Re: [ovirt-devel] [ovirt-users] oVirt 3.5 test day 2 results

2014-07-31 Thread Jiri Belka
  '...no so usable', this is joke. It's real design failure. Do not take
  this personally but whoever approved this did bad job.
 
 No, of course: I'm not so proud of it too. :-)
 
 A previous attempt used ssh and scp to do all automatically but it was 
 rejected being judged not so secure.
 Avoiding to use ssh and scp so seams a strong requirement; if you have any 
 better idea feel free to propose it.

I will not repeat myself again in details, all setup should be done from
Admin portal, same was one adds a host.

Anyway, job spent time on this work is useless. I hope it will be moved
to trash bin, this is ridiculous.

What is obvious is that who designed this is not UNIX sysadmin oriented
junkie.

j.
___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel


Re: [ovirt-devel] [ovirt-users] oVirt 3.5 test day 2 results

2014-07-31 Thread Simone Tiraboschi




- Original Message -
 From: Jiri Belka jbe...@redhat.com
 To: Simone Tiraboschi stira...@redhat.com
 Cc: users us...@ovirt.org, devel@ovirt.org
 Sent: Thursday, July 31, 2014 8:26:20 AM
 Subject: Re: [ovirt-users] [ovirt-devel] oVirt 3.5 test day 2 results
 
   '...no so usable', this is joke. It's real design failure. Do not take
   this personally but whoever approved this did bad job.
  
  No, of course: I'm not so proud of it too. :-)
  
  A previous attempt used ssh and scp to do all automatically but it was
  rejected being judged not so secure.
  Avoiding to use ssh and scp so seams a strong requirement; if you have any
  better idea feel free to propose it.
 
 I will not repeat myself again in details, all setup should be done from
 Admin portal, same was one adds a host.
 
 Anyway, job spent time on this work is useless. I hope it will be moved
 to trash bin, this is ridiculous.
 
 What is obvious is that who designed this is not UNIX sysadmin oriented
 junkie.
 
 j.
 

The big part of this task was indeed to properly complete the modularization of 
engine setup: now you can run engine-setup only for the websocket-proxy stuff 
and it don't try anymore to setup jboss AS and DBMS stuff as it did in the 
past. We need that in any case.
The work on the console UI for websocket proxy cert was quite small since the 
'interface' is really simple.

Of course we can do better, but I'm not so sure we really need it now.

Actual solution can be judged cumbersome but I think that only a few sysadmin 
are really going to install the websocket proxy on a separate host; I'm almost 
sure that they aren't going to move it one day on an host and one day on 
another so a bit of manual work on my opinion can be acceptable on that.

Simone



___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel


Re: [ovirt-devel] [ovirt-users] oVirt 3.5 test day 2 results

2014-07-31 Thread Sven Kieske
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 30.07.2014 18:14, Simone Tiraboschi wrote:
 A previous attempt used ssh and scp to do all automatically but it
 was rejected being judged not so secure.
So who judged it?
Maybe he/she could share some
reasoning how this could be more
insecure and more error prone
than a clumsy do-this-by-hand-setup ?
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (MingW32)
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=E+4w
-END PGP SIGNATURE-
___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel


Re: [ovirt-devel] [VDSM] rhel6.5 vs rhel7 performance in sampling

2014-07-31 Thread Nir Soffer
- Original Message -
 From: Francesco Romani from...@redhat.com
 To: Nir Soffer nsof...@redhat.com
 Cc: devel@ovirt.org, Federico Simoncelli fsimo...@redhat.com
 Sent: Thursday, July 31, 2014 5:28:24 PM
 Subject: Re: [ovirt-devel] [VDSM] rhel6.5 vs rhel7 performance in sampling
 
 - Original Message -
  From: Nir Soffer nsof...@redhat.com
  To: Francesco Romani from...@redhat.com
  Cc: devel@ovirt.org, Federico Simoncelli fsimo...@redhat.com
  Sent: Thursday, July 31, 2014 4:16:04 PM
  Subject: Re: [ovirt-devel] [VDSM] rhel6.5 vs rhel7 performance in sampling
   Nothing fancy here, just the differences from RHEL6.5 to RHEL7.
   See the attached graphs:
   * baseline_{cpu,mem}.png is RHEL 6.5
   * baseline_{cpu,mem}_7.png is RHEL 7.0
   RHEL7 is so *much* better, switching the hypervisor host is by far
   the biggest (and easiest) gain we achieved so far.
  
  Are these showing the current vdsm code, before the scalable_sampling
  branch?
 
 exactly. Plain vanilla master.
 
   
   coming soon:
   - discussion about the impact of the scalable_sampling topic branch
  
  I want to see the numbers the new graphs
 
 sure, is the very next thing
 
   PS: a couple of updates about specific points (Michal, Nir)
   - still no luck with yappi on RHEL7, managed to do the above bench
 with 10 VMs and collected a profile.
  
  Can you share the profile with us?
 
 please find attached.

Thanks, looking

 
   - 30751 is a win, same of the last changes of
   http://gerrit.ovirt.org/#/c/29980/
 (revs 12, 13)
  
  More details?
 
 Yep, let me just re-run benchmarks to highlight the impact changes on
 isolation.
 
 After that I'll send a followup mail discussing the impact of
 - our new topic branch
 - our new topic branch + 30751
 on both RHEL 6.5 and 7.0
 
 not sure if it is worth to bench 29980 v13 directly or to have one set for
 29980 v11 and one for 29980 v13

I'm sure that you should not waste your time on comparing minor versions
of the patches.

We should focus on comparing master with master + latest scalable_sampling.

Nir
___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel


Re: [ovirt-devel] [VDSM] rhel6.5 vs rhel7 performance in sampling

2014-07-31 Thread Francesco Romani
- Original Message -
 From: Nir Soffer nsof...@redhat.com
 To: Francesco Romani from...@redhat.com
 Cc: devel@ovirt.org, Federico Simoncelli fsimo...@redhat.com
 Sent: Thursday, July 31, 2014 4:38:53 PM
 Subject: Re: [ovirt-devel] [VDSM] rhel6.5 vs rhel7 performance in sampling

  not sure if it is worth to bench 29980 v13 directly or to have one set for
  29980 v11 and one for 29980 v13
 
 I'm sure that you should not waste your time on comparing minor versions
 of the patches.
 
 We should focus on comparing master with master + latest scalable_sampling.

Then we are in perfect agreement :)

we have here master, I have master+lastest scalable_sampling (includes 30744) + 
30751
almost ready, I'll send that in a followup mail.

After that, if needed, we can start digging in details.

Bests,

-- 
Francesco Romani
RedHat Engineering Virtualization R  D
Phone: 8261328
IRC: fromani
___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel


Re: [ovirt-devel] [ovirt-users] oVirt 3.5 test day 2 results

2014-07-31 Thread Simone Tiraboschi




- Original Message -
 From: Sven Kieske svenkie...@gmail.com
 To: devel@ovirt.org
 Sent: Thursday, July 31, 2014 3:35:08 PM
 Subject: Re: [ovirt-devel] [ovirt-users]  oVirt 3.5 test day 2 results
 
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 On 30.07.2014 18:14, Simone Tiraboschi wrote:
  A previous attempt used ssh and scp to do all automatically but it
  was rejected being judged not so secure.
 So who judged it?
 Maybe he/she could share some
 reasoning how this could be more
 insecure and more error prone
 than a clumsy do-this-by-hand-setup ?

I just discussed it with Alon as it involves security concerns.
I think we found a good compromise adding also the opportunity to save the CSR 
into a file still asking to the user to manually transfer and sign it on the 
other host.
I'm going to fix it.


___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel