Re: [Users] Add a Host and iptables
2012/10/13 Alexandre Santos santosa...@gmail.com 2.5.3 from nightly No dia 13/10/2012 22:27, Barak Azulay bazu...@redhat.com escreveu: On 10/13/2012 08:55 PM, Alon Bar-Lev wrote: I agree that this is confusing. There is a note in the code specifying that the 8443 is for backward compatibility. Until the version 3.0, oVirt Engine provided port 8443/8080 to oVirt Node download cert and others files. Since 3.1 the default port changed to 443/80. This function, will return the compatible port in case the VDSM cannot communicate with oVirt Engine. :param portNumber: port which doesn't communicate with oVirt Engine :returns: compatible port number (or None if there is no compatible port) and if it's SSL port or not (bool) Brarak? Alexander what version are you using ? this was handled in patch http://gerrit.ovirt.org/#/c/**5367/10http://gerrit.ovirt.org/#/c/5367/10 Thanks Barak Azulay - Original Message - From: Alexandre Santos santosa...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Saturday, October 13, 2012 8:51:20 PM Subject: Re: [Users] Add a Host and iptables Alon, I'm quite sure I didn't change that. The oVirt Node should have it at port 443 by default then. Alex 2012/10/13 Alon Bar-Lev alo...@redhat.com Oh... You should register into 443... - Original Message - From: Alexandre Santos santosa...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Saturday, October 13, 2012 8:35:48 PM Subject: Re: [Users] Add a Host and iptables Sorry, post? On the oVirt Node TUI I didn't change the port, it's 8443. I noticed now that port 8443 isn't listed on the iptables list. I attach the output. Alex 2012/10/13 Alon Bar-Lev alo...@redhat.com What post did you try to register to? What is the output of 'iptables --list'? - Original Message - From: Alexandre Santos santosa...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Saturday, October 13, 2012 8:14:07 PM Subject: Re: [Users] Add a Host and iptables Well, it was brute force... disabled iptables on the engine server :-) 2012/10/13 Alon Bar-Lev alo...@redhat.com - Original Message - From: Alexandre Santos santosa...@gmail.com To: users@ovirt.org Sent: Saturday, October 13, 2012 5:13:03 PM Subject: [Users] Add a Host and iptables Hi, I noticed that when I install a new Host using the oVirt Node ISO, when I try to register my new host on the oVirt Engine, I can't download the engine key. I must disable the iptables on the engine before. Alex Hi, What change exactly was added by you? Alon Hello all, The previous post was from my smartphone... It is a nightly iso image from 10-Oct-2012. Alex ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Can't start a VM - sanlock permission denied
- Original Message - From: Dan Kenigsberg dan...@redhat.com To: Alexandre Santos santosa...@gmail.com Cc: users@ovirt.org Sent: Saturday, October 13, 2012 11:11:13 PM Subject: Re: [Users] Can't start a VM - sanlock permission denied On Sat, Oct 13, 2012 at 11:25:37AM +0100, Alexandre Santos wrote: Hi, after getting to the oVirt Node console (F2) I figured out that selinux wasn't allowing the sanlock, so I entered the setsebool virt_use_sanlock 1 and the problem is fixed. Which version of vdsm is istalled on your node? and which selinux-policy? sanlock should work out-of-the-box. Just happened to me as well with oVirt node 2.5.2 (0.1.fc17) (Latest on http://wiki.ovirt.org/wiki/OVirt_3.1_release_notes#oVirt_Node) However, I started getting permission denied error when trying to start the VM that was created on that NFS share. On the ovirt node console, I noticed that the user.group of that share was nobody.nobody instead of vdsm.kvm. I followed the instruction on the wiki about anonguid and anonuid but no luck at all. This was an Ubuntu nfs server. I Installed a FC17 VM on this Ubuntu and tried again and it worked at the first time :-) I've seen these problem when using nfs v4 without defining it's id mapper properly. The issue went away when (down?)grading to v3. Ubuntu has a KVM group with guid = 106. Dan. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Can't start a VM - sanlock permission denied
2012/10/13 Dan Kenigsberg dan...@redhat.com On Sat, Oct 13, 2012 at 11:25:37AM +0100, Alexandre Santos wrote: Hi, after getting to the oVirt Node console (F2) I figured out that selinux wasn't allowing the sanlock, so I entered the setsebool virt_use_sanlock 1 and the problem is fixed. Which version of vdsm is istalled on your node? and which selinux-policy? sanlock should work out-of-the-box. vdsm-4.10.0-10.fc17 on /etc/sysconfig/selinux SELINUX=enforcing SELINUXTYPE=targeted However, I started getting permission denied error when trying to start the VM that was created on that NFS share. On the ovirt node console, I noticed that the user.group of that share was nobody.nobody instead of vdsm.kvm. I followed the instruction on the wiki about anonguid and anonuid but no luck at all. This was an Ubuntu nfs server. I Installed a FC17 VM on this Ubuntu and tried again and it worked at the first time :-) I've seen these problem when using nfs v4 without defining it's id mapper properly. The issue went away when (down?)grading to v3. Ubuntu has a KVM group with guid = 106. Dan. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] Migrate KVM to Ovirt
Hello Guys, I have a infrastructure of 2 Ubuntu servers that hosts kvm guest. I want to implement Ovirt, I'm wondering what is the best way to migrate the existing KVM Guest from my Ubuntu server to Ovirt. Can i rsync the .img and the xml to Ovirt ? virt-v2v ? I want a mention that I have a VM of 800GB would it be to large for Ovirt or to convert ? Regards, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Migrate KVM to Ovirt
On 10/14/2012 07:06 PM, EricD wrote: Hello Guys, I have a infrastructure of 2 Ubuntu servers that hosts kvm guest. I want to implement Ovirt, I'm wondering what is the best way to migrate the existing KVM Guest from my Ubuntu server to Ovirt. Can i rsync the .img and the xml to Ovirt ? virt-v2v ? I want a mention that I have a VM of 800GB would it be to large for Ovirt or to convert ? shouldn't be an issue. main change is we still don't (yet) have a working ubuntu host support, so fedora or .el6 are needed for now. is the VM on shared or local storage? since it from/to kvm, you may be able to avoid copying/v2v it, rather just create a new VM in ovirt of same size and copy the storage over it (easiest with local storage or nfs shared storage) ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Can't start a VM - sanlock permission denied
- Original Message - From: Alexandre Santos santosa...@gmail.com To: Dan Kenigsberg dan...@redhat.com Cc: Haim Ateya hat...@redhat.com, users@ovirt.org, Federico Simoncelli fsimo...@redhat.com Sent: Sunday, October 14, 2012 7:23:36 PM Subject: Re: [Users] Can't start a VM - sanlock permission denied 2012/10/13 Dan Kenigsberg dan...@redhat.com On Sat, Oct 13, 2012 at 11:25:37AM +0100, Alexandre Santos wrote: Hi, after getting to the oVirt Node console (F2) I figured out that selinux wasn't allowing the sanlock, so I entered the setsebool virt_use_sanlock 1 and the problem is fixed. Which version of vdsm is istalled on your node? and which selinux-policy? sanlock should work out-of-the-box. vdsm-4.10.0-10.fc17 on /etc/sysconfig/selinux SELINUX=enforcing SELINUXTYPE=targeted As far as I understand the selinux policies for the ovirt-node are set by recipe/common-post.ks (in the ovirt-node repo): semanage boolean -m -S targeted -F /dev/stdin \EOF_semanage allow_execstack=0 virt_use_nfs=1 EOF_semanage We should update it with what vdsm is currently setting: virt_use_sanlock=1 sanlock_use_nfs=1 -- Federico ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Migrate KVM to Ovirt
I recently moved my KVM to oVirt KVM. I did just that, created a vm the same size as the previous vm, added the same network interfaces, assigned each interface the same MAC address and finally cat each ${vm}.img into the ${UUID}.img file created by oVirt. Worked perfectly! Just make sure you cat the right img file into the correct new vm file. To do this without trying to figure out the UUIDs you can do one vm at a time. -Bret Sent from my iPhone On Oct 14, 2012, at 4:31 PM, Itamar Heim ih...@redhat.com wrote: On 10/14/2012 07:06 PM, EricD wrote: Hello Guys, I have a infrastructure of 2 Ubuntu servers that hosts kvm guest. I want to implement Ovirt, I'm wondering what is the best way to migrate the existing KVM Guest from my Ubuntu server to Ovirt. Can i rsync the .img and the xml to Ovirt ? virt-v2v ? I want a mention that I have a VM of 800GB would it be to large for Ovirt or to convert ? shouldn't be an issue. main change is we still don't (yet) have a working ubuntu host support, so fedora or .el6 are needed for now. is the VM on shared or local storage? since it from/to kvm, you may be able to avoid copying/v2v it, rather just create a new VM in ovirt of same size and copy the storage over it (easiest with local storage or nfs shared storage) ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Can't start a VM - sanlock permission denied
On Sun, 2012-10-14 at 19:11 -0400, Federico Simoncelli wrote: - Original Message - From: Alexandre Santos santosa...@gmail.com To: Dan Kenigsberg dan...@redhat.com Cc: Haim Ateya hat...@redhat.com, users@ovirt.org, Federico Simoncelli fsimo...@redhat.com Sent: Sunday, October 14, 2012 7:23:36 PM Subject: Re: [Users] Can't start a VM - sanlock permission denied 2012/10/13 Dan Kenigsberg dan...@redhat.com On Sat, Oct 13, 2012 at 11:25:37AM +0100, Alexandre Santos wrote: Hi, after getting to the oVirt Node console (F2) I figured out that selinux wasn't allowing the sanlock, so I entered the setsebool virt_use_sanlock 1 and the problem is fixed. Which version of vdsm is istalled on your node? and which selinux-policy? sanlock should work out-of-the-box. vdsm-4.10.0-10.fc17 on /etc/sysconfig/selinux SELINUX=enforcing SELINUXTYPE=targeted As far as I understand the selinux policies for the ovirt-node are set by recipe/common-post.ks (in the ovirt-node repo): semanage boolean -m -S targeted -F /dev/stdin \EOF_semanage allow_execstack=0 virt_use_nfs=1 EOF_semanage We should update it with what vdsm is currently setting: virt_use_sanlock=1 sanlock_use_nfs=1 Shouldn't vdsm be setting these if they're needed? I can certainly set the values, but IMO, if vdsm needs it, vdsm should set it. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users