[ovirt-users] Adding a new quota via the ovirt-shell
Hi, Is it currently possible to define a new resource quota (CPU, memory, storage...) via the ovirt-shell (CLI) in oVirt 3.5.3? I have listed all the available commands but I can't find it under any of them. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Unable to use the SPICE HTML5 tool
El 2015-06-11 08:55, Simone Tiraboschi escribió: - Original Message - From: nico...@devels.es To: users@ovirt.org Sent: Thursday, June 11, 2015 9:30:23 AM Subject: Re: [ovirt-users] Unable to use the SPICE HTML5 tool El 2015-06-11 08:04, nico...@devels.es escribió: El 2015-06-11 06:59, Joop escribió: On 10-6-2015 19:04, Nicolás wrote: Hi, I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes everything is working fine, except that I can't start the SPICE HTML5 tool for any of the installed machines I have. I've installed the oVirt guest agent on the VM side, websocket-proxy is running and port 6100 is listening on the engine box: # systemctl status ovirt-websocket-proxy ovirt-websocket-proxy.service - oVirt Engine websockets proxy Loaded: loaded (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled) Active: active (running) # netstat -atpn | grep 6100 tcp 0 0 0.0.0.0:6100 0.0.0.0:* LISTEN 7227/python Also, I imported the CA cert (https://fqdn/ca.crt [1]) on the browser. However, once I run the SPICE HTML5 client from the userportal, all I get is an empty grey square with the two Send ctrl+alt+delete and Toggle messages output buttons at the bottom. Nothing in the logs about this issue. I tried to run it both with Chromium and Firefox on a linux box. Did you tried to click on the Toggle messages output button? is something there? Can you please check your browser Javascript console (Ctrl+Shift+J) for errors? Indeed, checking the Javascript console I discovered where the culprit is. This ovirt engine machine had formerly a FQDN that was changed afterwards (I used the .../setup/bin/ovirt-engine-rename script), so at installation time, SSL certs were issued for that FQDN. The ovirt-engine-rename script regenerated the engine certs, but seems that it didn't do the work for the websocket proxy, so the old FQDN cert is still used and a connection cannot be established with the daemon (logically, due to the mismatch). I can't find any documentation on how to regenerate the websocket proxy cert, though. Is there some script for that, or at least some manual way to accomplish it? Thanks for your help. Is there anything that I am missing? I've run out of ideas... Did you enable port 6100 on the client side?. Try telnetting to the websocket-proxy from the workstation you're using Chromium/FF on. Joop By client side do you mean where the ovirt-engine is running? If so, yes, it's listening on that port. I can also telnet to that port: $ telnet ovirtenginebox 6100 Trying 10.X.X.X... Connected to ovirtenginebox. Escape character is '^]'. Thanks I just found out that actually there are some lines in the ovirt-engine's log whenever I try to run the HTML5 client: 2015-06-11 08:26:08,402 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-10) [5a92c038] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-11 08:26:08,442 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-10) [5a92c038] START, SetVmTicketVDSCommand(HostName = hostmachine, HostId = 3ec39b7a-f0a9-4df6-8c14-db2e73a493e2, vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, ticket=nEaTH3mqR30x, validTime=120,m userName=user, userId=f3365dd8-963b-4a56-b81f-b9444dfd62e2), log id: 2e6ef305 2015-06-11 08:26:08,459 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-10) [5a92c038] FINISH, SetVmTicketVDSCommand, log id: 2e6ef305 2015-06-11 08:26:08,475 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-10) [5a92c038] Correlation ID: 5a92c038, Call Stack: null, Custom Event ID: -1, Message: user user@domain initiated console session for VM Pool-ADMSIS-1 2015-06-11 08:26:08,502 WARN [org.ovirt.engine.core.dal.job.ExecutionMessageDirector] (ajp--127.0.0.1-8702-10) [4458db3] The message key VmLogon is missing from bundles/ExecutionMessages 2015-06-11 08:26:08,534 INFO [org.ovirt.engine.core.bll.VmLogonCommand] (ajp--127.0.0.1-8702-10) [4458db3] Running command: VmLogonCommand internal: false. Entities affected : ID: 5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-11 08:26:08,574 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-10) [4458db3] START, VmLogonVDSCommand(HostName = hostmachine, HostId = 3ec39b7a-f0a9-4df6-8c14-db2e73a493e2, vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, domain=domain-authz, password=**, userName=user@domain), log id: 14f0c410 2015-06-11 08:26:08,579 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-10) [4458db3] FINISH, VmLogonVDSCommand, log id: 14f0c410 None of them seem to be error messages, though. Links:
Re: [ovirt-users] Unable to use the SPICE HTML5 tool
El 2015-06-11 11:16, Gianluca Cecchi escribió: On Thu, Jun 11, 2015 at 11:57 AM, nico...@devels.es wrote: El 2015-06-11 08:55, Simone Tiraboschi escribió: Indeed, checking the Javascript console I discovered where the culprit is. This ovirt engine machine had formerly a FQDN that was changed afterwards (I used the .../setup/bin/ovirt-engine-rename script), so at installation time, SSL certs were issued for that FQDN. The ovirt-engine-rename script regenerated the engine certs, but seems that it didn't do the work for the websocket proxy, so the old FQDN cert is still used and a connection cannot be established with the daemon (logically, due to the mismatch). I can't find any documentation on how to regenerate the websocket proxy cert, though. Is there some script for that, or at least some manual way to accomplish it? Thanks for your help. Based on an environment in 3.3.2 I solved a situation with webSocketProxy Enabled only after original install + update thanks to Alon advises. See full lthread here: http://lists.ovirt.org/pipermail/users/2013-December/018554.html [1] Possibly it can apply to your environment too You could do the following: 1. remove In /etc/pki/ovirt-engine/keys/: websocket-proxy.key.nopass websocket-proxy.p12 In /etc/pki/ovirt-engine/certs/: websocket-proxy.cer 2. run setup using: # engine-setup --otopi-environment=OVESETUP_CONFIG/websocketProxyConfig=bool:True and this should create websocket proxy certificates/keys in correct way Unfortunately not. The process seems to run: [...] [ INFO ] Configuring WebSocket Proxy [...] But once it ends, there are no certs. Neither restarting the daemon works. Thanks for the hint, anyway. Be sure to make backups and verify better, in particular it this is a production environment. HIH, Gianluca Links: -- [1] http://lists.ovirt.org/pipermail/users/2013-December/018554.html ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Unexpected protocol mismatch with SPICE HTML5
El 2015-06-17 12:35, Michal Skrivanek escribió: On Jun 17, 2015, at 09:17 , nico...@devels.es wrote: Hi Michal, El 2015-06-17 07:24, Michal Skrivanek escribió: On Jun 17, 2015, at 08:21 , Michal Skrivanek michal.skriva...@redhat.com wrote: On Jun 16, 2015, at 12:02 , nico...@devels.es wrote: Hi, I just made a fresh install of ovirt-engine (v. 3.5.3.1-1) on a CentOS-7 x86_64 box. My previous installation had issues with the TLS certificate time of issue, which was successfully fixed in this version (https://bugzilla.redhat.com/show_bug.cgi?id=1210486). However, when trying to start the SPICE HTML5 client, all I can see is the grey square and no activity, and when clicking on Toggle messages output, the error message Unexpected protocol mismatch is shown. Things done: * ovirt-guest-agent installed on the VM * On client side, updated browser (Firefox) to latest version (38.0) and /ca.crt has been imported into Firefox certs Regarding logs on the server side, I can see the following: ovirt-engine 2015-06-16 10:49:29,862 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-11) [39c79276] Running command: SetVmTicketCommand internal: false. Entities affected : ID: c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-16 10:49:29,917 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-11) [39c79276] START, SetVmTicketVDSCommand(HostName = ovirtengine.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b, vmId=c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc, ticket=TgrRVYoRhC8T, validTime=120,m userName=user, userId=5d502bbb-97d6-40b5-abbf-90121cea94d5), log id: 1881c90f 2015-06-16 10:49:29,937 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-11) [39c79276] FINISH, SetVmTicketVDSCommand, log id: 1881c90f 2015-06-16 10:49:29,957 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-11) [39c79276] Correlation ID: 39c79276, Call Stack: null, Custom Event ID: -1, Message: user user@domain initiated console session for VM testVM 2015-06-16 10:49:29,987 WARN [org.ovirt.engine.core.dal.job.ExecutionMessageDirector] (ajp--127.0.0.1-8702-11) [7a71a9e4] The message key VmLogon is missing from bundles/ExecutionMessages 2015-06-16 10:49:30,064 INFO [org.ovirt.engine.core.bll.VmLogonCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] Running command: VmLogonCommand internal: false. Entities affected : ID: c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-16 10:49:30,114 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] START, VmLogonVDSCommand(HostName = ovirtengine.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b, vmId=c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc, domain=domain-authz, password=**, userName=user@domain), log id: 68632b24 2015-06-16 10:49:30,120 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] FINISH, VmLogonVDSCommand, log id: 68632b24 2015-06-16 10:49:30,351 INFO [org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] (DefaultQuartzScheduler_Worker-2) START, GlusterVolumesListVDSCommand(HostName = kvmhost.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b), log id: 2a2a439a 2015-06-16 10:49:30,368 INFO [org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] (DefaultQuartzScheduler_Worker-2) FINISH, GlusterVolumesListVDSCommand, return: {}, log id: 2a2a439a ovirt-websocket-proxy = jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: SSL/TLS (wss://) WebSocket connection jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: Version hybi-13, base64: 'False' jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: Path: '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' Java console disconnect spicehtml5-main.html:86:16 disconnect
Re: [ovirt-users] Unexpected protocol mismatch with SPICE HTML5
Hi Michal, El 2015-06-17 07:24, Michal Skrivanek escribió: On Jun 17, 2015, at 08:21 , Michal Skrivanek michal.skriva...@redhat.com wrote: On Jun 16, 2015, at 12:02 , nico...@devels.es wrote: Hi, I just made a fresh install of ovirt-engine (v. 3.5.3.1-1) on a CentOS-7 x86_64 box. My previous installation had issues with the TLS certificate time of issue, which was successfully fixed in this version (https://bugzilla.redhat.com/show_bug.cgi?id=1210486). However, when trying to start the SPICE HTML5 client, all I can see is the grey square and no activity, and when clicking on Toggle messages output, the error message Unexpected protocol mismatch is shown. Things done: * ovirt-guest-agent installed on the VM * On client side, updated browser (Firefox) to latest version (38.0) and /ca.crt has been imported into Firefox certs Regarding logs on the server side, I can see the following: ovirt-engine 2015-06-16 10:49:29,862 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-11) [39c79276] Running command: SetVmTicketCommand internal: false. Entities affected : ID: c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-16 10:49:29,917 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-11) [39c79276] START, SetVmTicketVDSCommand(HostName = ovirtengine.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b, vmId=c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc, ticket=TgrRVYoRhC8T, validTime=120,m userName=user, userId=5d502bbb-97d6-40b5-abbf-90121cea94d5), log id: 1881c90f 2015-06-16 10:49:29,937 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-11) [39c79276] FINISH, SetVmTicketVDSCommand, log id: 1881c90f 2015-06-16 10:49:29,957 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-11) [39c79276] Correlation ID: 39c79276, Call Stack: null, Custom Event ID: -1, Message: user user@domain initiated console session for VM testVM 2015-06-16 10:49:29,987 WARN [org.ovirt.engine.core.dal.job.ExecutionMessageDirector] (ajp--127.0.0.1-8702-11) [7a71a9e4] The message key VmLogon is missing from bundles/ExecutionMessages 2015-06-16 10:49:30,064 INFO [org.ovirt.engine.core.bll.VmLogonCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] Running command: VmLogonCommand internal: false. Entities affected : ID: c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-16 10:49:30,114 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] START, VmLogonVDSCommand(HostName = ovirtengine.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b, vmId=c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc, domain=domain-authz, password=**, userName=user@domain), log id: 68632b24 2015-06-16 10:49:30,120 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] FINISH, VmLogonVDSCommand, log id: 68632b24 2015-06-16 10:49:30,351 INFO [org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] (DefaultQuartzScheduler_Worker-2) START, GlusterVolumesListVDSCommand(HostName = kvmhost.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b), log id: 2a2a439a 2015-06-16 10:49:30,368 INFO [org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] (DefaultQuartzScheduler_Worker-2) FINISH, GlusterVolumesListVDSCommand, return: {}, log id: 2a2a439a ovirt-websocket-proxy = jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: SSL/TLS (wss://) WebSocket connection jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: Version hybi-13, base64: 'False' jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: Path: '/eyJ2YWxpZFRvIjoiMjAxNTA2MTYwODU4MzgiLCJkYXRhIjoiJTdCJTIyaG9zdCUyMjolMjIxMC4xMDcuMjYuMjAxJTIyLCUyMnBvcnQlMjI6JTIyNTkwMCUyMiwlMjJzc2xfdGFyZ2V0JTIyOnRydWUlN0QiLCJ2YWxpZEZyb20iOiIyMDE1MDYxNjA4NTYzOCIsInNpZ25lZEZpZWxkcyI6InZhbGlkVG8sZGF0YSx2YWxpZEZyb20sc2FsdCIsInNpZ25hdHVyZSI6Imk2a3J2bjFCLzFYbUptSEJjVVZZRWVhSExwenA1LzJBQU1DWmJZcDJsaE9heEYvdkZ3azJIa0hibm5iY21mZFp3STJYbnFzMm9vZnMvNWV3NlNiTGtGeTdaVVdjZG4zdUxTcStZTVg4c3huUzg0Ulg3ZmtLTk05Mk9CeFJENm5VSEVDMXQ1eld0OXo3akZYVktMdXFEYkNiK3RmL3pNZGJuS0ZCcGtXaU5JVVB4b09yd2ZxRUQxMWZTell0aXVFeEFscW5xWlBqSXpjcHNDTHRwQXZaTnNWWWFNQlFWR1U2WnZiZlFWUTBlaFIzMnVyaTlVUmI1NDZCZVBuMkVJdytwU3RIWmZRWit2RDZKUjRWeDJFSFRqVEtXZ2ZMbzRWY0ZjSzNnQURYV1BKbUJjaWx5TExQR3dnTm1ncEk0cjVhR1ZCTmZ1VVUxSENJTlhWUVZPVnJJZz09Iiwic2FsdCI6IndFZGwvcmw3VWZJPSJ9' Java console disconnect spicehtml5-main.html:86:16 disconnect spicehtml5-main.html:90:16 ERROR: Error: Unexpected protocol mismatch. - I can't
[ovirt-users] Unexpected protocol mismatch with SPICE HTML5
Hi, I just made a fresh install of ovirt-engine (v. 3.5.3.1-1) on a CentOS-7 x86_64 box. My previous installation had issues with the TLS certificate time of issue, which was successfully fixed in this version (https://bugzilla.redhat.com/show_bug.cgi?id=1210486). However, when trying to start the SPICE HTML5 client, all I can see is the grey square and no activity, and when clicking on Toggle messages output, the error message Unexpected protocol mismatch is shown. Things done: * ovirt-guest-agent installed on the VM * On client side, updated browser (Firefox) to latest version (38.0) and /ca.crt has been imported into Firefox certs Regarding logs on the server side, I can see the following: ovirt-engine 2015-06-16 10:49:29,862 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-11) [39c79276] Running command: SetVmTicketCommand internal: false. Entities affected : ID: c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-16 10:49:29,917 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-11) [39c79276] START, SetVmTicketVDSCommand(HostName = ovirtengine.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b, vmId=c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc, ticket=TgrRVYoRhC8T, validTime=120,m userName=user, userId=5d502bbb-97d6-40b5-abbf-90121cea94d5), log id: 1881c90f 2015-06-16 10:49:29,937 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-11) [39c79276] FINISH, SetVmTicketVDSCommand, log id: 1881c90f 2015-06-16 10:49:29,957 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-11) [39c79276] Correlation ID: 39c79276, Call Stack: null, Custom Event ID: -1, Message: user user@domain initiated console session for VM testVM 2015-06-16 10:49:29,987 WARN [org.ovirt.engine.core.dal.job.ExecutionMessageDirector] (ajp--127.0.0.1-8702-11) [7a71a9e4] The message key VmLogon is missing from bundles/ExecutionMessages 2015-06-16 10:49:30,064 INFO [org.ovirt.engine.core.bll.VmLogonCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] Running command: VmLogonCommand internal: false. Entities affected : ID: c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-16 10:49:30,114 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] START, VmLogonVDSCommand(HostName = ovirtengine.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b, vmId=c2e32d4f-4c54-4e38-bf66-2627dc6dd4bc, domain=domain-authz, password=**, userName=user@domain), log id: 68632b24 2015-06-16 10:49:30,120 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-11) [7a71a9e4] FINISH, VmLogonVDSCommand, log id: 68632b24 2015-06-16 10:49:30,351 INFO [org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] (DefaultQuartzScheduler_Worker-2) START, GlusterVolumesListVDSCommand(HostName = kvmhost.myorg.es, HostId = 82fb3c43-3a4b-464e-9077-8e86dea2016b), log id: 2a2a439a 2015-06-16 10:49:30,368 INFO [org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] (DefaultQuartzScheduler_Worker-2) FINISH, GlusterVolumesListVDSCommand, return: {}, log id: 2a2a439a ovirt-websocket-proxy = jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: SSL/TLS (wss://) WebSocket connection jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: Version hybi-13, base64: 'False' jun 16 09:56:39 ovirtengine.myorg.es ovirt-websocket-proxy.py[30728]: 10.X.X.X - - [16/Jun/2015 09:56:39] 10.X.X.X: Path: '/eyJ2YWxpZFRvIjoiMjAxNTA2MTYwODU4MzgiLCJkYXRhIjoiJTdCJTIyaG9zdCUyMjolMjIxMC4xMDcuMjYuMjAxJTIyLCUyMnBvcnQlMjI6JTIyNTkwMCUyMiwlMjJzc2xfdGFyZ2V0JTIyOnRydWUlN0QiLCJ2YWxpZEZyb20iOiIyMDE1MDYxNjA4NTYzOCIsInNpZ25lZEZpZWxkcyI6InZhbGlkVG8sZGF0YSx2YWxpZEZyb20sc2FsdCIsInNpZ25hdHVyZSI6Imk2a3J2bjFCLzFYbUptSEJjVVZZRWVhSExwenA1LzJBQU1DWmJZcDJsaE9heEYvdkZ3azJIa0hibm5iY21mZFp3STJYbnFzMm9vZnMvNWV3NlNiTGtGeTdaVVdjZG4zdUxTcStZTVg4c3huUzg0Ulg3ZmtLTk05Mk9CeFJENm5VSEVDMXQ1eld0OXo3akZYVktMdXFEYkNiK3RmL3pNZGJuS0ZCcGtXaU5JVVB4b09yd2ZxRUQxMWZTell0aXVFeEFscW5xWlBqSXpjcHNDTHRwQXZaTnNWWWFNQlFWR1U2WnZiZlFWUTBlaFIzMnVyaTlVUmI1NDZCZVBuMkVJdytwU3RIWmZRWit2RDZKUjRWeDJFSFRqVEtXZ2ZMbzRWY0ZjSzNnQURYV1BKbUJjaWx5TExQR3dnTm1ncEk0cjVhR1ZCTmZ1VVUxSENJTlhWUVZPVnJJZz09Iiwic2FsdCI6IndFZGwvcmw3VWZJPSJ9' Java console disconnect spicehtml5-main.html:86:16 disconnect spicehtml5-main.html:90:16 ERROR: Error: Unexpected protocol mismatch. - I can't see any other relevant info, so I wonder if something else might be missing on any of the involved machines. Is there something else to do? Thanks. Nicolás
Re: [ovirt-users] Unable to use the SPICE HTML5 tool
El 2015-06-11 08:04, nico...@devels.es escribió: El 2015-06-11 06:59, Joop escribió: On 10-6-2015 19:04, Nicolás wrote: Hi, I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes everything is working fine, except that I can't start the SPICE HTML5 tool for any of the installed machines I have. I've installed the oVirt guest agent on the VM side, websocket-proxy is running and port 6100 is listening on the engine box: # systemctl status ovirt-websocket-proxy ovirt-websocket-proxy.service - oVirt Engine websockets proxy Loaded: loaded (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled) Active: active (running) # netstat -atpn | grep 6100 tcp 0 0 0.0.0.0:6100 0.0.0.0:* LISTEN 7227/python Also, I imported the CA cert (https://fqdn/ca.crt [1]) on the browser. However, once I run the SPICE HTML5 client from the userportal, all I get is an empty grey square with the two Send ctrl+alt+delete and Toggle messages output buttons at the bottom. Nothing in the logs about this issue. I tried to run it both with Chromium and Firefox on a linux box. Is there anything that I am missing? I've run out of ideas... Did you enable port 6100 on the client side?. Try telnetting to the websocket-proxy from the workstation you're using Chromium/FF on. Joop By client side do you mean where the ovirt-engine is running? If so, yes, it's listening on that port. I can also telnet to that port: $ telnet ovirtenginebox 6100 Trying 10.X.X.X... Connected to ovirtenginebox. Escape character is '^]'. Thanks I just found out that actually there are some lines in the ovirt-engine's log whenever I try to run the HTML5 client: 2015-06-11 08:26:08,402 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-10) [5a92c038] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-11 08:26:08,442 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-10) [5a92c038] START, SetVmTicketVDSCommand(HostName = hostmachine, HostId = 3ec39b7a-f0a9-4df6-8c14-db2e73a493e2, vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, ticket=nEaTH3mqR30x, validTime=120,m userName=user, userId=f3365dd8-963b-4a56-b81f-b9444dfd62e2), log id: 2e6ef305 2015-06-11 08:26:08,459 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-10) [5a92c038] FINISH, SetVmTicketVDSCommand, log id: 2e6ef305 2015-06-11 08:26:08,475 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-10) [5a92c038] Correlation ID: 5a92c038, Call Stack: null, Custom Event ID: -1, Message: user user@domain initiated console session for VM Pool-ADMSIS-1 2015-06-11 08:26:08,502 WARN [org.ovirt.engine.core.dal.job.ExecutionMessageDirector] (ajp--127.0.0.1-8702-10) [4458db3] The message key VmLogon is missing from bundles/ExecutionMessages 2015-06-11 08:26:08,534 INFO [org.ovirt.engine.core.bll.VmLogonCommand] (ajp--127.0.0.1-8702-10) [4458db3] Running command: VmLogonCommand internal: false. Entities affected : ID: 5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction group CONNECT_TO_VM with role type USER 2015-06-11 08:26:08,574 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-10) [4458db3] START, VmLogonVDSCommand(HostName = hostmachine, HostId = 3ec39b7a-f0a9-4df6-8c14-db2e73a493e2, vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, domain=domain-authz, password=**, userName=user@domain), log id: 14f0c410 2015-06-11 08:26:08,579 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand] (ajp--127.0.0.1-8702-10) [4458db3] FINISH, VmLogonVDSCommand, log id: 14f0c410 None of them seem to be error messages, though. Links: -- [1] https://fqdn/ca.crt ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Unable to use the SPICE HTML5 tool
El 2015-06-11 06:59, Joop escribió: On 10-6-2015 19:04, Nicolás wrote: Hi, I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes everything is working fine, except that I can't start the SPICE HTML5 tool for any of the installed machines I have. I've installed the oVirt guest agent on the VM side, websocket-proxy is running and port 6100 is listening on the engine box: # systemctl status ovirt-websocket-proxy ovirt-websocket-proxy.service - oVirt Engine websockets proxy Loaded: loaded (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled) Active: active (running) # netstat -atpn | grep 6100 tcp 0 0 0.0.0.0:6100 0.0.0.0:* LISTEN 7227/python Also, I imported the CA cert (https://fqdn/ca.crt [1]) on the browser. However, once I run the SPICE HTML5 client from the userportal, all I get is an empty grey square with the two Send ctrl+alt+delete and Toggle messages output buttons at the bottom. Nothing in the logs about this issue. I tried to run it both with Chromium and Firefox on a linux box. Is there anything that I am missing? I've run out of ideas... Did you enable port 6100 on the client side?. Try telnetting to the websocket-proxy from the workstation you're using Chromium/FF on. Joop By client side do you mean where the ovirt-engine is running? If so, yes, it's listening on that port. I can also telnet to that port: $ telnet ovirtenginebox 6100 Trying 10.X.X.X... Connected to ovirtenginebox. Escape character is '^]'. Thanks Links: -- [1] https://fqdn/ca.crt ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Setting VmPool type via ovirtsdk
Hi, I'm defining new VmPools via python code using ovirtSDK along with oVirt v. 3.5.3.1-1. Pool creation seems to work fine, but by default they are created as 'Automatic' and I need them to be 'Manual', however, I can't find out the SDK parameter to do this. Is this currently possible? Thanks. Regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Rebooting gluster nodes make VMs pause due to storage error
Hi, We're using ovirt 3.5.3.1, and as storage backend we use GlusterFS. We added a Storage Domain with the path "gluster.fqdn1:/volume", and as options, we used "backup-volfile-servers=gluster.fqdn2". We now need to restart both gluster.fqdn1 and gluster.fqdn2 machines due to system update (not at the same time, obviously). We're worried because in previous attempts, when restarted the main gluster node (gluster.fqdn1 in this case), all the VMs running against that storage backend got paused due to storage errors, and we couldn't resume them and finally had to power them off the hard way and start them again. Gluster version on gluster.fqdn1 and gluster.fqdn2 is 3.6.3-1. Gluster configuration for that volume is: Volume Name: volume Type: Replicate Volume ID: a2d7e52c-2f63-4e72-9635-4e311baae6ff Status: Started Number of Bricks: 1 x 2 = 2 Transport-type: tcp Bricks: Brick1: gluster.fqdn1:/gluster/brick_01/brick Brick2: gluster.fqdn2:/gluster/brick_01/brick Options Reconfigured: storage.owner-gid: 36 storage.owner-uid: 36 cluster.server-quorum-type: server cluster.quorum-type: none network.remote-dio: enable cluster.eager-lock: enable performance.stat-prefetch: off performance.io-cache: off performance.read-ahead: off performance.quick-read: off We would like to know if there's a "clean" way to do such a procedure. We know that pausing all the VMs and then restarting the gluster nodes work with no harm, but the downtime of the VMs is important to us and we would like to avoid it, especially when we have 2 gluster nodes for that. Any hints are appreciated, Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] No MAC addresses left in the MAC Address Pool
Hi, We're running oVirt 3.5.3.1-1. One of our users is trying to create a new VM. However, he gets the following warning: 2015-11-05 17:33:12,596 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-23) [7a0ba949] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: No MAC addresses left in the MAC Address Pool. 2015-11-05 17:33:28,804 WARN [org.ovirt.engine.core.bll.CloneVmCommand] (ajp--127.0.0.1-8702-18) [22611dad] CanDoAction of action CloneVm failed for user XXX@YYY. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,MAC_POOL_NOT_ENOUGH_MAC_ADDRESSES Is there a way to increase the MAC Pool? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Conflicts in hooks
Hi, We're running version 3.5.3.1-1 of oVirt, along with GlusterFS storage. Recently we're having plenty of events like these: 2015-Oct-06, 07:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-06, 07:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-06, 07:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-06, 05:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-06, 05:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-06, 05:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-06, 03:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-06, 03:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-06, 03:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-06, 01:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-06, 01:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-06, 01:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-05, 23:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-05, 23:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-05, 23:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-05, 21:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-05, 21:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-05, 21:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-05, 19:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-05, 19:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-05, 19:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-05, 17:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-05, 17:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-05, 17:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. In the logs I see messages like these: 2015-10-06 07:38:15,898 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-39) [53af3676] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-10-06 07:38:15,913 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-39) [53af3676] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-10-06 07:38:15,928 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-39) [53af3676] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. Why might it be caused by? Thanks, Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Conflicts in hooks
Hi kasturi, Thanks, it seems solved now - I haven't even realized there was a 'Gluster Hooks' tab before you wrote! Regards, Nicolás El 2015-10-06 10:21, knarra escribió: Hi nicolas, This issue happens if there are any conflicts between the hooks scripts present in the servers of your cluster. Try to resolve the conflicts of the hooks scripts by clicking on resolve conflicts button and the you should no more be seeing these messages. Thanks kasturi. On 10/06/2015 01:13 PM, nico...@devels.es wrote: Hi, We're running version 3.5.3.1-1 of oVirt, along with GlusterFS storage. Recently we're having plenty of events like these: 2015-Oct-06, 07:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-06, 07:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-06, 07:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-06, 05:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-06, 05:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-06, 05:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-06, 03:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-06, 03:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-06, 03:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-06, 01:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-06, 01:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-06, 01:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-05, 23:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-05, 23:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-05, 23:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-05, 21:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-05, 21:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-05, 21:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-05, 19:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-05, 19:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-05, 19:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-Oct-05, 17:38 Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. 2015-Oct-05, 17:38 Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-Oct-05, 17:38 Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. In the logs I see messages like these: 2015-10-06 07:38:15,898 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-39) [53af3676] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Cluster. 2015-10-06 07:38:15,913 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-39) [53af3676] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: Detected conflict in hook delete-POST-57glusterfind-delete-post.py of Cluster Cluster. 2015-10-06 07:38:15,928 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-39) [53af3676] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: Detected conflict in hook set-POST-32gluster_enable_shared_storage.sh of Cluster Cluster. Why might it be caused by? Thanks, Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Getting SPICE connection parameters with Python-SDK
Hi, On user portal, when users click on the "Connect" link of a VM that is configured to be run with "Native client" and SPICE protocol, a .vv file is generated with the connection parameters so the SPICE client knows where to connect: host, port, password, ... Currently, is there a way to generate those parameters with the Python SDK? Especially the session password so it's possible to connect to the VM directly with a SPICE client. Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Allow non-privileged users to use the API
Hi, I'm currently trying to use oVirt's API with a non-privileged username (only has UserRole over a few VMs) and when the request is made, a 400 error is returned: Operation Failed query execution failed due to insufficient permissions. Is there a way to grant non-privileged users the ability to use API (for example, to list VMs where they have privileges)? What's the minimal permission a username needs to be granted to use the API? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Cannot create volume snapshot from illegal volume
Hi, We're running oVirt 3.6.5.3-1 and we're experiencing an issue with one of the VMs we have. There's one VM we'd like to make snapshots of and each time we try, the following error is shown in oVirt engine: Message: VDSM host01.domain.com command failed: Cannot create volume snapshot from illegal volume Same happens when trying to export the VM. I've attached logs for oVirt engine + VDSM of the SPM host. Any hints on how to fix this will be very appreciated. Regards, Nicolás illegal-volume.tar.gz Description: GNU Zip compressed data ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Allow non-privileged users to use the API
El 2016-06-08 13:43, Alexander Wels escribió: On Wednesday, June 08, 2016 01:27:48 PM nico...@devels.es wrote: Hi, I'm currently trying to use oVirt's API with a non-privileged username (only has UserRole over a few VMs) and when the request is made, a 400 error is returned: Operation Failed query execution failed due to insufficient permissions. Is there a way to grant non-privileged users the ability to use API (for example, to list VMs where they have privileges)? What's the minimal permission a username needs to be granted to use the API? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users I don't know which SDK you are using or if you are doing direct http requests with your own framework, but in order for non privileged users to use the REST api you need to pass the 'filter: true' header with the request. This will tell the REST api to filter the results based on the users permissions. Thanks, that worked. Regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Upgrade version problem
El 2016-06-03 11:53, Ollie Armstrong escribió: On 3 June 2016 at 11:48,wrote: Seems ovirt-engine-tools package is not marked for update although there is a new version in repos (for example in [1]), 3.6.6.2. I run 'yum clean all' previously to update to make sure this is not a cache issue and did not solve the problem. I don't know if you have a solution, but I hit this on the last upgrade. I just updated ovirt-engine-setup and ran engine-setup which pulled in all the required packages properly. This is the recommended procedure from the upgrade notes. That would work as a quick fix, but anyhow this should be fixed as most systems run complete system upgrades periodically. Regards, Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Upgrade version problem
Hi, We're trying to upgrade oVirt engine from ver. 3.6.5.3 to 3.6.6.2. When calling 'yum update', following error occurs: Error: Package: ovirt-engine-tools-3.6.5.3-1.el7.centos.noarch (@ovirt-3.6) Requires: ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos Removing: ovirt-engine-tools-backup-3.6.5.3-1.el7.centos.noarch (@ovirt-3.6) ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos Updated By: ovirt-engine-tools-backup-3.6.6.2-1.el7.centos.noarch (ovirt-3.6) ovirt-engine-tools-backup = 3.6.6.2-1.el7.centos Seems ovirt-engine-tools package is not marked for update although there is a new version in repos (for example in [1]), 3.6.6.2. I run 'yum clean all' previously to update to make sure this is not a cache issue and did not solve the problem. When trying to update ovirt-engine-tools separately it says ver. 3.6.5.3 is the latest version: Package ovirt-engine-tools-3.6.5.3-1.el7.centos.noarch already installed and latest version Could this be a repo metadata problem? Thanks. Nicolás [1]: http://ftp.nluug.nl/os/Linux/virtual/ovirt/ovirt-3.6/rpm/el7/noarch/ ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Cannot create volume snapshot from illegal volume
Hi, No, the disk's state is OK. We've finally found a workaround which was creating a new disk, 'dd' the old disk to the new one within the VM, detach the new disk and attach it to a new VM, but still it's weird. We've kept the old machine in case you need to run any additional test. Regards. El 2016-06-19 14:03, Yaniv Dary escribió: Is the disk in illegal state? Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem Road Building A, 4th floor Ra'anana, Israel 4350109 Tel : +972 (9) 7692306 8272306 Email: yd...@redhat.com IRC : ydary On Wed, Jun 8, 2016 at 2:28 PM,wrote: Hi, We're running oVirt 3.6.5.3-1 and we're experiencing an issue with one of the VMs we have. There's one VM we'd like to make snapshots of and each time we try, the following error is shown in oVirt engine: Message: VDSM host01.domain.com [1] command failed: Cannot create volume snapshot from illegal volume Same happens when trying to export the VM. I've attached logs for oVirt engine + VDSM of the SPM host. Any hints on how to fix this will be very appreciated. Regards, Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [2] Links: -- [1] http://host01.domain.com [2] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Snapshot deletion failure
Hi, We're trying to delete an auto-generated live snapshot that has been created after migrating an online VM's storage to a different domain. oVirt version is 3.6.6 and VDSM version is 4.17.28. Most relevant log lines are: 2016-06-24 07:50:36,252 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.MergeVDSCommand] (pool-7-thread-10) [799a22e3] Failed in 'MergeVDS' method 2016-06-24 07:50:36,256 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (pool-7-thread-10) [799a22e3] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VDSM host2.domain.com command failed: Merge failed 2016-06-24 07:50:36,256 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.MergeVDSCommand] (pool-7-thread-10) [799a22e3] Command 'MergeVDSCommand(HostName = host2.domain.com, MergeVDSCommandParameters:{runAsync='true', hostId='c31dca1a-e5bc-43f6-940f-6397e3ddbee4', vmId='7083832a-a1a2-42b7-961f-2e9c0dcd7e18', storagePoolId='fa155d43-4e68-486f-9f9d-ae3e3916cc4f', storageDomainId='9339780c-3667-4fef-aa13-9bec08957c5f', imageGroupId='65a0b0d4-5c96-4dd9-a31b-4d08e40a46a5', imageId='9eec9e8f-38db-4abf-b1c4-92fa9383f8b1', baseImageId='568b2f77-0ddf-4349-a45c-36fcb0edecb6', topImageId='9eec9e8f-38db-4abf-b1c4-92fa9383f8b1', bandwidth='0'})' execution failed: VDSGenericException: VDSErrorException: Failed to MergeVDS, error = Merge failed, code = 52 2016-06-24 07:50:36,256 ERROR [org.ovirt.engine.core.bll.MergeCommand] (pool-7-thread-10) [799a22e3] Engine exception thrown while sending merge command: org.ovirt.engine.core.common.errors.EngineException: EngineException: org.ovirt.engine.core.vdsbroker.vdsbroker.VDSErrorException: VDSGenericException: VDSErrorException: Failed to MergeVDS, error = Merge failed, code = 52 (Failed with error mergeErr and code 52) I'm attaching relevant logs (both for ovirt-engine and SPM's vdsm). What could be the reason for this error? Thanks. snapshot-deletion.tar.gz Description: GNU Zip compressed data ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Network interface profiles disappeared after upgrading to 3.6.1
Hi, We recently upgraded from 3.5.3 to 3.6.1. Everything went fairly smooth, however, today we realized we're facing some issues. Users cannot add network interfaces on the User Portal to their VMs. It seems that when they click on "New", the "Profile" checkbox is empty so they cannot choose any value. It's worth mentioning that we only upgraded the manager, not yet the hosts. Also, a red banner keeps popping out every few seconds with this error: (TypeError) __gwt$exception: : Cannot read property 'r' of null It's also worth mentioning that I can add interfaces from the admin portal. I don't actually know if it's related, but in the logs I see this: 2016-01-15 17:53:35,241 ERROR [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (default task-165) [] Query execution failed due to insufficient permissions. 2016-01-15 17:53:35,241 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-165) [] Operation Failed: query execution failed due to insufficient permissions. All interfaces have the "Everyone" -> "UserProfileEditor" permission. Is that some new permission that has to be granted in order to allow users see the network interfaces or is it a bug? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Network interface profiles disappeared after upgrading to 3.6.1
In the JavaScript console I see this: Fri Jan 15 18:38:17 GMT+000 2016 SEVERE: Uncaught exception: com.google.gwt.core.client.JavaScriptException: (TypeError) __gwt$exception: : NMk(...) is null at Unknown.POm(Unknown Source) at Unknown.ZFk(Unknown Source) at Unknown.aGk(Unknown Source) at Unknown.SJk(Unknown Source) at Unknown.VJk(Unknown Source) at Unknown.yIk(Unknown Source) at Unknown.BIk(Unknown Source) at Unknown.bTc(Unknown Source) at Unknown.B6h(Unknown Source) at Unknown.VS(Unknown Source) at Unknown.mT(Unknown Source) at Unknown.jAd/c.onreadystatechange<(Unknown Source) at Unknown.Yp(Unknown Source) at Unknown.aq(Unknown Source) at Unknown._p/<(Unknown Source) at Unknown.anonymous(Unknown Source) Also tried granting the VnicProfileUser and even NetworkAdmin permissions, no difference. In the server.log file I could find this: 2016-01-15 18:28:53,871 ERROR [io.undertow.servlet] (default task-28) Exception while dispatching incoming RPC call: com.google.gwt.user.client.rpc.RpcTokenException: Invalid RPC token (Invalid XSRF token) at org.ovirt.engine.ui.frontend.server.gwt.XsrfProtectedRpcServlet.validateXsrfToken(XsrfProtectedRpcServlet.java:31) [frontend.jar:] at org.ovirt.engine.ui.frontend.server.gwt.AbstractXsrfProtectedRpcServlet.onAfterRequestDeserialized(AbstractXsrfProtectedRpcServlet.java:56) [frontend.jar:] at com.google.gwt.rpc.server.RpcServlet.processCall(RpcServlet.java:171) [gwt-servlet.jar:] at com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:233) [gwt-servlet.jar:] at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62) [gwt-servlet.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132) [frontend.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:73) [branding.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:65) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.aaa.filters.SessionMgmtFilter.doFilter(SessionMgmtFilter.java:31) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.aaa.filters.LoginFilter.doFilter(LoginFilter.java:75) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.aaa.filters.NegotiationFilter.doFilter(NegotiationFilter.java:132) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
Re: [ovirt-users] How does VDSM-Fake actually work?
Anything? El 2016-02-02 10:18, Nicolás escribió: Hi, I'm trying to set up VDSM-Fake (git://gerrit.ovirt.org/ovirt-vdsmfake.git) for some tests, however, I'm a bit confused about how does it actually work. As the instructions say, I was able to build the project with Maven (however, the org.ovirt.vdsm-jsonrpc-java dependency version had to be changed to 1.1.5 instead of 1.1.2-SNAPSHOT in pom.xml as this latter is no longer provided at the repository). Once built, I run mvn jetty:run and the server started correctly: 2016-02-02 11:01:51.957:INFO::jetty-6.1.26 [1] 2016-02-02 11:01:52.804:INFO::No [2] Transaction manager found - if your webapp requires one, please configure one. 2016-02-02 11:01:53,424 Application initialized. 2016-02-02 11:01:53,442 Opening a Stomp server localhost:54322 2016-02-02 11:01:53.702:INFO::Started [3] SelectChannelConnector@0.0.0.0:54321 [INFO] Started Jetty Server [INFO] Starting scanner at interval of 10 seconds. I could indeed verify it's listening on the VDSM port: [root@host ovirt-vdsmfake]# netstat -atpn | grep 54321 tcp6 0 0 :::54321 :::* LISTEN 44870/java So the next step is to add a fake host via REST. I used scripts provided here [4] and I successfully added the host, however, it starts installing all the VDSM packages as it were a normal host and therefore it tries to start vdsmd as well, which throws an error as the Jetty Server is already listening on the 54321 port. I shut down the Jetty Server and allowed oVirt Manager to install all the packages properly, then stopped vdsmd and started the Jetty Server, but expectedly oVirt Engine fails with message "Host xxx is non responsive", so what I actually got is a real VDSM host and not a fake one. FWIW, the fake VDSM runs on a different host, ports are reacheable from the oVirt engine, proper /etc/hosts has been added to the engine to reach the host, and no further customization of web.xml has been done. I feel like I'm missing something here. Could someone shed some light on what's wrong? Thanks. Nicolás Links: -- [1] INFO::jetty-6.1.26 [2] INFO::No [3] INFO::Started [4] http://www.ovirt.org/REST_API_Using_BASH_Automation ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Manually assign DC and Cluster to Blank template
Hi, We upgraded from oVirt 3.5 and 3.6 and deleted the Default cluster, so now we have the Blank template with no DC and no Cluster, thus our users can't use it. Is there a way to manually set these two parameters to the current DC and Cluster values for the Blank template? I tried editing it but see no option to set them. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Pending events in the Tasks tab
Hi, We're using oVirt 3.6.2.6, and we're having some events not being cleared from the Tasks tab. I cannot confirm this is only related to creating VM pools, but any created VM pool remains unfinished forever in the Tasks tab. As you may see in the screenshot, there are events that were started in January and are still in the list. Concretely, the unfinished step is always "Finalizing". Has this been reported on Bugzilla? Is there a way to clear them out even manually? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Pending events in the Tasks tab
I forgot to attach the screenshot. Here it goes. El 2016-02-17 08:25, nico...@devels.es escribió: Hi, We're using oVirt 3.6.2.6, and we're having some events not being cleared from the Tasks tab. I cannot confirm this is only related to creating VM pools, but any created VM pool remains unfinished forever in the Tasks tab. As you may see in the screenshot, there are events that were started in January and are still in the list. Concretely, the unfinished step is always "Finalizing". Has this been reported on Bugzilla? Is there a way to clear them out even manually? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Manually assign DC and Cluster to Blank template
El 2016-02-17 22:55, Greg Padgett escribió: On 02/16/2016 07:56 AM, nico...@devels.es wrote: Hi, We upgraded from oVirt 3.5 and 3.6 and deleted the Default cluster, so now we have the Blank template with no DC and no Cluster, thus our users can't use it. Is there a way to manually set these two parameters to the current DC and Cluster values for the Blank template? I tried editing it but see no option to set them. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users Hi Nicolás, Removing the default cluster should be ok, since the templates don't bind VMs to a DC/Cluster--you should be able to specify the DC/Cluster when creating a VM. HTH, Greg Hi Greg, I'll elaborate a bit further on the issue. I'm attaching a screenshot of the 'Templates' tab on the webadmin pane - As you can see, all of them have a Data Center and a Cluster assigned (columns 4 and 5) but the Blank template (because we deleted the default DC). Even if this template has the 'Everyone' permission, as we're granting permissions to our users on the Data Center, they are not able to see the Blank template in the list when deploying new machines in the userportal view, so currently they necessarily need to choose a template from the list which is not Blank, and that's an issue to some of them. That's why I was wondering if there's a manual way to assign the DC and Cluster to the Blank template, even modifying it directly in the DB, so the users see it in the userportal. Any hint is very appreciated. Regards, Nicolás___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] How to create a DataCenterQuota via Python SDK?
Hi, I'm trying to create a Data Center Quota with limits for memory, vcpu and storage. As per the class definition, DataCenterQuota expects: a datacenter, a quota and a context. Quota class in turn expects limits but only as percentages, for hard and soft limits. However if I dump an already created DataCenterQuota object I see: {'_Base__context': 36443152, 'parentclass': , 'permissions': 0x278ef90>, 'quotaclusterlimits': object at 0x2540490>, 'quotastoragelimits': object at 0x278ef50>, 'superclass': } I see DataCenterQuotaQuotaClusterLimits and DataCenterQuotaQuotaStorageLimits allow creating limits for memory/cpu and storage respectively, and they're set in the DataCenterQuota __init__ method like this: self.quotaclusterlimits = DataCenterQuotaQuotaClusterLimits(self, context) self.quotastoragelimits = DataCenterQuotaQuotaStorageLimits(self, context) However, I'm unable to find out how to handle the 'context' parameter to contain those two limit classes. Could someone shed some light on it? An example would be welcome too. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Hiding events
Hi, Is there currently a way to hide specific events from the event list? I mean not showing them up when they occur. Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Unable to move disk on (non-)stateless machine
Hi, We're running oVirt 3.6.3.4-1. We have 2 storage domains of the same kind (both iSCSI). We're moving some of the disks from one to other, preferably without shutting down the machine. When moving a disk with the VM started, the following error is thrown: Error while executing action: Cannot move Virtual Machine Disk. The VM is running as Stateless. Please try again when VM is not running as Stateless. This machine is inside a VM pool based on a template that is not stateless, nor is the VM pool, nor the VM itself. In [1]: template = api.templates.get(name='templatename') In [2]: template.get_stateless() Out[2]: False In [3]: vm = api.vms.get(name='vmname') In [4]: vm.get_stateless() Out[4]: False Additionally, in the General tab of the VM Pool: Is Stateless:false If nothing is stateless, why is the error shown? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Lots of "domain in problem" warnings
Hi, Lately we're having a lot of events like these: 2016-04-07 14:54:25,247 WARN [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-2) [] domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' in problem. vds: 'host7.domain.com' 2016-04-07 14:54:40,501 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-17) [] Domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' recovered from problem. vds: 'host7.domain.com' 2016-04-07 14:54:40,501 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-17) [] Domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' has recovered from problem. No active host in the DC is reporting it as problematic, so clearing the domain recovery timer. 2016-04-07 14:54:46,314 WARN [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-30) [] domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' in problem. vds: 'host5.domain.com' 2016-04-07 14:55:01,589 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-32) [] Domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' recovered from problem. vds: 'host5.domain.com' 2016-04-07 14:55:01,589 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-32) [] Domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' has recovered from problem. No active host in the DC is reporting it as problematic, so clearing the domain recovery timer. Up until now it's been only one domain that I see with this warning, this doesn't look good nevertheless. Not sure if related, but I can't find a disk with this UUID. How can I start debugging? This is oVirt 3.6.4.1-1, and using an iSCSI-based storage backend. Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] VM has been paused due to no Storage space error.
Hi, We're running oVirt 3.6.4.1-1. Lately we're seeing a bunch of events like these: 2016-04-13 10:52:30,735 INFO [org.ovirt.engine.core.vdsbroker.VmAnalyzer] (DefaultQuartzScheduler_Worker-86) [60dea18f] VM 'f9cd282e-110a-4896-98d3-6d320662744d'(vm.domain.com) moved from 'Up' --> 'Paused' 2016-04-13 10:52:30,815 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-86) [60dea18f] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com has been paused. 2016-04-13 10:52:30,898 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-86) [60dea18f] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com has been paused due to no Storage space error. 2016-04-13 10:52:52,320 WARN [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-38) [] domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' in problem. vds: 'host6.domain.com' 2016-04-13 10:52:55,183 INFO [org.ovirt.engine.core.vdsbroker.VmAnalyzer] (DefaultQuartzScheduler_Worker-70) [3da0f3d4] VM 'f9cd282e-110a-4896-98d3-6d320662744d'(vm.domain.com) moved from 'Paused' --> 'Up' 2016-04-13 10:52:55,318 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-70) [3da0f3d4] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com has recovered from paused back to up. The storage domain is far from being full, though (400+ G available right now). Could this be related to this other issue [1]? If not, how could I debug what's going on? Thanks. [1]: https://www.mail-archive.com/users@ovirt.org/msg32079.html ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VM has been paused due to no Storage space error.
Hi Fred, This is an iSCSI storage. I'm attaching the VDSM logs from the host where this machine has been running. Should you need any further info, don't hesitate to ask. Thanks. Regards. El 2016-04-13 11:54, Fred Rolland escribió: Hi, What kind of storage do you have ? (ISCSI,FC,NFS...) Can you provide the vdsm logs from the host where this VM runs ? Thanks, Freddy On Wed, Apr 13, 2016 at 1:02 PM,wrote: Hi, We're running oVirt 3.6.4.1-1. Lately we're seeing a bunch of events like these: 2016-04-13 10:52:30,735 INFO [org.ovirt.engine.core.vdsbroker.VmAnalyzer] (DefaultQuartzScheduler_Worker-86) [60dea18f] VM 'f9cd282e-110a-4896-98d3-6d320662744d'(vm.domain.com [1]) moved from 'Up' --> 'Paused' 2016-04-13 10:52:30,815 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-86) [60dea18f] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com [1] has been paused. 2016-04-13 10:52:30,898 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-86) [60dea18f] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com [1] has been paused due to no Storage space error. 2016-04-13 10:52:52,320 WARN [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-38) [] domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' in problem. vds: 'host6.domain.com [2]' 2016-04-13 10:52:55,183 INFO [org.ovirt.engine.core.vdsbroker.VmAnalyzer] (DefaultQuartzScheduler_Worker-70) [3da0f3d4] VM 'f9cd282e-110a-4896-98d3-6d320662744d'(vm.domain.com [1]) moved from 'Paused' --> 'Up' 2016-04-13 10:52:55,318 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-70) [3da0f3d4] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com [1] has recovered from paused back to up. The storage domain is far from being full, though (400+ G available right now). Could this be related to this other issue [1]? If not, how could I debug what's going on? Thanks. [1]: https://www.mail-archive.com/users@ovirt.org/msg32079.html [3] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [4] Links: -- [1] http://vm.domain.com [2] http://host6.domain.com [3] https://www.mail-archive.com/users@ovirt.org/msg32079.html [4] http://lists.ovirt.org/mailman/listinfo/users vdsm.log.gz Description: GNU Zip compressed data ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Creating templates in a blocking fashion from Python SDK
El 2016-04-10 11:16, Yaniv Kaul escribió: On Sun, Apr 10, 2016 at 11:02 AM, Yedidyah Bar Davidwrote: On Sun, Apr 10, 2016 at 10:43 AM, Barak Korren wrote: Hi there, I use the following Python SDK snippet to create a template from an existing VM: templ = ovirt.templates.add( ovirtsdk.xml.Template(vm=vm, name=vm.name [1]) ) This seems to launch a template creation task in a non-blocking manner, which makes the next command I run, which tries to delete the VM, fail because the VM is still locked by the template creation task. Is there a way to block on the template creation task and not return to the code until it finishes? I don't think so, but you can loop waiting, see e.g.: http://www.ovirt.org/develop/api/pythonapi/#create-a-template-from-vm [2] I wish we could have an extra parameters on the Python SDK that would do this exact loop for us, since essentially most use cases require this. I'm not sure it is relevant only for template creation, btw. What is also more annoying, is that this loop (IIRC) will never break, if something bad happens and the template ends up in a state != down (such as locked). (Same issue I've just had with host installation - Iv'e waited endlessly for it to be in 'up' state, only to find out it ended in 'installed_failed' state). Y. I have had some issues related to this, I've opened a couple of BZs (for different issues, though): https://bugzilla.redhat.com/show_bug.cgi?id=1245630 https://bugzilla.redhat.com/show_bug.cgi?id=1315874 Currently the "poorman's wait method" that I detailed on the second BZ is the method I'm following to check whether state is "Ok". Regards. -- Didi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [3] Links: -- [1] http://vm.name [2] http://www.ovirt.org/develop/api/pythonapi/#create-a-template-from-vm [3] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Unable to move disk on (non-)stateless machine
El 2016-03-18 08:06, Tomas Jelinek escribió: - Original Message - From: nico...@devels.es To: users@ovirt.org Sent: Wednesday, March 16, 2016 7:14:22 PM Subject: [ovirt-users] Unable to move disk on (non-)stateless machine Hi, We're running oVirt 3.6.3.4-1. We have 2 storage domains of the same kind (both iSCSI). We're moving some of the disks from one to other, preferably without shutting down the machine. When moving a disk with the VM started, the following error is thrown: Error while executing action: Cannot move Virtual Machine Disk. The VM is running as Stateless. Please try again when VM is not running as Stateless. This machine is inside a VM pool based on a template that is not stateless, nor is the VM pool, nor the VM itself. In [1]: template = api.templates.get(name='templatename') In [2]: template.get_stateless() Out[2]: False In [3]: vm = api.vms.get(name='vmname') In [4]: vm.get_stateless() Out[4]: False Additionally, in the General tab of the VM Pool: Is Stateless:false If nothing is stateless, why is the error shown? The VMs in a pool are always stateless. There is an RFE [1] making the pools stateful, but not yet implemented. But the reporting is not correct, we should not report they are stateless if they are not. Can you please open a bug for this? Sure. Done: https://bugzilla.redhat.com/show_bug.cgi?id=1318955 Regards. Thank you! [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1234394 Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Remove master storage from data center?
Done [1]. Regards. [1]: https://bugzilla.redhat.com/attachment.cgi?bugid=1315306 El 2016-03-07 10:21, Fred Rolland escribió: In any case, open a bug for better tracking. Add the log and steps for reproduce On Mon, Mar 7, 2016 at 10:44 AM,wrote: Hi Fred, I'm attaching the required logs. As this was urgent for us, we finally put all hosts on maintenance and removed the storage this way. However, we have another oVirt infrastructure where soon we'll need to do the same steps, so if needed we can do some tests on it. If you prefer I can open a bug report. Regards. El 2016-03-06 12:57, Fred Rolland escribió: Hi, Can you please attach the full logs (VDSM and engine) ? Thanks, Fred On Wed, Mar 2, 2016 at 3:19 PM, wrote: Hi, We've migrated storage from glusterfs to iSCSI, so now we have 2 storages in our data center. As we've already finished, we want to remove the gluster storage from our data center (which is the master storage right now). We've tried to put it on maintenance but we're getting this error: 2016-03-02 13:02:02,087 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.DisconnectStoragePoolVDSCommand] (org.ovirt.thread.pool-8-thread-34) [259a3130] Command 'DisconnectStoragePoolVDSCommand(HostName = ovirt01.domain.com [1] [1], DisconnectStoragePoolVDSCommandParameters:{runAsync='true', hostId='c31dca1a-e5bc-43f6-940f-6397e3ddbee4', storagePoolId='fa155d43-4e68-486f-9f9d-ae3e3916cc4f', vds_spm_id='7'})' execution failed: VDSGenericException: VDSErrorException: Failed to DisconnectStoragePoolVDS, error = Operation not allowed while SPM is active: ('fa155d43-4e68-486f-9f9d-ae3e3916cc4f',), code = 656 Does that mean that *all* hosts must be on maintenance to do that? There's nothing left on the gluster storage right now. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [2] [2] Links: -- [1] http://ovirt01.domain.com [1] [2] http://lists.ovirt.org/mailman/listinfo/users [2] Links: -- [1] http://ovirt01.domain.com [2] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Remove master storage from data center?
Hi, We've migrated storage from glusterfs to iSCSI, so now we have 2 storages in our data center. As we've already finished, we want to remove the gluster storage from our data center (which is the master storage right now). We've tried to put it on maintenance but we're getting this error: 2016-03-02 13:02:02,087 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.DisconnectStoragePoolVDSCommand] (org.ovirt.thread.pool-8-thread-34) [259a3130] Command 'DisconnectStoragePoolVDSCommand(HostName = ovirt01.domain.com, DisconnectStoragePoolVDSCommandParameters:{runAsync='true', hostId='c31dca1a-e5bc-43f6-940f-6397e3ddbee4', storagePoolId='fa155d43-4e68-486f-9f9d-ae3e3916cc4f', vds_spm_id='7'})' execution failed: VDSGenericException: VDSErrorException: Failed to DisconnectStoragePoolVDS, error = Operation not allowed while SPM is active: ('fa155d43-4e68-486f-9f9d-ae3e3916cc4f',), code = 656 Does that mean that *all* hosts must be on maintenance to do that? There's nothing left on the gluster storage right now. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt-event-notifier for e-mail notification
El 2016-03-28 12:30, Yedidyah Bar David escribió: On Mon, Mar 28, 2016 at 1:38 PM,wrote: El 2016-03-28 11:23, Yedidyah Bar David escribió: On Mon, Mar 28, 2016 at 1:05 PM, wrote: Hi, On oVirt 3.6.3.4-1, when selecting the 'Event notification' sub-tab on a user in the 'Users' tab, at the bottom this message is shown: Note: To receive email notifications, ensure that the mail server is configured and the ovirt-event-notifier service is running. I cannot find this service installed anywhere, though. Which package should contain this service? # systemctl status ovirt-event-notifier ovirt-event-notifier.service Loaded: not-found (Reason: No such file or directory) Active: inactive (dead) This should have found it for you. Are you trying this on the engine machine? Yes. # locate ovirt-event-notifier # # yum provides *ovirt-event-notifier Loading mirror speeds from cached hostfile [...] No matches found It's packaged in ovirt-engine-tools . The package is indeed installed, but the service seems not. Can you please try: systemctl list-unit-files | grep ovirt-engine Ah, that was the problem. It is installed as ovirt-engine-notifier, not as ovirt-event-notifier. Maybe it was renamed from a previous version? If you wish, I can submit a bug so the text in the oVirt admin is renamed. Thanks. # rpm -qa | grep engine-tools ovirt-engine-tools-3.6.3.4-1.el7.centos.noarch This is CentOS 7.1.1503, FWIW. Why not 7.2? IIRC it should not matter, but you can try to upgrade. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] ovirt-event-notifier for e-mail notification
Hi, On oVirt 3.6.3.4-1, when selecting the 'Event notification' sub-tab on a user in the 'Users' tab, at the bottom this message is shown: Note: To receive email notifications, ensure that the mail server is configured and the ovirt-event-notifier service is running. I cannot find this service installed anywhere, though. Which package should contain this service? # systemctl status ovirt-event-notifier ovirt-event-notifier.service Loaded: not-found (Reason: No such file or directory) Active: inactive (dead) # locate ovirt-event-notifier # # yum provides *ovirt-event-notifier Loading mirror speeds from cached hostfile [...] No matches found Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt-event-notifier for e-mail notification
El 2016-03-28 11:23, Yedidyah Bar David escribió: On Mon, Mar 28, 2016 at 1:05 PM,wrote: Hi, On oVirt 3.6.3.4-1, when selecting the 'Event notification' sub-tab on a user in the 'Users' tab, at the bottom this message is shown: Note: To receive email notifications, ensure that the mail server is configured and the ovirt-event-notifier service is running. I cannot find this service installed anywhere, though. Which package should contain this service? # systemctl status ovirt-event-notifier ovirt-event-notifier.service Loaded: not-found (Reason: No such file or directory) Active: inactive (dead) This should have found it for you. Are you trying this on the engine machine? Yes. # locate ovirt-event-notifier # # yum provides *ovirt-event-notifier Loading mirror speeds from cached hostfile [...] No matches found It's packaged in ovirt-engine-tools . The package is indeed installed, but the service seems not. # rpm -qa | grep engine-tools ovirt-engine-tools-3.6.3.4-1.el7.centos.noarch This is CentOS 7.1.1503, FWIW. Best, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt-event-notifier for e-mail notification
El 2016-03-28 13:24, Yedidyah Bar David escribió: On Mon, Mar 28, 2016 at 2:41 PM,wrote: El 2016-03-28 12:30, Yedidyah Bar David escribió: On Mon, Mar 28, 2016 at 1:38 PM, wrote: El 2016-03-28 11:23, Yedidyah Bar David escribió: On Mon, Mar 28, 2016 at 1:05 PM, wrote: Hi, On oVirt 3.6.3.4-1, when selecting the 'Event notification' sub-tab on a user in the 'Users' tab, at the bottom this message is shown: Note: To receive email notifications, ensure that the mail server is configured and the ovirt-event-notifier service is running. I cannot find this service installed anywhere, though. Which package should contain this service? # systemctl status ovirt-event-notifier ovirt-event-notifier.service Loaded: not-found (Reason: No such file or directory) Active: inactive (dead) This should have found it for you. Are you trying this on the engine machine? Yes. # locate ovirt-event-notifier # # yum provides *ovirt-event-notifier Loading mirror speeds from cached hostfile [...] No matches found It's packaged in ovirt-engine-tools . The package is indeed installed, but the service seems not. Can you please try: systemctl list-unit-files | grep ovirt-engine Ah, that was the problem. It is installed as ovirt-engine-notifier, not as ovirt-event-notifier. OK :-) Only now I realized you wrote 'ovirt-event-notifier' :-) Maybe it was renamed from a previous version? If you wish, I can submit a bug so the text in the oVirt admin is renamed. Please do. Actually it was never named ovirt-event-notifier. AFAICT this string only ever existed in this message, probably some simple typo no-one ever noticed until you did now :-) It indeed was renamed in the past, though. It's previous name was 'engine-notifierd': https://gerrit.ovirt.org/14378 Thanks for the report! Done. https://bugzilla.redhat.com/show_bug.cgi?id=1321583 Thanks! Thanks. # rpm -qa | grep engine-tools ovirt-engine-tools-3.6.3.4-1.el7.centos.noarch This is CentOS 7.1.1503, FWIW. Why not 7.2? IIRC it should not matter, but you can try to upgrade. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VM has been paused due to no Storage space error.
Hi Nir, El 2016-04-14 11:02, Nir Soffer escribió: On Thu, Apr 14, 2016 at 12:38 PM, Fred Rollandwrote: Nir, See attached the repoplot output. So we have about one concurrent lvm command without any disk operations, and everything seems snappy. Nicolás, maybe this storage or the host is overloaded by the vms? Are your vms doing lot of io? Not that I know, actually it should have been a "calm" time slot as far as IOs go, nor the storage was overloaded at that time. If I'm not mistaken, on the repoplot report I see there are two LVM operations at a time, maybe that has something to do with it? (although as you say, the lvextend is just a metadata change...) lvextend operation should be very fast operation, this is just a metadata change, allocating couple of extents to that lv. Zdenek, how do you suggest to debug slow lvm commands? See the attached pdf, lvm commands took 15-50 seconds. On Thu, Apr 14, 2016 at 12:18 PM, Nir Soffer wrote: On Thu, Apr 14, 2016 at 12:02 PM, Fred Rolland wrote: > From the log, we can see that the lvextend command took 18 sec, which is > quite long. Fred, can you run repoplot on this log file? it will may explain why this lvm call took 18 seconds. Nir > > 60decf0c-6d9a-4c3b-bee6-de9d2ff05e85::DEBUG::2016-04-13 > 10:52:06,759::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset > --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm lvextend --config ' > devices { > preferred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 > write_cache_state=0 disable_after_error_count=3 filter = [ > '\''a|/dev/mapper/36000eb3a4f1acbc20043|'\'', '\''r|.*|'\'' > ] } > global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 > use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' > --autobackup > n --size 6016m > > 5de4a000-a9c4-489c-8eee-10368647c413/721d09bc-60e7-4310-9ba2-522d2a4b03d0 > (cwd None) > > 60decf0c-6d9a-4c3b-bee6-de9d2ff05e85::DEBUG::2016-04-13 > 10:52:22,217::lvm::290::Storage.Misc.excCmd::(cmd) SUCCESS: = ' > WARNING: lvmetad is running but disabled. Restart lvmetad before > enabling > it!\n WARNING: This metadata update is NOT backed up\n'; = 0 > > > The watermark can be configured by the following value: > > 'volume_utilization_percent', '50', > 'Together with volume_utilization_chunk_mb, set the minimal free ' > 'space before a thin provisioned block volume is extended. Use ' > 'lower values to extend earlier.') > > On Thu, Apr 14, 2016 at 11:42 AM, Michal Skrivanek > wrote: >> >> >> > On 14 Apr 2016, at 09:57, nico...@devels.es wrote: >> > >> > Ok, that makes sense, thanks for the insight both Alex and Fred. I'm >> > attaching the VDSM log of the SPM node at the time of the pause. I >> > couldn't >> > find anything that would clearly identify the problem, but maybe >> > you'll be >> > able to. >> >> In extreme conditions it will happen. When your storage is slow to >> respond >> to extension request, and when your write rate is very high then it may >> happen, as it is happening to you, that you run out space sooner than >> the >> extension finishes. You can change the watermark value I guess(right, >> Fred?), but better would be to plan a bit more ahead and either use >> preallocated or create thin and then allocate expected size in advance >> before the operation causing it (typically it only happens during >> untarring >> gigabytes of data, or huge database dump/restore) >> Even then, the VM should always be automatially resumed once the disk >> space is allocated >> >> Thanks, >> michal >> >> > >> > Thanks. >> > >> > Regards. >> > >> > El 2016-04-13 13:09, Fred Rolland escribió: >> >> Hi, >> >> Yes, just as Alex explained, if the disk has been created as thin >> >> provisioning, the vdsm will extends once a watermark is reached. >> >> Usually it should not get to the state the Vm is paused. >> >> From the log, you can see that the request for extension has been >> >> sent >> >> before the VM got to the No Space Error. >> >> Later, we can see the VM resuming. >> >> INFO::2016-04-13 >> >> 10:52:04,182::vm::1026::virt.vm::(extendDrivesIfNeeded) >> >> vmId=`f9cd282e-110a-4896-98d3-6d320662744d`::Requesting extension >> >> for >> >> volume >> >> >> >> INFO::2016-04-13 10:52:29,360::vm::3728::virt.vm::(onIOError) >> >> vmId=`f9cd282e-110a-4896-98d3-6d320662744d`::abnormal vm stop device >> >> virtio-disk0 error enospc >> >> >> >> INFO::2016-04-13 >> >> 10:52:54,317::vm::5084::virt.vm::(_logGuestCpuStatus) >> >> vmId=`f9cd282e-110a-4896-98d3-6d320662744d`::CPU running: onResume >> >> Note that the extension is done on the SPM host, so it would be >> >> interesting to see the vdsm log from the host that was in SPM role >> >> at >> >> this timeframe. >> >> Regards, >> >> Fred >> >> On Wed, Apr 13, 2016 at 2:43 PM, Alex Crow >> >> wrote: >> >>> Hi, >> >>> If you have
Re: [ovirt-users] VMs becoming non-responsive sporadically
El 2016-04-30 22:37, Nir Soffer escribió: On Sat, Apr 30, 2016 at 10:28 PM, Nir Sofferwrote: On Sat, Apr 30, 2016 at 7:16 PM, wrote: El 2016-04-30 16:55, Nir Soffer escribió: On Sat, Apr 30, 2016 at 11:33 AM, Nicolás wrote: Hi Nir, El 29/04/16 a las 22:34, Nir Soffer escribió: On Fri, Apr 29, 2016 at 9:17 PM, wrote: Hi, We're running oVirt 3.6.5.3-1 and lately we're experiencing some issues with some VMs being paused because they're marked as non-responsive. Mostly, after a few seconds they recover, but we want to debug precisely this problem so we can fix it consistently. Our scenario is the following: ~495 VMs, of which ~120 are constantly up 3 datastores, all of them iSCSI-based: * ds1: 2T, currently has 276 disks * ds2: 2T, currently has 179 disks * ds3: 500G, currently has 65 disks 7 hosts: All have mostly the same hardware. CPU and memory are currently very lowly used (< 10%). ds1 and ds2 are physically the same backend which exports two 2TB volumes. ds3 is a different storage backend where we're currently migrating some disks from ds1 and ds2. What the the storage backend behind ds1 and 2? The storage backend for ds1 and ds2 is the iSCSI-based HP LeftHand P4000 G2. Usually, when VMs become unresponsive, the whole host where they run gets unresponsive too, so that gives a hint about the problem, my bet is the culprit is somewhere on the host side and not on the VMs side. Probably the vm became unresponsive because connection to the host was lost. I forgot to mention that less commonly we have situations where the host doesn't get unresponsive but the VMs on it do and they don't become responsive ever again, so we have to forcibly power them off and start them on a different host. But in this case the connection with the host doesn't ever get lost (so basically the host is Up, but any VM run on them is unresponsive). When that happens, the host itself gets non-responsive and only recoverable after reboot, since it's unable to reconnect. Piotr, can you check engine log and explain why host is not reconnected? I must say this is not specific to this oVirt version, when we were using v.3.6.4 the same happened, and it's also worthy mentioning we've not done any configuration changes and everything had been working quite well for a long time. We were monitoring our ds1 and ds2 physical backend to see performance and we suspect we've run out of IOPS since we're reaching the maximum specified by the manufacturer, probably at certain times the host cannot perform a storage operation within some time limit and it marks VMs as unresponsive. That's why we've set up ds3 and we're migrating ds1 and ds2 to ds3. When we run out of space on ds3 we'll create more smaller volumes to keep migrating. On the host side, when this happens, we've run repoplot on the vdsm log and I'm attaching the result. Clearly there's a *huge* LVM response time (~30 secs.). Indeed the log show very slow vgck and vgs commands - these are called every 5 minutes for checking the vg health and refreshing vdsm lvm cache. 1. starting vgck Thread-96::DEBUG::2016-04-29 13:17:48,682::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm vgck --config ' devices { pre ferred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 write_cache_state=0 disable_after_error_count=3 filter = [ '\''a|/dev/mapper/36000eb3a4f1acbc20043|'\ '', '\''r|.*|'\'' ] } global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' 5de4a000-a9c4-48 9c-8eee-10368647c413 (cwd None) 2. vgck ends after 55 seconds Thread-96::DEBUG::2016-04-29 13:18:43,173::lvm::290::Storage.Misc.excCmd::(cmd) SUCCESS: = ' WARNING: lvmetad is running but disabled. Restart lvmetad before enabling it!\n'; = 0 3. starting vgs Thread-96::DEBUG::2016-04-29 13:17:11,963::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm vgs --config ' devices { pref erred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 write_cache_state=0 disable_after_error_count=3 filter = [ '\''a|/dev/mapper/36000eb3a4f1acbc20043|/de v/mapper/36000eb3a4f1acbc200b9|/dev/mapper/360014056f0dc8930d744f83af8ddc709|/dev/mapper/WDC_WD5003ABYZ-011FA0_WD-WMAYP0J73DU6|'\'', '\''r|.*|'\'' ] } global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' --noheadings --units b --nosuffix --separator '| ' --ignoreskippedcluster -o uuid,name,attr,size,free,extent_size,extent_count,free_count,tags,vg_mda_size,vg_mda_free,lv_count,pv_count,pv_name 5de4a000-a9c4-489c-8eee-10368 647c413 (cwd None) 4. vgs finished after 37 seconds Thread-96::DEBUG::2016-04-29
Re: [ovirt-users] VMs becoming non-responsive sporadically
El 2016-04-30 23:22, Nir Soffer escribió: On Sun, May 1, 2016 at 12:48 AM,wrote: El 2016-04-30 22:37, Nir Soffer escribió: On Sat, Apr 30, 2016 at 10:28 PM, Nir Soffer wrote: On Sat, Apr 30, 2016 at 7:16 PM, wrote: El 2016-04-30 16:55, Nir Soffer escribió: On Sat, Apr 30, 2016 at 11:33 AM, Nicolás wrote: Hi Nir, El 29/04/16 a las 22:34, Nir Soffer escribió: On Fri, Apr 29, 2016 at 9:17 PM, wrote: Hi, We're running oVirt 3.6.5.3-1 and lately we're experiencing some issues with some VMs being paused because they're marked as non-responsive. Mostly, after a few seconds they recover, but we want to debug precisely this problem so we can fix it consistently. Our scenario is the following: ~495 VMs, of which ~120 are constantly up 3 datastores, all of them iSCSI-based: * ds1: 2T, currently has 276 disks * ds2: 2T, currently has 179 disks * ds3: 500G, currently has 65 disks 7 hosts: All have mostly the same hardware. CPU and memory are currently very lowly used (< 10%). ds1 and ds2 are physically the same backend which exports two 2TB volumes. ds3 is a different storage backend where we're currently migrating some disks from ds1 and ds2. What the the storage backend behind ds1 and 2? The storage backend for ds1 and ds2 is the iSCSI-based HP LeftHand P4000 G2. Usually, when VMs become unresponsive, the whole host where they run gets unresponsive too, so that gives a hint about the problem, my bet is the culprit is somewhere on the host side and not on the VMs side. Probably the vm became unresponsive because connection to the host was lost. I forgot to mention that less commonly we have situations where the host doesn't get unresponsive but the VMs on it do and they don't become responsive ever again, so we have to forcibly power them off and start them on a different host. But in this case the connection with the host doesn't ever get lost (so basically the host is Up, but any VM run on them is unresponsive). When that happens, the host itself gets non-responsive and only recoverable after reboot, since it's unable to reconnect. Piotr, can you check engine log and explain why host is not reconnected? I must say this is not specific to this oVirt version, when we were using v.3.6.4 the same happened, and it's also worthy mentioning we've not done any configuration changes and everything had been working quite well for a long time. We were monitoring our ds1 and ds2 physical backend to see performance and we suspect we've run out of IOPS since we're reaching the maximum specified by the manufacturer, probably at certain times the host cannot perform a storage operation within some time limit and it marks VMs as unresponsive. That's why we've set up ds3 and we're migrating ds1 and ds2 to ds3. When we run out of space on ds3 we'll create more smaller volumes to keep migrating. On the host side, when this happens, we've run repoplot on the vdsm log and I'm attaching the result. Clearly there's a *huge* LVM response time (~30 secs.). Indeed the log show very slow vgck and vgs commands - these are called every 5 minutes for checking the vg health and refreshing vdsm lvm cache. 1. starting vgck Thread-96::DEBUG::2016-04-29 13:17:48,682::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm vgck --config ' devices { pre ferred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 write_cache_state=0 disable_after_error_count=3 filter = [ '\''a|/dev/mapper/36000eb3a4f1acbc20043|'\ '', '\''r|.*|'\'' ] } global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' 5de4a000-a9c4-48 9c-8eee-10368647c413 (cwd None) 2. vgck ends after 55 seconds Thread-96::DEBUG::2016-04-29 13:18:43,173::lvm::290::Storage.Misc.excCmd::(cmd) SUCCESS: = ' WARNING: lvmetad is running but disabled. Restart lvmetad before enabling it!\n'; = 0 3. starting vgs Thread-96::DEBUG::2016-04-29 13:17:11,963::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm vgs --config ' devices { pref erred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 write_cache_state=0 disable_after_error_count=3 filter = [ '\''a|/dev/mapper/36000eb3a4f1acbc20043|/de v/mapper/36000eb3a4f1acbc200b9|/dev/mapper/360014056f0dc8930d744f83af8ddc709|/dev/mapper/WDC_WD5003ABYZ-011FA0_WD-WMAYP0J73DU6|'\'', '\''r|.*|'\'' ] } global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' --noheadings --units b --nosuffix --separator '| ' --ignoreskippedcluster -o
Re: [ovirt-users] 100% memory usage on desktop environments
El 2016-05-19 07:36, Yaniv Kaul escribió: On Wed, May 18, 2016 at 6:52 PM, Nicoláswrote: Hi, Probably not an oVirt issue, but maybe someone can help. I've deployed a pretty basic VM (ubuntu 14.04 server, 4GB RAM, 4 CPUs, 15GB storage). Each time I install an additional desktop environment (Gnome, KDE, whatever...), CPU usage rises to 100% all time to the extreme that interacting with the machine becomes impossible (maybe a mouse movement is propagated 3 minutes later or so...). Is X properly configured with QXL? xorg-x11-drv-qxl RPM (in Fedora / EL - I assume something similar in Ubuntu) installed, and x.org [2] CONF file properly set up - something like: Section "Device" Identifier "qxl" Driver "qxl" EndSection Section "Screen" Identifier "screen" Device "qxl" DefaultDepth 24 SubSection "Display" Depth 24 Modes "1024x768" EndSubSection EndSection Y. Indeed, the package was installed and everything configured as should. I tried removing the qxl driver package from the OS and now everything goes smooth as silk... Strange, as supposedly this driver should optimize the graphics part. Thanks all for the help! Regards. To debug this, I installed LXDE, which is a lightweight desktop environment based on Xorg. I could see there is an Xorg process consuming one of the CPUs and the machine stops responding as far as the desktop environment goes. I have not changed anything in the configuration file. I could also see this only happens when QXL is chosen as the display driver. When CIRRUS is chosen, everything works smoothly and CPU is ~100% idle. The downside is that we want to use SPICE and CIRRUS won't allow it. Why does this happen? Is this an OS-side driver issue? Any hint how can it be fixed? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [1] Links: -- [1] http://lists.ovirt.org/mailman/listinfo/users [2] http://x.org ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VMs becoming non-responsive sporadically
El 2016-04-30 23:22, Nir Soffer escribió: On Sun, May 1, 2016 at 12:48 AM,wrote: El 2016-04-30 22:37, Nir Soffer escribió: On Sat, Apr 30, 2016 at 10:28 PM, Nir Soffer wrote: On Sat, Apr 30, 2016 at 7:16 PM, wrote: El 2016-04-30 16:55, Nir Soffer escribió: On Sat, Apr 30, 2016 at 11:33 AM, Nicolás wrote: Hi Nir, El 29/04/16 a las 22:34, Nir Soffer escribió: On Fri, Apr 29, 2016 at 9:17 PM, wrote: Hi, We're running oVirt 3.6.5.3-1 and lately we're experiencing some issues with some VMs being paused because they're marked as non-responsive. Mostly, after a few seconds they recover, but we want to debug precisely this problem so we can fix it consistently. Our scenario is the following: ~495 VMs, of which ~120 are constantly up 3 datastores, all of them iSCSI-based: * ds1: 2T, currently has 276 disks * ds2: 2T, currently has 179 disks * ds3: 500G, currently has 65 disks 7 hosts: All have mostly the same hardware. CPU and memory are currently very lowly used (< 10%). ds1 and ds2 are physically the same backend which exports two 2TB volumes. ds3 is a different storage backend where we're currently migrating some disks from ds1 and ds2. What the the storage backend behind ds1 and 2? The storage backend for ds1 and ds2 is the iSCSI-based HP LeftHand P4000 G2. Usually, when VMs become unresponsive, the whole host where they run gets unresponsive too, so that gives a hint about the problem, my bet is the culprit is somewhere on the host side and not on the VMs side. Probably the vm became unresponsive because connection to the host was lost. I forgot to mention that less commonly we have situations where the host doesn't get unresponsive but the VMs on it do and they don't become responsive ever again, so we have to forcibly power them off and start them on a different host. But in this case the connection with the host doesn't ever get lost (so basically the host is Up, but any VM run on them is unresponsive). When that happens, the host itself gets non-responsive and only recoverable after reboot, since it's unable to reconnect. Piotr, can you check engine log and explain why host is not reconnected? I must say this is not specific to this oVirt version, when we were using v.3.6.4 the same happened, and it's also worthy mentioning we've not done any configuration changes and everything had been working quite well for a long time. We were monitoring our ds1 and ds2 physical backend to see performance and we suspect we've run out of IOPS since we're reaching the maximum specified by the manufacturer, probably at certain times the host cannot perform a storage operation within some time limit and it marks VMs as unresponsive. That's why we've set up ds3 and we're migrating ds1 and ds2 to ds3. When we run out of space on ds3 we'll create more smaller volumes to keep migrating. On the host side, when this happens, we've run repoplot on the vdsm log and I'm attaching the result. Clearly there's a *huge* LVM response time (~30 secs.). Indeed the log show very slow vgck and vgs commands - these are called every 5 minutes for checking the vg health and refreshing vdsm lvm cache. 1. starting vgck Thread-96::DEBUG::2016-04-29 13:17:48,682::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm vgck --config ' devices { pre ferred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 write_cache_state=0 disable_after_error_count=3 filter = [ '\''a|/dev/mapper/36000eb3a4f1acbc20043|'\ '', '\''r|.*|'\'' ] } global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' 5de4a000-a9c4-48 9c-8eee-10368647c413 (cwd None) 2. vgck ends after 55 seconds Thread-96::DEBUG::2016-04-29 13:18:43,173::lvm::290::Storage.Misc.excCmd::(cmd) SUCCESS: = ' WARNING: lvmetad is running but disabled. Restart lvmetad before enabling it!\n'; = 0 3. starting vgs Thread-96::DEBUG::2016-04-29 13:17:11,963::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm vgs --config ' devices { pref erred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 write_cache_state=0 disable_after_error_count=3 filter = [ '\''a|/dev/mapper/36000eb3a4f1acbc20043|/de v/mapper/36000eb3a4f1acbc200b9|/dev/mapper/360014056f0dc8930d744f83af8ddc709|/dev/mapper/WDC_WD5003ABYZ-011FA0_WD-WMAYP0J73DU6|'\'', '\''r|.*|'\'' ] } global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' --noheadings --units b --nosuffix --separator '| ' --ignoreskippedcluster -o
Re: [ovirt-users] VMs becoming non-responsive sporadically
El 2016-05-01 14:01, Nir Soffer escribió: On Sun, May 1, 2016 at 3:31 PM,wrote: El 2016-04-30 23:22, Nir Soffer escribió: On Sun, May 1, 2016 at 12:48 AM, wrote: El 2016-04-30 22:37, Nir Soffer escribió: On Sat, Apr 30, 2016 at 10:28 PM, Nir Soffer wrote: On Sat, Apr 30, 2016 at 7:16 PM, wrote: El 2016-04-30 16:55, Nir Soffer escribió: On Sat, Apr 30, 2016 at 11:33 AM, Nicolás wrote: Hi Nir, El 29/04/16 a las 22:34, Nir Soffer escribió: On Fri, Apr 29, 2016 at 9:17 PM, wrote: Hi, We're running oVirt 3.6.5.3-1 and lately we're experiencing some issues with some VMs being paused because they're marked as non-responsive. Mostly, after a few seconds they recover, but we want to debug precisely this problem so we can fix it consistently. Our scenario is the following: ~495 VMs, of which ~120 are constantly up 3 datastores, all of them iSCSI-based: * ds1: 2T, currently has 276 disks * ds2: 2T, currently has 179 disks * ds3: 500G, currently has 65 disks 7 hosts: All have mostly the same hardware. CPU and memory are currently very lowly used (< 10%). ds1 and ds2 are physically the same backend which exports two 2TB volumes. ds3 is a different storage backend where we're currently migrating some disks from ds1 and ds2. What the the storage backend behind ds1 and 2? The storage backend for ds1 and ds2 is the iSCSI-based HP LeftHand P4000 G2. Usually, when VMs become unresponsive, the whole host where they run gets unresponsive too, so that gives a hint about the problem, my bet is the culprit is somewhere on the host side and not on the VMs side. Probably the vm became unresponsive because connection to the host was lost. I forgot to mention that less commonly we have situations where the host doesn't get unresponsive but the VMs on it do and they don't become responsive ever again, so we have to forcibly power them off and start them on a different host. But in this case the connection with the host doesn't ever get lost (so basically the host is Up, but any VM run on them is unresponsive). When that happens, the host itself gets non-responsive and only recoverable after reboot, since it's unable to reconnect. Piotr, can you check engine log and explain why host is not reconnected? I must say this is not specific to this oVirt version, when we were using v.3.6.4 the same happened, and it's also worthy mentioning we've not done any configuration changes and everything had been working quite well for a long time. We were monitoring our ds1 and ds2 physical backend to see performance and we suspect we've run out of IOPS since we're reaching the maximum specified by the manufacturer, probably at certain times the host cannot perform a storage operation within some time limit and it marks VMs as unresponsive. That's why we've set up ds3 and we're migrating ds1 and ds2 to ds3. When we run out of space on ds3 we'll create more smaller volumes to keep migrating. On the host side, when this happens, we've run repoplot on the vdsm log and I'm attaching the result. Clearly there's a *huge* LVM response time (~30 secs.). Indeed the log show very slow vgck and vgs commands - these are called every 5 minutes for checking the vg health and refreshing vdsm lvm cache. 1. starting vgck Thread-96::DEBUG::2016-04-29 13:17:48,682::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm vgck --config ' devices { pre ferred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 write_cache_state=0 disable_after_error_count=3 filter = [ '\''a|/dev/mapper/36000eb3a4f1acbc20043|'\ '', '\''r|.*|'\'' ] } global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' 5de4a000-a9c4-48 9c-8eee-10368647c413 (cwd None) 2. vgck ends after 55 seconds Thread-96::DEBUG::2016-04-29 13:18:43,173::lvm::290::Storage.Misc.excCmd::(cmd) SUCCESS: = ' WARNING: lvmetad is running but disabled. Restart lvmetad before enabling it!\n'; = 0 3. starting vgs Thread-96::DEBUG::2016-04-29 13:17:11,963::lvm::290::Storage.Misc.excCmd::(cmd) /usr/bin/taskset --cpu-list 0-23 /usr/bin/sudo -n /usr/sbin/lvm vgs --config ' devices { pref erred_names = ["^/dev/mapper/"] ignore_suspended_devices=1 write_cache_state=0 disable_after_error_count=3 filter = [ '\''a|/dev/mapper/36000eb3a4f1acbc20043|/de v/mapper/36000eb3a4f1acbc200b9|/dev/mapper/360014056f0dc8930d744f83af8ddc709|/dev/mapper/WDC_WD5003ABYZ-011FA0_WD-WMAYP0J73DU6|'\'', '\''r|.*|'\'' ] } global { locking_type=1 prioritise_write_locks=1 wait_for_locks=1 use_lvmetad=0 } backup { retain_min = 50 retain_days = 0 } ' --noheadings --units b --nosuffix --separator '| '
Re: [ovirt-users] VM has been paused due to no Storage space error.
Ok, that makes sense, thanks for the insight both Alex and Fred. I'm attaching the VDSM log of the SPM node at the time of the pause. I couldn't find anything that would clearly identify the problem, but maybe you'll be able to. Thanks. Regards. El 2016-04-13 13:09, Fred Rolland escribió: Hi, Yes, just as Alex explained, if the disk has been created as thin provisioning, the vdsm will extends once a watermark is reached. Usually it should not get to the state the Vm is paused. From the log, you can see that the request for extension has been sent before the VM got to the No Space Error. Later, we can see the VM resuming. INFO::2016-04-13 10:52:04,182::vm::1026::virt.vm::(extendDrivesIfNeeded) vmId=`f9cd282e-110a-4896-98d3-6d320662744d`::Requesting extension for volume INFO::2016-04-13 10:52:29,360::vm::3728::virt.vm::(onIOError) vmId=`f9cd282e-110a-4896-98d3-6d320662744d`::abnormal vm stop device virtio-disk0 error enospc INFO::2016-04-13 10:52:54,317::vm::5084::virt.vm::(_logGuestCpuStatus) vmId=`f9cd282e-110a-4896-98d3-6d320662744d`::CPU running: onResume Note that the extension is done on the SPM host, so it would be interesting to see the vdsm log from the host that was in SPM role at this timeframe. Regards, Fred On Wed, Apr 13, 2016 at 2:43 PM, Alex Crowwrote: Hi, If you have set up VM disks as Thin Provisioned, the VM has to pause when the disk image needs to expand. You won't see this on VMs with preallocated storage. It's not the SAN that's running out of space, it's the VM image needing to be expanded incrementally each time. Cheers Alex On 13/04/16 12:04, nico...@devels.es wrote: Hi Fred, This is an iSCSI storage. I'm attaching the VDSM logs from the host where this machine has been running. Should you need any further info, don't hesitate to ask. Thanks. Regards. El 2016-04-13 11:54, Fred Rolland escribió: Hi, What kind of storage do you have ? (ISCSI,FC,NFS...) Can you provide the vdsm logs from the host where this VM runs ? Thanks, Freddy On Wed, Apr 13, 2016 at 1:02 PM, wrote: Hi, We're running oVirt 3.6.4.1-1. Lately we're seeing a bunch of events like these: 2016-04-13 10:52:30,735 INFO [org.ovirt.engine.core.vdsbroker.VmAnalyzer] (DefaultQuartzScheduler_Worker-86) [60dea18f] VM 'f9cd282e-110a-4896-98d3-6d320662744d'(vm.domain.com [1] [1]) moved from 'Up' --> 'Paused' 2016-04-13 10:52:30,815 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-86) [60dea18f] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com [1] [1] has been paused. 2016-04-13 10:52:30,898 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-86) [60dea18f] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com [1] [1] has been paused due to no Storage space error. 2016-04-13 10:52:52,320 WARN [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (org.ovirt.thread.pool-8-thread-38) [] domain '5de4a000-a9c4-489c-8eee-10368647c413:iscsi01' in problem. vds: 'host6.domain.com [2] [2]' 2016-04-13 10:52:55,183 INFO [org.ovirt.engine.core.vdsbroker.VmAnalyzer] (DefaultQuartzScheduler_Worker-70) [3da0f3d4] VM 'f9cd282e-110a-4896-98d3-6d320662744d'(vm.domain.com [1] [1]) moved from 'Paused' --> 'Up' 2016-04-13 10:52:55,318 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-70) [3da0f3d4] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM vm.domain.com [1] [1] has recovered from paused back to up. The storage domain is far from being full, though (400+ G available right now). Could this be related to this other issue [1]? If not, how could I debug what's going on? Thanks. [1]: https://www.mail-archive.com/users@ovirt.org/msg32079.html [3] [3] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [4] [4] Links: -- [1] http://vm.domain.com [1] [2] http://host6.domain.com [2] [3] https://www.mail-archive.com/users@ovirt.org/msg32079.html [3] [4] http://lists.ovirt.org/mailman/listinfo/users [4] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [4] -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its contents or use it in any way and are requested to delete the message along with any attachments and notify us immediately. This email is not intended to, nor should it be taken to, constitute advice. The information provided is correct to our knowledge & belief and must not be used as a substitute for obtaining tax, regulatory, investment, legal or any other appropriate advice. "Transact" is operated by Integrated
Re: [ovirt-users] LDAP-based domain not working after upgrade?
El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Welsescribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: > On 08/10/2016 09:37 AM, Nicolás wrote: >> Hi, >> >> We're running oVirt 4.0.1.1 [1], and we're trying to grant a permission to >> a >> user on a VM. Thing is when we open the 'Permissions' subtab on that >> VM, >> we click on Add, the LDAP backend shows up but any value entered into >> the search box returns nothing, even when I know the values exist. >> >> This has been working on oVirt 3.x, we actually migrated to 4.x last >> week and didn't notice this issue. >> >> Additionally, there's no combobox to choose the permission to grant? > > There should be combo box to choose a role. I've attached a screenshot, seems there's not. Its highly likely the dropdown is there, but its scrolled below the bottom of the dialog and thus you can't see it. I thought I made sure all the dialogs were working, seems like I missed one. Let me check it out and see what is going on. Okay I double checked, I went to the VMs main tab, selected a VM, then went to the permissions sub tab. Clicked add. The dialog that popped up looks like the one attached, which is what I was expecting. The one you attached appears to be missing some styling, which is likely what caused the Role to Assign part to be scrolled below the bottom of the page. Can you complete clear your cache (not shift reload, but settings->clear cache). If that doesn't work can you tell us the version of the patternfly rpm installed on your engine? Yes, I already did that, also opened the engine on different clients and the behavior is the same, I believe this is not a client issue. Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch Anyhow, I see there are lots of packages to update so I'll do so within a few days and report results. So I was able to update all packages, restart run engine-setup just in case, restart ovirt-engine and the situation is the same. I remembered we also have a dev. environment oVirt installation which we upgraded from 3.6.7 to 4.0.1 and same happens here, so finally we have 3 independent oVirt installations with the same problem. There's something not working as intended. I'm attaching a list of packages on oVirt engine and their versions if you want to check if there's something wrong with versioning, although everything seems to be ok. Thanks! >> All this is done with the admin@internal user, so I guess this is not >> a >> self-permission issue. >> >> Interesting thing is that I can successfully log-in to the user portal >> with a LDAP based user and manage all the VMs assigned to them. >> >> Just to see if there's been any configuration change, we also run the >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it >> returns >> is pretty similar to ours, and even the test commands (Login, Search) >> work successfully (I can see search returning user's data like name, >> surname, ...). We even applied this configuration to engine to see if >> it >> makes a difference but the result is the same, the search dialog >> returns >> nothing and neither I can see the permission to grant. >> >> Any hint about this? > > Maybe you hit similar issue to this one[1]. > > Can you please share engine.log, while you hit search button? I'm also attaching the log at the time I hit the search button, but I'm afraid there's no entry about that. Thanks. > [1] https [2]://bugzilla.redhat.com/show_bug.cgi?id=1356675 [2] > >> Thanks >> ___ >> Users mailing list >> Users@ovirt.org >> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/ [3]users [3] ___ Users mailing list Users@ovirt.org http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/ [3]users [3] ___ Users mailing list Users@ovirt.org http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/ [3]users [3] Links: -- [1] http://4.0.1.1 [2] https://bugzilla.redhat.com/show_bug.cgi?id=1356675 [3] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/usersovirt-engine-4.0.1.1-1.el7.centos.noarch ovirt-engine-backend-4.0.1.1-1.el7.centos.noarch ovirt-engine-cli-3.6.8.0-1.el7.centos.noarch ovirt-engine-dashboard-1.0.0-0.2.20160610git5d210ea.el7.centos.noarch ovirt-engine-dbscripts-4.0.1.1-1.el7.centos.noarch
Re: [ovirt-users] LDAP-based domain not working after upgrade?
El 2016-08-10 09:32, Ondra Machacek escribió: On 08/10/2016 10:10 AM, nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: On 08/10/2016 09:37 AM, Nicolás wrote: Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click on Add, the LDAP backend shows up but any value entered into the search box returns nothing, even when I know the values exist. This has been working on oVirt 3.x, we actually migrated to 4.x last week and didn't notice this issue. Additionally, there's no combobox to choose the permission to grant? There should be combo box to choose a role. I've attached a screenshot, seems there's not. OK, it seems like some UI issue. Can you please force reload or clear browser cache? Maybe try different browser. Nope... Cleaned cache from Chrome, Firefox, same result. Even private windows have the same behaviour. By the way, we have 2 independent oVirt infrastructures, both upgraded from 3.6.7 and both have the same issue, I just had a look at the second and the same happens here (no log in engine.log either). This second is 4.0.0 instead of 4.0.0, FWIW. All this is done with the admin@internal user, so I guess this is not a self-permission issue. Interesting thing is that I can successfully log-in to the user portal with a LDAP based user and manage all the VMs assigned to them. Just to see if there's been any configuration change, we also run the ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns is pretty similar to ours, and even the test commands (Login, Search) work successfully (I can see search returning user's data like name, surname, ...). We even applied this configuration to engine to see if it makes a difference but the result is the same, the search dialog returns nothing and neither I can see the permission to grant. Any hint about this? Maybe you hit similar issue to this one[1]. Can you please share engine.log, while you hit search button? I'm also attaching the log at the time I hit the search button, but I'm afraid there's no entry about that. Thanks. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675 Thanks ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] LDAP-based domain not working after upgrade?
El 2016-08-10 13:36, nico...@devels.es escribió: El 2016-08-10 09:32, Ondra Machacek escribió: On 08/10/2016 10:10 AM, nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: On 08/10/2016 09:37 AM, Nicolás wrote: Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click on Add, the LDAP backend shows up but any value entered into the search box returns nothing, even when I know the values exist. This has been working on oVirt 3.x, we actually migrated to 4.x last week and didn't notice this issue. Additionally, there's no combobox to choose the permission to grant? There should be combo box to choose a role. I've attached a screenshot, seems there's not. OK, it seems like some UI issue. Can you please force reload or clear browser cache? Maybe try different browser. Nope... Cleaned cache from Chrome, Firefox, same result. Even private windows have the same behaviour. By the way, we have 2 independent oVirt infrastructures, both upgraded from 3.6.7 and both have the same issue, I just had a look at the second and the same happens here (no log in engine.log either). This second is 4.0.0 instead of 4.0.0, FWIW. I meant: This second is 4.0.0 instead of 4.0.1 All this is done with the admin@internal user, so I guess this is not a self-permission issue. Interesting thing is that I can successfully log-in to the user portal with a LDAP based user and manage all the VMs assigned to them. Just to see if there's been any configuration change, we also run the ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns is pretty similar to ours, and even the test commands (Login, Search) work successfully (I can see search returning user's data like name, surname, ...). We even applied this configuration to engine to see if it makes a difference but the result is the same, the search dialog returns nothing and neither I can see the permission to grant. Any hint about this? Maybe you hit similar issue to this one[1]. Can you please share engine.log, while you hit search button? I'm also attaching the log at the time I hit the search button, but I'm afraid there's no entry about that. Thanks. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675 Thanks ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] LDAP-based domain not working after upgrade?
El 2016-08-12 20:38, Ondra Machacek escribió: On 08/12/2016 05:53 PM, nico...@devels.es wrote: El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Welsescribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: > On 08/10/2016 09:37 AM, Nicolás wrote: >> Hi, >> >> We're running oVirt 4.0.1.1 [1], and we're trying to grant a permission to >> a >> user on a VM. Thing is when we open the 'Permissions' subtab on that >> VM, >> we click on Add, the LDAP backend shows up but any value entered into >> the search box returns nothing, even when I know the values exist. >> >> This has been working on oVirt 3.x, we actually migrated to 4.x last >> week and didn't notice this issue. >> >> Additionally, there's no combobox to choose the permission to grant? > > There should be combo box to choose a role. I've attached a screenshot, seems there's not. Its highly likely the dropdown is there, but its scrolled below the bottom of the dialog and thus you can't see it. I thought I made sure all the dialogs were working, seems like I missed one. Let me check it out and see what is going on. Okay I double checked, I went to the VMs main tab, selected a VM, then went to the permissions sub tab. Clicked add. The dialog that popped up looks like the one attached, which is what I was expecting. The one you attached appears to be missing some styling, which is likely what caused the Role to Assign part to be scrolled below the bottom of the page. Can you complete clear your cache (not shift reload, but settings->clear cache). If that doesn't work can you tell us the version of the patternfly rpm installed on your engine? Yes, I already did that, also opened the engine on different clients and the behavior is the same, I believe this is not a client issue. Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch Ok, this indeed seems like a graphics problem since I am seeing this connecting to a machine through a VNC server and the Role combobox is moved down out of the dialog. However, the LDAP issue persists. When I choose the 'internal' domain, I can search the 'admin' user successfully, however, if I set it to be the LDAP domain, any search returns nothing. Any hints or ideas how to debug this? Can you please enable debug log[1] and send it here? [1] https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README#L442 Thanks. I was now able to see why it is failing: TRACE [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-13) [] SearchRequest: Exception: LDAPSearchException(resultCode=11 (admin limit exceeded), numEntries=0, numReferences=0, errorMessage='admin limit exceeded') Indeed, if I run that query using the ldapsearch command I can clearly see it is returning an "admin limit exceeded" error. The applied filter is: (&(objectClass=posixAccount)(uid=*)(|(givenName=username)(sn=username)(displayName=username)(uid=username))) Strange thing is this hasn't been an issue on oVirt 3.6.x and we've not changed our LDAP configuration. Has the filter been changed in 4.x by default? If so, is there a way to override the filter to make it simpler? (In our case we'll always seek by username, so no need to search by givenName, sn or displayName). Thanks. Thanks. Anyhow, I see there are lots of packages to update so I'll do so within a few days and report results. >> All this is done with the admin@internal user, so I guess this is not >> a >> self-permission issue. >> >> Interesting thing is that I can successfully log-in to the user portal >> with a LDAP based user and manage all the VMs assigned to them. >> >> Just to see if there's been any configuration change, we also run the >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it >> returns >> is pretty similar to ours, and even the test commands (Login, Search) >> work successfully (I can see search returning user's data like name, >> surname, ...). We even applied this configuration to engine to see if >> it >> makes a difference but the result is the same, the search dialog >> returns >> nothing and neither I can see the permission to grant. >> >> Any hint about this? > > Maybe you hit similar issue to this one[1]. > > Can you please share engine.log, while you hit search button? I'm also attaching the log at the time I hit the search button, but I'm afraid there's no entry about that. Thanks. > [1] https [2]://bugzilla.redhat.com/show_bug.cgi?id=1356675 [2] > >> Thanks >> ___ >> Users mailing list >> Users@ovirt.org >>
Re: [ovirt-users] LDAP-based domain not working after upgrade?
El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Welsescribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: > On 08/10/2016 09:37 AM, Nicolás wrote: >> Hi, >> >> We're running oVirt 4.0.1.1 [1], and we're trying to grant a permission to >> a >> user on a VM. Thing is when we open the 'Permissions' subtab on that >> VM, >> we click on Add, the LDAP backend shows up but any value entered into >> the search box returns nothing, even when I know the values exist. >> >> This has been working on oVirt 3.x, we actually migrated to 4.x last >> week and didn't notice this issue. >> >> Additionally, there's no combobox to choose the permission to grant? > > There should be combo box to choose a role. I've attached a screenshot, seems there's not. Its highly likely the dropdown is there, but its scrolled below the bottom of the dialog and thus you can't see it. I thought I made sure all the dialogs were working, seems like I missed one. Let me check it out and see what is going on. Okay I double checked, I went to the VMs main tab, selected a VM, then went to the permissions sub tab. Clicked add. The dialog that popped up looks like the one attached, which is what I was expecting. The one you attached appears to be missing some styling, which is likely what caused the Role to Assign part to be scrolled below the bottom of the page. Can you complete clear your cache (not shift reload, but settings->clear cache). If that doesn't work can you tell us the version of the patternfly rpm installed on your engine? Yes, I already did that, also opened the engine on different clients and the behavior is the same, I believe this is not a client issue. Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch Ok, this indeed seems like a graphics problem since I am seeing this connecting to a machine through a VNC server and the Role combobox is moved down out of the dialog. However, the LDAP issue persists. When I choose the 'internal' domain, I can search the 'admin' user successfully, however, if I set it to be the LDAP domain, any search returns nothing. Any hints or ideas how to debug this? Thanks. Anyhow, I see there are lots of packages to update so I'll do so within a few days and report results. >> All this is done with the admin@internal user, so I guess this is not >> a >> self-permission issue. >> >> Interesting thing is that I can successfully log-in to the user portal >> with a LDAP based user and manage all the VMs assigned to them. >> >> Just to see if there's been any configuration change, we also run the >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it >> returns >> is pretty similar to ours, and even the test commands (Login, Search) >> work successfully (I can see search returning user's data like name, >> surname, ...). We even applied this configuration to engine to see if >> it >> makes a difference but the result is the same, the search dialog >> returns >> nothing and neither I can see the permission to grant. >> >> Any hint about this? > > Maybe you hit similar issue to this one[1]. > > Can you please share engine.log, while you hit search button? I'm also attaching the log at the time I hit the search button, but I'm afraid there's no entry about that. Thanks. > [1] https [2]://bugzilla.redhat.com/show_bug.cgi?id=1356675 [2] > >> Thanks >> ___ >> Users mailing list >> Users@ovirt.org >> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/ [3]users [3] ___ Users mailing list Users@ovirt.org http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/ [3]users [3] ___ Users mailing list Users@ovirt.org http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/ [3]users [3] Links: -- [1] http://4.0.1.1 [2] https://bugzilla.redhat.com/show_bug.cgi?id=1356675 [3] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] LDAP-based domain not working after upgrade?
El 2016-08-10 08:58, Ondra Machacek escribió: On 08/10/2016 09:37 AM, Nicolás wrote: Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click on Add, the LDAP backend shows up but any value entered into the search box returns nothing, even when I know the values exist. This has been working on oVirt 3.x, we actually migrated to 4.x last week and didn't notice this issue. Additionally, there's no combobox to choose the permission to grant? There should be combo box to choose a role. I've attached a screenshot, seems there's not. All this is done with the admin@internal user, so I guess this is not a self-permission issue. Interesting thing is that I can successfully log-in to the user portal with a LDAP based user and manage all the VMs assigned to them. Just to see if there's been any configuration change, we also run the ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns is pretty similar to ours, and even the test commands (Login, Search) work successfully (I can see search returning user's data like name, surname, ...). We even applied this configuration to engine to see if it makes a difference but the result is the same, the search dialog returns nothing and neither I can see the permission to grant. Any hint about this? Maybe you hit similar issue to this one[1]. Can you please share engine.log, while you hit search button? I'm also attaching the log at the time I hit the search button, but I'm afraid there's no entry about that. Thanks. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675 Thanks ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users engine.tar.gz Description: GNU Zip compressed data ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages
So I gave it another try and this time it worked without any issue (with 4.0.1.1 version). Strange, maybe the first upgrade failure left system in a weird state? Anyhow almost everything ([1]) is working fine now. Thanks for the help! [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1358737 El 2016-07-20 20:23, Martin Perina escribió: On Wed, Jul 20, 2016 at 6:18 PM, Nicoláswrote: El 20/07/16 a las 16:45, Martin Perina escribió: On Wed, Jul 20, 2016 at 4:44 PM, Nicolás wrote: Hi Martin, Actually, up until now we had that cert configured in httpd and in websocket proxy. Seems that now in 4.0.x it's not enough, as opening the https://fqdn [1] complains about the cert not being imported in the key chain. Yes, there's an updated procedure on using external CA in 4.0, for details please take a look at Doc Text in https://bugzilla.redhat.com/show_bug.cgi?id=1336838 [2] So I imported it via keytool, but I don't want to use it in the engine <-> VDSM communication. Hmm, so that would imply that we have some issue with existing internal enigne CA during upgrade ... The strange thing is that we test upgrades a lot but so far we haven't seen any issues which will broke SSL setup between engine and VDSM. You said that you had to downgrade back to 3.6.7 (so unfortunately for us we cannot investigate your nonworking setup more), but how did you do that? Removing all engine packages and configuration, installing back 3.6.7 packaging and restoring configuration form backup? I'm asking to know what changed in your setup between not working 4.0 and working 3.6.7 ... Indeed, those are the steps I followed to the point. To add more strangeness, previously to upgrading this oVirt infrastructure, we upgraded another one that we have (also using own cert, a different one but from the same CA) and everything went smoothly. And what's more, previously to upgrading the engine that failed, I created a copy of that engine machine in a sandbox environment to see if upgrade process would or not success, and it worked perfectly. The only difference between the sandbox and the real machine's process was that when upgrading the real one, the first time I run "engine-setup" it failed because 'systemd' reported PostgreSQL as it was not running (actually it was, thougg), so everything rolled back. I had to kill the PostgreSQL process, start it again with systemctl and then run "engine-setup", where the process completed successfully but the SSL issue appeared. Not sure if this rollback could have shattered the whole thing... Anyhow, tomorrow I'm going to create another copy of the engine machine to a sandbox environment and try again. If it works I'll cross my fingers and give another try on the real machine... Thanks! Thanks a lot for you effort. I will try to perform same upgrade tomorrow in my test env. Thanks Martin Thanks! En 20/7/2016 2:48 p. m., Martin Perina escribió: Hi, sorry for late response, I overlook your reply :-( I looked at your logs and it seems to me that there's SSL error when engine tries to contact VDSM. You have mentioned that your are using your own custom CA. Are you using it only for HTTPS certificate or do you want to use it also for Engine <-> VDSM communication? Martin Perina On Wed, Jul 20, 2016 at 9:18 AM, wrote: Any hints about this? El 2016-07-13 11:13, nico...@devels.es escribió: Hi, Unfortunately, upgrading to 4.0.1RC didn't solve the problem. Actually, the error changed to 'General SSLEngine problem', but the result was the same, like this: 2016-07-13 09:52:22,010 INFO [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp Reactor) [] Connecting to /10.X.X.X 2016-07-13 09:52:22,018 ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages: General SSLEngine problem It's worth mentioning that we're using our own SSL certificates (not self-signed), and I imported the combined certificate into the /etc/pki/ovirt-engine/.truststore key file. Not sure if related, but just in case. I had to downgrade to 3.6.7. I'm attaching requested logs, if you need anything else don't hesitate to ask. Regards. El 2016-07-13 09:45, Martin Perina escribió: Hi, could you please share also vdsm.log from your hosts and also server.log and setup logs from /var/log/ovirt-engine/setup directory? Thanks Martin Perina On Wed, Jul 13, 2016 at 10:36 AM, wrote: Hi, We upgraded from 3.6.6 to 4.0.0 and we have a big issue since the engine cannot connect to hosts. In the logs all we see is this error: ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages I'm attaching full logs. Could someone help please? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [3] [1]
Re: [ovirt-users] ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages
Any hints about this? El 2016-07-13 11:13, nico...@devels.es escribió: Hi, Unfortunately, upgrading to 4.0.1RC didn't solve the problem. Actually, the error changed to 'General SSLEngine problem', but the result was the same, like this: 2016-07-13 09:52:22,010 INFO [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp Reactor) [] Connecting to /10.X.X.X 2016-07-13 09:52:22,018 ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages: General SSLEngine problem It's worth mentioning that we're using our own SSL certificates (not self-signed), and I imported the combined certificate into the /etc/pki/ovirt-engine/.truststore key file. Not sure if related, but just in case. I had to downgrade to 3.6.7. I'm attaching requested logs, if you need anything else don't hesitate to ask. Regards. El 2016-07-13 09:45, Martin Perina escribió: Hi, could you please share also vdsm.log from your hosts and also server.log and setup logs from /var/log/ovirt-engine/setup directory? Thanks Martin Perina On Wed, Jul 13, 2016 at 10:36 AM,wrote: Hi, We upgraded from 3.6.6 to 4.0.0 and we have a big issue since the engine cannot connect to hosts. In the logs all we see is this error: ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages I'm attaching full logs. Could someone help please? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [1] Links: -- [1] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 3.6 -> 4.0 upgrade fails on schema refresh
Hi Arik, El 2016-07-06 10:27, Arik Hadas escribió: Hi, This is a bit aggressive solution to remove all snapshots with the memory. Can you confirm that a storage domain that was active while creating the snapshot with memory was removed from the system? This is something that was not covered and could lead to the reported issue. Some of them were available when we did remove a storage backend, indeed. Some were newer, the problem is that I don't know which one actually failed since when this happened we were in a hurry and needed to upgrade ASAP. Until we come up with a proper solution, you can use the following query to identify the exact problematic snapshots and remove them before upgrading: select vm_name, snapshots.description as snapshot_name, snapshot_id from snapshots join vm_static on vm_id=vm_guid where CAST(split_part(memory_volume, ',', 1) AS UUID) not in (select id from storage_domain_static); Thanks. We have another oVirt infrastructure and I see this query is returning one row. I'll report back when we upgrade this second infrastructure and provide some details. Regards. Regards, Arik - Original Message - Hi, We have had a similar issue when upgrading, digging into it we found out that this was caused by snapshots that had the "Save memory" option enabled. We finally ended up deleting any snapshot that had this option enabled and then we tried to upgrade, this time the process went smooth. Hope this helps. Regards. El 2016-07-05 18:49, Matt . escribió: > OK some update on this. > > Removed the db-migrate-script package and reinstalled ovirt-engine and > ovirt-engine-setup. > > I still have that error and this is the loggingpart: > > CONTEXT: SQL statement "DROP INDEX IF EXISTS > idx_vm_static_template_version_name; CREATE INDEX > idx_vm_static_template_version_nam$ > PL/pgSQL function fn_db_create_index(character varying,character > varying,text,text) line 12 at EXECUTE statement > psql:/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql:93: > ERROR: > insert or update on table "image_storage_domain_map" violates foreign > key constraint > "fk_image_storage_domain_map_storage_domain_static" > DETAIL: Key (storage_domain_id)=(006552b0-cae3-4ccb-9baa-ee8c3b8e42cf) > is not present in table "storage_domain_static". > FATAL: Cannot execute sql command: > --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql > > 2016-07-05 19:40:29 ERROR > otopi.plugins.ovirt_engine_setup.ovirt_engine.db.schema > schema._misc:313 schema.sh: FATAL: > sql command: > --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql > 2016-07-05 19:40:29 DEBUG otopi.context context._executeMethod:142 > method exception > Traceback (most recent call last): > File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, > in _executeMethod > method['method']() > File > "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py", > line 315, in _misc > raise RuntimeError(_('Engine schema refresh failed')) > RuntimeError: Engine schema refresh failed > > Any idea ? > > 2016-07-05 15:25 GMT+02:00 Matt .: >> I just found out that the file >> >> 04_00_0140_convert_memory_snapshots_to_disks.sql >> >> is not located in: >> >> /usr/share/ovirt-engine/dbscripts/upgrade/ > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] IOException (error 503) when calling /ovirt-engine-reports
Hi, We just upgraded to oVirt 4.0, everything seems to be working but in our logs we see an exception for /ovirt-engine-reports continuously. Any call to /ovirt-engine-reports generates a 503 error. I'm attaching the full exception. Any hints? Thanks.2016-07-06 12:10:03,729 ERROR [io.undertow.request] (default task-23) UT005023: Exception handling request to /ovirt-engine/services/reports-interface-proxy: javax.servlet.ServletException: java.io.IOException: Server returned HTTP response code: 503 for URL: https://ovirt.domain.com:443/ovirt-engine-reports/ovirt/reports-interface?command=status at org.ovirt.engine.core.uutils.servlet.ProxyServletBase.doGet(ProxyServletBase.java:163) [uutils.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:687) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:66) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263) [undertow-servlet-1.3.15.Final.jar:1.3.15.Final] at
Re: [ovirt-users] 3.6 -> 4.0 upgrade fails on schema refresh
El 2016-07-06 11:11, nico...@devels.es escribió: Hi Arik, El 2016-07-06 10:27, Arik Hadas escribió: Hi, This is a bit aggressive solution to remove all snapshots with the memory. Can you confirm that a storage domain that was active while creating the snapshot with memory was removed from the system? This is something that was not covered and could lead to the reported issue. Some of them were available when we did remove a storage backend, indeed. Some were newer, the problem is that I don't know which one actually failed since when this happened we were in a hurry and needed to upgrade ASAP. Until we come up with a proper solution, you can use the following query to identify the exact problematic snapshots and remove them before upgrading: select vm_name, snapshots.description as snapshot_name, snapshot_id from snapshots join vm_static on vm_id=vm_guid where CAST(split_part(memory_volume, ',', 1) AS UUID) not in (select id from storage_domain_static); Thanks. We have another oVirt infrastructure and I see this query is returning one row. I'll report back when we upgrade this second infrastructure and provide some details. We've upgraded our second oVirt infrastructure as well, here are the steps: 1) I run the query you provided, it returned one row. 2) I tried upgrading to 4.0 without deleting that snapshot: it failed with the error below. 3) I deleted the snapshot 4) Now I tried upgrading again and everything went smoothly. I'd say this is the same issue, apparently. Thanks. Regards. Regards, Arik - Original Message - Hi, We have had a similar issue when upgrading, digging into it we found out that this was caused by snapshots that had the "Save memory" option enabled. We finally ended up deleting any snapshot that had this option enabled and then we tried to upgrade, this time the process went smooth. Hope this helps. Regards. El 2016-07-05 18:49, Matt . escribió: > OK some update on this. > > Removed the db-migrate-script package and reinstalled ovirt-engine and > ovirt-engine-setup. > > I still have that error and this is the loggingpart: > > CONTEXT: SQL statement "DROP INDEX IF EXISTS > idx_vm_static_template_version_name; CREATE INDEX > idx_vm_static_template_version_nam$ > PL/pgSQL function fn_db_create_index(character varying,character > varying,text,text) line 12 at EXECUTE statement > psql:/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql:93: > ERROR: > insert or update on table "image_storage_domain_map" violates foreign > key constraint > "fk_image_storage_domain_map_storage_domain_static" > DETAIL: Key (storage_domain_id)=(006552b0-cae3-4ccb-9baa-ee8c3b8e42cf) > is not present in table "storage_domain_static". > FATAL: Cannot execute sql command: > --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql > > 2016-07-05 19:40:29 ERROR > otopi.plugins.ovirt_engine_setup.ovirt_engine.db.schema > schema._misc:313 schema.sh: FATAL: > sql command: > --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql > 2016-07-05 19:40:29 DEBUG otopi.context context._executeMethod:142 > method exception > Traceback (most recent call last): > File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, > in _executeMethod > method['method']() > File > "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py", > line 315, in _misc > raise RuntimeError(_('Engine schema refresh failed')) > RuntimeError: Engine schema refresh failed > > Any idea ? > > 2016-07-05 15:25 GMT+02:00 Matt .: >> I just found out that the file >> >> 04_00_0140_convert_memory_snapshots_to_disks.sql >> >> is not located in: >> >> /usr/share/ovirt-engine/dbscripts/upgrade/ > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 3.6 -> 4.0 upgrade fails on schema refresh
You need to do this in the 'engine' database instead of 'postgres'. El 2016-07-06 13:41, Matt . escribió: HI, Thanks for the solution, I actually get: postgres=# select vm_name, snapshots.description as snapshot_name, snapshot_id from snapshots join vm_static on vm_id=vm_guid where CAST(split_part(memory_volume, ',', 1) AS UUID) not in (select id from storage_domain_static); ERROR: relation "snapshots" does not exist LINE 1: ...ts.description as snapshot_name, snapshot_id from snapshots .. 2016-07-06 12:11 GMT+02:00: Hi Arik, El 2016-07-06 10:27, Arik Hadas escribió: Hi, This is a bit aggressive solution to remove all snapshots with the memory. Can you confirm that a storage domain that was active while creating the snapshot with memory was removed from the system? This is something that was not covered and could lead to the reported issue. Some of them were available when we did remove a storage backend, indeed. Some were newer, the problem is that I don't know which one actually failed since when this happened we were in a hurry and needed to upgrade ASAP. Until we come up with a proper solution, you can use the following query to identify the exact problematic snapshots and remove them before upgrading: select vm_name, snapshots.description as snapshot_name, snapshot_id from snapshots join vm_static on vm_id=vm_guid where CAST(split_part(memory_volume, ',', 1) AS UUID) not in (select id from storage_domain_static); Thanks. We have another oVirt infrastructure and I see this query is returning one row. I'll report back when we upgrade this second infrastructure and provide some details. Regards. Regards, Arik - Original Message - Hi, We have had a similar issue when upgrading, digging into it we found out that this was caused by snapshots that had the "Save memory" option enabled. We finally ended up deleting any snapshot that had this option enabled and then we tried to upgrade, this time the process went smooth. Hope this helps. Regards. El 2016-07-05 18:49, Matt . escribió: > OK some update on this. > > Removed the db-migrate-script package and reinstalled ovirt-engine and > ovirt-engine-setup. > > I still have that error and this is the loggingpart: > > CONTEXT: SQL statement "DROP INDEX IF EXISTS > idx_vm_static_template_version_name; CREATE INDEX > idx_vm_static_template_version_nam$ > PL/pgSQL function fn_db_create_index(character varying,character > varying,text,text) line 12 at EXECUTE statement > > psql:/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql:93: > ERROR: > insert or update on table "image_storage_domain_map" violates foreign > key constraint > "fk_image_storage_domain_map_storage_domain_static" > DETAIL: Key (storage_domain_id)=(006552b0-cae3-4ccb-9baa-ee8c3b8e42cf) > is not present in table "storage_domain_static". > FATAL: Cannot execute sql command: > > --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql > > 2016-07-05 19:40:29 ERROR > otopi.plugins.ovirt_engine_setup.ovirt_engine.db.schema > schema._misc:313 schema.sh: FATAL: > sql command: > > --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql > 2016-07-05 19:40:29 DEBUG otopi.context context._executeMethod:142 > method exception > Traceback (most recent call last): > File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, > in _executeMethod > method['method']() > File > > "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py", > line 315, in _misc > raise RuntimeError(_('Engine schema refresh failed')) > RuntimeError: Engine schema refresh failed > > Any idea ? > > 2016-07-05 15:25 GMT+02:00 Matt . : >> I just found out that the file >> >> 04_00_0140_convert_memory_snapshots_to_disks.sql >> >> is not located in: >> >> /usr/share/ovirt-engine/dbscripts/upgrade/ > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 3.6 -> 4.0 upgrade fails on schema refresh
Hi, We have had a similar issue when upgrading, digging into it we found out that this was caused by snapshots that had the "Save memory" option enabled. We finally ended up deleting any snapshot that had this option enabled and then we tried to upgrade, this time the process went smooth. Hope this helps. Regards. El 2016-07-05 18:49, Matt . escribió: OK some update on this. Removed the db-migrate-script package and reinstalled ovirt-engine and ovirt-engine-setup. I still have that error and this is the loggingpart: CONTEXT: SQL statement "DROP INDEX IF EXISTS idx_vm_static_template_version_name; CREATE INDEX idx_vm_static_template_version_nam$ PL/pgSQL function fn_db_create_index(character varying,character varying,text,text) line 12 at EXECUTE statement psql:/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql:93: ERROR: insert or update on table "image_storage_domain_map" violates foreign key constraint "fk_image_storage_domain_map_storage_domain_static" DETAIL: Key (storage_domain_id)=(006552b0-cae3-4ccb-9baa-ee8c3b8e42cf) is not present in table "storage_domain_static". FATAL: Cannot execute sql command: --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql 2016-07-05 19:40:29 ERROR otopi.plugins.ovirt_engine_setup.ovirt_engine.db.schema schema._misc:313 schema.sh: FATAL: sql command: --file=/usr/share/ovirt-engine/dbscripts/upgrade/04_00_0140_convert_memory_snapshots_to_disks.sql 2016-07-05 19:40:29 DEBUG otopi.context context._executeMethod:142 method exception Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in _executeMethod method['method']() File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py", line 315, in _misc raise RuntimeError(_('Engine schema refresh failed')) RuntimeError: Engine schema refresh failed Any idea ? 2016-07-05 15:25 GMT+02:00 Matt .: I just found out that the file 04_00_0140_convert_memory_snapshots_to_disks.sql is not located in: /usr/share/ovirt-engine/dbscripts/upgrade/ ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt-engine-notifier tuning?
Any ideas about this? Thanks. El 2017-02-04 14:59, Nicolás escribió: Hi, Is there a way to configure the frequency on which the ovirt-engine-notifier notifies about the same issue? We've recently had a Domain Storage with low space and an email was sent cca. every 15 minutes. Is there a way to increase this notification time? This is oVirt 4.0.4-4. Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Limit DWH database size
Hi, Since we upgraded to 4.0.x, DWH's PostgreSQL database is getting really huge. Is there a clean way to limit its size, like setting a maximal retention time for DWH data? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Limit DWH database size
I tried adjusting the DWH_TABLES_KEEP_HOURLY parameter to a very low value and also setting the DWH_SAMPLING parameter to 60 and restarted both ovirt-engine-dwhd and ovirt-engine daemons, however, the database is still huge. So even if I change those parameters should I manually clean up the database? If so, what's the recommended way? Thanks. El 2016-09-01 19:26, Shirly Radco escribió: Another option is to set the DWH_SAMPLING back to 60 and restart dwh. This will lower the granularity of the dashboard calculations. The dwh db size grow since now it samples the statistics every 15 seconds instead of once a minute. Best regards, Shirly Radco On Sep 1, 2016 19:29,wrote: Hi Didi, El 2016-09-01 14:02, Yedidyah Bar David escribió: On Thu, Sep 1, 2016 at 3:26 PM, Sandro Bonazzola wrote: Didi, Shirly, can you help here? On Thu, Sep 1, 2016 at 8:52 AM, wrote: Hi, Since we upgraded to 4.0.x, DWH's PostgreSQL database is getting really huge. Is there a clean way to limit its size, like setting a maximal retention time for DWH data? Earlier today replied to a similar question, search list archives for "Change Engine History Logging from Advanched to Basic". Just to confirm: I already have basic DWH configured, and the content of /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-scale.conf is: DWH_TABLES_KEEP_SAMPLES=24 DWH_TABLES_KEEP_HOURLY=720 DWH_TABLES_KEEP_DAILY=0 So according to [1] regarding "DWH_TABLES_KEEP_HOURLY": The number of hours that hourly data is stored. The default is 60 days. Hourly data more than two days old is aggregated into dailydata. if I reduce that value to say 240 (10 days), any older entry from that should be erased upon a DWH restart, right? Thanks. [1]: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.6/pdf/Reports_and_Data_Warehouse_Guide/Red_Hat_Enterprise_Virtualization-3.6-Reports_and_Data_Warehouse_Guide-en-US.pdf [3] Best, Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [1] [1] -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com [2] [2] [3] -- Didi Links: -- [1] http://lists.ovirt.org/mailman/listinfo/users [1] [2] http://redhat.com [2] [3] https://www.redhat.com/it/about/events/red-hat-open-source-day-2016 [4] Links: -- [1] http://lists.ovirt.org/mailman/listinfo/users [2] http://redhat.com [3] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.6/pdf/Reports_and_Data_Warehouse_Guide/Red_Hat_Enterprise_Virtualization-3.6-Reports_and_Data_Warehouse_Guide-en-US.pdf [4] https://www.redhat.com/it/about/events/red-hat-open-source-day-2016 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Checking VmPool status with Python-SDK?
Hi, We're running oVirt 4.0.4.4 with engine python SDK version 3.6.7, and currently we're developing an application that first creates a VmPool and afterwards it updates it. However, sometimes happens that both operations occur at the same time, which results in an oVirt error claiming that a VmPool cannot be updated if there are still pending operations to do. We want to control this situation, so we've checked if the VmPool class has a .get_status() method but it seems it doesn't, so I'm asking for alternative ways of handling this. Would it be enough to say a VmPool is not "busy" if all its VMs are not in a blocked state (for example, with a blocked disk due to clonation)? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Change storage domain description
Hi, How can I change an existing storage domain's description? When 'Manage Storage is clicked, only the name can be changed but both Description and Comment fields are greyed-out. This is oVirt 4.0.3 BTW. Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Specifying the datastore on a VmPool creation via Python-SDK?
Any ideas to this? El 2017-01-10 08:43, nico...@devels.es escribió: Hi, We've several templates that have their disks replicated (copied) on all our Storage Domains. Problem is that we create our VmPools using PythonSDK, and it usually creates the pool on one of our Storage Domains that has a small amount of free disk space. Some of the Data Stores have plenty of space and when creating the VmPool, we'd like to be able to specify on which of these Storage Domains to create the VmPool. So far I see no parameter on the params.VmPool class to do that. I've tried using an Action, but the request is not correct: action = params.Action(storage_domain=api.storagedomains.get(name='...')) pool = params.VmPool(name='testlarge', cluster=api.clusters.get(name='...'), template=api.templates.get(name='Blank'), max_user_vms=1, size=1, type_='manual', actions=action) pool = params.VmPool(name='testlarge', cluster=api.clusters.get(name='...'), template=api.templates.get(name='Blank'), max_user_vms=1, size=1, type_='manual', actions=[action]) api.vmpools.add(pool) Both tries fail. This is Python-SDK 3.x. Is there a way to specify the destination Storage Domain onto where to create the VmPool? Thanks ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Specifying the datastore on a VmPool creation via Python-SDK?
Hi, We've several templates that have their disks replicated (copied) on all our Storage Domains. Problem is that we create our VmPools using PythonSDK, and it usually creates the pool on one of our Storage Domains that has a small amount of free disk space. Some of the Data Stores have plenty of space and when creating the VmPool, we'd like to be able to specify on which of these Storage Domains to create the VmPool. So far I see no parameter on the params.VmPool class to do that. I've tried using an Action, but the request is not correct: action = params.Action(storage_domain=api.storagedomains.get(name='...')) pool = params.VmPool(name='testlarge', cluster=api.clusters.get(name='...'), template=api.templates.get(name='Blank'), max_user_vms=1, size=1, type_='manual', actions=action) pool = params.VmPool(name='testlarge', cluster=api.clusters.get(name='...'), template=api.templates.get(name='Blank'), max_user_vms=1, size=1, type_='manual', actions=[action]) api.vmpools.add(pool) Both tries fail. This is Python-SDK 3.x. Is there a way to specify the destination Storage Domain onto where to create the VmPool? Thanks ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK: ovirtsdk4.Connection object autologout?
Hi Ravi, Could you please tell me what's the right way to apply this patch on an already working oVirt instance? I already have applied some patches on *.py files, but it seems the *.java files are not there. Thanks! El 2017-03-22 16:06, Ravi Nori escribió: Hi Nicolás, There has been some changes to how a session is refreshed after 4.0. So this is a BZ and is being tracked by BZ 1434605. Will post a patch to fix this. Thanks for reporting the issue. Ravi On Wed, Mar 22, 2017 at 9:10 AM,wrote: Hi Juan, I confirm this was working with 4.0.6 (but the same SDK package). The script is relatively new but I'm 100% sure it has been in execution for several weeks, in contrast to current version where after 5-6 iterations the exception starts showing up. I've voted for the bug and added myself as CC. Thank you. Regards, Nicolás El 2017-03-22 12:58, Juan Hernández escribió: On 03/22/2017 01:50 PM, Juan Hernández wrote: On 03/22/2017 01:10 PM, nico...@devels.es wrote: Hi, We've recently upgraded from oVirt 4.0.x to 4.1.0 and it seems that the behavior of a script we wrote in Python-SDK has changed slightly. We have a script that needs to be executed forever (daemon mode). This daemon creates an ovirtsdk4.Connection object and uses the same Connection object all the time. conn = sdk.Connection( url=URI, username=USERNAME, password=PASSWORD, ca_file=CAFILE ) Between iterations we have ~5 minutes delays which we accomplish with a time.sleep(...) call. After some of these iterations (5 or 6), when trying to perform an operation on the Connection object (in this case, listing all SDs): try: sys_serv = conn.system_service() sd_serv = sys_serv.storage_domains_service() storages = sd_serv.list(search=sd_search_query) except Error, e: log('ERR: Error getting storage domains: %s' % (e)) We start getting exceptions (i.e., the sd_serv.list() call throwing an Error exception) with this message: ERR: Error getting storage domains: HTTP response code is 401. I believe this has something to do with the Connection object expiring (even if it's not idle more than 5 minutes at any time). Is there a way to "refresh" the Connection object so it doesn't auto-logout (assuming this is the actual problem)? As I said, this started happening as of oVirt 4.1.0. ovirt-engine-sdk-python version is 4.1.1. Any ideas? This sound like this bug, opened yesterday: SSO token used for the API expires when running only queries https://bugzilla.redhat.com/1434605 [1] But I thought the same happened in 4.0. Can you confirm that you don't see this problem in 4.0? Open possible workaround is to force a refresh of the backend session sending an external event, like in this example: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L112-L131 [2] I also think that we need to modify the SDKs so that they detect expired SSO tokens and renew them automatically. I will open another bug for that. Here is the bug for adding automatic SSO token renew to the SDK, in case you want to follow/vote it: Implement automatic SSO token renew https://bugzilla.redhat.com/1434830 [3] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [4] Links: -- [1] https://bugzilla.redhat.com/1434605 [2] https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L112-L131 [3] https://bugzilla.redhat.com/1434830 [4] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Bulk move vm disks?
El 2017-03-24 10:29, Ernest Beinrohr escribió: On 24.03.2017 11:11, gflwqs gflwqs wrote: Hi list, I need to move 600+ vms:from one data domain to another, however from what i can see in the GUI i can only move one vm disk at the time which would be very time consuming. I there any way i can bulk move those vm disks? By the way, I can't stop the vms they have to be online during the migration.. This is my python program: # ... API init vms= api.vms.list(query = 'vmname') If you're planning to do it that way, make sure you install version 3.x of ovirt-engine-sdk-python. Newer versions (4.x) differ too much in syntax. Also, if you want to move a whole Storage Domain, you might be interested in listing VMs by the storage domain name, i.e.: api.vms.list(query='Storage=myoldstoragedomain') That will return a list of all machines in that storage domain. for vm in vms: print vm.name for disk in vm.disks.list( ): print " disk: " + disk.name + " " + disk.get_alias() sd = api.storagedomains.get('NEWSTORAGE') try: disk.move(params.Action(storage_domain=sd)) disk_id = disk.get_id() while True: print("Waiting for movement to complete ...") time.sleep(10) disk = vm.disks.get(id=disk_id) if disk.get_status().get_state() == "ok": break except: print "Cannot move." api.disconnect() -- Ernest Beinrohr, AXON PRO Ing [1], RHCE [2], RHCVA [2], LPIC [3], VCA [4], +421-2-62410360 +421-903-482603 Links: -- [1] http://www.beinrohr.sk/ing.php [2] http://www.beinrohr.sk/rhce.php [3] http://www.beinrohr.sk/lpic.php [4] http://www.beinrohr.sk/vca.php ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Bulk move vm disks?
You can use oVirt 4.1 with the ovirt-engine-sdk-python package version 3.x, they are backwards compatible. Regards. El 2017-03-24 11:12, gflwqs gflwqs escribió: Ok Thank you Nicolas we are using ovirt4.1.. Regards Christian 2017-03-24 12:03 GMT+01:00 <nico...@devels.es>: El 2017-03-24 10:29, Ernest Beinrohr escribió: On 24.03.2017 11 [1]:11, gflwqs gflwqs wrote: Hi list, I need to move 600+ vms:from one data domain to another, however from what i can see in the GUI i can only move one vm disk at the time which would be very time consuming. I there any way i can bulk move those vm disks? By the way, I can't stop the vms they have to be online during the migration.. This is my python program: # ... API init vms= api.vms.list(query = 'vmname') If you're planning to do it that way, make sure you install version 3.x of ovirt-engine-sdk-python. Newer versions (4.x) differ too much in syntax. Also, if you want to move a whole Storage Domain, you might be interested in listing VMs by the storage domain name, i.e.: api.vms.list(query='Storage=myoldstoragedomain') That will return a list of all machines in that storage domain. for vm in vms: print vm.name [2] for disk in vm.disks.list( ): print " disk: " + disk.name [3] + " " + disk.get_alias() sd = api.storagedomains.get('NEWSTORAGE') try: disk.move(params.Action(storage_domain=sd)) disk_id = disk.get_id() while True: print("Waiting for movement to complete ...") time.sleep(10) disk = vm.disks.get(id=disk_id) if disk.get_status().get_state() == "ok": break except: print "Cannot move." api.disconnect() -- Ernest Beinrohr, AXON PRO Ing [1], RHCE [2], RHCVA [2], LPIC [3], VCA [4], +421-2-62410360 [4] +421-903-482603 [5] Links: -- [1] http://www.beinrohr.sk/ing.php [6] [2] http://www.beinrohr.sk/rhce.php [7] [3] http://www.beinrohr.sk/lpic.php [8] [4] http://www.beinrohr.sk/vca.php [9] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [10] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [10] Links: -- [1] tel:24.03.2017%2011 [2] http://vm.name [3] http://disk.name [4] tel:%2B421-2-62410360 [5] tel:%2B421-903-482603 [6] http://www.beinrohr.sk/ing.php [7] http://www.beinrohr.sk/rhce.php [8] http://www.beinrohr.sk/lpic.php [9] http://www.beinrohr.sk/vca.php [10] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK4: How to list VM user sessions?
Hi Giulio, I tried to reproduce your same steps and it returns an non-empty list for me. In [1]: vms_serv = sys_serv.vms_service() In [2]: vm = vms_serv.list(search='name=bleh')[0] In [3]: vmsv = vms_serv.vm_service(vm.id) In [4]: vmsess = vmsv.sessions_service() In [5]: vmsess.list() Out[5]: [, ] Are you sure a session is initiated on vmname in the moment you run the vms_service.list(...)[0] statement? El 2017-03-30 12:01, Giulio Casella escribió: Hi, I'm trying to obtain a list of users connected to a VM, using python SDK v4. Here's what I'm doing: vm = vms_service.list(search="name=vmname")[0] vm_service = vms_service.vm_service(vm.id) sessions = vm_service.sessions_service().list() But "sessions" is None. Same result using: s = connection.follow_link(vm.sessions) "s" is None. I tried also using curl, and if I connect to: https://my.ovirt.host/ovirt-engine/api/v4/vms//sessions I get a beautiful 404. Also using v3 of python SDK I obtain the same behaviour. So I suspect that retrieving user sessions via API is not implemented, is it? If not, what I'm doing wrong? I'm using RHV 4.0.6.3-0.1.el7ev Thanks in advance, Giulio ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK4: How to list user permissions?
El 2017-03-29 12:35, Juan Hernández escribió: On 03/29/2017 01:05 PM, nico...@devels.es wrote: Hi, I'm trying to get a user's list of permissions, i.e., list all permissions a user have on VMs and VmPools. In SDK3 that was easy as I could run (being 'u' a User object): for perm in u.permissions.list(): vm = perm.get_vm() vmpool = perm.get_vmpool() if vm or vmpool: print "User has some permissions!" In SDK4 I cannot reproduce the same logic. u.permissions returns an empty list ([]). What I have so far is something like this: for u in users_serv.list(): if u.user_name == 'admin@internal': continue vms_service = sys_serv.vms_service() for vm in vms_service.list(): vms = vms_service.vm_service(id=vm.id) ps = vms.permissions_service() for perm in ps.list(): perm_service = ps.permission_service(id=perm.id) getperm = perm_service.get() if getperm.user.user_name == u.user_name: print "Permission for %s" % (u.user_name) if getperm.vm: print "VM: %s" % (getperm.vm.id) if getperm.vm_pool: print "VmPool: %s" % (getperm.vm_pool.id) However, this seems a bit overkill. We have nearly 850 VMs and for a single user this takes about 25 minutes to run. Additionally, it doesn't seem to return any permission, although I know this user has some permissions over 2 VMs (not sure where is it messed up). I also tried using the system_service.permissions_service() but it seems to return only the global permissions. Is there an easier way to do this? Thanks! Version 4 of the SDK makes a clear distinction between what are pure containers of data (like the User class) and what are services (like the UsersService class). Therefore when you call 'u.permissions' in version 4 of the SD you get nothing, because the object that you retrieved previously doesn't contain the permissions, only a link. That is exactly how the API behaves. When you do this: GET /ovirt-engine/api/users/{user:id} You only get the data of the user, and some links to other related data, like the permissions: myuser ... In version 4 of the SDK the simple way to follow the link is to use the Connection.follow_link method. So, you need something like this: ---8<--- # Find the user: users_service = connection.system_service().users_service() user = users_service.list(search='name=myuser')[0] # Follow the link to the permissions of the user: perms = connection.follow_link(user.permissions) for perm in perms: if perm.vm or perm.vm_pool: print "User has some permissions!" --->8--- Thanks, that makes things much easier! Regards, Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK: ovirtsdk4.Connection object autologout?
ovirt-engine-backend-4.1.0.4-1.el7.centos.noarch El 2017-03-23 12:53, Ravi Nori escribió: Can you give me the exact rpm version of ovirt-engine-backend, I can give you a replacement jar file to test On Thu, Mar 23, 2017 at 3:56 AM,wrote: Hi Ravi, Could you please tell me what's the right way to apply this patch on an already working oVirt instance? I already have applied some patches on *.py files, but it seems the *.java files are not there. Thanks! El 2017-03-22 16:06, Ravi Nori escribió: Hi Nicolás, There has been some changes to how a session is refreshed after 4.0. So this is a BZ and is being tracked by BZ 1434605. Will post a patch to fix this. Thanks for reporting the issue. Ravi On Wed, Mar 22, 2017 at 9:10 AM, wrote: Hi Juan, I confirm this was working with 4.0.6 (but the same SDK package). The script is relatively new but I'm 100% sure it has been in execution for several weeks, in contrast to current version where after 5-6 iterations the exception starts showing up. I've voted for the bug and added myself as CC. Thank you. Regards, Nicolás El 2017-03-22 12:58, Juan Hernández escribió: On 03/22/2017 01:50 PM, Juan Hernández wrote: On 03/22/2017 01:10 PM, nico...@devels.es wrote: Hi, We've recently upgraded from oVirt 4.0.x to 4.1.0 and it seems that the behavior of a script we wrote in Python-SDK has changed slightly. We have a script that needs to be executed forever (daemon mode). This daemon creates an ovirtsdk4.Connection object and uses the same Connection object all the time. conn = sdk.Connection( url=URI, username=USERNAME, password=PASSWORD, ca_file=CAFILE ) Between iterations we have ~5 minutes delays which we accomplish with a time.sleep(...) call. After some of these iterations (5 or 6), when trying to perform an operation on the Connection object (in this case, listing all SDs): try: sys_serv = conn.system_service() sd_serv = sys_serv.storage_domains_service() storages = sd_serv.list(search=sd_search_query) except Error, e: log('ERR: Error getting storage domains: %s' % (e)) We start getting exceptions (i.e., the sd_serv.list() call throwing an Error exception) with this message: ERR: Error getting storage domains: HTTP response code is 401. I believe this has something to do with the Connection object expiring (even if it's not idle more than 5 minutes at any time). Is there a way to "refresh" the Connection object so it doesn't auto-logout (assuming this is the actual problem)? As I said, this started happening as of oVirt 4.1.0. ovirt-engine-sdk-python version is 4.1.1. Any ideas? This sound like this bug, opened yesterday: SSO token used for the API expires when running only queries https://bugzilla.redhat.com/1434605 [1] [1] But I thought the same happened in 4.0. Can you confirm that you don't see this problem in 4.0? Open possible workaround is to force a refresh of the backend session sending an external event, like in this example: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L112-L131 [2] [2] I also think that we need to modify the SDKs so that they detect expired SSO tokens and renew them automatically. I will open another bug for that. Here is the bug for adding automatic SSO token renew to the SDK, in case you want to follow/vote it: Implement automatic SSO token renew https://bugzilla.redhat.com/1434830 [3] [3] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [4] [4] Links: -- [1] https://bugzilla.redhat.com/1434605 [1] [2] https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L112-L131 [2] [3] https://bugzilla.redhat.com/1434830 [3] [4] http://lists.ovirt.org/mailman/listinfo/users [4] Links: -- [1] https://bugzilla.redhat.com/1434605 [2] https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L112-L131 [3] https://bugzilla.redhat.com/1434830 [4] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VM "hot" RAM memory decrease
El 2017-03-28 15:33, Martin Sivak escribió: min guaranteed should be respected, adding mom maintainer Martin I can't really help without the mom.log and the virsh dumpxml output of that VM in the final state (all memory ballooned). Min guaranteed should be respected, but the question is how the physical memory was measured (which number from top was used). -- Martin Sivak SLA / oVirt Hi Martin, I tried to reproduce the issue again and I was unable to. I had a host with ~90% of RAM utilization and in mom.log I could see that ballooning was indeed happening, but I couldn't see a VM going under its minimum guaranteed threshold (at least not significantly). On top, I was using the 'KiB Mem' value to compare. I know this is in KiB and that oVirt has its values as MB in the webadmin, but when I sent this message the difference was quite more significant (1024MB of minimum guaranteed and about 640K KiB on the VM). It's also true that meanwhile we upgraded from 4.0.2 to 4.1.1 and this time I couldn't reproduce it anymore. If at some point I am able to reproduce it again, I'll send detailed logs of the issue. Thanks. On Tue, Mar 28, 2017 at 4:29 PM, Michal Skrivanekwrote: On 27 Mar 2017, at 23:15, Nicolás wrote: Hi, I don't really know if this question is suitable on this list, as I doubt it's an oVirt bug, neither I know if it shall be considered a bug. We recently run a VM on a host that was memory over-used (around 80% of usage). The VM booted correctly, then we run "top" and saw how physical RAM started decreasing every two seconds. At first it was 4GB, then less and less until it stabilized at around 600MB. Based on this (correct me if I'm wrong), we believe this is an effect of having this VM with ballooning enabled, as it does exactly this: It adds/removes RAM depending on host decision. Thing is that this VM had a minimal guaranteed RAM of 1GB, so even if this happened due to ballooning, I'm not sure if it should have honored the minimum guaranteed RAM. When this happened, we run a 'ps' to see with what options the qemu process was invoked, and parameters seemed correct (that's why I don't know if it should be posted here or even if it's a bug). It does belong here, it’s a different component doing it “externally” to the qemu process- mom. Is this the expected behavior? min guaranteed should be respected, adding mom maintainer Martin Thanks, michal Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Python-SDK4: How to list user permissions?
Hi, I'm trying to get a user's list of permissions, i.e., list all permissions a user have on VMs and VmPools. In SDK3 that was easy as I could run (being 'u' a User object): for perm in u.permissions.list(): vm = perm.get_vm() vmpool = perm.get_vmpool() if vm or vmpool: print "User has some permissions!" In SDK4 I cannot reproduce the same logic. u.permissions returns an empty list ([]). What I have so far is something like this: for u in users_serv.list(): if u.user_name == 'admin@internal': continue vms_service = sys_serv.vms_service() for vm in vms_service.list(): vms = vms_service.vm_service(id=vm.id) ps = vms.permissions_service() for perm in ps.list(): perm_service = ps.permission_service(id=perm.id) getperm = perm_service.get() if getperm.user.user_name == u.user_name: print "Permission for %s" % (u.user_name) if getperm.vm: print "VM: %s" % (getperm.vm.id) if getperm.vm_pool: print "VmPool: %s" % (getperm.vm_pool.id) However, this seems a bit overkill. We have nearly 850 VMs and for a single user this takes about 25 minutes to run. Additionally, it doesn't seem to return any permission, although I know this user has some permissions over 2 VMs (not sure where is it messed up). I also tried using the system_service.permissions_service() but it seems to return only the global permissions. Is there an easier way to do this? Thanks! ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Python-SDK: ovirtsdk4.Connection object autologout?
Hi, We've recently upgraded from oVirt 4.0.x to 4.1.0 and it seems that the behavior of a script we wrote in Python-SDK has changed slightly. We have a script that needs to be executed forever (daemon mode). This daemon creates an ovirtsdk4.Connection object and uses the same Connection object all the time. conn = sdk.Connection( url=URI, username=USERNAME, password=PASSWORD, ca_file=CAFILE ) Between iterations we have ~5 minutes delays which we accomplish with a time.sleep(...) call. After some of these iterations (5 or 6), when trying to perform an operation on the Connection object (in this case, listing all SDs): try: sys_serv = conn.system_service() sd_serv = sys_serv.storage_domains_service() storages = sd_serv.list(search=sd_search_query) except Error, e: log('ERR: Error getting storage domains: %s' % (e)) We start getting exceptions (i.e., the sd_serv.list() call throwing an Error exception) with this message: ERR: Error getting storage domains: HTTP response code is 401. I believe this has something to do with the Connection object expiring (even if it's not idle more than 5 minutes at any time). Is there a way to "refresh" the Connection object so it doesn't auto-logout (assuming this is the actual problem)? As I said, this started happening as of oVirt 4.1.0. ovirt-engine-sdk-python version is 4.1.1. Any ideas? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK: ovirtsdk4.Connection object autologout?
Hi Juan, I confirm this was working with 4.0.6 (but the same SDK package). The script is relatively new but I'm 100% sure it has been in execution for several weeks, in contrast to current version where after 5-6 iterations the exception starts showing up. I've voted for the bug and added myself as CC. Thank you. Regards, Nicolás El 2017-03-22 12:58, Juan Hernández escribió: On 03/22/2017 01:50 PM, Juan Hernández wrote: On 03/22/2017 01:10 PM, nico...@devels.es wrote: Hi, We've recently upgraded from oVirt 4.0.x to 4.1.0 and it seems that the behavior of a script we wrote in Python-SDK has changed slightly. We have a script that needs to be executed forever (daemon mode). This daemon creates an ovirtsdk4.Connection object and uses the same Connection object all the time. conn = sdk.Connection( url=URI, username=USERNAME, password=PASSWORD, ca_file=CAFILE ) Between iterations we have ~5 minutes delays which we accomplish with a time.sleep(...) call. After some of these iterations (5 or 6), when trying to perform an operation on the Connection object (in this case, listing all SDs): try: sys_serv = conn.system_service() sd_serv = sys_serv.storage_domains_service() storages = sd_serv.list(search=sd_search_query) except Error, e: log('ERR: Error getting storage domains: %s' % (e)) We start getting exceptions (i.e., the sd_serv.list() call throwing an Error exception) with this message: ERR: Error getting storage domains: HTTP response code is 401. I believe this has something to do with the Connection object expiring (even if it's not idle more than 5 minutes at any time). Is there a way to "refresh" the Connection object so it doesn't auto-logout (assuming this is the actual problem)? As I said, this started happening as of oVirt 4.1.0. ovirt-engine-sdk-python version is 4.1.1. Any ideas? This sound like this bug, opened yesterday: SSO token used for the API expires when running only queries https://bugzilla.redhat.com/1434605 But I thought the same happened in 4.0. Can you confirm that you don't see this problem in 4.0? Open possible workaround is to force a refresh of the backend session sending an external event, like in this example: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L112-L131 I also think that we need to modify the SDKs so that they detect expired SSO tokens and renew them automatically. I will open another bug for that. Here is the bug for adding automatic SSO token renew to the SDK, in case you want to follow/vote it: Implement automatic SSO token renew https://bugzilla.redhat.com/1434830 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Python-SDK4: Listing template by ID throws exception
Hi, I'm using ovirt-engine-sdk-python 4.1.3 (ovirt ver is 4.1.0), and in a snippet I'm trying to get a template by its id. For that, I did this: conn = ovirtsdk4.Connection(...) sys_serv = conn.system_service() tpl_serv = sys_serv.templates_service() t = tpl_serv.list(search='id=fedff75f-635f-4790-9bbf-2ac389e14f93') And it throws: Error: Fault reason is "Operation Failed". Fault detail is "statementcallback; bad sql grammar [select * from (select * from vm templates view where ( vmt guid in (select distinct vm templates storage domain.vmt guid from vm templates storage domain where ( vm templates storage domain.cluster name ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.description ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.free text comment ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.name ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.quota name ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.storage pool name ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.template version name,template version number ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' ) )) order by name asc ) as t1 offset (1 -1) limit 2147483647]; nested exception is org.postgresql.util.psqlexception: error: argument of or must be type boolean, not type character varying position: 737". HTTP response code is 400. I'm sure this template exists and it has this ID. If I search in the webadmin by this ID, the search seems to hang and never returns anything (I have to stop it by pressing the 'X' button). Am I using this call improperly? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK4: Listing template by ID throws exception
El 2017-04-04 10:22, Juan Hernández escribió: On 04/04/2017 10:59 AM, nico...@devels.es wrote: Hi, I'm using ovirt-engine-sdk-python 4.1.3 (ovirt ver is 4.1.0), and in a snippet I'm trying to get a template by its id. For that, I did this: conn = ovirtsdk4.Connection(...) sys_serv = conn.system_service() tpl_serv = sys_serv.templates_service() t = tpl_serv.list(search='id=fedff75f-635f-4790-9bbf-2ac389e14f93') And it throws: Error: Fault reason is "Operation Failed". Fault detail is "statementcallback; bad sql grammar [select * from (select * from vm templates view where ( vmt guid in (select distinct vm templates storage domain.vmt guid from vm templates storage domain where ( vm templates storage domain.cluster name ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.description ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.free text comment ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.name ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.quota name ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.storage pool name ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' or vm templates storage domain.template version name,template version number ilike '%id=fedff75f-635f-4790-9bbf-2ac389e14f93%' ) )) order by name asc ) as t1 offset (1 -1) limit 2147483647]; nested exception is org.postgresql.util.psqlexception: error: argument of or must be type boolean, not type character varying position: 737". HTTP response code is 400. I'm sure this template exists and it has this ID. If I search in the webadmin by this ID, the search seems to hang and never returns anything (I have to stop it by pressing the 'X' button). Am I using this call improperly? Thanks. This should work, or at least it shouldn't generate that error. But it isn't the best way to get a template (or any object) if you already know the id. It is better to do this: conn = ovirtsdk4.Connection(...) sys_serv = conn.system_service() tpls_serv = sys_serv.templates_service() tpl_serv = tpls_serv.tmeplate_service('fedff75f-635f-4790-9bbf-2ac389e14f93') tpl = tpl_serv.get() Thanks Juan, this way it worked. Regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Storage balancer project
Hi, I implemented a storage domain balancer [1], i.e. a script that tries to keep all storage domains under a defined threshold. We use our oVirt infrastructure for teaching so have several hundreds of users and cca. 800 VMs at this time, so something like this is really needed considering that when students create their VMs they tend to create their disks under the same storage domain (normally the first available one). This results in one or two heavily used SDs and the rest underused. I tried to keep it as simple as possible and doesn't have many features, but it seems to work (I tried it under our conditions: About 10 SDs, relatively highly used). If someone want to improve something on it, pull requests are welcome. Might also be an inspiration on [2]. Regards. [1]: https://github.com/nkovacne/ovirt-storage-balancer [2]: https://bugzilla.redhat.com/show_bug.cgi?id=1331544 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Storage balancer project
Hi, I added the LICENCE file [1] to the project. Regards. [1]: https://github.com/nkovacne/ovirt-storage-balancer/blob/master/LICENCE El 2017-03-07 06:36, Yaniv Kaul escribió: On Mon, Mar 6, 2017, 10:18 PMwrote: Hi, I implemented a storage domain balancer [1], i.e. a script that tries to keep all storage domains under a defined threshold. We use our oVirt infrastructure for teaching so have several hundreds of users and cca. 800 VMs at this time, so something like this is really needed considering that when students create their VMs they tend to create their disks under the same storage domain (normally the first available one). This results in one or two heavily used SDs and the rest underused. I tried to keep it as simple as possible and doesn't have many features, but it seems to work (I tried it under our conditions: About 10 SDs, relatively highly used). If someone want to improve something on it, pull requests are welcome. Might also be an inspiration on [2]. Regards. [1]: https://github.com/nkovacne/ovirt-storage-balancer [1] Can you clarify the license? Y. [2]: https://bugzilla.redhat.com/show_bug.cgi?id=1331544 [2] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [3] Links: -- [1] https://github.com/nkovacne/ovirt-storage-balancer [2] https://bugzilla.redhat.com/show_bug.cgi?id=1331544 [3] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Help get oVirt's add featured on Stack Overflow
El 2017-06-29 17:27, Allon Mureinik escribió: Hi lists, Thanks to Eldan, we have a community ad for oVirt proposed on Stack Overflow [1]. Now, we need some upvotes (current threshold is 6) before SO starts serving it. Unless some hater downvotes, it has just reached the 6 votes threshold ;-) Have a SO account? Want to help? Just drop by and upvote. Have a great weekend, Allon [1] https://meta.stackoverflow.com/a/351453/2422776 [1] Links: -- [1] https://meta.stackoverflow.com/a/351453/2422776 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK4: Shutdown a machine with a specific message?
El 2017-05-12 10:11, Juan Hernández escribió: On 05/12/2017 09:46 AM, nico...@devels.es wrote: Hi, Using Python-SDK4, is there a way to shutdown a machine with a specific message? In code I just see this definition: def shutdown( self, async=None, headers=None, query=None, ): I wonder if some header allows specifying the message here. Currently there is no way to specify that message using the API. Can you open a RFE requesting it? Done [1]. Thanks! [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1450351 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Renaming VM needs restart?
Hi, We're using oVirt 4.1.1.8-1. I just edited a powered on VM to rename it and a popup was shown stating that a restart is required. Is that new, or is it a bug? I remember not having to do so in prior versions. I'm attaching a snapshot. Thanks. Regards.___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VDSM fails after a while
El 2017-05-26 12:00, nico...@devels.es escribió: El 2017-05-26 11:24, Michal Skrivanek escribió: On 26 May 2017, at 12:07, nico...@devels.es wrote: Hi, We recently upgraded vdsm on a host using the webadmin. After activating it, it kept failing so we tried to activate it back via 'systemctl start vdsmd'. # systemctl start vdsmd Job for vdsmd.service failed because the control process exited with error code. See "systemctl status vdsmd.service" and "journalctl -xe" for details. Having a look at the status of the process I see: # systemctl status vdsmd ● vdsmd.service - Virtual Desktop Server Manager Loaded: loaded (/usr/lib/systemd/system/vdsmd.service; enabled; vendor preset: enabled) Active: failed (Result: start-limit) since vie 2017-05-26 11:02:41 WEST; 14s ago Process: 25018 ExecStartPre=/usr/libexec/vdsm/vdsmd_init_common.sh --pre-start (code=exited, status=1/FAILURE) may 26 11:02:40 systemd[1]: Failed to start Virtual Desktop Server Manager. may 26 11:02:40 systemd[1]: Unit vdsmd.service entered failed state. may 26 11:02:40 systemd[1]: vdsmd.service failed. may 26 11:02:41 systemd[1]: vdsmd.service holdoff time over, scheduling restart. may 26 11:02:41 systemd[1]: start request repeated too quickly for vdsmd.service may 26 11:02:41 systemd[1]: Failed to start Virtual Desktop Server Manager. may 26 11:02:41 systemd[1]: Unit vdsmd.service entered failed state. may 26 11:02:41 systemd[1]: vdsmd.service failed. To check what happened I run the vdsm_init_common.sh script by myself and saw: # /usr/libexec/vdsm/vdsmd_init_common.sh --pre-start vdsm: Running mkdirs vdsm: Running configure_coredump vdsm: Running configure_vdsm_logs vdsm: Running wait_for_network vdsm: Running run_init_hooks vdsm: Running upgraded_version_check vdsm: Running check_is_configured Current revision of multipath.conf detected, preserving lvm is configured for vdsm libvirt is not configured for vdsm yet Modules sebool, passwd, libvirt are not configured so when that happens, can you check the content of e.g. /etc/libvirt/libvirtd.conf if it contains the vdsm config at the end? Is it replaced by something you may run in your environment? Are there other packages pending upgrade? Ok, indeed Chef is doing weird things as even if the package is installed, it's reinstalling it everytime it runs. To be more specific, all our configuration is managed with Chef. Up until this vdsm version (4.19.15-1.el7.centos.x86_64), vdsm had a dependency to 'ntp'. As of now, the dependency was changed to chrony (a logical change BTW). So our chef configuration was forcing installing ntp, which uninstalled vdsm for dependencies and then it reinstalled vdsm, but unconfigured. Thanks. Regards. Thanks! Thanks, michal Error: One of the modules is not configured to work with VDSM. To configure the module use the following: 'vdsm-tool configure [--module module-name]'. If all modules are not configured try to use: 'vdsm-tool configure --force' (The force flag will stop the module's service and start it afterwards automatically to load the new configuration.) vdsm: stopped during execute check_is_configured task (task returned with error code 1). - I run the 'vdsm-tool configure --force' command, it ends successfully and after that I can start the vdsmd process. But... after a while it fails again and I need to re-run the same command all the time. Is this a known bug? any temporary workaround? Versions: vdsm-4.19.15-1.el7.centos.x86_64 libvirt-2.0.0-10.el7_3.5.x86_64 Thanks. Regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] VDSM fails after a while
Hi, We recently upgraded vdsm on a host using the webadmin. After activating it, it kept failing so we tried to activate it back via 'systemctl start vdsmd'. # systemctl start vdsmd Job for vdsmd.service failed because the control process exited with error code. See "systemctl status vdsmd.service" and "journalctl -xe" for details. Having a look at the status of the process I see: # systemctl status vdsmd ● vdsmd.service - Virtual Desktop Server Manager Loaded: loaded (/usr/lib/systemd/system/vdsmd.service; enabled; vendor preset: enabled) Active: failed (Result: start-limit) since vie 2017-05-26 11:02:41 WEST; 14s ago Process: 25018 ExecStartPre=/usr/libexec/vdsm/vdsmd_init_common.sh --pre-start (code=exited, status=1/FAILURE) may 26 11:02:40 systemd[1]: Failed to start Virtual Desktop Server Manager. may 26 11:02:40 systemd[1]: Unit vdsmd.service entered failed state. may 26 11:02:40 systemd[1]: vdsmd.service failed. may 26 11:02:41 systemd[1]: vdsmd.service holdoff time over, scheduling restart. may 26 11:02:41 systemd[1]: start request repeated too quickly for vdsmd.service may 26 11:02:41 systemd[1]: Failed to start Virtual Desktop Server Manager. may 26 11:02:41 systemd[1]: Unit vdsmd.service entered failed state. may 26 11:02:41 systemd[1]: vdsmd.service failed. To check what happened I run the vdsm_init_common.sh script by myself and saw: # /usr/libexec/vdsm/vdsmd_init_common.sh --pre-start vdsm: Running mkdirs vdsm: Running configure_coredump vdsm: Running configure_vdsm_logs vdsm: Running wait_for_network vdsm: Running run_init_hooks vdsm: Running upgraded_version_check vdsm: Running check_is_configured Current revision of multipath.conf detected, preserving lvm is configured for vdsm libvirt is not configured for vdsm yet Modules sebool, passwd, libvirt are not configured Error: One of the modules is not configured to work with VDSM. To configure the module use the following: 'vdsm-tool configure [--module module-name]'. If all modules are not configured try to use: 'vdsm-tool configure --force' (The force flag will stop the module's service and start it afterwards automatically to load the new configuration.) vdsm: stopped during execute check_is_configured task (task returned with error code 1). - I run the 'vdsm-tool configure --force' command, it ends successfully and after that I can start the vdsmd process. But... after a while it fails again and I need to re-run the same command all the time. Is this a known bug? any temporary workaround? Versions: vdsm-4.19.15-1.el7.centos.x86_64 libvirt-2.0.0-10.el7_3.5.x86_64 Thanks. Regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK4: Managing accents?
Currently all our scripts are python2-based, not sure if running them with Python3 would need a major change, but currently we're happy with Python2. I'm still not clear if this is a bug or an additional option should be supplied in order to make this work. Thanks. El 2017-06-12 14:48, Fabrice Bacchella escribió: Did you try with python 3 ? UTF management changed a lot with this version, it might works better in your case. Le 12 juin 2017 à 12:33, nico...@devels.es a écrit : Hi, We're running Python SDK (ovirt-engine-sdk-python) ver 4.1.4 and we're having some issues getting values that contain accents. For example, this snippet fails: import ovirtsdk4 as sdk import ovirtsdk4.types as types # Create the connection to the server: connection = sdk.Connection( url='https://fqdn/ovirt-engine/api', username='...', password='...', ca_file='...', debug=True, ) users_service = connection.system_service().users_service() users = users_service.list() connection.close() This snippet fails in the "users = users_service.list()" line, because one of the records have a tilde (ó). The trace is: Traceback (most recent call last): File "lista_users", line 23, in users = users_service.list() File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/services.py", line 22155, in list return self._internal_get(headers, query, wait) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 202, in _internal_get return future.wait() if wait else future File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 53, in wait return self._code(response) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 197, in callback return self._internal_read_body(response) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 310, in _internal_read_body return reader.Reader.read(response.body) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/reader.py", line 297, in read cursor = xml.XmlReader(io.BytesIO(source.encode('utf-8'))) UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 1899: ordinal not in range(128) Opening the source code (ovirtsdk4/reader.py) file and seeking the exact line that fails I can see: if isinstance(source, str): cursor = xml.XmlReader(io.BytesIO(source.encode('utf-8'))) If I add a line just after the 'if' being "cursor = cursor.decode('utf-8')", it seems to work, but I guess the source code should handle this kind of situations. Is this a known issue? Should I open a BZ? Any workaround meanwhile? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK4: Managing accents?
El 2017-06-13 13:30, Juan Hernández escribió: On 06/13/2017 01:58 PM, nico...@devels.es wrote: Currently all our scripts are python2-based, not sure if running them with Python3 would need a major change, but currently we're happy with Python2. I'm still not clear if this is a bug or an additional option should be supplied in order to make this work. Thanks. It is a but. I think it was introduced recently. Please try to use version 4.1.3 and check if it works correctly. Open a bug reporting the results. We will probably need to do something like this to fix it: Fix parsing of multi-byte UTF-8 characters https://gerrit.ovirt.org/78112 Done [1]. Thanks! [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1461060 El 2017-06-12 14:48, Fabrice Bacchella escribió: Did you try with python 3 ? UTF management changed a lot with this version, it might works better in your case. Le 12 juin 2017 à 12:33, nico...@devels.es a écrit : Hi, We're running Python SDK (ovirt-engine-sdk-python) ver 4.1.4 and we're having some issues getting values that contain accents. For example, this snippet fails: import ovirtsdk4 as sdk import ovirtsdk4.types as types # Create the connection to the server: connection = sdk.Connection( url='https://fqdn/ovirt-engine/api', username='...', password='...', ca_file='...', debug=True, ) users_service = connection.system_service().users_service() users = users_service.list() connection.close() This snippet fails in the "users = users_service.list()" line, because one of the records have a tilde (ó). The trace is: Traceback (most recent call last): File "lista_users", line 23, in users = users_service.list() File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/services.py", line 22155, in list return self._internal_get(headers, query, wait) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 202, in _internal_get return future.wait() if wait else future File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 53, in wait return self._code(response) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 197, in callback return self._internal_read_body(response) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 310, in _internal_read_body return reader.Reader.read(response.body) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/reader.py", line 297, in read cursor = xml.XmlReader(io.BytesIO(source.encode('utf-8'))) UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 1899: ordinal not in range(128) Opening the source code (ovirtsdk4/reader.py) file and seeking the exact line that fails I can see: if isinstance(source, str): cursor = xml.XmlReader(io.BytesIO(source.encode('utf-8'))) If I add a line just after the 'if' being "cursor = cursor.decode('utf-8')", it seems to work, but I guess the source code should handle this kind of situations. Is this a known issue? Should I open a BZ? Any workaround meanwhile? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt sdk and pipelining
El 2017-06-16 08:52, Fabrice Bacchella escribió: I just read the blog entry about performance increate in for the python sdk (https://www.ovirt.org/blog/2017/05/higher-performance-for-python-sdk/). I'm quite sceptical about pipelining. I disagree. Even without reading the post you mention, we already noticed that since this version everything is working much faster than with prior versions. We have a lot of stuff implemented with Python-SDK but on one of them the effect is quite notorious: A script checks VMs' permissions and takes decisions based on them. Without pipelining this script took about 5 minutes to execute, with pipelining it doesn't take more than 15 seconds on a ~1000VMs infrastructure. Regards, Nicolás A few explanation about that can be found at: https://devcentral.f5.com/articles/http-pipelining-a-security-risk-without-real-performance-benefits https://stackoverflow.com/questions/14810890/what-are-the-disadvantages-of-using-http-pipelining It also talks about multiple connection, but don't use pycurl.CurlShare(). I thing this might be very helpfull, as it allows to share cookies, see https://curl.haxx.se/libcurl/c/CURLOPT_SHARE.html. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Python-SDK4: Managing accents?
Hi, We're running Python SDK (ovirt-engine-sdk-python) ver 4.1.4 and we're having some issues getting values that contain accents. For example, this snippet fails: import ovirtsdk4 as sdk import ovirtsdk4.types as types # Create the connection to the server: connection = sdk.Connection( url='https://fqdn/ovirt-engine/api', username='...', password='...', ca_file='...', debug=True, ) users_service = connection.system_service().users_service() users = users_service.list() connection.close() This snippet fails in the "users = users_service.list()" line, because one of the records have a tilde (ó). The trace is: Traceback (most recent call last): File "lista_users", line 23, in users = users_service.list() File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/services.py", line 22155, in list return self._internal_get(headers, query, wait) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 202, in _internal_get return future.wait() if wait else future File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 53, in wait return self._code(response) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 197, in callback return self._internal_read_body(response) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/service.py", line 310, in _internal_read_body return reader.Reader.read(response.body) File "/home/ovirt/prueba/ejemplo2/lib/python2.7/site-packages/ovirtsdk4/reader.py", line 297, in read cursor = xml.XmlReader(io.BytesIO(source.encode('utf-8'))) UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 1899: ordinal not in range(128) Opening the source code (ovirtsdk4/reader.py) file and seeking the exact line that fails I can see: if isinstance(source, str): cursor = xml.XmlReader(io.BytesIO(source.encode('utf-8'))) If I add a line just after the 'if' being "cursor = cursor.decode('utf-8')", it seems to work, but I guess the source code should handle this kind of situations. Is this a known issue? Should I open a BZ? Any workaround meanwhile? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Cannot move disk to a different DS
Hi, We're running oVirt 4.1.1.8. We have a Data Center which had one iSCSI-based storage domain (SD). Several machines were created and the SD got almost full, so we added another SD. This latter is iSCSI-based as well (actually, they're both on the same iSCSI backend), but when trying to move a disk to the new one, the "Target" field is empty and I have no options to migrate this disk to a different SD (see attached snapshot). The VM that uses this disk is powered off, FWIW. At the bottom I just get a message saying: The following disks cannot be moved: windows-server2012R2_Disk1, hover over a specific target domain selection for more info. How can I debug why the new SD is not accessible for moving disks? I tried creating a new VM on the new SD and it works fine, it's just the migration that doesn't work. Thanks.___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] News in version 4.1.5.2
Hi, We just upgraded to 4.1.5.2 and I see there are 2 news that I'd like to ask if they might be changed: 1) Up until now the "User admin@internal logged in." event didn't show up, which was a big plus to us because we have many scripts that connect to oVirt to do some tasks. As of this version I see this event is back :-( Is there a way to disable it so the events list won't get flooded of these kind of events? 2) The events list is now ordered top-down. Personally I consider this kind of unintuitive and would like to sort events as until now (more recent events on top). Is there a way to do this? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] News in version 4.1.5.2
El 2017-08-30 10:34, Martin Perina escribió: On Wed, Aug 30, 2017 at 11:06 AM, Gianluca Cecchiwrote: On Wed, Aug 30, 2017 at 11:01 AM, wrote: Hi, We just upgraded to 4.1.5.2 and I see there are 2 news that I'd like to ask if they might be changed: 1) Up until now the "User admin@internal logged in." event didn't show up, which was a big plus to us because we have many scripts that connect to oVirt to do some tasks. As of this version I see this event is back :-( Is there a way to disable it so the events list won't get flooded of these kind of events? The absence of "User xxx logged in" events was a regression since 4.0, which was fixed in 4.1.2 [1]. Which language are your scripts implemented in? Are you reusing connections or are you logging in and out for each call? We're using Python-SDK. On reusing connections, it depends. Some scripts do reuse connections (they open a connection and put the main implementation inside an endless loop with a sleep() call at the end), but others don't because of their nature. I guess we could try to reimplement them in a way that just one connection would be opened, but currently I'm not sure if all of them can be reimplemented this way. Thanks Martin Perina [1] https://bugzilla.redhat.com/show_bug.cgi?id=1426715 [3] In my case I desired in previous versions to have it added and now I'm happy, but I understand your reason. The best would be to have it customizable. I suggest to submit an RFE 2) The events list is now ordered top-down. Personally I consider this kind of unintuitive and would like to sort events as until now (more recent events on top). Is there a way to do this? Bug already opened: https://bugzilla.redhat.com/show_bug.cgi?id=1486513 [1] Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [2] Links: -- [1] https://bugzilla.redhat.com/show_bug.cgi?id=1486513 [2] http://lists.ovirt.org/mailman/listinfo/users [3] https://bugzilla.redhat.com/show_bug.cgi?id=1426715 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Cannot set storage domain on maintenance
Hi, We're running ovirt-engine-4.1.5.2-1 and we're trying to set one of the storage domains on maintenance in order to remove it, as there's nothing left on it besides some templates. To do so, I open the 'Data Centers' tab, then the 'Storage' subtab, select the storage domain and click on 'Maintenance'. When asked for confirmation I click OK. After that, this error message is shown: Error while executing action: Cannot deactivate Storage while there are running tasks on this Storage. -Please wait until tasks will finish and try again. As far as I know, there are no pending tasks on this storage. The Events tab only shows a movement of a disk which has nothing to do with this storage domain. What can I do to solve this? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Cannot set storage domain on maintenance
In the engine.log I can see this: 2017-09-26 13:35:33,345+01 INFO [org.ovirt.engine.core.bll.tasks.AsyncTaskManager] (DefaultQuartzScheduler7) [6a4aa90c] Polling and updating Async Tasks: 2 tasks, 1 tasks to poll now 2017-09-26 13:35:34,500+01 INFO [org.ovirt.engine.core.bll.storage.domain.DeactivateStorageDomainWithOvfUpdateCommand] (default task-37) [2ec47109-db9d-425c-85fc-ee555e7dc4db] Lock Acquired to object 'EngineLock:{exclusiveLocks='[4886-cee8-47ba-a679-16a7db522779=STORAGE]', sharedLocks='[75bf8f48-970f-42bc-8596-f8ab6efb2b63=POOL]'}' 2017-09-26 13:35:34,580+01 WARN [org.ovirt.engine.core.bll.storage.domain.DeactivateStorageDomainWithOvfUpdateCommand] (default task-37) [2ec47109-db9d-425c-85fc-ee555e7dc4db] Validation of action 'DeactivateStorageDomainWithOvfUpdate' failed for user admin@internal. Reasons: VAR__TYPE__STORAGE__DOMAIN,VAR__ACTION__DEACTIVATE,ERROR_CANNOT_DEACTIVATE_DOMAIN_WITH_TASKS 2017-09-26 13:35:34,581+01 INFO [org.ovirt.engine.core.bll.storage.domain.DeactivateStorageDomainWithOvfUpdateCommand] (default task-37) [2ec47109-db9d-425c-85fc-ee555e7dc4db] Lock freed to object 'EngineLock:{exclusiveLocks='[4886-cee8-47ba-a679-16a7db522779=STORAGE]', sharedLocks='[75bf8f48-970f-42bc-8596-f8ab6efb2b63=POOL]'}' 2017-09-26 13:35:36,440+01 INFO [org.ovirt.engine.core.bll.tasks.AsyncTaskManager] (DefaultQuartzScheduler7) [6a4aa90c] Finished polling Tasks, will poll again in 10 seconds. El 2017-09-26 13:34, nico...@devels.es escribió: Hi, We're running ovirt-engine-4.1.5.2-1 and we're trying to set one of the storage domains on maintenance in order to remove it, as there's nothing left on it besides some templates. To do so, I open the 'Data Centers' tab, then the 'Storage' subtab, select the storage domain and click on 'Maintenance'. When asked for confirmation I click OK. After that, this error message is shown: Error while executing action: Cannot deactivate Storage while there are running tasks on this Storage. -Please wait until tasks will finish and try again. As far as I know, there are no pending tasks on this storage. The Events tab only shows a movement of a disk which has nothing to do with this storage domain. What can I do to solve this? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Cannot set storage domain on maintenance
Unfortunately it didn't work in this case. I also tried to cleanup entities just in case by running: # PGPASSWORD=... /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh -t all -u engine select fn_db_unlock_all(); INSERT 0 1 unlock all completed successfully. It seems it clear a hung task but still cannot fix the issue. Thanks anyway. El 2017-09-26 13:44, Maton, Brett escribió: It's not the most elegant or guaranteed to fix your issue, but I've found that running engine-setup again on the hosted-engine server usually cleans up broken and orphaned tasks. Any running VM's will stay up, you'll just briefly loose access to the UI while engine-setup restarts the interface. On 26 September 2017 at 13:36,wrote: In the engine.log I can see this: 2017-09-26 13:35:33,345+01 INFO [org.ovirt.engine.core.bll.tasks.AsyncTaskManager] (DefaultQuartzScheduler7) [6a4aa90c] Polling and updating Async Tasks: 2 tasks, 1 tasks to poll now 2017-09-26 13:35:34,500+01 INFO [org.ovirt.engine.core.bll.storage.domain.DeactivateStorageDomainWithOvfUpdateCommand] (default task-37) [2ec47109-db9d-425c-85fc-ee555e7dc4db] Lock Acquired to object 'EngineLock:{exclusiveLocks='[4886-cee8-47ba-a679-16a7db522779=STORAGE]', sharedLocks='[75bf8f48-970f-42bc-8596-f8ab6efb2b63=POOL]'}' 2017-09-26 13:35:34,580+01 WARN [org.ovirt.engine.core.bll.storage.domain.DeactivateStorageDomainWithOvfUpdateCommand] (default task-37) [2ec47109-db9d-425c-85fc-ee555e7dc4db] Validation of action 'DeactivateStorageDomainWithOvfUpdate' failed for user admin@internal. Reasons: VAR__TYPE__STORAGE__DOMAIN,VAR__ACTION__DEACTIVATE,ERROR_CANNOT_DEACTIVATE_DOMAIN_WITH_TASKS 2017-09-26 13:35:34,581+01 INFO [org.ovirt.engine.core.bll.storage.domain.DeactivateStorageDomainWithOvfUpdateCommand] (default task-37) [2ec47109-db9d-425c-85fc-ee555e7dc4db] Lock freed to object 'EngineLock:{exclusiveLocks='[4886-cee8-47ba-a679-16a7db522779=STORAGE]', sharedLocks='[75bf8f48-970f-42bc-8596-f8ab6efb2b63=POOL]'}' 2017-09-26 13:35:36,440+01 INFO [org.ovirt.engine.core.bll.tasks.AsyncTaskManager] (DefaultQuartzScheduler7) [6a4aa90c] Finished polling Tasks, will poll again in 10 seconds. El 2017-09-26 13:34, nico...@devels.es escribió: Hi, We're running ovirt-engine-4.1.5.2-1 and we're trying to set one of the storage domains on maintenance in order to remove it, as there's nothing left on it besides some templates. To do so, I open the 'Data Centers' tab, then the 'Storage' subtab, select the storage domain and click on 'Maintenance'. When asked for confirmation I click OK. After that, this error message is shown: Error while executing action: Cannot deactivate Storage while there are running tasks on this Storage. -Please wait until tasks will finish and try again. As far as I know, there are no pending tasks on this storage. The Events tab only shows a movement of a disk which has nothing to do with this storage domain. What can I do to solve this? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [1] ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [1] Links: -- [1] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VM Portal looking for translators
Hi, Spanish is currently translated at 100% as well. Regards. El 2017-08-14 19:37, Jakub Niedermertl escribió: Hi all, new VM Portal project [1] - a replacement of oVirt userportal - is looking for community translators. If you know any of * Chinese (Simplified) * French * German * Italian * Japanese * Korean * Portuguese * Russian * Spanish and want to join translation effort, please * sign up to Zanata translation environment [2] * request an access to language group of your choice [3] * and join us at [4] Thank you Regards Jakub [1]: https://github.com/oVirt/ovirt-web-ui [1] [2]: https://translate.zanata.org [2] [3]: https://translate.zanata.org/language/list [3] [4]: https://translate.zanata.org/iteration/view/ovirt-web-ui/1.2.0/languages [4] Links: -- [1] https://github.com/oVirt/ovirt-web-ui [2] https://translate.zanata.org [3] https://translate.zanata.org/language/list [4] https://translate.zanata.org/iteration/view/ovirt-web-ui/1.2.0/languages ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] User cannot create VMs having sufficient permissions to do so
Hi, We're running ovirt-4.1.6.2-1. We have a user that logs into the user portal and tries to create a VM, but a message claiming that "There is no Cluster on which you can create a VM. Please check Data Center status and Cluster permissions." shows up. However, this user has permissions on the cluster (both VmCreator and DiskProfileUser, and also has a Quota created on the Cluster which allows him to create VMs). When clicking on the 'New VM' button, all we see in the engine.log is: 2017-10-18 10:59:31,825+01 ERROR [org.ovirt.engine.core.bll.GetAllLabelsQuery] (default task-103) [c23549c6-37a4-48d7-923d-6618e027cdca] Query execution failed due to insufficient permissions. This user has pretty much the same permissions as thousands of users who can create VMs, but this one can't. How can we debug what's happening and how to solve it? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users