Re: [ovirt-users] VM has been paused due to storage I/O problem
On Tue, Jan 31, 2017 at 6:09 PM, Gianluca Cecchi wrote: > On Tue, Jan 31, 2017 at 3:23 PM, Nathanaël Blanchet > wrote: >> >> exactly the same issue by there with FC EMC domain storage... >> >> > > I'm trying to mitigate inserting a timeout for my SAN devices but I'm not > sure of its effectiveness as CentOS 7 behavior of "multipathd -k" and then > "show config" seems different from CentOS 6.x > In fact my attempt for multipath.conf is this > > > # VDSM REVISION 1.3 > # VDSM PRIVATE > > defaults { > polling_interval5 > no_path_retry fail > user_friendly_names no > flush_on_last_del yes > fast_io_fail_tmo5 > dev_loss_tmo30 > max_fds 4096 > } > > # Remove devices entries when overrides section is available. > devices { > device { > # These settings overrides built-in devices settings. It does not > apply > # to devices without built-in settings (these use the settings in > the > # "defaults" section), or to devices defined in the "devices" > section. > # Note: This is not available yet on Fedora 21. For more info see > # https://bugzilla.redhat.com/1253799 > all_devsyes > no_path_retry fail > } > device { > vendor "IBM" > product "^1814" > product_blacklist "Universal Xport" > path_grouping_policy "group_by_prio" > path_checker "rdac" > features "0" > hardware_handler "1 rdac" > prio "rdac" > failback immediate > rr_weight "uniform" > no_path_retry "12" Hi Gianluca, This should be a number, not a string, maybe multipath is having trouble parsing this and it ignores your value? > } > } > > So I put exactly the default device config for my IBM/1814 device but > no_path_retry set to 12. Why 12? This will do 12 retries, 5 seconds each when no path is available. This will block lvm commands for 60 seconds when no path is available, blocking other stuff in vdsm. Vdsm is not designed to handle this. I recommend value of 4. But note that this will is not related to the fact that your devices are not initialize properly after boot. > In CentOS 6.x when you do something like this, "show config" gives you the > modified entry only for your device section. > Instead in CentOS 7.3 it seems I get anyway the default one for IBM/1814 and > also the customized one at the end of the output Maybe your device configuration does not match exactly the builtin config. > > Two facts: > - before I could reproduce the problem if I selected > Maintenance > Power Mgmt ---> Restart > (tried 3 times with same behavior) > > Instead if I executed in separate steps > Maintenance > Power Mgmt --> Stop > wait a moment > Power Mgmt --> Start > > I didn't get problems (tried only one time...) Maybe waiting a moment helps the storage/switches to clean up properly after a server is shut down? Does your power management trigger a proper shutdown? I would avoid using it for normal shutdown. > > With this "new" multipath config (to be confirmed if in effect, how?) I > don't get the VM paused problem even with Restart option of Power Mgmt > In active host messages I see these ones when the other reboots: > > Jan 31 16:50:01 ovmsrv06 systemd: Started Session 705 of user root. > Jan 31 16:50:01 ovmsrv06 systemd: Starting Session 705 of user root. > Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sde > - rdac checker reports path is up > Jan 31 16:53:47 ovmsrv06 multipathd: 8:64: reinstated > Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: load > table [0 41943040 multipath 1 queue_if_no_path 1 rdac 2 1 service-time 0 2 1 > 8:224 1 65:0 1 service-time 0 2 1 8:64 1 8:160 1] > Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdo > - rdac checker reports path is ghost > Jan 31 16:53:47 ovmsrv06 multipathd: 8:224: reinstated > Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdk > - rdac checker reports path is up > Jan 31 16:53:47 ovmsrv06 multipathd: 8:160: reinstated > Jan 31 16:53:47 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, > queueing MODE_SELECT command > Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdq > - rdac checker reports path is ghost > Jan 31 16:53:47 ovmsrv06 multipathd: 65:0: reinstated > Jan 31 16:53:48 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, > MODE_SELECT returned with sense 05/91/36 > Jan 31 16:53:48 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, > queueing MODE_SELECT command > Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, > MODE_SELECT returned with sense 05/91/36 > Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_
Re: [ovirt-users] Safe to install/use epel repository?
On Tue, Jan 31, 2017 at 6:27 PM, Gianluca Cecchi wrote: > This in CentOS 7.3 plain hosts used as hypervisors and intended for oVirt > 4.0 and 4.1 hosts. Generally speaking, we add epel with specific packages to ovirt-release*.rpm, and do not support all of epel. In practice, the only problem I personally know of is with epel packages that also exist in other ovirt-release* repos, perhaps in different versions. A recent example we bumped into: https://gerrit.ovirt.org/71386 ovirt-live uses its own set of repos, and used all of epel, and epel has a newer version of collectd than in the opstools repo (which is what we use). But it doesn't have collectd-write_http. So jenkins failed: http://jenkins.ovirt.org/job/ovirt-live_4.1-create-iso/70/console > In particular for performance related packages such as > bwm-ng > iftop > htop > nethogs Perhaps add them with includepkgs, to be on the safe side, and not all of epel. Best, -- Didi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Safe to install/use epel repository?
On 31 January 2017 at 13:27, Gianluca Cecchi wrote: > This in CentOS 7.3 plain hosts used as hypervisors and intended for oVirt > 4.0 and 4.1 hosts. > In particular for performance related packages such as > bwm-ng > iftop > htop > nethogs > and the like. > Thanks, > Gianluca > We've been running CentOS 7 with the epel, ovirt, gluster & zabbix repos on all of our hosts.for a good few months now, without issue. -- D ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Remove Disk Profiles Profile
Hello, I am trying to remove a disk profiles profile. The operation is failing with this error: Operation Canceled Error while executing action: Cannot remove Disk Profile. Several Disks (2) are using this Profile: OVF_STORE, OVF_STORE - Please remove it from all Disks that are using it and try again. I do not see any means of changing the disk profile another profile or removing it from these OVF_STORE disks. Any suggestions? -- Regards, Cameron ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVIRT Triangle with Gear icon?
Hello, In my case this gear appears when you start with "run once". I don't know if appears to you from time to time. Luca Il 31 gen 2017 7:31 PM, "Devin Acosta" ha scritto: > > Just curious I've noticed that from time to time I have a VM that shows a > triangle with a little gear to the side? I can't seem to find anywhere what > this means? > > -- > > Devin Acosta > Red Hat Certified Architect, LinuxStack > 602-354-1220 || de...@linuxguru.co > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVIRT Triangle with Gear icon?
Just curious I've noticed that from time to time I have a VM that shows a triangle with a little gear to the side? I can't seem to find anywhere what this means? -- Devin Acosta Red Hat Certified Architect, LinuxStack 602-354-1220 || de...@linuxguru.co ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] AAA Auth FreeIPA does not show users
Hi Ondra, I would add something like "Enter search user DN (uid=user,cn=... OR empty for anonymous):" The reason why is that I have seen other software erroring on the whole DN as it putted the rest behind it and as you say you use IPA, it looksup your base it's pretty understandable that you think, OK the base or whatever will be added as when you select IPA there is know that ovirt knows the scheme what is used. Cheers, Matt 2017-01-31 17:51 GMT+01:00 Ondra Machacek : > There is prompt: > > "Enter search user DN (empty for anonymous):" > > Which says you should input 'DN'. Any ideas how we can improve, > that prompt so users are not confused? > > Thanks. > > On Tue, Jan 31, 2017 at 5:32 PM, Matt . wrote: >> OK solved. You cannot use anonymous in the full way. Also you need the >> full DN for the search user. >> >> Thanks for the heads up! >> >> Matt >> >> 2017-01-31 13:03 GMT+01:00 Ondra Machacek : >>> Hi, >>> >>> I've just tried with: >>> >>> # ipa --version >>> VERSION: 4.4.0, API_VERSION: 2.213 >>> >>> And all worked good. Can you please share the logs, >>> which Martin asked for, so we can investigate? >>> >>> Thanks, >>> Ondra >>> >>> On Tue, Jan 31, 2017 at 12:50 PM, Matt . wrote: Hi, True. Are you able to check if it still is good for IPA 4.4 usage, it could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed something ? Would be great! Thanks, Matt 2017-01-31 11:30 GMT+01:00 Martin Perina : > > > On Tue, Jan 31, 2017 at 11:17 AM, Matt . wrote: >> >> Hi Martin, >> >> Thanks for the explanation. But what happens on those tests during the >> setup the same happens as showed in oVirt. > > > Exactly, you can execute those tests even before publishing new profile to > engine and if something doesn't work you can fix even before users notice > that something is wrong. > > Also please bear in mind that there are variety of small differences in > schema across different setups even for the same LDAP server. So setup > tool > uses only basic configurations, if you need something more complicated you > need to edit configuration manually. > > Thanks > > Martin Perina > >> >> >> Default IPA should just work I guess. >> >> I will test your command and report back. >> >> Cheers, >> >> Matt >> >> 2017-01-31 10:24 GMT+01:00 Martin Perina : >> > Hi, >> > >> > it seem that your schema doesn't match the defaults or you home some >> > configuration issue. Could you please execute following and send us the >> > output for your IPA setup? >> > >> > ovirt-engine-extensions-tool --log-level=FINE aaa >> > authz-fetch_principal_record --authz-flag=resolve-groups-recursive >> > --authz-flag=resolve-groups --extension-name= >> > --principal-name= >> > >> > The above will search for a user by and tries to fetch all >> > groups >> > he is member of. >> > >> > Btw you can test both "search users/groups" and "login a user" during >> > aaa-ldap-setup tool (and it's recommended to do so) and the output from >> > those commands should provide you the same details. >> > >> > Thanks >> > >> > Martin Perina >> > >> > >> > >> > On Mon, Jan 30, 2017 at 9:27 PM, Matt . wrote: >> >> >> >> Hi, >> >> >> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the >> >> groups are shown but the users are not. >> >> >> >> When I chose 389ds, the users are shown but not the groups. >> >> >> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA >> >> 4.4 version from Fedora >> >> >> >> Cheers, >> >> >> >> Matt >> >> ___ >> >> Users mailing list >> >> Users@ovirt.org >> >> http://lists.ovirt.org/mailman/listinfo/users >> > >> > > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt Node TUI
On Tue, Jan 31, 2017 at 2:02 AM, Douglas Schilling Landgraf wrote: > Oi Fernando, > > On 01/30/2017 12:32 PM, Fernando Frediani wrote: >> >> Hi Douglas, thanks. >> >> No, just said if I have no network connectivity to the box for some >> reason only tool to use is shell to try to get it back online correct ? > > > Yes, you might use manual settings or TUI tools like nmtui as any other > Linux distro. Yes - nmtui or nmcli are the tools you can use here to get your host hooked up to the network. - fabian > >> It TUI thought to be back sometime or Cockpit will be the ongoing tool >> for that ? (I find it nice the TUI interface too). > > > I don't see any movement to bring back oVirt TUI. At moment, the Cockpit is > the preferable. > > >> >> Fernando >> >> On 30/01/2017 13:55, Douglas Schilling Landgraf wrote: >>> >>> Ola Fernando! >>> >>> On 01/30/2017 09:23 AM, Fernando Frediani wrote: What happened with the TUI ? Have just installed a 4.1 oVirt Node and it seems it is CLI only and I only see a shell login. Is it correct ? I read some pages on ovirt.org saying the old TUI was problematic and it was being redesign but that seems old. Or do I understand correctly and everything is now handled by Cockpit ? >>> >>> >>> That's correct. Cockpit is the preferred option. >>> Then if I have no network CLI is my friend ? >>> >>> >>> Not sure if I understood the question but in Cockpit, there is Network >>> tab. Web-browser: NODE_IP_ADDRESS:9090 -> Networking >>> >>> Or are looking for something like nmcli/nmtui? >>> >>> -- >>> Cheers >>> Douglas >> >> > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] AAA Auth FreeIPA does not show users
There is prompt: "Enter search user DN (empty for anonymous):" Which says you should input 'DN'. Any ideas how we can improve, that prompt so users are not confused? Thanks. On Tue, Jan 31, 2017 at 5:32 PM, Matt . wrote: > OK solved. You cannot use anonymous in the full way. Also you need the > full DN for the search user. > > Thanks for the heads up! > > Matt > > 2017-01-31 13:03 GMT+01:00 Ondra Machacek : >> Hi, >> >> I've just tried with: >> >> # ipa --version >> VERSION: 4.4.0, API_VERSION: 2.213 >> >> And all worked good. Can you please share the logs, >> which Martin asked for, so we can investigate? >> >> Thanks, >> Ondra >> >> On Tue, Jan 31, 2017 at 12:50 PM, Matt . wrote: >>> Hi, >>> >>> True. Are you able to check if it still is good for IPA 4.4 usage, it >>> could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed >>> something ? Would be great! >>> >>> Thanks, >>> >>> Matt >>> >>> 2017-01-31 11:30 GMT+01:00 Martin Perina : On Tue, Jan 31, 2017 at 11:17 AM, Matt . wrote: > > Hi Martin, > > Thanks for the explanation. But what happens on those tests during the > setup the same happens as showed in oVirt. Exactly, you can execute those tests even before publishing new profile to engine and if something doesn't work you can fix even before users notice that something is wrong. Also please bear in mind that there are variety of small differences in schema across different setups even for the same LDAP server. So setup tool uses only basic configurations, if you need something more complicated you need to edit configuration manually. Thanks Martin Perina > > > Default IPA should just work I guess. > > I will test your command and report back. > > Cheers, > > Matt > > 2017-01-31 10:24 GMT+01:00 Martin Perina : > > Hi, > > > > it seem that your schema doesn't match the defaults or you home some > > configuration issue. Could you please execute following and send us the > > output for your IPA setup? > > > > ovirt-engine-extensions-tool --log-level=FINE aaa > > authz-fetch_principal_record --authz-flag=resolve-groups-recursive > > --authz-flag=resolve-groups --extension-name= > > --principal-name= > > > > The above will search for a user by and tries to fetch all > > groups > > he is member of. > > > > Btw you can test both "search users/groups" and "login a user" during > > aaa-ldap-setup tool (and it's recommended to do so) and the output from > > those commands should provide you the same details. > > > > Thanks > > > > Martin Perina > > > > > > > > On Mon, Jan 30, 2017 at 9:27 PM, Matt . wrote: > >> > >> Hi, > >> > >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the > >> groups are shown but the users are not. > >> > >> When I chose 389ds, the users are shown but not the groups. > >> > >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA > >> 4.4 version from Fedora > >> > >> Cheers, > >> > >> Matt > >> ___ > >> Users mailing list > >> Users@ovirt.org > >> http://lists.ovirt.org/mailman/listinfo/users > > > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] AAA Auth FreeIPA does not show users
OK solved. You cannot use anonymous in the full way. Also you need the full DN for the search user. Thanks for the heads up! Matt 2017-01-31 13:03 GMT+01:00 Ondra Machacek : > Hi, > > I've just tried with: > > # ipa --version > VERSION: 4.4.0, API_VERSION: 2.213 > > And all worked good. Can you please share the logs, > which Martin asked for, so we can investigate? > > Thanks, > Ondra > > On Tue, Jan 31, 2017 at 12:50 PM, Matt . wrote: >> Hi, >> >> True. Are you able to check if it still is good for IPA 4.4 usage, it >> could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed >> something ? Would be great! >> >> Thanks, >> >> Matt >> >> 2017-01-31 11:30 GMT+01:00 Martin Perina : >>> >>> >>> On Tue, Jan 31, 2017 at 11:17 AM, Matt . wrote: Hi Martin, Thanks for the explanation. But what happens on those tests during the setup the same happens as showed in oVirt. >>> >>> >>> Exactly, you can execute those tests even before publishing new profile to >>> engine and if something doesn't work you can fix even before users notice >>> that something is wrong. >>> >>> Also please bear in mind that there are variety of small differences in >>> schema across different setups even for the same LDAP server. So setup tool >>> uses only basic configurations, if you need something more complicated you >>> need to edit configuration manually. >>> >>> Thanks >>> >>> Martin Perina >>> Default IPA should just work I guess. I will test your command and report back. Cheers, Matt 2017-01-31 10:24 GMT+01:00 Martin Perina : > Hi, > > it seem that your schema doesn't match the defaults or you home some > configuration issue. Could you please execute following and send us the > output for your IPA setup? > > ovirt-engine-extensions-tool --log-level=FINE aaa > authz-fetch_principal_record --authz-flag=resolve-groups-recursive > --authz-flag=resolve-groups --extension-name= > --principal-name= > > The above will search for a user by and tries to fetch all > groups > he is member of. > > Btw you can test both "search users/groups" and "login a user" during > aaa-ldap-setup tool (and it's recommended to do so) and the output from > those commands should provide you the same details. > > Thanks > > Martin Perina > > > > On Mon, Jan 30, 2017 at 9:27 PM, Matt . wrote: >> >> Hi, >> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the >> groups are shown but the users are not. >> >> When I chose 389ds, the users are shown but not the groups. >> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA >> 4.4 version from Fedora >> >> Cheers, >> >> Matt >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users > > >>> >>> ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Safe to install/use epel repository?
This in CentOS 7.3 plain hosts used as hypervisors and intended for oVirt 4.0 and 4.1 hosts. In particular for performance related packages such as bwm-ng iftop htop nethogs and the like. Thanks, Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VM has been paused due to storage I/O problem
On Tue, Jan 31, 2017 at 3:23 PM, Nathanaël Blanchet wrote: > exactly the same issue by there with FC EMC domain storage... > > I'm trying to mitigate inserting a timeout for my SAN devices but I'm not sure of its effectiveness as CentOS 7 behavior of "multipathd -k" and then "show config" seems different from CentOS 6.x In fact my attempt for multipath.conf is this # VDSM REVISION 1.3 # VDSM PRIVATE defaults { polling_interval5 no_path_retry fail user_friendly_names no flush_on_last_del yes fast_io_fail_tmo5 dev_loss_tmo30 max_fds 4096 } # Remove devices entries when overrides section is available. devices { device { # These settings overrides built-in devices settings. It does not apply # to devices without built-in settings (these use the settings in the # "defaults" section), or to devices defined in the "devices" section. # Note: This is not available yet on Fedora 21. For more info see # https://bugzilla.redhat.com/1253799 all_devsyes no_path_retry fail } device { vendor "IBM" product "^1814" product_blacklist "Universal Xport" path_grouping_policy "group_by_prio" path_checker "rdac" features "0" hardware_handler "1 rdac" prio "rdac" failback immediate rr_weight "uniform" no_path_retry "12" } } So I put exactly the default device config for my IBM/1814 device but no_path_retry set to 12. In CentOS 6.x when you do something like this, "show config" gives you the modified entry only for your device section. Instead in CentOS 7.3 it seems I get anyway the default one for IBM/1814 and also the customized one at the end of the output Two facts: - before I could reproduce the problem if I selected Maintenance Power Mgmt ---> Restart (tried 3 times with same behavior) Instead if I executed in separate steps Maintenance Power Mgmt --> Stop wait a moment Power Mgmt --> Start I didn't get problems (tried only one time...) With this "new" multipath config (to be confirmed if in effect, how?) I don't get the VM paused problem even with Restart option of Power Mgmt In active host messages I see these ones when the other reboots: Jan 31 16:50:01 ovmsrv06 systemd: Started Session 705 of user root. Jan 31 16:50:01 ovmsrv06 systemd: Starting Session 705 of user root. Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sde - rdac checker reports path is up Jan 31 16:53:47 ovmsrv06 multipathd: 8:64: reinstated Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: load table [0 41943040 multipath 1 queue_if_no_path 1 rdac 2 1 service-time 0 2 1 8:224 1 65:0 1 service-time 0 2 1 8:64 1 8:160 1] Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdo - rdac checker reports path is ghost Jan 31 16:53:47 ovmsrv06 multipathd: 8:224: reinstated Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdk - rdac checker reports path is up Jan 31 16:53:47 ovmsrv06 multipathd: 8:160: reinstated Jan 31 16:53:47 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, queueing MODE_SELECT command Jan 31 16:53:47 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdq - rdac checker reports path is ghost Jan 31 16:53:47 ovmsrv06 multipathd: 65:0: reinstated Jan 31 16:53:48 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, MODE_SELECT returned with sense 05/91/36 Jan 31 16:53:48 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, queueing MODE_SELECT command Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, MODE_SELECT returned with sense 05/91/36 Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, queueing MODE_SELECT command Jan 31 16:53:49 ovmsrv06 kernel: sd 0:0:1:4: rdac: array Z1_DS4700, ctlr 1, MODE_SELECT completed Jan 31 16:53:49 ovmsrv06 kernel: sd 2:0:1:4: rdac: array Z1_DS4700, ctlr 1, queueing MODE_SELECT command Jan 31 16:53:49 ovmsrv06 kernel: sd 2:0:1:4: rdac: array Z1_DS4700, ctlr 1, MODE_SELECT completed Jan 31 16:53:52 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sde - rdac checker reports path is ghost Jan 31 16:53:52 ovmsrv06 multipathd: 8:64: reinstated Jan 31 16:53:52 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: load table [0 41943040 multipath 1 queue_if_no_path 1 rdac 2 1 service-time 0 2 1 8:224 1 65:0 1 service-time 0 2 1 8:64 1 8:160 1] Jan 31 16:53:52 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdo - rdac checker reports path is up Jan 31 16:53:52 ovmsrv06 multipathd: 8:224: reinstated Jan 31 16:53:52 ovmsrv06 multipathd: 3600a0b8000299aa8d08955014098: sdk - rdac checker reports path is ghost Jan 31 16:53:52 ov
Re: [ovirt-users] slave of bond changed state question
On Tue, Jan 31, 2017 at 4:17 PM, Ondrej Svoboda wrote: > Hi Gianluca, > > I have just tried to create a bond manually and set one of its slaves > down. I received a notification (in the bar at the bottom, the one that > carries Alerts, Events, and Tasks) after a while. You can find the > notification in Events, but not in Alerts. > > I can see there are three levels of Events (green "info" level, yellow > exclamation mark -- warnings, and red cross -- critical). > > I think this is expected behaviour. Please let me know if you need to know > more :-) > > Cheers, > Ondra > > > OK. So for example, even this kind of message: VM ol65 has been paused due to storage I/O problem. that has a cross at left (critical), is anyway classified as an event and not as an alert? Is there a list of what is classified as alert? Thanks, Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Ovirt 4.0.6 guests 'Not Responding'
Mark, Could you please file a bug report? Restart of vdsmd service would help to resolve the “executor queue full” state. From: on behalf of Mark Greenall Date: Monday 30 January 2017 at 15:26 To: "users@ovirt.org" Subject: [ovirt-users] Ovirt 4.0.6 guests 'Not Responding' Hi, Host server: Dell PowerEdge R815 (40 cores and 768GB memory) Stoage: Dell Equallogic (Firmware V8.1.4) OS: Centos 7.3 (although the same thing happens on 7.2) Ovirt: 4.0.6.3-1 We have several Ovirt clusters. Two of the hosts (in separate clusters) are showing as up in Hosted Engine but the guests running on them are showing as Not Responding. I can connect to the guests via ssh, etc but can’t interact with them from the Ovirt GUI. It was fine on Saturday (28th Jan) morning but looks like something happened Sunday morning around 07:14 as we suddenly see the following in engine.log on one host: 2017-01-29 07:14:26,952 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (DefaultQuartzScheduler1) [53ca8dc5] VM 'd0aa990f-e6aa-4e79-93ce-011fe1372fb0'(lnd-ion-lindev-01) moved from 'Up' --> 'NotResponding' 2017-01-29 07:14:27,069 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM lnd-ion-lindev-01 is not responding. 2017-01-29 07:14:27,070 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (DefaultQuartzScheduler1) [53ca8dc5] VM '788bfc0e-1712-469e-9a0a-395b8bb3f369'(lnd-ion-windev-02) moved from 'Up' --> 'NotResponding' 2017-01-29 07:14:27,088 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM lnd-ion-windev-02 is not responding. 2017-01-29 07:14:27,089 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (DefaultQuartzScheduler1) [53ca8dc5] VM 'd7eaa4ec-d65e-45c0-bc4f-505100658121'(lnd-ion-windev-04) moved from 'Up' --> 'NotResponding' 2017-01-29 07:14:27,103 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM lnd-ion-windev-04 is not responding. 2017-01-29 07:14:27,104 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (DefaultQuartzScheduler1) [53ca8dc5] VM '5af875ad-70f9-4f49-9640-ee2b9927348b'(lnd-anv9-sup1) moved from 'Up' --> 'NotResponding' 2017-01-29 07:14:27,121 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM lnd-anv9-sup1 is not responding. 2017-01-29 07:14:27,121 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (DefaultQuartzScheduler1) [53ca8dc5] VM 'b3b7c5f3-0b5b-4d8f-9cc8-b758cc1ce3b9'(lnd-db-dev-03) moved from 'Up' --> 'NotResponding' 2017-01-29 07:14:27,136 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM lnd-db-dev-03 is not responding. 2017-01-29 07:14:27,137 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (DefaultQuartzScheduler1) [53ca8dc5] VM '6c0a6e17-47c3-4464-939b-e83984dbeaa6'(lnd-db-dev-04) moved from 'Up' --> 'NotResponding' 2017-01-29 07:14:27,167 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler1) [53ca8dc5] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM lnd-db-dev-04 is not responding. 2017-01-29 07:14:27,168 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] (DefaultQuartzScheduler1) [53ca8dc5] VM 'ab15bb08-1244-4dc1-a4f1-f6e94246aa23'(lnd-ion-lindev-05) moved from 'Up' --> 'NotResponding' Checking the vdsm logs this morning on the hosts I see a lot of the following messages: jsonrpc.Executor/0::WARNING::2017-01-30 09:34:15,989::vm::4890::virt.vm::(_setUnresponsiveIfTimeout) vmId=`ab15bb08-1244-4dc1-a4f1-f6e94246aa23`::monitor became unresponsive (command timeout, age=94854.48) jsonrpc.Executor/0::WARNING::2017-01-30 09:34:15,990::vm::4890::virt.vm::(_setUnresponsiveIfTimeout) vmId=`20a51347-ef08-47a9-9982-32b2047991e1`::monitor became unresponsive (command timeout, age=94854.48) jsonrpc.Executor/0::WARNING::2017-01-30 09:34:15,991::vm::4890::virt.vm::(_setUnresponsiveIfTimeout) vmId=`2cd8698d-a0f9-43b7-9a89-92a93e920eb7`::monitor became unresponsive (command timeout, age=94854.49) jsonrpc.Executor/0::WARNING::2017-01-30 09:34:15,992::vm::4890::virt.vm::(_setUnresponsiveIfTimeout) vmId=`5af875ad-70f9-4f49-9640-ee2b9927348b`::monitor became unresponsive (command timeout, age=94854.49) and vdsm.Scheduler::WARNING::2017-01-30 09:36:36,444::periodic::212::virt.periodic.Operation::(_dispatch) could not run a
Re: [ovirt-users] slave of bond changed state question
Hi Gianluca, I have just tried to create a bond manually and set one of its slaves down. I received a notification (in the bar at the bottom, the one that carries Alerts, Events, and Tasks) after a while. You can find the notification in Events, but not in Alerts. I can see there are three levels of Events (green "info" level, yellow exclamation mark -- warnings, and red cross -- critical). I think this is expected behaviour. Please let me know if you need to know more :-) Cheers, Ondra On Tue, Jan 31, 2017 at 3:28 PM, Gianluca Cecchi wrote: > Hello, > in 4.0.6 I see that if a slave of a bond goes down, I receive a > notification (don't know when introduced): > > Slave enp5s0 of bond bond0 on host ovmsrv05, changed state to down > > I see the exclamation mark at the left hand side of the line, but actually > it seems it is not registered as an alert. > In fact if I pass to alert tab I don't see it. In alert tab I see for > example messages related to power mgmt when I was initially configuring it, > such as: > > Failed to verify Power Management configuration for Host omsrv05. > > Is this the expected behavior? What is the relation between exclamation > mark icon at left and alerts? > > Thanks in advance, > Gianluca > > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VM has been paused due to storage I/O problem
exactly the same issue by there with FC EMC domain storage... Le 31/01/2017 à 15:20, Gianluca Cecchi a écrit : Hello, my test environment is composed by 2 old HP blades BL685c G1 (ovmsrv05 and ovmsrv06) and they are connected in a SAN with FC-switches to an old IBM DS4700 storage array. Apart from being old, they seem all ok from an hw point of view. I have configured oVirt 4.0.6 and an FCP storage domain. The hosts are plain CentOS 7.3 servers fully updated. It is not an hosted engine environment: the manager is a vm outside of the cluster. I have configured power mgmt on both and it works good. I have at the moment only one VM for test and it is doing quite nothing. Starting point: ovmsrv05 is in maintenance (since about 2 days) and the VM is running on ovmsrv06. I update qemu-kvm package on ovmsrv05 and then I restart it from web admin gui: Power Mgmt --> Restart Sequence of events in pane and the problem in subject: Jan 31, 2017 10:29:43 AM Host ovmsrv05 power management was verified successfully. Jan 31, 2017 10:29:43 AM Status of host ovmsrv05 was set to Up. Jan 31, 2017 10:29:38 AM Executing power management status on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:29:29 AM Activation of host ovmsrv05 initiated by admin@internal-authz. Jan 31, 2017 10:28:05 AM VM ol65 has recovered from paused back to up. Jan 31, 2017 10:27:55 AM VM ol65 has been paused due to storage I/O problem. Jan 31, 2017 10:27:55 AM VM ol65 has been paused. Jan 31, 2017 10:25:52 AM Host ovmsrv05 was restarted by admin@internal-authz. Jan 31, 2017 10:25:52 AM Host ovmsrv05 was started by admin@internal-authz. Jan 31, 2017 10:25:52 AM Power management start of Host ovmsrv05 succeeded. Jan 31, 2017 10:25:50 AM Executing power management status on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:25:37 AM Executing power management start on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:25:37 AM Power management start of Host ovmsrv05 initiated. Jan 31, 2017 10:25:37 AM Auto fence for host ovmsrv05 was started. Jan 31, 2017 10:25:37 AM All VMs' status on Non Responsive Host ovmsrv05 were changed to 'Down' by admin@internal-authz Jan 31, 2017 10:25:36 AM Host ovmsrv05 was stopped by admin@internal-authz. Jan 31, 2017 10:25:36 AM Power management stop of Host ovmsrv05 succeeded. Jan 31, 2017 10:25:34 AM Executing power management status on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:25:15 AM Executing power management stop on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:25:15 AM Power management stop of Host ovmsrv05 initiated. Jan 31, 2017 10:25:12 AM Executing power management status on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Watching the timestamps, the culprit seems the reboot time of ovmsrv05 that detects some LUNs in owned state and other ones in unowned Full messages of both hosts here: https://drive.google.com/file/d/0BwoPbcrMv8mvekZQT1pjc0NMRlU/view?usp=sharing and https://drive.google.com/file/d/0BwoPbcrMv8mvcjBCYVdFZWdXTms/view?usp=sharing At this time there are 4 LUNs globally seen by the two hosts but only 1 of them is currently configured as the only storage domain in oVirt cluster. [root@ovmsrv05 ~]# multipath -l | grep ^36 3600a0b8000299aa8d08b55014119 dm-5 IBM ,1814 FAStT 3600a0b8000299902cd3c5501458f dm-3 IBM ,1814 FAStT 3600a0b8000299902ccf855011198 dm-2 IBM ,1814 FAStT 3600a0b8000299aa8d08955014098 dm-4 IBM ,1814 FAStT the configured one: [root@ovmsrv05 ~]# multipath -l 3600a0b8000299aa8d08b55014119 3600a0b8000299aa8d08b55014119 dm-5 IBM ,1814 FAStT size=4.0T features='0' hwhandler='1 rdac' wp=rw |-+- policy='service-time 0' prio=0 status=active | |- 0:0:1:3 sdl 8:176 active undef running | `- 2:0:1:3 sdp 8:240 active undef running `-+- policy='service-time 0' prio=0 status=enabled |- 0:0:0:3 sdd 8:48 active undef running `- 2:0:0:3 sdi 8:128 active undef running In mesages of booting node, arounf the problem registered by the storage: [root@ovmsrv05 ~]# grep owned /var/log/messages Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:1: rdac: LUN 1 (RDAC) (owned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:2: rdac: LUN 2 (RDAC) (owned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:3: rdac: LUN 3 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:1: rdac: LUN 1 (RDAC) (owned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:4: rdac: LUN 4 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:2: rdac: LUN 2 (RDAC) (owned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:1:1: rdac: LUN 1 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:3: rdac: LUN 3 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:4: rdac: LUN 4 (RDAC) (unowned) Jan 31 10:27:38
[ovirt-users] slave of bond changed state question
Hello, in 4.0.6 I see that if a slave of a bond goes down, I receive a notification (don't know when introduced): Slave enp5s0 of bond bond0 on host ovmsrv05, changed state to down I see the exclamation mark at the left hand side of the line, but actually it seems it is not registered as an alert. In fact if I pass to alert tab I don't see it. In alert tab I see for example messages related to power mgmt when I was initially configuring it, such as: Failed to verify Power Management configuration for Host omsrv05. Is this the expected behavior? What is the relation between exclamation mark icon at left and alerts? Thanks in advance, Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] VM has been paused due to storage I/O problem
Hello, my test environment is composed by 2 old HP blades BL685c G1 (ovmsrv05 and ovmsrv06) and they are connected in a SAN with FC-switches to an old IBM DS4700 storage array. Apart from being old, they seem all ok from an hw point of view. I have configured oVirt 4.0.6 and an FCP storage domain. The hosts are plain CentOS 7.3 servers fully updated. It is not an hosted engine environment: the manager is a vm outside of the cluster. I have configured power mgmt on both and it works good. I have at the moment only one VM for test and it is doing quite nothing. Starting point: ovmsrv05 is in maintenance (since about 2 days) and the VM is running on ovmsrv06. I update qemu-kvm package on ovmsrv05 and then I restart it from web admin gui: Power Mgmt --> Restart Sequence of events in pane and the problem in subject: Jan 31, 2017 10:29:43 AM Host ovmsrv05 power management was verified successfully. Jan 31, 2017 10:29:43 AM Status of host ovmsrv05 was set to Up. Jan 31, 2017 10:29:38 AM Executing power management status on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:29:29 AM Activation of host ovmsrv05 initiated by admin@internal-authz. Jan 31, 2017 10:28:05 AM VM ol65 has recovered from paused back to up. Jan 31, 2017 10:27:55 AM VM ol65 has been paused due to storage I/O problem. Jan 31, 2017 10:27:55 AM VM ol65 has been paused. Jan 31, 2017 10:25:52 AM Host ovmsrv05 was restarted by admin@internal-authz. Jan 31, 2017 10:25:52 AM Host ovmsrv05 was started by admin@internal-authz. Jan 31, 2017 10:25:52 AM Power management start of Host ovmsrv05 succeeded. Jan 31, 2017 10:25:50 AM Executing power management status on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:25:37 AM Executing power management start on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:25:37 AM Power management start of Host ovmsrv05 initiated. Jan 31, 2017 10:25:37 AM Auto fence for host ovmsrv05 was started. Jan 31, 2017 10:25:37 AM All VMs' status on Non Responsive Host ovmsrv05 were changed to 'Down' by admin@internal-authz Jan 31, 2017 10:25:36 AM Host ovmsrv05 was stopped by admin@internal-authz. Jan 31, 2017 10:25:36 AM Power management stop of Host ovmsrv05 succeeded. Jan 31, 2017 10:25:34 AM Executing power management status on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:25:15 AM Executing power management stop on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Jan 31, 2017 10:25:15 AM Power management stop of Host ovmsrv05 initiated. Jan 31, 2017 10:25:12 AM Executing power management status on Host ovmsrv05 using Proxy Host ovmsrv06 and Fence Agent ilo:10.4.192.212. Watching the timestamps, the culprit seems the reboot time of ovmsrv05 that detects some LUNs in owned state and other ones in unowned Full messages of both hosts here: https://drive.google.com/file/d/0BwoPbcrMv8mvekZQT1pjc0NMRlU/view?usp=sharing and https://drive.google.com/file/d/0BwoPbcrMv8mvcjBCYVdFZWdXTms/view?usp=sharing At this time there are 4 LUNs globally seen by the two hosts but only 1 of them is currently configured as the only storage domain in oVirt cluster. [root@ovmsrv05 ~]# multipath -l | grep ^36 3600a0b8000299aa8d08b55014119 dm-5 IBM ,1814 FAStT 3600a0b8000299902cd3c5501458f dm-3 IBM ,1814 FAStT 3600a0b8000299902ccf855011198 dm-2 IBM ,1814 FAStT 3600a0b8000299aa8d08955014098 dm-4 IBM ,1814 FAStT the configured one: [root@ovmsrv05 ~]# multipath -l 3600a0b8000299aa8d08b55014119 3600a0b8000299aa8d08b55014119 dm-5 IBM ,1814 FAStT size=4.0T features='0' hwhandler='1 rdac' wp=rw |-+- policy='service-time 0' prio=0 status=active | |- 0:0:1:3 sdl 8:176 active undef running | `- 2:0:1:3 sdp 8:240 active undef running `-+- policy='service-time 0' prio=0 status=enabled |- 0:0:0:3 sdd 8:48 active undef running `- 2:0:0:3 sdi 8:128 active undef running In mesages of booting node, arounf the problem registered by the storage: [root@ovmsrv05 ~]# grep owned /var/log/messages Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:1: rdac: LUN 1 (RDAC) (owned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:2: rdac: LUN 2 (RDAC) (owned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:3: rdac: LUN 3 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:1: rdac: LUN 1 (RDAC) (owned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:0:4: rdac: LUN 4 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:2: rdac: LUN 2 (RDAC) (owned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:1:1: rdac: LUN 1 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:3: rdac: LUN 3 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:0:4: rdac: LUN 4 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 0:0:1:2: rdac: LUN 2 (RDAC) (unowned) Jan 31 10:27:38 ovmsrv05 kernel: scsi 2:0:1:1: rdac: LUN 1 (RDAC) (unowned)
Re: [ovirt-users] VMWare VSAN like setup with oVirt
On Tue, Jan 31, 2017 at 2:20 PM, Fernando Frediani < fernando.fredi...@upx.com.br> wrote: > Hello > > Note that Gluster hasn't all the VSAN features yet so you will be able to > replicate data. > > Also I personally think replica=3 is overkill and waste of space for mos > scenarios. 2 should be enough and give a raid 1 like. I'm not sure it's like RAID 1. In RAID 1, when one disk fails, I'm pretty sure I know where the correct data is. In Gluster, if you have a split brain, where's the correct data? I suggest perhaps using an arbiter. Y. > > > > On 31/01/2017 06:29, Nicolas Ecarnot wrote: > >> Le 31/01/2017 à 09:15, Anantha Raghava a écrit : >> >>> Hi, >>> >>> We are trying to create a setup that uses the internal disks of the >>> hosts / nodes, yet provide the high availability, replication and >>> failover using oVirt. The setup we are typing to build is close to >>> VMWare VSAN which allows for all the above just using the internal disks >>> of the ESXi servers. >>> >>> Can we achieve something similar with oVirt with Gluster? >>> >> >> Absolutely. One of our oVirt setup is done this way. >> Three hosts are set up as glusterFS servers (replica-3), as well as oVirt >> nodes. >> We choose to add a fourth host as an standalone engine, but you can >> choose to use a VM for that (hyperconverge setup). >> >> I have no experience on similar setup with a random number of nodes, >> neither if this can be achievable (some kind of network RAID-10)... (?) >> >> > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Fence Agent cisco_ucs not working anymore since 4.0.5
Hello, changing in API and even database directly is working well, but in my opinion this should also work in UI, because you can't edit the host anymore! And when you editing the host, there is no error, that you have to change the options in fence agent. When you don't be aware of this issue, you will be never able anymore to change host stuff in UI with ovirt 4.0. I also heard, that 4.0.7 will be never released! Really? So this bug will never be fixed? BR Florian - Ursprüngliche Mail - Von: "Alexander Wels" An: users@ovirt.org CC: "Florian Schmid" Gesendet: Montag, 23. Januar 2017 14:12:23 Betreff: Re: [ovirt-users] Fence Agent cisco_ucs not working anymore since 4.0.5 On Sunday, January 22, 2017 8:43:57 PM EST Florian Schmid wrote: > Hello, > > thank you very much for these bug reports! Good to here, that there will be > a fix in 4.0.7. > > Do you maybe know a workaround until this version comes out? > This is a problem with the UI validation, you can use the REST api to set this. Yes this should be fixed in 4.0.7 > I tried already to add it manually in database, but I cannot really test it. > 4.1 RC, I can't test, because I have no unused blades around, sorry! > > BR Florian > > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VMWare VSAN like setup with oVirt
Hello Note that Gluster hasn't all the VSAN features yet so you will be able to replicate data. Also I personally think replica=3 is overkill and waste of space for mos scenarios. 2 should be enough and give a raid 1 like. On 31/01/2017 06:29, Nicolas Ecarnot wrote: Le 31/01/2017 à 09:15, Anantha Raghava a écrit : Hi, We are trying to create a setup that uses the internal disks of the hosts / nodes, yet provide the high availability, replication and failover using oVirt. The setup we are typing to build is close to VMWare VSAN which allows for all the above just using the internal disks of the ESXi servers. Can we achieve something similar with oVirt with Gluster? Absolutely. One of our oVirt setup is done this way. Three hosts are set up as glusterFS servers (replica-3), as well as oVirt nodes. We choose to add a fourth host as an standalone engine, but you can choose to use a VM for that (hyperconverge setup). I have no experience on similar setup with a random number of nodes, neither if this can be achievable (some kind of network RAID-10)... (?) ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] AAA Auth FreeIPA does not show users
Hi, I've just tried with: # ipa --version VERSION: 4.4.0, API_VERSION: 2.213 And all worked good. Can you please share the logs, which Martin asked for, so we can investigate? Thanks, Ondra On Tue, Jan 31, 2017 at 12:50 PM, Matt . wrote: > Hi, > > True. Are you able to check if it still is good for IPA 4.4 usage, it > could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed > something ? Would be great! > > Thanks, > > Matt > > 2017-01-31 11:30 GMT+01:00 Martin Perina : >> >> >> On Tue, Jan 31, 2017 at 11:17 AM, Matt . wrote: >>> >>> Hi Martin, >>> >>> Thanks for the explanation. But what happens on those tests during the >>> setup the same happens as showed in oVirt. >> >> >> Exactly, you can execute those tests even before publishing new profile to >> engine and if something doesn't work you can fix even before users notice >> that something is wrong. >> >> Also please bear in mind that there are variety of small differences in >> schema across different setups even for the same LDAP server. So setup tool >> uses only basic configurations, if you need something more complicated you >> need to edit configuration manually. >> >> Thanks >> >> Martin Perina >> >>> >>> >>> Default IPA should just work I guess. >>> >>> I will test your command and report back. >>> >>> Cheers, >>> >>> Matt >>> >>> 2017-01-31 10:24 GMT+01:00 Martin Perina : >>> > Hi, >>> > >>> > it seem that your schema doesn't match the defaults or you home some >>> > configuration issue. Could you please execute following and send us the >>> > output for your IPA setup? >>> > >>> > ovirt-engine-extensions-tool --log-level=FINE aaa >>> > authz-fetch_principal_record --authz-flag=resolve-groups-recursive >>> > --authz-flag=resolve-groups --extension-name= >>> > --principal-name= >>> > >>> > The above will search for a user by and tries to fetch all >>> > groups >>> > he is member of. >>> > >>> > Btw you can test both "search users/groups" and "login a user" during >>> > aaa-ldap-setup tool (and it's recommended to do so) and the output from >>> > those commands should provide you the same details. >>> > >>> > Thanks >>> > >>> > Martin Perina >>> > >>> > >>> > >>> > On Mon, Jan 30, 2017 at 9:27 PM, Matt . wrote: >>> >> >>> >> Hi, >>> >> >>> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the >>> >> groups are shown but the users are not. >>> >> >>> >> When I chose 389ds, the users are shown but not the groups. >>> >> >>> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA >>> >> 4.4 version from Fedora >>> >> >>> >> Cheers, >>> >> >>> >> Matt >>> >> ___ >>> >> Users mailing list >>> >> Users@ovirt.org >>> >> http://lists.ovirt.org/mailman/listinfo/users >>> > >>> > >> >> ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Unable to add additional hosts to Ovirt 4.0.6
Hello, When I first installed ovirt onto 8 nodes it was the 4.0.1 version, since then I have upgraded it to 4.0.6 (I doubt that that is the issue thou). I wanted to add some more nodes to a different cluster (AMD based CPUs), but the install just hangs at the last step it would seem (it just keeps on saying "Installing", but the logs say its finished). I am adding the relevant log excerpt: 017-01-31 12:42:18 DEBUG otopi.context context.dumpEnvironment:774 ENVIRONMENT DUMP - END 2017-01-31 12:42:18 DEBUG otopi.context context._executeMethod:128 Stage pre-terminate METHOD otopi.plugins.otopi.dialog.cli.Plugin._pre_terminate 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QStart: TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### Processing ended, use 'quit' to quit 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### COMMAND> 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QHidden: FALSE 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ***Q:STRING TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QEnd: TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:RECEIVEenv-get -k BASE/error 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ***D:VALUE BASE/error=bool:False 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QStart: TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### Processing ended, use 'quit' to quit 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### COMMAND> 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QHidden: FALSE 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ***Q:STRING TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QEnd: TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:RECEIVEenv-get -k ODEPLOY/installIncomplete 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ***D:VALUE ODEPLOY/installIncomplete=bool:False 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QStart: TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### Processing ended, use 'quit' to quit 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### COMMAND> 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QHidden: FALSE 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ***Q:STRING TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QEnd: TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:RECEIVEenv-get -k SYSTEM/reboot 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ***D:VALUE SYSTEM/reboot=bool:False 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QStart: TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### Processing ended, use 'quit' to quit 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ### COMMAND> 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QHidden: FALSE 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND ***Q:STRING TERMINATION_COMMAND 2017-01-31 12:42:18 DEBUG otopi.plugins.otopi.dialog.machine dialog.__logString:204 DIALOG:SEND **%QEnd: TERMINATION_COMMAND 2017-01-31 12:42:18 DEBU
Re: [ovirt-users] AAA Auth FreeIPA does not show users
Hi, True. Are you able to check if it still is good for IPA 4.4 usage, it could be still IPA 3.x maybe or between 4.2 and 4.4 has been changed something ? Would be great! Thanks, Matt 2017-01-31 11:30 GMT+01:00 Martin Perina : > > > On Tue, Jan 31, 2017 at 11:17 AM, Matt . wrote: >> >> Hi Martin, >> >> Thanks for the explanation. But what happens on those tests during the >> setup the same happens as showed in oVirt. > > > Exactly, you can execute those tests even before publishing new profile to > engine and if something doesn't work you can fix even before users notice > that something is wrong. > > Also please bear in mind that there are variety of small differences in > schema across different setups even for the same LDAP server. So setup tool > uses only basic configurations, if you need something more complicated you > need to edit configuration manually. > > Thanks > > Martin Perina > >> >> >> Default IPA should just work I guess. >> >> I will test your command and report back. >> >> Cheers, >> >> Matt >> >> 2017-01-31 10:24 GMT+01:00 Martin Perina : >> > Hi, >> > >> > it seem that your schema doesn't match the defaults or you home some >> > configuration issue. Could you please execute following and send us the >> > output for your IPA setup? >> > >> > ovirt-engine-extensions-tool --log-level=FINE aaa >> > authz-fetch_principal_record --authz-flag=resolve-groups-recursive >> > --authz-flag=resolve-groups --extension-name= >> > --principal-name= >> > >> > The above will search for a user by and tries to fetch all >> > groups >> > he is member of. >> > >> > Btw you can test both "search users/groups" and "login a user" during >> > aaa-ldap-setup tool (and it's recommended to do so) and the output from >> > those commands should provide you the same details. >> > >> > Thanks >> > >> > Martin Perina >> > >> > >> > >> > On Mon, Jan 30, 2017 at 9:27 PM, Matt . wrote: >> >> >> >> Hi, >> >> >> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the >> >> groups are shown but the users are not. >> >> >> >> When I chose 389ds, the users are shown but not the groups. >> >> >> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA >> >> 4.4 version from Fedora >> >> >> >> Cheers, >> >> >> >> Matt >> >> ___ >> >> Users mailing list >> >> Users@ovirt.org >> >> http://lists.ovirt.org/mailman/listinfo/users >> > >> > > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] "Setup Host Networks" fails (was: Ovirt 4 failing to setup CentOS 7.2 host (everything default))
Thank you for tidying up the thread. Never used these mailing lists (at all on any platform), so I am trying to minimize damage ;). Here are some additional logs from the host. (upon using Setup Host Networks). ### messages . Jan 31 10:44:28 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Down Jan 31 10:44:29 CentOS-73-64-minimal systemd: Started /usr/sbin/ifup enp4s0. Jan 31 10:44:29 CentOS-73-64-minimal systemd: Starting /usr/sbin/ifup enp4s0. Jan 31 10:44:29 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_UP): enp4s0: link is not ready Jan 31 10:44:29 CentOS-73-64-minimal kernel: 8021q: adding VLAN 0 to HW filter on device enp4s0 Jan 31 10:44:33 CentOS-73-64-minimal daemonAdapter: libvirt: Network Driver error : Network not found: no network with matching name 'vdsm-ovirtmgmt' Jan 31 10:44:33 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx Jan 31 10:44:33 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp4s0: link becomes ready Jan 31 10:46:34 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Down Jan 31 10:46:34 CentOS-73-64-minimal systemd: Started /usr/sbin/ifup enp4s0. Jan 31 10:46:34 CentOS-73-64-minimal systemd: Starting /usr/sbin/ifup enp4s0. Jan 31 10:46:34 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_UP): enp4s0: link is not ready Jan 31 10:46:34 CentOS-73-64-minimal kernel: 8021q: adding VLAN 0 to HW filter on device enp4s0 Jan 31 10:46:38 CentOS-73-64-minimal journal: vdsm vds ERROR connectivity check failed#012Traceback (most recent call last):#012 File "/usr/share/vdsm/API.py", line 1473, in setupNetworks#012 supervdsm.getProxy().setupNetworks(networks, bondings, options)#012 File "/usr/lib/python2.7/site-packages/vdsm/supervdsm.py", line 53, in __call__#012 return callMethod()#012 File "/usr/lib/python2.7/site-packages/vdsm/supervdsm.py", line 51, in #012 **kwargs)#012 File "", line 2, in setupNetworks#012 File "/usr/lib64/python2.7/multiprocessing/managers.py", line 773, in _callmethod#012raise convert_to_error(kind, result)#012ConfigNetworkError: (10, 'connectivity check failed') Jan 31 10:46:39 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx Jan 31 10:46:39 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp4s0: link becomes ready journalctl Jan 31 11:05:07 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Down Jan 31 11:05:07 CentOS-73-64-minimal systemd[1]: Started /usr/sbin/ifup enp4s0. Jan 31 11:05:07 CentOS-73-64-minimal systemd[1]: Starting /usr/sbin/ifup enp4s0. Jan 31 11:05:07 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_UP): enp4s0: link is not ready Jan 31 11:05:07 CentOS-73-64-minimal kernel: 8021q: adding VLAN 0 to HW filter on device enp4s0 Jan 31 11:05:11 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx Jan 31 11:05:11 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_CHANGE): enp4s0: link becomes ready Jan 31 11:05:11 CentOS-73-64-minimal daemonAdapter[11064]: libvirt: Network Driver error : Network not found: no network with matching name 'vdsm-ovirtmgmt' Jan 31 11:07:12 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Down Jan 31 11:07:12 CentOS-73-64-minimal systemd[1]: Started /usr/sbin/ifup enp4s0. Jan 31 11:07:12 CentOS-73-64-minimal systemd[1]: Starting /usr/sbin/ifup enp4s0. Jan 31 11:07:12 CentOS-73-64-minimal kernel: IPv6: ADDRCONF(NETDEV_UP): enp4s0: link is not ready Jan 31 11:07:12 CentOS-73-64-minimal kernel: 8021q: adding VLAN 0 to HW filter on device enp4s0 Jan 31 11:07:16 CentOS-73-64-minimal vdsm[11340]: vdsm vds ERROR connectivity check failed Traceback (most recent call last): File "/usr/share/vdsm/API.py", line 1473, in setupNetworks supervdsm.getProxy().setupNetworks(networks, bondings, options) File "/usr/lib/python2.7/site-packages/vdsm/supervdsm.py", line 53, in __call__ return callMethod() File "/usr/lib/python2.7/site-packages/vdsm/supervdsm.py", line 51, in **kwargs) File "", line 2, in setupNetworks File "/usr/lib64/python2.7/multiprocessing/managers.py", line 773, in _callmethod raise convert_to_error(kind, result) ConfigNetworkError: (10, 'connectivity check failed') Jan 31 11:07:17 CentOS-73-64-minimal kernel: e1000e: enp4s0 NIC Link is Up 1000 Mbps Full Duplex, Flow C
Re: [ovirt-users] VMWare VSAN like setup with oVirt
Hello Didi, Thanks for sharing the link. We are now reviewing this link and preparing the environment. Will setup and let you all know. -- Thanks & Regards, Anantha Raghava eXzaTech Consulting And Services Pvt. Ltd. Do not print this e-mail unless required. Save Paper & trees. On Tuesday 31 January 2017 02:38 PM, Yedidyah Bar David wrote: On Tue, Jan 31, 2017 at 10:32 AM, Anantha Raghava wrote: Thanks Nicholas for quick reply. Will attempt and revert in case of I get stuck midway. You might want to review the following blog post: https://www.ovirt.org/blog/2016/08/up-and-running-with-ovirt-4-0-and-gluster-storage/ -- Thanks & Regards, Anantha Raghava eXzaTech Consulting And Services Pvt. Ltd. DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to eXza Technology Consulting & Services, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. Do not print this e-mail unless required. Save Paper & trees. On Tuesday 31 January 2017 01:59 PM, Nicolas Ecarnot wrote: Le 31/01/2017 à 09:15, Anantha Raghava a écrit : Hi, We are trying to create a setup that uses the internal disks of the hosts / nodes, yet provide the high availability, replication and failover using oVirt. The setup we are typing to build is close to VMWare VSAN which allows for all the above just using the internal disks of the ESXi servers. Can we achieve something similar with oVirt with Gluster? Absolutely. One of our oVirt setup is done this way. Three hosts are set up as glusterFS servers (replica-3), as well as oVirt nodes. We choose to add a fourth host as an standalone engine, but you can choose to use a VM for that (hyperconverge setup). I have no experience on similar setup with a random number of nodes, neither if this can be achievable (some kind of network RAID-10)... (?) ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] AAA Auth FreeIPA does not show users
On Tue, Jan 31, 2017 at 11:17 AM, Matt . wrote: > Hi Martin, > > Thanks for the explanation. But what happens on those tests during the > setup the same happens as showed in oVirt. > Exactly, you can execute those tests even before publishing new profile to engine and if something doesn't work you can fix even before users notice that something is wrong. Also please bear in mind that there are variety of small differences in schema across different setups even for the same LDAP server. So setup tool uses only basic configurations, if you need something more complicated you need to edit configuration manually. Thanks Martin Perina > > Default IPA should just work I guess. > > I will test your command and report back. > > Cheers, > > Matt > > 2017-01-31 10:24 GMT+01:00 Martin Perina : > > Hi, > > > > it seem that your schema doesn't match the defaults or you home some > > configuration issue. Could you please execute following and send us the > > output for your IPA setup? > > > > ovirt-engine-extensions-tool --log-level=FINE aaa > > authz-fetch_principal_record --authz-flag=resolve-groups-recursive > > --authz-flag=resolve-groups --extension-name= > > --principal-name= > > > > The above will search for a user by and tries to fetch all > groups > > he is member of. > > > > Btw you can test both "search users/groups" and "login a user" during > > aaa-ldap-setup tool (and it's recommended to do so) and the output from > > those commands should provide you the same details. > > > > Thanks > > > > Martin Perina > > > > > > > > On Mon, Jan 30, 2017 at 9:27 PM, Matt . wrote: > >> > >> Hi, > >> > >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the > >> groups are shown but the users are not. > >> > >> When I chose 389ds, the users are shown but not the groups. > >> > >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA > >> 4.4 version from Fedora > >> > >> Cheers, > >> > >> Matt > >> ___ > >> Users mailing list > >> Users@ovirt.org > >> http://lists.ovirt.org/mailman/listinfo/users > > > > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] AAA Auth FreeIPA does not show users
Hi Martin, Thanks for the explanation. But what happens on those tests during the setup the same happens as showed in oVirt. Default IPA should just work I guess. I will test your command and report back. Cheers, Matt 2017-01-31 10:24 GMT+01:00 Martin Perina : > Hi, > > it seem that your schema doesn't match the defaults or you home some > configuration issue. Could you please execute following and send us the > output for your IPA setup? > > ovirt-engine-extensions-tool --log-level=FINE aaa > authz-fetch_principal_record --authz-flag=resolve-groups-recursive > --authz-flag=resolve-groups --extension-name= > --principal-name= > > The above will search for a user by and tries to fetch all groups > he is member of. > > Btw you can test both "search users/groups" and "login a user" during > aaa-ldap-setup tool (and it's recommended to do so) and the output from > those commands should provide you the same details. > > Thanks > > Martin Perina > > > > On Mon, Jan 30, 2017 at 9:27 PM, Matt . wrote: >> >> Hi, >> >> When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the >> groups are shown but the users are not. >> >> When I chose 389ds, the users are shown but not the groups. >> >> Is something wrong with the FreeIPA implementation ? I'm on latest IPA >> 4.4 version from Fedora >> >> Cheers, >> >> Matt >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] AAA Auth FreeIPA does not show users
Hi, it seem that your schema doesn't match the defaults or you home some configuration issue. Could you please execute following and send us the output for your IPA setup? ovirt-engine-extensions-tool --log-level=FINE aaa authz-fetch_principal_record --authz-flag=resolve-groups-recursive --authz-flag=resolve-groups --extension-name= --principal-name= The above will search for a user by and tries to fetch all groups he is member of. Btw you can test both "search users/groups" and "login a user" during aaa-ldap-setup tool (and it's recommended to do so) and the output from those commands should provide you the same details. Thanks Martin Perina On Mon, Jan 30, 2017 at 9:27 PM, Matt . wrote: > Hi, > > When I do a ovirt-engine-extension-aaa-ldap-setup and chose IPA the > groups are shown but the users are not. > > When I chose 389ds, the users are shown but not the groups. > > Is something wrong with the FreeIPA implementation ? I'm on latest IPA > 4.4 version from Fedora > > Cheers, > > Matt > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] multi attached export domain
Hello, In the case I want to export a vm to the export domain so as to reimport in an other datacenter, I must detach and then reattach it, which can be a long operation (is this normal?). To reduce that time, it should be interesting to attach this domain to both datacenters. Is there any reason not to be allowed to do such a thing? -- Nathanaël Blanchet Supervision réseau Pôle Infrastrutures Informatiques 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanc...@abes.fr ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VMWare VSAN like setup with oVirt
On Tue, Jan 31, 2017 at 10:32 AM, Anantha Raghava wrote: > Thanks Nicholas for quick reply. Will attempt and revert in case of I get > stuck midway. You might want to review the following blog post: https://www.ovirt.org/blog/2016/08/up-and-running-with-ovirt-4-0-and-gluster-storage/ > > -- > > Thanks & Regards, > > > Anantha Raghava eXzaTech Consulting And Services Pvt. Ltd. > > DISCLAIMER: > This e-mail communication and any attachments may be privileged and > confidential to eXza Technology Consulting & Services, and are intended only > for the use of the recipients named above If you are not the addressee you > may not copy, forward, disclose or use any part of it. If you have received > this message in error, please delete it and all copies from your system and > notify the sender immediately by return e-mail. Internet communications > cannot be guaranteed to be timely, secure, error or virus-free. The sender > does not accept liability for any errors or omissions. > > > Do not print this e-mail unless required. Save Paper & trees. > > On Tuesday 31 January 2017 01:59 PM, Nicolas Ecarnot wrote: > > Le 31/01/2017 à 09:15, Anantha Raghava a écrit : > > Hi, > > We are trying to create a setup that uses the internal disks of the > hosts / nodes, yet provide the high availability, replication and > failover using oVirt. The setup we are typing to build is close to > VMWare VSAN which allows for all the above just using the internal disks > of the ESXi servers. > > Can we achieve something similar with oVirt with Gluster? > > > Absolutely. One of our oVirt setup is done this way. > Three hosts are set up as glusterFS servers (replica-3), as well as oVirt > nodes. > We choose to add a fourth host as an standalone engine, but you can choose > to use a VM for that (hyperconverge setup). > > I have no experience on similar setup with a random number of nodes, neither > if this can be achievable (some kind of network RAID-10)... (?) > > > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > -- Didi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] "Setup Host Networks" fails (was: Ovirt 4 failing to setup CentOS 7.2 host (everything default))
On Tue, Jan 31, 2017 at 9:43 AM, Eidmantas Ivanauskas wrote: > I could SSH into it, because (as per supervdsm log) the original network > config was restored. > > Engine and host are in completely different continents (America, Europe) > > > > I cleared both engine.log and host logs. Went into Ovirt GUI and ‘Setup Host > Networks > and dragged ovirtmgmt in my GUI to bind with the main ethernet adapter. > > As always, the console freezes (as network connection is lost after those > retries and the original config is restored). > > engine.log > http://pastebin.com/kT6WSq2W > > and host-deploy doesn’t add any extra info. I guess it’s because I am > actually not deploying the host, but rather doing ‘Setup Host Networks’ > attachment of ‘ovirtmgmt’? OK. Re-adding Eduard and changing subject. Best, > > > Thanks so much for replying. > > > > On Jan 31, 2017, at 9:28 AM, Sandro Bonazzola wrote: > > > > On Mon, Jan 30, 2017 at 6:05 PM, Eidmantas Ivanauskas > wrote: >> >> Hey guys, >> >> Trying to setup a new Ovirt Engine + a separate CentOS 7.2 based Host. >> After adding the host, SSH freezes (possibly due to the log below), then the >> GUI just displays ‘Non Operational’. > > > Please note that following CentOS 7.3 release, 7.2 is not supported anymore. > Latest qemu-kvm-ev 2.6 requires CentOS 7.3. > > > > [root@CentOS-73-64-minimal ~]# cat /etc/centos-release > CentOS Linux release 7.3.1611 (Core) > [root@CentOS-73-64-minimal ~]# > > It was 7.3 after all, not 7.2. Sorry. > > >> >> The engine is running in Hetzner DC which allows for only MAC based >> routing, but I don’t think this part of the setup is connected. I heard >> people having issues routing additional IP pools. >> >> Here’s the supervdsm.log from the host server. >> >> http://pastebin.com/irfShv9n >> >> What am I missing here? It’s been a long long day. >> Thanks. >> Eid >> >> >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> > > > > -- > Sandro Bonazzola > Better technology. Faster innovation. Powered by community collaboration. > See how it works at redhat.com > > > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > -- Didi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VMWare VSAN like setup with oVirt
Thanks Nicholas for quick reply. Will attempt and revert in case of I get stuck midway. -- Thanks & Regards, Anantha Raghava eXzaTech Consulting And Services Pvt. Ltd. DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to eXza Technology Consulting & Services, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. Do not print this e-mail unless required. Save Paper & trees. On Tuesday 31 January 2017 01:59 PM, Nicolas Ecarnot wrote: Le 31/01/2017 à 09:15, Anantha Raghava a écrit : Hi, We are trying to create a setup that uses the internal disks of the hosts / nodes, yet provide the high availability, replication and failover using oVirt. The setup we are typing to build is close to VMWare VSAN which allows for all the above just using the internal disks of the ESXi servers. Can we achieve something similar with oVirt with Gluster? Absolutely. One of our oVirt setup is done this way. Three hosts are set up as glusterFS servers (replica-3), as well as oVirt nodes. We choose to add a fourth host as an standalone engine, but you can choose to use a VM for that (hyperconverge setup). I have no experience on similar setup with a random number of nodes, neither if this can be achievable (some kind of network RAID-10)... (?) ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VMWare VSAN like setup with oVirt
Le 31/01/2017 à 09:15, Anantha Raghava a écrit : Hi, We are trying to create a setup that uses the internal disks of the hosts / nodes, yet provide the high availability, replication and failover using oVirt. The setup we are typing to build is close to VMWare VSAN which allows for all the above just using the internal disks of the ESXi servers. Can we achieve something similar with oVirt with Gluster? Absolutely. One of our oVirt setup is done this way. Three hosts are set up as glusterFS servers (replica-3), as well as oVirt nodes. We choose to add a fourth host as an standalone engine, but you can choose to use a VM for that (hyperconverge setup). I have no experience on similar setup with a random number of nodes, neither if this can be achievable (some kind of network RAID-10)... (?) -- Nicolas ECARNOT ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] VMWare VSAN like setup with oVirt
Hi, We are trying to create a setup that uses the internal disks of the hosts / nodes, yet provide the high availability, replication and failover using oVirt. The setup we are typing to build is close to VMWare VSAN which allows for all the above just using the internal disks of the ESXi servers. Can we achieve something similar with oVirt with Gluster? -- Thanks & Regards, Anantha Raghava eXzaTech Consulting And Services Pvt. Ltd. DISCLAIMER: This e-mail communication and any attachments may be privileged and confidential to eXza Technology Consulting & Services, and are intended only for the use of the recipients named above If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. Do not print this e-mail unless required. Save Paper & trees. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Add host to oVirt: unprovisioned without using username/password in vdsm-tool
I also see that a Approved Host doesn't show it's network interfaces on the "Network Interfaces" tab. I'm investigating this but I'm not sure where it goes wrong. 2017-01-31 8:30 GMT+01:00 Matt . : > Hi, > > I found out that a browser times out when you select an "Pending > Approval" host, the browser becomes unresponsive for a while. > > This could be because of the installed cockpit module maybe, I'm not > sure but I see more bad response on selecting hosts where the cockpit > package is not installed but the tab in oVirt is loaded. > > Regards, > > Matt > > 2017-01-30 16:54 GMT+01:00 Matt . : >> Hi Douglas, >> >> I think we discussed this in 2013 as well, thanks for catching up... >> you were mentioned on irc already by rgolan :) >> >> I needed the --check-fqdn false which fixed it. >> >> Very nice and thanks for the example :) Will check further what the >> possibilities are! >> >> >> Cheers, >> >> Matt >> >> 2017-01-30 16:46 GMT+01:00 Douglas Schilling Landgraf : >>> Hello Matt, >>> >>> On 01/30/2017 08:52 AM, Matt . wrote: In a puppetized environment it's just too easy to include a manifest/class that will use the ssh key for that manifest, I want to avoid that and control the acceptance from the GUI when a possible host is added to to engine but not capable to join the cluster yet. >>> >>> >>> I would suggest: >>> >>> # vdsm-tool register --engine-fqdn myengine.localdomain >>> >>> or without the check of fqdn: >>> >>> # vdsm-tool register --engine-fqdn IP_ADDRESS --check-fqdn false >>> >>> Later you might want to approve the host via GUI, SDK or REST API. >>> >>> A quick example of rest api: >>> https://github.com/dougsland/ovirt-restapi-scripts/commit/91dcb3fcd2cae6570aed06dc3471c4d79caefbc8 >>> >>> >>> The idea how I used it was very plain and simple, the host exists in oVirt but was unprovisioned, you clicked install and there it went. If that would be possible again or is in some way I would like to know. 2017-01-30 14:07 GMT+01:00 Yaniv Kaul : > > > > On Mon, Jan 30, 2017 at 12:03 PM, Matt . wrote: >> >> >> Could do but then there is still some password like thingy around in >> my provisioning system, a key is just a fingerprint which is matched. > > > > It's not JUST a fingerprint. It's the fingerprint of a SSH key we use for > the authentication. > >> >> What is also the case is that I want to decide in the engine if it's >> valid to be provisioned or not. > > > > So don't add that SSH key to hosts that you don't want to provision. > We don't have this extra phase of 'approving a host when you add it'. > If you have permissions to add a host, it'll be added - via the Engine, > by > the Engine. > >> >> >> Security wise it's not ideal if you ask me, that is why I did it using >> the URL, http/https was possible. >> >> No clue there ? > > > > I'm probably missing the use case here. > Y. > >> >> >> Thanks! >> >> Matt >> >> 2017-01-30 10:32 GMT+01:00 Yaniv Kaul : >>> >>> Have you tried using SSH public key auth.? >>> Y. >>> >>> >>> On Mon, Jan 30, 2017 at 9:57 AM, Matt . wrote: Hi All, In the past I was using an URL to add my hosts to over so they exists in the ovirt WebGui but they were unprovisioned so I needed to install them only. This is what I used: http://OVIRTENGINE_FQDN/OvirtEngineWeb/register?vds_ip=HOSTFQDN&port=54321&vds_name=HOSTNAME&vds_unique_id=%60dmidecode%20-s%20system-uuid%60&ticket=&__VIEWSTATE=' Is there some way to accomplish this still without using a user/pass combiation ? Thanks! Matt ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users >>> >>> >>> > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users >>> ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users