[ovirt-users] Re: Enable a cluster node to run the hosted engine

[Rapsilber, Marcus]

This is the result of "hosted-engine --vm-status" on the first node, which 
currently runs the hosted-engine:

--== Host ipc1.dc (id: 1) status ==--

Host ID: 1
Host timestamp : 89980
Score  : 3400
Engine status  : {"vm": "up", "health": "good", "detail": 
"Up"}
Hostname   : ipc1.dc
Local maintenance  : False
stopped: False
crc32  : 256cb440
conf_on_shared_storage : True
local_conf_timestamp   : 89980
Status up-to-date  : True
Extra metadata (valid at timestamp):
metadata_parse_version=1
metadata_feature_version=1
timestamp=89980 (Tue Sep 15 16:17:00 2020)
host-id=1
score=3400
vm_conf_refresh_time=89980 (Tue Sep 15 16:17:00 2020)
conf_on_shared_storage=True
maintenance=False
state=EngineUp
stopped=False


--== Host ipc3.dc (id: 2) status ==--

Host ID: 2
Host timestamp : 65213
Score  : 3400
Engine status  : unknown stale-data
Hostname   : ipc3.dc
Local maintenance  : False
stopped: False
crc32  : c4f62c8b
conf_on_shared_storage : True
local_conf_timestamp   : 65213
Status up-to-date  : False
Extra metadata (valid at timestamp):
metadata_parse_version=1
metadata_feature_version=1
timestamp=65213 (Wed Sep  9 11:01:18 2020)
host-id=2
score=3400
vm_conf_refresh_time=65213 (Wed Sep  9 11:01:18 2020)
conf_on_shared_storage=True
maintenance=False
state=EngineDown
stopped=False


--== Host ipc2.dc (id: 3) status ==--

Host ID: 3
Host timestamp : 93167
Score  : 3400
Engine status  : {"vm": "down", "health": "bad", "detail": 
"unknown", "reason": "vm not running on this host"}
Hostname   : ipc2.dc
Local maintenance  : False
stopped: False
crc32  : f02f19b0
conf_on_shared_storage : True
local_conf_timestamp   : 93167
Status up-to-date  : True
Extra metadata (valid at timestamp):
metadata_parse_version=1
metadata_feature_version=1
timestamp=93167 (Tue Sep 15 16:16:58 2020)
host-id=3
score=3400
vm_conf_refresh_time=93167 (Tue Sep 15 16:16:58 2020)
conf_on_shared_storage=True
maintenance=False
state=EngineDown
stopped=False

For the new added node it is:
"The hosted engine configuration has not been retrieved from shared storage. 
Please ensure that ovirt-ha-agent is running and the storage server is 
reachable. "

But the mentioned service status seem to be ok, too. But Actually I've noticed 
it restarting from time to time.
● ovirt-ha-broker.service - oVirt Hosted Engine High Availability 
Communications Broker
   Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-broker.service; enabled; 
vendor preset: disabled)
   Active: active (running) since Tue 2020-09-15 10:13:11 EDT; 2min 11s ago
 Main PID: 23971 (ovirt-ha-broker)
Tasks: 11 (limit: 100744)
   Memory: 29.3M
   CGroup: /system.slice/ovirt-ha-broker.service
   └─23971 /usr/libexec/platform-python 
/usr/share/ovirt-hosted-engine-ha/ovirt-ha-broker

Sep 15 10:13:11 ipc3.dc systemd[1]: Started oVirt Hosted Engine High 
Availability Communications Broker.

● ovirt-ha-agent.service - oVirt Hosted Engine High Availability Monitoring 
Agent
   Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-agent.service; enabled; 
vendor preset: disabled)
   Active: active (running) since Tue 2020-09-15 10:13:22 EDT; 2min 1s ago
 Main PID: 24165 (ovirt-ha-agent)
Tasks: 2 (limit: 100744)
   Memory: 27.2M
   CGroup: /system.slice/ovirt-ha-agent.service
   └─24165 /usr/libexec/platform-python 
/usr/share/ovirt-hosted-engine-ha/ovirt-ha-agent

Sometimes it says:
● ovirt-ha-agent.service - oVirt Hosted Engine High Availability Monitoring 
Agent
   Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-agent.service; enabled; 
vendor preset: disabled)
   Active: activating (auto-restart) (Result: exit-code) since Tue 2020-09-15 
10:23:15 EDT; 4s ago
  Process: 28372 ExecStart=/usr/share/ovirt-hosted-engine-ha/ovirt-ha-agent 
(code=exited, status=157)
 Main PID: 28372 (code=exited, status=157)

And sometimes it's:
● ovirt-ha-broker.service - oVirt Hosted Engine High Availability 
Communications Broker
   Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-broker.service; enabled; 
vendor preset: disabled)
   Active: active (running) since Tue 2020-09-15 10:23:

[ovirt-users] Re: Enable a cluster node to run the hosted engine

[Yedidyah Bar David]

On Tue, Sep 15, 2020 at 5:40 PM Rapsilber, Marcus
 wrote:
>
> This is the result of "hosted-engine --vm-status" on the first node, which 
> currently runs the hosted-engine:
>
> --== Host ipc1.dc (id: 1) status ==--
>
> Host ID: 1
> Host timestamp : 89980
> Score  : 3400
> Engine status  : {"vm": "up", "health": "good", "detail": 
> "Up"}
> Hostname   : ipc1.dc
> Local maintenance  : False
> stopped: False
> crc32  : 256cb440
> conf_on_shared_storage : True
> local_conf_timestamp   : 89980
> Status up-to-date  : True
> Extra metadata (valid at timestamp):
> metadata_parse_version=1
> metadata_feature_version=1
> timestamp=89980 (Tue Sep 15 16:17:00 2020)

I assume this is more-or-less the time when you ran this command (this
is updated routinely, I don't remember how often).

> host-id=1
> score=3400
> vm_conf_refresh_time=89980 (Tue Sep 15 16:17:00 2020)
> conf_on_shared_storage=True
> maintenance=False
> state=EngineUp
> stopped=False
>
>
> --== Host ipc3.dc (id: 2) status ==--
>
> Host ID: 2
> Host timestamp : 65213
> Score  : 3400
> Engine status  : unknown stale-data
> Hostname   : ipc3.dc
> Local maintenance  : False
> stopped: False
> crc32  : c4f62c8b
> conf_on_shared_storage : True
> local_conf_timestamp   : 65213
> Status up-to-date  : False
> Extra metadata (valid at timestamp):
> metadata_parse_version=1
> metadata_feature_version=1
> timestamp=65213 (Wed Sep  9 11:01:18 2020)

So this is 6 days old. Is this from before you started the
reinstallation plan, or in the middle of it? Can you check/remember?

> host-id=2
> score=3400
> vm_conf_refresh_time=65213 (Wed Sep  9 11:01:18 2020)
> conf_on_shared_storage=True
> maintenance=False
> state=EngineDown
> stopped=False
>
>
> --== Host ipc2.dc (id: 3) status ==--
>
> Host ID: 3
> Host timestamp : 93167
> Score  : 3400
> Engine status  : {"vm": "down", "health": "bad", 
> "detail": "unknown", "reason": "vm not running on this host"}
> Hostname   : ipc2.dc
> Local maintenance  : False
> stopped: False
> crc32  : f02f19b0
> conf_on_shared_storage : True
> local_conf_timestamp   : 93167
> Status up-to-date  : True
> Extra metadata (valid at timestamp):
> metadata_parse_version=1
> metadata_feature_version=1
> timestamp=93167 (Tue Sep 15 16:16:58 2020)
> host-id=3
> score=3400
> vm_conf_refresh_time=93167 (Tue Sep 15 16:16:58 2020)
> conf_on_shared_storage=True
> maintenance=False
> state=EngineDown
> stopped=False
>
> For the new added node it is:
> "The hosted engine configuration has not been retrieved from shared storage. 
> Please ensure that ovirt-ha-agent is running and the storage server is 
> reachable. "

I also asked to check/share the logs. Did you find there anything?

Can it mount the shared storage?

If not, you should check this manually and first troubleshoot mount
issues. Without this, reinstalling everything won't help you.

I don't know anything about gluster. Is gluster status on this host
ok? Is its status as seen by the other hosts ok?

>
> But the mentioned service status seem to be ok, too. But Actually I've 
> noticed it restarting from time to time.

This is normal - on certain conditions, both of these services restart
themselves upon severe errors, just to be on the safe side.

> ● ovirt-ha-broker.service - oVirt Hosted Engine High Availability 
> Communications Broker
>Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-broker.service; enabled; 
> vendor preset: disabled)
>Active: active (running) since Tue 2020-09-15 10:13:11 EDT; 2min 11s ago
>  Main PID: 23971 (ovirt-ha-broker)
> Tasks: 11 (limit: 100744)
>Memory: 29.3M
>CGroup: /system.slice/ovirt-ha-broker.service
>└─23971 /usr/libexec/platform-python 
> /usr/share/ovirt-hosted-engine-ha/ovirt-ha-broker
>
> Sep 15 10:13:11 ipc3.dc systemd[1]: Started oVirt Hosted Engine High 
> Availability Communications Broker.
>
> ● ovirt-ha-agent.service - oVirt Hosted Engine High Availability Monitoring 
> Agent
>Loaded: loaded (/usr/lib/systemd/system/ovirt-ha-agent.service; enabled; 
> vendor preset: disabled)
>Active: acti

[ovirt-users] Random hosts disconnects

[anton.louw--- via Users]

Hi All,

I have a strange issue in my oVirt environment. I currently have a standalone 
manager which is running in VMware. In my oVirt environment, I have two Data 
Centers. The manager is currently sitting on the same subnet as DC1. Randomly, 
hosts in DC2 will say “Not Responding” and then 2 seconds later, the hosts will 
activate again. 

The strange thing is, when the manager was sitting on the same subnet as DC2, 
hosts in DC1 will randomly say “Not Responding”

I have tried going through the logs, but I cannot see anything out of the 
ordinary regarding why the hosts would drop connection. I have attached the 
engine.log for anybody that would like to do a spot check. 

Thanks
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WRNYM5GFHTSIHAC64EFVIIP4UZ2OVBXC/

[ovirt-users] Re: Bad volume specification

[Strahil Nikolov via Users]

What happens if you create another VM and attach the disks to it ?
Does it boot properly ?

Best Regards,
Strahil Nikolov






В сряда, 16 септември 2020 г., 02:19:26 Гринуич+3, Facundo Garat 
 написа: 






Hi all, 
 I'm having some issues with one VM. The VM won't start and it's showing 
problems with the virtual disks so I started the VM without any disks and 
trying to hot adding the disk and that's fail too.

 The servers are connected thru FC, all the other VMs are working fine.

  Any ideas?.

Thanks!!

PS: The engine.log is showing this:
2020-09-15 20:10:37,926-03 INFO  
[org.ovirt.engine.core.bll.storage.disk.HotPlugDiskToVmCommand] (default 
task-168) [dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Lock Acquired to object 
'EngineLock:{exclusiveLocks='[f5bd2e15-a1ab-4724-883a-988b4dc7985b=DISK]', 
sharedLocks='[71db02c2-df29-4552-8a7e-cb8bb429a2ac=VM]'}'
2020-09-15 20:10:38,082-03 INFO  
[org.ovirt.engine.core.bll.storage.disk.HotPlugDiskToVmCommand] 
(EE-ManagedThreadFactory-engine-Thread-36528) 
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Running command: HotPlugDiskToVmCommand 
internal: false. Entities affected :  ID: 71db02c2-df29-4552-8a7e-cb8bb429a2ac 
Type: VMAction group CONFIGURE_VM_STORAGE with role type USER
2020-09-15 20:10:38,117-03 INFO  
[org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-36528) 
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] START, HotPlugDiskVDSCommand(HostName = 
nodo2, HotPlugDiskVDSParameters:{hostId='1c24c269-76c3-468d-a7ce-d0332beb7aef', 
vmId='71db02c2-df29-4552-8a7e-cb8bb429a2ac', 
diskId='f5bd2e15-a1ab-4724-883a-988b4dc7985b', addressMap='null'}), log id: 
f57ee9e
2020-09-15 20:10:38,125-03 INFO  
[org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-36528) 
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Disk hot-plug: 
  
    
      
      
        
      
      
      
      f5bd2e15-a1ab-4724-883a-988b4dc7985b
    
  
  http://ovirt.org/vm/1.0";>
    
      
        0001-0001-0001-0001-0311
        
bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f
        
f5bd2e15-a1ab-4724-883a-988b4dc7985b
        
55327311-e47c-46b5-b168-258c5924757b
      
    
  


2020-09-15 20:10:38,289-03 ERROR 
[org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-36528) 
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Failed in 'HotPlugDiskVDS' method
2020-09-15 20:10:38,295-03 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engine-Thread-36528) 
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] EVENT_ID: 
VDS_BROKER_COMMAND_FAILURE(10,802), VDSM nodo2 command HotPlugDiskVDS failed: 
General Exception: ("Bad volume specification {'device': 'disk', 'type': 
'disk', 'diskType': 'block', 'specParams': {}, 'alias': 
'ua-f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'domainID': 
'55327311-e47c-46b5-b168-258c5924757b', 'imageID': 
'f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'poolID': 
'0001-0001-0001-0001-0311', 'volumeID': 
'bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f', 'path': 
'/rhev/data-center/mnt/blockSD/55327311-e47c-46b5-b168-258c5924757b/images/f5bd2e15-a1ab-4724-883a-988b4dc7985b/bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f',
 'discard': False, 'format': 'cow', 'propagateErrors': 'off', 'cache': 'none', 
'iface': 'virtio', 'name': 'vda', 'serial': 
'f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'index': 0}",)
2020-09-15 20:10:38,295-03 INFO  
[org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-36528) 
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Command 
'org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand' return value 
'StatusOnlyReturn [status=Status [code=100, message=General Exception: ("Bad 
volume specification {'device': 'disk', 'type': 'disk', 'diskType': 'block', 
'specParams': {}, 'alias': 'ua-f5bd2e15-a1ab-4724-883a-988b4dc7985b', 
'domainID': '55327311-e47c-46b5-b168-258c5924757b', 'imageID': 
'f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'poolID': 
'0001-0001-0001-0001-0311', 'volumeID': 
'bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f', 'path': 
'/rhev/data-center/mnt/blockSD/55327311-e47c-46b5-b168-258c5924757b/images/f5bd2e15-a1ab-4724-883a-988b4dc7985b/bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f',
 'discard': False, 'format': 'cow', 'propagateErrors': 'off', 'cache': 'none', 
'iface': 'virtio', 'name': 'vda', 'serial': 
'f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'index': 0}",)]]'
2020-09-15 20:10:38,295-03 INFO  
[org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-36528) 
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] HostName = nodo2
2020-09-15 20:10:38,295-03 ERROR 
[org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-36528) 
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Command 'HotPlugDiskVDSCommand(HostName 
= nodo2, 
HotPlugDiskVDSParameters:{hostId='1c24c269-76c3-468d

[ovirt-users] Re: Low Performance (KVM Vs VMware Hypervisor) When running multi-process application

[Strahil Nikolov via Users]

What 

about the Vmware ESX host - does it have the same CPU ?

Best Regards,
Strahil Nikolov




В сряда, 16 септември 2020 г., 01:58:30 Гринуич+3, Rav Ya 
 написа: 






Hi Arman, 

Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz 

The VM is configured for host CPU pass through and pinned to 6 CPUs.

Architecture:          x86_64
CPU op-mode(s):        32-bit, 64-bit
Byte Order:            Little Endian
CPU(s):                6
On-line CPU(s) list:   0-5
Thread(s) per core:    1
Core(s) per socket:    1
Socket(s):             6
NUMA node(s):          1
Vendor ID:             GenuineIntel
CPU family:            6
Model:                 85
Model name:            Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz
Stepping:              4
CPU MHz:               2593.906
BogoMIPS:              5187.81
Hypervisor vendor:     KVM
Virtualization type:   full
L1d cache:             32K
L1i cache:             32K
L2 cache:              4096K
L3 cache:              16384K
NUMA node0 CPU(s):     0-5

Thank You
-RY

On Tue, Sep 15, 2020 at 6:21 PM Arman Khalatyan  wrote:
> what kind of CPUs are you using?
> 
> 
> Rav Ya  schrieb am Di., 15. Sept. 2020, 16:58:
>> Hello Everyone,
>> Please advice. Any help will be highly appreciated. Thank you in advance.
>> Test Setup:
>> 1. oVirt Centos 7.8 Virtulization Host
>> 2. Guest VM Centos 7.8 (Mutiqueue enabled 6 vCPUs with 6 Rx Tx Queues)
>> 3. The vCPUs are configured for host pass through (Pinned CPU).
>> The Guest VM runs the application in userspace. The Application consists of 
>> the parent process that reads packets in raw socket mode from the interface 
>> and forwards then to child processes (~vCPUs) via IPC (shared memory – 
>> pipes). The performance (throughput / CPU utilization) that I get with KVM 
>> is half of what I get with VMware.
>> 
>> Any thoughts on the below observations? Any suggestions? 
>> 
>> * KVM Guest VMs degraded performance when running multi-process 
>> applications.
>> * High FUTEX time (Seen on the Guest VM when passing traffic).
>> * High SY: System CPU time spent in kernel space (Seen on both 
>> Hypervisor and the Guest VMs only when running my application.)
>> 
>> -Rav Ya
>> 
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSEUE5VM4UCRT7MT4JLGSCABK7MDXFF4/
>> 
> 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HDX5I45ALOPTWKHDX6EMWGQO3IYJCSMG/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SS5DHZR4XZHF7EFJI2GWBNMRUSTQ4GBB/

[ovirt-users] Upgrading self-Hosted engine from 4.3 to oVirt 4.4

[Adam Xu]

Hi ovirt

I just try to upgrade a self-Hosted engine from 4.3.10 to 4.4.1.4.  I 
followed the step in the document:


https://www.ovirt.org/documentation/upgrade_guide/#SHE_Upgrading_from_4-3

the old 4.3 env has a FC storage as engine storage domain and I have 
created a new FC storage vv for the new storage domain to be used in the 
next steps.


I backup the old 4.3 env and prepare a total new host to restore the env.

in charter 4.4 step 8, it said:

"During the deployment you need to provide a new storage domain. The 
deployment script renames the 4.3 storage domain and retains its data."


it does rename the old storage domain. but it didn't let me choose a new 
storage domain during the deployment. So the new enigne just deployed in 
the new host's local storage and can not move to the FC storage domain.


Can anyone tell me what the problem is?

Thanks

--
Adam Xu

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XHDGJB2ZAFS7AJZYS4F5BAMC2ZVKCYY4/

[ovirt-users] Bad volume specification

[Facundo Garat]

Hi all,
 I'm having some issues with one VM. The VM won't start and it's showing
problems with the virtual disks so I started the VM without any disks and
trying to hot adding the disk and that's fail too.

 The servers are connected thru FC, all the other VMs are working fine.

  Any ideas?.

Thanks!!

PS: The engine.log is showing this:
2020-09-15 20:10:37,926-03 INFO
 [org.ovirt.engine.core.bll.storage.disk.HotPlugDiskToVmCommand] (default
task-168) [dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Lock Acquired to object
'EngineLock:{exclusiveLocks='[f5bd2e15-a1ab-4724-883a-988b4dc7985b=DISK]',
sharedLocks='[71db02c2-df29-4552-8a7e-cb8bb429a2ac=VM]'}'
2020-09-15 20:10:38,082-03 INFO
 [org.ovirt.engine.core.bll.storage.disk.HotPlugDiskToVmCommand]
(EE-ManagedThreadFactory-engine-Thread-36528)
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Running command:
HotPlugDiskToVmCommand internal: false. Entities affected :  ID:
71db02c2-df29-4552-8a7e-cb8bb429a2ac Type: VMAction group
CONFIGURE_VM_STORAGE with role type USER
2020-09-15 20:10:38,117-03 INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand]
(EE-ManagedThreadFactory-engine-Thread-36528)
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] START,
HotPlugDiskVDSCommand(HostName = nodo2,
HotPlugDiskVDSParameters:{hostId='1c24c269-76c3-468d-a7ce-d0332beb7aef',
vmId='71db02c2-df29-4552-8a7e-cb8bb429a2ac',
diskId='f5bd2e15-a1ab-4724-883a-988b4dc7985b', addressMap='null'}), log id:
f57ee9e
2020-09-15 20:10:38,125-03 INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand]
(EE-ManagedThreadFactory-engine-Thread-36528)
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Disk hot-plug: 
  

  
  

  
  
  
  f5bd2e15-a1ab-4724-883a-988b4dc7985b

  
  http://ovirt.org/vm/1.0";>

  

0001-0001-0001-0001-0311

bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f

f5bd2e15-a1ab-4724-883a-988b4dc7985b

55327311-e47c-46b5-b168-258c5924757b
  

  


2020-09-15 20:10:38,289-03 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand]
(EE-ManagedThreadFactory-engine-Thread-36528)
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Failed in 'HotPlugDiskVDS' method
2020-09-15 20:10:38,295-03 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(EE-ManagedThreadFactory-engine-Thread-36528)
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] EVENT_ID:
VDS_BROKER_COMMAND_FAILURE(10,802), VDSM nodo2 command HotPlugDiskVDS
failed: General Exception: ("Bad volume specification {'device': 'disk',
'type': 'disk', 'diskType': 'block', 'specParams': {}, 'alias':
'ua-f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'domainID':
'55327311-e47c-46b5-b168-258c5924757b', 'imageID':
'f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'poolID':
'0001-0001-0001-0001-0311', 'volumeID':
'bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f', 'path':
'/rhev/data-center/mnt/blockSD/55327311-e47c-46b5-b168-258c5924757b/images/f5bd2e15-a1ab-4724-883a-988b4dc7985b/bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f',
'discard': False, 'format': 'cow', 'propagateErrors': 'off', 'cache':
'none', 'iface': 'virtio', 'name': 'vda', 'serial':
'f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'index': 0}",)
2020-09-15 20:10:38,295-03 INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand]
(EE-ManagedThreadFactory-engine-Thread-36528)
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Command
'org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand' return
value 'StatusOnlyReturn [status=Status [code=100, message=General
Exception: ("Bad volume specification {'device': 'disk', 'type': 'disk',
'diskType': 'block', 'specParams': {}, 'alias':
'ua-f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'domainID':
'55327311-e47c-46b5-b168-258c5924757b', 'imageID':
'f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'poolID':
'0001-0001-0001-0001-0311', 'volumeID':
'bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f', 'path':
'/rhev/data-center/mnt/blockSD/55327311-e47c-46b5-b168-258c5924757b/images/f5bd2e15-a1ab-4724-883a-988b4dc7985b/bd714f21-8eed-43ee-a2d4-3d2ef1ee4c3f',
'discard': False, 'format': 'cow', 'propagateErrors': 'off', 'cache':
'none', 'iface': 'virtio', 'name': 'vda', 'serial':
'f5bd2e15-a1ab-4724-883a-988b4dc7985b', 'index': 0}",)]]'
2020-09-15 20:10:38,295-03 INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand]
(EE-ManagedThreadFactory-engine-Thread-36528)
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] HostName = nodo2
2020-09-15 20:10:38,295-03 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.HotPlugDiskVDSCommand]
(EE-ManagedThreadFactory-engine-Thread-36528)
[dd72c8e8-cdbe-470f-8e32-b3d14b96f37a] Command
'HotPlugDiskVDSCommand(HostName = nodo2,
HotPlugDiskVDSParameters:{hostId='1c24c269-76c3-468d-a7ce-d0332beb7aef',
vmId='71db02c2-df29-4552-8a7e-cb8bb429a2ac',
diskId='f5bd2e15-a1ab-4724-883a-988b4dc7985b', addressMap='null'})'
execution failed: VDSGenericException: VDSErrorException: Failed to
HotPlugDiskVDS, error = General Exception: ("Bad volume specification
{'device': 'disk', 'type': 'disk

[ovirt-users] Re: Low Performance (KVM Vs VMware Hypervisor) When running multi-process application

[Rav Ya]

Hi Arman,

Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz

*The VM is configured for host CPU pass through and pinned to 6 CPUs.*

Architecture:  x86_64
CPU op-mode(s):32-bit, 64-bit
Byte Order:Little Endian
CPU(s):6
On-line CPU(s) list:   0-5
Thread(s) per core:1
Core(s) per socket:1
Socket(s): 6
NUMA node(s):  1
Vendor ID: GenuineIntel
CPU family:6
Model: 85
Model name:Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz
Stepping:  4
CPU MHz:   2593.906
BogoMIPS:  5187.81
Hypervisor vendor: KVM
Virtualization type:   full
L1d cache: 32K
L1i cache: 32K
L2 cache:  4096K
L3 cache:  16384K
NUMA node0 CPU(s): 0-5

Thank You
-RY

On Tue, Sep 15, 2020 at 6:21 PM Arman Khalatyan  wrote:

> what kind of CPUs are you using?
>
>
> Rav Ya  schrieb am Di., 15. Sept. 2020, 16:58:
>
>> Hello Everyone,
>> Please advice. Any help will be highly appreciated. Thank you in advance.
>> Test Setup:
>>
>>1. oVirt Centos 7.8 Virtulization Host
>>2. Guest VM Centos 7.8 (Mutiqueue enabled 6 vCPUs with 6 Rx Tx Queues)
>>3. The vCPUs are configured for host pass through (Pinned CPU).
>>
>> The Guest VM runs the application in userspace. The Application consists
>> of the parent process that reads packets in raw socket mode from the
>> interface and forwards then to child processes (~vCPUs) via IPC (shared
>> memory – pipes). *The performance (throughput / CPU utilization) that I
>> get with KVM is half of what I get with VMware.*
>>
>> Any thoughts on the below observations? Any suggestions?
>>
>>
>>- KVM Guest VMs degraded performance when running multi-process
>>applications.
>>- High FUTEX time (Seen on the Guest VM when passing traffic).
>>- *High SY: *System CPU time spent in kernel space (Seen on both
>>Hypervisor and the Guest VMs only when running my application.)
>>
>>
>> -Rav Ya
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSEUE5VM4UCRT7MT4JLGSCABK7MDXFF4/
>>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HDX5I45ALOPTWKHDX6EMWGQO3IYJCSMG/

[ovirt-users] Re: Low Performance (KVM Vs VMware Hypervisor) When running multi-process application

[Arman Khalatyan]

what kind of CPUs are you using?


Rav Ya  schrieb am Di., 15. Sept. 2020, 16:58:

> Hello Everyone,
> Please advice. Any help will be highly appreciated. Thank you in advance.
> Test Setup:
>
>1. oVirt Centos 7.8 Virtulization Host
>2. Guest VM Centos 7.8 (Mutiqueue enabled 6 vCPUs with 6 Rx Tx Queues)
>3. The vCPUs are configured for host pass through (Pinned CPU).
>
> The Guest VM runs the application in userspace. The Application consists
> of the parent process that reads packets in raw socket mode from the
> interface and forwards then to child processes (~vCPUs) via IPC (shared
> memory – pipes). *The performance (throughput / CPU utilization) that I
> get with KVM is half of what I get with VMware.*
>
> Any thoughts on the below observations? Any suggestions?
>
>
>- KVM Guest VMs degraded performance when running multi-process
>applications.
>- High FUTEX time (Seen on the Guest VM when passing traffic).
>- *High SY: *System CPU time spent in kernel space (Seen on both
>Hypervisor and the Guest VMs only when running my application.)
>
>
> -Rav Ya
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSEUE5VM4UCRT7MT4JLGSCABK7MDXFF4/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IUZAKZXJQFZFOPOOGNCWSPMDELPJM6TO/

[ovirt-users] Moving VM disks from one storage domain to another. Automate?

[Green, Jacob Allen /C]

   I am looking for an automated way, via Ansible to move a VM disk 
from one storage domain to another. I found the following, 
https://docs.ansible.com/ansible/latest/modules/ovirt_disk_module.html and 
while it mentions copying a VM disk image from one domain to another it does 
not mention a live storage migration. Which is what I am looking to do. I want 
to take roughly 100 VMs and move their disk images from one domain to another 
that is available to the datacenter in some automated/scripted fashion. I am 
just curious if anyone out there has had to do this and how they tackled it. Or 
perhaps I am missing some easy obvious way, other than clicking all the disks 
and clicking move. However from the looks of it, if I did click all the disk 
and selected move, it appears RHV tries to do them all at once, which is 
probably not ideal, I would like it to move the disks in a serial One after 
another fashion, to conserve throughput and IO.

I also did not see anything on Ansible galaxy or the ovirt github that would do 
this.



Thank you.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DRKDNUBXH7HXKPNBIW6ZO2U36XIANLGO/

[ovirt-users] Re: Disconnected Server has closed the connection.

[Strahil Nikolov via Users]

First validate that the issue happens in:
- incognito mode
- another browser
- another OS
- disabled plugins/stuff in browser

Do you have a proxy ?

Best Regards,
Strahil Nikolov





В вторник, 15 септември 2020 г., 12:45:33 Гринуич+3, i...@worldhostess.com 
 написа: 





It seems that the installation is all done, but I have a problem. it takes very 
long to open the web pages, plus it disconnect all the time. it is impossible 
to do anything.

I can ping the hostname as I set up a sub-domain for it. to be honest, I am new 
to this and it took me days to get to this point. I think there are some issues 
with my network settings.

if there are any oVirt experts that can check my installation and give me 
advice about how to improve it, it will be greatly appreciated.

I have done an "Installing oVirt as a self-hosted engine using the Cockpit web 
interface"

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/66CBHKXUVHADXQMHAGKIAFMB4S64PTRX/

[ovirt-users] Re: i cannot access to ovirt-engine with this error"sun.security.validator.validatorexception: pkix path validation failed: java.security.cert.certpathvalidatorexception: timestamp check

[Strahil Nikolov via Users]

Is the engine and the Hypervisour in sync (ntp/chrony working and no drift)?

Best Regards,
Strahil Nikolov






В вторник, 15 септември 2020 г., 11:46:44 Гринуич+3, momokch--- via Users 
 написа: 





hello everyone,

I apologize for asking what is probably a very basic question.
when i login to my ovirt-engine webpage, the page show 
"sun.security.validator.validatorexception: pkix path validation failed: 
java.security.cert.certpathvalidatorexception: timestamp check failed"
does anyone face it before and how to solve it

the site is normal before which error message is just show near a month

Yours Sincerely,
school it
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VRAGODFOWOGP6PFGAQJKZOVZGOGGENUN/

[ovirt-users] Re: hosted engine migration

[Strahil Nikolov via Users]

Both nodes have a lower than the usual score (should be 3400 ).
Based on the score you are probably suffering from gateway-score-penalty [1][2].
Check if your gateway is pingable.

Best Regards,
Strahil Nikolov

1 - https://www.ovirt.org/images/Hosted-Engine-4.3-deep-dive.pdf(page 8)
2 - /etc/ovirt-hosted-engine-ha/agent.conf 






В вторник, 15 септември 2020 г., 04:49:48 Гринуич+3, ddqlo  
написа: 





--== Host node28 (id: 1) status ==--

conf_on_shared_storage             : True
Status up-to-date                  : True
Hostname                           : node28
Host ID                            : 1
Engine status                      : {"reason": "vm not running on this host", 
"health": "bad", "vm": "down_unexpected", "detail": "unknown"}
Score                              : 1800
stopped                            : False
Local maintenance                  : False
crc32                              : 4ac6105b
local_conf_timestamp               : 1794597
Host timestamp                     : 1794597
Extra metadata (valid at timestamp):
        metadata_parse_version=1
        metadata_feature_version=1
        timestamp=1794597 (Tue Sep 15 09:47:17 2020)
        host-id=1
        score=1800
        vm_conf_refresh_time=1794597 (Tue Sep 15 09:47:17 2020)
        conf_on_shared_storage=True
        maintenance=False
        state=EngineDown
        stopped=False


--== Host node22 (id: 2) status ==--

conf_on_shared_storage             : True
Status up-to-date                  : True
Hostname                           : node22
Host ID                            : 2
Engine status                      : {"health": "good", "vm": "up", "detail": 
"Up"}
Score                              : 1800
stopped                            : False
Local maintenance                  : False
crc32                              : ffc41893
local_conf_timestamp               : 1877876
Host timestamp                     : 1877876
Extra metadata (valid at timestamp):
        metadata_parse_version=1
        metadata_feature_version=1
        timestamp=1877876 (Tue Sep 15 09:47:13 2020)
        host-id=2
        score=1800
        vm_conf_refresh_time=1877876 (Tue Sep 15 09:47:13 2020)
        conf_on_shared_storage=True
        maintenance=False
        state=EngineUp
        stopped=False







在 2020-09-09 01:32:55，"Strahil Nikolov"  写道：
>What is the output of 'hosted-engine --vm-status' on the node where the 
>HostedEngine is running ?
>
>
>Best Regards,
>Strahil Nikolov
>
>
>
>
>
>
>В понеделник, 7 септември 2020 г., 03:53:13 Гринуич+3, ddqlo  
>написа: 
>
>
>
>
>
>I could not find any logs because the migration button is disabled in the web 
>UI. It seems that the engine migration operation is prevented at first. Any 
>other ideas? Thanks!
>
>
>
>
>
>
>
>在 2020-09-01 00:06:19，"Strahil Nikolov"  写道：
>>I'm running oVirt 4.3.10 and I can migrate my Engine from node to node.
>>I had one similar issue , but powering off and on the HE has fixed it.
>>
>>You have to check the vdsm log on the source and on destination in order to 
>>figure out what is going on.
>>Also you might consider checking the libvirt logs on the destination.
>>
>>Best Regards,
>>Strahil Nikolov
>>
>>
>>
>>
>>
>>
>>В понеделник, 31 август 2020 г., 10:47:22 Гринуич+3, ddqlo  
>>написа: 
>>
>>
>>
>>
>>
>>Thanks! The scores of all nodes are not '0'. I find that someone has already 
>>asked a question like this. It seems that  this feature has been disabled in 
>>4.3. I am not sure if it is enabled in 4.4.
>>
>>
>>在 2020-08-29 02:27:03，"Strahil Nikolov"  ：
>>>Have you checked under a shell the output of 'hosted-engine --vm-status' . 
>>>Check the Score of the hosts. Maybe there is a node with score of '0' ?
>>>
>>>Best Regards,
>>>Strahil Nikolov
>>>
>>>
>>>
>>>
>>>
>>>
>>>В вторник, 25 август 2020 г., 13:46:18 Гринуич+3, 董青龙  
>>>написа: 
>>>
>>>
>>>
>>>
>>>
>>>Hi all,
>>>        I have an ovirt4.3.10.4 environment of 2 hosts. Normal vms in this 
>>>environment could be migrated, but the hosted engine vm could not be 
>>>migrated. Anyone can help? Thanks a lot!
>>>
>>>hosts status:
>>>
>>>normal vm migration:
>>>
>>>hosted engine vm migration:
>>>
>>>
>>>
>>> 
>>>___
>>>Users mailing list -- users@ovirt.org
>>>To unsubscribe send an email to users-le...@ovirt.org
>>>Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>>oVirt Code of Conduct: 
>>>https://www.ovirt.org/community/about/community-guidelines/
>>>List Archives: 
>>>https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZXHE2AJX42HNHOMYHTDCUUIU3VQTQTLF/
>>
>>
>>
>>
>> 
>>___
>>Users mailing list -- users@ovirt.org
>>To unsubscribe send an email to users-le...@ovirt.org
>>Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>oVirt Code of Conduct: 
>>https://www.ovirt.org/community/about/community-guidelines/
>>List Archives: 
>>https://lists.ovirt.org/archives/list/users@ovirt.org/mess

[ovirt-users] Re: Gluster quorum issue on 3-node HCI with extra 5-nodes as compute and storage nodes

[Strahil Nikolov via Users]

As I mentioned in the Gluster's slack, start with providing the output of some 
cli commands:
gluster pool list
gluster peer status
gluster volume list
gluster volume status

Best Regards,
Strahil Nikolov






В понеделник, 14 септември 2020 г., 16:24:04 Гринуич+3, tho...@hoberg.net 
 написа: 





Yes, I've also posted this on the Gluster Slack. But I am using Gluster mostly 
because it's part of oVirt HCI, so don't just send me away, please!

Problem: GlusterD refusing to start due to quorum issues for volumes where it 
isn’t contributing any brick

(I've had this before on a different farm, but there it was transitory. Now I 
have it in a more observable manner, that's why I open a new topic)

In a test farm with recycled servers, I started running Gluster via oVirt 
3node-HCI, because I got 3 machines originally.
They were set up as group A in a 2:1 (replica:arbiter) oVirt HCI setup with 
'engine', 'vmstore' and 'data' volumes, one brick on each node.

I then got another five machines with hardware specs that were rather different 
to group A, so I set those up as group B to mostly act as compute nodes, but 
also to provide extra storage, mostly to be used externally as GlusterFS 
shares. It took a bit of fiddling with Ansible but I got these 5 nodes to serve 
two more Gluster volumes 'tape' and 'scratch' using dispersed bricks (4 
disperse:1 redundancy), RAID5 in my mind.

The two groups are in one Gluster, not because they serve bricks to the same 
volumes, but because oVirt doesn't like nodes to be in different Glusters (or 
actually, to already be in a Gluster when you add them as host node). But the 
two groups provide bricks to distinct volumes, there is no overlap.

After setup things have been running fine for weeks, but now I needed to 
restart a machine from group B, which has ‘tape’ and ‘scratch’ bricks, but none 
from original oVirt ‘engine’, ‘vmstore’ and ‘data’ in group A. Yet the gluster 
daemon refuses to start, citing a loss of quorum for these three volumes, even 
if it has no bricks in them… which makes no sense to me.

I am afraid the source of the issue is concept issues: I clearly don't really 
understand some design assumptions of Gluster.
And I'm afraid the design assumptions of Gluster and of oVirt (even with HCI), 
are not as related as one might assume from the marketing materials on the 
oVirt home-page.

But most of all I'd like to know: How do I fix this now?

I can't heal 'tape' and 'scratch', which are growing ever more apart while the 
glusterd on this machine in group B refuses to come online for lack of a quorum 
on volumes where it is not contributing bricks.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BENAUHUJGCDQUDKNNTSVSIYMROMTP5Z3/

[ovirt-users] Re: OVN Geneve tunnels not been established

[Konstantinos Betsis]

So a new test-net was created under DC01 and was depicted in the networks
tab under both DC01 and DC02.
I believe for some reason networks are duplicated in DCs, maybe for future
use??? Don't know.
If one tries to delete the network from the other DC it gets an error,
while if deleted from the once initially created it gets deleted from both.

>From the DC01-node02 i get the following errors:

2020-09-15T16:48:49.904Z|22748|main|INFO|OVNSB commit failed, force
recompute next time.
2020-09-15T16:48:49.905Z|22749|binding|INFO|Claiming lport
9a6cc189-0934-4468-97ae-09f90fa4598d for this chassis.
2020-09-15T16:48:49.905Z|22750|binding|INFO|9a6cc189-0934-4468-97ae-09f90fa4598d:
Claiming 56:6f:77:61:00:06
2020-09-15T16:48:49.905Z|22751|binding|INFO|Claiming lport
16162721-c815-4cd8-ab57-f22e6e482c7f for this chassis.
2020-09-15T16:48:49.905Z|22752|binding|INFO|16162721-c815-4cd8-ab57-f22e6e482c7f:
Claiming 56:6f:77:61:00:03
2020-09-15T16:48:49.905Z|22753|binding|INFO|Claiming lport
b88de6e4-6d77-4e42-b734-4cc676728910 for this chassis.
2020-09-15T16:48:49.905Z|22754|binding|INFO|b88de6e4-6d77-4e42-b734-4cc676728910:
Claiming 56:6f:77:61:00:15
2020-09-15T16:48:49.905Z|22755|binding|INFO|Claiming lport
b7ff5f2b-4bb4-4250-8ad8-8a7e19d2b4c7 for this chassis.
2020-09-15T16:48:49.905Z|22756|binding|INFO|b7ff5f2b-4bb4-4250-8ad8-8a7e19d2b4c7:
Claiming 56:6f:77:61:00:0d
2020-09-15T16:48:49.905Z|22757|binding|INFO|Claiming lport
5d03a7a5-82a1-40f9-b50c-353a26167fa3 for this chassis.
2020-09-15T16:48:49.905Z|22758|binding|INFO|5d03a7a5-82a1-40f9-b50c-353a26167fa3:
Claiming 56:6f:77:61:00:02
2020-09-15T16:48:49.905Z|22759|binding|INFO|Claiming lport
12d829c3-64eb-44bc-a0bd-d7219991f35f for this chassis.
2020-09-15T16:48:49.905Z|22760|binding|INFO|12d829c3-64eb-44bc-a0bd-d7219991f35f:
Claiming 56:6f:77:61:00:1c
2020-09-15T16:48:49.959Z|22761|main|INFO|OVNSB commit failed, force
recompute next time.
2020-09-15T16:48:49.960Z|22762|binding|INFO|Claiming lport
9a6cc189-0934-4468-97ae-09f90fa4598d for this chassis.
2020-09-15T16:48:49.960Z|22763|binding|INFO|9a6cc189-0934-4468-97ae-09f90fa4598d:
Claiming 56:6f:77:61:00:06
2020-09-15T16:48:49.960Z|22764|binding|INFO|Claiming lport
16162721-c815-4cd8-ab57-f22e6e482c7f for this chassis.
2020-09-15T16:48:49.960Z|22765|binding|INFO|16162721-c815-4cd8-ab57-f22e6e482c7f:
Claiming 56:6f:77:61:00:03
2020-09-15T16:48:49.960Z|22766|binding|INFO|Claiming lport
b88de6e4-6d77-4e42-b734-4cc676728910 for this chassis.
2020-09-15T16:48:49.960Z|22767|binding|INFO|b88de6e4-6d77-4e42-b734-4cc676728910:
Claiming 56:6f:77:61:00:15
2020-09-15T16:48:49.960Z|22768|binding|INFO|Claiming lport
b7ff5f2b-4bb4-4250-8ad8-8a7e19d2b4c7 for this chassis.
2020-09-15T16:48:49.960Z|22769|binding|INFO|b7ff5f2b-4bb4-4250-8ad8-8a7e19d2b4c7:
Claiming 56:6f:77:61:00:0d
2020-09-15T16:48:49.960Z|22770|binding|INFO|Claiming lport
5d03a7a5-82a1-40f9-b50c-353a26167fa3 for this chassis.
2020-09-15T16:48:49.960Z|22771|binding|INFO|5d03a7a5-82a1-40f9-b50c-353a26167fa3:
Claiming 56:6f:77:61:00:02
2020-09-15T16:48:49.960Z|22772|binding|INFO|Claiming lport
12d829c3-64eb-44bc-a0bd-d7219991f35f for this chassis.
2020-09-15T16:48:49.960Z|22773|binding|INFO|12d829c3-64eb-44bc-a0bd-d7219991f35f:
Claiming 56:6f:77:61:00:1c


And this repeats forever.

The connections to ovn-sbctl is ok and the geneve tunnels are depicted
under ovs-vsctl ok.
VMs still not able to ping each other.

On Tue, Sep 15, 2020 at 7:22 PM Dominik Holler  wrote:

>
>
> On Tue, Sep 15, 2020 at 6:18 PM Konstantinos Betsis 
> wrote:
>
>> Hi Dominik
>>
>> Fixed the issue.
>>
>
> Thanks.
>
>
>> I believe the /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
>> needed update also.
>> The package is upgraded to the latest version.
>>
>> Once the provider was updated with the following it functioned perfectly:
>>
>> Name: ovirt-provider-ovn
>> Description: oVirt network provider for OVN
>> Type: External Network Provider
>> Network Plugin: oVirt Network Provider for OVN
>> Automatic Synchronization: Checked
>> Unmanaged: Unchecked
>> Provider URL: https:dc02-ovirt01.testdomain.com:9696
>> Requires Authentication: Checked
>> Username: admin@internal
>> Password: "The admin password"
>> Protocol: HTTPS
>> Host Name: dc02-ovirt01.testdomain.com
>> API Port: 35357
>> API Version: v2.0
>> Tenant Name: "Empty"
>>
>> For some reason the TLS certificate was in conflict with the ovn provider
>> details, i would bet the "host" entry.
>>
>> So now geneve tunnels are established.
>> OVN provider is working.
>>
>> But VMs still do not communicated on the same VM network spanning
>> different hosts.
>>
>> So if we have a VM network test-net on both dc01-host01 and dc01-host02
>> and each host has a VM with IP addresses on the same network, VMs on the
>> same VM network should communicate directly.
>> But traffic does not reach each other.
>>
>>
> Can you create a new external network, with port security disabled, and an
> IPv4 subnet?
> If the VMs get an IP address via DHCP

[ovirt-users] Re: OVN Geneve tunnels not been established

[Dominik Holler]

On Tue, Sep 15, 2020 at 6:18 PM Konstantinos Betsis 
wrote:

> Hi Dominik
>
> Fixed the issue.
>

Thanks.


> I believe the /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> needed update also.
> The package is upgraded to the latest version.
>
> Once the provider was updated with the following it functioned perfectly:
>
> Name: ovirt-provider-ovn
> Description: oVirt network provider for OVN
> Type: External Network Provider
> Network Plugin: oVirt Network Provider for OVN
> Automatic Synchronization: Checked
> Unmanaged: Unchecked
> Provider URL: https:dc02-ovirt01.testdomain.com:9696
> Requires Authentication: Checked
> Username: admin@internal
> Password: "The admin password"
> Protocol: HTTPS
> Host Name: dc02-ovirt01.testdomain.com
> API Port: 35357
> API Version: v2.0
> Tenant Name: "Empty"
>
> For some reason the TLS certificate was in conflict with the ovn provider
> details, i would bet the "host" entry.
>
> So now geneve tunnels are established.
> OVN provider is working.
>
> But VMs still do not communicated on the same VM network spanning
> different hosts.
>
> So if we have a VM network test-net on both dc01-host01 and dc01-host02
> and each host has a VM with IP addresses on the same network, VMs on the
> same VM network should communicate directly.
> But traffic does not reach each other.
>
>
Can you create a new external network, with port security disabled, and an
IPv4 subnet?
If the VMs get an IP address via DHCP, ovn is working, and should be able
to ping each other, too.
If not, there should be a helpful entry in the ovn-controller.log of the
host the VM is running.


> On Tue, Sep 15, 2020 at 7:07 PM Dominik Holler  wrote:
>
>> Can you try again with:
>>
>> [OVN REMOTE]
>> ovn-remote=ssl:127.0.0.1:6641
>> [SSL]
>> https-enabled=false
>> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
>> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
>> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
>> [OVIRT]
>> ovirt-sso-client-secret=*random_test*
>> ovirt-host=https://dc02-ovirt01.testdomain.com:443
>> 
>> ovirt-sso-client-id=ovirt-provider-ovn
>> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
>> [NETWORK]
>> port-security-enabled-default=True
>> [PROVIDER]
>>
>> provider-host=dc02-ovirt01.testdomain.com
>>
>>
>>
>> Please note that the should match the HTTP or HTTPS in the of the
>> ovirt-prover-ovn configuration in oVirt Engine.
>> So if the ovirt-provider-ovn entity in Engine is on HTTP, the config file
>> should use
>> https-enabled=false
>>
>>
>> On Tue, Sep 15, 2020 at 5:56 PM Konstantinos Betsis 
>> wrote:
>>
>>> This is the updated one:
>>>
>>> # This file is automatically generated by engine-setup. Please do not
>>> edit manually
>>> [OVN REMOTE]
>>> ovn-remote=ssl:127.0.0.1:6641
>>> [SSL]
>>> https-enabled=true
>>> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
>>> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
>>> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
>>> [OVIRT]
>>> ovirt-sso-client-secret=*random_text*
>>> ovirt-host=https://dc02-ovirt01.testdomain.com:443
>>> ovirt-sso-client-id=ovirt-provider-ovn
>>> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
>>> [NETWORK]
>>> port-security-enabled-default=True
>>> [PROVIDER]
>>> provider-host=dc02-ovirt01.testdomain.com
>>> [AUTH]
>>> auth-plugin=auth.plugins.static_token:NoAuthPlugin
>>>
>>>
>>> However, it still does not connect.
>>> It prompts for the certificate but then fails and prompts to see the log
>>> but the ovirt-provider-ovn.log does not list anything.
>>>
>>> Yes we've got ovirt for about a year now from about version 4.1
>>>
>>>
>> This might explain the trouble. Upgrade of ovirt-provider-ovn should work
>> flawlessly starting from oVirt 4.2.
>>
>>
>>> On Tue, Sep 15, 2020 at 6:44 PM Dominik Holler 
>>> wrote:
>>>


 On Tue, Sep 15, 2020 at 5:34 PM Konstantinos Betsis 
 wrote:

> There is a file with the below entries
>

 Impressive, do you know when this config file was created and if it was
 manually modified?
 Is this an upgrade from oVirt 4.1?


> [root@dc02-ovirt01 log]# cat
> /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> # This file is automatically generated by engine-setup. Please do not
> edit manually
> [OVN REMOTE]
> ovn-remote=tcp:127.0.0.1:6641
> [SSL]
> https-enabled=false
> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
> [OVIRT]
> ovirt-sso-client-secret=*random_test*
> ovirt-host=https://dc02-ovirt01.testdomain.com:443
> ovirt-sso-client-id=ovirt-provider-ovn
> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
> [NETWORK]
> port-security-enabled-default=True
> [PROVIDER]
>
> provider

[ovirt-users] Re: OVN Geneve tunnels not been established

[Konstantinos Betsis]

Hi Dominik

Fixed the issue.
I believe the /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
needed update also.
The package is upgraded to the latest version.

Once the provider was updated with the following it functioned perfectly:

Name: ovirt-provider-ovn
Description: oVirt network provider for OVN
Type: External Network Provider
Network Plugin: oVirt Network Provider for OVN
Automatic Synchronization: Checked
Unmanaged: Unchecked
Provider URL: https:dc02-ovirt01.testdomain.com:9696
Requires Authentication: Checked
Username: admin@internal
Password: "The admin password"
Protocol: HTTPS
Host Name: dc02-ovirt01.testdomain.com
API Port: 35357
API Version: v2.0
Tenant Name: "Empty"

For some reason the TLS certificate was in conflict with the ovn provider
details, i would bet the "host" entry.

So now geneve tunnels are established.
OVN provider is working.

But VMs still do not communicated on the same VM network spanning different
hosts.

So if we have a VM network test-net on both dc01-host01 and dc01-host02 and
each host has a VM with IP addresses on the same network, VMs on the same
VM network should communicate directly.
But traffic does not reach each other.

On Tue, Sep 15, 2020 at 7:07 PM Dominik Holler  wrote:

> Can you try again with:
>
> [OVN REMOTE]
> ovn-remote=ssl:127.0.0.1:6641
> [SSL]
> https-enabled=false
> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
> [OVIRT]
> ovirt-sso-client-secret=*random_test*
> ovirt-host=https://dc02-ovirt01.testdomain.com:443
> 
> ovirt-sso-client-id=ovirt-provider-ovn
> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
> [NETWORK]
> port-security-enabled-default=True
> [PROVIDER]
>
> provider-host=dc02-ovirt01.testdomain.com
>
>
>
> Please note that the should match the HTTP or HTTPS in the of the
> ovirt-prover-ovn configuration in oVirt Engine.
> So if the ovirt-provider-ovn entity in Engine is on HTTP, the config file
> should use
> https-enabled=false
>
>
> On Tue, Sep 15, 2020 at 5:56 PM Konstantinos Betsis 
> wrote:
>
>> This is the updated one:
>>
>> # This file is automatically generated by engine-setup. Please do not
>> edit manually
>> [OVN REMOTE]
>> ovn-remote=ssl:127.0.0.1:6641
>> [SSL]
>> https-enabled=true
>> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
>> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
>> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
>> [OVIRT]
>> ovirt-sso-client-secret=*random_text*
>> ovirt-host=https://dc02-ovirt01.testdomain.com:443
>> ovirt-sso-client-id=ovirt-provider-ovn
>> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
>> [NETWORK]
>> port-security-enabled-default=True
>> [PROVIDER]
>> provider-host=dc02-ovirt01.testdomain.com
>> [AUTH]
>> auth-plugin=auth.plugins.static_token:NoAuthPlugin
>>
>>
>> However, it still does not connect.
>> It prompts for the certificate but then fails and prompts to see the log
>> but the ovirt-provider-ovn.log does not list anything.
>>
>> Yes we've got ovirt for about a year now from about version 4.1
>>
>>
> This might explain the trouble. Upgrade of ovirt-provider-ovn should work
> flawlessly starting from oVirt 4.2.
>
>
>> On Tue, Sep 15, 2020 at 6:44 PM Dominik Holler 
>> wrote:
>>
>>>
>>>
>>> On Tue, Sep 15, 2020 at 5:34 PM Konstantinos Betsis 
>>> wrote:
>>>
 There is a file with the below entries

>>>
>>> Impressive, do you know when this config file was created and if it was
>>> manually modified?
>>> Is this an upgrade from oVirt 4.1?
>>>
>>>
 [root@dc02-ovirt01 log]# cat
 /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
 # This file is automatically generated by engine-setup. Please do not
 edit manually
 [OVN REMOTE]
 ovn-remote=tcp:127.0.0.1:6641
 [SSL]
 https-enabled=false
 ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
 ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
 ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
 [OVIRT]
 ovirt-sso-client-secret=*random_test*
 ovirt-host=https://dc02-ovirt01.testdomain.com:443
 ovirt-sso-client-id=ovirt-provider-ovn
 ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
 [NETWORK]
 port-security-enabled-default=True
 [PROVIDER]

 provider-host=dc02-ovirt01.testdomain.com

 The only entry missing is the [AUTH] and under [SSL] the https-enabled
 is false. Should I edit this in this file or is this going to break
 everything?


>>> Changing the file should improve, but better create a backup into
>>> another diretory before modification.
>>> The only required change is
>>> from
>>> ovn-remote=tcp:127.0.0.1:6641
>>> to
>>> ovn-remote=ssl:127.0.0.1:6641
>>>
>>>
>>>
>>>
 On Tue, Sep 15, 2020 at 6:27 PM Dominik Holler 
 wrote:

>
>

[ovirt-users] Re: OVN Geneve tunnels not been established

[Dominik Holler]

Can you try again with:

[OVN REMOTE]
ovn-remote=ssl:127.0.0.1:6641
[SSL]
https-enabled=false
ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
[OVIRT]
ovirt-sso-client-secret=*random_test*
ovirt-host=https://dc02-ovirt01.testdomain.com:443

ovirt-sso-client-id=ovirt-provider-ovn
ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
[NETWORK]
port-security-enabled-default=True
[PROVIDER]

provider-host=dc02-ovirt01.testdomain.com



Please note that the should match the HTTP or HTTPS in the of the
ovirt-prover-ovn configuration in oVirt Engine.
So if the ovirt-provider-ovn entity in Engine is on HTTP, the config file
should use
https-enabled=false


On Tue, Sep 15, 2020 at 5:56 PM Konstantinos Betsis 
wrote:

> This is the updated one:
>
> # This file is automatically generated by engine-setup. Please do not edit
> manually
> [OVN REMOTE]
> ovn-remote=ssl:127.0.0.1:6641
> [SSL]
> https-enabled=true
> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
> [OVIRT]
> ovirt-sso-client-secret=*random_text*
> ovirt-host=https://dc02-ovirt01.testdomain.com:443
> ovirt-sso-client-id=ovirt-provider-ovn
> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
> [NETWORK]
> port-security-enabled-default=True
> [PROVIDER]
> provider-host=dc02-ovirt01.testdomain.com
> [AUTH]
> auth-plugin=auth.plugins.static_token:NoAuthPlugin
>
>
> However, it still does not connect.
> It prompts for the certificate but then fails and prompts to see the log
> but the ovirt-provider-ovn.log does not list anything.
>
> Yes we've got ovirt for about a year now from about version 4.1
>
>
This might explain the trouble. Upgrade of ovirt-provider-ovn should work
flawlessly starting from oVirt 4.2.


> On Tue, Sep 15, 2020 at 6:44 PM Dominik Holler  wrote:
>
>>
>>
>> On Tue, Sep 15, 2020 at 5:34 PM Konstantinos Betsis 
>> wrote:
>>
>>> There is a file with the below entries
>>>
>>
>> Impressive, do you know when this config file was created and if it was
>> manually modified?
>> Is this an upgrade from oVirt 4.1?
>>
>>
>>> [root@dc02-ovirt01 log]# cat
>>> /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
>>> # This file is automatically generated by engine-setup. Please do not
>>> edit manually
>>> [OVN REMOTE]
>>> ovn-remote=tcp:127.0.0.1:6641
>>> [SSL]
>>> https-enabled=false
>>> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
>>> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
>>> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
>>> [OVIRT]
>>> ovirt-sso-client-secret=*random_test*
>>> ovirt-host=https://dc02-ovirt01.testdomain.com:443
>>> ovirt-sso-client-id=ovirt-provider-ovn
>>> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
>>> [NETWORK]
>>> port-security-enabled-default=True
>>> [PROVIDER]
>>>
>>> provider-host=dc02-ovirt01.testdomain.com
>>>
>>> The only entry missing is the [AUTH] and under [SSL] the https-enabled
>>> is false. Should I edit this in this file or is this going to break
>>> everything?
>>>
>>>
>> Changing the file should improve, but better create a backup into another
>> diretory before modification.
>> The only required change is
>> from
>> ovn-remote=tcp:127.0.0.1:6641
>> to
>> ovn-remote=ssl:127.0.0.1:6641
>>
>>
>>
>>
>>> On Tue, Sep 15, 2020 at 6:27 PM Dominik Holler 
>>> wrote:
>>>


 On Tue, Sep 15, 2020 at 5:11 PM Konstantinos Betsis 
 wrote:

> Hi Dominik
>
> That immediately fixed the geneve tunnels between all hosts.
>
>
 thanks for the feedback.


> However, the ovn provider is not broken.
> After fixing the networks we tried to move a VM to the DC01-host01 so
> we powered it down and simply configured it to run on dc01-node01.
>
> While checking the logs on the ovirt engine i noticed the below:
> Failed to synchronize networks of Provider ovirt-provider-ovn.
>
> The ovn-provider configure on the engine is the below:
> Name: ovirt-provider-ovn
> Description: oVirt network provider for OVN
> Type: External Network Provider
> Network Plugin: oVirt Network Provider for OVN
> Automatic Synchronization: Checked
> Unmanaged: Unchecked
> Provider URL: http:localhost:9696
> Requires Authentication: Checked
> Username: admin@internal
> Password: "The admin password"
> Protocol: hTTP
> Host Name: dc02-ovirt01
> API Port: 35357
> API Version: v2.0
> Tenant Name: "Empty"
>
> In the past this was deleted by an engineer and recreated as per the
> documentation, and it worked. Do we need to update something due to the 
> SSL
> on the ovn?
>
>
 Is there a file in /etc/ovirt-provider-ovn/conf.d/ ?
 engine-setu

[ovirt-users] Re: OVN Geneve tunnels not been established

[Konstantinos Betsis]

This is the updated one:

# This file is automatically generated by engine-setup. Please do not edit
manually
[OVN REMOTE]
ovn-remote=ssl:127.0.0.1:6641
[SSL]
https-enabled=true
ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
[OVIRT]
ovirt-sso-client-secret=*random_text*
ovirt-host=https://dc02-ovirt01.testdomain.com:443
ovirt-sso-client-id=ovirt-provider-ovn
ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
[NETWORK]
port-security-enabled-default=True
[PROVIDER]
provider-host=dc02-ovirt01.testdomain.com
[AUTH]
auth-plugin=auth.plugins.static_token:NoAuthPlugin


However, it still does not connect.
It prompts for the certificate but then fails and prompts to see the log
but the ovirt-provider-ovn.log does not list anything.

Yes we've got ovirt for about a year now from about version 4.1

On Tue, Sep 15, 2020 at 6:44 PM Dominik Holler  wrote:

>
>
> On Tue, Sep 15, 2020 at 5:34 PM Konstantinos Betsis 
> wrote:
>
>> There is a file with the below entries
>>
>
> Impressive, do you know when this config file was created and if it was
> manually modified?
> Is this an upgrade from oVirt 4.1?
>
>
>> [root@dc02-ovirt01 log]# cat
>> /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
>> # This file is automatically generated by engine-setup. Please do not
>> edit manually
>> [OVN REMOTE]
>> ovn-remote=tcp:127.0.0.1:6641
>> [SSL]
>> https-enabled=false
>> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
>> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
>> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
>> [OVIRT]
>> ovirt-sso-client-secret=*random_test*
>> ovirt-host=https://dc02-ovirt01.testdomain.com:443
>> ovirt-sso-client-id=ovirt-provider-ovn
>> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
>> [NETWORK]
>> port-security-enabled-default=True
>> [PROVIDER]
>>
>> provider-host=dc02-ovirt01.testdomain.com
>>
>> The only entry missing is the [AUTH] and under [SSL] the https-enabled is
>> false. Should I edit this in this file or is this going to break
>> everything?
>>
>>
> Changing the file should improve, but better create a backup into another
> diretory before modification.
> The only required change is
> from
> ovn-remote=tcp:127.0.0.1:6641
> to
> ovn-remote=ssl:127.0.0.1:6641
>
>
>
>
>> On Tue, Sep 15, 2020 at 6:27 PM Dominik Holler 
>> wrote:
>>
>>>
>>>
>>> On Tue, Sep 15, 2020 at 5:11 PM Konstantinos Betsis 
>>> wrote:
>>>
 Hi Dominik

 That immediately fixed the geneve tunnels between all hosts.


>>> thanks for the feedback.
>>>
>>>
 However, the ovn provider is not broken.
 After fixing the networks we tried to move a VM to the DC01-host01 so
 we powered it down and simply configured it to run on dc01-node01.

 While checking the logs on the ovirt engine i noticed the below:
 Failed to synchronize networks of Provider ovirt-provider-ovn.

 The ovn-provider configure on the engine is the below:
 Name: ovirt-provider-ovn
 Description: oVirt network provider for OVN
 Type: External Network Provider
 Network Plugin: oVirt Network Provider for OVN
 Automatic Synchronization: Checked
 Unmanaged: Unchecked
 Provider URL: http:localhost:9696
 Requires Authentication: Checked
 Username: admin@internal
 Password: "The admin password"
 Protocol: hTTP
 Host Name: dc02-ovirt01
 API Port: 35357
 API Version: v2.0
 Tenant Name: "Empty"

 In the past this was deleted by an engineer and recreated as per the
 documentation, and it worked. Do we need to update something due to the SSL
 on the ovn?


>>> Is there a file in /etc/ovirt-provider-ovn/conf.d/ ?
>>> engine-setup should have created one.
>>> If the file is missing, for testing purposes, you can create a
>>> file /etc/ovirt-provider-ovn/conf.d/00-setup-ovirt-provider-ovn-test.conf :
>>> [PROVIDER]
>>> provider-host=REPLACE_WITH_FQDN
>>> [SSL]
>>> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
>>> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
>>> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
>>> https-enabled=true
>>> [OVN REMOTE]
>>> ovn-remote=ssl:127.0.0.1:6641
>>> [AUTH]
>>> auth-plugin=auth.plugins.static_token:NoAuthPlugin
>>> [NETWORK]
>>> port-security-enabled-default=True
>>>
>>> and restart the ovirt-provider-ovn service.
>>>
>>>
>>>
>>>
 From the ovn-provider logs the below is generated after a service
 restart and when the start VM is triggered

 2020-09-15 15:07:33,579 root Starting server
 2020-09-15 15:07:33,579 root Version: 1.2.29-1
 2020-09-15 15:07:33,579 root Build date: 20191217125241
 2020-09-15 15:07:33,579 root Githash: cb5a80d
 2020-09-15 15:08:26,582 root From: :::127.0.0.1:59980 Request: GET
 /v2.0/ports
 2020-09-15 15:08:26,582 root Could n

[ovirt-users] Re: OVN Geneve tunnels not been established

[Dominik Holler]

On Tue, Sep 15, 2020 at 5:34 PM Konstantinos Betsis 
wrote:

> There is a file with the below entries
>

Impressive, do you know when this config file was created and if it was
manually modified?
Is this an upgrade from oVirt 4.1?


> [root@dc02-ovirt01 log]# cat
> /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> # This file is automatically generated by engine-setup. Please do not edit
> manually
> [OVN REMOTE]
> ovn-remote=tcp:127.0.0.1:6641
> [SSL]
> https-enabled=false
> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
> [OVIRT]
> ovirt-sso-client-secret=*random_test*
> ovirt-host=https://dc02-ovirt01.testdomain.com:443
> ovirt-sso-client-id=ovirt-provider-ovn
> ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
> [NETWORK]
> port-security-enabled-default=True
> [PROVIDER]
>
> provider-host=dc02-ovirt01.testdomain.com
>
> The only entry missing is the [AUTH] and under [SSL] the https-enabled is
> false. Should I edit this in this file or is this going to break
> everything?
>
>
Changing the file should improve, but better create a backup into another
diretory before modification.
The only required change is
from
ovn-remote=tcp:127.0.0.1:6641
to
ovn-remote=ssl:127.0.0.1:6641




> On Tue, Sep 15, 2020 at 6:27 PM Dominik Holler  wrote:
>
>>
>>
>> On Tue, Sep 15, 2020 at 5:11 PM Konstantinos Betsis 
>> wrote:
>>
>>> Hi Dominik
>>>
>>> That immediately fixed the geneve tunnels between all hosts.
>>>
>>>
>> thanks for the feedback.
>>
>>
>>> However, the ovn provider is not broken.
>>> After fixing the networks we tried to move a VM to the DC01-host01 so we
>>> powered it down and simply configured it to run on dc01-node01.
>>>
>>> While checking the logs on the ovirt engine i noticed the below:
>>> Failed to synchronize networks of Provider ovirt-provider-ovn.
>>>
>>> The ovn-provider configure on the engine is the below:
>>> Name: ovirt-provider-ovn
>>> Description: oVirt network provider for OVN
>>> Type: External Network Provider
>>> Network Plugin: oVirt Network Provider for OVN
>>> Automatic Synchronization: Checked
>>> Unmanaged: Unchecked
>>> Provider URL: http:localhost:9696
>>> Requires Authentication: Checked
>>> Username: admin@internal
>>> Password: "The admin password"
>>> Protocol: hTTP
>>> Host Name: dc02-ovirt01
>>> API Port: 35357
>>> API Version: v2.0
>>> Tenant Name: "Empty"
>>>
>>> In the past this was deleted by an engineer and recreated as per the
>>> documentation, and it worked. Do we need to update something due to the SSL
>>> on the ovn?
>>>
>>>
>> Is there a file in /etc/ovirt-provider-ovn/conf.d/ ?
>> engine-setup should have created one.
>> If the file is missing, for testing purposes, you can create a
>> file /etc/ovirt-provider-ovn/conf.d/00-setup-ovirt-provider-ovn-test.conf :
>> [PROVIDER]
>> provider-host=REPLACE_WITH_FQDN
>> [SSL]
>> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
>> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
>> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
>> https-enabled=true
>> [OVN REMOTE]
>> ovn-remote=ssl:127.0.0.1:6641
>> [AUTH]
>> auth-plugin=auth.plugins.static_token:NoAuthPlugin
>> [NETWORK]
>> port-security-enabled-default=True
>>
>> and restart the ovirt-provider-ovn service.
>>
>>
>>
>>
>>> From the ovn-provider logs the below is generated after a service
>>> restart and when the start VM is triggered
>>>
>>> 2020-09-15 15:07:33,579 root Starting server
>>> 2020-09-15 15:07:33,579 root Version: 1.2.29-1
>>> 2020-09-15 15:07:33,579 root Build date: 20191217125241
>>> 2020-09-15 15:07:33,579 root Githash: cb5a80d
>>> 2020-09-15 15:08:26,582 root From: :::127.0.0.1:59980 Request: GET
>>> /v2.0/ports
>>> 2020-09-15 15:08:26,582 root Could not retrieve schema from tcp:
>>> 127.0.0.1:6641: Unknown error -1
>>> Traceback (most recent call last):
>>>   File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line
>>> 138, in _handle_request
>>> method, path_parts, content
>>>   File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py",
>>> line 175, in handle_request
>>> return self.call_response_handler(handler, content, parameters)
>>>   File "/usr/share/ovirt-provider-ovn/handlers/neutron.py", line 35, in
>>> call_response_handler
>>> with NeutronApi() as ovn_north:
>>>   File "/usr/share/ovirt-provider-ovn/neutron/neutron_api.py", line 95,
>>> in __init__
>>> self.ovsidl, self.idl = ovn_connection.connect()
>>>   File "/usr/share/ovirt-provider-ovn/ovn_connection.py", line 46, in
>>> connect
>>> ovnconst.OVN_NORTHBOUND
>>>   File
>>> "/usr/lib/python2.7/site-packages/ovsdbapp/backend/ovs_idl/connection.py",
>>> line 127, in from_server
>>> helper = idlutils.get_schema_helper(connection_string, schema_name)
>>>   File
>>> "/usr/lib/python2.7/site-packages/ovsdbapp/backend/ovs_idl/idlutils.py",
>>> line 128, in get

[ovirt-users] Re: OVN Geneve tunnels not been established

[Konstantinos Betsis]

There is a file with the below entries

[root@dc02-ovirt01 log]# cat
/etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
# This file is automatically generated by engine-setup. Please do not edit
manually
[OVN REMOTE]
ovn-remote=tcp:127.0.0.1:6641
[SSL]
https-enabled=false
ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
[OVIRT]
ovirt-sso-client-secret=*random_test*
ovirt-host=https://dc02-ovirt01.testdomain.com:443
ovirt-sso-client-id=ovirt-provider-ovn
ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem
[NETWORK]
port-security-enabled-default=True
[PROVIDER]

provider-host=dc02-ovirt01.testdomain.com

The only entry missing is the [AUTH] and under [SSL] the https-enabled is
false. Should I edit this in this file or is this going to break
everything?

On Tue, Sep 15, 2020 at 6:27 PM Dominik Holler  wrote:

>
>
> On Tue, Sep 15, 2020 at 5:11 PM Konstantinos Betsis 
> wrote:
>
>> Hi Dominik
>>
>> That immediately fixed the geneve tunnels between all hosts.
>>
>>
> thanks for the feedback.
>
>
>> However, the ovn provider is not broken.
>> After fixing the networks we tried to move a VM to the DC01-host01 so we
>> powered it down and simply configured it to run on dc01-node01.
>>
>> While checking the logs on the ovirt engine i noticed the below:
>> Failed to synchronize networks of Provider ovirt-provider-ovn.
>>
>> The ovn-provider configure on the engine is the below:
>> Name: ovirt-provider-ovn
>> Description: oVirt network provider for OVN
>> Type: External Network Provider
>> Network Plugin: oVirt Network Provider for OVN
>> Automatic Synchronization: Checked
>> Unmanaged: Unchecked
>> Provider URL: http:localhost:9696
>> Requires Authentication: Checked
>> Username: admin@internal
>> Password: "The admin password"
>> Protocol: hTTP
>> Host Name: dc02-ovirt01
>> API Port: 35357
>> API Version: v2.0
>> Tenant Name: "Empty"
>>
>> In the past this was deleted by an engineer and recreated as per the
>> documentation, and it worked. Do we need to update something due to the SSL
>> on the ovn?
>>
>>
> Is there a file in /etc/ovirt-provider-ovn/conf.d/ ?
> engine-setup should have created one.
> If the file is missing, for testing purposes, you can create a
> file /etc/ovirt-provider-ovn/conf.d/00-setup-ovirt-provider-ovn-test.conf :
> [PROVIDER]
> provider-host=REPLACE_WITH_FQDN
> [SSL]
> ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
> ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
> ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
> https-enabled=true
> [OVN REMOTE]
> ovn-remote=ssl:127.0.0.1:6641
> [AUTH]
> auth-plugin=auth.plugins.static_token:NoAuthPlugin
> [NETWORK]
> port-security-enabled-default=True
>
> and restart the ovirt-provider-ovn service.
>
>
>
>
>> From the ovn-provider logs the below is generated after a service restart
>> and when the start VM is triggered
>>
>> 2020-09-15 15:07:33,579 root Starting server
>> 2020-09-15 15:07:33,579 root Version: 1.2.29-1
>> 2020-09-15 15:07:33,579 root Build date: 20191217125241
>> 2020-09-15 15:07:33,579 root Githash: cb5a80d
>> 2020-09-15 15:08:26,582 root From: :::127.0.0.1:59980 Request: GET
>> /v2.0/ports
>> 2020-09-15 15:08:26,582 root Could not retrieve schema from tcp:
>> 127.0.0.1:6641: Unknown error -1
>> Traceback (most recent call last):
>>   File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line
>> 138, in _handle_request
>> method, path_parts, content
>>   File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py",
>> line 175, in handle_request
>> return self.call_response_handler(handler, content, parameters)
>>   File "/usr/share/ovirt-provider-ovn/handlers/neutron.py", line 35, in
>> call_response_handler
>> with NeutronApi() as ovn_north:
>>   File "/usr/share/ovirt-provider-ovn/neutron/neutron_api.py", line 95,
>> in __init__
>> self.ovsidl, self.idl = ovn_connection.connect()
>>   File "/usr/share/ovirt-provider-ovn/ovn_connection.py", line 46, in
>> connect
>> ovnconst.OVN_NORTHBOUND
>>   File
>> "/usr/lib/python2.7/site-packages/ovsdbapp/backend/ovs_idl/connection.py",
>> line 127, in from_server
>> helper = idlutils.get_schema_helper(connection_string, schema_name)
>>   File
>> "/usr/lib/python2.7/site-packages/ovsdbapp/backend/ovs_idl/idlutils.py",
>> line 128, in get_schema_helper
>> 'err': os.strerror(err)})
>> Exception: Could not retrieve schema from tcp:127.0.0.1:6641: Unknown
>> error -1
>>
>>
>> When i update the ovn provider from the GUI to have
>> https://localhost:9696/ and HTTPS as the protocol the test fails.
>>
>> On Tue, Sep 15, 2020 at 5:35 PM Dominik Holler 
>> wrote:
>>
>>>
>>>
>>> On Mon, Sep 14, 2020 at 9:25 AM Konstantinos Betsis 
>>> wrote:
>>>
 Hi Dominik

 When these commands are used on the ovirt-engine host the output is the
 one depicted in your email.
 For 

[ovirt-users] Re: OVN Geneve tunnels not been established

[Dominik Holler]

On Tue, Sep 15, 2020 at 5:11 PM Konstantinos Betsis 
wrote:

> Hi Dominik
>
> That immediately fixed the geneve tunnels between all hosts.
>
>
thanks for the feedback.


> However, the ovn provider is not broken.
> After fixing the networks we tried to move a VM to the DC01-host01 so we
> powered it down and simply configured it to run on dc01-node01.
>
> While checking the logs on the ovirt engine i noticed the below:
> Failed to synchronize networks of Provider ovirt-provider-ovn.
>
> The ovn-provider configure on the engine is the below:
> Name: ovirt-provider-ovn
> Description: oVirt network provider for OVN
> Type: External Network Provider
> Network Plugin: oVirt Network Provider for OVN
> Automatic Synchronization: Checked
> Unmanaged: Unchecked
> Provider URL: http:localhost:9696
> Requires Authentication: Checked
> Username: admin@internal
> Password: "The admin password"
> Protocol: hTTP
> Host Name: dc02-ovirt01
> API Port: 35357
> API Version: v2.0
> Tenant Name: "Empty"
>
> In the past this was deleted by an engineer and recreated as per the
> documentation, and it worked. Do we need to update something due to the SSL
> on the ovn?
>
>
Is there a file in /etc/ovirt-provider-ovn/conf.d/ ?
engine-setup should have created one.
If the file is missing, for testing purposes, you can create a
file /etc/ovirt-provider-ovn/conf.d/00-setup-ovirt-provider-ovn-test.conf :
[PROVIDER]
provider-host=REPLACE_WITH_FQDN
[SSL]
ssl-cert-file=/etc/pki/ovirt-engine/certs/ovirt-provider-ovn.cer
ssl-key-file=/etc/pki/ovirt-engine/keys/ovirt-provider-ovn.key.nopass
ssl-cacert-file=/etc/pki/ovirt-engine/ca.pem
https-enabled=true
[OVN REMOTE]
ovn-remote=ssl:127.0.0.1:6641
[AUTH]
auth-plugin=auth.plugins.static_token:NoAuthPlugin
[NETWORK]
port-security-enabled-default=True

and restart the ovirt-provider-ovn service.




> From the ovn-provider logs the below is generated after a service restart
> and when the start VM is triggered
>
> 2020-09-15 15:07:33,579 root Starting server
> 2020-09-15 15:07:33,579 root Version: 1.2.29-1
> 2020-09-15 15:07:33,579 root Build date: 20191217125241
> 2020-09-15 15:07:33,579 root Githash: cb5a80d
> 2020-09-15 15:08:26,582 root From: :::127.0.0.1:59980 Request: GET
> /v2.0/ports
> 2020-09-15 15:08:26,582 root Could not retrieve schema from tcp:
> 127.0.0.1:6641: Unknown error -1
> Traceback (most recent call last):
>   File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line 138,
> in _handle_request
> method, path_parts, content
>   File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py", line
> 175, in handle_request
> return self.call_response_handler(handler, content, parameters)
>   File "/usr/share/ovirt-provider-ovn/handlers/neutron.py", line 35, in
> call_response_handler
> with NeutronApi() as ovn_north:
>   File "/usr/share/ovirt-provider-ovn/neutron/neutron_api.py", line 95, in
> __init__
> self.ovsidl, self.idl = ovn_connection.connect()
>   File "/usr/share/ovirt-provider-ovn/ovn_connection.py", line 46, in
> connect
> ovnconst.OVN_NORTHBOUND
>   File
> "/usr/lib/python2.7/site-packages/ovsdbapp/backend/ovs_idl/connection.py",
> line 127, in from_server
> helper = idlutils.get_schema_helper(connection_string, schema_name)
>   File
> "/usr/lib/python2.7/site-packages/ovsdbapp/backend/ovs_idl/idlutils.py",
> line 128, in get_schema_helper
> 'err': os.strerror(err)})
> Exception: Could not retrieve schema from tcp:127.0.0.1:6641: Unknown
> error -1
>
>
> When i update the ovn provider from the GUI to have
> https://localhost:9696/ and HTTPS as the protocol the test fails.
>
> On Tue, Sep 15, 2020 at 5:35 PM Dominik Holler  wrote:
>
>>
>>
>> On Mon, Sep 14, 2020 at 9:25 AM Konstantinos Betsis 
>> wrote:
>>
>>> Hi Dominik
>>>
>>> When these commands are used on the ovirt-engine host the output is the
>>> one depicted in your email.
>>> For your reference see also below:
>>>
>>> [root@ath01-ovirt01 certs]# ovn-nbctl get-ssl
>>> Private key: /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass
>>> Certificate: /etc/pki/ovirt-engine/certs/ovn-ndb.cer
>>> CA Certificate: /etc/pki/ovirt-engine/ca.pem
>>> Bootstrap: false
>>> [root@ath01-ovirt01 certs]# ovn-nbctl get-connection
>>> ptcp:6641
>>>
>>> [root@ath01-ovirt01 certs]# ovn-sbctl get-ssl
>>> Private key: /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass
>>> Certificate: /etc/pki/ovirt-engine/certs/ovn-sdb.cer
>>> CA Certificate: /etc/pki/ovirt-engine/ca.pem
>>> Bootstrap: false
>>> [root@ath01-ovirt01 certs]# ovn-sbctl get-connection
>>> read-write role="" ptcp:6642
>>>
>>>
>> ^^^ the line above points to the problem: ovn-central is configured to
>> use plain TCP without ssl.
>> engine-setup usually configures ovn-central to use SSL. That the files
>> /etc/pki/ovirt-engine/keys/ovn-* exist, shows,
>> that engine-setup was triggered correctly. Looks like the ovn db was
>> dropped somehow, this should not happen.
>> This can be fixed manually by executing the following commands on
>> e

[ovirt-users] Re: OVN Geneve tunnels not been established

[Konstantinos Betsis]

Hi Dominik

That immediately fixed the geneve tunnels between all hosts.

However, the ovn provider is not broken.
After fixing the networks we tried to move a VM to the DC01-host01 so we
powered it down and simply configured it to run on dc01-node01.

While checking the logs on the ovirt engine i noticed the below:
Failed to synchronize networks of Provider ovirt-provider-ovn.

The ovn-provider configure on the engine is the below:
Name: ovirt-provider-ovn
Description: oVirt network provider for OVN
Type: External Network Provider
Network Plugin: oVirt Network Provider for OVN
Automatic Synchronization: Checked
Unmanaged: Unchecked
Provider URL: http:localhost:9696
Requires Authentication: Checked
Username: admin@internal
Password: "The admin password"
Protocol: hTTP
Host Name: dc02-ovirt01
API Port: 35357
API Version: v2.0
Tenant Name: "Empty"

In the past this was deleted by an engineer and recreated as per the
documentation, and it worked. Do we need to update something due to the SSL
on the ovn?

>From the ovn-provider logs the below is generated after a service restart
and when the start VM is triggered

2020-09-15 15:07:33,579 root Starting server
2020-09-15 15:07:33,579 root Version: 1.2.29-1
2020-09-15 15:07:33,579 root Build date: 20191217125241
2020-09-15 15:07:33,579 root Githash: cb5a80d
2020-09-15 15:08:26,582 root From: :::127.0.0.1:59980 Request: GET
/v2.0/ports
2020-09-15 15:08:26,582 root Could not retrieve schema from tcp:
127.0.0.1:6641: Unknown error -1
Traceback (most recent call last):
  File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line 138,
in _handle_request
method, path_parts, content
  File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py", line
175, in handle_request
return self.call_response_handler(handler, content, parameters)
  File "/usr/share/ovirt-provider-ovn/handlers/neutron.py", line 35, in
call_response_handler
with NeutronApi() as ovn_north:
  File "/usr/share/ovirt-provider-ovn/neutron/neutron_api.py", line 95, in
__init__
self.ovsidl, self.idl = ovn_connection.connect()
  File "/usr/share/ovirt-provider-ovn/ovn_connection.py", line 46, in
connect
ovnconst.OVN_NORTHBOUND
  File
"/usr/lib/python2.7/site-packages/ovsdbapp/backend/ovs_idl/connection.py",
line 127, in from_server
helper = idlutils.get_schema_helper(connection_string, schema_name)
  File
"/usr/lib/python2.7/site-packages/ovsdbapp/backend/ovs_idl/idlutils.py",
line 128, in get_schema_helper
'err': os.strerror(err)})
Exception: Could not retrieve schema from tcp:127.0.0.1:6641: Unknown error
-1


When i update the ovn provider from the GUI to have https://localhost:9696/
and HTTPS as the protocol the test fails.

On Tue, Sep 15, 2020 at 5:35 PM Dominik Holler  wrote:

>
>
> On Mon, Sep 14, 2020 at 9:25 AM Konstantinos Betsis 
> wrote:
>
>> Hi Dominik
>>
>> When these commands are used on the ovirt-engine host the output is the
>> one depicted in your email.
>> For your reference see also below:
>>
>> [root@ath01-ovirt01 certs]# ovn-nbctl get-ssl
>> Private key: /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass
>> Certificate: /etc/pki/ovirt-engine/certs/ovn-ndb.cer
>> CA Certificate: /etc/pki/ovirt-engine/ca.pem
>> Bootstrap: false
>> [root@ath01-ovirt01 certs]# ovn-nbctl get-connection
>> ptcp:6641
>>
>> [root@ath01-ovirt01 certs]# ovn-sbctl get-ssl
>> Private key: /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass
>> Certificate: /etc/pki/ovirt-engine/certs/ovn-sdb.cer
>> CA Certificate: /etc/pki/ovirt-engine/ca.pem
>> Bootstrap: false
>> [root@ath01-ovirt01 certs]# ovn-sbctl get-connection
>> read-write role="" ptcp:6642
>>
>>
> ^^^ the line above points to the problem: ovn-central is configured to use
> plain TCP without ssl.
> engine-setup usually configures ovn-central to use SSL. That the files
> /etc/pki/ovirt-engine/keys/ovn-* exist, shows,
> that engine-setup was triggered correctly. Looks like the ovn db was
> dropped somehow, this should not happen.
> This can be fixed manually by executing the following commands on engine's
> machine:
> ovn-nbctl set-ssl /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass
> /etc/pki/ovirt-engine/certs/ovn-ndb.cer /etc/pki/ovirt-engine/ca.pem
> ovn-nbctl set-connection pssl:6641
> ovn-sbctl set-ssl /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass
> /etc/pki/ovirt-engine/certs/ovn-sdb.cer /etc/pki/ovirt-engine/ca.pem
> ovn-sbctl set-connection pssl:6642
>
> The /var/log/openvswitch/ovn-controller.log on the hosts should tell that
> br-int.mgmt is connected now.
>
>
>
>> [root@ath01-ovirt01 certs]# ls -l /etc/pki/ovirt-engine/keys/ovn-*
>> -rw-r-. 1 root hugetlbfs 1828 Jun 25 11:08
>> /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass
>> -rw---. 1 root root  2893 Jun 25 11:08
>> /etc/pki/ovirt-engine/keys/ovn-ndb.p12
>> -rw-r-. 1 root hugetlbfs 1828 Jun 25 11:08
>> /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass
>> -rw---. 1 root root  2893 Jun 25 11:08
>> /etc/pki/ovirt-engine/keys/ovn-sdb.p12
>>
>> Wh

[ovirt-users] Low Performance (KVM Vs VMware Hypervisor) When running multi-process application

[Ravin Ya]

Hello Everyone,

Please advice. Any help will be highly appreciated. Thank you in advance.

Test Setup:
oVirt Centos 7.8 Virtulization Host
Guest VM Centos 7.8 (Mutiqueue enabled 6 vCPUs with 6 Rx Tx Queues)
The vCPUs are configured for host pass through (Pinned CPU).

The Guest VM runs the application in userspace. The Application consists of the 
parent process that reads packets in raw socket mode from the interface and 
forwards then to child processes (~vCPUs) via IPC (shared memory – pipes). The 
performance (throughput / CPU utilization) that I get with KVM is half of what 
I get with VMware.

Any thoughts on the below observations? Any suggestions? 
KVM Guest VMs degraded performance when running multi-process applications.
High FUTEX time (Seen on the Guest VM when passing traffic).
High SY: System CPU time spent in kernel space (Seen on both Hypervisor and the 
Guest VMs only when running my application.)

-Rav Ya
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QGR367Q6QGSURVY6552JMYESGE2K3H2Y/

[ovirt-users] Low Performance (KVM Vs VMware Hypervisor) When running multi-process application

[Rav Ya]

Hello Everyone,
Please advice. Any help will be highly appreciated. Thank you in advance.
Test Setup:

   1. oVirt Centos 7.8 Virtulization Host
   2. Guest VM Centos 7.8 (Mutiqueue enabled 6 vCPUs with 6 Rx Tx Queues)
   3. The vCPUs are configured for host pass through (Pinned CPU).

The Guest VM runs the application in userspace. The Application consists of
the parent process that reads packets in raw socket mode from the interface
and forwards then to child processes (~vCPUs) via IPC (shared memory –
pipes). *The performance (throughput / CPU utilization) that I get with KVM
is half of what I get with VMware.*

Any thoughts on the below observations? Any suggestions?


   - KVM Guest VMs degraded performance when running multi-process
   applications.
   - High FUTEX time (Seen on the Guest VM when passing traffic).
   - *High SY: *System CPU time spent in kernel space (Seen on both
   Hypervisor and the Guest VMs only when running my application.)


-Rav Ya
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSEUE5VM4UCRT7MT4JLGSCABK7MDXFF4/

[ovirt-users] Re: OVN Geneve tunnels not been established

[Dominik Holler]

On Mon, Sep 14, 2020 at 9:25 AM Konstantinos Betsis 
wrote:

> Hi Dominik
>
> When these commands are used on the ovirt-engine host the output is the
> one depicted in your email.
> For your reference see also below:
>
> [root@ath01-ovirt01 certs]# ovn-nbctl get-ssl
> Private key: /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass
> Certificate: /etc/pki/ovirt-engine/certs/ovn-ndb.cer
> CA Certificate: /etc/pki/ovirt-engine/ca.pem
> Bootstrap: false
> [root@ath01-ovirt01 certs]# ovn-nbctl get-connection
> ptcp:6641
>
> [root@ath01-ovirt01 certs]# ovn-sbctl get-ssl
> Private key: /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass
> Certificate: /etc/pki/ovirt-engine/certs/ovn-sdb.cer
> CA Certificate: /etc/pki/ovirt-engine/ca.pem
> Bootstrap: false
> [root@ath01-ovirt01 certs]# ovn-sbctl get-connection
> read-write role="" ptcp:6642
>
>
^^^ the line above points to the problem: ovn-central is configured to use
plain TCP without ssl.
engine-setup usually configures ovn-central to use SSL. That the files
/etc/pki/ovirt-engine/keys/ovn-* exist, shows,
that engine-setup was triggered correctly. Looks like the ovn db was
dropped somehow, this should not happen.
This can be fixed manually by executing the following commands on engine's
machine:
ovn-nbctl set-ssl /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass
/etc/pki/ovirt-engine/certs/ovn-ndb.cer /etc/pki/ovirt-engine/ca.pem
ovn-nbctl set-connection pssl:6641
ovn-sbctl set-ssl /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass
/etc/pki/ovirt-engine/certs/ovn-sdb.cer /etc/pki/ovirt-engine/ca.pem
ovn-sbctl set-connection pssl:6642

The /var/log/openvswitch/ovn-controller.log on the hosts should tell that
br-int.mgmt is connected now.



> [root@ath01-ovirt01 certs]# ls -l /etc/pki/ovirt-engine/keys/ovn-*
> -rw-r-. 1 root hugetlbfs 1828 Jun 25 11:08
> /etc/pki/ovirt-engine/keys/ovn-ndb.key.nopass
> -rw---. 1 root root  2893 Jun 25 11:08
> /etc/pki/ovirt-engine/keys/ovn-ndb.p12
> -rw-r-. 1 root hugetlbfs 1828 Jun 25 11:08
> /etc/pki/ovirt-engine/keys/ovn-sdb.key.nopass
> -rw---. 1 root root  2893 Jun 25 11:08
> /etc/pki/ovirt-engine/keys/ovn-sdb.p12
>
> When i try the above commands on the node hosts the following happens:
> ovn-nbctl get-ssl / get-connection
> ovn-nbctl: unix:/var/run/openvswitch/ovnnb_db.sock: database connection
> failed (No such file or directory)
> The above i believe is expected since no northbound connections should be
> established from the host nodes.
>
> ovn-sbctl get-ssl /get-connection
> The output is stuck till i terminate it.
>
>
Yes, the ovn-* commands works only on engine's machine, which has the role
ovn-central.
On the hosts, there is only the ovn-controller, which connects the
ovn southbound to openvswitch on the host.


> For the requested logs the below are found in the ovsdb-server-sb.log
>
> 2020-09-14T07:18:38.187Z|219636|reconnect|WARN|tcp:DC02-host01:33146:
> connection dropped (Protocol error)
> 2020-09-14T07:18:41.946Z|219637|reconnect|WARN|tcp:DC01-host01:51188:
> connection dropped (Protocol error)
> 2020-09-14T07:18:43.033Z|219638|reconnect|WARN|tcp:DC01-host02:37044:
> connection dropped (Protocol error)
> 2020-09-14T07:18:46.198Z|219639|reconnect|WARN|tcp:DC02-host01:33148:
> connection dropped (Protocol error)
> 2020-09-14T07:18:50.069Z|219640|jsonrpc|WARN|Dropped 4 log messages in
> last 12 seconds (most recently, 4 seconds ago) due to excessive rate
> 2020-09-14T07:18:50.069Z|219641|jsonrpc|WARN|tcp:DC01-host01:51190: error
> parsing stream: line 0, column 0, byte 0: invalid character U+0016
> 2020-09-14T07:18:50.069Z|219642|jsonrpc|WARN|Dropped 4 log messages in
> last 12 seconds (most recently, 4 seconds ago) due to excessive rate
> 2020-09-14T07:18:50.069Z|219643|jsonrpc|WARN|tcp:DC01-host01:51190:
> received SSL data on JSON-RPC channel
> 2020-09-14T07:18:50.070Z|219644|reconnect|WARN|tcp:DC01-host01:51190:
> connection dropped (Protocol error)
> 2020-09-14T07:18:51.147Z|219645|reconnect|WARN|tcp:DC01-host02:37046:
> connection dropped (Protocol error)
> 2020-09-14T07:18:54.209Z|219646|reconnect|WARN|tcp:DC02-host01:33150:
> connection dropped (Protocol error)
> 2020-09-14T07:18:58.192Z|219647|reconnect|WARN|tcp:DC01-host01:51192:
> connection dropped (Protocol error)
> 2020-09-14T07:18:59.262Z|219648|jsonrpc|WARN|Dropped 3 log messages in
> last 8 seconds (most recently, 1 seconds ago) due to excessive rate
> 2020-09-14T07:18:59.262Z|219649|jsonrpc|WARN|tcp:DC01-host02:37048: error
> parsing stream: line 0, column 0, byte 0: invalid character U+0016
> 2020-09-14T07:18:59.263Z|219650|jsonrpc|WARN|Dropped 3 log messages in
> last 8 seconds (most recently, 1 seconds ago) due to excessive rate
> 2020-09-14T07:18:59.263Z|219651|jsonrpc|WARN|tcp:DC01-host02:37048:
> received SSL data on JSON-RPC channel
> 2020-09-14T07:18:59.263Z|219652|reconnect|WARN|tcp:DC01-host02:37048:
> connection dropped (Protocol error)
> 2020-09-14T07:19:02.220Z|219653|reconnect|WARN|tcp:DC02-host01:33152:
> connection dropped (Pro

[ovirt-users] Re: What is the purpose of memory deflation in oVirt memory ballooning?

[pub . virtualization]

Sorry for the foolish question,
There was a ballooning daemon and memory isn't automatically restored after 
disabling that daemon.

Thanks,
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KXH4GTNYF2WTTNOJ672MYX3GS4E4SVEK/

[ovirt-users] Re: Posts not updating on lists.ovirt.org web site since September 10th?

[Yedidyah Bar David]

On Tue, Sep 15, 2020 at 11:30 AM  wrote:
>
> I can see new posts coming in via e-mail, but updates on the web sites have 
> stopped and posts don't disappear?

There was some issue and it was fixed by the infra team. Thanks for reporting!
-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XUQP6GYWQXIY2R45Q76GYZWPTRULUL37/

[ovirt-users] Re: Disconnected Server has closed the connection.

[info]

It is the latest version oVirt 4.4.1

 

Installing oVirt as a self-hosted engine using the Cockpit web interface

 

 

From: Sandro Bonazzola  
Sent: Tuesday, 15 September 2020 19:10
To: i...@worldhostess.com
Cc: users 
Subject: Re: [ovirt-users] Disconnected Server has closed the connection.

 

 

Il giorno mar 15 set 2020 alle ore 11:45 mailto:i...@worldhostess.com> > ha scritto:

It seems that the installation is all done, but I have a problem. it takes very 
long to open the web pages, plus it disconnect all the time. it is impossible 
to do anything.

I can ping the hostname as I set up a sub-domain for it. to be honest, I am new 
to this and it took me days to get to this point. I think there are some issues 
with my network settings.

if there are any oVirt experts that can check my installation and give me 
advice about how to improve it, it will be greatly appreciated.

I have done an "Installing oVirt as a self-hosted engine using the Cockpit web 
interface"

 

So can we assume you installed oVirt 4.4.1?

 

 


___
Users mailing list -- users@ovirt.org  
To unsubscribe send an email to users-le...@ovirt.org 
 
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:




 

-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

  Red Hat EMEA

  sbona...@redhat.com   


  




Red Hat respects your work life balance. Therefore there is no need to answer 
this email out of your office hours.  


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/J63LL5AXX7Z3YW5KGFMWJVPRHLFC52JT/

[ovirt-users] Re: Enable a cluster node to run the hosted engine

[Yedidyah Bar David]

On Tue, Sep 15, 2020 at 2:40 PM Rapsilber, Marcus
 wrote:
>
> I'm not sure if this log files tells anything about the problem why the node 
> "ipc3.dc" isn't capable to run the hosted engine.
> Today we tried the whole procedure again. But this time we didn't install the 
> new node via single node cluster setup. It was a manual setup of the cluster 
> storage. When we've added the host ("New Host") we made sure that "Hosted 
> engine deployment action" was set to "deploy". Nevertheless we're still not 
> able to allow the new node to run the hosted engine. The grey crown is 
> missing.

What's the output of 'hosted-engine --vm-status' on this host, and on
other hosts (that are ok)?

>
> What is the criteria for a host to be able to run the hosted engine? Is some 
> special service required?
> Do we have to install another package? Or is there an Ansible script that 
> does the required setup?

Generally speaking, it should be fully automatic, if you mark the
checkbox in "Add host", and AFAICT, the log you attached looks ok.

Also:

- The host needs to be in the same DC/cluster, needs to have access to
the shared storage, etc.

You can try to start the services manually, if they are not up:

systemctl status ovirt-ha-broker ovirt-ha-agent
systemctl start ovirt-ha-broker ovirt-ha-agent

- and/or check their logs, in /var/log/ovirt-hosted-engine-ha .

Best regards,

>
> Thanks and greetings
> Marcus
>
> -Ursprüngliche Nachricht-
> Von: Yedidyah Bar David 
> Gesendet: Dienstag, 15. September 2020 09:33
> An: Rapsilber, Marcus 
> Cc: users 
> Betreff: Re: [ovirt-users] Enable a cluster node to run the hosted engine
>
> On Tue, Sep 15, 2020 at 10:10 AM Rapsilber, Marcus 
>  wrote:
> >
> > Hello again,
> >
> > to answer your question, how did I make a clean install and reintegrate the 
> > node in the cluster? Maybe my approach was a bit awkward/inconvenient, but 
> > this is what I did:
> > - Install CentOS 8
> > - Install oVirt Repository and packages: cockpit-ovirt-dashboard,
> > vdsm-gluster, ovirt-host
> > - Remove the Gluster bricks of the old node from the
> > data/engine/vmstore volumes
> > - Process a single cluster node installation on the new node via the
> > oVirt Dashboard, in order to setup Gluster and the bricks
> > (hosted-engine setup was skipped)
> > - On the new node: Delete the vmstore/engine/data volumes and the file
> > metadata in the bricks folder
> > - Added the bricks to the volumes of the existing cluster again
> > - Added the host to the cluster
> >
> > Would you suggest a better approach to setup a new node for an existing 
> > cluster?
>
> Sorry, I have no experience with gluster, so can't comment on your particular 
> steps, although they sound reasonable.
> the main missing thing is enabling hosted-engine when adding the host to the 
> engine.
>
> >
> > At this point I'm not sure if I just overlooked the "hosted engine 
> > deployment action" when I've added the new host. Unfortunately I cannot try 
> > to edit the host anymore since my colleague did another reinstall of the 
> > node.
>
> Very well.
>
> If this happens again, please tell us.
>
> Best regards,
>
> >
> > Thanks so far and greetings,
> > Marcus
> >
> > -Ursprüngliche Nachricht-
> > Von: Yedidyah Bar David 
> > Gesendet: Montag, 14. September 2020 10:56
> > An: Rapsilber, Marcus 
> > Cc: users 
> > Betreff: Re: [ovirt-users] Enable a cluster node to run the hosted
> > engine
> >
> > On Mon, Sep 14, 2020 at 11:18 AM  wrote:
> > >
> > > Hi there,
> > >
> > > currently my team is evaluating oVirt and we're also testing several fail 
> > > scenarios, backup and so on.
> > > One scenario was:
> > > - hyperconverged oVirt cluster with 3 nodes
> > > - self-hosted engine
> > > - simulate the break down of one of the nodes by power off
> > > - to replace it make a clean install of a new node and reintegrate
> > > it in the cluster
> >
> > How exactly did you do that?
> >
> > >
> > > Actually everything worked out fine. The new installed node and related 
> > > bricks (vmstore, data, engine) were added to the existing Gluster storage 
> > > and it was added to the oVirt cluster (as host).
> > >
> > > But there's one remaining problem: The new host doesn't have the grey 
> > > crown, which means it's unable to run the hosted engine. How can I 
> > > achieve that?
> > > I also found out that the ovirt-ha-agent and ovirt-ha-broker isn't 
> > > started/enabled on that node. Reason is that the 
> > > /etc/ovirt-hosted-engine/hosted-engine.conf doesn't exist. I guess this 
> > > is not only a problem concerning the hosted engine, but also for HA VM's.
> >
> > When you add a host to the engine, one of the options in the dialog is to 
> > deploy it as a hosted-engine.
> > If you don't, you won't get this crown, nor these services, nor its status 
> > in 'hosted-engine --vm-status'.
> >
> > If you didn't, perhaps try to move to maintenance and reinstall, adding 
> > this option.
> >
> > If you did choose it, that's perh

[ovirt-users] Re: Disconnected Server has closed the connection.

[Sandro Bonazzola]

Il giorno mar 15 set 2020 alle ore 11:45  ha scritto:

> It seems that the installation is all done, but I have a problem. it takes
> very long to open the web pages, plus it disconnect all the time. it is
> impossible to do anything.
>
> I can ping the hostname as I set up a sub-domain for it. to be honest, I
> am new to this and it took me days to get to this point. I think there are
> some issues with my network settings.
>
> if there are any oVirt experts that can check my installation and give me
> advice about how to improve it, it will be greatly appreciated.
>
> I have done an "Installing oVirt as a self-hosted engine using the Cockpit
> web interface"
>

So can we assume you installed oVirt 4.4.1?



>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
>


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com


*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
*
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Re: Any eta for 4.4.2 final?

[Sandro Bonazzola]

Il giorno mar 15 set 2020 alle ore 12:40 Nir Soffer  ha
scritto:

> On Tue, Sep 15, 2020 at 12:35 PM Gianluca Cecchi
>  wrote:
> >
> > Hello,
> > I would like to upgrade a 4.4.0 environment to the latest 4.4.2 when
> available.
> > Any indication if there are any show stoppers after the rc5 released on
> 27th of August
>
> This blocks the release:
> https://bugzilla.redhat.com/1837864
>
> > or any eta about other release candidates?
>
> Sandro may have more info.
>
> Nir
>
>
We are building what I hope will be the final build today, we'll need to
give it some testing so it will take a couple of days.


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com


*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
*
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Re: oVirt disk disappeared after importing iSCSI domain

[Pavel Bar]

Hi,
Can you please:
1) Check whether the LV is visible from the host and whether it appears in
the database.
2) Send us the logs (both engine and vdsm).

Thank you in advance!

Pavel

On Thu, Sep 10, 2020 at 10:47 AM gantonjo-ovirt--- via Users <
users@ovirt.org> wrote:

> Hi all oVirt experts.
>
> So, I managed to f.. up a VM today. I had one VM running on a oVirt 4.3
> cluster, where the disk was located on an iSCSI data domain. I stopped the
> VM, put the storage domain in maintenance mode, detached adn removed the
> storage domain from the ovirt 4.3 cluster.
>
> Then I imported the storage domain to our new oVirt 4.4.1 cluster, let the
> process convert it from V4 to V5 format and activated the storage domain in
> the new cluster. Entering the information page for the imported storage
> domain, I expected to see "Import VM" and "Import Disk" menus, but these
> menues did not appear as they did for other storage domains that I
> successfully had moved from old to new cluster.
>
> Clicking "Scan Disks" did not help either.
>
> So, now I am stuck with a storage domain where the VM's disk is located,
> but oVirt is not able to see the disk.
>
> What can I do to recover the lost disk from the storage domain? Any CLI
> commands available in ovirt 4.4.1 would be nice.
>
> Thanks in advance for your quick and good help.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/STKSZC3XHZWEQKFWPU4YMFIZ3NWP3KCH/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Re: Any eta for 4.4.2 final?

[Nir Soffer]

On Tue, Sep 15, 2020 at 12:35 PM Gianluca Cecchi
 wrote:
>
> Hello,
> I would like to upgrade a 4.4.0 environment to the latest 4.4.2 when 
> available.
> Any indication if there are any show stoppers after the rc5 released on 27th 
> of August

This blocks the release:
https://bugzilla.redhat.com/1837864

> or any eta about other release candidates?

Sandro may have more info.

Nir
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Re: Any eta for 4.4.2 final?

[Yedidyah Bar David]

On Tue, Sep 15, 2020 at 12:36 PM Gianluca Cecchi
 wrote:
>
> Hello,
> I would like to upgrade a 4.4.0 environment to the latest 4.4.2 when 
> available.
> Any indication if there are any show stoppers after the rc5 released on 27th 
> of August or any eta about other release candidates?

I am aware of:

https://bugzilla.redhat.com/1877790

You can also follow devel@ list - engine 4.4.2.6 tag was posted there.

Best regards,
-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Disconnected Server has closed the connection.

[info]

It seems that the installation is all done, but I have a problem. it takes very 
long to open the web pages, plus it disconnect all the time. it is impossible 
to do anything.

I can ping the hostname as I set up a sub-domain for it. to be honest, I am new 
to this and it took me days to get to this point. I think there are some issues 
with my network settings.

if there are any oVirt experts that can check my installation and give me 
advice about how to improve it, it will be greatly appreciated.

I have done an "Installing oVirt as a self-hosted engine using the Cockpit web 
interface"

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Re: i cannot access to ovirt-engine with this error"sun.security.validator.validatorexception: pkix path validation failed: java.security.cert.certpathvalidatorexception: timestamp check

[Yedidyah Bar David]

On Tue, Sep 15, 2020 at 11:47 AM momokch--- via Users  wrote:
>
> hello everyone,
>
> I apologize for asking what is probably a very basic question.
> when i login to my ovirt-engine webpage, the page show 
> "sun.security.validator.validatorexception: pkix path validation failed: 
> java.security.cert.certpathvalidatorexception: timestamp check failed"
> does anyone face it before and how to solve it
>
> the site is normal before which error message is just show near a month

Did you change the httpd cert, or are you using the default one
(created by engine-setup)?

Did you check the certificates for validity/expiry?

Searching the net for your error message finds many relevant
cases/solutions/etc., e.g.:

https://www.endpoint.com/blog/2017/10/04/pkix-path-validation-failed-debugging

Adding Martin.

Best regards,
-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Any eta for 4.4.2 final?

[Gianluca Cecchi]

Hello,
I would like to upgrade a 4.4.0 environment to the latest 4.4.2 when
available.
Any indication if there are any show stoppers after the rc5 released on
27th of August or any eta about other release candidates?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] i cannot access to ovirt-engine with this error"sun.security.validator.validatorexception: pkix path validation failed: java.security.cert.certpathvalidatorexception: timestamp check fai

[momokch--- via Users]

hello everyone,

I apologize for asking what is probably a very basic question.
when i login to my ovirt-engine webpage, the page show 
"sun.security.validator.validatorexception: pkix path validation failed: 
java.security.cert.certpathvalidatorexception: timestamp check failed"
does anyone face it before and how to solve it

the site is normal before which error message is just show near a month

Yours Sincerely,
school it
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Posts not updating on lists.ovirt.org web site since September 10th?

[thomas]

I can see new posts coming in via e-mail, but updates on the web sites have 
stopped and posts don't disappear?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Unable to create a node in oVirt 4.0

[Rodrigo G . López]

Hi there,

We are trying to setup a node in the same machine where we are running 
the engine, and noticed that the vdsmd service fails because the 
supervdsmd daemon can't authenticate against libvirtd afaict.


The error is the following on supervdsmd:

    daemonAdapter[17803]: libvirt: XML-RPC error : authentication 
failed: authentication failed

    ...

and in libvirtd:

    Sep 15 03:34:18 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:18.410+: 17775: error : virNetSocketReadWire:1806 : End of 
file while reading data: Input/output error
    Sep 15 03:34:18 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:18.612+: 17776: error : virNetSASLSessionListMechanisms:393 : 
internal error: cannot list SASL mechanisms -4 (SASL(-4): no mechanism 
available: Internal Error -4 in server.c near line 1757)
    Sep 15 03:34:18 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:18.612+: 17776: error : remoteDispatchAuthSaslInit:3440 : 
authentication failed: authentication failed
    Sep 15 03:34:18 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:18.612+: 17775: error : virNetSocketReadWire:1806 : End of 
file while reading data: Input/output error
    Sep 15 03:34:18 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:18.814+: 17778: error : virNetSASLSessionListMechanisms:393 : 
internal error: cannot list SASL mechanisms -4 (SASL(-4): no mechanism 
available: Internal Error -4 in server.c near line 1757)
    Sep 15 03:34:18 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:18.814+: 17778: error : remoteDispatchAuthSaslInit:3440 : 
authentication failed: authentication failed
    Sep 15 03:34:18 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:18.815+: 17775: error : virNetSocketReadWire:1806 : End of 
file while reading data: Input/output error
    Sep 15 03:34:19 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:19.017+: 17780: error : virNetSASLSessionListMechanisms:393 : 
internal error: cannot list SASL mechanisms -4 (SASL(-4): no mechanism 
available: Internal Error -4 in server.c near line 1757)
    Sep 15 03:34:19 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:19.017+: 17780: error : remoteDispatchAuthSaslInit:3440 : 
authentication failed: authentication failed
    Sep 15 03:34:19 ovirt-test libvirtd[17775]: 2020-09-15 
07:34:19.020+: 17775: error : virNetSocketReadWire:1806 : End of 
file while reading data: Input/output error



Is there any way to work around that?

We have working infra on top of 4.0 in CentOS 7 systems, and we would 
like to replicate the exact same environment for availability purposes, 
in case anything bad happened.




Best regards,

-rodri

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Re: Enable a cluster node to run the hosted engine

[Rapsilber, Marcus]

Hello again,

to answer your question, how did I make a clean install and reintegrate the 
node in the cluster? Maybe my approach was a bit awkward/inconvenient, but this 
is what I did:
- Install CentOS 8
- Install oVirt Repository and packages: cockpit-ovirt-dashboard, vdsm-gluster, 
ovirt-host
- Remove the Gluster bricks of the old node from the data/engine/vmstore volumes
- Process a single cluster node installation on the new node via the oVirt 
Dashboard, in order to setup Gluster and the bricks (hosted-engine setup was 
skipped)
- On the new node: Delete the vmstore/engine/data volumes and the file metadata 
in the bricks folder
- Added the bricks to the volumes of the existing cluster again
- Added the host to the cluster

Would you suggest a better approach to setup a new node for an existing cluster?

At this point I'm not sure if I just overlooked the "hosted engine deployment 
action" when I've added the new host. Unfortunately I cannot try to edit the 
host anymore since my colleague did another reinstall of the node.

Thanks so far and greetings,
Marcus

-Ursprüngliche Nachricht-
Von: Yedidyah Bar David  
Gesendet: Montag, 14. September 2020 10:56
An: Rapsilber, Marcus 
Cc: users 
Betreff: Re: [ovirt-users] Enable a cluster node to run the hosted engine

On Mon, Sep 14, 2020 at 11:18 AM  wrote:
>
> Hi there,
>
> currently my team is evaluating oVirt and we're also testing several fail 
> scenarios, backup and so on.
> One scenario was:
> - hyperconverged oVirt cluster with 3 nodes
> - self-hosted engine
> - simulate the break down of one of the nodes by power off
> - to replace it make a clean install of a new node and reintegrate it 
> in the cluster

How exactly did you do that?

>
> Actually everything worked out fine. The new installed node and related 
> bricks (vmstore, data, engine) were added to the existing Gluster storage and 
> it was added to the oVirt cluster (as host).
>
> But there's one remaining problem: The new host doesn't have the grey crown, 
> which means it's unable to run the hosted engine. How can I achieve that?
> I also found out that the ovirt-ha-agent and ovirt-ha-broker isn't 
> started/enabled on that node. Reason is that the 
> /etc/ovirt-hosted-engine/hosted-engine.conf doesn't exist. I guess this is 
> not only a problem concerning the hosted engine, but also for HA VM's.

When you add a host to the engine, one of the options in the dialog is to 
deploy it as a hosted-engine.
If you don't, you won't get this crown, nor these services, nor its status in 
'hosted-engine --vm-status'.

If you didn't, perhaps try to move to maintenance and reinstall, adding this 
option.

If you did choose it, that's perhaps a bug - please check/share relevant logs 
(e.g. in /var/log/ovirt-engine, including host-deploy/).

Best regards,

>
> Thank you for any advice and greetings, Marcus 
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org Privacy 
> Statement: 
> https://protection.retarus.com/v1?u=https%3A%2F%2Fwww.ovirt.org%2Fpriv
> acy-policy.html&c=3ilYjgr&r=338RVlOwLz6SWhhP16s8RO&k=7s1&s=i9ZtAxZ4Hjh
> a7cyQljzYgZoSsOuJ5qnJkh0cU75rfgL oVirt Code of Conduct: 
> https://protection.retarus.com/v1?u=https%3A%2F%2Fwww.ovirt.org%2Fcomm
> unity%2Fabout%2Fcommunity-guidelines%2F&c=3ilYjgr&r=5VIqhyv90pUj07OGZz
> 9qix&k=7s1&s=UiOTbmf9BSOB46ff91IjO7G8dkMWHzi2GOIcveqAySn
> List Archives:



--
Didi

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] Re: Enable a cluster node to run the hosted engine

[Yedidyah Bar David]

On Tue, Sep 15, 2020 at 10:10 AM Rapsilber, Marcus
 wrote:
>
> Hello again,
>
> to answer your question, how did I make a clean install and reintegrate the 
> node in the cluster? Maybe my approach was a bit awkward/inconvenient, but 
> this is what I did:
> - Install CentOS 8
> - Install oVirt Repository and packages: cockpit-ovirt-dashboard, 
> vdsm-gluster, ovirt-host
> - Remove the Gluster bricks of the old node from the data/engine/vmstore 
> volumes
> - Process a single cluster node installation on the new node via the oVirt 
> Dashboard, in order to setup Gluster and the bricks (hosted-engine setup was 
> skipped)
> - On the new node: Delete the vmstore/engine/data volumes and the file 
> metadata in the bricks folder
> - Added the bricks to the volumes of the existing cluster again
> - Added the host to the cluster
>
> Would you suggest a better approach to setup a new node for an existing 
> cluster?

Sorry, I have no experience with gluster, so can't comment on your
particular steps, although they sound reasonable.
the main missing thing is enabling hosted-engine when adding the host
to the engine.

>
> At this point I'm not sure if I just overlooked the "hosted engine deployment 
> action" when I've added the new host. Unfortunately I cannot try to edit the 
> host anymore since my colleague did another reinstall of the node.

Very well.

If this happens again, please tell us.

Best regards,

>
> Thanks so far and greetings,
> Marcus
>
> -Ursprüngliche Nachricht-
> Von: Yedidyah Bar David 
> Gesendet: Montag, 14. September 2020 10:56
> An: Rapsilber, Marcus 
> Cc: users 
> Betreff: Re: [ovirt-users] Enable a cluster node to run the hosted engine
>
> On Mon, Sep 14, 2020 at 11:18 AM  wrote:
> >
> > Hi there,
> >
> > currently my team is evaluating oVirt and we're also testing several fail 
> > scenarios, backup and so on.
> > One scenario was:
> > - hyperconverged oVirt cluster with 3 nodes
> > - self-hosted engine
> > - simulate the break down of one of the nodes by power off
> > - to replace it make a clean install of a new node and reintegrate it
> > in the cluster
>
> How exactly did you do that?
>
> >
> > Actually everything worked out fine. The new installed node and related 
> > bricks (vmstore, data, engine) were added to the existing Gluster storage 
> > and it was added to the oVirt cluster (as host).
> >
> > But there's one remaining problem: The new host doesn't have the grey 
> > crown, which means it's unable to run the hosted engine. How can I achieve 
> > that?
> > I also found out that the ovirt-ha-agent and ovirt-ha-broker isn't 
> > started/enabled on that node. Reason is that the 
> > /etc/ovirt-hosted-engine/hosted-engine.conf doesn't exist. I guess this is 
> > not only a problem concerning the hosted engine, but also for HA VM's.
>
> When you add a host to the engine, one of the options in the dialog is to 
> deploy it as a hosted-engine.
> If you don't, you won't get this crown, nor these services, nor its status in 
> 'hosted-engine --vm-status'.
>
> If you didn't, perhaps try to move to maintenance and reinstall, adding this 
> option.
>
> If you did choose it, that's perhaps a bug - please check/share relevant logs 
> (e.g. in /var/log/ovirt-engine, including host-deploy/).
>
> Best regards,
>
> >
> > Thank you for any advice and greetings, Marcus
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org Privacy
> > Statement:
> > https://protection.retarus.com/v1?u=https%3A%2F%2Fwww.ovirt.org%2Fpriv
> > acy-policy.html&c=3ilYjgr&r=338RVlOwLz6SWhhP16s8RO&k=7s1&s=i9ZtAxZ4Hjh
> > a7cyQljzYgZoSsOuJ5qnJkh0cU75rfgL oVirt Code of Conduct:
> > https://protection.retarus.com/v1?u=https%3A%2F%2Fwww.ovirt.org%2Fcomm
> > unity%2Fabout%2Fcommunity-guidelines%2F&c=3ilYjgr&r=5VIqhyv90pUj07OGZz
> > 9qix&k=7s1&s=UiOTbmf9BSOB46ff91IjO7G8dkMWHzi2GOIcveqAySn
> > List Archives:
>
>
>
> --
> Didi
>


-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

[ovirt-users] cpu QoS doesn't work

[pub . virtualization]

Hello,

I set cpu QoS as 10 and applied it to VM on oVirt 4.2, but it doesn't seem to 
work.
compared to VM without QoS, there wasn't any difference in cpu usage.
Also, there wasn't any ... or ... field related 
to QoS in libvirt file.

is it right result??

Thanks,
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: