[ovirt-users] useful workaround for catch-22 situation with nic drivers and Windows

2020-08-05 Thread i iordanov
Hello,

I just wanted to post a nice workaround I came up with in case it helps
anybody.

The reason I needed it is that in oVirt 4.4, it appears I am unable to
change the nic1 type when creating VMs (maybe that's a bug?) and I
necessarily end up with the default nic1 type which needs a virtio driver
in Windows which is obviously not present on a clean install. Also, since
there is no networking, it can't be downloaded. I did think of mounting a
USB stick via remote-viewer, but something is wonky there too - the USB
device selection menu item is grayed out, and no, it's not permissions.

So what i did was to create an .iso file with spice-guest-tools-latest.exe
in it and copy the resulting iso file to the ISO domain. Then, I was easily
able to attach the ISO to the Windows machine in question and install
spice-guest-tools, which made the network adapter work.

Quick snippet of how I created the .iso:
$ find test
test
test/spice-guest-tools-latest.exe

$ mkisofs -o spice-tools.iso test
I: -input-charset not specified, using utf-8 (detected in locale settings)
Total translation table size: 0
Total rockridge attributes bytes: 0
Total directory bytes: 116
Path table size(bytes): 10
Max brk space used 0
5124 extents written (10 MB)

Hope it helps somebody :).

Cheers!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JR5MOF7FJ3UDVNR7R7ASNBWNNROI6HAX/


Re: [ovirt-users] [ovirt-devel] [RFC] oVirt mobile client

2015-01-15 Thread i iordanov
Hi Christophe,

They share a part of their code-base, primarily in the native
implementation. However, Opaque has a substantially reimplemented UI.
They both live in the same repository, though, and the plan was to
bring them closer together over time.

I see aSPICE as analogous to spicy and Opaque as analogous to virt-viewer.

Cheers,
iordan

On Thu, Jan 15, 2015 at 8:22 AM, Christophe Fergeau cferg...@redhat.com wrote:
 On Mon, Jan 05, 2015 at 04:17:58PM +0100, Michal Skrivanek wrote:

  Thank you,
  Tomas
 
  - Original Message -
  From: i iordanov iiorda...@gmail.com
  To: users users@ovirt.org, de...@ovirt.org
  Cc: Sphoorti Joglekar sphoorti.jogle...@gmail.com
  Sent: Thursday, December 25, 2014 11:19:58 PM
  Subject: Re: [ovirt-users] [ovirt-devel] [RFC] oVirt mobile client
 
  Hey guys,
 
  Thanks for remembering about Opaque. For those who are not familiar
  with the project, it is an oVirt/RHEV graphics console client which
  supports the SPICE protocol so far. It uses libgovirt to connect to
  the oVirt/RHEV API. I also created a separate pure SPICE client
  (called aSPICE) for Android based on libspice.
 
  It would be nice if I got more feedback from Red Hat developers, but
  you guys are probably as busy as I am :). The app is getting attention
  on Google Play and people are using it successfully for their
  installations, it seems.
 
  I have plans to add the following features to Opaque, time permitting:
 
  - Ability to edit default settings, so that people who connect with
  console.vv file will be able to configure Audio, keyboard layout, etc.
  - The ability to allocate VMs from a pool.
  - The ability to control Audio Playback and Recording separately.
 
  I don't think Opaque needs to get portal-management functionality.
 
  I was contacted by an intern working on movirt (Sphoorti Joglekar,
  cc-ed), asking whether I would be willing to support a URI Intent
  scheme that movirt can use to launch aSPICE. I think I already have a
  pretty well specified URI scheme that may work for the purpose, so
  we'll see how that goes. I am wondering whether it wouldn't be better
  to launch aSPICE or Opaque with a console.vv file instead, though. I
  guess the developers of movirt will have to consider both options.
 
  At any rate, Opaque is far from dead. I'm security supporting it, I
  just don't find a lot of time to work on additional features.
 
  I am cc-ing Brian Proffitt, because at one point we discussed setting
  up Opaque as a sub-project of oVirt. I don't know whether there is any
  interest for that in Red Hat, or any interest at all in supporting
  mobile clients for oVirt/RHEV, etc. It would be nice to hear an
  official stance on the topic.

 (adding Brian properly this time)

 I think it makes sense to add it together with something…though maybe
 more related to SPICE clients. So adding Christophe for his thoughts…

 Opaque seems to be more an oVirt client than a SPICE client, so I'd tend
 to think it would be a better fit as an oVirt project. aSPICE would fit
 well together with other SPICE repositories, dunno if these are the same
 code base or not (?).

 On Jan 5, 2015, at 13:38 , Tomas Jelinek tjeli...@redhat.com wrote:
 
  One more question - does aSPICE support spice proxy?
 

 libgovirt is not parsing the proxy information at this point, so answer
 would be no. See
 http://lists.freedesktop.org/archives/spice-devel/2014-December/018475.html
 and its followup
 http://lists.freedesktop.org/archives/spice-devel/2015-January/018609.html

 Christophe



-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] [ovirt-devel] [RFC] oVirt mobile client

2014-12-27 Thread i iordanov
Hey guys,

Thanks for remembering about Opaque. For those who are not familiar
with the project, it is an oVirt/RHEV graphics console client which
supports the SPICE protocol so far. It uses libgovirt to connect to
the oVirt/RHEV API. I also created a separate pure SPICE client
(called aSPICE) for Android based on libspice.

It would be nice if I got more feedback from Red Hat developers, but
you guys are probably as busy as I am :). The app is getting attention
on Google Play and people are using it successfully for their
installations, it seems.

I have plans to add the following features to Opaque, time permitting:

- Ability to edit default settings, so that people who connect with
console.vv file will be able to configure Audio, keyboard layout, etc.
- The ability to allocate VMs from a pool.
- The ability to control Audio Playback and Recording separately.

I don't think Opaque needs to get portal-management functionality.

I was contacted by an intern working on movirt (Sphoorti Joglekar,
cc-ed), asking whether I would be willing to support a URI Intent
scheme that movirt can use to launch aSPICE. I think I already have a
pretty well specified URI scheme that may work for the purpose, so
we'll see how that goes. I am wondering whether it wouldn't be better
to launch aSPICE or Opaque with a console.vv file instead, though. I
guess the developers of movirt will have to consider both options.

At any rate, Opaque is far from dead. I'm security supporting it, I
just don't find a lot of time to work on additional features.

I am cc-ing Brian Proffitt, because at one point we discussed setting
up Opaque as a sub-project of oVirt. I don't know whether there is any
interest for that in Red Hat, or any interest at all in supporting
mobile clients for oVirt/RHEV, etc. It would be nice to hear an
official stance on the topic.

Thanks!
iordan

On Tue, Nov 4, 2014 at 10:17 AM, David Jaša dj...@redhat.com wrote:
 The app in Google may be half year old but there is a movement in git
 [1] and the author recently called for testing or comments on
 spice-devel ML.

 David

 [1] 
 https://github.com/iiordanov/remote-desktop-clients/tree/master/eclipse_projects/Opaque


 On Pá, 2014-10-31 at 07:56 +0100, Gianluca Cecchi wrote:
 On Fri, Oct 31, 2014 at 7:03 AM, Yair Zaslavsky yzasl...@redhat.com
 wrote:


 - Original Message -
  From: Greg Sheremeta gsher...@redhat.com
  To: users users@ovirt.org, de...@ovirt.org
  Sent: Friday, October 31, 2014 3:49:11 AM
  Subject: [ovirt-devel] [RFC] oVirt mobile client
 
  Hi,
 
  The focus of our OPW internship program starting in December
 will be
  mobile and/or lightweight engine clients -- hopefully
 integrating the
  new ovirt.js project.

 +100


 [snip]

 
  I see that there are some already existing mobile clients
 for oVirt.
  I'm trying to grasp what we have and what the needs are.

 
  That's all I see on the first few pages of google.
 


 There was also project from Iordanov about spice/oVirt support on
 android..
 See:
 http://lists.ovirt.org/pipermail/users/2013-December/018434.html


 Some days ago it seems he go also support international keyboard
 layout support:

 
 I finally got some time to back-port the international keyboard layout
 support from the Android Ovirt client Opaque into the SPICE client
 aSPICE
 


 I made same preliminary tests at the end of 2013 but I was not able to
 connect to oVirt...
 I don't know actually how it went ahead... the Google channel seems
 stopped since February...


 Gianluca
 ___
 Devel mailing list
 de...@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/devel


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs

2014-06-18 Thread i iordanov
Hey,

Just a quick update on this. The machine is really quiet and cool, and
most importantly, oVirt works perfectly on it.

Thanks again for all the input!
iordan

On Fri, Jun 6, 2014 at 12:03 PM, i iordanov iiorda...@gmail.com wrote:
 Hi Francesco,

 Thank you so much! I really appreciate it. I already ordered the parts
 taking a small risk. Yes, this system promises to be so cool and
 quiet, that I can practically use it as a pillow :).

 Cheers!
 iordan

 On Fri, Jun 6, 2014 at 5:32 AM, Francesco Romani from...@redhat.com wrote:
 - Original Message -
 From: Doron Fediuck dfedi...@redhat.com
 To: i iordanov iiorda...@gmail.com
 Cc: users@ovirt.org
 Sent: Thursday, June 5, 2014 6:50:58 PM
 Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs



 - Original Message -
  From: i iordanov iiorda...@gmail.com
  To: Doron Fediuck dfedi...@redhat.com
  Cc: users@ovirt.org, Yedidyah Bar David d...@redhat.com, Sandro
  Bonazzola sbona...@redhat.com
  Sent: Thursday, June 5, 2014 7:46:24 PM
  Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs
 
  Hi Doron,
 
  I haven't purchased the Kabini-based system. I hoping that I would be
  able to learn in advance whether an all-in-one installation of oVirt
  would work on it. Unfortunately, returning it would be a hassle and I
  would not get a full refund for it. If there is no way to discover in
  advance whether oVirt will work on the system, I can take a risk. Is
  an all-in-one oVirt installation known to work on any of the modern
  AMD offerings?
 
  Thanks!
  iordan

 Hi everyone,

 I'm playing with a new AMD Kabini host, to see how it behaves as very 
 low-cost[1],
 low-consumption hypervisor host[2]. I'm still installing the node, so I don't
 have actual data yet.

 According to libvirt, the host present itself as Opteron_G3.

 Plese find attached the output from
 virsh (1.2.5) capabilities (caps.txt)
 lscpu (lscpu.txt)
 lspci (lspci.txt)


 +++

 [1] You can get a CPU + mainboard with ~85 EURO or even less, and it will 
 consume
 25W fully loaded, much less when idle. The fan is close to inaudible.
 [2] I'll put together a document/wiki page with my findings and experience
 afterwards.

 --
 Francesco Romani
 RedHat Engineering Virtualization R  D
 Phone: 8261328
 IRC: fromani



 --
 The conscious mind has only one thread of execution.



-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs

2014-06-06 Thread i iordanov
Hi Francesco,

Thank you so much! I really appreciate it. I already ordered the parts
taking a small risk. Yes, this system promises to be so cool and
quiet, that I can practically use it as a pillow :).

Cheers!
iordan

On Fri, Jun 6, 2014 at 5:32 AM, Francesco Romani from...@redhat.com wrote:
 - Original Message -
 From: Doron Fediuck dfedi...@redhat.com
 To: i iordanov iiorda...@gmail.com
 Cc: users@ovirt.org
 Sent: Thursday, June 5, 2014 6:50:58 PM
 Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs



 - Original Message -
  From: i iordanov iiorda...@gmail.com
  To: Doron Fediuck dfedi...@redhat.com
  Cc: users@ovirt.org, Yedidyah Bar David d...@redhat.com, Sandro
  Bonazzola sbona...@redhat.com
  Sent: Thursday, June 5, 2014 7:46:24 PM
  Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs
 
  Hi Doron,
 
  I haven't purchased the Kabini-based system. I hoping that I would be
  able to learn in advance whether an all-in-one installation of oVirt
  would work on it. Unfortunately, returning it would be a hassle and I
  would not get a full refund for it. If there is no way to discover in
  advance whether oVirt will work on the system, I can take a risk. Is
  an all-in-one oVirt installation known to work on any of the modern
  AMD offerings?
 
  Thanks!
  iordan

 Hi everyone,

 I'm playing with a new AMD Kabini host, to see how it behaves as very 
 low-cost[1],
 low-consumption hypervisor host[2]. I'm still installing the node, so I don't
 have actual data yet.

 According to libvirt, the host present itself as Opteron_G3.

 Plese find attached the output from
 virsh (1.2.5) capabilities (caps.txt)
 lscpu (lscpu.txt)
 lspci (lspci.txt)


 +++

 [1] You can get a CPU + mainboard with ~85 EURO or even less, and it will 
 consume
 25W fully loaded, much less when idle. The fan is close to inaudible.
 [2] I'll put together a document/wiki page with my findings and experience
 afterwards.

 --
 Francesco Romani
 RedHat Engineering Virtualization R  D
 Phone: 8261328
 IRC: fromani



-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs

2014-06-05 Thread i iordanov
Hi Doron,

I haven't purchased the Kabini-based system. I hoping that I would be
able to learn in advance whether an all-in-one installation of oVirt
would work on it. Unfortunately, returning it would be a hassle and I
would not get a full refund for it. If there is no way to discover in
advance whether oVirt will work on the system, I can take a risk. Is
an all-in-one oVirt installation known to work on any of the modern
AMD offerings?

Thanks!
iordan



On Wed, Jun 4, 2014 at 4:29 PM, Doron Fediuck dfedi...@redhat.com wrote:


 - Original Message -
 From: i iordanov iiorda...@gmail.com
 To: Doron Fediuck dfedi...@redhat.com
 Cc: users@ovirt.org
 Sent: Wednesday, June 4, 2014 1:26:03 AM
 Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs

 Hi Doron,

 To justify the reason I'm asking my question. On this page:

 http://www.ovirt.org/Features/Self_Hosted_Engine

 I see references to a limited set of CPU types supported by some
 component of oVirt. For example, I find the following text alarming:

The following CPU types are supported by this host:
- model_Nehalem: Intel Nehalem Family
- model_Penryn: Intel Penryn Family
- model_Conroe: Intel Conroe Family


 Thanks!
 iordan

 On Tue, Jun 3, 2014 at 6:19 PM, i iordanov iiorda...@gmail.com wrote:
  Hi Doron,
 
  So there is no artificial check for supported CPUs in the oVirt engine
  installer?
 
  Thanks!
  iordan
 
  On Sun, May 25, 2014 at 7:47 AM, Doron Fediuck dfedi...@redhat.com wrote:
 
 
  - Original Message -
  From: i iordanov iiorda...@gmail.com
  To: users@ovirt.org
  Sent: Sunday, May 25, 2014 12:51:57 AM
  Subject: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs
 
  Hey guys,
 
  I need a system to test oVirt and Opaque on, but I want it to be
  super-low power and near-silent. Therefore I am thinking of grabbing
  one of the new 25W AMD Kabini CPUs. Will oVirt work well on that
  architecture? If not, what would you recommend?
 
  Many thanks!
  iordan
 
  --
  The conscious mind has only one thread of execution.
  ___
  Users mailing list
  Users@ovirt.org
  http://lists.ovirt.org/mailman/listinfo/users
 
 
  Hey,
  oVirt works with libvirt and kvm.
 
  In order to know what is supported with kvm you can check:
  http://www.linux-kvm.org/page/Processor_support
 
  As for libvirt, they provide a wiki on troubleshooting it:
  http://wiki.libvirt.org/page/Libvirt_identifies_host_processor_as_a_different_model_from_the_hardware_documentation
 
  Hope that helps,
  Doron
 
 
 
  --
  The conscious mind has only one thread of execution.



 --
 The conscious mind has only one thread of execution.


 Hi iordan,
 The text you provided is based on the information we get from libvirt
 with some restrictions we impose specifically on hosted engine to make
 sure its VM can live-migrate from one host to the other.

 You can see more info here:
 http://docs.fedoraproject.org/en-US/Fedora/18/html/Virtualization_Administration_Guide/ch15s13s03.html

 Can you provide the output of 'virsh capabilities' on your AMD Kabini?



-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs

2014-06-03 Thread i iordanov
Hi Doron,

So there is no artificial check for supported CPUs in the oVirt engine
installer?

Thanks!
iordan

On Sun, May 25, 2014 at 7:47 AM, Doron Fediuck dfedi...@redhat.com wrote:


 - Original Message -
 From: i iordanov iiorda...@gmail.com
 To: users@ovirt.org
 Sent: Sunday, May 25, 2014 12:51:57 AM
 Subject: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs

 Hey guys,

 I need a system to test oVirt and Opaque on, but I want it to be
 super-low power and near-silent. Therefore I am thinking of grabbing
 one of the new 25W AMD Kabini CPUs. Will oVirt work well on that
 architecture? If not, what would you recommend?

 Many thanks!
 iordan

 --
 The conscious mind has only one thread of execution.
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


 Hey,
 oVirt works with libvirt and kvm.

 In order to know what is supported with kvm you can check:
 http://www.linux-kvm.org/page/Processor_support

 As for libvirt, they provide a wiki on troubleshooting it:
 http://wiki.libvirt.org/page/Libvirt_identifies_host_processor_as_a_different_model_from_the_hardware_documentation

 Hope that helps,
 Doron



-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs

2014-06-03 Thread i iordanov
Hi Doron,

To justify the reason I'm asking my question. On this page:

http://www.ovirt.org/Features/Self_Hosted_Engine

I see references to a limited set of CPU types supported by some
component of oVirt. For example, I find the following text alarming:

   The following CPU types are supported by this host:
   - model_Nehalem: Intel Nehalem Family
   - model_Penryn: Intel Penryn Family
   - model_Conroe: Intel Conroe Family


Thanks!
iordan

On Tue, Jun 3, 2014 at 6:19 PM, i iordanov iiorda...@gmail.com wrote:
 Hi Doron,

 So there is no artificial check for supported CPUs in the oVirt engine
 installer?

 Thanks!
 iordan

 On Sun, May 25, 2014 at 7:47 AM, Doron Fediuck dfedi...@redhat.com wrote:


 - Original Message -
 From: i iordanov iiorda...@gmail.com
 To: users@ovirt.org
 Sent: Sunday, May 25, 2014 12:51:57 AM
 Subject: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs

 Hey guys,

 I need a system to test oVirt and Opaque on, but I want it to be
 super-low power and near-silent. Therefore I am thinking of grabbing
 one of the new 25W AMD Kabini CPUs. Will oVirt work well on that
 architecture? If not, what would you recommend?

 Many thanks!
 iordan

 --
 The conscious mind has only one thread of execution.
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


 Hey,
 oVirt works with libvirt and kvm.

 In order to know what is supported with kvm you can check:
 http://www.linux-kvm.org/page/Processor_support

 As for libvirt, they provide a wiki on troubleshooting it:
 http://wiki.libvirt.org/page/Libvirt_identifies_host_processor_as_a_different_model_from_the_hardware_documentation

 Hope that helps,
 Doron



 --
 The conscious mind has only one thread of execution.



-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] experience with AMD Kabini (Jaguar) CPUs

2014-05-24 Thread i iordanov
Hey guys,

I need a system to test oVirt and Opaque on, but I want it to be
super-low power and near-silent. Therefore I am thinking of grabbing
one of the new 25W AMD Kabini CPUs. Will oVirt work well on that
architecture? If not, what would you recommend?

Many thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2014-03-15 Thread i iordanov
Hey guys,

Just in case you missed the update I posted to the Opaque Beta test
community page (if you are using gmail it would have placed it in your
Social inbox), I wanted to mention here as well that v1.2.2 of
Opaque Beta can now record audio using the microphone of your device!

Your feedback would be highly appreciated!

Thanks,
iordan

On Sun, Jan 26, 2014 at 7:43 PM, i iordanov iiorda...@gmail.com wrote:
 Hi Nathanaël and everyone else interested in keyboard layouts other than
 English,

 I really didn't like the idea of releasing Opaque into production supporting
 only English (QWERTY), so I devised a method to get around a current SPICE
 protocol limitation (only being able to transmit keyboard scan codes and not
 unicode to the VM). It involves Opaque translating unicode characters
 on-device according to a user-specified layout into a series of scan codes.
 Currently English (QWERTY), German (QWERTZ), and French (AZERTY) are fully
 supported including all AltGr and dead-key combinations.

 I encourage all users of the supported layouts to give them a thorough
 beating and let me know of any issues. I'd also like to hear your opinions
 on whether such a solution can and should make it to production.

 To use a layout other than English (default), long-tap on a connection to
 edit it, then from the new drop-down select your desired layout. Once
 connected to your VM, ensure that the chosen layout there matches the layout
 you picked in the settings. For best results (i.e. for your Android keyboard
 to offer you all the possible unicode choices that your layout can produce),
 you should also use an Android keyboard that supports your language. The
 layout on your phone is not at all important, because all I need from the
 Android IME are unicode values, however, I must say that I find Hacker's
 keyboard most flexible.

 One caviat is that in order to be able to obtain the true unicode value from
 the IME, I've had to interpret ALT meta state as belonging to the KeyEvent
 rather than something that should be passed on to the VM. The reason for
 this is that on Android, some characters like the German ß appears as
 ALT+s to me, and that's the only way to properly capture it. In fact, if you
 type ALT+s manually, while using the German layout, you will get a ß on
 the remote side.

 Hence, the Hacker's keyboard ALT cannot be used as an ALT. Thankfully,
 though, there is a nice workaround. The on-screen ALT button is exempt from
 such considerations and works just fine.

 Once the project gains a larger user-base, I expect that interested people
 will be able to help me create their own keyboard layout map files. The
 final format will be documented and the documentation will be available in
 the source distribution.

 Everyone, thank you very much in advance for your input!

 Sincerely,
 iordan




 On Fri, Dec 6, 2013 at 11:47 AM, Nathanaël Blanchet blanc...@abes.fr
 wrote:

 Le 06/12/2013 17:31, Nathanaël Blanchet a écrit :

 Hi, just tested it, it is an unexpected good idea!
 My ovirt server is ssl only, so it was a bit complicated to get
 /etc/pki/ovirt-engine/ca.pem.
 I think it could be great to add a browser to get the ca into the
 filesystem instead of searching it into the phone, virtual keyboard is not
 convinient to type long inputs.
 Then, opaque's keyboard regional layout gave me headache. It is default
 qwerty but I need french layout, and no option to change it in the app is
 available. So, I changed the android layout keyboard into qwerty, but at
 this time while the keyboard is physically qwerty, I get a A for Q, so
 it is always inversed. Maybe I should change the spice server layout...
 So the idea is good but it is unusable with non US layout.

 Something else important : I only managed to login with admin@local and no
 external authentication (AD in my case) was possible since it is supported
 into the regular webadmin.

 Le 06/12/2013 17:11, i iordanov a écrit :

 Hi guys,

 Just a clarification that Opaque is a VM console client, not an
 infrastructure management client.

 Cheers!
 iordan


 On Thu, Dec 5, 2013 at 12:38 PM, i iordanov iiorda...@gmail.com wrote:

 Hello,

 We invite any interested oVirt/RHEV developers and administrators to
 beta-test Opaque, a new Android oVirt/RHEV client application.

 To opt in, please reply to this message with an email address associated
 with a Google Account, because joining the beta-test group is based on
 membership to a Google Plus community. If you don't want that email address
 posted to the mailing list, don't include it in your reply!

 Itamar or I will add you to the community and let you know that you can
 proceed to the following two steps:

 1) Please visit this page here to accept the invitation:
 https://plus.google.com/communities/116099119712127782216

 2) Once you've become a member of the Google+ group, to opt-in, visit:
 https://play.google.com/apps/testing/com.undatech.opaquebeta

 You will be able to download Opaque

[Users] Opaque project on wiki?

2014-02-13 Thread i iordanov
Hey guys,

I was wondering if you're interested in featuring the Opaque project
somewhere on the wiki? If so, where?

It's now in production, and the source code (GPLv3) is released in my
repository housing all my remote desktop client software here:

  https://github.com/iiordanov/remote-desktop-clients

Thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] VNC support in Opaque

2014-02-13 Thread i iordanov
Hi Sven,

I would like to separate the discussion of features in Opaque from my
question about the Wiki, so I'm sending a separate email regarding your
question.

 Does it support the novnc connection to the vm too, or just spice?
 This would be _huge_ !

Do you mean supporting VMs which has VNC set as the console type? Then that
is a planned feature, but I didn't know how to prioritize it. A very fast
an capable Android VNC client (bVNC) is also part of my
remote-desktop-clients repository, and I was planning to make use of it in
order to give Opaque the capability.

Do we have a consensus on how important such a feature would be? Can I hear
from others too?

Thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] Opaque oVirt/RHEV/Proxmox client and source code released

2014-02-07 Thread i iordanov
Hello!

Apologies for the cross-post.

I've released Opaque into production on Google Play:
https://play.google.com/store/apps/details?id=com.undatech.opaque

and on Blackberry World for devices running Blackberry OS 10.2.1 or newer:
http://appworld.blackberry.com/webstore/content/46004889

The source code is now part of the renamed (formerly bVNC) repository:
https://github.com/iiordanov/remote-desktop-clients

The old name of the repository links to the new one. I didn't think it's a
good idea to keep calling it bVNC given that it already contains code to
build 4 different remote desktop clients.

If you are an oVirt or RHEV admin, please ensure that Opaque works in your
environment before recommending it to your users. Please start by reading
the KNOWN ISSUES section in the description of the application.

Thanks for all the feedback I received from the beta test community! I will
still be releasing new features to be beta-tested before pushing them to
production.

Sincerely,
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2014-01-26 Thread i iordanov
Hi Nathanaël and everyone else interested in keyboard layouts other than
English,

I really didn't like the idea of releasing Opaque into production
supporting only English (QWERTY), so I devised a method to get around a
current SPICE protocol limitation (only being able to transmit keyboard
scan codes and not unicode to the VM). It involves Opaque translating
unicode characters on-device according to a user-specified layout into a
series of scan codes. Currently English (QWERTY), German (QWERTZ), and
French (AZERTY) are fully supported including all AltGr and dead-key
combinations.

I encourage all users of the supported layouts to give them a thorough
beating and let me know of any issues. I'd also like to hear your opinions
on whether such a solution can and should make it to production.

To use a layout other than English (default), long-tap on a connection to
edit it, then from the new drop-down select your desired layout. Once
connected to your VM, ensure that the chosen layout there matches the
layout you picked in the settings. For best results (i.e. for your Android
keyboard to offer you all the possible unicode choices that your layout can
produce), you should also use an Android keyboard that supports your
language. The layout on your phone is not at all important, because all I
need from the Android IME are unicode values, however, I must say that I
find Hacker's keyboard most flexible.

One caviat is that in order to be able to obtain the true unicode value
from the IME, I've had to interpret ALT meta state as belonging to the
KeyEvent rather than something that should be passed on to the VM. The
reason for this is that on Android, some characters like the German ß
appears as ALT+s to me, and that's the only way to properly capture it. In
fact, if you type ALT+s manually, while using the German layout, you will
get a ß on the remote side.

Hence, the Hacker's keyboard ALT cannot be used as an ALT. Thankfully,
though, there is a nice workaround. The on-screen ALT button is exempt from
such considerations and works just fine.

Once the project gains a larger user-base, I expect that interested people
will be able to help me create their own keyboard layout map files. The
final format will be documented and the documentation will be available in
the source distribution.

Everyone, thank you very much in advance for your input!

Sincerely,
iordan




On Fri, Dec 6, 2013 at 11:47 AM, Nathanaël Blanchet blanc...@abes.frwrote:

  Le 06/12/2013 17:31, Nathanaël Blanchet a écrit :

  Hi, just tested it, it is an unexpected good idea!
 My ovirt server is ssl only, so it was a bit complicated to get
 /etc/pki/ovirt-engine/ca.pem.
 I think it could be great to add a browser to get the ca into the
 filesystem instead of searching it into the phone, virtual keyboard is not
 convinient to type long inputs.
 Then, opaque's keyboard regional layout gave me headache. It is default
 qwerty but I need french layout, and no option to change it in the app is
 available. So, I changed the android layout keyboard into qwerty, but at
 this time while the keyboard is physically qwerty, I get a A for Q, so
 it is always inversed. Maybe I should change the spice server layout...
 So the idea is good but it is unusable with non US layout.

 Something else important : I only managed to login with admin@local and
 no external authentication (AD in my case) was possible since it is
 supported into the regular webadmin.

  Le 06/12/2013 17:11, i iordanov a écrit :

  Hi guys,

  Just a clarification that Opaque is a VM console client, not an
 infrastructure management client.

 Cheers!
  iordan


  On Thu, Dec 5, 2013 at 12:38 PM, i iordanov iiorda...@gmail.com wrote:

  Hello,

 We invite any interested oVirt/RHEV developers and administrators to
 beta-test Opaque, a new Android oVirt/RHEV client application.

 To opt in, please reply to this message with an email address associated
 with a Google Account, because joining the beta-test group is based on
 membership to a Google Plus community. If you don't want that email address
 posted to the mailing list, don't include it in your reply!

 Itamar or I will add you to the community and let you know that you can
 proceed to the following two steps:

 1) Please visit this page here to accept the invitation:
 https://plus.google.com/communities/116099119712127782216

 2) Once you've become a member of the Google+ group, to opt-in, visit:
 https://play.google.com/apps/testing/com.undatech.opaquebeta

 You will be able to download Opaque from Google Play by following the
 link at the bottom of the opt-in page.

 Please share your experiences with Opaque to the mailing list!

  Cheers,
 iordan

 --
 The conscious mind has only one thread of execution.




 --
 The conscious mind has only one thread of execution.


 ___
 Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users


 --
 Nathanaël Blanchet

 Supervision

Re: [Users] connecting to oVirt/RHEV VMs through proxy and the oVirt API

2014-01-17 Thread i iordanov
Hi Juan,

On Fri, Jan 17, 2014 at 4:55 AM, Juan Hernandez jhern...@redhat.com wrote:

 You are right. Obtaining the global proxy setting is currently
 impossible in the API. There is no bug requesting it, as far as I know.
 Can you open a new one?


Here is the bug report for future reference:

https://bugzilla.redhat.com/show_bug.cgi?id=1054948

Thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-18 Thread i iordanov
Hi Marian,

I'm cc-ing the list because I think this may be valuable information for
other people trying this on Android 2.3 devices.


On Tue, Dec 17, 2013 at 2:54 PM, Marian Krcmarik mkrcm...@redhat.comwrote:

 I was fighting with RHEVM3.2/3.3 User/Admin Portal and vv files on Android
 and I must admit I am defeated.
 Firefox constantly crashes when trying to access console (by clicking on
 Console button), once It even rebooted my Android phone.


Firefox works for me on my 4.3 and now upgraded 4.4 Nexus 4.



 UC Browser and Opera Mini crashes when trying to open User/Admin portal
 page.
 Opera Mobile does not do anything when clicking on Console button but at
 least does not crash.


I haven't tried Opera Mini, but UC Browser works for me on my device.


 So I gave up, maybe It's because of my Android 2 phone.


It may very well be Android 2.3 causing all this trouble. Alternatively,
your phone may not have enough RAM to run these browsers.

At any rate, I'd say the bottom line is that the console.vv route will not
work for Android 2.3 devices unless we can figure out a browser that works
well enough.



 What browser did you use for accessing console?


To summarize, I've successfully obtained console.vv through Chrome,
Firefox, and UCBrowser.

The Admin console is not rendered well in any of those browsers, whereas
the User console seems to be rendered well enough in any of them. For the
User portal to be useful, however, we need to work around the double-click
requirement first. For reference, the issue is reported here:

https://bugzilla.redhat.com/show_bug.cgi?id=1043559

Cheers!
iordan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] feature request - support getting console.vv with a single click

2013-12-17 Thread i iordanov
Hi Michal,

Thanks for fixing the product information on the bug-report.

I see that single-click is used to select a VM to show details on the right
at the moment, so I understand your reluctance to change the default
behavior. That said, I think having users look for the console icon in the
right pane may generate a lot of questions.

Here are some suggestions for you to consider:

1) What about adding an icon (somewhat separated to reduce the likelihood
of mis-taps) to the bottom row of icons where Run/Shutdown/Suspend are?
This is not ideal, but if we put it all the way on the left where the Run
button is, the danger is minimal.

2) What do you think about changing the Run icon to an Attach to
console icon once the machine is up instead of graying it out?

3) Another possibility is dedicating one corner of the entire icon (e.g.
top right) for the purpose. This way, users can still single-click/tap near
the middle to see details and use the top right to get console.vv.

On a device with a small screen and touch interface, ideally one should be
able to easily tap a (relatively) big icon for any functionality.
Therefore, apart from these suggestions, I think that making all existing
icons a bit bigger would make it easier for a users to tap on a mobile
device with a small screen. What do you think?

Hopefully one or more of these ideas will work for you!

Thanks,
iordan



On Tue, Dec 17, 2013 at 11:27 AM, Michal Skrivanek mskri...@redhat.comwrote:



 On 16 Dec 2013, at 17:13, i iordanov iiorda...@gmail.com wrote:

 Hi Itamar,

 On Mon, Dec 16, 2013 at 3:18 AM, Itamar Heim ih...@redhat.com wrote:

 I'd say yes, and suggest you open a bug to track this.


 I've done what you suggested.

 https://bugzilla.redhat.com/show_bug.cgi?id=1043559


 Corected the product. Note it is oVirt

 I also wonder if having a new link on right hand side would be enough. I
 wouldn't want to change the default behavior on the vm icon...

 Thanks,
 michal


 Thanks!
 iordan

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] feature request - support getting console.vv with a single click

2013-12-16 Thread i iordanov
Hi Itamar,

On Mon, Dec 16, 2013 at 3:18 AM, Itamar Heim ih...@redhat.com wrote:

 I'd say yes, and suggest you open a bug to track this.


I've done what you suggested.

https://bugzilla.redhat.com/show_bug.cgi?id=1043559

Thanks!
iordan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-13 Thread i iordanov
Hi Jorick,

On Thu, Dec 12, 2013 at 6:10 PM, Jorick Astrego j.astr...@netbulae.euwrote:

  Not trying to start a flame war or something on this list, just curious
 about the reasoning
 Why only Google+? We would love to test it but I refuse to get a Google
 account due to privacy and other civil liberty issues.


There's no risk of starting a flame war with me. I understand your point of
view completely and sympathize.

For any other people reading who would like to avoid Google+, there is now
also a Google group that I can invite you to (which I don't think requires
Google+ membership). So if that works for you or anybody else, I would be
more than happy to invite you.

So let me refresh my invitation to the beta test now and say that Google+
membership is no longer required.

If there are any questions why this is on Google Play, I can justify that
as well.

Cheers!
iordan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-11 Thread i iordanov
Hey guys,

Any feedback so far?

Thanks,
iordan


On Thu, Dec 5, 2013 at 12:38 PM, i iordanov iiorda...@gmail.com wrote:

 Hello,

 We invite any interested oVirt/RHEV developers and administrators to
 beta-test Opaque, a new Android oVirt/RHEV client application.

 To opt in, please reply to this message with an email address associated
 with a Google Account, because joining the beta-test group is based on
 membership to a Google Plus community. If you don't want that email address
 posted to the mailing list, don't include it in your reply!

 Itamar or I will add you to the community and let you know that you can
 proceed to the following two steps:

 1) Please visit this page here to accept the invitation:
 https://plus.google.com/communities/116099119712127782216

 2) Once you've become a member of the Google+ group, to opt-in, visit:
 https://play.google.com/apps/testing/com.undatech.opaquebeta

 You will be able to download Opaque from Google Play by following the link
 at the bottom of the opt-in page.

 Please share your experiences with Opaque to the mailing list!

 Cheers,
 iordan

 --
 The conscious mind has only one thread of execution.




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] feature request - support getting console.vv with a single click

2013-12-11 Thread i iordanov
Hi guys,

Mobile browsers usually reserve the double-tap functionality for zooming
in/out. It's therefore difficult/impossible to obtain a console.vv file
from the user-mode web interface on a mobile device.

Would you consider adding functionality to connect to the console without a
double-click?

Thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-11 Thread i iordanov
I think 13 people from this list so far.

Would you like me to invite you too?

Cheers!
iordan


On Wed, Dec 11, 2013 at 8:44 AM, Dave Neary nea...@gmail.com wrote:

 Hi Iordan,

 Looks interesting! Sorry, I missed this the first time around.

 Have you had a lot of people sign up for it?

 Cheers,
 Dave.

 On 12/10/2013 05:16 PM, i iordanov wrote:
  Hey guys,
 
  Any feedback so far?
 
  Thanks,
  iordan
 
 
  On Thu, Dec 5, 2013 at 12:38 PM, i iordanov iiorda...@gmail.com
  mailto:iiorda...@gmail.com wrote:
 
  Hello,
 
  We invite any interested oVirt/RHEV developers and administrators to
  beta-test Opaque, a new Android oVirt/RHEV client application.
 
  To opt in, please reply to this message with an email address
  associated with a Google Account, because joining the beta-test
  group is based on membership to a Google Plus community. If you
  don't want that email address posted to the mailing list, don't
  include it in your reply!
 
  Itamar or I will add you to the community and let you know that you
  can proceed to the following two steps:
 
  1) Please visit this page here to accept the invitation:
  https://plus.google.com/communities/116099119712127782216
 
  2) Once you've become a member of the Google+ group, to opt-in,
 visit:
  https://play.google.com/apps/testing/com.undatech.opaquebeta
 
  You will be able to download Opaque from Google Play by following
  the link at the bottom of the opt-in page.
 
  Please share your experiences with Opaque to the mailing list!
 
  Cheers,
  iordan
 
  --
  The conscious mind has only one thread of execution.
 
 
 
 
  --
  The conscious mind has only one thread of execution.
 
 
  ___
  Users mailing list
  Users@ovirt.org
  http://lists.ovirt.org/mailman/listinfo/users
 

 --
 Dave Neary, Lyon, France
 Email: dne...@gnome.org / Jabber: nea...@gmail.com
 Ph: +33 950 71 55 62 / Cell: +33 6 77 01 92 13




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-11 Thread i iordanov
Hi Jiri,

Thanks for the feedback. The thumbnails become 1/2 the size once you add 3
or more VMs to the list of saved connections.

Yes, Opaque is a SPICE client, and I am also hoping to add VNC support or
at least the ability to launch an external app.

Please tell us what version of oVirt /RHEV you are using, whether your
certificate is self-signed, and whether you've used remote-viewer on the
command-line successfully and what options and URI it needed.

I have a couple of users complaining of similar issues, and a couple plus
myself who've had no issues. I'm trying to figure out what is common
between the users who have problems.

Thanks!
iordan



On Wed, Dec 11, 2013 at 3:09 PM, Jiří Sléžka jiri.sle...@slu.cz wrote:

 Hi iordan,



 On 10.12.2013 17:16, i iordanov wrote:

 Hey guys,

 Any feedback so far?


 first, I was surprised I cannot see any vms but it is more problem how
 oVirt handle rights. Although I had SuperUser rights I was not explicitly
 listed in my vm's permissions list. Also I had assign any of user roles not
 an admin one.

 secondly, I cannot connect because Connection failure. Please check
 server address and network connectivity. I am trying to connect from same
 network where spice firefox plugin works fine. I hope Opaque is a spice
 client, right? :-)

 btw, I am using Nexus7 (Android 4.4.2) and It would be better to use kind
 of list of vms instead of big thumbnails because user (like I :-) can have
 no idea it is actually a list because he/she can see only big (nearly two
 screens high) blue rectangle with text No Screenshot available yet :-)


 But screenshots looks promising, I am going to write more feedbacks when I
 connect to some vm :-)


 Cheers, dron



 Thanks,
 iordan


 On Thu, Dec 5, 2013 at 12:38 PM, i iordanov iiorda...@gmail.com
 mailto:iiorda...@gmail.com wrote:

 Hello,

 We invite any interested oVirt/RHEV developers and administrators to
 beta-test Opaque, a new Android oVirt/RHEV client application.

 To opt in, please reply to this message with an email address
 associated with a Google Account, because joining the beta-test
 group is based on membership to a Google Plus community. If you
 don't want that email address posted to the mailing list, don't
 include it in your reply!

 Itamar or I will add you to the community and let you know that you
 can proceed to the following two steps:

 1) Please visit this page here to accept the invitation:
 https://plus.google.com/communities/116099119712127782216

 2) Once you've become a member of the Google+ group, to opt-in, visit:
 https://play.google.com/apps/testing/com.undatech.opaquebeta

 You will be able to download Opaque from Google Play by following
 the link at the bottom of the opt-in page.

 Please share your experiences with Opaque to the mailing list!

 Cheers,
 iordan

 --
 The conscious mind has only one thread of execution.




 --
 The conscious mind has only one thread of execution.


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-11 Thread i iordanov
Also, can you please also try connecting to your VM by logging in with
admin@internal with a mobile browser (Firefox works), selecting a VM and
tapping the green console icon to get a console.vv?

The newest version of Opaque Beta supports .vv files.

Thanks!
iordan


On Wed, Dec 11, 2013 at 3:34 PM, i iordanov iiorda...@gmail.com wrote:

 Hi Jiri,

 Thanks for the feedback. The thumbnails become 1/2 the size once you add 3
 or more VMs to the list of saved connections.

 Yes, Opaque is a SPICE client, and I am also hoping to add VNC support or
 at least the ability to launch an external app.

 Please tell us what version of oVirt /RHEV you are using, whether your
 certificate is self-signed, and whether you've used remote-viewer on the
 command-line successfully and what options and URI it needed.

 I have a couple of users complaining of similar issues, and a couple plus
 myself who've had no issues. I'm trying to figure out what is common
 between the users who have problems.

 Thanks!
 iordan



 On Wed, Dec 11, 2013 at 3:09 PM, Jiří Sléžka jiri.sle...@slu.cz wrote:

 Hi iordan,



 On 10.12.2013 17:16, i iordanov wrote:

 Hey guys,

 Any feedback so far?


 first, I was surprised I cannot see any vms but it is more problem how
 oVirt handle rights. Although I had SuperUser rights I was not explicitly
 listed in my vm's permissions list. Also I had assign any of user roles not
 an admin one.

 secondly, I cannot connect because Connection failure. Please check
 server address and network connectivity. I am trying to connect from same
 network where spice firefox plugin works fine. I hope Opaque is a spice
 client, right? :-)

 btw, I am using Nexus7 (Android 4.4.2) and It would be better to use kind
 of list of vms instead of big thumbnails because user (like I :-) can have
 no idea it is actually a list because he/she can see only big (nearly two
 screens high) blue rectangle with text No Screenshot available yet :-)


 But screenshots looks promising, I am going to write more feedbacks when
 I connect to some vm :-)


 Cheers, dron



 Thanks,
 iordan


 On Thu, Dec 5, 2013 at 12:38 PM, i iordanov iiorda...@gmail.com
 mailto:iiorda...@gmail.com wrote:

 Hello,

 We invite any interested oVirt/RHEV developers and administrators to
 beta-test Opaque, a new Android oVirt/RHEV client application.

 To opt in, please reply to this message with an email address
 associated with a Google Account, because joining the beta-test
 group is based on membership to a Google Plus community. If you
 don't want that email address posted to the mailing list, don't
 include it in your reply!

 Itamar or I will add you to the community and let you know that you
 can proceed to the following two steps:

 1) Please visit this page here to accept the invitation:
 https://plus.google.com/communities/116099119712127782216

 2) Once you've become a member of the Google+ group, to opt-in,
 visit:
 https://play.google.com/apps/testing/com.undatech.opaquebeta

 You will be able to download Opaque from Google Play by following
 the link at the bottom of the opt-in page.

 Please share your experiences with Opaque to the mailing list!

 Cheers,
 iordan

 --
 The conscious mind has only one thread of execution.




 --
 The conscious mind has only one thread of execution.


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




 --
 The conscious mind has only one thread of execution.




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-11 Thread i iordanov
Hello!

Anybody who has problems accessing the graphical console of a VM and would
not mind creating an unprivileged user with access to an unimportant VM, I
would be able to try reproducing the issue on my device as well.

Please let me know and send me credentials and server address if possible.

Thanks!
iordan


On Wed, Dec 11, 2013 at 3:36 PM, i iordanov iiorda...@gmail.com wrote:

 Also, can you please also try connecting to your VM by logging in with
 admin@internal with a mobile browser (Firefox works), selecting a VM and
 tapping the green console icon to get a console.vv?

 The newest version of Opaque Beta supports .vv files.

 Thanks!
 iordan


 On Wed, Dec 11, 2013 at 3:34 PM, i iordanov iiorda...@gmail.com wrote:

 Hi Jiri,

 Thanks for the feedback. The thumbnails become 1/2 the size once you add
 3 or more VMs to the list of saved connections.

 Yes, Opaque is a SPICE client, and I am also hoping to add VNC support or
 at least the ability to launch an external app.

 Please tell us what version of oVirt /RHEV you are using, whether your
 certificate is self-signed, and whether you've used remote-viewer on the
 command-line successfully and what options and URI it needed.

 I have a couple of users complaining of similar issues, and a couple plus
 myself who've had no issues. I'm trying to figure out what is common
 between the users who have problems.

 Thanks!
 iordan



 On Wed, Dec 11, 2013 at 3:09 PM, Jiří Sléžka jiri.sle...@slu.cz wrote:

 Hi iordan,



 On 10.12.2013 17:16, i iordanov wrote:

 Hey guys,

 Any feedback so far?


 first, I was surprised I cannot see any vms but it is more problem how
 oVirt handle rights. Although I had SuperUser rights I was not explicitly
 listed in my vm's permissions list. Also I had assign any of user roles not
 an admin one.

 secondly, I cannot connect because Connection failure. Please check
 server address and network connectivity. I am trying to connect from same
 network where spice firefox plugin works fine. I hope Opaque is a spice
 client, right? :-)

 btw, I am using Nexus7 (Android 4.4.2) and It would be better to use
 kind of list of vms instead of big thumbnails because user (like I :-) can
 have no idea it is actually a list because he/she can see only big (nearly
 two screens high) blue rectangle with text No Screenshot available yet :-)


 But screenshots looks promising, I am going to write more feedbacks when
 I connect to some vm :-)


 Cheers, dron



 Thanks,
 iordan


 On Thu, Dec 5, 2013 at 12:38 PM, i iordanov iiorda...@gmail.com
 mailto:iiorda...@gmail.com wrote:

 Hello,

 We invite any interested oVirt/RHEV developers and administrators to
 beta-test Opaque, a new Android oVirt/RHEV client application.

 To opt in, please reply to this message with an email address
 associated with a Google Account, because joining the beta-test
 group is based on membership to a Google Plus community. If you
 don't want that email address posted to the mailing list, don't
 include it in your reply!

 Itamar or I will add you to the community and let you know that you
 can proceed to the following two steps:

 1) Please visit this page here to accept the invitation:
 https://plus.google.com/communities/116099119712127782216

 2) Once you've become a member of the Google+ group, to opt-in,
 visit:
 https://play.google.com/apps/testing/com.undatech.opaquebeta

 You will be able to download Opaque from Google Play by following
 the link at the bottom of the opt-in page.

 Please share your experiences with Opaque to the mailing list!

 Cheers,
 iordan

 --
 The conscious mind has only one thread of execution.




 --
 The conscious mind has only one thread of execution.


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




 --
 The conscious mind has only one thread of execution.




 --
 The conscious mind has only one thread of execution.




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-06 Thread i iordanov
Hi Nathanael,

Supporting non-US keyboard layouts will only be convenient and good if
libspice supported a separate channel for sending unicode characters over
to the vdagent of the guest. The reason is that mobile devices generally do
not generate scan codes with soft-input keyboards, and I basically resort
to mapping characters to scancodes which is non-optimal.

As far as the other question you have, my setup is a FreeIPA server with a
bunch of users on it, which has been added to oVirt. I'm able to
authenticate with both admin@internal and all of the users in LDAP. You
must enter user@domain, and not just user for the authentication to work,
however. If this still doesn't help you, can you tell me what difference do
you think it makes for the client whether oVirt is authenticating against
AD or FreeIPA?

Cheers!
iordan


On Fri, Dec 6, 2013 at 11:47 AM, Nathanaël Blanchet blanc...@abes.frwrote:

  Le 06/12/2013 17:31, Nathanaël Blanchet a écrit :

  Hi, just tested it, it is an unexpected good idea!
 My ovirt server is ssl only, so it was a bit complicated to get
 /etc/pki/ovirt-engine/ca.pem.
 I think it could be great to add a browser to get the ca into the
 filesystem instead of searching it into the phone, virtual keyboard is not
 convinient to type long inputs.
 Then, opaque's keyboard regional layout gave me headache. It is default
 qwerty but I need french layout, and no option to change it in the app is
 available. So, I changed the android layout keyboard into qwerty, but at
 this time while the keyboard is physically qwerty, I get a A for Q, so
 it is always inversed. Maybe I should change the spice server layout...
 So the idea is good but it is unusable with non US layout.

 Something else important : I only managed to login with admin@local and
 no external authentication (AD in my case) was possible since it is
 supported into the regular webadmin.

  Le 06/12/2013 17:11, i iordanov a écrit :

  Hi guys,

  Just a clarification that Opaque is a VM console client, not an
 infrastructure management client.

 Cheers!
  iordan


  On Thu, Dec 5, 2013 at 12:38 PM, i iordanov iiorda...@gmail.com wrote:

  Hello,

 We invite any interested oVirt/RHEV developers and administrators to
 beta-test Opaque, a new Android oVirt/RHEV client application.

 To opt in, please reply to this message with an email address associated
 with a Google Account, because joining the beta-test group is based on
 membership to a Google Plus community. If you don't want that email address
 posted to the mailing list, don't include it in your reply!

 Itamar or I will add you to the community and let you know that you can
 proceed to the following two steps:

 1) Please visit this page here to accept the invitation:
 https://plus.google.com/communities/116099119712127782216

 2) Once you've become a member of the Google+ group, to opt-in, visit:
 https://play.google.com/apps/testing/com.undatech.opaquebeta

 You will be able to download Opaque from Google Play by following the
 link at the bottom of the opt-in page.

 Please share your experiences with Opaque to the mailing list!

  Cheers,
 iordan

 --
 The conscious mind has only one thread of execution.




 --
 The conscious mind has only one thread of execution.


 ___
 Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users


 --
 Nathanaël Blanchet

 Supervision réseau
 Pôle exploitation et maintenance
 Département des systèmes d'information
 227 avenue Professeur-Jean-Louis-Viala
 34193 MONTPELLIER CEDEX 5 
 Tél. 33 (0)4 67 54 84 55
 Fax  33 (0)4 67 54 84 14blanc...@abes.fr



 ___
 Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users


 --
 Nathanaël Blanchet

 Supervision réseau
 Pôle exploitation et maintenance
 Département des systèmes d'information
 227 avenue Professeur-Jean-Louis-Viala
 34193 MONTPELLIER CEDEX 5 
 Tél. 33 (0)4 67 54 84 55
 Fax  33 (0)4 67 54 84 14blanc...@abes.fr


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] oVirt/RHEV Android client (Opaque) available for beta testing

2013-12-05 Thread i iordanov
Hello,

We invite any interested oVirt/RHEV developers and administrators to
beta-test Opaque, a new Android oVirt/RHEV client application.

To opt in, please reply to this message with an email address associated
with a Google Account, because joining the beta-test group is based on
membership to a Google Plus community. If you don't want that email address
posted to the mailing list, don't include it in your reply!

Itamar or I will add you to the community and let you know that you can
proceed to the following two steps:

1) Please visit this page here to accept the invitation:
https://plus.google.com/communities/116099119712127782216

2) Once you've become a member of the Google+ group, to opt-in, visit:
https://play.google.com/apps/testing/com.undatech.opaquebeta

You will be able to download Opaque from Google Play by following the link
at the bottom of the opt-in page.

Please share your experiences with Opaque to the mailing list!

Cheers,
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] crafting a POST request to the oVirt API manually

2013-12-04 Thread i iordanov
Thank you all! The information you've provided will help immensely!

Cheers,
iordan


On Wed, Dec 4, 2013 at 11:47 AM, Douglas Schilling Landgraf 
dougsl...@redhat.com wrote:

 On 12/04/2013 08:28 AM, Sven Kieske wrote:

 Hi,

 a first starting point can be: http://www.ovirt.org/Api

 HTH

 PS: RedHat has also an extensive PDF, RHEV 3.2 DeveloperGuide


 Some rest examples:
 https://github.com/dougsland/ovirt-restapi-scripts/wiki

 POST:
 https://github.com/dougsland/ovirt-restapi-scripts/blob/
 master/vm_shutdown.py


  Am 03.12.2013 22:50, schrieb i iordanov:

 Hello,

 Can somebody give me some pointers on how to craft POST requests to the
 API
 by hand with (for example) a Firefox plugin like Poster:

 https://addons.mozilla.org/en-US/firefox/addon/poster/

 It would be very helpful for libgovirt development.

 Thanks!
 iordan



 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




 --
 Cheers
 Douglas

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] crafting a POST request to the oVirt API manually

2013-12-03 Thread i iordanov
Hello,

Can somebody give me some pointers on how to craft POST requests to the API
by hand with (for example) a Firefox plugin like Poster:

https://addons.mozilla.org/en-US/firefox/addon/poster/

It would be very helpful for libgovirt development.

Thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] Free IPA + oVirt setup fails

2013-11-24 Thread i iordanov
Hi Juan,

Thanks for your suggestions!

On Sun, Nov 24, 2013 at 5:36 AM, Juan Hernandez jhern...@redhat.com wrote:

 Here you are experiencing two security features of the engine. The first
 one is the multiple level administration (a.k.a. MLA). The engine
 organizes objets in hierarchy: a set of data centers, then inside each
 data center a set of clusters, and inside each cluster a set of virtual
 machines. When you assign a permission to a user or group you in fact
 assign it to one of these objects, and objects deeper in the tree
 inherit them. So if you assign the create vm permission to user A and
 the default data center, then that user will have permission to create
 VMs on any cluster of that data center. I guess that the two users that
 you initially created had the permission on the default data center or
 the default cluster, so they have the permissions apply to all the VMs.
 Try to go to the data center or cluster tabs and see if the users have
 permissions there, then remove them as needed.


When I looked at the Data Centers and Clusters tabs and examined the
permissions given to the users, UserA and UserB have UserRole permissions
granted on both the default data center and the default cluster. Moreover,
I am unable to remove them, as the Remove selection is always grayed out.

Furthermore, examining the permissions on UserA's VM, I can see that only
UserA has been granted UseRole permission on it. No other user is mentioned.

So do the UserRole permissions granted to UserA and UserB in the Data
Center and Cluster explain the fact that they can see and attach to other
people's VM's?

If so, do I have to take the data center and cluster down to remove the
UserRole permissions for the users? Also, how could I prevent this
permission from getting added to the Data Center and Cluster automatically?
I haven't added it myself and it says that it's an inherited permission
(System).



 The other thing you are experiencing is the prevention of hijacking of
 the console of a VM.


Yes, I understand. I remember seeing the option you mention when
creating/editing VMs. I mentioned this more as a way to explain why UserB
was initially not able to connect to UserA's VM where in fact, it was
possible upon a clean boot.

Any additional help is appreciated!

iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] Free IPA + oVirt setup fails

2013-11-24 Thread i iordanov
Hi Itamar,

On Sun, Nov 24, 2013 at 10:41 AM, Itamar Heim itam...@gmail.com wrote:

 You probably added the user role to the user from the users tab, rather
 than just adding at vm level . You don't need to add the user first.

This was the misunderstanding that I had. I thought I have to add the users
in the Users tab first.

When adding to individual VMs, the user gains access to just the VM in
question.

Thanks to both you and Juan!
iordan


-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] Free IPA + oVirt setup fails

2013-11-23 Thread i iordanov
Hi guys,

I'm trying to work around the impossibility of adding local users into
oVirt by setting up a FreeIPA server for my test rig... :(

Everything is Fedora 19 and whatever package versions come with it.

1) I have an A-record, a PTR-record and the necessary SRV records for my
server in dnsmasq on my OpenWRT router:
ptr-record=60.2.168.192.in-addr.arpa,freeipa.iiordanov.com
srv-host=_kerberos-master._tcp,freeipa.iiordanov.com,88,0,100
srv-host=_kerberos-master._udp,freeipa.iiordanov.com,88,0,100
srv-host=_kerberos._tcp,freeipa.iiordanov.com,88,0,100
srv-host=_kerberos._udp,freeipa.iiordanov.com,88,0,100
srv-host=_kpasswd._tcp,freeipa.iiordanov.com,464,0,100
srv-host=_kpasswd._udp,freeipa.iiordanov.com,464,0,100
srv-host=_ldap._tcp,freeipa.iiordanov.com,389,0,100

2) I have run ipa-server-install and everything completed without error.
I've disabled the firewall on the server completely and the iptables chains
are all clean. I've rebooted the server just in case.

3) When I try to add the IPA server to oVirt, I get a nasty error!

# engine-manage-domains -action=add -domain=iiordanov.com -user=admin
-provider=ipa -interactive
Enter password:

General error has occurednull
java.lang.NegativeArraySizeException
at
sun.security.jgss.krb5.CipherHelper.aes256Encrypt(CipherHelper.java:1367)
at
sun.security.jgss.krb5.CipherHelper.encryptData(CipherHelper.java:722)
at sun.security.jgss.krb5.WrapToken_v2.init(WrapToken_v2.java:200)
at sun.security.jgss.krb5.Krb5Context.wrap(Krb5Context.java:861)
at sun.security.jgss.GSSContextImpl.wrap(GSSContextImpl.java:385)
at com.sun.security.sasl.gsskerb.GssKrb5Base.wrap(GssKrb5Base.java:104)
at
com.sun.jndi.ldap.sasl.SaslOutputStream.write(SaslOutputStream.java:89)
at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:430)
at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:555)
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1985)
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1847)
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1772)
at
com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386)
at
com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356)
at
com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339)
at
javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
at org.ovirt.engine.core.ldap.RootDSEData.init(RootDSEData.java:52)
at
org.ovirt.engine.core.utils.kerberos.JndiAction.getDomainDN(JndiAction.java:257)
at
org.ovirt.engine.core.utils.kerberos.JndiAction.run(JndiAction.java:87)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:356)
at
org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.promptSuccessfulAuthentication(KerberosConfigCheck.java:174)
at
org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.validateKerberosInstallation(KerberosConfigCheck.java:150)
at
org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.checkInstallation(KerberosConfigCheck.java:135)
at
org.ovirt.engine.core.domains.ManageDomains.checkKerberosConfiguration(ManageDomains.java:746)
at
org.ovirt.engine.core.domains.ManageDomains.testConfiguration(ManageDomains.java:917)
at
org.ovirt.engine.core.domains.ManageDomains.addDomain(ManageDomains.java:539)
at
org.ovirt.engine.core.domains.ManageDomains.runCommand(ManageDomains.java:311)
at
org.ovirt.engine.core.domains.ManageDomains.main(ManageDomains.java:206)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at org.jboss.modules.Module.run(Module.java:260)
at org.jboss.modules.Main.main(Main.java:291)
Failure while testing domain %1$s. Details: %2$s: One of the parameters for
this error is null and no default message to show


Can anybody spot the trouble here? Any help is appreciated!

Many thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] Free IPA + oVirt setup fails

2013-11-23 Thread i iordanov
Hi Juan,

I found the setting in the file you pointed me to:
nsslapd-minssf: 0

I changed it to 1, but as soon as I restart the ipa service with:
systemctl  restart ipa

or reboot it reverts back to 0! Why is this happening?

Many thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] Free IPA + oVirt setup fails

2013-11-23 Thread i iordanov
Hey,

I actually realized that something I wrote is inaccurate.

UserB, who was not granted permission to any VM was actually able to
connect to a freshly booted UserA's VM. Subsequently, UserA was unable to
connect to his own VM anymore, and the error message was:

Operation Failed: [user cannot force reconnect to vm]

When UserB then shut down UserA's VM, UserA was able to power it on and
attach to it. Subsequently, UserB was not able to connect to the VM again
with the same message UserA was getting (user cannot force connect to vm).

What I expected is that UserB would not see, not be able to power control,
and not be able to attach at all to UserA's VM, so this behavior is quite
puzzling to me!

Any clarification and help would be appreciated!

Thanks,
iordan



On Sat, Nov 23, 2013 at 7:50 PM, i iordanov iiorda...@gmail.com wrote:

 Hi Juan,

 On Sat, Nov 23, 2013 at 3:03 PM, Juan Hernandez jhern...@redhat.comwrote:

 Did you change it while the server was running? If so during stop the
 server will probably overwrite the file. Try to change it after stopping
 the server:


 Yes, it was absolutely because the server was running and was writing out
 its configuration upon being stopped.

 In fact modifying the file is not good practice, you may prefer to do it
 using LDAP:


 I guess this method would not have suffered from the clobbered config file
 :D. Thanks for the additional tip, I'm quite new to LDAP.


 I have just tested this in my local environment and with minssf=1 it
 works correctly, including the ability to search for users in the LDAP
 directory from the administration GUI and using those users to log in to
 both the administration GUI and to the user portal.


 I can definitely now confirm that changing minssf to 1 worked around the
 issue.

 However, I'm faced with either an issue or a misunderstanding of how
 things work in oVirt. I was able to add a couple of users to IPA (user A
 and user B) and then import them with UserRole into oVirt. What is puzzling
 is that both are able to see(!!) and power on/off(!) all the machines
 which were created by and for user admin@internal. Some of these machines
 are based on the Blank template and some on a different template (if that
 matters). Thankfully, at least the new users are unable to attach to the
 console of those machines.

 When I created a new virtual machine and in the permissions added user A
 as UserRole, user A now has access to the console of that VM. However, what
 was again puzzling is that user B can see and power on/off the new virtual
 machine, but at least cannot attach to the console (consistent with my
 previous findings).

 I would have thought that users would see and be able to power on/off
 only their own VMs, and something tells me that this is the way it was
 intended. So what do you think is broken in my test rig?

 Thank you very much!
 iordan

 --
 The conscious mind has only one thread of execution.




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] Free IPA + oVirt setup fails

2013-11-23 Thread i iordanov
Hi Juan,

On Sat, Nov 23, 2013 at 3:03 PM, Juan Hernandez jhern...@redhat.com wrote:

 Did you change it while the server was running? If so during stop the
 server will probably overwrite the file. Try to change it after stopping
 the server:


Yes, it was absolutely because the server was running and was writing out
its configuration upon being stopped.

In fact modifying the file is not good practice, you may prefer to do it
 using LDAP:


I guess this method would not have suffered from the clobbered config file
:D. Thanks for the additional tip, I'm quite new to LDAP.


 I have just tested this in my local environment and with minssf=1 it
 works correctly, including the ability to search for users in the LDAP
 directory from the administration GUI and using those users to log in to
 both the administration GUI and to the user portal.


I can definitely now confirm that changing minssf to 1 worked around the
issue.

However, I'm faced with either an issue or a misunderstanding of how things
work in oVirt. I was able to add a couple of users to IPA (user A and user
B) and then import them with UserRole into oVirt. What is puzzling is that
both are able to see(!!) and power on/off(!) all the machines which
were created by and for user admin@internal. Some of these machines are
based on the Blank template and some on a different template (if that
matters). Thankfully, at least the new users are unable to attach to the
console of those machines.

When I created a new virtual machine and in the permissions added user A as
UserRole, user A now has access to the console of that VM. However, what
was again puzzling is that user B can see and power on/off the new virtual
machine, but at least cannot attach to the console (consistent with my
previous findings).

I would have thought that users would see and be able to power on/off
only their own VMs, and something tells me that this is the way it was
intended. So what do you think is broken in my test rig?

Thank you very much!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] replacing self-signed certificates

2013-11-21 Thread i iordanov
Hi Itamar,

On Wed, Nov 20, 2013 at 2:54 PM, Itamar Heim ih...@redhat.com wrote:

 iordan - maybe wikify for future generations?


I don't see why not! Once I verify the procedure I'll get an account to
edit the wiki.

Cheers,
iordan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Hello,

I searched around but could not come up with specific instructions for how
to replace the self-signed certificates in an oVirt 3.3 setup with
non-self-signed certificates. I need to ensure that my oVirt/SPICE client
actually does the right thing when connecting to a machine with a 3rd party
signed certificate.

Presumably, I would be able to adapt the instructions provided here:
http://www.ovirt.org/How_to_change_engine_host_name

right? Which steps need to be modified? If I hammer at it long enough, I
would probably succeed in getting it to work at some point, but I was
hoping for somebody more experienced to help me over the initial hurdle.

In case I have to reinstall to use non-self-signed certificates, how do I
go about preparing the environment prior to running engine-setup?

Thanks!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Hi Thomas,

Thanks for your response! This goes a long way, however there is still the
unknown where ovirt-engine takes the SPICE certificate and CA from.

Can somebody confirm that replacing just the files referenced in the apache
configuration will be sufficient?

Thanks!
iordan


On Wed, Nov 20, 2013 at 1:00 PM, Thomas Suckow thomas.suc...@pnnl.govwrote:

 I don't know about the native SPICE client, but here is what I did for
 apache and the websocket proxy:

 In /etc/httpd/conf.d/ssl.conf it lists
 SSLCertificateFile
 SSLCertificateKeyFile
 SSLCertificateChainFile
 SSLCACertificateFile

 Those are the files you need to replace for the web interface. My certs
 were combined, so I actually only use SSLCertificateFile and
 SSLCertificateChainFile

 NOTE: If you modify ssl.conf, the path /etc/pki/ovirt-engine/apache-ca.pem
 is used by ovirt-iso-uploader. Uploads will fail unless you replace/symlink
 that file or specify a CA certificate on the command line. I actually
 linked to my chain file and it seems to be happy.



 Websocket Proxy:

 /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf defines the
 certificates.

 The websocket proxy needs a combined certificate file with your cert and
 the entire chain for SSL_CERTIFICATE
 SSL_KEY is just the unencrypted key, and it MUST be accessible by the
 ovirt user.



 As for spice, I am not sure, I am guessing it is
 /etc/pki/ovirt-engine/keys/engine_id_rsa  and /etc/pki/ovirt-engine/keys/
 certs/engine.cer
 Not sure where they are referenced except by the websocket proxy.

 --
 Thomas
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] replacing self-signed certificates

2013-11-20 Thread i iordanov
Thanks Alon and Thomas!

iordan


On Wed, Nov 20, 2013 at 1:51 PM, Alon Bar-Lev alo...@redhat.com wrote:



 - Original Message -
  From: i iordanov iiorda...@gmail.com
  To: users@ovirt.org
  Sent: Wednesday, November 20, 2013 6:50:04 PM
  Subject: [Users] replacing self-signed certificates
 
  Hello,
 
  I searched around but could not come up with specific instructions for
 how to
  replace the self-signed certificates in an oVirt 3.3 setup with
  non-self-signed certificates. I need to ensure that my oVirt/SPICE client
  actually does the right thing when connecting to a machine with a 3rd
 party
  signed certificate.
 
  Presumably, I would be able to adapt the instructions provided here:
  http://www.ovirt.org/How_to_change_engine_host_name
 
  right? Which steps need to be modified? If I hammer at it long enough, I
  would probably succeed in getting it to work at some point, but I was
 hoping
  for somebody more experienced to help me over the initial hurdle.
 
  In case I have to reinstall to use non-self-signed certificates, how do
 I go
  about preparing the environment prior to running engine-setup?

 Usually there is no need to replace any other certificate than the
 certificate that is used for apache frontend.

 No need to touch the spice and other certificates and keys.

 Replace /etc/pki/ovirt-engine/apache-ca.pem with your 3rd party CA
 certificate chain.
 Replace /etc/pki/ovirt-engine/keys/apache.p12 with key store.
 Extract key from apache.p12 to
 /etc/pki/ovirt-engine/keys/apache.key.nopass do not protect with password.
 Extract certificate from apache.p12 to
 /etc/pki/ovirt-engine/certs/apache.cer

 Alternatively, you can configure the mod_ssl as you wish.

 Once you do this, if you have ovirt-node already installed, delete
 /etc/pki/vdsm/certs/engine_web_ca.pem to allow fetch ssl trust and allow
 registration in future.

 Regards,
 Alon Bar-Lev.




-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] ovirt-live questions

2013-11-04 Thread i iordanov
Hi Itamar,

Just a follow-up to our previous conversation. I believe all my
troubles were due to running the VMs inside an oVirt node which itself
was a VM (with nested virtualization).

I reworked my scheme where the node is now installed directly onto
hardware and everything is operating lightning fast with no hangups.

Thanks for the quick reply and take care!

Cheers,
iordan

On Sat, Nov 2, 2013 at 10:46 AM, i iordanov iiorda...@gmail.com wrote:
 Hi Dan,

 I reproduced this bug within oVirt Live 1.1. One difference from a
 traditional setup in my case was that I was running the oVirt Live
 distro within a VM with nested virtualization enabled. I don't think
 that this is the cause because I was able to run VMs successfully when
 I removed the -uuid option, but it's worth mentioning.

 On Sat, Nov 2, 2013 at 11:24 AM, Dan Kenigsberg dan...@redhat.com wrote:
 How are you sure that -uuid is the trigger for this qemu bug? Could you
 copy here the shortest command line that reproduces the bug?

 When I get a chance, I will get that VM running again and will give
 you the shortest command-line that reproduces the hang.

 I suppose that a qemu mailing list could provide more help. What is your
 host kernel and exact qemu version?

 I'll get that for you in the follow-up as well.

 Thanks!
 iordan


 --
 The conscious mind has only one thread of execution.



-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] ovirt-live questions

2013-11-02 Thread i iordanov
Hi Dan,

I reproduced this bug within oVirt Live 1.1. One difference from a
traditional setup in my case was that I was running the oVirt Live
distro within a VM with nested virtualization enabled. I don't think
that this is the cause because I was able to run VMs successfully when
I removed the -uuid option, but it's worth mentioning.

On Sat, Nov 2, 2013 at 11:24 AM, Dan Kenigsberg dan...@redhat.com wrote:
 How are you sure that -uuid is the trigger for this qemu bug? Could you
 copy here the shortest command line that reproduces the bug?

When I get a chance, I will get that VM running again and will give
you the shortest command-line that reproduces the hang.

 I suppose that a qemu mailing list could provide more help. What is your
 host kernel and exact qemu version?

I'll get that for you in the follow-up as well.

Thanks!
iordan


-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] ovirt-live questions

2013-11-01 Thread i iordanov
Hi Itamar,

On Thu, Oct 31, 2013 at 7:44 PM, Itamar Heim ih...@redhat.com wrote:
 please check your spam folder and flag as not spam...

Yes, that turned out to be the problem, and I've reported it as not spam...

 - My oVirt live distro is installed on-disk, and I'm able to get it up
 and running with an engine-cleanup, some manual rm's, and an
 engine-setup. However, when I reboot, the local_host host is in a
 failed state and refuses to be resurrected no matter what. Is there a
 way to get around that somehow?

 logs may help.

I was using an older version of oVirt Live where these bugs were
present, the host does come up on reboot now if I manually put it in
maintenance before the reboot. I haven't tried not putting it in
maintenance.

 - My second question is, where do I have to tweak to make all the
 cores available on the local_host host? At the moment, engine-setup
 automatically sets it to have only 1 core, and it has 8.

 that shouldn't happen - it should auto learn from host.
 what does vdsClient -s 0 getVdsCaps returns?

The newest version of oVirt Live also seems to have this bug resolved.

However, in my environment it seems to have a new crippling bug. All
virtual machines I create hang at the gPXE stage or at the Booting
from CD stage indefinitely. I extracted the qemu-kvm command-line, and
I was able to figure out that if I remove the -uuid option, the
machines proceed rather than hanging. It seems unlikely that it's
simply the -uuid option that's causing the hang. More likely something
the option causes qemu-kvm to do is causing the hang.

The engine does not appear to be aware that the machine is in a hung
state - to it, everything seems perfectly sane. There are no logs to
report.

I can send you an strace of the qemu-kvm process if you think that'll help.

Thanks!
iordan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] ovirt-live questions

2013-10-31 Thread i iordanov
Hello,

Please cc me on any reply, because I tried to subscribe to this list
twice and did not receive any confirmation so I assume I'm not
subscribed.

I'm using ovirt live as a test framework for some Android SPICE client
work I'm doing and I have a couple of questions:

- My oVirt live distro is installed on-disk, and I'm able to get it up
and running with an engine-cleanup, some manual rm's, and an
engine-setup. However, when I reboot, the local_host host is in a
failed state and refuses to be resurrected no matter what. Is there a
way to get around that somehow?

- My second question is, where do I have to tweak to make all the
cores available on the local_host host? At the moment, engine-setup
automatically sets it to have only 1 core, and it has 8.

Any help is much appreciated, and thanks in advance!
iordan

-- 
The conscious mind has only one thread of execution.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users