[ovirt-users] Hosted-Engine mount .iso file CLI

2018-02-11 Thread Russell Wecker
I have a hosted engine setup that when I ran the system updates for it, and
it will not boot. I would like to have it boot from a rescue CD image so i
can fix it i have copied the /var/run/ovirt-hosted-engine-ha/vm.conf to
/root and modified it however i cannot seem to find the exact options to
configure the file  for .iso  my current settings are

devices={index:2,iface:ide,shared:false,readonly:true,deviceId:8c3179ac-b322-4f5c-9449-c52e3665e0ae,address:{controller:0,target:0,unit:0,bus:1,type:drive},device:cdrom,path:,type:disk}
How do i change it to boot from local .iso.


Thanks

Any help would be most appreciated.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Issue with 4.2.1 RC and SSL

2018-02-11 Thread Yedidyah Bar David
On Sun, Feb 11, 2018 at 11:41 PM, ~Stack~  wrote:
> On 02/11/2018 02:41 AM, Yedidyah Bar David wrote:
>> On Sun, Feb 11, 2018 at 10:26 AM, Yaniv Kaul  wrote:
>>>
>>>
>>> On Sun, Feb 11, 2018 at 2:43 AM, ~Stack~  wrote:
>
> [snip]
>
 We decided to just start from scratch and my coworker watched and
 confirmed every step. It works! No problems at all this time. Further
 evidence that I goofed _something_ up the first time.
>>>
>>>
>>> We should really have an Ansible role that performs the conversion to
>>> self-signed certificates.
>>> That would make the conversion easier and safer.
>>
>> +1
>>
>> Not sure "self-signed" is the correct term here. Also the internal
>> engine CA's cert is self-signed.
>>
>> I guess you refer to this:
>>
>> https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL/
>>
>> I'd call it "configure-3rd-party-CA" or something like that.
>
> Greetings,
>
> Another +1 from me (obviously! :-).
>
> I also agree in that we are not doing a self-signed cert, but rather
> we've purchased a cert from one of the big-name-CA-vendors that is valid
> for our domain. "configure-3rd-party-CA" makes more sense to me.

Nit: This big-name-CA-vendors CA's cert is most likely also self-signed,
so it's not a mistake to call it "self-signed". The difference between
"self-signed by _me_" and "self-signed by big-name" is mainly a matter of
trust and business relations (between that big-name and you, big-name and
the OS/browser vendors, etc.) and not a technical one.

If you loan a friend $100 for a month, the difference between you and a
big bank is very similar to that above difference...

>
> Lastly, that is the link that I used for a guide.
>
> Thanks!
> ~Stack~
>
>
>



-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Network configuration validation error

2018-02-11 Thread Jiri Belka
> This option relevant only for the upgrade from 3.6 to 4.0(engine had
> different OS major versions), it all other cases the upgrade flow very
> similar to upgrade flow of standard engine environment.
> 
> 
> 1. Put hosted-engine environment to GlobalMaintenance(you can do it via
> UI)
> 2. Update engine packages(# yum update -y)
> 3. Run engine-setup
> 4. Disable GlobalMaintenance
>
> Could someone explain me at least what "Cluster PROD is at version 4.2 which
> is not supported by this upgrade flow. Please fix it before upgrading."
> means ? As far as I know 4.2 is the most recent branch available, isn't it ?

I have no idea where did you get

"Cluster PROD is at version 4.2 which is not supported by this upgrade flow. 
Please fix it before upgrading."

Please do not cut output and provide exact one.

IIUC you should do 'yum update ovirt\*setup\*' and then 'engine-setup'
and only after it would finish successfully you would do 'yum -y update'.
Maybe that's your problem?

Jiri
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Few Questions on New Install

2018-02-11 Thread Eduardo Mayoral
AFAIK there is no DHCP integrated for ovirt, you will have to deploy a
DHCP to assign the IP addresses to the VMs (or use static config).

About the template imports, an out-of-the-box ovirt installation has an
storage domain called "ovirt-image-repository". There you will find many
popular templates ready for import. If you do not find there what you
want, you can upload the iso, install one VM, optionally install
cloud-init on it, and convert it to a template.

Never used SolusVM. If it uses libvirt you may be able to import the VM
using the import VM dialog and choosing "KVM (via libvirt)", otherwise,
you will probably have to copy the VM disks to an storage domain so
oVirt can import them, and then recreate a VM usign the imported disks.
If the source VM is KVM based, expect no compatibility issues.


Eduardo Mayoral Jimeno (emayo...@arsys.es)
Administrador de sistemas. Departamento de Plataformas. Arsys internet.
+34 941 620 145 ext. 5153

On 12/02/18 02:53, Talk Jesus wrote:
> Greetings,
>
> Just installed Ovirt: 
> Software Version:4.2.0.2-1.el7.centos
>
> How Do I:
> - add a subnet of IPv4 to assign to VMs
> - download (or import) basic Linux templates like Centos 7, Ubuntu 16 even
> if using minimal iso 
> - import from SolusVM based KVM nodes
>
> Does oVirt support bulk IPv4 assignment to VMs? If I wish to assign say a
> full /26 subnet of IPv4 to VM #1, is this a one click option?
>
> Thank you. I read the docs, but everything is a bit confusing for me.
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Few Questions on New Install

2018-02-11 Thread Talk Jesus
Greetings,

Just installed Ovirt: 
Software Version:4.2.0.2-1.el7.centos

How Do I:
- add a subnet of IPv4 to assign to VMs
- download (or import) basic Linux templates like Centos 7, Ubuntu 16 even
if using minimal iso 
- import from SolusVM based KVM nodes

Does oVirt support bulk IPv4 assignment to VMs? If I wish to assign say a
full /26 subnet of IPv4 to VM #1, is this a one click option?

Thank you. I read the docs, but everything is a bit confusing for me.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Issue with 4.2.1 RC and SSL

2018-02-11 Thread ~Stack~
On 02/11/2018 02:41 AM, Yedidyah Bar David wrote:
> On Sun, Feb 11, 2018 at 10:26 AM, Yaniv Kaul  wrote:
>>
>>
>> On Sun, Feb 11, 2018 at 2:43 AM, ~Stack~  wrote:

[snip]

>>> We decided to just start from scratch and my coworker watched and
>>> confirmed every step. It works! No problems at all this time. Further
>>> evidence that I goofed _something_ up the first time.
>>
>>
>> We should really have an Ansible role that performs the conversion to
>> self-signed certificates.
>> That would make the conversion easier and safer.
> 
> +1
> 
> Not sure "self-signed" is the correct term here. Also the internal
> engine CA's cert is self-signed.
> 
> I guess you refer to this:
> 
> https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL/
> 
> I'd call it "configure-3rd-party-CA" or something like that.

Greetings,

Another +1 from me (obviously! :-).

I also agree in that we are not doing a self-signed cert, but rather
we've purchased a cert from one of the big-name-CA-vendors that is valid
for our domain. "configure-3rd-party-CA" makes more sense to me.

Lastly, that is the link that I used for a guide.

Thanks!
~Stack~





signature.asc
Description: OpenPGP digital signature
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Network Topologies

2018-02-11 Thread aeR7Re
Hello,
I'm looking for some advice on or even just some examples of how other oVirt 
users have configured networking inside their clusters.

Currently we're running a cluster with hosts spread across multiple racks in 
our DC, with layer 2 spanned between them for VM networks. While this is 
functional, it's 100% not ideal as there's multiple single points of failure 
and at some point someone is going to accidentally loop it :)

What we're after is a method of providing a VM network across multiple racks 
where there are no single points of failure. We've got layer 3 switches in 
racks capable of running an IGP/EGP.

Current ideas:
- Run a routing daemon on each VM and have it advertise a /32 to the 
distribution switch
- OVN for layer 2 between hosts + potentially VRRP or similar on the 
distribution switch

So as per my original paragraph, any advice on the most appropriate network 
topology for an oVirt cluster? or how have you set up your networks?

Thank you

Sent with [ProtonMail](https://protonmail.com) Secure Email.___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Live migration of VM(0 downtime) while Hypervisor goes down in ovirt

2018-02-11 Thread Luca 'remix_tj' Lorenzetto
What you're looking at is called fault tolerance in other hypervisors.

As far as i know, ovirt doesn't implement such solution.

But if your system doesn't support failure recovery done by high
availability options, you should take in account to revise your application
architecture if you want to keep running on ovirt.

Luca

Il 10 feb 2018 8:31 AM, "Ranjith P"  ha scritto:

Hi,

>>Who's shutting down the hypervisor? (Or perhaps it is shutdown
externally, due to overheating or otherwise?)

We need a continuous availability of VM's in our production setup. If the
hypervisor goes down due to any hardware failure or work load then VM's
above hypervisor will reboot and started on available hypervisors. This is
normally happening but it disrupting VM's. Can you suggest a solution in
this case? Can we achieve this challenge using glusterfs?

Thanks & Regards
Ranjith

Sent from Yahoo Mail on Android


On Sat, Feb 10, 2018 at 2:07 AM, Yaniv Kaul
 wrote:


On Fri, Feb 9, 2018 at 9:25 PM, ranjithsp...@yahoo.com <
ranjithsp...@yahoo.com> wrote:

Hi,
Anyone can suggest how to setup VM Live migration (without restart vm)
while Hypervisor goes down in ovirt?


I think there are two parts to achieving this:
1. Have a script that migrates VMs off a specific host. This should be easy
to write using the Python/Ruby/Java SDK, Ansible or using REST directly.
2. Having this script run as a service when a host shuts down, in the right
order - well before libvirt and VDSM shut down, and would be fast enough
not to be terminated by systemd.
This is a bit more challenging.

Who's shutting down the hypervisor? (Or perhaps it is shutdown externally,
due to overheating or otherwise?)
Y.


Using glusterfs is it possible? Then how?

Thanks & Regards
Ranjith

Sent from Yahoo Mail on Android


__ _
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/ mailman/listinfo/users





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] VM backups - Bacchus

2018-02-11 Thread Niyazi Elvan
Dear Friends,

It has been a while I could not have time to work on Bacchus. This weekend
I created an ansible playbook to replace the installation procedure.

You simply download installer.yml and settings.yml files from git repo and
run the installer  as  "ansible-playbook installer.yml"  Please check it at
https://github.com/openbacchus/bacchus . I recommend you to run the
installer on a fresh VM, which has no MySQL DB or previous installation.

Hope this helps to more people and please let me know about your ideas.

ps. Regarding oVirt 4.2, I had a chance to look at it and tried the new
domain type "Backup Domain". This is really cool feature and I am planning
to implement the support in Bacchus. Hopefully, CBT will show up soon and
we will have a better world :)

King Regards,

-- 
Niyazi Elvan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Maximum time node can be offline.

2018-02-11 Thread Thomas Letherby
Thanks Yaniv, that looks like a perfect starting point!

Thomas

On Sun, Feb 11, 2018, 1:36 AM Yaniv Kaul  wrote:

> On Sat, Feb 10, 2018 at 5:47 PM, Thomas Letherby 
> wrote:
>
>> That's exactly what I needed to know, thanks all.
>>
>> I'll schedule a script for the nodes to reboot and patch once every week
>> or two and then I can let it run without me needing to worry about it.
>>
>
> An example on how to check for updates is available @
> https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upgrade_host.py
> Y.
>
>
>> Thomas
>>
>> On Fri, Feb 9, 2018, 2:26 AM Martin Sivak  wrote:
>>
>>> Hi,
>>>
>>> the hosts are almost stateless and we set up most of what is needed
>>> during activation. Hosted engine has some configuration stored
>>> locally, but that is just the path to the storage domain.
>>>
>>> I think you should be fine unless you change the network topology
>>> significantly. I would also install security updates once in while.
>>>
>>> We can even shut down the hosts for you when you configure two cluster
>>> scheduling properties: EnableAutomaticPM and HostsInReserve.
>>> HostsInReserve should be at least 1 though. It behaves like this, as
>>> long as the reserve host is empty, we shut down all the other empty
>>> hosts. And we boot another host once a VM does not fit on other used
>>> hosts and is places on the running reserve host. That would save you
>>> the power of just one host, but it would still be highly available (if
>>> hosted engine and storage allows that too).
>>>
>>> Bear in mind that single host cluster is not highly available at all.
>>>
>>> Best regards
>>>
>>> Martin Sivak
>>>
>>> On Fri, Feb 9, 2018 at 8:25 AM, Gianluca Cecchi
>>>  wrote:
>>> > On Fri, Feb 9, 2018 at 2:30 AM, Thomas Letherby 
>>> wrote:
>>> >>
>>> >> Thanks, that answers my follow up question! :)
>>> >>
>>> >> My concern is that I could have a host off-line for a month say, is
>>> that
>>> >> going to cause any issues?
>>> >>
>>> >> Thanks,
>>> >>
>>> >> Thomas
>>> >>
>>> >
>>> > I think that if in the mean time you don't make any configuration
>>> changes
>>> > and you don't update anything, there is no reason to have problems.
>>> > In case of changes done, it could depend on what they are: are you
>>> thinking
>>> > about any particular scenario?
>>> >
>>> >
>>> > ___
>>> > Users mailing list
>>> > Users@ovirt.org
>>> > http://lists.ovirt.org/mailman/listinfo/users
>>> >
>>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Maximum time node can be offline.

2018-02-11 Thread Andrei V
On 02/10/2018 05:47 PM, Thomas Letherby wrote:
> That's exactly what I needed to know, thanks all.
>
> I'll schedule a script for the nodes to reboot and patch once every week or
> two and then I can let it run without me needing to worry about it.

Is this shell or python script with connection to oVirt engine? My 4.2
node don't shutdown properly until I'm shutdown all VMs take it into
maintenance mode manually. Shutdown process freezes at certain point.

>
> Thomas
>
> On Fri, Feb 9, 2018, 2:26 AM Martin Sivak  wrote:
>
>> Hi,
>>
>> the hosts are almost stateless and we set up most of what is needed
>> during activation. Hosted engine has some configuration stored
>> locally, but that is just the path to the storage domain.
>>
>> I think you should be fine unless you change the network topology
>> significantly. I would also install security updates once in while.
>>
>> We can even shut down the hosts for you when you configure two cluster
>> scheduling properties: EnableAutomaticPM and HostsInReserve.
>> HostsInReserve should be at least 1 though. It behaves like this, as
>> long as the reserve host is empty, we shut down all the other empty
>> hosts. And we boot another host once a VM does not fit on other used
>> hosts and is places on the running reserve host. That would save you
>> the power of just one host, but it would still be highly available (if
>> hosted engine and storage allows that too).
>>
>> Bear in mind that single host cluster is not highly available at all.
>>
>> Best regards
>>
>> Martin Sivak
>>
>> On Fri, Feb 9, 2018 at 8:25 AM, Gianluca Cecchi
>>  wrote:
>>> On Fri, Feb 9, 2018 at 2:30 AM, Thomas Letherby 
>> wrote:
 Thanks, that answers my follow up question! :)

 My concern is that I could have a host off-line for a month say, is that
 going to cause any issues?

 Thanks,

 Thomas

>>> I think that if in the mean time you don't make any configuration changes
>>> and you don't update anything, there is no reason to have problems.
>>> In case of changes done, it could depend on what they are: are you
>> thinking
>>> about any particular scenario?
>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Network configuration validation error

2018-02-11 Thread Artyom Lukianov
This option relevant only for the upgrade from 3.6 to 4.0(engine had
different OS major versions), it all other cases the upgrade flow very
similar to upgrade flow of standard engine environment.

   1. Put hosted-engine environment to GlobalMaintenance(you can do it via
   UI)
   2. Update engine packages(# yum update -y)
   3. Run engine-setup
   4. Disable GlobalMaintenance

Best Regards

On Fri, Feb 9, 2018 at 1:21 PM,  wrote:

> Hi,
> Could someone explain me at least what "Cluster PROD is at version 4.2
> which is not supported by this upgrade flow. Please fix it before
> upgrading." means ? As far as I know 4.2 is the most recent branch
> available, isn't it ?
> Regards
>
>
>
> Le 08-Feb-2018 09:59:32 +0100, mbur...@redhat.com a écrit:
>
> Not sure i understand from which version you trying to upgrade and what is
> the exact upgrade flow, if i got it correctly, it is seems that you
> upgraded the hosts to 4.2, but engine still 4.1?
> What exactly the upgrade steps, please explain the flow., what have you
> done after upgrading the hosts? to what version?
>
> Cheers)
>
> On Wed, Feb 7, 2018 at 3:00 PM,  wrote:
>
>> Hi,
>> Thanks a lot for your answer.
>>
>> I applied some updates at node level, but I forgot to upgrade the engine !
>>
>> When I try to do so I get a strange error : "Cluster PROD is at version
>> 4.2 which is not supported by this upgrade flow. Please fix it before
>> upgrading."
>>
>> Here are the installed packets on my nodes :
>> python-ovirt-engine-sdk4-4.2.2-2.el7.centos.x86_64
>> ovirt-imageio-common-1.2.0-1.el7.centos.noarch
>> ovirt-hosted-engine-setup-2.2.3-1.el7.centos.noarch
>> ovirt-engine-sdk-python-3.6.9.1-1.el7.noarch
>> ovirt-setup-lib-1.1.4-1.el7.centos.noarch
>> ovirt-release42-4.2.0-1.el7.centos.noarch
>> ovirt-imageio-daemon-1.2.0-1.el7.centos.noarch
>> ovirt-host-dependencies-4.2.0-1.el7.centos.x86_64
>> ovirt-host-4.2.0-1.el7.centos.x86_64
>> ovirt-host-deploy-1.7.0-1.el7.centos.noarch
>> ovirt-hosted-engine-ha-2.2.2-1.el7.centos.noarch
>> ovirt-provider-ovn-driver-1.2.2-1.el7.centos.noarch
>> ovirt-engine-appliance-4.2-20171219.1.el7.centos.noarch
>> ovirt-vmconsole-host-1.0.4-1.el7.noarch
>> cockpit-ovirt-dashboard-0.11.3-0.1.el7.centos.noarch
>> ovirt-vmconsole-1.0.4-1.el7.noarch
>>
>> What I am supposed to do ? I see no newer packages available.
>>
>> Regards
>>
>>
>>
>> Le 07-Feb-2018 13:23:43 +0100, mbur...@redhat.com a écrit:
>>
>> Hi
>>
>> This is a bug and it was already fixed in 4.2.1.1-0.1.el7 -
>> https://bugzilla.redhat.com/show_bug.cgi?id=1528906
>>
>> The no default route bug was fixed in - https://bugzilla.redhat.com/
>> show_bug.cgi?id=1477589
>>
>> Thanks,
>>
>> On Wed, Feb 7, 2018 at 1:15 PM,  wrote:
>>
>>>
>>> Hi,
>>> I am experiencing a new problem : when I try to modify something in the
>>> network setup on the second node (added to the cluster after installing the
>>> engine on the other one) using the Engine GUI, I get the following error
>>> when validating :
>>>
>>> must match "^\b((25[0-5]|2[0-4]\d|[01]\d\
>>> d|\d?\d)\_){3}(25[0-5]|2[0-4]\d|[01]\d\d|\d?\d)"
>>> Attribut : ipConfiguration.iPv4Addresses[0].gateway
>>>
>>> Moreover, on the general status of ther server, I have a "Host has no
>>> default route" alert.
>>>
>>> The ovirtmgmt network has a defined gateway of course, and the storage
>>> network has none because it is not required. Both server have the same
>>> setup, with different addresses of course :-)
>>>
>>> I have not been able to find anything useful in the logs.
>>>
>>> Is this a bug or am I doing something wrong ?
>>>
>>> Regards
>>>
>>> --
>>> FreeMail powered by mail.fr
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>>
>> --
>>
>> Michael Burman
>>
>> Senior Quality engineer - rhv network - redhat israel
>>
>> Red Hat
>>
>> 
>>
>> mbur...@redhat.comM: 0545355725 IM: mburman
>>
>>
>>
>> --
>> FreeMail powered by mail.fr
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>
> --
>
> Michael Burman
>
> Senior Quality engineer - rhv network - redhat israel
>
> Red Hat
>
> 
>
> mbur...@redhat.comM: 0545355725 IM: mburman
>
>
>
> --
> FreeMail powered by mail.fr
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Issue with 4.2.1 RC and SSL

2018-02-11 Thread Yedidyah Bar David
On Sun, Feb 11, 2018 at 10:26 AM, Yaniv Kaul  wrote:
>
>
> On Sun, Feb 11, 2018 at 2:43 AM, ~Stack~  wrote:
>>
>> On 02/08/2018 06:42 AM, Petr Kotas wrote:
>> > Hi Stack,
>>
>> Greetings Petr
>>
>> > have you tried it on other linux distributions? Scientific is not
>> > officially supported.
>>
>> No, but SL isn't really any different than CentOS. If anything, we've
>> found it adheres closer to RH than CentOS does.
>>
>> > My guess based on your log is there are somewhere missing certificates,
>> > maybe different path?.
>> > You can check the paths by the documentation:
>> >
>> > https://www.ovirt.org/develop/release-management/features/infra/pki/#vdsm
>> >
>> > Hope this helps.
>>
>>
>> Thanks for the suggestion. It took a while but we dug into it and I
>> *think* the problem was because I may have over-written the wrong cert
>> file in one of my steps. I'm only about 80% certain of that, but it
>> seems to match what we found when we were digging through the log files.
>>
>> We decided to just start from scratch and my coworker watched and
>> confirmed every step. It works! No problems at all this time. Further
>> evidence that I goofed _something_ up the first time.
>
>
> We should really have an Ansible role that performs the conversion to
> self-signed certificates.
> That would make the conversion easier and safer.

+1

Not sure "self-signed" is the correct term here. Also the internal
engine CA's cert is self-signed.

I guess you refer to this:

https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL/

I'd call it "configure-3rd-party-CA" or something like that.

> Y.
>
>>
>>
>> Thank you for the suggestion!
>> ~Stack~
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Ovirt 3.6 to 4.2 upgrade

2018-02-11 Thread Yaniv Kaul
On Fri, Feb 9, 2018 at 4:06 PM, Gary Lloyd  wrote:

> Hi
>
> Is it possible/supported to upgrade from Ovirt 3.6 straight to Ovirt 4.2 ?
>

No, you go through 4.0, 4.1.


> Does live migration still function between the older vdsm nodes and vdsm
> nodes with software built against Ovirt 4.2 ?
>

Yes, keep the cluster level at 3.6.


>
> We changed a couple of the vdsm python files to enable iscsi multipath on
> direct luns.
> (It's a fairly simple change to a couple of the python files).
>

Nice!
Can you please contribute those patches to oVirt?
Y.


>
> We've been running it this way since 2012 (Ovirt 3.2).
>
> Many Thanks
>
> *Gary Lloyd*
> 
> I.T. Systems:Keele University
> Finance & IT Directorate
> Keele:Staffs:IC1 Building:ST5 5NB:UK
> +44 1782 733063 <%2B44%201782%20733073>
> 
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Maximum time node can be offline.

2018-02-11 Thread Yaniv Kaul
On Sat, Feb 10, 2018 at 5:47 PM, Thomas Letherby  wrote:

> That's exactly what I needed to know, thanks all.
>
> I'll schedule a script for the nodes to reboot and patch once every week
> or two and then I can let it run without me needing to worry about it.
>

An example on how to check for updates is available @
https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upgrade_host.py
Y.


> Thomas
>
> On Fri, Feb 9, 2018, 2:26 AM Martin Sivak  wrote:
>
>> Hi,
>>
>> the hosts are almost stateless and we set up most of what is needed
>> during activation. Hosted engine has some configuration stored
>> locally, but that is just the path to the storage domain.
>>
>> I think you should be fine unless you change the network topology
>> significantly. I would also install security updates once in while.
>>
>> We can even shut down the hosts for you when you configure two cluster
>> scheduling properties: EnableAutomaticPM and HostsInReserve.
>> HostsInReserve should be at least 1 though. It behaves like this, as
>> long as the reserve host is empty, we shut down all the other empty
>> hosts. And we boot another host once a VM does not fit on other used
>> hosts and is places on the running reserve host. That would save you
>> the power of just one host, but it would still be highly available (if
>> hosted engine and storage allows that too).
>>
>> Bear in mind that single host cluster is not highly available at all.
>>
>> Best regards
>>
>> Martin Sivak
>>
>> On Fri, Feb 9, 2018 at 8:25 AM, Gianluca Cecchi
>>  wrote:
>> > On Fri, Feb 9, 2018 at 2:30 AM, Thomas Letherby 
>> wrote:
>> >>
>> >> Thanks, that answers my follow up question! :)
>> >>
>> >> My concern is that I could have a host off-line for a month say, is
>> that
>> >> going to cause any issues?
>> >>
>> >> Thanks,
>> >>
>> >> Thomas
>> >>
>> >
>> > I think that if in the mean time you don't make any configuration
>> changes
>> > and you don't update anything, there is no reason to have problems.
>> > In case of changes done, it could depend on what they are: are you
>> thinking
>> > about any particular scenario?
>> >
>> >
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>> >
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Info about windows guest performance

2018-02-11 Thread Yaniv Kaul
On Sat, Feb 10, 2018 at 8:41 PM, Gianluca Cecchi 
wrote:

> On Fri, Feb 9, 2018 at 4:32 PM, Gianluca Cecchi  > wrote:
>
>>
>>
>> If I edit the VM, in general settings I see "Other OS" as operating
>> system.
>> In General subtab after selecting the VM  in "Virtual Machines" tab I
>> again see "Other OS" in "Operating System" and the field "Origin" filled
>> with the value "VMware"
>>
>> During virt-v2v it seems it was recognized as Windows 2008 though...
>>
>> libguestfs: trace: v2v: hivex_value_utf8 = "Windows Server 2008 R2
>> Enterprise"
>> libguestfs: trace: v2v: hivex_value_key 11809408
>>
>> I can send all the log if it can help.
>> Thanks,
>> Gianluca
>>
>
>
> So it seems it has been a problem with virt-v2v conversion, because if I
> shutdown the VM and set it to Windows 2008 R2 x86_64 and optimized for
> server and I run it, I get this flag for the cpu:
>

A new virt-v2v was just released, worth testing it. It has some nice
features, and perhaps fixes the above too.
For example:
   Virt-v2v now installs Windows 10 / Windows Server 2016 virtio block
   drivers correctly (Pavel Butsykin, Kun Wei).

   Virt-v2v now installs virtio-rng, balloon and pvpanic drivers, and
   correctly sets this in the target hypervisor metadata for hypervisors
   which support that (Tomáš Golembiovský).

   Virt-v2v now installs both legacy and modern virtio keys in the
Windows
   registry (Ladi Prosek).



>
> -cpu Westmere,vmx=on,hv_time,hv_relaxed,hv_vapic,hv_spinlocks=0x1fff
>
> BTW: what are the other flags for:
>
>
> hv_spinlocks=0x1fff
> hv_relaxed
> hv_vapic
> ?
>

These are the enlightenment that allow Windows guests to run faster (hv =
hyper-v).
See[1]
Y.

[1]
http://blog.wikichoon.com/2014/07/enabling-hyper-v-enlightenments-with-kvm.html



> Complete command is:
>
> /usr/libexec/qemu-kvm
> -name guest=testmig,debug-threads=on
> -S
> -object secret,id=masterKey0,format=raw,file=/var/lib/libvirt/
> qemu/domain-15-testmig/master-key.aes
> -machine pc-i440fx-rhel7.3.0,accel=kvm,usb=off,dump-guest-core=off
> -cpu Westmere,vmx=on,hv_time,hv_relaxed,hv_vapic,hv_spinlocks=0x1fff
> -m size=4194304k,slots=16,maxmem=16777216k
> -realtime mlock=off
> -smp 2,maxcpus=16,sockets=16,cores=1,threads=1
> -numa node,nodeid=0,cpus=0-1,mem=4096
> -uuid XXX
> -smbios type=1,manufacturer=oVirt,product=oVirt Node,version=7-4.1708.el7.
> centos,serial=XXX,uuid=YYY
> -no-user-config
> -nodefaults
> -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/domain-
> 15-testmig/monitor.sock,server,nowait
> -mon chardev=charmonitor,id=monitor,mode=control
> -rtc base=2018-02-10T18:32:22,driftfix=slew
> -global kvm-pit.lost_tick_policy=delay
> -no-hpet
> -no-shutdown
> -boot strict=on
> -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2
> -device virtio-scsi-pci,id=scsi0,bus=pci.0,addr=0x5
> -device virtio-serial-pci,id=virtio-serial0,max_ports=16,bus=pci.
> 0,addr=0x4
> -drive if=none,id=drive-ide0-1-0,readonly=on
> -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0
> -drive file=/rhev/data-center/ef17cad6-7724-4cd8-96e3-
> 9af6e529db51/fa33df49-b09d-4f86-9719-ede649542c21/images/
> 2de93ee3-7d6e-4a10-88c4-abc7a11fb687/a9f4e35b-4aa0-
> 45e8-b775-1a046d1851aa,format=qcow2,if=none,id=drive-scsi0-
> 0-0-1,serial=2de93ee3-7d6e-4a10-88c4-abc7a11fb687,cache=
> none,werror=stop,rerror=stop,aio=native
> -device scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=1,drive=drive-
> scsi0-0-0-1,id=scsi0-0-0-1,bootindex=1
> -drive file=/rhev/data-center/ef17cad6-7724-4cd8-96e3-
> 9af6e529db51/fa33df49-b09d-4f86-9719-ede649542c21/images/
> f821da0a-cec7-457c-88a4-f83f33404e65/0d0c4244-f184-
> 4eaa-b5bf-8dc65c7069bb,format=raw,if=none,id=drive-scsi0-0-
> 0-0,serial=f821da0a-cec7-457c-88a4-f83f33404e65,cache=none,
> werror=stop,rerror=stop,aio=native
> -device scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-
> scsi0-0-0-0,id=scsi0-0-0-0
> -netdev tap,fd=30,id=hostnet0
> -device e1000,netdev=hostnet0,id=net0,mac=00:50:56:9d:c9:29,bus=pci.
> 0,addr=0x3
> -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channels/
> 421d6f1b-58e3-54a4-802f-fb52f7831369.com.redhat.rhevm.vdsm,server,nowait
> -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=
> charchannel0,id=channel0,name=com.redhat.rhevm.vdsm
> -chardev socket,id=charchannel1,path=/var/lib/libvirt/qemu/channels/
> 421d6f1b-58e3-54a4-802f-fb52f7831369.org.qemu.guest_agent.0,server,nowait
> -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=
> charchannel1,id=channel1,name=org.qemu.guest_agent.0
> -chardev spicevmc,id=charchannel2,name=vdagent
> -device virtserialport,bus=virtio-serial0.0,nr=3,chardev=
> charchannel2,id=channel2,name=com.redhat.spice.0
> -spice tls-port=5900,addr=10.4.192.32,x509-dir=/etc/pki/vdsm/
> libvirt-spice,tls-channel=default,tls-channel=main,tls-
> channel=display,tls-channel=inputs,tls-channel=cursor,tls-
> 

Re: [ovirt-users] Network configuration validation error

2018-02-11 Thread Michael Burman
Jiri, can you maybe assist the user with his upgrade problem?

I'm not familiar with the error and not sure how could it be that he is
already has a cluster version 4.2 prior upgrading the engine to 4.2..unless
i didn't understood it completely..

Thanks,

On Fri, Feb 9, 2018 at 1:21 PM,  wrote:

> Hi,
> Could someone explain me at least what "Cluster PROD is at version 4.2
> which is not supported by this upgrade flow. Please fix it before
> upgrading." means ? As far as I know 4.2 is the most recent branch
> available, isn't it ?
> Regards
>
>
>
> Le 08-Feb-2018 09:59:32 +0100, mbur...@redhat.com a écrit:
>
> Not sure i understand from which version you trying to upgrade and what is
> the exact upgrade flow, if i got it correctly, it is seems that you
> upgraded the hosts to 4.2, but engine still 4.1?
> What exactly the upgrade steps, please explain the flow., what have you
> done after upgrading the hosts? to what version?
>
> Cheers)
>
> On Wed, Feb 7, 2018 at 3:00 PM,  wrote:
>
>> Hi,
>> Thanks a lot for your answer.
>>
>> I applied some updates at node level, but I forgot to upgrade the engine !
>>
>> When I try to do so I get a strange error : "Cluster PROD is at version
>> 4.2 which is not supported by this upgrade flow. Please fix it before
>> upgrading."
>>
>> Here are the installed packets on my nodes :
>> python-ovirt-engine-sdk4-4.2.2-2.el7.centos.x86_64
>> ovirt-imageio-common-1.2.0-1.el7.centos.noarch
>> ovirt-hosted-engine-setup-2.2.3-1.el7.centos.noarch
>> ovirt-engine-sdk-python-3.6.9.1-1.el7.noarch
>> ovirt-setup-lib-1.1.4-1.el7.centos.noarch
>> ovirt-release42-4.2.0-1.el7.centos.noarch
>> ovirt-imageio-daemon-1.2.0-1.el7.centos.noarch
>> ovirt-host-dependencies-4.2.0-1.el7.centos.x86_64
>> ovirt-host-4.2.0-1.el7.centos.x86_64
>> ovirt-host-deploy-1.7.0-1.el7.centos.noarch
>> ovirt-hosted-engine-ha-2.2.2-1.el7.centos.noarch
>> ovirt-provider-ovn-driver-1.2.2-1.el7.centos.noarch
>> ovirt-engine-appliance-4.2-20171219.1.el7.centos.noarch
>> ovirt-vmconsole-host-1.0.4-1.el7.noarch
>> cockpit-ovirt-dashboard-0.11.3-0.1.el7.centos.noarch
>> ovirt-vmconsole-1.0.4-1.el7.noarch
>>
>> What I am supposed to do ? I see no newer packages available.
>>
>> Regards
>>
>>
>>
>> Le 07-Feb-2018 13:23:43 +0100, mbur...@redhat.com a écrit:
>>
>> Hi
>>
>> This is a bug and it was already fixed in 4.2.1.1-0.1.el7 -
>> https://bugzilla.redhat.com/show_bug.cgi?id=1528906
>>
>> The no default route bug was fixed in - https://bugzilla.redhat.com/
>> show_bug.cgi?id=1477589
>>
>> Thanks,
>>
>> On Wed, Feb 7, 2018 at 1:15 PM,  wrote:
>>
>>>
>>> Hi,
>>> I am experiencing a new problem : when I try to modify something in the
>>> network setup on the second node (added to the cluster after installing the
>>> engine on the other one) using the Engine GUI, I get the following error
>>> when validating :
>>>
>>> must match "^\b((25[0-5]|2[0-4]\d|[01]\d\
>>> d|\d?\d)\_){3}(25[0-5]|2[0-4]\d|[01]\d\d|\d?\d)"
>>> Attribut : ipConfiguration.iPv4Addresses[0].gateway
>>>
>>> Moreover, on the general status of ther server, I have a "Host has no
>>> default route" alert.
>>>
>>> The ovirtmgmt network has a defined gateway of course, and the storage
>>> network has none because it is not required. Both server have the same
>>> setup, with different addresses of course :-)
>>>
>>> I have not been able to find anything useful in the logs.
>>>
>>> Is this a bug or am I doing something wrong ?
>>>
>>> Regards
>>>
>>> --
>>> FreeMail powered by mail.fr
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>>
>> --
>>
>> Michael Burman
>>
>> Senior Quality engineer - rhv network - redhat israel
>>
>> Red Hat
>>
>> 
>>
>> mbur...@redhat.comM: 0545355725 IM: mburman
>>
>>
>>
>> --
>> FreeMail powered by mail.fr
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>
> --
>
> Michael Burman
>
> Senior Quality engineer - rhv network - redhat israel
>
> Red Hat
>
> 
>
> mbur...@redhat.comM: 0545355725 IM: mburman
>
>
>
> --
> FreeMail powered by mail.fr
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 

Michael Burman

Senior Quality engineer - rhv network - redhat israel

Red Hat



mbur...@redhat.comM: 0545355725 IM: mburman

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Issue with 4.2.1 RC and SSL

2018-02-11 Thread Yaniv Kaul
On Sun, Feb 11, 2018 at 2:43 AM, ~Stack~  wrote:

> On 02/08/2018 06:42 AM, Petr Kotas wrote:
> > Hi Stack,
>
> Greetings Petr
>
> > have you tried it on other linux distributions? Scientific is not
> > officially supported.
>
> No, but SL isn't really any different than CentOS. If anything, we've
> found it adheres closer to RH than CentOS does.
>
> > My guess based on your log is there are somewhere missing certificates,
> > maybe different path?.
> > You can check the paths by the documentation:
> > https://www.ovirt.org/develop/release-management/features/
> infra/pki/#vdsm
> >
> > Hope this helps.
>
>
> Thanks for the suggestion. It took a while but we dug into it and I
> *think* the problem was because I may have over-written the wrong cert
> file in one of my steps. I'm only about 80% certain of that, but it
> seems to match what we found when we were digging through the log files.
>
> We decided to just start from scratch and my coworker watched and
> confirmed every step. It works! No problems at all this time. Further
> evidence that I goofed _something_ up the first time.
>

We should really have an Ansible role that performs the conversion to
self-signed certificates.
That would make the conversion easier and safer.
Y.


>
> Thank you for the suggestion!
> ~Stack~
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovn problem - Failed to communicate with the external provider, see log for additional details.

2018-02-11 Thread George Sitov
Thank you! It was certifucate problem. I returned  it to pki and all work.

8 февр. 2018 г. 4:44 ПП пользователь "Marcin Mirecki" 
написал:

Hello George,

Probably your engine and provider certs do not match.
The engine pki should be in:
/etc/pki/ovirt-engine/certs/
The provider keys are defined in the SSL section of the config file
(/etc/ovirt-provider-ovn/conf.d/...):
[SSL]
https-enabled=true
ssl-key-file=...
ssl-cert-file=...
ssl-cacert-file=...
You can compare the keys/certs using openssl.

Was the provider created using egine-setup?

For testing purposes you can change the "https-enabled" to false and try
connecting using http.

Thanks,
Marcin

On Thu, Feb 8, 2018 at 12:58 PM, Ilya Fedotov  wrote:

> Hello, Georgy
>
>  Maybe, the problem have the different domain name and name your node
> name(local domain), and certificate note valid.
>
>
>
> with br, Ilya
>
> 2018-02-05 22:36 GMT+03:00 George Sitov :
>
>> Hello!
>>
>> I have a problem  wiith configure  external provider.
>>
>> Edit config file - ovirt-provider-ovn.conf, set ssl parameters.
>> systemctl start ovirt-provider-ovn start without problem.
>> In external  proveder in web gui i set:
>> Provider URL:  https://ovirt.mydomain.com:9696
>> Username: admin@internal
>> Authentication URL: https://ovirt.mydomain.com:35357/v2.0/
>> But after i press test  button i see error -  Failed to communicate with
>> the external provider, see log for additional details.
>>
>> /var/log/ovirt-engine/engine.log:
>> 2018-02-05 21:33:55,517+02 ERROR [org.ovirt.engine.core.bll.pro
>> vider.network.openstack.BaseNetworkProviderProxy] (default task-29)
>> [69fa312e-6e2e-4925-b081-385beba18a6a] Bad Gateway (OpenStack response
>> error code: 502)
>> 2018-02-05 21:33:55,517+02 ERROR [org.ovirt.engine.core.bll.pro
>> vider.TestProviderConnectivityCommand] (default task-29)
>> [69fa312e-6e2e-4925-b081-385beba18a6a] Command '
>> org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand'
>> failed: EngineException: (Failed with error PROVIDER_FAILURE and code 5050)
>>
>> In /var/log/ovirt-provider-ovn.log:
>>
>> 2018-02-05 21:33:55,510   Starting new HTTPS connection (1):
>> ovirt.astrecdata.com
>> 2018-02-05 21:33:55,516   [SSL: CERTIFICATE_VERIFY_FAILED] certificate
>> verify failed (_ssl.c:579)
>> Traceback (most recent call last):
>>   File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line
>> 126, in _handle_request
>> method, path_parts, content)
>>   File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py",
>> line 176, in handle_request
>> return self.call_response_handler(handler, content, parameters)
>>   File "/usr/share/ovirt-provider-ovn/handlers/keystone.py", line 33, in
>> call_response_handler
>> return response_handler(content, parameters)
>>   File "/usr/share/ovirt-provider-ovn/handlers/keystone_responses.py",
>> line 60, in post_tokens
>> user_password=user_password)
>>   File "/usr/share/ovirt-provider-ovn/auth/plugin_facade.py", line 26,
>> in create_token
>> return auth.core.plugin.create_token(user_at_domain, user_password)
>>   File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/plugin.py",
>> line 48, in create_token
>> timeout=self._timeout())
>>   File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line
>> 62, in create_token
>> username, password, engine_url, ca_file, timeout)
>>   File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line
>> 53, in wrapper
>> response = func(*args, **kwargs)
>>   File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line
>> 46, in wrapper
>> raise BadGateway(e)
>> BadGateway: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
>> (_ssl.c:579)
>>
>> Whan i do wrong ?
>> Please help.
>>
>> 
>> With best regards  Georgii.
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users