[ovirt-users] VM Permissions (3.6)

[Alexis HAUSER]

hi, I'm trying to figure out how to manage VM permissions with ovirt. 
>From what I've understood, if you add a user to user role in the system 
>preferences, this user can access every VM and resources on the cluster, with 
>the associated permissions; right ? 
Now, if I want to control who has access to each VM : I musn't add this user to 
user role from the system tab; but instead add it on each resources (like on 
each VM) it should access ? 

Is there another way to manage permissions ? How you guys do personally manage 
this ? Do you automate it with scripts ? 

Thanks for you ideas and suggestions 

(using 3.6) 


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Replicated Glusterfs on top of ZFS

[Ramesh Nachimuthu]

+gluster-users 


Regards,
Ramesh

- Original Message -
> From: "Arman Khalatyan" 
> To: "Juan Pablo" 
> Cc: "users" , "FERNANDO FREDIANI" 
> Sent: Friday, March 3, 2017 8:32:31 PM
> Subject: Re: [ovirt-users] Replicated Glusterfs on top of ZFS
> 
> The problem itself is not the streaming data performance., and also dd zero
> does not help much in the production zfs running with compression.
> the main problem comes when the gluster is starting to do something with
> that, it is using xattrs, probably accessing extended attributes inside the
> zfs is slower than XFS.
> Also primitive find file or ls -l in the (dot)gluster folders takes ages:
> 
> now I can see that arbiter host has almost 100% cache miss during the
> rebuild, which is actually natural while he is reading always the new
> datasets:
> [root@clei26 ~]# arcstat.py 1
> time read miss miss% dmis dm% pmis pm% mmis mm% arcsz c
> 15:57:31 29 29 100 29 100 0 0 29 100 685M 31G
> 15:57:32 530 476 89 476 89 0 0 457 89 685M 31G
> 15:57:33 480 467 97 467 97 0 0 463 97 685M 31G
> 15:57:34 452 443 98 443 98 0 0 435 97 685M 31G
> 15:57:35 582 547 93 547 93 0 0 536 94 685M 31G
> 15:57:36 439 417 94 417 94 0 0 393 94 685M 31G
> 15:57:38 435 392 90 392 90 0 0 374 89 685M 31G
> 15:57:39 364 352 96 352 96 0 0 352 96 685M 31G
> 15:57:40 408 375 91 375 91 0 0 360 91 685M 31G
> 15:57:41 552 539 97 539 97 0 0 539 97 685M 31G
> 
> It looks like we cannot have in the same system performance and reliability
> :(
> Simply final conclusion is with the single disk+ssd even zfs doesnot help to
> speedup the glusterfs healing.
> I will stop here:)
> 
> 
> 
> 
> On Fri, Mar 3, 2017 at 3:35 PM, Juan Pablo < pablo.localh...@gmail.com >
> wrote:
> 
> 
> 
> cd to inside the pool path
> then dd if=/dev/zero of= test.tt bs=1M
> leave it runing 5/10 minutes.
> do ctrl+c paste result here.
> etc.
> 
> 2017-03-03 11:30 GMT-03:00 Arman Khalatyan < arm2...@gmail.com > :
> 
> 
> 
> No, I have one pool made of the one disk and ssd as a cache and log device.
> I have 3 Glusterfs bricks- separate 3 hosts:Volume type Replicate (Arbiter)=
> replica 2+1!
> That how much you can push into compute nodes(they have only 3 disk slots).
> 
> 
> On Fri, Mar 3, 2017 at 3:19 PM, Juan Pablo < pablo.localh...@gmail.com >
> wrote:
> 
> 
> 
> ok, you have 3 pools, zclei22, logs and cache, thats wrong. you should have 1
> pool, with zlog+cache if you are looking for performance.
> also, dont mix drives.
> whats the performance issue you are facing?
> 
> 
> regards,
> 
> 2017-03-03 11:00 GMT-03:00 Arman Khalatyan < arm2...@gmail.com > :
> 
> 
> 
> This is CentOS 7.3 ZoL version 0.6.5.9-1
> 
> 
> 
> 
> 
> [root@clei22 ~]# lsscsi
> 
> [2:0:0:0] disk ATA INTEL SSDSC2CW24 400i /dev/sda
> 
> [3:0:0:0] disk ATA HGST HUS724040AL AA70 /dev/sdb
> 
> [4:0:0:0] disk ATA WDC WD2002FYPS-0 1G01 /dev/sdc
> 
> 
> 
> 
> [root@clei22 ~]# pvs ;vgs;lvs
> 
> PV VG Fmt Attr PSize PFree
> 
> /dev/mapper/INTEL_SSDSC2CW240A3_CVCV306302RP240CGN vg_cache lvm2 a-- 223.57g
> 0
> 
> /dev/sdc2 centos_clei22 lvm2 a-- 1.82t 64.00m
> 
> VG #PV #LV #SN Attr VSize VFree
> 
> centos_clei22 1 3 0 wz--n- 1.82t 64.00m
> 
> vg_cache 1 2 0 wz--n- 223.57g 0
> 
> LV VG Attr LSize Pool Origin Data% Meta% Move Log Cpy%Sync Convert
> 
> home centos_clei22 -wi-ao 1.74t
> 
> root centos_clei22 -wi-ao 50.00g
> 
> swap centos_clei22 -wi-ao 31.44g
> 
> lv_cache vg_cache -wi-ao 213.57g
> 
> lv_slog vg_cache -wi-ao 10.00g
> 
> 
> 
> 
> [root@clei22 ~]# zpool status -v
> 
> pool: zclei22
> 
> state: ONLINE
> 
> scan: scrub repaired 0 in 0h0m with 0 errors on Tue Feb 28 14:16:07 2017
> 
> config:
> 
> 
> 
> 
> NAME STATE READ WRITE CKSUM
> 
> zclei22 ONLINE 0 0 0
> 
> HGST_HUS724040ALA640_PN2334PBJ4SV6T1 ONLINE 0 0 0
> 
> logs
> 
> lv_slog ONLINE 0 0 0
> 
> cache
> 
> lv_cache ONLINE 0 0 0
> 
> 
> 
> 
> errors: No known data errors
> 
> 
> ZFS config:
> 
> 
> 
> [root@clei22 ~]# zfs get all zclei22/01
> 
> NAME PROPERTY VALUE SOURCE
> 
> zclei22/01 type filesystem -
> 
> zclei22/01 creation Tue Feb 28 14:06 2017 -
> 
> zclei22/01 used 389G -
> 
> zclei22/01 available 3.13T -
> 
> zclei22/01 referenced 389G -
> 
> zclei22/01 compressratio 1.01x -
> 
> zclei22/01 mounted yes -
> 
> zclei22/01 quota none default
> 
> zclei22/01 reservation none default
> 
> zclei22/01 recordsize 128K local
> 
> zclei22/01 mountpoint /zclei22/01 default
> 
> zclei22/01 sharenfs off default
> 
> zclei22/01 checksum on default
> 
> zclei22/01 compression off local
> 
> zclei22/01 atime on default
> 
> zclei22/01 devices on default
> 
> zclei22/01 exec on default
> 
> zclei22/01 setuid on default
> 
> zclei22/01 readonly off default
> 
> zclei22/01 zoned off default
> 
> zclei22/01 snapdir hidden default
> 
> zclei22/01 aclinherit restricted default
> 
> zclei22/01 canmount on default
> 
> zclei22/01 xattr sa local
> 
> zclei22/01 copies 1 default
> 
> zclei22/01 version 5 -
> 
> zclei22/01 utf8only off -
> 
> zclei22/01 normalization none -
> 
> zclei22/01

Re: [ovirt-users] [ANN] oVirt 4.1.1 First Release Candidate

[Christophe TREFOIS]

Hi,

Is 4.1.0 still recommneded an upgrade from 4.0.6 in production or should we 
wait for 4.1.1 to comee out?

100+ critical bugs fixed sounds good but doesnt really encourage upgrading to 
4.1.0

thoughts?

Christophe

On 3 Mar 2017, at 14:48, Sandro Bonazzola 
mailto:sbona...@redhat.com>> wrote:


The oVirt Project is pleased to announce the availability of the First
Release Candidate of oVirt 4.1.1 for testing, as of March 3rd, 2017

This is pre-release software. Please take a look at our community page[1]
to know how to ask questions and interact with developers and users.
All issues or bugs should be reported via oVirt Bugzilla[2].
This pre-release should not to be used in production.

This update is the first release candidate of the first in a series of
stabilization updates to the 4.1 series.
4.1.1 brings 26 enhancements and more than 350 bugfixes,
including more than 130 high or urgent
severity fixes, on top of oVirt 4.1 series

This release is available now for:
* Fedora 24 (tech preview)
* Red Hat Enterprise Linux 7.3 or later
* CentOS Linux (or similar) 7.3 or later

This release supports Hypervisor Hosts running:
* Red Hat Enterprise Linux 7.3 or later
* CentOS Linux (or similar) 7.3 or later
* Fedora 24 (tech preview)

See the release notes draft [3] for installation / upgrade instructions and
a list of new features and bugs fixed.

Notes:
- oVirt Live has been already built [4]
- oVirt Node and Appliance has not been built for this release due to build 
issues we're still investigating.

Additional Resources:
* Read more about the oVirt 4.1.1 release 
highlights:http://www.ovirt.org/release/4.1.1/
* Get more oVirt Project updates on Twitter: https://twitter.com/ovirt
* Check out the latest project news on the oVirt blog:http://www.ovirt.org/blog/

[1] https://www.ovirt.org/community/
[2] https://bugzilla.redhat.com/enter_bug.cgi?classification=oVirt
[3] http://www.ovirt.org/release/4.1.1/
[4] http://resources.ovirt.org/pub/ovirt-4.1-pre/iso/



--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VMs imported from libvirt have no cdrom device

[Chris Boot]

On 05/03/2017 12:28, Arik Hadas wrote:
> On Sun, Mar 5, 2017 at 1:17 PM, Chris Boot  > wrote:
> 
> Hi,
> 
> I've imported a number of VMs that I previously was running under a
> self-hosted libvirt configuration. Most of the VMs at the source did not
> have a cdrom device (but some did) because I just added one as I
> needed to.
> 
> Now that the VMs have been imported into oVirt, none of them have a
> cdrom device. Even booting with the "Attach CD" option doesn't create a
> cdrom device. I can't see any way to get oVirt to re-create the missing
> device.
> 
> Is there a way for me to add these missing devices to my VMs?
> 
> 
> Unfortunately there is no supported way of doing that. In oVirt, we add
> a cd-rom device for every VM during its creation and don't enable to add
> or remove a cd-rom. If no cd-rom device is added by default during
> import from libvirt then that's a bug, could you please file a bug on
> that (https://bugzilla.redhat.com) ?

Hi Arik,

I've raised it as: https://bugzilla.redhat.com/show_bug.cgi?id=1429246

> However, you can resolve it in a hacky way by modifying the database
> directly:
> 
> insert into vm_device (device_id, vm_id, type, device, is_managed,
> is_plugged, is_readonly, address) values (uuid_generate_v1(), (select
> vm_guid from vm_static where vm_name='your-vm-name'), 'disk', 'cdrom',
> 't', 't', 't', '');

Thanks, that did the trick!

Cheers,
Chris

-- 
Chris Boot
bo...@bootc.net
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Question about injecting ISO images workflow and network configuration

[Elad Ben Aharon]

Hi,

You're raising a very interesting issue here.

- Is the best way to do it is to create a route between the the two subnets?
You do have to configure routing between the engine and the server where
the ISO domain resides.

PS : For iSCSI ISO domain, I don't know how it will be done, I didn't try
it.
iSCSI ISO domain combination doesn't exist in RHV by design.

- Is it safe to merge the management network with the storage network?
Depends on your needs, the best practice would be to separate.




On Sun, Mar 5, 2017 at 1:13 PM, wodel youchi  wrote:

> Hi,
>
> May be it's a silly question :-) , but how are gays configuring the
> storage network?
>
> Let me explain, if the management network and the storage network are not
> on the same subnet, if you wish to upload and ISO image on an NFS storage
> domain, you have to have a route between the two subnets, because the VM
> engine will try to mount the ISO domain locally to inject the file.
>
> PS : For iSCSI ISO domain, I don't know how it will be done, I didn't try
> it.
>
> My questions :
> - why not use the SPM server for that?
> - Is it safe to merge the management network with the storage network?
> - Is the best way to do it is to create a route between the the two
> subnets?
>
> Thanks in advance.
> Regards.
>
>
> 
>  Garanti
> sans virus. www.avast.com
> 
> <#m_487146233038329314_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt Hosted Engine Setup fails

[Artyom Lukianov]

I found this one under the vdsm log:
libvirtError: internal error: process exited while connecting to monitor:
Could not access KVM kernel module: Permission denied
failed to initialize KVM: Permission denied
Thread-70::INFO::2017-03-05
16:00:04,325::vm::1330::virt.vm::(setDownStatus)
vmId=`ed786811-0321-431e-be4b-2d03764c1b02`::Changed state to Down:
internal error: process exited while connecting to monitor: Could not
access KVM kernel module: Permission denied
failed to initialize KVM: Permission denied (code=1)
Thread-70::INFO::2017-03-05 16:00:04,325::guestagent::430::virt.vm::(stop)
vmId=`ed786811-0321-431e-be4b-2d03764c1b02`::Stopping connection
Thread-70::DEBUG::2017-03-05
16:00:04,325::vmchannels::238::vds::(unregister) Delete fileno 52 from
listener.
Thread-70::DEBUG::2017-03-05
16:00:04,325::vmchannels::66::vds::(_unregister_fd) Failed to unregister FD
from epoll (ENOENT): 52
Thread-70::DEBUG::2017-03-05
16:00:04,326::__init__::209::jsonrpc.Notification::(emit) Sending event
{"params": {"ed786811-0321-431e-be4b-2d03764c1b02": {"status": "Down",
"exitReason": 1, "exitMessage": "internal error: process exited while
connecting to monitor: Could not access KVM kernel module: Permission
denied\nfailed to initialize KVM: Permission denied", "exitCode": 1},
"notify_time": 4339924730}, "jsonrpc": "2.0", "method":
"|virt|VM_status|ed786811-0321-431e-be4b-2d03764c1b02"}

Can you check if you have KVM modules loaded? Also, check group owner for "
/dev/kvm".
Best Regards


On Sat, Mar 4, 2017 at 4:24 PM, Manuel Luis Aznar <
manuel.luis.az...@gmail.com> wrote:

> Hello there again,
>
> The error on the first email was using the repo ovirt-release41.rpm (
> http://resources.ovirt.org/pub/yum-repo/ovirt-release41.rpm), so as I
> were getting the same error again and again I am currently trying with
> ovirt-release41-snapshot.rpm (http://resources.ovirt.org/
> pub/yum-repo/ovirt-release41-snapshot.rpm) and the result is nearly the
> same.
>
> After creating the VM on the installation I got the same error with the
> command "systemctl status vdsmd":
>
> mar 04 14:10:19 host1.bajada.es vdsm[20443]: vdsm root ERROR failed to
> retrieve Hosted Engine HA info
>
> Traceback (most recent call last):
>File "/usr/lib/python2.7/site-packages/vdsm/host/api.py", line
> 231, in _getHaInfo
>   stats = instance.get_all_stats()
>File 
> "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/client/client.py",
> line 102, in get_all_stats
>   with broker.connection(self._retries, self._wait):
>File "/usr/lib64/python2.7/contextlib.py", line 17, in
> __enter__
>   return self.gen.next()
>File 
> "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/brokerlink.py",
> line 99, in connection
>   self.connect(retries, wait)
>File 
> "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/brokerlink.py",
> line 78, in connect
>   raise BrokerConnectionError(error_msg)
>  BrokerConnectionError: Failed to connect to broker, the number of
> errors has exceeded the limit (1)
>
> mar 04 14:10:34 host1.bajada.es vdsm[20443]: vdsm
> ovirt_hosted_engine_ha.lib.brokerlink.BrokerLink ERROR Failed to connect
> to broker, the number of errors has exceeded the limit (1)
>
> I have noticed that the ovirt-ha-agent and ovirt-ha-broker services was
> not running. I guess if this have something to do with the error in vsmd
> service log.
>
> But in this case the ovirt-hosted-engine-installation prints the vnc
> connection and I can connect to the engine VM.
>
> Thanks for all in advance
> Any help would be appreciated
> Manuel Luis Aznar
>
> 2017-03-03 21:48 GMT+00:00 Manuel Luis Aznar 
> :
>
>> Hello there,
>>
>> I am having some trouble when deploying an oVirt 4.1 hosted engine
>> installation.
>>
>> When I m just to end the installation and the hosted engine setup script
>> is about to start the Vm engine (appliance) it fails saying "The VM is not
>> powring up".
>>
>> If I double check the service vdsmd i get this error all the time:
>>
>> vdsm root ERROR failed to retrieve Hosted Engine HA info
>>  Traceback (most recent call last):
>>  File "/usr/lib/python2.7/site-packages/vdsm/host/api.py", line 231,
>> in _getHaInfo
>>  stats = instance.get_all_stats()
>>  File 
>> "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/client/client.py",
>> line 102, in get_all_stats
>>  with broker.connection(self._retries, self._wait):
>>  File "/usr/lib64/python2.7/contextlib.py", line 17, in __enter__
>>  return self.gen.next()
>>  File 
>> "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/brokerlink.py",
>> line 99, in connection
>>  self.connect(retries, wait)
>>  File 
>> "/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/brokerlink.py",
>> line 78, in connect
>>  raise BrokerConnectionError(error_msg)
>> BrokerConnectionEr

Re: [ovirt-users] oVirt Nested Virtualization

[Barak Korren]

oVirt system tests are indeed using nested virtualization, but it is
done to run oVirt nested on top of a stand-alone KVM host, and not to
run nested stuff on top of oVirt.

The steps Fred specified can be done manually on all hosts, but oVirt
offers a slightly more automated alternative. Simply install the
following vdsm hooks (available as packages) on all hosts:

vdsm-hook-macspoof
vdsm-hook-nestedvt

And then reboot the hosts (You will need to put hosts into maintenance
mode to do that).

Adding Sandro and Fabian to comment about how to persist this
configuration across node-ng updates.

On 5 March 2017 at 14:20, Fred Rolland  wrote:
> Our system tests are using nested virtualization. [1]
> Here the relevant part :
>
> Make sure that virtualization extension is enabled on the CPU, otherwise,
> you might need to enable it in the BIOS. Generally, if virtualization
> extension is disabled, dmesg log would contain a line similar to:
>
> kvm: disabled by BIOS
>
> Verify nested virtualization is enabled
>
> $ cat /sys/module/kvm_intel/parameters/nested
>
>  This command should print `Y` if nested virtualization is enabled,
> otherwise,
>  enable it the following way:
>
>  Edit `/etc/modprobe.d/kvm-intel.conf` and add the following line:
>
> options kvm-intel nested=y
>
> [1]
> http://ovirt-system-tests.readthedocs.io/en/latest/docs/general/installation.html
>
> On Sat, Mar 4, 2017 at 3:46 PM, Luca 'remix_tj' Lorenzetto
>  wrote:
>>
>> Hello,
>>
>> we're installing a small ovirt cluster for hosting some test
>> environments at work. We're interested in testing VM running
>> hypervisors (i.e ovirt itself or a small openstack deployment).
>>
>> Is there any documentation showing how to enable nested virtualization in
>> ovirt?
>>
>>  I've seen that while adding an host to the cluster there is the
>> opportunity to flag "Nested Virtualization" option, but i didn't
>> understand if other packages and configs are required.
>>
>> Our environment is running latest ovirt 4.1 installed with ovirt-node-ng.
>>
>> Luca
>>
>> --
>> "E' assurdo impiegare gli uomini di intelligenza eccellente per fare
>> calcoli che potrebbero essere affidati a chiunque se si usassero delle
>> macchine"
>> Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)
>>
>> "Internet è la più grande biblioteca del mondo.
>> Ma il problema è che i libri sono tutti sparsi sul pavimento"
>> John Allen Paulos, Matematico (1945-vivente)
>>
>> Luca 'remix_tj' Lorenzetto, http://www.remixtj.net ,
>> 
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Barak Korren
bkor...@redhat.com
RHCE, RHCi, RHV-DevOps Team
https://ifireball.wordpress.com/
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] best way to remove SAN lun

[Nir Soffer]

On Sun, Mar 5, 2017 at 2:40 PM, Pavel Gashev  wrote:
> Please also consider a case when a single iSCSI target has several LUNs and 
> you remove one of them.
> In this case you should not logout.

Right. ovirt manages connections to storage. When you remove the last
usage of a connection, we should disconnect from the target.

If this is not the case, this is ovirt-engine bug.

>
> -Original Message-
> From:  on behalf of Nelson Lameiras 
> 
> Date: Friday, 3 March 2017 at 20:55
> To: Nir Soffer 
> Cc: users 
> Subject: Re: [ovirt-users] best way to remove SAN lun
>
> Hello Nir,
>
> I think I was not clear in my explanations, let me try again :
>
> we have a oVirt 4.0.5.5 cluster with multiple hosts (centos 7.2).
> In this cluster, we added a SAN volume (iscsi) a few months ago directly in 
> GUI
> Later we had to remove a DATA volume (SAN iscsi). Below the steps we have 
> taken :
>
> 1- we migrated all disks outside the volume (oVirt)
> 2- we put volume on maintenance (oVirt)
> 3- we detach volume (oVirt)
> 4- we removed/destroyed volume (oVirt)
>
> In SAN :
> 5- we put it offline on SAN
> 6- we delete it from SAN
>
> We thought this would be enough, but later we has a serious incident when log 
> partition went full (partially our fault) :
> /var/log/messages was continuously logging that it was still trying to reach 
> the SAN volumes (we have since taken care of the issue of log space issue => 
> more aggressive logrotate, etc)
>
> The real solution was to add two more steps, using shell in ALL hosts :
> 4a - logout from SAN : iscsiadm -m node --logout -T iqn.
> 4b - remove iscsi targets : rm -fr /var/lib/iscsi/nodes/iqn.X
>
> This effectively solved our problem, but was fastidious since we had to do it 
> manually in all hosts (imagine if we had hundreds of hosts...)
>
> So my question was : shouldn't it be oVirt job to system "logout" and "remove 
> iscsi targets" automatically when a volume is removed from oVirt ? maybe not, 
> and I'm missing something?
>
> cordialement, regards,
>
> Nelson LAMEIRAS
> Ingénieur Systèmes et Réseaux / Systems and Networks engineer
> Tel: +33 5 32 09 09 70
> nelson.lamei...@lyra-network.com
>
> www.lyra-network.com | www.payzen.eu
>
>
>
>
>
> Lyra Network, 109 rue de l'innovation, 31670 Labège, FRANCE
>
> - Original Message -
> From: "Nir Soffer" 
> To: "Nelson Lameiras" 
> Cc: "Gianluca Cecchi" , "Adam Litke" 
> , "users" 
> Sent: Wednesday, February 22, 2017 8:27:26 AM
> Subject: Re: [ovirt-users] best way to remove SAN lun
>
> On Wed, Feb 22, 2017 at 9:03 AM, Nelson Lameiras
>  wrote:
>> Hello,
>>
>> Not sure it is the same issue, but we have had a "major" issue recently in 
>> our production system when removing a ISCSI volume from oVirt, and then 
>> removing it from SAN.
>
> What version? OS version?
>
> The order must be:
>
> 1. remove the LUN from storage domain
> will be available in next 4.1 release. in older versions you have
> to remove the storage domain
>
> 2. unzone the LUN on the server
>
> 3. remove the multipath devices and the paths on the nodes
>
>> The issue being that each host was still trying to access regularly to the 
>> SAN volume in spite of not being completely removed from oVirt.
>
> What do you mean by "not being completely removed"?
>
> Who was accessing the volume?
>
>> This led to an massive increase of error logs, which filled completely 
>> /var/log partition,
>
> Which log was full with errors?
>
>> which snowballed into crashing vdsm and other nasty consequences.
>
> You should have big enough /var/log to avoid such issues.
>
>>
>> Anyway, the solution was to manually logout from SAN (in each host) with 
>> iscsiadm and manually remove iscsi targets (again in each host). It was not 
>> difficult once the problem was found because currently we only have 3 hosts 
>> in this cluster, but I'm wondering what would happen if we had hundreds of 
>> hosts ?
>>
>> Maybe I'm being naive but shouldn't this be "oVirt job" ? Is there a RFE 
>> still waiting to be included on this subject or should I write one ?
>
> We have RFE for this here:
> https://bugzilla.redhat.com/1310330
>
> But you must understand that ovirt does not control your storage server,
> you are responsible to add devices on the storage server, and remove
> them. We are only consuming the devices.
>
> Even we we provide a way to remove devices on all hosts, you will have
> to remove the device on the storage server before removing it from
> hosts. If not, ovirt will find the removed devices again in the next
> scsi rescan,
> and we do lot of these to support automatic discovery of new devices
> or resized devices.
>
> Nir
>
>>
>> cordialement, regards,
>>
>>
>> Nelson LAMEIRAS
>> Ingénieur Systèmes et Réseaux / Systems and Networks engineer
>> Tel: +33 5 32 09 09 70
>> nelson.lamei...@lyra-network.com
>>
>> www.lyra-network.com | www.payzen.eu
>>
>>
>>
>>
>>
>> Lyra Network, 109 rue de l'innovation, 31670 Labège, FRANCE
>>
>> - Origin

Re: [ovirt-users] best way to remove SAN lun

[Pavel Gashev]

Please also consider a case when a single iSCSI target has several LUNs and you 
remove one of them.
In this case you should not logout.

-Original Message-
From:  on behalf of Nelson Lameiras 

Date: Friday, 3 March 2017 at 20:55
To: Nir Soffer 
Cc: users 
Subject: Re: [ovirt-users] best way to remove SAN lun

Hello Nir,

I think I was not clear in my explanations, let me try again :

we have a oVirt 4.0.5.5 cluster with multiple hosts (centos 7.2).
In this cluster, we added a SAN volume (iscsi) a few months ago directly in GUI
Later we had to remove a DATA volume (SAN iscsi). Below the steps we have taken 
:

1- we migrated all disks outside the volume (oVirt)
2- we put volume on maintenance (oVirt)
3- we detach volume (oVirt)
4- we removed/destroyed volume (oVirt)

In SAN :
5- we put it offline on SAN
6- we delete it from SAN

We thought this would be enough, but later we has a serious incident when log 
partition went full (partially our fault) :
/var/log/messages was continuously logging that it was still trying to reach 
the SAN volumes (we have since taken care of the issue of log space issue => 
more aggressive logrotate, etc)

The real solution was to add two more steps, using shell in ALL hosts :
4a - logout from SAN : iscsiadm -m node --logout -T iqn.
4b - remove iscsi targets : rm -fr /var/lib/iscsi/nodes/iqn.X

This effectively solved our problem, but was fastidious since we had to do it 
manually in all hosts (imagine if we had hundreds of hosts...)

So my question was : shouldn't it be oVirt job to system "logout" and "remove 
iscsi targets" automatically when a volume is removed from oVirt ? maybe not, 
and I'm missing something?

cordialement, regards, 

Nelson LAMEIRAS 
Ingénieur Systèmes et Réseaux / Systems and Networks engineer 
Tel: +33 5 32 09 09 70 
nelson.lamei...@lyra-network.com 

www.lyra-network.com | www.payzen.eu 





Lyra Network, 109 rue de l'innovation, 31670 Labège, FRANCE

- Original Message -
From: "Nir Soffer" 
To: "Nelson Lameiras" 
Cc: "Gianluca Cecchi" , "Adam Litke" 
, "users" 
Sent: Wednesday, February 22, 2017 8:27:26 AM
Subject: Re: [ovirt-users] best way to remove SAN lun

On Wed, Feb 22, 2017 at 9:03 AM, Nelson Lameiras
 wrote:
> Hello,
>
> Not sure it is the same issue, but we have had a "major" issue recently in 
> our production system when removing a ISCSI volume from oVirt, and then 
> removing it from SAN.

What version? OS version?

The order must be:

1. remove the LUN from storage domain
will be available in next 4.1 release. in older versions you have
to remove the storage domain

2. unzone the LUN on the server

3. remove the multipath devices and the paths on the nodes

> The issue being that each host was still trying to access regularly to the 
> SAN volume in spite of not being completely removed from oVirt.

What do you mean by "not being completely removed"?

Who was accessing the volume?

> This led to an massive increase of error logs, which filled completely 
> /var/log partition,

Which log was full with errors?

> which snowballed into crashing vdsm and other nasty consequences.

You should have big enough /var/log to avoid such issues.

>
> Anyway, the solution was to manually logout from SAN (in each host) with 
> iscsiadm and manually remove iscsi targets (again in each host). It was not 
> difficult once the problem was found because currently we only have 3 hosts 
> in this cluster, but I'm wondering what would happen if we had hundreds of 
> hosts ?
>
> Maybe I'm being naive but shouldn't this be "oVirt job" ? Is there a RFE 
> still waiting to be included on this subject or should I write one ?

We have RFE for this here:
https://bugzilla.redhat.com/1310330

But you must understand that ovirt does not control your storage server,
you are responsible to add devices on the storage server, and remove
them. We are only consuming the devices.

Even we we provide a way to remove devices on all hosts, you will have
to remove the device on the storage server before removing it from
hosts. If not, ovirt will find the removed devices again in the next
scsi rescan,
and we do lot of these to support automatic discovery of new devices
or resized devices.

Nir

>
> cordialement, regards,
>
>
> Nelson LAMEIRAS
> Ingénieur Systèmes et Réseaux / Systems and Networks engineer
> Tel: +33 5 32 09 09 70
> nelson.lamei...@lyra-network.com
>
> www.lyra-network.com | www.payzen.eu
>
>
>
>
>
> Lyra Network, 109 rue de l'innovation, 31670 Labège, FRANCE
>
> - Original Message -
> From: "Nir Soffer" 
> To: "Gianluca Cecchi" , "Adam Litke" 
> 
> Cc: "users" 
> Sent: Tuesday, February 21, 2017 6:32:18 PM
> Subject: Re: [ovirt-users] best way to remove SAN lun
>
> On Tue, Feb 21, 2017 at 7:25 PM, Gianluca Cecchi
>  wrote:
>> On Tue, Feb 21, 2017 at 6:10 PM, Nir Soffer  wrote:
>>>
>>> This is caused by active lvs on the remove storage domains that were not
>>> deactivated during the removal. Th

Re: [ovirt-users] VMs imported from libvirt have no cdrom device

[Arik Hadas]

On Sun, Mar 5, 2017 at 1:17 PM, Chris Boot  wrote:

> Hi,
>
> I've imported a number of VMs that I previously was running under a
> self-hosted libvirt configuration. Most of the VMs at the source did not
> have a cdrom device (but some did) because I just added one as I needed to.
>
> Now that the VMs have been imported into oVirt, none of them have a
> cdrom device. Even booting with the "Attach CD" option doesn't create a
> cdrom device. I can't see any way to get oVirt to re-create the missing
> device.
>
> Is there a way for me to add these missing devices to my VMs?
>

Unfortunately there is no supported way of doing that. In oVirt, we add a
cd-rom device for every VM during its creation and don't enable to add or
remove a cd-rom. If no cd-rom device is added by default during import from
libvirt then that's a bug, could you please file a bug on that (
https://bugzilla.redhat.com) ?

However, you can resolve it in a hacky way by modifying the database
directly:

insert into vm_device (device_id, vm_id, type, device, is_managed,
is_plugged, is_readonly, address) values (uuid_generate_v1(), (select
vm_guid from vm_static where vm_name='your-vm-name'), 'disk', 'cdrom', 't',
't', 't', '');


>
> I'm running oVirt 4.1 on CentOS 7.3.1611 with a hosted engine setup. VMs
> were migrated from a Debian Stretch machine running libvirt 3.0.0 with
> qemu 2.8.0.
>
> Thanks,
> Chris
>
> --
> Chris Boot
> bo...@bootc.net
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt Nested Virtualization

[Fred Rolland]

Our system tests are using nested virtualization. [1]
Here the relevant part :

Make sure that virtualization extension is enabled on the CPU, otherwise,
you might need to enable it in the BIOS. Generally, if virtualization
extension is disabled, dmesg log would contain a line similar to:

kvm: disabled by BIOS

Verify nested virtualization is enabled

$ cat /sys/module/kvm_intel/parameters/nested

 This command should print `Y` if nested virtualization is enabled,
otherwise,
 enable it the following way:

 Edit `/etc/modprobe.d/kvm-intel.conf` and add the following line:

options kvm-intel nested=y

[1]
http://ovirt-system-tests.readthedocs.io/en/latest/docs/general/installation.html

On Sat, Mar 4, 2017 at 3:46 PM, Luca 'remix_tj' Lorenzetto <
lorenzetto.l...@gmail.com> wrote:

> Hello,
>
> we're installing a small ovirt cluster for hosting some test
> environments at work. We're interested in testing VM running
> hypervisors (i.e ovirt itself or a small openstack deployment).
>
> Is there any documentation showing how to enable nested virtualization in
> ovirt?
>
>  I've seen that while adding an host to the cluster there is the
> opportunity to flag "Nested Virtualization" option, but i didn't
> understand if other packages and configs are required.
>
> Our environment is running latest ovirt 4.1 installed with ovirt-node-ng.
>
> Luca
>
> --
> "E' assurdo impiegare gli uomini di intelligenza eccellente per fare
> calcoli che potrebbero essere affidati a chiunque se si usassero delle
> macchine"
> Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)
>
> "Internet è la più grande biblioteca del mondo.
> Ma il problema è che i libri sono tutti sparsi sul pavimento"
> John Allen Paulos, Matematico (1945-vivente)
>
> Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , <
> lorenzetto.l...@gmail.com>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt importing VM

[Arik Hadas]

On Thu, Mar 2, 2017 at 10:48 AM, rightkicktech.gmail.com <
rightkickt...@gmail.com> wrote:

> Hi,
>
> I am using Virt4.1 on top glusterfs.
> I have defined two data domains, one for engine and one for vms. Also
> export and iso domains are on separate dedicated gluster volumes.
>
> When I try to import a VM from the export domain the VM is imported in the
> engine data domain. I would expect to be able to select on which data
> domain to import it. Am I missing sth?
>

Yeah, you missed the disks subtab at the import dialog :)
When pressing on one of the VMs to be imported subtabs appear and you can
configure the destination data domain per-disk (see the screenshot
attached).


>
> Thanx,
> Alex
>
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] VMs imported from libvirt have no cdrom device

[Chris Boot]

Hi,

I've imported a number of VMs that I previously was running under a
self-hosted libvirt configuration. Most of the VMs at the source did not
have a cdrom device (but some did) because I just added one as I needed to.

Now that the VMs have been imported into oVirt, none of them have a
cdrom device. Even booting with the "Attach CD" option doesn't create a
cdrom device. I can't see any way to get oVirt to re-create the missing
device.

Is there a way for me to add these missing devices to my VMs?

I'm running oVirt 4.1 on CentOS 7.3.1611 with a hosted engine setup. VMs
were migrated from a Debian Stretch machine running libvirt 3.0.0 with
qemu 2.8.0.

Thanks,
Chris

-- 
Chris Boot
bo...@bootc.net
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] rhevm listening on ipv6 ?

[Yevgeny Zaspitsky]

Šimon,

According to [1] oVirt should be accessible through IPv6 address.

>From my experience engine web&rest can be accessed by using an URL with an
IPv6 address in a browser.
Please notice that an IPv6 literal address (not a hostname that resolves to
an IPv6 address) in a valid URL should be wrapped by brackets, e.g. http://
[1::2]:80/path.

You can verify that the engine listens to an IPv6 by running the following
command from the Linux console of the host that runs ovirt-engine (while
ovirt-engine service runs):

netstat -lnp6 | grep 

where  is the port ovirt-engine should be listening to and be
accessed through (default is 80).

It seems to me like a problem on ManageIQ side.

Please let me know if you need further assistance.

Regards,
Yevgeny

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1310837

On Fri, Mar 3, 2017 at 4:55 PM, Šimon  wrote:

> Hello Yevgeny,
>
> I am working on ipv6-only support for ManageIQ. And I have noticed that
> providers QA has around listen on ipv4 only.
>
> Is it possible for rhevm web/api to listen on ipv6? What are the steps I
> need to do?
>
> Thanks a lot!
> ~š.
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Ovirt importing VM

[rightkicktech.gmail.com]

Hi,

I am using Virt4.1 on top glusterfs.
I have defined two data domains, one for engine and one for vms. Also export 
and iso domains are on separate dedicated gluster volumes.

When I try to import a VM from the export domain the VM is imported in the 
engine data domain. I would expect to be able to select on which data domain to 
import it. Am I missing sth?

Thanx,
Alex

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Question about injecting ISO images workflow and network configuration

[wodel youchi]

Hi,

May be it's a silly question :-) , but how are gays configuring the storage
network?

Let me explain, if the management network and the storage network are not
on the same subnet, if you wish to upload and ISO image on an NFS storage
domain, you have to have a route between the two subnets, because the VM
engine will try to mount the ISO domain locally to inject the file.

PS : For iSCSI ISO domain, I don't know how it will be done, I didn't try
it.

My questions :
- why not use the SPM server for that?
- Is it safe to merge the management network with the storage network?
- Is the best way to do it is to create a route between the the two subnets?

Thanks in advance.
Regards.


Garanti
sans virus. www.avast.com

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] test

[Doron Fe]

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] test- please ignore

[Doron Fediuck]

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Contributing on ovirt

[Maor Lipchuk]

Hi shubham,

Thank you for your interest in the Configuring the backup storage as
part of the GOSC project.
The idea is to have an alternative for backing up entities like VMs,
Templates and disks from a storage domain.

oVirt has many methods of backup entities such as DB backup, import
storage domain and use of export storage domain.
With this new capability to define a storage domain as a backup it
might help oVirt to achieve an easier alternative solution for the
users to backup entities

I suggest that for start, try to build a working oVirt development
setup with hosts and a few storage domains.

You can follow this wiki:
  
http://www.ovirt.org/develop/developer-guide/engine/engine-development-environment/

Once you have a working oVirt env we can go forward to the next step.
Please don't hesitate to ask if you have any questions.
You can use the #ovirt channel also.

Regards,
Maor

On Fri, Mar 3, 2017 at 11:27 AM, shubham dubey  wrote:
> Hello,
> I am interested in being part of ovirt for gsoc 2017.
> I have looked into ovirt project ideas and the project that I find most
> suitable is Configuring the backup storage in ovirt.
>
> Since the ovirt online docs have sufficient info for getting started for
> development so I don't have a questions about that but I want to clarify one
> doubt that did the previous year mentioned project on ovirt gsoc page are
> also available to work on?
> I will also appreciate any discussion about the project or question from
> mentor side.Even some guideline for start working is welcome.
>
> Thanks,
> Shubham
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users