Re: [ovirt-users] High latency on storage domains and sanlock renewal error

[Juan Pablo]

sorry to jump in, but what kernel version are you using? had similar issue
with kernel 4.10/4.11


2017-05-12 16:36 GMT-03:00 Stefano Bovina :

> Hi,
> a little update:
>
> The command multipath -ll hung when executed on the host while the problem
> occur (nothing logged in /var/log/messages or dmesg).
>
> I tested latency with ioping:
> ioping /dev/6a386652-629d-4045-835b-21d2f5c104aa/metadata
>
> Usually it return "time=15.6 ms", sometimes return "time=19 s" (yes,
> seconds)
>
> Systems are up to date and I tried both path_checker (emc_clariion and
> directio), without results.
> (https://access.redhat.com/solutions/139193, it refers to the Rev A31 of
> EMC document; last is A42 and suggest emc_clariion).
>
> Any idea or suggestion?
>
> Thanks,
>
> Stefano
>
> 2017-05-08 11:56 GMT+02:00 Yaniv Kaul :
>
>>
>>
>> On Mon, May 8, 2017 at 11:50 AM, Stefano Bovina  wrote:
>>
>>> Yes,
>>> this configuration is the one suggested by EMC for EL7.
>>>
>>
>> https://access.redhat.com/solutions/139193 suggest that for alua, the
>> patch checker needs to be different.
>>
>> Anyway, it is very likely that you have storage issues - they need to be
>> resolved first and I believe they have little to do with oVirt at the
>> moment.
>> Y.
>>
>>
>>>
>>> By the way,
>>> "The parameters rr_min_io vs. rr_min_io_rq mean the same thing but are
>>> used for device-mapper-multipath on differing kernel versions." and
>>> rr_min_io_rq default value is 1, rr_min_io default value is 1000, so it
>>> should be fine.
>>>
>>>
>>> 2017-05-08 9:39 GMT+02:00 Yaniv Kaul :
>>>

 On Sun, May 7, 2017 at 1:27 PM, Stefano Bovina 
 wrote:

> Sense data are 0x0/0x0/0x0


 Interesting - first time I'm seeing 0/0/0. The 1st is usually 0x2 (see
 [1]), and then the rest [2], [3] make sense.

 A google search found another user with Clarion with the exact same
 error[4], so I'm leaning toward misconfiguration of multipathing/clarion
 here.

 Is your multipathing configuration working well for you?
 Are you sure it's a EL7 configuration? For example, I believe you
 should have rr_min_io_rq and not rr_min_io .
 Y.

 [1] http://www.t10.org/lists/2status.htm
 [2] http://www.t10.org/lists/2sensekey.htm
 [3] http://www.t10.org/lists/asc-num.htm
 [4] http://www.linuxquestions.org/questions/centos-111/multi
 path-problems-4175544908/

>>>
>>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Regenerating SSL keys

[Jamie Lawrence]

The key generated by the engine install ended up with a bad CN; it has a 
five-digit number appended to the host name, and no SAN.

I've lived with this through setup, but now I'm getting close to prod use, and 
need to clean up so that it is usable for general consumption. And the SPICE 
HTML client is completely busted due to this; that's a problem because we're 
mostly MacOS on the client side, and the Mac Spice client is unusable for 
normal humans. 

 I'm wary of attempting to regenerate these manually, as I don't have a handle 
on how the keysare used by the various components.

What is the approved method of regenerating these keys?

-j
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] The number of LVs on the domain VPLEX_DATA_DOMAIN exceeded 300, you are approaching the limit where performance may degrade.

[Rogério Ceni Coelho]

Hi oVirt Admins,

I have two data domains using FC SAN, with 150  VMs. Each VM have 3 or 4
disks.

A few time ago i saw the above message on Events. What can i do ? What are
the alternatives ? What can i do ?

The number of LVs on the domain VPLEX_DATA_DOMAIN exceeded 300, you are
approaching the limit where performance may degrade.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] About NFS in cluster and HA

[张 余歌]

My environment:
A for Engine,NFS server
B for node1
C for nide2
Ovirt3.6.7

Everything is ready(Like ipmi).But..
1.hot-migration whitin B and C
I found It is okay,after migration ,B Or C Would change Its hostname,which 
caused failure next time to migration.(i Don't know whether firewall will make 
a affect.)

2.If i choosed to maintain the B Or C,it worked well.

3.If i try to shutdown B  ,the vm cannot startup on C automatically .and after 
B started By power manager ,i found It cannot be mount the datacentre .

What is wrong?

Best regard


Get Outlook for Android

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] High latency on storage domains and sanlock renewal error

[Stefano Bovina]

Hi,
a little update:

The command multipath -ll hung when executed on the host while the problem
occur (nothing logged in /var/log/messages or dmesg).

I tested latency with ioping:
ioping /dev/6a386652-629d-4045-835b-21d2f5c104aa/metadata

Usually it return "time=15.6 ms", sometimes return "time=19 s" (yes,
seconds)

Systems are up to date and I tried both path_checker (emc_clariion and
directio), without results.
(https://access.redhat.com/solutions/139193, it refers to the Rev A31 of
EMC document; last is A42 and suggest emc_clariion).

Any idea or suggestion?

Thanks,

Stefano

2017-05-08 11:56 GMT+02:00 Yaniv Kaul :

>
>
> On Mon, May 8, 2017 at 11:50 AM, Stefano Bovina  wrote:
>
>> Yes,
>> this configuration is the one suggested by EMC for EL7.
>>
>
> https://access.redhat.com/solutions/139193 suggest that for alua, the
> patch checker needs to be different.
>
> Anyway, it is very likely that you have storage issues - they need to be
> resolved first and I believe they have little to do with oVirt at the
> moment.
> Y.
>
>
>>
>> By the way,
>> "The parameters rr_min_io vs. rr_min_io_rq mean the same thing but are
>> used for device-mapper-multipath on differing kernel versions." and
>> rr_min_io_rq default value is 1, rr_min_io default value is 1000, so it
>> should be fine.
>>
>>
>> 2017-05-08 9:39 GMT+02:00 Yaniv Kaul :
>>
>>>
>>> On Sun, May 7, 2017 at 1:27 PM, Stefano Bovina  wrote:
>>>
 Sense data are 0x0/0x0/0x0
>>>
>>>
>>> Interesting - first time I'm seeing 0/0/0. The 1st is usually 0x2 (see
>>> [1]), and then the rest [2], [3] make sense.
>>>
>>> A google search found another user with Clarion with the exact same
>>> error[4], so I'm leaning toward misconfiguration of multipathing/clarion
>>> here.
>>>
>>> Is your multipathing configuration working well for you?
>>> Are you sure it's a EL7 configuration? For example, I believe you should
>>> have rr_min_io_rq and not rr_min_io .
>>> Y.
>>>
>>> [1] http://www.t10.org/lists/2status.htm
>>> [2] http://www.t10.org/lists/2sensekey.htm
>>> [3] http://www.t10.org/lists/asc-num.htm
>>> [4] http://www.linuxquestions.org/questions/centos-111/multi
>>> path-problems-4175544908/
>>>
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ansible and list of vms

[Ondra Machacek]

This worked for me:

---
- hosts: localhost
  connection: local
  vars_files:
- ../vars.yml

  tasks:
  - name: Obtain SSO token
ovirt_auth:
  url: "{{ url }}"
  username: "{{ username }}"
  password: "{{ password }}"
  insecure: "{{ insecure }}"

  - name: List vms
ovirt_vms_facts:
  fetch_nested: true
  nested_attributes:
- description
  auth: "{{ ovirt_auth }}"

  - name: set vms
set_fact:
   vm: "{{ item.name }}: {{ item.snapshots |
map(attribute='description') | join(',') }}"
with_items: "{{ ovirt_vms }}"
loop_control:
  label: "{{ item.name }}"
register: all_vms

  - name: make a list
set_fact: vms="{{ all_vms.results | map(attribute='ansible_facts.vm') |
list }}"

  - name: Print vms
debug:
  var: vms

Can you please open an issue on Ansible github[1], and describe what
exactly issue do you have?
Thanks!

[1] https://github.com/ansible/ansible/issues


On Fri, May 12, 2017 at 7:11 PM, Nathanaël Blanchet 
wrote:

> Great, it works like a charm!
>
> But how could I obtain a several map display?
>
> For example, I need to display the vm name ; its relative snaphost id and
> snaphot description.
>
> I tried to change filter, but notyhing works
>
> msg: "{{ ovirt_snapshots | map(attribute='description') |
> map(attribute='id') | join(' ') }}"
>
> or something like
>
> msg: "{{ ovirt_snapshots.vm | map(attribute='name') | map(attribute='id')
> | join(' ') }}"
>
> Thanks for helping.
>
> ps: I tried nearly all modules, and the permissions one is bugged, only
> internal-authz domain displays users, none of ldap one can display.
>
> Le 11/05/2017 à 20:14, Ondra Machacek a écrit :
>
> I am not Ansible expert, this maybe worth asking on Ansible users list,
> but one thing which you can do is following:
>
> in tasks/main.yml
>
> - include: "{{ item }}"
>   with_items: "{{ resources | default('vms') }}.yml"
>
> then have following files:
>  - tasks/vms.yml
>  - tasks/clusters.yml
>  - tasks/disks.yml
>  - ...
>
> then run it as:
>
>  $ ansible-playbook -e "resources: [vms,disks]" play.yml
>  $ ansible-playbook -e "resources: [clusters] clusters_pattern=name=x*"
> play.yml
>
>
> On Thu, May 11, 2017 at 6:34 PM, Nathanaël Blanchet 
> wrote:
>
>> Thanks, all works as expected.
>>
>> Now, I try make roles.
>>
>> here it is :
>>
>> *cat /etc/ansible/roles/ovirt_vm_facts/tasks/main.yml*
>>
>>   - name: get vm facts
>> ovirt_vms_facts:
>>   auth:
>> url: https://{{ engine }}.v100.abes.fr/ovirt-engine/api
>> username: "{{ username }}"
>> password: "{{ password }}"
>> insecure: "{{ insecure }}"
>>   pattern: "{{ pattern }}"
>>   - debug:
>>   msg: "{{ ovirt_vms | map(attribute='name') | join(' ') }}"
>>
>> *cat /etc/ansible/roles/ovirt_vm_facts/vars/main.yml*
>>
>> pattern: "os=rhel_5x64 or os=rhel_5"
>> engine: air
>> username: admin@internal
>> password: ovirt123
>> insecure: true
>>
>> and I call those files with */tmp/ovirt_vm_facts.yml* with extra
>> variables if needed
>>
>> - hosts: localhost
>>   connection: local
>>   roles:
>> - ovirt_vm_fact
>>
>> running ansible-playbook /tmp/ovirt_vm_facts.ym -e 'pattern="name=acier*
>> and cluster=Dev"'
>>
>> *But..*
>>
>> I don't want to do the same for each ansible module shipped with 2.3.
>>
>> Knowing that each *facts module has the same structure auth/pattern, is
>> there a way to play a generic playbook independant from the role, like:
>>
>> - hosts: localhost
>>   connection: local
>>   roles:
>> - ovirt_facts (with somewhere a variable "myfact")
>>
>> which would play an unique role 
>> */etc/ansible/roles/ovirt_facts/tasks/main.yml
>> with*
>>
>>
>> - name: get vm facts
>> myfact
>>   auth:
>> 
>>
>> Hope to be clear enough, thank your for your help.
>>
>> Le 10/05/2017 à 13:14, Ondra Machacek a écrit :
>>
>>
>>
>> On Wed, May 10, 2017 at 12:38 PM, Nathanaël Blanchet 
>> wrote:
>>
>>> Le 10/05/2017 à 10:29, Ondra Machacek a écrit :
>>>
>>> Not sure I understand. You can use Ansible module to list VMs, you
>>> can use ovirt_vms _facts[1] module.
>>>
>>> For example to get only stopped VMs, you can use following:
>>>
>>> - name: Get stopped VMs
>>>   ovirt_vms_facts:
>>> auth:
>>>   url: https://ovirt.example.com/ovirt-engine/api
>>>   username: admin@internal
>>>   password: password
>>>   ca_file: /etc/pki/ovirt-engine/ca.pem
>>> pattern: "status = down"
>>>
>>> I want a list of vms sorted by any possible attributes, i.e. sorted by
>>> datacenter or cluster, not only by status.
>>>
>>>- For example, ovirt_vms_facts doesn't allow to get the datacenter
>>>the vm belongs to , and the pattern filter doesn't return a list of vms 
>>> as
>>>expected:
>>>
>>>
>>> - hosts: localhost
>>>   connection: local
>>>   tasks:
>>>   - name: Get stopped VMs
>>> ovirt_vms_facts:
>>>   auth:
>>> url: https://acore.v100.abes.fr/ovirt-engine/api
>>> username: admin@inte

Re: [ovirt-users] Ovirt nested in VMware

[Mark Duggan]

Thanks Gianluca,

So I installed the engine into a separate VM, and didn't go down the
hosted-engine path, although if I was to look at this with physical hosts,
this seems like a really good approach.

To answer Michal's question from earlier, the nested VM inside the oVirt
Hypervisors has been up for 23+ hours and it has not progressed past the
Bios.
Also, with respect to the vdsm-hooks, here's a list.

Dumpxml attached (hopefully with identifying information removed)

vdsm-hook-nestedvt.noarch
vdsm-hook-vmfex-dev.noarch
vdsm-hook-allocate_net.noarch
vdsm-hook-checkimages.noarch
vdsm-hook-checkips.x86_64
vdsm-hook-diskunmap.noarch
vdsm-hook-ethtool-options.noarch
vdsm-hook-extnet.noarch
vdsm-hook-extra-ipv4-addrs.x86_64
vdsm-hook-fakesriov.x86_64
vdsm-hook-fakevmstats.noarch
vdsm-hook-faqemu.noarch
vdsm-hook-fcoe.noarch
vdsm-hook-fileinject.noarch
vdsm-hook-floppy.noarch
vdsm-hook-hostusb.noarch
vdsm-hook-httpsisoboot.noarch
vdsm-hook-hugepages.noarch
vdsm-hook-ipv6.noarch
vdsm-hook-isolatedprivatevlan.noarch
vdsm-hook-localdisk.noarch
vdsm-hook-macbind.noarch
vdsm-hook-macspoof.noarch
vdsm-hook-noipspoof.noarch
vdsm-hook-numa.noarch
vdsm-hook-openstacknet.noarch
vdsm-hook-pincpu.noarch
vdsm-hook-promisc.noarch
vdsm-hook-qemucmdline.noarch
vdsm-hook-qos.noarch
vdsm-hook-scratchpad.noarch
vdsm-hook-smbios.noarch
vdsm-hook-spiceoptions.noarch
vdsm-hook-vhostmd.noarch
vdsm-hook-vmdisk.noarch
vdsm-hook-vmfex.noarch

I'm running ESXi 5.5. For the hypervisor VMs I've set the "Expose Hardware
Assisted Virtualization to the guest OS"

Hypervisor VMs are running CentOS 7.3

[image: Inline images 1]

On 12 May 2017 at 09:36, Gianluca Cecchi  wrote:

>
>
> On Fri, May 12, 2017 at 1:06 PM, Michal Skrivanek <
> michal.skriva...@redhat.com> wrote:
>
>>
>> > On 11 May 2017, at 19:52, Mark Duggan  wrote:
>> >
>> > Hi everyone,
>> >
>> > From reading through the mailing list, it does appear that it's
>> possible to have the ovirt nodes/hosts be VMware virtual machines, once I
>> enable the appropriate settings on the VMware side. All seems to have gone
>> well, I can see the hosts in the ovirt interface, but when I attempt to
>> create and start a VM it never gets past printing the SeaBios version and
>> the machine UUID to the screen/console. It doesn't appear to try to boot
>> from the hard disk or an ISO that I've attached.
>> >
>> > Has anyone else encountered similar behaviour?
>>
>> I wouldn’t think you can even get that far.
>> It may work with full emulation (non-kvm) but we kind of enforce it in
>> oVirt so some changes are likely needed.
>> Of course even if you succeed it’s going to be hopelessly slow. (or maybe
>> it is indeed working and just runs very slow)
>>
>> Nested on a KVM hypervisor runs ok
>>
>> Thanks,
>> michal
>>
>>
> In the past I was able to get an Openstack Icehouse environment running
> inside vSphere 5.x for a POC (on poweful physical servers) and performance
> of nested VMs inside the virtual compute nodes was acceptable.
> More recently I configured a standalone ESXi server 6.0 U2 on a Nuc6 with
> 32Gb of ram and 2 ssd disks and on it I have now running 2 kinds of
> environments (just verified they are still on after some months I abandoned
> them to their destiny... ;-)
>
> 1) an ESXi VM acting as a single oVirt host (4.1.1 final or pre, I don't
> remember) with self hosted engine (that itself becomes an L2 VM) and also
> another VM (CentOS 6.8)
> See here a screenshot of the web admin gui with a spice console open after
> connecting to the engine:
> https://drive.google.com/file/d/0BwoPbcrMv8mvanpTUnFuZ2FURms/
> view?usp=sharing
>
> 2) a virtual oVirt gluster environment based on 4.0.5 with 3 Virtual Hosts
> (with one as arbiter node if I remember correctly)
>
> On this second environment I have ovirt01, virt02 and ovirt03 VMs:
>
> [root@ovirt02 ~]# hosted-engine --vm-status
>
>
> --== Host 1 status ==--
>
> Status up-to-date  : True
> Hostname   : ovirt01.localdomain.local
> Host ID: 1
> Engine status  : {"reason": "vm not running on this
> host", "health": "bad", "vm": "down", "detail": "unknown"}
> Score  : 3042
> stopped: False
> Local maintenance  : False
> crc32  : 2041d7b6
> Host timestamp : 15340856
> Extra metadata (valid at timestamp):
> metadata_parse_version=1
> metadata_feature_version=1
> timestamp=15340856 (Fri May 12 14:59:17 2017)
> host-id=1
> score=3042
> maintenance=False
> state=EngineDown
> stopped=False
>
>
> --== Host 2 status ==--
>
> Status up-to-date  : True
> Hostname   : 192.168.150.103
> Host ID: 2
> Engine status  : {"health": "good", "vm": "up",
> "detail": "up"}
> Score  : 3400
> stopped: False
> Local mainten

[ovirt-users] ovirtmgmt network out of sync

[Alex R]

Hi,

I upgraded to the latest version (users@ovirt.org) a few weeks ago and ever
since then I cannot open a console unless I am on the local network (
10.3.1.0/24).  I think it is related to the Ovirtmgmt interface being
"out-of-sync".

If I try to fix it in the gui, I get an error:

"Error while executing action HostSetupNetworks: Network is currently being
used"

This is because the hosted engine in on the ovirtmgmt network.

Is there a way I can fix this via cli?  This is a single host with a hosted
engine.  I use it for development only.

Thank you.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt + Citrix Xenserver support?

[Peter Wood]

Thank you for replying. I must've hit Reply instead of Reply All.

I copied the ML to this email. Your answer may be helpful to other people
too.

Thanks,

-- Peter

On Thu, May 11, 2017 at 10:37 PM, Sandro Bonazzola 
wrote:

>
>
> On Thu, May 11, 2017 at 11:33 PM, Peter Wood 
> wrote:
>
>> I believe the question was about Citrix Xen. The URL that was pointed out
>> talks about Xen on RHEL.
>>
>> Are you saying that Citrix Xen VMs conversion to oVirt is also supported?
>>
>
> I would suggest to keep users@ovirt.org in CC next time :-)
> I'm not sure about direct conversion from Citrix Xen, according to
> http://libguestfs.org/virt-v2v.1.html it has not been recently tested but
> it's supposed to work.
> In the past there were issues but according to https://access.redhat.com/
> solutions/54076 a workaround is to use p2v instead of v2v.
>
>
>
>
>>
>> On Thu, May 11, 2017 at 8:14 AM, Sandro Bonazzola 
>> wrote:
>>
>>>
>>>
>>> On Tue, May 9, 2017 at 12:29 PM, santosh bhabal 
>>> wrote:
>>>
 Hello Experts,

 I am new to Ovirt community.

>>>
>>> Hi, welcome to the oVirt community!
>>>
>>>
>>>
 Apology if this question has asked earlier.
 I just wanted to know that does Ovirt support Citrix Xenserver or not?

>>>
>>> Sadly oVirt doesn't support Xen. There was an attempt in the past to
>>> support it, see http://www.ovirt.org/documentation/how-to/xen/ but it
>>> has been abanoned.
>>>
>>> However, we support conversion of VMs from Xen to oVirt (see
>>> http://www.ovirt.org/develop/release-management/features/vir
>>> t/virt-v2v-integration/ )  so you can setup an oVirt datacenter next to
>>> the Xen one and move VMs to oVirt / KVM.
>>>
>>>
>>>

 Reagrds
 Santosh.

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


>>>
>>>
>>> --
>>>
>>> SANDRO BONAZZOLA
>>>
>>> ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D
>>>
>>> Red Hat EMEA 
>>> 
>>> TRIED. TESTED. TRUSTED. 
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>
>
> --
>
> SANDRO BONAZZOLA
>
> ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D
>
> Red Hat EMEA 
> 
> TRIED. TESTED. TRUSTED. 
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ansible and list of vms

[Nathanaël Blanchet]

Great, it works like a charm!

But how could I obtain a several map display?

For example, I need to display the vm name ; its relative snaphost id 
and snaphot description.


I tried to change filter, but notyhing works

msg: "{{ ovirt_snapshots | map(attribute='description') | 
map(attribute='id') | join(' ') }}"


or something like

msg: "{{ ovirt_snapshots.vm | map(attribute='name') | 
map(attribute='id') | join(' ') }}"


Thanks for helping.

ps: I tried nearly all modules, and the permissions one is bugged, only 
internal-authz domain displays users, none of ldap one can display.



Le 11/05/2017 à 20:14, Ondra Machacek a écrit :

I am not Ansible expert, this maybe worth asking on Ansible users list,
but one thing which you can do is following:

in tasks/main.yml

- include: "{{ item }}"
  with_items: "{{ resources | default('vms') }}.yml"

then have following files:
 - tasks/vms.yml
 - tasks/clusters.yml
 - tasks/disks.yml
 - ...

then run it as:

 $ ansible-playbook -e "resources: [vms,disks]" play.yml
 $ ansible-playbook -e "resources: [clusters] 
clusters_pattern=name=x*" play.yml



On Thu, May 11, 2017 at 6:34 PM, Nathanaël Blanchet > wrote:


Thanks, all works as expected.

Now, I try make roles.

here it is :

*cat /etc/ansible/roles/ovirt_vm_facts/tasks/main.yml*

  - name: get vm facts
ovirt_vms_facts:
  auth:
url: https://{{ engine }}.v100.abes.fr/ovirt-engine/api

username: "{{ username }}"
password: "{{ password }}"
insecure: "{{ insecure }}"
  pattern: "{{ pattern }}"
  - debug:
  msg: "{{ ovirt_vms | map(attribute='name') | join(' ') }}"

*cat /etc/ansible/roles/ovirt_vm_facts/vars/main.yml*

pattern: "os=rhel_5x64 or os=rhel_5"
engine: air
username: admin@internal
password: ovirt123
insecure: true

and I call those files with */tmp/ovirt_vm_facts.yml* with extra
variables if needed

- hosts: localhost
  connection: local
  roles:
- ovirt_vm_fact

running ansible-playbook /tmp/ovirt_vm_facts.ym -e
'pattern="name=acier* and cluster=Dev"'

*But..*

I don't want to do the same for each ansible module shipped with 2.3.

Knowing that each *facts module has the same structure
auth/pattern, is there a way to play a generic playbook
independant from the role, like:

- hosts: localhost
  connection: local
  roles:
- ovirt_facts (with somewhere a variable "myfact")

which would play an unique role
*/etc/ansible/roles/ovirt_facts/tasks/main.yml with*


- name: get vm facts
myfact
  auth:


Hope to be clear enough, thank your for your help.


Le 10/05/2017 à 13:14, Ondra Machacek a écrit :



On Wed, May 10, 2017 at 12:38 PM, Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:

Le 10/05/2017 à 10:29, Ondra Machacek a écrit :

Not sure I understand. You can use Ansible module to list
VMs, you
can use ovirt_vms _facts[1] module.

For example to get only stopped VMs, you can use following:

- name: Get stopped VMs
  ovirt_vms_facts:
auth:
  url: https://ovirt.example.com/ovirt-engine/api

  username: admin@internal
  password: password
  ca_file: /etc/pki/ovirt-engine/ca.pem
pattern: "status = down"

I want a list of vms sorted by any possible attributes, i.e.
sorted by datacenter or cluster, not only by status.

  * For example, ovirt_vms_facts doesn't allow to get the
datacenter the vm belongs to , and the pattern filter
doesn't return a list of vms as expected:


- hosts: localhost
  connection: local
  tasks:
  - name: Get stopped VMs
ovirt_vms_facts:
  auth:
url: https://acore.v100.abes.fr/ovirt-engine/api

username: admin@internal
password: ovirt123
insecure: true
pattern: name=centos* and cluster=west
  - debug:
  var: ovirt_vms
  - shell: echo "{{ ovirt_vms.name  }}"



Ok, I understand, now.
You have few options here.
If you want for example only VMs from datacenter 'X', you can use
following:

- hosts: localhost
  connection: local
  tasks:
  - name: Get VMs from datacenter X
ovirt_vms_facts:
  pattern: datacenter=X
  auth:
url: https://acore.v100.abes.fr/ovirt-engine/api

username: admin@internal
password: ovirt123
insecure: true
  - debug:
 

Re: [ovirt-users] oVirt Hosted Engine Setup fails

[Simone Tiraboschi]

On Fri, May 12, 2017 at 1:31 PM, Manuel Luis Aznar <
manuel.luis.az...@gmail.com> wrote:

> Hello there,
>
> Sorry for the late response, but I haven been busy doing job things...
>
> I was looking at the email of Yaniv and here are the results from my
> broken installation:
>
>  Permission on /dev/kvm and /dev/random:
>
> [root@host1 audit]# ls -Z /dev/kvm
>  crw-rw-rw-. root kvm system_u:object_r:kvm_device_t:s0
> /dev/kvm
> [root@host1 audit]# ls -Z /dev/random
>  crw-rw-rw-. root root system_u:object_r:random_device_t:s0
> /dev/random
>
>  Finally about SELinux settings:
>
> [root@host1 audit]# ls -la /var/log/audit/audit.log
> -rw---. 1 root root 575333 may 12 12:18
> /var/log/audit/audit.log
>
> [root@host1 audit]# ls -Z /var/log/audit/audit.log
> -rw---. root root system_u:object_r:auditd_log_t:s0
> /var/log/audit/audit.log
>
> I have attached to the mail the full log audit file
> (/var/log/audit/audit.log)
>
> Again I am sorry about the delay.
>
> Any answer would be very appreciated,
>

OK, it fails here:

type=VIRT_CONTROL msg=audit(1493635665.036:776): pid=21993 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start
reason=booted vm="HostedEngine" uuid=92faf919-b7b1-42dc-a70c-15c6eb32ba2f
vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed'

Can you please share your /etc/libvirt/qemu.conf ?

Maybe you can also try running:
   vdsm-tool configure --force
   systemcl restart libvirtd
   systemcl restart vdsmd
and try again


> Manuel
>
> 2017-05-07 7:46 GMT+01:00 Yaniv Kaul :
>
>>
>>
>> On Thu, May 4, 2017 at 8:45 PM, Manuel Luis Aznar <
>> manuel.luis.az...@gmail.com> wrote:
>>
>>> Hello there,
>>>
>>> Sorry for the delay to answer the mail, but, I have been busy doing
>>> things...
>>>
>>> The permission on /dev/random are the following:
>>>
>>> [root@host1 manuel]# ls -la /dev/random
>>> crw-rw-rw-. 1 root root 1, 8 may  4 18:06 /dev/random
>>>
>>> Suppose that these permission should look something like:
>>>
>>> [root@host1 manuel]# ls -la /dev/random
>>> crw-rw-rw-. 1 vdsm kvm 1, 8 may  4 18:06 /dev/random
>>>
>>> Finally I do not know what you meant with permission on SELinux audit
>>> logs?¿? Sorry for my lack of understanding, so, please let me know much
>>> more precisely and I will look for it
>>>
>>
>> You can get the selinux settings of a file with ls -Z . For example:
>> [ykaul@ykaul ovirt-system-tests]$ ls -Z /dev/kvm
>> system_u:object_r:kvm_device_t:s0 /dev/kv
>>
>> Also, you can search for selinux issues either in /var/log/audit or using
>> ausearch. For example:
>> sudo ausearch -m AVC -i
>>
>> Y.
>>
>>>
>>>
>>> Thanks for all in advance
>>> I will be waiting for you
>>> Manuel Luis Aznar
>>>
>>> 2017-05-03 15:09 GMT+01:00 Simone Tiraboschi :
>>>


 On Wed, May 3, 2017 at 11:30 AM, Manuel Luis Aznar <
 manuel.luis.az...@gmail.com> wrote:

> Hello Simone and all others,
>
> I have attached to the mail the requested files. If you have any other
> inquiry just say it, The failed installation drive would be keep safe 
> until
> solving this problem.
>
> Thanks for all in advance
> Manuel
>

 The issue is here:
 May  1 11:47:45 host1 journal: libvirt version: 2.0.0, package:
 10.el7_3.5 (CentOS BuildSystem ,
 2017-03-03-02:09:45, c1bm.rdu2.centos.org)
 May  1 11:47:45 host1 journal: hostname: host1.bajada.es
 May  1 11:47:45 host1 journal: Falló al conectar con el socket de
 monitor: No existe el proceso
 May  1 11:47:45 host1 journal: internal error: process exited while
 connecting to monitor: /dev/random -device 
 virtio-rng-pci,rng=objrng0,id=rng0,bus=pci.0,addr=0x7
 -msg timestamp=on#012Could not access KVM kernel module: Permission
 denied#012failed to initialize KVM: Permission denied
 May  1 11:47:45 host1 journal: libvirt version: 2.0.0, package:
 10.el7_3.5 (CentOS BuildSystem ,
 2017-03-03-02:09:45, c1bm.rdu2.centos.org)
 May  1 11:47:45 host1 journal: hostname: host1.bajada.es
 May  1 11:47:45 host1 journal: Fin de archivo al leer datos: Error de
 entrada/salida
 May  1 11:47:45 host1 journal: Fin de archivo al leer datos: Error de
 entrada/salida

 could you please also check the permission on /dev/random and SELinux
 audit logs?



>
> 2017-05-02 10:55 GMT+01:00 Simone Tiraboschi :
>
>> Sure, but first we need to understand what it's happening: in our CI
>> process everything is fine so I think it's something specific to your 
>> env.
>> Could you please share your:
>> /var/log/libvirt/qemu/HostedEngine.log
>> /var/log/messages
>>
>> thanks,
>> Simone
>>
>>
>> On Tue, May 2, 2017 at 11:38 AM, Manuel Luis Aznar <
>> manue

[ovirt-users] searching users and field mapping

[Fabrice Bacchella]

When I export a user I find values like:

  
  
39323336363566612D37622D346532612D396530632D316630396536643634636432
  
  
  admin
  *
  admin
  admin@internal-authz
  
internal-authz
  
  
  
  
  

They are the same that one defined from the type in sdk 
(http://ovirt.github.io/ovirt-engine-sdk/master/types.m.html#ovirtsdk4.types.User).

If I look in 
http://www.ovirt.org/documentation/admin-guide/appe-Using_Search_Bookmarks_and_Tags/,
 I see fields like pool, group that I don't map to fields in the type.

In the search bar in the UI, I also see fields like login, directory or type. 
The mapping is less obvious, even if I can guess that login maps to principal.

But I wonder why such name discrepancy exists and if they are documented 
somewhere.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Fabrice Bacchella]

It works much better now. Goes from 6s to less than 500ms. Not blazing fast but 
much more usable, thanks a lot.

> Le 12 mai 2017 à 15:58, Ondra Machacek  a écrit :
> 
> This is new feature in aaa-ldap tracked here[1].
> By default for AD profiles we use this feature, and it should
> increase performance in most cases.
> 
> But if this is not the case for you, can you just try to change the profile
> from:
> 
>  include = 
> 
> to
> 
>  include = 
> 
> And see if it will be better?
> 
> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1393407 
> 
> 
> On Fri, May 12, 2017 at 2:54 PM, Fabrice Bacchella 
> mailto:fabrice.bacche...@orange.fr>> wrote:
> I found that:
> 
> http://dunnry.com/blog/TransitiveLinkValueFilterEvaluation.aspx 
> 
> 
> 
>> Le 12 mai 2017 à 14:44, Fabrice Bacchella > > a écrit :
>> 
>> Ok, I found where it's slow, it's a ldapsearch on our AD:
>> 
>> time ldapsearch -a never -E pr=100/noprompt -H ldap://ad1 <> -b DC=... -s 
>> sub '(&(groupType:1.2.840.113556.1.4.803:=2147483648 
>> )(&(objectCategory=group)(member:1.2.840.113556.1.4.1941:=userdn)))'
>>  objectGUID name description
>> 
>> # numResponses: 70
>> # numEntries: 66
>> # numReferences: 3
>> 
>> real 0m10.801s
>> user 0m0.007s
>> sys  0m0.012s
>> 
>> That matches the log line:
>> 2017-05-12 14:22:17,413+02 DEBUG 
>> [org.ovirt.engineextensions.aaa.ldap.Framework] (pool-25-thread-2) [] 
>> Performing SearchRequest 'SearchRequest(baseDN='...', scope=SUB, 
>> deref=NEVER, sizeLimit=0, timeLimit=0, 
>> filter='&(objectCategory=group)(groupType:1.2.840.113556.1.4.803:=2147483648)(member:1.2.840.113556.1.4.1941:=...)',
>>  attrs={objectGUID, name, description}, 
>> controls={SimplePagedResultsControl(pageSize=100, isCritical=false)})' 
>> request on server '...'
>> 2017-05-12 14:22:24,456+02 DEBUG 
>> [org.ovirt.engineextensions.aaa.ldap.Framework] (pool-25-thread-1) [] 
>> SearchResult: SearchResult(resultCode=0 (success), messageID=3, 
>> entriesReturned=66, referencesReturned=0, 
>> responseControls={SimplePagedResultsControl(pageSize=0, isCritical=false)})
>> 
>> 
>> And without 1.2.840.113556.1.4.1941
>> 
>> # numResponses: 54
>> # numEntries: 50
>> # numReferences: 3
>> 
>> real 0m0.051s
>> user 0m0.008s
>> sys  0m0.007s
>> 
>> So it's an AD problem. 1.2.840.113556.1.4.1941 make it slow, but without it, 
>> the result is not the same. But I don't know if it's an AD or ovirt problem. 
>> I'll keep investigating.
>> 
>> Thank's for your help.
>> ___
>> Users mailing list
>> Users@ovirt.org 
>> http://lists.ovirt.org/mailman/listinfo/users 
>> 
> 
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovs-vswitchd high cpu usage

[Arnaud Lauriou]

Well its seems that I had config mismatch between 4.0.6 et 4.11, old
ovs-vswitchd process was still running.
I found the solution to my problem : reboot oVirt host and everything
works fine now.

On 05/12/2017 04:12 PM, Arnaud Lauriou wrote:

I'm responding to myself !
For vdsm, it's seems that ovsdb-server needs to be up, not ovs-vswitchd.

However, is there a way to reduce cpu load of ovs-vswitchd process ?

Regards,

Arnaud

On 05/12/2017 03:29 PM, Arnaud Lauriou wrote:

Hi,

Just updated last week ovirt hosts from 4.0.6 to 4.1.1 and I noticed 
ovs-vswitchd

high cpu usage, around 100%.

My cluster switch type is in legacy mode, so I decided to stop 
ovs-vswitchd process

on each ovirt host.

This morning, when trying to run a new VM and I've got the following 
error message :
Exit message: (21, 'Executing commands failed: ovs-vsctl: 
unix:/var/run/openvswitch/db.sock: database connection failed (No 
such file or directory)')


Even if the cluster is in legacy mode, it seems that ovs-vswitchd 
needs to be up and running for vdsm.


So, how can reduce the cpu usage of ovs-vswitchd process ?

Regards,

Arnaud
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Migrate VirtualBox Vm into

[Staniforth, Paul]

Hi Gajendra,

  virt-v2v didn't support Debian/Ubuntu guests, it is 
apparently in a later version that is due to be included in RHEL/Centos 7.4


What I did to get a Metasploitable2 image into oVirt was.




1. convert vmdk disk

   qemu-img convert -f vmdk Metasploitable.vmdk -O raw Metasploitable.img

2. Find size of disk 8GB in this case

qemu-img info Metasploitable.img

3. Create VM O/S Linux with disk of that size and of interface type IDE thin 
provision

4.  In engine in the DATA_DOMAIN record the id of the disk just created

5. in the DATA_DOMAIN on one the hosts/nodes go to the images directory
  e.g. mount_point/UUID/images

6. cd to directory of the id of the disk recorded at step 5 (also probably last 
directory created)
 there should be 3 files and the one without an extension should be 8GB
 they should all start with the same UUID in this case  
1805e3a4-0697-4c0a-8dfb-0c0011490bd2

7. dd if=/path/Metasploitable.img  of=1805e3a4-0697-4c0a-8dfb-0c0011490bd2 bs=4M

8.  Boot VM.

It may be easier converting the disk and creating a new VM with it or seeing if 
Fedora has a more modern virt-v2v

Regards,
   Paul S.



From: users-boun...@ovirt.org  on behalf of Gajendra 
Ravichandran 
Sent: 09 May 2017 11:01
To: users@ovirt.org
Subject: [ovirt-users] Migrate VirtualBox Vm into


Hi,


I am running a ovirt engine and ovirt host on a single machine for testing 
purpose. I trying to convert and move Debian virtualbox vm which is created 
using vagrant into ovirt engine as template.


I tried to convert using virt-v2v as http://libguestfs.org/virt-v2v.1.html. 
However, I get error as (Debian/ Linux cannot be converted).


I have exported the vm from virtualbox and have the image as .ova. Is there any 
way to migrate?


Thanks

To view the terms under which this email is distributed, please go to:-
http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovs-vswitchd high cpu usage

[Arnaud Lauriou]

I'm responding to myself !
For vdsm, it's seems that ovsdb-server needs to be up, not ovs-vswitchd.

However, is there a way to reduce cpu load of ovs-vswitchd process ?

Regards,

Arnaud

On 05/12/2017 03:29 PM, Arnaud Lauriou wrote:

Hi,

Just updated last week ovirt hosts from 4.0.6 to 4.1.1 and I noticed 
ovs-vswitchd

high cpu usage, around 100%.

My cluster switch type is in legacy mode, so I decided to stop 
ovs-vswitchd process

on each ovirt host.

This morning, when trying to run a new VM and I've got the following 
error message :
Exit message: (21, 'Executing commands failed: ovs-vsctl: 
unix:/var/run/openvswitch/db.sock: database connection failed (No such 
file or directory)')


Even if the cluster is in legacy mode, it seems that ovs-vswitchd 
needs to be up and running for vdsm.


So, how can reduce the cpu usage of ovs-vswitchd process ?

Regards,

Arnaud
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Ondra Machacek]

This is new feature in aaa-ldap tracked here[1].
By default for AD profiles we use this feature, and it should
increase performance in most cases.

But if this is not the case for you, can you just try to change the profile
from:

 include = 

to

 include = 

And see if it will be better?

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1393407

On Fri, May 12, 2017 at 2:54 PM, Fabrice Bacchella <
fabrice.bacche...@orange.fr> wrote:

> I found that:
>
> http://dunnry.com/blog/TransitiveLinkValueFilterEvaluation.aspx
>
>
> Le 12 mai 2017 à 14:44, Fabrice Bacchella  a
> écrit :
>
> Ok, I found where it's slow, it's a ldapsearch on our AD:
>
> time ldapsearch -a never -E pr=100/noprompt -H ldap://ad1 -b DC=... -s
> sub '(&(groupType:1.2.840.113556.1.4.803:=2147483648 <(214)%20748-3648>
> )(&(objectCategory=group)(member:1.2.840.113556.1.4.1941:=userdn)))'
> objectGUID name description
>
> # numResponses: 70
> # numEntries: 66
> # numReferences: 3
>
> real 0m10.801s
> user 0m0.007s
> sys 0m0.012s
>
> That matches the log line:
> 2017-05-12 14:22:17,413+02 DEBUG 
> [org.ovirt.engineextensions.aaa.ldap.Framework]
> (pool-25-thread-2) [] Performing SearchRequest 'SearchRequest(baseDN='...',
> scope=SUB, deref=NEVER, sizeLimit=0, timeLimit=0, filter='&(objectCategory=
> group)(groupType:1.2.840.113556.1.4.803:=2147483648)(
> member:1.2.840.113556.1.4.1941:=...)', attrs={objectGUID, name,
> description}, controls={SimplePagedResultsControl(pageSize=100,
> isCritical=false)})' request on server '...'
> 2017-05-12 14:22:24,456+02 DEBUG 
> [org.ovirt.engineextensions.aaa.ldap.Framework]
> (pool-25-thread-1) [] SearchResult: SearchResult(resultCode=0 (success),
> messageID=3, entriesReturned=66, referencesReturned=0, responseControls={
> SimplePagedResultsControl(pageSize=0, isCritical=false)})
>
>
> And without 1.2.840.113556.1.4.1941
>
> # numResponses: 54
> # numEntries: 50
> # numReferences: 3
>
> real 0m0.051s
> user 0m0.008s
> sys 0m0.007s
>
> So it's an AD problem. 1.2.840.113556.1.4.1941 make it slow, but without
> it, the result is not the same. But I don't know if it's an AD or ovirt
> problem. I'll keep investigating.
>
> Thank's for your help.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt nested in VMware

[Gianluca Cecchi]

On Fri, May 12, 2017 at 1:06 PM, Michal Skrivanek <
michal.skriva...@redhat.com> wrote:

>
> > On 11 May 2017, at 19:52, Mark Duggan  wrote:
> >
> > Hi everyone,
> >
> > From reading through the mailing list, it does appear that it's possible
> to have the ovirt nodes/hosts be VMware virtual machines, once I enable the
> appropriate settings on the VMware side. All seems to have gone well, I can
> see the hosts in the ovirt interface, but when I attempt to create and
> start a VM it never gets past printing the SeaBios version and the machine
> UUID to the screen/console. It doesn't appear to try to boot from the hard
> disk or an ISO that I've attached.
> >
> > Has anyone else encountered similar behaviour?
>
> I wouldn’t think you can even get that far.
> It may work with full emulation (non-kvm) but we kind of enforce it in
> oVirt so some changes are likely needed.
> Of course even if you succeed it’s going to be hopelessly slow. (or maybe
> it is indeed working and just runs very slow)
>
> Nested on a KVM hypervisor runs ok
>
> Thanks,
> michal
>
>
In the past I was able to get an Openstack Icehouse environment running
inside vSphere 5.x for a POC (on poweful physical servers) and performance
of nested VMs inside the virtual compute nodes was acceptable.
More recently I configured a standalone ESXi server 6.0 U2 on a Nuc6 with
32Gb of ram and 2 ssd disks and on it I have now running 2 kinds of
environments (just verified they are still on after some months I abandoned
them to their destiny... ;-)

1) an ESXi VM acting as a single oVirt host (4.1.1 final or pre, I don't
remember) with self hosted engine (that itself becomes an L2 VM) and also
another VM (CentOS 6.8)
See here a screenshot of the web admin gui with a spice console open after
connecting to the engine:
https://drive.google.com/file/d/0BwoPbcrMv8mvanpTUnFuZ2FURms/view?usp=sharing

2) a virtual oVirt gluster environment based on 4.0.5 with 3 Virtual Hosts
(with one as arbiter node if I remember correctly)

On this second environment I have ovirt01, virt02 and ovirt03 VMs:

[root@ovirt02 ~]# hosted-engine --vm-status


--== Host 1 status ==--

Status up-to-date  : True
Hostname   : ovirt01.localdomain.local
Host ID: 1
Engine status  : {"reason": "vm not running on this
host", "health": "bad", "vm": "down", "detail": "unknown"}
Score  : 3042
stopped: False
Local maintenance  : False
crc32  : 2041d7b6
Host timestamp : 15340856
Extra metadata (valid at timestamp):
metadata_parse_version=1
metadata_feature_version=1
timestamp=15340856 (Fri May 12 14:59:17 2017)
host-id=1
score=3042
maintenance=False
state=EngineDown
stopped=False


--== Host 2 status ==--

Status up-to-date  : True
Hostname   : 192.168.150.103
Host ID: 2
Engine status  : {"health": "good", "vm": "up",
"detail": "up"}
Score  : 3400
stopped: False
Local maintenance  : False
crc32  : 27a80001
Host timestamp : 15340760
Extra metadata (valid at timestamp):
metadata_parse_version=1
metadata_feature_version=1
timestamp=15340760 (Fri May 12 14:59:11 2017)
host-id=2
score=3400
maintenance=False
state=EngineUp
stopped=False


--== Host 3 status ==--

Status up-to-date  : True
Hostname   : ovirt03.localdomain.local
Host ID: 3
Engine status  : {"reason": "vm not running on this
host", "health": "bad", "vm": "down", "detail": "unknown"}
Score  : 2986
stopped: False
Local maintenance  : False
crc32  : 98aed4ec
Host timestamp : 15340475
Extra metadata (valid at timestamp):
metadata_parse_version=1
metadata_feature_version=1
timestamp=15340475 (Fri May 12 14:59:22 2017)
host-id=3
score=2986
maintenance=False
state=EngineDown
stopped=False
[root@ovirt02 ~]#

The virtual node ovirt02 has the hosted engine vm running on it
It was some months I didn't come back, but it seems it is still up... ;-)


[root@ovirt02 ~]# uptime
 15:02:18 up 177 days, 13:26,  1 user,  load average: 2.04, 1.46, 1.22

[root@ovirt02 ~]# free
  totalusedfree  shared  buff/cache
available
Mem:   12288324 6941068 3977644  595204 1369612
4340808
Swap:   5242876 2980672 2262204
[root@ovirt02 ~]#

[root@ovirt02 ~]# ps -ef|grep qemu-kvm
qemu  18982  1  8  2016 ?14-20:33:44 /usr/libexec/qemu-kvm
-name HostedEngine -S -machine pc-i440fx-rhel7.2.0,accel=kvm,usb=off

the first node (used for deploy with hostname ovirt01 and with name inside
oVir

[ovirt-users] ovs-vswitchd high cpu usage

[Arnaud Lauriou]

Hi,

Just updated last week ovirt hosts from 4.0.6 to 4.1.1 and I noticed 
ovs-vswitchd

high cpu usage, around 100%.

My cluster switch type is in legacy mode, so I decided to stop 
ovs-vswitchd process

on each ovirt host.

This morning, when trying to run a new VM and I've got the following 
error message :
Exit message: (21, 'Executing commands failed: ovs-vsctl: 
unix:/var/run/openvswitch/db.sock: database connection failed (No such 
file or directory)')


Even if the cluster is in legacy mode, it seems that ovs-vswitchd needs 
to be up and running for vdsm.


So, how can reduce the cpu usage of ovs-vswitchd process ?

Regards,

Arnaud
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Fabrice Bacchella]

I found that:

http://dunnry.com/blog/TransitiveLinkValueFilterEvaluation.aspx


> Le 12 mai 2017 à 14:44, Fabrice Bacchella  a 
> écrit :
> 
> Ok, I found where it's slow, it's a ldapsearch on our AD:
> 
> time ldapsearch -a never -E pr=100/noprompt -H ldap://ad1  -b 
> DC=... -s sub 
> '(&(groupType:1.2.840.113556.1.4.803:=2147483648)(&(objectCategory=group)(member:1.2.840.113556.1.4.1941:=userdn)))'
>  objectGUID name description
> 
> # numResponses: 70
> # numEntries: 66
> # numReferences: 3
> 
> real  0m10.801s
> user  0m0.007s
> sys   0m0.012s
> 
> That matches the log line:
> 2017-05-12 14:22:17,413+02 DEBUG 
> [org.ovirt.engineextensions.aaa.ldap.Framework] (pool-25-thread-2) [] 
> Performing SearchRequest 'SearchRequest(baseDN='...', scope=SUB, deref=NEVER, 
> sizeLimit=0, timeLimit=0, 
> filter='&(objectCategory=group)(groupType:1.2.840.113556.1.4.803:=2147483648)(member:1.2.840.113556.1.4.1941:=...)',
>  attrs={objectGUID, name, description}, 
> controls={SimplePagedResultsControl(pageSize=100, isCritical=false)})' 
> request on server '...'
> 2017-05-12 14:22:24,456+02 DEBUG 
> [org.ovirt.engineextensions.aaa.ldap.Framework] (pool-25-thread-1) [] 
> SearchResult: SearchResult(resultCode=0 (success), messageID=3, 
> entriesReturned=66, referencesReturned=0, 
> responseControls={SimplePagedResultsControl(pageSize=0, isCritical=false)})
> 
> 
> And without 1.2.840.113556.1.4.1941
> 
> # numResponses: 54
> # numEntries: 50
> # numReferences: 3
> 
> real  0m0.051s
> user  0m0.008s
> sys   0m0.007s
> 
> So it's an AD problem. 1.2.840.113556.1.4.1941 make it slow, but without it, 
> the result is not the same. But I don't know if it's an AD or ovirt problem. 
> I'll keep investigating.
> 
> Thank's for your help.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Fabrice Bacchella]

Ok, I found where it's slow, it's a ldapsearch on our AD:

time ldapsearch -a never -E pr=100/noprompt -H ldap://ad1 -b DC=... -s sub 
'(&(groupType:1.2.840.113556.1.4.803:=2147483648)(&(objectCategory=group)(member:1.2.840.113556.1.4.1941:=userdn)))'
 objectGUID name description

# numResponses: 70
# numEntries: 66
# numReferences: 3

real0m10.801s
user0m0.007s
sys 0m0.012s

That matches the log line:
2017-05-12 14:22:17,413+02 DEBUG 
[org.ovirt.engineextensions.aaa.ldap.Framework] (pool-25-thread-2) [] 
Performing SearchRequest 'SearchRequest(baseDN='...', scope=SUB, deref=NEVER, 
sizeLimit=0, timeLimit=0, 
filter='&(objectCategory=group)(groupType:1.2.840.113556.1.4.803:=2147483648)(member:1.2.840.113556.1.4.1941:=...)',
 attrs={objectGUID, name, description}, 
controls={SimplePagedResultsControl(pageSize=100, isCritical=false)})' request 
on server '...'
2017-05-12 14:22:24,456+02 DEBUG 
[org.ovirt.engineextensions.aaa.ldap.Framework] (pool-25-thread-1) [] 
SearchResult: SearchResult(resultCode=0 (success), messageID=3, 
entriesReturned=66, referencesReturned=0, 
responseControls={SimplePagedResultsControl(pageSize=0, isCritical=false)})


And without 1.2.840.113556.1.4.1941

# numResponses: 54
# numEntries: 50
# numReferences: 3

real0m0.051s
user0m0.008s
sys 0m0.007s

So it's an AD problem. 1.2.840.113556.1.4.1941 make it slow, but without it, 
the result is not the same. But I don't know if it's an AD or ovirt problem. 
I'll keep investigating.

Thank's for your help.___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Fabrice Bacchella]

> Le 12 mai 2017 à 13:35, Ondra Machacek  a écrit :
> 
> 
> 
> On Fri, May 12, 2017 at 1:18 PM, Fabrice Bacchella 
> mailto:fabrice.bacche...@orange.fr>> wrote:
> The request is indeed quite slow within ovirt, using the setup given by Juan:
> 
> /ovirt-engine/sso/oauth/token-http-auth 7001ms
> 
> I was not able to authenticate jboss-cli.sh, I don't know why: 
> 'admin@internal-authz': No valid profile found in credentials.
> 
> It should be admin@internal.
>  

Indeed, but an export don't show that:


  
  
39323336363566612D37622D346532612D396530632D316630396536643634636432
  
  
  admin
  *
  admin
  admin@internal-authz
  
internal-authz
  
  
  
  
  



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Ondra Machacek]

On Fri, May 12, 2017 at 1:18 PM, Fabrice Bacchella <
fabrice.bacche...@orange.fr> wrote:

> The request is indeed quite slow within ovirt, using the setup given by
> Juan:
>
> /ovirt-engine/sso/oauth/token-http-auth 7001ms
>
> I was not able to authenticate jboss-cli.sh, I don't know why:
> 'admin@internal-authz': No valid profile found in credentials.
>

It should be admin@internal.


>
> So I tried to modifie usr/share/ovirt-engine/services/ovirt-engine/ovirt-
> engine-logging.properties.in, adding:
> org.ovirt.engineextensions.aaa=ALL
> org.ovirt.engine.core.bll.aaa=ALL
> and then restart ovirt-engine. But that changed nothing. That's not the
> good syntax ?
>

You must change the file in ovirt-engine.xml.in same file as Juan send
above.
See here:
https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/ovirt-engine-extension-aaa-ldap-1.0/README#L377

But I think better to use JBoss CLI, you don't have to restart oVirt engine
then.


>
>
>
>
> > Le 12 mai 2017 à 09:25, Ondra Machacek  a écrit :
> >
> > I am not aware of anything, but debug log of all aaa stuff would help,
> > to understand what takes the most time.
> >
> >  - org.ovirt.engineextensions.aaa.ldap
> >  - org.ovirt.engineextensions.aaa.misc
> >  - org.ovirt.engine.core.aaa
> >  - org.ovirt.engine.core.sso
> >
> > To enable it in runtime, please follow:
> >
> >  https://github.com/oVirt/ovirt-engine-extension-aaa-
> ldap/blob/master/README#L469
> >
> > On Thu, May 11, 2017 at 7:24 PM, Fabrice Bacchella <
> fabrice.bacche...@orange.fr> wrote:
> > I'm using kerberos authentication in ovirt for the URL
> /sso/oauth/token-http-auth, but kerberos is done in Apache using
> auth_gssapi_module and it's quite slow, about 6s for a request.
> >
> > I'm trying to understand if it's apache or ovirt-engine that are slow.
> Is there a way to get response time metered for http requests inside ovirt
> instead of seen from apache ?
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt nested in VMware

[Michal Skrivanek]

> On 12 May 2017, at 13:16, Mark Duggan  wrote:
> 
> Michal 
> 
> I certainly seem to be able to get that far, I can provide screen grabs if 
> you think it'd be useful. 
> 
> I'm OK with hopelessly slow, for now. It's really just to POC the interface, 
> and work flows. I'm hoping to get my hands on a couple of servers soon so 
> that I can do a more full blooded test. 

Hi Mark,
ok. how long did you wait for anything to happen?
did you install any vdsm hooks on the host?
how does the VM xml look like? (you can see that dumped in vdsm.log or "virsh 
-r dumpxml ”

Thanks,
michal

> 
> Mark 
> 
> On May 12, 2017 07:06, "Michal Skrivanek"  > wrote:
> 
> > On 11 May 2017, at 19:52, Mark Duggan  > > wrote:
> >
> > Hi everyone,
> >
> > From reading through the mailing list, it does appear that it's possible to 
> > have the ovirt nodes/hosts be VMware virtual machines, once I enable the 
> > appropriate settings on the VMware side. All seems to have gone well, I can 
> > see the hosts in the ovirt interface, but when I attempt to create and 
> > start a VM it never gets past printing the SeaBios version and the machine 
> > UUID to the screen/console. It doesn't appear to try to boot from the hard 
> > disk or an ISO that I've attached.
> >
> > Has anyone else encountered similar behaviour?
> 
> I wouldn’t think you can even get that far.
> It may work with full emulation (non-kvm) but we kind of enforce it in oVirt 
> so some changes are likely needed.
> Of course even if you succeed it’s going to be hopelessly slow. (or maybe it 
> is indeed working and just runs very slow)
> 
> Nested on a KVM hypervisor runs ok
> 
> Thanks,
> michal
> >
> > Are there additional debug logs I can look at or enable to help further 
> > diagnose what is happening?
> >
> > Thanks
> >
> > Mark
> >
> >
> > ___
> > Users mailing list
> > Users@ovirt.org 
> > http://lists.ovirt.org/mailman/listinfo/users 
> > 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Fabrice Bacchella]

The request is indeed quite slow within ovirt, using the setup given by Juan:

/ovirt-engine/sso/oauth/token-http-auth 7001ms

I was not able to authenticate jboss-cli.sh, I don't know why: 
'admin@internal-authz': No valid profile found in credentials.

So I tried to modifie 
usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine-logging.properties.in,
 adding:
org.ovirt.engineextensions.aaa=ALL
org.ovirt.engine.core.bll.aaa=ALL
and then restart ovirt-engine. But that changed nothing. That's not the good 
syntax ?




> Le 12 mai 2017 à 09:25, Ondra Machacek  a écrit :
> 
> I am not aware of anything, but debug log of all aaa stuff would help,
> to understand what takes the most time.
> 
>  - org.ovirt.engineextensions.aaa.ldap
>  - org.ovirt.engineextensions.aaa.misc
>  - org.ovirt.engine.core.aaa
>  - org.ovirt.engine.core.sso
> 
> To enable it in runtime, please follow:
> 
>  
> https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README#L469
> 
> On Thu, May 11, 2017 at 7:24 PM, Fabrice Bacchella 
>  wrote:
> I'm using kerberos authentication in ovirt for the URL 
> /sso/oauth/token-http-auth, but kerberos is done in Apache using 
> auth_gssapi_module and it's quite slow, about 6s for a request.
> 
> I'm trying to understand if it's apache or ovirt-engine that are slow. Is 
> there a way to get response time metered for http requests inside ovirt 
> instead of seen from apache ?
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt nested in VMware

[Mark Duggan]

Michal

I certainly seem to be able to get that far, I can provide screen grabs if
you think it'd be useful.

I'm OK with hopelessly slow, for now. It's really just to POC the
interface, and work flows. I'm hoping to get my hands on a couple of
servers soon so that I can do a more full blooded test.

Mark

On May 12, 2017 07:06, "Michal Skrivanek" 
wrote:

>
> > On 11 May 2017, at 19:52, Mark Duggan  wrote:
> >
> > Hi everyone,
> >
> > From reading through the mailing list, it does appear that it's possible
> to have the ovirt nodes/hosts be VMware virtual machines, once I enable the
> appropriate settings on the VMware side. All seems to have gone well, I can
> see the hosts in the ovirt interface, but when I attempt to create and
> start a VM it never gets past printing the SeaBios version and the machine
> UUID to the screen/console. It doesn't appear to try to boot from the hard
> disk or an ISO that I've attached.
> >
> > Has anyone else encountered similar behaviour?
>
> I wouldn’t think you can even get that far.
> It may work with full emulation (non-kvm) but we kind of enforce it in
> oVirt so some changes are likely needed.
> Of course even if you succeed it’s going to be hopelessly slow. (or maybe
> it is indeed working and just runs very slow)
>
> Nested on a KVM hypervisor runs ok
>
> Thanks,
> michal
> >
> > Are there additional debug logs I can look at or enable to help further
> diagnose what is happening?
> >
> > Thanks
> >
> > Mark
> >
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] [ANN] oVirt 4.1.2 Second Release Candidate is now available

[Sandro Bonazzola]

The oVirt Project is pleased to announce the availability of the Second
Release Candidate of oVirt 4.1.2 for testing, as of May 12th, 2017

This is pre-release software. Please take a look at our community page[1]
to know how to ask questions and interact with developers and users.
All issues or bugs should be reported via oVirt Bugzilla[2].
This pre-release should not to be used in production.

This update is the second release candidate of the second in a series of
stabilization updates to the 4.1 series.
4.1.2 brings more than 25 enhancements and more than 220 bugfixes,
including more than 90 high or urgent
severity fixes, on top of oVirt 4.1 series

This release is available now for:
* Fedora 24 (tech preview)
* Red Hat Enterprise Linux 7.3 or later
* CentOS Linux (or similar) 7.3 or later

This release supports Hypervisor Hosts running:
* Red Hat Enterprise Linux 7.3 or later
* CentOS Linux (or similar) 7.3 or later
* oVirt Node 4.1
* Fedora 24 (tech preview)

See the release notes draft [3] for installation / upgrade instructions and
a list of new features and bugs fixed.

Notes:
- oVirt Appliance is already available
- oVirt Live has been already built [4]
- oVirt Node has been already built [4]

Additional Resources:
* Read more about the oVirt 4.1.2 release highlights:
http://www.ovirt.org/release/4.1.2/
* Get more oVirt Project updates on Twitter: https://twitter.com/ovirt
* Check out the latest project news on the oVirt blog:
http://www.ovirt.org/blog/

[1] https://www.ovirt.org/community/
[2] https://bugzilla.redhat.com/enter_bug.cgi?classification=oVirt
[3] http://www.ovirt.org/release/4.1.2/
[4] http://resources.ovirt.org/pub/ovirt-4.1-pre/iso/


-- 

SANDRO BONAZZOLA

ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D

Red Hat EMEA 

TRIED. TESTED. TRUSTED. 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt nested in VMware

[Michal Skrivanek]

> On 11 May 2017, at 19:52, Mark Duggan  wrote:
> 
> Hi everyone,
> 
> From reading through the mailing list, it does appear that it's possible to 
> have the ovirt nodes/hosts be VMware virtual machines, once I enable the 
> appropriate settings on the VMware side. All seems to have gone well, I can 
> see the hosts in the ovirt interface, but when I attempt to create and start 
> a VM it never gets past printing the SeaBios version and the machine UUID to 
> the screen/console. It doesn't appear to try to boot from the hard disk or an 
> ISO that I've attached.
> 
> Has anyone else encountered similar behaviour?

I wouldn’t think you can even get that far.
It may work with full emulation (non-kvm) but we kind of enforce it in oVirt so 
some changes are likely needed.
Of course even if you succeed it’s going to be hopelessly slow. (or maybe it is 
indeed working and just runs very slow)

Nested on a KVM hypervisor runs ok

Thanks,
michal
> 
> Are there additional debug logs I can look at or enable to help further 
> diagnose what is happening?
> 
> Thanks
> 
> Mark
> 
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Migrate VirtualBox Vm into

[Michal Skrivanek]

> On 12 May 2017, at 11:36, Uwe Laverenz  wrote:
> 
> Hi,
> 
> Am 09.05.2017 um 12:01 schrieb Gajendra Ravichandran:
> 
>> I tried to convert using virt-v2v
>> as http://libguestfs.org/virt-v2v.1.html. However, I get error as
>> (Debian/ Linux cannot be converted).
> 
> Yes, virt-v2v only supports a limited number of operating systems, Debian is 
> just not supported.

It is, now.
https://bugzilla.redhat.com/show_bug.cgi?id=1362497#c1
not in el7 yet, so you need to get it from libguestfs.org

Thanks,
michal

> 
>> I have exported the vm from virtualbox and have the image as .ova. Is
>> there any way to migrate?
> 
> The only way I know of is to convert/migrate the harddisk of your guest 
> machine and attach it to a newly created VM.
> 
> The necessary tools are "VBoxManage clonemedium ..." and qemu-img(1) for 
> example.
> 
> cu,
> Uwe
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Python-SDK4: Shutdown a machine with a specific message?

[nicolas]

El 2017-05-12 10:11, Juan Hernández escribió:

On 05/12/2017 09:46 AM, nico...@devels.es wrote:

Hi,

Using Python-SDK4, is there a way to shutdown a machine with a 
specific

message?

In code I just see this definition:

def shutdown(
self,
async=None,
headers=None,
query=None,
):

I wonder if some header allows specifying the message here.



Currently there is no way to specify that message using the API. Can 
you

open a RFE requesting it?


Done [1].

Thanks!

[1]: https://bugzilla.redhat.com/show_bug.cgi?id=1450351
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Juan Hernández]

On 05/12/2017 11:45 AM, Juan Hernández wrote:
> On 05/12/2017 10:04 AM, Yaniv Kaul wrote:
>>
>>
>> On May 11, 2017 8:25 PM, "Fabrice Bacchella"
>> mailto:fabrice.bacche...@orange.fr>> wrote:
>>
>> I'm using kerberos authentication in ovirt for the URL
>> /sso/oauth/token-http-auth, but kerberos is done in Apache using
>> auth_gssapi_module and it's quite slow, about 6s for a request.
>>
>> I'm trying to understand if it's apache or ovirt-engine that are
>> slow. Is there a way to get response time metered for http requests
>> inside ovirt instead of seen from apache ?
>>
>>
>> In 4.1, look under /var/log/httpd, there should be an ovirt specific log
>> file for exactly this - end to end latency of requests. 
>> Y. 
>>
> 
> The name of that file is 'ovirt-requests-log', and it contains messages
> like this:
> 
>   [12/May/2017:11:09:30 +0200] 192.168.122.1 "Correlation-Id:
> 9e259b75-ee9e-4501-9737-b38d2c318123" "Duration: 393514us" "GET
> /ovirt-engine/api/vms HTTP/1.1" 2322
> 
> Note however that it is generated by the web server, so the reported
> time will include all the web server activities required to complete the
> request.
> 
> If you need to get the same measurement from the point of view of the
> application server you can edit the
> /usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in file
> and do the following modifications:
> 
> 1. Modify the AJP connector (the one that Apache talks to) so that it
> records the start time of the request:
> 
>name="ajp"
> socket-binding="ajp"
> redirect-socket="redirect"
> record-request-start-time="true"  <-- This is new
>   />
> 
> 2. Enable the access log:
> 
>   
> 
>  prefix="my" suffix=".log"/>  <-- This is new
>   
> 
> Then restart the engine. It will start to write to
> /var/log/ovirt-engine/my.log lines like this:
> 
>   /ovirt-engine/api/vms 801ms
> 
> The format of the pattern is described here:
> 
>   http://undertow.io/javadoc/1.4.x/index.html
> 

Actually here:


http://undertow.io/javadoc/1.4.x/io/undertow/server/handlers/accesslog/AccessLogHandler.html

> Remember that the ovirt-engine.xml.in file isn't considered a
> configuration file, so your changes will be lost next time you update
> the engine RPMs.
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Juan Hernández]

On 05/12/2017 10:04 AM, Yaniv Kaul wrote:
> 
> 
> On May 11, 2017 8:25 PM, "Fabrice Bacchella"
> mailto:fabrice.bacche...@orange.fr>> wrote:
> 
> I'm using kerberos authentication in ovirt for the URL
> /sso/oauth/token-http-auth, but kerberos is done in Apache using
> auth_gssapi_module and it's quite slow, about 6s for a request.
> 
> I'm trying to understand if it's apache or ovirt-engine that are
> slow. Is there a way to get response time metered for http requests
> inside ovirt instead of seen from apache ?
> 
> 
> In 4.1, look under /var/log/httpd, there should be an ovirt specific log
> file for exactly this - end to end latency of requests. 
> Y. 
> 

The name of that file is 'ovirt-requests-log', and it contains messages
like this:

  [12/May/2017:11:09:30 +0200] 192.168.122.1 "Correlation-Id:
9e259b75-ee9e-4501-9737-b38d2c318123" "Duration: 393514us" "GET
/ovirt-engine/api/vms HTTP/1.1" 2322

Note however that it is generated by the web server, so the reported
time will include all the web server activities required to complete the
request.

If you need to get the same measurement from the point of view of the
application server you can edit the
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in file
and do the following modifications:

1. Modify the AJP connector (the one that Apache talks to) so that it
records the start time of the request:

  

2. Enable the access log:

  

  <-- This is new
  

Then restart the engine. It will start to write to
/var/log/ovirt-engine/my.log lines like this:

  /ovirt-engine/api/vms 801ms

The format of the pattern is described here:

  http://undertow.io/javadoc/1.4.x/index.html

Remember that the ovirt-engine.xml.in file isn't considered a
configuration file, so your changes will be lost next time you update
the engine RPMs.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Migrate VirtualBox Vm into

[Uwe Laverenz]

Hi,

Am 09.05.2017 um 12:01 schrieb Gajendra Ravichandran:


I tried to convert using virt-v2v
as http://libguestfs.org/virt-v2v.1.html. However, I get error as
(Debian/ Linux cannot be converted).


Yes, virt-v2v only supports a limited number of operating systems, 
Debian is just not supported.



I have exported the vm from virtualbox and have the image as .ova. Is
there any way to migrate?


The only way I know of is to convert/migrate the harddisk of your guest 
machine and attach it to a newly created VM.


The necessary tools are "VBoxManage clonemedium ..." and qemu-img(1) for 
example.


cu,
Uwe
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Python-SDK4: Shutdown a machine with a specific message?

[Juan Hernández]

On 05/12/2017 09:46 AM, nico...@devels.es wrote:
> Hi,
> 
> Using Python-SDK4, is there a way to shutdown a machine with a specific
> message?
> 
> In code I just see this definition:
> 
> def shutdown(
> self,
> async=None,
> headers=None,
> query=None,
> ):
> 
> I wonder if some header allows specifying the message here.
> 

Currently there is no way to specify that message using the API. Can you
open a RFE requesting it?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] IPv6 with legacy (linux bridge) networking.

[Eduardo Mayoral]

Hi,

First of all, sorry for the rookie question. Because of my network
setup my compute nodes (CentOS 7.3) are in a network segment without
IPv6 routing, however IPv6 is enabled on the hosts (just the default
setup in CentOS 7).

This leads to problems when I try to install or update packages from
the repos since some of them are already on IPv6 and the compute nodes
try to access them over IPv6 and fail.

I am considering disabling IPv6 on the compute nodes. Right now I am
using legacy (linux bridge) networking. Will disabling IPv6 on the
compute nodes prevent using IPv6 on the guest VMs?

Thanks!

-- 
Eduardo Mayoral Jimeno (emayo...@arsys.es)
Administrador de sistemas. Departamento de Plataformas. Arsys internet.
+34 941 620 145 ext. 5153

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Yaniv Kaul]

On May 11, 2017 8:25 PM, "Fabrice Bacchella" 
wrote:

I'm using kerberos authentication in ovirt for the URL
/sso/oauth/token-http-auth, but kerberos is done in Apache using
auth_gssapi_module and it's quite slow, about 6s for a request.

I'm trying to understand if it's apache or ovirt-engine that are slow. Is
there a way to get response time metered for http requests inside ovirt
instead of seen from apache ?


In 4.1, look under /var/log/httpd, there should be an ovirt specific log
file for exactly this - end to end latency of requests.
Y.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Python-SDK4: Shutdown a machine with a specific message?

[nicolas]

Hi,

Using Python-SDK4, is there a way to shutdown a machine with a specific 
message?


In code I just see this definition:

def shutdown(
self,
async=None,
headers=None,
query=None,
):

I wonder if some header allows specifying the message here.

Thanks.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] slow kerberos authentication

[Ondra Machacek]

I am not aware of anything, but debug log of all aaa stuff would help,
to understand what takes the most time.

 - org.ovirt.engineextensions.aaa.ldap
 - org.ovirt.engineextensions.aaa.misc
 - org.ovirt.engine.core.aaa
 - org.ovirt.engine.core.sso

To enable it in runtime, please follow:


https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README#L469

On Thu, May 11, 2017 at 7:24 PM, Fabrice Bacchella <
fabrice.bacche...@orange.fr> wrote:

> I'm using kerberos authentication in ovirt for the URL
> /sso/oauth/token-http-auth, but kerberos is done in Apache using
> auth_gssapi_module and it's quite slow, about 6s for a request.
>
> I'm trying to understand if it's apache or ovirt-engine that are slow. Is
> there a way to get response time metered for http requests inside ovirt
> instead of seen from apache ?
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users