[ovirt-users] igmp snooping and bridging
Hi, I know this may sounds few related to oVirt, but here is what happened here : We have two oVirt datacenters in 3.4.1 (and 3.4 compat. level), and amongst many other things, we have a ctdb cluster composed of two nodes, each of them being in a different datacenter. Some days ago, I raise the compat. level from 3.3 to 3.4, upgraded the hosts of datacenter#1 from centOS 6.4 to 6.5 (datacenter#2 was already 6.5), and our two (VM)ctdb nodes (centOS 6.5) were constantly failing into cluster partition. Almost 3 days of googling lead me to a point that seems know for some times, being : multicast on bridged interfaces is more or less supported, or randomly supported. See : http://lists.corosync.org/pipermail/discuss/2012-November/002208.html On the concerned hosts, I tried the advised workaround, and yes, that stabilized the situation. I understand this is not directly oVirt/RHEV related, but I really don't get why this ctdb cluster has worked for months, and stopped recently (I'll have to deeply dig into the release notes of the upgraded packages and try to find something useful). I post that here to : - ask if some of you are also running clusters amongst VMs (not particularly amongst datacenters - VM discussion amongst hosts may also be an issue) - leave a trace in case that may help debug some setups Regards, -- Nicolas Ecarnot ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] How to change a pool's template
- Original Message - From: John Xue xgxj...@gmail.com To: users@ovirt.org Sent: Thursday, June 12, 2014 7:03:22 AM Subject: [ovirt-users] How to change a pool's template Hello I'm a new guy in ovirt 3.3.5, I try to change a pool's template. When I edit the pool, the option Based of Template is gay. How to do that? I don't want to delete and rebuild again. you cannot change pool's template, because it means replacing all the disks for all the vms in the pool, which is basically the same as removing the pool and creating a new one. but, you can do something similar in 3.4, using template versions: in 3.4, when you create the pool, you can select a template and LATEST as the version. when you create a new template, you can make it a version of the original template, and the pool will update to this template. you can read about it here http://www.ovirt.org/Features/Template_Versions Thank you! -- Regards, John Xue ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Host Installation fails - Package openstack-neutron cannot be found
Il 11/06/2014 09:25, Udaya Kiran P ha scritto:
Hi All,
I am trying to add a new Host, with External Network Provider - Neutron. Host
installation fails in oVirt Engine with below error.
Please help me resolve this
2014-06-11 12:54:34 ERROR otopi.plugins.otopi.packagers.yumpackager
yumpackager.error:97 Yum Cannot queue package openstack-neutron: Package
openstack-neutron cannot be found
2014-06-11 12:54:34 DEBUG otopi.context context._executeMethod:152 method
exception
Traceback (most recent call last):
File /tmp/ovirt-YnooVggSrR/pythonlib/otopi/context.py, line 142, in
_executeMethod
method['method']()
File
/tmp/ovirt-YnooVggSrR/otopi-plugins/ovirt-host-deploy/openstack/neutron.py,
line 81, in _packages
self.packager.installUpdate(('openstack-neutron',))
File /tmp/ovirt-YnooVggSrR/pythonlib/otopi/packager.py, line 139, in
installUpdate
ignoreErrors=ignoreErrors,
File /tmp/ovirt-YnooVggSrR/otopi-plugins/otopi/packagers/yumpackager.py,
line 295, in install
ignoreErrors=ignoreErrors
File /tmp/ovirt-YnooVggSrR/pythonlib/otopi/miniyum.py, line 865, in
install
**kwargs
File /tmp/ovirt-YnooVggSrR/pythonlib/otopi/miniyum.py, line 514, in _queue
package=package,
RuntimeError: Package openstack-neutron cannot be found
2014-06-11 12:54:34 ERROR otopi.context context._executeMethod:161 Failed to
execute stage 'Package installation': Package openstack-neutron cannot be
found
Looks like that package is not available on F19.
Thank you,
Regards,
Udaya Kiran
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] problem engine-manage-domains add ldap domain
I helped Lucas resolve this over IRC. This was an issue with his kerberos setup. Lucas, care to share here what issue did you discover? Yair - Original Message - From: lucas castro lucascastrobor...@gmail.com To: users@ovirt.org Sent: Wednesday, June 11, 2014 9:50:48 PM Subject: [ovirt-users] problem engine-manage-domains add ldap domain I'm trying to add a ldap domain to ovirt-engine, but getting problem with that. I sent three files with the engine-manage-domains log the krb5 config generated for testing and the tcpdump port 53 from my dns server can anybody help me to find what is happening? -- contatos: Celular: ( 99 ) 9143-5954 - Vivo skype: lucasd3castro msn: lucascastrobor...@hotmail.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Users seeing all vm's
On 06/06/2014 05:52 AM, Artur Sarkisyan wrote: Thanks for replay, I have an IPA server for authentication. I am trying some scenarios, but I would like to setup pools of vm's for users, actually one pool for one user. why one pool for one user? a pool allows you to give multiple users access to it, and, specify how many VMs each user can get from the pool. Kind regards, Artur On Thu, Jun 5, 2014 at 8:30 PM, Jeff Clay jeffc...@gmail.com mailto:jeffc...@gmail.com wrote: Yes, I have resolved this issue. It was due to my lack of understanding in how Ovirt expected things to be configured and setup. Are you using active directory for authentication and setting up pools of vm's for users to access? On Thu, Jun 5, 2014 at 1:10 PM, Artur Sarkisyan s.ar...@gmail.com mailto:s.ar...@gmail.com wrote: Hi Jeff, I would like to know if you have resolved this issue? At this moment i'm building a poc and i have the same problem like yours: All users can see all vm's. Do you have some suggestions for me ? Thanks in advanced. Kind regards, Artur On Tue, May 6, 2014 at 10:32 PM, Jeff Clay jeffc...@gmail.com mailto:jeffc...@gmail.com wrote: For some reason, when logged in as a user with a modifed copy role of UserRole (only has login permssion and VM - Basic Operations - Remote Log In permission) the user can see all of the VM's and has the ability to open a console, start, shutdown or suspend any of the VM's. I have verified that all of the VM's only show the SuperUser role in their permissions. I went through all of the roles and verified that the user is only a member of the Copy_of_UserRole. The only thing I can think of is that the user is inheriting permissions from something, but I can't find what it is or where. Any suggestions? Thanks. ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] help, manager hard drive died (3.3.4)
On 05/23/2014 01:28 PM, David Smith wrote: Hey Bob, Yea my method worked. I was able to copy the non-master data center VM data into the images folder on the master data center (now export domain) and import everything. This would have been tragic if there wasn't the hard disk space, would have required lots of big data shuffling. I've split the data center model so now we have two clusters with two masters, and will avoid using a non-master data center entirely due to this issue. The good news is it looks like we didn't lose any data. also worth mentioning the upcoming 3.5 feature which will allow you to import a data domain (master or not) to the engine, which is most useful for this case, and reduces the need for the 'convert to export, then import' games. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVirt May 2014 Updates
* What's New? * oVirt 3.4.2 Released http://lists.ovirt.org/pipermail/users/2014-June/025030.html * oVirt 3.5.0 Alpha 2 Released http://lists.ovirt.org/pipermail/users/2014-June/024983.html * Join oVirt Google Plus community page: https://plus.google.com/u/0/communities/109346090491400112913 * Folks aren't waiting for 3.5 release to start using this one http://www.ovirt.org/Features/oVirt_Windows_Guest_Tools * René Koch is looking for insights so he can extend his Monitoring plugin to Zabbix * oVirt Node with Kimchi http://www.udpwork.com/item/12557.html * Amador Pahim created a small gtk based user portal http://alturl.com/9n2ek * Started mirroring ovirt to http://ovirt-china.org/ so Chinese nationals can get access to our content. * Gianluca Cecchi is looking at localizing the GUI to Italian * Package spice-xpi is now in Trusty and Utopic (debian/ubuntu) https://bugs.launchpad.net/bugs/943510 * Events and Activities * oVirt workshop to be co-located with KVM Forum October 14 - 16, 2014 * We may be setting up a workshop/event in China sometime in late summer, based on feedback from China users group. OSCON is next up on July 20-24, 2014 * 适兕 (lijiangsheng1) presented oVirt FUDConf APAC 2014 Beijing http://lists.ovirt.org/pipermail/users/2014-May/024740.html * Douglas on FISL 15 http://dougsland.livejournal.com/123103.html How to install oVirt. Room 41D pic.twitter.com/jvBCEdFzH2 * René Koch reports on oVirt open source events in Austria http://lists.ovirt.org/pipermail/users/2014-May/024190.html * Recent Posts * Brian Profit posted on LWN: Virtual data center management with oVirt 3.4 http://lwn.net/Articles/600370/ * oVirt Korea Users Group - OVIRT 3.4 ON CENTOS 6.5 http://alturl.com/fvy3w * Setting up a TFTP server, PXE boot server with libvirt and virt-manager for ovirt-node (Douglas Landgraf) http://dougsland.livejournal.com/123242.html * Dan Kenigsberg was invited to the Xen Hackathon http://lists.ovirt.org/pipermail/devel/2014-June/007600.html * Related: Converting a VMware virtual machine to RHEV (KVM) http://alturl.com/2p6bw * Brian Proffitt reported on his trip to FISL http://t.co/kG2N20KP4H * Techblue Software @TechbluSoftware TBS has recently implemented a fully featured virtual data-center using ovirt. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Engine HA?
Dear all, If not using self hosted-engine solution, my Engine will install in dedicate machine. How should I make the engine become HA? Thanks Best Regards, Kevin Tang AMSV - STATE KEY LABORATORY OF ANALOG AND MIXED-SIGNAL VLSI University of Macau Tel: (+853) 8397-8035 From: Itamar Heim ih...@redhat.com To: kevint...@umac.mo, users@ovirt.org Date: 06/12/2014 04:07 AM Subject:Re: [ovirt-users] Engine HA? On 06/11/2014 04:16 AM, kevint...@umac.mo wrote: Dear all, I know oVirt Host (VM) can be HA and cluster, all VM can be migrate between all operational Node. Since the main oVirt Engine is standalone, event shelf-hosted engine, it still is a single Engine. I want to ensure my Engine can be HA, how should I do? Do I need to create a Cluster Linux first? hosted-engine has built-in HA mechanism for the engine, so if the host its running on has an issue, another host will launch the hosted engine. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Engine HA?
On 06/12/2014 05:44 AM, kevint...@umac.mo wrote: Dear all, If not using self hosted-engine solution, my Engine will install in dedicate machine. How should I make the engine become HA? easiest would be to run it as a VM on a clustering solution like Red Hat Cluster Suite or similar. Thanks Best Regards, Kevin Tang AMSV - STATE KEY LABORATORY OF ANALOG AND MIXED-SIGNAL VLSI University of Macau Tel: (+853) 8397-8035 From: Itamar Heim ih...@redhat.com To: kevint...@umac.mo, users@ovirt.org Date: 06/12/2014 04:07 AM Subject: Re: [ovirt-users] Engine HA? On 06/11/2014 04:16 AM, kevint...@umac.mo wrote: Dear all, I know oVirt Host (VM) can be HA and cluster, all VM can be migrate between all operational Node. Since the main oVirt Engine is standalone, event shelf-hosted engine, it still is a single Engine. I want to ensure my Engine can be HA, how should I do? Do I need to create a Cluster Linux first? hosted-engine has built-in HA mechanism for the engine, so if the host its running on has an issue, another host will launch the hosted engine. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Call for Papers Deadline on Sunday: Fossetcon 2014
Conference: Fossetcon 2014 Information: Fossetcon relies on the Free and Open Source Software Community for support in making Fossetcon a memorable event that aims to be: The Gateway to the Open Source Community. They are currently seeking talks on virtualization. Date: Sept 11-13, 2014 Location: Orlando, Florida Website: http://fossetcon.org/2014/ Call for Papers Deadline: June 15, 2014 Call for Papers URL: http://fossetcon.org/2014/call-papers-and-registration -- Brian Proffitt oVirt Community Manager Project Atomic Community Lead Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 574 383 9BKP IRC: bkp @ OFTC ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Engine HA?
Hi kevin: I'm afraid there's no other better solutions for engine HA without hosted-engine. But do you mean the architecture mentioned in http://www.ovirt.org/Features/Engine_High_Availability ? If yes, I'll say this is a complex task which is currently just some thoughts and need deep research. Thanks plysan 2014-06-12 17:44 GMT+08:00 kevint...@umac.mo: Dear all, If not using self hosted-engine solution, my Engine will install in dedicate machine. How should I make the engine become HA? Thanks Best Regards, Kevin Tang AMSV - STATE KEY LABORATORY OF ANALOG AND MIXED-SIGNAL VLSI University of Macau Tel: (+853) 8397-8035 From:Itamar Heim ih...@redhat.com To:kevint...@umac.mo, users@ovirt.org Date:06/12/2014 04:07 AM Subject:Re: [ovirt-users] Engine HA? -- On 06/11/2014 04:16 AM, kevint...@umac.mo wrote: Dear all, I know oVirt Host (VM) can be HA and cluster, all VM can be migrate between all operational Node. Since the main oVirt Engine is standalone, event shelf-hosted engine, it still is a single Engine. I want to ensure my Engine can be HA, how should I do? Do I need to create a Cluster Linux first? hosted-engine has built-in HA mechanism for the engine, so if the host its running on has an issue, another host will launch the hosted engine. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Host Installation fails - Package openstack-neutron cannot be found
- Original Message -
From: Udaya Kiran P ukiran...@yahoo.in
To: users users@ovirt.org
Sent: Wednesday, June 11, 2014 10:25:37 AM
Subject: [ovirt-users] Host Installation fails - Package openstack-neutron
cannot be found
Hi All,
I am trying to add a new Host, with External Network Provider - Neutron. Host
installation fails in oVirt Engine with below error.
What is the version of the neutron server you're using ?
you can find repositories here:
http://repos.fedorapeople.org/repos/openstack/openstack-havana/
Please help me resolve this
2014-06-11 12:54:34 ERROR otopi.plugins.otopi.packagers.yumpackager
yumpackager.error:97 Yum Cannot queue package openstack-neutron: Package
openstack-neutron cannot be found
2014-06-11 12:54:34 DEBUG otopi.context context._executeMethod:152 method
exception
Traceback (most recent call last):
File /tmp/ovirt-YnooVggSrR/pythonlib/otopi/context.py, line 142, in
_executeMethod
method['method']()
File
/tmp/ovirt-YnooVggSrR/otopi-plugins/ovirt-host-deploy/openstack/neutron.py,
line 81, in _packages
self.packager.installUpdate(('openstack-neutron',))
File /tmp/ovirt-YnooVggSrR/pythonlib/otopi/packager.py, line 139, in
installUpdate
ignoreErrors=ignoreErrors,
File /tmp/ovirt-YnooVggSrR/otopi-plugins/otopi/packagers/yumpackager.py,
line 295, in install
ignoreErrors=ignoreErrors
File /tmp/ovirt-YnooVggSrR/pythonlib/otopi/miniyum.py, line 865, in install
**kwargs
File /tmp/ovirt-YnooVggSrR/pythonlib/otopi/miniyum.py, line 514, in _queue
package=package,
RuntimeError: Package openstack-neutron cannot be found
2014-06-11 12:54:34 ERROR otopi.context context._executeMethod:161 Failed to
execute stage 'Package installation': Package openstack-neutron cannot be
found
Thank you,
Regards,
Udaya Kiran
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Engine HA?
I have already done a POC. I'm going eventually to post inside the mailing list the gory details so that you could check and give feedback and then I go contribute in the wiki. Let me recollect the doc with the steps. Basic system was CentOS 6.5 with Pacemaker and cman. The filesystem resources (for postgres, etc..) were managed in drbd primary/secondary. At the end you would have somethng like this: [root@ovirteng01 ~]# crm_mon -1 Last updated: Thu Jun 12 12:21:13 2014 Last change: Fri Mar 14 15:30:57 2014 via cibadmin on ovirteng01.localdomain.local Stack: cman Current DC: ovirteng02.localdomain.local - partition with quorum Version: 1.1.10-14.el6_5.2-368c726 2 Nodes configured 13 Resources configured Online: [ ovirteng01.localdomain.local ovirteng02.localdomain.local ] Master/Slave Set: ms_OvirtData [OvirtData] Masters: [ ovirteng02.localdomain.local ] Slaves: [ ovirteng01.localdomain.local ] Resource Group: ovirt ip_OvirtData (ocf::heartbeat:IPaddr2): Started ovirteng02.localdomain.local lvm_ovirt (ocf::heartbeat:LVM): Started ovirteng02.localdomain.local fs_OvirtData (ocf::heartbeat:Filesystem):Started ovirteng02.localdomain.local pgsql_OvirtData(lsb:postgresql): Started ovirteng02.localdomain.local p_lsb_nfs (lsb:nfs): Started ovirteng02.localdomain.local p_exportfs_root(ocf::heartbeat:exportfs): Started ovirteng02.localdomain.local p_exportfs_iso (ocf::heartbeat:exportfs): Started ovirteng02.localdomain.local ovirt-engine (lsb:ovirt-engine): Started ovirteng02.localdomain.local ovirt-websocket-proxy (lsb:ovirt-websocket-proxy):Started ovirteng02.localdomain.local httpd (ocf::heartbeat:apache):Started ovirteng02.localdomain.local or with pcs commands: [root@ovirteng01 ~]# pcs resource show --groups ovirt: ip_OvirtData lvm_ovirt fs_OvirtData pgsql_OvirtData p_lsb_nfs p_exportfs_root p_exportfs_iso ovirt-engine ovirt-websocket-proxy httpd [root@ovirteng01 ~]# pcs resource show Master/Slave Set: ms_OvirtData [OvirtData] Masters: [ ovirteng02.localdomain.local ] Slaves: [ ovirteng01.localdomain.local ] Resource Group: ovirt ip_OvirtData (ocf::heartbeat:IPaddr2): Started lvm_ovirt (ocf::heartbeat:LVM): Started fs_OvirtData (ocf::heartbeat:Filesystem):Started pgsql_OvirtData(lsb:postgresql): Started p_lsb_nfs (lsb:nfs): Started p_exportfs_root(ocf::heartbeat:exportfs): Started p_exportfs_iso (ocf::heartbeat:exportfs): Started ovirt-engine (lsb:ovirt-engine): Started ovirt-websocket-proxy (lsb:ovirt-websocket-proxy):Started httpd (ocf::heartbeat:apache):Started the share file system is something like /dev/mapper/VG_OVIRT-LV_OVIRT 5.0G 203M 4.5G 5% /shared and has structure like [root@ovirteng02 ~]# ll /shared total 28 drwxr-xr-x. 6 root root 4096 Mar 1 14:11 etc drwx--. 2 root root 16384 Mar 1 10:29 lost+found drwxr-xr-x. 5 root root 4096 Mar 5 17:10 nfs_info drwxr-xr-x. 3 root root 4096 Mar 1 13:52 var [root@ovirteng02 ~]# ll /shared/etc/ total 16 drwxr-xr-x. 4 root root 4096 Mar 1 17:30 httpd drwxr-xr-x. 15 root root 4096 Mar 1 13:58 ovirt-engine drwxr-xr-x. 2 root root 4096 Mar 1 13:59 ovirt-engine-setup.conf.d drwxr-xr-x. 3 root root 4096 Mar 1 14:03 pki [root@ovirteng02 ~]# ll /shared/var/ total 4 drwxr-xr-x. 6 root root 4096 Mar 6 01:52 lib [root@ovirteng02 ~]# ll /shared/var/lib/ total 16 drwxr-xr-x. 3 root root 4096 Mar 5 18:58 exports drwxr-xr-x. 4 root root 4096 Mar 14 15:28 nfs drwxr-xr-x. 8 ovirtovirt4096 Mar 12 00:30 ovirt-engine drwx--. 4 postgres postgres 4096 Mar 1 12:49 pgsql more details in following e-mail. Let me know if it can be of interest. I tried some things like forced panic, relocation while webadmin open, etc... and it seemed consistent. Gianluca On Thu, Jun 12, 2014 at 11:52 AM, Itamar Heim ih...@redhat.com wrote: On 06/12/2014 05:44 AM, kevint...@umac.mo wrote: Dear all, If not using self hosted-engine solution, my Engine will install in dedicate machine. How should I make the engine become HA? easiest would be to run it as a VM on a clustering solution like Red Hat Cluster Suite or similar. Thanks Best Regards, Kevin Tang AMSV - STATE KEY LABORATORY OF ANALOG AND MIXED-SIGNAL VLSI University of Macau Tel: (+853) 8397-8035 From: Itamar Heim ih...@redhat.com To: kevint...@umac.mo, users@ovirt.org Date: 06/12/2014 04:07 AM Subject: Re: [ovirt-users] Engine HA? On 06/11/2014 04:16 AM, kevint...@umac.mo wrote: Dear all, I know oVirt Host (VM) can be HA and cluster, all VM can
Re: [ovirt-users] Users seeing all vm's
It sounds line you're adding the permissions to ovirt through the Users tab on the top right. Thats the same thing I did at first. However, the user's tab is not where you manage all settings for users. Its a bit counterintuitive. When you add a user in that tab, it adds them to the system object and not to a particular VM or pool which is why the user has more than desired permissions. What you need to do is remove the users or groups from the Users tab and add them to the specific pool or VM by selecting the pool, then select the permissions sub-tab and then select add. This will grant the permissions to only that specific resource. On Jun 12, 2014 3:08 AM, Itamar Heim ih...@redhat.com wrote: On 06/06/2014 05:52 AM, Artur Sarkisyan wrote: Thanks for replay, I have an IPA server for authentication. I am trying some scenarios, but I would like to setup pools of vm's for users, actually one pool for one user. why one pool for one user? a pool allows you to give multiple users access to it, and, specify how many VMs each user can get from the pool. Kind regards, Artur On Thu, Jun 5, 2014 at 8:30 PM, Jeff Clay jeffc...@gmail.com mailto:jeffc...@gmail.com wrote: Yes, I have resolved this issue. It was due to my lack of understanding in how Ovirt expected things to be configured and setup. Are you using active directory for authentication and setting up pools of vm's for users to access? On Thu, Jun 5, 2014 at 1:10 PM, Artur Sarkisyan s.ar...@gmail.com mailto:s.ar...@gmail.com wrote: Hi Jeff, I would like to know if you have resolved this issue? At this moment i'm building a poc and i have the same problem like yours: All users can see all vm's. Do you have some suggestions for me ? Thanks in advanced. Kind regards, Artur On Tue, May 6, 2014 at 10:32 PM, Jeff Clay jeffc...@gmail.com mailto:jeffc...@gmail.com wrote: For some reason, when logged in as a user with a modifed copy role of UserRole (only has login permssion and VM - Basic Operations - Remote Log In permission) the user can see all of the VM's and has the ability to open a console, start, shutdown or suspend any of the VM's. I have verified that all of the VM's only show the SuperUser role in their permissions. I went through all of the roles and verified that the user is only a member of the Copy_of_UserRole. The only thing I can think of is that the user is inheriting permissions from something, but I can't find what it is or where. Any suggestions? Thanks. ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] italian language pack ?
- Original Message - From: Gianluca Cecchi gianluca.cec...@gmail.com Sent: Wednesday, May 14, 2014 4:35:57 AM On Tue, May 13, 2014 at 6:44 PM, Einav Cohen eco...@redhat.com wrote: we are typically not updating translations for versions that were already GA'd (3.4), therefore I recommend to concentrate at this point only on the 'master' version (which is currently tracking the ovirt-engine-3.5 translations, practically). once we will branch the ovirt-engine-3.5 code out of the 'master' code branch, I will create an 'ovirt-3.5' version in Zanata, to track the ovirt-engine-3.5 translations. the 'master' version will remain the translation tracker for the 'master' code branch [which would practically become the baseline for the next ovirt-engine planned release (ovirt-3.6?)]. As I see from today message that 3.5 alpha is going to be composed, is there a needed percentage to cover before the language can be inserted between the available ones? [apologies for the extremely late response] we never discussed this before, I assume that a language should be at least in ~70/75% completion in order to justify its introduction into the product (need ack/nack from others on that number?) right now Italian stands on 1.22% translation completion in the 'master' version of the 'oVirt' project in Zanata, so I don't think that it justifies introducing it into oVirt at the moment. Gianluca: do you have an ETA for completion of at least ~70/75% of the Italian translation? if it would be early enough, we can definitely consider adding it to oVirt 3.5 (we obviously missed the ovirt-3.5 alpha milestones, but we can try and introduce it in later ovirt-3.5 milestones). Any chance to see it in 3.5 alpha? Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] How to change a pool's template
On 06/12/2014 08:58 AM, Omer Frenkel wrote: - Original Message - From: John Xue xgxj...@gmail.com To: users@ovirt.org Sent: Thursday, June 12, 2014 7:03:22 AM Subject: [ovirt-users] How to change a pool's template Hello I'm a new guy in ovirt 3.3.5, I try to change a pool's template. When I edit the pool, the option Based of Template is gay. How to do that? I don't want to delete and rebuild again. you cannot change pool's template, because it means replacing all the disks for all the vms in the pool, which is basically the same as removing the pool and creating a new one. but, you can do something similar in 3.4, using template versions: in 3.4, when you create the pool, you can select a template and LATEST as the version. when you create a new template, you can make it a version of the original template, and the pool will update to this template. I tried this features with oVirt 3.4.1, but it didn't work as expected. When selecting latest and a guest is shut down it will be deleted. The expected behavior would be that a new vm with the newest version of this template (latest subtemplate) would be started. The actual behavior is the following: VM will be deleted, pool is decreased by 1 vm and vm is started as a standalone (desktop) vm. So the whole pool features is broken when using latest template feature (in 3.4.1 - didn't test it with 3.4.2 yet). Regards, René you can read about it here http://www.ovirt.org/Features/Template_Versions Thank you! -- Regards, John Xue ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Recommended setup for a FC based storage domain
CC'ing the devel list, maybe some VDSM and storage people can explain this? Am 10.06.2014 12:24, schrieb combuster: /etc/libvirt/libvirtd.conf and /etc/vdsm/logger.conf , but unfortunately maybe I've jumped to conclusions, last weekend, that very same thin provisioned vm was running a simple export for 3hrs before I've killed the process. But I wondered: 1. The process that runs behind the export is qemu-img convert (from raw to raw), and running iotop shows that every three or four seconds it reads 10-13 MBps and then idles for a few seconds. Run the numbers on 100GB (why is he covering the entire 100 of 15GB used on thin volume I still don't get it) and you get precisely 3-4 hrs estimated time remaining. 2. When I run export with SPM on a node that doesn't have any vm's running, export finishes for aprox. 30min (iotop shows 40-70MBps read speed constantly) 3. Renicing I/O priority of the qemu-img process as well as the CPU priority gave no results, it was still runing slow beyond any explanation. Debug logs showed nothing of interest, so I disabled anything above warning and it suddenly accelerated the export, so I've connected the wrong dots. On 06/10/2014 11:18 AM, Andrew Lau wrote: Interesting, which files did you modify to lower the log levels? On Tue, Jun 3, 2014 at 12:38 AM, combus...@archlinux.us wrote: One word of caution so far, when exporting any vm, the node that acts as SPM is stressed out to the max. I releived the stress by a certain margin with lowering libvirtd and vdsm log levels to WARNING. That shortened out the export procedure by at least five times. But vdsm process on the SPM node is still with high cpu usage so it's best that the SPM node should be left with a decent CPU time amount to spare. Also, export of VM's with high vdisk capacity and thin provisioning enabled (let's say 14GB used of 100GB defined) took around 50min over a 10Gb ethernet interface to a 1Gb export NAS device that was not stressed out at all by other processes. When I did that export with debug log levels it took 5hrs :( So lowering log levels is a must in production enviroment. I've deleted the lun that I exported on the storage (removed it first from ovirt) and for the next weekend I am planing to add a new one, export it again on all the nodes and start a few fresh vm installations. Things I'm going to look for are partition alignment and running them from different nodes in the cluster at the same time. I just hope that not all I/O is going to pass through the SPM, this is the one thing that bothers me the most. I'll report back on these results next week, but if anyone has experience with this kind of things or can point to some documentation would be great. On Monday, 2. June 2014. 18.51.52 you wrote: I'm curious to hear what other comments arise, as we're analyzing a production setup shortly. On Sun, Jun 1, 2014 at 10:11 PM, combus...@archlinux.us wrote: I need to scratch gluster off because setup is based on CentOS 6.5, so essential prerequisites like qemu 1.3 and libvirt 1.0.1 are not met. Gluster would still work with EL6, afaik it just won't use libgfapi and instead use just a standard mount. Any info regarding FC storage domain would be appreciated though. Thanks Ivan On Sunday, 1. June 2014. 11.44.33 combus...@archlinux.us wrote: Hi, I have a 4 node cluster setup and my storage options right now are a FC based storage, one partition per node on a local drive (~200GB each) and a NFS based NAS device. I want to setup export and ISO domain on the NAS and there are no issues or questions regarding those two. I wasn't aware of any other options at the time for utilizing a local storage (since this is a shared based datacenter) so I exported a directory from each partition via NFS and it works. But I am little in the dark with the following: 1. Are there any advantages for switching from NFS based local storage to a Gluster based domain with blocks for each partition. I guess it can be only performance wise but maybe I'm wrong. If there are advantages, are there any tips regarding xfs mount options etc ? 2. I've created a volume on the FC based storage and exported it to all of the nodes in the cluster on the storage itself. I've configured multipathing correctly and added an alias for the wwid of the LUN so I can distinct this one and any other future volumes more easily. At first I created a partition on it but since oVirt saw only the whole LUN as raw device I erased it before adding it as the FC master storage domain. I've imported a few VM's and point them to the FC storage domain. This setup works, but: - All of the nodes see a device with the alias for the wwid of the volume, but only the node wich is currently the SPM for the cluster can see logical volumes inside. Also when I setup the high availability for VM's residing on the FC storage and select to
Re: [ovirt-users] fail to shutdown ubuntu guest
are you sure acpid is running inside the guest? Am 12.06.2014 05:54, schrieb John Xue: Hello, I try to grace shutdown my ubuntu guest from user or admin portal, but all are fail. I can saw a shutdown option dialog in guest, so I think maybe some shutdown parameter are miss in ovirth guest agent for ubuntu 14.04. Thanks -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Network traffic being mirrored
Hi guys, I am seeing network traffic being sent to all my VMs on one of my oVirt hosts, but not the other two in that same datacentre. The VMs are running CentOS, and I've been monitoring the sessions with iptraf, and can see traffic from all other VMs on that network being received by all other VMs running on this host which have an interface on that same network. Is this something anyone has seen, or could anyone suggest anything I should be looking at to further diagnose? Many thanks, Jim Rippon ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] italian language pack ?
On Thu, Jun 12, 2014 at 2:56 PM, Einav Cohen eco...@redhat.com wrote: As I see from today message that 3.5 alpha is going to be composed, is there a needed percentage to cover before the language can be inserted between the available ones? [apologies for the extremely late response] we never discussed this before, I assume that a language should be at least in ~70/75% completion in order to justify its introduction into the product (need ack/nack from others on that number?) right now Italian stands on 1.22% translation completion in the 'master' version of the 'oVirt' project in Zanata, so I don't think that it justifies introducing it into oVirt at the moment. Gianluca: do you have an ETA for completion of at least ~70/75% of the Italian translation? if it would be early enough, we can definitely consider adding it to oVirt 3.5 (we obviously missed the ovirt-3.5 alpha milestones, but we can try and introduce it in later ovirt-3.5 milestones). Any chance to see it in 3.5 alpha? Gianluca Hello, I plan to work on this during the next days. Possibly the end of the next week could be a good ETA (if there will be an overlap between the different paths and the total amount is not the sum of all of them...) Could this be ok for you? Could we have a follow up on next Wednesday? Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Get involved in oVirt integration! June edition
Hi Sandro, Sadly I don't have time to work on one of these bugs, but I have a general question on how contributing to oVirt works. [2] explains in detail how to push code to gerrit. As I wanted to start contributing to oVirt I started with the easiest way by extending the list of operating systems. So I created a bug for this (1101219), pushed to code to gerrit (referenced to this bug id) and Jenkins build job was successful. So I did everything mentioned in [2] - but what now? Shall I just wait and see what happens? Should I post to ovirt-devel that someone will review the code? Who decides which oVirt version will include this code or if this code will be included or needs adaptions (I only know that a certain score in gerrit is required and some developers are allowed to rate a commit)? I'm aware that my commit isn't fancy at all and there's no need for any priority, but just want to know what's the right workflow in case I have more time to work on some bugs... I guess these questions could be interesting for users (basically for users who are not familiar with a professional development setup/workflow including gerrit like me) who want to work on the bugs in june edition as well... Thanks, René On 06/12/2014 04:11 PM, Sandro Bonazzola wrote: Hi, have you got some free time and do you want to get involved in oVirt integration? After the success of first edition we're now proposing this again. Here are a couple of bugs you can hopefully fix in less that one day or you can just try to reproduce providing info: Bug 1091651 - Misleading error message when first host cannot be reached during hosted-engine deployment Bug 1080823 - [RFE] make override of iptables configurable when using hosted-engine Bug 1065350 - hosted-engine should prompt a question at the user when the host was already a host in the engine Bug 1097635 - ovirt-hosted-engine-setup fails with Modules libvirt contains invalid configuration Is this the first time you try to contribute to oVirt project? You can start from here [1][2]! [1] http://www.ovirt.org/Develop [2] http://www.ovirt.org/Working_with_oVirt_Gerrit ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] fail to shutdown ubuntu guest
On Thu, Jun 12, 2014 at 01:37:19PM +, Sven Kieske wrote: are you sure acpid is running inside the guest? ... or a guest agent? Can you find the shutdown request on /var/log/vdsm/vdsm.log on the host that runs your guest? Am 12.06.2014 05:54, schrieb John Xue: Hello, I try to grace shutdown my ubuntu guest from user or admin portal, but all are fail. I can saw a shutdown option dialog in guest, so I think maybe some shutdown parameter are miss in ovirth guest agent for ubuntu 14.04. Thanks -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Get involved in oVirt integration! June edition
On 06/12/2014 11:45 AM, Sandro Bonazzola wrote: Itamar Heim also reviewd the bug you pushed and set target release to 3.5.0. for oVirt bugs, i set all 'bugs' (not features) to the next version as kind of default target. they can be moved later for either future, or to stable versions as well if needed. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Recommended setup for a FC based storage domain
Thanks, I really hope someone can help, because right now I'm afraid to thin provision any large volume due to this. I forgot to mention that, when I do the export on the NAS, node that is SPM at that moment is running qemu-img convert process and VDSM process on that node is running wild (400% cpu load from time to time), but qemu-img convert never occupies more than 1 thread (100%). There are a few (4-5) nfsd processes that are going from 40% to 90%. CPU load on the engine admin panel shows that vm's that run on SPM show abnormaly high cpu load (40-60%) and they usually run idle at the time. So: - Runing exprort when SPM node does not have any vm's running is fast (thin or fully provisioned, doesn't matteR) - Running export when SPM node does have 3-4 vm's running is painfully slow for thin provisioned vm's - Running export when SPM node does have 3-4 vm's running but vm that is exporting is not thin provisioned is fast enough even though vm's on SPM show an increased cpu load also I'm yet to measure I/O utilization in all scenarios, but I'm positive on what I wrote for the thin provisioned volume when there are vms runing on spm, it goes 15MBps max and just at bursts every three or four seconds (I measure this on the SPM node because the qemu-img convert runs on that node, even though vm is residing on another node, with its thin provisioned disk on its local storage shared via nfs). On čet, 2014-06-12 at 13:31 +, Sven Kieske wrote: CC'ing the devel list, maybe some VDSM and storage people can explain this? Am 10.06.2014 12:24, schrieb combuster: /etc/libvirt/libvirtd.conf and /etc/vdsm/logger.conf , but unfortunately maybe I've jumped to conclusions, last weekend, that very same thin provisioned vm was running a simple export for 3hrs before I've killed the process. But I wondered: 1. The process that runs behind the export is qemu-img convert (from raw to raw), and running iotop shows that every three or four seconds it reads 10-13 MBps and then idles for a few seconds. Run the numbers on 100GB (why is he covering the entire 100 of 15GB used on thin volume I still don't get it) and you get precisely 3-4 hrs estimated time remaining. 2. When I run export with SPM on a node that doesn't have any vm's running, export finishes for aprox. 30min (iotop shows 40-70MBps read speed constantly) 3. Renicing I/O priority of the qemu-img process as well as the CPU priority gave no results, it was still runing slow beyond any explanation. Debug logs showed nothing of interest, so I disabled anything above warning and it suddenly accelerated the export, so I've connected the wrong dots. On 06/10/2014 11:18 AM, Andrew Lau wrote: Interesting, which files did you modify to lower the log levels? On Tue, Jun 3, 2014 at 12:38 AM, combus...@archlinux.us wrote: One word of caution so far, when exporting any vm, the node that acts as SPM is stressed out to the max. I releived the stress by a certain margin with lowering libvirtd and vdsm log levels to WARNING. That shortened out the export procedure by at least five times. But vdsm process on the SPM node is still with high cpu usage so it's best that the SPM node should be left with a decent CPU time amount to spare. Also, export of VM's with high vdisk capacity and thin provisioning enabled (let's say 14GB used of 100GB defined) took around 50min over a 10Gb ethernet interface to a 1Gb export NAS device that was not stressed out at all by other processes. When I did that export with debug log levels it took 5hrs :( So lowering log levels is a must in production enviroment. I've deleted the lun that I exported on the storage (removed it first from ovirt) and for the next weekend I am planing to add a new one, export it again on all the nodes and start a few fresh vm installations. Things I'm going to look for are partition alignment and running them from different nodes in the cluster at the same time. I just hope that not all I/O is going to pass through the SPM, this is the one thing that bothers me the most. I'll report back on these results next week, but if anyone has experience with this kind of things or can point to some documentation would be great. On Monday, 2. June 2014. 18.51.52 you wrote: I'm curious to hear what other comments arise, as we're analyzing a production setup shortly. On Sun, Jun 1, 2014 at 10:11 PM, combus...@archlinux.us wrote: I need to scratch gluster off because setup is based on CentOS 6.5, so essential prerequisites like qemu 1.3 and libvirt 1.0.1 are not met. Gluster would still work with EL6, afaik it just won't use libgfapi and instead use just a standard mount. Any info regarding FC storage domain would be appreciated though. Thanks Ivan On Sunday, 1. June 2014. 11.44.33 combus...@archlinux.us wrote: Hi, I have a 4 node cluster setup and my storage options
Re: [ovirt-users] italian language pack ?
Hi Einav, On 06/12/2014 02:56 PM, Einav Cohen wrote: we never discussed this before, I assume that a language should be at least in ~70/75% completion in order to justify its introduction into the product (need ack/nack from others on that number?) right now Italian stands on 1.22% translation completion in the 'master' version of the 'oVirt' project in Zanata, so I don't think that it justifies introducing it into oVirt at the moment. Gianluca: do you have an ETA for completion of at least ~70/75% of the Italian translation? if it would be early enough, we can definitely consider adding it to oVirt 3.5 (we obviously missed the ovirt-3.5 alpha milestones, but we can try and introduce it in later ovirt-3.5 milestones). Do you have a pointer to how community members can help with the translation? I haven't heard of Zanata before, it sounds interesting. What do we use for translations - resource bundles and java.util.Locale? Does that also work on client-side stuff like javascript? Cheers, Dave. -- Dave Neary, Lyon, France Email: dne...@gnome.org / Jabber: nea...@gmail.com Ph: +33 950 71 55 62 / Cell: +33 6 77 01 92 13 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [ ERROR ] Failed to execute stage 'Closing up': Command '/bin/systemctl' failed to execute
How much ram do you have on this system? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] novnc error
Hello everyone, I'm running into an error getting novnc up and running with ovirt, and I'm hoping someone can help. My system is a CentOS minimal x86_64 install running ovirt fine. I have created VMs and I'm able to configure the console options. When I attempt to connect to them, however, I get a Server disconnected (code: 1006) error. I've searched online for a solution, but everything seems to point to simply running the engine-setup configuration utility and installing the ca.crt. I have tried both of these things, but I keep getting the same message, in Internet Explorer, Chrome and Firefox. Disabled iptables and selinux. Connected directly to VM with VNC Checked ovirt-websocket-proxy, and it is running - haven't touched config file - SSL=true Installed ca.crt - multiple times Reinstalled ovirt - clean first, the reinstall. Reinstalled ca.crt Nothing has helped so far. Does anyone have any ideas? I have a straight-forward setup using engine-setup; accepting the default answer most of the time. GlusterFS being one of the non-defaults. I appreciate your suggestions! GB ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] novnc error
- Original Message - From: Garrett Baltezegar my9...@gmail.com To: users@ovirt.org Sent: Thursday, June 12, 2014 11:33:09 PM Subject: [ovirt-users] novnc error Hello everyone, I'm running into an error getting novnc up and running with ovirt, and I'm hoping someone can help. My system is a CentOS minimal x86_64 install running ovirt fine. I have created VMs and I'm able to configure the console options. When I attempt to connect to them, however, I get a Server disconnected (code: 1006) error. I've searched online for a solution, but everything seems to point to simply running the engine-setup configuration utility and installing the ca.crt. I have tried both of these things, but I keep getting the same message, in Internet Explorer, Chrome and Firefox. Disabled iptables and selinux. Connected directly to VM with VNC Checked ovirt-websocket-proxy, and it is running - haven't touched config file - SSL=true Installed ca.crt - multiple times Reinstalled ovirt - clean first, the reinstall. Reinstalled ca.crt Nothing has helped so far. Does anyone have any ideas? I have a straight-forward setup using engine-setup; accepting the default answer most of the time. GlusterFS being one of the non-defaults. I appreciate your suggestions! What happens if you access port 6100 at engine machine? https://host:6100 GB ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] novnc error
It looks like a blank page loads. Just tried this in both Chrome and Internet Explorer, and got the same result. The proxy is installed locally on the ovirt server, by the way. Nmap shows port 6100 TCP listening. Thanks for the quick response! On Jun 12, 2014 4:39 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: users@ovirt.org Sent: Thursday, June 12, 2014 11:33:09 PM Subject: [ovirt-users] novnc error Hello everyone, I'm running into an error getting novnc up and running with ovirt, and I'm hoping someone can help. My system is a CentOS minimal x86_64 install running ovirt fine. I have created VMs and I'm able to configure the console options. When I attempt to connect to them, however, I get a Server disconnected (code: 1006) error. I've searched online for a solution, but everything seems to point to simply running the engine-setup configuration utility and installing the ca.crt. I have tried both of these things, but I keep getting the same message, in Internet Explorer, Chrome and Firefox. Disabled iptables and selinux. Connected directly to VM with VNC Checked ovirt-websocket-proxy, and it is running - haven't touched config file - SSL=true Installed ca.crt - multiple times Reinstalled ovirt - clean first, the reinstall. Reinstalled ca.crt Nothing has helped so far. Does anyone have any ideas? I have a straight-forward setup using engine-setup; accepting the default answer most of the time. GlusterFS being one of the non-defaults. I appreciate your suggestions! What happens if you access port 6100 at engine machine? https://host:6100 GB ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] novnc error
- Original Message - From: Garrett Baltezegar my9...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Thursday, June 12, 2014 11:49:50 PM Subject: Re: [ovirt-users] novnc error It looks like a blank page loads. Just tried this in both Chrome and Internet Explorer, and got the same result. The proxy is installed locally on the ovirt server, by the way. Nmap shows port 6100 TCP listening. do you see anything relevant at /var/log/messages? try to stop the ovirt-websocket-proxy service and run it in debug mode: # su - -s /bin/sh ovirt $ /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py --debug start see what you get. Thanks for the quick response! On Jun 12, 2014 4:39 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: users@ovirt.org Sent: Thursday, June 12, 2014 11:33:09 PM Subject: [ovirt-users] novnc error Hello everyone, I'm running into an error getting novnc up and running with ovirt, and I'm hoping someone can help. My system is a CentOS minimal x86_64 install running ovirt fine. I have created VMs and I'm able to configure the console options. When I attempt to connect to them, however, I get a Server disconnected (code: 1006) error. I've searched online for a solution, but everything seems to point to simply running the engine-setup configuration utility and installing the ca.crt. I have tried both of these things, but I keep getting the same message, in Internet Explorer, Chrome and Firefox. Disabled iptables and selinux. Connected directly to VM with VNC Checked ovirt-websocket-proxy, and it is running - haven't touched config file - SSL=true Installed ca.crt - multiple times Reinstalled ovirt - clean first, the reinstall. Reinstalled ca.crt Nothing has helped so far. Does anyone have any ideas? I have a straight-forward setup using engine-setup; accepting the default answer most of the time. GlusterFS being one of the non-defaults. I appreciate your suggestions! What happens if you access port 6100 at engine machine? https://host:6100 GB ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] novnc error
I've checked /var/log/messages a few times, but it doesn't seem like much is being written to it; the last entry I have is from ~6 hours ago. When running /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py --debug start I see the following information as the service is starting: WARNING: no 'numpy' module, HyBi protocol will be slower ovirt-websocket-proxy[14511] DEBUG _daemon:403 daemon entry pid=14511 ovirt-websocket-proxy[14511] DEBUG _daemon:404 background=False ovirt-websocket-proxy[14511] DEBUG loadFile:70 loading config '/usr/share/ovirt- engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.conf' ovirt-websocket-proxy[14511] DEBUG loadFile:70 loading config '/etc/ovirt-engine /ovirt-websocket-proxy.conf.d/10-setup.conf' ovirt-websocket-proxy[14511] DEBUG _daemon:440 I am a daemon 14511 ovirt-websocket-proxy[14511] DEBUG _setLimits:377 Setting rlimits WebSocket server settings: - Listen on *:6100 - Flash security policy server - SSL/TLS support - Deny non-SSL/TLS connections - proxying from *:6100 to targets in /dummy I see the following info after I attempted a novnc connection through the browser: 1: 10.255.239.1: new handler Process 1: handler exception: WSRequestHandler instance has no attribute 'last_code' 1: Traceback (most recent call last): File /usr/lib/python2.6/site-packages/websockify/websocket.py, line 696, in top_new_client self.client = self.do_handshake(startsock, address) File /usr/lib/python2.6/site-packages/websockify/websocket.py, line 628, in do_handshake if wsh.last_code == 101: AttributeError: WSRequestHandler instance has no attribute 'last_code' Thanks! On Thu, Jun 12, 2014 at 4:56 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Thursday, June 12, 2014 11:49:50 PM Subject: Re: [ovirt-users] novnc error It looks like a blank page loads. Just tried this in both Chrome and Internet Explorer, and got the same result. The proxy is installed locally on the ovirt server, by the way. Nmap shows port 6100 TCP listening. do you see anything relevant at /var/log/messages? try to stop the ovirt-websocket-proxy service and run it in debug mode: # su - -s /bin/sh ovirt $ /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py --debug start see what you get. Thanks for the quick response! On Jun 12, 2014 4:39 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: users@ovirt.org Sent: Thursday, June 12, 2014 11:33:09 PM Subject: [ovirt-users] novnc error Hello everyone, I'm running into an error getting novnc up and running with ovirt, and I'm hoping someone can help. My system is a CentOS minimal x86_64 install running ovirt fine. I have created VMs and I'm able to configure the console options. When I attempt to connect to them, however, I get a Server disconnected (code: 1006) error. I've searched online for a solution, but everything seems to point to simply running the engine-setup configuration utility and installing the ca.crt. I have tried both of these things, but I keep getting the same message, in Internet Explorer, Chrome and Firefox. Disabled iptables and selinux. Connected directly to VM with VNC Checked ovirt-websocket-proxy, and it is running - haven't touched config file - SSL=true Installed ca.crt - multiple times Reinstalled ovirt - clean first, the reinstall. Reinstalled ca.crt Nothing has helped so far. Does anyone have any ideas? I have a straight-forward setup using engine-setup; accepting the default answer most of the time. GlusterFS being one of the non-defaults. I appreciate your suggestions! What happens if you access port 6100 at engine machine? https://host:6100 GB ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] novnc error
- Original Message - From: Garrett Baltezegar my9...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Friday, June 13, 2014 12:12:28 AM Subject: Re: [ovirt-users] novnc error I've checked /var/log/messages a few times, but it doesn't seem like much is being written to it; the last entry I have is from ~6 hours ago. When running /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py --debug start I see the following information as the service is starting: WARNING: no 'numpy' module, HyBi protocol will be slower ovirt-websocket-proxy[14511] DEBUG _daemon:403 daemon entry pid=14511 ovirt-websocket-proxy[14511] DEBUG _daemon:404 background=False ovirt-websocket-proxy[14511] DEBUG loadFile:70 loading config '/usr/share/ovirt- engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.conf' ovirt-websocket-proxy[14511] DEBUG loadFile:70 loading config '/etc/ovirt-engine /ovirt-websocket-proxy.conf.d/10-setup.conf' ovirt-websocket-proxy[14511] DEBUG _daemon:440 I am a daemon 14511 ovirt-websocket-proxy[14511] DEBUG _setLimits:377 Setting rlimits WebSocket server settings: - Listen on *:6100 - Flash security policy server - SSL/TLS support - Deny non-SSL/TLS connections - proxying from *:6100 to targets in /dummy I see the following info after I attempted a novnc connection through the browser: 1: 10.255.239.1: new handler Process 1: handler exception: WSRequestHandler instance has no attribute 'last_code' 1: Traceback (most recent call last): File /usr/lib/python2.6/site-packages/websockify/websocket.py, line 696, in top_new_client self.client = self.do_handshake(startsock, address) File /usr/lib/python2.6/site-packages/websockify/websocket.py, line 628, in do_handshake if wsh.last_code == 101: AttributeError: WSRequestHandler instance has no attribute 'last_code' What version of python-websockify do you have? What version of numpy do you have (if any)? Thanks! On Thu, Jun 12, 2014 at 4:56 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Thursday, June 12, 2014 11:49:50 PM Subject: Re: [ovirt-users] novnc error It looks like a blank page loads. Just tried this in both Chrome and Internet Explorer, and got the same result. The proxy is installed locally on the ovirt server, by the way. Nmap shows port 6100 TCP listening. do you see anything relevant at /var/log/messages? try to stop the ovirt-websocket-proxy service and run it in debug mode: # su - -s /bin/sh ovirt $ /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py --debug start see what you get. Thanks for the quick response! On Jun 12, 2014 4:39 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: users@ovirt.org Sent: Thursday, June 12, 2014 11:33:09 PM Subject: [ovirt-users] novnc error Hello everyone, I'm running into an error getting novnc up and running with ovirt, and I'm hoping someone can help. My system is a CentOS minimal x86_64 install running ovirt fine. I have created VMs and I'm able to configure the console options. When I attempt to connect to them, however, I get a Server disconnected (code: 1006) error. I've searched online for a solution, but everything seems to point to simply running the engine-setup configuration utility and installing the ca.crt. I have tried both of these things, but I keep getting the same message, in Internet Explorer, Chrome and Firefox. Disabled iptables and selinux. Connected directly to VM with VNC Checked ovirt-websocket-proxy, and it is running - haven't touched config file - SSL=true Installed ca.crt - multiple times Reinstalled ovirt - clean first, the reinstall. Reinstalled ca.crt Nothing has helped so far. Does anyone have any ideas? I have a straight-forward setup using engine-setup; accepting the default answer most of the time. GlusterFS being one of the non-defaults. I appreciate your suggestions! What happens if you access port 6100 at engine machine? https://host:6100 GB ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Engine HA?
Hi Kevin, I found this link while looking for the same solution: http://captainkvm.com/2013/05/providing-high-availability-for-rhev-m/ We now have rhev-m (which is the same thing as the Ovirt engine) running on a server using KVM/Qemu, with my Linux workstation acting as a backup host. The VM image is stored on an NFS share. Simple, possibly even slightly crude, but very effective. Regards, John On 12/06/14 19:44, kevint...@umac.mo wrote: Dear all, If not using self hosted-engine solution, my Engine will install in dedicate machine. How should I make the engine become HA? Thanks Best Regards, Kevin Tang AMSV - STATE KEY LABORATORY OF ANALOG AND MIXED-SIGNAL VLSI University of Macau Tel: (+853) 8397-8035 From:Itamar Heim ih...@redhat.com To:kevint...@umac.mo, users@ovirt.org Date:06/12/2014 04:07 AM Subject:Re: [ovirt-users] Engine HA? On 06/11/2014 04:16 AM, kevint...@umac.mo wrote: Dear all, I know oVirt Host (VM) can be HA and cluster, all VM can be migrate between all operational Node. Since the main oVirt Engine is standalone, event shelf-hosted engine, it still is a single Engine. I want to ensure my Engine can be HA, how should I do? Do I need to create a Cluster Linux first? hosted-engine has built-in HA mechanism for the engine, so if the host its running on has an issue, another host will launch the hosted engine. __ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com __ ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] novnc error
Python-websockify - 0.5.1-1.e16.no arch Numpy isn't installed On Jun 12, 2014 5:15 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Friday, June 13, 2014 12:12:28 AM Subject: Re: [ovirt-users] novnc error I've checked /var/log/messages a few times, but it doesn't seem like much is being written to it; the last entry I have is from ~6 hours ago. When running /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py --debug start I see the following information as the service is starting: WARNING: no 'numpy' module, HyBi protocol will be slower ovirt-websocket-proxy[14511] DEBUG _daemon:403 daemon entry pid=14511 ovirt-websocket-proxy[14511] DEBUG _daemon:404 background=False ovirt-websocket-proxy[14511] DEBUG loadFile:70 loading config '/usr/share/ovirt- engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.conf' ovirt-websocket-proxy[14511] DEBUG loadFile:70 loading config '/etc/ovirt-engine /ovirt-websocket-proxy.conf.d/10-setup.conf' ovirt-websocket-proxy[14511] DEBUG _daemon:440 I am a daemon 14511 ovirt-websocket-proxy[14511] DEBUG _setLimits:377 Setting rlimits WebSocket server settings: - Listen on *:6100 - Flash security policy server - SSL/TLS support - Deny non-SSL/TLS connections - proxying from *:6100 to targets in /dummy I see the following info after I attempted a novnc connection through the browser: 1: 10.255.239.1: new handler Process 1: handler exception: WSRequestHandler instance has no attribute 'last_code' 1: Traceback (most recent call last): File /usr/lib/python2.6/site-packages/websockify/websocket.py, line 696, in top_new_client self.client = self.do_handshake(startsock, address) File /usr/lib/python2.6/site-packages/websockify/websocket.py, line 628, in do_handshake if wsh.last_code == 101: AttributeError: WSRequestHandler instance has no attribute 'last_code' What version of python-websockify do you have? What version of numpy do you have (if any)? Thanks! On Thu, Jun 12, 2014 at 4:56 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Thursday, June 12, 2014 11:49:50 PM Subject: Re: [ovirt-users] novnc error It looks like a blank page loads. Just tried this in both Chrome and Internet Explorer, and got the same result. The proxy is installed locally on the ovirt server, by the way. Nmap shows port 6100 TCP listening. do you see anything relevant at /var/log/messages? try to stop the ovirt-websocket-proxy service and run it in debug mode: # su - -s /bin/sh ovirt $ /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py --debug start see what you get. Thanks for the quick response! On Jun 12, 2014 4:39 PM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Garrett Baltezegar my9...@gmail.com To: users@ovirt.org Sent: Thursday, June 12, 2014 11:33:09 PM Subject: [ovirt-users] novnc error Hello everyone, I'm running into an error getting novnc up and running with ovirt, and I'm hoping someone can help. My system is a CentOS minimal x86_64 install running ovirt fine. I have created VMs and I'm able to configure the console options. When I attempt to connect to them, however, I get a Server disconnected (code: 1006) error. I've searched online for a solution, but everything seems to point to simply running the engine-setup configuration utility and installing the ca.crt. I have tried both of these things, but I keep getting the same message, in Internet Explorer, Chrome and Firefox. Disabled iptables and selinux. Connected directly to VM with VNC Checked ovirt-websocket-proxy, and it is running - haven't touched config file - SSL=true Installed ca.crt - multiple times Reinstalled ovirt - clean first, the reinstall. Reinstalled ca.crt Nothing has helped so far. Does anyone have any ideas? I have a straight-forward setup using engine-setup; accepting the default answer most of the time. GlusterFS being one of the non-defaults. I appreciate your suggestions! What happens if you access port 6100 at engine machine? https://host:6100 GB ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] KSM and cross-vm attack
Hi, Maybe I should be posting to the kvm mailing list, but I think people here should know a thing or two about it. I just read the following research paper and although the attack was done on VMWare; from what I read about it, it could be possible with KSM on KVM also. If you really need tight security it looks like it would be better to disable KSM. But don't take my word for it as IANAC (I Am Not A Cryptographer). http://soylentnews.org/article.pl?sid=14/06/12/1349234amp;from=rss Practical Cross-VM AES Full Key Recovery Attack http://soylentnews.org/article.pl?sid=14/06/12/1349234 posted by janrinok http://soylentnews.org/%7Ejanrinok/ on Thursday June 12, @02:53PM ** dbot http://soylentnews.org/%7Edbot/ writes: Researchers from Worcester Polytechnic Institute (Worcester, MA), have published a paper illustrating a practical full Advanced Encryption Standard key recovery from AES operations preformed in one virtual machine, by another VM http://eprint.iacr.org/2014/435.pdf [*PDF*] running on the same hardware at the same time. The attack specifically requires memory de-duplication to be enabled, and they target VMWare's VM software. Combining various attacks on memory de-duplication, and existing side channel attacks: In summary, this works: * shows for the first time that de-duplication enables fine grain cross-VM attacks; * introduces a new Flush+Reload based attack that does not require interrupting the victim after each encryption round; * presents the first practical cross-VM attack on AES; the attack is generic and can be adapted to any table-based block ciphers. They target OpenSSL 1.0.1. It will be interesting to see if the suggested countermeasure, flushing the T table cache after each operation (effective against other Flush+Reload attacks), is added to LibreSSL. Will it be left out, in the name of performance - or will they move to a different implementation of AES (not T table-based)? Kind regards, Jorick Astrego Netbulae ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] problem engine-manage-domains add ldap domain
On ubuntu 12.04, by default, it is generatthe realm config with 'kdc_ports' parameters in /etc/krb5k dc/kdc.config, and then, it is used the udp ports, causing a connection refused for engine-manage-domains. Just change kdc_ports to kdc_tcp_ports solve the problem. On Thu, Jun 12, 2014 at 4:50 AM, Yair Zaslavsky yzasl...@redhat.com wrote: I helped Lucas resolve this over IRC. This was an issue with his kerberos setup. Lucas, care to share here what issue did you discover? Yair - Original Message - From: lucas castro lucascastrobor...@gmail.com To: users@ovirt.org Sent: Wednesday, June 11, 2014 9:50:48 PM Subject: [ovirt-users] problem engine-manage-domains add ldap domain I'm trying to add a ldap domain to ovirt-engine, but getting problem with that. I sent three files with the engine-manage-domains log the krb5 config generated for testing and the tcpdump port 53 from my dns server can anybody help me to find what is happening? -- contatos: Celular: ( 99 ) 9143-5954 - Vivo skype: lucasd3castro msn: lucascastrobor...@hotmail.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- contatos: Celular: ( 99 ) 9143-5954 - Vivo skype: lucasd3castro msn: lucascastrobor...@hotmail.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [ ERROR ] Failed to execute stage 'Closing up': Command '/bin/systemctl' failed to execute
On Fri, Jun 13, 2014 at 12:23 AM, Todd td...@yahoo.com wrote: One thing I did, I added an additional 4 to make it 8GB to the machine. And it still does the same thing, but it is saying there is a problem with the systemctl “Closing up” error. How is that related to the amount of memory, at present, I just want to bring up the web interface and get it installed. Todd Keep replies on list, so that other can help too if necessary. I think the init service should have been installed anyway. What you get from the command # systemctl status ovirt-engine for example on my system I get this [g.cecchi@tekkaman ~]$ sudo systemctl status ovirt-engine ovirt-engine.service - oVirt Engine Loaded: loaded (/usr/lib/systemd/system/ovirt-engine.service; enabled) Active: active (running) since Fri 2014-06-13 00:24:55 CEST; 2min 49s ago Main PID: 1899 (ovirt-engine.py) CGroup: name=systemd:/system/ovirt-engine.service ├─1899 /usr/bin/python /usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.py --redirect-output --system... └─2370 ovirt-engine -server -XX:+TieredCompilation -Xms1g -Xmx1g -XX:PermSize=256m -XX:MaxPermSize=256m -Djava Jun 13 00:24:54 tekkaman.localdomain.local systemd[1]: Starting oVirt Engine... Jun 13 00:24:55 tekkaman.localdomain.local systemd[1]: Started oVirt Engine. And also the command # journalctl -r -a -u ovirt-engine for example I had a failure on November and the comamnd at a certain point gives: Nov 24 20:27:29 tekkaman.localdomain.local systemd[1]: Unit ovirt-engine.service entered failed state. Nov 24 20:27:29 tekkaman.localdomain.local systemd[1]: Failed to start oVirt Engine. Nov 24 20:27:29 tekkaman.localdomain.local systemd[1]: ovirt-engine.service: control process exited, code=exited status=1 Nov 24 20:27:29 tekkaman.localdomain.local engine-service[2598]: Starting engine-service: [FAILED] Nov 24 20:27:29 tekkaman.localdomain.local engine-service[2598]: The directory /usr/lib/jvm/jre-1.7.0-openjdk.x86_64 doesn' Nov 24 20:27:29 tekkaman.localdomain.local systemd[1]: Starting oVirt Engine... so your output should contain something useful. Also, id you run engine-cleanup before running engine-setup again after adding memory? It should help too. Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Qemu guest agent to install RPMs in guest VM from host machine
Hi,
I want to be able to install RPM packages (available in host system at some
path) to the guest VM and want this facility to be available as a tool.
I am thinking of having a gemu guest agent (qemu-ga) running inside guest
VM. I did not find any available command (virsh qemu-agent-command
guest_vm ...) which can do the same.
I am planning to implement a command in qemu guest agent, which I can
invoke from virsh like below.
virsh qemu-agent-command vm_01 \
'{execute:guest-rpm-install, \
arguments:{path:/usr/local/bin/ABC.rpm}}
I am able to pass arguments from host to guest VM but how am I supposed to
pass the whole RPM image from host to guest (which the guest agent can
receive and install)?
Regards,
~Puneet
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
