[ovirt-users] HA Score

[knarra]

Hi,

I have latest 4.1 installed and i see that HA score on hosts keeps 
going to 0  and comes back to  3400. This behavior is something which i 
am observing with 4.1  and i see that it takes considerable amount of 
time to get back to normal state. Any reason why it takes such a long time?


Thanks

kasturi.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Current status of 4.0.6 | EL7.3?

[Robert Story]

On Thu, 29 Dec 2016 15:32:07 -0500 Derek wrote:
DA> Hi,
DA> 
DA> What is the current status of Ovirt 4.0.6 and EL7.3?  From previous
DA> threads it seemed to me that there was a potential compatibility issue
DA> with the 7.3 kernel and an updated version of vdsm or qemu?  I just want
DA> to ensure any potential issues have been cleared up before I upgrade my
DA> systems.
DA> 
DA> Thanks,
DA> 
DA> -derek
DA> 

I think you need to enable CentOS Virt SIG repo to get the latest qemu-kvm:

# yum list qemu-kvm-common\*
qemu-kvm-common.x86_64   10:1.5.3-126.el7   base

# yum install http://resources.ovirt.org/pub/yum-repo/ovirt-release40.rpm
# yum -C list qemu-kvm-common\*
qemu-kvm-common.x86_64 10:1.5.3-126.el7base 
qemu-kvm-common-ev.x86_64  10:2.3.0-31.el7.16.1ovirt-4.0

# yum install centos-release-qemu-ev
# yum list qemu-kvm-common\*
qemu-kvm-common.x86_64   10:1.5.3-126.el7 base
qemu-kvm-common-ev.x86_6410:2.6.0-27.1.el7centos-qemu-ev

That worked for me earlier this week.


Robert

-- 
Senior Software Engineer @ Parsons


pgp2DWsMRsLUl.pgp
Description: OpenPGP digital signature
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Sverker Abrahamsson]

Even better, if the value is not hardcoded then the configured value is 
used. Might be that I'm missunderstanding something but this is the 
behaviour I expected instead of that it is using br-int.


Attached is a patch which properly sets up the xml, in case there is 
already a virtual port there + testcode of some variants


/Sverker

Den 2016-12-29 kl. 22:55, skrev Sverker Abrahamsson:


When I change 
/usr/libexec/vdsm/hooks/before_device_create/ovirt_provider_ovn_hook 
to instead of hardcoded to br-int use BRIDGE_NAME = 'ovirtbridge' then 
I get the expected behaviour and I get a working network connectivity 
in my VM with IP provided by dhcp.


/Sverker

Den 2016-12-29 kl. 22:07, skrev Sverker Abrahamsson:


By default the vNic profile of my OVN bridge ovirtbridge gets a 
Network filter named vdsm-no-mac-spoofing. If I instead set No filter 
then I don't get those ebtables / iptables messages. It seems that 
there is some issue between ovirt/vdsm and firewalld, which we can 
put to the side for now.


It is not clear for me why the port is added on br-int instead of the 
bridge I've assigned to the VM, which is ovirtbridge??


/Sverker

Den 2016-12-29 kl. 14:20, skrev Sverker Abrahamsson:


The specific command most likely fails because there is no chain 
named libvirt-J-vnet0, but when should that have been created?

/Sverker

 Vidarebefordrat meddelande 
Ämne: 	Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt 
network

Datum:  Thu, 29 Dec 2016 08:06:29 -0500 (EST)
Från:   Marcin Mirecki 
Till:   Sverker Abrahamsson 
Kopia: 	Ovirt Users , Lance Richardson 
, Numan Siddique 




Let me add the OVN team.

Lance, Numan,

Can you please look at this?

Trying to plug a vNIC results in:
> >> Dec 28 23:31:35 h2 ovs-vsctl: ovs|1|vsctl|INFO|Called as ovs-vsctl
> >> --timeout=5 -- --if-exists del-port vnet0 -- add-port br-int vnet0 --
> >> set Interface vnet0 "external-ids:attached-mac=\"00:1a:4a:16:01:51\""
> >> -- set Interface vnet0
> >> "external-ids:iface-id=\"e8853aac-8a75-41b0-8010-e630017dcdd8\"" --
> >> set Interface vnet0
> >> "external-ids:vm-id=\"b9440d60-ef5a-4e2b-83cf-081df7c09e6f\"" -- set
> >> Interface vnet0 external-ids:iface-status=active
> >> Dec 28 23:31:35 h2 kernel: device vnet0 entered promiscuous mode
> >> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> >> '/usr/sbin/ebtables --concurrent -t nat -D PREROUTING -i vnet0 -j
> >> libvirt-J-vnet0' failed:
> >> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:

More details below


- Original Message -
> From: "Sverker Abrahamsson"
> To: "Marcin Mirecki"
> Cc: "Ovirt Users"
> Sent: Thursday, December 29, 2016 1:42:11 PM
> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network
>
> Hi
> Same problem still..
> /Sverker
>
> Den 2016-12-29 kl. 13:34, skrev Marcin Mirecki:
> > Hi,
> >
> > The tunnels are created to connect multiple OVN controllers.
> > If there is only one, there is no need for the tunnels, so none
> > will be created, this is the correct behavior.
> >
> > Does the problem still occur after setting configuring the OVN-controller?
> >
> > Marcin
> >
> > - Original Message -
> >> From: "Sverker Abrahamsson"
> >> To: "Marcin Mirecki"
> >> Cc: "Ovirt Users"
> >> Sent: Thursday, December 29, 2016 11:44:32 AM
> >> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt
> >> network
> >>
> >> Hi
> >> The rpm packages you listed in the other mail are installed but I had
> >> not run vdsm-tool ovn-config to create tunnel as the OVN controller is
> >> on the same host.
> >>
> >> [root@h2 ~]# rpm -q openvswitch-ovn-common
> >> openvswitch-ovn-common-2.6.90-1.el7.centos.x86_64
> >> [root@h2 ~]# rpm -q openvswitch-ovn-host
> >> openvswitch-ovn-host-2.6.90-1.el7.centos.x86_64
> >> [root@h2 ~]# rpm -q python-openvswitch
> >> python-openvswitch-2.6.90-1.el7.centos.noarch
> >>
> >> After removing my manually created br-int and run
> >>
> >> vdsm-tool ovn-config 127.0.0.1 172.27.1.1
> >>
> >> then I have the br-int but 'ip link show' does not show any link
> >> 'genev_sys_' nor does 'ovs-vsctl show' any port for ovn. I assume these
> >> are when there is an actual tunnel?
> >>
> >> [root@h2 ~]# ovs-vsctl show
> >> ebb6aede-cbbc-4f4f-a88a-a9cd72b2bd23
> >>   Bridge br-int
> >>   fail_mode: secure
> >>   Port br-int
> >>   Interface br-int
> >>   type: internal
> >>   Bridge ovirtbridge
> >>   Port ovirtbridge
> >>   Interface ovirtbridge
> >>   type: internal
> >>   Bridge "ovsbridge0"
> >>   Port "ovsbridge0"
> >>   Interface "ovsbridge0"
> >>   

Re: [ovirt-users] hosted_storage locked

[Gary Pedretty]

Ok so I tried destroying the storage domain.  The system then tried to import 
it automatically again but it failed with the following event logged in the 
Manager Events Log

Failed to attach Storage Domain hosted_storage to Data Center DOH. (User: 
SYSTEM)

I tried this twice and same thing each time.


If I try to mount the gluster volume on one of the hosts, it will mount just 
fine and I can see all the files and it is read/writeable by root.

Nothing unusual in the glusterfs volume status etc.


Gary



Gary Pedrettyg...@ravnalaska.net 

Systems Manager  www.flyravn.com 

Ravn Alaska   /\907-450-7251
5245 Airport Industrial Road /  \/\ 907-450-7238 fax
Fairbanks, Alaska  99709/\  /\ \ Second greatest commandment
Serving All of Alaska  /  \/  /\  \ \/\   “Love your neighbor as
Really loving the record green up date! Summmer!!   yourself” Matt 22:39













> On Dec 29, 2016, at 12:38 AM, Evgenia Tokar  wrote:
> 
> 
> I would suggest:
> 1. Verify the you can access the storage domain. 
> 2. If you can access the domain, you can try removing it from the ui (I think 
> the destroy option should be available). 
> After the removal the engine will try to reimport it, and hopefully will 
> succeed. 
> Removing the storage domain may cause the engine and the ha-agent to 
> restart. 
> 
> Jenny
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Overlapping packages in CentOS 7 repo files from ovirt and mirror.centos.org

[Richard Chan]

Hi all,

The repo files for ovirt-4.0 seem to have overlapping packages from (el7 vs
centos.el7 naming).

resources.ovirt.org: ovirt-4.0

and

mirror.centos.org/centos/7/virt/x86_64/ovirt-4.0/: centos-ovirt40-release

for example

vdsm-4.18.15.3-1.el7.centos.x86_64.rpm

vs

vdsm-4.18.15.3-1.el7.x86_64.rpm


Which one should "win"? We need this for auditing purposes.

Thanks.


-- 
Richard Chan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] hosted_storage locked

[Gary Pedretty]

Destroying it was going to be my next move, just wanted to make sure that was 
the best option.  Yes I can mount the gluster volume “engine” directly on one 
of the hosts without issue.  The engine is obviously accessing it ok or at 
least enough that it can run as a VM image located on it.  

I will shut down any other VMs before trying this, but it makes sense that it 
should just re-import it.

Thanks

Gary



Gary Pedrettyg...@ravnalaska.net 

Systems Manager  www.flyravn.com 

Ravn Alaska   /\907-450-7251
5245 Airport Industrial Road /  \/\ 907-450-7238 fax
Fairbanks, Alaska  99709/\  /\ \ Second greatest commandment
Serving All of Alaska  /  \/  /\  \ \/\   “Love your neighbor as
Really loving the record green up date! Summmer!!   yourself” Matt 22:39





> On Dec 29, 2016, at 12:38 AM, Evgenia Tokar  wrote:
> 
> 
> I would suggest:
> 1. Verify the you can access the storage domain. 
> 2. If you can access the domain, you can try removing it from the ui (I think 
> the destroy option should be available). 
> After the removal the engine will try to reimport it, and hopefully will 
> succeed. 
> Removing the storage domain may cause the engine and the ha-agent to 
> restart. 
> 
> Jenny
> 
>  

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Sverker Abrahamsson]

When I change 
/usr/libexec/vdsm/hooks/before_device_create/ovirt_provider_ovn_hook to 
instead of hardcoded to br-int use BRIDGE_NAME = 'ovirtbridge' then I 
get the expected behaviour and I get a working network connectivity in 
my VM with IP provided by dhcp.


/Sverker

Den 2016-12-29 kl. 22:07, skrev Sverker Abrahamsson:


By default the vNic profile of my OVN bridge ovirtbridge gets a 
Network filter named vdsm-no-mac-spoofing. If I instead set No filter 
then I don't get those ebtables / iptables messages. It seems that 
there is some issue between ovirt/vdsm and firewalld, which we can put 
to the side for now.


It is not clear for me why the port is added on br-int instead of the 
bridge I've assigned to the VM, which is ovirtbridge??


/Sverker

Den 2016-12-29 kl. 14:20, skrev Sverker Abrahamsson:


The specific command most likely fails because there is no chain 
named libvirt-J-vnet0, but when should that have been created?

/Sverker

 Vidarebefordrat meddelande 
Ämne: 	Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt 
network

Datum:  Thu, 29 Dec 2016 08:06:29 -0500 (EST)
Från:   Marcin Mirecki 
Till:   Sverker Abrahamsson 
Kopia: 	Ovirt Users , Lance Richardson 
, Numan Siddique 




Let me add the OVN team.

Lance, Numan,

Can you please look at this?

Trying to plug a vNIC results in:
> >> Dec 28 23:31:35 h2 ovs-vsctl: ovs|1|vsctl|INFO|Called as ovs-vsctl
> >> --timeout=5 -- --if-exists del-port vnet0 -- add-port br-int vnet0 --
> >> set Interface vnet0 "external-ids:attached-mac=\"00:1a:4a:16:01:51\""
> >> -- set Interface vnet0
> >> "external-ids:iface-id=\"e8853aac-8a75-41b0-8010-e630017dcdd8\"" --
> >> set Interface vnet0
> >> "external-ids:vm-id=\"b9440d60-ef5a-4e2b-83cf-081df7c09e6f\"" -- set
> >> Interface vnet0 external-ids:iface-status=active
> >> Dec 28 23:31:35 h2 kernel: device vnet0 entered promiscuous mode
> >> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> >> '/usr/sbin/ebtables --concurrent -t nat -D PREROUTING -i vnet0 -j
> >> libvirt-J-vnet0' failed:
> >> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:

More details below


- Original Message -
> From: "Sverker Abrahamsson"
> To: "Marcin Mirecki"
> Cc: "Ovirt Users"
> Sent: Thursday, December 29, 2016 1:42:11 PM
> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network
>
> Hi
> Same problem still..
> /Sverker
>
> Den 2016-12-29 kl. 13:34, skrev Marcin Mirecki:
> > Hi,
> >
> > The tunnels are created to connect multiple OVN controllers.
> > If there is only one, there is no need for the tunnels, so none
> > will be created, this is the correct behavior.
> >
> > Does the problem still occur after setting configuring the OVN-controller?
> >
> > Marcin
> >
> > - Original Message -
> >> From: "Sverker Abrahamsson"
> >> To: "Marcin Mirecki"
> >> Cc: "Ovirt Users"
> >> Sent: Thursday, December 29, 2016 11:44:32 AM
> >> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt
> >> network
> >>
> >> Hi
> >> The rpm packages you listed in the other mail are installed but I had
> >> not run vdsm-tool ovn-config to create tunnel as the OVN controller is
> >> on the same host.
> >>
> >> [root@h2 ~]# rpm -q openvswitch-ovn-common
> >> openvswitch-ovn-common-2.6.90-1.el7.centos.x86_64
> >> [root@h2 ~]# rpm -q openvswitch-ovn-host
> >> openvswitch-ovn-host-2.6.90-1.el7.centos.x86_64
> >> [root@h2 ~]# rpm -q python-openvswitch
> >> python-openvswitch-2.6.90-1.el7.centos.noarch
> >>
> >> After removing my manually created br-int and run
> >>
> >> vdsm-tool ovn-config 127.0.0.1 172.27.1.1
> >>
> >> then I have the br-int but 'ip link show' does not show any link
> >> 'genev_sys_' nor does 'ovs-vsctl show' any port for ovn. I assume these
> >> are when there is an actual tunnel?
> >>
> >> [root@h2 ~]# ovs-vsctl show
> >> ebb6aede-cbbc-4f4f-a88a-a9cd72b2bd23
> >>   Bridge br-int
> >>   fail_mode: secure
> >>   Port br-int
> >>   Interface br-int
> >>   type: internal
> >>   Bridge ovirtbridge
> >>   Port ovirtbridge
> >>   Interface ovirtbridge
> >>   type: internal
> >>   Bridge "ovsbridge0"
> >>   Port "ovsbridge0"
> >>   Interface "ovsbridge0"
> >>   type: internal
> >>   Port "eth0"
> >>   Interface "eth0"
> >>   ovs_version: "2.6.90"
> >>
> >> [root@h2 ~]# ip link show
> >> 1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode
> >> DEFAULT qlen 1
> >>   link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> >> 2: eth0:  mtu 1500 qdisc pfifo_fast
> >> 

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Sverker Abrahamsson]

By default the vNic profile of my OVN bridge ovirtbridge gets a Network 
filter named vdsm-no-mac-spoofing. If I instead set No filter then I 
don't get those ebtables / iptables messages. It seems that there is 
some issue between ovirt/vdsm and firewalld, which we can put to the 
side for now.


It is not clear for me why the port is added on br-int instead of the 
bridge I've assigned to the VM, which is ovirtbridge??


/Sverker

Den 2016-12-29 kl. 14:20, skrev Sverker Abrahamsson:


The specific command most likely fails because there is no chain named 
libvirt-J-vnet0, but when should that have been created?

/Sverker

 Vidarebefordrat meddelande 
Ämne: 	Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt 
network

Datum:  Thu, 29 Dec 2016 08:06:29 -0500 (EST)
Från:   Marcin Mirecki 
Till:   Sverker Abrahamsson 
Kopia: 	Ovirt Users , Lance Richardson 
, Numan Siddique 




Let me add the OVN team.

Lance, Numan,

Can you please look at this?

Trying to plug a vNIC results in:
> >> Dec 28 23:31:35 h2 ovs-vsctl: ovs|1|vsctl|INFO|Called as ovs-vsctl
> >> --timeout=5 -- --if-exists del-port vnet0 -- add-port br-int vnet0 --
> >> set Interface vnet0 "external-ids:attached-mac=\"00:1a:4a:16:01:51\""
> >> -- set Interface vnet0
> >> "external-ids:iface-id=\"e8853aac-8a75-41b0-8010-e630017dcdd8\"" --
> >> set Interface vnet0
> >> "external-ids:vm-id=\"b9440d60-ef5a-4e2b-83cf-081df7c09e6f\"" -- set
> >> Interface vnet0 external-ids:iface-status=active
> >> Dec 28 23:31:35 h2 kernel: device vnet0 entered promiscuous mode
> >> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> >> '/usr/sbin/ebtables --concurrent -t nat -D PREROUTING -i vnet0 -j
> >> libvirt-J-vnet0' failed:
> >> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:

More details below


- Original Message -
> From: "Sverker Abrahamsson"
> To: "Marcin Mirecki"
> Cc: "Ovirt Users"
> Sent: Thursday, December 29, 2016 1:42:11 PM
> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network
>
> Hi
> Same problem still..
> /Sverker
>
> Den 2016-12-29 kl. 13:34, skrev Marcin Mirecki:
> > Hi,
> >
> > The tunnels are created to connect multiple OVN controllers.
> > If there is only one, there is no need for the tunnels, so none
> > will be created, this is the correct behavior.
> >
> > Does the problem still occur after setting configuring the OVN-controller?
> >
> > Marcin
> >
> > - Original Message -
> >> From: "Sverker Abrahamsson"
> >> To: "Marcin Mirecki"
> >> Cc: "Ovirt Users"
> >> Sent: Thursday, December 29, 2016 11:44:32 AM
> >> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt
> >> network
> >>
> >> Hi
> >> The rpm packages you listed in the other mail are installed but I had
> >> not run vdsm-tool ovn-config to create tunnel as the OVN controller is
> >> on the same host.
> >>
> >> [root@h2 ~]# rpm -q openvswitch-ovn-common
> >> openvswitch-ovn-common-2.6.90-1.el7.centos.x86_64
> >> [root@h2 ~]# rpm -q openvswitch-ovn-host
> >> openvswitch-ovn-host-2.6.90-1.el7.centos.x86_64
> >> [root@h2 ~]# rpm -q python-openvswitch
> >> python-openvswitch-2.6.90-1.el7.centos.noarch
> >>
> >> After removing my manually created br-int and run
> >>
> >> vdsm-tool ovn-config 127.0.0.1 172.27.1.1
> >>
> >> then I have the br-int but 'ip link show' does not show any link
> >> 'genev_sys_' nor does 'ovs-vsctl show' any port for ovn. I assume these
> >> are when there is an actual tunnel?
> >>
> >> [root@h2 ~]# ovs-vsctl show
> >> ebb6aede-cbbc-4f4f-a88a-a9cd72b2bd23
> >>   Bridge br-int
> >>   fail_mode: secure
> >>   Port br-int
> >>   Interface br-int
> >>   type: internal
> >>   Bridge ovirtbridge
> >>   Port ovirtbridge
> >>   Interface ovirtbridge
> >>   type: internal
> >>   Bridge "ovsbridge0"
> >>   Port "ovsbridge0"
> >>   Interface "ovsbridge0"
> >>   type: internal
> >>   Port "eth0"
> >>   Interface "eth0"
> >>   ovs_version: "2.6.90"
> >>
> >> [root@h2 ~]# ip link show
> >> 1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode
> >> DEFAULT qlen 1
> >>   link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> >> 2: eth0:  mtu 1500 qdisc pfifo_fast
> >> master ovs-system state UP mode DEFAULT qlen 1000
> >>   link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
> >> 3: ovs-system:  mtu 1500 qdisc noop state DOWN mode
> >> DEFAULT qlen 1000
> >>   link/ether 5a:14:cf:28:47:e2 brd ff:ff:ff:ff:ff:ff
> >> 4: ovsbridge0:  mtu 

[ovirt-users] Current status of 4.0.6 | EL7.3?

[Derek Atkins]

Hi,

What is the current status of Ovirt 4.0.6 and EL7.3?  From previous
threads it seemed to me that there was a potential compatibility issue
with the 7.3 kernel and an updated version of vdsm or qemu?  I just want
to ensure any potential issues have been cleared up before I upgrade my
systems.

Thanks,

-derek

-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Sverker Abrahamsson]

After a reboot I ran into a new problem, vdsm-network did not want to 
start. First because of that it tried to establish default route on the 
dummy interface:


Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: Traceback (most 
recent call last):
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/share/vdsm/vdsm-restore-net-config", line 482, in 

Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: restore(args)
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/share/vdsm/vdsm-restore-net-config", line 445, in restore

Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: unified_restoration()
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/share/vdsm/vdsm-restore-net-config", line 145, in unified_restoration

Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: '_inRollback': True})
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/lib/python2.7/site-packages/vdsm/network/api.py", line 253, in 
setupNetworks
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: 
ipvalidator.validate(networks)
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/lib/python2.7/site-packages/vdsm/network/ip/validator.py", line 
43, in validate
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: 
_validate_default_route(default_route_nets, no_default_route_nets)
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/lib/python2.7/site-packages/vdsm/network/ip/validator.py", line 
53, in _validate_default_route
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: 'Only a singe 
default route network is allowed.')
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: 
vdsm.network.errors.ConfigNetworkError: (21, 'Only a singe default route 
network is allowed.')
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: Traceback (most 
recent call last):
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/bin/vdsm-tool", line 219, in main
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: return 
tool_command[cmd]["command"](*args)
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/lib/python2.7/site-packages/vdsm/tool/restore_nets.py", line 41, 
in restore_command

Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: exec_restore(cmd)
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: File 
"/usr/lib/python2.7/site-packages/vdsm/tool/restore_nets.py", line 54, 
in exec_restore
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: raise 
EnvironmentError('Failed to restore the persisted networks')
Dec 29 20:57:44 h2.limetransit.com vdsm-tool[23132]: EnvironmentError: 
Failed to restore the persisted networks


I edit /var/lib/vdsm/persistence/netconf/nets/ovirtmgmt to set 
defaultroute=false, but then it complain about nameservers:


Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: Traceback (most 
recent call last):
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 
"/usr/share/vdsm/vdsm-restore-net-config", line 482, in 

Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: restore(args)
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 
"/usr/share/vdsm/vdsm-restore-net-config", line 445, in restore

Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: unified_restoration()
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 
"/usr/share/vdsm/vdsm-restore-net-config", line 145, in unified_restoration

Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: '_inRollback': True})
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 
"/usr/lib/python2.7/site-packages/vdsm/network/api.py", line 253, in 
setupNetworks
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: 
ipvalidator.validate(networks)
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 
"/usr/lib/python2.7/site-packages/vdsm/network/ip/validator.py", line 
36, in validate
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: 
_validate_nameservers(net, attrs)
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 
"/usr/lib/python2.7/site-packages/vdsm/network/ip/validator.py", line 
58, in _validate_nameservers
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: 
_validate_nameservers_network(attrs)
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 
"/usr/lib/python2.7/site-packages/vdsm/network/ip/validator.py", line 
66, in _validate_nameservers_network
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: 'Name servers may 
only be defined on the default host network')
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: 
vdsm.network.errors.ConfigNetworkError: (21, 'Name servers may only be 
defined on the default host network')
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: Traceback (most 
recent call last):
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 
"/usr/bin/vdsm-tool", line 219, in main
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: return 
tool_command[cmd]["command"](*args)
Dec 29 21:08:09 h2.limetransit.com vdsm-tool[3736]: File 

Re: [ovirt-users] oVirt 3.6.7 upgrade to 4.0.5 and CentOS 7.3

[Robert Story]

On Wed, 28 Dec 2016 09:39:16 +0200 Yaniv wrote:
YK> On Dec 27, 2016 10:09 PM, "Robert Story"  wrote:
YK> >Just as a counterpoint, I had 2 issues, but both were related to changes
YK> >I'd made..
YK> >
YK> >- I have ipv6 disabled. with CentOS 7.3 this can cause rpcbind to choke,
YK> >  causing cascading dependency failures. I had to manually tweak systemd
YK> >  config.
YK> 
YK> Did you open a bug about it, on rpcbind?

There was an existing bug. Unfortunately it's another case of people just
accepting that systemd can break what ever it wants and folks just have to
'get over it'.

  https://bugzilla.redhat.com/show_bug.cgi?id=1402961

YK> - I had tweaked vdsm.conf for debugging a long time ago, so the new version
YK>   installed it's conf file as vsdm.conf.rpmnew. New vdsm uses a different
YK>   logger, and wouldn't start with the old logger config. No error message,
YK>   0 byte log file. Copying rpmnew conf file over existing log files fixed
YK>   this one.
YK> 
YK> That is somewhat expected.

It is a little distressing that it fails with no indication of why it's
failing. It would be nice if something caught stderr to be able to log it.


I also forgot about my 3rd issue - the GUI 'broke' because I had a CNAME
for ovirt.local to ovirt-engine.local. Luckily I don't have a lot of users
to retrain to use a different domain name.


Robert

-- 
Senior Software Engineer @ Parsons


pgpO_2JrcMf1O.pgp
Description: OpenPGP digital signature
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Sverker Abrahamsson]

The specific command most likely fails because there is no chain named 
libvirt-J-vnet0, but when should that have been created?

/Sverker

 Vidarebefordrat meddelande 
Ämne:   Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network
Datum:  Thu, 29 Dec 2016 08:06:29 -0500 (EST)
Från:   Marcin Mirecki 
Till:   Sverker Abrahamsson 
Kopia: 	Ovirt Users , Lance Richardson 
, Numan Siddique 




Let me add the OVN team.

Lance, Numan,

Can you please look at this?

Trying to plug a vNIC results in:

>> Dec 28 23:31:35 h2 ovs-vsctl: ovs|1|vsctl|INFO|Called as ovs-vsctl
>> --timeout=5 -- --if-exists del-port vnet0 -- add-port br-int vnet0 --
>> set Interface vnet0 "external-ids:attached-mac=\"00:1a:4a:16:01:51\""
>> -- set Interface vnet0
>> "external-ids:iface-id=\"e8853aac-8a75-41b0-8010-e630017dcdd8\"" --
>> set Interface vnet0
>> "external-ids:vm-id=\"b9440d60-ef5a-4e2b-83cf-081df7c09e6f\"" -- set
>> Interface vnet0 external-ids:iface-status=active
>> Dec 28 23:31:35 h2 kernel: device vnet0 entered promiscuous mode
>> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
>> '/usr/sbin/ebtables --concurrent -t nat -D PREROUTING -i vnet0 -j
>> libvirt-J-vnet0' failed:
>> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:


More details below


- Original Message -

From: "Sverker Abrahamsson" 
To: "Marcin Mirecki" 
Cc: "Ovirt Users" 
Sent: Thursday, December 29, 2016 1:42:11 PM
Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

Hi
Same problem still..
/Sverker

Den 2016-12-29 kl. 13:34, skrev Marcin Mirecki:
> Hi,
>
> The tunnels are created to connect multiple OVN controllers.
> If there is only one, there is no need for the tunnels, so none
> will be created, this is the correct behavior.
>
> Does the problem still occur after setting configuring the OVN-controller?
>
> Marcin
>
> - Original Message -
>> From: "Sverker Abrahamsson" 
>> To: "Marcin Mirecki" 
>> Cc: "Ovirt Users" 
>> Sent: Thursday, December 29, 2016 11:44:32 AM
>> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt
>> network
>>
>> Hi
>> The rpm packages you listed in the other mail are installed but I had
>> not run vdsm-tool ovn-config to create tunnel as the OVN controller is
>> on the same host.
>>
>> [root@h2 ~]# rpm -q openvswitch-ovn-common
>> openvswitch-ovn-common-2.6.90-1.el7.centos.x86_64
>> [root@h2 ~]# rpm -q openvswitch-ovn-host
>> openvswitch-ovn-host-2.6.90-1.el7.centos.x86_64
>> [root@h2 ~]# rpm -q python-openvswitch
>> python-openvswitch-2.6.90-1.el7.centos.noarch
>>
>> After removing my manually created br-int and run
>>
>> vdsm-tool ovn-config 127.0.0.1 172.27.1.1
>>
>> then I have the br-int but 'ip link show' does not show any link
>> 'genev_sys_' nor does 'ovs-vsctl show' any port for ovn. I assume these
>> are when there is an actual tunnel?
>>
>> [root@h2 ~]# ovs-vsctl show
>> ebb6aede-cbbc-4f4f-a88a-a9cd72b2bd23
>>   Bridge br-int
>>   fail_mode: secure
>>   Port br-int
>>   Interface br-int
>>   type: internal
>>   Bridge ovirtbridge
>>   Port ovirtbridge
>>   Interface ovirtbridge
>>   type: internal
>>   Bridge "ovsbridge0"
>>   Port "ovsbridge0"
>>   Interface "ovsbridge0"
>>   type: internal
>>   Port "eth0"
>>   Interface "eth0"
>>   ovs_version: "2.6.90"
>>
>> [root@h2 ~]# ip link show
>> 1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode
>> DEFAULT qlen 1
>>   link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>> 2: eth0:  mtu 1500 qdisc pfifo_fast
>> master ovs-system state UP mode DEFAULT qlen 1000
>>   link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
>> 3: ovs-system:  mtu 1500 qdisc noop state DOWN mode
>> DEFAULT qlen 1000
>>   link/ether 5a:14:cf:28:47:e2 brd ff:ff:ff:ff:ff:ff
>> 4: ovsbridge0:  mtu 1500 qdisc noqueue
>> state UNKNOWN mode DEFAULT qlen 1000
>>   link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
>> 5: br-int:  mtu 1500 qdisc noop state DOWN mode
>> DEFAULT qlen 1000
>>   link/ether 9e:b0:3a:9d:f2:4b brd ff:ff:ff:ff:ff:ff
>> 6: ovirtbridge:  mtu 1500 qdisc noqueue
>> state UNKNOWN mode DEFAULT qlen 1000
>>   link/ether a6:f6:e5:a4:5b:45 brd ff:ff:ff:ff:ff:ff
>> 7: dummy0:  mtu 1500 qdisc noqueue master
>> ovirtmgmt state UNKNOWN mode DEFAULT qlen 1000
>>   link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff
>> 8: ovirtmgmt: 

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Marcin Mirecki]

Let me add the OVN team.

Lance, Numan,

Can you please look at this?

Trying to plug a vNIC results in:
> >> Dec 28 23:31:35 h2 ovs-vsctl: ovs|1|vsctl|INFO|Called as ovs-vsctl
> >> --timeout=5 -- --if-exists del-port vnet0 -- add-port br-int vnet0 --
> >> set Interface vnet0 "external-ids:attached-mac=\"00:1a:4a:16:01:51\""
> >> -- set Interface vnet0
> >> "external-ids:iface-id=\"e8853aac-8a75-41b0-8010-e630017dcdd8\"" --
> >> set Interface vnet0
> >> "external-ids:vm-id=\"b9440d60-ef5a-4e2b-83cf-081df7c09e6f\"" -- set
> >> Interface vnet0 external-ids:iface-status=active
> >> Dec 28 23:31:35 h2 kernel: device vnet0 entered promiscuous mode
> >> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> >> '/usr/sbin/ebtables --concurrent -t nat -D PREROUTING -i vnet0 -j
> >> libvirt-J-vnet0' failed:
> >> Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:

More details below


- Original Message -
> From: "Sverker Abrahamsson" 
> To: "Marcin Mirecki" 
> Cc: "Ovirt Users" 
> Sent: Thursday, December 29, 2016 1:42:11 PM
> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network
> 
> Hi
> Same problem still..
> /Sverker
> 
> Den 2016-12-29 kl. 13:34, skrev Marcin Mirecki:
> > Hi,
> >
> > The tunnels are created to connect multiple OVN controllers.
> > If there is only one, there is no need for the tunnels, so none
> > will be created, this is the correct behavior.
> >
> > Does the problem still occur after setting configuring the OVN-controller?
> >
> > Marcin
> >
> > - Original Message -
> >> From: "Sverker Abrahamsson" 
> >> To: "Marcin Mirecki" 
> >> Cc: "Ovirt Users" 
> >> Sent: Thursday, December 29, 2016 11:44:32 AM
> >> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt
> >> network
> >>
> >> Hi
> >> The rpm packages you listed in the other mail are installed but I had
> >> not run vdsm-tool ovn-config to create tunnel as the OVN controller is
> >> on the same host.
> >>
> >> [root@h2 ~]# rpm -q openvswitch-ovn-common
> >> openvswitch-ovn-common-2.6.90-1.el7.centos.x86_64
> >> [root@h2 ~]# rpm -q openvswitch-ovn-host
> >> openvswitch-ovn-host-2.6.90-1.el7.centos.x86_64
> >> [root@h2 ~]# rpm -q python-openvswitch
> >> python-openvswitch-2.6.90-1.el7.centos.noarch
> >>
> >> After removing my manually created br-int and run
> >>
> >> vdsm-tool ovn-config 127.0.0.1 172.27.1.1
> >>
> >> then I have the br-int but 'ip link show' does not show any link
> >> 'genev_sys_' nor does 'ovs-vsctl show' any port for ovn. I assume these
> >> are when there is an actual tunnel?
> >>
> >> [root@h2 ~]# ovs-vsctl show
> >> ebb6aede-cbbc-4f4f-a88a-a9cd72b2bd23
> >>   Bridge br-int
> >>   fail_mode: secure
> >>   Port br-int
> >>   Interface br-int
> >>   type: internal
> >>   Bridge ovirtbridge
> >>   Port ovirtbridge
> >>   Interface ovirtbridge
> >>   type: internal
> >>   Bridge "ovsbridge0"
> >>   Port "ovsbridge0"
> >>   Interface "ovsbridge0"
> >>   type: internal
> >>   Port "eth0"
> >>   Interface "eth0"
> >>   ovs_version: "2.6.90"
> >>
> >> [root@h2 ~]# ip link show
> >> 1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode
> >> DEFAULT qlen 1
> >>   link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> >> 2: eth0:  mtu 1500 qdisc pfifo_fast
> >> master ovs-system state UP mode DEFAULT qlen 1000
> >>   link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
> >> 3: ovs-system:  mtu 1500 qdisc noop state DOWN mode
> >> DEFAULT qlen 1000
> >>   link/ether 5a:14:cf:28:47:e2 brd ff:ff:ff:ff:ff:ff
> >> 4: ovsbridge0:  mtu 1500 qdisc noqueue
> >> state UNKNOWN mode DEFAULT qlen 1000
> >>   link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
> >> 5: br-int:  mtu 1500 qdisc noop state DOWN mode
> >> DEFAULT qlen 1000
> >>   link/ether 9e:b0:3a:9d:f2:4b brd ff:ff:ff:ff:ff:ff
> >> 6: ovirtbridge:  mtu 1500 qdisc noqueue
> >> state UNKNOWN mode DEFAULT qlen 1000
> >>   link/ether a6:f6:e5:a4:5b:45 brd ff:ff:ff:ff:ff:ff
> >> 7: dummy0:  mtu 1500 qdisc noqueue master
> >> ovirtmgmt state UNKNOWN mode DEFAULT qlen 1000
> >>   link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff
> >> 8: ovirtmgmt:  mtu 1500 qdisc noqueue
> >> state UP mode DEFAULT qlen 1000
> >>   link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff
> >>
> >> Firewall settings:
> >> [root@h2 ~]# firewall-cmd --list-all-zones
> >> work
> >> target: default
> >> icmp-block-inversion: no
> >> interfaces:
> >> sources:
> 

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Sverker Abrahamsson]

Hi
Same problem still..
/Sverker

Den 2016-12-29 kl. 13:34, skrev Marcin Mirecki:

Hi,

The tunnels are created to connect multiple OVN controllers.
If there is only one, there is no need for the tunnels, so none
will be created, this is the correct behavior.

Does the problem still occur after setting configuring the OVN-controller?

Marcin

- Original Message -

From: "Sverker Abrahamsson" 
To: "Marcin Mirecki" 
Cc: "Ovirt Users" 
Sent: Thursday, December 29, 2016 11:44:32 AM
Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

Hi
The rpm packages you listed in the other mail are installed but I had
not run vdsm-tool ovn-config to create tunnel as the OVN controller is
on the same host.

[root@h2 ~]# rpm -q openvswitch-ovn-common
openvswitch-ovn-common-2.6.90-1.el7.centos.x86_64
[root@h2 ~]# rpm -q openvswitch-ovn-host
openvswitch-ovn-host-2.6.90-1.el7.centos.x86_64
[root@h2 ~]# rpm -q python-openvswitch
python-openvswitch-2.6.90-1.el7.centos.noarch

After removing my manually created br-int and run

vdsm-tool ovn-config 127.0.0.1 172.27.1.1

then I have the br-int but 'ip link show' does not show any link
'genev_sys_' nor does 'ovs-vsctl show' any port for ovn. I assume these
are when there is an actual tunnel?

[root@h2 ~]# ovs-vsctl show
ebb6aede-cbbc-4f4f-a88a-a9cd72b2bd23
  Bridge br-int
  fail_mode: secure
  Port br-int
  Interface br-int
  type: internal
  Bridge ovirtbridge
  Port ovirtbridge
  Interface ovirtbridge
  type: internal
  Bridge "ovsbridge0"
  Port "ovsbridge0"
  Interface "ovsbridge0"
  type: internal
  Port "eth0"
  Interface "eth0"
  ovs_version: "2.6.90"

[root@h2 ~]# ip link show
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode
DEFAULT qlen 1
  link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0:  mtu 1500 qdisc pfifo_fast
master ovs-system state UP mode DEFAULT qlen 1000
  link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
3: ovs-system:  mtu 1500 qdisc noop state DOWN mode
DEFAULT qlen 1000
  link/ether 5a:14:cf:28:47:e2 brd ff:ff:ff:ff:ff:ff
4: ovsbridge0:  mtu 1500 qdisc noqueue
state UNKNOWN mode DEFAULT qlen 1000
  link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
5: br-int:  mtu 1500 qdisc noop state DOWN mode
DEFAULT qlen 1000
  link/ether 9e:b0:3a:9d:f2:4b brd ff:ff:ff:ff:ff:ff
6: ovirtbridge:  mtu 1500 qdisc noqueue
state UNKNOWN mode DEFAULT qlen 1000
  link/ether a6:f6:e5:a4:5b:45 brd ff:ff:ff:ff:ff:ff
7: dummy0:  mtu 1500 qdisc noqueue master
ovirtmgmt state UNKNOWN mode DEFAULT qlen 1000
  link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff
8: ovirtmgmt:  mtu 1500 qdisc noqueue
state UP mode DEFAULT qlen 1000
  link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff

Firewall settings:
[root@h2 ~]# firewall-cmd --list-all-zones
work
target: default
icmp-block-inversion: no
interfaces:
sources:
services: dhcpv6-client ssh
ports:
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:


drop
target: DROP
icmp-block-inversion: no
interfaces:
sources:
services:
ports:
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:


internal
target: default
icmp-block-inversion: no
interfaces:
sources:
services: dhcpv6-client mdns samba-client ssh
ports:
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:


external
target: default
icmp-block-inversion: no
interfaces:
sources:
services: ssh
ports:
protocols:
masquerade: yes
forward-ports:
sourceports:
icmp-blocks:
rich rules:


trusted
target: ACCEPT
icmp-block-inversion: no
interfaces:
sources:
services:
ports:
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:


home
target: default
icmp-block-inversion: no
interfaces:
sources:
services: dhcpv6-client mdns samba-client ssh
ports:
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:


dmz
target: default
icmp-block-inversion: no
interfaces:
sources:
services: ssh
ports:
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:


public (active)
target: default
icmp-block-inversion: no
interfaces: eth0 ovsbridge0
sources:
services: dhcpv6-client ssh
ports:
protocols:
   

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Marcin Mirecki]

Hi,

The tunnels are created to connect multiple OVN controllers.
If there is only one, there is no need for the tunnels, so none
will be created, this is the correct behavior.

Does the problem still occur after setting configuring the OVN-controller? 

Marcin

- Original Message -
> From: "Sverker Abrahamsson" 
> To: "Marcin Mirecki" 
> Cc: "Ovirt Users" 
> Sent: Thursday, December 29, 2016 11:44:32 AM
> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network
> 
> Hi
> The rpm packages you listed in the other mail are installed but I had
> not run vdsm-tool ovn-config to create tunnel as the OVN controller is
> on the same host.
> 
> [root@h2 ~]# rpm -q openvswitch-ovn-common
> openvswitch-ovn-common-2.6.90-1.el7.centos.x86_64
> [root@h2 ~]# rpm -q openvswitch-ovn-host
> openvswitch-ovn-host-2.6.90-1.el7.centos.x86_64
> [root@h2 ~]# rpm -q python-openvswitch
> python-openvswitch-2.6.90-1.el7.centos.noarch
> 
> After removing my manually created br-int and run
> 
> vdsm-tool ovn-config 127.0.0.1 172.27.1.1
> 
> then I have the br-int but 'ip link show' does not show any link
> 'genev_sys_' nor does 'ovs-vsctl show' any port for ovn. I assume these
> are when there is an actual tunnel?
> 
> [root@h2 ~]# ovs-vsctl show
> ebb6aede-cbbc-4f4f-a88a-a9cd72b2bd23
>  Bridge br-int
>  fail_mode: secure
>  Port br-int
>  Interface br-int
>  type: internal
>  Bridge ovirtbridge
>  Port ovirtbridge
>  Interface ovirtbridge
>  type: internal
>  Bridge "ovsbridge0"
>  Port "ovsbridge0"
>  Interface "ovsbridge0"
>  type: internal
>  Port "eth0"
>  Interface "eth0"
>  ovs_version: "2.6.90"
> 
> [root@h2 ~]# ip link show
> 1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode
> DEFAULT qlen 1
>  link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> 2: eth0:  mtu 1500 qdisc pfifo_fast
> master ovs-system state UP mode DEFAULT qlen 1000
>  link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
> 3: ovs-system:  mtu 1500 qdisc noop state DOWN mode
> DEFAULT qlen 1000
>  link/ether 5a:14:cf:28:47:e2 brd ff:ff:ff:ff:ff:ff
> 4: ovsbridge0:  mtu 1500 qdisc noqueue
> state UNKNOWN mode DEFAULT qlen 1000
>  link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
> 5: br-int:  mtu 1500 qdisc noop state DOWN mode
> DEFAULT qlen 1000
>  link/ether 9e:b0:3a:9d:f2:4b brd ff:ff:ff:ff:ff:ff
> 6: ovirtbridge:  mtu 1500 qdisc noqueue
> state UNKNOWN mode DEFAULT qlen 1000
>  link/ether a6:f6:e5:a4:5b:45 brd ff:ff:ff:ff:ff:ff
> 7: dummy0:  mtu 1500 qdisc noqueue master
> ovirtmgmt state UNKNOWN mode DEFAULT qlen 1000
>  link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff
> 8: ovirtmgmt:  mtu 1500 qdisc noqueue
> state UP mode DEFAULT qlen 1000
>  link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff
> 
> Firewall settings:
> [root@h2 ~]# firewall-cmd --list-all-zones
> work
>target: default
>icmp-block-inversion: no
>interfaces:
>sources:
>services: dhcpv6-client ssh
>ports:
>protocols:
>masquerade: no
>forward-ports:
>sourceports:
>icmp-blocks:
>rich rules:
> 
> 
> drop
>target: DROP
>icmp-block-inversion: no
>interfaces:
>sources:
>services:
>ports:
>protocols:
>masquerade: no
>forward-ports:
>sourceports:
>icmp-blocks:
>rich rules:
> 
> 
> internal
>target: default
>icmp-block-inversion: no
>interfaces:
>sources:
>services: dhcpv6-client mdns samba-client ssh
>ports:
>protocols:
>masquerade: no
>forward-ports:
>sourceports:
>icmp-blocks:
>rich rules:
> 
> 
> external
>target: default
>icmp-block-inversion: no
>interfaces:
>sources:
>services: ssh
>ports:
>protocols:
>masquerade: yes
>forward-ports:
>sourceports:
>icmp-blocks:
>rich rules:
> 
> 
> trusted
>target: ACCEPT
>icmp-block-inversion: no
>interfaces:
>sources:
>services:
>ports:
>protocols:
>masquerade: no
>forward-ports:
>sourceports:
>icmp-blocks:
>rich rules:
> 
> 
> home
>target: default
>icmp-block-inversion: no
>interfaces:
>sources:
>services: dhcpv6-client mdns samba-client ssh
>ports:
>protocols:
>masquerade: no
>forward-ports:
>sourceports:
>icmp-blocks:
>rich rules:
> 
> 
> dmz
>target: default
>icmp-block-inversion: no
>interfaces:
>sources:
>services: ssh
>ports:
>protocols:
>masquerade: no
>forward-ports:
>sourceports:
>icmp-blocks:
>rich rules:
> 
> 
> 

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Sverker Abrahamsson]

Hi
The rpm packages you listed in the other mail are installed but I had 
not run vdsm-tool ovn-config to create tunnel as the OVN controller is 
on the same host.


[root@h2 ~]# rpm -q openvswitch-ovn-common
openvswitch-ovn-common-2.6.90-1.el7.centos.x86_64
[root@h2 ~]# rpm -q openvswitch-ovn-host
openvswitch-ovn-host-2.6.90-1.el7.centos.x86_64
[root@h2 ~]# rpm -q python-openvswitch
python-openvswitch-2.6.90-1.el7.centos.noarch

After removing my manually created br-int and run

vdsm-tool ovn-config 127.0.0.1 172.27.1.1

then I have the br-int but 'ip link show' does not show any link 
'genev_sys_' nor does 'ovs-vsctl show' any port for ovn. I assume these 
are when there is an actual tunnel?


[root@h2 ~]# ovs-vsctl show
ebb6aede-cbbc-4f4f-a88a-a9cd72b2bd23
Bridge br-int
fail_mode: secure
Port br-int
Interface br-int
type: internal
Bridge ovirtbridge
Port ovirtbridge
Interface ovirtbridge
type: internal
Bridge "ovsbridge0"
Port "ovsbridge0"
Interface "ovsbridge0"
type: internal
Port "eth0"
Interface "eth0"
ovs_version: "2.6.90"

[root@h2 ~]# ip link show
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN mode 
DEFAULT qlen 1

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0:  mtu 1500 qdisc pfifo_fast 
master ovs-system state UP mode DEFAULT qlen 1000

link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
3: ovs-system:  mtu 1500 qdisc noop state DOWN mode 
DEFAULT qlen 1000

link/ether 5a:14:cf:28:47:e2 brd ff:ff:ff:ff:ff:ff
4: ovsbridge0:  mtu 1500 qdisc noqueue 
state UNKNOWN mode DEFAULT qlen 1000

link/ether 44:8a:5b:84:7d:b3 brd ff:ff:ff:ff:ff:ff
5: br-int:  mtu 1500 qdisc noop state DOWN mode 
DEFAULT qlen 1000

link/ether 9e:b0:3a:9d:f2:4b brd ff:ff:ff:ff:ff:ff
6: ovirtbridge:  mtu 1500 qdisc noqueue 
state UNKNOWN mode DEFAULT qlen 1000

link/ether a6:f6:e5:a4:5b:45 brd ff:ff:ff:ff:ff:ff
7: dummy0:  mtu 1500 qdisc noqueue master 
ovirtmgmt state UNKNOWN mode DEFAULT qlen 1000

link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff
8: ovirtmgmt:  mtu 1500 qdisc noqueue 
state UP mode DEFAULT qlen 1000

link/ether 66:e0:1c:c3:a9:d8 brd ff:ff:ff:ff:ff:ff

Firewall settings:
[root@h2 ~]# firewall-cmd --list-all-zones
work
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: dhcpv6-client ssh
  ports:
  protocols:
  masquerade: no
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


drop
  target: DROP
  icmp-block-inversion: no
  interfaces:
  sources:
  services:
  ports:
  protocols:
  masquerade: no
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


internal
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: dhcpv6-client mdns samba-client ssh
  ports:
  protocols:
  masquerade: no
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


external
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh
  ports:
  protocols:
  masquerade: yes
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


trusted
  target: ACCEPT
  icmp-block-inversion: no
  interfaces:
  sources:
  services:
  ports:
  protocols:
  masquerade: no
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


home
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: dhcpv6-client mdns samba-client ssh
  ports:
  protocols:
  masquerade: no
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


dmz
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh
  ports:
  protocols:
  masquerade: no
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


public (active)
  target: default
  icmp-block-inversion: no
  interfaces: eth0 ovsbridge0
  sources:
  services: dhcpv6-client ssh
  ports:
  protocols:
  masquerade: no
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


block
  target: %%REJECT%%
  icmp-block-inversion: no
  interfaces:
  sources:
  services:
  ports:
  protocols:
  masquerade: no
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:


ovirt (active)
  target: default
  icmp-block-inversion: no
  interfaces: ovirtbridge ovirtmgmt
  sources:
  services: dhcp ovirt-fence-kdump-listener ovirt-http ovirt-https 
ovirt-imageio-proxy ovirt-postgres ovirt-provider-ovn 
ovirt-vmconsole-proxy ovirt-websocket-proxy ssh vdsm

  ports:
  protocols:
  masquerade: yes
  forward-ports:
  sourceports:
  icmp-blocks:
  rich rules:
rule family="ipv4" port port="6641" protocol="tcp" accept
rule family="ipv4" port port="6642" protocol="tcp" accept

The db dump is attached
/Sverker
Den 2016-12-29 kl. 

Re: [ovirt-users] hosted_storage locked

[Evgenia Tokar]

It seems that the import of the storage domain failed since it was
inaccessible:

2016-12-28 07:06:25,406 ERROR
[org.ovirt.engine.core.bll.storage.domain.GetExistingStorageDomainListQuery]
(org.ovirt.thread.pool-6-thread-46) [] Exception:
org.ovirt.engine.core.common.errors.EngineException: EngineException:
org.ovirt.engine.core.vdsbroker.vdsbroker.VDSErrorException:
VDSGenericException: VDSErrorException: Failed to
HSMGetStorageDomainInfoVDS, error = Domain is either partially accessible
or entirely inaccessible: (u'247b250c-ccd3-4056-853f-f03a05369da9',), code
= 379 (Failed with error StorageDomainAccessError and code 379)

2016-12-28 07:06:25,413 ERROR
[org.ovirt.engine.core.bll.storage.domain.ImportHostedEngineStorageDomainCommand]
(org.ovirt.thread.pool-6-thread-46) [] Failed query for all Storage
Domains. The import command can not proceed without this info

Once that happened the command was logged in the db as failed, and every
engine restart the engine tries to run it again (compensate mechanism).
However, since the import storage domain command is not "compensatable"
this fails and the domain remains locked.

2016-12-28 07:09:02,643 ERROR [org.ovirt.engine.core.bll.CommandsFactory]
(ServerService Thread Pool -- 56) [] CommandsFactory : Failed to get type
information using reflection for Class
'org.ovirt.engine.core.bll.storage.domain.ImportHostedEngineStorageDomainCommand',
Command Id '2ab30734-bbe4-4f50-897f-f1b393a31852':
org.ovirt.engine.core.bll.storage.domain.ImportHostedEngineStorageDomainCommand.(org.ovirt.engine.core.compat.Guid)
2016-12-28 07:09:02,643 ERROR [org.ovirt.engine.core.bll.CommandsFactory]
(ServerService Thread Pool -- 56) [] Exception:
java.lang.NoSuchMethodException:
org.ovirt.engine.core.bll.storage.domain.ImportHostedEngineStorageDomainCommand.(org.ovirt.engine.core.compat.Guid)


2016-12-28 07:09:02,646 ERROR [org.ovirt.engine.core.bll.Backend]
(ServerService Thread Pool -- 56) [] Failed to run compensation on startup
for Command
'org.ovirt.engine.core.bll.storage.domain.ImportHostedEngineStorageDomainCommand',
Command Id '2ab30734-bbe4-4f50-897f-f1b393a31852'


I would suggest:
1. Verify the you can access the storage domain.
2. If you can access the domain, you can try removing it from the ui (I
think the destroy option should be available).
After the removal the engine will try to reimport it, and hopefully
will succeed.
Removing the storage domain may cause the engine and the ha-agent to
restart.

Jenny





On Wed, Dec 28, 2016 at 6:29 PM, Gary Pedretty  wrote:

> Here is the engine log from the engine vm.
>
> Gary
>
>
>
>
> 
> Gary Pedrettyg...@ravnalaska.net
> 
> Systems Manager  www.flyravn.com
> Ravn Alaska   /\907-450-7251
> <(907)%20450-7251>
> 5245 Airport Industrial Road /  \/\ 907-450-7238
> <(907)%20450-7238> fax
> Fairbanks, Alaska  99709/\  /\ \ Second greatest commandment
> Serving All of Alaska  /  \/  /\  \ \/\   “Love your neighbor as
> Really loving the record green up date! Summmer!!   yourself” Matt 22:39
> 
>
>
>
>
>
>
>
>
>
>
>
>
> On Dec 28, 2016, at 1:12 AM, Evgenia Tokar  wrote:
>
> Hi!
>
> Can you attach the engine log from the hosted engine vm?
>
> Thanks,
> Jenny
>
>
> On Wed, Dec 28, 2016 at 10:56 AM, Gary Pedretty 
> wrote:
>
>> Just setup a new hosted-engine Data Center.  With 3 hosts and gluster
>> based storage domains.  Used the latest installers.  Everything went well,
>> until I got the engine deployed and each host setup and went to the web
>> interface for the first time.
>>
>> After adding the master storage domain, the hosted_storage added itself
>> like usual, but remained locked.   Everything is working just fine with the
>> exception of no listing of the engine as a VM under that tab or the icon on
>> the current host.   The Volumes tab does not show anything on the
>> hosted_storage, but all the other volumes including the master data and a
>> second data all show normal status for bricks.  Error log is not reporting
>> anything unusual either.  All the gluster volumes including the engine
>> (hosted_storage) show good status via command line in the hosts.
>>
>> Going to let it run for a day or so before I add any VMs.
>>
>> Any ideas?
>>
>> Gary
>>
>> 
>> Gary Pedrettyg...@ravnalaska.net
>> 
>> Systems Manager  www.flyravn.com
>> Ravn Alaska   /\907-450-7251
>> <(907)%20450-7251>
>> 5245 Airport Industrial Road   

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Marcin Mirecki]

Hi,

Can you please do: "sudo ovsdb-client dump" 
on the host and send me the output?

Have you configured the ovn controller to connect to the
OVN north? You can do it using "vdsm-tool ovn-config" or
using the OVN tools directly.
Please check out: https://www.ovirt.org/blog/2016/11/ovirt-provider-ovn/
for details.

Also please note that the OVN provider is completely different
from the neutron-openvswitch plugin. Please don't mix the two.

Marcin


- Original Message -
> From: "Marcin Mirecki" 
> To: "Sverker Abrahamsson" 
> Cc: "Ovirt Users" 
> Sent: Thursday, December 29, 2016 9:27:19 AM
> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network
> 
> Hi,
> 
> br-int is the OVN integration bridge, it should have been created
> when installing OVN. I assume you have the following packages installed
> on the host:
> openvswitch-ovn-common
> openvswitch-ovn-host
> python-openvswitch
> 
> Please give me some time to look at the connectivity problem.
> 
> Marcin
> 
> 
> 
> - Original Message -
> > From: "Sverker Abrahamsson" 
> > To: "Marcin Mirecki" 
> > Cc: "Ovirt Users" 
> > Sent: Thursday, December 29, 2016 12:47:04 AM
> > Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt
> > network
> > 
> > From
> > /usr/libexec/vdsm/hooks/before_device_create/ovirt_provider_ovn_hook
> > (installed by ovirt-provider-ovn-driver rpm):
> > 
> > BRIDGE_NAME = 'br-int'
> > 
> > 
> > Den 2016-12-28 kl. 23:56, skrev Sverker Abrahamsson:
> > > Googling on the message about br-int suggested adding that bridge to ovs:
> > >
> > > ovs-vsctl add-br br-int
> > >
> > > Then the VM is able to boot, but it fails to get network connectivity.
> > > Output in /var/log/messages:
> > >
> > > Dec 28 23:31:35 h2 ovs-vsctl: ovs|1|vsctl|INFO|Called as ovs-vsctl
> > > --timeout=5 -- --if-exists del-port vnet0 -- add-port br-int vnet0 --
> > > set Interface vnet0 "external-ids:attached-mac=\"00:1a:4a:16:01:51\""
> > > -- set Interface vnet0
> > > "external-ids:iface-id=\"e8853aac-8a75-41b0-8010-e630017dcdd8\"" --
> > > set Interface vnet0
> > > "external-ids:vm-id=\"b9440d60-ef5a-4e2b-83cf-081df7c09e6f\"" -- set
> > > Interface vnet0 external-ids:iface-status=active
> > > Dec 28 23:31:35 h2 kernel: device vnet0 entered promiscuous mode
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -D PREROUTING -i vnet0 -j
> > > libvirt-J-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -D POSTROUTING -o vnet0 -j
> > > libvirt-P-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -L libvirt-J-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -L libvirt-P-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -F libvirt-J-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -X libvirt-J-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -F libvirt-P-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -X libvirt-P-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -F J-vnet0-mac' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -X J-vnet0-mac' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -F J-vnet0-arp-mac' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/ebtables --concurrent -t nat -X J-vnet0-arp-mac' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/iptables -w2 -w -D libvirt-out -m physdev
> > > --physdev-is-bridged --physdev-out vnet0 -g FO-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/iptables -w2 -w -D libvirt-out -m physdev --physdev-out
> > > vnet0 -g FO-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/iptables -w2 -w -D libvirt-in -m physdev --physdev-in vnet0
> > > -g FI-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/iptables -w2 -w -D libvirt-host-in -m physdev --physdev-in
> > > vnet0 -g HI-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/iptables -w2 -w -F FO-vnet0' failed:
> > > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > > '/usr/sbin/iptables 

Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network

[Marcin Mirecki]

Hi,

br-int is the OVN integration bridge, it should have been created
when installing OVN. I assume you have the following packages installed
on the host:
openvswitch-ovn-common
openvswitch-ovn-host
python-openvswitch

Please give me some time to look at the connectivity problem.

Marcin



- Original Message -
> From: "Sverker Abrahamsson" 
> To: "Marcin Mirecki" 
> Cc: "Ovirt Users" 
> Sent: Thursday, December 29, 2016 12:47:04 AM
> Subject: Re: [ovirt-users] Issue with OVN/OVS and mandatory ovirtmgmt network
> 
> From
> /usr/libexec/vdsm/hooks/before_device_create/ovirt_provider_ovn_hook
> (installed by ovirt-provider-ovn-driver rpm):
> 
> BRIDGE_NAME = 'br-int'
> 
> 
> Den 2016-12-28 kl. 23:56, skrev Sverker Abrahamsson:
> > Googling on the message about br-int suggested adding that bridge to ovs:
> >
> > ovs-vsctl add-br br-int
> >
> > Then the VM is able to boot, but it fails to get network connectivity.
> > Output in /var/log/messages:
> >
> > Dec 28 23:31:35 h2 ovs-vsctl: ovs|1|vsctl|INFO|Called as ovs-vsctl
> > --timeout=5 -- --if-exists del-port vnet0 -- add-port br-int vnet0 --
> > set Interface vnet0 "external-ids:attached-mac=\"00:1a:4a:16:01:51\""
> > -- set Interface vnet0
> > "external-ids:iface-id=\"e8853aac-8a75-41b0-8010-e630017dcdd8\"" --
> > set Interface vnet0
> > "external-ids:vm-id=\"b9440d60-ef5a-4e2b-83cf-081df7c09e6f\"" -- set
> > Interface vnet0 external-ids:iface-status=active
> > Dec 28 23:31:35 h2 kernel: device vnet0 entered promiscuous mode
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -D PREROUTING -i vnet0 -j
> > libvirt-J-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -D POSTROUTING -o vnet0 -j
> > libvirt-P-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -L libvirt-J-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -L libvirt-P-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -F libvirt-J-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -X libvirt-J-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -F libvirt-P-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -X libvirt-P-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -F J-vnet0-mac' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -X J-vnet0-mac' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -F J-vnet0-arp-mac' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ebtables --concurrent -t nat -X J-vnet0-arp-mac' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -D libvirt-out -m physdev
> > --physdev-is-bridged --physdev-out vnet0 -g FO-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -D libvirt-out -m physdev --physdev-out
> > vnet0 -g FO-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -D libvirt-in -m physdev --physdev-in vnet0
> > -g FI-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -D libvirt-host-in -m physdev --physdev-in
> > vnet0 -g HI-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -F FO-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -X FO-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -F FI-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -X FI-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -F HI-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -X HI-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -E FP-vnet0 FO-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -E FJ-vnet0 FI-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/iptables -w2 -w -E HJ-vnet0 HI-vnet0' failed:
> > Dec 28 23:31:35 h2 firewalld: WARNING: COMMAND_FAILED:
> > '/usr/sbin/ip6tables -w2 -w -D