[ovirt-users] oVirt 4.2: hostdev passthrough not working any more
Hello, yesterday I upgraded to 4.2.0 from 4.1.8. Now I notice I cannot assign host dev pass though any more; in the GUI the 'Pinnded to host' list is empty; I cannot select any host for pass through host pinning. When I was creating the particular VM in 4.1 it was working as expected. The hostdev from before the upgrades are still present. I tried to remove them and got an NPE (see below). As a workaround, is the old hostusb[1] method I know back from 3.x still working in the 4.x line? AFAICT IOMMU is working > dmesg | grep -e DMAR -e IOMMU > [0.00] ACPI: DMAR 7b7e7000 002C6 (v01 HP ProLiant > 0001 HP 0001) > [0.168032] DMAR: Host address width 46 > [0.168034] DMAR: DRHD base: 0x00fbffc000 flags: 0x0 > [0.168047] DMAR: dmar0: reg_base_addr fbffc000 ver 1:0 cap > 8d2078c106f0466 ecap f020de > [0.168050] DMAR: DRHD base: 0x00c7ffc000 flags: 0x1 > [0.168061] DMAR: dmar1: reg_base_addr c7ffc000 ver 1:0 cap > 8d2078c106f0466 ecap f020de > [0.168063] DMAR: RMRR base: 0x0079174000 end: 0x0079176fff > [0.168065] DMAR: RMRR base: 0x00791f4000 end: 0x00791f7fff > [0.168067] DMAR: RMRR base: 0x00791de000 end: 0x00791f3fff > [0.168070] DMAR: RMRR base: 0x00791cb000 end: 0x00791dbfff > [0.168071] DMAR: RMRR base: 0x00791dc000 end: 0x00791ddfff > [0.168073] DMAR: ATSR flags: 0x0 > [0.168075] DMAR: ATSR flags: 0x0 > [0.168079] DMAR-IR: IOAPIC id 10 under DRHD base 0xfbffc000 IOMMU 0 > [0.168082] DMAR-IR: IOAPIC id 8 under DRHD base 0xc7ffc000 IOMMU 1 > [0.168084] DMAR-IR: IOAPIC id 9 under DRHD base 0xc7ffc000 IOMMU 1 > [0.168086] DMAR-IR: HPET id 0 under DRHD base 0xc7ffc000 > [0.168088] DMAR-IR: Queued invalidation will be enabled to support x2apic > and Intr-remapping. > [0.169073] DMAR-IR: Enabled IRQ remapping in x2apic mode Thanks, [1] https://www.ovirt.org/develop/release-management/features/virt/hostusb/ -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN > 2018-01-17 11:37:51,035+01 INFO > [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default > task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Running command: > RemoveVmHostDevicesCommand internal: false. Entities affected : ID: > 6132322b-e187-4a83-b8c1-0477bde10497 Type: VMAction group > EDIT_ADMIN_VM_PROPERTIES with role type ADMIN > 2018-01-17 11:37:51,037+01 ERROR > [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default > task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Command > 'org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand' failed: null > 2018-01-17 11:37:51,037+01 ERROR > [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default > task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Exception: > java.lang.NullPointerException > at > org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand.executeCommand(RemoveVmHostDevicesCommand.java:64) > [bll.jar:] > at > org.ovirt.engine.core.bll.CommandBase.executeWithoutTransaction(CommandBase.java:1205) > [bll.jar:] > at > org.ovirt.engine.core.bll.CommandBase.executeActionInTransactionScope(CommandBase.java:1345) > [bll.jar:] > at > org.ovirt.engine.core.bll.CommandBase.runInTransaction(CommandBase.java:1987) > [bll.jar:] > at > org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInNewTransaction(TransactionSupport.java:202) > [utils.jar:] > at > org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInRequired(TransactionSupport.java:137) > [utils.jar:] > at > org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:105) > [utils.jar:] > at org.ovirt.engine.core.bll.CommandBase.execute(CommandBase.java:1405) > [bll.jar:] > at > org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:412) > [bll.jar:] > at > org.ovirt.engine.core.bll.executor.DefaultBackendActionExecutor.execute(DefaultBackendActionExecutor.java:13) > [bll.jar:] > at org.ovirt.engine.core.bll.Backend.runAction(Backend.java:509) > [bll.jar:] > at org.ovirt.engine.core.bll.Backend.runActionImpl(Backend.java:491) > [bll.jar:] > at org.ovirt.engine.core.bll.Backend.runAction(Backend.java:444) > [bll.jar:] > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > [rt.jar:1.8.0_151] > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > [rt.jar:1.8.0_151] > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.jav
[ovirt-users] oVirt 4.2: hostdev passthrough noop
Hello, yesterday I upgraded to 4.2 from 4.1.8. Now I notice I cannot assign host dev pass though any more; in the GUI the 'Pinnded to host' list is empty. The hostdev from before the upgrades are still present. I tried to remove them and got an NPE (see below). Has anyone an idea? --- > 2018-01-17 11:37:51,035+01 INFO [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Running command: RemoveVmHostDevicesCommand internal: false. Entities affected : ID: 6132322b-e187-4a83-b8c1-0477bde10497 Type: VMAction group EDIT_ADMIN_VM_PROPERTIES with role type ADMIN > 2018-01-17 11:37:51,037+01 ERROR > [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default > task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Command > 'org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand' failed: null > 2018-01-17 11:37:51,037+01 ERROR > [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default > task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Exception: > java.lang.NullPointerException > at > org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand.executeCommand(RemoveVmHostDevicesCommand.java:64) > [bll.jar:] > at > org.ovirt.engine.core.bll.CommandBase.executeWithoutTransaction(CommandBase.java:1205) > [bll.jar:] > at > org.ovirt.engine.core.bll.CommandBase.executeActionInTransactionScope(CommandBase.java:1345) > [bll.jar:] > at > org.ovirt.engine.core.bll.CommandBase.runInTransaction(CommandBase.java:1987) > [bll.jar:] > at > org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInNewTransaction(TransactionSupport.java:202) > [utils.jar:] > at > org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInRequired(TransactionSupport.java:137) > [utils.jar:] > at > org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:105) > [utils.jar:] > at org.ovirt.engine.core.bll.CommandBase.execute(CommandBase.java:1405) > [bll.jar:] > at > org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:412) > [bll.jar:] > at > org.ovirt.engine.core.bll.executor.DefaultBackendActionExecutor.execute(DefaultBackendActionExecutor.java:13) > [bll.jar:] > at org.ovirt.engine.core.bll.Backend.runAction(Backend.java:509) > [bll.jar:] > at org.ovirt.engine.core.bll.Backend.runActionImpl(Backend.java:491) > [bll.jar:] > at org.ovirt.engine.core.bll.Backend.runAction(Backend.java:444) > [bll.jar:] > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > [rt.jar:1.8.0_151] > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > [rt.jar:1.8.0_151] > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > [rt.jar:1.8.0_151] > at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_151] > at > org.jboss.as.ee.component.ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptor.java:52) > at > org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422) > at > org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:509) > at > org.jboss.as.weld.ejb.DelegatingInterceptorInvocationContext.proceed(DelegatingInterceptorInvocationContext.java:92) > [wildfly-weld-ejb-11.0.0.Final.jar:11.0.0.Final] > at > org.jboss.weld.interceptor.proxy.WeldInvocationContext.interceptorChainCompleted(WeldInvocationContext.java:98) > [weld-core-impl-2.4.3.Final.jar:2.4.3.Final] > at > org.jboss.weld.interceptor.proxy.WeldInvocationContext.proceed(WeldInvocationContext.java:117) > [weld-core-impl-2.4.3.Final.jar:2.4.3.Final] > at > org.ovirt.engine.core.common.di.interceptor.LoggingInterceptor.apply(LoggingInterceptor.java:12) > [common.jar:] > at sun.reflect.GeneratedMethodAccessor67.invoke(Unknown Source) > [:1.8.0_151] > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > [rt.jar:1.8.0_151] > at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_151] > at > org.jboss.weld.interceptor.reader.SimpleInterceptorInvocation$SimpleMethodInvocation.invoke(SimpleInterceptorInvocation.java:73) > [weld-core-impl-2.4.3.Final.jar:2.4.3.Final] > at > org.jboss.weld.interceptor.proxy.WeldInvocationContext.invokeNext(WeldInvocationContext.java:83) > [weld-core-impl-2.4.3.Final.jar:2.4.3.Final] > at > org.jboss.weld.interceptor.proxy.WeldInvocationContext.proceed(WeldInvocationContext.java:115) > [weld-core-impl-2.4.3.Final.jar:2.4.3.Final] > at > org.jboss.weld.bean.InterceptorImpl.intercept(InterceptorImpl.java:108) > [weld-core-impl-2.4.3.Final.jar:2.4.3.Final] > at >
Re: [ovirt-users] [SPAM] [OT] Gmail is marking the list as spam.
On 11/16/2015 06:30 PM, Juan Pablo Lorier wrote: > Hi, > > Someone may take a look at the spam policy of Gmail to see what is not > been done as it's been months since I have to get the mails from spam > folder no matter how much I try to get them as legitime. > Regards At least ovirt.org seems to have an ipv6 SPF softfail: On my Mailserver, running dual stack, I get: Received-SPF: SoftFail domain of transitioning users-boun...@ovirt.org discourages use of 2600:3c01::f03c:91ff:fe93:4b0d as permitted sender Doing some 'dig'-ging reveals a faulty/missing IPv6 SPF while 'lists.ovirt.org' is sending mails via IPv6: nslookup 2600:3c01::f03c:91ff:fe93:4b0d Non-authoritative answer: d.0.b.4.3.9.e.f.f.f.1.9.c.3.0.f.0.0.0.0.0.0.0.0.1.0.c.3.0.0.6.2.ip6.arpa name = lists.ovirt.org. But: dig ovirt.org TXT +short "v=spf1 a:linode01.ovirt.org a:lists.ovirt.org ~all" and: dig lists.ovirt.org +short linode01.ovirt.org. dig lists.ovirt.org A +short linode01.ovirt.org. 173.255.252.138 > > El 22/10/15 a las 12:24 p.m., users-requ...@ovirt.org escribió: >> Send Users mailing list submissions to >> users@ovirt.org >> >> To subscribe or unsubscribe via the World Wide Web, visit >> http://lists.ovirt.org/mailman/listinfo/users >> or, via email, send a message with subject or body 'help' to >> users-requ...@ovirt.org >> >> You can reach the person managing the list at >> users-ow...@ovirt.org >> >> When replying, please edit your Subject line so it is more specific >> than "Re: Contents of Users digest..." >> >> >> Today's Topics: >> >> 1. [ANN] oVirt 3.6.0 Third Release Candidate is now available >>for testing (Sandro Bonazzola) >> 2. Re: Testing self hosted engine in 3.6: hostname not resolved >>error (Gianluca Cecchi) >> 3. Re: 3.6 upgrade issue (Yaniv Dary) >> 4. Re: How to change the hosted engine VM RAM size after >>deploying (Simone Tiraboschi) >> >> >> -- >> >> Message: 1 >> Date: Thu, 22 Oct 2015 16:08:25 +0200 >> From: Sandro Bonazzola>> To: annou...@ovirt.org, users , devel >> >> Subject: [ovirt-users] [ANN] oVirt 3.6.0 Third Release Candidate is >> now available for testing >> Message-ID: >>
Re: [ovirt-users] MAC address recycling
On 02.10.2015 07:54, Martin Mucha wrote: > > > - Original Message - >> >> >> On 27.09.2015 12:25, Martin Mucha wrote: >>> Hi, >>> >>> danken, I do not remember I saw such a bug. >>> >>> In 3.5 and 3.6 there was some changes in MAC pool implementation and usage >>> in system, but order, in which macs are assigned remained unchanged. Yes, >>> if you request MAC from pool, return it, and request again, you will >>> always end up with same mac. >>> >>> when looking for available mac in pool, we iterate through available ranges >>> selecting first one with some available mac: >>> org.ovirt.engine.core.bll.network.macpoolmanager.MacsStorage#getRangeWithAvailableMac >>> >>> and select 'leftmost' available mac from it: >>> org.ovirt.engine.core.bll.network.macpoolmanager.Range#findUnusedMac >> >> Thanks clearing up this behaviour! >> >> I would open an RFE? > > Yes, please. I'm currently on PTO, and this has to be planned anyways (and > that's not done by me). Please specify there as well whether depicted > solution I wrote about in last mail would be fine to you, or whether you > actually need some delaying. I believe new methods for replacing should be > ideal solution, but I don't know all your constraints and I did not look > sufficiently thoroughly into code to be sure how easy/problematic it is. > FYI: https://bugzilla.redhat.com/show_bug.cgi?id=1269301 >> >>> >>> I understand your problem, we can either a) impose some delay for returning >>> macs to pool or b)randomize acquiring macs, but we should as well specify, >>> how should system behave, when there are not sufficient macs in system. >>> Since when there are small amount of macs left, a) will block other >>> requests for mac while there's no need to do so and b) will return same >>> mac anyways, if there's just one left. And even worse, with low number of >>> available mac (for example 5) and randomized selection it may work/fail >>> unpredictably. >>> >>> Maybe more proper would be creating new method on mac pool, requiring 'mac >>> renew/replace' — that's the actual usecase you need; not >>> delaying/randomizing. You need different mac. Method like "I want some MAC >>> address(es), but not this one(s); Returned mac addresses would be >>> immediately available for others, and search for another mac can sensibly >>> fail (this mac address cannot be replaced, there isnt another one) >>> >>> M. >>> >>> - Original Message - >>>> On Thu, Sep 24, 2015 at 01:39:42PM +, Daniel Helgenberger wrote: >>>>> Hello, >>>>> >>>>> I recently experienced an issue with mac address uses in ovirt with >>>>> foreman[1]. >>>>> >>>>> Bottom line, a mac address was recycled causing an issue where I could >>>>> not >>>>> rebuild a host because of a stale DHCP reservation record. >>>>> >>>>> What is the current behavior regarding the reuse of MAC addresses for new >>>>> VMs? >>>>> Can I somehow delay a the recycle of a MAC? >>>> >>>> Martin, I recall we had a bug asking not to immediately re-use a >>>> recently-released MAC address. Was this possible? >>>> >>> >> >> -- >> Daniel Helgenberger >> m box bewegtbild GmbH >> >> P: +49/30/2408781-22 >> F: +49/30/2408781-10 >> >> ACKERSTR. 19 >> D-10115 BERLIN >> >> >> www.m-box.de www.monkeymen.tv >> >> Geschäftsführer: Martin Retschitzegger / Michaela Göllner >> Handeslregister: Amtsgericht Charlottenburg / HRB 112767 >> > -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Add external provider (Failed with error PROVIDER_FAILURE and code 5050) foreman 1.9
Sorry for the delay; was working out of town. On 25.09.2015 16:14, Nathanaël Blanchet wrote: > Thanks for answering, so what am I supposed to do? regenerating foreman > certificate? This depends on your engine os; try one of those hints http://kb.kerio.com/product/kerio-connect/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html > > Le 25/09/2015 15:44, Daniel Helgenberger a écrit : >> Just a guess: I had the same issue. It turned out foreman cert / ca was not >> trusted.. >> >> On 25.09.2015 08:50, Nathanaël Blanchet wrote: >>> Hello, >>> I have a working foreman 1.9.1 installed with katello 2.3. >>> As required, ruby193-rubygem-ovirt_provision_plugin-1.0.1-1.el7 is also >>> installed on the same host. >>> But the issue is the same as below when testing in "add external >>> provider" from ovirt 3.5.4. >>> Is it a known bug? >>> _______ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> > -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] vm provisionning with foreman/ovirt
Hello Nathanaël, On 28.09.2015 14:42, Nathanaël Blanchet wrote: > Hi Yaniv, > > I successfully tested the foreman integration with ovirt 3.5 for host > provisionning, but I'm now so much interested in the vm provisionning > during the vm creation with a PXE boot on a kickstart file generated by > foreman. > I've tested the vm provisionning in the foreman side with computer > resource and all works as expected. But to my mind, it would be easier > to deal this workflow with ovirt as a unique interface. Is there some > current work to implement this into ovirt? > There is quite a difference in the goals of ovirt and foreman. I do think there will never be such a feature in ovirt; foreman is live cycle and ovirt compute. This is why on our site, for instance, users use Foreman as frontend while admins use oVirt directly. However, it is quite easy to add existing VMs back to foreman: In foreman, head to compute providers, ovrit, 'associate vms' -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Some VMs in status "not responding" in oVirt interface
Hello Christian, just a quick round up: Did you still see the issue? It stopped for me after removing live snap shots. On 17.09.2015 07:39, Christian Hailer wrote: > Hi, > > just to get it straight: most of my VMs had one or more existing snapshots. > Do you think this is a problem currently? If I understand it correctly the BZ > of Markus concerns only a short period of time while removing a snapshot, but > my VMs stopped responding in the middle of the night without any > interaction... > I deleted all the snapshots, just in case :) my system is running fine for > nearly three days now, I'm not quite sure but I think it helped that I > changed the HDD and NIC of the Windows 2012 VMs to VirtIO devices... > > Best regards, Christian > > -Ursprüngliche Nachricht- > Von: Daniel Helgenberger [mailto:daniel.helgenber...@m-box.de] > Gesendet: Dienstag, 15. September 2015 22:24 > An: Markus Stockhausen <stockhau...@collogia.de>; Christian Hailer > <christ...@hailer.eu> > Cc: yd...@redhat.com; users@ovirt.org > Betreff: Re: AW: [ovirt-users] Some VMs in status "not responding" in oVirt > interface > > > > On 15.09.2015 21:31, Markus Stockhausen wrote: >> Hi Christian, >> >> I think of a package similar like this: >> >> qemu-debuginfo.x86_64 2:2.1.3-10.fc21 >> >> That allows gdb to show information about backtrace symbols. See >> comment 12 of https://bugzilla.redhat.com/show_bug.cgi?id=1262251 >> Makes error search much simpler - especially if qemu hangs. > > Markus, thanks for the BZ. I think I do see the same issue. Actually my VM is > currently the only with a live snapshot and (puppetmaster) does a lot of I/O. > > Christian, maybe this BZ1262251 also applicable? > > I'll go ahead and delete the live snapshot. If I see this issue again I will > submit the trace to your BZ. > > >> >> Markus >> >> ** >> >> Von: Christian Hailer [christ...@hailer.eu] >> >> Gesendet: Dienstag, 15. September 2015 21:24 >> >> An: Markus Stockhausen; 'Daniel Helgenberger' >> >> Cc: yd...@redhat.com; users@ovirt.org >> >> Betreff: AW: [ovirt-users] Some VMs in status "not responding" in >> oVirt interface >> >> >> >> >> >> >> >> >> >> >> Hi Markus, >> >> gdb is available on CentOS 7, but what do you mean by qemu-debug? I >> Installed qemu-kvm-tools, maybe this is the pendant for CentOS? >> >> qemu-kvm-tools.x86_64 : KVM debugging and diagnostics tools >> qemu-kvm-tools-ev.x86_64 : KVM debugging and diagnostics tools >> qemu-kvm-tools-rhev.x86_64 : KVM debugging and diagnostics tools >> >> Regards, Christian >> >> >> >> >> >> Von: Markus Stockhausen [mailto:stockhau...@collogia.de] >> >> >> Gesendet: Dienstag, 15. September 2015 20:40 >> >> An: Daniel Helgenberger <daniel.helgenber...@m-box.de> >> >> Cc: Christian Hailer <christ...@hailer.eu>; yd...@redhat.com; >> users@ovirt.org >> >> Betreff: Re: [ovirt-users] Some VMs in status "not responding" in >> oVirt interface >> >> >> >> Do you have a chance to install qemu-debug? If yes I would try a backtrace. >> gdb -p >> >> # bt >> Markus >> >> >> Am 15.09.2015 4:15 nachm. schrieb Daniel Helgenberger >> <daniel.helgenber...@m-box.de>: >> >> >> >> >> >> Hello, >> >> >> >> I do not want to hijack the thread but maybe my issue is related? >> >> >> >> It might have started with ovirt 3.5.3; but I cannot tell for sure. >> >> >> >> For me, one vm (foreman) is affected; the second time in 14 days. I >> can confirm this as I also loose any network connection to the VM and >> >> the ability to connect a console. >> >> Also, the only thing witch 'fixes' the issue is right now 'kill -9 > qemu-kvm process>' >> >> >> >> As far as I can tell the VM became unresponsive at around Sep 15 >> 12:30:01; engine logged this at 12:34. Nothing obvious in VDSM logs >> (see >> >> attached). >> >> >> >> Below the engine.log part. >> >> >> >> Versions: >> >> ovirt-engine-3.5.4.2-1.el7.centos.noarch >> >> >> >> vdsm-4.16.26-0.el7.centos >> >> libvirt-1.2.8-16.el7_1.3 >> >> >> >> engine.log (1200 - 1300: >> >> 2015-09
[ovirt-users] MAC address recycling
Hello, I recently experienced an issue with mac address uses in ovirt with foreman[1]. Bottom line, a mac address was recycled causing an issue where I could not rebuild a host because of a stale DHCP reservation record. What is the current behavior regarding the reuse of MAC addresses for new VMs? Can I somehow delay a the recycle of a MAC? Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] moving storage away from a single point of failure
On 18.09.2015 23:04, Robert Story wrote: > Hi, Hello Robert, > > I'm running oVirt 3.5 in our lab, and currently I'm using NFS to a single > server. I'd like to move away from having a single point of failure. In this case have a look at iSCSI or FC storage. If you have redundant contollers and switches the setup should be reliable enough? > Watching the mailing list, all the issues with gluster getting out of sync > and replica issues has me nervous about gluster, plus I just have 2 > machines with lots of drive bays for storage. Still, I would stick to gluster if you want a replicated storage: - It is supported out of the box and you get active support from lots of users here - Replica3 will solve most out of sync cases - I dare say other replicated storage backends do suffer from the same issues, this is by design. Two things you should keep in mind when running gluster in production: - Do not run compute and storage on the same hosts - Do not (yet) use Gluster as storage for Hosted Engine > I've been reading about GFS2 > and DRBD, and wanted opinions on if either is a good/bad idea, or to see if > there are other alternatives. > > My oVirt setup is currently 5 nodes and about 25 VMs, might double in size > eventually, but probably won't get much bigger than that. In the end, it is quite easy to migrate storage domains. If you are satisfied with your lab setup, put it in production and add storage later and move the disks. Afterwards, remove old storage domains. My to cent with gluster: It runs quite stable since some time now if you do not touch it. I never had issues when adding bricks, though removing and replacing them can be very tricky. HTH, > > > Thanks, > > Robert > -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] LDAP Authentication
"Alon Bar-Lev" <alo...@redhat.com <mailto:alo...@redhat.com>> > > Cc:users@ovirt.org <mailto:users@ovirt.org> > > Sent: Tuesday, September 22, 2015 5:35:16 PM > > Subject: Re: [ovirt-users] LDAP Authentication > > > > its too complicated ,you have any script or video ? > > in 3.6 we have a setup script. > for now: > > cp -r /usr/share/ovirt-engine/examples/simple/. /etc/ovirt-engine/ > > this is written in the README. > > then customize files at /etc/ovirt-engine/extnesions.d/* > /etc/ovirt-engine/aaa/* to match your setup > > > > > > > On Tue, Sep 22, 2015 at 8:00 PM, Alon Bar-Lev <alo...@redhat.com > <mailto:alo...@redhat.com>> wrote: > > > > > > > > > > > - Original Message - > > > > From: "Budur Nagaraju" <nbud...@gmail.com > <mailto:nbud...@gmail.com>> > > > > To: "Alon Bar-Lev" <alo...@redhat.com <mailto:alo...@redhat.com>> > > > > Cc:users@ovirt.org <mailto:users@ovirt.org> > > > > Sent: Tuesday, September 22, 2015 5:24:36 PM > > > > Subject: Re: [ovirt-users] LDAP Authentication > > > > > > > > HI Alon, > > > > > > > > Below is the configuration which I have done ,but unable to search > the > > > > users in UI > > > > can you pls help me ? > > > > > > you need three files, see the > > > /usr/share/ovirt-engine-extension-aaa-ldap/examples/simple > > > > > > > > > > > > > > > [root@cstlb2 aaa]# cat ldap1.properties > > > > # > > > > # Select one > > > > # > > > > include = > > > > #include = <389ds.properties> > > > > #include = > > > > #include = > > > > #include = > > > > #include = > > > > #include = > > > > > > > > # > > > > # Server > > > > # > > > > vars.server =my.abc.net <http://my.abc.net> > > > > > > > > # > > > > # Search user and its password. > > > > # > > > > vars.user = > > > > > > > > uid=search,cn=nbudoor,cn=Departments,cn=Corporate,cn=Bangalore,cn=users,dc=abc,dc=net > > > > vars.password = company1 > > > > > > > > pool.default.serverset.single.server = ${global:vars.server} > > > > pool.default.auth.simple.bindDN = ${global:vars.user} > > > > pool.default.auth.simple.password = ${global:vars.password} > > > > > > > > # Create keystore, import certificate chain and uncomment > > > > # if using ssl/tls. > > > > #pool.default.ssl.startTLS = true > > > > #pool.default.ssl.truststore.file = > > > > ${local:_basedir}/${global:vars.server}.jks > > > > #pool.default.ssl.truststore.password = changeit > > > > [root@cstlb2 aaa]# > > > > > > > > > > > > > > > > On Tue, Sep 22, 2015 at 7:25 PM, Alon Bar-Lev <alo...@redhat.com > <mailto:alo...@redhat.com>> wrote: > > > > > > > > > > > > > > > > > > > - Original Message - > > > > > > From: "Budur Nagaraju" <nbud...@gmail.com > <mailto:nbud...@gmail.com>> > > > > > > To:users@ovirt.org <mailto:users@ovirt.org> > > > > > > Sent: Tuesday, September 22, 2015 4:34:46 PM > > > > > > Subject: [ovirt-users] LDAP Authentication > > > > > > > > > > > > HI All, > > > > > > > > > > > > Can someone help me in configuring LDAP authentication for > Ovirt ? > > > > > > > > > > Please review: > > > > >http://www.ovirt.org/Features/AAA > > > > > > > > > > > > > >https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0 > > > > > > > > > > > > > > > > -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Some VMs in status "not responding" in oVirt interface
On 17.09.2015 07:39, Christian Hailer wrote: > Hi, > > just to get it straight: most of my VMs had one or more existing snapshots. > Do you think this is a problem currently? If I understand it correctly the BZ > of Markus concerns only a short period of time while removing a snapshot, but > my VMs stopped responding in the middle of the night without any > interaction... > I deleted all the snapshots, just in case :) my system is running fine for > nearly three days now, I'm not quite sure but I think it helped that I > changed the HDD and NIC of the Windows 2012 VMs to VirtIO devices... In my case these these Linux guests. So far I only had one VM with a live snap; the one showing the issue. This points into the direction qemu-rhev; might be independent from guest os. For testing I created a new guest just for this purpose; it has a live snap shot. Maybe you do the same? To dig deeper into the issue: my storage is NFS3 - backed. > > Best regards, Christian > > -Ursprüngliche Nachricht- > Von: Daniel Helgenberger [mailto:daniel.helgenber...@m-box.de] > Gesendet: Dienstag, 15. September 2015 22:24 > An: Markus Stockhausen <stockhau...@collogia.de>; Christian Hailer > <christ...@hailer.eu> > Cc: yd...@redhat.com; users@ovirt.org > Betreff: Re: AW: [ovirt-users] Some VMs in status "not responding" in oVirt > interface > > > > On 15.09.2015 21:31, Markus Stockhausen wrote: >> Hi Christian, >> >> I think of a package similar like this: >> >> qemu-debuginfo.x86_64 2:2.1.3-10.fc21 >> >> That allows gdb to show information about backtrace symbols. See >> comment 12 of https://bugzilla.redhat.com/show_bug.cgi?id=1262251 >> Makes error search much simpler - especially if qemu hangs. > > Markus, thanks for the BZ. I think I do see the same issue. Actually my VM is > currently the only with a live snapshot and (puppetmaster) does a lot of I/O. > > Christian, maybe this BZ1262251 also applicable? > > I'll go ahead and delete the live snapshot. If I see this issue again I will > submit the trace to your BZ. > > >> >> Markus >> >> ** >> >> Von: Christian Hailer [christ...@hailer.eu] >> >> Gesendet: Dienstag, 15. September 2015 21:24 >> >> An: Markus Stockhausen; 'Daniel Helgenberger' >> >> Cc: yd...@redhat.com; users@ovirt.org >> >> Betreff: AW: [ovirt-users] Some VMs in status "not responding" in >> oVirt interface >> >> >> >> >> >> >> >> >> >> >> Hi Markus, >> >> gdb is available on CentOS 7, but what do you mean by qemu-debug? I >> Installed qemu-kvm-tools, maybe this is the pendant for CentOS? >> >> qemu-kvm-tools.x86_64 : KVM debugging and diagnostics tools >> qemu-kvm-tools-ev.x86_64 : KVM debugging and diagnostics tools >> qemu-kvm-tools-rhev.x86_64 : KVM debugging and diagnostics tools >> >> Regards, Christian >> >> >> >> >> >> Von: Markus Stockhausen [mailto:stockhau...@collogia.de] >> >> >> Gesendet: Dienstag, 15. September 2015 20:40 >> >> An: Daniel Helgenberger <daniel.helgenber...@m-box.de> >> >> Cc: Christian Hailer <christ...@hailer.eu>; yd...@redhat.com; >> users@ovirt.org >> >> Betreff: Re: [ovirt-users] Some VMs in status "not responding" in >> oVirt interface >> >> >> >> Do you have a chance to install qemu-debug? If yes I would try a backtrace. >> gdb -p >> >> # bt >> Markus >> >> >> Am 15.09.2015 4:15 nachm. schrieb Daniel Helgenberger >> <daniel.helgenber...@m-box.de>: >> >> >> >> >> >> Hello, >> >> >> >> I do not want to hijack the thread but maybe my issue is related? >> >> >> >> It might have started with ovirt 3.5.3; but I cannot tell for sure. >> >> >> >> For me, one vm (foreman) is affected; the second time in 14 days. I >> can confirm this as I also loose any network connection to the VM and >> >> the ability to connect a console. >> >> Also, the only thing witch 'fixes' the issue is right now 'kill -9 > qemu-kvm process>' >> >> >> >> As far as I can tell the VM became unresponsive at around Sep 15 >> 12:30:01; engine logged this at 12:34. Nothing obvious in VDSM logs >> (see >> >> attached). >> >> >> >> Below the engine.log part. >> >> >> >> Versions: >> >>
Re: [ovirt-users] Extension aaa: No search for principal
On 15.09.2015 22:55, Alon Bar-Lev wrote: > > > - Original Message - >> From: "Daniel Helgenberger" <daniel.helgenber...@m-box.de> >> To: "Alon Bar-Lev" <alo...@redhat.com> >> Cc: Users@ovirt.org >> Sent: Tuesday, September 15, 2015 11:09:45 PM >> Subject: Re: [ovirt-users] Extension aaa: No search for principal >> >> I think I did find the issue here; >> >> my domain is named int.corp.com >> >> I have defined several UPN aliases and our real world users do use the UPN >> @corp.com. >> >> Using some internal user with UPN int.corp.com the authentication works as >> expected; while my real world users fail. >> >> I tried to create a new profile for that; but it fails to load off course >> because the domain corp.com cannot be connected. >> > > the user is upn, users should specify their full upn if this non default > domain suffix. Hello Alon, > > you do not need a new profile. > > in your case it would probably be us...@corp.com for user1. right ... should have tried that in the first place. Works very well now. Thanks for helping me sort that through! > -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Extension aaa: No search for principal
On 11.09.2015 17:00, Alon Bar-Lev wrote: > > > - Original Message - >> From: "Daniel Helgenberger" <daniel.helgenber...@m-box.de> >> To: "Alon Bar-Lev" <alo...@redhat.com> >> Cc: Users@ovirt.org >> Sent: Friday, September 11, 2015 5:33:21 PM >> Subject: Re: [ovirt-users] Extension aaa: No search for principal >> >> sorry, forgot one: >> >> On 11.09.2015 12:48, Alon Bar-Lev wrote: >>> Hi! >>> >>> Thank you for the information, for some reason the administrator user >>> cannot be resolved to userPrincipalName during login, is it specific for >>> Administrator or any user? >> This is the default domain administrator account witch exits in any >> forest. But just in case I created a new domain user just for the >> purpose; same outcome > Sorry for the delay, Alon. > I am unsure what actually happens... I might have an idea, at least from the commands you supplied. > Something in global catalog is out of sync. > Usually - you do not add domain administrator to external application... > there is no need to expose it. > By default Administrator does not have "login from network" and "user > principal suffix". > > Also in my environment I do not get result for administrator, but I do get > one for regular user that has upn suffix in user record, you can see these > fields in user and domain manager. > > So please use regular unprivileged users which belongs to "Domain Users" from > now on. > > To test if user has userPrincipalName use the following command (assuming we > search for u...@int.corp.de): > > $ ldapsearch -E pr=1024/noprompt -o ldif-wrap=no -H > ldap://qa1.qa.lab.tlv.redhat.com:3268/ -x -D 'b...@int.corp.de' -w PASSWORD > -b '' '(userPrincipalName=u...@int.corp.de)' cn userPrincipalName It seams with Active Directory (at least) the search base cannot be empty (-b '') but needs to be provided. In my case, the above command fails with: > # search result > search: 2 > result: 32 No such object > text: 208D: NameErr: DSID-03100213, problem 2001 (NO_OBJECT), data 0, > best match of: While adding the most basic search path it succeeds: $ ldapsearch -E pr=1024/noprompt -o ldif-wrap=no -H ldap://int.corp.de:389/ -x -D 'b...@int.corp.de' -w PASSWORD -b 'dc=int,dc=corp,dc=de' '(userPrincipalName=administra...@int.corp.de)' cn userPrincipalName > # search reference > ref: ldap://ForestDnsZones.int.corp.de/DC=ForestDnsZones,DC=int,DC=corp,DC=de > > # search reference > ref: ldap://DomainDnsZones.int.corp.de/DC=DomainDnsZones,DC=int,DC=corp,DC=de > > # search reference > ref: ldap://int.corp.de/CN=Configuration,DC=int,DC=corp,DC=de > > # search result > search: 2 > result: 0 Success > control: 1.2.840.113556.1.4.319 false DDDSSSDDMM= > pagedresults: cookie= > > # numResponses: 4 > # numReferences: 3 It succeeds with every user I tried. I would set the search base; but i am not sure where to do so. > > This should find the user (return one result), if not, please checkout user > in Users and Domains manager for the domain suffix, maybe it is empty. > > To find user without userPrincipalName such as Administrator use the > following command: > > $ ldapsearch -E pr=1024/noprompt -o ldif-wrap=no -H > ldap://qa1.qa.lab.tlv.redhat.com:3268/ -x -D 'b...@int.corp.de' -w PASSWORD > -b '' '(sAMAccountName=user)' cn userPrincipalName > > For example, the above will work for Administrator, but for kerberos to work > properly user principal name must be defined, so these users will not work. > > You can dump entire GC and send me a user record if no result so I can > determine what is different from expectations: > > $ ldapsearch -E pr=1024/noprompt -o ldif-wrap=no -H > ldap://qa1.qa.lab.tlv.redhat.com:3268/ -x -D 'b...@int.corp.de' -w PASSWORD > -b '' > /tmp/dump.out If you still require a dump (its even a small one..) please drop a mail. > > Regards, > Alon > -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Some VMs in status "not responding" in oVirt interface
On 15.09.2015 21:31, Markus Stockhausen wrote: > Hi Christian, > > I think of a package similar like this: > > qemu-debuginfo.x86_64 2:2.1.3-10.fc21 > > That allows gdb to show information about backtrace symbols. See > comment 12 of https://bugzilla.redhat.com/show_bug.cgi?id=1262251 > Makes error search much simpler - especially if qemu hangs. Markus, thanks for the BZ. I think I do see the same issue. Actually my VM is currently the only with a live snapshot and (puppetmaster) does a lot of I/O. Christian, maybe this BZ1262251 also applicable? I'll go ahead and delete the live snapshot. If I see this issue again I will submit the trace to your BZ. > > Markus > > ** > > Von: Christian Hailer [christ...@hailer.eu] > > Gesendet: Dienstag, 15. September 2015 21:24 > > An: Markus Stockhausen; 'Daniel Helgenberger' > > Cc: yd...@redhat.com; users@ovirt.org > > Betreff: AW: [ovirt-users] Some VMs in status "not responding" in oVirt > interface > > > > > > > > > > > Hi Markus, > > gdb is available on CentOS 7, but what do you mean by qemu-debug? I Installed > qemu-kvm-tools, maybe this is the pendant for CentOS? > > qemu-kvm-tools.x86_64 : KVM debugging and diagnostics tools > qemu-kvm-tools-ev.x86_64 : KVM debugging and diagnostics tools > qemu-kvm-tools-rhev.x86_64 : KVM debugging and diagnostics tools > > Regards, Christian > > > > > > Von: Markus Stockhausen [mailto:stockhau...@collogia.de] > > > Gesendet: Dienstag, 15. September 2015 20:40 > > An: Daniel Helgenberger <daniel.helgenber...@m-box.de> > > Cc: Christian Hailer <christ...@hailer.eu>; yd...@redhat.com; users@ovirt.org > > Betreff: Re: [ovirt-users] Some VMs in status "not responding" in oVirt > interface > > > > Do you have a chance to install qemu-debug? If yes I would try a backtrace. > gdb -p > > # bt > Markus > > > Am 15.09.2015 4:15 nachm. schrieb Daniel Helgenberger > <daniel.helgenber...@m-box.de>: > > > > > > Hello, > > > > I do not want to hijack the thread but maybe my issue is related? > > > > It might have started with ovirt 3.5.3; but I cannot tell for sure. > > > > For me, one vm (foreman) is affected; the second time in 14 days. I can > confirm this as I also loose any network connection to the VM and > > the ability to connect a console. > > Also, the only thing witch 'fixes' the issue is right now 'kill -9 qemu-kvm process>' > > > > As far as I can tell the VM became unresponsive at around Sep 15 12:30:01; > engine logged this at 12:34. Nothing obvious in VDSM logs (see > > attached). > > > > Below the engine.log part. > > > > Versions: > > ovirt-engine-3.5.4.2-1.el7.centos.noarch > > > > vdsm-4.16.26-0.el7.centos > > libvirt-1.2.8-16.el7_1.3 > > > > engine.log (1200 - 1300: > > 2015-09-15 12:03:47,949 INFO > [org.ovirt.engine.core.bll.scheduling.HaReservationHandling] > (DefaultQuartzScheduler_Worker-56) [264d502a] HA > > reservation status for cluster Default is OK > > 2015-09-15 12:08:02,708 INFO [org.ovirt.engine.core.bll.OvfDataUpdater] > (DefaultQuartzScheduler_Worker-89) [2e7bf56e] Attempting to update > > VMs/Templates Ovf. > > 2015-09-15 12:08:02,709 INFO > [org.ovirt.engine.core.bll.ProcessOvfUpdateForStoragePoolCommand] > (DefaultQuartzScheduler_Worker-89) > > [5e9f4ba6] Running command: ProcessOvfUpdateForStoragePoolCommand internal: > true. Entities affected : ID: > > 0002-0002-0002-0002-0088 Type: l > > 2015-09-15 12:08:02,780 INFO > [org.ovirt.engine.core.bll.ProcessOvfUpdateForStoragePoolCommand] > (DefaultQuartzScheduler_Worker-89) > > [5e9f4ba6] Lock freed to object EngineLock [exclusiveLocks= key: > 0002-0002-0002-0002-0088 value: OVF_UPDATE > > 2015-09-15 12:08:47,997 INFO > [org.ovirt.engine.core.bll.scheduling.HaReservationHandling] > (DefaultQuartzScheduler_Worker-21) [3fc854a2] HA > > reservation status for cluster Default is OK > > 2015-09-15 12:13:06,998 INFO > [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] > (org.ovirt.thread.pool-8-thread-48) > > [50221cdc] START, GetFileStatsVDSCommand( storagePoolId = > 0002-0002-0002-0002-0088, ignoreFailoverLimit = false), log id: > 1503968 > > 2015-09-15 12:13:07,137 INFO > [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] > (org.ovirt.thread.pool-8-thread-48) > > [50221cdc] FINISH,
[ovirt-users] Extension aaa: No search for principal
virt.engineextensions.aaa.ldap.Framework] > (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authn::corp-authn] > Creating LDAP pool 'authz' > 2015-09-11 12:01:35,120 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] > (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authn::corp-authn] > Creating LDAP pool 'authn' > 2015-09-11 12:01:35,159 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Extension 'corp-authn' initialized > 2015-09-11 12:01:35,160 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Initializing extension 'builtin-authn-internal' > 2015-09-11 12:01:35,161 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Extension 'builtin-authn-internal' initialized > 2015-09-11 12:01:35,162 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Initializing extension 'corp-authz' > 2015-09-11 12:01:35,162 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] > (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authz::corp-authz] > Creating LDAP pool 'authz' > 2015-09-11 12:01:35,185 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] > (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authz::corp-authz] > Creating LDAP pool 'gc' > 2015-09-11 12:01:35,222 INFO > [org.ovirt.engineextensions.aaa.ldap.AuthzExtension] (MSC service thread 1-2) > [ovirt-engine-extension-aaa-ldap.authz::corp-authz] Available Namespaces: > [DC=int,DC=corp,DC=de] > 2015-09-11 12:01:35,223 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Extension 'corp-authz' initialized > 2015-09-11 12:01:35,224 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Initializing extension 'internal' > 2015-09-11 12:01:35,224 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Extension 'internal' initialized > 2015-09-11 12:01:35,225 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Start of enabled extensions list > 2015-09-11 12:01:35,225 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Instance name: 'corp-authn', Extension name: > 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.0.2', Notes: 'Display > name: ovirt-engine-extension-aaa-ldap-1.0.2-1.el7', License: 'ASL 2.0', Home: > 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: > '0', File: '/etc/ovirt-engine/extensions.d/corp-authn.properties', > Initialized: 'true' > 2015-09-11 12:01:35,227 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Instance name: 'builtin-authn-internal', Extension name: 'Internal Authn > (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: > 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: > '0', File: 'N/A', Initialized: 'true' > 2015-09-11 12:01:35,228 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Instance name: 'corp-authz', Extension name: > 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.0.2', Notes: 'Display > name: ovirt-engine-extension-aaa-ldap-1.0.2-1.el7', License: 'ASL 2.0', Home: > 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: > '0', File: '/etc/ovirt-engine/extensions.d/corp-authz.properties', > Initialized: 'true' > 2015-09-11 12:01:35,230 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) Instance name: 'internal', Extension name: 'Internal Authz (Built-in)', > Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', > Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', > Initialized: 'true' > 2015-09-11 12:01:35,231 INFO > [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread > 1-2) End of enabled extensions list Versions: ovirt engine 3.5.4 AD: Windows Server 2012r2 Please let me know if you need further logs. Thanks, [readme.md] https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] vdsm high mem usage
Hello Michael, I ran into the issue myself and can confirm restarting vdsm with nfs mitgates the issue. I even had a cron job for that On 11.09.2015 04:30, Darrell Budic wrote: > If you’re using nfs mounts (even if they are gluster based), it’s safe to > restart vdsmd, you’ll see it change status in ovirt, but your VMs will > continue > running. If you’re mounting gluster based storage as glusterfs shares directly > (not over nfs), there’s another issue that will cause all your VMs to pause > and > the only way to recover is to stop them and restart them, but that’s going to > happen to them anyway when vdsmd runs out of ram and crashes… Best solution is > to migrate them yourself in this case, then restart and migrate back. This is what I have done. The easiest way to do so is to set the host in maintenance, wait for the migration finishes and then restart vdsm. You sould do this only at one host and then wait a while so you do not run into OOM on the whole cluster at once. Or live > migrate them to NFS mounted storage so when vdsm crashes they don’t lock up, > and > clean up after you’ve had an opportunity to upgrade or patch. > > Upgrade to 3.5.3 or later at your earliest opportunity, the mem leak is > resolved > there. Sounds like you already found the patch you can apply if upgrading > isn’t > an option, but it will still require you to restart your vdsms. I can confirm 3.5.3 finally solved the issue for us and VDSM keeps below 100MB RSS. > > -Darrell > >> On Sep 10, 2015, at 1:45 PM, Michael Kleinpaste >> <michael.kleinpa...@sharperlending.com >> <mailto:michael.kleinpa...@sharperlending.com>> wrote: >> >> Hi everybody. >> >> So I ran into that high mem usage thing. The problem I have with patching is >> that this is a live system so I can't do it mid day. Can anybody tell me if >> it is possible to just restart the vdsm service or does the host have to be >> in >> "maintenance mode" before restarting it? It is using gluster storage, if >> that >> makes a difference as well. >> >> Thanks, >> >> -- >> *Michael Kleinpaste* >> Senior Systems Administrator >> SharperLending, LLC. >> www.SharperLending.com >> michael.kleinpa...@sharperlending.com >> <mailto:michael.kleinpa...@sharperlending.com> >> (509) 324-1230 Fax: (509) 324-1234 >> ___ >> Users mailing list >> Users@ovirt.org <mailto:Users@ovirt.org> >> http://lists.ovirt.org/mailman/listinfo/users > -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] RESTAPI: 'action type cpu profile empty' if more then one profile defined in the cluster
Hello Sandro, On 11.09.2015 14:02, Sandro Bonazzola wrote: > > > On Thu, Sep 10, 2015 at 1:19 PM, Daniel Helgenberger > <daniel.helgenber...@m-box.de <mailto:daniel.helgenber...@m-box.de>> wrote: > > Hello, > > Sandro set BZ1160846 to resolved for 3.5.4, yet the same issue still > exists with cpu profiles (I even remember a duplicate poining to this BZ > but seem to be unable to find it). > > > Well, according to bugzilla it was verified on oVirt 3.5.1 so it should have > been closed on 3.5.1. > If you still have the issue it should be a regression, please open a new BZ > against 3.5.4. > Please use the new classification for it :-) > https://bugzilla.redhat.com/enter_bug.cgi?classification=oVirt I already did so, BZ1262293: https://bugzilla.redhat.com/show_bug.cgi?id=1262293 Btw, great that ovirt has its own classification now > > > Steps: > 1. Set up forman provisoniong for ovirt > 2. Add a second cpu profile to cluster > 3. Provision a VM using foreman > > Result: > Error: action type cpu profile empty > > after removing any extra CPU profiles leaving only 'Default', vm > provisioning works again. > > engine.log: > > 2015-09-10 13:07:20,573 INFO > [org.ovirt.engine.core.bll.aaa.LoginUserCommand] (ajp--127.0.0.1-8702-5) > Running command: LoginUserCommand internal: false. > > 2015-09-10 13:07:20,790 INFO [org.ovirt.engine.core.bll.AddVmCommand] > (ajp--127.0.0.1-8702-5) [3651d332] Lock Acquired to object EngineLock > [exclusiveLocks= key: test03 value: VM_NAME > > 2015-09-10 13:07:20,845 WARN [org.ovirt.engine.core.bll.AddVmCommand] > (ajp--127.0.0.1-8702-5) [3651d332] CanDoAction of action AddVm failed for > user admin@internal. Reasons: > VAR__ACTION__ADD,VAR__TYPE__VM,ACTION_TYPE_CPU_PROFILE_EMPTY > > 2015-09-10 13:07:20,846 INFO [org.ovirt.engine.core.bll.AddVmCommand] > (ajp--127.0.0.1-8702-5) [3651d332] Lock freed to object EngineLock > [exclusiveLocks= key: test03 value: VM_NAME > > 2015-09-10 13:07:20,905 ERROR > [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] > (ajp--127.0.0.1-8702-5) Operation Failed: [action type cpu profile empty] > > > Versions: > ovirt-engine-3.5.4.2-1.el7.centos.noarch > Foreman 1.8.3 > > If nobody objects I would open a BZ asap. > > Thanks, > > > > On 20.08.2015 14:41, Daniel Helgenberger wrote: > > Hello, > > > > I still seem to have an issue in ovirt with a [BZ1160846]. > > In my case, foreman is unable to add hosts if I have multiple CPU > > Profiles defined in the cluster: > > > > Failed to create a compute oVirt (oVirt) instance $hostname: action > type > > cpu profile empty > > > > BZ says this was resolved in RHEV 3.5.1; but running 3.5.3 I still > have > > this issue (if this BZ is even applicable) > > > > Thanks! > > > > Versions: > > oVirt 3.5.3 el7 > > Foreman 1.8.2 > > > > Thanks! > > > > [BZ1160846] https://bugzilla.redhat.com/show_bug.cgi?id=1160846 > > > > -- > Daniel Helgenberger > m box bewegtbild GmbH > > P: +49/30/2408781-22 > F: +49/30/2408781-10 > > ACKERSTR. 19 > D-10115 BERLIN > > > www.m-box.de <http://www.m-box.de> www.monkeymen.tv > <http://www.monkeymen.tv> > > Geschäftsführer: Martin Retschitzegger / Michaela Göllner > Handeslregister: Amtsgericht Charlottenburg / HRB 112767 > > > > > -- > Sandro Bonazzola > Better technology. Faster innovation. Powered by community collaboration. > See how it works at redhat.com <http://redhat.com> > -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Extension aaa: No search for principal
On 11.09.2015 12:48, Alon Bar-Lev wrote: > Hi! > > Thank you for the information, for some reason the administrator user cannot > be resolved to userPrincipalName during login, is it specific for > Administrator or any user? Thanks for getting back to me Alon. > > Can you please attach the extension configuration for both authn/authz as > well? here you go, but I did northing apart form changing the profile naming. Please note I performed anonymization and replaced my domain with 'corp' (as you might have guessed). If this had any side effects I can mail you the original logs as well. # cat /etc/ovirt-engine/extensions.d/corp-authn.properties > ovirt.engine.extension.name = corp-authn > ovirt.engine.extension.bindings.method = jbossmodule > ovirt.engine.extension.binding.jbossmodule.module = > org.ovirt.engine-extensions.aaa.ldap > ovirt.engine.extension.binding.jbossmodule.class = > org.ovirt.engineextensions.aaa.ldap.AuthnExtension > ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn > ovirt.engine.aaa.authn.profile.name = corp > ovirt.engine.aaa.authn.authz.plugin = corp-authz > config.profile.file.1 = ../aaa/corp.properties # cat /etc/ovirt-engine/extensions.d/corp-authz.properties > ovirt.engine.extension.name = corp-authz > ovirt.engine.extension.bindings.method = jbossmodule > ovirt.engine.extension.binding.jbossmodule.module = > org.ovirt.engine-extensions.aaa.ldap > ovirt.engine.extension.binding.jbossmodule.class = > org.ovirt.engineextensions.aaa.ldap.AuthzExtension > ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz > config.profile.file.1 = ../aaa/corp.properties > > I will also need debug log with ALL level, see [1] for instructions. please find engine log with debugging on attached. I did a number of logins in the logged timeframe as well as engine restarts; and hope it is sufficient. Thanks! > > Thanks! > Alon > > [1] > https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0#l377 > > - Original Message - >> From: "Daniel Helgenberger" <daniel.helgenber...@m-box.de> >> To: Users@ovirt.org >> Sent: Friday, September 11, 2015 1:28:10 PM >> Subject: [ovirt-users] Extension aaa: No search for principal >> >> Hello, >> >> I am stuck in configuring ovirt-engine-extension-aaa-ldap with AD for >> ovirt 3.5.4. I am following the [readme.md] and so far it was quite >> strait forward: >>> include = >>> >>> # >>> # Active directory domain name. >>> # >>> vars.domain = int.corp.de >>> >>> # >>> # Search user and its password. >>> # >>> vars.user = bind@${global:vars.domain} >>> vars.password = [redacted] >>> >>> # >>> # Optional DNS servers, if enterprise >>> # DNS server cannot resolve the domain srvrecord. >>> # >>> #vars.dns = dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain} >>> >>> pool.default.serverset.type = srvrecord >>> pool.default.serverset.srvrecord.domain = ${global:vars.domain} >>> pool.default.auth.simple.bindDN = ${global:vars.user} >>> pool.default.auth.simple.password = ${global:vars.password} >>> >>> # Uncomment if using custom DNS >>> #pool.default.serverset.srvrecord.jndi-properties.java.naming.provider.url >>> = ${global:vars.dns} >>> #pool.default.socketfactory.resolver.uRL = ${global:vars.dns} >>> >>> # Create keystore, import certificate chain and uncomment >>> # if using ssl/tls. >>> #pool.default.ssl.startTLS = true >>> #pool.default.ssl.truststore.file = >>> ${local:_basedir}/${global:vars.domain}.jks >>> #pool.default.ssl.truststore.password = changeit >> >> >> >> The config seems to work; at least the domain and binddn part. I can >> browse and add users to ovirt as suggested in step (3). All quotes are >> from engine.log: >> >>> 2015-09-11 11:54:50,261 INFO >>> [org.ovirt.engine.core.bll.AddSystemPermissionCommand] >>> (org.ovirt.thread.pool-8-thread-24) [73bff0e9] Running command: >>> AddSystemPermissionCommand internal: false. Entities affected : ID: >>> aaa0----123456789aaa Type: SystemAction group >>> MANIPULATE_PERMISSIONS with role type USER, ID: >>> aaa0----123456789aaa Type: SystemAction group >>> ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER >>> 2015-09-11 11:54:50,268 INFO >>> [org.ovirt.engine.core.bll.aaa.AddUserCommand] >>>
Re: [ovirt-users] Extension aaa: No search for principal
sorry, forgot one: On 11.09.2015 12:48, Alon Bar-Lev wrote: > Hi! > > Thank you for the information, for some reason the administrator user cannot > be resolved to userPrincipalName during login, is it specific for > Administrator or any user? This is the default domain administrator account witch exits in any forest. But just in case I created a new domain user just for the purpose; same outcome > > Can you please attach the extension configuration for both authn/authz as > well? > > I will also need debug log with ALL level, see [1] for instructions. > > Thanks! > Alon > > [1] > https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0#l377 > > - Original Message - >> From: "Daniel Helgenberger" <daniel.helgenber...@m-box.de> >> To: Users@ovirt.org >> Sent: Friday, September 11, 2015 1:28:10 PM >> Subject: [ovirt-users] Extension aaa: No search for principal >> >> Hello, >> >> I am stuck in configuring ovirt-engine-extension-aaa-ldap with AD for >> ovirt 3.5.4. I am following the [readme.md] and so far it was quite >> strait forward: >>> include = >>> >>> # >>> # Active directory domain name. >>> # >>> vars.domain = int.corp.de >>> >>> # >>> # Search user and its password. >>> # >>> vars.user = bind@${global:vars.domain} >>> vars.password = [redacted] >>> >>> # >>> # Optional DNS servers, if enterprise >>> # DNS server cannot resolve the domain srvrecord. >>> # >>> #vars.dns = dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain} >>> >>> pool.default.serverset.type = srvrecord >>> pool.default.serverset.srvrecord.domain = ${global:vars.domain} >>> pool.default.auth.simple.bindDN = ${global:vars.user} >>> pool.default.auth.simple.password = ${global:vars.password} >>> >>> # Uncomment if using custom DNS >>> #pool.default.serverset.srvrecord.jndi-properties.java.naming.provider.url >>> = ${global:vars.dns} >>> #pool.default.socketfactory.resolver.uRL = ${global:vars.dns} >>> >>> # Create keystore, import certificate chain and uncomment >>> # if using ssl/tls. >>> #pool.default.ssl.startTLS = true >>> #pool.default.ssl.truststore.file = >>> ${local:_basedir}/${global:vars.domain}.jks >>> #pool.default.ssl.truststore.password = changeit >> >> >> >> The config seems to work; at least the domain and binddn part. I can >> browse and add users to ovirt as suggested in step (3). All quotes are >> from engine.log: >> >>> 2015-09-11 11:54:50,261 INFO >>> [org.ovirt.engine.core.bll.AddSystemPermissionCommand] >>> (org.ovirt.thread.pool-8-thread-24) [73bff0e9] Running command: >>> AddSystemPermissionCommand internal: false. Entities affected : ID: >>> aaa0----123456789aaa Type: SystemAction group >>> MANIPULATE_PERMISSIONS with role type USER, ID: >>> aaa0----123456789aaa Type: SystemAction group >>> ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER >>> 2015-09-11 11:54:50,268 INFO >>> [org.ovirt.engine.core.bll.aaa.AddUserCommand] >>> (org.ovirt.thread.pool-8-thread-24) [21867e72] Running command: >>> AddUserCommand internal: true. Entities affected : ID: >>> aaa0----123456789aaa Type: SystemAction group >>> MANIPULATE_USERS with role type ADMIN >>> 2015-09-11 11:54:50,301 INFO >>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >>> (org.ovirt.thread.pool-8-thread-24) [21867e72] Correlation ID: 21867e72, >>> Call Stack: null, Custom Event ID: -1, Message: User 'Administrator' was >>> added successfully to the system. >>> 2015-09-11 11:54:50,379 INFO >>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >>> (org.ovirt.thread.pool-8-thread-24) [21867e72] Correlation ID: 73bff0e9, >>> Call Stack: null, Custom Event ID: -1, Message: User/Group Administrator >>> was granted permission for Role SuperUser on System by admin@internal. >> >> Yet, when loging in as a user administrator I get: >> >>> {Extkey[name=EXTENSION_INVOKE_RESULT;type=class >>> java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2, >>> Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class >>> java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=No >&
[ovirt-users] RESTAPI: 'action type cpu profile empty' if more then one profile defined in the cluster
Hello, I still seem to have an issue in ovirt with a [BZ1160846]. In my case, foreman is unable to add hosts if I have multiple CPU Profiles defined in the cluster: Failed to create a compute oVirt (oVirt) instance $hostname: action type cpu profile empty BZ says this was resolved in RHEV 3.5.1; but running 3.5.3 I still have this issue (if this BZ is even applicable) Thanks! Versions: oVirt 3.5.3 el7 Foreman 1.8.2 Thanks! [BZ1160846] https://bugzilla.redhat.com/show_bug.cgi?id=1160846 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [ATN] LDAP Users please read
Hello Alon, On 04.08.2015 09:56, Alon Bar-Lev wrote: Hello LDAP Users, If you migrated from 3.4 or if you used engine-managed-domains to add LDAP support into engine - this message is for you. In 3.5 we introduced a new LDAP provider[1][2], it is superset of the previous implementation, highlights includes: * Better response times. * Simplicity, Use of LDAP protocol only - kerberos is no longer needed. * More LDAP implementations are supported. * Flexible configuration, can be customized on site to support special setups. * Supportability, better logs and feedbacks to enable remote support. * Variety of fallback policies, examples: srvrecord, failover, round-robin and more. * Active Directory: supports multiple domain in forest. In 3.5 the previous LDAP provider is marked as legacy, users' issues will be resolved by migration to the new provider. Upgrade to 4.0 will not be possible if legacy provider is being used. The new provider is working without any issue for quite some time, we would like to eliminate the remaining usage of the legacy provider as soon as possible. A tool was created[3] to automate the process, it should perform everything in safe and automatic process, while enables customization if such required. The one prerequisite that we could not automate easily is obtaining the CA certificate used by the LDAP server to communicate using SSL/TLS, you should acquire this manually and provide it as parameter. We (Ondra CCed and I) will help anyone that is experiencing issues with the process, please do not delay migration to the point it becomes emergency. Let's define a virtual goal -- in 1 month no legacy LDAP usage anywhere. Regards, Alon Bar-Lev. [1] http://www.ovirt.org/Features/AAA [2] https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0 Sorry for the ignorance on my part, but I tried one more and could not find any qualified docs/howtos on the new AAA feature. This readme is the only thing witch comes close so far, but running Engine 3.5.3 at least my installation is missing /usr/share/ovirt-engine-extension-aaa-ldap*/examples Does the tool run without them? As for my part, I only need engine authentication domains; I used: engine-manage-domains add --domain ... Should I migrate to the new provider? Thanks; [3] https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Dashboard - Page Not Found
-- 1 root root 462 Jul 1 09:29 10-setup-reports-access.conf -rw-r--r-- 1 root root 204 Jun 5 02:31 README There were no issues with the upgrade that I could see. It seems like between 2015-06-19 and 2015-07-01 you ran a 3.4 engine with 3.5 reports. Is this possible? To verify, please check/post all setup logs (/var/log/ovirt-engine-setup/*) and /var/log/yum.log. I now briefly looked at our spec files and this does not seem to be blocked, so should probably be filed as a bug. However I can't see how it can be done, except for by following a somewhat complex flow of enabling/disabling repositories etc. while running engine-setup. Thanks! -- Didi -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Foreman compute oVirt: New Host failing with action type cpu profile empty
On 28.06.2015 14:40, Doron Fediuck wrote: On 26/06/15 12:21, Daniel Helgenberger wrote: Hello, I have configured oVirt as compute resource in foreman. This is working well to the point creating a new host, witch fails witch the error: 'Failed to create a compute oVirt (oVirt) instance wst01.int.m-box.de: action type cpu profile empty' I found a (resolved but yet not closed) BZ1160846 [1] relating to disk profiles. Versions: foreman 1.8.1 ovirt engine 3.5.3 Strangely I am unable to find anything in engine.log relating to the attempt? [1] https://bugzilla.redhat.com/show_bug.cgi?id=1160846 Hi Daniel, there are bugs reported for CPU profile, such as [1]. If this is indeed the case (profile error) it should appear as an error in the engine.log (which may have rotated). Hello Doron, right you are, I seem to have missed this when I first looked. Reading the BZ I would rather say this is a Foreman issue and not ovirt since rejecting the command is intended? Doron [1] https://bugzilla.redhat.com/show_bug.cgi?id=1172207 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.
On 18.06.2015 10:44, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Simone Tiraboschi stira...@redhat.com Cc: Users@ovirt.org Sent: Wednesday, June 17, 2015 7:06:53 PM Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. On 17.06.2015 18:30, Simone Tiraboschi wrote: Il giorno 17/giu/2015, alle ore 18:21, Daniel Helgenberger daniel.helgenber...@m-box.de ha scritto: On 17.06.2015 17:01, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Simone Tiraboschi stira...@redhat.com Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 4:49:07 PM Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. On 17.06.2015 16:47, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Simone Tiraboschi stira...@redhat.com Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 4:40:45 PM Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. On 17.06.2015 16:35, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 3:24:35 PM Subject: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. Hello, I have the following problem with host-deploy on HE hosts: 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd plugin.execute:937 execute-output: ('/bin/systemctl', 'stop', 'vdsmd.service') stderr: Job for vdsmd.service canceled. 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py, line 106, in _packages self.services.state('vdsmd', False) File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 138, in state 'start' if state else 'stop' File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 77, in _executeServiceCommand raiseOnError=raiseOnError File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in execute command=args[0], RuntimeError: Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Package installation': Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback Loaded plugins: auto-update-debuginfo, fastestmirror I do not have 'standard' (=non ha) hosts; so I cannot tell for the others but suspect it relates to HE. Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy fails on that. The capability to re-deploy an hosted-engine host from the Web UI is not available on oVirt 3.5, it will included in 3.6; please help us testing it on the first beta in a few weeks. By the way, why are you trying to re-deploy an host-deploy host from the web UI? Ok, did not know about that. I use 'Reinstall' from the UI. Until now, I thought the best way to update the hosts after new engine relases was: 1- update engine 2. set host to maintane 4. yum update on host for latest vdsm 3- Use reinstall from UI. Please advise! Running on your HE host: # hosted-engine --set-maintenance=local waiting for everything to be migrated if needed # yum update # hosted-engine --set-maintenance=none should do the job Ok, I see; I think one should restart vdsmd also; IIRC it is not restarted in the process? If updated it will be restarted by its rpm postscript. Ok. However, I still need reinstall for configuration updates like gluster / firewall etc. RPM should perform intelligent upgrading of packages with configuration files at least saving them on conf.rpmsave and alerting if not forward compatible. If not, it's a packaging bug. Also, hosted-enginge-deploy is using 'reinstall'. How do I work around that? Sorry, I didn't get it. I meant 'Reinstall' does a lot of other things apart from updating packages. For instance, what am I supposed to do if I switch on kdump integration or gluster on the cluster? AFIK this only works with transparently for engine 'Reinstall'. Hosted-engine is a special case: it has a lot of advantages
Re: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64
Hello Alon, On 17.06.2015 13:22, Alon Bar-Lev wrote: Please do not use multiple channels to discuss the same issue. I just make a habit of posting bug links on the ML as well. I see this as an 'FYI', since I often miss BZ if not posted on the list Of course, further discussion sould continue in BZ. If you think this is not right will stop doing so. - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Users@ovirt.org Sent: Wednesday, June 17, 2015 2:21:58 PM Subject: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 Hello, I just went ahead and filed [BZ1232714] because with ovirt 3.5.3 host deploy seens to fail on CentOS7 if there is no baseurl setting in yum repos: RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 [BZ1232714] https://bugzilla.redhat.com/show_bug.cgi?id=1232714 -8- 2015-06-17 12:27:37 DEBUG otopi.transaction transaction._prepare:77 preparing 'Yum Transaction' Loaded plugins: fastestmirror 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:138 Stage internal_packages METHOD otopi.plugins.otopi.network.hostname.Plugin._internal_packages 2015-06-17 12:27:37 DEBUG otopi.plugins.otopi.packagers.yumpackager yumpackager.verbose:88 Yum queue package iproute for install Loading mirror speeds from cached hostfile 2015-06-17 12:27:37 ERROR otopi.plugins.otopi.packagers.yumpackager yumpackager.error:97 Yum Cannot queue package iproute: Cannot find a valid baseurl for repo: base/7/x86_64 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/network/hostname.py, line 66, in _internal_packages self.packager.install(packages=('iproute',)) File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/packagers/yumpackager.py, line 303, in install ignoreErrors=ignoreErrors File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 865, in install **kwargs File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 509, in _queue provides = self._queryProvides(packages=(package,)) File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 447, in _queryProvides for po in self._yb.searchPackageProvides(args=packages): File /usr/lib/python2.7/site-packages/yum/__init__.py, line 3406, in searchPackageProvides where = self.returnPackagesByDep(arg) File /usr/lib/python2.7/site-packages/yum/__init__.py, line 4232, in returnPackagesByDep return self.pkgSack.searchProvides(depstring) File /usr/lib/python2.7/site-packages/yum/__init__.py, line 1079, in lambda pkgSack = property(fget=lambda self: self._getSacks(), File /usr/lib/python2.7/site-packages/yum/__init__.py, line 784, in _getSacks self.repos.populateSack(which=repos) File /usr/lib/python2.7/site-packages/yum/repos.py, line 344, in populateSack self.doSetup() File /usr/lib/python2.7/site-packages/yum/repos.py, line 158, in doSetup self.ayum.plugins.run('postreposetup') File /usr/lib/python2.7/site-packages/yum/plugins.py, line 188, in run func(conduitcls(self, self.base, conf, **kwargs)) File /usr/lib/yum-plugins/fastestmirror.py, line 197, in postreposetup_hook if downgrade_ftp and _len_non_ftp(repo.urls) == 1: File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 871, in lambda urls = property(fget=lambda self: self._geturls(), File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 868, in _geturls self._baseurlSetup() File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 834, in _baseurlSetup self.check() File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 554, in check 'Cannot find a valid baseurl for repo: %s' % self.ui_id RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 2015-06-17 12:27:37 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Environment packages setup': Cannot find a valid baseurl for repo: base/7/x86_64 2015-06-17 12:27:37 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' 2015-06-17 12:27:37 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7arch=x86_64repo=osinfra=stock error was 14: curl#7 - Failed connect to mirrorlist.centos.org:80; No route to host Loaded plugins: fastestmirror 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:490 ENVIRONMENT DUMP - BEGIN 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:500 ENV BASE/error=bool:'True' 2015-06-17 12:27:37 DEBUG otopi.context
[ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64
Hello, I just went ahead and filed [BZ1232714] because with ovirt 3.5.3 host deploy seens to fail on CentOS7 if there is no baseurl setting in yum repos: RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 [BZ1232714] https://bugzilla.redhat.com/show_bug.cgi?id=1232714 -8- 2015-06-17 12:27:37 DEBUG otopi.transaction transaction._prepare:77 preparing 'Yum Transaction' Loaded plugins: fastestmirror 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:138 Stage internal_packages METHOD otopi.plugins.otopi.network.hostname.Plugin._internal_packages 2015-06-17 12:27:37 DEBUG otopi.plugins.otopi.packagers.yumpackager yumpackager.verbose:88 Yum queue package iproute for install Loading mirror speeds from cached hostfile 2015-06-17 12:27:37 ERROR otopi.plugins.otopi.packagers.yumpackager yumpackager.error:97 Yum Cannot queue package iproute: Cannot find a valid baseurl for repo: base/7/x86_64 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/network/hostname.py, line 66, in _internal_packages self.packager.install(packages=('iproute',)) File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/packagers/yumpackager.py, line 303, in install ignoreErrors=ignoreErrors File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 865, in install **kwargs File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 509, in _queue provides = self._queryProvides(packages=(package,)) File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 447, in _queryProvides for po in self._yb.searchPackageProvides(args=packages): File /usr/lib/python2.7/site-packages/yum/__init__.py, line 3406, in searchPackageProvides where = self.returnPackagesByDep(arg) File /usr/lib/python2.7/site-packages/yum/__init__.py, line 4232, in returnPackagesByDep return self.pkgSack.searchProvides(depstring) File /usr/lib/python2.7/site-packages/yum/__init__.py, line 1079, in lambda pkgSack = property(fget=lambda self: self._getSacks(), File /usr/lib/python2.7/site-packages/yum/__init__.py, line 784, in _getSacks self.repos.populateSack(which=repos) File /usr/lib/python2.7/site-packages/yum/repos.py, line 344, in populateSack self.doSetup() File /usr/lib/python2.7/site-packages/yum/repos.py, line 158, in doSetup self.ayum.plugins.run('postreposetup') File /usr/lib/python2.7/site-packages/yum/plugins.py, line 188, in run func(conduitcls(self, self.base, conf, **kwargs)) File /usr/lib/yum-plugins/fastestmirror.py, line 197, in postreposetup_hook if downgrade_ftp and _len_non_ftp(repo.urls) == 1: File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 871, in lambda urls = property(fget=lambda self: self._geturls(), File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 868, in _geturls self._baseurlSetup() File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 834, in _baseurlSetup self.check() File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 554, in check 'Cannot find a valid baseurl for repo: %s' % self.ui_id RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 2015-06-17 12:27:37 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Environment packages setup': Cannot find a valid baseurl for repo: base/7/x86_64 2015-06-17 12:27:37 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' 2015-06-17 12:27:37 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7arch=x86_64repo=osinfra=stock error was 14: curl#7 - Failed connect to mirrorlist.centos.org:80; No route to host Loaded plugins: fastestmirror 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:490 ENVIRONMENT DUMP - BEGIN 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:500 ENV BASE/error=bool:'True' 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:500 ENV BASE/exceptionInfo=list:'[(class 'yum.Errors.RepoError', RepoError(), traceback object at 0x2e26200)]' 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:504 ENVIRONMENT DUMP - END 2015-06-17 12:27:37 INFO otopi.context context.runSequence:417 Stage: Pre-termination -8- -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http
Re: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64
On 17.06.2015 13:28, Alon Bar-Lev wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Alon Bar-Lev alo...@redhat.com Cc: Users@ovirt.org Sent: Wednesday, June 17, 2015 2:26:18 PM Subject: Re: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 Hello Alon, On 17.06.2015 13:22, Alon Bar-Lev wrote: Please do not use multiple channels to discuss the same issue. I just make a habit of posting bug links on the ML as well. I see this as an 'FYI', since I often miss BZ if not posted on the list Of course, further discussion sould continue in BZ. Please do not do that. Discuss in list first, then if a bug should be opened you will instructed to do so. If you open a bug, avoid discussion in other mediums. Ok; next time I'll will discuss it here first, like always. This one seemed too obvouis for me though; I had it on two hosts.. Cheers! Thanks. If you think this is not right will stop doing so. - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Users@ovirt.org Sent: Wednesday, June 17, 2015 2:21:58 PM Subject: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 Hello, I just went ahead and filed [BZ1232714] because with ovirt 3.5.3 host deploy seens to fail on CentOS7 if there is no baseurl setting in yum repos: RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 [BZ1232714] https://bugzilla.redhat.com/show_bug.cgi?id=1232714 -8- 2015-06-17 12:27:37 DEBUG otopi.transaction transaction._prepare:77 preparing 'Yum Transaction' Loaded plugins: fastestmirror 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:138 Stage internal_packages METHOD otopi.plugins.otopi.network.hostname.Plugin._internal_packages 2015-06-17 12:27:37 DEBUG otopi.plugins.otopi.packagers.yumpackager yumpackager.verbose:88 Yum queue package iproute for install Loading mirror speeds from cached hostfile 2015-06-17 12:27:37 ERROR otopi.plugins.otopi.packagers.yumpackager yumpackager.error:97 Yum Cannot queue package iproute: Cannot find a valid baseurl for repo: base/7/x86_64 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/network/hostname.py, line 66, in _internal_packages self.packager.install(packages=('iproute',)) File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/packagers/yumpackager.py, line 303, in install ignoreErrors=ignoreErrors File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 865, in install **kwargs File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 509, in _queue provides = self._queryProvides(packages=(package,)) File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 447, in _queryProvides for po in self._yb.searchPackageProvides(args=packages): File /usr/lib/python2.7/site-packages/yum/__init__.py, line 3406, in searchPackageProvides where = self.returnPackagesByDep(arg) File /usr/lib/python2.7/site-packages/yum/__init__.py, line 4232, in returnPackagesByDep return self.pkgSack.searchProvides(depstring) File /usr/lib/python2.7/site-packages/yum/__init__.py, line 1079, in lambda pkgSack = property(fget=lambda self: self._getSacks(), File /usr/lib/python2.7/site-packages/yum/__init__.py, line 784, in _getSacks self.repos.populateSack(which=repos) File /usr/lib/python2.7/site-packages/yum/repos.py, line 344, in populateSack self.doSetup() File /usr/lib/python2.7/site-packages/yum/repos.py, line 158, in doSetup self.ayum.plugins.run('postreposetup') File /usr/lib/python2.7/site-packages/yum/plugins.py, line 188, in run func(conduitcls(self, self.base, conf, **kwargs)) File /usr/lib/yum-plugins/fastestmirror.py, line 197, in postreposetup_hook if downgrade_ftp and _len_non_ftp(repo.urls) == 1: File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 871, in lambda urls = property(fget=lambda self: self._geturls(), File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 868, in _geturls self._baseurlSetup() File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 834, in _baseurlSetup self.check() File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 554, in check 'Cannot find a valid baseurl for repo: %s' % self.ui_id RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 2015-06-17 12:27:37 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Environment packages setup
[ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.
Hello, I have the following problem with host-deploy on HE hosts: 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd plugin.execute:937 execute-output: ('/bin/systemctl', 'stop', 'vdsmd.service') stderr: Job for vdsmd.service canceled. 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py, line 106, in _packages self.services.state('vdsmd', False) File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 138, in state 'start' if state else 'stop' File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 77, in _executeServiceCommand raiseOnError=raiseOnError File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in execute command=args[0], RuntimeError: Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Package installation': Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback Loaded plugins: auto-update-debuginfo, fastestmirror I do not have 'standard' (=non ha) hosts; so I cannot tell for the others but suspect it relates to HE. Steps: 1. set the host to maintenance At this point, only the HE datacenter is still mounted: mount |grep nfs nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine type nfs (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.11.0.30,mountvers=3,mountport=58144,mountproto=udp,local_lock=none,addr=10.11.0.30) 2. Reinstall host - Error, host deactivated (Job for vdsmd.service canceled.) 3. A workaround is to shutdown sanlock: # systemctl stop vdsmd Job for vdsmd.service canceled. # sanlock shutdown # systemctl stop vdsmd 4. Now, host deploy works as expected. Versions: EL7 centos ovirt-3.5.2 -3.5.3 sanlock-3.2.2-2.el7.x86_64 vdsm 4.14.14 - 4.14.20 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.
On 17.06.2015 16:35, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 3:24:35 PM Subject: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. Hello, I have the following problem with host-deploy on HE hosts: 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd plugin.execute:937 execute-output: ('/bin/systemctl', 'stop', 'vdsmd.service') stderr: Job for vdsmd.service canceled. 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py, line 106, in _packages self.services.state('vdsmd', False) File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 138, in state 'start' if state else 'stop' File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 77, in _executeServiceCommand raiseOnError=raiseOnError File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in execute command=args[0], RuntimeError: Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Package installation': Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback Loaded plugins: auto-update-debuginfo, fastestmirror I do not have 'standard' (=non ha) hosts; so I cannot tell for the others but suspect it relates to HE. Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy fails on that. The capability to re-deploy an hosted-engine host from the Web UI is not available on oVirt 3.5, it will included in 3.6; please help us testing it on the first beta in a few weeks. By the way, why are you trying to re-deploy an host-deploy host from the web UI? Ok, did not know about that. I use 'Reinstall' from the UI. Until now, I thought the best way to update the hosts after new engine relases was: 1- update engine 2. set host to maintane 4. yum update on host for latest vdsm 3- Use reinstall from UI. Please advise! Steps: 1. set the host to maintenance At this point, only the HE datacenter is still mounted: mount |grep nfs nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine type nfs (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.11.0.30,mountvers=3,mountport=58144,mountproto=udp,local_lock=none,addr=10.11.0.30) 2. Reinstall host - Error, host deactivated (Job for vdsmd.service canceled.) 3. A workaround is to shutdown sanlock: # systemctl stop vdsmd Job for vdsmd.service canceled. # sanlock shutdown # systemctl stop vdsmd 4. Now, host deploy works as expected. Versions: EL7 centos ovirt-3.5.2 -3.5.3 sanlock-3.2.2-2.el7.x86_64 vdsm 4.14.14 - 4.14.20 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.
On 17.06.2015 16:47, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Simone Tiraboschi stira...@redhat.com Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 4:40:45 PM Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. On 17.06.2015 16:35, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 3:24:35 PM Subject: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. Hello, I have the following problem with host-deploy on HE hosts: 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd plugin.execute:937 execute-output: ('/bin/systemctl', 'stop', 'vdsmd.service') stderr: Job for vdsmd.service canceled. 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py, line 106, in _packages self.services.state('vdsmd', False) File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 138, in state 'start' if state else 'stop' File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 77, in _executeServiceCommand raiseOnError=raiseOnError File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in execute command=args[0], RuntimeError: Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Package installation': Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback Loaded plugins: auto-update-debuginfo, fastestmirror I do not have 'standard' (=non ha) hosts; so I cannot tell for the others but suspect it relates to HE. Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy fails on that. The capability to re-deploy an hosted-engine host from the Web UI is not available on oVirt 3.5, it will included in 3.6; please help us testing it on the first beta in a few weeks. By the way, why are you trying to re-deploy an host-deploy host from the web UI? Ok, did not know about that. I use 'Reinstall' from the UI. Until now, I thought the best way to update the hosts after new engine relases was: 1- update engine 2. set host to maintane 4. yum update on host for latest vdsm 3- Use reinstall from UI. Please advise! Running on your HE host: # hosted-engine --set-maintenance=local waiting for everything to be migrated if needed # yum update # hosted-engine --set-maintenance=none should do the job Ok, I see; I think one should restart vdsmd also; IIRC it is not restarted in the process? Steps: 1. set the host to maintenance At this point, only the HE datacenter is still mounted: mount |grep nfs nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine type nfs (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.11.0.30,mountvers=3,mountport=58144,mountproto=udp,local_lock=none,addr=10.11.0.30) 2. Reinstall host - Error, host deactivated (Job for vdsmd.service canceled.) 3. A workaround is to shutdown sanlock: # systemctl stop vdsmd Job for vdsmd.service canceled. # sanlock shutdown # systemctl stop vdsmd 4. Now, host deploy works as expected. Versions: EL7 centos ovirt-3.5.2 -3.5.3 sanlock-3.2.2-2.el7.x86_64 vdsm 4.14.14 - 4.14.20 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela
Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.
On 17.06.2015 18:30, Simone Tiraboschi wrote: Il giorno 17/giu/2015, alle ore 18:21, Daniel Helgenberger daniel.helgenber...@m-box.de ha scritto: On 17.06.2015 17:01, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Simone Tiraboschi stira...@redhat.com Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 4:49:07 PM Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. On 17.06.2015 16:47, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Simone Tiraboschi stira...@redhat.com Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 4:40:45 PM Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. On 17.06.2015 16:35, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 3:24:35 PM Subject: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. Hello, I have the following problem with host-deploy on HE hosts: 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd plugin.execute:937 execute-output: ('/bin/systemctl', 'stop', 'vdsmd.service') stderr: Job for vdsmd.service canceled. 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py, line 106, in _packages self.services.state('vdsmd', False) File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 138, in state 'start' if state else 'stop' File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 77, in _executeServiceCommand raiseOnError=raiseOnError File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in execute command=args[0], RuntimeError: Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Package installation': Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback Loaded plugins: auto-update-debuginfo, fastestmirror I do not have 'standard' (=non ha) hosts; so I cannot tell for the others but suspect it relates to HE. Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy fails on that. The capability to re-deploy an hosted-engine host from the Web UI is not available on oVirt 3.5, it will included in 3.6; please help us testing it on the first beta in a few weeks. By the way, why are you trying to re-deploy an host-deploy host from the web UI? Ok, did not know about that. I use 'Reinstall' from the UI. Until now, I thought the best way to update the hosts after new engine relases was: 1- update engine 2. set host to maintane 4. yum update on host for latest vdsm 3- Use reinstall from UI. Please advise! Running on your HE host: # hosted-engine --set-maintenance=local waiting for everything to be migrated if needed # yum update # hosted-engine --set-maintenance=none should do the job Ok, I see; I think one should restart vdsmd also; IIRC it is not restarted in the process? If updated it will be restarted by its rpm postscript. Ok. However, I still need reinstall for configuration updates like gluster / firewall etc. RPM should perform intelligent upgrading of packages with configuration files at least saving them on conf.rpmsave and alerting if not forward compatible. If not, it's a packaging bug. Also, hosted-enginge-deploy is using 'reinstall'. How do I work around that? Sorry, I didn't get it. I meant 'Reinstall' does a lot of other things apart from updating packages. For instance, what am I supposed to do if I switch on kdump integration or gluster on the cluster? AFIK this only works with transparently for engine 'Reinstall'. As for the he-setup part; when deploying the first or any additional hosts the same routine as reinstall will be triggered - in the 'Installing host' section. Steps: 1. set the host to maintenance At this point, only the HE datacenter is still mounted: mount |grep nfs nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine type nfs (rw,relatime,vers=3,rsize=1048576
Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.
On 17.06.2015 17:01, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Simone Tiraboschi stira...@redhat.com Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 4:49:07 PM Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. On 17.06.2015 16:47, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Simone Tiraboschi stira...@redhat.com Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 4:40:45 PM Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. On 17.06.2015 16:35, Simone Tiraboschi wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com Sent: Wednesday, June 17, 2015 3:24:35 PM Subject: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled. Hello, I have the following problem with host-deploy on HE hosts: 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd plugin.execute:937 execute-output: ('/bin/systemctl', 'stop', 'vdsmd.service') stderr: Job for vdsmd.service canceled. 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method exception Traceback (most recent call last): File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in _executeMethod method['method']() File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py, line 106, in _packages self.services.state('vdsmd', False) File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 138, in state 'start' if state else 'stop' File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 77, in _executeServiceCommand raiseOnError=raiseOnError File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in execute command=args[0], RuntimeError: Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Package installation': Command '/bin/systemctl' failed to execute 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback Loaded plugins: auto-update-debuginfo, fastestmirror I do not have 'standard' (=non ha) hosts; so I cannot tell for the others but suspect it relates to HE. Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy fails on that. The capability to re-deploy an hosted-engine host from the Web UI is not available on oVirt 3.5, it will included in 3.6; please help us testing it on the first beta in a few weeks. By the way, why are you trying to re-deploy an host-deploy host from the web UI? Ok, did not know about that. I use 'Reinstall' from the UI. Until now, I thought the best way to update the hosts after new engine relases was: 1- update engine 2. set host to maintane 4. yum update on host for latest vdsm 3- Use reinstall from UI. Please advise! Running on your HE host: # hosted-engine --set-maintenance=local waiting for everything to be migrated if needed # yum update # hosted-engine --set-maintenance=none should do the job Ok, I see; I think one should restart vdsmd also; IIRC it is not restarted in the process? If updated it will be restarted by its rpm postscript. Ok. However, I still need reinstall for configuration updates like gluster / firewall etc. Also, hosted-enginge-deploy is using 'reinstall'. How do I work around that? Steps: 1. set the host to maintenance At this point, only the HE datacenter is still mounted: mount |grep nfs nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine type nfs (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.11.0.30,mountvers=3,mountport=58144,mountproto=udp,local_lock=none,addr=10.11.0.30) 2. Reinstall host - Error, host deactivated (Job for vdsmd.service canceled.) 3. A workaround is to shutdown sanlock: # systemctl stop vdsmd Job for vdsmd.service canceled. # sanlock shutdown # systemctl stop vdsmd 4. Now, host deploy works as expected. Versions: EL7 centos ovirt-3.5.2 -3.5.3 sanlock-3.2.2-2.el7.x86_64 vdsm 4.14.14 - 4.14.20 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht
Re: [ovirt-users] Need Advice on Hosted Engine installation
On 07.06.2015 21:14, wodel youchi wrote: Hi, We are installing a new ovirt platform for a client. this is our first deployment. we chose Hosted Engine install. here is the hardware used and the network configuration used be patient :) We have 02 hypervisors for now. each sever has 8 nic ports, we will use bonding. A NAS with nfs4 for the Engine_VM the ISO and Export domains. And iSCSI SAN for the rest of the VMs (Data domain) At first we chose as a network configuration: 10.0.0.X/16 as DMZ (ovirtmgmt will use this network) 172.16.1/24 as Storage network. we've configured our nfs to export only on this network. - We didn't configure the bonding manually at first, we thought that we could do it once the engine is up we couldn't :-( This should be strait forward, but it's a little 'ovirt' - just think of hierarchical structures; a resqource needs to be on the top level to be able to assigned to the lower level. - Datacenter - Cluster - Host I'll walk you through the UI way: 1. In Datacenter Tab / logical networks create all the networks you need with VLAN tags and MTU. There should already be a ovrtmgmt network, you cannot edit this; 2. In the cluster tab, select a cluster and use 'add networks' in the logical networks tab, add the appropriate networks to your cluster. Take care to select/deseclect required networks and types there ( eg. vm networks). If a host is missing a required network (see next step), it will not be able to start VMs. 3. In the hosts Tab select a host, then 'setup host networking' The rest is quite cool drag and drop stuff: if you need a bond, drag the interfaces over each other. Then, a bridge will be created with dragging the unassigned vlans to an interface. There, you can also setup (ipv4 only) networks. Take care to at least assign all required networks! select validate and save. Repeat with the remaining hosts. for ovirtmgmt, if we create the bond after the engine's installation, we could not modify the configuration, error message network in use for the storage network, we could't attach this logical network to the nic used for the storage, because when we do that we loose the connexion to nfs for the VM engine... so we had to export the VM engine nfs's share on DMZ and we had to configure bonding before starting the hosted engine installation. We also configured bonding on storage network, but after the engine installation, we couldn't attach this bonding to the logical network Storage, error message you have to specify network address if static protocol is used, the IP address is specified, it's the IP address of the bonding... :-( --- Questions: - Do we missed anything on network configuration capabilities of ovirt? or the hosted engine is really a special case? - What is the best way to configure ovirt's Hosted Engine storage? - For the rest of the network, do we have to configure bonding and bridging from the GUI only? (not manually) thanks in advance. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Block size?
On 16.06.2015 10:36, Roman Nikolayevich Drovalev wrote: Hello, Hello Drovalev, Tell please, what size of the block to me set on the Storage for the greatest productivity oVirt? 512K, 256K, 128K, 64K, 8K or 4K ? I think it is safe to say if you have a good general performance with the storage it also performs well with oVirt. Therefore it might be the wrong place to ask; however, block sizes are only one of many factors in storage domain performance. No one but yourself or an expert at your site can answer this for you. I would direct you to the excellent [iozone] utility witch leverages much of the testing for you. Hope that helps, [iozone] http://www.iozone.org/ Drovalev Roman -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt 3.5.3 VDSM on CentOS Virt SIG
Hello Sandro, frist thanks for the great news! On 15.06.2015 10:28, Sandro Bonazzola wrote: Hi, today oVirt 3.5.3 has been released[1] VDSM 4.16.20 and its dependencies has been tagged as release as well within the Virt SIG build repositories for CentOS Linux 7. In order to enable the needed repositories you need to create /etc/yum.repos.d/centos-virt-sig.repo with the following content: I tried and seem to be unable to find any adequate release notes for VDSM. Can someone firect me there or what are the benefits of vdsm 4.16.20 over 4.16.16? Thanks! [virt7-kvm-common-release] name=virt7-kvm-common-release baseurl=http://cbs.centos.org/repos/virt7-kvm-common-release/x86_64/os enabled=1 gpgcheck=0 [virt7-ovirt-common-release] name=virt7-ovirt-common-release baseurl=http://cbs.centos.org/repos/virt7-ovirt-common-release/x86_64/os enabled=1 gpgcheck=0 [virt7-ovirt-35-release] name=virt7-ovirt-35-release baseurl=http://cbs.centos.org/repos/virt7-ovirt-35-release/x86_64/os enabled=1 gpgcheck=0 An initial submission for the repository rpm has been pushed[2] and is waiting for public GPG keys to be added. [1] http://lists.ovirt.org/pipermail/announce/2015-June/000175.html [2] https://gerrit.ovirt.org/41403 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Move VirtIO disk to External LUN disk
On 06.06.2015 17:48, Juan Carlos YJ. Lin wrote: I have performance issue with the VirtIO disks and like to move it to External LUN on the ISCI storage What version are you using? I assume here 3.5. Do you want the disk image moved or the *content* of the image moved to your iscsi lun so the VM boots off directly from the lun? The first thing is quite easy and I assume this: to use the ISCSI pathtrought How I can do that? 1. connect your LUN to your hosts, - In the GUI, 2. create a new iscsi Storage domain on it, 3. Shut down the affected VM, 4. Navigate to the disk tap, select the affected disks, right-click - move disk (or select several and use the button). In the pop up window, select the target storage domain (your new iscsi LUN). The SPM host will now do the moving using the qemu-img or dd command depending on your ovirt version. Note, if the source domain was NFS, your images are converted from files to block storage, with all the pros and cons. Hope that helps, Juan Carlos Lin Unisoft S.A. +595-993-288330 System-wide Disclaimer --- Antes de imprimir, recuérdese de su compromiso con el Medio Ambiente Aviso: Este mensaje es dirigido para su destinatario y contiene informaciones que no pueden ser usadas por otras personas que no sean su(s) destinatario(s). La retransmisión del contenido no está autorizada fuera del contexto de su envío y a quien corresponde. El uso no autorizado de la información en este mensaje se halla penado por las leyes vigentes en todo el mundo. Si ha recibido este mensaje por error, por favor bórrala y notifique al remitente en la brevedad posible. El contenido de este mensaje no es responsabilidad de la Empresa y debe ser atribuido siempre a su autor. Gracias. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt vm disk space not release
On 05.06.2015 07:58, smiling dream wrote: Thanks for you reply . So if I understand you correctly you want to reduce the space a thin provision disk takes up on the NFS share because you deleted files within the VM? Yes Is there any others way to reclaim disk space , Since thin provision in this case relates to sparse files you cannot delete files in the VM and have the disk space reclaimed. But ovirt since v. 3.5 is using qemu-img to copy disk images. IRC this process should very well result in a smaller image. So, just use disk move and move the disk images to a new storage domain and it should do the trick. Another quite elegant way might be to use [fstrim]. But is is highly depended of your VM config, storage domain, and needs virtio-scsi to my knowlage. Another way to avoid this altogether is to to use a compressing file system like ZFS for your storage domain. HTH [fstrim] http://dustymabe.com/2013/06/11/recover-space-from-vm-disk-images-by-using-discardfstrim/ coz i have bulks of vm under thin provision manual process kind of impossible . As i know Vmware have this kind of facility to reclaim from thin provision . On Fri, Jun 5, 2015 at 11:48 AM, Alex McWhirter alexmcwhir...@triadic.us mailto:alexmcwhir...@triadic.us wrote: Sorry, I must have misunderstood. So if I understand you correctly you want to reduce the space a thin provision disk takes up on the NFS share because you deleted files within the VM? I'm pretty sure that thin provisioned disks can only grow. Once they have been expanded there's no way to reclaim that space on the NFS share. The only thing I think you can do is create a new thin provisioned disk and copy the old data over at the file level, not the block level. Afterwards you could delete the original disk. Sent from my iPhone On Jun 5, 2015, at 1:19 AM, smiling dream smiling.dr...@gmail.com mailto:smiling.dr...@gmail.com wrote: I mean vm internal disk space . All of VM under thin provision . If i delete files and free space from VM still ovirt stroage showing vm disk space is used . How to reclaim disk space from guest VM . On Fri, Jun 5, 2015 at 11:14 AM, Alex McWhirter alexmcwhir...@triadic.us mailto:alexmcwhir...@triadic.us wrote: From what I understand, ovirt simply reports the available storage that the NFS server says it is free. Ovirt itself doesn't control the storage. Under the storage tab click on the storage domain you're having issues with and check to see if the images themselves have been deleted or if they are still there. When you delete a virtual machine you have the option to delete the virtual image as well. If a virtual machine has more than one image then I'm not sure how this is handled as I've only used single images for virtual machines. Any additional storage I need I handle over NFS directly to the virtual machine. Perhaps ovirt doesn't automatically delete secondary images? Either way you should be able to delete them manually and reclaim space. Sent from my iPhone On Jun 5, 2015, at 12:39 AM, smiling dream smiling.dr...@gmail.com mailto:smiling.dr...@gmail.com wrote: I have ovirt 3.5.1 installed with VDSM 4.16.14 EL6 node and NFS as storage . In my infrastructure i have multiple instance of centos / windows vm under ovirt and once guest vm disk space is used ovirt is not release guest vm disk space after delete . Looking for help . Regards Suvro ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt-guest-agent on EL7 not starting up correctly, requires restart
On 03.06.2015 15:00, Vinzenz Feenstra wrote: Hi Daniel, Hello Vinzenz! the oVirt Guest agent service won't start just by installation via yum. You have to run service ovirt-guest-agent start However IIRC with the next boot of the VM it would start since it is getting enabled by default. If you deploy the guest agent you have to start the agent explicitly. (This behavior is aligned with the Fedora packaging guidelines) The deployment is done by foreman, the package is installed by kickstart directly. When installed, it is enabled. Yet, after the reboot of the machine, the service is stated by systemd but not working. Only after a manual restart can fix this. However, when I just tried a reboot on a random host it was working... So - never mind and thanks ;) Regards, On 06/03/2015 12:49 PM, Daniel Helgenberger wrote: Hello, after deploying a few CentOS7.1 hosts I realized that the ovirt-guest-agent does not start up correctly at system boot, requiring a manual restart. Afterwards it is reporting data to engine. I have only these lines: Jun 03 12:39:39 pipeline.int.m-box.de systemd[1]: Starting oVirt Guest Agent... Jun 03 12:39:40 pipeline.int.m-box.de systemd[1]: Started oVirt Guest Agent. Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7136]: pam_succeed_if(ovirt-locksession:auth): requirement user = ovirtagent was met by user ovirtagent Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7136]: running '/usr/share/ovirt-guest-agent/LockActiveSession.py' with root privileges on behalf of 'ovirtagent' Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7163]: pam_succeed_if(ovirt-locksession:auth): requirement user = ovirtagent was met by user ovirtagent Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7163]: running '/usr/share/ovirt-guest-agent/LockActiveSession.py' with root privileges on behalf of 'ovirtagent' Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7169]: pam_succeed_if(ovirt-locksession:auth): requirement user = ovirtagent was met by user ovirtagent Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7169]: running '/usr/share/ovirt-guest-agent/LockActiveSession.py' with root privileges on behalf of 'ovirtagent' Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7175]: pam_succeed_if(ovirt-locksession:auth): requirement user = ovirtagent was met by user ovirtagent Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7175]: running '/usr/share/ovirt-guest-agent/LockActiveSession.py' with root privileges on behalf of 'ovirtagent' Versions: Linux pipeline.int.m-box.de 3.10.0-229.4.2.el7.x86_64 #1 SMP Wed May 13 10:06:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux qemu-guest-agent-2.1.0-4.el7.x86_64 ovirt-guest-agent-common-1.0.10-2.el7.noarch -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] win 2008 kvm import
On 29.05.2015 02:53, Grant Pasley wrote: hi all, Hello Grant, i am going to migrate a production windows 2008 image that is currently running on kvm over to ovirt 3.5.2 this weekend. are there any tips, any do's and dont's i should be aware of before doing this? Well, if waiting for 3.6 is not an option (there, v2v integration is a major new feature [1]) you can use manual v2v command line [2] just as well. This is non destructive and leaves the original VM intact. Basically: # virt-v2v -o rhev -osd storage.example.com:/exportdomain --network rhevm vm-name The trick is '-o rhev'. It basically drops the VM from libvirt on your export domain; it worked quite well for me. It also takes care of installing virtio dirvers in the image. There where some pitfalls, though - I can't remember all of them. But one is of course your old host needs have NTFS write support in some way; and (at leat a year back) there was no package for the virtio drivers on CentOS; but they just need to be put in the right place. should i install the windows guest tools before moving over or once done? what about having to install the virtio drivers when doing and new windows vm in order to see the disks, how is this achieved with an already created kvm image? [1] http://www.ovirt.org/Features/virt-v2v_Integration [2] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization_for_Servers/2.2/html/Administration_Guide/virt-v2v-scripts.html -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Kernel panic - not syncing: An NMI occurred on HP Dl360g6
Hello Gianluca, On 27.05.2015 17:42, Gianluca Cecchi wrote: Do you have chance to access iLO web administration page of the server and check Integrated management log (IML) And/Or ILO event log And verify if anything has ben registered there? no, strangely. I only see the server reset in iLO logs; IML log is clean. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Kernel panic - not syncing: An NMI occurred on HP Dl360g6
On 27.05.2015 16:50, Alex Crow wrote: Hi, Hello, thanks for getting back to me. If you've had a crash caused by an NMI it can often be a hardware issue. The first thing I checked is IML logs - nothing there. These machines are quite resilient and report almost everything. The HW diag is fine... Maybe worth running some H/W diagnostics. Cheers Alex On 27/05/15 15:40, Daniel Helgenberger wrote: Hello, can somebody help me getting to the bottom of this panic? vdsm.log was empty (stopped 10min prior panic) and is rotated away already (forgot to save it...) Might this be [1]? However, I do not have an active subscription so I cannot acccess the helpdoc. Thanks! [1] https://access.redhat.com/solutions/442193 [64457.990217] kvm: zapping shadow pages for mmio generation wraparound [64469.916912] kvm [21434]: vcpu0 unhandled rdmsr: 0x1ad [71035.222120] ixgbe :04:00.0 ens1f0: NIC Link is Down [71035.223699] storageA: port 1(ens1f0.2) entered disabled state [71035.223932] storageB: port 1(ens1f0.3) entered disabled state [71035.224173] server: port 1(ens1f0.10) entered disabled state [71035.224447] workstations: port 1(ens1f0.11) entered disabled state [71035.572619] bnx2 :02:00.0 enp2s0f0: NIC Copper Link is Down [71036.225789] ovirtmgmt: port 1(enp2s0f0) entered disabled state [71091.146266] hpwdt: Unexpected close, not stopping watchdog! [71138.579788] ovirtmgmt: port 2(vnet0) entered disabled state [71138.580067] device vnet0 left promiscuous mode [71138.580079] ovirtmgmt: port 2(vnet0) entered disabled state [71146.413292] Kernel panic - not syncing: An NMI occurred. Depending on your system the reason for the NMI is logged in any one of the following resources: 1. Integrated Management Log (IML) 2. OA Syslog 3. OA Forward Progress Log 4. iLO Event Log [71146.739719] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G I -- 3.10.0-229.4.2.el7.x86_64 #1 [71146.858234] Hardware name: HP ProLiant DL360 G6, BIOS P64 07/02/2013 [71146.934129] a026d2d8 f7d5e6c540f56fc7 8807ffc05de0 81604eaa [71147.022535] 8807ffc05e60 815fe71e 0008 8807ffc05e70 [71147.111065] 8807ffc05e10 f7d5e6c540f56fc7 8101bad9 c9000a806072 [71147.199595] Call Trace: [71147.228779] NMI [81604eaa] dump_stack+0x19/0x1b [71147.297491] [815fe71e] panic+0xd8/0x1e7 [71147.354746] [8101bad9] ? sched_clock+0x9/0x10 [71147.418233] [a026c8ed] hpwdt_pretimeout+0xdd/0xe0 [hpwdt] [71147.494192] [8160d6d9] nmi_handle.isra.0+0x69/0xb0 [71147.562873] [8160d8dd] do_nmi+0x1bd/0x340 [71147.622201] [8160cb31] end_repeat_nmi+0x1e/0x2e [71147.687768] [8133d4d4] ? intel_idle+0xe4/0x170 [71147.752291] [8133d4d4] ? intel_idle+0xe4/0x170 [71147.816818] [8133d4d4] ? intel_idle+0xe4/0x170 [71147.881343] EOE [814aaa20] cpuidle_enter_state+0x40/0xc0 [71147.961483] [814aab65] cpuidle_idle_call+0xc5/0x200 [71148.031208] [8101d21e] arch_cpu_idle+0xe/0x30 [71148.094694] [810c6985] cpu_startup_entry+0xf5/0x290 [71148.164420] [815f33e7] rest_init+0x77/0x80 [71148.224791] [81a45057] start_kernel+0x429/0x44a [71148.290354] [81a44a37] ? repair_env_string+0x5c/0x5c [71148.361120] [81a44120] ? early_idt_handlers+0x120/0x120 [71148.434999] [81a445ee] x86_64_start_reservations+0x2a/0x2c [71148.511997] [81a44742] x86_64_start_kernel+0x152/0x175 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Kernel panic - not syncing: An NMI occurred on HP Dl360g6
Hello, can somebody help me getting to the bottom of this panic? vdsm.log was empty (stopped 10min prior panic) and is rotated away already (forgot to save it...) Might this be [1]? However, I do not have an active subscription so I cannot acccess the helpdoc. Thanks! [1] https://access.redhat.com/solutions/442193 [64457.990217] kvm: zapping shadow pages for mmio generation wraparound [64469.916912] kvm [21434]: vcpu0 unhandled rdmsr: 0x1ad [71035.222120] ixgbe :04:00.0 ens1f0: NIC Link is Down [71035.223699] storageA: port 1(ens1f0.2) entered disabled state [71035.223932] storageB: port 1(ens1f0.3) entered disabled state [71035.224173] server: port 1(ens1f0.10) entered disabled state [71035.224447] workstations: port 1(ens1f0.11) entered disabled state [71035.572619] bnx2 :02:00.0 enp2s0f0: NIC Copper Link is Down [71036.225789] ovirtmgmt: port 1(enp2s0f0) entered disabled state [71091.146266] hpwdt: Unexpected close, not stopping watchdog! [71138.579788] ovirtmgmt: port 2(vnet0) entered disabled state [71138.580067] device vnet0 left promiscuous mode [71138.580079] ovirtmgmt: port 2(vnet0) entered disabled state [71146.413292] Kernel panic - not syncing: An NMI occurred. Depending on your system the reason for the NMI is logged in any one of the following resources: 1. Integrated Management Log (IML) 2. OA Syslog 3. OA Forward Progress Log 4. iLO Event Log [71146.739719] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G I -- 3.10.0-229.4.2.el7.x86_64 #1 [71146.858234] Hardware name: HP ProLiant DL360 G6, BIOS P64 07/02/2013 [71146.934129] a026d2d8 f7d5e6c540f56fc7 8807ffc05de0 81604eaa [71147.022535] 8807ffc05e60 815fe71e 0008 8807ffc05e70 [71147.111065] 8807ffc05e10 f7d5e6c540f56fc7 8101bad9 c9000a806072 [71147.199595] Call Trace: [71147.228779] NMI [81604eaa] dump_stack+0x19/0x1b [71147.297491] [815fe71e] panic+0xd8/0x1e7 [71147.354746] [8101bad9] ? sched_clock+0x9/0x10 [71147.418233] [a026c8ed] hpwdt_pretimeout+0xdd/0xe0 [hpwdt] [71147.494192] [8160d6d9] nmi_handle.isra.0+0x69/0xb0 [71147.562873] [8160d8dd] do_nmi+0x1bd/0x340 [71147.622201] [8160cb31] end_repeat_nmi+0x1e/0x2e [71147.687768] [8133d4d4] ? intel_idle+0xe4/0x170 [71147.752291] [8133d4d4] ? intel_idle+0xe4/0x170 [71147.816818] [8133d4d4] ? intel_idle+0xe4/0x170 [71147.881343] EOE [814aaa20] cpuidle_enter_state+0x40/0xc0 [71147.961483] [814aab65] cpuidle_idle_call+0xc5/0x200 [71148.031208] [8101d21e] arch_cpu_idle+0xe/0x30 [71148.094694] [810c6985] cpu_startup_entry+0xf5/0x290 [71148.164420] [815f33e7] rest_init+0x77/0x80 [71148.224791] [81a45057] start_kernel+0x429/0x44a [71148.290354] [81a44a37] ? repair_env_string+0x5c/0x5c [71148.361120] [81a44120] ? early_idt_handlers+0x120/0x120 [71148.434999] [81a445ee] x86_64_start_reservations+0x2a/0x2c [71148.511997] [81a44742] x86_64_start_kernel+0x152/0x175 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Getting kdump integration to work
Hello, I followed the feature's page [1] and added to my test hosts the following lines /etc/kdump: fence_kdump_nodes othernode-in-cluster fence_kdump_args -p 7410 -f auto -i 5 Further, I added a firewall rule on both machines: -A INPUT -p udp --dport 7410 -j ACCEPT and restarted kdump. Yet I get on the engine's side: 2015-05-26 10:41:54,113 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-7) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: Kdump integration is enabled for host 'hv02', but kdump is not configured properly on host. Thanks! Versions: CentOS7.1 3.10.0-229.4.2.el7.x86_64 #1 SMP Wed May 13 10:06:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux ovirt-engine-cli-3.5.0.5-1.el7.centos.noarch ovirt-engine-userportal-3.5.2.1-1.el7.centos.noarch ovirt-engine-webadmin-portal-3.5.2.1-1.el7.centos.noarch ovirt-guest-agent-common-1.0.10-2.el7.noarch ovirt-engine-jboss-as-7.1.1-1.el7.x86_64 ovirt-release35-004-1.noarch ovirt-engine-sdk-python-3.5.2.1-1.el7.centos.noarch ovirt-image-uploader-3.5.1-1.el7.centos.noarch ovirt-engine-setup-plugin-ovirt-engine-common-3.5.2.1-1.el7.centos.noarch ovirt-engine-websocket-proxy-3.5.2.1-1.el7.centos.noarch ovirt-host-deploy-java-1.3.1-1.el7.noarch ovirt-engine-reports-3.5.2-0.3.el7.centos.noarch ovirt-engine-dwh-setup-3.5.2-0.1.el7.centos.noarch ovirt-engine-tools-3.5.2.1-1.el7.centos.noarch ovirt-engine-setup-3.5.2.1-1.el7.centos.noarch ovirt-engine-restapi-3.5.2.1-1.el7.centos.noarch ovirt-engine-3.5.2.1-1.el7.centos.noarch ovirt-engine-setup-base-3.5.2.1-1.el7.centos.noarch ovirt-engine-setup-plugin-websocket-proxy-3.5.2.1-1.el7.centos.noarch ovirt-engine-reports-setup-3.5.2-0.3.el7.centos.noarch ovirt-engine-dwh-3.5.2-0.1.el7.centos.noarch ovirt-engine-dbscripts-3.5.2.1-1.el7.centos.noarch ovirt-engine-setup-plugin-ovirt-engine-3.5.2.1-1.el7.centos.noarch ovirt-engine-backend-3.5.2.1-1.el7.centos.noarch ovirt-iso-uploader-3.5.2-1.el7.centos.noarch ovirt-engine-extensions-api-impl-3.5.2.1-1.el7.centos.noarch ovirt-host-deploy-1.3.1-1.el7.noarch ovirt-engine-lib-3.5.2.1-1.el7.centos.noarch [1] http://www.ovirt.org/Fence_kdump -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Getting kdump integration to work
On 26.05.2015 10:54, Martin Perina wrote: Hi Daniel, Hello Martin, - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: users@ovirt.org Sent: Tuesday, 26 May, 2015 10:45:34 AM Subject: [ovirt-users] Getting kdump integration to work Hello, I followed the feature's page [1] and added to my test hosts the following lines /etc/kdump: fence_kdump_nodes othernode-in-cluster fence_kdump_args -p 7410 -f auto -i 5 Please don't do this, this is added automatically when you deploy you host using oVirt UI with Kdump integration enabled in PM tab of the host. Further, I added a firewall rule on both machines: -A INPUT -p udp --dport 7410 -j ACCEPT Same as above, this is needed only on engine hosts and it's done automatically during oVirt engine installation. and restarted kdump. Same as above, this is done automatically during host deploy. Yet I get on the engine's side: 2015-05-26 10:41:54,113 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-7) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: Kdump integration is enabled for host 'hv02', but kdump is not configured properly on host. Could you please try to do it properly: 1. Put host to maintenance 2. Enable Kdump integration in PM tab 3. Reinstall the host (click Reinstall when you select the host in Hosts tab) Thanks! This procedure seem to work, engine reporting kdump as activated. It was rather unclear to me, since I run hosted engine: After host deploy they are in the default state, no PM configured. Hence, kdump integration is disabled and will never activate since PM has to be configured in the first place to install. Do you think it is a better idea to always activate kdump in the host deploy stage so it can later be activated correctly with PM configured? Thanks a lot Martin Perina Cheers! Thanks! Versions: CentOS7.1 3.10.0-229.4.2.el7.x86_64 #1 SMP Wed May 13 10:06:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux ovirt-engine-cli-3.5.0.5-1.el7.centos.noarch ovirt-engine-userportal-3.5.2.1-1.el7.centos.noarch ovirt-engine-webadmin-portal-3.5.2.1-1.el7.centos.noarch ovirt-guest-agent-common-1.0.10-2.el7.noarch ovirt-engine-jboss-as-7.1.1-1.el7.x86_64 ovirt-release35-004-1.noarch ovirt-engine-sdk-python-3.5.2.1-1.el7.centos.noarch ovirt-image-uploader-3.5.1-1.el7.centos.noarch ovirt-engine-setup-plugin-ovirt-engine-common-3.5.2.1-1.el7.centos.noarch ovirt-engine-websocket-proxy-3.5.2.1-1.el7.centos.noarch ovirt-host-deploy-java-1.3.1-1.el7.noarch ovirt-engine-reports-3.5.2-0.3.el7.centos.noarch ovirt-engine-dwh-setup-3.5.2-0.1.el7.centos.noarch ovirt-engine-tools-3.5.2.1-1.el7.centos.noarch ovirt-engine-setup-3.5.2.1-1.el7.centos.noarch ovirt-engine-restapi-3.5.2.1-1.el7.centos.noarch ovirt-engine-3.5.2.1-1.el7.centos.noarch ovirt-engine-setup-base-3.5.2.1-1.el7.centos.noarch ovirt-engine-setup-plugin-websocket-proxy-3.5.2.1-1.el7.centos.noarch ovirt-engine-reports-setup-3.5.2-0.3.el7.centos.noarch ovirt-engine-dwh-3.5.2-0.1.el7.centos.noarch ovirt-engine-dbscripts-3.5.2.1-1.el7.centos.noarch ovirt-engine-setup-plugin-ovirt-engine-3.5.2.1-1.el7.centos.noarch ovirt-engine-backend-3.5.2.1-1.el7.centos.noarch ovirt-iso-uploader-3.5.2-1.el7.centos.noarch ovirt-engine-extensions-api-impl-3.5.2.1-1.el7.centos.noarch ovirt-host-deploy-1.3.1-1.el7.noarch ovirt-engine-lib-3.5.2.1-1.el7.centos.noarch [1] http://www.ovirt.org/Fence_kdump -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Disable Multipathing?
On 26.05.2015 20:14, Kiril L wrote: Multipath makes mounting HDDs harder not to mention emergency mode and device-mapper: table: 253:6: multipath: error getting device There was a discussion about this quite recently [1]; reading this might be inserting, too. The reason for this is the general 'to fit everyone' approach of the default multipath.conf. I do not have multiple paths to the storage. In my case can i disable Multipath - is there a right way to do it or i have to use black listing? You can blacklist everything, no problem. But you need make some changes to your mulipath.conf. Please just add the lines and do not remove or disable any services: to the second line (2) in multipath.conf, add # RHEV PRIVATE to keep host-deploy from overwriting the file. Then, somewhere in the file: blacklist { devnode * } Then, you need to run: multipath -d -v3 to test (it should now list all devices as blacklisted) and if successful: multipath Effectively blacklisting everything while dm-multipah continues to run. Please note, if you are running oVirt node, you also need to run persist /etc/multipath.conf Also, you have to do this on every host in your data centers naturally. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [1] https://www.mail-archive.com/users@ovirt.org/msg26314.html -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Configuring ilo2 PM; passing ssh options
On 23.05.2015 15:04, Martin Perina wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Martin Perina mper...@redhat.com Cc: users@ovirt.org, Eli Mesika emes...@redhat.com Sent: Thursday, May 21, 2015 9:31:50 PM Subject: Re: [ovirt-users] Configuring ilo2 PM; passing ssh options On 21.05.2015 21:07, Martin Perina wrote: Hi Daniel, I'm cc'ing Eli as we are currently facing issue with fence agents regression for passing boolean flags to fence agents. Thanks for getting back to me so quickly. I looked at man page of fence_ilo2 again and I haven't found --tls1.0 option at all. Strange? FYI I am running CentOS7.1 hosts; installed fence: fence-agents-ilo2-4.0.11-11.el7_1.x86_64 Here, clearly I have this option. The fence agent itself seems to use gnutls successfully: # fence_ilo2 -a 10.11.0.212 --username=ovirt -p ** -v -o status --ssl-insecure --tls1.0 Running command: /usr/bin/gnutls-cli --priority NORMAL:-VERS-TLS1.2:-VERS-TLS1.1:+VERS-TLS1.0:%LATEST_RECORD_VERSION --insecure --crlf -p 443 10.11.0.212 Ahh, I looked at older version on F20. But I can't find --tls1.0 option even on man page for fence-agents-ilo2-4.0.11-11.el7_1.x86_64 :-( So if you really see this option, please take a look at the end of man page, where you can find STDIN format options names and add it along with ssl_insecure to options in Power Management tab of the hosts (instead of tls1_0 use what you find in your man page): Many thanks! Using the STDIN options solved this issue. I finally get: Test succeeded: on I am using these options in the options field for the ilo2 fencing module: ssl_insecure=1,tls1.0=1 Also working: ssl_insecure=1,notls=1 ssl_insecure=1,tls1_0=1 True. What still puzzles me is the tls1.0 option. In the my man pages the STDIN option ins called 'tls1.0'. Also, can you check wherever you have a 'notls' option to force SSL3.0? This also works for me. I think all the info you gave here, esp. using the stdin binary options in a way 'option=0|1' is quite essential to get fenceing working. I had a quick look over some man pages and I think all the standard fence agents are used in the same manner. Also, a hint might be in order that old ilo boards can't cope with TLS and need it disabled. I think here [1] [2]? [1] http://www.ovirt.org/Automatic_Fencing [2] http://www.ovirt.org/OVirt_Administration_Guide#Host_Power_Management_Settings_Explained Thanks! Thanks Martin Perina I put the whole command output below [1] To specify --ssl-insecure please add following into options in Power Management tab of the host: ssl_insecure=1 Thanks for pointing out how to actually use these options. Martin Perina - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Martin Perina mper...@redhat.com Cc: users@ovirt.org Sent: Thursday, May 21, 2015 8:11:40 PM Subject: Re: [ovirt-users] Configuring ilo2 PM; passing ssh options On 12.05.2015 09:16, Martin Perina wrote: Hi Daniel, Hello Martin, sorry for answering that late. And thanks for pointing me to the man page! I always seem to forget that. options defined in PM tab are used to pass custom settings of specific fence agent. In you case please take a look at man page for fence_ilo2. I looked there briefly and I'm afraid that your parameter is not supported. Ok, this command runs fine and uses XML: fence_ilo2 -a 10.11.0.212 --username=ovirt -p secret -v -o status --ssl-insecure --tls1.0 However, using options --tls1.0 and --ssl-insecure does not work in the engine. What puzzles me: the fence agent seems to use an SSL connection and XML; while the GUI wants an SSH port form me? There I get the error: Unknown options .. now I only get Test succeeded - unknown (witch actually is not successful) Thanks! I see that fence_ilo3_ssh and fence_ilo4_ssh should support passing that option for SSH connection, so you could try them if they work with you fence device. Martin Perina - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: users@ovirt.org Sent: Monday, May 11, 2015 5:53:10 PM Subject: [ovirt-users] Configuring ilo2 PM; passing ssh options Hello, to make this short - i need to pass ssh options to get the connection to ilo2 working (MACs=hmac-sha1) [1]. How can this be done? I think the 'options' field is clearly for something else? Using this option in .ssh/config works btw. Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P
Re: [ovirt-users] Changing Hosted-Engine RAM
On 22.05.2015 22:34, Simon Hallam wrote: Hi, Hello Simon, I was wondering if there was any way of changing the ovirt-hosted-engine VM’s RAM retrospectively? This is done by editing the config file: /etc/ovirt-hosted-engine/vm.conf There is a config line 'memSize=' Change it to the appropriate value. Also, you can rename the VM there, see 'vmName='. Please remember, you have to make this change on every HA host. If I try and modify the VM in the UI, I get an error: Error while executing action: HostedEngine: Cannot edit VM. This VM is not managed by the engine. Cheers, Simon Hallam Linux Support Development Officer Please visit our new website at www.pml.ac.uk and follow us on Twitter @PlymouthMarine Winner of the Environment Conservation category, the Charity Awards 2014. Plymouth Marine Laboratory (PML) is a company limited by guarantee registered in England Wales, company number 4178503. Registered Charity No. 1091222. Registered Office: Prospect Place, The Hoe, Plymouth PL1 3DH, UK. This message is private and confidential. If you have received this message in error, please notify the sender and remove it from your system. You are reminded that e-mail communications are not secure and may contain viruses; PML accepts no liability for any loss or damage which may be caused by viruses. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Adding FCP - Request for comments
On 22.05.2015 21:08, Nir Soffer wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Fábio Coelho fabio.coe...@jfsc.jus.br, users Users@ovirt.org Sent: Wednesday, May 20, 2015 8:46:01 PM Subject: Re: [ovirt-users] Adding FCP - Request for comments On 20.05.2015 19:10, Fábio Coelho wrote: Hello Fabio, Thoughts about Adding Storage Luns As I am new here, I would appreciate some advice about some actions that I intend to perform, please read. I have added a LUN to my cluster and, for that task, I had to restart every node of it. There was no LUNs before, multipathd was stopped and multipath.conf inexisted. I was able to log in and manually configure multipath.conf, a simple multipathd start was not enough. In theory this should have been enough. What puzzles me: Until now host-deploy always activated multipathd and writes a multipath.conf. Here I strongly recommend to blacklist everything and then only white listing your vendors. Otherwise your error logs fill up and you cannot connect any USB stick to the host any more ;) Then, add RHEV PRIVATE to the second line otherwise it will be overwritten on every host deploy run. # RHEV PRIVATE blacklist { device { vendor * product * } } This is bad idea. If you want to blacklist all devices, you can add this to vdsm generated configuration. What can I add? Vdsm is depending on the defaults set in the defaults section. I just looked; seems to me this is the default part vdsm is needing? defaults { polling_interval5 no_path_retry fail user_friendly_names no flush_on_last_del yes fast_io_fail_tmo5 dev_loss_tmo30 max_fds 4096 } The problem is there is no blacklisting at all in the default multipath.conf - at least not in mine. I know this is a hard thing to do for a general version of the file witch works for anyone. As for my part I have only very specific devices / vendors I want to have in my multipah.conf; so I blacklist everything and later on add blacklist exceptions like: blacklist_exceptions { device { vendor IFT product * } } Witch IMHO is (was?) since best practice a long time ago when I created my configs. After activating multipathd and editing multipath.conf to your needs you would actually need to run the 'multipath' command to create the paths. [1] Sometimes you need to rescan the LUNs, though, esp. if you changed sizes after activating them. If this wasn't enough, my double NetAPP ( through an Hitachi ) provided me with a not so empty brand new LUN, and the task to add the FCP failed to point this. Trusting my double, I spent some precious time searching for different problems, until receiving some guidance and do a simple dd if=/dev/zero to the initial blocks of the LUN. IMHO you need to initialize the lun with a partition table at least (parted). dd will do also. Consulting the documentation ( http://www.ovirt.org/OVirt_Administration_Guide#Adding_FCP_Storage ) for this matters, was not of any help. So, my questions: This is the intended behavior? Should I open a ticket? Should I add a note to documentation to point such behavior? ( i'm about to ) I think this is not ovirts part but rather dm-multipath. My best guess would be a configuration error on your part? [1] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/DM_Multipath/#mpio_setup Cheers, by qoelheX Aviso Legal A informação contida neste e-mail e em seus anexos pode ser restrita, sendo o emitente deste responsável por seu conteúdo e endereçamento. Se você não for a pessoa autorizada a receber esta mensagem e tendo recebido a mesma por engano, favor apagá-la imediatamente. A JFSC considera opiniões, conclusões e outras informações não oficiais de responsabilidade do usuário deste serviço. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt Instability with Dell Compellent via iSCSI/Multipath
On 21.05.2015 02:48, Chris Jones - BookIt.com Systems Administrator wrote: Another issue may be that the setting for COMPELNT/Compellent Vol are wrong; the setting we ship is missing lot of settings that exists in the builtin setting, and this may have bad effect. If your devices match this , I would try this multipath configuration, instead of the one vdsm configures. device { vendor COMPELNT product Compellent Vol path_grouping_policy multibus path_checker tur features 0 hardware_handler 0 prio const failback immediate rr_weight uniform no_path_retry fail } I wish I could. We're using the CentOS 7 ovirt-node-iso. The multipath.conf is less than ideal I have this issue also. I think about opening a BZ ;) but when I tried updating it, oVirt instantly overwrites it. To be clear, yes I know changes do not survive reboots and yes I know about persist, but it changes it while running. Live! Persist won't help there. I also tried building a CentOS 7 thick client where I set up CentOS 7 first, added the oVirt repo, then let the engine provision it. Same problem with multipath.conf being overwritten with the default oVirt setup. So I tried to be slick about it. I made the multipath.conf immutable. That prevented the engine from being able to activate the node. It would fail on a vds command that gets the nodes capabilities and part of what it does is reads then overwrites multipath.conf. How do I safely update multipath.conf? In the second line of your multipath conf, add: # RHEV PRIVATE Then, host deploy will ignore it and never change it. To verify that your devices match this, you can check the devices vendor and procut strings in the output of multipath -ll. I would like to see the output of this command. multipath -ll (default setup) can be seen here. http://paste.linux-help.org/view/430c7538 Another platform issue is bad default SCSI node.session.timeo.replacement_timeout value, which is set to 120 seconds. This setting mean that the SCSI layer will wait 120 seconds for io to complete on one path, before failing the io request. So you may have one bad path, causing 120 second delay, while you could complete the request using another path. Multipath is trying to set this value to 5 seconds, but this value is reverting to the default 120 seconds after a device has trouble. There is an open bug about this which we hope to get fixed in the rhel/centos 7.2. https://bugzilla.redhat.com/1139038 This issue together with no_path_retry queue is a very bad mix for ovirt. You can fix this timeout by setting: # /etc/iscsi/iscsid.conf node.session.timeo.replacement_timeout = 5 I'll see if that's possible with persist. Will this change survive node upgrades? Thanks for the reply and the suggestions. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Configuring ilo2 PM; passing ssh options
On 12.05.2015 09:16, Martin Perina wrote: Hi Daniel, Hello Martin, sorry for answering that late. And thanks for pointing me to the man page! I always seem to forget that. options defined in PM tab are used to pass custom settings of specific fence agent. In you case please take a look at man page for fence_ilo2. I looked there briefly and I'm afraid that your parameter is not supported. Ok, this command runs fine and uses XML: fence_ilo2 -a 10.11.0.212 --username=ovirt -p secret -v -o status --ssl-insecure --tls1.0 However, using options --tls1.0 and --ssl-insecure does not work in the engine. What puzzles me: the fence agent seems to use an SSL connection and XML; while the GUI wants an SSH port form me? There I get the error: Unknown options .. now I only get Test succeeded - unknown (witch actually is not successful) Thanks! I see that fence_ilo3_ssh and fence_ilo4_ssh should support passing that option for SSH connection, so you could try them if they work with you fence device. Martin Perina - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: users@ovirt.org Sent: Monday, May 11, 2015 5:53:10 PM Subject: [ovirt-users] Configuring ilo2 PM; passing ssh options Hello, to make this short - i need to pass ssh options to get the connection to ilo2 working (MACs=hmac-sha1) [1]. How can this be done? I think the 'options' field is clearly for something else? Using this option in .ssh/config works btw. Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Configuring ilo2 PM; passing ssh options
On 21.05.2015 21:07, Martin Perina wrote: Hi Daniel, I'm cc'ing Eli as we are currently facing issue with fence agents regression for passing boolean flags to fence agents. Thanks for getting back to me so quickly. I looked at man page of fence_ilo2 again and I haven't found --tls1.0 option at all. Strange? FYI I am running CentOS7.1 hosts; installed fence: fence-agents-ilo2-4.0.11-11.el7_1.x86_64 Here, clearly I have this option. The fence agent itself seems to use gnutls successfully: # fence_ilo2 -a 10.11.0.212 --username=ovirt -p ** -v -o status --ssl-insecure --tls1.0 Running command: /usr/bin/gnutls-cli --priority NORMAL:-VERS-TLS1.2:-VERS-TLS1.1:+VERS-TLS1.0:%LATEST_RECORD_VERSION --insecure --crlf -p 443 10.11.0.212 I put the whole command output below [1] To specify --ssl-insecure please add following into options in Power Management tab of the host: ssl_insecure=1 Thanks for pointing out how to actually use these options. Martin Perina - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: Martin Perina mper...@redhat.com Cc: users@ovirt.org Sent: Thursday, May 21, 2015 8:11:40 PM Subject: Re: [ovirt-users] Configuring ilo2 PM; passing ssh options On 12.05.2015 09:16, Martin Perina wrote: Hi Daniel, Hello Martin, sorry for answering that late. And thanks for pointing me to the man page! I always seem to forget that. options defined in PM tab are used to pass custom settings of specific fence agent. In you case please take a look at man page for fence_ilo2. I looked there briefly and I'm afraid that your parameter is not supported. Ok, this command runs fine and uses XML: fence_ilo2 -a 10.11.0.212 --username=ovirt -p secret -v -o status --ssl-insecure --tls1.0 However, using options --tls1.0 and --ssl-insecure does not work in the engine. What puzzles me: the fence agent seems to use an SSL connection and XML; while the GUI wants an SSH port form me? There I get the error: Unknown options .. now I only get Test succeeded - unknown (witch actually is not successful) Thanks! I see that fence_ilo3_ssh and fence_ilo4_ssh should support passing that option for SSH connection, so you could try them if they work with you fence device. Martin Perina - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: users@ovirt.org Sent: Monday, May 11, 2015 5:53:10 PM Subject: [ovirt-users] Configuring ilo2 PM; passing ssh options Hello, to make this short - i need to pass ssh options to get the connection to ilo2 working (MACs=hmac-sha1) [1]. How can this be done? I think the 'options' field is clearly for something else? Using this option in .ssh/config works btw. Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 [1] Sent: ?xml version=1.0? Received: ?xml version=1.0? Processed 0 CA certificate(s). Resolving '10.11.0.212'... Connecting to '10.11.0.212:443'... - Certificate type: X.509 - Got a certificate list of 1 certificates. - Certificate[0] info: - subject `C=US,ST=Texas,L=Houston,O=Hewlett-Packard Company,OU=ISS,CN=hv02', issuer `C=US,ST=Texas,L=Houston,O=Hewlett-Packard Company,OU=ISS,CN=hv02', RSA key 1024 bits, signed using RSA-MD5 (broken!), activated `2002-12-05 20:25:26 UTC', expires `2022-12-05 20:25:26 UTC', SHA-1 fingerprint `4db06bc1a74fe2894068d89ea76c0622b3e76bc1' Public Key ID: 428f85bc360c8778eb550e4b8ef1c65b111d7108 Public key's random art: +--[ RSA 1024]+ |Eoo+.| | . o . .o. | | . = B +| | . X . | |o # S| | . + = | |. . | | | | | +-+ - Status: The certificate is NOT trusted. The certificate issuer is unknown. The name in the certificate does not match the expected. *** PKI verification of server certificate failed... - Description: (TLS1.0)-(RSA)-(AES-128-CBC)-(SHA1) - Session ID: AA:C9:08:8C:F5:E7:E6:19:7D:BC:20:D4:A0:C0:DA:E4:0E:C1:C0:2A:BC:93:8E:B3:5F:20:B0:38:67:F2:01:5C - Version: TLS1.0 - Key Exchange: RSA - Cipher: AES-128-CBC - MAC: SHA1 - Compression
Re: [ovirt-users] Adding FCP - Request for comments
On 20.05.2015 20:10, Fábio Coelho wrote: Hi Daniel, Thank you for your comments! Let me clarify some points: About LUN: IMHO you need to initialize the lun with a partition table at least (parted). dd will do also. So, the lun, which I was provided with, it was too much blank? Hehe - I only found writing to them once helps in general. Call it superstitous - its the first thing I do with a new lun in case there are some 'leftovers'. But indeed it should work without it. About multipathd: I think this is not ovirts part but rather dm-multipath. My best guess would be a configuration error on your part? I'm really sorry, I failed to point that my nodes are ovirt-node-iso installations, not generic SO installations with ovirt added to them. Sorry, I did not use node very much (it lacked some drivers I needed) and - because of things like this where I need a persistant change (multipath.conf). I was able to manually configure the nodes - the question is: this is the expected behavior (manual configuration)? I'll add Fabian for this question; persistant changes to nodes from node.iso are his area of expertise. Some of my nodes I just restarted and then they were able to see the LUN correctly without any manual configuration. As oVirt provide an iso for node installation, maybe it is important to point such behavior in the oVirt documentation. As I said - multipathd should be running by default. If this is the case, pathes to the same LUN are detected at statup and mapped correctly; no intervention necessary. In the end you might need some special settings depending on your storage, though. Cheers! by qoelheX Aviso Legal A informação contida neste e-mail e em seus anexos pode ser restrita, sendo o emitente deste responsável por seu conteúdo e endereçamento. Se você não for a pessoa autorizada a receber esta mensagem e tendo recebido a mesma por engano, favor apagá-la imediatamente. A JFSC considera opiniões, conclusões e outras informações não oficiais de responsabilidade do usuário deste serviço. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Adding FCP - Request for comments
On 20.05.2015 19:10, Fábio Coelho wrote: Hello Fabio, Thoughts about Adding Storage Luns As I am new here, I would appreciate some advice about some actions that I intend to perform, please read. I have added a LUN to my cluster and, for that task, I had to restart every node of it. There was no LUNs before, multipathd was stopped and multipath.conf inexisted. I was able to log in and manually configure multipath.conf, a simple multipathd start was not enough. In theory this should have been enough. What puzzles me: Until now host-deploy always activated multipathd and writes a multipath.conf. Here I strongly recommend to blacklist everything and then only white listing your vendors. Otherwise your error logs fill up and you cannot connect any USB stick to the host any more ;) Then, add RHEV PRIVATE to the second line otherwise it will be overwritten on every host deploy run. # RHEV PRIVATE blacklist { device { vendor * product * } } After activating multipathd and editing multipath.conf to your needs you would actually need to run the 'multipath' command to create the paths. [1] Sometimes you need to rescan the LUNs, though, esp. if you changed sizes after activating them. If this wasn't enough, my double NetAPP ( through an Hitachi ) provided me with a not so empty brand new LUN, and the task to add the FCP failed to point this. Trusting my double, I spent some precious time searching for different problems, until receiving some guidance and do a simple dd if=/dev/zero to the initial blocks of the LUN. IMHO you need to initialize the lun with a partition table at least (parted). dd will do also. Consulting the documentation ( http://www.ovirt.org/OVirt_Administration_Guide#Adding_FCP_Storage ) for this matters, was not of any help. So, my questions: This is the intended behavior? Should I open a ticket? Should I add a note to documentation to point such behavior? ( i'm about to ) I think this is not ovirts part but rather dm-multipath. My best guess would be a configuration error on your part? [1] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/DM_Multipath/#mpio_setup Cheers, by qoelheX Aviso Legal A informação contida neste e-mail e em seus anexos pode ser restrita, sendo o emitente deste responsável por seu conteúdo e endereçamento. Se você não for a pessoa autorizada a receber esta mensagem e tendo recebido a mesma por engano, favor apagá-la imediatamente. A JFSC considera opiniões, conclusões e outras informações não oficiais de responsabilidade do usuário deste serviço. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] HE setup failing: Cannot set temporary password for console connection
Hello Didi, this is a clean install of the first host. (I am trying a disaster scenario and will later restore the backup) -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22tel:+49/30/2408781-22 F: +49/30/2408781-10tel:+49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.dehttp://www.m-box.de www.monkeymen.tvhttp://www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 On Wed, May 13, 2015 at 12:22 AM -0700, Yedidyah Bar David d...@redhat.commailto:d...@redhat.com wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: users@ovirt.org Sent: Tuesday, May 12, 2015 8:48:42 PM Subject: [ovirt-users] HE setup failing: Cannot set temporary password for console connection Hello, a week ago I set up a HE (3.5.2) with no problems; now this fails. You mean you re-deploy the same host (clean setup), or adding another host? I suspect storage trouble but cannot pinpoint it. Did someth. change there with the recent async release? The storage domain is NFS3 via a 1G link to a ZFS storage appliance. The export is working quite fast; tested with iozone running for over 24h without problems. It starts with the Verifying sanlock lockspace initialization phase; which lasts about 7min (!). In the end it seems sanlock is locking the domain down. I can only get it back by stopping sanlock and vdsm. Attached is the full vdsm lock. Thanks! vdsm: Thread-27::ERROR::2015-05-12 19:17:51,470::domainMonitor::256::Storage.DomainMonitorThread::(_monitorDomain) Error while collecting domain 2f83ea82-e110-465d-a2a6-ac30534a9f6a monitoring information Traceback (most recent call last): File /usr/share/vdsm/storage/domainMonitor.py, line 232, in _monitorDomain self.domain.selftest() File /usr/share/vdsm/storage/sdc.py, line 49, in __getattr__ return getattr(self.getRealDomain(), attrName) File /usr/share/vdsm/storage/sdc.py, line 52, in getRealDomain return self._cache._realProduce(self._sdUUID) File /usr/share/vdsm/storage/sdc.py, line 122, in _realProduce domain = self._findDomain(sdUUID) File /usr/share/vdsm/storage/sdc.py, line 141, in _findDomain dom = findMethod(sdUUID) File /usr/share/vdsm/storage/nfsSD.py, line 122, in findDomain return NfsStorageDomain(NfsStorageDomain.findDomainPath(sdUUID)) File /usr/share/vdsm/storage/nfsSD.py, line 112, in findDomainPath raise se.StorageDomainDoesNotExist(sdUUID) StorageDomainDoesNotExist: Storage domain does not exist: ('2f83ea82-e110-465d-a2a6-ac30534a9f6a',) Detector thread::DEBUG::2015-05-12 19:24:33,163::BindingXMLRPC::1173::XmlDetector::(handleSocket) xml over http detected from ('127.0.0.1', 47076) Thread-93::DEBUG::2015-05-12 19:24:33,166::BindingXMLRPC::1133::vds::(wrapper) client [127.0.0.1]::call vmSetTicket with ('e3d350c5-6254-4908-99e9-d60ca2e046f7', '5435uOVP', '10800', 'disconnect', {}) {} Thread-93::ERROR::2015-05-12 19:24:33,166::BindingXMLRPC::1152::vds::(wrapper) unexpected error Traceback (most recent call last): File /usr/share/vdsm/rpc/BindingXMLRPC.py, line 1136, in wrapper res = f(*args, **kwargs) File /usr/share/vdsm/rpc/BindingXMLRPC.py, line 383, in vmSetTicket return vm.setTicket(password, ttl, existingConnAction, params) File /usr/share/vdsm/API.py, line 642, in setTicket return v.setTicket(password, ttl, existingConnAction, params) File /usr/share/vdsm/virt/vm.py, line 4834, in setTicket graphics = _domParseStr(self._dom.XMLDesc(0)).childNodes[0]. \ AttributeError: 'NoneType' object has no attribute 'XMLDesc' and: Thread-91::DEBUG::2015-05-12 19:25:15,152::libvirtconnection::143::root::(wrapper) Unknown libvirterror: ecode: 38 edom: 42 level: 2 message: Failed to acquire lock: No space left on device Thread-91::DEBUG::2015-05-12 19:25:15,154::vm::2294::vm.Vm::(_startUnderlyingVm) vmId=`e3d350c5-6254-4908-99e9-d60ca2e046f7`::_ongoingCreations released Thread-91::ERROR::2015-05-12 19:25:15,154::vm::2331::vm.Vm::(_startUnderlyingVm) vmId=`e3d350c5-6254-4908-99e9-d60ca2e046f7`::The vm start process failed Traceback (most recent call last): File /usr/share/vdsm/virt/vm.py, line 2271, in _startUnderlyingVm self._run() File /usr/share/vdsm/virt/vm.py, line 3335, in _run self._connection.createXML(domxml, flags), File /usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py, line 111, in wrapper ret = f(*args, **kwargs) File /usr/lib64/python2.7/site-packages/libvirt.py, line 3427, in createXML if ret is None:raise libvirtError('virDomainCreateXML() failed', conn=self) libvirtError: Failed to acquire lock: No space left on device sanlock: 2015-05-12 19:11:27+0200 4338 [708]: s2 lockspace 2f83ea82-e110-465d-a2a6-ac30534a9f6a:1:/rhev/data-center/mnt/10.11.0.30:_volumes_ovirt_engine/2f83ea82-e110-465d-a2a6-ac30534a9f6a/dom_md
[ovirt-users] HE setup failing: Cannot set temporary password for console connection
found -1 failed 0 name 2f83ea82-e110-465d-a2a6-ac30534a9f6a -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 vdsm.log.gz Description: vdsm.log.gz ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] HE: changing engine storage connection's interface
Hello, I have just deployed my new hosted engine (3.5.2). Now, after some basic infra is running, I want to change the NFS connection vdsm is using for HE's vm. Please advice me on this procedure: 1. set global maint. 2. shutdown HE and all VMs 3. stop engine-ha 4. stop vdsm 5. unmount engine domain 6. hosted-engine.conf storage= stection 7. start vdsm 8. start engine-ha 9. reconnect storage 10. -- repeat step 3 - 9 for all ha hosts Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] simple virtual disk moving
Hello Pavel, On Mo, 2015-05-11 at 16:12 +0200, p...@email.cz wrote: hello, would I explicitly define interface for only disk moving ?? IMHO the disk move is done by the SPM host using dd or qemu-img (ovirt 3.5+). This process uses the storage connections it has configured. Move process takes the first interface from list ( VM assigned ), but any interface for moving virtuals ( explicitly defined ). eg. VM moving from A to B - it takes interface defined for moving ( movingLAN ) but moving only simple disk of VM from A to B - it takes default interface from list of assigned LANs any idea ?? regs. Pavel ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] multiple OVF_STORE disks?
On Mo, 2015-05-11 at 15:53 +0200, Rik Theys wrote: Hi, I'm still on 3.5.2 and noticed that I have two OVF_STORE disks. Is this normal, or am I hitting the bug described in the recent announcement? I think there is one OVF_STORE disk per storage domain; counting any type... This might have been caused by one of my tests that made my storage domain unavailable. When I activated the storage domain again I noticed that a lot of VM's I created as part of a pool suddenly reappeared and I had to delete them again. Now that I have two OVF_STORE disks, how do I know which one I can remove? When I list the virtual machines tab on the disks, they both show an empty list. Regards, Rik On 05/11/2015 03:28 PM, Sandro Bonazzola wrote: [1] https://bugzilla.redhat.com/1214408 - Importing storage domains into an uninitialized datacenter leads to duplicate OVF_STORE disks being created, and can cause catastrophic loss of VM configuration data -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Gluster command [UNKNOWN] failed on server
On Mo, 2015-05-11 at 16:05 +0100, supo...@logicworks.pt wrote: Hi, I just restart it again, and now start the gluster service before starting the hosted engine, but still gets the same error message. Any more ideas? I just had the same problem. My unknown error indeed to the fact that glusterd / glusterfsd were not running. After starting them it turned out the host setup did not automatically add the iptables rules for gluster. I added to iptables: # gluster -A INPUT -p tcp --dport 24007:24011 -j ACCEPT -A INPUT -p tcp --dport 38465:38485 -j ACCEPT Afterwards 'gluster peer status' worked and my host was operational again. Hint: Sometimes this is do to gluster itself. Restaring glusterd works most of the time to fix this. Thanks Jose # hosted-engine --vm-status --== Host 1 status ==-- Status up-to-date : True Hostname : ovserver1.domain.com Host ID : 1 Engine status : {health: good, vm: up, detail: up} Score : 2400 Local maintenance : False Host timestamp : 4998 Extra metadata (valid at timestamp): metadata_parse_version=1 metadata_feature_version=1 timestamp=4998 (Mon May 11 16:03:48 2015) host-id=1 score=2400 maintenance=False state=EngineUp # service glusterd status Redirecting to /bin/systemctl status glusterd.service glusterd.service - GlusterFS, a clustered file-system server Loaded: loaded (/usr/lib/systemd/system/glusterd.service; enabled) Active: active (running) since Mon 2015-05-11 14:37:14 WEST; 1h 27min ago Process: 3060 ExecStart=/usr/sbin/glusterd -p /var/run/glusterd.pid (code=exited, status=0/SUCCESS) Main PID: 3061 (glusterd) CGroup: /system.slice/glusterd.service ââ3061 /usr/sbin/glusterd -p /var/run/glusterd.pid ââ3202 /usr/sbin/glusterfsd -s ovserver2.acloud.pt --volfile-id gv... May 11 14:37:11 ovserver2.domain.com systemd[1]: Starting GlusterFS, a cluste May 11 14:37:14 ovserver2.domain.com systemd[1]: Started GlusterFS, a cluster Hint: Some lines were ellipsized, use -l to show in full. - Mensagem original - De: supo...@logicworks.pt Para: knarra kna...@redhat.com Cc: Users@ovirt.org Enviadas: Segunda-feira, 11 De Maio de 2015 13:15:14 Assunto: Re: [ovirt-users] Gluster command [UNKNOWN] failed on server Hi, I have 2 nodes, but only one is working with glusterfs. But you were right, glusterfs was not running, I just start the service - I didn't check it :( : # service glusterd status Redirecting to /bin/systemctl status glusterd.service glusterd.service - GlusterFS, a clustered file-system server Loaded: loaded (/usr/lib/systemd/system/glusterd.service; enabled) Active: active (running) since Mon 2015-05-11 13:06:24 WEST; 3s ago Process: 4482 ExecStart=/usr/sbin/glusterd -p /var/run/glusterd.pid (code=exited, status=0/SUCCESS) Main PID: 4483 (glusterd) CGroup: /system.slice/glusterd.service ââ4483 /usr/sbin/glusterd -p /var/run/glusterd.pid ââ4618 /usr/sbin/glusterfsd -s ovserver2.acloud.pt --volfile-id gv... May 11 13:06:22 ovserver2.domain.com systemd[1]: Starting GlusterFS, a cluste May 11 13:06:24 ovserver2.domain.com systemd[1]: Started GlusterFS, a cluster Hint: Some lines were ellipsized, use -l to show in full. But still the problem remains Should I first start the glusterfs before the hosted engine? Thanks - Mensagem original - De: knarra kna...@redhat.com Para: supo...@logicworks.pt, Users@ovirt.org Enviadas: Segunda-feira, 11 De Maio de 2015 12:45:19 Assunto: Re: [ovirt-users] Gluster command [UNKNOWN] failed on server On 05/11/2015 05:00 PM, supo...@logicworks.pt wrote: Hi, I'm testing ovirt 3.5.1, with hosted engine, using centos7.1. Have installed some VMs, no problem. I needed to shutdown the computer machines (follow this procedure: http://lists.ovirt.org/pipermail/users/2014-April/023861.html ), after rebooting could not get it working again, when trying to activate the hosts this message come up: Gluster command [UNKNOWN] failed on server I have tried a lot of things, including update it to Version 3.5.2-1.el7.centos, but no success. Gluster version: glusterfs-3.6.3-1.el7.x86_64 glusterfs-libs-3.6.3-1.el7.x86_64 glusterfs-fuse-3.6.3-1.el7.x86_64 glusterfs-cli-3.6.3-1.el7.x86_64 glusterfs-rdma-3.6.3-1.el7.x86_64 glusterfs-api-3.6.3-1.el7.x86_64 Any help? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Configuring ilo2 PM; passing ssh options
Hello, to make this short - i need to pass ssh options to get the connection to ilo2 working (MACs=hmac-sha1) [1]. How can this be done? I think the 'options' field is clearly for something else? Using this option in .ssh/config works btw. Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Integrated process for import VMs from VMware!
This looks really impressing! On Di, 2015-04-14 at 14:34 +0200, Sven Kieske wrote: On 14/04/15 13:58, Arik Hadas wrote: Hi All, We are working these days on implementing an integrated process for import virtual machines from different sources, other than oVirt's export/data domains, that will be introduced in oVirt 3.6. A glimpse on how you can use it to import a VM from VMware into oVirt is available at: https://www.youtube.com/watch?v=QSss__Nl5rU Is it possible to use a higher resolution than 360p ? I can't see anything in this video. This might be on your end Sven? I can play the video @720p.. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VDSM memory consumption
Hello Everyone, I did create the original BZ on this. In the mean time, lab system I used is dismantled and the production system is yet to deploy. As I wrote in BZ1147148 [1], I experienced two different issues. One, one big mem leak of about 15MiB/h and a smaller one, ~300KiB. These seem unrelated. The larger leak was indeed related to SSL in some way; not necessarily M2Crypto. However, after disabling SSL this was gone leaving the smaller leak. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1147148 On Mo, 2015-03-09 at 23:49 +0100, Matt . wrote: Hi, I also see this on the latest 3.5 version, I'm thinking about setting up a cronjob to restart vdsm every night. I did the same thing. In general, it seems to be a bad idea as it compromised system stability on the long run. While VMs seem to be fine, engine does not like this very much. I cannot believe that people say they don't have this issue. This was hard for me to accept as well. I know of Markus Stockhausen and Seven Kieske, both confirmed the small leak. This might also be some special other service; though I started out with a minimal install of Centos 6. Can someone of the devs dive in maybe ? Thanks! Matt 2015-03-09 23:29 GMT+01:00 Dan Kenigsberg dan...@redhat.com: On Mon, Mar 09, 2015 at 10:40:51AM -0500, Darrell Budic wrote: On Mar 9, 2015, at 4:51 AM, Dan Kenigsberg dan...@redhat.com wrote: On Fri, Mar 06, 2015 at 10:58:53AM -0600, Darrell Budic wrote: I believe the supervdsm leak was fixed, but 3.5.1 versions of vdsmd still leaks slowly, ~300k/hr, yes. https://bugzilla.redhat.com/show_bug.cgi?id=1158108 On Mar 6, 2015, at 10:23 AM, Chris Adams c...@cmadams.net wrote: Once upon a time, Federico Alberto Sayd fs...@uncu.edu.ar said: I am experiencing troubles with VDSM memory consuption. I am running Engine: ovirt 3.5.1 Nodes: Centos 6.6 VDSM 4.16.10-8 Libvirt: libvirt-0.10.2-46 Kernel: 2.6.32 When the host boots, memory consuption is normal, but after 2 or 3 days running, VDSM memory consuption grows and it consumes more memory that all vm's running in the host. If I restart the vdsm service, memory consuption normalizes, but then it start growing again. I have seen some BZ about vdsm and supervdsm about memory leaks, but I don't know if VDSM 4.6.10.8 is still affected by a related bug. Can't help, but I see the same thing with CentOS 7 nodes and the same version of vdsm. -- Chris Adams c...@cmadams.net ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users I'm afraid that we are yet to find a solution for this issue, which is completly different from the horrible leak of supervdsm 4.16.7. Could you corroborate the claim of Bug 1147148 - M2Crypto usage in vdsm leaks memory ? Does the leak disappear once you start using plaintext transport? Regards, Dan. I don’t think this is crypto related, but I could try that if you still need some confirmation (and point me at a quick doc on switching to plaintext?). This is from #ovirt around November 18th I think, Saggi thought he’d found something related: 9:58:43 AM saggi: YamakasY: Found the leak 9:58:48 AM saggi: YamakasY: Or at least the flow 9:58:57 AM saggi: YamakasY: The good news is that I can reproduce 9:59:20 AM YamakasY: saggi: that's kewl! 9:59:25 AM YamakasY: saggi: what happens ? 9:59:41 AM YamakasY: I know from Telsin (ping ping!) that he sees it going faster on gluster usage tdosek left the room (quit: Ping timeout: 480 seconds). (10:00:02 AM) djasa left the room (quit: Quit: Leaving). (10:00:24 AM) mlipchuk left the room (quit: Quit: Leaving.). (10:00:29 AM) laravot left the room (quit: Quit: Leaving.). (10:01:19 AM) 10:01:54 AM saggi: YamakasY: it's in getCapabilities(). Here is the RSS graph. The flatlines are when I stopped calling it and called other verbs. http://i.imgur.com/CLm0Q75.png I do recall what is the issue Saggi and YamakasY were dicussing (CCing the pair), or if it reached fruition as a patch. It is certainly something other than Bug 1158108, as the latter speak about a leak in a normal working state, with no getCapabilities calls. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] qcow2 as default disk format
Hello, AFAIK cow images are currently not configurable via GUI and cannot be set as default disk format. IIRC the reason being RAW and sparse are providing better performance (until you try to copy a larger disk image...). However, you can add qcow - disks with ovirt shell and use these images: $ add disk \ --vm-identifier vm_name \ --provisioned_size size_in_bytes \ --interface virtio \ --name disk_name \ --format cow \ --sparse true \ --storage_domains-storage_domain storage_domain.name=storage_domain_name On 04.02.2015 18:56, shimano wrote: Hi, Is it possible to set qcow2 as default format of disk image in oVirt 3.5.1? -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [ANN] oVirt 3.5.1 Final Release is now available
Cool! Finally! ... and thank you! On 21.01.2015 17:10, Sandro Bonazzola wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The oVirt team is pleased to announce that the oVirt 3.5.1 Final Release is now available as of Jan 21st 2015. The release candidate is available now for Fedora 20, Red Hat Enterprise Linux 6.6, CentOS 6.6, (or similar) and Red Hat Enterprise Linux 7, CentOS 7 (or similar). This release of oVirt includes numerous bug fixes. See the release notes [1] for a list of the new features and bugs fixed. Please refer to release notes [1] for Installation / Upgrade instructions. A new oVirt Live and oVirt Node ISO will be available soon as well[2]. Please note that mirrors[3] may need usually one day before being synchronized. Please refer to the release notes for known issues in this release. [1] http://www.ovirt.org/OVirt_3.5.1_Release_Notes [2] http://resources.ovirt.org/pub/ovirt-3.5/iso/ [3] http://www.ovirt.org/Repository_mirrors#Current_mirrors - -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBAgAGBQJUv89CAAoJEHw3u57E4QAOE5EP/iREEVWYXRt2u2yEZAIopat9 HTTb5ipHn6tc1he3V6pKzbM1LhFM5k0kx57X+EHw7eq2rYaOcmtEKPy8kEXEtXDt jFeWEI6vfi1ZebzZ5W4SkMQWuY6/iX5PUnDHyLDC9/wV/mucHLHsUe67W6Fr0SV+ c78xrv2/kfSITjHTZmZG1NnZRfYiB1MHOMrUxT65jSR/fwHN8+I1SQJbg+ntIUiW XRD9CvnPyy3OGphEeZP0RiqK24A/cUOXv2qeMd7l8jI3aHB5z/JEz7ODPk2pSrUR B4xkBVa60axzPtg4xcTFaN/klzegs4x3RPr0lHTdwipL0r17JA0/hoCJR0N4lZDN CtO41kjcyBKfAcYGM/ODoTmD//symYQdXEwi88c1HOvr/lepHiup6mDQt0fvXngD qvjVAx9r50UkQi3a+HiEw2jqOnwXDyubpC/HwjUl62wZ0uK7e6x5b5GQTAmY/USl Xa2wUNmh9xG81f0BeYcjXOnx/CVRu9gfamtagtb2i+P0sFhI7LnNqYc556cXdz7s rIgfmDO4QjMLiE6b8jYmiRaOb1mK0mBq1s5WHroikRH+JqNtUp7CX0U9OY0rCeaf hj3TCEe/6BT378lb30KZ1ELkgBCs1050xXBozx0W9vfj4PwFEj4vzenpHtpE/A8H 2xPTHrUW0uiQaqlohxeQ =nGaB -END PGP SIGNATURE- ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] When will ovirt add GPU/vGPU support in the admin portal ?
On 19.01.2015 12:24, Martin Polednik wrote: - Original Message - From: Jorick Astrego j.astr...@netbulae.eu To: users@ovirt.org Sent: Monday, January 19, 2015 10:14:35 AM Subject: Re: [ovirt-users] When will ovirt add GPU/vGPU support in the admin portal ? On 01/19/2015 02:33 AM, lof yer wrote: Since I recently saw cloudstack have add this( https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs ). And iGVT( https://01.org/zh/xen/blogs/wangbo85/2014/intel-gvt-gxengt-pubic-release?langredirect=1) is released. If ovirt add this, it'll be very competitive for ovirt in VDI platforms. See below the response I got about 1 year ago, I don't know the current plans/status... Forwarded Message Subject:Re: [Spice-devel] [Users] desktop virtualization and GPU support Date: Wed, 16 Oct 2013 14:08:47 +0200 From: David Jaša dj...@redhat.com Reply-To: spice-de...@lists.freedesktop.org, users users@ovirt.org CC: spice-de...@lists.freedesktop.org, users users@ovirt.org Hi, I'm afraid that none of these cards will work. IIRC it was explained for nVidia approach that it would be necessary to add their closed-source code to qemu which is not going to happen. You might have better luck with AMD card passthrough approach but I'm not sure if GPUs can be passed through qemu/kvm and if so, how the GPU-rendered image then gets displayed. So YMMV and don't expect much. There is a WIP effort for qemu though that is hardware vendor agnostic - it's based on creation of virtual GPU in qemu called Virgil that passes 3D drawing commands to GPU on host. The project is in initial stage though so it won't be ready even for testing for quite some time. FWIW, there has been discussion about it on spice-devel in recent days and it will be presented on upcoming KVM forum so you can get pretty clear picture about its status from these sources. HTH, David Hello, There is quite active effort to implement device passthrough (including GPU, nics, usb etc.)[1].Physical GPU passthrough can be considered generic PCI passthrough IMHO not quite in case of GPUs. I tested that recently with a combination of EL7's new default VFIO support [1]. Two things could be concluded working with Windows 7 guests and ATI Fire Pro GPUs: - 'Old' PCI passthough unstable - VFIO working and performing better (tested with Cinebench OpenGL [2], about 98% of the bare metal performance) As for the stability, the results with VFIO where better in this case. The tricky part seems to be the driver installation in the guest, there the mandatory device probe in the installer. While PCI passthough resulted in Blue Screens, VFIO went though. [1] https://access.redhat.com/sites/default/files/pages/attachments/rhel_whatsnewrhel7beta_techoverview_.pdf [2] http://www.maxon.net/products/cinebench/overview.html which should be ready for oVirt 3.6. As for the vGPU, that will depend on technology used - SR-IOV would be supported along PCI passthrough, anything else might need additional work on our side. [1] http://www.ovirt.org/Features/hostdev_passthrough mpolednik Met vriendelijke groet, With kind regards, Jorick Astrego Netbulae Virtualization Experts Tel: 053 20 30 270 i...@netbulae.euStaalsteden 4-3A KvK 08198180 Fax: 053 20 30 271 www.netbulae.eu 7547 TA Enschede BTW NL821234584B01 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Low cost fencing/stonith devices
Hello Mario, great you ask that, I am pretty interested myself. On 16.01.2015 12:31, Mario Giammarco wrote: Hello, I ask this question again to see if there are some improvements. I am searching for a low cost stonith/fencing device for servers or hardware that has no ipmi/ilo on board. I see that there are some interesting products on the market like ubnt/mfi mpower that are controllable power outlets but there is no driver for them. In my use case WOL support will be enough (using it with ssh or shared storage fencing) but as far as I know WOL is not yet supported in ovirt. Please see [1] - I enclose Martin: What is the status of the Future Enhancements WOL; or better what needs to be done and how can we help? I think we need a custom fence agent here, WOL in python is easily done [3] and the MAC filed could be mapped to one of the configurable items. Though I find it harder working with the fence_agent concept itself. Atm, I did not have time to persue this subjct any futher. So is there some fencing device supported in 100/200$ price range? One option would be networked PDU's [2] (here in Germany, they are around 200 Euro), maybe you can get some used ones. I think there is a list with supported devices though I cannot find it ATM. If I get it correctly the idea would be to define the outlet as Power Management, and switch it on via PMP. Configure the hosts to boot at power restore. The host would be shutdown via SSH anyway; the PM device only used for start up. [1] http://www.ovirt.org/Features/HostPowerManagementPolicy [2] http://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=AP7920 [3] https://pypi.python.org/pypi/wakeonlan/0.2.2 Thanks, Mario -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] supervdsmServer consumes 30% of host memory
On 02.12.2014 22:16, Dan Kenigsberg wrote: On Tue, Dec 02, 2014 at 08:28:55PM +0100, Demeter Tibor wrote: Hi, We have a productive ovirt 3.5 cluster with 3 nodes. The first node has 40 gb of memory and running only one VM that use 8 gb of ram. But the supervdsmserver consumes 20% of host memory. On the second node has 32 GB of memory with 5 VMs. On this node the supervdsmserver using 30%(!) of memory! On the node3 there are 6 VMs with 72 GB of memory. But the supervdsm server use only 1.7% of memory. Does anyone know why? most probably Bug 1142647 - supervdsm leaks memory when using glusterfs which would be fixed in ovirt-3.5.1. Unfortunately, it won't be released today - the released date has been postponed to Dec 9th. Since the two glusterfs issues (memleak and segfault) repeat so often, I've tagged vdsm-4.16.8 as a release candidate for ovirt-3.5.1. Sandro, could you help in building it and placing it somewhere for people to try it out? After all, it has 87 (!) patches since 3.5.0, so testing is due. Good to know! Giving it a shot, upgrading went smoothly so far. I'll report back if something comes up. Regards, Dan. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Auto start VM after host boots
On 21.11.2014 12:41, Sven Kieske wrote: On 20/11/14 11:21, Daniel Helgenberger wrote: Hello, that feature would relate to 'High Availability' [1] - it is to be set on per VM - basis. [1] http://www.ovirt.org/OVirt_Administration_Guide#Virtual_Machine_High_Availability_Settings_Explained On 20.11.2014 10:04, mad Engineer wrote: Hi all i am trying ovirt 3.4. How can i auto start all vms once the host is up similar to setting symlinks in /etc/libvirt/autostart Thanks Sadly this doesn't work for local storage, while /etc/libvirt/autostart would work. I know nobody likes local storage, but I guess it would be relatively easy to implement. Would it be worth to create an RFE for it? +1 Never run into the THAT, but would have later on for sure. Thanks for raising the issue. Mind to post the RFE link here once you opened it? Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Gluster command[UNKNOWN] failed on server ovhost1
On 19.11.2014 15:58, Fumihide Tani wrote: Please help! I'm hosting an oVirt3.5 Engine server (CentOS6.5) and oVirt3.5 Host servers (CentOS 7.0). Today, I have stopped all oVirt services (ovirt-engine and vdsmd) and updated oVirt3.5 Engine server and ovirt3.5 Host server by yum update. Just a guess since you do not mention this step; after an engine update it is *required* to run 'engine-setup'. See [1] for more info about upgrading oVirt engine. [1] http://www.ovirt.org/OVirt_3.5_Release_Notes#Fedora_.2F_CentOS_.2F_RHEL While update, some new Gluster components were installed. After update, I tried to reboot ovirt3.5 Engine and Node servers, but oVirt is not working. Portal's Events shows that: - Status of host ovhost1 was set to NonOperational. - Gluster command[UNKNOWN] failed on server ovhost1. My oVirt servers and VMs are not operational now. How to resolve? Many thanks, Fumihide Tani ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Auto start VM after host boots
Hello, that feature would relate to 'High Availability' [1] - it is to be set on per VM - basis. [1] http://www.ovirt.org/OVirt_Administration_Guide#Virtual_Machine_High_Availability_Settings_Explained On 20.11.2014 10:04, mad Engineer wrote: Hi all i am trying ovirt 3.4. How can i auto start all vms once the host is up similar to setting symlinks in /etc/libvirt/autostart Thanks -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] VMs guest with Mac OS X on board
This is an interesting topic, witch might prove not interoperable with the oVirt project's approach on things (free software). So, the short answer here is: No, does not work and might take a (long) while to work out of the box in oVirt (if ever). While it is possible with kernel 3.15 and very new qemu versions, I consider it as highly experimental and there are numerous issues [1]. These range from technical (UEFI, SMC...) to licensing issues here. You are only allowed to run MacOS on Apple hardware. IIRC only VM ware has some propitiatory setup witch enables MacOS visualization, done (partly) with some support of Apple. On 19.11.2014 12:39, Grzegorz Szypa wrote: Hi Expert. Is it possible to install virtual machines running Mac OS X on board. I trying booting VM with mac os x ISO but it is ending with failed: Boot failed: could not read the boot disk MacOS requires UEFI: Booting it with standard SeaBios is not possible. Also, the qemu version you use is likely to old, you need at least 2.1 Then, you need at least two things: - a patched sea bios version - to integrate chamelion in some way [2]. If you can manage this, I would be interested in how you got it working! I would start to try this with standard fedora 20 and kvm. -- G.Sz. [1] http://www.contrib.andrew.cmu.edu/~somlo/OSXKVM/ [2] http://chameleon.osx86.hu/ -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Engine: Get guest XML dump
Hello, after working with Foreman for a while come to love the yaml dump feature for hosts as it proved invaluable for debugging and setups [1]. After some questions on the list here if for instance libgfapi is being used I think such a feature also might prove useful in oVirt. Right now, I log into the host running the vm and to this with virsh dumpxml. I imagine something like - right click on a guest and choose 'XML dump'; or a XML tap in the VM edit window. If somebody else thinks this is useful too, I will open a RFE. Cheers, [1] https://www.youtube.com/watch?v=Ksr0tilbmcc#t=78 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Power Management - but no LO?
Hello Eli, thanks for getting back to me. Sadly the matter does not seem quite clear for me right now; at least I have to read deeper into fence agents. On 19.11.2014 10:26, Eli Mesika wrote: - Original Message - From: Daniel Helgenberger daniel.helgenber...@m-box.de To: users@ovirt.org Sent: Tuesday, November 18, 2014 5:46:07 PM Subject: [ovirt-users] Power Management - but no LO? Hello, I am toying an idea involving using oVirt's PM capabilities (esp. the cluster power_saving policy) in conjuration with some consumer grate hosts for raw compute applications. Now, these hosts do not have any lights out or BMC capabilities. However, they could be started with WOL packets. Is there a way how this can be done in oVirt? Shutting down hosts with ssh and starting them with WOL? Yes, but you will have to write your own custom fencing script for that and configure it as explain in http://www.ovirt.org/Custom_Fencing (look in the oVirt 3.5 section) Is there any more documentation available? I found some older docs [1], are they still valid? I struggle with how the mapping is done from parameters in the PM tab to functions in my fence agent, how it is passed to it and how it gets called in the end. As I understood so far, oVirt needs to proxy PM/fencing operations and is using one host of the cluster for fencing; and PM the appropriate device. Also, I can use engine-config register the fence agent as well as to map some generic fields. If you need any details, please ask but mainly you should look on the scripts in the fence-agents package (/usr/sbin/fence_*) and write something that supports the common flags used by those scripts Some basic design concepts I thought of so far: I assume the virsh fence agent could work for me. It ssh's to the host. I would call shutdown in this case I think? Further, while compiling the appropriate WOL packet seems trivial in python, I need to map an NIC MAC address witch I could get from a parameter in the PM setup. But in this case, any host could be used execute the script; preferring the engine in this case? Or is this a bad approach for some reason? (Assuming the NIC is part of ovirt management net). I think I can manage to do this once I have figured out the basic stuff. Strangely, though I found posts by people who also tried to attempt a WOL fence agent this as not been accomplished it seems. Can you think of a reason? (I can think of shutdown, witch needs ssh to be done). Thanks for any help on the issue. [1] http://www.ovirt.org/Features/HostPMProxyPreferences Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Power Management - but no LO?
Hello, I am toying an idea involving using oVirt's PM capabilities (esp. the cluster power_saving policy) in conjuration with some consumer grate hosts for raw compute applications. Now, these hosts do not have any lights out or BMC capabilities. However, they could be started with WOL packets. Is there a way how this can be done in oVirt? Shutting down hosts with ssh and starting them with WOL? Thanks! -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Which machine provides the computing power for the clients?
On 17.11.2014 09:46, Harald Wolf wrote: Hi, im not sure if understand the oVirt concept right. Is the oVirt node hypervisor the machine that provides the computing power for the client consoles (User Applications)? Is the VM running on the node Hypervisor? Can i use 1 PC for the complete oVirt environment + the consoles? I strongly suggest you read the admin guide prior to deploying oVirt to get familiar with the concepts. The introduction holds all the answers already [1]. If something is unclear, please get back here or file a RFE [2] if you find any errors/unclear things. I also wrote a brief breakdown answering your first mail [3]. Cheers! [1] http://www.ovirt.org/OVirt_Administration_Guide#oVirt_Architecture [2] https://bugzilla.redhat.com [3] https://www.mail-archive.com/users%40ovirt.org/msg22615.html -- Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Status libgfapi support in oVirt
Hello Joop, thanks for raising the issue as it is one of the things I assumed are already implemented and working. Sadly I cannot provide any answer ... On 17.11.2014 09:39, Joop wrote: I have been trying to use libgfapi glusterfs support in oVirt but can't get it to work. After talks on IRC it seems I should apply a patch (http://gerrit.ovirt.org/33768) to enable libgf BUT I can't get it to work. Systems used: - hosts Centos7 or Fedora20 (so upto date qemu/libvirt/oVirt(3.5)) - glusterfs-3.6.1 - vdsm-4.16.0-524.gitbc618a4.el7.x86_64 (snapshot master 14-nov) - vdsm-4.16.7-1.gitdb83943.el7.x86_64 (official ovirt-3.5 vdsm, seems newer than master snapshot?? ) Just adding the patch to vdsm-4.16.7-1.gitdb83943.el7.x86_64 doesn't work, vdsm doesn't start anymore due to an error in virt/vm.py. Q1: what is de exact status of libgf and oVirt. Q2: how do I test that patch? Joop ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Latest ovirt-node release/installation
On 13.11.2014 20:58, Christopher Young wrote: I sincerely hope that this is not answered elsewhere as I've done several searches and have yet to find a solid answer. I have three (what I believe to be) basic questions (with perhaps some subs there): 1) What is the latest oVirt-node release and where would one download it (I appear to only see 3.4 -based releases of the ISO available)? It is 3.5-based and/or is there an upgrade path? Which glusterfs release is currently included with oVirt-node? I take the liberty to add Fabian to this thread. Here is the link to the most current node release: http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ovirt-node-iso-3.5.0.ovirt35.20140912.el6.iso see [1] 2) As I understand it, newer releases of oVirt-node allow you to do an installation of the self-hosted engine at this time. Is that correct? Be aware, this is not a stable release ATM but provides HE features. This works quite cleverly by fetching an OVF offline engine install. 3) Is there any functionality that one would be losing out on by deploying oVirt via oVirt-node vs. using full-OS installation? Which is the more recommended? Here I go along with Sven's notes for most of the part. The node project is quite ambitious. You might have some troubles with special hardware. Esp. SELinux is a real challenge, also EL7 with systemd. But if you want (many) lightweight hosts witch standard hardware and an easy deployment cycle, node is for you. Give it a try and see if it suits your needs and share your experience... Again, I apologize if these questions are covered somewhere, but I felt like asking them in a direct fashion so as to clear up my own ignorance. I appreciate any feedback and information that you could share. Thanks, Chris [1] Fabian's announcement Hey, to be able to give Node a go on the oVirt 3.5 TestDay, we provide a fresh build of Node including the 3.5rc2 package here: http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ovirt-node-iso-3.5.0.ovirt35.20140912.el6.iso We did not see any SELinux denials, but if you experience any problems, please try to install Node in permissive mode by appending enfcoring=0 during the installation. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Node hypervisor
Hello Harald, welcome to the ovirt mailing list! On 14.11.2014 14:35, Harald Wolf wrote: Hi, I am a oVirt newbie. I have installed oVirt Engine using Fedora 20 and the Qick Start Guide it runs fine and manage it per web interface. Now is stuck at 2.2.1 Where exactly is the issue there? Please point to the exact doc you are refeffing to. There are several versions and flavors of ovirt (3.4 branch plus minor version, 3.5 branch , nightlies; AllInOne, Hosted Engine, 'Normal' Engine). For future posts, it is quite helpful if you supply this. Also, be aware of some general oVirt terminology: - The (oVirt) Engine is the controller and data collector for your guests, - A 'Host' is generally a physical machine used to run guests on, - Hosts are grouped together in clusters of similar hardware providing migration and other capabilities, - A Datacenter is a logical entity of clusters (hosts) and storage connections, networks, disks, ect. shared between them; - VDSM is the daemon running on the hosts to make this all happen; imagine it as a super process for qemu processes. Install oVirt Node. I have installed the node hypervisor and it is working. BUT what is it good for? Whats the purpose of it? The above said, you basically need a psychical or virtual machine for the Engine and some additional hosts to run your guests (not true for AllInOne; witch should IMHO only used for demo/lab purposes. Imagine oVirt Node as something similar to EXi hypervisor; it is an imae containing all the stuff you need to add a machine as host to ovirt. The same can be achived by installing ovirt from the repos on a (preferring minimal) CentOS, RHEL, Fedora install. Is a ¨node¨ a end user machine that uses a virtual machine? Finally i want a Windows 7 virtualistion. There is no problem with that and Windows is very well supported as guest OS. For all of those, have a look on the excellent ovirt admin Guide [1]. This is still for oVirt 3.4 - but most of the stuff is true for 3.5 as well. Have fun with oVirt! -- Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet. [1] -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Node hypervisor
Sorry, forgot the link in [1]: http://www.ovirt.org/OVirt_Administration_Guide On 14.11.2014 15:11, Daniel Helgenberger wrote: Hello Harald, welcome to the ovirt mailing list! On 14.11.2014 14:35, Harald Wolf wrote: Hi, I am a oVirt newbie. I have installed oVirt Engine using Fedora 20 and the Qick Start Guide it runs fine and manage it per web interface. Now is stuck at 2.2.1 Where exactly is the issue there? Please point to the exact doc you are refeffing to. There are several versions and flavors of ovirt (3.4 branch plus minor version, 3.5 branch , nightlies; AllInOne, Hosted Engine, 'Normal' Engine). For future posts, it is quite helpful if you supply this. Also, be aware of some general oVirt terminology: - The (oVirt) Engine is the controller and data collector for your guests, - A 'Host' is generally a physical machine used to run guests on, - Hosts are grouped together in clusters of similar hardware providing migration and other capabilities, - A Datacenter is a logical entity of clusters (hosts) and storage connections, networks, disks, ect. shared between them; - VDSM is the daemon running on the hosts to make this all happen; imagine it as a super process for qemu processes. Install oVirt Node. I have installed the node hypervisor and it is working. BUT what is it good for? Whats the purpose of it? The above said, you basically need a psychical or virtual machine for the Engine and some additional hosts to run your guests (not true for AllInOne; witch should IMHO only used for demo/lab purposes. Imagine oVirt Node as something similar to EXi hypervisor; it is an imae containing all the stuff you need to add a machine as host to ovirt. The same can be achived by installing ovirt from the repos on a (preferring minimal) CentOS, RHEL, Fedora install. Is a ¨node¨ a end user machine that uses a virtual machine? Finally i want a Windows 7 virtualistion. There is no problem with that and Windows is very well supported as guest OS. For all of those, have a look on the excellent ovirt admin Guide [1]. This is still for oVirt 3.4 - but most of the stuff is true for 3.5 as well. Have fun with oVirt! -- Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet. [1] -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Balloon driver unavailable
On 12.11.2014 08:59, Karli Sjöberg wrote: On Wed, 2014-11-12 at 08:35 +0100, Demeter Tibor wrote: Hi, I have a lot of centos 6 based vms and I have install ovirt guest agent for those vms. But two vm always say The balloon driver on xxxvm on hostX is requested but unavailable I did check the virtio_balloon module are loaded on vms. Anybody can me help? Thanks in advance Tibor I see that too, but only on Windows 2008 R2 guests... No one else ever said anything about it, so I thought it was just me:) Hehe, just the same here. I see this only on VM startup, though. I thought this might be because the balloon driver needs the guest agent to work and obviously this is not loaded yet. I assume further ballooning resumes normal operation later on? -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] http://www.ovirt.org/Features/ForemanIntegration
Hello Yaniv, thank you! On 10.11.2014 10:04, ybronhei wrote: For those who interested, I merged the pages ForemanIntegration and AdvancedForemanIntegration to ease the search. The page includes full description about the current integration we have with foreman [aka satellite\katello], the future plans, how to setup environment for testing and production and more illustrations to make it easier to follow feel free to comment about that (directly to me or to the list) and you more than welcome to try that at home :) I think there might be still the issue I ran into: A prerequisite to adding Foreman external provider in oVirt is (at least for me) that Foreman has *ruby193-rubygem-ovirt_provision_plugin* rpm installed. Otherwise the test will fail with: Failed with error PROVIDER_FAILURE and code 5050 Sp, on the foreman host one needs to do: yum install ruby193-rubygem-ovirt_provision_plugin Also, please note there is an issue users might run into at this step, so it may be worth noting. Foreman integration will fail altogether on Engines running = El6.5 because of an too old jdk version not supporting DH keys larger then 1024 byte [1]. This is not an issue in oVirt and will never be resolved. Luckily, upgrading to the latest openjdk (java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el6.x86_64) solves the issue (on the ENGINE!) [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749 Thanks -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] http://www.ovirt.org/Features/ForemanIntegration
On 11.11.2014 13:46, ybronhei wrote: Hey Daniel, Thanks for your comments. First, I do mention the requirement for having ovirt_provision_plugin installed in bullet 2: Add oVirt Provision Plugin: yum install ruby193-rubygem-ovirt_provision_plugin \ foreman-installer --enable-foreman-plugin-ovirt-provision (Not available yet) Indeed, I read that. My reasoning at this point it might be too late in the text. Users (me included) already have tried this at this point using the pictured guide and failing because of the missing provider. This is the point witch was entirely unclear for me in my first attempt and it took me a while to find out. While the discovery plugin is needed (only) for Bare-Metal Provisioning, the ovirt provider is always needed for the integration to succeed. I did think about a hint early on describing the workflow briefly in the detailed description section: - Make sure Foreman is running at version X - Install RPMs in Foreman (see Bare-Metal Provisioning) - Go to engine, Adding foreman provider next foreman build foreman-installer will include the --enable-foreman-plugin-ovirt-provision option which will make it easier. its already merged. This is great to know! Second, about the openjdk issue, I don't think it worth to mention. I'll add to the Current Status section that the integration is supported over rhel6.6 and above. This will do here. Yaniv Bronhaim. On 11/11/2014 02:38 PM, Daniel Helgenberger wrote: Hello Yaniv, thank you! On 10.11.2014 10:04, ybronhei wrote: For those who interested, I merged the pages ForemanIntegration and AdvancedForemanIntegration to ease the search. The page includes full description about the current integration we have with foreman [aka satellite\katello], the future plans, how to setup environment for testing and production and more illustrations to make it easier to follow feel free to comment about that (directly to me or to the list) and you more than welcome to try that at home :) I think there might be still the issue I ran into: A prerequisite to adding Foreman external provider in oVirt is (at least for me) that Foreman has *ruby193-rubygem-ovirt_provision_plugin* rpm installed. Otherwise the test will fail with: Failed with error PROVIDER_FAILURE and code 5050 Sp, on the foreman host one needs to do: yum install ruby193-rubygem-ovirt_provision_plugin Also, please note there is an issue users might run into at this step, so it may be worth noting. Foreman integration will fail altogether on Engines running = El6.5 because of an too old jdk version not supporting DH keys larger then 1024 byte [1]. This is not an issue in oVirt and will never be resolved. Luckily, upgrading to the latest openjdk (java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el6.x86_64) solves the issue (on the ENGINE!) [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749 Thanks -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] http://www.ovirt.org/Features/ForemanIntegration
On 11.11.2014 16:09, ybronhei wrote: On 11/11/2014 03:25 PM, Daniel Helgenberger wrote: On 11.11.2014 13:46, ybronhei wrote: Hey Daniel, Thanks for your comments. First, I do mention the requirement for having ovirt_provision_plugin installed in bullet 2: Add oVirt Provision Plugin: yum install ruby193-rubygem-ovirt_provision_plugin \ foreman-installer --enable-foreman-plugin-ovirt-provision (Not available yet) Indeed, I read that. My reasoning at this point it might be too late in the text. Users (me included) already have tried this at this point using the pictured guide and failing because of the missing provider. This is the point witch was entirely unclear for me in my first attempt and it took me a while to find out. While the discovery plugin is needed (only) for Bare-Metal Provisioning, the ovirt provider is always needed for the integration to succeed. I did think about a hint early on describing the workflow briefly in the detailed description section: - Make sure Foreman is running at version X - Install RPMs in Foreman (see Bare-Metal Provisioning) - Go to engine, Adding foreman provider I don't see why the current way we arrange the page is misleading. Sorry if this is unclear. But: For the Test button in Add external provider in Engine GUI to work, one *needs* do this on the Foreman host: # yum install ruby193-rubygem-ovirt_provision_plugin If this this assumption is true (it was for me reproducible) Foreman/oVirt communication will fail. Therefore I am still convinced it is reasonable to put this as the first step before ever trying to add the provider in oVirt.* The other things, like bare metal prov. and so on are optional. Installing the oVirt - provider on the Foreman host is not. We have under Detailed Description 3 levels which have different prerequisites - Adding installed Foreman hosts as oVirt hosts - which just requires foreman setup, To make this clear, this is not correct since the default foreman setup does not have the oVirt provider module installed. There are some use cases where Foreman is added because of oVirt, and some will have Foreman already runningin their infra. In this case, foreman-installer was already run. * At least I was struggling with this requirement. Truth be told, Foreman was one point on a (very long) check list of mine; so I might not have paid proper attention to the details. OTOH the document suggested a strait forward approach with nice details and icons on how to do it oVirt. For instance, when I got to the section Bare Metal Provisioning I looked briefly over the requirements and decided to do this later on. Wrong here, since there is what I need to get it running in the first place! The other issue, having two different (one obsolete) ForemanIntegration docs, is solved now. Bare-Metal Provisioning - which requires many things. starts with the ovirt plugin, discovery plugin, configuration of hostgroups computeresource medias and ends with setting the provisioning templates accordingly for node installation. and last - Future Plans: VM provisioning which still in declaration phase. next foreman build foreman-installer will include the --enable-foreman-plugin-ovirt-provision option which will make it easier. its already merged. This is great to know! Second, about the openjdk issue, I don't think it worth to mention. I'll add to the Current Status section that the integration is supported over rhel6.6 and above. This will do here. Yaniv Bronhaim. On 11/11/2014 02:38 PM, Daniel Helgenberger wrote: Hello Yaniv, thank you! On 10.11.2014 10:04, ybronhei wrote: For those who interested, I merged the pages ForemanIntegration and AdvancedForemanIntegration to ease the search. The page includes full description about the current integration we have with foreman [aka satellite\katello], the future plans, how to setup environment for testing and production and more illustrations to make it easier to follow feel free to comment about that (directly to me or to the list) and you more than welcome to try that at home :) I think there might be still the issue I ran into: A prerequisite to adding Foreman external provider in oVirt is (at least for me) that Foreman has *ruby193-rubygem-ovirt_provision_plugin* rpm installed. Otherwise the test will fail with: Failed with error PROVIDER_FAILURE and code 5050 Sp, on the foreman host one needs to do: yum install ruby193-rubygem-ovirt_provision_plugin Also, please note there is an issue users might run into at this step, so it may be worth noting. Foreman integration will fail altogether on Engines running = El6.5 because of an too old jdk version not supporting DH keys larger then 1024 byte [1]. This is not an issue in oVirt and will never be resolved. Luckily, upgrading to the latest openjdk (java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el6.x86_64) solves the issue (on the ENGINE!) [1] https
Re: [ovirt-users] replace ovirt engine host
Daniel Helgenberger m box bewegtbild GmbH ACKERSTR. 19 P: +49/30/2408781-22 D-10115 BERLIN F: +49/30/2408781-10 www.m-box.dehttp://www.m-box.de www.monkeymen.tvhttp://www.monkeymen.tv Gesch?ftsf?hrer: Martin Retschitzegger / Michaela G?llner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 On 07.11.2014, at 15:24, Koen Vanoppen vanoppen.k...@gmail.commailto:vanoppen.k...@gmail.com wrote: Hi, We had a consulting partner who did the same for our company. This is his procedure and worked great: How to migrate ovirt management engine Packages Ensure you have the same packages versions installed on the destination hostas on the source, using 'rpm -qa | grep ovirt'. Make sure versions are 100%identical. Default setup Run 'engine-setup' on the destination host after installing the packages. Use the following configuration: 1.Backup existing configuration 2.On the source host, do: You might want your consultant take a look on [1]... Steps a-3d: engine-backup mode=backup --file=~/ovirt-engine-source --log=backup.log a.service ovirt-engine stop b.service ovirt-engine-dwhd stop c.mkdir ~/backup d.tar -C /etc/pki/ovirt-engine -czpf ~/backup/ovirt-engine-pki.tar.gz . e.tar -C /etc/ovirt-engine -czpf ~/backup/ovirt-engine-conf.tar.gz . f.cd /usr/share/ovirt-engine/dbscripts g../backup.sh h.mv engine_*.sql ~/backup/engine.sql 3.You may also want to backup dwh reports: a.cd /usr/share/ovirt-engine/bin/ b../engine-backup.sh --mode=backup --scope=db --db-user=engine --db-password=XXX --file=/usr/tmp/rhevm-backups/engine-backup --log=/tmp/engine-backup.log c../engine-backup.sh --mode=backup --scope=dwhdb --db-user=engine --db-password=XXX --file=/usr/tmp/rhevm-backups/dwh-backup --log=/tmp/engine-backup.log d../engine-backup.sh --mode=backup --scope=reportsdb --db-user=engine --db-password=XXX --file=/usr/tmp/rhevm-backups/reports-backup --log=/tmp/engine-backup.log 4.Download these backup files, and copy them to the destination host. Restore configuration 1.On the destination host, do: Again, steps a-h, basically engine-setup engine-cleanup engine-backup mode=restore --file=~/ovirt-engine-source --log=backup.log also, I would run a second engine-setup After that, you should be good to go.. Of course, depending on your previous engine setup this could be a little more complicated. Still, quite strait forward. [1] http://www.ovirt.org/Ovirt-engine-backup a.service ovirt-engine stop b.service ovirt-engine-dwhd stop c.cd backup d.tar -C /etc/pki/ovirt-engine -xzpf ovirt-engine-pki.tar.gz e. tar -C /etc/ovirt-engine -xzpf ovirt-engine-conf.tar.gz f. tar -xvjf engine-backup g. tar -xvjf dwh-backup h. tar -xvjf reports-backup Restore Database 1.On the destination host do: a.su - postgres -c psql -d template1 -c 'drop database engine;' b. su - postgres -c psql -d template1 -c 'create database engine owner engine;' c. su - postgres d. psql e. \c engine f. \i /path/to/backup/engine.sql NOTE: in case you have issues logging in to the database, add the following line to the pg_hba.conf file: hostallengine127.0.0.1/32http://127.0.0.1/32trust 2.Fix engine password: a.su - postgres b. psql c.alter user engine with password 'XXX'; Change ovirt hostname On the destination host, run: /usr/share/ovirt-engine/setup/bin/ovirt-engine-rename NB: Restoring the dwh/reports database is similar to steps 5-7, but omitted from this document due to problems starting the reporting service. 2014-11-07 10:28 GMT+01:00 Sven Kieske s.kie...@mittwald.demailto:s.kie...@mittwald.de: On 07/11/14 10:10, Ml Ml wrote: anyone? :) Or are you only doing backups, no restore? :-P gladly I just had to test disaster recovery and not actually perform it (yet) :D To be honest: I never have restored ovirt-engine with running vdsm hosts connected to it, sounds like a lot of fun, I see if I can grab some time and try this out myself :) By your description I guess you have nfs/iso domain on your engine host? why don't you just seperate it, so no need for remounts if your engine is destroyed. HTH -- Mit freundlichen Gr??en / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH Co. KG K?nigsberger Stra?e 6 32339 Espelkamp T: +49-5772-293-100tel:%2B49-5772-293-100 F: +49-5772-293-333tel:%2B49-5772-293-333 https://www.mittwald.de Gesch?ftsf?hrer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplement?rin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen ___ Users mailing list Users@ovirt.orgmailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.orgmailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Foreman: Add external provider (Failed with error PROVIDER_FAILURE and code 5050)
On 06.11.2014 05:47, Oved Ourfali wrote: These steps are also in the feature page Thanks Oved for pointing to the doc; my bad. I was using the foreman integration document [1]. Maybe the pages should be merged? , but it would be nice if you review them to see nothing is missing. http://www.ovirt.org/Features/AdvancedForemanIntegration With foreman 1.6 (at least) there is no need to enable the nightly builds any more as rb-ovirt is resolved by yum. Lastly, I think you need to enable foreman_discovery with the foreman installer to work and download images: # foreman-installer --enable-foreman-plugin-discovery --foreman-plugin-discovery-install-images=true You have that already listed in the testing env setup; but this needs to be put in context with installing foreman-ovirt on the foreman host. Thanks Oved [1] http://www.ovirt.org/Features/ForemanIntegration On Nov 6, 2014 12:40 AM, Daniel Helgenberger daniel.helgenber...@m-box.de wrote: Answering my own question; and maybe a very obvious cause for the failing provider: the missiAnswering my own question; and maybe a very obvious cause for the failing provider: the missing provider plugin in forman! So one needs to do: yum install ruby193-rubygem-ovirt_provision_plugin on the foreman host. After that, the connection test in the engine comes up positive. Sadly, this is not documented anywhere; only on the GitHub repo readme [1]. This is also a little bit outdated, as the rbovirt dependency is resolved now automatically. Also, but I am not sure, the porvider lugin needs the foreman_discovery plugin to work: yum install ruby193-rubygem-foreman_discovery [1] https://github.com/theforeman/ovirt_provision_plugin/blob/master/README.md On 29.10.2014 00:36, Daniel Helgenberger wrote: Hello, did anyone actually get this working in oVirt 3.5 / EL6 - Engine? I am trying this for two days now. Setup: Engine; EL6.5 Foreman; EL6.5 Foreman seems to do it's as I can use it to deploy hosts and also smart proxies are running fine. I have opened a BZ [1]; because this really can not work out of the box with EL6 plain vanilla packages. I wonder if this was ever tested... ? Java 7 used i n EL6 [4] does only support DH keys up to 1024byte. This is known issue in Foreman [2] as longer DH keys are now used by default in Foreman / PuppetCA. A dirty fix confirmed working is adding default DH parameters to the foreman cert; effectively disabling it [3]. So I got SSL working and I get beyond the authentication (entering wrong data gets me auth errors)- however, I am still not able to add the external provider. Pressing 'test' results in (Failed with error PROVIDER_FAILURE and code 5050) Sample engine.log 2014-10-28 23:49:40,860 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-1) [6a3da4e7] Command org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand throw Vdc Bll exception. With error message VdcBLLException: PROVIDER_FAILURE (Failed with error PROVIDER_FAILURE and code 5050) I can't find any more hints in oVirt; access logs in Foreman are telling me API queries by the engine. Did I miss a crucial step in the foreman setup? How can I debug this issue? I am willing to upgrade openjdk; provided this does not break my engine... Thanks! [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749 [2] https://tickets.puppetlabs.com/browse/SERVER-17 [3] http://httpd.apache.org/docs/current/ssl/ssl_faq.html#javadh [4] java-1.7.0-openjdk-1.7.0.65-2.5.1.2.el6_5.x86_64 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Can some one share the use cases for the local storage?
On 06.11.2014 09:44, Sven Kieske wrote: On 06/11/14 09:15, Arman Khalatyan wrote: Hi, I would like to understand the local storage purpose. I was wondered are there any production systems using local storage? Or in another way, how to use effectively the local hosts disks? My ovirt purpose is so serve HA-VM LAMPs. Well yes there is local storage in production at various sites. For real HA you inevitable need a shared storage solution. An example and 'real' use case to Svens answer: The term 'local' might indeed a bit misleading. The posix file system option basically lets you use anything posix compliant. For instance I am using a cluster file system called StorNext in our company - witch is very well suited for use with oVirt. Without POSIX, I could not have used it. You could try to utilize local disks by using gluster ceph or any other software defined storage system. Gluster is the most integrated withing ovirt, but here are some caveats: It's not encouraged to run vms on the hosts which are part of the gluster cluster (but it works, at least this is what you can read on this very ML). It's not supported to run hosted-engine on top of gluster, at least not without a replica count of at least 3. Posix enables usage of GlusterFuseFS. However, it might be the case the replica 3 is only needed when using FuseFS [1], independent from the fact of using Gluster and Compute on the same host. HTH [1] http://www.mail-archive.com/users@ovirt.org/msg22416.html -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [RFI] oVirt 3.6 Planning
On 04.11.2014 09:47, Fabian Deutsch wrote: - Original Message - On Sun, Sep 14, 2014 at 03:17:39PM +0300, Itamar Heim wrote: On 09/12/2014 03:22 PM, Itamar Heim wrote: With oVirt 3.5 nearing GA, time to ask for what do you want to see in oVirt 3.6? Even the short list of items mentions so far are big features we would need to do justice with. this means probably a slightly longer cycle than the 6 months we currently do. We're not so good in keeping up with deadlines - our recent 3.5 version slipped for 2.5 months past the original plan. With longer cycles, this is even harder to control. Can we instead break the heavier features to smaller phases, that are easier to maintain, and deliver the complete feature in 3.7? Hey, yep, I think this is a good idea to get control over the big features. - fabian Me too, for that matter. I think json rpc was a major thing to do witch went well; but maybe drew resources from other features and testing. But maybe new features do not need to be scrubbed but implemented later on for upgrades? For instance, some software vendors allow new features for X.0 releases only for new installations. Only after they are confirmed working regression - free a X.1 version is released witch enables upgrades from X-1 (existing customers). Bottom line, I hope for planned 3.6 features like SR-IOV and pci passthrough/vfio will not be postponed :) with many of the features requiring way newer versions of some of the components, I think we should plan for 3.6 cluster to require an .el7 host (expecting even 7.1 to be out before we release oVirt 3.6). so i want us to plan for: - oVirt 3.6 supports .el6 and .el7 hosts in 3.5 cluster (and for fedora - fc20?) - oVirt 3.6 supports .el7 in 3.6 cluster (and for fedora - fc21?) ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Protecting the storage of the self hosted engine
On 05.11.2014 15:30, wodel youchi wrote: Hi, I am new on oirt. Hello and welcome! I want to know the best way to protect the storage of the hosted-engine? IHMO reliable hardware and contingency plans. In Ovirt3.5, only NFS and iSCSI are supported for the engine VM, so this means that the NFS server or the iSCSI volume become the weak link. First we need to define 'weak link'. IMOH this can be Network and / or storage hardware like controllers and spindles (SSDs). As the later tends to be reliable I think your mean indeed the data link layer as 'weak link'? Gluster can be the same weak link for instance, as it needs a network layer. If you use iSCSI together with some storage appliance maybe with redundant controllers, this setup is quite reliable and engine storage is protected if you use iSCSI Multipath (and the paths are indeed separate hardware switches). You could call NFS a weak link; but even there are quite reliable setups available witch support fail over, replicated storage and IPMP. I've read two articles, one using GlsuterFS+NFS and CTDB for High availability of the engine storage,: oVirt 3.4, Glusterized I have to warn you at this point. This setup seems quite tempting; even using localhost addresses with gluster's build in NFS. This was tried before (myself included) but it is far from stable. You would at least need repica 3 gluster volumes to avoid split brains. These seem to happen quite often. I include Martin here, we talked about this at the ovirt workshop in Düsseldorf; maybe he can provide a better explanation. AFAIK gluster will be supported as engine storage in the future; but this is not the case right now. Of course, you are welcome to try! That said, and because you are new to ovirt, the main thing you need to protect is not the engine storage, but your production data domains. The VMs will run fine and continue to run with the engine down or not available. In case of a real disaster, you will be able to import these storage domains along with their VMs to a new engine. For me, I tend to have my engine backed up using engine-backup [1] and put the result to a different storage. From that data you can recreate the whole engine. http://community.redhat.com/blog/2014/05/ovirt-3-4-glusterized/, image http://community.redhat.com/blog/2014/05/ovirt-3-4-glusterized/ oVirt 3.4, Glusterized http://community.redhat.com/blog/2014/05/ovirt-3-4-glusterized/ oVirt's Hosted Engine feature, introduced in the project's 3.4 release, enables the open source virtualization system to host its own management server, which means... Afficher sur community.redha... http://community.redhat.com/blog/2014/05/ovirt-3-4-glusterized/ Aperçu par Yahoo And another using GluserFS+NFS and KeepAlive: How to workaround through the maze and reach the goal of the new amazing oVirt Hosted Engine with 3.4.0 Beta | http://www.andrewklau.com/ovirt-hosted-engine-with-3-4-0-nightly/ How to workaround through the maze and reach the goal of the new amazing oVirt Hosted Engine with 3 http://www.andrewklau.com/ovirt-hosted-engine-with-3-4-0-nightly/ andrewklau - My Small World of Rants, Excitement, Snippets and Tuts How to workaround through the maze and reach the goal of the new amazing oVirt Hosted Engine with 3.4.0 Beta Afficher sur www.andrewklau.com http://www.andrewklau.com/ovirt-hosted-engine-with-3-4-0-nightly/ Aperçu par Yahoo Is there a better way to achieve this goal? Thanks HTH [1] http://www.ovirt.org/Ovirt-engine-backup -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [ovirt-devel] [SCALE][RFC] ksmd bound to one core
On 05.11.2014 21:07, Adam Litke wrote: On 04/11/14 13:11 +0100, Sven Kieske wrote: Hi, currently ksmd is a single process and is thus bound to one core. This leads to some scaling problems such as: If you got a lot of vms on one host with huge amounts of ram you can observe that the cpu usage by ksmd goes easily to 100%. I wonder what would be the benefit here... I think spending CPU cycles on something like memory compression is not what (most) users would do. Already I think this is an annoyance; maybe thats why the process is niced to +5. A multi process daemon would require careful confining (with cgroups). To my understanding the for KSM to really work well is to have many (idle / high mem) guests which are quite similar? I wonder if ksmd could not be split up in child/worker threads, thus enabling higher density of vms on one host. It's likely going to be trickier than you imagine with the added locking that would be required to synchronize the ksmd threads. Actually I was refraining to answer Svens question since I lack some knowledge here. But I guessed synchronization was the reason for the single threadted design. Some serous work needs to be done on KSM do achieve this goal. I was thinking about some map/reduce aglo to do that... OTOH mangeling with mem pages of guests very requires special care. or can this just be tweaked by altering values in /etc/ksmtuned.conf ? I don't think it can. What do you think? Interesting idea. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Foreman: Add external provider (Failed with error PROVIDER_FAILURE and code 5050)
Answering my own question; and maybe a very obvious cause for the failing provider: the missing provider plugin in forman! So one needs to do: yum install ruby193-rubygem-ovirt_provision_plugin on the foreman host. After that, the connection test in the engine comes up positive. Sadly, this is not documented anywhere; only on the GitHub repo readme [1]. This is also a little bit outdated, as the rbovirt dependency is resolved now automatically. Also, but I am not sure, the porvider lugin needs the foreman_discovery plugin to work: yum install ruby193-rubygem-foreman_discovery [1] https://github.com/theforeman/ovirt_provision_plugin/blob/master/README.md On 29.10.2014 00:36, Daniel Helgenberger wrote: Hello, did anyone actually get this working in oVirt 3.5 / EL6 - Engine? I am trying this for two days now. Setup: Engine; EL6.5 Foreman; EL6.5 Foreman seems to do it's as I can use it to deploy hosts and also smart proxies are running fine. I have opened a BZ [1]; because this really can not work out of the box with EL6 plain vanilla packages. I wonder if this was ever tested... ? Java 7 used i n EL6 [4] does only support DH keys up to 1024byte. This is known issue in Foreman [2] as longer DH keys are now used by default in Foreman / PuppetCA. A dirty fix confirmed working is adding default DH parameters to the foreman cert; effectively disabling it [3]. So I got SSL working and I get beyond the authentication (entering wrong data gets me auth errors)- however, I am still not able to add the external provider. Pressing 'test' results in (Failed with error PROVIDER_FAILURE and code 5050) Sample engine.log 2014-10-28 23:49:40,860 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-1) [6a3da4e7] Command org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand throw Vdc Bll exception. With error message VdcBLLException: PROVIDER_FAILURE (Failed with error PROVIDER_FAILURE and code 5050) I can't find any more hints in oVirt; access logs in Foreman are telling me API queries by the engine. Did I miss a crucial step in the foreman setup? How can I debug this issue? I am willing to upgrade openjdk; provided this does not break my engine... Thanks! [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749 [2] https://tickets.puppetlabs.com/browse/SERVER-17 [3] http://httpd.apache.org/docs/current/ssl/ssl_faq.html#javadh [4] java-1.7.0-openjdk-1.7.0.65-2.5.1.2.el6_5.x86_64 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] OVF_STORE?
Hello, out of curiosity: After my DC was upgraded to 3.5 I have two disk images called OVF_STORE on every data domain. What is their purpose? Thanks -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Please add BZ to known issues of 3.5?
Hello Sandro, maybe worth adding to Release notes, known issues: https://bugzilla.redhat.com/show_bug.cgi?id=1157749#c15 Bottom line: Foreman integration requires min. EL6.6+ engine because of open-jdk version. This is not an oVirt - issue but java. Cheers -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Upgrade order 3.4.2 - 3.5.x
On 31.10.2014 12:02, Markus Stockhausen wrote: Hi, maybe a stupid one. Just want to make sure that nothing goes wrong. We plan to make a rolling upgrade of our landscape going to 3.5.1 in december. So we always need some hypervisor nodes up and running during the process. This went fairly well with me. I did not loose a single machine and the process was transparent for them (I even had a script running lots of queries against a web server in one vm). Looking at older posts I assume that upgrading the engine should be sufficient, while hypervisor nodes with vdsm 4.14.17 (from 3.4 repos) and the active VMs keep on running. The start of the engine after the upgrade should catch up and resync all states. The Engine and VDSM are fully backward compatible to each other [1]. So you should not see any problems there; only missing some features maybe. Afterwards I clean hypervisor hosts one by one and clean/reinstall it into the cluster? This what I have done; remember you need to add the 3.5 repos otherwise VDSM will be (re)installed from the latest 3.4 repos and not upgraded to the '3.5' version. Also, this process went like a charm without any issues (let alone loosing guest) Thanks in advance. Please keep in mind, upgrading your datacenter(s) to 3.5 might lead to some issues, some of them already fixed for 3.5.1 (I had some more severe ones). I would be careful with this setting in a production env. Also, some featues are available on cluster versions only; not requiring the more invasive datacenter upgrade [2]. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1154620#c3 [2] http://www.mail-archive.com/users@ovirt.org/msg22249.html -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [QE][ACTION NEEDED] oVirt 3.5.1 RC status
On 29.10.2014 10:53, Sandro Bonazzola wrote: Il 29/10/2014 10:51, Sandro Bonazzola ha scritto: Hi, We're going to start composing oVirt 3.5.1 RC on *2014-11-25 08:00 UTC* from 3.5 branch. Maintainers: - Please be sure that 3.5 snapshot allow to create VMs before *2014-11-24 15:00 UTC* - Please be sure that no pending patches are going to block the release before *2014-11-24 15:00 UTC* - If any patch must block the RC release please raise the issue as soon as possible. A bug tracker [1] has been opened and shows no open blockers. Sorry, it shows 4 blockers: Bug IDWhiteboard Status Summary 1157185 infra POSTvdsm does not set selinux booleans during installation when selinux disabled 1153999 integration NEW missing storage info in answer file 1142710 integration NEW Volume creation failed while deploying Hosted Engine on iSCSI 1145241 sla NEW Upgrading a DC to 3.5 does not create default storage profiles I took the liberty to add [1] to 3.5.1 blockers as well - feel free to remove It again if this was a wrong ;) [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157149 There are still 193 bugs [2] targeted to 3.5.1. Excluding node and documentation bugs we still have 164 bugs [3] targeted to 3.5.1. Maintainers / Assignee: - Please add the bugs to the tracker if you think that 3.5.1 should not be released without them fixed. - Please update the target to 3.5.2 or later for bugs that won't be in 3.5.1: it will ease gathering the blocking bugs for next releases. - Please fill release notes, the page has been created here [4] Community: - If you're testing oVirt 3.5 nightly snapshot, please add yourself to the test page [5] [1] http://bugzilla.redhat.com/1155170 [2] http://goo.gl/7G0PDV [3] http://goo.gl/6gUbVr [4] http://www.ovirt.org/OVirt_3.5.1_Release_Notes [5] http://www.ovirt.org/Testing/oVirt_3.5.1_Testing -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Ovirt VM Performance abd CPU times
On 29.10.2014 10:21, Xavier Naveira wrote: Hi, We are migrating our ifrastructure from kvm+libvirt hypervisors to ovirt. Everything is working fine but we're noticing that all the qemu-kvm processes in the hypervisors take a lot of CPU. Without further details of the workload this is hard tell. One Reason I can think of might be KSM [1]. Is it enabled on your cluster(s)? What is your mem over-commitment setting? Note, IIRC the KSM policy is currently hard coded; it will start at 80% host mem usage. [1] http://www.ovirt.org/Sla/host-mom-policy The typical example is an idle machine, running top from the machine itself it reports cpu use percentages below 10% and loads (with 2 processors) of 0.0x. The process running that machine in the hypervisor rports cpu uses in the order of the 80-100%. Should the values look like this? Why are the idle machines eating up so much CPU time? Thank you. Xavier ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Ovirt VM Performance abd CPU times
On 29.10.2014 11:48, Xavier Naveira wrote: On 10/29/2014 11:47 AM, Xavier Naveira wrote: On 10/29/2014 11:40 AM, Daniel Helgenberger wrote: On 29.10.2014 10:21, Xavier Naveira wrote: Hi, We are migrating our ifrastructure from kvm+libvirt hypervisors to ovirt. Everything is working fine but we're noticing that all the qemu-kvm processes in the hypervisors take a lot of CPU. Without further details of the workload this is hard tell. One Reason I can think of might be KSM [1]. Is it enabled on your cluster(s)? What is your mem over-commitment setting? Note, IIRC the KSM policy is currently hard coded; it will start at 80% host mem usage. [1] http://www.ovirt.org/Sla/host-mom-policy The typical example is an idle machine, running top from the machine itself it reports cpu use percentages below 10% and loads (with 2 processors) of 0.0x. The process running that machine in the hypervisor rports cpu uses in the order of the 80-100%. Should the values look like this? Why are the idle machines eating up so much CPU time? Thank you. Xavier ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users Hi, thank you for the answer. I've been trying to work out some pattern and realized that the VMs using that much cpu all are Redhat 5.x, the Readhat 6.x doesn't exhibit this kind of high cpu use. (we run only redhat/centos 5.x/6.x on the cluster) What OS are the hosts running? In case of EL6, make sure you have tuned-0.2.19-13.el6.noarch installed [1]. To further investigate please post Engine, VDSM, libvirt and kernel versions from the hosts. [1] https://access.redhat.com/solutions/358033 I'll take a look to the KSM config. Cheers, Xavier -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Ovirt VM Performance abd CPU times
On 29.10.2014 15:57, Xavier Naveira wrote: On 10/29/2014 03:07 PM, Xavier Naveira wrote: On 10/29/2014 01:26 PM, Daniel Helgenberger wrote: On 29.10.2014 11:48, Xavier Naveira wrote: On 10/29/2014 11:47 AM, Xavier Naveira wrote: On 10/29/2014 11:40 AM, Daniel Helgenberger wrote: On 29.10.2014 10:21, Xavier Naveira wrote: Hi, We are migrating our ifrastructure from kvm+libvirt hypervisors to ovirt. Everything is working fine but we're noticing that all the qemu-kvm processes in the hypervisors take a lot of CPU. Without further details of the workload this is hard tell. One Reason I can think of might be KSM [1]. Is it enabled on your cluster(s)? What is your mem over-commitment setting? Note, IIRC the KSM policy is currently hard coded; it will start at 80% host mem usage. [1] http://www.ovirt.org/Sla/host-mom-policy The typical example is an idle machine, running top from the machine itself it reports cpu use percentages below 10% and loads (with 2 processors) of 0.0x. The process running that machine in the hypervisor rports cpu uses in the order of the 80-100%. Should the values look like this? Why are the idle machines eating up so much CPU time? Thank you. Xavier ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users Hi, thank you for the answer. I've been trying to work out some pattern and realized that the VMs using that much cpu all are Redhat 5.x, the Readhat 6.x doesn't exhibit this kind of high cpu use. (we run only redhat/centos 5.x/6.x on the cluster) What OS are the hosts running? In case of EL6, make sure you have tuned-0.2.19-13.el6.noarch installed [1]. That's exactly the version we've in the hypervisors. To further investigate please post Engine, VDSM, libvirt and kernel versions from the hosts. vdsm-xmlrpc-4.14.11.2-0.el6.noarch vdsm-cli-4.14.11.2-0.el6.noarch vdsm-python-4.14.11.2-0.el6.x86_64 vdsm-4.14.11.2-0.el6.x86_64 vdsm-python-zombiereaper-4.14.11.2-0.el6.noarch libvirt-client-0.10.2-29.el6_5.12.x86_64 libvirt-0.10.2-29.el6_5.12.x86_64 libvirt-lock-sanlock-0.10.2-29.el6_5.12.x86_64 libvirt-python-0.10.2-29.el6_5.12.x86_64 2.6.32-431.23.3.el6.x86_64 #1 SMP Wed Jul 16 06:12:23 EDT 2014 x86_64 x86_64 x86_64 GNU/Linux [1] https://access.redhat.com/solutions/358033 I'll take a look to the KSM config. Cheers, Xavier Actually, this seems to be it. But I'm already at a newer kernel: https://bugzilla.redhat.com/show_bug.cgi?id=705082 Well, I do not have such hardware so I never run into the issue. You could disable HT as I suspect your physical cores are less then 64? Your workload might differ but my VMs usually do not benefit from 'threaded' cores and I want HT disabled anyway. Also, you can check cluster settings and disable 'count threads as cores' if enabled. But I think this might not make any difference. -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Centos 6.5 or 7 for host os?
On 29.10.2014 17:17, Sven Kieske wrote: On 29/10/14 09:01, Doron Fediuck wrote: One more thing you want to consider is updates from Centos for el6. Unsure what happens to 6.5 in a year or so. Sorry for hijacking the thread; but I am also very much interested in this matter. Sven, maybe you can share how you handle the matter @Mittwald? As I understood it you have a quite large oVirt production environment there. Are you running oVirt on RHEL? Do you have some kind of rule of thump (like, always stay one minor version behind point release in oVirt). Thanks CentOS just supports the latest point release for a given release. So atm you are just running a supported CentOS if you upgrade from 6.5 to 6.6 which was just released. There will be no updates for 6.5 anymore. HTH -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Proposing fix for EL6 m2crypto memory leak
On 28.10.2014 11:55, Sandro Bonazzola wrote: Il 28/10/2014 11:07, Daniel Helgenberger ha scritto: Hello Sandro, I just updated BZ [1] that m2crypto-0.21.1 from FC20 fixes the severe mem leak issue in VDSM for me on EL6 with Engine 3.4 and 3.5. As I have seen no side effects, I propose adding a newer m2crypto to the ovirt EL6 repos; with fixes the issue immediately (well, you need to restart vdsmd). Should I open an RFE or will this mail to the list suffice? For convenience, I added the rpm I am using as well as the SRPM I used to compile this version [2]. Let me see if I've understood. Fedora 20 already have m2crypto-0.21.1-13.fc20 Fedora 19 has m2crypto-0.21.1-11 Looking at the RPM changelog [1], 0.21.1-11 on F19 and your 0.21.1-12 on F20 are just mass rebuild so no update needed on Fedora. I also think that EL7's version might be fine, too. I just used the version from fc20 because it was a known working one confirmed by Markus, see BZ (I confess I did not read through the changelogs but was only interested in solving the issue :) CentOS 7 has m2crypto-0.21.1-15 and don't need an update. CentOS 6.6 has m2crypto-0.20.2-9 (yes, centos 6.6 is out http://isoredirect.centos.org/centos/6.6/) which looks the same on 6.5. Are you really sure that the issue is on m2crypto side and not on vdsm side? Not quite. The issue is fixed however. It can still be a bug in VDSM with some special call or something. But I clearly lack knowledge here. My reasoning is, however, finding the root cause might be a time consuming process and the outcome in the end only be of academical value since the issue is not there with newer versions of m2crypto. If so, a bug against m2crytpo should be opened and quickly fixed on RHEL/CentOS. Thats what I am asking in the BZ. I am happy to open the issue in RHEL (CentOS is downstream...) but I have no subscription and cannot confirm the version RHEL is using. Also I need someone who can answer whatever this is an issue of m2crypto or VDSM (see above). I don't think that just rebuilding m2crypto from F20 is a long term solution. Me neither. But it is a short term solution until the issue is fixed or El6 obsoleted (well, this might be quite soon for a protect like oVirt?) Also, the new m2cypto version might be requirement of the VDSM rpm in the future; I think there are few people witch run VDSM apart from being an oVirt / RHEV host. This way the impact and possible side effects are minimized (if there are any). Dan? [1] http://koji.fedoraproject.org/koji/buildinfo?buildID=485699 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1147148 [2] ftp://rpmfind.net/linux/fedora-secondary/development/rawhide/source/SRPMS/m/m2crypto-0.21.1-12.fc20.src.rpm -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Proposing fix for EL6 m2crypto memory leak
On 28.10.2014 11:51, Sven Kieske wrote: On 28/10/14 11:07, Daniel Helgenberger wrote: As I have seen no side effects, I propose adding a newer m2crypto to the ovirt EL6 repos; with fixes the issue immediately (well, you need to restart vdsmd This package is provided and installed from the base repo on el6. I really would discourage to blow the ovir repo up by yet-another-package. imho this should get fixed/backported in el6 base repo. I very much agree this is the best solution. But this might take a lot of time as we fist need to find the root cause (see below). I reasoned therefore adding m2crypto to oVirt EL6 repos should be a temporary measure. I think everybody running EL6 hosts is suffering from this bug. However, usually there are large amounts of RAM available in production hosts and VDSM might be restarted once in a while so this leak may as well be unnoticed - until the host is loaded and fails because of endless swapping. Further, it is totally unclear to me whatever this is a bug in VDSM or m2crypto. If this is more clear, I am happy to open a BZ against m2crypto EL6. just my 2 cents of course, but if ovirt ships this package you also need to maintain it. I would volunteer to provide the RPMs for oVirt for the time being; as I did already. I have to build them anyway and if this makes any sense (OTOH, changes in this package are very rare it seems). PS: May remark about EL6 being obsoleted was not meant seriously ;) -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users