[ovirt-users] Re: how to force engine certificate renewal

2022-06-06 Thread Patrick Hibbs 
I wouldn't force it. I tried that last week and spent the weekend
reinstalling the engine host. Due to the engine no longer being able to
install new / reinstall existing hosts or enroll host certificates
after doing so.

Might just be better to wait until engine-setup does it automatically.

-Patrick Hibbs

On Mon, 2022-06-06 at 07:26 +0100, Maton, Brett wrote:
> oVirt: 4.5.0.8-1.el8
> 
> Hi,
> 
>   I got a warning yesterday that the engine certificate is 'about' to
> expire, in 6 months
> >   Engine's certification is about to expire at 2022-12-10. Please
> > renew the engine's certification.
> > 
> 
>   I tried 'engine-setup --offline' but wasn't prompted to update the
> engine certificate.
> 
> Regards,
> Brett
> 
> On Thu, 26 May 2022 at 10:14, Gianluca Cecchi
>  wrote:
> > Hello,
> > I'm currently still on 4.4.x.
> > Suppose I have an engine certificate expiring on mid August and I
> > want to force renew it now using "engine-setup --offline" command.
> > How can I do it if possible?
> > How many days before expiration I get the message that it is
> > expiring soon with a proposal of renewing it when running "engine-
> > setup"?
> > 
> > Thanks,
> > Gianluca
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4BZ724AJQ3OWJRZLCSR2Y3PPCBKG7QNC/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PWETJKNUX4WXAWCAYSWVMY6QSV46GVZK/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFVV2L2C4GFLO5I5AKYBZN5QLA3ERBXD/

[ovirt-users] Re: how to force engine certificate renewal

2022-06-06 Thread Gianluca Cecchi 
On Mon, Jun 6, 2022 at 2:54 PM Maton, Brett 
wrote:

> Opened a bug report:  2093954 – Engine certificate alert, no option to
> update offered by engine-setup (redhat.com)
> 
>
>
A the beginning of last week I had to apply a certificate renewal on a RHV
4.4.7 environment.
It is the commercial product but I think pretty similar in behaviour to the
corresponding oVirt release. The engine certificate would have expired on
17th of August, so in between 2 and 3 months later.

The command "engine-setup --offline" automatically proposed to renew them.
It gave:
"
  --== PKI CONFIGURATION ==--

  One or more of the certificates should be renewed, because they
expire soon, or include an invalid expiry date, or they were created with
validity period longer than 398 days, or do not include the subjectAltName
extension, which can cause them to be rejected by recent browsers and up to
date hosts.
  See https://access.redhat.com/solutions/1572983 for more details.
  Renew certificates? (Yes, No) [No]: Yes
"
and then going ahead:

"
. . .
[ INFO  ] Upgrading CA
[ INFO  ] Renewing engine certificate
[ INFO  ] Renewing jboss certificate
[ INFO  ] Renewing websocket-proxy certificate
[ INFO  ] Renewing apache certificate
[ INFO  ] Renewing reports certificate
[ INFO  ] Updating OVN SSL configuration
[ INFO  ] Updating OVN timeout configuration
. . .
[ INFO  ] Restarting httpd
  Web access is enabled at:
  http://my_engine:80/ovirt-engine
  https://my_egine:443/ovirt-engine
. . .
  --== END OF SUMMARY ==--
"

But I don't know the exact number of days under which to get the prompt and
if this number is in any way configurable...
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/USQEBUUR3V7LCWDIJ5YRTSMLFHTLJZDF/

[ovirt-users] Re: how to force engine certificate renewal

2022-06-06 Thread Gianluca Cecchi 
On Mon, Jun 6, 2022 at 3:08 PM Maton, Brett 
wrote:

> Hi Gianluca,
>
>   My issue is I'm getting the alert, but 'engine-setup --offline' is not
> offering to update the certificates.
>   At the moment I'm hoping it's simply that engine is reporting that
> certificates need to be renewed before engine-setup is configured to offer
> the option to upgrade.
>
> Cheers,
> Brett
>
>
Yes, I understood it and I also subscribed to your bugzilla.
My post was to give a sample of an expiry offset sufficient to get the
prompt...
My suspicion is that the web admin portal has hardcoded a 6 months notice,
while the "engine-setup" command has a 3 months one.
It should be easy to verify for someone who knows the code (not me... ;-).

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2MC2HPIFCZMDU34D3FHAONG6FIKYLCJC/

[ovirt-users] Re: how to force engine certificate renewal

2022-06-06 Thread Maton, Brett 
Opened a bug report:  2093954 – Engine certificate alert, no option to
update offered by engine-setup (redhat.com)


On Mon, 6 Jun 2022 at 13:06, Patrick Hibbs  wrote:

> I wouldn't force it. I tried that last week and spent the weekend
> reinstalling the engine host. Due to the engine no longer being able to
> install new / reinstall existing hosts or enroll host certificates after
> doing so.
>
> Might just be better to wait until engine-setup does it automatically.
>
> -Patrick Hibbs
>
> On Mon, 2022-06-06 at 07:26 +0100, Maton, Brett wrote:
>
> oVirt: 4.5.0.8-1.el8
>
> Hi,
>
>   I got a warning yesterday that the engine certificate is 'about' to
> expire, in 6 months
>
>   Engine's certification is about to expire at 2022-12-10. Please renew
> the engine's certification.
>
>   I tried 'engine-setup --offline' but wasn't prompted to update the
> engine certificate.
>
> Regards,
> Brett
>
> On Thu, 26 May 2022 at 10:14, Gianluca Cecchi 
> wrote:
>
> Hello,
> I'm currently still on 4.4.x.
> Suppose I have an engine certificate expiring on mid August and I want to
> force renew it now using "engine-setup --offline" command.
> How can I do it if possible?
> How many days before expiration I get the message that it is expiring soon
> with a proposal of renewing it when running "engine-setup"?
>
> Thanks,
> Gianluca
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4BZ724AJQ3OWJRZLCSR2Y3PPCBKG7QNC/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PWETJKNUX4WXAWCAYSWVMY6QSV46GVZK/
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFVV2L2C4GFLO5I5AKYBZN5QLA3ERBXD/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/44JAJE7EJLYHPYI767D4GHB6WN45DE5F/

[ovirt-users] Re: how to force engine certificate renewal

2022-06-06 Thread Maton, Brett 
Hi Gianluca,

  My issue is I'm getting the alert, but 'engine-setup --offline' is not
offering to update the certificates.
  At the moment I'm hoping it's simply that engine is reporting that
certificates need to be renewed before engine-setup is configured to offer
the option to upgrade.

Cheers,
Brett

On Mon, 6 Jun 2022 at 14:05, Gianluca Cecchi 
wrote:

> On Mon, Jun 6, 2022 at 2:54 PM Maton, Brett 
> wrote:
>
>> Opened a bug report:  2093954 – Engine certificate alert, no option to
>> update offered by engine-setup (redhat.com)
>> 
>>
>>
> A the beginning of last week I had to apply a certificate renewal on a RHV
> 4.4.7 environment.
> It is the commercial product but I think pretty similar in behaviour to
> the corresponding oVirt release. The engine certificate would have expired
> on 17th of August, so in between 2 and 3 months later.
>
> The command "engine-setup --offline" automatically proposed to renew them.
> It gave:
> "
>   --== PKI CONFIGURATION ==--
>
>   One or more of the certificates should be renewed, because they
> expire soon, or include an invalid expiry date, or they were created with
> validity period longer than 398 days, or do not include the subjectAltName
> extension, which can cause them to be rejected by recent browsers and up to
> date hosts.
>   See https://access.redhat.com/solutions/1572983 for more
> details.
>   Renew certificates? (Yes, No) [No]: Yes
> "
> and then going ahead:
>
> "
> . . .
> [ INFO  ] Upgrading CA
> [ INFO  ] Renewing engine certificate
> [ INFO  ] Renewing jboss certificate
> [ INFO  ] Renewing websocket-proxy certificate
> [ INFO  ] Renewing apache certificate
> [ INFO  ] Renewing reports certificate
> [ INFO  ] Updating OVN SSL configuration
> [ INFO  ] Updating OVN timeout configuration
> . . .
> [ INFO  ] Restarting httpd
>   Web access is enabled at:
>   http://my_engine:80/ovirt-engine
>   https://my_egine:443/ovirt-engine
> . . .
>   --== END OF SUMMARY ==--
> "
>
> But I don't know the exact number of days under which to get the prompt
> and if this number is in any way configurable...
> Gianluca
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3RZ6K22L3M72MTR7RLFEKNKSUETKD2DC/

[ovirt-users] Hyperconverged Ovirt 4.3.10.4: Unresponsive Host

2022-06-06 Thread ralf 
Hi, 
I have a hyperconverged ovirt 4.3.10 installation. One host is unresponsive. 
This has happened in the past but most often resolved itself within a few 
minutes. This time it is a different beast. 
The host does not come back. Putting the host in maintenance is not possible 
because "Host is unresponsive but has running virtual machines". Putting the 
host into local maintenance on the local CLI does not help. Global maintenance 
does not have any effect either. The host has been rebooted several times both 
locally and via the web interface on the engine, which worked but did not 
resolve the issue. 
Logs:
/var/log/ovirt-engine/engine.log
2022-06-07 06:40:17,606+02 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-34) [26f286ba-58d0-44be-96e0-f874057fe603] EVENT_ID: 
GENERIC_ERROR_MESSAGE(14,001), Cannot switch Host to Maintenance mode.
Host still has running VMs on it and is in Non Responsive state.
2022-06-07 06:40:17,606+02 WARN  
[org.ovirt.engine.core.bll.MaintenanceNumberOfVdssCommand] (default task-34) 
[26f286ba-58d0-44be-96e0-f874057fe603] Validation of action 
'MaintenanceNumberOfVdss' failed for user admin@internal-authz. Reasons: 
VAR__TYPE__HOST,VAR__ACTION__MAINTENANCE,VDS_CANNOT_MAINTENANCE_VDS_IS_NOT_RESPONDING_WITH_VMS,$HostNotResponding
 ovirt3.os-s.de
2022-06-07 06:41:23,974+02 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engineScheduled-Thread-33) [] EVENT_ID: 
VDS_BROKER_COMMAND_FAILURE(10,802), VDSM ovirt3.os-s.de command Get Host 
Capabilities failed: Message timeout which can be caused by communication issues
2022-06-07 06:41:23,974+02 ERROR 
[org.ovirt.engine.core.vdsbroker.monitoring.HostMonitoring] 
(EE-ManagedThreadFactory-engineScheduled-Thread-33) [] Unable to 
RefreshCapabilities: VDSNetworkException: VDSGenericException: 
VDSNetworkException: Message timeout which can be caused by communication issues
2022-06-07 06:44:47,033+02 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engineScheduled-Thread-4) [] EVENT_ID: 
VDS_BROKER_COMMAND_FAILURE(10,802), VDSM ovirt3.os-s.de command Get Host 
Capabilities failed: Message timeout which can be caused by communication issues
2022-06-07 06:44:47,034+02 ERROR 
[org.ovirt.engine.core.vdsbroker.monitoring.HostMonitoring] 
(EE-ManagedThreadFactory-engineScheduled-Thread-4) [] Unable to 
RefreshCapabilities: VDSNetworkException: VDSGenericException: 
VDSNetworkException: Message timeout which can be caused by communication issues

vdsmd status:

Jun 06 08:51:09 ovirt3.os-s.de vdsm[3567]: WARN Worker blocked:  timeout=60, duration=120.00 at 0x7fe1646562d0> task#=15 at 
0x7fe165f47e50>, traceback:
   File: 
"/usr/lib64/python2.7/threading.py", line 785, in __bootstrap
 self.__bootstrap_inner()
   File: 
"/usr/lib64/python2.7/threading.py", line 812, in __bootstrap_inner
 self.run()
   File: 
"/usr/lib64/python2.7/threading.py", line 765, in run
 self.__target(*self.__args, 
**self.__kwargs)
   File: 
"/usr/lib/python2.7/site-packages/vdsm/common/concurrent.py", line 260, in run
 ret = func(*args, **kwargs)
   File: 
"/usr/lib/python2.7/site-packages/vdsm/executor.py", line 301, in _run
 self._execute_task()
   File: 
"/usr/lib/python2.7/site-packages/vdsm/executor.py", line 315, in _execute_task
 task()
   File: 
"/usr/lib/python2.7/site-packages/vdsm/executor.py", line 391, in __call__
 self._callable()
   File: 
"/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 262, in __call__
 self._handler(self._ctx, self._req)
   File: 
"/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 305, in 
_serveRequest
 response = 
self._handle_request(req, ctx)
   File: 
"/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 345, in 
_handle_request
 res = method(**params)
   File: 
"/usr/lib/python2.7/site-packages/vdsm/rpc/Bridge.py", line 194, in 
_dynamicMethod
 result = fn(*methodArgs)
   File: "", line 2, in

[ovirt-users] Re: looking for some ISV backup software which integrates the backup API

2022-06-06 Thread zhengrongzhaogogo 
Hi Nathanaël:

We have just tested Vinchin Backup & Recovery.

So far it's good for our oVirt VMs.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XNPAOME465GQ2372N6UVVZ5FAJCVM5FL/

[ovirt-users] Cannot access ovirt portal behind port-forwarding

2022-06-06 Thread ayman 
Hi,
I have installed a standalone ovirt VM on KVM , I made port-forwarding to the 
VM so when I use http://name:9998 it will forward to the VM on port 80,
the issue is that i get forwarded agian to the default name 
"http://name/ovirt-engine and I cannot access the portal.

is there away to resolve this issue or change this behavior ?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JCP63DOEB4KZOUOBIXVQ5GYTXZMVWRSB/

[ovirt-users] nec-xhci: Win7 guest no response after ejecting usb storage

2022-06-06 Thread lizhij...@fujitsu.com 
Hi folks,

It's observed that win7 guest will become no response if i eject usb storage 
"Eject MiniKing"




the last screen after i clicked "Eject MingKing":



After that, i have to reset the guest.

I wonder if it's a known bug, if not any idea to disable this "Eject" .


Thanks
Zhijian
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/A62GTZXJMBNIHUCDPROZZQZ232C33GUN/

[ovirt-users] Re: ClassNotFoundException after upgrade to 4.5

2022-06-06 Thread Martin Perina 
Hi,

have you followed the upgrade guide? Especially the part to upgrade engine
setup packages and then run engine-setup to upgrade the rest of engine?

https://www.ovirt.org/documentation/upgrade_guide/index.html#Updating_the_Red_Hat_Virtualization_Manager_4-4_local_db

If so, could you please provide output of following commands:

rpm -q ovirt-engine
rpm -q apache-sshd

Thanks,
Martin


On Sat, Jun 4, 2022 at 7:01 PM  wrote:

> Hi all,
> I tried to upgrade my ovirt engine from 4.3.10 to 4.5.0. After restore
> backup, everything seems ok. I can login to admin panel.
> But when I want to add new host, I get this exception:
>
> 2022-06-01 12:13:04,987-04 ERROR [org.jboss.as.ejb3.invocation] (default
> task-32) WFLYEJB0034: Jakarta Enterprise Beans Invocation failed on
> component Backend for method public abstract
> org.ovirt.engine.core.common.queries.QueryReturnValue
> org.ovirt.engine.core.common.interfaces.BackendLocal.runQuery(org.ovirt.engine.core.common.queries.QueryType,org.ovirt.engine.core.common.queries.QueryParametersBase):
> javax.ejb.EJBException: WFLYEJB0442: Unexpected Error
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:234)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.tx.CMTTxInterceptor.supports(CMTTxInterceptor.java:446)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:164)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:509)
> at org.jboss.weld.core@3.1.7.SP1
> //org.jboss.weld.module.ejb.AbstractEJBRequestScopeActivationInterceptor.aroundInvoke(AbstractEJBRequestScopeActivationInterceptor.java:81)
> at org.jboss.as.weld.common@24.0.1.Final
> //org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:89)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.component.invocationmetrics.WaitTimeInterceptor.processInvocation(WaitTimeInterceptor.java:47)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(SecurityContextInterceptor.java:100)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.deployment.processors.StartupAwaitInterceptor.processInvocation(StartupAwaitInterceptor.java:22)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:64)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:67)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ee@24.0.1.Final
> //org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.ContextClassLoaderInterceptor.processInvocation(ContextClassLoaderInterceptor.java:60)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.run(InterceptorContext.java:438)
> at org.wildfly.security.elytron-base@1.16.1.Final
> //org.wildfly.security.manager.WildFlySecurityManager.doChecked(WildFlySecurityManager.java:633)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.AccessCheckingInterceptor.processInvocation(AccessCheckingInterceptor.java:57)
>

[ovirt-users] Re: CPU_TYPE_UNSUPPORTED_IN_THIS_CLUSTER_VERSION

2022-06-06 Thread Pavel Mlčoch 
Perfect info. virsh says it is OpteronG3, so the last supported ovirt was
v4.2. My second host (currently in production) with Ryzen3 says EPIC, so it
can work, but without a cluster. Anybody know the reason why older CPUs
were removed from the supported hw database?
Is better solution add G3 profile into database or use older ovirt 4.2?

Regards,
PM.

ne 5. 6. 2022 v 4:03 odesílatel Frank Wall  napsal:

> On 2022-06-03 21:34, Pavel Mlčoch wrote:
> > Know anybody which CPU type can be used for Athlon5350 or how to solve
> > this error?
>
> You can check the supported CPU type by running the following command:
>
> virsh -r capabilities | grep model
>
>
> Regards
> - Frank
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HEUDSTHSZM4KBCEMYN22XLBWYIFPXE2U/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OKJFHIQJLYZV7NHM6DZWXYZG5XNQFPQM/

[ovirt-users] Re: how to force engine certificate renewal

2022-06-06 Thread Maton, Brett 
oVirt: 4.5.0.8-1.el8

Hi,

  I got a warning yesterday that the engine certificate is 'about' to
expire, in 6 months

>   Engine's certification is about to expire at 2022-12-10. Please renew
> the engine's certification.

  I tried 'engine-setup --offline' but wasn't prompted to update the engine
certificate.

Regards,
Brett

On Thu, 26 May 2022 at 10:14, Gianluca Cecchi 
wrote:

> Hello,
> I'm currently still on 4.4.x.
> Suppose I have an engine certificate expiring on mid August and I want to
> force renew it now using "engine-setup --offline" command.
> How can I do it if possible?
> How many days before expiration I get the message that it is expiring soon
> with a proposal of renewing it when running "engine-setup"?
>
> Thanks,
> Gianluca
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4BZ724AJQ3OWJRZLCSR2Y3PPCBKG7QNC/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PWETJKNUX4WXAWCAYSWVMY6QSV46GVZK/

[ovirt-users] Re: Engine Certificate renewal caused "Error while executing action InstallVds: Internal Engine Error"

2022-06-06 Thread Milan Zamazal 
Patrick Hibbs  writes:

> Second problem: After having renewed the engine certificate, the engine
> can no longer update a host certificate nor (re-)install a host. Giving
> me the following error in the Admin WebUI: "Error while executing
> action InstallVds: Internal Engine Error"
>
> I've attached the logs from the engine.

The attached log refers to another log
/var/log/ovirt-engine/host-deploy/ovirt-enroll-certs-ansible-20220603115134-virt02.codenet-1a0acee9-f33e-44e3-a863-cd2ee0a4289e.log
where the actual error should be visible.

Also, what's your Engine version?

Regards,
Milan
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RCJPFWILCSD4BTABKNGKWV7TZAPD4NFR/

[ovirt-users] Re: Win Server 2022 and virtio-win 0.1.217-2 update failure

2022-06-06 Thread Sandro Bonazzola 
Il giorno ven 3 giu 2022 alle ore 20:11 Andrei Verovski <
andre...@starlett.lv> ha scritto:

> Hi,
>
> I'm trying to update to latest virtio-win 0.1.217-2, and install fails
> no matter what, even with real-time protection off.
>


oVirt is not developing virtio-win installer, I would recommend to report
it to https://github.com/virtio-win/virtio-win-guest-tools-installer/issues



>
> Log file attached.
>
> Currently installed:
>
> QEMU Guest Agent 103.00
> Virtio-guest-tools 0.1.215
>
> How to fix this?
> Thanks in advance.
>
> # --
>
> [1B1C:1B10][2022-06-03T21:05:41]i001: Burn v3.11.1.2318, Windows v10.0
> (Build 20348: Service Pack 0), path:
>
> C:\Windows\Temp\{1EACBA77-7C5A-4A47-AAD4-09AFFBAD6EB5}\.cr\virtio-win-guest-tools.exe
> [1B1C:1B10][2022-06-03T21:05:41]i009: Command Line:
> '-burn.clean.room=E:\virtio-win-guest-tools.exe
> -burn.filehandle.attached=568 -burn.filehandle.self=556'
> [1B1C:1B10][2022-06-03T21:05:41]i000: Setting string variable
> 'WixBundleOriginalSource' to value 'E:\virtio-win-guest-tools.exe'
> [1B1C:1B10][2022-06-03T21:05:41]i000: Setting string variable
> 'WixBundleOriginalSourceFolder' to value 'E:\'
> [1B1C:1B10][2022-06-03T21:05:41]i000: Setting string variable
> 'WixBundleLog' to value
>
> 'C:\Users\ADMINI~1\AppData\Local\Temp\Virtio-win-guest-tools_20220603210541.log'
> [1B1C:1B10][2022-06-03T21:05:41]i000: Setting string variable
> 'WixBundleName' to value 'Virtio-win-guest-tools'
> [1B1C:1B10][2022-06-03T21:05:41]i000: Setting string variable
> 'WixBundleManufacturer' to value 'Red Hat, Inc.'
> [1B1C:1AFC][2022-06-03T21:05:41]i000: Setting numeric variable
> 'WixStdBALanguageId' to value 1033
> [1B1C:1AFC][2022-06-03T21:05:41]i000: Setting version variable
> 'WixBundleFileVersion' to value '0.1.217.0'
> [1B1C:1B10][2022-06-03T21:05:41]i100: Detect begin, 8 packages
> [1B1C:1B10][2022-06-03T21:05:41]i102: Detected related bundle:
> {e2e8124d-6dd0-4247-bde0-6a6bccde383d}, type: Upgrade, scope:
> PerMachine, version: 0.1.215.0, operation: MajorUpgrade
> [1B1C:1B10][2022-06-03T21:05:41]i103: Detected related package:
> {32A54EE9-1358-4C7B-8468-C5BB42F4F849}, scope: PerMachine, version:
> 0.1.215.0, language: 0 operation: MajorUpgrade
> [1B1C:1B10][2022-06-03T21:05:41]w120: Detected partially cached package:
> vwi.Ix1j, invalid payload: vwi.Ix1j, reason: 0x80070002
> [1B1C:1B10][2022-06-03T21:05:41]w120: Detected partially cached package:
> vwi.lFj1, invalid payload: vwi.lFj1, reason: 0x80070002
> [1B1C:1B10][2022-06-03T21:05:41]i103: Detected related package:
> {EE3877E4-07B0-41F2-ADB8-B45133DDCE37}, scope: PerMachine, version:
> 0.10.5.0, language: 0 operation: Downgrade
> [1B1C:1B10][2022-06-03T21:05:41]w120: Detected partially cached package:
> vwi.yP23, invalid payload: vwi.yP23, reason: 0x80070570
> [1B1C:1B10][2022-06-03T21:05:41]i101: Detected package:
> virtio_win_gt_x64.msi, state: Absent, cached: None
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_balloon_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_network_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_pvpanic_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_qemufwcfg_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_qemupciserial_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_vioinput_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_viorng_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_vioscsi_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_vioserial_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_viostor_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_viofs_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x64.msi, feature: FE_viogpudo_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i101: Detected package:
> virtio_win_gt_x86.msi, state: Absent, cached: None
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x86.msi, feature: FE_balloon_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x86.msi, feature: FE_network_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
> virtio_win_gt_x86.msi, feature: FE_pvpanic_driver, state: Absent
> [1B1C:1B10][2022-06-03T21:05:41]i104: Detected package:
>

[ovirt-users] Re: Q: How to Fix Frozen "Reboot in progress" VM Status

2022-06-06 Thread Liran Rotenberg 
On Tue, May 31, 2022 at 12:37 PM Andrei Verovski 
wrote:

> Hi, Arik,
>
> Thanks for help.
>
> su - postgres
> psql engine
> select vm_guid from vm_static where vm_name='WInServerTerminal-2022';
> select status from vm_dynamic where
> vm_guid='7871067f-221c-48ed-a046-f49499ce9be4';
> update vm_dynamic set status = 1 where
> vm_guid='7871067f-221c-48ed-a046-f49499ce9be4';
> update vm_dynamic set run_on_vds='33453044-4139-5A43-3334-323638385838'
> where vm_guid='7871067f-221c-48ed-a046-f49499ce9be4';
>
> ERROR:  insert or update on table "vm_dynamic" violates foreign key
> constraint "vds_static_vm_dynamic_r"
> DETAIL:  Key (run_on_vds)=(33453044-4139-5a43-3334-323638385838) is not
> present in table "vds_static”.
>
> Something is wrong with last query. '33453044-4139-5A43-3334-323638385838’
> is node UUID from oVirt -> Hosts.
>
> What is correct format with this query ?
>
It seems this host doesn't exist in the DB.
You may check your hosts by running:
select * from vds_static;

>
>
> > On 31 May 2022, at 11:33, Arik Hadas  wrote:
> >
> > On Mon, May 30, 2022 at 5:21 PM Andrei Verovski 
> wrote:
> >>
> >> Hi,
> >>
> >> Digging old notes, which unfortunately were not complete, I found also
> this query, which was marked as necessary:
> >>
> >> update vm_dynamic set run_on_vds='3c854f9c-2cdd-423e-bca0-37964ba76702'
> where vm_guid='7871067f-221c-48ed-a046-f49499ce9be4';
> >>
> >> but I didn’t remember what is
> >> run_on_vds='3c854f9c-2cdd-423e-bca0-37964ba76702’
> >>
> >> Is this UUID of the node problematic VM is running on?
> >
> > Yes, it should be the UUID of the host that the VM runs on - but the
> > issue this update can solve has been addressed and we didn't see it
> > for quite a while since then, so unless run_on_vds is set to null I
> > wouldn't go this way but rather check what happens within the guest
> > and if there's anything unusual in the vdsm log
> >
> >
> >>
> >> Thanks.
> >>
> >>
> >> On 29 May 2022, at 18:44, Liran Rotenberg  wrote:
> >>
> >>
> >>
> >> On Thu, May 26, 2022 at 4:36 PM Andrei Verovski 
> wrote:
> >>>
> >>> Hi,
> >>>
> >>> engine=# update vm_dynamic set status = 1 where
> vm_guid='7871067f-221c-48ed-a046-f49499ce9be4';
> >>> UPDATE 1
> >>>
> >>> Seems like success, but it is not.
> >>>
> >>> After few seconds:
> >>> engine=# select status from vm_dynamic where
> vm_guid='7871067f-221c-48ed-a046-f49499ce9be4';
> >>> status
> >>> 
> >>> 10
> >>> (1 row)
> >>>
> >>> Looks like oVirt Engine itself checks something and changes status to
> “10” (Rebooting) again.
> >>>
> >>> Is it possible this is somehow related to "virtio-win-0.1.217” I
> installed recently on this Windows Server 2022 VM?
> >>
> >> Yes, the engine sets the VM status based on the report from VDSM.
> >> VDSM takes the report from the guest-agent, in this case - the one
> provided by virtio-win (for windows VMs).
> >> Can you make sure it is installed? Also, try to look in vdsm.log if by
> searching QEMU you can see one message about getting new capabilities for
> the VM?
> >> Another option would be to try and check qemu-ga calls to the VM.
> >>>
> >>>
> >>> Thanks in advance for any suggestions.
> >>>
> >>>
> >>> On 26 May 2022, at 14:53, Liran Rotenberg  wrote:
> >>>
> >>>
> >>>
> >>> On Wed, May 25, 2022 at 5:52 PM Andrei Verovski 
> wrote:
> 
>  Hi,
> 
>  I have VM which have restarted successfully yet in oVirt web it is
> being shown with “Rebooting” status for a very long time.
> 
>  I did:
> 
>  su - postgres
>  psql engine
>  select vm_guid from vm_static where vm_name='WInServerTerminal-2022’;
>  engine=# select status from vm_dynamic where
> vm_guid='7871067f-221c-48ed-a046-f49499ce9be4';
>  status
>  
>  10
>  (1 row)
> 
>  How to properly correct status from "Rebooting”?
> >>>
> >>> Hi Andrei,
> >>> If you wish to change manually the VM status to 'UP' status you may
> use:
> >>> # update vm_dynamic set status = 1 where
> vm_guid='7871067f-221c-48ed-a046-f49499ce9be4';
> >>>
> >>> The statuses are the following (VMStatus ENUM):
> >>> Unassigned(-1),
> >>> Down(0),
> >>> Up(1),
> >>> PoweringUp(2),
> >>> Paused(4),
> >>> MigratingFrom(5),
> >>> MigratingTo(6),
> >>> Unknown(7),
> >>> NotResponding(8),
> >>> WaitForLaunch(9),
> >>> RebootInProgress(10),
> >>> SavingState(11),
> >>> RestoringState(12),
> >>> Suspended(13),
> >>> ImageIllegal(14),
> >>> ImageLocked(15),
> >>> PoweringDown(16);
> >>>
> >>> Regards,
> >>> Liran
> >>>
> 
> 
>  Thanks in advance
>  Andrei
>  ___
>  Users mailing list -- users@ovirt.org
>  To unsubscribe send an email to users-le...@ovirt.org
>  Privacy Statement: https://www.ovirt.org/privacy-policy.html
>  oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
>  List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/FSZZOMGVJACZHH3CTWW6HOLTTJXL76QN/

[ovirt-users] Re: Engine Certificate renewal caused "Error while executing action InstallVds: Internal Engine Error"

2022-06-06 Thread Patrick Hibbs 
My engine version at the time was ovirt-engine-4.5.0.8-1.el8.noarch.

Unfortunately I had to reinstall the engine over the weekend, so I'm
afraid the log is no longer available.

That being said, given that the engine only started doing that after I
force renewed the internal engine certificate via engine-setup (by
renaming /etc/pki/ovirt-engine/keys/engine.p12), I would assume that
engine-setup didn't update something correctly. Perhaps the error can
be traced to engine-setup's need for a specific time frame to renew the
cert?

Anotheruser opened a bug for engine-setup not renewing the internal
engine  cert  despite  the WebUI's  complaints:
https://bugzilla.redhat.com/show_bug.cgi?id=2093954

-Patrick Hibbs

On Mon, 2022-06-06 at 12:02 +0200, Milan Zamazal wrote:
> Patrick Hibbs  writes:
> 
> > Secondproblem: After having renewed the engine certificate, the
> > engine
> > canno longer update a host certificate nor (re-)install a host.
> > Giving
> > me the following error in the Admin WebUI: "Error while executing
> > action InstallVds: Internal Engine Error"
> > 
> > I've attached the logs from the engine.
> 
> The attached log refers to another log
> /var/log/ovirt-engine/host-deploy/ovirt-enroll-certs-ansible-
> 20220603115134-virt02.codenet-1a0acee9-f33e-44e3-a863-
> cd2ee0a4289e.log
> where the actual error should be visible.
> 
> Also, what's your Engine version?
> 
> Regards,
> Milan
> 

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TVWIRU6KR2UAOLCOIJGK2XNM5XZRQHS5/