[ovirt-users] Re: Discard After Delete: Why not the default?

2017-09-10 Thread Idan Shaby
Hi,

I agree with Yaniv. That's why when Discard After Delete was introduced in
oVirt 4.1, it was false by default.
However, since we realized that the demand for it to be true by default is
high, we changed it in oVirt 4.2 [1] so that it will be true by default.

If you got any further questions, please don't hesitate to ask.

Regards,
Idan

[1] *Bug 1456414*  - New
domain should default to true on Discard After Delete

On Sun, Sep 10, 2017 at 2:50 PM, Yaniv Kaul  wrote:

>
>
> On Sun, Sep 10, 2017 at 1:55 PM, Troels Arvin  wrote:
>
>> Hello,
>>
>> In the settings for a storage domain, in "Advanced Options", there is an
>> option "Discard After Delete". The default is that the checkbox is not
>> set.
>>
>> The documentation at
>> https://www.ovirt.org/develop/release-management/features/st
>> orage/discard-
>> after-delete/
>> 
>> and
>> https://www.ovirt.org/develop/release-management/features/storage/pass-
>> discard-from-guest-to-underlying-storage/
>> 
>> does not mention why the option is not the default. What drawback does
>> the "Dicard After Delete" feature have, since it's not the default?
>>
>
> Simply because in many cases it's not really needed. The whole purpose of
> discarding is to allow the underlying storage to reclaim unused space. But
> usually there's no need for it - you've deleted a disk, but you'd like to
> use this space for a different disk - there's no need to give it back to
> the storage (imagine file deletion in file system).
> It only makes sense when the underlying storage is thin provisioned and
> you need the space.
> Y.
>
>
>>
>> --
>> Regards,
>> Troels Arvin
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: Native Access on gluster storage domain

2017-09-10 Thread Sahina Bose
You could try to enable the config option for the 4.1 cluster level - using
engine-config tool from the Hosted Engine VM. This will require a restart
of the engine service and will enable gfapi access for all clusters at 4.1
level though - so try this option if this is acceptable.

On Wed, Aug 30, 2017 at 8:02 PM, Stefano Danzi  wrote:

> above the logs.
> PS cluster compatibility level is 4.1
>
> engine:
>
> 2017-08-30 16:26:07,928+02 INFO  
> [org.ovirt.engine.core.bll.UpdateClusterCommand]
> (default task-8) [56d090c5-1097-4641-b745-74af8397d945] Lock Acquired to
> object 'EngineLock:{exclusiveLocks='[]', sharedLocks='[]'}'
> 2017-08-30 16:26:07,951+02 WARN  
> [org.ovirt.engine.core.bll.UpdateClusterCommand]
> (default task-8) [56d090c5-1097-4641-b745-74af8397d945] Validation of
> action 'UpdateCluster' failed for user admin@internal. Reasons:
> VAR__TYPE__CLUSTER,VAR__ACTION__UPDATE,CLUSTER_CANNOT_
> UPDATE_SUPPORTED_FEATURES_WITH_LOWER_HOSTS
> 2017-08-30 16:26:07,952+02 INFO  
> [org.ovirt.engine.core.bll.UpdateClusterCommand]
> (default task-8) [56d090c5-1097-4641-b745-74af8397d945] Lock freed to
> object 'EngineLock:{exclusiveLocks='[]', sharedLocks='[]'}'
>
> vdsm:
>
> 2017-08-30 16:29:23,310+0200 INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer] RPC
> call GlusterHost.list succeeded in 0.15 seconds (__init__:539)
> 2017-08-30 16:29:23,419+0200 INFO  (jsonrpc/4) [jsonrpc.JsonRpcServer] RPC
> call Host.getAllVmStats succeeded in 0.01 seconds (__init__:539)
> 2017-08-30 16:29:23,424+0200 INFO  (jsonrpc/3) [jsonrpc.JsonRpcServer] RPC
> call Host.getAllVmIoTunePolicies succeeded in 0.00 seconds (__init__:539)
> 2017-08-30 16:29:23,814+0200 INFO  (jsonrpc/5) [jsonrpc.JsonRpcServer] RPC
> call GlusterHost.list succeeded in 0.15 seconds (__init__:539)
> 2017-08-30 16:29:24,011+0200 INFO  (Reactor thread) 
> [ProtocolDetector.AcceptorImpl]
> Accepted connection from ::1:51862 (protocoldetector:72)
> 2017-08-30 16:29:24,023+0200 INFO  (Reactor thread)
> [ProtocolDetector.Detector] Detected protocol stomp from ::1:51862
> (protocoldetector:127)
> 2017-08-30 16:29:24,024+0200 INFO  (Reactor thread) [Broker.StompAdapter]
> Processing CONNECT request (stompreactor:103)
> 2017-08-30 16:29:24,031+0200 INFO  (JsonRpc (StompReactor))
> [Broker.StompAdapter] Subscribe command received (stompreactor:130)
> 2017-08-30 16:29:24,287+0200 INFO  (jsonrpc/2) [jsonrpc.JsonRpcServer] RPC
> call Host.getHardwareInfo succeeded in 0.01 seconds (__init__:539)
> 2017-08-30 16:29:24,443+0200 INFO  (jsonrpc/7) [vdsm.api] START
> getSpmStatus(spUUID=u'0002-0002-0002-0002-01ef',
> options=None) from=:::192.168.1.55,46502, flow_id=1f664a9,
> task_id=c856903a-0af1-4c0c-8a44-7971fee7dffa (api:46)
> 2017-08-30 16:29:24,446+0200 INFO  (jsonrpc/7) [vdsm.api] FINISH
> getSpmStatus return={'spm_st': {'spmId': 1, 'spmStatus': 'SPM', 'spmLver':
> 1430L}} from=:::192.168.1.55,46502, flow_id=1f664a9,
> task_id=c856903a-0af1-4c0c-8a44-7971fee7dffa (api:52)
> 2017-08-30 16:29:24,447+0200 INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer] RPC
> call StoragePool.getSpmStatus succeeded in 0.00 seconds (__init__:539)
> 2017-08-30 16:29:24,460+0200 INFO  (jsonrpc/6) [jsonrpc.JsonRpcServer] RPC
> call GlusterHost.list succeeded in 0.16 seconds (__init__:539)
> 2017-08-30 16:29:24,467+0200 INFO  (jsonrpc/1) [vdsm.api] START
> getStoragePoolInfo(spUUID=u'0002-0002-0002-0002-01ef',
> options=None) from=:::192.168.1.55,46506, flow_id=1f664a9,
> task_id=029ec55e-9c47-4a20-be44-8c80fd1fd5ac (api:46)
>
>
> Il 30/08/2017 16:06, Shani Leviim ha scritto:
>
> Hi Stefano,
> Can you please attach your engine and vdsm logs?
>
>
> *Regards, *
>
> *Shani Leviim *
>
> On Wed, Aug 30, 2017 at 12:46 PM, Stefano Danzi  wrote:
>
>> Hello,
>> I have a test environment with a sigle host and self hosted engine
>> running oVirt Engine: 4.1.5.2-1.el7.centos
>>
>> I what to try the option "Native Access on gluster storage domain" but I
>> get an error because I have to put the
>> host in maintenance mode. I can't do that because I have a single host so
>> the hosted engine can't be migrated.
>>
>> There are a way to change this option but apply it at next reboot?
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


Re: [ovirt-users] Mailing-Lists upgrade

2017-09-10 Thread Duck
Quack,

First, reminder, it starts in one hour.

On 09/07/2017 02:21 PM, Karli Sjöberg wrote:

> Stupid question perhaps but, have I understood it correctly that all of
> us are going to have to create new accounts for the new mail-list
> system, if we don´t wish to log in using Fedora, GitHub or Google? Or
> are the existing local accounts going to be migrated as well?

There is no obligation to create an account. Your subscriptions will
continue working as before. You can also subscribe to new MLs without an
account. Nevertheless to unsubscribe or change your settings, as there
is no more a per-list email+password, you will need to create one.

As for local accounts, they cannot be migrated. Accounts are global
across the lists now, which makes settings practical for many things,
but you previously had subscribed with different passwords and
potentially different emails, so I guess it would be too complicated and
Mailman developers did not consider it.

Nevertheless you may recreate it using the "Sign-Up" link, and you will
receive a validation link by mail, so you do not have to rely on
"social" accounts. You can link other email addresses using the same
method in your account settings.

Hope that helps.

\_o<



signature.asc
Description: OpenPGP digital signature
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Adding host for the first time - Power Management?

2017-09-10 Thread Colin Coe
If you log in to the blade enclosure OA (onboard administrator) via the web
interface:
- Expand Enclosure Information
- Expand Device Bays
- Expand the required server
- Click on iLO
- Click Web Administration link (a new browser window will appear)
- Expand Administration
- Select User Administration

At this point you should be able to add, remove, edit users including
resetting passwords and defining permissions.





On Sun, Sep 10, 2017 at 1:46 PM, Ling Ho  wrote:

> Hi Mark,
>
> I don't have experience with Gen 9 blade, but it might be the same as Gen
> 9 DL3xx servers.
>
> If you can log on to the host, you can run ipmitool to find out which user
> is set up.
>
> You will need ipmitool and OpenIPMI packages installed.
>
> then
>
> systemctl start ipmi
> or
> service ipmi start
>
> ipmitool user list 2
>
> Of course you can't retrieve the password, but you can check your password
> using this command:
>
> ipmitool user test  
>
> or reset the password
>
> ipmitool user set password  
>
> You can also use ipmitool to set the ip address of ILO if you do not wish
> to reboot the node and get to the ILO interface via console.
>
> ...
> ling
>
>
>
>
> On 9/8/17 3:38 AM, Mark Steele wrote:
>
> Hello,
>
> We have an existing 4 Host Ovirt 3.5 installation. I am adding two more HP
> Gen9 Blades to the configuration. I looked at how the power management is
> setup up in Ovirt for the first four blades and it appears to be configured
> for ilo4 using a user account that I cannot find documentation for anywhere
> within my infrastructure.
>
> Questions:
>
> - is this user / password defined on the blade somewhere (perhaps like an
> IPMI setup)?
> - is anyone familiar with where I set this up on an HP Blade?
>
> I'd like to get this configured before it goes into production as I assume
> this requires access to the blade bios / setup to properly configure.
>
> Best regards,
>
> ***
> *Mark Steele*
> CIO / VP Technical Operations | TelVue Corporation
> TelVue - We Share Your Vision
> 16000 Horizon Way, Suite 100 | Mt. Laurel, NJ 08054
> 800.885.8886 x128 <(800)%20885-8886> | mste...@telvue.com | http://
> www.telvue.com
> twitter: http://twitter.com/telvue | facebook: https://www.
> facebook.com/telvue
>
>
> ___
> Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Ovirt help!

2017-09-10 Thread Alexander Witte
Hi Lev,

Thanks so much for your reply!

Actually you can disregard this message- I figured out my problem later last 
night:

The remote-viewer application was not working because I needed to export a 
DISPLAY variable on my system.  Once that was fixed I determined through 
—spice-debug that port 5900 was blocked on my host system.  Opened the port and 
SPICE is now working!

Anyway thanks again for your response!


Alex Witte


On Sep 10, 2017, at 4:30 AM, Lev Veyde 
mailto:lve...@redhat.com>> wrote:

Hi Alexander,

Yes, sure. What is the question?



On Sun, Sep 10, 2017 at 5:40 AM, Alexander Witte 
mailto:alexander.wi...@baicanada.com>> wrote:
Hello,

I am just curious- is this a valid email address I can use to ask a quick 
question regarding connecting to a VM via SPICE or VNC?

Thanks!

Alex Witte



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users




--

Lev Veyde

Software Engineer, RHCE | RHCVA | MCITP

Red Hat Israel



l...@redhat.com | 
lve...@redhat.com

[https://www.redhat.com/profiles/rh/themes/redhatdotcom/img/logo-red-hat-black.png]
TRIED. TESTED. TRUSTED.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] unsupported configuration: Unable to find security driver for model selinux

2017-09-10 Thread Yaniv Kaul
On Thu, Aug 31, 2017 at 4:25 PM, Charles Kozler 
wrote:

> Also, to add to this, I figured all nodes need to "equal" in terms of
> selinux now so I went on node 1 and set selinux to permissive, rebooted,
> and then vdsmd wouldnt start which would show the host as nonresponsive in
> engine UI. Upon inspection of the log it was because of the missing sebool
> module. So I ran 'vdsm-tool configure --force' and then vdsmd started fine.
> Once doing this the host came up in the web UI
>
> Tested migrating a VM to it and it worked with no issue
>
> Hope this helps someone else who lands in this situation, however, I'd
> like to know what the expected environment of ovirt is. It would be helpful
> to have some checks along the way for this condition if its a blocker for
> functions
>

We do not test without SELinux enabled, and we know of issues when it's
only half disabled.
Y.


>
> On Thu, Aug 31, 2017 at 9:09 AM, Charles Kozler 
> wrote:
>
>> Hello,
>>
>> I recently installed ovirt cluster on 3 nodes and saw that I could only
>> migrate one way
>>
>> Reviewing the logs I found this
>>
>> 2017-08-31 09:04:30,685-0400 ERROR (migsrc/1eca84bd) [virt.vm]
>> (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') unsupported configuration:
>> Unable to find security driver for model selinux (migration:287)
>> 2017-08-31 09:04:30,698-0400 ERROR (migsrc/1eca84bd) [virt.vm]
>> (vmId='1eca84bd-2796-469d-a071-6ba2b21d82f4') Failed to migrate
>> (migration:429)
>> Traceback (most recent call last):
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
>> 411, in run
>> self._startUnderlyingMigration(time.time())
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
>> 487, in _startUnderlyingMigration
>> self._perform_with_conv_schedule(duri, muri)
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
>> 563, in _perform_with_conv_schedule
>> self._perform_migration(duri, muri)
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line
>> 529, in _perform_migration
>> self._vm._dom.migrateToURI3(duri, params, flags)
>>   File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line
>> 69, in f
>> ret = attr(*args, **kwargs)
>>   File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py",
>> line 123, in wrapper
>> ret = f(*args, **kwargs)
>>   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 944, in
>> wrapper
>> return func(inst, *args, **kwargs)
>>   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1939, in
>> migrateToURI3
>> if ret == -1: raise libvirtError ('virDomainMigrateToURI3() failed',
>> dom=self)
>> libvirtError: unsupported configuration: Unable to find security driver
>> for model selinux
>>
>>
>> Which led me to this
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1013617
>>
>> I could migrate from node1 -> node 2 but not node2 -> node1, so obviously
>> I had something different with node 1. In this case, it was selinux
>>
>> On node 1 it is set to disabled but on node 2 it is set to permissive. I
>> am not sure how they got different but I wanted to update this list with
>> this finding
>>
>> Node 2 was setup directly via web UI in the engine with host -> new.
>> Perhaps I manually set node 1 to disabled
>>
>> Does ovirt / libvirt expect permissive? Or does it expect enforcing? Or
>> does it need to be both the same matching?
>>
>> thanks!
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Discard After Delete: Why not the default?

2017-09-10 Thread Yaniv Kaul
On Sun, Sep 10, 2017 at 1:55 PM, Troels Arvin  wrote:

> Hello,
>
> In the settings for a storage domain, in "Advanced Options", there is an
> option "Discard After Delete". The default is that the checkbox is not
> set.
>
> The documentation at
> https://www.ovirt.org/develop/release-management/features/storage/discard-
> after-delete/ and
> https://www.ovirt.org/develop/release-management/features/storage/pass-
> discard-from-guest-to-underlying-storage/
> does not mention why the option is not the default. What drawback does
> the "Dicard After Delete" feature have, since it's not the default?
>

Simply because in many cases it's not really needed. The whole purpose of
discarding is to allow the underlying storage to reclaim unused space. But
usually there's no need for it - you've deleted a disk, but you'd like to
use this space for a different disk - there's no need to give it back to
the storage (imagine file deletion in file system).
It only makes sense when the underlying storage is thin provisioned and you
need the space.
Y.


>
> --
> Regards,
> Troels Arvin
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Discard After Delete: Why not the default?

2017-09-10 Thread Troels Arvin
Hello,

In the settings for a storage domain, in "Advanced Options", there is an 
option "Discard After Delete". The default is that the checkbox is not 
set.

The documentation at
https://www.ovirt.org/develop/release-management/features/storage/discard-
after-delete/ and 
https://www.ovirt.org/develop/release-management/features/storage/pass-
discard-from-guest-to-underlying-storage/
does not mention why the option is not the default. What drawback does 
the "Dicard After Delete" feature have, since it's not the default?

-- 
Regards,
Troels Arvin

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Replacing engine SSL cert

2017-09-10 Thread Yedidyah Bar David
On Sat, Sep 9, 2017 at 9:48 PM, Chris Adams  wrote:
> I'm writing a script to install a new SSL key/cert pair (from Let's
> Encrypt) for the engine web UI on oVirt 4.1.  I'm looking at this, but
> it's a little confusing.
>
> https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL/

You might want to check recent RHV docs:

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.1/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl

ovirt.org is still not updated, sorry. Patches are welcome :-)

>
> It sounds like steps 1 and 3 are referring to the CA-supplied
> intermediate cert(s), not the actual issue cert for the server.  Is that
> right?

Correct.

>
> Does anything actually use the PCKS12 format file referred to in step 4?

Currently, AFAIK, no.

> I don't normally see that format from regular CAs; they usually provide
> cert+intermediate(s) in PEM format.

Indeed, that's why in above rhv docs we split it up to two procedures.

>
> With Apache 2.4, it is normal to just put the cert+intermediate(s) chain
> in one file and configure Apache with SSLCertificateFile.  You aren't
> supposed to put the CA-supplied cert in the SSLCACertificateFile like
> oVirt appears to do; that's intended to be used for validating client
> certs, not the intermediate(s) for the server cert.

Searching the net I also find:

https://stackoverflow.com/questions/1899983/difference-between-sslcacertificatefile-and-sslcertificatechainfile

Seems like this was changed in:

https://gerrit.ovirt.org/15837

But no idea why. Perhaps we wanted the option to allow authentication
by client certs? See e.g.:

http://machacekondra.blogspot.co.il/2016/02/client-certificate-authentication-with.html

If you think that's a problem, please open a bug. Thanks!

>
> It really just looks like the cert+intermediate(s) should go in
> /etc/pki/ovirt-engine/certs/apache.cer, the corresponding key put in
> /etc/pki/ovirt-engine/keys/apache.key.nopass, and then Apache needs to
> be restarted.  Since oVirt doesn't use the engine web UI cert for
> anything internally (right?),

Mostly right

> do any of the other steps on the above
> page matter?

For step 8, you can searching for 'site:bugzilla.redhat.com
ENGINE_HTTPS_PKI_TRUST_STORE'.
There were several bugs about this.

The log collector always _does_ use the https interface, even on local machine.

Best,
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Ovirt help!

2017-09-10 Thread Lev Veyde
Hi Alexander,

Yes, sure. What is the question?



On Sun, Sep 10, 2017 at 5:40 AM, Alexander Witte <
alexander.wi...@baicanada.com> wrote:

> Hello,
>
> I am just curious- is this a valid email address I can use to ask a quick
> question regarding connecting to a VM via SPICE or VNC?
>
> Thanks!
>
> Alex Witte
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 

Lev Veyde

Software Engineer, RHCE | RHCVA | MCITP

Red Hat Israel



l...@redhat.com | lve...@redhat.com

TRIED. TESTED. TRUSTED. 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Ovirt help!

2017-09-10 Thread Alexander Witte
Hello,

I am just curious- is this a valid email address I can use to ask a quick 
question regarding connecting to a VM via SPICE or VNC?

Thanks!

Alex Witte


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovirt high points

2017-09-10 Thread Yedidyah Bar David
On Thu, Sep 7, 2017 at 8:01 PM, Christopher Cox  wrote:
> On 09/07/2017 06:33 AM, david caughey wrote:
>>
>> Hi Folks,
>>
>> I'm giving a demo of our new 3 node oVirt deployment next week and am
>> looking for some high points that I can give to the Managers that will be a
>> sell point.
>
>
> Could be hard to sell.  It's not like VMware (all in all) is deficient
> functionality wise.
>
>> If you could help with the below questions I would really appreciate it:
>>
>> Who are the big users of oVirt??
>
>
> We use oVirt in production.  We have about 130 VMs on a 9 node cluster using
> Dell blades.  It houses both our test and production VMs.  We have a
> separate oVirt setup for development hosting probably about 20 VMs (maybe
> less), it's an 7 node cluster (but much lesser blades there).
>
> In both cases they are connected to Equalogic iSCSI SAN equipment with
> multiple tiers of storage.  Each production blade has 4 x 10gbit iSCSI
> (multi)paths to storage.  The production blade subsystem uses multiple
> 40Gbit links, for iSCSI storage and for LAN. Just 10Gbit links and 1Gbit
> paths on the development blades and subsystem.
>
> Both use a dedicated oVirt management host.
>
> The production(and test) blades run oVirt 3.6 and the dev blades are oVirt
> 3.5.
>
> About 2 years ago we migrated our production blades from oVirt 3.4 on older
> blades and older SAN equipment to oVirt 3.6 on new blades and new SAN
> storage.  We used oVirt's export domain to facilitate the move.
>
> We will be migrating off the development cluster and we are setting up a new
> cluster on the same DC as our production area which will be used to house
> both test and development.  Thus we are moving to just the one oVirt 3.6
> (we're adding 5 extra blades for that cluster).
>
> Btw, our VMs include multiple version of CentOS, Windows Server and Windows
> desktops (and even some docker nodes, but we're redoing all of that).  Our
> VMs include about 10 large PostgreSQL database servers, some MySQL, several
> Jboss servers, many web microservices (Springboot) servers and lost of
> application infrastructure servers.
>
>>
>> Why oVirt and not vMware??
>> (we are a big vMware house so free doesn't cover it)
>
>
> Uh free, and to be honest, that's the best reason to do this IMHO.
>
>>
>> What is the future for oVirt??
>
>
> Unknown.  But pretty sure Red Hat will want to keep RHEV around, which means
> oVirt probably will be here for quite some time.
>
>>
>> Why do you use oVirt??
>
>
> Free.
>
>>
>> Any links or ideas appreciated,
>
>
> oVirt is NOT VMware.  But if you do things "well" oVirt works quite well.
> Follow the list to see folks that didn't necessarily do things "well" (sad,
> but true).
>
> I inherited this oVirt... not ideal for blades because it's better to have
> lots of networks.  We just have two blade fabrics, one for SAN and one for
> the rest, and it would be nice to have ovirtmgmt and migration networks be
> isolated.  With that said, with our massively VLAN'd setup, it does work and
> has been very reliable.  For performance reasons, I recommend that you
> attempt to dedicate a host for SPM, or at least keep the number of VMs
> deployed there to a minimum.  There are tweaks in the setup to keep VMs off
> the SPM node (talking mainly if you have a massively combined network like I
> have currently).

Do you routinely have many storage operations going on (create/remove vm,
create/remove disk, take/remove a snapshot etc.)?

If not, do you still recommend a dedicated SPM host?

If yes, why?

See also:

https://www.ovirt.org/develop/release-management/features/storage/decommission-master-domain-and-spm/

It was panned to happen in 4.0, didn't happen yet. No idea about concrete
future plans.

>
> We've survived many bad events with regards to SAN and power, which is a
> tribute to oVirt's reliability.  However, you can shoot yourself in the foot
> very easily with oVirt... so just be careful.
>
> Is VMware better?  Yes.  Is it more flexible than oVirt?  Yes. Is it more
> reliable than oVirt? Yes.  In other words, if money is of no concern, VMware
> and VCenter.
>
> We will likely never do VMware here due to cost (noting, that the cost is in
> VCenter, and IMHO, it's not horrible, but I do not control the wallet here,
> and we tend to prefer FOSS here... and FOSS is my personal preference as
> well).
>
> Companies generally speaking just want something that works.  And oVirt does
> work.  But if money is of no concern and you need the friendliness of
> something VCenter like (noting that not everyone needs VCenter or RHEV-M or
> oVirt Manager), then VMware is still better.
>
> If you don't need something VCenter like, I can also so say that libvirt
> (KVM) and virt-manager is also reasonable, and we use that as well.  But we
> also have a (free) ESXi (because we have to, forced requirement).
>
> The ovirtmgmt web ui is gross IMHO.  It's a perfect example of an overweight
> UI where a simplified UI would have been cleaner,