Hi community, I hope you can help me on this one. My oVirt cluster is deployed on an internal network (10.1.30.0/24). At the moment I am trying to make the VM-Portal publicly available so people can administer their vms with the portal and noVNC. I have read the oVirt Documentation (as well as trying a couple of things) and found that the best way to accomplish this is by installing a proxy server which proxies HTTP and HTTPS to the engine. To get the noVNC working I have to install the ovirt-engine-websocket-proxy on the proxy host as well and set it up.
For the proxy host I'm using centos 8. For the HTTP and HTTPS proxy I'm using haproxy (which is working perfectly already). For the noVNC Proxy I'm trying to follow the documentation (https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_cockpit_web_interface/#Migrating_the_Websocket_Proxy_to_a_Separate_Machine_SHE_cockpit_deploy) but am facing a couple of issues. Issues start with removing the websocket proxy from the engine machine. I put the cluster into global-maintenance-mode and run "engine-cleanup" as told in the docs: [root@engine ~]# engine-cleanup [ INFO ] Stage: Initializing [ INFO ] Stage: Environment setup Configuration files: /etc/ovirt-engine-setup.conf.d/10-packaging-jboss.conf, /etc/ovirt-engine-setup.conf.d/10-packaging.conf, /etc/ovirt-engine-setup.conf.d/20-setup-ovirt-post.conf Log file: /var/log/ovirt-engine/setup/ovirt-engine-remove-20210502182713-ne56jy.log Version: otopi-1.9.4 (otopi-1.9.4-1.el8) [ INFO ] Stage: Environment packages setup [ INFO ] Stage: Programs detection [ INFO ] Stage: Environment customization --== PRODUCT OPTIONS ==-- [ INFO ] Stage: Setup validation During execution engine service will be stopped (OK, Cancel) [OK]: [ INFO ] Hosted Engine HA is in Global Maintenance mode. All the installed ovirt components are about to be removed, data will be lost (OK, Cancel) [Cancel]: [ ERROR ] Failed to execute stage 'Setup validation': Aborted by user [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-remove-20210502182713-ne56jy.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20210502182730-cleanup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of cleanup failed As you can see the output differs a bit from the docs. Instead of being asked "Do you want to remove all components? (Yes, No) [Yes]: No" I'm being notified that all data will be lost when continuing. Of course I do not want to loose all data so I abort the cleanup. I then tried to just install the websocket-proxy on the proxy server and ran into the next issue. On the proxy server I am also following the docs and running "yum install ovirt-engine-websocket-proxy" followed by "engine-setup": [root@proxy ~]# engine-setup [ INFO ] Stage: Initializing [ INFO ] Stage: Environment setup Configuration files: /etc/ovirt-engine-setup.conf.d/10-packaging-jboss.conf Log file: /var/log/ovirt-engine/setup/ovirt-engine-setup-20210502183039-ydl26v.log Version: otopi-1.9.4 (otopi-1.9.4-1.el8) [ INFO ] Stage: Environment packages setup [ INFO ] Stage: Programs detection [ INFO ] Stage: Environment setup (late) [ INFO ] Stage: Environment customization --== PRODUCT OPTIONS ==-- Configure WebSocket Proxy on this host (Yes, No) [Yes]: --== PACKAGES ==-- [ INFO ] Checking for product updates... [ INFO ] DNF No matches found for the following disable plugin patterns: versionlock [ INFO ] No product updates found ### I've cut a bit of the output to keep it shorter ### [ INFO ] Stage: Transaction setup [ INFO ] Stopping websocket-proxy service [ INFO ] Stage: Misc configuration (early) [ INFO ] Stage: Package installation [ INFO ] Stage: Misc configuration [ ERROR ] Failed to execute stage 'Misc configuration': 'OVESETUP_SYSTEM/selinuxBooleans' [ INFO ] DNF Performing DNF transaction rollback [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20210502183039-ydl26v.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20210502183159-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed As you can see it failed at stage "'Misc configuration': 'OVESETUP_SYSTEM/selinuxBooleans'". Here I did try to disable SElinux as well as enforcing it (as set at default) without any success. Am I on the right approach to make the VM-Portal publicly avalible by doing this or is there a better / more supported way? Can you help me out on getting this running or pointing me in the right direction (if this is the right approach)? Thank you guys! Best regards, Tivon I'm new to the community but will help to keep oVirt growing and support where I can. _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VDGDOGB2UKLEYIJVTLLZMPZNSZRAM36Z/
