Re: [ovirt-users] failing update ovirt-engine on centos 7

2016-05-25 Thread Yedidyah Bar David
On Wed, May 25, 2016 at 9:11 PM, Fabrice Bacchella
 wrote:
>
> Le 25 mai 2016 à 17:25, Kapetanakis Giannis  a
> écrit :
>
> On 25/05/16 17:59, Fabrice Bacchella wrote:
>
> I have an dedicated machin to run ovirt-engine (not hosted). It's an up to
> date centos 7.2.1511
>
> I installed ovirt 3.6.6 a few weeks ago (May 10 17:56:44 tells me yum.log)
>
> Now, I'm trying a full yum update and getting :
> # yum update
> 
>
> Error: Package: ovirt-engine-tools-3.6.5.3-1.el7.centos.noarch (@ovirt-3.6)
>Requires: ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
>Removing: ovirt-engine-tools-backup-3.6.5.3-1.el7.centos.noarch
> (@ovirt-3.6)
>ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
>Updated By: ovirt-engine-tools-backup-3.6.6.2-1.el7.centos.noarch
> (ovirt-3.6)
>ovirt-engine-tools-backup = 3.6.6.2-1.el7.centos
>
>
>
> Follow 3.6.6 release notes to update:
> https://www.ovirt.org/release/3.6.6/
>
>
> yum install http://resources.ovirt.org/pub/yum-repo/ovirt-release36.rpm
> yum update ovirt\*setup\*
> and then run
> engine-setup to update the rest of the packages.
>
>
> I have seen this doc.
>
> It updates a few components and what about the others ? The readme talk
> about running engine-setup, but not that it will updates other packages. I
> thought that ovirt-engine is for engine setup, not upgrading.

Right.

After engine-setup finishes, you should 'yum update' to update the rest.

And BTW, this specific issue about tools-backup was fixed in [1]. So a
future 'yum update' should not emit this error - although the update
sequence is still the same - add repos, update setup packages, engine-setup,
update the rest.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1321249
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] On 3.6.6, tried doing a live VM storage migration... didn't work

2016-05-25 Thread Christopher Cox
In our old 3.4 ovirt, I know I've migrated storage on live VMs and everything 
seemed to work.


However on 3.6.6, I tried this and I saw the warning about moving storage on a 
live VM (it wasn't doing much of anything) and I went ahead and migrated the 
storage from one storage domain to another.   But when it was through, even 
though the VM was still alive, when I tried to write to a virtual disk that was 
part of the move, it paused the VM saying there wasn't enough storage.


I could unpause the VM, but in a few seconds, with things writing to the virtual 
disk, again it was paused with the same out of space message.  Vdsm logs showed 
the enospc return code... so it made sense, it's just that the VM shows plenty 
of storage there.  Once I rebooted the VM, everything went back to normal.


So is moving storage for a live VM not supported?  I guess we got lucky in our 
3.4 system (?)


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] SELinux and oVirt

2016-05-25 Thread Michal Skrivanek


> On 25 May 2016, at 19:29, Cam Mac  wrote:
> 
> Hi Michal,
> 
> Ran restorecon -r on '/' (and restarted vdsmd and other services): it is 
> still getting selinux errors. I'd like to keep selinux running, especially as 
> it is officially supported

Yeah. Hm, dunno why it didn't work, perhaps the config is not set up correctly. 
I thought redeploy would fix it but I don't really know the deployment code so 
maybe I'm wrong

> (and works on the other node), so I guess the best option is to reinstall the 
> OS and then install ovirt again perhaps.

That's the most easy way out, yes:)

Thanks,
michal
> 
> Thanks,
> 
> Campbell
> 
>> On Wed, May 25, 2016 at 6:15 PM, Michal Skrivanek  
>> wrote:
>> 
>> 
>>> On 25 May 2016, at 19:12, Cam Mac  wrote:
>>> 
>>> I'll try that - presumably on the paths it is complaining about, and the 
>>> qemu binarys?
>> 
>> It shouldn't hurt on /, it should only help:)
>> And if it complains e.g. on attached nfs, the i suppose you need to run it 
>> there too
>> 
>> 
>>> 
 On Wed, May 25, 2016 at 4:59 PM, Michal Skrivanek 
  wrote:
 
> On 25 May 2016, at 17:35, Cam Mac  wrote:
> 
> Hi Michal,
> 
> I chose the 'reinstall node' option from the GUI menu, which appeared to 
> go ok, however, I still cannot create or migrate a VM on that node. I can 
> see selinux 'denied' messages relating to qemu-kvm, e.g.:
> 
> type=AVC msg=audit(1464189232.136:251): avc:  denied  { read } for  
> pid=4019 comm="qemu-kvm" name="65ab-b33a-483a-af46-76f7305e2ae5" 
> dev="sda2" ino=35401 scontext=system_
> u:system_r:svirt_t:s0:c720,c927 tcontext=system_u:object_r:unlabeled_t:s0 
> tclass=lnk_file
> 
> There are a number of errors in the vdsm log but I assume that relates to 
> selinux blocking it. So perhaps I need to remove all the ovirt packages 
> manually, or perhaps re-install the OS as well? I guess either of those 
> options involves complications with certificates and WWIDs for the 
> attached SAN. 
> 
> Or could I somehow generate selinux labels?
 
 yeah, I think it didn’t happen. I though we do relabelling as part of 
 deploy
 How about running "restorecon -r” now?
 
> 
> These nodes + engine are not yet production, though I'd prefer to fix 
> than restart entirely from scratch.
> 
> Thanks for any help.
> 
> regards,
> 
> Campbell
> 
> 
>> On Wed, May 11, 2016 at 3:13 PM, Cam Mac  wrote:
>> Ah, ok that makes sense. For the node, is it enough to use the 
>> 'reinstall node' option from the GUI, or is it better to reinstall the 
>> OS and then deploy it again?
>> 
>> Thanks,
>> 
>> Cam
>> 
>>> On Wed, May 11, 2016 at 2:40 PM, Michal Skrivanek 
>>>  wrote:
>>> 
 On 11 May 2016, at 15:24, Cam Mac  wrote:
 
 Thanks Michal, if reinstalling the engine, (which also had SELinux 
 disabled at install), would the best way be to backup the engine and 
 then restore just the ovirt config?
>>> 
>>> for engine..well, VM security is not related to that, those are running 
>>> on hypervisors, not the engine. So for any functionality/security it’s 
>>> irrelevant what SELinux state it’s in
>>> I’m not sure if relabeling with restorecon is not enough (it sould work 
>>> also on nodes, but as I said, it’s likely more safe to reinstall just 
>>> to be really really sure:)
>>> Simone, am I right about the restorecon for engine?
>>> 
 
 Cheers,
 
 Cam
 
> On Wed, May 11, 2016 at 2:14 PM, Michal Skrivanek 
>  wrote:
> 
> > On 11 May 2016, at 15:02, Cam Mac  wrote:
> >
> > Hi,
> >
> > In the oVirt guide, it says that "SELinux is being used by default 
> > on oVirt Node", but then goes on to say that if you have problems 
> > you should set it to permissive mode. I have had a few things fail 
> > due to being blocked by SELinux on a node I later enabled SELinux 
> > on, as it was off at install time. The other node which has had 
> > SELinux on from the start and so far has not had any oVirt 
> > operations blocked. I am guessing that the oVirt install process 
> > creates the necessary rules to allow vdsm to run under SELinux. So 
> > if you want to set SELinux to enforcing after installation, is 
> > there a script to do this, or is it better to just reinstall the 
> > node or engine, rather than trying to work out the individual 
> > exceptions?
> 
> For oVirt node it’s easier to reinstall it, it doesn’t 

Re: [ovirt-users] Cinder Snapshot Issues

2016-05-25 Thread Kevin Hrpcek
Qemu log for a cinder based VM is attached.

Current versions:
ovirt-engine-3.6.5.3-1.el7.centos.noarch
vdsm-4.17.26-0.el7.centos.noarch
qemu-kvm-ev-2.3.0-31.el7_2.10.1.x86_64
libvirt-daemon-kvm-1.2.17-13.el7_2.4.x86_64
libvirt-daemon-1.2.17-13.el7_2.4.x86_64



On Wed, May 25, 2016 at 7:59 AM, Daniel Erez  wrote:

> According to VDSM log [1], there was a timeout error during snapshot
> operation.
> This could be a duplicate of bugs [2] already resolved in latest version.
> Can you please provide the versions of the following components for
> further investigation:
> engine / vdsm / qemu-kvm-rhev / libvirt. Also, please attach libivrt/qemu
> logs.
>
> [1] jsonrpc.Executor/6::ERROR::2016-05-23
> 13:09:46,790::vm::3311::virt.vm::(snapshot)
> vmId=`040609f6-cfe0-4763-8b32-08ffad158c93`::Unable to take snapshot
> Traceback (most recent call last):
>   File "/usr/share/vdsm/virt/vm.py", line 3309, in snapshot
> self._dom.snapshotCreateXML(snapxml, snapFlags)
>   File "/usr/share/vdsm/virt/virdomain.py", line 76, in f
> raise toe
> TimeoutError: Timed out during operation: cannot acquire state change lock
> (held by remoteDispatchDomainSnapshotCreateXML)
>
> [2]
> https://bugzilla.redhat.com/show_bug.cgi?id=1261980
> https://bugzilla.redhat.com/show_bug.cgi?id=1250839
>
> On Mon, May 23, 2016 at 11:31 AM, Daniel Erez  wrote:
>
>>
>>
>> On Tue, Apr 12, 2016 at 11:13 PM, Kevin Hrpcek  wrote:
>>
>>> Hello,
>>>
>>> I'm running into a problem with live snapshots not working when using
>>> cinder/ceph disks. There are different failures for including and not
>>> including memory, but in each case cinder/ceph creates a new snapshot that
>>> can be seen in cinder and ceph. When doing a memory/disk snapshot the VM
>>> ends up in a paused state and I need to kill -9 the qemu process to be able
>>> to boot the vm again. The engine seems to be losing connection with the
>>> vdsm process on the VM host after freezing the guest's filesystems. The
>>> guest never receives the thaw command and it fails in the logs. I am
>>> pasting in some log snippets.
>>>
>>> 2016-04-12 19:24:58,851 INFO
>>> [org.ovirt.engine.core.bll.CreateAllSnapshotsFromVmCommand]
>>> (org.ovirt.thread.pool-8-thread-27) [5c4493e] Ending command
>>> 'org.ovirt.engine.core.bll.CreateAllSnapshotsFromVmCommand' successfully.
>>> 2016-04-12 19:27:56,873 ERROR
>>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>>> (DefaultQuartzScheduler_Worker-27) [4d97ca06] Correlation ID: null, Call
>>> Stack: null, Custom Event ID: -1, Message: VDSM OVCL1A command failed:
>>> Message timeout which can be caused by communication issues
>>> 2016-04-12 19:27:56,873 INFO
>>> [org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand]
>>> (DefaultQuartzScheduler_Worker-27) [4d97ca06] Command
>>> 'org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand' return value
>>> 'StatusOnlyReturnForXmlRpc [status=StatusForXmlRpc [code=5022,
>>> message=Message timeout which can be caused by communication issues]]'
>>> 2016-04-12 19:27:56,874 INFO
>>> [org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand]
>>> (DefaultQuartzScheduler_Worker-27) [4d97ca06] HostName = OVCL1A
>>> 2016-04-12 19:27:56,874 ERROR
>>> [org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand]
>>> (DefaultQuartzScheduler_Worker-27) [4d97ca06] Command
>>> 'SnapshotVDSCommand(HostName = OVCL1A,
>>> SnapshotVDSCommandParameters:{runAsync='true',
>>> hostId='9bdfaedc-34a8-4a08-ad8a-c117835a6094',
>>> vmId='040609f6-cfe0-4763-8b32-08ffad158c93'})' execution failed:
>>> VDSGenericException: VDSNetworkException: Message timeout which can be
>>> caused by communication issues
>>> 2016-04-12 19:27:56,875 WARN
>>> [org.ovirt.engine.core.vdsbroker.VdsManager]
>>> (org.ovirt.thread.pool-8-thread-16) [4d97ca06] Host 'OVCL1A' is not
>>> responding.
>>>
>>> Disk only live snapshots freeze the guest file systems, the vm receives
>>> the thaw command, but the VM is no longer responsive. The VM pings on the
>>> network but it is hung and it also needs a kill -9 to the qemu process so
>>> that it can be booted again.
>>>
>>> jsonrpc.Executor/0::DEBUG::2016-04-12
>>> 19:41:58,342::__init__::503::jsonrpc.JsonRpcServer::(_serveRequest) Calling
>>> 'VM.snapshot' in bridge with {u'frozen': True, u'vmID':
>>> u'040609f6-cfe0-4763-8b32-08ffad158c93', u'snapDrives': []}
>>> jsonrpc.Executor/0::INFO::2016-04-12
>>> 19:41:58,343::vm::3237::virt.vm::(snapshot)
>>> vmId=`040609f6-cfe0-4763-8b32-08ffad158c93`::
>>> 
>>> 
>>>
>>> jsonrpc.Executor/0::ERROR::2016-04-12
>>> 19:41:58,346::vm::3252::virt.vm::(snapshot)
>>> vmId=`040609f6-cfe0-4763-8b32-08ffad158c93`::Unable to take snapshot
>>> Traceback (most recent call last):
>>>   File "/usr/share/vdsm/virt/vm.py", line 3250, in snapshot
>>> self._dom.snapshotCreateXML(snapxml, snapFlags)
>>>   File "/usr/share/vdsm/virt/virdomain.py", line 68, in f
>>> ret = attr(*args, 

Re: [ovirt-users] failing update ovirt-engine on centos 7

2016-05-25 Thread Fabrice Bacchella

> Le 25 mai 2016 à 17:25, Kapetanakis Giannis  a 
> écrit :
> 
> On 25/05/16 17:59, Fabrice Bacchella wrote:
>> I have an dedicated machin to run ovirt-engine (not hosted). It's an up to 
>> date centos 7.2.1511
>> 
>> I installed ovirt 3.6.6 a few weeks ago (May 10 17:56:44 tells me yum.log)
>> 
>> Now, I'm trying a full yum update and getting :
>> # yum update
>> 
>> 
>> Error: Package: ovirt-engine-tools-3.6.5.3-1.el7.centos.noarch (@ovirt-3.6)
>>Requires: ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
>>Removing: ovirt-engine-tools-backup-3.6.5.3-1.el7.centos.noarch 
>> (@ovirt-3.6)
>>ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
>>Updated By: ovirt-engine-tools-backup-3.6.6.2-1.el7.centos.noarch 
>> (ovirt-3.6)
>>ovirt-engine-tools-backup = 3.6.6.2-1.el7.centos
>> 
>> 
> 
> Follow 3.6.6 release notes to update:
> https://www.ovirt.org/release/3.6.6/ 
> 
> 
> yum install  
> http://resources.ovirt.org/pub/yum-repo/ovirt-release36.rpm
>  
> yum update ovirt\*setup\*
> and then run
> engine-setup to update the rest of the packages.

I have seen this doc.

It updates a few components and what about the others ? The readme talk about 
running engine-setup, but not that it will updates other packages. I thought 
that ovirt-engine is for engine setup, not upgrading.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] moVirt 1.4 RC1 (Android client for oVirt)

2016-05-25 Thread Roy Golan
On May 25, 2016 2:50 PM, "Tomas Jelinek"  wrote:
>
> Hey All,
>
> the first RC of moVirt 1.4 has been released!

Fantastic news, and congrats for this release.

Will definitely install and give it a go.

>
> It can be downloaded only using direct link[1] - the play store will be
upgraded after considered stable.
>
> The most important feature of this release was to enhance the dashboard
so it will look similar to the one coming to oVirt 4.0.
> Screenshot attached.
>
> Other changes:
> - Added new dashboard functionality (virtual/physical consumption,
clickable cpu/memory consumption)
> - Better UI (dashboard, adding/editing triggers)
> - Better sorting in lists
> - Memory units are now displayed correctly
> - Fixed crashing bugs when looking at hosted engine
>
> Would you like to help/contribute?
> Sure, for example you can:
> - give feedback on the new dashboard (the one from the attachment)
> - download RC [1], test it and report bugs
> - patches are also welcome :)
>
> have a nice day,
> Tomas
>
> [1]:
https://github.com/matobet/moVirt/blob/master/moVirt/moVirt-release.apk?raw=true
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] failing update ovirt-engine on centos 7

2016-05-25 Thread Sandro Bonazzola
Il 25/Mag/2016 17:25, "Kapetanakis Giannis"  ha
scritto:
>
> On 25/05/16 17:59, Fabrice Bacchella wrote:
>>
>> I have an dedicated machin to run ovirt-engine (not hosted). It's an up
to date centos 7.2.1511
>>
>> I installed ovirt 3.6.6 a few weeks ago (May 10 17:56:44 tells me
yum.log)
>>
>> Now, I'm trying a full yum update and getting :
>> # yum update
>> 
>>
>> Error: Package: ovirt-engine-tools-3.6.5.3-1.el7.centos.noarch
(@ovirt-3.6)
>>Requires: ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
>>Removing:
ovirt-engine-tools-backup-3.6.5.3-1.el7.centos.noarch (@ovirt-3.6)
>>ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
>>Updated By:
ovirt-engine-tools-backup-3.6.6.2-1.el7.centos.noarch (ovirt-3.6)
>>ovirt-engine-tools-backup = 3.6.6.2-1.el7.centos
>>
>>
>
> Follow 3.6.6 release notes to update:
> https://www.ovirt.org/release/3.6.6/
>

+1 karma point
+virtual medal "I read the docs"

(We should start doing something like this and keep track)

>
> yum install http://resources.ovirt.org/pub/yum-repo/ovirt-release36.rpm
> yum update ovirt\*setup\*
> and then run
> engine-setup to update the rest of the packages.
>
> G
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] SELinux and oVirt

2016-05-25 Thread Cam Mac
Hi Michal,

Ran restorecon -r on '/' (and restarted vdsmd and other services): it is
still getting selinux errors. I'd like to keep selinux running, especially
as it is officially supported (and works on the other node), so I guess the
best option is to reinstall the OS and then install ovirt again perhaps.

Thanks,

Campbell

On Wed, May 25, 2016 at 6:15 PM, Michal Skrivanek 
wrote:

>
>
> On 25 May 2016, at 19:12, Cam Mac  wrote:
>
> I'll try that - presumably on the paths it is complaining about, and the
> qemu binarys?
>
>
> It shouldn't hurt on /, it should only help:)
> And if it complains e.g. on attached nfs, the i suppose you need to run it
> there too
>
>
>
> On Wed, May 25, 2016 at 4:59 PM, Michal Skrivanek <
> michal.skriva...@redhat.com> wrote:
>
>>
>> On 25 May 2016, at 17:35, Cam Mac  wrote:
>>
>> Hi Michal,
>>
>> I chose the 'reinstall node' option from the GUI menu, which appeared to
>> go ok, however, I still cannot create or migrate a VM on that node. I can
>> see selinux 'denied' messages relating to qemu-kvm, e.g.:
>>
>> type=AVC msg=audit(1464189232.136:251): avc:  denied  { read } for
>>  pid=4019 comm="qemu-kvm" name="65ab-b33a-483a-af46-76f7305e2ae5"
>> dev="sda2" ino=35401 scontext=system_
>> u:system_r:svirt_t:s0:c720,c927 tcontext=system_u:object_r:unlabeled_t:s0
>> tclass=lnk_file
>>
>> There are a number of errors in the vdsm log but I assume that relates to
>> selinux blocking it. So perhaps I need to remove all the ovirt packages
>> manually, or perhaps re-install the OS as well? I guess either of those
>> options involves complications with certificates and WWIDs for the attached
>> SAN.
>>
>> Or could I somehow generate selinux labels?
>>
>>
>> yeah, I think it didn’t happen. I though we do relabelling as part of
>> deploy
>> How about running "restorecon -r” now?
>>
>>
>> These nodes + engine are not yet production, though I'd prefer to fix
>> than restart entirely from scratch.
>>
>> Thanks for any help.
>>
>> regards,
>>
>> Campbell
>>
>>
>> On Wed, May 11, 2016 at 3:13 PM, Cam Mac  wrote:
>>
>>> Ah, ok that makes sense. For the node, is it enough to use the
>>> 'reinstall node' option from the GUI, or is it better to reinstall the OS
>>> and then deploy it again?
>>>
>>> Thanks,
>>>
>>> Cam
>>>
>>> On Wed, May 11, 2016 at 2:40 PM, Michal Skrivanek <
>>> michal.skriva...@redhat.com> wrote:
>>>

 On 11 May 2016, at 15:24, Cam Mac  wrote:

 Thanks Michal, if reinstalling the engine, (which also had SELinux
 disabled at install), would the best way be to backup the engine and then
 restore just the ovirt config?


 for engine..well, VM security is not related to that, those are running
 on hypervisors, not the engine. So for any functionality/security it’s
 irrelevant what SELinux state it’s in
 I’m not sure if relabeling with restorecon is not enough (it sould work
 also on nodes, but as I said, it’s likely more safe to reinstall just to be
 really really sure:)
 Simone, am I right about the restorecon for engine?


 Cheers,

 Cam

 On Wed, May 11, 2016 at 2:14 PM, Michal Skrivanek <
 michal.skriva...@redhat.com> wrote:

>
> > On 11 May 2016, at 15:02, Cam Mac  wrote:
> >
> > Hi,
> >
> > In the oVirt guide, it says that "SELinux is being used by default
> on oVirt Node", but then goes on to say that if you have problems you
> should set it to permissive mode. I have had a few things fail due to 
> being
> blocked by SELinux on a node I later enabled SELinux on, as it was off at
> install time. The other node which has had SELinux on from the start and 
> so
> far has not had any oVirt operations blocked. I am guessing that the oVirt
> install process creates the necessary rules to allow vdsm to run under
> SELinux. So if you want to set SELinux to enforcing after installation, is
> there a script to do this, or is it better to just reinstall the node or
> engine, rather than trying to work out the individual exceptions?
>
> For oVirt node it’s easier to reinstall it, it doesn’t persist much
> and it’s the easies way how to get the labelling right
>
> Thanks,
> michal
>
> >
> > Thanks,
> >
> > Cam
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
>
>
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



>>>
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] SELinux and oVirt

2016-05-25 Thread Michal Skrivanek


> On 25 May 2016, at 19:12, Cam Mac  wrote:
> 
> I'll try that - presumably on the paths it is complaining about, and the qemu 
> binarys?

It shouldn't hurt on /, it should only help:)
And if it complains e.g. on attached nfs, the i suppose you need to run it 
there too

> 
>> On Wed, May 25, 2016 at 4:59 PM, Michal Skrivanek 
>>  wrote:
>> 
>>> On 25 May 2016, at 17:35, Cam Mac  wrote:
>>> 
>>> Hi Michal,
>>> 
>>> I chose the 'reinstall node' option from the GUI menu, which appeared to go 
>>> ok, however, I still cannot create or migrate a VM on that node. I can see 
>>> selinux 'denied' messages relating to qemu-kvm, e.g.:
>>> 
>>> type=AVC msg=audit(1464189232.136:251): avc:  denied  { read } for  
>>> pid=4019 comm="qemu-kvm" name="65ab-b33a-483a-af46-76f7305e2ae5" 
>>> dev="sda2" ino=35401 scontext=system_
>>> u:system_r:svirt_t:s0:c720,c927 tcontext=system_u:object_r:unlabeled_t:s0 
>>> tclass=lnk_file
>>> 
>>> There are a number of errors in the vdsm log but I assume that relates to 
>>> selinux blocking it. So perhaps I need to remove all the ovirt packages 
>>> manually, or perhaps re-install the OS as well? I guess either of those 
>>> options involves complications with certificates and WWIDs for the attached 
>>> SAN. 
>>> 
>>> Or could I somehow generate selinux labels?
>> 
>> yeah, I think it didn’t happen. I though we do relabelling as part of deploy
>> How about running "restorecon -r” now?
>> 
>>> 
>>> These nodes + engine are not yet production, though I'd prefer to fix than 
>>> restart entirely from scratch.
>>> 
>>> Thanks for any help.
>>> 
>>> regards,
>>> 
>>> Campbell
>>> 
>>> 
 On Wed, May 11, 2016 at 3:13 PM, Cam Mac  wrote:
 Ah, ok that makes sense. For the node, is it enough to use the 'reinstall 
 node' option from the GUI, or is it better to reinstall the OS and then 
 deploy it again?
 
 Thanks,
 
 Cam
 
> On Wed, May 11, 2016 at 2:40 PM, Michal Skrivanek 
>  wrote:
> 
>> On 11 May 2016, at 15:24, Cam Mac  wrote:
>> 
>> Thanks Michal, if reinstalling the engine, (which also had SELinux 
>> disabled at install), would the best way be to backup the engine and 
>> then restore just the ovirt config?
> 
> for engine..well, VM security is not related to that, those are running 
> on hypervisors, not the engine. So for any functionality/security it’s 
> irrelevant what SELinux state it’s in
> I’m not sure if relabeling with restorecon is not enough (it sould work 
> also on nodes, but as I said, it’s likely more safe to reinstall just to 
> be really really sure:)
> Simone, am I right about the restorecon for engine?
> 
>> 
>> Cheers,
>> 
>> Cam
>> 
>>> On Wed, May 11, 2016 at 2:14 PM, Michal Skrivanek 
>>>  wrote:
>>> 
>>> > On 11 May 2016, at 15:02, Cam Mac  wrote:
>>> >
>>> > Hi,
>>> >
>>> > In the oVirt guide, it says that "SELinux is being used by default on 
>>> > oVirt Node", but then goes on to say that if you have problems you 
>>> > should set it to permissive mode. I have had a few things fail due to 
>>> > being blocked by SELinux on a node I later enabled SELinux on, as it 
>>> > was off at install time. The other node which has had SELinux on from 
>>> > the start and so far has not had any oVirt operations blocked. I am 
>>> > guessing that the oVirt install process creates the necessary rules 
>>> > to allow vdsm to run under SELinux. So if you want to set SELinux to 
>>> > enforcing after installation, is there a script to do this, or is it 
>>> > better to just reinstall the node or engine, rather than trying to 
>>> > work out the individual exceptions?
>>> 
>>> For oVirt node it’s easier to reinstall it, it doesn’t persist much and 
>>> it’s the easies way how to get the labelling right
>>> 
>>> Thanks,
>>> michal
>>> 
>>> >
>>> > Thanks,
>>> >
>>> > Cam
>>> > ___
>>> > Users mailing list
>>> > Users@ovirt.org
>>> > http://lists.ovirt.org/mailman/listinfo/users
>>> 
>> 
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
> 
 
>>> 
>> 
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] SELinux and oVirt

2016-05-25 Thread Cam Mac
I'll try that - presumably on the paths it is complaining about, and the
qemu binarys?

On Wed, May 25, 2016 at 4:59 PM, Michal Skrivanek <
michal.skriva...@redhat.com> wrote:

>
> On 25 May 2016, at 17:35, Cam Mac  wrote:
>
> Hi Michal,
>
> I chose the 'reinstall node' option from the GUI menu, which appeared to
> go ok, however, I still cannot create or migrate a VM on that node. I can
> see selinux 'denied' messages relating to qemu-kvm, e.g.:
>
> type=AVC msg=audit(1464189232.136:251): avc:  denied  { read } for
>  pid=4019 comm="qemu-kvm" name="65ab-b33a-483a-af46-76f7305e2ae5"
> dev="sda2" ino=35401 scontext=system_
> u:system_r:svirt_t:s0:c720,c927 tcontext=system_u:object_r:unlabeled_t:s0
> tclass=lnk_file
>
> There are a number of errors in the vdsm log but I assume that relates to
> selinux blocking it. So perhaps I need to remove all the ovirt packages
> manually, or perhaps re-install the OS as well? I guess either of those
> options involves complications with certificates and WWIDs for the attached
> SAN.
>
> Or could I somehow generate selinux labels?
>
>
> yeah, I think it didn’t happen. I though we do relabelling as part of
> deploy
> How about running "restorecon -r” now?
>
>
> These nodes + engine are not yet production, though I'd prefer to fix than
> restart entirely from scratch.
>
> Thanks for any help.
>
> regards,
>
> Campbell
>
>
> On Wed, May 11, 2016 at 3:13 PM, Cam Mac  wrote:
>
>> Ah, ok that makes sense. For the node, is it enough to use the 'reinstall
>> node' option from the GUI, or is it better to reinstall the OS and then
>> deploy it again?
>>
>> Thanks,
>>
>> Cam
>>
>> On Wed, May 11, 2016 at 2:40 PM, Michal Skrivanek <
>> michal.skriva...@redhat.com> wrote:
>>
>>>
>>> On 11 May 2016, at 15:24, Cam Mac  wrote:
>>>
>>> Thanks Michal, if reinstalling the engine, (which also had SELinux
>>> disabled at install), would the best way be to backup the engine and then
>>> restore just the ovirt config?
>>>
>>>
>>> for engine..well, VM security is not related to that, those are running
>>> on hypervisors, not the engine. So for any functionality/security it’s
>>> irrelevant what SELinux state it’s in
>>> I’m not sure if relabeling with restorecon is not enough (it sould work
>>> also on nodes, but as I said, it’s likely more safe to reinstall just to be
>>> really really sure:)
>>> Simone, am I right about the restorecon for engine?
>>>
>>>
>>> Cheers,
>>>
>>> Cam
>>>
>>> On Wed, May 11, 2016 at 2:14 PM, Michal Skrivanek <
>>> michal.skriva...@redhat.com> wrote:
>>>

 > On 11 May 2016, at 15:02, Cam Mac  wrote:
 >
 > Hi,
 >
 > In the oVirt guide, it says that "SELinux is being used by default on
 oVirt Node", but then goes on to say that if you have problems you should
 set it to permissive mode. I have had a few things fail due to being
 blocked by SELinux on a node I later enabled SELinux on, as it was off at
 install time. The other node which has had SELinux on from the start and so
 far has not had any oVirt operations blocked. I am guessing that the oVirt
 install process creates the necessary rules to allow vdsm to run under
 SELinux. So if you want to set SELinux to enforcing after installation, is
 there a script to do this, or is it better to just reinstall the node or
 engine, rather than trying to work out the individual exceptions?

 For oVirt node it’s easier to reinstall it, it doesn’t persist much and
 it’s the easies way how to get the labelling right

 Thanks,
 michal

 >
 > Thanks,
 >
 > Cam
 > ___
 > Users mailing list
 > Users@ovirt.org
 > http://lists.ovirt.org/mailman/listinfo/users


>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>>
>>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Could not connect to the optimizer service

2016-05-25 Thread Martin Sivak
Hi,

> The connection to optimizer is being done by client's browser and not the
> engine...
> I used a private network which was not accessible from the browser.

That is exactly the case. Glad to see you were able to fix it.

--
Martin Sivak
SLA / oVirt


On Wed, May 25, 2016 at 5:38 PM, Kapetanakis Giannis
 wrote:
> On 25/05/16 14:32, Kapetanakis Giannis wrote:
>>
>> On 25/05/16 14:28, Kapetanakis Giannis wrote:
>>>
>>> Hi,
>>>
>>> I've just setup optimizer service following
>>>
>>> http://www.ovirt.org/develop/release-management/features/sla/optaplanner/
>>> and
>>> https://github.com/oVirt/ovirt-optimizer
>>>
>>> I can access optimizer's interface and get the the solution result from
>>> both http and https.
>>> I can access it from both my pc and from ovirt-engine host with a browser
>>> at url
>>> ovirt-optimizer/result/Cluster_ID
>>>
>>> However in ovirt-engine interface I see
>>> Status: Could not connect to the optimizer service [status code: 0]
>>>
>>> Also I see no connection attempt from ovirt-engine to optimizer (with
>>> logging on optimizer's firewall).
>>>
>>> Engine is loading the conf:
>>> 2016-05-25 13:54:40,395 INFO
>>> [org.ovirt.engine.ui.frontend.server.gwt.plugin.PluginDataManager] (default
>>> task-20) [] Reading UI plugin configuration
>>> '/etc/ovirt-engine/ui-plugins/ovirt-optimizer-config.json'
>>>
>>> /etc/ovirt-engine/ui-plugins/ovirt-optimizer-config.json:
>>> "config": { "baseurl":
>>> "https://optimizer.example.com/ovirt-optimizer/result/;
>>>
>>> tried also
>>> "config": { "baseurl":
>>> "http://optimizer.example.com/ovirt-optimizer/result/;
>>> incase there was a problem with optimizer's certificate.
>>>
>>> Any ideas? How can I debug why the engine is not doing any attempt to get
>>> optimizer's result?
>>>
>>> best regards,
>>>
>>> Giannis
>>>
>>
>> Forgot to mention versions:
>>
>> optimizer is Centos 7 ovirt-optimizer-jboss-0.9.1-2.el7.centos.noarch
>> engine is Centos 6 ovirt-engine-3.6.6.2-1.el6.noarch,
>> ovirt-optimizer-ui-0.9.1-2.el6.noarch
>>
>> G
>
>
> I think I figured this out.
> The connection to optimizer is being done by client's browser and not the
> engine...
> I used a private network which was not accessible from the browser.
>
>
> G
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] SELinux and oVirt

2016-05-25 Thread Michal Skrivanek

> On 25 May 2016, at 17:35, Cam Mac  wrote:
> 
> Hi Michal,
> 
> I chose the 'reinstall node' option from the GUI menu, which appeared to go 
> ok, however, I still cannot create or migrate a VM on that node. I can see 
> selinux 'denied' messages relating to qemu-kvm, e.g.:
> 
> type=AVC msg=audit(1464189232.136:251): avc:  denied  { read } for  pid=4019 
> comm="qemu-kvm" name="65ab-b33a-483a-af46-76f7305e2ae5" dev="sda2" 
> ino=35401 scontext=system_
> u:system_r:svirt_t:s0:c720,c927 tcontext=system_u:object_r:unlabeled_t:s0 
> tclass=lnk_file
> 
> There are a number of errors in the vdsm log but I assume that relates to 
> selinux blocking it. So perhaps I need to remove all the ovirt packages 
> manually, or perhaps re-install the OS as well? I guess either of those 
> options involves complications with certificates and WWIDs for the attached 
> SAN. 
> 
> Or could I somehow generate selinux labels?

yeah, I think it didn’t happen. I though we do relabelling as part of deploy
How about running "restorecon -r” now?

> 
> These nodes + engine are not yet production, though I'd prefer to fix than 
> restart entirely from scratch.
> 
> Thanks for any help.
> 
> regards,
> 
> Campbell
> 
> 
> On Wed, May 11, 2016 at 3:13 PM, Cam Mac  > wrote:
> Ah, ok that makes sense. For the node, is it enough to use the 'reinstall 
> node' option from the GUI, or is it better to reinstall the OS and then 
> deploy it again?
> 
> Thanks,
> 
> Cam
> 
> On Wed, May 11, 2016 at 2:40 PM, Michal Skrivanek 
> > wrote:
> 
>> On 11 May 2016, at 15:24, Cam Mac > > wrote:
>> 
>> Thanks Michal, if reinstalling the engine, (which also had SELinux disabled 
>> at install), would the best way be to backup the engine and then restore 
>> just the ovirt config?
> 
> for engine..well, VM security is not related to that, those are running on 
> hypervisors, not the engine. So for any functionality/security it’s 
> irrelevant what SELinux state it’s in
> I’m not sure if relabeling with restorecon is not enough (it sould work also 
> on nodes, but as I said, it’s likely more safe to reinstall just to be really 
> really sure:)
> Simone, am I right about the restorecon for engine?
> 
>> 
>> Cheers,
>> 
>> Cam
>> 
>> On Wed, May 11, 2016 at 2:14 PM, Michal Skrivanek 
>> > wrote:
>> 
>> > On 11 May 2016, at 15:02, Cam Mac > > > wrote:
>> >
>> > Hi,
>> >
>> > In the oVirt guide, it says that "SELinux is being used by default on 
>> > oVirt Node", but then goes on to say that if you have problems you should 
>> > set it to permissive mode. I have had a few things fail due to being 
>> > blocked by SELinux on a node I later enabled SELinux on, as it was off at 
>> > install time. The other node which has had SELinux on from the start and 
>> > so far has not had any oVirt operations blocked. I am guessing that the 
>> > oVirt install process creates the necessary rules to allow vdsm to run 
>> > under SELinux. So if you want to set SELinux to enforcing after 
>> > installation, is there a script to do this, or is it better to just 
>> > reinstall the node or engine, rather than trying to work out the 
>> > individual exceptions?
>> 
>> For oVirt node it’s easier to reinstall it, it doesn’t persist much and it’s 
>> the easies way how to get the labelling right
>> 
>> Thanks,
>> michal
>> 
>> >
>> > Thanks,
>> >
>> > Cam
>> > ___
>> > Users mailing list
>> > Users@ovirt.org 
>> > http://lists.ovirt.org/mailman/listinfo/users 
>> > 
>> 
>> 
>> ___
>> Users mailing list
>> Users@ovirt.org 
>> http://lists.ovirt.org/mailman/listinfo/users 
>> 
> 
> 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] moVirt 1.4 RC1 (Android client for oVirt)

2016-05-25 Thread Michal Skrivanek

> On 25 May 2016, at 13:50, Tomas Jelinek  wrote:
> 
> Hey All,
> 
> the first RC of moVirt 1.4 has been released! 
> 
> It can be downloaded only using direct link[1] - the play store will be 
> upgraded after considered stable.
> 
> The most important feature of this release was to enhance the dashboard so it 
> will look similar to the one coming to oVirt 4.0.
> Screenshot attached.
> 
> Other changes:
> - Added new dashboard functionality (virtual/physical consumption, clickable 
> cpu/memory consumption)
> - Better UI (dashboard, adding/editing triggers)
> - Better sorting in lists
> - Memory units are now displayed correctly
> - Fixed crashing bugs when looking at hosted engine
> 
> Would you like to help/contribute?
> Sure, for example you can:
> - give feedback on the new dashboard (the one from the attachment)

I guess the two lists in portrait mode are truncated all the time, it would 
probably make more sense to show only one column and switch hosts/vms via 
real/virtual toggle

> - download RC [1], test it and report bugs
> - patches are also welcome :)
> 
> have a nice day,
> Tomas
> 
> [1]: 
> https://github.com/matobet/moVirt/blob/master/moVirt/moVirt-release.apk?raw=true___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Could not connect to the optimizer service

2016-05-25 Thread Kapetanakis Giannis

On 25/05/16 14:32, Kapetanakis Giannis wrote:

On 25/05/16 14:28, Kapetanakis Giannis wrote:

Hi,

I've just setup optimizer service following

http://www.ovirt.org/develop/release-management/features/sla/optaplanner/ 
and

https://github.com/oVirt/ovirt-optimizer

I can access optimizer's interface and get the the solution result 
from both http and https.
I can access it from both my pc and from ovirt-engine host with a 
browser at url

ovirt-optimizer/result/Cluster_ID

However in ovirt-engine interface I see
Status: Could not connect to the optimizer service [status code: 0]

Also I see no connection attempt from ovirt-engine to optimizer (with 
logging on optimizer's firewall).


Engine is loading the conf:
2016-05-25 13:54:40,395 INFO 
[org.ovirt.engine.ui.frontend.server.gwt.plugin.PluginDataManager] 
(default task-20) [] Reading UI plugin configuration 
'/etc/ovirt-engine/ui-plugins/ovirt-optimizer-config.json'


/etc/ovirt-engine/ui-plugins/ovirt-optimizer-config.json:
"config": { "baseurl": 
"https://optimizer.example.com/ovirt-optimizer/result/;


tried also
"config": { "baseurl": 
"http://optimizer.example.com/ovirt-optimizer/result/;

incase there was a problem with optimizer's certificate.

Any ideas? How can I debug why the engine is not doing any attempt to 
get optimizer's result?


best regards,

Giannis



Forgot to mention versions:

optimizer is Centos 7 ovirt-optimizer-jboss-0.9.1-2.el7.centos.noarch
engine is Centos 6 ovirt-engine-3.6.6.2-1.el6.noarch, 
ovirt-optimizer-ui-0.9.1-2.el6.noarch


G 


I think I figured this out.
The connection to optimizer is being done by client's browser and not 
the engine...

I used a private network which was not accessible from the browser.

G
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] SELinux and oVirt

2016-05-25 Thread Cam Mac
Hi Michal,

I chose the 'reinstall node' option from the GUI menu, which appeared to go
ok, however, I still cannot create or migrate a VM on that node. I can see
selinux 'denied' messages relating to qemu-kvm, e.g.:

type=AVC msg=audit(1464189232.136:251): avc:  denied  { read } for
 pid=4019 comm="qemu-kvm" name="65ab-b33a-483a-af46-76f7305e2ae5"
dev="sda2" ino=35401 scontext=system_
u:system_r:svirt_t:s0:c720,c927 tcontext=system_u:object_r:unlabeled_t:s0
tclass=lnk_file

There are a number of errors in the vdsm log but I assume that relates to
selinux blocking it. So perhaps I need to remove all the ovirt packages
manually, or perhaps re-install the OS as well? I guess either of those
options involves complications with certificates and WWIDs for the attached
SAN.

Or could I somehow generate selinux labels?

These nodes + engine are not yet production, though I'd prefer to fix than
restart entirely from scratch.

Thanks for any help.

regards,

Campbell


On Wed, May 11, 2016 at 3:13 PM, Cam Mac  wrote:

> Ah, ok that makes sense. For the node, is it enough to use the 'reinstall
> node' option from the GUI, or is it better to reinstall the OS and then
> deploy it again?
>
> Thanks,
>
> Cam
>
> On Wed, May 11, 2016 at 2:40 PM, Michal Skrivanek <
> michal.skriva...@redhat.com> wrote:
>
>>
>> On 11 May 2016, at 15:24, Cam Mac  wrote:
>>
>> Thanks Michal, if reinstalling the engine, (which also had SELinux
>> disabled at install), would the best way be to backup the engine and then
>> restore just the ovirt config?
>>
>>
>> for engine..well, VM security is not related to that, those are running
>> on hypervisors, not the engine. So for any functionality/security it’s
>> irrelevant what SELinux state it’s in
>> I’m not sure if relabeling with restorecon is not enough (it sould work
>> also on nodes, but as I said, it’s likely more safe to reinstall just to be
>> really really sure:)
>> Simone, am I right about the restorecon for engine?
>>
>>
>> Cheers,
>>
>> Cam
>>
>> On Wed, May 11, 2016 at 2:14 PM, Michal Skrivanek <
>> michal.skriva...@redhat.com> wrote:
>>
>>>
>>> > On 11 May 2016, at 15:02, Cam Mac  wrote:
>>> >
>>> > Hi,
>>> >
>>> > In the oVirt guide, it says that "SELinux is being used by default on
>>> oVirt Node", but then goes on to say that if you have problems you should
>>> set it to permissive mode. I have had a few things fail due to being
>>> blocked by SELinux on a node I later enabled SELinux on, as it was off at
>>> install time. The other node which has had SELinux on from the start and so
>>> far has not had any oVirt operations blocked. I am guessing that the oVirt
>>> install process creates the necessary rules to allow vdsm to run under
>>> SELinux. So if you want to set SELinux to enforcing after installation, is
>>> there a script to do this, or is it better to just reinstall the node or
>>> engine, rather than trying to work out the individual exceptions?
>>>
>>> For oVirt node it’s easier to reinstall it, it doesn’t persist much and
>>> it’s the easies way how to get the labelling right
>>>
>>> Thanks,
>>> michal
>>>
>>> >
>>> > Thanks,
>>> >
>>> > Cam
>>> > ___
>>> > Users mailing list
>>> > Users@ovirt.org
>>> > http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] failing update ovirt-engine on centos 7

2016-05-25 Thread Kapetanakis Giannis

On 25/05/16 17:59, Fabrice Bacchella wrote:
I have an dedicated machin to run ovirt-engine (not hosted). It's an 
up to date centos 7.2.1511


I installed ovirt 3.6.6 a few weeks ago (May 10 17:56:44 tells me yum.log)

Now, I'm trying a full yum update and getting :
# yum update


Error: Package: ovirt-engine-tools-3.6.5.3-1.el7.centos.noarch 
(@ovirt-3.6)

   Requires: ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
   Removing: 
ovirt-engine-tools-backup-3.6.5.3-1.el7.centos.noarch (@ovirt-3.6)

   ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
   Updated By: 
ovirt-engine-tools-backup-3.6.6.2-1.el7.centos.noarch (ovirt-3.6)

   ovirt-engine-tools-backup = 3.6.6.2-1.el7.centos




Follow 3.6.6 release notes to update:
https://www.ovirt.org/release/3.6.6/


|yum install ||http://resources.ovirt.org/pub/yum-repo/ovirt-release36.rpm|
yum update ovirt\*setup\*
and then run
engine-setup to update the rest of the packages.

G
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] failing update ovirt-engine on centos 7

2016-05-25 Thread Fabrice Bacchella
I have an dedicated machin to run ovirt-engine (not hosted). It's an up to date 
centos 7.2.1511

I installed ovirt 3.6.6 a few weeks ago (May 10 17:56:44 tells me yum.log)

Now, I'm trying a full yum update and getting :
# yum update


Error: Package: ovirt-engine-tools-3.6.5.3-1.el7.centos.noarch (@ovirt-3.6)
   Requires: ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
   Removing: ovirt-engine-tools-backup-3.6.5.3-1.el7.centos.noarch 
(@ovirt-3.6)
   ovirt-engine-tools-backup = 3.6.5.3-1.el7.centos
   Updated By: ovirt-engine-tools-backup-3.6.6.2-1.el7.centos.noarch 
(ovirt-3.6)
   ovirt-engine-tools-backup = 3.6.6.2-1.el7.centos


rpm -qi ovirt-engine-tools says :
Version : 3.6.5.3
Release : 1.el7.centos
...
Build Date  : Mon Apr 11 23:45:30 2016
Build Host  : el7-vm02.phx.ovirt.org


and :
rpm -qi ovirt-engine-tools-backup says:
Name: ovirt-engine-tools-backup
Version : 3.6.5.3
Release : 1.el7.centos
...
Build Date  : Mon Apr 11 23:45:30 2016
Build Host  : el7-vm02.phx.ovirt.org

yum update ovirt-engine-tools-backup ovirt-engine-tools fails in the same way.

but:

yum list ovirt-engine-tools-backup ovirt-engine-tools
Loaded plugins: etckeeper, fastestmirror, versionlock
Loading mirror speeds from cached hostfile
Installed Packages
ovirt-engine-tools.noarch   
  3.6.5.3-1.el7.centos  
@ovirt-3.6
ovirt-engine-tools-backup.noarch
  3.6.5.3-1.el7.centos  
@ovirt-3.6
Available Packages
ovirt-engine-tools-backup.noarch
  3.6.6.2-1.el7.centos  
ovirt-3.6 

So no ovirt-engine-tools to update.

and indeed :
yum update ovirt-engine-tools
Loaded plugins: etckeeper, fastestmirror, versionlock
Loading mirror speeds from cached hostfile
No packages marked for update

I have disable ovirt-3.6-epel, because I already use epel, is it the problem ?

What should I do ? I don't think removing ovirt-engine-tools  is a option.



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Can't perform search after setting up an Active Directory

2016-05-25 Thread Ondra Machacek

On 05/25/2016 03:47 PM, Alexis HAUSER wrote:



Can you please send what's happening during initialization of engine?
(logs right after ovirt-engine is restarted).



Or run this command and send output of file 'login.log':



 $ ovirt-engine-extensions-tool --log-level=FINEST --log-file=login.log
aaa login-user --profile=ad --user-name=some_user
--password=pass:some_user_password


Yes, these are the logs when using the command you gave me, using the search 
user :
https://bpaste.net/show/bbb0bc319765


You use 389 with SSL? I guess you wrongly specified it.

But, if you want to use SSL and you have it on 636, then you should 
create new SRV dns

records for example: _ldaps._tcp.university.mydomain.com ... 636

and then change:

 pool.default.serverset.srvrecord.service=ldaps

But I guess you wanted to use startTLS with 389, which you can enable by 
adding:


 pool.default.ssl.startTLS=true

and remove line:

 pool.default.ssl.enable=true

Does it solve your issue?




By the way, if I didn't rename my .profile and auth* files from my LDAP 
configuration, I had the LDAP namespace suggested by the web interface in my AD 
domain when trying to >>perform a search. Is that a bug ?



Not sure I understand. The name of the profile could be whatever, so it
doesn't matter what is the name.


I meant I had to disable the LDAP (openLDAP) profile, renaming the file with 
.save so ovirt doesn't detect them. If both profiles are activated, ovirt-web 
interface propose me the DN of the LDAP into AD (in namespace field)... Is that 
a bug or normal behavior ?



Hmm, that's strange, because only files with *.properties suffix should 
be detected and used. So yes please open bz that also other suffixes are 
loaded.


Btw: you can add at the begging of each file (authz and authn) this line 
to disable it:


 ovirt.engine.extension.enabled = false
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Can't perform search after setting up an Active Directory

2016-05-25 Thread Alexis HAUSER

>Can you please send what's happening during initialization of engine? 
>(logs right after ovirt-engine is restarted).

>Or run this command and send output of file 'login.log':

>  $ ovirt-engine-extensions-tool --log-level=FINEST --log-file=login.log 
>aaa login-user --profile=ad --user-name=some_user 
>--password=pass:some_user_password

Yes, these are the logs when using the command you gave me, using the search 
user :
https://bpaste.net/show/bbb0bc319765

>> By the way, if I didn't rename my .profile and auth* files from my LDAP 
>> configuration, I had the LDAP namespace suggested by the web interface in my 
>> AD domain when trying to >>perform a search. Is that a bug ?

>Not sure I understand. The name of the profile could be whatever, so it 
>doesn't matter what is the name.

I meant I had to disable the LDAP (openLDAP) profile, renaming the file with 
.save so ovirt doesn't detect them. If both profiles are activated, ovirt-web 
interface propose me the DN of the LDAP into AD (in namespace field)... Is that 
a bug or normal behavior ?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] moVirt 1.4 RC1 (Android client for oVirt)

2016-05-25 Thread Karli Sjöberg
On ons, 2016-05-25 at 07:50 -0400, Tomas Jelinek wrote:
> Hey All,
> 
> the first RC of moVirt 1.4 has been released! 
> 
> It can be downloaded only using direct link[1] - the play store will
> be upgraded after considered stable.
> 
> The most important feature of this release was to enhance the
> dashboard so it will look similar to the one coming to oVirt 4.0.
> Screenshot attached.
> 
> Other changes:
> - Added new dashboard functionality (virtual/physical consumption,
> clickable cpu/memory consumption)
> - Better UI (dashboard, adding/editing triggers)
> - Better sorting in lists
> - Memory units are now displayed correctly
> - Fixed crashing bugs when looking at hosted engine
> 
> Would you like to help/contribute?
> Sure, for example you can:
> - give feedback on the new dashboard (the one from the attachment)
> - download RC [1], test it and report bugs
> - patches are also welcome :)
> 
> have a nice day,
> Tomas
> 
> [1]: https://github.com/matobet/moVirt/blob/master/moVirt/moVirt-rele
> ase.apk?raw=true
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

Works for me™ :)

/K
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Cinder Snapshot Issues

2016-05-25 Thread Daniel Erez
According to VDSM log [1], there was a timeout error during snapshot
operation.
This could be a duplicate of bugs [2] already resolved in latest version.
Can you please provide the versions of the following components for further
investigation:
engine / vdsm / qemu-kvm-rhev / libvirt. Also, please attach libivrt/qemu
logs.

[1] jsonrpc.Executor/6::ERROR::2016-05-23
13:09:46,790::vm::3311::virt.vm::(snapshot)
vmId=`040609f6-cfe0-4763-8b32-08ffad158c93`::Unable to take snapshot
Traceback (most recent call last):
  File "/usr/share/vdsm/virt/vm.py", line 3309, in snapshot
self._dom.snapshotCreateXML(snapxml, snapFlags)
  File "/usr/share/vdsm/virt/virdomain.py", line 76, in f
raise toe
TimeoutError: Timed out during operation: cannot acquire state change lock
(held by remoteDispatchDomainSnapshotCreateXML)

[2]
https://bugzilla.redhat.com/show_bug.cgi?id=1261980
https://bugzilla.redhat.com/show_bug.cgi?id=1250839

On Mon, May 23, 2016 at 11:31 AM, Daniel Erez  wrote:

>
>
> On Tue, Apr 12, 2016 at 11:13 PM, Kevin Hrpcek  wrote:
>
>> Hello,
>>
>> I'm running into a problem with live snapshots not working when using
>> cinder/ceph disks. There are different failures for including and not
>> including memory, but in each case cinder/ceph creates a new snapshot that
>> can be seen in cinder and ceph. When doing a memory/disk snapshot the VM
>> ends up in a paused state and I need to kill -9 the qemu process to be able
>> to boot the vm again. The engine seems to be losing connection with the
>> vdsm process on the VM host after freezing the guest's filesystems. The
>> guest never receives the thaw command and it fails in the logs. I am
>> pasting in some log snippets.
>>
>> 2016-04-12 19:24:58,851 INFO
>> [org.ovirt.engine.core.bll.CreateAllSnapshotsFromVmCommand]
>> (org.ovirt.thread.pool-8-thread-27) [5c4493e] Ending command
>> 'org.ovirt.engine.core.bll.CreateAllSnapshotsFromVmCommand' successfully.
>> 2016-04-12 19:27:56,873 ERROR
>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (DefaultQuartzScheduler_Worker-27) [4d97ca06] Correlation ID: null, Call
>> Stack: null, Custom Event ID: -1, Message: VDSM OVCL1A command failed:
>> Message timeout which can be caused by communication issues
>> 2016-04-12 19:27:56,873 INFO
>> [org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand]
>> (DefaultQuartzScheduler_Worker-27) [4d97ca06] Command
>> 'org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand' return value
>> 'StatusOnlyReturnForXmlRpc [status=StatusForXmlRpc [code=5022,
>> message=Message timeout which can be caused by communication issues]]'
>> 2016-04-12 19:27:56,874 INFO
>> [org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand]
>> (DefaultQuartzScheduler_Worker-27) [4d97ca06] HostName = OVCL1A
>> 2016-04-12 19:27:56,874 ERROR
>> [org.ovirt.engine.core.vdsbroker.vdsbroker.SnapshotVDSCommand]
>> (DefaultQuartzScheduler_Worker-27) [4d97ca06] Command
>> 'SnapshotVDSCommand(HostName = OVCL1A,
>> SnapshotVDSCommandParameters:{runAsync='true',
>> hostId='9bdfaedc-34a8-4a08-ad8a-c117835a6094',
>> vmId='040609f6-cfe0-4763-8b32-08ffad158c93'})' execution failed:
>> VDSGenericException: VDSNetworkException: Message timeout which can be
>> caused by communication issues
>> 2016-04-12 19:27:56,875 WARN
>> [org.ovirt.engine.core.vdsbroker.VdsManager]
>> (org.ovirt.thread.pool-8-thread-16) [4d97ca06] Host 'OVCL1A' is not
>> responding.
>>
>> Disk only live snapshots freeze the guest file systems, the vm receives
>> the thaw command, but the VM is no longer responsive. The VM pings on the
>> network but it is hung and it also needs a kill -9 to the qemu process so
>> that it can be booted again.
>>
>> jsonrpc.Executor/0::DEBUG::2016-04-12
>> 19:41:58,342::__init__::503::jsonrpc.JsonRpcServer::(_serveRequest) Calling
>> 'VM.snapshot' in bridge with {u'frozen': True, u'vmID':
>> u'040609f6-cfe0-4763-8b32-08ffad158c93', u'snapDrives': []}
>> jsonrpc.Executor/0::INFO::2016-04-12
>> 19:41:58,343::vm::3237::virt.vm::(snapshot)
>> vmId=`040609f6-cfe0-4763-8b32-08ffad158c93`::
>> 
>> 
>>
>> jsonrpc.Executor/0::ERROR::2016-04-12
>> 19:41:58,346::vm::3252::virt.vm::(snapshot)
>> vmId=`040609f6-cfe0-4763-8b32-08ffad158c93`::Unable to take snapshot
>> Traceback (most recent call last):
>>   File "/usr/share/vdsm/virt/vm.py", line 3250, in snapshot
>> self._dom.snapshotCreateXML(snapxml, snapFlags)
>>   File "/usr/share/vdsm/virt/virdomain.py", line 68, in f
>> ret = attr(*args, **kwargs)
>>   File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
>> 124, in wrapper
>> ret = f(*args, **kwargs)
>>   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 1313, in
>> wrapper
>> return func(inst, *args, **kwargs)
>>   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 2581, in
>> snapshotCreateXML
>> if ret is None:raise libvirtError('virDomainSnapshotCreateXML()
>> failed', dom=self)
>> 

Re: [ovirt-users] How to setup host network to link ovirtmgmt with eth0 automatically?

2016-05-25 Thread Ondřej Svoboda

Kai,

The symptoms after removal of vdsm-hook-ovs look just like the ovirtmgmt 
bridged network was not created. The log to look in would be 
supervdsm.log, but it looks like yours has been rotated after supervdsmd 
was restarted (the warning is benign). Can you dig out "supervdsm.log.1"?


OVS started to be supported by the hook initially (this was the first 
attempt at supporting OVS). Currently, proper OVS support is in 
development and should appear in 4.0 as a tech-preview.


Thanks,
Ondra (osvob...@redhat.com)

On 25.5.2016 11:01, Kai Kang wrote:



On Tue, May 24, 2016 at 8:43 PM, Ondřej Svoboda > wrote:


Hi again, (correcting myself a bit)

are using the Open vSwitch hook intentionally? If not, you can
|yum remove vdsm-hook-ovs| for a while. What is your exact VDSM
version?


My VDSM version is 4.17.24 and ovirt-engine is 3.6.4. When after 
remove ovs hooks, it still fails with:


 "Host node3 does not comply with the cluster Default networks, the 
following networks are missing on host: 'ovirtmgmt'".


I checked vdsm.log it seems no erros there. And in supervdsm.log, it 
shows warnings:


sourceRoute::INFO::2016-05-25 
07:57:41,779::sourceroutethread::60::root::(process_IN_CLOSE_WRITE_filePath) 
interface ovirtmgmt is not a libvirt interface
sourceRoute::WARNING::2016-05-25 
07:57:41,780::utils::140::root::(rmFile) File: 
/var/run/vdsm/trackedInterfaces/ovirtmgmt already removed



What should I check next? Thanks.

I uploaded vdsm.log to:

https://gist.github.com/parr0tr1ver/1e38171b5d12cf77321101530276d368

and supervdsm.log:

https://gist.github.com/parr0tr1ver/97805698a485f1cd49ded2b095297531


Also, can you give a little more context from your vdsm.log, and
also from supervdsm.log? I think the vdsm.log failure is only
related to stats reporting, and is not the root problem.

If you don't have any confidential information in the logs (or you
can remove it), I suggest that you open a bug on product=vdsm at
https://bugzilla.redhat.com/ Have no fear about naming the bug, it
can be renamed if necessary.



I find there is a bug on 
https://bugzilla.redhat.com/show_bug.cgi?id=1234867. The "Target 
Milestone" to "support ovs via vdsm hook" is ovirt-3.6.7. Does that 
mean ovs does not work actually in previous versions?


Thanks a lot.

--Kai



Thanks, Ondra


On 24.5.2016 11:47, Kai Kang wrote:

Hi,

I checked vdsm.log, it show error:

jsonrpc.Executor/0::DEBUG::2016-05-24
09:46:04,056::utils::671::root::(execCmd) /usr/bin/taskset
--cpu-list 0-7 /usr/lib64/vdsm/vdsm/hooks/after_get_stats/50_ovs
(cwd None)
jsonrpc.Executor/0::DEBUG::2016-05-24
09:46:04,136::utils::689::root::(execCmd) FAILED:  =
'Traceback (most recent call last):\n  File
"/usr/lib64/vdsm/vdsm/hooks/after_get_stats/50_ovs", line 72, in
\nmain()\n  File
"/usr/lib64/vdsm/vdsm/hooks/after_get_stats/50_ovs", line 66, in
main\n
 
stats[\'network\'].update(ovs_networks_stats(stats[\'network\']))\nKeyError:
\'network\'\n\n';  = 2
jsonrpc.Executor/0::INFO::2016-05-24
09:46:04,136::hooks::98::root::(_runHooksDir) Traceback (most
recent call last):
  File "/usr/lib64/vdsm/vdsm/hooks/after_get_stats/50_ovs", line
72, in 
main()
  File "/usr/lib64/vdsm/vdsm/hooks/after_get_stats/50_ovs", line
66, in main
stats['network'].update(ovs_networks_stats(stats['network']))
KeyError: 'network'


I'm checking what wrong with it.

Thanks,
Kai



On Tue, May 24, 2016 at 3:57 PM, Kai Kang > wrote:

And network configurations on node:

[root at ovirt-node] # brctl show
bridge name bridge id STP enabled interfaces
docker0 8000.0242ae1de711 no
ovirtmgmt 8000.001320ff73aa   no  eth0

[root at ovirt-node] # ifconfig -a
docker0   Link encap:Ethernet  HWaddr 02:42:ae:1d:e7:11
  inet addr:172.17.0.1  Bcast:0.0.0.0  Mask:255.255.0.0
  UP BROADCAST MULTICAST  MTU:1500  Metric:1
  RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:0
  RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth0  Link encap:Ethernet  HWaddr 00:13:20:ff:73:aa
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:6331 errors:0 dropped:0 overruns:0 frame:0
  TX packets:2866 errors:0 dropped:0 overruns:0
carrier:0
  collisions:0 txqueuelen:1000
  RX bytes:762182 (744.3 KiB)  TX bytes:210611
(205.6 KiB)
  Interrupt:20 Memory:d110-d112

loLink encap:Local Loopback
  inet addr:127.0.0.1  

[ovirt-users] moVirt 1.4 RC1 (Android client for oVirt)

2016-05-25 Thread Tomas Jelinek
Hey All,

the first RC of moVirt 1.4 has been released! 

It can be downloaded only using direct link[1] - the play store will be 
upgraded after considered stable.

The most important feature of this release was to enhance the dashboard so it 
will look similar to the one coming to oVirt 4.0.
Screenshot attached.

Other changes:
- Added new dashboard functionality (virtual/physical consumption, clickable 
cpu/memory consumption)
- Better UI (dashboard, adding/editing triggers)
- Better sorting in lists
- Memory units are now displayed correctly
- Fixed crashing bugs when looking at hosted engine

Would you like to help/contribute?
Sure, for example you can:
- give feedback on the new dashboard (the one from the attachment)
- download RC [1], test it and report bugs
- patches are also welcome :)

have a nice day,
Tomas

[1]: 
https://github.com/matobet/moVirt/blob/master/moVirt/moVirt-release.apk?raw=true___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Could not connect to the optimizer service

2016-05-25 Thread Kapetanakis Giannis

On 25/05/16 14:28, Kapetanakis Giannis wrote:

Hi,

I've just setup optimizer service following

http://www.ovirt.org/develop/release-management/features/sla/optaplanner/ 
and

https://github.com/oVirt/ovirt-optimizer

I can access optimizer's interface and get the the solution result 
from both http and https.
I can access it from both my pc and from ovirt-engine host with a 
browser at url

ovirt-optimizer/result/Cluster_ID

However in ovirt-engine interface I see
Status: Could not connect to the optimizer service [status code: 0]

Also I see no connection attempt from ovirt-engine to optimizer (with 
logging on optimizer's firewall).


Engine is loading the conf:
2016-05-25 13:54:40,395 INFO 
[org.ovirt.engine.ui.frontend.server.gwt.plugin.PluginDataManager] 
(default task-20) [] Reading UI plugin configuration 
'/etc/ovirt-engine/ui-plugins/ovirt-optimizer-config.json'


/etc/ovirt-engine/ui-plugins/ovirt-optimizer-config.json:
"config": { "baseurl": 
"https://optimizer.example.com/ovirt-optimizer/result/;


tried also
"config": { "baseurl": 
"http://optimizer.example.com/ovirt-optimizer/result/;

incase there was a problem with optimizer's certificate.

Any ideas? How can I debug why the engine is not doing any attempt to 
get optimizer's result?


best regards,

Giannis



Forgot to mention versions:

optimizer is Centos 7 ovirt-optimizer-jboss-0.9.1-2.el7.centos.noarch
engine is Centos 6 ovirt-engine-3.6.6.2-1.el6.noarch, 
ovirt-optimizer-ui-0.9.1-2.el6.noarch


G

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Could not connect to the optimizer service

2016-05-25 Thread Kapetanakis Giannis

Hi,

I've just setup optimizer service following

http://www.ovirt.org/develop/release-management/features/sla/optaplanner/ 
and

https://github.com/oVirt/ovirt-optimizer

I can access optimizer's interface and get the the solution result from 
both http and https.
I can access it from both my pc and from ovirt-engine host with a 
browser at url

ovirt-optimizer/result/Cluster_ID

However in ovirt-engine interface I see
Status: Could not connect to the optimizer service [status code: 0]

Also I see no connection attempt from ovirt-engine to optimizer (with 
logging on optimizer's firewall).


Engine is loading the conf:
2016-05-25 13:54:40,395 INFO 
[org.ovirt.engine.ui.frontend.server.gwt.plugin.PluginDataManager] 
(default task-20) [] Reading UI plugin configuration 
'/etc/ovirt-engine/ui-plugins/ovirt-optimizer-config.json'


/etc/ovirt-engine/ui-plugins/ovirt-optimizer-config.json:
"config": { "baseurl": 
"https://optimizer.example.com/ovirt-optimizer/result/;


tried also
"config": { "baseurl": 
"http://optimizer.example.com/ovirt-optimizer/result/;

incase there was a problem with optimizer's certificate.

Any ideas? How can I debug why the engine is not doing any attempt to 
get optimizer's result?


best regards,

Giannis

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Fwd: Struggling to get the network work

2016-05-25 Thread Anantha Raghava


Hi,

Just to add on the previous mail, the vNIC is added over a Physical NIC 
that does not have any IP address, but enabled and connected.


--

Thanks & Regards,


Anantha Raghava


 Forwarded Message 
Subject:Struggling to get the network work
Date:   Wed, 25 May 2016 15:41:06 +0530
From:   Anantha Raghava 
Reply-To:   rag...@exzatechconsulting.com
Organization:   eXza Technology Consulting & Services
To: users 



Hi,

I have a peculiar problem with oVirt 3.6. Any VM connected to ovrtmgmt 
is working absolutely fine, bu the VMs (Windows Guests) in different 
VLANs say 10, 32, 34, 40, 48 & 69 are not able to even ping their 
respective gateways. In other words, network packets are not coming out 
of the VMs at all.


1. Our infrastructure consists of Lenovo Flex Chassis with 3 Lenovo x240 
Compute nodes. All nodes are up and running and VMs are also created and 
guest OS installed.

2. Chassis switch has a trunk port that carries all VLAN traffic.
3. I have created logical networks and added VLAN tags (10, 32, 24, 40, 
48 & 69).
4. I have attached the vNIC to each host and assigned static IP in 
respective VLANs. For example in VLAN 32, the vNIC is assigned with 
172.20.101.70, subnet: 255.255.255.192, Gateway: 172.20.101.65
5. VMs are mapped with respective vNIC and assigned IPs in respective 
VLAN. For Example, VM in VLAN 32 has 172.20.101.79 as IP, 
255.255.255.192 as subnet and 172.20.101.65 as gateway.


Now, VM is able to ping vNIC in VLAN 32, but neither VM is able to ping 
the gateway nor hosts are able to ping vNIC or the VM.


We even attempted with replacing a trunk port with access port, but same 
issue continues.


What could have gone wrong? Any thing missing on oVirt configuration?

A quick help is highly appreciated.

--


--

Thanks & Regards,


Anantha Raghava




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Network problem with bonding and Windows guests

2016-05-25 Thread Maxence Sartiaux
Yep work good !
Adding
ETHTOOL_OPTIONS='-K iface lro off'
to the slave interfaces config file did the job :)
Thank you !
On Wed, 2016-05-25 at 10:37 +0100, Alex Crow wrote:
> On 25/05/16 10:28, Maxence Sartiaux wrote:
> > Hello, 
> > 
> > 
> > I've a problem, all my ovirt hosts are linked with a bonding mode 4
> > (802.3ad LACP) 2x10Gbps
> > Eveything is okay with unix guest but with Windows guest, i can
> > ping but internet browsing is impossible (sometime i have a part of
> > the page, very rare case)
> > 
> > 
> > If i remove the bonding and bridge one interface, windows work
> > good.
> > 
> > 
> > I've tried with windows 7 and windows 10, guest additions are
> > installed
> > VirtIO / rtl3189 tested, same problem
> > 
> > 
> > My bonding opts : mode=4 lacp_rate=1 miimon=100
> > Interface MTU 9000
> > 
> > 
> > Bonding mode 2 also tested
> > 
>  
> On the hosts, try setting LRO off on the members of your bond, see if
> it makes a difference
> 
> eg, 
> 
> ethtool -K ens3f0 lro off
> ethtool -K ens3f1 lro off
> 
> Alex
> 
> 
> --
> This message is intended only for the addressee and may contain
> confidential information. Unless you are that person, you may not
> disclose its contents or use it in any way and are requested to
> delete
> the message along with any attachments and notify us immediately.
> This email is not intended to, nor should it be taken to, constitute
> advice.
> The information provided is correct to our knowledge & belief and
> must not
> be used as a substitute for obtaining tax, regulatory, investment,
> legal or
> any other appropriate advice.
> 
> "Transact" is operated by Integrated Financial Arrangements Ltd.
> 29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020)
> 7608 5300.
> (Registered office: as above; Registered in England and Wales under
> number: 3727592). Authorised and regulated by the Financial Conduct
> Authority (entered on the Financial Services Register; no. 190856).
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Can't perform search after setting up an Active Directory

2016-05-25 Thread Ondra Machacek

On 05/25/2016 12:20 PM, Alexis HAUSER wrote:

Hi,

I added an Active Directory server to RHEV, but I can't perform any search and 
I don't see any namespace in the interface.

I'm able to perform search using with the same search user DN / passwd and 
certificate :

LDAPTLS_CACERT=/somewhere/myca.pem ldapsearch -H ldaps://myserver.com -x -D 
'CN=Something,DC=myserver,DC=come' -w 'mypaswd' -b 
'CN=users,DC=something,DC=com'

in the engine.log, if I grep warn, I can see the following messages :

2016-05-25 05:54:55,840 WARN  [org.ovirt.engine.core.bll.SearchQuery] 
(ajp-/127.0.0.1:8702-3) [] Illegal search: ADUSER@AD-authz:undefined: 
allnames=*: null
2016-05-25 05:54:55,843 WARN  [org.ovirt.engine.core.bll.SearchQuery] 
(ajp-/127.0.0.1:8702-3) [] Illegal search: ADGROUP@AD-authz:undefined: name=*: 
null
2016-05-25 05:54:58,160 WARN  [org.ovirt.engine.core.bll.SearchQuery] 
(ajp-/127.0.0.1:8702-9) [] Illegal search: ADUSER@AD-authz:undefined: 
allnames=*: null
2016-05-25 05:54:58,162 WARN  [org.ovirt.engine.core.bll.SearchQuery] 
(ajp-/127.0.0.1:8702-9) [] Illegal search: ADGROUP@AD-authz:undefined: name=*: 
null


Can you please send what's happening during initialization of engine? 
(logs right after ovirt-engine is restarted).


Or run this command and send output of file 'login.log':

 $ ovirt-engine-extensions-tool --log-level=FINEST --log-file=login.log 
aaa login-user --profile=ad --user-name=some_user 
--password=pass:some_user_password




I also tried adding the following configuration but it didn't solve my problem :

sequence-init.init.100-my-basedn-init-vars = my-basedn-init-vars
sequence.my-basedn-init-vars.010.description = set baseDN
sequence.my-basedn-init-vars.010.type = var-set
sequence.my-basedn-init-vars.010.var-set.variable = simple_baseDN
sequence.my-basedn-init-vars.010.var-set.value = CN=Users,DC=something,DC=com

Any ideas ?




By the way, if I didn't rename my .profile and auth* files from my LDAP 
configuration, I had the LDAP namespace suggested by the web interface in my AD 
domain when trying to perform a search. Is that a bug ?


Not sure I understand. The name of the profile could be whatever, so it 
doesn't matter what is the name.



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] add user permissions to a template

2016-05-25 Thread Ondra Machacek
If I understand correctly, then 'copy template permissions' is feature 
you are looking for.


When you are creating vm from the template, click on 'Show advanced 
options' and then you can see 'copy template permissions' checkbox, 
which will do the work for you.


On 05/25/2016 11:44 AM, Nathanaël Blanchet wrote:

Hi all,

I don't want to add permission to manage a template, but I want to set
permission to this template so as to each new vm created from this
template inherits of the same permissions.
Many thanks.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Can't perform search after setting up an Active Directory

2016-05-25 Thread Alexis HAUSER
Hi,

I added an Active Directory server to RHEV, but I can't perform any search and 
I don't see any namespace in the interface.

I'm able to perform search using with the same search user DN / passwd and 
certificate :

LDAPTLS_CACERT=/somewhere/myca.pem ldapsearch -H ldaps://myserver.com -x -D 
'CN=Something,DC=myserver,DC=come' -w 'mypaswd' -b 
'CN=users,DC=something,DC=com'

in the engine.log, if I grep warn, I can see the following messages :

2016-05-25 05:54:55,840 WARN  [org.ovirt.engine.core.bll.SearchQuery] 
(ajp-/127.0.0.1:8702-3) [] Illegal search: ADUSER@AD-authz:undefined: 
allnames=*: null
2016-05-25 05:54:55,843 WARN  [org.ovirt.engine.core.bll.SearchQuery] 
(ajp-/127.0.0.1:8702-3) [] Illegal search: ADGROUP@AD-authz:undefined: name=*: 
null
2016-05-25 05:54:58,160 WARN  [org.ovirt.engine.core.bll.SearchQuery] 
(ajp-/127.0.0.1:8702-9) [] Illegal search: ADUSER@AD-authz:undefined: 
allnames=*: null
2016-05-25 05:54:58,162 WARN  [org.ovirt.engine.core.bll.SearchQuery] 
(ajp-/127.0.0.1:8702-9) [] Illegal search: ADGROUP@AD-authz:undefined: name=*: 
null

I also tried adding the following configuration but it didn't solve my problem :

sequence-init.init.100-my-basedn-init-vars = my-basedn-init-vars
sequence.my-basedn-init-vars.010.description = set baseDN
sequence.my-basedn-init-vars.010.type = var-set
sequence.my-basedn-init-vars.010.var-set.variable = simple_baseDN
sequence.my-basedn-init-vars.010.var-set.value = CN=Users,DC=something,DC=com

Any ideas ?




By the way, if I didn't rename my .profile and auth* files from my LDAP 
configuration, I had the LDAP namespace suggested by the web interface in my AD 
domain when trying to perform a search. Is that a bug ?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Struggling to get the network work

2016-05-25 Thread Anantha Raghava

Hi,

I have a peculiar problem with oVirt 3.6. Any VM connected to ovrtmgmt 
is working absolutely fine, bu the VMs (Windows Guests) in different 
VLANs say 10, 32, 34, 40, 48 & 69 are not able to even ping their 
respective gateways. In other words, network packets are not coming out 
of the VMs at all.


1. Our infrastructure consists of Lenovo Flex Chassis with 3 Lenovo x240 
Compute nodes. All nodes are up and running and VMs are also created and 
guest OS installed.

2. Chassis switch has a trunk port that carries all VLAN traffic.
3. I have created logical networks and added VLAN tags (10, 32, 24, 40, 
48 & 69).
4. I have attached the vNIC to each host and assigned static IP in 
respective VLANs. For example in VLAN 32, the vNIC is assigned with 
172.20.101.70, subnet: 255.255.255.192, Gateway: 172.20.101.65
5. VMs are mapped with respective vNIC and assigned IPs in respective 
VLAN. For Example, VM in VLAN 32 has 172.20.101.79 as IP, 
255.255.255.192 as subnet and 172.20.101.65 as gateway.


Now, VM is able to ping vNIC in VLAN 32, but neither VM is able to ping 
the gateway nor hosts are able to ping vNIC or the VM.


We even attempted with replacing a trunk port with access port, but same 
issue continues.


What could have gone wrong? Any thing missing on oVirt configuration?

A quick help is highly appreciated.

--


--

Thanks & Regards,


Anantha Raghava


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] [ANN] oVirt 3.6.7 First Release Candidate is now available for testing

2016-05-25 Thread Sandro Bonazzola
The oVirt Project is pleased to announce the availability of the First
Release Candidate of oVirt 3.6.7 for testing, as of May 25th, 2016

This release is available now for:
* Fedora 22
* Red Hat Enterprise Linux 6.7 or later
* CentOS Linux (or similar) 6.7 or later

* Red Hat Enterprise Linux 7.2 or later
* CentOS Linux (or similar) 7.2 or later

This release supports Hypervisor Hosts running:
* Red Hat Enterprise Linux 7.2 or later
* CentOS Linux (or similar) 7.2 or later
* Fedora 22

This release candidate includes the following updated packages:
* ovirt-engine
* ovirt-hosted-engine-setup
* ovirt-hosted-engine-ha
* vdsm

See the release notes [1] for installation / upgrade instructions and a
list of new features and bugs fixed.

Notes:
* A new oVirt Live ISO will be available soon [2].
* A new oVirt Node Next Install ISO will be available soon[3]
* Mirrors[4] might need up to one day to synchronize.

Additional Resources:
* Read more about the oVirt 3.6.7 release highlights:
http://www.ovirt.org/release/3.6.7/
* Get more oVirt Project updates on Twitter: https://twitter.com/ovirt
* Check out the latest project news on the oVirt blog:
http://www.ovirt.org/blog/

[1] http://www.ovirt.org/release/3.6.7/
[2] http://resources.ovirt.org/pub/ovirt-3.6-pre/iso/ovirt-live/
[3] http://resources.ovirt.org/pub/ovirt-3.6-pre/iso/ovirt-node-ng-installer/
[4] http://www.ovirt.org/Repository_mirrors#Current_mirrors


-- 
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Network problem with bonding and Windows guests

2016-05-25 Thread Alex Crow

On 25/05/16 10:28, Maxence Sartiaux wrote:

Hello,

I've a problem, all my ovirt hosts are linked with a bonding mode 4 
(802.3ad LACP) 2x10Gbps
Eveything is okay with unix guest but with Windows guest, i can ping 
but internet browsing is impossible (sometime i have a part of the 
page, very rare case)


If i remove the bonding and bridge one interface, windows work good.

I've tried with windows 7 and windows 10, guest additions are installed
VirtIO / rtl3189 tested, same problem

My bonding opts : mode=4 lacp_rate=1 miimon=100
Interface MTU 9000

Bonding mode 2 also tested


On the hosts, try setting LRO off on the members of your bond, see if it 
makes a difference


eg,

ethtool -K ens3f0 lro off
ethtool -K ens3f1 lro off

Alex


--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.
This email is not intended to, nor should it be taken to, constitute advice.
The information provided is correct to our knowledge & belief and must not
be used as a substitute for obtaining tax, regulatory, investment, legal or
any other appropriate advice.

"Transact" is operated by Integrated Financial Arrangements Ltd.
29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608 5300.
(Registered office: as above; Registered in England and Wales under
number: 3727592). Authorised and regulated by the Financial Conduct
Authority (entered on the Financial Services Register; no. 190856).___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] add user permissions to a template

2016-05-25 Thread Nathanaël Blanchet

Hi all,

I don't want to add permission to manage a template, but I want to set 
permission to this template so as to each new vm created from this 
template inherits of the same permissions.

Many thanks.

--
Nathanaël Blanchet

Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Network problem with bonding and Windows guests

2016-05-25 Thread Maxence Sartiaux
Hello, 

I've a problem, all my ovirt hosts are linked with a bonding mode 4 (802.3ad 
LACP) 2x10Gbps 
Eveything is okay with unix guest but with Windows guest, i can ping but 
internet browsing is impossible (sometime i have a part of the page, very rare 
case) 

If i remove the bonding and bridge one interface, windows work good. 

I've tried with windows 7 and windows 10, guest additions are installed 
VirtIO / rtl3189 tested, same problem 

My bonding opts : mode=4 lacp_rate=1 miimon=100 
Interface MTU 9000 

Bonding mode 2 also tested 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Ovirt Engine - Wait For Launch

2016-05-25 Thread Maton, Brett
I did a yum update on one of my Ovirt Hosts a few days ago.
All of the VM's on that host have been shown in the web UI with a status of
'Wait For Launch'.

The VM's all appear to still be up and running but I can't manage/migrate
them.

Is there anything I can do to clear this issue ?

Regards,
Brett
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Cannot sync networks

2016-05-25 Thread Alona Kaplan


- Original Message -
> From: "Alona Kaplan" 
> To: "Roderick Mooi" 
> Cc: "users" 
> Sent: Wednesday, May 25, 2016 9:35:14 AM
> Subject: Re: [ovirt-users] Cannot sync networks
> 
> 
> 
> - Original Message -
> > From: "Roderick Mooi" 
> > To: "Alona Kaplan" 
> > Cc: "users" 
> > Sent: Wednesday, May 25, 2016 9:24:28 AM
> > Subject: Re: [ovirt-users] Cannot sync networks
> > 
> > Hi Alona
> > 
> > Thanks but this is what I already tried between steps 5 and 6 - when I
> > click “ok” it tries to sync and eventually seems to give up and roll back.
> > Will it help if I uncheck “verify engine to host connectivity”? (I’m
> > surprised that the verification fails as technically the network I’m trying
> > to set is the one that is currently being used by the host and engine - all
> > I want to do is update the DC to match….)
> 
> Can you please try to perform my propose again and attach the engine + vdsm
> logs?

And also the supervdsm.log

> 
> > 
> > Regards,
> > 
> > Roderick
> > 
> > Roderick Mooi
> > 
> > Senior Engineer: South African National Research Network (SANReN)
> > Meraka Institute, CSIR
> > 
> > roder...@sanren.ac.za | +27 12 841 4111 | www.sanren.ac.za
> > 
> > On Sun, May 22, 2016 at 2:37 PM, Alona Kaplan  wrote:
> > 
> > >
> > >
> > > - Original Message -
> > > > From: "Roderick Mooi" 
> > > > To: users@ovirt.org
> > > > Sent: Tuesday, May 17, 2016 12:59:03 PM
> > > > Subject: [ovirt-users] Cannot sync networks
> > > >
> > > > Good day
> > > >
> > > > On oVirt 3.6.4 HE. I manually reconfigured host networks by doing the
> > > > following:
> > > > 1. Changed to global maintenance mode
> > > > 2. Shutdown the hosted engine
> > > > 3. on each host:
> > > > a. systemctl stop ovirt-ha-agent && systemctl stop ovirt-ha-broker &&
> > > > systemctl stop vdsmd
> > > > b. updated /var/lib/vdsm/persistence/netconf/nets to match the required
> > > > config
> > > > c. updated ifcfg files to match
> > > > d. rebooted each host
> > > > 4. When all is up and running again, verified network connectivity and
> > > > settings on each host - ok.
> > > > 5. Logged into engine web UI - all hosts detected but show network
> > > > out-of-sync (see attached example).
> > > > 6. Individual sync / sync all networks runs for a while till login time
> > > out.
> > > > Log back in and go to host - still shows out-of-sync (even next day or
> > > after
> > > > rebooting again).
> > > > 7. Eventually got one host to sync (not hosting any VMs and rebooted).
> > > > 8. Whatever I try cannot get the other hosts to sync (even when moving
> > > all
> > > > VMs off and rebooting).
> > > >
> > > > Any ideas? Do I have to manually edit the database and change the
> > > > network
> > > > settings for the DC - if so, how do I do this? (the host config is what
> > > > I
> > > > want - DC is old config.)
> > >
> > > Syncing a network means applying the DC config on the host (overriding
> > > the
> > > actual host config).
> > > Since as you mentioned, the DC config is old and not relevant,
> > > I guess it is not working since you're trying to apply wrong
> > > address/gateway/netmask on the management network, it causes the engine
> > > lose connectivity to the host, and eventually ends up with a rollback.
> > >
> > > What you need to do is to update the DC config to be same as the host
> > > config.
> > > Since the out-of-sync properties in the attached image are address,
> > > gateway and netmask of 'ovirtmgmt',
> > > you need to open the 'setup networks' dialog and edit the 'ovirtmgmt'
> > > network (clicking on the pencil icon).
> > > In order to be able to edit the network, you first have to mark the 'sync
> > > network' checkbox in the dialog. Then modify the address/gateway/netmask
> > > to
> > > the host value.
> > > Then click 'ok' and perform the setup networks ('ok' to the setup
> > > networks
> > > main dialog).
> > >
> > > >
> > > > Alternatively, if I have to start all over again, what is the correct
> > > way for
> > > > changing networks post HE install (I need this as the network for
> > > > installation and testing looks different to the final production
> > > network)?
> > > >
> > > > Thanks very much,
> > > >
> > > > Roderick
> > > >
> > > >
> > > >
> > > > ___
> > > > Users mailing list
> > > > Users@ovirt.org
> > > > http://lists.ovirt.org/mailman/listinfo/users
> > > >
> > >
> > 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Cannot sync networks

2016-05-25 Thread Alona Kaplan


- Original Message -
> From: "Roderick Mooi" 
> To: "Alona Kaplan" 
> Cc: "users" 
> Sent: Wednesday, May 25, 2016 9:24:28 AM
> Subject: Re: [ovirt-users] Cannot sync networks
> 
> Hi Alona
> 
> Thanks but this is what I already tried between steps 5 and 6 - when I
> click “ok” it tries to sync and eventually seems to give up and roll back.
> Will it help if I uncheck “verify engine to host connectivity”? (I’m
> surprised that the verification fails as technically the network I’m trying
> to set is the one that is currently being used by the host and engine - all
> I want to do is update the DC to match….)

Can you please try to perform my propose again and attach the engine + vdsm 
logs?

> 
> Regards,
> 
> Roderick
> 
> Roderick Mooi
> 
> Senior Engineer: South African National Research Network (SANReN)
> Meraka Institute, CSIR
> 
> roder...@sanren.ac.za | +27 12 841 4111 | www.sanren.ac.za
> 
> On Sun, May 22, 2016 at 2:37 PM, Alona Kaplan  wrote:
> 
> >
> >
> > - Original Message -
> > > From: "Roderick Mooi" 
> > > To: users@ovirt.org
> > > Sent: Tuesday, May 17, 2016 12:59:03 PM
> > > Subject: [ovirt-users] Cannot sync networks
> > >
> > > Good day
> > >
> > > On oVirt 3.6.4 HE. I manually reconfigured host networks by doing the
> > > following:
> > > 1. Changed to global maintenance mode
> > > 2. Shutdown the hosted engine
> > > 3. on each host:
> > > a. systemctl stop ovirt-ha-agent && systemctl stop ovirt-ha-broker &&
> > > systemctl stop vdsmd
> > > b. updated /var/lib/vdsm/persistence/netconf/nets to match the required
> > > config
> > > c. updated ifcfg files to match
> > > d. rebooted each host
> > > 4. When all is up and running again, verified network connectivity and
> > > settings on each host - ok.
> > > 5. Logged into engine web UI - all hosts detected but show network
> > > out-of-sync (see attached example).
> > > 6. Individual sync / sync all networks runs for a while till login time
> > out.
> > > Log back in and go to host - still shows out-of-sync (even next day or
> > after
> > > rebooting again).
> > > 7. Eventually got one host to sync (not hosting any VMs and rebooted).
> > > 8. Whatever I try cannot get the other hosts to sync (even when moving
> > all
> > > VMs off and rebooting).
> > >
> > > Any ideas? Do I have to manually edit the database and change the network
> > > settings for the DC - if so, how do I do this? (the host config is what I
> > > want - DC is old config.)
> >
> > Syncing a network means applying the DC config on the host (overriding the
> > actual host config).
> > Since as you mentioned, the DC config is old and not relevant,
> > I guess it is not working since you're trying to apply wrong
> > address/gateway/netmask on the management network, it causes the engine
> > lose connectivity to the host, and eventually ends up with a rollback.
> >
> > What you need to do is to update the DC config to be same as the host
> > config.
> > Since the out-of-sync properties in the attached image are address,
> > gateway and netmask of 'ovirtmgmt',
> > you need to open the 'setup networks' dialog and edit the 'ovirtmgmt'
> > network (clicking on the pencil icon).
> > In order to be able to edit the network, you first have to mark the 'sync
> > network' checkbox in the dialog. Then modify the address/gateway/netmask to
> > the host value.
> > Then click 'ok' and perform the setup networks ('ok' to the setup networks
> > main dialog).
> >
> > >
> > > Alternatively, if I have to start all over again, what is the correct
> > way for
> > > changing networks post HE install (I need this as the network for
> > > installation and testing looks different to the final production
> > network)?
> > >
> > > Thanks very much,
> > >
> > > Roderick
> > >
> > >
> > >
> > > ___
> > > Users mailing list
> > > Users@ovirt.org
> > > http://lists.ovirt.org/mailman/listinfo/users
> > >
> >
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] editing VM settting

2016-05-25 Thread Fabrice Bacchella
I thinks it's a minor thing, but still puzzling.

A new VM don't have the kernel, initrd and cmdline elements. Once added for a 
custom boot, if I remove them using the API, there are still here, but empty. 
If I use, the GUI, they vanished.

Using CLI:








Using GUI:





Not critical, but strange. Both works


> Le 24 mai 2016 à 13:36, Shmuel Melamud  a écrit :
> 
> Hi!
> 
> What do you mean under "removing values"?  You want ,  etc. 
> not to appear in engine response? There is no such thing. There is always 
> some value, empty or non-empty.
> 
> Shmuel
> 
> On Tue, Apr 12, 2016 at 6:40 PM, Fabrice Bacchella 
> > wrote:
> I'm trying to change the way a VM is booted, I want an initial setup with 
> kernel, initrd and cmdline given and later removed.
> 
> Using the GUI it works fine.
> 
> But I have no success using the python API. And running with debug enable, I 
> get this strange result :
> 
> > PUT /api/vms/8ced0f81-03fd-415b-a8ef-60141de7eeca HTTP/1.1
> ...
> > 
> > 
> > 
> > 
> ...
> < 
> < 
> < 
> < .../vmlinuz
> < .../initrd.img
> < 
> < 
> 
> I got this with:
> os_params =  params.OperatingSystem()
> os_params.set_boot(old_os_params.get_boot())
> os_params.set_type(old_os_params.get_type())
> os_params.set_kernel(None)
> os_params.set_initrd(None)
> os_params.set_cmdline(None)
> self.broker.set_os(os_params)
> self.broker.update()
> trying to set kernel and others to empty string is not really better:
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> ...
> < 
> < 
> < 
> < 
> < 
> < 
> < 
> 
> What kind of "magic values" the engine uses to removes values ?
> 
> 
> ___
> Users mailing list
> Users@ovirt.org 
> http://lists.ovirt.org/mailman/listinfo/users 
> 
> 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] How to change host networks?

2016-05-25 Thread Roderick Mooi
Good day

Can anyone assist me with this please? - I'm starting over and would like
to know how to change network settings correctly post-installation. Must I
only change it in the GUI and then sync to have the changes applied to the
hosts? Does this work for the management network?

Thanks,

Roderick

Roderick Mooi

Senior Engineer: South African National Research Network (SANReN)
Meraka Institute, CSIR

roder...@sanren.ac.za | +27 12 841 4111 | www.sanren.ac.za

On Thu, May 19, 2016 at 2:16 PM, Roderick Mooi 
wrote:

> Hi!
>
> Both. My immediate problem is in email 17 May "Cannot sync networks"
> (existing setup) with no answer as yet. But I need to do this again even if
> I start over (see detail below - I tried but it isn't working so if there's
> a better way I'd like to know)...
>
> So essentially, the network I use for setup isn't the same as the final
> production network for various reasons - one of them being the installers
> requirements re reachability and connectivity; the other that the test lab
> has a different subnet and I need to get it working there first; third
> requirement is isolation of the management network once setup is complete.
>
> I've almost managed to achieve this by putting the engine into global
> maintenance, shut down engine, manually changing the network config on the
> hosts (incl vdsm) and engine, rebooting all hosts (which eventually brings
> the engine back up), re-configuring logical networks and syncing the
> networks - this all works except the sync - it goes on for a few minutes,
> then reports lost connectivity to the host and I presume resets the network
> config - i.e. the sync doesn't succeed. Besides the hosts showing network
> not synced all functionality except migration seems to be working (all
> hosts visible and reachable and I can start a VM on any of them)
>
> Thanks very much,
>
> Roderick
>
> Roderick Mooi
>
> Senior Engineer: South African National Research Network (SANReN)
> Meraka Institute, CSIR
>
> roder...@sanren.ac.za | +27 12 841 4111 | www.sanren.ac.za
>
> On Wed, May 18, 2016 at 3:25 PM, Shmuel Melamud 
> wrote:
>
>> Hi!
>>
>> ​Do you have any existing setup that you want to migrate or you're only
>> planning?
>>
>> ​Shmuel​
>>
>> On Wed, May 18, 2016 at 2:04 PM, Roderick Mooi 
>> wrote:
>>
>>> Good day
>>>
>>> I would like to change the IP addresses of the host networks used by
>>> Ovirt including the ovirtmgmt bridge. I need to move them to a different
>>> subnet post installation. What is the best/safest way to do this?
>>>
>>> Thanks,
>>>
>>> Roderick Mooi
>>>
>>> Senior Engineer: South African National Research Network (SANReN)
>>> Meraka Institute, CSIR
>>>
>>> roder...@sanren.ac.za | +27 12 841 4111 | www.sanren.ac.za
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Cannot sync networks

2016-05-25 Thread Roderick Mooi
Hi Alona

Thanks but this is what I already tried between steps 5 and 6 - when I
click “ok” it tries to sync and eventually seems to give up and roll back.
Will it help if I uncheck “verify engine to host connectivity”? (I’m
surprised that the verification fails as technically the network I’m trying
to set is the one that is currently being used by the host and engine - all
I want to do is update the DC to match….)

Regards,

Roderick

Roderick Mooi

Senior Engineer: South African National Research Network (SANReN)
Meraka Institute, CSIR

roder...@sanren.ac.za | +27 12 841 4111 | www.sanren.ac.za

On Sun, May 22, 2016 at 2:37 PM, Alona Kaplan  wrote:

>
>
> - Original Message -
> > From: "Roderick Mooi" 
> > To: users@ovirt.org
> > Sent: Tuesday, May 17, 2016 12:59:03 PM
> > Subject: [ovirt-users] Cannot sync networks
> >
> > Good day
> >
> > On oVirt 3.6.4 HE. I manually reconfigured host networks by doing the
> > following:
> > 1. Changed to global maintenance mode
> > 2. Shutdown the hosted engine
> > 3. on each host:
> > a. systemctl stop ovirt-ha-agent && systemctl stop ovirt-ha-broker &&
> > systemctl stop vdsmd
> > b. updated /var/lib/vdsm/persistence/netconf/nets to match the required
> > config
> > c. updated ifcfg files to match
> > d. rebooted each host
> > 4. When all is up and running again, verified network connectivity and
> > settings on each host - ok.
> > 5. Logged into engine web UI - all hosts detected but show network
> > out-of-sync (see attached example).
> > 6. Individual sync / sync all networks runs for a while till login time
> out.
> > Log back in and go to host - still shows out-of-sync (even next day or
> after
> > rebooting again).
> > 7. Eventually got one host to sync (not hosting any VMs and rebooted).
> > 8. Whatever I try cannot get the other hosts to sync (even when moving
> all
> > VMs off and rebooting).
> >
> > Any ideas? Do I have to manually edit the database and change the network
> > settings for the DC - if so, how do I do this? (the host config is what I
> > want - DC is old config.)
>
> Syncing a network means applying the DC config on the host (overriding the
> actual host config).
> Since as you mentioned, the DC config is old and not relevant,
> I guess it is not working since you're trying to apply wrong
> address/gateway/netmask on the management network, it causes the engine
> lose connectivity to the host, and eventually ends up with a rollback.
>
> What you need to do is to update the DC config to be same as the host
> config.
> Since the out-of-sync properties in the attached image are address,
> gateway and netmask of 'ovirtmgmt',
> you need to open the 'setup networks' dialog and edit the 'ovirtmgmt'
> network (clicking on the pencil icon).
> In order to be able to edit the network, you first have to mark the 'sync
> network' checkbox in the dialog. Then modify the address/gateway/netmask to
> the host value.
> Then click 'ok' and perform the setup networks ('ok' to the setup networks
> main dialog).
>
> >
> > Alternatively, if I have to start all over again, what is the correct
> way for
> > changing networks post HE install (I need this as the network for
> > installation and testing looks different to the final production
> network)?
> >
> > Thanks very much,
> >
> > Roderick
> >
> >
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users