[Users] oVirt and SAS shared storage??

[Hans-Joachim]

Hello,

unfortunally, I didn't got a reply for my question. So.. let's try again.

Does oVirt supports SAS shared storages (p. e. MSA2000sa) as storage domain?
If yes.. what kind of storage domain I've to choose at setup time?

Thank you for your help

Hans-Joachim
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] EL5 support for VirtIO SCSI?

[Paul Jansen]

Hi Paolo.
I think this would be quite a useful patch.
The two benefits as far as I can see would be:
(1) smoother importing of VMs from Vmware/vsphere/vcenter into hypervisors that 
make use of libvirt. The VM definition would not need to change the scsi 
adapter property.
(2) potentially allow using the vmware pvscsi controller in ovirt.  In my 
particular use case this should allow EL5 guests to be used (and have a 
supported scsi controller once 'open-vm-tools' is installed) in Ovirt.  
Ovviously we'd want to steer people into using virtio-scsi wherever possible 
though, as has been discussed previously.

Please let us know on list if you do get to this.
Thanks for your efforts,
Paul




On Friday, 15 November 2013 8:50 PM, Paolo Bonzini  wrote:
 
Il 15/11/2013 09:30, Stefan Hajnoczi ha scritto:

>> > Thanks.  I understand qemu supports other scsi adapters however.  See this 
>> > post from earlier this year.
>> > That post makes reference to the following hbas: auto, buslogic, ibmvscsi. 
>> > lsilogic, lsisas1068, lsisas1078, virtio-scsi, vmpvscsi.
> From an upstream QEMU perspective, the HBAs that ought to work on x86_64
> guests are virtio-scsi, lsisas1078, and vmpvscsi.

I think vmpvscsi is not supported for QEMU in libvirt.  It would be a
very simple patch, I may get round to it before Christmas...

Paolo___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Low quality of el6 vdsm rpms

[Douglas Schilling Landgraf]

Hello Sven,

On 11/15/2013 09:35 AM, Sven Kieske wrote:

Ah, thanks for the hint, the "fixed bugs" list is quite long, so I
didn't read everything, I will give this some testing if
it is already in 3.3.1-2 beta (not mentioned in release notes?), but I
think it will work, this release seems very stable and focused to me.


The vdsm package which fix this list of bug is already in the beta.


OT: Why is there no announcement for beta releases on the announcement
list? To keep traffic low? The last message is from 16.10.2013 so
you shouldn't be feared to "spam" this list (imho). ;)



I do believe the best is raise this question into another e-mail thread ;-)

Thanks!



Am 15.11.2013 18:05, schrieb Douglas Schilling Landgraf:

Hi Sven,

On 11/15/2013 05:42 AM, Sven Kieske wrote:

Hi,

is there any chance that the fixes for this bug
get into 3.3.x or at least 3.4 ?
I see no targeted Milestone for it, and this is something
I would consider a core feature, which should "just work".


It's targeted for 3.3.1 and it shows in release notes for VDSM:
http://www.ovirt.org/OVirt_3.3.1_release_notes





--
Cheers
Douglas
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] FC19 and ovirt 3.3

[Alon Bar-Lev]

- Original Message -
> From: "Hongyi Zhang" 
> To: users@ovirt.org
> Sent: Saturday, November 16, 2013 1:02:51 AM
> Subject: [Users] FC19 and ovirt 3.3
> 
> 
> 
> Hello,
> 
> 
> 
> I now upgrade my machine to use FC19 and oVirt 3.3 engine to manage my oVirt
> node.
> 
> 
> 
> When I tried to attach my ovirt node, I failed and got error message on my
> engine side:
> 
> 
> 
> 2013-11-15 17:27:56,573 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (VdsDeploy) Correlation ID: dd614eb, Call Stack: null, Custom Event ID: -1,
> Message: Installing Host node1. Stage: Environment customization.
> 
> 2013-11-15 17:27:56,574 ERROR [org.ovirt.engine.core.bll.InstallerMessages]
> (VdsDeploy) Installation 128.224.147.207: Failed to execute stage
> 'Environment customization' : Command 'initctl' is required but missing
> 
> 2013-11-15 17:27:56,588 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (VdsDeploy) Correlation ID: dd614eb, Call Stack: null, Custom Event ID: -1,
> Message: Failed to install Host node1. Failed to execute stage 'Environment
> customization': Command 'initctl' is required but missing .
> 
> 2013-11-15 17:27:56,589 INFO [org.ovirt.engine.core.bll.InstallerMessages]
> (VdsDeploy) Installation 128.224.147.207: Stage: Pre-termination
> 
> 
> 
> Please someone help me to fix the problem.
> 
> 
> 
> uname -a
> 
> Linux engine.wrs.com 3.11.7-200.fc19.x86_64 #1 SMP Mon Nov 4 14:09:03 UTC
> 2013 x86_64 x86_64 x86_64 GNU/Linux
> 
> And I use:
> 
> ovirt-engine-setup-3.3.0.1-1.fc19.noarch
> 

Please send the host-deploy log for this sequence located at 
/var/log/ovirt-engine/host-deploy/

> 
> 
> Thanks,
> 
> Hongyi
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[Users] FC19 and ovirt 3.3

[Zhang, Hongyi]

Hello,



I now upgrade my machine to use FC19 and oVirt 3.3 engine to manage my oVirt 
node.



When I tried to attach my ovirt node, I failed and got error message on my 
engine side:



2013-11-15 17:27:56,573 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(VdsDeploy) Correlation ID: dd614eb, Call Stack: null, Custom Event ID: -1, 
Message: Installing Host node1. Stage: Environment customization.

2013-11-15 17:27:56,574 ERROR [org.ovirt.engine.core.bll.InstallerMessages] 
(VdsDeploy) Installation 128.224.147.207: Failed to execute stage 'Environment 
customization': Command 'initctl' is required but missing

2013-11-15 17:27:56,588 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(VdsDeploy) Correlation ID: dd614eb, Call Stack: null, Custom Event ID: -1, 
Message: Failed to install Host node1. Failed to execute stage 'Environment 
customization': Command 'initctl' is required but missing.

2013-11-15 17:27:56,589 INFO  [org.ovirt.engine.core.bll.InstallerMessages] 
(VdsDeploy) Installation 128.224.147.207: Stage: Pre-termination

Please someone help me to  fix the problem.

uname -a
Linux engine.wrs.com 3.11.7-200.fc19.x86_64 #1 SMP Mon Nov 4 14:09:03 UTC 2013 
x86_64 x86_64 x86_64 GNU/Linux
And I use:
ovirt-engine-setup-3.3.0.1-1.fc19.noarch

Thanks,
Hongyi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] from irc

[Gianluca Cecchi]

On Fri, Nov 15, 2013 at 7:15 PM, Bob Doolittle wrote:

> That is very interesting. After reading the RHEV docs I had wondered about
> this myself - i.e. how does one create/manage a stateful model where people
> always return to VMs in the same state they were left? I thought perhaps you
> had to detach it from the Pool for this, but haven't had time to experiment
> with it yet.

Yes you can detach a VM from a pool and it will become a normal VM;
its icon will change too.
But to do this it has to be in down state (donna if this limitation is
going away in 3.3. Not tested myself...)

Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] engine-manage-domains fails when re-adding a domain

[Junk]

Juan Hernandez  wrote:
>
>On 11/13/2013 10:11 PM, Junk wrote:
>> Hi I was having odd issues with my IPA domain so rather than
>> troubleshoot it properly I thought it would be a good idea to remove
>it
>> and then add it again.
>> 
>> I removed it with 
>> engine-manage-domains -action=delete -domain=clarkconnect.lan
>> 
>> and when I try to add it with 
>> engine-manage-domains -action=add -domain=clarkconnect.lan
>-user=admin
>> -provider=IPA -interactive
>> 
>> which worked fine the first time I get
>> 
>> General error has occurednull
>> java.lang.NegativeArraySizeException
>>  at
>>
>sun.security.jgss.krb5.CipherHelper.aes256Encrypt(CipherHelper.java:1367)
>>  at
>>
>sun.security.jgss.krb5.CipherHelper.encryptData(CipherHelper.java:722)
>>  at sun.security.jgss.krb5.WrapToken_v2.(WrapToken_v2.java:200)
>>  at sun.security.jgss.krb5.Krb5Context.wrap(Krb5Context.java:861)
>>  at sun.security.jgss.GSSContextImpl.wrap(GSSContextImpl.java:385)
>>  at
>com.sun.security.sasl.gsskerb.GssKrb5Base.wrap(GssKrb5Base.java:104)
>>  at
>>
>com.sun.jndi.ldap.sasl.SaslOutputStream.write(SaslOutputStream.java:89)
>>  at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:430)
>>  at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:555)
>>  at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1985)
>>  at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1847)
>>  at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1772)
>>  at
>>
>com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386)
>>  at
>>
>com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356)
>>  at
>>
>com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339)
>>  at
>>
>javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
>>  at
>org.ovirt.engine.core.ldap.RootDSEData.(RootDSEData.java:52)
>>  at
>>
>org.ovirt.engine.core.utils.kerberos.JndiAction.getDomainDN(JndiAction.java:257)
>>  at
>>
>org.ovirt.engine.core.utils.kerberos.JndiAction.run(JndiAction.java:87)
>>  at java.security.AccessController.doPrivileged(Native Method)
>>  at javax.security.auth.Subject.doAs(Subject.java:356)
>>  at
>>
>org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.promptSuccessfulAuthentication(KerberosConfigCheck.java:174)
>>  at
>>
>org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.validateKerberosInstallation(KerberosConfigCheck.java:150)
>>  at
>>
>org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.checkInstallation(KerberosConfigCheck.java:135)
>>  at
>>
>org.ovirt.engine.core.domains.ManageDomains.checkKerberosConfiguration(ManageDomains.java:746)
>>  at
>>
>org.ovirt.engine.core.domains.ManageDomains.testConfiguration(ManageDomains.java:917)
>>  at
>>
>org.ovirt.engine.core.domains.ManageDomains.addDomain(ManageDomains.java:539)
>>  at
>>
>org.ovirt.engine.core.domains.ManageDomains.runCommand(ManageDomains.java:311)
>>  at
>>
>org.ovirt.engine.core.domains.ManageDomains.main(ManageDomains.java:206)
>>  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>  at
>>
>sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>>  at
>>
>sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>>  at java.lang.reflect.Method.invoke(Method.java:606)
>>  at org.jboss.modules.Module.run(Module.java:260)
>>  at org.jboss.modules.Main.main(Main.java:291)
>> Failure while testing domain %1$s. Details: %2$s: One of the
>parameters
>> for this error is null and no default message to show
>> 
>> 
>> in the engine-manage-domains.log I get
>> 
>> 2013-11-13 20:53:41,318 INFO
>> [org.ovirt.engine.core.domains.ManageDomains] Creating kerberos
>> configuration for domain(s): clarkconnect.lan
>> 2013-11-13 20:53:41,525 INFO
>> [org.ovirt.engine.core.domains.ManageDomains] Successfully created
>> kerberos configuration for domain(s): clarkconnect.lan
>> 2013-11-13 20:53:41,526 INFO
>> [org.ovirt.engine.core.domains.ManageDomains] Testing kerberos
>> configuration for domain: clarkconnect.lan
>> 2013-11-13 20:53:48,718 ERROR
>> [org.ovirt.engine.core.domains.ManageDomains] Failure while testing
>> domain %1$s. Details: %2$s: One of the parameters for this error is
>null
>> and no default message to show
>> 
>> any ideas?
>> 
>> Junk
>> 
>
>We have seen a similar issue with OpenLDAP that required to set the
>minimum security strength factor (SSF) to 1 instead of the default 0.
>This default triggers a bug in the Java virtual machine Kerberos
>support.
>
>IPA uses the 389 directory server, and it also has the possibility to
>configure this, as described here:
>
>http://directory.fedoraproject.org/wiki/Minimum_SSF_Setting
>
>To check that you can run a query like this in your IPA installation:
>
># kinit admin
># ldapsearch \
>-H ldap://your_ipa_serve

[Users] virt-v2v windows 2003 migration issue

[Jakub Bittner]

Hello,

I've been trying to convert libvirtd managed kvm guest which runs 
windows 2003 (with virtio driver installed), but it failed in the end.


Command:

virt-v2v -i libvirt -ic qemu+ssh://u...@node.example.com/system -o rhev 
-os 10.50.98.15:/backup_nfs -of qcow2 -oa sparse -n ovirtmgmt windows2003


Error reported

virt-v2v: No app in config matches os='windows' name='virtio' 
distro='windows' major='5' minor='2' arch='i386'


Iam running virt-v2v on Fedora 19. OVirt is 3.3.0 version..
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] from irc

[Itamar Heim]

On 11/15/2013 01:15 PM, Bob Doolittle wrote:


On 11/15/2013 12:36 PM, Gianluca Cecchi wrote:

Actually AFAIK in rhev 3.2 (and in oVirt 3.2) pools can be automatic
or manual
(https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Administration_Guide/sect-Virtual_Machine_Pool_Tasks.html)

"
In the Pool tab, select one of the following pool types:
Manual - The administrator is responsible for explicitly returning the
virtual machine to the pool. The virtual machine reverts to the
original base image after the administrator returns it to the pool.
Automatic - When the virtual machine is shut down, it automatically
reverts to its base image and is returned to the virtual machine pool.
"

IN RHEV 2.x there was also a third option that was time based and that
in my opinion was interesting. Donna why it was removed.

In my opinion there is sort of mislead between what is above and the
introduction of pools inside the guide because it is stated this way:
(https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Administration_Guide/chap-Pools.html)

"
...
Virtual machines in pools are stateless, data is not persistent across
reboots. Virtual machines in a pool are started when there is a user
request, and shut down when the user is finished.
..."

So if one doesn't go ahead he/she thinks only stateless are allowed.



That is very interesting. After reading the RHEV docs I had wondered
about this myself - i.e. how does one create/manage a stateful model
where people always return to VMs in the same state they were left? I
thought perhaps you had to detach it from the Pool for this, but haven't
had time to experiment with it yet.

With VMware there is a stateful pool model where the user-to-machine
binding remains in effect, but the machine can be rebooted, powered off,
etc. Is this what's implied by the "Manual" model?



yes. until the admin returns it to the pool, when it looses the snapshot.
allows to easily create a pool of VMs, assign to a group, then each gets 
their own VM (even "forever"), instead of creating/assigning one by one.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] from irc

[Bob Doolittle]

On 11/15/2013 12:36 PM, Gianluca Cecchi wrote:

Actually AFAIK in rhev 3.2 (and in oVirt 3.2) pools can be automatic or manual
(https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Administration_Guide/sect-Virtual_Machine_Pool_Tasks.html)
"
In the Pool tab, select one of the following pool types:
Manual - The administrator is responsible for explicitly returning the
virtual machine to the pool. The virtual machine reverts to the
original base image after the administrator returns it to the pool.
Automatic - When the virtual machine is shut down, it automatically
reverts to its base image and is returned to the virtual machine pool.
"

IN RHEV 2.x there was also a third option that was time based and that
in my opinion was interesting. Donna why it was removed.

In my opinion there is sort of mislead between what is above and the
introduction of pools inside the guide because it is stated this way:
(https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Administration_Guide/chap-Pools.html)
"
...
Virtual machines in pools are stateless, data is not persistent across
reboots. Virtual machines in a pool are started when there is a user
request, and shut down when the user is finished.
..."

So if one doesn't go ahead he/she thinks only stateless are allowed.



That is very interesting. After reading the RHEV docs I had wondered 
about this myself - i.e. how does one create/manage a stateful model 
where people always return to VMs in the same state they were left? I 
thought perhaps you had to detach it from the Pool for this, but haven't 
had time to experiment with it yet.


With VMware there is a stateful pool model where the user-to-machine 
binding remains in effect, but the machine can be rebooted, powered off, 
etc. Is this what's implied by the "Manual" model?


-Bob

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] avoiding sysprep per boot with pooled vms (was from irc)

[Itamar Heim]

On 11/15/2013 12:45 PM, Gianluca Cecchi wrote:

On Fri, Nov 15, 2013 at 6:32 PM, Bob Doolittle wrote:



OK so there seems to be a serious scalability issue here. It is not unusual
for a large VDI deployment to utilize hundreds of VMs. From what you're
telling me, if we don't want users to experience the unsealing delay (which
takes several minutes) every time, an admin would have to start all of those
VMs after creating the Pool, and then cleanly shut them all down again once
they'd all finished their unsealing process. Either that, or set them all to
auto-start, but this puts unnecessary load on the host since they have to
unseal after snapshot-revert every time they come up.

There is perhaps an attractive feature that might help here. At the moment
you can set an absolute number of "auto-start" VMs for the pool. I think
what's needed is something more like an HA "standby" model which is applied
to hosts and disks - you would like a certain number of not-yet-allocated,
auto-started ("waiting-auto-started"?) VMs to be in the pool at all times
(unless of course the pool is exhausted). In other words, say you have a
large pool of VMs, and you set a waiting-auto-started count to 10. If 20
users connect to VMs, 10 more would be started up and waiting in the pool.
You could shut down/return any extras as VMs are returned to the pool
(optionally?). The goal here is to eat the startup delays in advance to have
ready-to-use VMs available for users at all times, without needing to start
them all (which would consume excessive host resources). I think this would
be more valuable than a fixed count, although maybe that's helpful in some
use cases.



For sure it is interesting and mapping what there is in VMware since
long time where you can specify a limit of free started VMs after
which you autostart new ones at pool definition stage.

I put similar question at RHEV 2.x time for a POC I had in place when
the engine was Windows based and there was the command line API shell.
I was suggested and I verified it worked as expected with an at job
that every X minutes checked number of running VMs and when free
pre-started number dropped down a pre-defined limit it would pre-start
Y new VMs
I think now it should be also easier, even if it could be a good
proposal for 3.4

Gianluca



This *is* what the feature is doing.
define a pool of 500 VMs.
specify you want 10 autostarted VMs.
engine will make sure there are allways 10 launched VMs for users to 
get. and will launch new ones as needed (up to 10).


if 50 users will all ask for VMs at the same time, they will have to 
start them / wait the sysprep.

but if that's common - set auto start to 50.

oh - right terminology is "prestart VMs"
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] avoiding sysprep per boot with pooled vms (was from irc)

[Gianluca Cecchi]

On Fri, Nov 15, 2013 at 6:32 PM, Bob Doolittle wrote:

>
> OK so there seems to be a serious scalability issue here. It is not unusual
> for a large VDI deployment to utilize hundreds of VMs. From what you're
> telling me, if we don't want users to experience the unsealing delay (which
> takes several minutes) every time, an admin would have to start all of those
> VMs after creating the Pool, and then cleanly shut them all down again once
> they'd all finished their unsealing process. Either that, or set them all to
> auto-start, but this puts unnecessary load on the host since they have to
> unseal after snapshot-revert every time they come up.
>
> There is perhaps an attractive feature that might help here. At the moment
> you can set an absolute number of "auto-start" VMs for the pool. I think
> what's needed is something more like an HA "standby" model which is applied
> to hosts and disks - you would like a certain number of not-yet-allocated,
> auto-started ("waiting-auto-started"?) VMs to be in the pool at all times
> (unless of course the pool is exhausted). In other words, say you have a
> large pool of VMs, and you set a waiting-auto-started count to 10. If 20
> users connect to VMs, 10 more would be started up and waiting in the pool.
> You could shut down/return any extras as VMs are returned to the pool
> (optionally?). The goal here is to eat the startup delays in advance to have
> ready-to-use VMs available for users at all times, without needing to start
> them all (which would consume excessive host resources). I think this would
> be more valuable than a fixed count, although maybe that's helpful in some
> use cases.
>

For sure it is interesting and mapping what there is in VMware since
long time where you can specify a limit of free started VMs after
which you autostart new ones at pool definition stage.

I put similar question at RHEV 2.x time for a POC I had in place when
the engine was Windows based and there was the command line API shell.
I was suggested and I verified it worked as expected with an at job
that every X minutes checked number of running VMs and when free
pre-started number dropped down a pre-defined limit it would pre-start
Y new VMs
I think now it should be also easier, even if it could be a good
proposal for 3.4

Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] from irc

[Gianluca Cecchi]

On Fri, Nov 15, 2013 at 3:28 PM, Einav Cohen  wrote:

>
> When the user runs the VM (again - by allocating himself a VM from the
> pool via the user portal), the VM actually runs in a stateless mode:
> right before the VM is run, a snapshot is taken from it; once the VM is
> being shutdown/returned to the pool, the VM reverts itself to that
> snapshot, clearing all changes done in this run (but not changes that
> the admin did in the initial run! those are "sealed" within the VM),
> leaving the VM and ready for the next allocation.

Actually AFAIK in rhev 3.2 (and in oVirt 3.2) pools can be automatic or manual
(https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Administration_Guide/sect-Virtual_Machine_Pool_Tasks.html)
"
In the Pool tab, select one of the following pool types:
Manual - The administrator is responsible for explicitly returning the
virtual machine to the pool. The virtual machine reverts to the
original base image after the administrator returns it to the pool.
Automatic - When the virtual machine is shut down, it automatically
reverts to its base image and is returned to the virtual machine pool.
"

IN RHEV 2.x there was also a third option that was time based and that
in my opinion was interesting. Donna why it was removed.

In my opinion there is sort of mislead between what is above and the
introduction of pools inside the guide because it is stated this way:
(https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Administration_Guide/chap-Pools.html)
"
...
Virtual machines in pools are stateless, data is not persistent across
reboots. Virtual machines in a pool are started when there is a user
request, and shut down when the user is finished.
..."

So if one doesn't go ahead he/she thinks only stateless are allowed.

Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] avoiding sysprep per boot with pooled vms (was from irc)

[Bob Doolittle]

On 11/15/2013 08:51 AM, Itamar Heim wrote:

On 11/15/2013 08:41 AM, Bob Doolittle wrote:

Hi,

I had a question on IRC regarding sysprep/sealing of Windows VMs and use
in Pools. Basically, if you follow the Quick Start Guide, it says to
seal the VM and shut it down before making the Template.

My problem with this is that when you start a VM from the Pool, it takes
forever to unseal - i.e. to repersonalize itself. That's a bad
experience from a VDI perspective - you want the user to get a desktop
they can start using ASAP.


that's why Pools have "auto start VMs" - you can define you want the 
pool to always keep X VMs up and running and ready for the users.


Yes I can see this becomes more important when there's such a long 
startup time due to unsealing.




Itamar responded to me directly via e-mail:

 > bobdrad: on your question of windows VMs from pool - you can start
 > them once with an admin for the sysprep to happen, then shut them 
down.

 > admin launch of VMs doesn't create a stateless snapshot and
 > manipulates the VM itself.

This raises some questions. I'd love to understand this better.

He's asked me to cross this conversation onto the Users list now.

1. My understanding is that a Pool clones VMs on demand from a template.
So how does the admin "launch" the template? I thought the only way to
exercise a pool is from the User Portal. Is it sufficient to do that as
Admin? I thought the persistence only came when launching a VM from the
Admin Portal.


The VM is created as part of pool creation.
an admin can start the VM from webadmin as well.


OK so there seems to be a serious scalability issue here. It is not 
unusual for a large VDI deployment to utilize hundreds of VMs. From what 
you're telling me, if we don't want users to experience the unsealing 
delay (which takes several minutes) every time, an admin would have to 
start all of those VMs after creating the Pool, and then cleanly shut 
them all down again once they'd all finished their unsealing process. 
Either that, or set them all to auto-start, but this puts unnecessary 
load on the host since they have to unseal after snapshot-revert every 
time they come up.


There is perhaps an attractive feature that might help here. At the 
moment you can set an absolute number of "auto-start" VMs for the pool. 
I think what's needed is something more like an HA "standby" model which 
is applied to hosts and disks - you would like a certain number of 
not-yet-allocated, auto-started ("waiting-auto-started"?) VMs to be in 
the pool at all times (unless of course the pool is exhausted). In other 
words, say you have a large pool of VMs, and you set a 
waiting-auto-started count to 10. If 20 users connect to VMs, 10 more 
would be started up and waiting in the pool.  You could shut down/return 
any extras as VMs are returned to the pool (optionally?). The goal here 
is to eat the startup delays in advance to have ready-to-use VMs 
available for users at all times, without needing to start them all 
(which would consume excessive host resources). I think this would be 
more valuable than a fixed count, although maybe that's helpful in some 
use cases.


unless admin will flag the runvm action with stateless, it will change 
the VM.
i.e., the admin will be starting the VMs created in the pool, not the 
tempalte itself.


Excellent - so that's what the "stateless" radiobox is for. :)

caveat: for windows VMs, if the VM is doing the sysprep by the admin 
(persistently), you need to change the domain policy to avoid the 
computer account password change (will cause the VM to lose 
connectivty to the domain after 90 days).


hence the auto starting VMs is better for some use cases.



2. My understanding of "sealing" a system is that this depersonalizes it
- e.g. removes hostname, prepares network for reinitialization, etc. And
that the next time the system boots up it re-personalizes. So if one
were to restart it, even as admin, this would reverse the sealing
process, which would seem to make sealing in the first place pointless.

What am I missing? At the moment I don't see the point of sealing a VM
before putting it into the Pool (assuming you're using DHCP, anyway).
What happens if you don't?


its considered microsoft best practice. there is also a security 
concern if the VMs are not part of a domain, since they would have the 
same SID.


other caveats may apply, but may be good enough for your use case.


I see that makes sense. I was also wondering from a security 
perspective. I know that when Linux first boots up it creates 
public/private RSA keys, presumably for things like filesystem 
encryption. So it would be bad to clone a VM that had already generated 
a (single) private key. I wouldn't be surprised if Windows does 
something similar at first OS boot.


-Bob

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] from irc

[Bob Doolittle]

Thanks, this answers a lot of questions Einav.

Let's be careful about terminology, however. "sealing" in this context 
is the process of un-sysconfig'ing (aka depersonalizing) the machine to 
make it generic before cloning/copying. After unconfiguring, the next 
time the system boots up it goes through sysconfig again. For Windows 
this involves the 'sysprep' command. For Linux it involves the 
/.unconfigure file. I'm still trying to understand the value of sealing 
in the VDI context, and what adverse effects would be if we didn't take 
this step.


So in this context the term "sealing" is quite different from 
snapshot/restore.


I'll respond more in the next mail (to Itamar).

Thanks again,
   Bob

On 11/15/2013 09:28 AM, Einav Cohen wrote:

Hi Bob,


- Original Message -
From: "Bob Doolittle" 
Sent: Friday, November 15, 2013 8:41:47 AM

Hi,

I had a question on IRC regarding sysprep/sealing of Windows VMs and use
in Pools. Basically, if you follow the Quick Start Guide, it says to
seal the VM and shut it down before making the Template.

My problem with this is that when you start a VM from the Pool, it takes
forever to unseal - i.e. to repersonalize itself. That's a bad
experience from a VDI perspective - you want the user to get a desktop
they can start using ASAP.

Itamar responded to me directly via e-mail:

  > bobdrad: on your question of windows VMs from pool - you can start
  > them once with an admin for the sysprep to happen, then shut them down.
  > admin launch of VMs doesn't create a stateless snapshot and
  > manipulates the VM itself.

This raises some questions. I'd love to understand this better.

He's asked me to cross this conversation onto the Users list now.

1. My understanding is that a Pool clones VMs on demand from a template.
So how does the admin "launch" the template? I thought the only way to
exercise a pool is from the User Portal. Is it sufficient to do that as
Admin? I thought the persistence only came when launching a VM from the
Admin Portal.

unless something dramatic has changed lately in this feature's
implementation: AFAIK, the Pool doesn't clone VMs from a Template on
demand; the Pool VMs are provisioned in advance (upon Pool creation),
which allows, of course, the admin to access them, launch them, prepare
them for usage, etc, as Itamar explained.


2. My understanding of "sealing" a system is that this depersonalizes it
- e.g. removes hostname, prepares network for reinitialization, etc. And
that the next time the system boots up it re-personalizes. So if one
were to restart it, even as admin, this would reverse the sealing
process, which would seem to make sealing in the first place pointless.

What am I missing? At the moment I don't see the point of sealing a VM
before putting it into the Pool (assuming you're using DHCP, anyway).
What happens if you don't?

there is a difference between the way that an admin runs the VM and the
way that a user runs the VM (by allocating himself a VM from the pool
via his user portal): The admin typically runs the VM like any "regular"
VM, i.e., not in a "stateless" mode, which ensures that all changes
done on the guest will be persisted for the VMs next run.
This is necessary for the initial OS installation of the VM, for example,
initial configuration, application installation, etc.

When the user runs the VM (again - by allocating himself a VM from the
pool via the user portal), the VM actually runs in a stateless mode:
right before the VM is run, a snapshot is taken from it; once the VM is
being shutdown/returned to the pool, the VM reverts itself to that
snapshot, clearing all changes done in this run (but not changes that
the admin did in the initial run! those are "sealed" within the VM),
leaving the VM and ready for the next allocation.


Thanks,
  Bob

P.S. I note the behavior of Fedora vs RHEL 6 is quite different in this
regard. If you follow the "sealing" process on the Quick Start page for
Fedora it seems to have no visible effect, but on RHEL 6 it puts you
through a re-personalization dialog which is rather extensive (and
again, not really suitable for VDI use).
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] EL5 support for VirtIO SCSI?

[Paolo Bonzini]

Il 15/11/2013 09:30, Stefan Hajnoczi ha scritto:
>> > Thanks.  I understand qemu supports other scsi adapters however.  See this 
>> > post from earlier this year.
>> > That post makes reference to the following hbas: auto, buslogic, ibmvscsi. 
>> > lsilogic, lsisas1068, lsisas1078, virtio-scsi, vmpvscsi.
> From an upstream QEMU perspective, the HBAs that ought to work on x86_64
> guests are virtio-scsi, lsisas1078, and vmpvscsi.

I think vmpvscsi is not supported for QEMU in libvirt.  It would be a
very simple patch, I may get round to it before Christmas...

Paolo
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[Users] Change data domain

[Juan Pablo Lorier]

Hi,

I'm changing the master domain to a new added one. I've placed the old
in maintenance and ovirt made the change of master to the new one. The
thing is that now that I have both active, I get this error:

Sync Error on Master Domain between Host Dell2 and oVirt Engine. Domain:
IBM3300 is marked as Master in oVirt Engine database but not on the
Storage side. Please consult with Support on how to fix this issue.

How can I fix this?

Another thing, is there a way of having two iscsi data domains mirrored?
To have a sort of high availability in the data domains.
Regards,
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Low quality of el6 vdsm rpms

[Sven Kieske]

Ah, thanks for the hint, the "fixed bugs" list is quite long, so I
didn't read everything, I will give this some testing if
it is already in 3.3.1-2 beta (not mentioned in release notes?), but I
think it will work, this release seems very stable and focused to me.

OT: Why is there no announcement for beta releases on the announcement
list? To keep traffic low? The last message is from 16.10.2013 so
you shouldn't be feared to "spam" this list (imho). ;)

Am 15.11.2013 18:05, schrieb Douglas Schilling Landgraf:
> Hi Sven,
> 
> On 11/15/2013 05:42 AM, Sven Kieske wrote:
>> Hi,
>>
>> is there any chance that the fixes for this bug
>> get into 3.3.x or at least 3.4 ?
>> I see no targeted Milestone for it, and this is something
>> I would consider a core feature, which should "just work".
> 
> It's targeted for 3.3.1 and it shows in release notes for VDSM:
> http://www.ovirt.org/OVirt_3.3.1_release_notes

-- 
Mit freundlichen Grüßen / Regards

Sven Kieske

Systemadministrator
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 6
32339 Espelkamp
T: +49-5772-293-100
F: +49-5772-293-333
https://www.mittwald.de
Geschäftsführer: Robert Meyer
St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen
Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] from irc

[Einav Cohen]

Hi Bob,

> - Original Message -
> From: "Bob Doolittle" 
> Sent: Friday, November 15, 2013 8:41:47 AM
> 
> Hi,
> 
> I had a question on IRC regarding sysprep/sealing of Windows VMs and use
> in Pools. Basically, if you follow the Quick Start Guide, it says to
> seal the VM and shut it down before making the Template.
> 
> My problem with this is that when you start a VM from the Pool, it takes
> forever to unseal - i.e. to repersonalize itself. That's a bad
> experience from a VDI perspective - you want the user to get a desktop
> they can start using ASAP.
> 
> Itamar responded to me directly via e-mail:
> 
>  > bobdrad: on your question of windows VMs from pool - you can start
>  > them once with an admin for the sysprep to happen, then shut them down.
>  > admin launch of VMs doesn't create a stateless snapshot and
>  > manipulates the VM itself.
> 
> This raises some questions. I'd love to understand this better.
> 
> He's asked me to cross this conversation onto the Users list now.
> 
> 1. My understanding is that a Pool clones VMs on demand from a template.
> So how does the admin "launch" the template? I thought the only way to
> exercise a pool is from the User Portal. Is it sufficient to do that as
> Admin? I thought the persistence only came when launching a VM from the
> Admin Portal.

unless something dramatic has changed lately in this feature's 
implementation: AFAIK, the Pool doesn't clone VMs from a Template on 
demand; the Pool VMs are provisioned in advance (upon Pool creation), 
which allows, of course, the admin to access them, launch them, prepare 
them for usage, etc, as Itamar explained.

> 
> 2. My understanding of "sealing" a system is that this depersonalizes it
> - e.g. removes hostname, prepares network for reinitialization, etc. And
> that the next time the system boots up it re-personalizes. So if one
> were to restart it, even as admin, this would reverse the sealing
> process, which would seem to make sealing in the first place pointless.
> 
> What am I missing? At the moment I don't see the point of sealing a VM
> before putting it into the Pool (assuming you're using DHCP, anyway).
> What happens if you don't?

there is a difference between the way that an admin runs the VM and the 
way that a user runs the VM (by allocating himself a VM from the pool 
via his user portal): The admin typically runs the VM like any "regular" 
VM, i.e., not in a "stateless" mode, which ensures that all changes 
done on the guest will be persisted for the VMs next run. 
This is necessary for the initial OS installation of the VM, for example, 
initial configuration, application installation, etc. 

When the user runs the VM (again - by allocating himself a VM from the 
pool via the user portal), the VM actually runs in a stateless mode: 
right before the VM is run, a snapshot is taken from it; once the VM is 
being shutdown/returned to the pool, the VM reverts itself to that 
snapshot, clearing all changes done in this run (but not changes that 
the admin did in the initial run! those are "sealed" within the VM), 
leaving the VM and ready for the next allocation. 

> 
> Thanks,
>  Bob
> 
> P.S. I note the behavior of Fedora vs RHEL 6 is quite different in this
> regard. If you follow the "sealing" process on the Quick Start page for
> Fedora it seems to have no visible effect, but on RHEL 6 it puts you
> through a re-personalization dialog which is rather extensive (and
> again, not really suitable for VDI use).
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
> 
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Low quality of el6 vdsm rpms

[Douglas Schilling Landgraf]

Hi Sven,

On 11/15/2013 05:42 AM, Sven Kieske wrote:

Hi,

is there any chance that the fixes for this bug
get into 3.3.x or at least 3.4 ?
I see no targeted Milestone for it, and this is something
I would consider a core feature, which should "just work".


It's targeted for 3.3.1 and it shows in release notes for VDSM:
http://www.ovirt.org/OVirt_3.3.1_release_notes



--
Cheers
Douglas
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] avoiding sysprep per boot with pooled vms (was from irc)

[Itamar Heim]

On 11/15/2013 08:41 AM, Bob Doolittle wrote:

Hi,

I had a question on IRC regarding sysprep/sealing of Windows VMs and use
in Pools. Basically, if you follow the Quick Start Guide, it says to
seal the VM and shut it down before making the Template.

My problem with this is that when you start a VM from the Pool, it takes
forever to unseal - i.e. to repersonalize itself. That's a bad
experience from a VDI perspective - you want the user to get a desktop
they can start using ASAP.


that's why Pools have "auto start VMs" - you can define you want the 
pool to always keep X VMs up and running and ready for the users.




Itamar responded to me directly via e-mail:

 > bobdrad: on your question of windows VMs from pool - you can start
 > them once with an admin for the sysprep to happen, then shut them down.
 > admin launch of VMs doesn't create a stateless snapshot and
 > manipulates the VM itself.

This raises some questions. I'd love to understand this better.

He's asked me to cross this conversation onto the Users list now.

1. My understanding is that a Pool clones VMs on demand from a template.
So how does the admin "launch" the template? I thought the only way to
exercise a pool is from the User Portal. Is it sufficient to do that as
Admin? I thought the persistence only came when launching a VM from the
Admin Portal.


The VM is created as part of pool creation.
an admin can start the VM from webadmin as well.
unless admin will flag the runvm action with stateless, it will change 
the VM.
i.e., the admin will be starting the VMs created in the pool, not the 
tempalte itself.


caveat: for windows VMs, if the VM is doing the sysprep by the admin 
(persistently), you need to change the domain policy to avoid the 
computer account password change (will cause the VM to lose connectivty 
to the domain after 90 days).


hence the auto starting VMs is better for some use cases.



2. My understanding of "sealing" a system is that this depersonalizes it
- e.g. removes hostname, prepares network for reinitialization, etc. And
that the next time the system boots up it re-personalizes. So if one
were to restart it, even as admin, this would reverse the sealing
process, which would seem to make sealing in the first place pointless.

What am I missing? At the moment I don't see the point of sealing a VM
before putting it into the Pool (assuming you're using DHCP, anyway).
What happens if you don't?


its considered microsoft best practice. there is also a security concern 
if the VMs are not part of a domain, since they would have the same SID.


other caveats may apply, but may be good enough for your use case.



Thanks,
 Bob

P.S. I note the behavior of Fedora vs RHEL 6 is quite different in this
regard. If you follow the "sealing" process on the Quick Start page for
Fedora it seems to have no visible effect, but on RHEL 6 it puts you
through a re-personalization dialog which is rather extensive (and
again, not really suitable for VDI use).
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] from irc

[Bob Doolittle]

Hi,

I had a question on IRC regarding sysprep/sealing of Windows VMs and use 
in Pools. Basically, if you follow the Quick Start Guide, it says to 
seal the VM and shut it down before making the Template.


My problem with this is that when you start a VM from the Pool, it takes 
forever to unseal - i.e. to repersonalize itself. That's a bad 
experience from a VDI perspective - you want the user to get a desktop 
they can start using ASAP.


Itamar responded to me directly via e-mail:

> bobdrad: on your question of windows VMs from pool - you can start
> them once with an admin for the sysprep to happen, then shut them down.
> admin launch of VMs doesn't create a stateless snapshot and
> manipulates the VM itself.

This raises some questions. I'd love to understand this better.

He's asked me to cross this conversation onto the Users list now.

1. My understanding is that a Pool clones VMs on demand from a template. 
So how does the admin "launch" the template? I thought the only way to 
exercise a pool is from the User Portal. Is it sufficient to do that as 
Admin? I thought the persistence only came when launching a VM from the 
Admin Portal.


2. My understanding of "sealing" a system is that this depersonalizes it 
- e.g. removes hostname, prepares network for reinitialization, etc. And 
that the next time the system boots up it re-personalizes. So if one 
were to restart it, even as admin, this would reverse the sealing 
process, which would seem to make sealing in the first place pointless.


What am I missing? At the moment I don't see the point of sealing a VM 
before putting it into the Pool (assuming you're using DHCP, anyway). 
What happens if you don't?


Thanks,
Bob

P.S. I note the behavior of Fedora vs RHEL 6 is quite different in this 
regard. If you follow the "sealing" process on the Quick Start page for 
Fedora it seems to have no visible effect, but on RHEL 6 it puts you 
through a re-personalization dialog which is rather extensive (and 
again, not really suitable for VDI use).

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Installation of self hosted engine

[Doron Fediuck]

Hi Andrew, 
We're stabilizing it these days. 
It should be ready for 3.3.3 so please keep tracking, as we may call volunteers 
for hosted engine special test day.

Doron

 הודעה מקורית 
מאת: Andrew Lau  
תאריך:  
אל:  
עותק: users  
נושא: Re: [Users] Installation of self hosted engine 
 
Is the hosted-engine considered usable and safe now? I didn't hear any news 
about it..

On Wed, Nov 13, 2013 at 8:07 PM, Pavel Gandalipov  wrote:
Thank you all, Yedidya, Sandro,Sander. Your advices helped me to go farther in 
my project.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Backup export domain

[Saša Friedrich (BiTLAB)]

Uf... I don't know how I missed that...


Works like a charm


tnx!


On 11/14/2013 06:30 AM, "Saša Friedrich (BiTLAB)" wrote:

/  correct me if i'm wrong...

/>/
/>/  1. detach my export domain
/>/  2. copy directory structure from nfs export to external disk
/>/  3. reinstall ovirt system
/>/  4. copy directory structure from external disk to new nfs export
/>/  5. create new export domain in engine
/>/
/>/
/>/  ...but...
/>/
/>/  on #5 step my new engine returns: "Error while executing action New NFS
/>/  Storage Domain: Error in creating a Storage Domain. The selected storage
/>/  path is not empty (probably contains another Storage Domain). Either
/>/  remove the existing Storage Domain from this path, or change the Storage
/>/  path)."
/>/
/>/
/>/  What am I doing wrong?
/>/
/
don't try to create a new export domain, rather import an existing one
(import domain button, not new domain button)


/

/>/
/>/  On 14. 11. 2013 11:17, piše Itamar Heim:
/>>/  On 11/14/2013 04:59 AM, "Saša Friedrich (BiTLAB)" wrote:
/>>>/  Hi,
/>>>/
/>>>/  is there a way to backup export domain (exported vm-s and templates),
/>>>/  reinstall complete oVirt sistem (engine, hosts) and restore those
/>>>/  backups?
/>>>/
/>>/
/>>/  sure. you can back it up, then restore in another engine.
/>>/  you can also do this piecemeal at vm level.
/>>/
/>>/  one note - if you back it up while its attached to an engine, you will
/>>/  need to edit its meta data file to remove the association to allow the
/>>/  other engine to connect it to the new pool for restore.
/>


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Low quality of el6 vdsm rpms

[Sven Kieske]

Hi,

is there any chance that the fixes for this bug
get into 3.3.x or at least 3.4 ?
I see no targeted Milestone for it, and this is something
I would consider a core feature, which should "just work".

Am 14.11.2013 21:35, schrieb Douglas Schilling Landgraf:
> Hello Sven,
> 
> On 11/13/2013 03:39 AM, Sven Kieske wrote:
>> Hi,
>>
>> can someone elaborate on this fix?
>>
> 
> Sure. The report it available at:
> https://bugzilla.redhat.com/show_bug.cgi?id=1025845

-- 
Mit freundlichen Grüßen / Regards

Sven Kieske

Systemadministrator
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 6
32339 Espelkamp
T: +49-5772-293-100
F: +49-5772-293-333
https://www.mittwald.de
Geschäftsführer: Robert Meyer
St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen
Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] [QE] ovirt-engine 3.3.1-2 published in beta repository

[Sven Kieske]

Hi,

we already tested this:

{{BZ|1023739}} - Cannot create same Local SD path on different Hosts

works for us! (already reported in BZ)

Bug 1029584 is also fixed (create vm does not work with display protocol
vnc and OS linux)

Am 15.11.2013 08:39, schrieb Sandro Bonazzola:
> Hi,
> ovirt-engine 3.3.1-2 has been published in beta repository and is ready for 
> testing.
> 
> Bugs fixed in this version:
> {{BZ|1023739}} - Cannot create same Local SD path on different Hosts
> {{BZ|1009391}} - Change multi-monitor setting in VM Console option dialog for 
> 3.2 compatible cluster
> {{BZ|1025313}} - support relative answer file name
> {{BZ|1028748}} - answer files are world-readable and contain passwords
> 
> Other fixes:
> Fixed a bug which caused failure to run VM with VNC console
> 
> 

-- 
Mit freundlichen Grüßen / Regards

Sven Kieske

Systemadministrator
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 6
32339 Espelkamp
T: +49-5772-293-100
F: +49-5772-293-333
https://www.mittwald.de
Geschäftsführer: Robert Meyer
St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen
Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Problems with first time oVirt installation

[Sandro Bonazzola]

Il 15/11/2013 01:40, Itamar Heim ha scritto:
> On 11/14/2013 07:17 PM, Lindsay Mathieson wrote:
>> On 15 November 2013 09:44, Itamar Heim > > wrote:
>>
>> On 11/14/2013 03:51 PM, Lindsay Mathieson wrote:
>>
>> Hi all - trying to evaluate ovirt and having real problems with
>> getting a self
>> contained install running.
>>
>> I've followed the Quickstart guide at:
>>
>> any errors in the setup logs? in engine logs?
>>
>>
>>
>> Could you point me to the log locations?
>>
>> thanks
>>
>> -- 
>> Lindsay
> 
> i don't remember them of the top of my head, but you can run the 
> engine-log-collector and it will collec them for you.
> sandro - any wiki on troubleshooting/log locations?

About troubleshooting we have:

http://www.ovirt.org/Troubleshooting

About logs we have:

http://www.ovirt.org/Vdsm_Log_Files

-- 
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] [Engine-devel] [QE] ovirt-engine 3.3.1-2 published in beta repository

[Sandro Bonazzola]

Il 15/11/2013 09:26, Sandro Bonazzola ha scritto:
> Il 15/11/2013 08:39, Sandro Bonazzola ha scritto:
>> Hi,
>> ovirt-engine 3.3.1-2 has been published in beta repository and is ready for 
>> testing.
>>
>> Bugs fixed in this version:
>> {{BZ|1023739}} - Cannot create same Local SD path on different Hosts
>> {{BZ|1009391}} - Change multi-monitor setting in VM Console option dialog 
>> for 3.2 compatible cluster
>> {{BZ|1025313}} - support relative answer file name
>> {{BZ|1028748}} - answer files are world-readable and contain passwords
>>
>> Other fixes:
>> Fixed a bug which caused failure to run VM with VNC console
> 
> This is a list of bugs on oVirt QA that should be verified with beta 
> repository: http://red.ht/1gQAdEo
> If you're going to verify one of those bugs, please set yourself as QA contact
> and add yourself to http://www.ovirt.org/Testing/Ovirt_3.3.1_testing
> Thanks,

ovirt-engine 3.3.1-2 will stay in beta repository for a few days.
If no blockers will be found, we're planning to release to GA next week on 
Tuesday.


-- 
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Trusted Pools and CentOS 6 packages

[Wei, Gang]

So you will not see below error after copying the .cer & .jks again, right?

### ecStorage = NVRAM###
Performing TPM provisioning...FAILED
javax.xml.ws.WebServiceException: Failed to access the WSDL at:
https://seoul:8443/HisPrivacyCAWebServices2/hisPrivacyCAWebService2FactorySe
rvice?wsdl. It failed with: 
Connection refused.

As to below errors:

Performing HIS identity provisioning...FAILED
java.util.NoSuchElementException
at java.util.StringTokenizer.nextToken(StringTokenizer.java:349)
at
gov.niarl.his.privacyca.TpmModule.executeVer2Command(TpmModule.java:215)
at
gov.niarl.his.privacyca.TpmModule.collateIdentityRequest(TpmModule.java:292)
at
gov.niarl.his.privacyca.HisIdentityProvisioner.main(HisIdentityProvisioner.j
ava:225)
Failed to receive AIC from Privacy CA, error 1
Registering identity with server...FAILED
java.io.FileNotFoundException: /usr/share/oat-client/aik.cer (No such file
or directory)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.(FileInputStream.java:137)
at java.io.FileInputStream.(FileInputStream.java:96)
at gov.niarl.his.privacyca.TpmUtils.certFromFile(TpmUtils.java:612)
at
gov.niarl.his.privacyca.HisRegisterIdentity.main(HisRegisterIdentity.java:99
)
Failed to register identity with appraiser, error 1

Missing of aik.cer is the subsequence of HIS identity provisioning failure.
The key is:
java.util.NoSuchElementException
at java.util.StringTokenizer.nextToken(StringTokenizer.java:349)
at
gov.niarl.his.privacyca.TpmModule.executeVer2Command(TpmModule.java:215)

Which is mostly caused by incorrect tpm owner auth. This is actually the
issue occurred in your first try. So I doubt the oat-client rpm you
reinstalled is still the old one in your local cache.

Please try to uninstall oat-client, yum clean, then yum install oat-client,
and then try again.

Thanks
Jimmy


> -Original Message-
> From: Nicolae Paladi [mailto:n.pal...@gmail.com]
> Sent: Friday, November 15, 2013 4:08 PM
> To: Wei, Gang
> Cc: Doron Fediuck; users@ovirt.org
> Subject: Re: [Users] Trusted Pools and CentOS 6 packages
> 
> Hi,
> 
> I have done that and reran provisioner.sh with the same result.
> 
> As I understand, I am copying the files _PrivacyCA.cer_ and
_TrustStore.jks_ to
> /usr/share/oat-client,
> while the java error complains about the missing file _aik.cer_, as
follows:
> 
> java.io.FileNotFoundException: /usr/share/oat-client/aik.cer (No such file
or
> directory)
> at java.io.FileInputStream.open(Native Method)
> at java.io.FileInputStream.(FileInputStream.java:146)
> at java.io.FileInputStream.(FileInputStream.java:101)
> at gov.niarl.his.privacyca.TpmUtils.certFromFile(TpmUtils.java:612)
> at
gov.niarl.his.privacyca.HisRegisterIdentity.main(HisRegisterIdentity.java:99
)
> 
> is the file _aik.cer_ supposed to be generated at some point here?
> 
> Just to clarify, I am using CentOS 6.4, TruSerS and tpm-tools.
> 
> Cheers,
> /Nicolae.
> 
> 
> 
> On 15 November 2013 03:23, Wei, Gang  wrote:
> 
> 
>   So, just as what I suggested in last mail, please copy the files
from server
> to client again and run provisioner.sh:
> 
> 
> 
>   1.3.1 copy PrivacyCA.cer and TrustStore.jks from appraiser to
client.
> 
>   Copy :/var/lib/oat-appraiser/ClientFiles/PrivacyCA.cer
> to :/usr/share/oat-client/
> 
>   Copy :/var/lib/oat-appraiser/ClientFiles/TrustStore.jks
> to :/usr/share/oat-client/
> 
>   Notes: please repeat above steps in case you have re-deployed your
oat
> appraiser.
> 
> 
> 
>   Thanks
> 
>   Jimmy
> 
> 
> 
>   From: Nicolae Paladi [mailto:n.pal...@gmail.com]
>   Sent: Thursday, November 14, 2013 6:30 PM
> 
> 
>   To: Wei, Gang
>   Cc: Doron Fediuck; users@ovirt.org
>   Subject: Re: [Users] Trusted Pools and CentOS 6 packages
> 
> 
> 
> 
> 
>   Hi,
> 
> 
> 
> 
> 
>   As far as I see, port 8443 is not occupied and tomcat6 is running:
> 
> 
> 
>   root@host /usr/share/oat-client/script # netstat -anp | grep 8443
> 
>   root@host /usr/share/oat-client/script # service tomcat6 status
> 
>   tomcat6 (pid 30950) is running...  [  OK  ]
> 
> 
> 
> 
> 
>   Also, just in case, I've checked if disabling iptables helps, and it
doesn't;
> 
> 
> 
> 
> 
>   In the error trace, there is a line:
> 
>   java.io.FileNotFoundException: /usr/share/oat-client/aik.cer (No
such file
> or directory)
> 
> 
> 
>   and indeed, there is not file aik.cer at
/usr/share/oat-client/aik.cer; when
> is it supposed to
> 
>   be generated?
> 
> 
> 
>   cheers,
> 
>   /Nicolae
> 
> 
> 
> 
> 
>   On 14 November 2013 04:32, Wei, Gang  wrote:
> 
>   And you need to copy files from server to client before you try to
run
>   provisioner.sh every time you run OAT_configure.sh again.
> 
>   Jimmy
> 
> 
> 
>   > -Original Message-
>   > From: Wei, Gang
>   > Sent: Thu

Re: [Users] EL5 support for VirtIO SCSI?

[Stefan Hajnoczi]

On Thu, Nov 14, 2013 at 06:09:13AM -0800, Paul Jansen wrote:
> Thanks.  I understand qemu supports other scsi adapters however.  See this 
> post from earlier this year.
> That post makes reference to the following hbas: auto, buslogic, ibmvscsi. 
> lsilogic, lsisas1068, lsisas1078, virtio-scsi, vmpvscsi.

>From an upstream QEMU perspective, the HBAs that ought to work on x86_64
guests are virtio-scsi, lsisas1078, and vmpvscsi.

The lsilogic adapter is known to be buggy/incomplete.  ibmvscsi is for
POWER, not x86_64.

That said, I'd still only rely on virtio-scsi for production systems.
I am confident there is development effort behind virtio-scsi to fix
bugs and so on.  With the other adapters it's more of a best-effort
scenario.

Stefan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] [QE] ovirt-engine 3.3.1-2 published in beta repository

[Sandro Bonazzola]

Il 15/11/2013 08:39, Sandro Bonazzola ha scritto:
> Hi,
> ovirt-engine 3.3.1-2 has been published in beta repository and is ready for 
> testing.
> 
> Bugs fixed in this version:
> {{BZ|1023739}} - Cannot create same Local SD path on different Hosts
> {{BZ|1009391}} - Change multi-monitor setting in VM Console option dialog for 
> 3.2 compatible cluster
> {{BZ|1025313}} - support relative answer file name
> {{BZ|1028748}} - answer files are world-readable and contain passwords
> 
> Other fixes:
> Fixed a bug which caused failure to run VM with VNC console

This is a list of bugs on oVirt QA that should be verified with beta 
repository: http://red.ht/1gQAdEo
If you're going to verify one of those bugs, please set yourself as QA contact
and add yourself to http://www.ovirt.org/Testing/Ovirt_3.3.1_testing
Thanks,

-- 
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Trusted Pools and CentOS 6 packages

[Nicolae Paladi]

Hi,

I have done that and reran provisioner.sh with the same result.

As I understand, I am copying the files _PrivacyCA.cer_ and
_TrustStore.jks_ to /usr/share/oat-client,
while the java error complains about the missing file _aik.cer_, as follows:

*java.io.FileNotFoundException: /usr/share/oat-client/aik.cer* (No such
file or directory)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.(FileInputStream.java:146)
at java.io.FileInputStream.(FileInputStream.java:101)
at gov.niarl.his.privacyca.TpmUtils.certFromFile(TpmUtils.java:612)
at
gov.niarl.his.privacyca.HisRegisterIdentity.main(HisRegisterIdentity.java:99)

is the file _aik.cer_ supposed to be generated at some point here?

Just to clarify, I am using CentOS 6.4, TruSerS and tpm-tools.

Cheers,
/Nicolae.



On 15 November 2013 03:23, Wei, Gang  wrote:

> So, just as what I suggested in last mail, please copy the files from
> server to client again and run provisioner.sh:
>
>
>
> *1.3.1 copy PrivacyCA.cer and TrustStore.jks from appraiser to client.*
>
> Copy :/var/lib/oat-appraiser/ClientFiles/PrivacyCA.cer to
> :/usr/share/oat-client/
>
> Copy :/var/lib/oat-appraiser/ClientFiles/TrustStore.jks to
> :/usr/share/oat-client/
>
> *Notes: please repeat above steps in case you have re-deployed your oat
> appraiser.*
>
>
>
> Thanks
>
> Jimmy
>
>
>
> *From:* Nicolae Paladi [mailto:n.pal...@gmail.com]
> *Sent:* Thursday, November 14, 2013 6:30 PM
>
> *To:* Wei, Gang
> *Cc:* Doron Fediuck; users@ovirt.org
> *Subject:* Re: [Users] Trusted Pools and CentOS 6 packages
>
>
>
> Hi,
>
>
>
>
>
> As far as I see, port 8443 is not occupied and tomcat6 is running:
>
>
>
> root@host /usr/share/oat-client/script # netstat -anp | grep 8443
>
> root@host /usr/share/oat-client/script # service tomcat6 status
>
> tomcat6 (pid 30950) is running...  [  OK  ]
>
>
>
>
>
> Also, just in case, I've checked if disabling iptables helps, and it
> doesn't;
>
>
>
>
>
> In the error trace, there is a line:
>
> *java.io.FileNotFoundException: /usr/share/oat-client/aik.cer (No such
> file or directory)*
>
>
>
> and indeed, there is not file aik.cer at /usr/share/oat-client/aik.cer;
> when is it supposed to
>
> be generated?
>
>
>
> cheers,
>
> /Nicolae
>
>
>
>
>
> On 14 November 2013 04:32, Wei, Gang  wrote:
>
> And you need to copy files from server to client before you try to run
> provisioner.sh every time you run OAT_configure.sh again.
>
> Jimmy
>
>
>
> > -Original Message-
> > From: Wei, Gang
> > Sent: Thursday, November 14, 2013 11:26 AM
> > To: Nicolae Paladi
> > Cc: Doron Fediuck; users@ovirt.org; Wei, Gang
> > Subject: RE: [Users] Trusted Pools and CentOS 6 packages
> >
> > Can you try netstat -anp | grep 8443? Maybe it is occupied by apache.
> >
> > Meanwhile check whether tomcat is up.
> >
> > Jimmy
> >
> >
> > > -Original Message-
> > > From: Nicolae Paladi [mailto:n.pal...@gmail.com]
> > > Sent: Wednesday, November 13, 2013 10:43 PM
> > > To: Wei, Gang
> > > Cc: Doron Fediuck; users@ovirt.org
> > > Subject: Re: [Users] Trusted Pools and CentOS 6 packages
> > >
> > > Hi,
> > >
> > > I am using port 8443, since no other process -- as far as I know -- is
> > using it;
> > >
> > > below you will find all of the requested configuration files:
> > >
> > > Contents of /etc/oat_client/*:
> > > log4j.properties: http://pastebin.com/MQLM68vs
> > > OAT.properties: http://pastebin.com/LwHihxah
> > > OATprovisioner.properties: http://pastebin.com/0x5TShtZ
> > > TPMModule.properties: http://pastebin.com/hvw9gfRE
> > >
> > >
> > > server.xml: http://pastebin.com/VZ9Vk6iC
> > > OAT_client.sh: http://pastebin.com/St4yCGcF
> > >
> > > provisioner.sh: http://pastebin.com/RedqQt8V
> > >
> > >
> > > cheers,
> > > /Nicolae.
> > >
> > >
> > > On 13 November 2013 14:47, Wei, Gang  wrote:
> > >
> > >
> > > This time it failed earlier. Looks like the PCA webservice2 was not
> > > listening on 8443 port. Have you replaced the port 8443 with 8442
> in
> > > server
> > > side ($TOMCAT_HOME/conf/server.xml) but not change it in client
> side
> > > (/usr/share/oat-client/script/OAT_client.sh)? Or the 8443 port is
> > occupied
> > > by another app?
> > >
> > > Please copy the content from your current server.xml,
> OAT_client.sh,
> > > provisioner.sh and /etc/oat-client/* into the content of your reply
> > for
> > > analysis. (don't attach *.sh as attachments, that will get filtered
> > by my
> > > company's mailing system).
> > >
> > > Thanks
> > > Jimmy
> > >
> > >
> > >
> > > > -Original Message-
> > > > From: Nicolae Paladi [mailto:n.pal...@gmail.com]
> > > > Sent: Wednesday, November 13, 2013 7:01 PM
> > > > To: Wei, Gang
> > > > Cc: Doron Fediuck; users@ovirt.org
> > > > Subject: Re: [Users] Trusted Pools and CentOS 6 packages
> > > >
> > >
> > > > Hi,
> > > >
> > > > thank you for the feedback;
> > > > I've gone through the steps again, but