PEM-CA' 
-o ovirt01_ca.pem


sudo cp ovirt01_ca.pem /etc/pki/ca-trust/source/anchors

sudo update-ca-trust extract

openssl s_client -connect ovirte01.penguinpages.local:443 -showcerts < 
/dev/null


 

# Use key during GET list of VMs

?? 

 curl -X POST https://ovirte01.penguinpages.local/post -H 
/ovirt-engine/api/vms/ns01/start HTTP/1.1 
 





#

I just need to power on VM


--
p enguinpages

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UN4AHVRITGBFUJBYATZA2DTUEIJEX6GL/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HKZEUDCHODKDMKWBST36655VW3TEC4M3/

[ovirt-users] Re: Possible sources of cpu steal and countermeasures

[Klaas Demter]

Hi,
Thanks for the quick response.

On Thu, Dec 5, 2019, 01:10 Nir Soffer  wrote:

> On Wed, Dec 4, 2019 at 6:15 PM  wrote:
> >
> > Hi,
> >
> > I'm having performance issues with a ovirt installation. It is showing
> > high steal (5-10%) for a cpu intensive VM. The hypervisor however has
> > more than 65% of his resources idle while the steal is seen inside of
> > the VM.
> >
> > Even when placing only a single VM on a hypervisor it still receives
> > steal (0-2%), even though the hypervisor is not overcommited.
> >
> >
> > Hypervisor:
> >
> > 2 Socket system in total 2*28(56HT) cores
> >
> >
> > VM:
> >
> > 30vCPUs (ovirt seems to think its a good idea to make that 15 sockets *
> > 2 cores)
>
> I think you can control this in oVirt.
>

Yes, I'm saying ovirt defaults to using 15 sockets * 2 cores if you don't
specify a different "advanced" configuration. This also leads to a funny
behavior that you can't increase the VMs from 30 to 35 cores online.


> > My questions are:
> >
> > a) Could it be that the hypervisor is trying to schedule all 30 cores on
> > a single numa node, ie using the HT cores instead of "real" ones and
> > this shows up as steal?
> >
> > b) Do I need to make VMs this big numa-aware and spread the vm over both
> > numa nodes?
> >
> > c) Would using the High Performance VM type help in this kind of
> situation?
> >
> > d) General advise: how do I reduce steal in an environment where the
> > hypervisor has idle resources
> >
> >
> > Any advise would be appreciated.
>
> These questions are mainly about qemu, so adding qemu-discuss.
>
> I think it will help if you share your vm qemu command line, found in:
> /var/log/libvit/qemu/vm-name.log
>

Log:

2019-11-16 22:33:33.487+: starting up libvirt version: 4.5.0, package:
10.el7_6.6 (Red Hat, Inc. ,
2019-02-21-14:30:01, x86-038.build.eng.bos.redhat.com), qemu version:
2.12.0qemu-kvm-rhev-2.12.0-18.el7_6.3, kernel: 3.10.0-957.10.1.el7.x86_64,
hostname: hypervisor.tld

LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
QEMU_AUDIO_DRV=spice /usr/libexec/qemu-kvm -name guest=vm,debug-threads=on
-S -object
secret,id=masterKey0,format=raw,file=/var/lib/libvirt/qemu/domain-24-vm/master-key.aes
-machine pc-i440fx-rhel7.5.0,accel=kvm,usb=off,dump-guest-core=off -cpu
Broadwell,spec-ctrl=on,ssbd=on,rtm=on,hle=on -m
size=534773760k,slots=16,maxmem=629145600k -realtime mlock=off -smp
30,maxcpus=32,sockets=16,cores=2,threads=1 -object iothread,id=iothread1
-numa node,nodeid=0,cpus=0-29,mem=522240 -uuid
95285008-8efb-446c-b75c-771f020cf494 -smbios
'type=1,manufacturer=oVirt,product=RHEV
Hypervisor,version=7.6-4.el7,serial=4c4c4544-004b-3510-805a-c3c04f485032,uuid=95285008-8efb-446c-b75c-771f020cf494'
-no-user-config -nodefaults -chardev
socket,id=charmonitor,fd=51,server,nowait -mon
chardev=charmonitor,id=monitor,mode=control -rtc
base=2019-11-16T22:33:33,driftfix=slew -global
kvm-pit.lost_tick_policy=delay -no-hpet -no-shutdown -global
PIIX4_PM.disable_s3=1 -global PIIX4_PM.disable_s4=1 -boot strict=on -device
piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device
virtio-scsi-pci,iothread=iothread1,id=ua-98c9be1a-c830-4718-9936-28a81e9a07b6,bus=pci.0,addr=0x5
-device
virtio-serial-pci,id=ua-3f6418a3-8b1a-49c3-b79b-ca5f1864cf47,max_ports=16,bus=pci.0,addr=0x4
-drive
if=none,id=drive-ua-641b4623-d2b3-4f7f-a31d-65959f5ffc9b,werror=report,rerror=report,readonly=on
-device
ide-cd,bus=ide.1,unit=0,drive=drive-ua-641b4623-d2b3-4f7f-a31d-65959f5ffc9b,id=ua-641b4623-d2b3-4f7f-a31d-65959f5ffc9b
-drive
file=/rhev/data-center/mnt/storage-domain/0f623c51-66c8-4a5b-a12f-95ab9c6184b4/images/88901d29-e223-457d-a80e-384b1f147cea/0f994c76-d525-4a4f-9513-c6220fe7c31c,format=raw,if=none,id=drive-ua-88901d29-e223-457d-a80e-384b1f147cea,serial=88901d29-e223-457d-a80e-384b1f147cea,werror=stop,rerror=stop,cache=none,aio=threads
-device
scsi-hd,bus=ua-98c9be1a-c830-4718-9936-28a81e9a07b6.0,channel=0,scsi-id=0,lun=0,drive=drive-ua-88901d29-e223-457d-a80e-384b1f147cea,id=ua-88901d29-e223-457d-a80e-384b1f147cea,bootindex=1,write-cache=on
-netdev
tap,fds=54:55:56:57,id=hostua-1fad81fe-8c0b-41dd-8015-7498ebbc2710,vhost=on,vhostfds=58:59:60:61
-device
virtio-net-pci,mq=on,vectors=10,host_mtu=1500,netdev=hostua-1fad81fe-8c0b-41dd-8015-7498ebbc2710,id=ua-1fad81fe-8c0b-41dd-8015-7498ebbc2710,mac=22:44:66:00:00:d0,bus=pci.0,addr=0x3
-chardev socket,id=charchannel0,fd=62,server,nowait -device
virtserialport,bus=ua-3f6418a3-8b1a-49c3-b79b-ca5f1864cf47.0,nr=1,chardev=charchannel0,id=channel0,name=ovirt-guest-agent.0
-chardev socket,id=charchannel1,fd=63,server,nowait -device
virtserialport,bus=ua-3f6418a3-8b1a-49c3-b79b-ca5f1864cf47.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_agent.0
-chardev spicevmc,id=charchannel2,name=vdagent -device
virtserialport,bus=ua-3f6418a3-8b1a-49c3-b79b-ca5f1864cf47.0,nr=3,chardev=charchannel2,id=channel2,name=com.redhat.spice.0
-spice

[ovirt-users] Re: oVirt and NetApp NFS storage

[Klaas Demter]

Hi,
NFS hard mounts should not help with sanlock. It should just kill the VMs
after 60 seconds same as a soft mount.
The sanlock timeout: I asked RedHat support about that in a case for my RHV
environment. They said this should not be changed.

Only thing that came to my mind: disable storage leases in case of planned
storage maintenance.

Greetings
Klaas

On Thu, Apr 18, 2019, 19:10 Strahil  wrote:

> I know 2 approaches.
> 1. Use NFS hard mounting option - it will never give error to sanlock and
> it will be waiting until NFS is recovered (never tries this one, but in
> theory might work)
> 2. Change the default sanlock timeout (last time I tried that - it didn't
> work) . You might need help from Sandro or Sahina for that option.
>
> Best Regards,
> Strahil NikolovOn Apr 18, 2019 11:45, klaasdem...@gmail.com wrote:
> >
> > Hi,
> >
> > I got a question regarding oVirt and the support of NetApp NFS storage.
> > We have a MetroCluster for our virtual machine disks but a HA-Failover
> > of that (active IP gets assigned to another node) seems to produce
> > outages too long for sanlock to handle - that affects all VMs that have
> > storage leases. NetApp says a "worst case" takeover time is 120 seconds.
> > That would mean sanlock has already killed all VMs. Is anyone familiar
> > with how we could setup oVirt to allow such storage outages? Do I need
> > to use another type of storage for my oVirt VMs because that NFS
> > implementation is unsuitable for oVirt?
> >
> >
> > Greetings
> >
> > Klaas
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/TSJJKK5UG57CCFYUUCXXM3LYQJW2ODWZ/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SFIH3IDKDGRQOQ4POSETN27CRZPCDTM2/

[ovirt-users] mask or disabled lldpad service

[Klaas Demter]

Hi,
I have a  QLogic Corp. QLogic 2x1GE+2x10GE QL41162HMRJ CNA network
card. This network card comes with it's own lldp implementation inside
their management firmware. Running two lldp agents seems to create
several issues 
(http://lists.us.dell.com/pipermail/linux-poweredge/2018-July/051860.html).
The QLogic engineers said I need to disable lldpad in the operating
system. This leads me here, what is lldp actually used for within
ovirt? If it is actually needed how could I deal with a card that does
not support lldpad but rather has it's own implementation?

Greetings
Klaas
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SYN4HQXBLLRIFVKTBZUO5VNVLFWVXAOG/

[ovirt-users] How to deal with "Used memory of host ... exceeded defined threshold [95%]" messages

[Klaas Demter]

Hi,
I'm trying to figure out how I could stop the manager with spamming
used memory exceeded threshold messages. I have a hypervisor that has
1,5TB memory and it's using about 98% of that with hugepages for sap
hana vms (configured like https://access.redhat.com/articles/3347431).
It still has like 40-50GB memory left for the hypervisor which should
be plenty.

So the option I could figure out on my own: I can adjust the global
limit of LogMaxPhysicalMemoryUsedThresholdInPercentage but I'm not
sure if that is a good idea for my "normal" hypervisors that often
have way less memory.

My questions are:
- can I adjust the limit on a per hypervisor basis?
- can I skip the memory check for certain hypervisors or skip all
checks for certain hypervisors?
- would a check for free memory in gb make more sense than a percentage check?

Setup is still on 4.1.9.

Greetings
Klaas
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users