Re: [ovirt-users] Setting up GeoReplication

[Sahina Bose]

Adding Aravinda

On Sat, May 13, 2017 at 11:21 PM, Jim Kusznir  wrote:

> Hi All:
>
> I've been trying to set up georeplication for a while now, but can't seem
> to make it work.  I've found documentation on the web (mostly
> https://gluster.readthedocs.io/en/refactor/Administrator%20Guide/Geo%
> 20Replication/), and I found http://blog.gluster.org/2015/09/introducing-
> georepsetup-gluster-geo-replication-setup-tool/
>
> Unfortunately, it seems that some critical steps are missing from both,
> and I can't figure out for sure what they are.
>
> My environment:
>
> Production: replica 2 + arbitrator running on my 3-node oVirt cluster, 3
> volumes (engine, data, iso).
>
> New geo-replication: Raspberry Pi3 with USB hard drive shoved in some
> other data closet off-site.
>
> I've installed rasbian-lite, and after much fighting, got
> glusterfs-*-3.8.11 installed.  I've created my mountpoint (USB hard drive,
> much larger than my gluster volumes), and then ran the command.  I get this
> far:
>
> [OK] georep.nwfiber.com is Reachable(Port 22)
> [OK] SSH Connection established r...@georep.nwfiber.com
> [OK] Master Volume and Slave Volume are compatible (Version: 3.8.11)
> [NOT OK] Unable to Mount Gluster Volume georep.nwfiber.com:engine-rep
>
> Trying it with the steps in the gluster docs also has the same problem.
> No long files are generated on the slave.  Log files on the master include:
>
> [root@ovirt1 geo-replication]# more georepsetup.mount.log
> [2017-05-13 17:26:27.318599] I [MSGID: 100030] [glusterfsd.c:2454:main]
> 0-glusterfs: Started running glusterfs version 3.8.11 (args:
>  glusterfs --xlator-option="*dht.lookup-unhashed=off" --volfile-server
> localhost --volfile-id engine -l /var/log/glusterfs/geo-repli
> cation/georepsetup.mount.log --client-pid=-1 /tmp/georepsetup_wZtfkN)
> [2017-05-13 17:26:27.341170] I [MSGID: 101190] 
> [event-epoll.c:628:event_dispatch_epoll_worker]
> 0-epoll: Started thread with index 1
> [2017-05-13 17:26:27.341260] E [socket.c:2309:socket_connect_finish]
> 0-glusterfs: connection to ::1:24007 failed (Connection refused
> )
> [2017-05-13 17:26:27.341846] E [glusterfsd-mgmt.c:1908:mgmt_rpc_notify]
> 0-glusterfsd-mgmt: failed to connect with remote-host: local
> host (Transport endpoint is not connected)
> [2017-05-13 17:26:31.335849] I [MSGID: 101190] 
> [event-epoll.c:628:event_dispatch_epoll_worker]
> 0-epoll: Started thread with index 2
> [2017-05-13 17:26:31.337545] I [MSGID: 114020] [client.c:2356:notify]
> 0-engine-client-0: parent translators are ready, attempting co
> nnect on transport
> [2017-05-13 17:26:31.344485] I [MSGID: 114020] [client.c:2356:notify]
> 0-engine-client-1: parent translators are ready, attempting co
> nnect on transport
> [2017-05-13 17:26:31.345146] I [rpc-clnt.c:1965:rpc_clnt_reconfig]
> 0-engine-client-0: changing port to 49157 (from 0)
> [2017-05-13 17:26:31.350868] I [MSGID: 114020] [client.c:2356:notify]
> 0-engine-client-2: parent translators are ready, attempting co
> nnect on transport
> [2017-05-13 17:26:31.355946] I [MSGID: 114057] [client-handshake.c:1440:
> select_server_supported_programs] 0-engine-client-0: Using P
> rogram GlusterFS 3.3, Num (1298437), Version (330)
> [2017-05-13 17:26:31.356280] I [rpc-clnt.c:1965:rpc_clnt_reconfig]
> 0-engine-client-1: changing port to 49157 (from 0)
> Final graph:
> +---
> ---+
>   1: volume engine-client-0
>   2: type protocol/client
>   3: option clnt-lk-version 1
>   4: option volfile-checksum 0
>   5: option volfile-key engine
>   6: option client-version 3.8.11
>   7: option process-uuid ovirt1.nwfiber.com-25660-2017/
> 05/13-17:26:27:311929-engine-client-0-0-0
>   8: option fops-version 1298437
>   9: option ping-timeout 30
>  10: option remote-host ovirt1.nwfiber.com
>  11: option remote-subvolume /gluster/brick1/engine
>  12: option transport-type socket
>  13: option username 028984cf-0399-42e6-b04b-bb9b1685c536
>  14: option password eae737cc-9659-405f-865e-9a7ef97a3307
>  15: option filter-O_DIRECT off
>  16: option send-gids true
>  17: end-volume
>  18:
>  19: volume engine-client-1
>  20: type protocol/client
>  21: option ping-timeout 30
>  22: option remote-host ovirt2.nwfiber.com
>  23: option remote-subvolume /gluster/brick1/engine
>  24: option transport-type socket
>  25: option username 028984cf-0399-42e6-b04b-bb9b1685c536
>  26: option password eae737cc-9659-405f-865e-9a7ef97a3307
>  27: option filter-O_DIRECT off
>  28: option send-gids true
>  29: end-volume
>  30:
>  31: volume engine-client-2
>  32: type protocol/client
>  33: option ping-timeout 30
>  34: option remote-host ovirt3.nwfiber.com
>  35: option remote-subvolume /gluster/brick1/engine
>  36: option transport-type socket
>  37: option username 028984cf-0399-42e6-b04b-bb9b1685c536
>  38: option passwo

Re: [ovirt-users] Docker images for oVirt engine

[Leni Kadali Mutungi]

Managed to run the OpenShift cluster well enough. When I went into the
ovirt-containers directory and tried to run `make build`, I got the
following error:

for godep in gopkg.in/ini.v1 ; do \
GOPATH=""/home/herabus/ovirt-containers/tools"" go get ${godep}; \
done
/bin/sh: 2: go: Permission denied
Makefile:40: recipe for target 'tools/bin/build' failed
make: *** [tools/bin/build] Error 127

So I ran `sudo make build` instead and got the following error:
for godep in gopkg.in/ini.v1 ; do \
GOPATH=""/tools"" go get ${godep}; \
done
/bin/sh: 2: go: not found
Makefile:40: recipe for target 'tools/bin/build' failed
make: *** [tools/bin/build] Error 127

Running `sudo make deploy` gave me this error:

for godep in gopkg.in/ini.v1 ; do \
GOPATH=""/tools"" go get ${godep}; \
done
/bin/sh: 2: go: not found
Makefile:40: recipe for target 'tools/bin/deploy' failed
make: *** [tools/bin/deploy] Error 127




-- 
- Warm regards
Leni Kadali Mutungi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Maintenance mode for storage?

[Nir Soffer]

On Sun, May 14, 2017 at 7:59 PM Troels Arvin  wrote:

> Hello,
>
> Fred Rolland wrote:
> > You cannot put a storage domain to maintenance if you have running VMs
> > using disks located in this domain.
>
> OK.
>
> Am I right about the following: A storage domain needs to be in
> maintenance mode before a LUN may be removed from it?
>

Yes.


> - And if so: This means that ovirt does not support online removal of a
> LUN from a storage domain, even if there's sufficient free space in other
> LUNs in the storage domain?
>

Yes, removing a lun from a storage domain require moving the storage
domain to maintenance.

If there is no space to remove a lun, you will not be able to remove it even
if the domain is in maintenance.

Nir
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Maintenance mode for storage?

[Troels Arvin]

Hello,

Fred Rolland wrote:
> You cannot put a storage domain to maintenance if you have running VMs
> using disks located in this domain.

OK.

Am I right about the following: A storage domain needs to be in 
maintenance mode before a LUN may be removed from it?

- And if so: This means that ovirt does not support online removal of a 
LUN from a storage domain, even if there's sufficient free space in other 
LUNs in the storage domain?


-- 
Regards,
Troels arvin

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Feature: enhanced OVA support

[Arik Hadas]

Hi everyone,

We would like to share our plan for extending the currently provided
support for OVA files with:
1. Support for uploading OVA.
2. Support for exporting a VM/template as OVA.
3. Support for importing OVA that was generated by oVirt (today, we only
support those that are VMware-compatible).
4. Support for downloading OVA.

This can be found on the feature page

.

Your feedback and cooperation will be highly appreciated.

Thanks,
Arik
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Maintenance mode for storage?

[Fred Rolland]

Hi,

You cannot put a storage domain to maintenance if you have running VMs
using disks located in this domain.
Putting a storage domain to maintenance will disconnect all hosts from the
storage backend (NFS :unmount, ISCSI: iscsiadm -m session -r )-u)

Regards,

Freddy

On Sun, May 14, 2017 at 1:12 PM, Troels Arvin  wrote:

> Hello,
>
> I would like to make use of the new ovirt feature where a LUN may be
> removed from a storage domain, provided there's enough free space on the
> remaining LUNs in the domain.
>
> It seems the storage domain needs to be put in maintenance mode before
> this may be accomplished. But what's the consequence of putting a storage
> domain in maintenance mode? Can guests using the domain keep running
> while the storage domain is in maintenance mode? Does something stop
> working while a storage domain is in maintenance mode?
>
> --
> Regards,
> Troels Arvin
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Engine deploy tab is missing when restoring from db-backup?

[Yaniv Kaul]

On Thu, May 11, 2017 at 12:14 PM, gflwqs gflwqs  wrote:

> Hi list,
> I have restored my 4.1 engine.
> After i have restored the engine the engine deploy tab is missing?
>

Can you explain what tab exactly you are referring to?
Y.


> And since it is not possible anymore to deploy thru command line i am not
> able to deploy new hosts?
> - Does anybody know a workaround to deploy new hosts?
> - Is this a bug or am i doing something wrong when restoring?
>
> This is how i restored:
> [root@ovirt-engine ~]# engine-backup --mode=restore --file=backup.tar
> --log=restore.log --provision-db --provision-dwh-db --restore-permissions
>
>
> Thanks!
> Christian
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Regenerating SSL keys

[Yedidyah Bar David]

On Sun, May 14, 2017 at 11:01 AM, Yaniv Kaul  wrote:
>
>
> On Sat, May 13, 2017 at 2:35 AM, Jamie Lawrence 
> wrote:
>>
>> The key generated by the engine install ended up with a bad CN; it has a
>> five-digit number appended to the host name, and no SAN.

In addition to Yaniv's explanation below, can you explain why it was
bad? That is, what software/process was broken by it? Please note that
this is the CN of the CA's cert, not of the individual certs its signs
(such as the one for the web server for https) - these have the FQDN
you supplied to engine-setup as their CN.

>
>
> The 5 random digits are supposed to be OK, and are actually a feature - it
> ensures uniqueness if you re-generate (most likely reinstall your Engine),
> as otherwise some browsers fail miserably if a CA cert mismatches what they
> know.
>
> SAN is being worked on - we are aware of Chrome 58 now requiring it.
> I sincerely hope to see it in 4.1.2 (see https://bugzilla.redhat.com/1449084
> ).

Indeed, and see my comment 5 there for how to add SAN to an existing
setup, _after_ you upgrade to 4.1.2 when it's out.

> Y.
>
>
>>
>> I've lived with this through setup, but now I'm getting close to prod use,
>> and need to clean up so that it is usable for general consumption. And the
>> SPICE HTML client is completely busted due to this; that's a problem because
>> we're mostly MacOS on the client side, and the Mac Spice client is unusable
>> for normal humans.
>>
>>  I'm wary of attempting to regenerate these manually, as I don't have a
>> handle on how the keysare used by the various components.
>>
>> What is the approved method of regenerating these keys?

This depends on several different factors, including the expected cost
of full export/reinstall/import compared to partial solutions. If you
have a small setup that can have downtime, and have enough resources
to prepare a more-or-less complete test environment where you can
verify what you plan to do, then export/reinstall/import (where export
is not really needed these days, the engine can import an existing
storage domain) is the safest option.

See also:

https://www.ovirt.org/documentation/how-to/networking/changing-engine-hostname/

Best,

>>
>> -j
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Maintenance mode for storage?

[Troels Arvin]

Hello,

I would like to make use of the new ovirt feature where a LUN may be 
removed from a storage domain, provided there's enough free space on the 
remaining LUNs in the domain.

It seems the storage domain needs to be put in maintenance mode before 
this may be accomplished. But what's the consequence of putting a storage 
domain in maintenance mode? Can guests using the domain keep running 
while the storage domain is in maintenance mode? Does something stop 
working while a storage domain is in maintenance mode?

-- 
Regards,
Troels Arvin

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] The number of LVs on the domain VPLEX_DATA_DOMAIN exceeded 300, you are approaching the limit where performance may degrade.

[Allon Mureinik]

The 300 is a rule-of-thumb number we benchmarked back in the day, and is
probably quite outdated. In fact, in oVirt 4.1.2, we intend to increase it
to 1000 [1].

If you don't want to wait till then, and you aren't suffering any
performance hits when creating/removing disks/snapshots on this domain, you
can increase it yourself by using the engine-config tool:

[~/ovirt-engine-home/] ./bin/engine-config -s AlertOnNumberOfLVs=1000



[1] https://bugzilla.redhat.com/show_bug.cgi?id=1436161

On Fri, May 12, 2017 at 11:35 PM, Rogério Ceni Coelho <
rogeriocenicoe...@gmail.com> wrote:

> Hi oVirt Admins,
>
> I have two data domains using FC SAN, with 150  VMs. Each VM have 3 or 4
> disks.
>
> A few time ago i saw the above message on Events. What can i do ? What are
> the alternatives ? What can i do ?
>
> The number of LVs on the domain VPLEX_DATA_DOMAIN exceeded 300, you are
> approaching the limit where performance may degrade.
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Regenerating SSL keys

[Yaniv Kaul]

On Sat, May 13, 2017 at 2:35 AM, Jamie Lawrence 
wrote:

> The key generated by the engine install ended up with a bad CN; it has a
> five-digit number appended to the host name, and no SAN.
>

The 5 random digits are supposed to be OK, and are actually a feature - it
ensures uniqueness if you re-generate (most likely reinstall your Engine),
as otherwise some browsers fail miserably if a CA cert mismatches what they
know.

SAN is being worked on - we are aware of Chrome 58 now requiring it.
I sincerely hope to see it in 4.1.2 (see https://bugzilla.redhat.com/1449084
).
Y.



> I've lived with this through setup, but now I'm getting close to prod use,
> and need to clean up so that it is usable for general consumption. And the
> SPICE HTML client is completely busted due to this; that's a problem
> because we're mostly MacOS on the client side, and the Mac Spice client is
> unusable for normal humans.
>
>  I'm wary of attempting to regenerate these manually, as I don't have a
> handle on how the keysare used by the various components.
>
> What is the approved method of regenerating these keys?
>
> -j
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users