Re: [ovirt-users] Could not get access to ACL tech driver 'ebiptables'

[Kenneth Bingham]

I suspect this has something to do with macspoofing because I found that I
was able to start a guest by changing the virtual network interface profile
to remove network filtering. I verified the guests are able to start with
filtering enabled on the vnic profile if it is set to false in
engine-config and ovirt-engine service bounced. I'd prefer to leaf
macspoofing disabled globally and only enable for things like VRR, CARP;
but I'll have to leave it enabled for now. Could it be that the macs of the
imported guests, being from the foreign mac pool, are being blocked by an
ebtables policy? I wonder if I add their Ethernet range to the pools of the
gaining Manager...

On Fri, Nov 18, 2016 at 9:35 PM Kenneth Bingham  wrote:

> I imported a guest from its iscsi storage domain and clicked the green UP
> button, but the guest failed to start. This was the first time vdsm tried
> to create a temporary storage domain for a host other than hosted_engine.
> I'm using the same chap credential that was used with the same iscsi
> storage domain with the old instance of Manager. It looks like it wasn't
> able to get permission to do something, but everything was set up with
> sudo-as-root. I used CentOS 7.2 with the ovirt-release repository and
> hosted-engine script to deploy Manager.
>
> From /var/log/vdsm/vdsm.log on the host where it tried to start:
> Thread-23385::ERROR::2016-11-19
> 02:12:41,907::vm::765::virt.vm::(_startUnderlyingVm)
> vmId=`c3125d32-ae2a-4d2f-af4c-13661d90ddf9`::*The vm start process failed*
> Traceback (most recent call last):
>   File "/usr/share/vdsm/virt/vm.py", line 706, in _startUnderlyingVm
> self._run()
>   File "/usr/share/vdsm/virt/vm.py", line 1996, in _run
> self._connection.createXML(domxml, flags),
>   File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
> 123, in wrapper
> ret = f(*args, **kwargs)
>   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 917, in
> wrapper
> return func(inst, *args, **kwargs)
>   File "*/usr/lib64/python2.7/site-packages/libvirt.py*", line 3611, in
> *createXML*
> if ret is None:raise libvirtError('virDomainCreateXML() failed',
> conn=self)
> libvirtError: internal error: *Could not get access to ACL tech driver
> 'ebiptables'*
>
> From /usr/lib64/python2.7/site-packages/libvirt.py which raised the error:
> def createXML(self, xmlDesc, flags=0):
> """Launch a new guest domain, based on an XML description similar
> to the one returned by virDomainGetXMLDesc()
> This function may require privileged access to the hypervisor.
> The domain is not persistent, so its definition will disappear
> when it
> is destroyed, or if the host is restarted (see
> virDomainDefineXML() to
> define persistent domains).
>
> If the VIR_DOMAIN_START_PAUSED flag is set, the guest domain
> will be started, but its CPUs will remain paused. The CPUs
> can later be manually started using virDomainResume.
>
> If the VIR_DOMAIN_START_AUTODESTROY flag is set, the guest
> domain will be automatically destroyed when the virConnectPtr
> object is finally released. This will also happen if the
> client application crashes / loses its connection to the
> libvirtd daemon. Any domains marked for auto destroy will
> block attempts at migration, save-to-file, or snapshots.
>
> virDomainFree should be used to free the resources after the
> domain object is no longer needed. """
> ret = libvirtmod.virDomainCreateXML(self._o, xmlDesc, flags)
> if ret is None:raise libvirtError('virDomainCreateXML() failed',
> conn=self)
> __tmp = virDomain(self,_obj=ret)
> return __tmp
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Could not get access to ACL tech driver 'ebiptables'

[Kenneth Bingham]

I imported a guest from its iscsi storage domain and clicked the green UP
button, but the guest failed to start. This was the first time vdsm tried
to create a temporary storage domain for a host other than hosted_engine.
I'm using the same chap credential that was used with the same iscsi
storage domain with the old instance of Manager. It looks like it wasn't
able to get permission to do something, but everything was set up with
sudo-as-root. I used CentOS 7.2 with the ovirt-release repository and
hosted-engine script to deploy Manager.

>From /var/log/vdsm/vdsm.log on the host where it tried to start:
Thread-23385::ERROR::2016-11-19
02:12:41,907::vm::765::virt.vm::(_startUnderlyingVm)
vmId=`c3125d32-ae2a-4d2f-af4c-13661d90ddf9`::*The vm start process failed*
Traceback (most recent call last):
  File "/usr/share/vdsm/virt/vm.py", line 706, in _startUnderlyingVm
self._run()
  File "/usr/share/vdsm/virt/vm.py", line 1996, in _run
self._connection.createXML(domxml, flags),
  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
123, in wrapper
ret = f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 917, in
wrapper
return func(inst, *args, **kwargs)
  File "*/usr/lib64/python2.7/site-packages/libvirt.py*", line 3611, in
*createXML*
if ret is None:raise libvirtError('virDomainCreateXML() failed',
conn=self)
libvirtError: internal error: *Could not get access to ACL tech driver
'ebiptables'*

>From /usr/lib64/python2.7/site-packages/libvirt.py which raised the error:
def createXML(self, xmlDesc, flags=0):
"""Launch a new guest domain, based on an XML description similar
to the one returned by virDomainGetXMLDesc()
This function may require privileged access to the hypervisor.
The domain is not persistent, so its definition will disappear when
it
is destroyed, or if the host is restarted (see virDomainDefineXML()
to
define persistent domains).

If the VIR_DOMAIN_START_PAUSED flag is set, the guest domain
will be started, but its CPUs will remain paused. The CPUs
can later be manually started using virDomainResume.

If the VIR_DOMAIN_START_AUTODESTROY flag is set, the guest
domain will be automatically destroyed when the virConnectPtr
object is finally released. This will also happen if the
client application crashes / loses its connection to the
libvirtd daemon. Any domains marked for auto destroy will
block attempts at migration, save-to-file, or snapshots.

virDomainFree should be used to free the resources after the
domain object is no longer needed. """
ret = libvirtmod.virDomainCreateXML(self._o, xmlDesc, flags)
if ret is None:raise libvirtError('virDomainCreateXML() failed',
conn=self)
__tmp = virDomain(self,_obj=ret)
return __tmp
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Storage domain for Engine does not appear

[Oscar Segarra]

Hi,

I have created a 3 node gluster (replica 3) and I have made a fresh install
of the ovirt engine (4.0.5.5-1). The install process has finishes
successfuly but when I connect the ovirt engine the storage domain where
Engine lives does not appear.

If I try to import it, I'm able to make it appear but i cannot attach it to
a Data Center.

Has anyone experienced this issue?

Thanks a lot.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Self hosted single server network requirements

[Mark Steckel]

Hi folks,

I'm a complete OVirt newbie trying to set up a self hosted, single server and 
looking for some pointers to get going... (While new to OVirt, I'm long time 
sysadmin so not totally clueless.)

The server I'm using has a 4-core CPU, 64 GB of ram, and a pair of 500 GB SSDs 
set up with RAID 1 and running CentOS 7.2. (I do not have physical access to 
the server but can get KVM access when required.)

The goal is to set up this server as a self hosted, single server OVirt 
platform. Nothing mission critical, just want to be able to spin up VMs when 
needed and destroy them afterwards.

Trying to use OVirt 4.0.4 (now 4.0.5).

I've read some docs for setting this up including those just below as well as a 
bunch of googling and reading through the list archive.

   http://www.ovirt.org/documentation/how-to/hosted-engine/
   http://www.ovirt.org/develop/release-management/features/heapplianceflow/
   
http://www.ovirt.org/blog/2016/08/up-and-running-with-ovirt-4-0-and-gluster-storage/

Every time I execute "hosted-engine --deploy" the process "hangs" when it 
migrates the public IP address to a virtual nic interface. And in this case, by 
"hang" I mean that I lose the connection to the server. I have no idea if the 
process finishes or errors out.

So obviously I'm doing something wrong.

I suspect that I need to take care of some network requirement before starting. 
However, I can't find anything in the docs of how to prep the server network 
environment before running "hosted-engine --deploy". 

Should probably also mention that some, if not all of the VMs will need a 
public IP address. The physical server has a /29 to get started.

Any pointers would be greatly appreciated.

Thanks
Mark


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Users Digest, Vol 62, Issue 74

[M B]

I wonder if this is related to the following bug.

https://bugzilla.redhat.com/show_bug.cgi?id=1392719

On Thu, Nov 17, 2016 at 12:53 PM, Raian Nasrulla  wrote:

> Hi,
>
> I am sharing you the video, how i tried installing the win10 guest on
> ovirt. where it fails to install drivers.
>
> https://drive.google.com/open?id=0B6uXPB3H9O08cXpSbkZqZTdNMzA
>
> Regards,
> Raian HN
>
> On Mon, Nov 14, 2016 at 9:27 PM, ra...@weberon.net 
> wrote:
>
>> Yes, I have tried installing it from virtio, it goes on like its going to
>> install, then after a while fails with message, no drivers found.
>>
>> Sent from Yahoo Mail on Android
>> 
>>
>> On Sun, Nov 13, 2016 at 22:30, users-requ...@ovirt.org
>>  wrote:
>> Send Users mailing list submissions to
>> users@ovirt.org
>>
>> To subscribe or unsubscribe via the World Wide Web, visit
>> http://lists.ovirt.org/mailman/listinfo/users
>> or, via email, send a message with subject or body 'help' to
>> users-requ...@ovirt.org
>>
>> You can reach the person managing the list at
>> users-ow...@ovirt.org
>>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of Users digest..."
>>
>>
>> Today's Topics:
>>
>>   1. Re:  Problem installing windows 10 guest vm on ovirt4.0
>>   (Elad Ben Aharon)
>>   2. Re:  gluster - Volume quota failed (knarra)
>>
>>
>> --
>>
>> Message: 1
>> Date: Sun, 13 Nov 2016 14:08:24 +0200
>> From: Elad Ben Aharon 
>> To: Raian Nasrulla 
>> Cc: users 
>> Subject: Re: [ovirt-users] Problem installing windows 10 guest vm on
>> ovirt4.0
>> Message-ID:
>> 
>> Content-Type: text/plain; charset="utf-8"
>>
>> Did you attach a virtio / virtio-scsi driver to the VM?
>>
>> If not, you can find them located under /usr/share/virtio-win/ in the
>> engine, you can upload them to an ISO domain using 'engine-iso-uploader'.
>>
>> On Sat, Nov 12, 2016 at 12:03 PM, Raian Nasrulla 
>> wrote:
>>
>> >
>> >
>> >
>> > *Hi,I am using ovirt 4.0 *
>> >
>> >
>> > *and virtio-win-0.1.126 iso for windows drivers*
>> >
>> >
>> >
>> >
>> > *I've tried to install Windows 7 using Virtio disk, the installation
>> succeeded, the problem was with:
>> > with Windows 10, the Virtio and Virtio-SCSI not detecting the disk,*
>> > did anyone try the windows guest tools iso and succeeded installing
>> windows 10.
>> >
>> > regards,
>> >
>> > Ryan
>> >
>> >
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>> >
>> >
>> -- next part --
>> An HTML attachment was scrubbed...
>> URL: > /5a8f547b/attachment-0001.html>
>>
>> --
>>
>> Message: 2
>> Date: Sun, 13 Nov 2016 22:09:39 +0530
>> From: knarra 
>> To: lejeczek , users ,
>> "gluster-us...@gluster.org" 
>> Subject: Re: [ovirt-users] gluster - Volume quota failed
>> Message-ID: <0a690a05-436a-ccab-e35d-3b5e7bf8d...@redhat.com>
>> Content-Type: text/plain; charset=utf-8; format=flowed
>>
>> [+gluster-users] list
>>
>> On 11/11/2016 04:09 PM, lejeczek wrote:
>> >
>> >
>> > On 11/11/16 09:26, knarra wrote:
>> >> On 11/11/2016 01:07 PM, lejeczek wrote:
>> >>>
>> >>>
>> >>> On 11/11/16 05:57, knarra wrote:
>>  On 11/11/2016 03:20 AM, lejeczek wrote:
>> > quota command failed : Volume quota failed. The cluster is
>> > operating at version 30700. Quota command enable is unavailable in
>> > this version.
>> 
>>  Hi,
>> 
>> Could you please tell us what is the version of glusterfs you
>>  are using ? For 3.7.0 / 3.7.1 30700 op-version is applicable. If
>>  you have greater version you would need to bump up the op-version
>>  and check if quota enable works.
>> 
>>  Hope this helps.
>> 
>>  Thanks
>> 
>>  kasturi.
>> 
>> >>> it is glusterfs-3.7.16-1.el7.x86_64 - so it's higher, correct? And
>> >>> if yes why gluster did set it 30700?
>> >>> What value should there be?
>> >> Could you please set the op-version to 30712 and try enabling quota.
>> >> Ideally, when a fresh install of glusterfs is done op version is set
>> >> to correct value. When a upgrade of node is done then user has to go
>> >> and bump up the op-version.
>> >
>> > hi, thanks,
>> > like I mentioned earlier - no earlier setup, gluster was installed
>> > yes, older versions but never was in use, not a single volume was set
>> up.
>> >
>> > I'd have question still about quotas:  I've started googling but have
>> > to failed - 

Re: [ovirt-users] Cannot change notification settings for hosted engine in ovirt 4.0

[George Chlipala]

Thanks for the information.


George Chlipala, Ph.D.
Senior Research Specialist
Research Resources Center
University of Illinois at Chicago

phone: 312-413-1700
email: gchl...@uic.edu

On Fri, Nov 18, 2016 at 3:44 AM, Simone Tiraboschi 
wrote:

>
>
> On Fri, Nov 18, 2016 at 10:04 AM, Martin Sivak  wrote:
>
>> Hi George,
>>
>> unfortunately this was overlooked when the configuration file was
>> moved to the shared storage. We are currently working on a solution
>> (https://bugzilla.redhat.com/show_bug.cgi?id=1301681)
>>
>> There is a workaround if you are using the default configuration (smtp
>> set to localhost). You can add a forwarding rule to the /etc/aliases
>> file in the form "root: m...@emails.com" and execute newaliases (to
>> update the configuration).
>>
>> See for example
>> https://ask.fedoraproject.org/en/question/10654/how-to-use-e
>> tcaliases-file-and-forward-file-for-a-user-at-same-time-using-sendmail/
>>
>> Unfortunately, we do not have any workaround for non-local SMTP or
>> notification filtering settings.
>>
>>
> We have a workaround described here:
> https://bugzilla.redhat.com/show_bug.cgi?id=1301681#c16
>
> It will replace the configuration file on the shared storage as needed.
> Please ensure you have a valid backup of the configuration volume before
> touching it.
>
>
>> Regards
>>
>> --
>> Martin Sivak
>> SLA / oVirt
>>
>> On Tue, Nov 15, 2016 at 5:43 PM, George Chlipala  wrote:
>> > I cannot seem to find any information on how to change the notification
>> > settings, in particular the email adresses to which to send
>> notifications
>> > and the from address for the notifications.  I have tried adding a file
>> on
>> > the engine itself in /etc/ovirt-engine/notifier/notifier.conf.d/ and
>> setting
>> > MAIL_FROM.  I then restarted the ovirt-engine service, but notices are
>> still
>> > using the old configuration.  I even tried restarting the VM, but that
>> did
>> > not have any effect.  I have also tried editing
>> > /var/lib/ovirt-hosted-engine-ha/broker.conf however when I restart the
>> > ovirt-ha-broker service, the file is overwritten.
>> >
>> > I have found documentation about the shared configuration storage
>> > (http://www.ovirt.org/develop/release-management/features/ho
>> sted-engine-configuration-on-shared-storage/),
>> > however it is not clear to me where I would edit existing data in the
>> shared
>> > storage.  Do I just untar the files, edit, then "retar" to the shared
>> > storage?  Do I need to set maintenance mode before editing? Should I
>> > shutdown the engine?  After I edit the files, do I just restart the
>> > ovirt-ha-broker service or do I need to do something else?
>> >
>> > Any help in this matter would be greatly appreciated.
>> >
>> > Thanks!
>> >
>> > - George Chlipala
>> >
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>> >
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ?==?utf-8?q? 2 Vlans on one VM nic

[Edward Haas]

On Fri, Nov 18, 2016 at 5:57 PM, Derek Atkins  wrote:

> Perhaps showing my ignorance, but...
>
> Can't you set up three virtual tagged bridges in ovirt?  Each bridge
> would be tagged with the proper vlans, and then connect to the correct
>

A tagged/vlan network has one VLAN set, not multiple ones.
A non tagged/vlan network ignores tagging, it passes packets as is, either
tagged
ones or non tagged ones.


> VMs?  Is there something that prevents you from creating tagged bridges
> that all link into a non-tagged physical NIC?
>
> Or, possibly, could you set up the physical NIC for all the vlans and
> then split them out into the separate virtual bridges?
>
> This should prevent the admin on VM1 from accessing the vlans of the
> other VMs because they are attached to different (tagged) bridges.  Or
> is there something that prevents this approach?
>
> -derek
>
> Gianluca Cecchi  writes:
>
> > On Fri, Nov 18, 2016 at 10:28 AM, MOUCHOIR David  >
> > wrote:
> >
> >  That's what I understood
> > I don't have problem configuring VLANs on nics and switches, I've
> already
> > done many times
> > What I said is
> > If I have 3 VMs
> > VM1 needs vlan1 and 2
> > VM2 needs vlan3 and 4
> > VM3 needs vlan5 and vlan6
> >
> > for security reason I don't want any of these VM to be able to "see"
> > traffic of other VLAN
> > I will need 3 interfaces, one per trunk
> >
> > Could Vswitch be the solution ? It seems to be implemented in ovirt,
> but
> > documentation looks very poor ( or I didn't find the documentation
> ;) )
> >
> > I'm not a security expert.
> > For sure If you don't trust the sysadmin of the VMs operating system or
> if
> > anyone has access to the virtual console so it could attach a live
> distro and
> > so on you had better to have 3 different physical network adapters
> on your
> > hypervisors and create on them
> > trunk for id 1 and 2 on first
> > trunk for id 3 and 4 on second
> > trunk for id 5 and 6 on third
> >
> > But from a functionality point of view (and also segregation if you don't
> > modify configuration of OS) you can have only one physical adapter on
> > hypervisor, allow id 1, 2, 3, 4, 5, 6 on it and then configure
> > on VM1 OS configure ifcfg-eth0.1 and ifcfg-eth0.2 files
> > on VM2 OS configure ifcfg-eth0.3 and ifcfg-eth0.4 files
> > on VM3 OS configure ifcfg-eth0.5 and ifcfg-eth0.6 files
> >
> > It depends on who manages ovirt infrastructure, network infrastructure
> and OS
> > infrastructure and if they are different people...
> >
> > I don't know if any virtualization vendor can provide the level of
> security
> > you want using only one physical adapter
> >
> > GIanluca
>

To increase security, at least in the sense raised here, libvirt provides
the ability
to specify the exact vlan tags allowed for a vnic, but only with OVS and the
underlying host switch.
Please see: http://libvirt.org/formatdomain.html#elementVlanTag

We are actually on-flight to use OVS as an alternative to the linux bridge,
but it
is still not fully ready and this trunking setting for the vnic would need
to be added
as it is not in our current plans (although a hook can do a good job to set
it).

Thanks,
Edy.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ?==?utf-8?q? 2 Vlans on one VM nic

[Derek Atkins]

Perhaps showing my ignorance, but...

Can't you set up three virtual tagged bridges in ovirt?  Each bridge
would be tagged with the proper vlans, and then connect to the correct
VMs?  Is there something that prevents you from creating tagged bridges
that all link into a non-tagged physical NIC?

Or, possibly, could you set up the physical NIC for all the vlans and
then split them out into the separate virtual bridges?

This should prevent the admin on VM1 from accessing the vlans of the
other VMs because they are attached to different (tagged) bridges.  Or
is there something that prevents this approach?

-derek

Gianluca Cecchi  writes:

> On Fri, Nov 18, 2016 at 10:28 AM, MOUCHOIR David 
> wrote:
>
>  That's what I understood
> I don't have problem configuring VLANs on nics and switches, I've already
> done many times
> What I said is
> If I have 3 VMs
> VM1 needs vlan1 and 2
> VM2 needs vlan3 and 4
> VM3 needs vlan5 and vlan6
>
> for security reason I don't want any of these VM to be able to "see"
> traffic of other VLAN
> I will need 3 interfaces, one per trunk
>
> Could Vswitch be the solution ? It seems to be implemented in ovirt, but
> documentation looks very poor ( or I didn't find the documentation ;) )
>
> I'm not a security expert.
> For sure If you don't trust the sysadmin of the VMs operating system or if
> anyone has access to the virtual console so it could attach a live distro and
> so on you had better to have 3 different physical network adapters on your
> hypervisors and create on them 
> trunk for id 1 and 2 on first
> trunk for id 3 and 4 on second
> trunk for id 5 and 6 on third
>
> But from a functionality point of view (and also segregation if you don't
> modify configuration of OS) you can have only one physical adapter on
> hypervisor, allow id 1, 2, 3, 4, 5, 6 on it and then configure
> on VM1 OS configure ifcfg-eth0.1 and ifcfg-eth0.2 files
> on VM2 OS configure ifcfg-eth0.3 and ifcfg-eth0.4 files
> on VM3 OS configure ifcfg-eth0.5 and ifcfg-eth0.6 files
>  
> It depends on who manages ovirt infrastructure, network infrastructure and OS
> infrastructure and if they are different people...
>
> I don't know if any virtualization vendor can provide the level of security
> you want using only one physical adapter
>
> GIanluca
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] hide interface elements

[Derek Atkins]

Yaniv Dary  writes:

> We don't have a role based UI. I recommend using the user portal\power user
> portal or ManageIQ to get this capability.

The user portal still seems to display icons for unavailable
functionality.  For example, I created a user role that only has access
to the console, but when logging into the user portal I still see the
power-on, power-off, suspend, and reset buttons on available VMs.

If I click on one of those icons I get the expected permission denied
error.  But it would be nice if the icons just didn't show up.

Thanks,

> Yaniv Dary

-derek

-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Old 3.3 deep dive presentations

[Martin Sivak]

Hi,

does anybody know where the old deep dive presentations from
http://www.ovirt.org/develop/release-management/releases/3.3/#Deep_dives
are? Did we lose them in the conversion or do we still have backup
somewhere?

--
Martin Sivak
SLA / oVirt
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Snapshot self-hosted engine?

[Derek Atkins]

Hi Martin,

Keep in mind this is a single host..  so..  is there a command line
operation I can run from the host to snapshot the running engine VM?  Then
if then update fails I can revert (by command line) the running VM from
before the update.  I don't mind getting my fingers dirty if I have to
script it.

I've used the "engine-backup" tool, but frankly IMHO a snapshot is a
better way to handle an immediate update, rather than having to completely
re-install the VM and restore from backup.  This operation is exactly why
snapshots exist.  :)

Thanks,

-derek

On Fri, November 18, 2016 3:33 am, Martin Sivak wrote:
> Hi Derek,
>
> I do not think we support snapshots of the hosted engine VM at the
> moment. There would be no way to restore from snapshot anyway in case
> of failed upgrade (no engine would be running).
>
> Please use the standard backup/restore procedures for the engine:
> https://access.redhat.com/documentation/en/red-hat-virtualization/4.0/paged/self-hosted-engine-guide/chapter-6-backing-up-and-restoring-a-rhel-based-self-hosted-environment
>
> Best regards
>
> --
> Martin Sivak
> SLA / oVirt
>
> On Fri, Nov 18, 2016 at 3:58 AM, Derek Atkins  wrote:
>> I'm running ovirt 4.0.4 on a single-host with (of course) self-hosted
>> engine.
>>
>> Ovirt seems to assume in many cases that there are multiple hosts around
>> so you can manipulate one host while the engine is running on another,
>> etc.
>>
>> But in the single-host case how do you take a snapshot of the hosted
>> engine?  When I click on Virtual Machines -> HostedEngine and then below
>> click on Snapshots and then Create, I get an error:
>>
>> HostedEngine
>>   * Cannot create Snapshot. This VM is not managed by the engine.
>>
>> So... How can one snapshot the engine (e.g. prior to updating it)?
>>
>> -derek
>>
>> --
>>Derek Atkins 617-623-3745
>>de...@ihtfp.com www.ihtfp.com
>>Computer and Internet Security Consultant
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>


-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] OVN Provider setup issues

[Dan Kenigsberg]

On Fri, Nov 18, 2016 at 09:13:53AM +0100, Andrea Fagiani wrote:
> Hi Lance,
> 
> thanks, I have currently deployed oVirt using the oVirt Node images, so
> indeed I would like to avoid updating;
> out of curiosity, is there actually a beta/pre-release version of the node
> avaiable?

I'm afraid that such version would be available only after the release
of centos7.3 and ovirt-4.1-beta. Now we're still speaking about
master-branch experiments.

> 
> I have since reinstalled the host to perform further testing but I'll give
> it a shot as soon as soon as I find the time.

We'd love to hear how that works for you.

Regards,
Dan.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ?==?utf-8?q? 2 Vlans on one VM nic

[Gianluca Cecchi]

On Fri, Nov 18, 2016 at 10:28 AM, MOUCHOIR David 
wrote:

>  That's what I understood
> I don't have problem configuring VLANs on nics and switches, I've already
> done many times
> What I said is
> If I have 3 VMs
> VM1 needs vlan1 and 2
> VM2 needs vlan3 and 4
> VM3 needs vlan5 and vlan6
>
> for security reason I don't want any of these VM to be able to "see"
> traffic of other VLAN
> I will need 3 interfaces, one per trunk
>
> Could Vswitch be the solution ? It seems to be implemented in ovirt, but
> documentation looks very poor ( or I didn't find the documentation ;) )
>

I'm not a security expert.
For sure If you don't trust the sysadmin of the VMs operating system or if
anyone has access to the virtual console so it could attach a live distro
and so on you had better to have 3 different physical network adapters
on your hypervisors and create on them
trunk for id 1 and 2 on first
trunk for id 3 and 4 on second
trunk for id 5 and 6 on third

But from a functionality point of view (and also segregation if you don't
modify configuration of OS) you can have only one physical adapter on
hypervisor, allow id 1, 2, 3, 4, 5, 6 on it and then configure
on VM1 OS configure ifcfg-eth0.1 and ifcfg-eth0.2 files
on VM2 OS configure ifcfg-eth0.3 and ifcfg-eth0.4 files
on VM3 OS configure ifcfg-eth0.5 and ifcfg-eth0.6 files

It depends on who manages ovirt infrastructure, network infrastructure and
OS infrastructure and if they are different people...

I don't know if any virtualization vendor can provide the level of security
you want using only one physical adapter

GIanluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Cannot change notification settings for hosted engine in ovirt 4.0

[Simone Tiraboschi]

On Fri, Nov 18, 2016 at 10:04 AM, Martin Sivak  wrote:

> Hi George,
>
> unfortunately this was overlooked when the configuration file was
> moved to the shared storage. We are currently working on a solution
> (https://bugzilla.redhat.com/show_bug.cgi?id=1301681)
>
> There is a workaround if you are using the default configuration (smtp
> set to localhost). You can add a forwarding rule to the /etc/aliases
> file in the form "root: m...@emails.com" and execute newaliases (to
> update the configuration).
>
> See for example
> https://ask.fedoraproject.org/en/question/10654/how-to-use-
> etcaliases-file-and-forward-file-for-a-user-at-same-time-using-sendmail/
>
> Unfortunately, we do not have any workaround for non-local SMTP or
> notification filtering settings.
>
>
We have a workaround described here:
https://bugzilla.redhat.com/show_bug.cgi?id=1301681#c16

It will replace the configuration file on the shared storage as needed.
Please ensure you have a valid backup of the configuration volume before
touching it.


> Regards
>
> --
> Martin Sivak
> SLA / oVirt
>
> On Tue, Nov 15, 2016 at 5:43 PM, George Chlipala  wrote:
> > I cannot seem to find any information on how to change the notification
> > settings, in particular the email adresses to which to send notifications
> > and the from address for the notifications.  I have tried adding a file
> on
> > the engine itself in /etc/ovirt-engine/notifier/notifier.conf.d/ and
> setting
> > MAIL_FROM.  I then restarted the ovirt-engine service, but notices are
> still
> > using the old configuration.  I even tried restarting the VM, but that
> did
> > not have any effect.  I have also tried editing
> > /var/lib/ovirt-hosted-engine-ha/broker.conf however when I restart the
> > ovirt-ha-broker service, the file is overwritten.
> >
> > I have found documentation about the shared configuration storage
> > (http://www.ovirt.org/develop/release-management/features/
> hosted-engine-configuration-on-shared-storage/),
> > however it is not clear to me where I would edit existing data in the
> shared
> > storage.  Do I just untar the files, edit, then "retar" to the shared
> > storage?  Do I need to set maintenance mode before editing? Should I
> > shutdown the engine?  After I edit the files, do I just restart the
> > ovirt-ha-broker service or do I need to do something else?
> >
> > Any help in this matter would be greatly appreciated.
> >
> > Thanks!
> >
> > - George Chlipala
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ?==?utf-8?q? 2 Vlans on one VM nic

[MOUCHOIR David]

 That's what I understood
I don't have problem configuring VLANs on nics and switches, I've already done 
many times
What I said is 
If I have 3 VMs 
VM1 needs vlan1 and 2
VM2 needs vlan3 and 4
VM3 needs vlan5 and vlan6

for security reason I don't want any of these VM to be able to "see" traffic of 
other VLAN
I will need 3 interfaces, one per trunk

Could Vswitch be the solution ? It seems to be implemented in ovirt, but 
documentation looks very poor ( or I didn't find the documentation ;) )


 
 
Le Jeudi, Novembre 17, 2016 19:54 CET, Gianluca Cecchi 
 a écrit: 
 
> Il 17/Nov/2016 16:37, "David MOUCHOIR"  ha scritto:
> >
> > Ok, I'll try to do so and will post the result
> > The problem would be that I'll need one nic per different Vlan trunk if I
> do not misunderstand
> >
> >
> >
> > Le jeudi 17 novembre 2016 à 16:50 +0200, Edward Haas a écrit :
> > >
> > >
> > > On Thu, Nov 17, 2016 at 4:31 PM, David MOUCHOIR 
> wrote:
> > > > Hi
> > > > Does anyone knows how to configure a VM nic with more than 1 vNIC ?
> > > > Or How to create a vNIC with 2 tagged VLANs ?
> > > >
> > > > I need to transmit 2 tagged (or more) VLANs to only 1 interface in my
> VM
> > > >
> > > > Regards
> > > > D.Mouchoir
> 
> No, on the hypervisor side you will have a physical nic that you configure
> as non tagged network in ovirt.
> The port on the physical network switch where the physical nic connects
> should be configured as a trunk and allow all the vlan ids you want it to
> transport.
> Then on the vm you configure one single vnic on this oVirt network and
> configure at os level all the vlan ids you want into the vm itself. See
> here for the methods landing page:
> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Networking_Guide/ch-Configure_802_1Q_VLAN_Tagging.html
> And this for the manual one and ifcfg files syntax:
> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Networking_Guide/sec-Configure_802_1Q_VLAN_Tagging_Using_the_Command_Line.html
> 
> Hih,
> Gianluca
 
 


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Cannot change notification settings for hosted engine in ovirt 4.0

[Martin Sivak]

Hi George,

unfortunately this was overlooked when the configuration file was
moved to the shared storage. We are currently working on a solution
(https://bugzilla.redhat.com/show_bug.cgi?id=1301681)

There is a workaround if you are using the default configuration (smtp
set to localhost). You can add a forwarding rule to the /etc/aliases
file in the form "root: m...@emails.com" and execute newaliases (to
update the configuration).

See for example
https://ask.fedoraproject.org/en/question/10654/how-to-use-etcaliases-file-and-forward-file-for-a-user-at-same-time-using-sendmail/

Unfortunately, we do not have any workaround for non-local SMTP or
notification filtering settings.

Regards

--
Martin Sivak
SLA / oVirt

On Tue, Nov 15, 2016 at 5:43 PM, George Chlipala  wrote:
> I cannot seem to find any information on how to change the notification
> settings, in particular the email adresses to which to send notifications
> and the from address for the notifications.  I have tried adding a file on
> the engine itself in /etc/ovirt-engine/notifier/notifier.conf.d/ and setting
> MAIL_FROM.  I then restarted the ovirt-engine service, but notices are still
> using the old configuration.  I even tried restarting the VM, but that did
> not have any effect.  I have also tried editing
> /var/lib/ovirt-hosted-engine-ha/broker.conf however when I restart the
> ovirt-ha-broker service, the file is overwritten.
>
> I have found documentation about the shared configuration storage
> (http://www.ovirt.org/develop/release-management/features/hosted-engine-configuration-on-shared-storage/),
> however it is not clear to me where I would edit existing data in the shared
> storage.  Do I just untar the files, edit, then "retar" to the shared
> storage?  Do I need to set maintenance mode before editing? Should I
> shutdown the engine?  After I edit the files, do I just restart the
> ovirt-ha-broker service or do I need to do something else?
>
> Any help in this matter would be greatly appreciated.
>
> Thanks!
>
> - George Chlipala
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] can't import vm from KVM host

[Nelson Lameiras]

Hello Shahar,

I've rebuild my test system and installed recently released ovirt 4.0.5 + 
gerrit patch => still no luck. vdsm always gives me same error : 

"
jsonrpc.Executor/6::ERROR::2016-11-17 
16:38:56,320::v2v::934::root::(_add_disk_info) Error getting disk size
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/v2v.py", line 931, in 
_add_disk_info
vol = conn.storageVolLookupByPath(disk['alias'])
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 4596, in 
storageVolLookupByPath
if ret is None:raise libvirtError('virStorageVolLookupByPath() failed', 
conn=self)
libvirtError: Volume de stockage introuvable : no storage vol with matching 
path '/dev/sdc'
jsonrpc.Executor/6::DEBUG::2016-11-17 
16:38:56,325::__init__::555::jsonrpc.JsonRpcServer::(_handle_request) Return 
'Host.getExternalVMs' in bridge with [{'status': 'Down', 'graphics': 'spice', 
'arch': 'x86_64', 'disks': [ {'capacity': '8589934592', 'format': 'RAW', 'dev': 
'hdd', 'allocation': '8589942784', 'alias': '/  
var/lib/libvirt/images/rhel7.1.img', 'type': 'disk'}, {'alias': '/dev/sdc', 
'type': 'disk', 'dev': 'hdb', 'format': 'RAW'}], 'vmId': 
'd0ddc4f6-a208-4286-a665-fb9e54d14bef', 'smp': 1, 'has_snapshots': False, 
'video': 'qxl', 'memSize': 1  024, 'vmName': 'rhel7.1', 'networks': [{'model': 
'virtio', 'macAddr': '52:54:00:00:d7:76', 'type': 'network'}]}]
"

FYI I added a normal disk (file based) to the VM ir order to try to understand 
what's happening. As expected, this disk is seen by the oVirt (without patch)

I do reckon something in the above log :

 'disks': [
   {'capacity': '8589934592', 'format': 'RAW', 'dev': 'hdd', 'allocation': 
'8589942784', 'alias': '/  var/lib/libvirt/images/rhel7.1.img', 'type': 
'disk'}, 
   {'alias': '/dev/sdc', 'type': 'disk', 'dev': 'hdb', 'format': 'RAW'}
 ], 

the "alias" line is clearly new since it did not appear before de patch! 
something is working ;)

I confirm that when I created the test VM (via virt-manager), I gave directly 
the path to the device (/dev/sdc), so there is no "pool" to be addressed 
defined on libvirt! 
I read https://gerrit.ovirt.org/#/c/64272/4/ and I agree with Tomas findings : 
Currently the conversion process is expecting a volume on a pool and it's not 
able to use a block device directly.

So I'm hopping a solution can be found to this problem. We have a few hundreds 
VM waiting to be migrated in production and we don't have a NFS server, so this 
is our only option so far.

I'm able to test any patch quickly if needed, do not hesitate.

cordialement, regards, 
Nelson LAMEIRAS 

Lyra Network 
Service Projets et Processus 
Tel : +33 (0) 5 32 09 09 70 
109 rue de l’innovation 
31670 Labège - France 
www.lyra-network.com

- Original Message -
From: "Shahar Havivi" 
To: "Nelson Lameiras" 
Cc: "Tomas Golembiovsky" , "Michal Skrivanek" 
, users@ovirt.org
Sent: Tuesday, November 8, 2016 12:16:55 PM
Subject: Re: [ovirt-users] can't import vm from KVM host

On 08.11.16 10:58, Nelson Lameiras wrote:
> Hi Shahar,
> 
> We try to prioritise vm behaviour predictability over ressources consumption, 
> so "thin provisionning" is not a option for us. "Preallocated" is always 
> selected over default behaviour.
> 
> Nevertheless, while trying to import a KVM vm (from another host), I get a 0 
> disk count on the VM, which means I do not event get to the point where I can 
> chose allocation policy (usually next screen).
> This is true with or without patch proposed below (assuming it has not 
> changed since sept 29).

I assume that this line is failing:
vol = conn.storageVolLookupByPath(disk['alias'])
it may be the reason that the storage is not part of a pool.
(look at pool-xxx commands via virsh)

If it doesn't work it may be related to a different API that we will need to
implement as Tomas suggested in the gerrit patch.

> 
> Can I give you any more information?
> 
> cordialement, regards, 
> Nelson LAMEIRAS 
> 
> Lyra Network 
> Service Projets et Processus 
> Tel : +33 (0) 5 32 09 09 70 
> 109 rue de l’innovation 
> 31670 Labège - France 
> www.lyra-network.com
> 
> - Original Message -
> From: "Shahar Havivi" 
> To: "Nelson Lameiras" , "Tomas 
> Golembiovsky" 
> Cc: "Michal Skrivanek" , users@ovirt.org
> Sent: Monday, November 7, 2016 1:58:34 PM
> Subject: Re: [ovirt-users] can't import vm from KVM host
> 
> Hi Nelson,
> 
> Sorry for the long wait (I was on PTO).
> I just test the patch with the following disk xml:
> 
> 
> 
> 
> 
>  slot='0x07' function='0x0'/>
> 
> 
> I did manage to see the disk with its actual size,
> I was able to import the VM as well when I choose:
> "Allocation Policy": "Preallocated"
> (not the "Thin Provision" as is the default.
> Currently we need to pre 

[ovirt-users] Fwd: Snapshot self-hosted engine?

[Martin Sivak]

Hi Derek,

I do not think we support snapshots of the hosted engine VM at the
moment. There would be no way to restore from snapshot anyway in case
of failed upgrade (no engine would be running).

Please use the standard backup/restore procedures for the engine:
https://access.redhat.com/documentation/en/red-hat-virtualization/4.0/paged/self-hosted-engine-guide/chapter-6-backing-up-and-restoring-a-rhel-based-self-hosted-environment

Best regards

--
Martin Sivak
SLA / oVirt

On Fri, Nov 18, 2016 at 3:58 AM, Derek Atkins  wrote:
> I'm running ovirt 4.0.4 on a single-host with (of course) self-hosted engine.
>
> Ovirt seems to assume in many cases that there are multiple hosts around
> so you can manipulate one host while the engine is running on another,
> etc.
>
> But in the single-host case how do you take a snapshot of the hosted
> engine?  When I click on Virtual Machines -> HostedEngine and then below
> click on Snapshots and then Create, I get an error:
>
> HostedEngine
>   * Cannot create Snapshot. This VM is not managed by the engine.
>
> So... How can one snapshot the engine (e.g. prior to updating it)?
>
> -derek
>
> --
>Derek Atkins 617-623-3745
>de...@ihtfp.com www.ihtfp.com
>Computer and Internet Security Consultant
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] OVN Provider setup issues

[Andrea Fagiani]

Hi Lance,

thanks, I have currently deployed oVirt using the oVirt Node images, so 
indeed I would like to avoid updating;
out of curiosity, is there actually a beta/pre-release version of the 
node avaiable?


I have since reinstalled the host to perform further testing but I'll 
give it a shot as soon as soon as I find the time.


Regards,
Andrea


On 17/11/2016 21:57, Lance Richardson wrote:

From: "Lance Richardson" 
To: "Andrea Fagiani" 
Cc: "Dan Kenigsberg" , users@ovirt.org, mmire...@redhat.com
Sent: Wednesday, November 16, 2016 12:37:57 PM
Subject: Re: [ovirt-users] OVN Provider setup issues


From: "Andrea Fagiani" 
To: "Dan Kenigsberg" 
Cc: users@ovirt.org, "Lance Richardson" ,
mmire...@redhat.com
Sent: Wednesday, November 16, 2016 12:24:15 PM
Subject: Re: [ovirt-users] OVN Provider setup issues

On 16/11/2016 17:23, Dan Kenigsberg wrote:

On Tue, Nov 08, 2016 at 09:21:13AM +0100, Andrea Fagiani wrote:

Hi all,

I've been messing around with the ovirt-ovn-provider [1] and I've run
into
some issues during the initial setup.

I have a 5-node cluster (running the hosted-engine VA), LEGACY virtual
switch; this test was done on a single host. Following the instructions
from
the aforementioned blog post, I have downloaded the ovirt-provider-ovn
and
ovirt-provider-ovn-driver rpms, and built the rpm packages for:

- openvswitch (2.6.90)
- openvswitch-ovn-common
- openvswitch-ovn-host
- openvswitch-ovn-central
- python-openvswitch

I set up a dedicated VM for the OVN controller, installed ovs and
ovn-central, started the ovn-northd and ovirt-provider-ovn services. So
far
so good. I then moved on to the oVirt host and installed the above
packages
(minus ovn-central) as well as the ovirt-provider-ovn-driver provided,
started the ovn-controller service and ran

# vdsm-tool ovn-config  

Executing the suggested checks I noticed that something didn't quite go
as
planned. Below is the /var/log/openvswitch/ovn-controller.log from the
host
machine. There are no firewalls involved (not even on the servers) and I
also tried disabling SELinux but to no avail.

Any ideas?

Thanks,
Andrea

[1] http://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/


2016-11-07T14:22:09.552Z|1|vlog|INFO|opened log file
/var/log/openvswitch/ovn-controller.log
2016-11-07T14:22:09.553Z|2|reconnect|INFO|unix:/var/run/openvswitch/db.sock:
connecting...
2016-11-07T14:22:09.553Z|3|reconnect|INFO|unix:/var/run/openvswitch/db.sock:
connected
2016-11-07T14:22:09.555Z|4|reconnect|INFO|tcp:10.100.248.11:6642:
connecting...
2016-11-07T14:22:09.555Z|5|reconnect|INFO|tcp:10.100.248.11:6642:
connected
2016-11-07T14:22:09.556Z|6|ofctrl|INFO|unix:/var/run/openvswitch/br-int.mgmt:
connecting to switch
2016-11-07T14:22:09.556Z|7|rconn|INFO|unix:/var/run/openvswitch/br-int.mgmt:
connecting...
2016-11-07T14:22:09.557Z|8|pinctrl|INFO|unix:/var/run/openvswitch/br-int.mgmt:
connecting to switch
2016-11-07T14:22:09.557Z|9|rconn|INFO|unix:/var/run/openvswitch/br-int.mgmt:
connecting...
2016-11-07T14:22:09.557Z|00010|rconn|INFO|unix:/var/run/openvswitch/br-int.mgmt:
connected
2016-11-07T14:22:09.557Z|00011|rconn|INFO|unix:/var/run/openvswitch/br-int.mgmt:
connected
2016-11-07T14:22:09.558Z|00012|ofctrl|INFO|OpenFlow error: OFPT_ERROR
(OF1.3) (xid=0x9): OFPBMC_BAD_FIELD
OFPT_FLOW_MOD (OF1.3) (xid=0x9):
(***truncated to 64 bytes from 240***)
  04 0e 00 f0 00 00 00 09-00 00 00 00 00 00 00 00
||
0010  00 00 00 00 00 00 00 00-22 00 00 00 00 00 00 00
|"...|
0020  ff ff ff ff ff ff ff ff-ff ff ff ff 00 00 00 00
||
0030  00 01 00 04 00 00 00 00-00 04 00 b8 00 00 00 00
||

Andrea, could you tell (mostly Lance) which kernel version are you
using?

Here is the yum info output for the kernel package on the offending host:

Installed Packages
Name  : kernel
Arch: x86_64
Version   : 3.10.0
Release   : 327.36.3.el7

Andrea


OK, the 327 kernel did not support conntrack and cannot be used for OVN.

RHEL 7.3 or newer is the minimum requirement for OVN.

Lance



Hi Andrea,

If you'd like to avoid upgrading to 7.3, one workaround would be to
build and install the OVS kernel module RPM. The easiest way to build
the OVS kernel RPM would be, from the ovs directory where you already
executed "./boot.sh" and "./configure", to execute:

make rpm-fedora-kmod

(Don't be misled by the name, this also works for CentOS and RHEL).

The resulting RPM will be under the ./rpm/RPMS/ directory, something
like:

 ./rpm/rpmbuild/RPMS/x86_64/openvswitch-kmod-2.6.90-1.el7.centos.x86_64.rpm

Regards,

 Lance



  


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users