[ovirt-users] Debian linux and oVirt SSO

[Tadas]

Hello,
i'm struggling to get oVirt SSO working on Linux guest VM.
I can confirm, that SSO is fully functional on Windows guest (please
note it's not a full oVirt installation - I'm just testing oVirt guest
agent on virtual machines running on plain KVM hypervisor).

Steps I've made:
got oVirt guest agent up and running, I can communicate with it from
hypervisor:

socat /var/lib/libvirt/qemu/channel/target/domain-80-KDE64_1/com.kvm-
vdi.0 -
{"__name__": "os-version", "version": "4.6.0-1-amd64"}
Compiled and copied pam_ovirt_cred.so to /lib/x86_64-linux-gnu/security

Configured /etc/pam.d/kdm-ovirt-cred with:

%PAM-1.0
authrequiredpam_ovirt_cred.so
authinclude password-auth
account include password-auth
passwordinclude password-auth
session requiredpam_selinux.so close
session requiredpam_selinux.so open
session include password-auth

Compiled and copied kgreet_ovirtcred.so to /usr/lib/kde4

Configured /etc/kde4/kdm/kdmrc with:

PluginsLogin=ovirtcred

Symptoms:
After starting kdm, I get login prompt with barely visible title (I
assume it should spell "oVirt Authentication" from
kgreet_ovirtcred.cpp). Username and password boxes are inactive - i
cannot enter anything to them. After emitting username/password to
oVirt agent, I can see the following log entries:

Dummy-1::INFO::2016-07-15 12:29:51,628::CredServer::207::root::The
following users are allowed to connect: [0]
Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::273::root::Opening
credentials channel...
Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::132::root::Emitting
user authenticated signal (509542).
CredChannel::INFO::2016-07-15
12:29:56,634::CredServer::241::root::Credentials channel timed out.

The only thing that worries me, - are the entries in kdm.log file:

klauncher(6100) kdemain: No DBUS session-bus found. Check if you have
started the DBUS server. 

Since oVirt guest agent sends wakeup message to greeter plugin via
Dbus, perhaps this is the problem? Maybe someone had the same problem
here?
This happens on Debian 8 and 9.

Thank you.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Multiple FC SAN's and Hosts LSM etc

[Neil]

Hi guys,

I'm soon going to have the following equipment and I'd like to find the
best way to utilise it

1.) One NEW FC SAN, and 3 new Dell Hosts with FC cards.

2.) One OLD FC SAN with 2 older HP hosts with FC cards. (old VMWare
environment)

3.) Another OLDER FC SAN with 2 older HP Hosts with FC cards. (old VMWare
environment)

4.) I have an existing oVirt 3.5 DR cluster with two hosts and NFS storage
that is current in use and works well.

Each of the above SAN's will only have FC ports to connect to their
existing hosts, so all hosts won't be connected to all SAN's. All hosts
would be the same Centos 7.x release etc.

All existing VM's are going to be moved to the option 1 via a baremetal
restore from backup onto a NEW oVirt platform. Once installed I'd then like
to re-commission 2 and 3 above to make use of the old hardware and SAN's as
secondary or possibly a "new" DR platform to replace or improve on option 4.

Bearing in mind the older hardware will be different CPU generations, would
it be best to add the older hosts and SAN's as new clusters within the same
NEW oVirt installation? Or should I rather just keep 2, 3 and 4 as separate
oVirt installations?

I know in the past live migration wouldn't work with different CPU
generations, and of course my SAN's won't be physically connected to each
of the hosts.

In order to move VM's between 1, 2 and 3 would I need to shut the VM down
and export and import, or is there another way to do this?

Could LSM work between across all three SANS and hosts?

I know I can do a baremetal restore from backup directly onto either 1, 2
or 3 if needed, but I'd like to try tie all of this into one platform if
there is good reason to do so. Any thoughts, suggestions or ideas here?

Any guidance is greatly appreciated.

Thank you

Regards.

Neil Wilson.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] ovirt-engine-4.0.6 Network Information

[??????]

Network information is set up on the interface.But the information of the 
virtual machine is not changed.That's why?




   on the interface??





On a virtual machine??

B84F9002@8A3A1725.6DB98857
Description: Binary data


537E3D91@8A3A1725.6DB98857
Description: Binary data
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] hosted-engine engine crash

[Milan Zamazal]

Mark Gagnon  writes:

> even if it's a storage problem, if it's to happen, how can I force it
> to restart the engine?

Hi Mark, it indeed looks like a storage problem.  Unfortunately, there's
very little what can be done when storage is broken.  I don't think
there is any better option than to restart the Engine manually as you
describe, once the storage is working again.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Debian linux and oVirt SSO

[Vinzenz Feenstra]

> On Jul 15, 2016, at 11:50 AM, Tadas  wrote:
> 
> Hello,
> i'm struggling to get oVirt SSO working on Linux guest VM.
> I can confirm, that SSO is fully functional on Windows guest (please
> note it's not a full oVirt installation - I'm just testing oVirt guest
> agent on virtual machines running on plain KVM hypervisor).
> 
> Steps I've made:
> got oVirt guest agent up and running, I can communicate with it from
> hypervisor:
> 
> socat /var/lib/libvirt/qemu/channel/target/domain-80-KDE64_1/com.kvm-
> vdi.0 -
> {"__name__": "os-version", "version": "4.6.0-1-amd64"}
> Compiled and copied pam_ovirt_cred.so to /lib/x86_64-linux-gnu/security
> 
> Configured /etc/pam.d/kdm-ovirt-cred with:
> 
> %PAM-1.0
> authrequiredpam_ovirt_cred.so
> authinclude password-auth
> account include password-auth
> passwordinclude password-auth
> session requiredpam_selinux.so close
> session requiredpam_selinux.so open
> session include password-auth
> 
> Compiled and copied kgreet_ovirtcred.so to /usr/lib/kde4
> 
> Configured /etc/kde4/kdm/kdmrc with:
> 
> PluginsLogin=ovirtcred

you should just add ovirtcred and not remove all the other options, without the 
other options you’re not able to login

> 
> Symptoms:
> After starting kdm, I get login prompt with barely visible title (I
> assume it should spell "oVirt Authentication" from
> kgreet_ovirtcred.cpp). Username and password boxes are inactive - i
> cannot enter anything to them. After emitting username/password to
> oVirt agent, I can see the following log entries:
> 
> Dummy-1::INFO::2016-07-15 12:29:51,628::CredServer::207::root::The
> following users are allowed to connect: [0]
> Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::273::root::Opening
> credentials channel...
> Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::132::root::Emitting
> user authenticated signal (509542).
> CredChannel::INFO::2016-07-15
> 12:29:56,634::CredServer::241::root::Credentials channel timed out.
> 
> The only thing that worries me, - are the entries in kdm.log file:
> 
> klauncher(6100) kdemain: No DBUS session-bus found. Check if you have
> started the DBUS server. 

To me it looks like that you’re missing 
https://github.com/oVirt/ovirt-guest-agent/blob/master/ovirt-guest-agent/org.ovirt.vdsm.Credentials.conf
 




> 
> Since oVirt guest agent sends wakeup message to greeter plugin via
> Dbus, perhaps this is the problem? Maybe someone had the same problem
> here?
> This happens on Debian 8 and 9.


However the KDM support is basically not really developed anymore as the 
majority of our users are rather using GDM. So there’s quite the possibility 
that there’s a problem.

> 
> Thank you.
> 
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Multiple FC SAN's and Hosts LSM etc

[Fernando Frediani]

One of the things I don't like very much in oVirt is the LVM on Shared 
Block storage, but unfortunately there are no other options. One day 
perhaps a VMFS5 equivalent will come up somewhere.


I would avoid it and put a server in between the SAN and the oVirt Nodes 
and use NFS in order to abstract it, that would give you more 
flexibility and keep you away from LVM. But in your case if you don't 
have 10GbE interfaces you will loose on performance using 1GbE interfaces.


With regards the  migration of VMs between different CPU families I'm 
not sure what is the tolerance of oVirt with it. Depending on the CPUs 
and the cluster types you may be able to do migrations.So I would keep 
different CPU families in different clusters.


Fernando

Em 15/07/2016 07:07, Neil escreveu:

Hi guys,

I'm soon going to have the following equipment and I'd like to find 
the best way to utilise it


1.) One NEW FC SAN, and 3 new Dell Hosts with FC cards.

2.) One OLD FC SAN with 2 older HP hosts with FC cards. (old VMWare 
environment)


3.) Another OLDER FC SAN with 2 older HP Hosts with FC cards. (old 
VMWare environment)


4.) I have an existing oVirt 3.5 DR cluster with two hosts and NFS 
storage that is current in use and works well.


Each of the above SAN's will only have FC ports to connect to their 
existing hosts, so all hosts won't be connected to all SAN's. All 
hosts would be the same Centos 7.x release etc.


All existing VM's are going to be moved to the option 1 via a 
baremetal restore from backup onto a NEW oVirt platform. Once 
installed I'd then like to re-commission 2 and 3 above to make use of 
the old hardware and SAN's as secondary or possibly a "new" DR 
platform to replace or improve on option 4.


Bearing in mind the older hardware will be different CPU generations, 
would it be best to add the older hosts and SAN's as new clusters 
within the same NEW oVirt installation? Or should I rather just keep 
2, 3 and 4 as separate oVirt installations?


I know in the past live migration wouldn't work with different CPU 
generations, and of course my SAN's won't be physically connected to 
each of the hosts.


In order to move VM's between 1, 2 and 3 would I need to shut the VM 
down and export and import, or is there another way to do this?


Could LSM work between across all three SANS and hosts?

I know I can do a baremetal restore from backup directly onto either 
1, 2 or 3 if needed, but I'd like to try tie all of this into one 
platform if there is good reason to do so. Any thoughts, suggestions 
or ideas here?


Any guidance is greatly appreciated.

Thank you

Regards.

Neil Wilson.






___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] The Foreman 1.12 now sets VM OS type correctly for oVirt

[Yaniv Kaul]

A community member I met in FOSDEM mentioned this issue to me, and I've
just seen[1] it is fixed in latest Foreman - when provisioning VMs via
Foreman, the OS is now properly set in oVirt.

Y.
[1] http://projects.theforeman.org/issues/6959
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] disk not bootable

[Fernando Fuentes]

Nir,

I try to follow your steps but I cant seem to find the ID of the
template.

Regards, 

-- 
Fernando Fuentes
ffuen...@txweather.org
http://www.txweather.org

On Sun, Jul 10, 2016, at 02:15 PM, Nir Soffer wrote:
> On Thu, Jul 7, 2016 at 7:46 PM, Melissa Mesler 
> wrote:
> > All, I did a test for Fernando in our ovirt environment. I created a vm
> > called win7melly in the nfs domain. I then migrated it to the iscsi
> > domain. It booted without any issue. So it has to be something with the
> > templates. I have attached the vdsm log for the host the vm resides on.
> 
> The log show a working vm, so it does not help much.
> 
> I think that the template you copied from the nfs domain to the block
> domain is
> corrupted, or the volume metadata are incorrect.
> 
> If I understand this correctly, this started when Fernando could not copy
> the vm
> disk to the block storage, and I guess the issue was that the template
> was missing
> on that storage domain. I assume that he copied the template to the
> block storage
> domain by opening the templates tab, selecting the template, and choosing
> copy
> from the menu.
> 
> Lets compare the template on both nfs and block storage domain.
> 
> 1. Find the template on the nfs storage domain, using the image uuid in
> engine.
> 
> It should be at
> 
> 
> /rhev/data-center/mnt/server:_path/domain-uuid/images/image-uuid/volume-uuid
> 
> 2. Please share the output of:
> 
> cat /path/to/volume.meta
> qemu-img info /path/to/volume
> qemu-img check /path/to/volume
> 
> 4. Find the template on the block storage domain
> 
> You should have an lv using the same volume uuid and the image-uuid
> should be in the lv tag.
> 
> Find it using:
> 
> lvs -o vg_name,lv_name,tags | grep volume-uuid
> 
> 5. Activate the lv
> 
> lvchange -ay vg_name/lv_name
> 
> 6. Share the output of
> 
> qemu-img info /dev/vg_name/lv_name
> qemu-img check /dev/vg_name/lv_name
> 
> 7. Deactivate the lv
> 
> lvchange -an vg_name/lv_name
> 
> 8. Find the lv metadata
> 
> The metadata is stored in /dev/vg_name/metadata. To find the correct
> block,
> find the tag named MD_N in the lv tags you found in step 4
> 
> The block we need is located at offset N from start of volume.
> 
> 9. Share the output of:
> 
> dd if=/dev/vg_name/metadata bs=512 skip=N count=1 iflag=direct
> 
> The output of this command should show the image-uuid.
> 
> Nir
> 
> >
> > - MeLLy
> >
> > On Mon, Jul 4, 2016, at 11:52 PM, Fernando Fuentes wrote:
> >> Nir,
> >>
> >> That's exactly how I did it Nir.
> >> I will test tomorrow with a new Windows VM and report back.
> >>
> >> Regards,
> >>
> >> --
> >> Fernando Fuentes
> >> ffuen...@txweather.org
> >> http://www.txweather.org
> >>
> >> On Mon, Jul 4, 2016, at 10:48 AM, Nir Soffer wrote:
> >> > On Mon, Jul 4, 2016 at 6:43 PM, Francesco Romani 
> >> > wrote:
> >> > > - Original Message -
> >> > >> From: "Nir Soffer" 
> >> > >> To: "Fernando Fuentes" 
> >> > >> Cc: "Francesco Romani" , "users" 
> >> > >> Sent: Saturday, July 2, 2016 11:18:01 AM
> >> > >> Subject: Re: [ovirt-users] disk not bootable
> >> > >>
> >> > >> On Sat, Jul 2, 2016 at 1:33 AM, Fernando Fuentes 
> >> > >> 
> >> > >> wrote:
> >> > >> > Nir,
> >> > >> >
> >> > >> > Ok I ran another test and this one I moved from NFS domain to iSCSI 
> >> > >> > and
> >> > >> > stop working than I moved it back and still unable to run... 
> >> > >> > Windows VM
> >> > >> > is saying "no available boot disk"
> >> > >> > VM: Win7-Test
> >> > >> > Host: Zeta
> >> > >> > Info as requested:  http://pastebin.com/1fSi3auz
> >> > >>
> >> > >> We need a working xml to compare to.
> >> > >
> >> > > [snip expected changes]
> >> > >
> >> > >
> >> > >>   oVirt
> >> > >>   oVirt Node
> >> > >>   6-5.el6.centos.11.2
> >> > >> - C938F077-55E2-3E50-A694-9FCB7661FD89
> >> > >> + 735C7A01-1F16-3CF0-AF8C-A99823E95AC0
> >> > >>
> >> > >> Not expected - maybe this is confusing windows?
> >> > >>
> >> > >> Francesco, why vm serial has changed after moving disks from one 
> >> > >> storage
> >> > >> domain
> >> > >> to another?
> >> > >
> >> > > We put in serial either
> >> > > 1. the UUID Engine send to us
> >> > > 2. the host UUID as returned by our getHostUUID utility function
> >> > >
> >> > > the latter is unlikely to change, even after this disk move.
> >> >
> >> > Fernando, can you describe exactly how you moved the disk?
> >> >
> >> > I assume that you selected the vm in the virtual machines tab, then
> >> > selected
> >> > disks from the sub tab, then selected move, and selected the target
> >> > storage domain.
> >> >
> >> > Also, can you reproduce this with a new vm? (create vm with disk nfs,
> >> > stop vm,
> >> > move disk to iscsi, start vm).
> >> >
> >> > > So the first suspect in line is Engine
> >> > >
> >> > > Arik, do you know if Engine is indeed supposed to change the UUID in 
> >> > > this flow?
> >> > > That seems very surprising.
> >> > >
> >> > > Thanks and bests,
> >> > >
> >> > > --
> 

Re: [ovirt-users] Multiple FC SAN's and Hosts LSM etc

[Yaniv Kaul]

On Fri, Jul 15, 2016 at 3:47 PM, Fernando Frediani <
fernando.fredi...@upx.com.br> wrote:

> One of the things I don't like very much in oVirt is the LVM on Shared
> Block storage, but unfortunately there are no other options. One day
> perhaps a VMFS5 equivalent will come up somewhere.
>

For some use cases, direct LUN is a great solution.


>
> I would avoid it and put a server in between the SAN and the oVirt Nodes
> and use NFS in order to abstract it, that would give you more flexibility
> and keep you away from LVM. But in your case if you don't have 10GbE
> interfaces you will loose on performance using 1GbE interfaces.
>

Even 10g would be difficult to compete with (what I assume is usually) 2x8G
FC ports, in term of performance. Some kind of bond will be needed to
provide the same level of redundancy - and still the NFS server would be a
single point of failure.


>
> With regards the  migration of VMs between different CPU families I'm not
> sure what is the tolerance of oVirt with it. Depending on the CPUs and the
> cluster types you may be able to do migrations.So I would keep different
> CPU families in different clusters.
>

Note that you can detach and attach complete storage domains (assuming you
moved the LUNs via some other means - like SAN replication), and not
import-export single VMs. This has of course its cons and pros.
Y.


>
> Fernando
>
>
> Em 15/07/2016 07:07, Neil escreveu:
>
> Hi guys,
>
> I'm soon going to have the following equipment and I'd like to find the
> best way to utilise it
>
> 1.) One NEW FC SAN, and 3 new Dell Hosts with FC cards.
>
> 2.) One OLD FC SAN with 2 older HP hosts with FC cards. (old VMWare
> environment)
>
> 3.) Another OLDER FC SAN with 2 older HP Hosts with FC cards. (old VMWare
> environment)
>
> 4.) I have an existing oVirt 3.5 DR cluster with two hosts and NFS storage
> that is current in use and works well.
>
> Each of the above SAN's will only have FC ports to connect to their
> existing hosts, so all hosts won't be connected to all SAN's. All hosts
> would be the same Centos 7.x release etc.
>
> All existing VM's are going to be moved to the option 1 via a baremetal
> restore from backup onto a NEW oVirt platform. Once installed I'd then like
> to re-commission 2 and 3 above to make use of the old hardware and SAN's as
> secondary or possibly a "new" DR platform to replace or improve on option 4.
>
> Bearing in mind the older hardware will be different CPU generations,
> would it be best to add the older hosts and SAN's as new clusters within
> the same NEW oVirt installation? Or should I rather just keep 2, 3 and 4 as
> separate oVirt installations?
>
> I know in the past live migration wouldn't work with different CPU
> generations, and of course my SAN's won't be physically connected to each
> of the hosts.
>
> In order to move VM's between 1, 2 and 3 would I need to shut the VM down
> and export and import, or is there another way to do this?
>
> Could LSM work between across all three SANS and hosts?
>
> I know I can do a baremetal restore from backup directly onto either 1, 2
> or 3 if needed, but I'd like to try tie all of this into one platform if
> there is good reason to do so. Any thoughts, suggestions or ideas here?
>
> Any guidance is greatly appreciated.
>
> Thank you
>
> Regards.
>
> Neil Wilson.
>
>
>
>
>
>
> ___
> Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Debian linux and oVirt SSO

[Yaniv Kaul]

On Fri, Jul 15, 2016 at 12:50 PM, Tadas  wrote:

> Hello,
> i'm struggling to get oVirt SSO working on Linux guest VM.
> I can confirm, that SSO is fully functional on Windows guest (please
> note it's not a full oVirt installation - I'm just testing oVirt guest
> agent on virtual machines running on plain KVM hypervisor).
>

Part of the issue is that you are missing quite a bit of the orchestration
that oVirt performs to make SSO work...
There may some other issues, but I warmly suggest using oVirt and not the
undocumented APIs - which may or may not change in the future, between the
agent and other components.
 Y.


> Steps I've made:
> got oVirt guest agent up and running, I can communicate with it from
> hypervisor:
>
> socat /var/lib/libvirt/qemu/channel/target/domain-80-KDE64_1/com.kvm-
> vdi.0 -
> {"__name__": "os-version", "version": "4.6.0-1-amd64"}
> Compiled and copied pam_ovirt_cred.so to /lib/x86_64-linux-gnu/security
>
> Configured /etc/pam.d/kdm-ovirt-cred with:
>
> %PAM-1.0
> authrequiredpam_ovirt_cred.so
> authinclude password-auth
> account include password-auth
> passwordinclude password-auth
> session requiredpam_selinux.so close
> session requiredpam_selinux.so open
> session include password-auth
>
> Compiled and copied kgreet_ovirtcred.so to /usr/lib/kde4
>
> Configured /etc/kde4/kdm/kdmrc with:
>
> PluginsLogin=ovirtcred
>
> Symptoms:
> After starting kdm, I get login prompt with barely visible title (I
> assume it should spell "oVirt Authentication" from
> kgreet_ovirtcred.cpp). Username and password boxes are inactive - i
> cannot enter anything to them. After emitting username/password to
> oVirt agent, I can see the following log entries:
>
> Dummy-1::INFO::2016-07-15 12:29:51,628::CredServer::207::root::The
> following users are allowed to connect: [0]
> Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::273::root::Opening
> credentials channel...
> Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::132::root::Emitting
> user authenticated signal (509542).
> CredChannel::INFO::2016-07-15
> 12:29:56,634::CredServer::241::root::Credentials channel timed out.
>
> The only thing that worries me, - are the entries in kdm.log file:
>
> klauncher(6100) kdemain: No DBUS session-bus found. Check if you have
> started the DBUS server.
>
> Since oVirt guest agent sends wakeup message to greeter plugin via
> Dbus, perhaps this is the problem? Maybe someone had the same problem
> here?
> This happens on Debian 8 and 9.
>
> Thank you.
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Debian linux and oVirt SSO

[Tadas]

SSO part as simple as emitting correctly formed json to spice socket, - as I’ve 
 mentioned before, this works fine with windows guests.
Problem is only with linux guests. As for undocummented API, yes, – you are 
right, documentation should help alot. It takes time to reverse engineer code.
But having full oVirt solution or not does not change the thing, that there’s 
something wrong with linux kde plugin. I’m very confident, that this will 
persist if used Linux guest on oVirt. Perhaps this is just Debian oriented 
problem, so I was wondering if anyone had the same issue here.


From: Yaniv Kaul 
Sent: Friday, July 15, 2016 3:57 PM
To: ta...@ring.lt 
Cc: users 
Subject: Re: [ovirt-users] Debian linux and oVirt SSO


 

Part of the issue is that you are missing quite a bit of the orchestration that 
oVirt performs to make SSO work...
There may some other issues, but I warmly suggest using oVirt and not the 
undocumented APIs - which may or may not change in the future, between the 
agent and other components.
Y.


  Steps I've made:
  got oVirt guest agent up and running, I can communicate with it from
  hypervisor:

  socat /var/lib/libvirt/qemu/channel/target/domain-80-KDE64_1/com.kvm-
  vdi.0 -
  {"__name__": "os-version", "version": "4.6.0-1-amd64"}
  Compiled and copied pam_ovirt_cred.so to /lib/x86_64-linux-gnu/security

  Configured /etc/pam.d/kdm-ovirt-cred with:

  %PAM-1.0
  authrequiredpam_ovirt_cred.so
  authinclude password-auth
  account include password-auth
  passwordinclude password-auth
  session requiredpam_selinux.so close
  session requiredpam_selinux.so open
  session include password-auth

  Compiled and copied kgreet_ovirtcred.so to /usr/lib/kde4

  Configured /etc/kde4/kdm/kdmrc with:

  PluginsLogin=ovirtcred

  Symptoms:
  After starting kdm, I get login prompt with barely visible title (I
  assume it should spell "oVirt Authentication" from
  kgreet_ovirtcred.cpp). Username and password boxes are inactive - i
  cannot enter anything to them. After emitting username/password to
  oVirt agent, I can see the following log entries:

  Dummy-1::INFO::2016-07-15 12:29:51,628::CredServer::207::root::The
  following users are allowed to connect: [0]
  Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::273::root::Opening
  credentials channel...
  Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::132::root::Emitting
  user authenticated signal (509542).
  CredChannel::INFO::2016-07-15
  12:29:56,634::CredServer::241::root::Credentials channel timed out.

  The only thing that worries me, - are the entries in kdm.log file:

  klauncher(6100) kdemain: No DBUS session-bus found. Check if you have
  started the DBUS server. 

  Since oVirt guest agent sends wakeup message to greeter plugin via
  Dbus, perhaps this is the problem? Maybe someone had the same problem
  here?
  This happens on Debian 8 and 9.

  Thank you.


  ___
  Users mailing list
  Users@ovirt.org
  http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] oVirt + Gluster Hyperconverged

[Fernando Frediani]

Hi folks,

I have a few servers with reasonable amount of raw storage but they are 
3 with only 8GB of memory each.
I wanted to have them with an oVirt Hyperconverged + Gluster mainly to 
take advantage of the amount of the storage spread between them and have 
ability to live migrate VMs.


Question is: Does running Gluster on the same Hypervisor nodes consumes 
any significant memory that won't be much left for running VMs ?


Thanks
Fernando
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Move from Local SD to Shared

[Alexandr Krivulya]

Hi,

I need to move my datacenter from local storage domain to shared (nfs or
posix) without destroying storage. What is the best way to do it in
oVirt 3.6?

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Importing QCOW2 into ovirt-3.6

[Alexis HAUSER]

Hi,


I downloaded a linux appliance "for KVM" in .QCOW2 extension. How can I import 
it ?

I tried adding it manually to a NFS share but it doesn't seem detected by ovirt 
3.6

Any ideas ?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Debian linux and oVirt SSO

[Tadas]

Thank you for reply.


you =hould just add ovirtcred and not remove all the other options, without 
=he other options you’re not able to login
There are other options, i’ve just changed the folowing parameter:
PluginsLogin=ovirtcred
should i use somekind of plugin list and add the classic plugin also? eg:
PluginsLogin=classic, ovirtcred
  To me =t looks like that you’re missing 
  
https://github.com/oVirt/ovirt-guest-agent/blob/master/ovirt-gu=st-agent/org.ovirt.vdsm.Credentials.conf



seems you are right. Now i do see ovirt in dbus sessions:

DISPLAY=:0.0 dbus-send --system --dest=org.freedesktop.DBus --type=method_call 
--print-reply /org/freedesktop/DBus org.freedesktop.DBus.ListNames

array [
   string "org.freedesktop.DBus"
   string "org.freedesktop.login1"
   string ":1.72"
   string ":1.171"
   string "org.freedesktop.systemd1"
   string "org.freedesktop.PolicyKit1"
   string ":1.360"
   string ":1.66"
   string "org.freedesktop.PackageKit"
   string ":1.67"
   string "org.freedesktop.UPower"
   string ":1.363"
   string ":1.0"
   string "org.freedesktop.UDisks2"
   string ":1.68"
   string ":1.364"
   string "org.ovirt.vdsm.Credentials"
   string ":1.365"
   string ":1.366"
   string "org.freedesktop.RealtimeKit1"
]


But still getting the samer error:

Dummy-1::INFO::2016-07-15 18:08:12,299::OVirtAgentLogic::294::root::Received an 
external command: login...
Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::207::root::The following 
users are allowed to connect: [0]
Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::273::root::Opening 
credentials channel...
Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::132::root::Emitting user 
authenticated signal (656949).
CredChannel::INFO::2016-07-15 18:08:17,306::CredServer::241::root::Credentials 
channel timed out.
Dummy-1::INFO::2016-07-15 18:08:17,307::CredServer::277::root::Credentials 
channel was closed.


However the KDM support =s basically not really developed anymore as 
the majority of our users =re rather using GDM. So there’s quite the 
possibility that =here’s a problem.

Well, i’m having different issues while trying to compile gdm plugin:
configure: error: Package requirements (dbus-glib-1 >= 0.74
gdmsimplegreeter >= 3.2.1.1
gobject-2.0 >= 2.22.0
gtk+-2.0 >= 2.18.0
) were not met:

Package gdmsimplegreeter was not found in the pkg-config search path.
Found no information, o how to get gdmsimplegreeter.




  Thank you.


  ___
  Users mailing list
  Users@ovirt.org
  http://lists.ovirt.org/mailman/listinfo/users


=___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Debian linux and oVirt SSO

[Vinzenz Feenstra]

> On Jul 15, 2016, at 5:09 PM, Tadas  wrote:
> 
> Thank you for reply.
>  
>  
> you =hould just add ovirtcred and not remove all the other options, 
> without =he other options you’re not able to login
>  
> There are other options, i’ve just changed the folowing parameter:
> PluginsLogin=ovirtcred
> should i use somekind of plugin list and add the classic plugin also? eg:
> PluginsLogin=classic, ovirtcred
>> To me =t looks like that you’re missing
>> https://github.com/oVirt/ovirt-guest-agent/blob/master/ovirt-gu=st-agent/org.ovirt.vdsm.Credentials.conf
>>  
>> 
>>  
>>  
>>  
> seems you are right. Now i do see ovirt in dbus sessions:
>  
> DISPLAY=:0.0 dbus-send --system --dest=org.freedesktop.DBus 
> --type=method_call --print-reply /org/freedesktop/DBus 
> org.freedesktop.DBus.ListNames
>  
> array [
>string "org.freedesktop.DBus"
>string "org.freedesktop.login1"
>string ":1.72"
>string ":1.171"
>string "org.freedesktop.systemd1"
>string "org.freedesktop.PolicyKit1"
>string ":1.360"
>string ":1.66"
>string "org.freedesktop.PackageKit"
>string ":1.67"
>string "org.freedesktop.UPower"
>string ":1.363"
>string ":1.0"
>string "org.freedesktop.UDisks2"
>string ":1.68"
>string ":1.364"
>string "org.ovirt.vdsm.Credentials"
>string ":1.365"
>string ":1.366"
>string "org.freedesktop.RealtimeKit1"
> ]
>  
>  
> But still getting the samer error:
>  
> Dummy-1::INFO::2016-07-15 18:08:12,299::OVirtAgentLogic::294::root::Received 
> an external command: login...
> Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::207::root::The following 
> users are allowed to connect: [0]
> Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::273::root::Opening 
> credentials channel...
> Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::132::root::Emitting user 
> authenticated signal (656949).
> CredChannel::INFO::2016-07-15 
> 18:08:17,306::CredServer::241::root::Credentials channel timed out.
> Dummy-1::INFO::2016-07-15 18:08:17,307::CredServer::277::root::Credentials 
> channel was closed.
>  
>  
> However the KDM support =s basically not really developed anymore as 
> the majority of our users =re rather using GDM. So there’s quite the 
> possibility that =here’s a problem.
>  
> Well, i’m having different issues while trying to compile gdm plugin:
> configure: error: Package requirements (dbus-glib-1 >= 0.74
> gdmsimplegreeter >= 3.2.1.1
> gobject-2.0 >= 2.22.0
> gtk+-2.0 >= 2.18.0
> ) were not met:
>  
> Package gdmsimplegreeter was not found in the pkg-config search path.
> Found no information, o how to get gdmsimplegreeter.

That’s for GDM < 3.8ish from 3.10 we have the GDM SSO code builtin GNOME you 
only need that the conf file and the pam extension plus the gdm-ovirtcred  pam 
config

>  
> 
>> 
>> Thank you.
>> 
>> 
>> ___
>> Users mailing list
>> Users@ovirt.org <>
>> http://lists.ovirt.org/mailman/listinfo/users
> 
> =
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Debian linux and oVirt SSO

[Tadas]

Aha. Thank you. Will try this one

From: Vinzenz Feenstra 
Sent: Friday, July 15, 2016 7:35 PM
To: Tadas 
Cc: users@ovirt.org 
Subject: Re: [ovirt-users] Debian linux and oVirt SSO


  On Jul 15, 2016, at 5:09 PM, Tadas  wrote:

  Thank you for reply.


  you =hould just add ovirtcred and not remove all the other options, 
without =he other options you’re not able to login
  There are other options, i’ve just changed the folowing parameter:
  PluginsLogin=ovirtcred
  should i use somekind of plugin list and add the classic plugin also? eg:
  PluginsLogin=classic, ovirtcred
To me =t looks like that you’re missing 

https://github.com/oVirt/ovirt-guest-agent/blob/master/ovirt-gu=st-agent/org.ovirt.vdsm.Credentials.conf



  seems you are right. Now i do see ovirt in dbus sessions:

  DISPLAY=:0.0 dbus-send --system --dest=org.freedesktop.DBus 
--type=method_call --print-reply /org/freedesktop/DBus 
org.freedesktop.DBus.ListNames

  array [
 string "org.freedesktop.DBus"
 string "org.freedesktop.login1"
 string ":1.72"
 string ":1.171"
 string "org.freedesktop.systemd1"
 string "org.freedesktop.PolicyKit1"
 string ":1.360"
 string ":1.66"
 string "org.freedesktop.PackageKit"
 string ":1.67"
 string "org.freedesktop.UPower"
 string ":1.363"
 string ":1.0"
 string "org.freedesktop.UDisks2"
 string ":1.68"
 string ":1.364"
 string "org.ovirt.vdsm.Credentials"
 string ":1.365"
 string ":1.366"
 string "org.freedesktop.RealtimeKit1"
  ]


  But still getting the samer error:

  Dummy-1::INFO::2016-07-15 18:08:12,299::OVirtAgentLogic::294::root::Received 
an external command: login...
  Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::207::root::The following 
users are allowed to connect: [0]
  Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::273::root::Opening 
credentials channel...
  Dummy-1::INFO::2016-07-15 18:08:12,300::CredServer::132::root::Emitting user 
authenticated signal (656949).
  CredChannel::INFO::2016-07-15 
18:08:17,306::CredServer::241::root::Credentials channel timed out.
  Dummy-1::INFO::2016-07-15 18:08:17,307::CredServer::277::root::Credentials 
channel was closed.


  However the KDM support =s basically not really developed anymore as 
the majority of our users =re rather using GDM. So there’s quite the 
possibility that =here’s a problem.

  Well, i’m having different issues while trying to compile gdm plugin:
  configure: error: Package requirements (dbus-glib-1 >= 0.74
  gdmsimplegreeter >= 3.2.1.1
  gobject-2.0 >= 2.22.0
  gtk+-2.0 >= 2.18.0
  ) were not met:

  Package gdmsimplegreeter was not found in the pkg-config search path.
  Found no information, o how to get gdmsimplegreeter.

That’s for GDM < 3.8ish from 3.10 we have the GDM SSO code builtin GNOME you 
only need that the conf file and the pam extension plus the gdm-ovirtcred  pam 
config





Thank you.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


  =
  ___
  Users mailing list
  Users@ovirt.org
  http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Trunk port for a guest nic?

[Edward Haas]

On Wed, Jul 13, 2016 at 11:40 PM, Dan Lavu  wrote:

> Hello,
>
> I remember reading some posts about this in the past, but I don't know if
> anything came of it. Is this now possible? If so, does anybody have any
> documentation on how to do this in 4.0?
>
> Thanks,
>
> Dan
>
>
Hello Dan,

If you mean allowing a VM to communicate on multiple vlan/s, then attaching
a VM to a non-vlan network should do the job.
You just need to define a trunk in the VM.

Thanks,
Edy.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users