[ovirt-users] oVirt 4.2: hostdev passthrough not working any more

2018-01-18 Thread Daniel Helgenberger
Hello,

yesterday I upgraded to 4.2.0 from 4.1.8.

Now I notice I cannot assign host dev pass though any more; in the GUI
the 'Pinnded to host' list is empty; I cannot select any host for pass
through host pinning.

When I was creating the particular VM in 4.1 it was working as expected.

The hostdev from before the upgrades are still present. I tried to
remove them and got an NPE (see below).

As a workaround, is the old hostusb[1] method I know back from 3.x still 
working in the 4.x
line?

AFAICT IOMMU is working

> dmesg | grep -e DMAR -e IOMMU
> [0.00] ACPI: DMAR 7b7e7000 002C6 (v01 HP ProLiant 
> 0001 HP   0001)
> [0.168032] DMAR: Host address width 46
> [0.168034] DMAR: DRHD base: 0x00fbffc000 flags: 0x0
> [0.168047] DMAR: dmar0: reg_base_addr fbffc000 ver 1:0 cap 
> 8d2078c106f0466 ecap f020de
> [0.168050] DMAR: DRHD base: 0x00c7ffc000 flags: 0x1
> [0.168061] DMAR: dmar1: reg_base_addr c7ffc000 ver 1:0 cap 
> 8d2078c106f0466 ecap f020de
> [0.168063] DMAR: RMRR base: 0x0079174000 end: 0x0079176fff
> [0.168065] DMAR: RMRR base: 0x00791f4000 end: 0x00791f7fff
> [0.168067] DMAR: RMRR base: 0x00791de000 end: 0x00791f3fff
> [0.168070] DMAR: RMRR base: 0x00791cb000 end: 0x00791dbfff
> [0.168071] DMAR: RMRR base: 0x00791dc000 end: 0x00791ddfff
> [0.168073] DMAR: ATSR flags: 0x0
> [0.168075] DMAR: ATSR flags: 0x0
> [0.168079] DMAR-IR: IOAPIC id 10 under DRHD base  0xfbffc000 IOMMU 0
> [0.168082] DMAR-IR: IOAPIC id 8 under DRHD base  0xc7ffc000 IOMMU 1
> [0.168084] DMAR-IR: IOAPIC id 9 under DRHD base  0xc7ffc000 IOMMU 1
> [0.168086] DMAR-IR: HPET id 0 under DRHD base 0xc7ffc000
> [0.168088] DMAR-IR: Queued invalidation will be enabled to support x2apic 
> and Intr-remapping.
> [0.169073] DMAR-IR: Enabled IRQ remapping in x2apic mode

Thanks,

[1] https://www.ovirt.org/develop/release-management/features/virt/hostusb/
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


> 2018-01-17 11:37:51,035+01 INFO  
> [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default 
> task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Running command: 
> RemoveVmHostDevicesCommand internal: false. Entities affected :  ID: 
> 6132322b-e187-4a83-b8c1-0477bde10497 Type: VMAction group 
> EDIT_ADMIN_VM_PROPERTIES with role type ADMIN
> 2018-01-17 11:37:51,037+01 ERROR 
> [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default 
> task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Command 
> 'org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand' failed: null
> 2018-01-17 11:37:51,037+01 ERROR 
> [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default 
> task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Exception: 
> java.lang.NullPointerException
>   at 
> org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand.executeCommand(RemoveVmHostDevicesCommand.java:64)
>  [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.CommandBase.executeWithoutTransaction(CommandBase.java:1205)
>  [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.CommandBase.executeActionInTransactionScope(CommandBase.java:1345)
>  [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.CommandBase.runInTransaction(CommandBase.java:1987) 
> [bll.jar:]
>   at 
> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInNewTransaction(TransactionSupport.java:202)
>  [utils.jar:]
>   at 
> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInRequired(TransactionSupport.java:137)
>  [utils.jar:]
>   at 
> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:105)
>  [utils.jar:]
>   at org.ovirt.engine.core.bll.CommandBase.execute(CommandBase.java:1405) 
> [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:412) 
> [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.executor.DefaultBackendActionExecutor.execute(DefaultBackendActionExecutor.java:13)
>  [bll.jar:]
>   at org.ovirt.engine.core.bll.Backend.runAction(Backend.java:509) 
> [bll.jar:]
>   at org.ovirt.engine.core.bll.Backend.runActionImpl(Backend.java:491) 
> [bll.jar:]
>   at org.ovirt.engine.core.bll.Backend.runAction(Backend.java:444) 
> [bll.jar:]
>   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
> [rt.jar:1.8.0_151]
>   at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) 
> [rt.jar:1.8.0_151]
>   at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.jav

[ovirt-users] oVirt 4.2: hostdev passthrough noop

2018-01-17 Thread Daniel Helgenberger
Hello,

yesterday I upgraded to 4.2 from 4.1.8.

Now I notice I cannot assign host dev pass though any more; in the GUI
the 'Pinnded to host' list is empty.

The hostdev from before the upgrades are still present. I tried to
remove them and got an NPE (see below).

Has anyone an idea?

---

 > 2018-01-17 11:37:51,035+01 INFO
[org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default
task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Running command:
RemoveVmHostDevicesCommand internal: false. Entities affected :  ID:
6132322b-e187-4a83-b8c1-0477bde10497 Type: VMAction group
EDIT_ADMIN_VM_PROPERTIES with role type ADMIN
> 2018-01-17 11:37:51,037+01 ERROR 
> [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default 
> task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Command 
> 'org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand' failed: null
> 2018-01-17 11:37:51,037+01 ERROR 
> [org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand] (default 
> task-48) [57a8c14d-fc2c-4846-bc3d-cc4f3e8393f8] Exception: 
> java.lang.NullPointerException
>   at 
> org.ovirt.engine.core.bll.hostdev.RemoveVmHostDevicesCommand.executeCommand(RemoveVmHostDevicesCommand.java:64)
>  [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.CommandBase.executeWithoutTransaction(CommandBase.java:1205)
>  [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.CommandBase.executeActionInTransactionScope(CommandBase.java:1345)
>  [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.CommandBase.runInTransaction(CommandBase.java:1987) 
> [bll.jar:]
>   at 
> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInNewTransaction(TransactionSupport.java:202)
>  [utils.jar:]
>   at 
> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInRequired(TransactionSupport.java:137)
>  [utils.jar:]
>   at 
> org.ovirt.engine.core.utils.transaction.TransactionSupport.executeInScope(TransactionSupport.java:105)
>  [utils.jar:]
>   at org.ovirt.engine.core.bll.CommandBase.execute(CommandBase.java:1405) 
> [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:412) 
> [bll.jar:]
>   at 
> org.ovirt.engine.core.bll.executor.DefaultBackendActionExecutor.execute(DefaultBackendActionExecutor.java:13)
>  [bll.jar:]
>   at org.ovirt.engine.core.bll.Backend.runAction(Backend.java:509) 
> [bll.jar:]
>   at org.ovirt.engine.core.bll.Backend.runActionImpl(Backend.java:491) 
> [bll.jar:]
>   at org.ovirt.engine.core.bll.Backend.runAction(Backend.java:444) 
> [bll.jar:]
>   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
> [rt.jar:1.8.0_151]
>   at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) 
> [rt.jar:1.8.0_151]
>   at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>  [rt.jar:1.8.0_151]
>   at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_151]
>   at 
> org.jboss.as.ee.component.ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptor.java:52)
>   at 
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
>   at 
> org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:509)
>   at 
> org.jboss.as.weld.ejb.DelegatingInterceptorInvocationContext.proceed(DelegatingInterceptorInvocationContext.java:92)
>  [wildfly-weld-ejb-11.0.0.Final.jar:11.0.0.Final]
>   at 
> org.jboss.weld.interceptor.proxy.WeldInvocationContext.interceptorChainCompleted(WeldInvocationContext.java:98)
>  [weld-core-impl-2.4.3.Final.jar:2.4.3.Final]
>   at 
> org.jboss.weld.interceptor.proxy.WeldInvocationContext.proceed(WeldInvocationContext.java:117)
>  [weld-core-impl-2.4.3.Final.jar:2.4.3.Final]
>   at 
> org.ovirt.engine.core.common.di.interceptor.LoggingInterceptor.apply(LoggingInterceptor.java:12)
>  [common.jar:]
>   at sun.reflect.GeneratedMethodAccessor67.invoke(Unknown Source) 
> [:1.8.0_151]
>   at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>  [rt.jar:1.8.0_151]
>   at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_151]
>   at 
> org.jboss.weld.interceptor.reader.SimpleInterceptorInvocation$SimpleMethodInvocation.invoke(SimpleInterceptorInvocation.java:73)
>  [weld-core-impl-2.4.3.Final.jar:2.4.3.Final]
>   at 
> org.jboss.weld.interceptor.proxy.WeldInvocationContext.invokeNext(WeldInvocationContext.java:83)
>  [weld-core-impl-2.4.3.Final.jar:2.4.3.Final]
>   at 
> org.jboss.weld.interceptor.proxy.WeldInvocationContext.proceed(WeldInvocationContext.java:115)
>  [weld-core-impl-2.4.3.Final.jar:2.4.3.Final]
>   at 
> org.jboss.weld.bean.InterceptorImpl.intercept(InterceptorImpl.java:108) 
> [weld-core-impl-2.4.3.Final.jar:2.4.3.Final]
>   at 
> 

Re: [ovirt-users] [SPAM] [OT] Gmail is marking the list as spam.

2015-11-17 Thread Daniel Helgenberger


On 11/16/2015 06:30 PM, Juan Pablo Lorier wrote:
> Hi,
> 
> Someone may take a look at the spam policy of Gmail to see what is not 
> been done as it's been months since I have to get the mails from spam 
> folder no matter how much I try to get them as legitime.
> Regards

At least ovirt.org seems to have an ipv6 SPF softfail:

On my Mailserver, running dual stack, I get:
Received-SPF: SoftFail domain of transitioning
 users-boun...@ovirt.org discourages use of 2600:3c01::f03c:91ff:fe93:4b0d as
 permitted sender

Doing some 'dig'-ging reveals a faulty/missing IPv6 SPF while 'lists.ovirt.org' 
is sending mails via IPv6:

nslookup 2600:3c01::f03c:91ff:fe93:4b0d
Non-authoritative answer:
d.0.b.4.3.9.e.f.f.f.1.9.c.3.0.f.0.0.0.0.0.0.0.0.1.0.c.3.0.0.6.2.ip6.arpa
name = lists.ovirt.org.

But:
dig ovirt.org TXT +short
"v=spf1 a:linode01.ovirt.org a:lists.ovirt.org ~all"

and:
dig lists.ovirt.org  +short
linode01.ovirt.org.

dig lists.ovirt.org A +short
linode01.ovirt.org.
173.255.252.138




> 
> El 22/10/15 a las 12:24 p.m., users-requ...@ovirt.org escribió:
>> Send Users mailing list submissions to
>>  users@ovirt.org
>>
>> To subscribe or unsubscribe via the World Wide Web, visit
>>  http://lists.ovirt.org/mailman/listinfo/users
>> or, via email, send a message with subject or body 'help' to
>>  users-requ...@ovirt.org
>>
>> You can reach the person managing the list at
>>  users-ow...@ovirt.org
>>
>> When replying, please edit your Subject line so it is more specific
>> than "Re: Contents of Users digest..."
>>
>>
>> Today's Topics:
>>
>> 1.  [ANN] oVirt 3.6.0 Third Release Candidate is now available
>>for testing (Sandro Bonazzola)
>> 2. Re:  Testing self hosted engine in 3.6: hostname not resolved
>>error (Gianluca Cecchi)
>> 3. Re:  3.6 upgrade issue (Yaniv Dary)
>> 4. Re:  How to change the hosted engine VM RAM size after
>>deploying (Simone Tiraboschi)
>>
>>
>> --
>>
>> Message: 1
>> Date: Thu, 22 Oct 2015 16:08:25 +0200
>> From: Sandro Bonazzola 
>> To: annou...@ovirt.org, users , devel
>>  
>> Subject: [ovirt-users] [ANN] oVirt 3.6.0 Third Release Candidate is
>>  now available for testing
>> Message-ID:
>>  

Re: [ovirt-users] MAC address recycling

2015-10-06 Thread Daniel Helgenberger


On 02.10.2015 07:54, Martin Mucha wrote:
> 
> 
> - Original Message -
>>
>>
>> On 27.09.2015 12:25, Martin Mucha wrote:
>>> Hi,
>>>
>>> danken, I do not remember I saw such a bug.
>>>
>>> In 3.5 and 3.6 there was some changes in MAC pool implementation and usage
>>> in system, but order, in which macs are assigned remained unchanged. Yes,
>>> if you request MAC from pool, return it, and request again, you will
>>> always end up with same mac.
>>>
>>> when looking for available mac in pool, we iterate through available ranges
>>> selecting first one with some available mac:
>>> org.ovirt.engine.core.bll.network.macpoolmanager.MacsStorage#getRangeWithAvailableMac
>>>
>>> and select 'leftmost' available mac from it:
>>> org.ovirt.engine.core.bll.network.macpoolmanager.Range#findUnusedMac
>>
>> Thanks clearing up this behaviour!
>>
>> I would open an RFE?
> 
> Yes, please. I'm currently on PTO, and this has to be planned anyways (and 
> that's not done by me). Please specify there as well whether depicted 
> solution I wrote about in last mail would be fine to you, or whether you 
> actually need some delaying. I believe new methods for replacing should be 
> ideal solution, but I don't know all your constraints and I did not look 
> sufficiently thoroughly into code to be sure how easy/problematic it is. 
> 
FYI:
https://bugzilla.redhat.com/show_bug.cgi?id=1269301

>>
>>>
>>> I understand your problem, we can either a) impose some delay for returning
>>> macs to pool or b)randomize acquiring macs, but we should as well specify,
>>> how should system behave, when there are not sufficient macs in system.
>>> Since when there are small amount of macs left, a) will block other
>>> requests for mac while there's no need to do so and b) will return same
>>> mac anyways, if there's just one left. And even worse, with low number of
>>> available mac (for example 5) and randomized selection it may work/fail
>>> unpredictably.
>>>
>>> Maybe more proper would be creating new method on mac pool, requiring 'mac
>>> renew/replace' — that's the actual usecase you need; not
>>> delaying/randomizing. You need different mac. Method like "I want some MAC
>>> address(es), but not this one(s); Returned mac addresses would be
>>> immediately available for others, and search for another mac can sensibly
>>> fail (this mac address cannot be replaced, there isnt another one)
>>>
>>> M.
>>>
>>> - Original Message -
>>>> On Thu, Sep 24, 2015 at 01:39:42PM +, Daniel Helgenberger wrote:
>>>>> Hello,
>>>>>
>>>>> I recently experienced an issue with mac address uses in ovirt with
>>>>> foreman[1].
>>>>>
>>>>> Bottom line, a mac address was recycled causing an issue where I could
>>>>> not
>>>>> rebuild a host because of a stale DHCP reservation record.
>>>>>
>>>>> What is the current behavior regarding the reuse of MAC addresses for new
>>>>> VMs?
>>>>> Can I somehow delay a the recycle of a MAC?
>>>>
>>>> Martin, I recall we had a bug asking not to immediately re-use a
>>>> recently-released MAC address. Was this possible?
>>>>
>>>
>>
>> --
>> Daniel Helgenberger
>> m box bewegtbild GmbH
>>
>> P: +49/30/2408781-22
>> F: +49/30/2408781-10
>>
>> ACKERSTR. 19
>> D-10115 BERLIN
>>
>>
>> www.m-box.de  www.monkeymen.tv
>>
>> Geschäftsführer: Martin Retschitzegger / Michaela Göllner
>> Handeslregister: Amtsgericht Charlottenburg / HRB 112767
>>
> 

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Add external provider (Failed with error PROVIDER_FAILURE and code 5050) foreman 1.9

2015-09-29 Thread Daniel Helgenberger
Sorry for the delay; was working out of town.

On 25.09.2015 16:14, Nathanaël Blanchet wrote:

> Thanks for answering, so what am I supposed to do? regenerating foreman 
> certificate?

This depends on your engine os; try one of those hints
http://kb.kerio.com/product/kerio-connect/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html

> 
> Le 25/09/2015 15:44, Daniel Helgenberger a écrit :
>> Just a guess: I had the same issue. It turned out foreman cert / ca was not 
>> trusted..
>>
>> On 25.09.2015 08:50, Nathanaël Blanchet wrote:
>>> Hello,
>>> I have a working foreman 1.9.1 installed with katello 2.3.
>>> As required, ruby193-rubygem-ovirt_provision_plugin-1.0.1-1.el7 is also
>>> installed on the same host.
>>> But the issue is the same as below when testing  in "add external
>>> provider" from ovirt 3.5.4.
>>> Is it a known bug?
>>> _______
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
> 

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] vm provisionning with foreman/ovirt

2015-09-29 Thread Daniel Helgenberger
Hello Nathanaël,

On 28.09.2015 14:42, Nathanaël Blanchet wrote:
> Hi Yaniv,
> 
> I successfully tested the foreman integration with ovirt 3.5 for host 
> provisionning, but I'm now so much interested in the vm provisionning 
> during the vm creation with a PXE boot on a kickstart file generated by 
> foreman.
> I've tested the vm provisionning in the foreman side with computer 
> resource and all works as expected. But to my mind, it would be easier 
> to deal this workflow with ovirt as a unique interface. Is there some 
> current work to implement this into ovirt?
> 

There is quite a difference in the goals of ovirt and foreman. I do think there 
will never
be such a feature in ovirt; foreman is live cycle and ovirt compute.

This is why on our site, for instance, users use Foreman as frontend while 
admins use oVirt directly.

However, it is quite easy to add existing VMs back to foreman:
In foreman, head to compute providers, ovrit, 'associate vms'

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Some VMs in status "not responding" in oVirt interface

2015-09-29 Thread Daniel Helgenberger
Hello Christian,

just a quick round up:

Did you still see the issue? It stopped for me after removing live snap shots.


On 17.09.2015 07:39, Christian Hailer wrote:
> Hi,
> 
> just to get it straight: most of my VMs had one or more existing snapshots. 
> Do you think this is a problem currently? If I understand it correctly the BZ 
> of Markus concerns only a short period of time while removing a snapshot, but 
> my VMs stopped responding in the middle of the night without any 
> interaction...
> I deleted all the snapshots, just in case :) my system is running fine for 
> nearly three days now, I'm not quite sure but I think it helped that I 
> changed the HDD and NIC of the Windows 2012 VMs to VirtIO devices...
> 
> Best regards, Christian
> 
> -Ursprüngliche Nachricht-
> Von: Daniel Helgenberger [mailto:daniel.helgenber...@m-box.de] 
> Gesendet: Dienstag, 15. September 2015 22:24
> An: Markus Stockhausen <stockhau...@collogia.de>; Christian Hailer 
> <christ...@hailer.eu>
> Cc: yd...@redhat.com; users@ovirt.org
> Betreff: Re: AW: [ovirt-users] Some VMs in status "not responding" in oVirt 
> interface
> 
> 
> 
> On 15.09.2015 21:31, Markus Stockhausen wrote:
>> Hi Christian,
>>
>> I think of a package similar like this:
>>
>> qemu-debuginfo.x86_64   2:2.1.3-10.fc21
>>
>> That allows gdb to show information about backtrace symbols. See 
>> comment 12 of https://bugzilla.redhat.com/show_bug.cgi?id=1262251
>> Makes error search much simpler - especially if qemu hangs.
> 
> Markus, thanks for the BZ. I think I do see the same issue. Actually my VM is 
> currently the only with a live snapshot and (puppetmaster) does a lot of I/O.
> 
> Christian, maybe this BZ1262251 also applicable?
> 
> I'll go ahead and delete the live snapshot. If I see this issue again I will 
> submit the trace to your BZ.
> 
> 
>>
>> Markus
>>
>> **
>>
>> Von: Christian Hailer [christ...@hailer.eu]
>>
>> Gesendet: Dienstag, 15. September 2015 21:24
>>
>> An: Markus Stockhausen; 'Daniel Helgenberger'
>>
>> Cc: yd...@redhat.com; users@ovirt.org
>>
>> Betreff: AW: [ovirt-users] Some VMs in status "not responding" in 
>> oVirt interface
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> Hi Markus,
>>  
>> gdb is available on CentOS 7, but what do you mean by qemu-debug? I 
>> Installed qemu-kvm-tools, maybe this is the pendant for CentOS?
>>  
>> qemu-kvm-tools.x86_64 : KVM debugging and diagnostics tools
>> qemu-kvm-tools-ev.x86_64 : KVM debugging and diagnostics tools
>> qemu-kvm-tools-rhev.x86_64 : KVM debugging and diagnostics tools
>>  
>> Regards, Christian
>>  
>>
>>
>>
>>
>> Von: Markus Stockhausen [mailto:stockhau...@collogia.de]
>>
>>
>> Gesendet: Dienstag, 15. September 2015 20:40
>>
>> An: Daniel Helgenberger <daniel.helgenber...@m-box.de>
>>
>> Cc: Christian Hailer <christ...@hailer.eu>; yd...@redhat.com; 
>> users@ovirt.org
>>
>> Betreff: Re: [ovirt-users] Some VMs in status "not responding" in 
>> oVirt interface
>>
>>
>>  
>> Do you have a chance to install qemu-debug? If yes I would try a backtrace.
>> gdb -p 
>>
>> # bt
>> Markus
>>
>>
>> Am 15.09.2015 4:15 nachm. schrieb Daniel Helgenberger 
>> <daniel.helgenber...@m-box.de>:
>>
>>
>>
>>
>>
>> Hello,
>>
>>
>>
>> I do not want to hijack the thread but maybe my issue is related?
>>
>>
>>
>> It might have started with ovirt 3.5.3; but I cannot tell for sure.
>>
>>
>>
>> For me, one vm (foreman) is affected; the second time in 14 days. I 
>> can confirm this as I also loose any network connection to the VM and
>>
>> the ability to connect a console.
>>
>> Also, the only thing witch 'fixes' the issue is right now 'kill -9 > qemu-kvm process>'
>>
>>
>>
>> As far as I can tell the VM became unresponsive at around Sep 15 
>> 12:30:01; engine logged this at 12:34. Nothing obvious in VDSM logs 
>> (see
>>
>> attached).
>>
>>
>>
>> Below the engine.log part.
>>
>>
>>
>> Versions:
>>
>> ovirt-engine-3.5.4.2-1.el7.centos.noarch
>>
>>
>>
>> vdsm-4.16.26-0.el7.centos
>>
>> libvirt-1.2.8-16.el7_1.3
>>
>>
>>
>> engine.log (1200 - 1300:
>>
>> 2015-09

[ovirt-users] MAC address recycling

2015-09-24 Thread Daniel Helgenberger
Hello,

I recently experienced an issue with mac address uses in ovirt with foreman[1].

Bottom line, a mac address was recycled causing an issue where I could not 
rebuild a host because of a stale DHCP reservation record.

What is the current behavior regarding the reuse of MAC addresses for new VMs?
Can I somehow delay a the recycle of a MAC?

Thanks!
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] moving storage away from a single point of failure

2015-09-22 Thread Daniel Helgenberger


On 18.09.2015 23:04, Robert Story wrote:
> Hi,

Hello Robert,

> 
> I'm running oVirt 3.5 in our lab, and currently I'm using NFS to a single
> server. I'd like to move away from having a single point of failure.

In this case have a look at iSCSI or FC storage. If you have redundant 
contollers and switches
the setup should be reliable enough?

> Watching the mailing list, all the issues with gluster getting out of sync
> and replica issues has me nervous about gluster, plus I just have 2
> machines with lots of drive bays for storage.

Still, I would stick to gluster if you want a replicated storage:
 - It is supported out of the box and you get active support from lots of users 
here
 - Replica3 will solve most out of sync cases
 - I dare say other replicated storage backends do suffer from the same issues, 
this is by design.

Two things you should keep in mind when running gluster in production:
 - Do not run compute and storage on the same hosts
 - Do not (yet) use Gluster as storage for Hosted Engine

> I've been reading about GFS2
> and DRBD, and wanted opinions on if either is a good/bad idea, or to see if
> there are other alternatives.
> 
> My oVirt setup is currently 5 nodes and about 25 VMs, might double in size
> eventually, but probably won't get much bigger than that.

In the end, it is quite easy to migrate storage domains. If you are satisfied 
with your lab
setup, put it in production and add storage later and move the disks. 
Afterwards, remove old
storage domains.

My to cent with gluster: It runs quite stable since some time now if you do not 
touch it.
I never had issues when adding bricks, though removing and replacing them can 
be very tricky.

HTH,

> 
> 
> Thanks,
> 
> Robert
> 

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Daniel Helgenberger
"Alon Bar-Lev" <alo...@redhat.com <mailto:alo...@redhat.com>>
> > Cc:users@ovirt.org <mailto:users@ovirt.org>
> > Sent: Tuesday, September 22, 2015 5:35:16 PM
> > Subject: Re: [ovirt-users] LDAP Authentication
> >
> > its too complicated ,you have any script or video ?
> 
> in 3.6 we have a setup script.
> for now:
> 
> cp -r /usr/share/ovirt-engine/examples/simple/. /etc/ovirt-engine/
> 
> this is written in the README.
> 
> then customize files at /etc/ovirt-engine/extnesions.d/*
> /etc/ovirt-engine/aaa/* to match your setup
> 
> >
> >
> > On Tue, Sep 22, 2015 at 8:00 PM, Alon Bar-Lev <alo...@redhat.com 
> <mailto:alo...@redhat.com>> wrote:
> >
> > >
> > >
> > > - Original Message -
> > > > From: "Budur Nagaraju" <nbud...@gmail.com 
> <mailto:nbud...@gmail.com>>
> > > > To: "Alon Bar-Lev" <alo...@redhat.com <mailto:alo...@redhat.com>>
> > > > Cc:users@ovirt.org <mailto:users@ovirt.org>
> > > > Sent: Tuesday, September 22, 2015 5:24:36 PM
> > > > Subject: Re: [ovirt-users] LDAP Authentication
> > > >
> > > > HI Alon,
> > > >
> > > > Below is the configuration which I have done ,but unable to search 
> the
> > > > users in UI
> > > > can you pls help me ?
> > >
> > > you need three files, see the
> > > /usr/share/ovirt-engine-extension-aaa-ldap/examples/simple
> > >
> > > >
> > > >
> > > > [root@cstlb2 aaa]# cat ldap1.properties
> > > > #
> > > > # Select one
> > > > #
> > > > include = 
> > > > #include = <389ds.properties>
> > > > #include = 
> > > > #include = 
> > > > #include = 
> > > > #include = 
> > > > #include = 
> > > >
> > > > #
> > > > # Server
> > > > #
> > > > vars.server =my.abc.net <http://my.abc.net>
> > > >
> > > > #
> > > > # Search user and its password.
> > > > #
> > > > vars.user =
> > > >
> > > 
> uid=search,cn=nbudoor,cn=Departments,cn=Corporate,cn=Bangalore,cn=users,dc=abc,dc=net
> > > > vars.password = company1
> > > >
> > > > pool.default.serverset.single.server = ${global:vars.server}
> > > > pool.default.auth.simple.bindDN = ${global:vars.user}
> > > > pool.default.auth.simple.password = ${global:vars.password}
> > > >
> > > > # Create keystore, import certificate chain and uncomment
> > > > # if using ssl/tls.
> > > > #pool.default.ssl.startTLS = true
>     > > > #pool.default.ssl.truststore.file =
> > > > ${local:_basedir}/${global:vars.server}.jks
> > > > #pool.default.ssl.truststore.password = changeit
> > > > [root@cstlb2 aaa]#
> > > >
> > > >
> > > >
> > > > On Tue, Sep 22, 2015 at 7:25 PM, Alon Bar-Lev <alo...@redhat.com 
> <mailto:alo...@redhat.com>> wrote:
> > > >
> > > > >
> > > > >
> > > > > - Original Message -
> > > > > > From: "Budur Nagaraju" <nbud...@gmail.com 
> <mailto:nbud...@gmail.com>>
> > > > > > To:users@ovirt.org <mailto:users@ovirt.org>
> > > > > > Sent: Tuesday, September 22, 2015 4:34:46 PM
> > > > > > Subject: [ovirt-users] LDAP Authentication
> > > > > >
> > > > > > HI All,
> > > > > >
> > > > > > Can someone help me in configuring LDAP authentication for 
> Ovirt ?
> > > > >
> > > > > Please review:
> > > > >http://www.ovirt.org/Features/AAA
> > > > >
> > > > >
> > 
> >https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0
> > > > >
> > > >
> > >
> >
> 
> 

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Some VMs in status "not responding" in oVirt interface

2015-09-21 Thread Daniel Helgenberger


On 17.09.2015 07:39, Christian Hailer wrote:
> Hi,
> 
> just to get it straight: most of my VMs had one or more existing snapshots. 
> Do you think this is a problem currently? If I understand it correctly the BZ 
> of Markus concerns only a short period of time while removing a snapshot, but 
> my VMs stopped responding in the middle of the night without any 
> interaction...
> I deleted all the snapshots, just in case :) my system is running fine for 
> nearly three days now, I'm not quite sure but I think it helped that I 
> changed the HDD and NIC of the Windows 2012 VMs to VirtIO devices...

In my case these these Linux guests. So far I only had one VM with a live snap; 
the one showing the issue. This points into the direction
qemu-rhev; might be independent from guest os.
For testing I created a new guest just for this purpose; it has a live snap 
shot. Maybe you do the same?

To dig deeper into the issue: my storage is NFS3 - backed.
> 
> Best regards, Christian
> 
> -Ursprüngliche Nachricht-
> Von: Daniel Helgenberger [mailto:daniel.helgenber...@m-box.de] 
> Gesendet: Dienstag, 15. September 2015 22:24
> An: Markus Stockhausen <stockhau...@collogia.de>; Christian Hailer 
> <christ...@hailer.eu>
> Cc: yd...@redhat.com; users@ovirt.org
> Betreff: Re: AW: [ovirt-users] Some VMs in status "not responding" in oVirt 
> interface
> 
> 
> 
> On 15.09.2015 21:31, Markus Stockhausen wrote:
>> Hi Christian,
>>
>> I think of a package similar like this:
>>
>> qemu-debuginfo.x86_64   2:2.1.3-10.fc21
>>
>> That allows gdb to show information about backtrace symbols. See 
>> comment 12 of https://bugzilla.redhat.com/show_bug.cgi?id=1262251
>> Makes error search much simpler - especially if qemu hangs.
> 
> Markus, thanks for the BZ. I think I do see the same issue. Actually my VM is 
> currently the only with a live snapshot and (puppetmaster) does a lot of I/O.
> 
> Christian, maybe this BZ1262251 also applicable?
> 
> I'll go ahead and delete the live snapshot. If I see this issue again I will 
> submit the trace to your BZ.
> 
> 
>>
>> Markus
>>
>> **
>>
>> Von: Christian Hailer [christ...@hailer.eu]
>>
>> Gesendet: Dienstag, 15. September 2015 21:24
>>
>> An: Markus Stockhausen; 'Daniel Helgenberger'
>>
>> Cc: yd...@redhat.com; users@ovirt.org
>>
>> Betreff: AW: [ovirt-users] Some VMs in status "not responding" in 
>> oVirt interface
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> Hi Markus,
>>  
>> gdb is available on CentOS 7, but what do you mean by qemu-debug? I 
>> Installed qemu-kvm-tools, maybe this is the pendant for CentOS?
>>  
>> qemu-kvm-tools.x86_64 : KVM debugging and diagnostics tools
>> qemu-kvm-tools-ev.x86_64 : KVM debugging and diagnostics tools
>> qemu-kvm-tools-rhev.x86_64 : KVM debugging and diagnostics tools
>>  
>> Regards, Christian
>>  
>>
>>
>>
>>
>> Von: Markus Stockhausen [mailto:stockhau...@collogia.de]
>>
>>
>> Gesendet: Dienstag, 15. September 2015 20:40
>>
>> An: Daniel Helgenberger <daniel.helgenber...@m-box.de>
>>
>> Cc: Christian Hailer <christ...@hailer.eu>; yd...@redhat.com; 
>> users@ovirt.org
>>
>> Betreff: Re: [ovirt-users] Some VMs in status "not responding" in 
>> oVirt interface
>>
>>
>>  
>> Do you have a chance to install qemu-debug? If yes I would try a backtrace.
>> gdb -p 
>>
>> # bt
>> Markus
>>
>>
>> Am 15.09.2015 4:15 nachm. schrieb Daniel Helgenberger 
>> <daniel.helgenber...@m-box.de>:
>>
>>
>>
>>
>>
>> Hello,
>>
>>
>>
>> I do not want to hijack the thread but maybe my issue is related?
>>
>>
>>
>> It might have started with ovirt 3.5.3; but I cannot tell for sure.
>>
>>
>>
>> For me, one vm (foreman) is affected; the second time in 14 days. I 
>> can confirm this as I also loose any network connection to the VM and
>>
>> the ability to connect a console.
>>
>> Also, the only thing witch 'fixes' the issue is right now 'kill -9 > qemu-kvm process>'
>>
>>
>>
>> As far as I can tell the VM became unresponsive at around Sep 15 
>> 12:30:01; engine logged this at 12:34. Nothing obvious in VDSM logs 
>> (see
>>
>> attached).
>>
>>
>>
>> Below the engine.log part.
>>
>>
>>
>> Versions:
>>
>>

Re: [ovirt-users] Extension aaa: No search for principal

2015-09-16 Thread Daniel Helgenberger


On 15.09.2015 22:55, Alon Bar-Lev wrote:
> 
> 
> - Original Message -
>> From: "Daniel Helgenberger" <daniel.helgenber...@m-box.de>
>> To: "Alon Bar-Lev" <alo...@redhat.com>
>> Cc: Users@ovirt.org
>> Sent: Tuesday, September 15, 2015 11:09:45 PM
>> Subject: Re: [ovirt-users] Extension aaa: No search for principal
>>
>> I think I did find the issue here;
>>
>> my domain is named int.corp.com
>>
>> I have defined several UPN aliases and our real world users do use the UPN
>> @corp.com.
>>
>> Using some internal user with UPN int.corp.com the authentication works as
>> expected; while my real world users fail.
>>
>> I tried to create a new profile for that; but it fails to load off course
>> because the domain corp.com cannot be connected.
>>
> 
> the user is upn, users should specify their full upn if this non default 
> domain suffix.

Hello Alon,
> 
> you do not need a new profile.
> 
> in your case it would probably be us...@corp.com for user1.

right ... should have tried that in the first place. Works very well now.

Thanks for helping me sort that through!

> 

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Extension aaa: No search for principal

2015-09-15 Thread Daniel Helgenberger


On 11.09.2015 17:00, Alon Bar-Lev wrote:
>
>
> - Original Message -
>> From: "Daniel Helgenberger" <daniel.helgenber...@m-box.de>
>> To: "Alon Bar-Lev" <alo...@redhat.com>
>> Cc: Users@ovirt.org
>> Sent: Friday, September 11, 2015 5:33:21 PM
>> Subject: Re: [ovirt-users] Extension aaa: No search for principal
>>
>> sorry, forgot one:
>>
>> On 11.09.2015 12:48, Alon Bar-Lev wrote:
>>> Hi!
>>>
>>> Thank you for the information, for some reason the administrator user
>>> cannot be resolved to userPrincipalName during login, is it specific for
>>> Administrator or any user?
>> This is the default domain administrator account witch exits in any
>> forest. But just in case I created a new domain user just for the
>> purpose; same outcome
>
Sorry for the delay, Alon.

> I am unsure what actually happens...
I might have an idea, at least from the commands you supplied.

> Something in global catalog is out of sync.
> Usually - you do not add domain administrator to external application... 
> there is no need to expose it.
> By default Administrator does not have "login from network" and "user 
> principal suffix".
>
> Also in my environment I do not get result for administrator, but I do get 
> one for regular user that has upn suffix in user record, you can see these 
> fields in user and domain manager.
>
> So please use regular unprivileged users which belongs to "Domain Users" from 
> now on.
>
> To test if user has userPrincipalName use the following command (assuming we 
> search for u...@int.corp.de):
>
> $ ldapsearch -E pr=1024/noprompt -o ldif-wrap=no -H 
> ldap://qa1.qa.lab.tlv.redhat.com:3268/ -x -D 'b...@int.corp.de' -w PASSWORD 
> -b '' '(userPrincipalName=u...@int.corp.de)' cn userPrincipalName
It seams with Active Directory (at least) the search base cannot be 
empty (-b '') but needs to be provided.

In my case, the above command fails with:
> # search result
> search: 2
> result: 32 No such object
> text: 208D: NameErr: DSID-03100213, problem 2001 (NO_OBJECT), data 0, 
> best match of:

While adding the most basic search path it succeeds:

$ ldapsearch -E pr=1024/noprompt -o ldif-wrap=no -H 
ldap://int.corp.de:389/ -x -D 'b...@int.corp.de' -w PASSWORD -b 
'dc=int,dc=corp,dc=de' '(userPrincipalName=administra...@int.corp.de)' 
cn userPrincipalName
> # search reference
> ref: ldap://ForestDnsZones.int.corp.de/DC=ForestDnsZones,DC=int,DC=corp,DC=de
>
> # search reference
> ref: ldap://DomainDnsZones.int.corp.de/DC=DomainDnsZones,DC=int,DC=corp,DC=de
>
> # search reference
> ref: ldap://int.corp.de/CN=Configuration,DC=int,DC=corp,DC=de
>
> # search result
> search: 2
> result: 0 Success
> control: 1.2.840.113556.1.4.319 false DDDSSSDDMM=
> pagedresults: cookie=
>
> # numResponses: 4
> # numReferences: 3

It succeeds with every user I tried.

I would set the search base; but i am not sure where to do so.

>
> This should find the user (return one result), if not, please checkout user 
> in Users and Domains manager for the domain suffix, maybe it is empty.
>
> To find user without userPrincipalName such as Administrator use the 
> following command:
>
> $ ldapsearch -E pr=1024/noprompt -o ldif-wrap=no -H 
> ldap://qa1.qa.lab.tlv.redhat.com:3268/ -x -D 'b...@int.corp.de' -w PASSWORD 
> -b '' '(sAMAccountName=user)' cn userPrincipalName
>
> For example, the above will work for Administrator, but for kerberos to work 
> properly user principal name must be defined, so these users will not work.
>
> You can dump entire GC and send me a user record if no result so I can 
> determine what is different from expectations:
>
> $ ldapsearch -E pr=1024/noprompt -o ldif-wrap=no -H 
> ldap://qa1.qa.lab.tlv.redhat.com:3268/ -x -D 'b...@int.corp.de' -w PASSWORD 
> -b '' > /tmp/dump.out

If you still require a dump (its even a small one..) please drop a mail.

>
> Regards,
> Alon
>

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Some VMs in status "not responding" in oVirt interface

2015-09-15 Thread Daniel Helgenberger


On 15.09.2015 21:31, Markus Stockhausen wrote:
> Hi Christian,
> 
> I think of a package similar like this:
> 
> qemu-debuginfo.x86_64   2:2.1.3-10.fc21
> 
> That allows gdb to show information about backtrace symbols. See
> comment 12 of https://bugzilla.redhat.com/show_bug.cgi?id=1262251
> Makes error search much simpler - especially if qemu hangs.

Markus, thanks for the BZ. I think I do see the same issue. Actually my VM is 
currently the only with a live snapshot and (puppetmaster)
does a lot of I/O.

Christian, maybe this BZ1262251 also applicable?

I'll go ahead and delete the live snapshot. If I see this issue again I will 
submit the trace to your BZ.


> 
> Markus
> 
> **
> 
> Von: Christian Hailer [christ...@hailer.eu]
> 
> Gesendet: Dienstag, 15. September 2015 21:24
> 
> An: Markus Stockhausen; 'Daniel Helgenberger'
> 
> Cc: yd...@redhat.com; users@ovirt.org
> 
> Betreff: AW: [ovirt-users] Some VMs in status "not responding" in oVirt 
> interface
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Hi Markus,
>  
> gdb is available on CentOS 7, but what do you mean by qemu-debug? I Installed 
> qemu-kvm-tools, maybe this is the pendant for CentOS?
>  
> qemu-kvm-tools.x86_64 : KVM debugging and diagnostics tools
> qemu-kvm-tools-ev.x86_64 : KVM debugging and diagnostics tools
> qemu-kvm-tools-rhev.x86_64 : KVM debugging and diagnostics tools
>  
> Regards, Christian
>  
> 
> 
> 
> 
> Von: Markus Stockhausen [mailto:stockhau...@collogia.de]
> 
> 
> Gesendet: Dienstag, 15. September 2015 20:40
> 
> An: Daniel Helgenberger <daniel.helgenber...@m-box.de>
> 
> Cc: Christian Hailer <christ...@hailer.eu>; yd...@redhat.com; users@ovirt.org
> 
> Betreff: Re: [ovirt-users] Some VMs in status "not responding" in oVirt 
> interface
> 
> 
>  
> Do you have a chance to install qemu-debug? If yes I would try a backtrace.
> gdb -p 
> 
> # bt
> Markus
> 
> 
> Am 15.09.2015 4:15 nachm. schrieb Daniel Helgenberger 
> <daniel.helgenber...@m-box.de>:
> 
> 
> 
> 
> 
> Hello,
> 
> 
> 
> I do not want to hijack the thread but maybe my issue is related?
> 
> 
> 
> It might have started with ovirt 3.5.3; but I cannot tell for sure.
> 
> 
> 
> For me, one vm (foreman) is affected; the second time in 14 days. I can 
> confirm this as I also loose any network connection to the VM and
> 
> the ability to connect a console.
> 
> Also, the only thing witch 'fixes' the issue is right now 'kill -9  qemu-kvm process>'
> 
> 
> 
> As far as I can tell the VM became unresponsive at around Sep 15 12:30:01; 
> engine logged this at 12:34. Nothing obvious in VDSM logs (see
> 
> attached).
> 
> 
> 
> Below the engine.log part.
> 
> 
> 
> Versions:
> 
> ovirt-engine-3.5.4.2-1.el7.centos.noarch
> 
> 
> 
> vdsm-4.16.26-0.el7.centos
> 
> libvirt-1.2.8-16.el7_1.3
> 
> 
> 
> engine.log (1200 - 1300:
> 
> 2015-09-15 12:03:47,949 INFO  
> [org.ovirt.engine.core.bll.scheduling.HaReservationHandling] 
> (DefaultQuartzScheduler_Worker-56) [264d502a] HA
> 
> reservation status for cluster Default is OK
> 
> 2015-09-15 12:08:02,708 INFO  [org.ovirt.engine.core.bll.OvfDataUpdater] 
> (DefaultQuartzScheduler_Worker-89) [2e7bf56e] Attempting to update
> 
> VMs/Templates Ovf.
> 
> 2015-09-15 12:08:02,709 INFO  
> [org.ovirt.engine.core.bll.ProcessOvfUpdateForStoragePoolCommand] 
> (DefaultQuartzScheduler_Worker-89)
> 
> [5e9f4ba6] Running command: ProcessOvfUpdateForStoragePoolCommand internal: 
> true. Entities affected :  ID:
> 
> 0002-0002-0002-0002-0088 Type: l
> 
> 2015-09-15 12:08:02,780 INFO  
> [org.ovirt.engine.core.bll.ProcessOvfUpdateForStoragePoolCommand] 
> (DefaultQuartzScheduler_Worker-89)
> 
> [5e9f4ba6] Lock freed to object EngineLock [exclusiveLocks= key: 
> 0002-0002-0002-0002-0088 value: OVF_UPDATE
> 
> 2015-09-15 12:08:47,997 INFO  
> [org.ovirt.engine.core.bll.scheduling.HaReservationHandling] 
> (DefaultQuartzScheduler_Worker-21) [3fc854a2] HA
> 
> reservation status for cluster Default is OK
> 
> 2015-09-15 12:13:06,998 INFO  
> [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] 
> (org.ovirt.thread.pool-8-thread-48)
> 
> [50221cdc] START, GetFileStatsVDSCommand( storagePoolId = 
> 0002-0002-0002-0002-0088, ignoreFailoverLimit = false), log id: 
> 1503968
> 
> 2015-09-15 12:13:07,137 INFO  
> [org.ovirt.engine.core.vdsbroker.vdsbroker.GetFileStatsVDSCommand] 
> (org.ovirt.thread.pool-8-thread-48)
> 
> [50221cdc] FINISH,

[ovirt-users] Extension aaa: No search for principal

2015-09-11 Thread Daniel Helgenberger
virt.engineextensions.aaa.ldap.Framework] 
> (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authn::corp-authn] 
> Creating LDAP pool 'authz'
> 2015-09-11 12:01:35,120 INFO  [org.ovirt.engineextensions.aaa.ldap.Framework] 
> (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authn::corp-authn] 
> Creating LDAP pool 'authn'
> 2015-09-11 12:01:35,159 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Extension 'corp-authn' initialized
> 2015-09-11 12:01:35,160 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Initializing extension 'builtin-authn-internal'
> 2015-09-11 12:01:35,161 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Extension 'builtin-authn-internal' initialized
> 2015-09-11 12:01:35,162 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Initializing extension 'corp-authz'
> 2015-09-11 12:01:35,162 INFO  [org.ovirt.engineextensions.aaa.ldap.Framework] 
> (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authz::corp-authz] 
> Creating LDAP pool 'authz'
> 2015-09-11 12:01:35,185 INFO  [org.ovirt.engineextensions.aaa.ldap.Framework] 
> (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authz::corp-authz] 
> Creating LDAP pool 'gc'
> 2015-09-11 12:01:35,222 INFO  
> [org.ovirt.engineextensions.aaa.ldap.AuthzExtension] (MSC service thread 1-2) 
> [ovirt-engine-extension-aaa-ldap.authz::corp-authz] Available Namespaces: 
> [DC=int,DC=corp,DC=de]
> 2015-09-11 12:01:35,223 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Extension 'corp-authz' initialized
> 2015-09-11 12:01:35,224 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Initializing extension 'internal'
> 2015-09-11 12:01:35,224 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Extension 'internal' initialized
> 2015-09-11 12:01:35,225 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Start of enabled extensions list
> 2015-09-11 12:01:35,225 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Instance name: 'corp-authn', Extension name: 
> 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.0.2', Notes: 'Display 
> name: ovirt-engine-extension-aaa-ldap-1.0.2-1.el7', License: 'ASL 2.0', Home: 
> 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: 
> '0',  File: '/etc/ovirt-engine/extensions.d/corp-authn.properties', 
> Initialized: 'true'
> 2015-09-11 12:01:35,227 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Instance name: 'builtin-authn-internal', Extension name: 'Internal Authn 
> (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 
> 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: 
> '0',  File: 'N/A', Initialized: 'true'
> 2015-09-11 12:01:35,228 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Instance name: 'corp-authz', Extension name: 
> 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.0.2', Notes: 'Display 
> name: ovirt-engine-extension-aaa-ldap-1.0.2-1.el7', License: 'ASL 2.0', Home: 
> 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: 
> '0',  File: '/etc/ovirt-engine/extensions.d/corp-authz.properties', 
> Initialized: 'true'
> 2015-09-11 12:01:35,230 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) Instance name: 'internal', Extension name: 'Internal Authz (Built-in)', 
> Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', 
> Author 'The oVirt Project', Build interface Version: '0',  File: 'N/A', 
> Initialized: 'true'
> 2015-09-11 12:01:35,231 INFO  
> [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 
> 1-2) End of enabled extensions list

Versions:
ovirt engine 3.5.4
AD: Windows Server 2012r2

Please let me know if you need further logs.

Thanks,

[readme.md] 
https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README
-- 

Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] vdsm high mem usage

2015-09-11 Thread Daniel Helgenberger
Hello Michael,

I ran into the issue myself and can confirm restarting vdsm with nfs 
mitgates the issue. I even had a cron job for that

On 11.09.2015 04:30, Darrell Budic wrote:
> If you’re using nfs mounts (even if they are gluster based), it’s safe to
> restart vdsmd, you’ll see it change status in ovirt, but your VMs will 
> continue
> running. If you’re mounting gluster based storage as glusterfs shares directly
> (not over nfs), there’s another issue that will cause all your VMs to pause 
> and
> the only way to recover is to stop them and restart them, but that’s going to
> happen to them anyway when vdsmd runs out of ram and crashes… Best solution is
> to migrate them yourself in this case, then restart and migrate back.
This is what I have done. The easiest way to do so is to set the host in 
maintenance, wait for the migration finishes and then restart vdsm. You 
sould do this only at one host and then wait a while so you do not run 
into OOM on the whole cluster at once.

  Or live
> migrate them to NFS mounted storage so when vdsm crashes they don’t lock up, 
> and
> clean up after you’ve had an opportunity to upgrade or patch.
>
> Upgrade to 3.5.3 or later at your earliest opportunity, the mem leak is 
> resolved
> there. Sounds like you already found the patch you can apply if upgrading 
> isn’t
> an option, but it will still require you to restart your vdsms.

I can confirm 3.5.3 finally solved the issue for us and VDSM keeps below 
100MB RSS.


>
> -Darrell
>
>> On Sep 10, 2015, at 1:45 PM, Michael Kleinpaste
>> <michael.kleinpa...@sharperlending.com
>> <mailto:michael.kleinpa...@sharperlending.com>> wrote:
>>
>> Hi everybody.
>>
>> So I ran into that high mem usage thing. The problem I have with patching is
>> that this is a live system so I can't do it mid day.  Can anybody tell me if
>> it is possible to just restart the vdsm service or does the host have to be 
>> in
>> "maintenance mode" before restarting it?  It is using gluster storage, if 
>> that
>> makes a difference as well.
>>
>> Thanks,
>>
>> --
>> *Michael Kleinpaste*
>> Senior Systems Administrator
>> SharperLending, LLC.
>> www.SharperLending.com
>> michael.kleinpa...@sharperlending.com
>> <mailto:michael.kleinpa...@sharperlending.com>
>> (509) 324-1230   Fax: (509) 324-1234
>> ___
>> Users mailing list
>> Users@ovirt.org <mailto:Users@ovirt.org>
>> http://lists.ovirt.org/mailman/listinfo/users
>

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] RESTAPI: 'action type cpu profile empty' if more then one profile defined in the cluster

2015-09-11 Thread Daniel Helgenberger
Hello Sandro,

On 11.09.2015 14:02, Sandro Bonazzola wrote:
>
>
> On Thu, Sep 10, 2015 at 1:19 PM, Daniel Helgenberger
> <daniel.helgenber...@m-box.de <mailto:daniel.helgenber...@m-box.de>> wrote:
>
>  Hello,
>
>  Sandro set BZ1160846 to resolved for 3.5.4, yet the same issue still
>  exists with cpu profiles (I even remember a duplicate poining to this BZ
>  but seem to be unable to find it).
>
>
> Well, according to bugzilla it was verified on oVirt 3.5.1 so it should have
> been closed on 3.5.1.
> If you still have the issue it should be a regression, please open a new BZ
> against 3.5.4.
> Please use the new classification for it :-)
> https://bugzilla.redhat.com/enter_bug.cgi?classification=oVirt

I already did so, BZ1262293:
https://bugzilla.redhat.com/show_bug.cgi?id=1262293

Btw, great that ovirt has its own classification now

>
>
>  Steps:
>  1. Set up forman provisoniong for ovirt
>  2. Add a second cpu profile to cluster
>  3. Provision a VM using foreman
>
>  Result:
>  Error: action type cpu profile empty
>
>  after removing any extra CPU profiles leaving only 'Default', vm
>  provisioning works again.
>
>  engine.log:
>   > 2015-09-10 13:07:20,573 INFO
>  [org.ovirt.engine.core.bll.aaa.LoginUserCommand] (ajp--127.0.0.1-8702-5)
>  Running command: LoginUserCommand internal: false.
>   > 2015-09-10 13:07:20,790 INFO  [org.ovirt.engine.core.bll.AddVmCommand]
>  (ajp--127.0.0.1-8702-5) [3651d332] Lock Acquired to object EngineLock
>  [exclusiveLocks= key: test03 value: VM_NAME
>   > 2015-09-10 13:07:20,845 WARN  [org.ovirt.engine.core.bll.AddVmCommand]
>  (ajp--127.0.0.1-8702-5) [3651d332] CanDoAction of action AddVm failed for
>  user admin@internal. Reasons:
>  VAR__ACTION__ADD,VAR__TYPE__VM,ACTION_TYPE_CPU_PROFILE_EMPTY
>   > 2015-09-10 13:07:20,846 INFO  [org.ovirt.engine.core.bll.AddVmCommand]
>  (ajp--127.0.0.1-8702-5) [3651d332] Lock freed to object EngineLock
>  [exclusiveLocks= key: test03 value: VM_NAME
>   > 2015-09-10 13:07:20,905 ERROR
>  [org.ovirt.engine.api.restapi.resource.AbstractBackendResource]
>  (ajp--127.0.0.1-8702-5) Operation Failed: [action type cpu profile empty]
>
>
>  Versions:
>  ovirt-engine-3.5.4.2-1.el7.centos.noarch
>  Foreman 1.8.3
>
>  If nobody objects I would open a BZ asap.
>
>  Thanks,
>
>
>
>  On 20.08.2015 14:41, Daniel Helgenberger wrote:
>   > Hello,
>   >
>   > I still seem to have an issue in ovirt with a [BZ1160846].
>   > In my case, foreman is unable to add hosts if I have multiple CPU
>   > Profiles defined in the cluster:
>   >
>   > Failed to create a compute oVirt (oVirt) instance $hostname: action 
> type
>   > cpu profile empty
>   >
>   > BZ says this was resolved in RHEV 3.5.1; but running 3.5.3 I still 
> have
>   > this issue (if this BZ is even applicable)
>   >
>   > Thanks!
>   >
>   > Versions:
>   > oVirt 3.5.3 el7
>   > Foreman 1.8.2
>   >
>   > Thanks!
>   >
>   > [BZ1160846] https://bugzilla.redhat.com/show_bug.cgi?id=1160846
>   >
>
>  --
>  Daniel Helgenberger
>  m box bewegtbild GmbH
>
>  P: +49/30/2408781-22
>  F: +49/30/2408781-10
>
>  ACKERSTR. 19
>  D-10115 BERLIN
>
>
>  www.m-box.de <http://www.m-box.de> www.monkeymen.tv 
> <http://www.monkeymen.tv>
>
>  Geschäftsführer: Martin Retschitzegger / Michaela Göllner
>  Handeslregister: Amtsgericht Charlottenburg / HRB 112767
>
>
>
>
> --
> Sandro Bonazzola
> Better technology. Faster innovation. Powered by community collaboration.
> See how it works at redhat.com <http://redhat.com>
>

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Extension aaa: No search for principal

2015-09-11 Thread Daniel Helgenberger


On 11.09.2015 12:48, Alon Bar-Lev wrote:
> Hi!
>
> Thank you for the information, for some reason the administrator user cannot 
> be resolved to userPrincipalName during login, is it specific for 
> Administrator or any user?

Thanks for getting back to me Alon.

>
> Can you please attach the extension configuration for both authn/authz as 
> well?

here you go, but I did northing apart form changing the profile naming. 
Please note I performed anonymization and replaced my domain with 'corp' 
(as you might have guessed). If this had any side effects I can mail you 
the original logs as well.

# cat /etc/ovirt-engine/extensions.d/corp-authn.properties
> ovirt.engine.extension.name = corp-authn
> ovirt.engine.extension.bindings.method = jbossmodule
> ovirt.engine.extension.binding.jbossmodule.module = 
> org.ovirt.engine-extensions.aaa.ldap
> ovirt.engine.extension.binding.jbossmodule.class = 
> org.ovirt.engineextensions.aaa.ldap.AuthnExtension
> ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn
> ovirt.engine.aaa.authn.profile.name = corp
> ovirt.engine.aaa.authn.authz.plugin = corp-authz
> config.profile.file.1 = ../aaa/corp.properties

# cat /etc/ovirt-engine/extensions.d/corp-authz.properties
> ovirt.engine.extension.name = corp-authz
> ovirt.engine.extension.bindings.method = jbossmodule
> ovirt.engine.extension.binding.jbossmodule.module = 
> org.ovirt.engine-extensions.aaa.ldap
> ovirt.engine.extension.binding.jbossmodule.class = 
> org.ovirt.engineextensions.aaa.ldap.AuthzExtension
> ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz
> config.profile.file.1 = ../aaa/corp.properties

>
> I will also need debug log with ALL level, see [1] for instructions.
please find engine log with debugging on attached. I did a number of 
logins in the logged timeframe as well as engine restarts; and hope it 
is sufficient.

Thanks!

>
> Thanks!
> Alon
>
> [1] 
> https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0#l377
>
> - Original Message -
>> From: "Daniel Helgenberger" <daniel.helgenber...@m-box.de>
>> To: Users@ovirt.org
>> Sent: Friday, September 11, 2015 1:28:10 PM
>> Subject: [ovirt-users] Extension aaa: No search for principal
>>
>> Hello,
>>
>> I am stuck in configuring ovirt-engine-extension-aaa-ldap with AD for
>> ovirt 3.5.4. I am following the [readme.md] and so far it was quite
>> strait forward:
>>> include = 
>>>
>>> #
>>> # Active directory domain name.
>>> #
>>> vars.domain = int.corp.de
>>>
>>> #
>>> # Search user and its password.
>>> #
>>> vars.user = bind@${global:vars.domain}
>>> vars.password = [redacted]
>>>
>>> #
>>> # Optional DNS servers, if enterprise
>>> # DNS server cannot resolve the domain srvrecord.
>>> #
>>> #vars.dns = dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain}
>>>
>>> pool.default.serverset.type = srvrecord
>>> pool.default.serverset.srvrecord.domain = ${global:vars.domain}
>>> pool.default.auth.simple.bindDN = ${global:vars.user}
>>> pool.default.auth.simple.password = ${global:vars.password}
>>>
>>> # Uncomment if using custom DNS
>>> #pool.default.serverset.srvrecord.jndi-properties.java.naming.provider.url
>>> = ${global:vars.dns}
>>> #pool.default.socketfactory.resolver.uRL = ${global:vars.dns}
>>>
>>> # Create keystore, import certificate chain and uncomment
>>> # if using ssl/tls.
>>> #pool.default.ssl.startTLS = true
>>> #pool.default.ssl.truststore.file =
>>> ${local:_basedir}/${global:vars.domain}.jks
>>> #pool.default.ssl.truststore.password = changeit
>>
>>
>>
>> The config seems to work; at least the domain and binddn part. I can
>> browse and add users to ovirt as suggested in step (3). All quotes are
>> from engine.log:
>>
>>> 2015-09-11 11:54:50,261 INFO
>>> [org.ovirt.engine.core.bll.AddSystemPermissionCommand]
>>> (org.ovirt.thread.pool-8-thread-24) [73bff0e9] Running command:
>>> AddSystemPermissionCommand internal: false. Entities affected :  ID:
>>> aaa0----123456789aaa Type: SystemAction group
>>> MANIPULATE_PERMISSIONS with role type USER,  ID:
>>> aaa0----123456789aaa Type: SystemAction group
>>> ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER
>>> 2015-09-11 11:54:50,268 INFO
>>> [org.ovirt.engine.core.bll.aaa.AddUserCommand]
>>>

Re: [ovirt-users] Extension aaa: No search for principal

2015-09-11 Thread Daniel Helgenberger
sorry, forgot one:

On 11.09.2015 12:48, Alon Bar-Lev wrote:
> Hi!
>
> Thank you for the information, for some reason the administrator user cannot 
> be resolved to userPrincipalName during login, is it specific for 
> Administrator or any user?
This is the default domain administrator account witch exits in any 
forest. But just in case I created a new domain user just for the 
purpose; same outcome

>
> Can you please attach the extension configuration for both authn/authz as 
> well?
>
> I will also need debug log with ALL level, see [1] for instructions.
>
> Thanks!
> Alon
>
> [1] 
> https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0#l377
>
> - Original Message -
>> From: "Daniel Helgenberger" <daniel.helgenber...@m-box.de>
>> To: Users@ovirt.org
>> Sent: Friday, September 11, 2015 1:28:10 PM
>> Subject: [ovirt-users] Extension aaa: No search for principal
>>
>> Hello,
>>
>> I am stuck in configuring ovirt-engine-extension-aaa-ldap with AD for
>> ovirt 3.5.4. I am following the [readme.md] and so far it was quite
>> strait forward:
>>> include = 
>>>
>>> #
>>> # Active directory domain name.
>>> #
>>> vars.domain = int.corp.de
>>>
>>> #
>>> # Search user and its password.
>>> #
>>> vars.user = bind@${global:vars.domain}
>>> vars.password = [redacted]
>>>
>>> #
>>> # Optional DNS servers, if enterprise
>>> # DNS server cannot resolve the domain srvrecord.
>>> #
>>> #vars.dns = dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain}
>>>
>>> pool.default.serverset.type = srvrecord
>>> pool.default.serverset.srvrecord.domain = ${global:vars.domain}
>>> pool.default.auth.simple.bindDN = ${global:vars.user}
>>> pool.default.auth.simple.password = ${global:vars.password}
>>>
>>> # Uncomment if using custom DNS
>>> #pool.default.serverset.srvrecord.jndi-properties.java.naming.provider.url
>>> = ${global:vars.dns}
>>> #pool.default.socketfactory.resolver.uRL = ${global:vars.dns}
>>>
>>> # Create keystore, import certificate chain and uncomment
>>> # if using ssl/tls.
>>> #pool.default.ssl.startTLS = true
>>> #pool.default.ssl.truststore.file =
>>> ${local:_basedir}/${global:vars.domain}.jks
>>> #pool.default.ssl.truststore.password = changeit
>>
>>
>>
>> The config seems to work; at least the domain and binddn part. I can
>> browse and add users to ovirt as suggested in step (3). All quotes are
>> from engine.log:
>>
>>> 2015-09-11 11:54:50,261 INFO
>>> [org.ovirt.engine.core.bll.AddSystemPermissionCommand]
>>> (org.ovirt.thread.pool-8-thread-24) [73bff0e9] Running command:
>>> AddSystemPermissionCommand internal: false. Entities affected :  ID:
>>> aaa0----123456789aaa Type: SystemAction group
>>> MANIPULATE_PERMISSIONS with role type USER,  ID:
>>> aaa0----123456789aaa Type: SystemAction group
>>> ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER
>>> 2015-09-11 11:54:50,268 INFO
>>> [org.ovirt.engine.core.bll.aaa.AddUserCommand]
>>> (org.ovirt.thread.pool-8-thread-24) [21867e72] Running command:
>>> AddUserCommand internal: true. Entities affected :  ID:
>>> aaa0----123456789aaa Type: SystemAction group
>>> MANIPULATE_USERS with role type ADMIN
>>> 2015-09-11 11:54:50,301 INFO
>>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>>> (org.ovirt.thread.pool-8-thread-24) [21867e72] Correlation ID: 21867e72,
>>> Call Stack: null, Custom Event ID: -1, Message: User 'Administrator' was
>>> added successfully to the system.
>>> 2015-09-11 11:54:50,379 INFO
>>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>>> (org.ovirt.thread.pool-8-thread-24) [21867e72] Correlation ID: 73bff0e9,
>>> Call Stack: null, Custom Event ID: -1, Message: User/Group Administrator
>>> was granted permission for Role SuperUser on System by admin@internal.
>>
>> Yet, when loging in as a user administrator I get:
>>
>>> {Extkey[name=EXTENSION_INVOKE_RESULT;type=class
>>> java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2,
>>> Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class
>>> java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=No
>&

[ovirt-users] RESTAPI: 'action type cpu profile empty' if more then one profile defined in the cluster

2015-08-20 Thread Daniel Helgenberger
Hello,

I still seem to have an issue in ovirt with a [BZ1160846].
In my case, foreman is unable to add hosts if I have multiple CPU
Profiles defined in the cluster:

Failed to create a compute oVirt (oVirt) instance $hostname: action type
cpu profile empty

BZ says this was resolved in RHEV 3.5.1; but running 3.5.3 I still have
this issue (if this BZ is even applicable)

Thanks!

Versions:
oVirt 3.5.3 el7
Foreman 1.8.2

Thanks!

[BZ1160846] https://bugzilla.redhat.com/show_bug.cgi?id=1160846

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] [ATN] LDAP Users please read

2015-08-06 Thread Daniel Helgenberger
Hello Alon,

On 04.08.2015 09:56, Alon Bar-Lev wrote:
 Hello LDAP Users,

 If you migrated from 3.4 or if you used engine-managed-domains to add LDAP 
 support into engine - this message is for you.

 In 3.5 we introduced a new LDAP provider[1][2], it is superset of the 
 previous implementation, highlights includes:
   * Better response times.
   * Simplicity, Use of LDAP protocol only - kerberos is no longer needed.
   * More LDAP implementations are supported.
   * Flexible configuration, can be customized on site to support special 
 setups.
   * Supportability, better logs and feedbacks to enable remote support.
   * Variety of fallback policies, examples: srvrecord, failover, round-robin 
 and more.
   * Active Directory: supports multiple domain in forest.

 In 3.5 the previous LDAP provider is marked as legacy, users' issues will be 
 resolved by migration to the new provider.

 Upgrade to 4.0 will not be possible if legacy provider is being used.

 The new provider is working without any issue for quite some time, we would 
 like to eliminate the remaining usage of the legacy provider as soon as 
 possible.

 A tool was created[3] to automate the process, it should perform everything 
 in safe and automatic process, while enables customization if such required. 
 The one prerequisite that we could not automate easily is obtaining the CA 
 certificate used by the LDAP server to communicate using SSL/TLS, you should 
 acquire this manually and provide it as parameter.

 We (Ondra CCed and I) will help anyone that is experiencing issues with the 
 process, please do not delay migration to the point it becomes emergency.

 Let's define a virtual goal -- in 1 month no legacy LDAP usage anywhere.

 Regards,
 Alon Bar-Lev.

 [1] http://www.ovirt.org/Features/AAA
 [2] 
 https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=ovirt-engine-extension-aaa-ldap-1.0

Sorry for the ignorance on my part,

but I tried one more and could not find any qualified docs/howtos on the 
new AAA feature.

This readme is the only thing witch comes close so far, but running 
Engine 3.5.3 at least my installation is missing

/usr/share/ovirt-engine-extension-aaa-ldap*/examples

Does the tool run without them?

As for my part, I only need engine authentication domains; I used:
engine-manage-domains add --domain ...

Should I migrate to the new provider?

Thanks;

 [3] https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Dashboard - Page Not Found

2015-07-06 Thread Daniel Helgenberger
-- 1 root  root  462 Jul  1 09:29 10-setup-reports-access.conf
 -rw-r--r-- 1 root  root  204 Jun  5 02:31 README

 There were no issues with the upgrade that I could see.

 It seems like between 2015-06-19 and 2015-07-01 you ran a 3.4 engine with 3.5 
 reports. Is this possible? To verify, please check/post all setup logs 
 (/var/log/ovirt-engine-setup/*) and /var/log/yum.log.

 I now briefly looked at our spec files and this does not seem to be blocked, 
 so should probably be filed as a bug. However I can't see how it can be done, 
 except for by following a somewhat complex flow of enabling/disabling 
 repositories etc. while running engine-setup.

 Thanks!
 --
 Didi


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Foreman compute oVirt: New Host failing with action type cpu profile empty

2015-06-29 Thread Daniel Helgenberger


On 28.06.2015 14:40, Doron Fediuck wrote:
 On 26/06/15 12:21, Daniel Helgenberger wrote:
 Hello,

 I have configured oVirt as compute resource in foreman. This is working
 well to the point creating a new host, witch fails witch the error:

 'Failed to create a compute oVirt (oVirt) instance wst01.int.m-box.de:
 action type cpu profile empty'

 I found a (resolved but yet not closed) BZ1160846 [1] relating to disk
 profiles.

 Versions:
 foreman 1.8.1
 ovirt engine 3.5.3

 Strangely I am unable to find anything in engine.log relating to the
 attempt?

 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1160846

 Hi Daniel,
 there are bugs reported for CPU profile, such as [1].
 If this is indeed the case (profile error) it should appear
 as an error in the engine.log (which may have rotated).
Hello Doron, right you are, I seem to have missed this when I first looked.
Reading the BZ I would rather say this is a Foreman issue and not ovirt 
since rejecting the command is intended?

 Doron

 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1172207


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.

2015-06-18 Thread Daniel Helgenberger


On 18.06.2015 10:44, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Simone Tiraboschi stira...@redhat.com
 Cc: Users@ovirt.org
 Sent: Wednesday, June 17, 2015 7:06:53 PM
 Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for  
 vdsmd.service canceled.



 On 17.06.2015 18:30, Simone Tiraboschi wrote:


 Il giorno 17/giu/2015, alle ore 18:21, Daniel Helgenberger
 daniel.helgenber...@m-box.de ha scritto:



 On 17.06.2015 17:01, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Simone Tiraboschi stira...@redhat.com
 Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 4:49:07 PM
 Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for
 vdsmd.service canceled.



 On 17.06.2015 16:47, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Simone Tiraboschi stira...@redhat.com
 Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 4:40:45 PM
 Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for
  vdsmd.service canceled.



 On 17.06.2015 16:35, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 3:24:35 PM
 Subject: [ovirt-users] host-deploy on HE hosts failing: Job for
  vdsmd.service canceled.

 Hello,

 I have the following problem with host-deploy on HE hosts:

 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd
 plugin.execute:937 execute-output: ('/bin/systemctl', 'stop',
 'vdsmd.service') stderr:
 Job for vdsmd.service canceled.

 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152
 method
 exception
 Traceback (most recent call last):
   File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line
   142,
   in
   _executeMethod
 method['method']()
   File
   
 /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py,
   line 106, in _packages
 self.services.state('vdsmd', False)
   File
   
 /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
   line 138, in state
 'start' if state else 'stop'
   File
   
 /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
   line 77, in _executeServiceCommand
 raiseOnError=raiseOnError
   File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line
   942,
   in
   execute
 command=args[0],
 RuntimeError: Command '/bin/systemctl' failed to execute
 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161
 Failed
 to execute stage 'Package installation': Command '/bin/systemctl'
 failed
 to execute
 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131
 aborting
 'Yum Transaction'
 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager
 yumpackager.info:92 Yum Performing yum transaction rollback
 Loaded plugins: auto-update-debuginfo, fastestmirror


   I do not have 'standard' (=non ha) hosts; so I cannot tell for
   the
 others but suspect it relates to HE.

 Yes, it's the hosted-engine HA agent which keeps VDSM up so
 host-deploy
 fails on that.
 The capability to re-deploy an hosted-engine host from the Web UI is
 not
 available on oVirt 3.5, it will included in 3.6; please help us
 testing
 it
 on the first beta in  a few weeks.

 By the way, why are you trying to re-deploy an host-deploy host from
 the
 web UI?
 Ok, did not know about that. I use 'Reinstall' from the UI.

 Until now, I thought the best way to update the hosts after new engine
 relases was:
 1- update engine
 2. set host to maintane
 4. yum update on host for latest vdsm
 3- Use reinstall from UI.

 Please advise!

 Running on your HE host:
 # hosted-engine --set-maintenance=local
 waiting for everything to be migrated if needed
 # yum update
 # hosted-engine --set-maintenance=none

 should do the job
 Ok, I see; I think one should restart vdsmd also; IIRC it is not
 restarted in the process?

 If updated it will be restarted by its rpm postscript.

 Ok. However, I still need reinstall for configuration updates like
 gluster / firewall etc.

 RPM should perform intelligent upgrading of packages with configuration
 files at least saving them on conf.rpmsave and alerting if not forward
 compatible. If not, it's a packaging bug.

 Also, hosted-enginge-deploy is using 'reinstall'. How do I work around
 that?

 Sorry, I didn't get it.

 I meant 'Reinstall' does a lot of other things apart from updating
 packages. For instance, what am I supposed to do if I switch on kdump
 integration or gluster on the cluster?

 AFIK this only works with transparently for engine 'Reinstall'.

 Hosted-engine is a special case: it has a lot of advantages

Re: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64

2015-06-17 Thread Daniel Helgenberger
Hello Alon,

On 17.06.2015 13:22, Alon Bar-Lev wrote:
 Please do not use multiple channels to discuss the same issue.

I just make a habit of posting bug links on the ML as well. I see this 
as an 'FYI', since I often miss BZ if not posted on the list Of course, 
further discussion sould continue in BZ.

If you think this is not right will stop doing so.


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Users@ovirt.org
 Sent: Wednesday, June 17, 2015 2:21:58 PM
 Subject: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find 
 a valid baseurl for repo: base/7/x86_64

 Hello,

 I just went ahead and filed [BZ1232714] because with ovirt 3.5.3 host
 deploy seens to fail on CentOS7 if there is no baseurl setting in yum repos:

 RepoError: Cannot find a valid baseurl for repo: base/7/x86_64

 [BZ1232714] https://bugzilla.redhat.com/show_bug.cgi?id=1232714

 -8-
 2015-06-17 12:27:37 DEBUG otopi.transaction transaction._prepare:77
 preparing 'Yum Transaction'
 Loaded plugins: fastestmirror
 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:138 Stage
 internal_packages METHOD
 otopi.plugins.otopi.network.hostname.Plugin._internal_packages
 2015-06-17 12:27:37 DEBUG otopi.plugins.otopi.packagers.yumpackager
 yumpackager.verbose:88 Yum queue package iproute for install
 Loading mirror speeds from cached hostfile
 2015-06-17 12:27:37 ERROR otopi.plugins.otopi.packagers.yumpackager
 yumpackager.error:97 Yum Cannot queue package iproute: Cannot find a valid
 baseurl for repo: base/7/x86_64
 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:152 method
 exception
 Traceback (most recent call last):
File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/context.py, line 142, in
_executeMethod
  method['method']()
File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/network/hostname.py,
line 66, in _internal_packages
  self.packager.install(packages=('iproute',))
File
/tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/packagers/yumpackager.py,
line 303, in install
  ignoreErrors=ignoreErrors
File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 865, in
install
  **kwargs
File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 509, in
_queue
  provides = self._queryProvides(packages=(package,))
File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 447, in
_queryProvides
  for po in self._yb.searchPackageProvides(args=packages):
File /usr/lib/python2.7/site-packages/yum/__init__.py, line 3406, in
searchPackageProvides
  where = self.returnPackagesByDep(arg)
File /usr/lib/python2.7/site-packages/yum/__init__.py, line 4232, in
returnPackagesByDep
  return self.pkgSack.searchProvides(depstring)
File /usr/lib/python2.7/site-packages/yum/__init__.py, line 1079, in
lambda
  pkgSack = property(fget=lambda self: self._getSacks(),
File /usr/lib/python2.7/site-packages/yum/__init__.py, line 784, in
_getSacks
  self.repos.populateSack(which=repos)
File /usr/lib/python2.7/site-packages/yum/repos.py, line 344, in
populateSack
  self.doSetup()
File /usr/lib/python2.7/site-packages/yum/repos.py, line 158, in
doSetup
  self.ayum.plugins.run('postreposetup')
File /usr/lib/python2.7/site-packages/yum/plugins.py, line 188, in run
  func(conduitcls(self, self.base, conf, **kwargs))
File /usr/lib/yum-plugins/fastestmirror.py, line 197, in
postreposetup_hook
  if downgrade_ftp and _len_non_ftp(repo.urls) == 1:
File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 871, in
lambda
  urls = property(fget=lambda self: self._geturls(),
File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 868, in
_geturls
  self._baseurlSetup()
File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 834, in
_baseurlSetup
  self.check()
File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 554, in
check
  'Cannot find a valid baseurl for repo: %s' % self.ui_id
 RepoError: Cannot find a valid baseurl for repo: base/7/x86_64
 2015-06-17 12:27:37 ERROR otopi.context context._executeMethod:161 Failed
 to execute stage 'Environment packages setup': Cannot find a valid baseurl
 for repo: base/7/x86_64
 2015-06-17 12:27:37 DEBUG otopi.transaction transaction.abort:131 aborting
 'Yum Transaction'
 2015-06-17 12:27:37 INFO otopi.plugins.otopi.packagers.yumpackager
 yumpackager.info:92 Yum Performing yum transaction rollback
 Could not retrieve mirrorlist
 http://mirrorlist.centos.org/?release=7arch=x86_64repo=osinfra=stock
 error was
 14: curl#7 - Failed connect to mirrorlist.centos.org:80; No route to host
 Loaded plugins: fastestmirror
 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:490
 ENVIRONMENT DUMP - BEGIN
 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:500 ENV
 BASE/error=bool:'True'
 2015-06-17 12:27:37 DEBUG otopi.context

[ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64

2015-06-17 Thread Daniel Helgenberger
Hello,

I just went ahead and filed [BZ1232714] because with ovirt 3.5.3 host 
deploy seens to fail on CentOS7 if there is no baseurl setting in yum repos:

RepoError: Cannot find a valid baseurl for repo: base/7/x86_64

[BZ1232714] https://bugzilla.redhat.com/show_bug.cgi?id=1232714

-8-
 2015-06-17 12:27:37 DEBUG otopi.transaction transaction._prepare:77 preparing 
 'Yum Transaction'
 Loaded plugins: fastestmirror
 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:138 Stage 
 internal_packages METHOD 
 otopi.plugins.otopi.network.hostname.Plugin._internal_packages
 2015-06-17 12:27:37 DEBUG otopi.plugins.otopi.packagers.yumpackager 
 yumpackager.verbose:88 Yum queue package iproute for install
 Loading mirror speeds from cached hostfile
 2015-06-17 12:27:37 ERROR otopi.plugins.otopi.packagers.yumpackager 
 yumpackager.error:97 Yum Cannot queue package iproute: Cannot find a valid 
 baseurl for repo: base/7/x86_64
 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:152 method 
 exception
 Traceback (most recent call last):
   File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/context.py, line 142, in 
 _executeMethod
 method['method']()
   File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/network/hostname.py, line 
 66, in _internal_packages
 self.packager.install(packages=('iproute',))
   File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/packagers/yumpackager.py, 
 line 303, in install
 ignoreErrors=ignoreErrors
   File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 865, in 
 install
 **kwargs
   File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 509, in _queue
 provides = self._queryProvides(packages=(package,))
   File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 447, in 
 _queryProvides
 for po in self._yb.searchPackageProvides(args=packages):
   File /usr/lib/python2.7/site-packages/yum/__init__.py, line 3406, in 
 searchPackageProvides
 where = self.returnPackagesByDep(arg)
   File /usr/lib/python2.7/site-packages/yum/__init__.py, line 4232, in 
 returnPackagesByDep
 return self.pkgSack.searchProvides(depstring)
   File /usr/lib/python2.7/site-packages/yum/__init__.py, line 1079, in 
 lambda
 pkgSack = property(fget=lambda self: self._getSacks(),
   File /usr/lib/python2.7/site-packages/yum/__init__.py, line 784, in 
 _getSacks
 self.repos.populateSack(which=repos)
   File /usr/lib/python2.7/site-packages/yum/repos.py, line 344, in 
 populateSack
 self.doSetup()
   File /usr/lib/python2.7/site-packages/yum/repos.py, line 158, in doSetup
 self.ayum.plugins.run('postreposetup')
   File /usr/lib/python2.7/site-packages/yum/plugins.py, line 188, in run
 func(conduitcls(self, self.base, conf, **kwargs))
   File /usr/lib/yum-plugins/fastestmirror.py, line 197, in 
 postreposetup_hook
 if downgrade_ftp and _len_non_ftp(repo.urls) == 1:
   File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 871, in 
 lambda
 urls = property(fget=lambda self: self._geturls(),
   File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 868, in 
 _geturls
 self._baseurlSetup()
   File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 834, in 
 _baseurlSetup
 self.check()
   File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 554, in check
 'Cannot find a valid baseurl for repo: %s' % self.ui_id
 RepoError: Cannot find a valid baseurl for repo: base/7/x86_64
 2015-06-17 12:27:37 ERROR otopi.context context._executeMethod:161 Failed to 
 execute stage 'Environment packages setup': Cannot find a valid baseurl for 
 repo: base/7/x86_64
 2015-06-17 12:27:37 DEBUG otopi.transaction transaction.abort:131 aborting 
 'Yum Transaction'
 2015-06-17 12:27:37 INFO otopi.plugins.otopi.packagers.yumpackager 
 yumpackager.info:92 Yum Performing yum transaction rollback
 Could not retrieve mirrorlist 
 http://mirrorlist.centos.org/?release=7arch=x86_64repo=osinfra=stock error 
 was
 14: curl#7 - Failed connect to mirrorlist.centos.org:80; No route to host
 Loaded plugins: fastestmirror
 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:490 
 ENVIRONMENT DUMP - BEGIN
 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:500 ENV 
 BASE/error=bool:'True'
 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:500 ENV 
 BASE/exceptionInfo=list:'[(class 'yum.Errors.RepoError', RepoError(), 
 traceback object at 0x2e26200)]'
 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:504 
 ENVIRONMENT DUMP - END
 2015-06-17 12:27:37 INFO otopi.context context.runSequence:417 Stage: 
 Pre-termination

-8-



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http

Re: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64

2015-06-17 Thread Daniel Helgenberger


On 17.06.2015 13:28, Alon Bar-Lev wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Alon Bar-Lev alo...@redhat.com
 Cc: Users@ovirt.org
 Sent: Wednesday, June 17, 2015 2:26:18 PM
 Subject: Re: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot 
 find a valid baseurl for repo:
 base/7/x86_64

 Hello Alon,

 On 17.06.2015 13:22, Alon Bar-Lev wrote:
 Please do not use multiple channels to discuss the same issue.

 I just make a habit of posting bug links on the ML as well. I see this
 as an 'FYI', since I often miss BZ if not posted on the list Of course,
 further discussion sould continue in BZ.

 Please do not do that. Discuss in list first, then if a bug should be opened 
 you will instructed to do so.
 If you open a bug, avoid discussion in other mediums.

Ok; next time I'll will discuss it here first, like always. This one 
seemed too obvouis for me though; I had it on two hosts..

Cheers!


 Thanks.


 If you think this is not right will stop doing so.


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Users@ovirt.org
 Sent: Wednesday, June 17, 2015 2:21:58 PM
 Subject: [ovirt-users] Bug in hostdeploy / baseurl - RepoError: Cannot
 find a valid baseurl for repo: base/7/x86_64

 Hello,

 I just went ahead and filed [BZ1232714] because with ovirt 3.5.3 host
 deploy seens to fail on CentOS7 if there is no baseurl setting in yum
 repos:

 RepoError: Cannot find a valid baseurl for repo: base/7/x86_64

 [BZ1232714] https://bugzilla.redhat.com/show_bug.cgi?id=1232714

 -8-
 2015-06-17 12:27:37 DEBUG otopi.transaction transaction._prepare:77
 preparing 'Yum Transaction'
 Loaded plugins: fastestmirror
 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:138 Stage
 internal_packages METHOD
 otopi.plugins.otopi.network.hostname.Plugin._internal_packages
 2015-06-17 12:27:37 DEBUG otopi.plugins.otopi.packagers.yumpackager
 yumpackager.verbose:88 Yum queue package iproute for install
 Loading mirror speeds from cached hostfile
 2015-06-17 12:27:37 ERROR otopi.plugins.otopi.packagers.yumpackager
 yumpackager.error:97 Yum Cannot queue package iproute: Cannot find a
 valid
 baseurl for repo: base/7/x86_64
 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:152 method
 exception
 Traceback (most recent call last):
 File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/context.py, line 142, in
 _executeMethod
   method['method']()
 File /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/network/hostname.py,
 line 66, in _internal_packages
   self.packager.install(packages=('iproute',))
 File
 /tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/packagers/yumpackager.py,
 line 303, in install
   ignoreErrors=ignoreErrors
 File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 865, in
 install
   **kwargs
 File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 509, in
 _queue
   provides = self._queryProvides(packages=(package,))
 File /tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py, line 447, in
 _queryProvides
   for po in self._yb.searchPackageProvides(args=packages):
 File /usr/lib/python2.7/site-packages/yum/__init__.py, line 3406, in
 searchPackageProvides
   where = self.returnPackagesByDep(arg)
 File /usr/lib/python2.7/site-packages/yum/__init__.py, line 4232, in
 returnPackagesByDep
   return self.pkgSack.searchProvides(depstring)
 File /usr/lib/python2.7/site-packages/yum/__init__.py, line 1079, in
 lambda
   pkgSack = property(fget=lambda self: self._getSacks(),
 File /usr/lib/python2.7/site-packages/yum/__init__.py, line 784, in
 _getSacks
   self.repos.populateSack(which=repos)
 File /usr/lib/python2.7/site-packages/yum/repos.py, line 344, in
 populateSack
   self.doSetup()
 File /usr/lib/python2.7/site-packages/yum/repos.py, line 158, in
 doSetup
   self.ayum.plugins.run('postreposetup')
 File /usr/lib/python2.7/site-packages/yum/plugins.py, line 188, in
 run
   func(conduitcls(self, self.base, conf, **kwargs))
 File /usr/lib/yum-plugins/fastestmirror.py, line 197, in
 postreposetup_hook
   if downgrade_ftp and _len_non_ftp(repo.urls) == 1:
 File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 871, in
 lambda
   urls = property(fget=lambda self: self._geturls(),
 File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 868, in
 _geturls
   self._baseurlSetup()
 File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 834, in
 _baseurlSetup
   self.check()
 File /usr/lib/python2.7/site-packages/yum/yumRepo.py, line 554, in
 check
   'Cannot find a valid baseurl for repo: %s' % self.ui_id
 RepoError: Cannot find a valid baseurl for repo: base/7/x86_64
 2015-06-17 12:27:37 ERROR otopi.context context._executeMethod:161 Failed
 to execute stage 'Environment packages setup

[ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.

2015-06-17 Thread Daniel Helgenberger
Hello,

I have the following problem with host-deploy on HE hosts:

 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd 
 plugin.execute:937 execute-output: ('/bin/systemctl', 'stop', 
 'vdsmd.service') stderr:
 Job for vdsmd.service canceled.

 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method 
 exception
 Traceback (most recent call last):
   File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in 
 _executeMethod
 method['method']()
   File 
 /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py, 
 line 106, in _packages
 self.services.state('vdsmd', False)
   File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 
 138, in state
 'start' if state else 'stop'
   File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py, line 
 77, in _executeServiceCommand
 raiseOnError=raiseOnError
   File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in execute
 command=args[0],
 RuntimeError: Command '/bin/systemctl' failed to execute
 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed to 
 execute stage 'Package installation': Command '/bin/systemctl' failed to 
 execute
 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131 aborting 
 'Yum Transaction'
 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager 
 yumpackager.info:92 Yum Performing yum transaction rollback
 Loaded plugins: auto-update-debuginfo, fastestmirror


  I do not have 'standard' (=non ha) hosts; so I cannot tell for the 
others but suspect it relates to HE.

Steps:
1. set the host to maintenance
At this point, only the HE datacenter is still mounted:
mount |grep nfs
nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on 
/rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine 
type nfs 
(rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.11.0.30,mountvers=3,mountport=58144,mountproto=udp,local_lock=none,addr=10.11.0.30)

2. Reinstall host
- Error, host deactivated (Job for vdsmd.service canceled.)

3. A workaround is to shutdown sanlock:

# systemctl stop vdsmd
Job for vdsmd.service canceled.

# sanlock shutdown
# systemctl stop vdsmd

4. Now, host deploy works as expected.


Versions:
EL7 centos
ovirt-3.5.2 -3.5.3
sanlock-3.2.2-2.el7.x86_64
vdsm 4.14.14 - 4.14.20

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.

2015-06-17 Thread Daniel Helgenberger


On 17.06.2015 16:35, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 3:24:35 PM
 Subject: [ovirt-users] host-deploy on HE hosts failing: Job for  
 vdsmd.service canceled.

 Hello,

 I have the following problem with host-deploy on HE hosts:

 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd
 plugin.execute:937 execute-output: ('/bin/systemctl', 'stop',
 'vdsmd.service') stderr:
 Job for vdsmd.service canceled.

 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method
 exception
 Traceback (most recent call last):
File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in
_executeMethod
  method['method']()
File
/tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py,
line 106, in _packages
  self.services.state('vdsmd', False)
File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
line 138, in state
  'start' if state else 'stop'
File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
line 77, in _executeServiceCommand
  raiseOnError=raiseOnError
File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in
execute
  command=args[0],
 RuntimeError: Command '/bin/systemctl' failed to execute
 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed
 to execute stage 'Package installation': Command '/bin/systemctl' failed
 to execute
 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131 aborting
 'Yum Transaction'
 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager
 yumpackager.info:92 Yum Performing yum transaction rollback
 Loaded plugins: auto-update-debuginfo, fastestmirror


I do not have 'standard' (=non ha) hosts; so I cannot tell for the
 others but suspect it relates to HE.

 Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy fails 
 on that.
 The capability to re-deploy an hosted-engine host from the Web UI is not 
 available on oVirt 3.5, it will included in 3.6; please help us testing it on 
 the first beta in  a few weeks.

 By the way, why are you trying to re-deploy an host-deploy host from the web 
 UI?
Ok, did not know about that. I use 'Reinstall' from the UI.

Until now, I thought the best way to update the hosts after new engine 
relases was:
1- update engine
2. set host to maintane
4. yum update on host for latest vdsm
3- Use reinstall from UI.

Please advise!



 Steps:
 1. set the host to maintenance
 At this point, only the HE datacenter is still mounted:
 mount |grep nfs
 nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on
 /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine
 type nfs
 (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.11.0.30,mountvers=3,mountport=58144,mountproto=udp,local_lock=none,addr=10.11.0.30)

 2. Reinstall host
 - Error, host deactivated (Job for vdsmd.service canceled.)

 3. A workaround is to shutdown sanlock:

 # systemctl stop vdsmd
 Job for vdsmd.service canceled.

 # sanlock shutdown
 # systemctl stop vdsmd

 4. Now, host deploy works as expected.


 Versions:
 EL7 centos
 ovirt-3.5.2 -3.5.3
 sanlock-3.2.2-2.el7.x86_64
 vdsm 4.14.14 - 4.14.20

 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.

2015-06-17 Thread Daniel Helgenberger


On 17.06.2015 16:47, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Simone Tiraboschi stira...@redhat.com
 Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 4:40:45 PM
 Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for  
 vdsmd.service canceled.



 On 17.06.2015 16:35, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 3:24:35 PM
 Subject: [ovirt-users] host-deploy on HE hosts failing: Job for
vdsmd.service canceled.

 Hello,

 I have the following problem with host-deploy on HE hosts:

 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd
 plugin.execute:937 execute-output: ('/bin/systemctl', 'stop',
 'vdsmd.service') stderr:
 Job for vdsmd.service canceled.

 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152 method
 exception
 Traceback (most recent call last):
 File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142, in
 _executeMethod
   method['method']()
 File
 
 /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py,
 line 106, in _packages
   self.services.state('vdsmd', False)
 File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
 line 138, in state
   'start' if state else 'stop'
 File /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
 line 77, in _executeServiceCommand
   raiseOnError=raiseOnError
 File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942, in
 execute
   command=args[0],
 RuntimeError: Command '/bin/systemctl' failed to execute
 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161 Failed
 to execute stage 'Package installation': Command '/bin/systemctl' failed
 to execute
 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131
 aborting
 'Yum Transaction'
 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager
 yumpackager.info:92 Yum Performing yum transaction rollback
 Loaded plugins: auto-update-debuginfo, fastestmirror


 I do not have 'standard' (=non ha) hosts; so I cannot tell for the
 others but suspect it relates to HE.

 Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy
 fails on that.
 The capability to re-deploy an hosted-engine host from the Web UI is not
 available on oVirt 3.5, it will included in 3.6; please help us testing it
 on the first beta in  a few weeks.

 By the way, why are you trying to re-deploy an host-deploy host from the
 web UI?
 Ok, did not know about that. I use 'Reinstall' from the UI.

 Until now, I thought the best way to update the hosts after new engine
 relases was:
 1- update engine
 2. set host to maintane
 4. yum update on host for latest vdsm
 3- Use reinstall from UI.

 Please advise!

 Running on your HE host:
 # hosted-engine --set-maintenance=local
 waiting for everything to be migrated if needed
 # yum update
 # hosted-engine --set-maintenance=none

 should do the job
Ok, I see; I think one should restart vdsmd also; IIRC it is not 
restarted in the process?


 Steps:
 1. set the host to maintenance
 At this point, only the HE datacenter is still mounted:
 mount |grep nfs
 nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on
 /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine
 type nfs
 (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.11.0.30,mountvers=3,mountport=58144,mountproto=udp,local_lock=none,addr=10.11.0.30)

 2. Reinstall host
 - Error, host deactivated (Job for vdsmd.service canceled.)

 3. A workaround is to shutdown sanlock:

 # systemctl stop vdsmd
 Job for vdsmd.service canceled.

 # sanlock shutdown
 # systemctl stop vdsmd

 4. Now, host deploy works as expected.


 Versions:
 EL7 centos
 ovirt-3.5.2 -3.5.3
 sanlock-3.2.2-2.el7.x86_64
 vdsm 4.14.14 - 4.14.20

 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela

Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.

2015-06-17 Thread Daniel Helgenberger


On 17.06.2015 18:30, Simone Tiraboschi wrote:


 Il giorno 17/giu/2015, alle ore 18:21, Daniel Helgenberger 
 daniel.helgenber...@m-box.de ha scritto:



 On 17.06.2015 17:01, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Simone Tiraboschi stira...@redhat.com
 Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 4:49:07 PM
 Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for
 vdsmd.service canceled.



 On 17.06.2015 16:47, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Simone Tiraboschi stira...@redhat.com
 Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 4:40:45 PM
 Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for
 vdsmd.service canceled.



 On 17.06.2015 16:35, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 3:24:35 PM
 Subject: [ovirt-users] host-deploy on HE hosts failing: Job for
 vdsmd.service canceled.

 Hello,

 I have the following problem with host-deploy on HE hosts:

 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd
 plugin.execute:937 execute-output: ('/bin/systemctl', 'stop',
 'vdsmd.service') stderr:
 Job for vdsmd.service canceled.

 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152
 method
 exception
 Traceback (most recent call last):
  File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 
 142,
  in
  _executeMethod
method['method']()
  File
  
 /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py,
  line 106, in _packages
self.services.state('vdsmd', False)
  File
  /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
  line 138, in state
'start' if state else 'stop'
  File
  /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
  line 77, in _executeServiceCommand
raiseOnError=raiseOnError
  File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942,
  in
  execute
command=args[0],
 RuntimeError: Command '/bin/systemctl' failed to execute
 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161
 Failed
 to execute stage 'Package installation': Command '/bin/systemctl'
 failed
 to execute
 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131
 aborting
 'Yum Transaction'
 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager
 yumpackager.info:92 Yum Performing yum transaction rollback
 Loaded plugins: auto-update-debuginfo, fastestmirror


  I do not have 'standard' (=non ha) hosts; so I cannot tell for the
 others but suspect it relates to HE.

 Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy
 fails on that.
 The capability to re-deploy an hosted-engine host from the Web UI is not
 available on oVirt 3.5, it will included in 3.6; please help us testing
 it
 on the first beta in  a few weeks.

 By the way, why are you trying to re-deploy an host-deploy host from the
 web UI?
 Ok, did not know about that. I use 'Reinstall' from the UI.

 Until now, I thought the best way to update the hosts after new engine
 relases was:
 1- update engine
 2. set host to maintane
 4. yum update on host for latest vdsm
 3- Use reinstall from UI.

 Please advise!

 Running on your HE host:
 # hosted-engine --set-maintenance=local
 waiting for everything to be migrated if needed
 # yum update
 # hosted-engine --set-maintenance=none

 should do the job
 Ok, I see; I think one should restart vdsmd also; IIRC it is not
 restarted in the process?

 If updated it will be restarted by its rpm postscript.

 Ok. However, I still need reinstall for configuration updates like
 gluster / firewall etc.

 RPM should perform intelligent upgrading of packages with configuration files 
 at least saving them on conf.rpmsave and alerting if not forward compatible. 
 If not, it's a packaging bug.

 Also, hosted-enginge-deploy is using 'reinstall'. How do I work around that?

 Sorry, I didn't get it.

I meant 'Reinstall' does a lot of other things apart from updating 
packages. For instance, what am I supposed to do if I switch on kdump 
integration or gluster on the cluster?

AFIK this only works with transparently for engine 'Reinstall'.

As for the he-setup part; when deploying the first or any additional 
hosts the same routine as reinstall will be triggered - in the 
'Installing host' section.





 Steps:
 1. set the host to maintenance
 At this point, only the HE datacenter is still mounted:
 mount |grep nfs
 nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on
 /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine
 type nfs
 (rw,relatime,vers=3,rsize=1048576

Re: [ovirt-users] host-deploy on HE hosts failing: Job for vdsmd.service canceled.

2015-06-17 Thread Daniel Helgenberger


On 17.06.2015 17:01, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Simone Tiraboschi stira...@redhat.com
 Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 4:49:07 PM
 Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for  
 vdsmd.service canceled.



 On 17.06.2015 16:47, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Simone Tiraboschi stira...@redhat.com
 Cc: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 4:40:45 PM
 Subject: Re: [ovirt-users] host-deploy on HE hosts failing: Job for
vdsmd.service canceled.



 On 17.06.2015 16:35, Simone Tiraboschi wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Users@ovirt.org, Alon Bar-Lev alo...@redhat.com
 Sent: Wednesday, June 17, 2015 3:24:35 PM
 Subject: [ovirt-users] host-deploy on HE hosts failing: Job for
  vdsmd.service canceled.

 Hello,

 I have the following problem with host-deploy on HE hosts:

 2015-06-17 13:22:32 DEBUG otopi.plugins.otopi.services.systemd
 plugin.execute:937 execute-output: ('/bin/systemctl', 'stop',
 'vdsmd.service') stderr:
 Job for vdsmd.service canceled.

 2015-06-17 13:22:32 DEBUG otopi.context context._executeMethod:152
 method
 exception
 Traceback (most recent call last):
  File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/context.py, line 142,
  in
  _executeMethod
method['method']()
  File
  
 /tmp/ovirt-1WPaDxJOpX/otopi-plugins/ovirt-host-deploy/vdsm/packages.py,
  line 106, in _packages
self.services.state('vdsmd', False)
  File
  /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
  line 138, in state
'start' if state else 'stop'
  File
  /tmp/ovirt-1WPaDxJOpX/otopi-plugins/otopi/services/systemd.py,
  line 77, in _executeServiceCommand
raiseOnError=raiseOnError
  File /tmp/ovirt-1WPaDxJOpX/pythonlib/otopi/plugin.py, line 942,
  in
  execute
command=args[0],
 RuntimeError: Command '/bin/systemctl' failed to execute
 2015-06-17 13:22:32 ERROR otopi.context context._executeMethod:161
 Failed
 to execute stage 'Package installation': Command '/bin/systemctl'
 failed
 to execute
 2015-06-17 13:22:32 DEBUG otopi.transaction transaction.abort:131
 aborting
 'Yum Transaction'
 2015-06-17 13:22:32 INFO otopi.plugins.otopi.packagers.yumpackager
 yumpackager.info:92 Yum Performing yum transaction rollback
 Loaded plugins: auto-update-debuginfo, fastestmirror


  I do not have 'standard' (=non ha) hosts; so I cannot tell for the
 others but suspect it relates to HE.

 Yes, it's the hosted-engine HA agent which keeps VDSM up so host-deploy
 fails on that.
 The capability to re-deploy an hosted-engine host from the Web UI is not
 available on oVirt 3.5, it will included in 3.6; please help us testing
 it
 on the first beta in  a few weeks.

 By the way, why are you trying to re-deploy an host-deploy host from the
 web UI?
 Ok, did not know about that. I use 'Reinstall' from the UI.

 Until now, I thought the best way to update the hosts after new engine
 relases was:
 1- update engine
 2. set host to maintane
 4. yum update on host for latest vdsm
 3- Use reinstall from UI.

 Please advise!

 Running on your HE host:
 # hosted-engine --set-maintenance=local
 waiting for everything to be migrated if needed
 # yum update
 # hosted-engine --set-maintenance=none

 should do the job
 Ok, I see; I think one should restart vdsmd also; IIRC it is not
 restarted in the process?

 If updated it will be restarted by its rpm postscript.

Ok. However, I still need reinstall for configuration updates like 
gluster / firewall etc.
Also, hosted-enginge-deploy is using 'reinstall'. How do I work around that?



 Steps:
 1. set the host to maintenance
 At this point, only the HE datacenter is still mounted:
 mount |grep nfs
 nexstor01.sec.int.m-box.de:/volumes/ovirt/engine on
 /rhev/data-center/mnt/nexstor01.sec.int.m-box.de:_volumes_ovirt_engine
 type nfs
 (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,mountaddr=10.11.0.30,mountvers=3,mountport=58144,mountproto=udp,local_lock=none,addr=10.11.0.30)

 2. Reinstall host
 - Error, host deactivated (Job for vdsmd.service canceled.)

 3. A workaround is to shutdown sanlock:

 # systemctl stop vdsmd
 Job for vdsmd.service canceled.

 # sanlock shutdown
 # systemctl stop vdsmd

 4. Now, host deploy works as expected.


 Versions:
 EL7 centos
 ovirt-3.5.2 -3.5.3
 sanlock-3.2.2-2.el7.x86_64
 vdsm 4.14.14 - 4.14.20

 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht

Re: [ovirt-users] Need Advice on Hosted Engine installation

2015-06-17 Thread Daniel Helgenberger


On 07.06.2015 21:14, wodel youchi wrote:
 Hi,

 We are installing a new ovirt platform for a client. this is our first 
 deployment.

 we chose Hosted Engine install.

 here is the hardware used and the network configuration used be patient :)

 We have 02 hypervisors for now.

 each sever has 8 nic ports, we will use bonding.

 A NAS with nfs4 for the Engine_VM the ISO and Export domains.

 And iSCSI SAN for the rest of the VMs (Data domain)

 At first we chose as a network configuration:

 10.0.0.X/16 as DMZ (ovirtmgmt will use this network)

 172.16.1/24 as Storage network. we've configured our nfs to export only on 
 this
 network.

 -
 We didn't configure the bonding manually at first, we thought that we could do
 it once the engine is up we couldn't :-(
This should be strait forward, but it's a little 'ovirt' - just think of 
hierarchical structures; a resqource needs to be on the top level to be 
able to assigned to the lower level.
- Datacenter
   - Cluster
  - Host

I'll walk you through the UI way:

1. In Datacenter Tab / logical networks create all the networks you need 
with VLAN tags and MTU. There should already be a ovrtmgmt network, you 
cannot edit this;

2. In the cluster tab, select a cluster and use 'add networks' in the 
logical networks tab, add the appropriate networks to your cluster. Take 
care to select/deseclect required networks and types there ( eg. vm 
networks). If a host is missing a required network (see next step), it 
will not be able to start VMs.

3. In the hosts Tab select a host, then 'setup host networking'

The rest is quite cool drag and drop stuff: if you need a bond, drag the 
interfaces over each other.
Then, a bridge will be created with dragging the unassigned vlans to an 
interface. There, you can also setup (ipv4 only) networks.
Take care to at least assign all required networks!

select validate and save.

Repeat with the remaining hosts.



 for ovirtmgmt, if we create the bond after the engine's installation, we could
 not modify the configuration, error message network in use

 for the storage network, we could't attach this logical network to the nic 
 used
 for the storage, because when we do that we loose the connexion to nfs for the
 VM engine...

 so we had to export the VM engine nfs's share on DMZ and we had to configure
 bonding before starting the hosted engine installation.

 We also configured bonding on storage network, but after the engine
 installation, we couldn't attach this bonding to the logical network Storage,
 error message you have to specify network address if static protocol is 
 used,
 the IP address is specified, it's the IP address of the bonding... :-(

 ---
 Questions:

 - Do we missed anything on network configuration capabilities of ovirt? or the
 hosted engine is really a special case?
 - What is the best way to configure ovirt's Hosted Engine storage?
 - For the rest of the network, do we have to configure bonding and bridging 
 from
 the GUI only? (not manually)

 thanks in advance.








-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Block size?

2015-06-16 Thread Daniel Helgenberger


On 16.06.2015 10:36, Roman Nikolayevich Drovalev wrote:
 Hello,
Hello Drovalev,

 Tell please, what size of the block to me  set on the Storage for the greatest
 productivity oVirt?

 512K, 256K, 128K, 64K, 8K or 4K ?
I think it is safe to say if you have a good general performance with 
the storage it also performs well with oVirt.

Therefore it might be the wrong place to ask; however, block sizes are 
only one of many factors in storage domain performance. No one but 
yourself or an expert at your site can answer this for you.

I would direct you to the excellent [iozone] utility witch leverages 
much of the testing for you.

Hope that helps,

[iozone] http://www.iozone.org/

 Drovalev Roman


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] oVirt 3.5.3 VDSM on CentOS Virt SIG

2015-06-15 Thread Daniel Helgenberger
Hello Sandro,

frist thanks for the great news!

On 15.06.2015 10:28, Sandro Bonazzola wrote:
 Hi,
 today oVirt 3.5.3 has been released[1]
 VDSM 4.16.20 and its dependencies has been tagged as release as well within 
 the Virt SIG build repositories for CentOS Linux 7.
 In order to enable the needed repositories you need to create 
 /etc/yum.repos.d/centos-virt-sig.repo with the following content:

I tried and seem to be unable to find any adequate release notes for 
VDSM. Can someone firect me there or what are the benefits of vdsm 
4.16.20 over 4.16.16?

Thanks!


 [virt7-kvm-common-release]
 name=virt7-kvm-common-release
 baseurl=http://cbs.centos.org/repos/virt7-kvm-common-release/x86_64/os
 enabled=1
 gpgcheck=0

 [virt7-ovirt-common-release]
 name=virt7-ovirt-common-release
 baseurl=http://cbs.centos.org/repos/virt7-ovirt-common-release/x86_64/os
 enabled=1
 gpgcheck=0

 [virt7-ovirt-35-release]
 name=virt7-ovirt-35-release
 baseurl=http://cbs.centos.org/repos/virt7-ovirt-35-release/x86_64/os
 enabled=1
 gpgcheck=0


 An initial submission for the repository rpm has been pushed[2] and is 
 waiting for public GPG keys to be added.

 [1] http://lists.ovirt.org/pipermail/announce/2015-June/000175.html
 [2] https://gerrit.ovirt.org/41403


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Move VirtIO disk to External LUN disk

2015-06-08 Thread Daniel Helgenberger


On 06.06.2015 17:48, Juan Carlos YJ. Lin wrote:
 I have performance issue with the VirtIO disks and like to move it to External
 LUN on the ISCI storage
What version are you using? I assume here 3.5.

Do you want the disk image moved or the *content* of the image moved to 
your iscsi lun so the VM boots off directly from the lun? The first 
thing is quite easy and I assume this:
  to use the ISCSI pathtrought
 How I can do that?
1. connect your LUN to your hosts,

- In the GUI,

2. create a new iscsi Storage domain on it,
3. Shut down the affected VM,
4. Navigate to the disk tap, select the affected disks, right-click -  
move disk (or select several and use the button). In the pop up window, 
select the target storage domain (your new iscsi LUN).

The SPM host will now do the moving using the qemu-img or dd command 
depending on your ovirt version. Note, if the source domain was NFS, 
your images are converted from files to block storage, with all the pros 
and cons.

Hope that helps,


 Juan Carlos Lin
 Unisoft S.A.
 +595-993-288330


 System-wide Disclaimer ---
 Antes de imprimir, recuérdese de su compromiso con el Medio Ambiente
 Aviso: Este mensaje es dirigido para su destinatario y contiene informaciones
 que no pueden ser usadas por otras personas que no sean su(s) destinatario(s).
 La retransmisión del contenido no está autorizada fuera del contexto de su 
 envío
 y a quien corresponde. El uso no autorizado de la información en este mensaje 
 se
 halla penado por las leyes vigentes en todo el mundo. Si ha recibido este
 mensaje por error, por favor bórrala y notifique al remitente en la brevedad
 posible. El contenido de este mensaje no es responsabilidad de la Empresa y 
 debe
 ser atribuido siempre a su autor. Gracias.


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovirt vm disk space not release

2015-06-05 Thread Daniel Helgenberger


On 05.06.2015 07:58, smiling dream wrote:
 Thanks for you reply .
 So if I understand you correctly you want to reduce the space a thin provision
 disk takes up on the NFS share because you deleted files within the VM?
 Yes

 Is there any others way to reclaim disk space ,
Since thin provision in this case relates to sparse files you cannot 
delete files in the VM and have the disk space reclaimed.

But ovirt since v. 3.5 is using qemu-img to copy disk images. IRC this 
process should very well result in a smaller image. So, just use disk 
move and move the disk images to a new storage domain and it should do 
the trick.

Another quite elegant way might be to use [fstrim]. But is is highly 
depended of your VM config, storage domain, and needs virtio-scsi to my 
knowlage.

Another way to avoid this altogether is to to use a compressing file 
system like ZFS for your storage domain.

HTH

[fstrim] 
http://dustymabe.com/2013/06/11/recover-space-from-vm-disk-images-by-using-discardfstrim/

  coz i have bulks of vm under
 thin provision manual process kind of impossible . As i know Vmware have this
 kind of facility to reclaim from thin provision .

 On Fri, Jun 5, 2015 at 11:48 AM, Alex McWhirter alexmcwhir...@triadic.us
 mailto:alexmcwhir...@triadic.us wrote:

  Sorry, I must have misunderstood.

  So if I understand you correctly you want to reduce the space a thin
  provision disk takes up on the NFS share because you deleted files within
  the VM?

  I'm pretty sure that thin provisioned disks can only grow. Once they have
  been expanded there's no way to reclaim that space on the NFS share.

  The only thing I think you can do is create a new thin provisioned disk 
 and
  copy the old data over at the file level, not the block level. Afterwards
you could delete the original disk.

  Sent from my iPhone

  On Jun 5, 2015, at 1:19 AM, smiling dream smiling.dr...@gmail.com
  mailto:smiling.dr...@gmail.com wrote:

 I mean vm internal disk space .
 All of VM under thin provision . If i delete files and free space from VM
 still ovirt stroage showing vm disk space is used . How to reclaim disk
 space from guest VM .

 On Fri, Jun 5, 2015 at 11:14 AM, Alex McWhirter alexmcwhir...@triadic.us
 mailto:alexmcwhir...@triadic.us wrote:

 From what I understand, ovirt simply reports the available storage
 that the NFS server says it is free. Ovirt itself doesn't control the
 storage.

 Under the storage tab click on the storage domain you're having 
 issues
 with and check to see if the images themselves have been deleted or 
 if
 they are still there. When you delete a virtual machine you have the
 option to delete the virtual image as well.

 If a virtual machine has more than one image then I'm not sure how
 this is handled as I've only used single images for virtual machines.
 Any additional storage I need I handle over NFS directly to the
 virtual machine.

 Perhaps ovirt doesn't automatically delete secondary images? Either
 way you should be able to delete them manually and reclaim space.

 Sent from my iPhone

  On Jun 5, 2015, at 12:39 AM, smiling dream smiling.dr...@gmail.com
 mailto:smiling.dr...@gmail.com wrote:
 
  I have ovirt 3.5.1 installed with VDSM 4.16.14 EL6 node and NFS as
 storage . In my infrastructure i have multiple instance of centos /
 windows vm under ovirt and once guest vm disk space is used ovirt is
 not release guest vm disk space after delete .
  Looking for help .
 
  Regards
  Suvro
  ___
  Users mailing list
  Users@ovirt.org mailto:Users@ovirt.org
  http://lists.ovirt.org/mailman/listinfo/users




-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovirt-guest-agent on EL7 not starting up correctly, requires restart

2015-06-03 Thread Daniel Helgenberger


On 03.06.2015 15:00, Vinzenz Feenstra wrote:
 Hi Daniel,
Hello Vinzenz!

 the oVirt Guest agent service won't start just by installation via yum.
 You have to run service ovirt-guest-agent start
 However IIRC with the next boot of the VM it would start since it is
 getting enabled by default.

 If you deploy the guest agent you have to start the agent explicitly.
 (This behavior is aligned with the Fedora packaging guidelines)

The deployment is done by foreman, the package is installed by kickstart 
directly. When installed, it is enabled.

Yet, after the reboot of the machine, the service is stated by systemd 
but not working. Only after a manual restart can fix this.

However, when I just tried a reboot on a random host it was working... 
So - never mind and thanks ;)


 Regards,

 On 06/03/2015 12:49 PM, Daniel Helgenberger wrote:
 Hello,

 after deploying a few CentOS7.1 hosts I realized that the
 ovirt-guest-agent does not start up correctly at system boot, requiring
 a manual restart. Afterwards it is reporting data to engine.

 I have only these lines:

 Jun 03 12:39:39 pipeline.int.m-box.de systemd[1]: Starting oVirt Guest
 Agent...
 Jun 03 12:39:40 pipeline.int.m-box.de systemd[1]: Started oVirt Guest Agent.
 Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7136]:
 pam_succeed_if(ovirt-locksession:auth): requirement user = ovirtagent
 was met by user ovirtagent
 Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7136]: running
 '/usr/share/ovirt-guest-agent/LockActiveSession.py' with root privileges
 on behalf of 'ovirtagent'
 Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7163]:
 pam_succeed_if(ovirt-locksession:auth): requirement user = ovirtagent
 was met by user ovirtagent
 Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7163]: running
 '/usr/share/ovirt-guest-agent/LockActiveSession.py' with root privileges
 on behalf of 'ovirtagent'
 Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7169]:
 pam_succeed_if(ovirt-locksession:auth): requirement user = ovirtagent
 was met by user ovirtagent
 Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7169]: running
 '/usr/share/ovirt-guest-agent/LockActiveSession.py' with root privileges
 on behalf of 'ovirtagent'
 Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7175]:
 pam_succeed_if(ovirt-locksession:auth): requirement user = ovirtagent
 was met by user ovirtagent
 Jun 03 12:40:02 pipeline.int.m-box.de userhelper[7175]: running
 '/usr/share/ovirt-guest-agent/LockActiveSession.py' with root privileges
 on behalf of 'ovirtagent'

 Versions:
 Linux pipeline.int.m-box.de 3.10.0-229.4.2.el7.x86_64 #1 SMP Wed May 13
 10:06:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

 qemu-guest-agent-2.1.0-4.el7.x86_64
 ovirt-guest-agent-common-1.0.10-2.el7.noarch



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] win 2008 kvm import

2015-05-29 Thread Daniel Helgenberger


On 29.05.2015 02:53, Grant Pasley wrote:
 hi all,
Hello Grant,

 i am going to migrate a production windows 2008 image that is currently
 running on kvm over to ovirt 3.5.2 this weekend. are there any tips, any
 do's and dont's i should be aware of before doing this?
Well, if waiting for 3.6 is not an option (there, v2v integration is a 
major new feature [1]) you can use manual v2v command line [2] just as 
well. This is non destructive and leaves the original VM intact. Basically:

# virt-v2v -o rhev -osd storage.example.com:/exportdomain --network 
rhevm vm-name

The trick is '-o rhev'.

It basically drops the VM from libvirt on your export domain; it worked 
quite well for me. It also takes care of installing virtio dirvers in 
the image.

There where some pitfalls, though - I can't remember all of them. But 
one is of course your old host needs have NTFS write support in some 
way; and (at leat a year back) there was no package for the virtio 
drivers on CentOS; but they just need to be put in the right place.

 should i install the windows guest tools before moving over or once
 done? what about having to install the virtio drivers when doing and new
 windows vm in order to see the disks, how is this
 achieved with an already created kvm image?


[1] http://www.ovirt.org/Features/virt-v2v_Integration
[2] 
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization_for_Servers/2.2/html/Administration_Guide/virt-v2v-scripts.html

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Kernel panic - not syncing: An NMI occurred on HP Dl360g6

2015-05-27 Thread Daniel Helgenberger
Hello Gianluca,

On 27.05.2015 17:42, Gianluca Cecchi wrote:
 Do you have chance to access iLO web administration page of the server and 
 check
 Integrated management log (IML)
 And/Or
 ILO event log
 And verify if anything has ben registered there?

no, strangely. I only see the server reset in iLO logs; IML log is clean.



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Kernel panic - not syncing: An NMI occurred on HP Dl360g6

2015-05-27 Thread Daniel Helgenberger


On 27.05.2015 16:50, Alex Crow wrote:
 Hi,
Hello,

thanks for getting back to me.

 If you've had a crash caused by an NMI it can often be a hardware issue.
The first thing I checked is IML logs - nothing there. These machines 
are quite resilient and report almost everything.

The HW diag is fine...


 Maybe worth running some H/W diagnostics.

 Cheers

 Alex

 On 27/05/15 15:40, Daniel Helgenberger wrote:
 Hello,

 can somebody help me getting to the bottom of this panic? vdsm.log was
 empty (stopped 10min prior panic) and is rotated away already (forgot to
 save it...)

 Might this be [1]? However, I do not have an active subscription so I
 cannot acccess the helpdoc.

 Thanks!

 [1] https://access.redhat.com/solutions/442193


 [64457.990217] kvm: zapping shadow pages for mmio generation wraparound
 [64469.916912] kvm [21434]: vcpu0 unhandled rdmsr: 0x1ad
 [71035.222120] ixgbe :04:00.0 ens1f0: NIC Link is Down
 [71035.223699] storageA: port 1(ens1f0.2) entered disabled state
 [71035.223932] storageB: port 1(ens1f0.3) entered disabled state
 [71035.224173] server: port 1(ens1f0.10) entered disabled state
 [71035.224447] workstations: port 1(ens1f0.11) entered disabled state
 [71035.572619] bnx2 :02:00.0 enp2s0f0: NIC Copper Link is Down
 [71036.225789] ovirtmgmt: port 1(enp2s0f0) entered disabled state
 [71091.146266] hpwdt: Unexpected close, not stopping watchdog!
 [71138.579788] ovirtmgmt: port 2(vnet0) entered disabled state
 [71138.580067] device vnet0 left promiscuous mode
 [71138.580079] ovirtmgmt: port 2(vnet0) entered disabled state
 [71146.413292] Kernel panic - not syncing: An NMI occurred. Depending on
 your system the reason for the NMI is logged in any one of the following
 resources:
 1. Integrated Management Log (IML)
 2. OA Syslog
 3. OA Forward Progress Log
 4. iLO Event Log
 [71146.739719] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G  I
 --   3.10.0-229.4.2.el7.x86_64 #1
 [71146.858234] Hardware name: HP ProLiant DL360 G6, BIOS P64 07/02/2013
 [71146.934129]  a026d2d8 f7d5e6c540f56fc7 8807ffc05de0
 81604eaa
 [71147.022535]  8807ffc05e60 815fe71e 0008
 8807ffc05e70
 [71147.111065]  8807ffc05e10 f7d5e6c540f56fc7 8101bad9
 c9000a806072
 [71147.199595] Call Trace:
 [71147.228779]  NMI  [81604eaa] dump_stack+0x19/0x1b
 [71147.297491]  [815fe71e] panic+0xd8/0x1e7
 [71147.354746]  [8101bad9] ? sched_clock+0x9/0x10
 [71147.418233]  [a026c8ed] hpwdt_pretimeout+0xdd/0xe0 [hpwdt]
 [71147.494192]  [8160d6d9] nmi_handle.isra.0+0x69/0xb0
 [71147.562873]  [8160d8dd] do_nmi+0x1bd/0x340
 [71147.622201]  [8160cb31] end_repeat_nmi+0x1e/0x2e
 [71147.687768]  [8133d4d4] ? intel_idle+0xe4/0x170
 [71147.752291]  [8133d4d4] ? intel_idle+0xe4/0x170
 [71147.816818]  [8133d4d4] ? intel_idle+0xe4/0x170
 [71147.881343]  EOE  [814aaa20] cpuidle_enter_state+0x40/0xc0
 [71147.961483]  [814aab65] cpuidle_idle_call+0xc5/0x200
 [71148.031208]  [8101d21e] arch_cpu_idle+0xe/0x30
 [71148.094694]  [810c6985] cpu_startup_entry+0xf5/0x290
 [71148.164420]  [815f33e7] rest_init+0x77/0x80
 [71148.224791]  [81a45057] start_kernel+0x429/0x44a
 [71148.290354]  [81a44a37] ? repair_env_string+0x5c/0x5c
 [71148.361120]  [81a44120] ? early_idt_handlers+0x120/0x120
 [71148.434999]  [81a445ee] x86_64_start_reservations+0x2a/0x2c
 [71148.511997]  [81a44742] x86_64_start_kernel+0x152/0x175





-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Kernel panic - not syncing: An NMI occurred on HP Dl360g6

2015-05-27 Thread Daniel Helgenberger
Hello,

can somebody help me getting to the bottom of this panic? vdsm.log was 
empty (stopped 10min prior panic) and is rotated away already (forgot to 
save it...)

Might this be [1]? However, I do not have an active subscription so I 
cannot acccess the helpdoc.

Thanks!

[1] https://access.redhat.com/solutions/442193


[64457.990217] kvm: zapping shadow pages for mmio generation wraparound
[64469.916912] kvm [21434]: vcpu0 unhandled rdmsr: 0x1ad
[71035.222120] ixgbe :04:00.0 ens1f0: NIC Link is Down
[71035.223699] storageA: port 1(ens1f0.2) entered disabled state
[71035.223932] storageB: port 1(ens1f0.3) entered disabled state
[71035.224173] server: port 1(ens1f0.10) entered disabled state
[71035.224447] workstations: port 1(ens1f0.11) entered disabled state
[71035.572619] bnx2 :02:00.0 enp2s0f0: NIC Copper Link is Down
[71036.225789] ovirtmgmt: port 1(enp2s0f0) entered disabled state
[71091.146266] hpwdt: Unexpected close, not stopping watchdog!
[71138.579788] ovirtmgmt: port 2(vnet0) entered disabled state
[71138.580067] device vnet0 left promiscuous mode
[71138.580079] ovirtmgmt: port 2(vnet0) entered disabled state
[71146.413292] Kernel panic - not syncing: An NMI occurred. Depending on 
your system the reason for the NMI is logged in any one of the following 
resources:
1. Integrated Management Log (IML)
2. OA Syslog
3. OA Forward Progress Log
4. iLO Event Log
[71146.739719] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G  I 
--   3.10.0-229.4.2.el7.x86_64 #1
[71146.858234] Hardware name: HP ProLiant DL360 G6, BIOS P64 07/02/2013
[71146.934129]  a026d2d8 f7d5e6c540f56fc7 8807ffc05de0 
81604eaa
[71147.022535]  8807ffc05e60 815fe71e 0008 
8807ffc05e70
[71147.111065]  8807ffc05e10 f7d5e6c540f56fc7 8101bad9 
c9000a806072
[71147.199595] Call Trace:
[71147.228779]  NMI  [81604eaa] dump_stack+0x19/0x1b
[71147.297491]  [815fe71e] panic+0xd8/0x1e7
[71147.354746]  [8101bad9] ? sched_clock+0x9/0x10
[71147.418233]  [a026c8ed] hpwdt_pretimeout+0xdd/0xe0 [hpwdt]
[71147.494192]  [8160d6d9] nmi_handle.isra.0+0x69/0xb0
[71147.562873]  [8160d8dd] do_nmi+0x1bd/0x340
[71147.622201]  [8160cb31] end_repeat_nmi+0x1e/0x2e
[71147.687768]  [8133d4d4] ? intel_idle+0xe4/0x170
[71147.752291]  [8133d4d4] ? intel_idle+0xe4/0x170
[71147.816818]  [8133d4d4] ? intel_idle+0xe4/0x170
[71147.881343]  EOE  [814aaa20] cpuidle_enter_state+0x40/0xc0
[71147.961483]  [814aab65] cpuidle_idle_call+0xc5/0x200
[71148.031208]  [8101d21e] arch_cpu_idle+0xe/0x30
[71148.094694]  [810c6985] cpu_startup_entry+0xf5/0x290
[71148.164420]  [815f33e7] rest_init+0x77/0x80
[71148.224791]  [81a45057] start_kernel+0x429/0x44a
[71148.290354]  [81a44a37] ? repair_env_string+0x5c/0x5c
[71148.361120]  [81a44120] ? early_idt_handlers+0x120/0x120
[71148.434999]  [81a445ee] x86_64_start_reservations+0x2a/0x2c
[71148.511997]  [81a44742] x86_64_start_kernel+0x152/0x175



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Getting kdump integration to work

2015-05-26 Thread Daniel Helgenberger
Hello,

I followed the feature's page [1] and added to my test hosts the 
following lines /etc/kdump:

fence_kdump_nodes othernode-in-cluster
fence_kdump_args -p 7410 -f auto -i 5

Further, I added a firewall rule on both machines:
-A INPUT -p udp --dport 7410 -j ACCEPT

and restarted kdump.

Yet I get on the engine's side:

2015-05-26 10:41:54,113 WARN 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(ajp--127.0.0.1-8702-7) Correlation ID: null, Call Stack: null, Custom 
Event ID: -1, Message: Kdump integration is enabled for host 'hv02', but 
kdump is not configured properly on host.

Thanks!

Versions:
CentOS7.1 3.10.0-229.4.2.el7.x86_64 #1 SMP Wed May 13 10:06:09 UTC 2015 
x86_64 x86_64 x86_64 GNU/Linux

ovirt-engine-cli-3.5.0.5-1.el7.centos.noarch
ovirt-engine-userportal-3.5.2.1-1.el7.centos.noarch
ovirt-engine-webadmin-portal-3.5.2.1-1.el7.centos.noarch
ovirt-guest-agent-common-1.0.10-2.el7.noarch
ovirt-engine-jboss-as-7.1.1-1.el7.x86_64
ovirt-release35-004-1.noarch
ovirt-engine-sdk-python-3.5.2.1-1.el7.centos.noarch
ovirt-image-uploader-3.5.1-1.el7.centos.noarch
ovirt-engine-setup-plugin-ovirt-engine-common-3.5.2.1-1.el7.centos.noarch
ovirt-engine-websocket-proxy-3.5.2.1-1.el7.centos.noarch
ovirt-host-deploy-java-1.3.1-1.el7.noarch
ovirt-engine-reports-3.5.2-0.3.el7.centos.noarch
ovirt-engine-dwh-setup-3.5.2-0.1.el7.centos.noarch
ovirt-engine-tools-3.5.2.1-1.el7.centos.noarch
ovirt-engine-setup-3.5.2.1-1.el7.centos.noarch
ovirt-engine-restapi-3.5.2.1-1.el7.centos.noarch
ovirt-engine-3.5.2.1-1.el7.centos.noarch
ovirt-engine-setup-base-3.5.2.1-1.el7.centos.noarch
ovirt-engine-setup-plugin-websocket-proxy-3.5.2.1-1.el7.centos.noarch
ovirt-engine-reports-setup-3.5.2-0.3.el7.centos.noarch
ovirt-engine-dwh-3.5.2-0.1.el7.centos.noarch
ovirt-engine-dbscripts-3.5.2.1-1.el7.centos.noarch
ovirt-engine-setup-plugin-ovirt-engine-3.5.2.1-1.el7.centos.noarch
ovirt-engine-backend-3.5.2.1-1.el7.centos.noarch
ovirt-iso-uploader-3.5.2-1.el7.centos.noarch
ovirt-engine-extensions-api-impl-3.5.2.1-1.el7.centos.noarch
ovirt-host-deploy-1.3.1-1.el7.noarch
ovirt-engine-lib-3.5.2.1-1.el7.centos.noarch


[1] http://www.ovirt.org/Fence_kdump

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Getting kdump integration to work

2015-05-26 Thread Daniel Helgenberger


On 26.05.2015 10:54, Martin Perina wrote:
 Hi Daniel,
Hello Martin,


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: users@ovirt.org
 Sent: Tuesday, 26 May, 2015 10:45:34 AM
 Subject: [ovirt-users] Getting kdump integration to work

 Hello,

 I followed the feature's page [1] and added to my test hosts the
 following lines /etc/kdump:

 fence_kdump_nodes othernode-in-cluster
 fence_kdump_args -p 7410 -f auto -i 5

 Please don't do this, this is added automatically when you deploy
 you host using oVirt UI with Kdump integration enabled in PM tab
 of the host.


 Further, I added a firewall rule on both machines:
 -A INPUT -p udp --dport 7410 -j ACCEPT

 Same as above, this is needed only on engine hosts and it's done
 automatically during oVirt engine installation.


 and restarted kdump.

 Same as above, this is done automatically during host deploy.


 Yet I get on the engine's side:

 2015-05-26 10:41:54,113 WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
 (ajp--127.0.0.1-8702-7) Correlation ID: null, Call Stack: null, Custom
 Event ID: -1, Message: Kdump integration is enabled for host 'hv02', but
 kdump is not configured properly on host.

 Could you please try to do it properly:

1. Put host to maintenance
2. Enable Kdump integration in PM tab
3. Reinstall the host (click Reinstall when you select the host in Hosts 
 tab)

Thanks! This procedure seem to work, engine reporting kdump as activated.
It was rather unclear to me, since I run hosted engine: After host 
deploy they are in the default state, no PM configured. Hence, kdump 
integration is disabled and will never activate since PM has to be 
configured in the first place to install.

Do you think it is a better idea to always activate kdump in the host 
deploy stage so it can later be activated correctly with PM configured?



 Thanks a lot

 Martin Perina
Cheers!


 Thanks!

 Versions:
 CentOS7.1 3.10.0-229.4.2.el7.x86_64 #1 SMP Wed May 13 10:06:09 UTC 2015
 x86_64 x86_64 x86_64 GNU/Linux

 ovirt-engine-cli-3.5.0.5-1.el7.centos.noarch
 ovirt-engine-userportal-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-webadmin-portal-3.5.2.1-1.el7.centos.noarch
 ovirt-guest-agent-common-1.0.10-2.el7.noarch
 ovirt-engine-jboss-as-7.1.1-1.el7.x86_64
 ovirt-release35-004-1.noarch
 ovirt-engine-sdk-python-3.5.2.1-1.el7.centos.noarch
 ovirt-image-uploader-3.5.1-1.el7.centos.noarch
 ovirt-engine-setup-plugin-ovirt-engine-common-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-websocket-proxy-3.5.2.1-1.el7.centos.noarch
 ovirt-host-deploy-java-1.3.1-1.el7.noarch
 ovirt-engine-reports-3.5.2-0.3.el7.centos.noarch
 ovirt-engine-dwh-setup-3.5.2-0.1.el7.centos.noarch
 ovirt-engine-tools-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-setup-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-restapi-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-setup-base-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-setup-plugin-websocket-proxy-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-reports-setup-3.5.2-0.3.el7.centos.noarch
 ovirt-engine-dwh-3.5.2-0.1.el7.centos.noarch
 ovirt-engine-dbscripts-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-setup-plugin-ovirt-engine-3.5.2.1-1.el7.centos.noarch
 ovirt-engine-backend-3.5.2.1-1.el7.centos.noarch
 ovirt-iso-uploader-3.5.2-1.el7.centos.noarch
 ovirt-engine-extensions-api-impl-3.5.2.1-1.el7.centos.noarch
 ovirt-host-deploy-1.3.1-1.el7.noarch
 ovirt-engine-lib-3.5.2.1-1.el7.centos.noarch


 [1] http://www.ovirt.org/Fence_kdump

 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Disable Multipathing?

2015-05-26 Thread Daniel Helgenberger


On 26.05.2015 20:14, Kiril L wrote:
 Multipath makes mounting HDDs harder not to mention emergency mode and
 device-mapper: table: 253:6: multipath: error getting device
There was a discussion about this quite recently [1]; reading this might 
be inserting, too. The reason for this is the general 'to fit everyone' 
approach of the default multipath.conf.

 I do not have multiple paths to the storage. In my case can i disable
 Multipath - is there a right way to do it or i have to use black
 listing?
You can blacklist everything, no problem. But you need make some changes 
to your mulipath.conf. Please just add the lines and do not remove or 
disable any services:

to the second line (2) in multipath.conf, add

# RHEV PRIVATE

to keep host-deploy from overwriting the file.

Then, somewhere in the file:

blacklist {
devnode *
}

Then, you need to run:
multipath -d -v3

to test (it should now list all devices as blacklisted) and if successful:
multipath

Effectively blacklisting everything while dm-multipah continues to run.

Please note, if you are running oVirt node, you also need to run

persist /etc/multipath.conf

Also, you have to do this on every host in your data centers naturally.
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

[1] https://www.mail-archive.com/users@ovirt.org/msg26314.html
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Configuring ilo2 PM; passing ssh options

2015-05-24 Thread Daniel Helgenberger


On 23.05.2015 15:04, Martin Perina wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Martin Perina mper...@redhat.com
 Cc: users@ovirt.org, Eli Mesika emes...@redhat.com
 Sent: Thursday, May 21, 2015 9:31:50 PM
 Subject: Re: [ovirt-users] Configuring ilo2 PM; passing ssh options



 On 21.05.2015 21:07, Martin Perina wrote:
 Hi Daniel,

 I'm cc'ing Eli as we are currently facing issue with fence agents
 regression for passing boolean flags to fence agents.
 Thanks for getting back to me so quickly.

 I looked at man page of fence_ilo2 again and I haven't found
 --tls1.0 option at all.
 Strange? FYI I am running CentOS7.1 hosts; installed fence:
 fence-agents-ilo2-4.0.11-11.el7_1.x86_64

 Here, clearly I have this option. The fence agent itself seems to use
 gnutls successfully:

 # fence_ilo2 -a 10.11.0.212 --username=ovirt -p ** -v -o status
 --ssl-insecure --tls1.0

 Running command: /usr/bin/gnutls-cli --priority
 NORMAL:-VERS-TLS1.2:-VERS-TLS1.1:+VERS-TLS1.0:%LATEST_RECORD_VERSION
 --insecure --crlf -p 443 10.11.0.212


 Ahh, I looked at older version on F20. But I can't find --tls1.0 option
 even on man page for fence-agents-ilo2-4.0.11-11.el7_1.x86_64 :-(

 So if you really see this option, please take a look at the end of man
 page, where you can find STDIN format options names and add it along
 with ssl_insecure to options in Power Management tab of the hosts (instead
 of tls1_0 use what you find in your man page):
Many thanks! Using the STDIN options solved this issue. I finally get:
Test succeeded: on

I am using these options in the options field for the ilo2 fencing module:

ssl_insecure=1,tls1.0=1

Also working:
ssl_insecure=1,notls=1


   ssl_insecure=1,tls1_0=1
True. What still puzzles me is the tls1.0 option. In the my man pages 
the STDIN option ins called 'tls1.0'. Also, can you check wherever you 
have a 'notls' option to force SSL3.0? This also works for me.

I think all the info you gave here, esp. using the stdin binary options 
in a way 'option=0|1' is quite essential to get fenceing working. I had 
a quick look over some man pages and I think all the standard fence 
agents are used in the same manner.
Also, a hint might be in order that old ilo boards can't cope with TLS 
and need it disabled. I think here [1] [2]?

[1] http://www.ovirt.org/Automatic_Fencing
[2] 
http://www.ovirt.org/OVirt_Administration_Guide#Host_Power_Management_Settings_Explained

Thanks!

 Thanks

 Martin Perina

 I put the whole command output below [1]


To specify --ssl-insecure please add following
 into options in Power Management tab of the host:

 ssl_insecure=1
 Thanks for pointing out how to actually use these options.


 Martin Perina

 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Martin Perina mper...@redhat.com
 Cc: users@ovirt.org
 Sent: Thursday, May 21, 2015 8:11:40 PM
 Subject: Re: [ovirt-users] Configuring ilo2 PM; passing ssh options



 On 12.05.2015 09:16, Martin Perina wrote:
 Hi Daniel,
 Hello Martin,

 sorry for answering that late. And thanks for pointing me to the man
 page! I always seem to forget that.

 options defined in PM tab are used to pass custom settings
 of specific fence agent. In you case please take a look
 at man page for fence_ilo2. I looked there briefly and
 I'm afraid that your parameter is not supported.

 Ok, this command runs fine and uses XML:
 fence_ilo2 -a 10.11.0.212 --username=ovirt -p secret -v -o status
 --ssl-insecure --tls1.0

 However, using options --tls1.0 and --ssl-insecure does not work in the
 engine. What puzzles me: the fence agent seems to use an SSL connection
 and XML; while the GUI wants an SSH port form me?

 There I get the error:
 Unknown options ..

 now I only get
 Test succeeded - unknown (witch actually is not successful)


 Thanks!

 I see that fence_ilo3_ssh and fence_ilo4_ssh should support
 passing that option for SSH connection, so you could try them
 if they work with you fence device.

 Martin Perina


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: users@ovirt.org
 Sent: Monday, May 11, 2015 5:53:10 PM
 Subject: [ovirt-users] Configuring ilo2 PM; passing ssh options

 Hello,

 to make this short - i need to pass ssh options to get the connection to
 ilo2 working (MACs=hmac-sha1) [1].

 How can this be done? I think the 'options' field is clearly for
 something else?

 Using this option in .ssh/config works btw.

 Thanks!
 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P

Re: [ovirt-users] Changing Hosted-Engine RAM

2015-05-24 Thread Daniel Helgenberger


On 22.05.2015 22:34, Simon Hallam wrote:
 Hi,
Hello Simon,

 I was wondering if there was any way of changing the ovirt-hosted-engine VM’s
 RAM retrospectively?
This is done by editing the config file:
/etc/ovirt-hosted-engine/vm.conf

There is a config line 'memSize='
Change it to the appropriate value. Also, you can rename the VM there, 
see 'vmName='.

Please remember, you have to make this change on every HA host.

 If I try and modify the VM in the UI, I get an error:

 Error while executing action:

 HostedEngine:

   Cannot edit VM. This VM is not managed by the engine.

 Cheers,

 Simon Hallam

 Linux Support  Development Officer

 Please visit our new website at www.pml.ac.uk and follow us on Twitter  
 @PlymouthMarine

 Winner of the Environment  Conservation category, the Charity Awards 2014.

 Plymouth Marine Laboratory (PML) is a company limited by guarantee registered 
 in England  Wales, company number 4178503. Registered Charity No. 1091222. 
 Registered Office: Prospect Place, The Hoe, Plymouth  PL1 3DH, UK.

 This message is private and confidential. If you have received this message 
 in error, please notify the sender and remove it from your system. You are 
 reminded that e-mail communications are not secure and may contain viruses; 
 PML accepts no liability for any loss or damage which may be caused by 
 viruses.


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Adding FCP - Request for comments

2015-05-22 Thread Daniel Helgenberger


On 22.05.2015 21:08, Nir Soffer wrote:
 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Fábio Coelho fabio.coe...@jfsc.jus.br, users Users@ovirt.org
 Sent: Wednesday, May 20, 2015 8:46:01 PM
 Subject: Re: [ovirt-users] Adding FCP - Request for comments



 On 20.05.2015 19:10, Fábio Coelho wrote:
 Hello Fabio,
 Thoughts about Adding Storage Luns

 As I am new here, I would appreciate some advice about some actions that I
 intend to perform, please read.

 I have added a LUN to my cluster and, for that task, I had to restart every
 node
 of it. There was no LUNs before, multipathd was stopped and multipath.conf
 inexisted. I was able to log in and manually configure multipath.conf, a
 simple
 multipathd start was not enough.
 In theory this should have been enough. What puzzles me: Until now
 host-deploy always activated multipathd and writes a multipath.conf.

 Here I strongly recommend to blacklist everything and then only white
 listing your vendors. Otherwise your error logs fill up and you cannot
 connect any USB stick to the host any more ;)

 Then, add RHEV PRIVATE to the second line otherwise it will be
 overwritten on every host deploy run.
 # RHEV PRIVATE

 blacklist {
   device {
   vendor *
   product *
   }
 }

 This is bad idea. If you want to blacklist all devices, you can add this to
 vdsm generated configuration.
What can I add?


 Vdsm is depending on the defaults set in the defaults section.

I just looked; seems to me this is the default part vdsm is needing?

defaults {
 polling_interval5
 no_path_retry   fail
 user_friendly_names no
 flush_on_last_del   yes
 fast_io_fail_tmo5
 dev_loss_tmo30
 max_fds 4096
}

The problem is there is no blacklisting at all in the default 
multipath.conf - at least not in mine.

I know this is a hard thing to do for a general version of the file 
witch works for anyone. As for my part I have only very specific devices 
/ vendors I want to have in my multipah.conf; so I blacklist everything 
and later on add blacklist exceptions like:

blacklist_exceptions {
 device {
 vendor  IFT
 product *
 }
}

Witch IMHO is (was?) since best practice a long time ago when I created 
my configs.





 After activating multipathd and editing multipath.conf to your needs you
 would actually need to run the 'multipath' command to create the paths. [1]

 Sometimes you need to rescan the LUNs, though, esp. if you changed sizes
 after activating them.

 If this wasn't enough, my double NetAPP ( through an Hitachi ) provided me
 with
 a not so empty brand new LUN, and the task to add the FCP failed to point
 this.
 Trusting my double, I spent some precious time searching for different
 problems,
 until receiving some guidance and do a simple dd if=/dev/zero to the
 initial
 blocks of the LUN.
 IMHO you need to initialize the lun with a partition table at least
 (parted). dd will do also.


 Consulting the documentation
 ( http://www.ovirt.org/OVirt_Administration_Guide#Adding_FCP_Storage ) for
 this
 matters, was not of any help.

 So, my questions:

 This is the intended behavior? Should I open a ticket?

 Should I add a note to documentation to point such behavior? ( i'm about to
 )

 I think this is not ovirts part but rather dm-multipath. My best guess
 would be a configuration error on your part?

 [1]
 https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/DM_Multipath/#mpio_setup

 Cheers,

 by qoelheX


 Aviso Legal

 A informação contida neste e-mail e em seus anexos pode ser restrita, sendo
 o
 emitente deste responsável por seu conteúdo e endereçamento. Se você não
 for a
 pessoa autorizada a receber esta mensagem e tendo recebido a mesma por
 engano,
 favor apagá-la imediatamente. A JFSC considera opiniões, conclusões e
 outras
 informações não oficiais de responsabilidade do usuário deste serviço.


 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] oVirt Instability with Dell Compellent via iSCSI/Multipath

2015-05-21 Thread Daniel Helgenberger


On 21.05.2015 02:48, Chris Jones - BookIt.com Systems Administrator wrote:
 Another issue may be that the setting for COMPELNT/Compellent Vol are wrong;
 the setting we ship is missing lot of settings that exists in the builtin
 setting, and this may have bad effect. If your devices match this , I would
 try this multipath configuration, instead of the one vdsm configures.

  device {
  vendor COMPELNT
  product Compellent Vol
  path_grouping_policy multibus
  path_checker tur
  features 0
  hardware_handler 0
  prio const
  failback immediate
  rr_weight uniform
  no_path_retry fail
  }

 I wish I could. We're using the CentOS 7 ovirt-node-iso. The
 multipath.conf is less than ideal
I have this issue also. I think about opening a BZ ;)

  but when I tried updating it, oVirt
 instantly overwrites it. To be clear, yes I know changes do not survive
 reboots and yes I know about persist, but it changes it while running.
 Live! Persist won't help there.

 I also tried building a CentOS 7 thick client where I set up CentOS 7
 first, added the oVirt repo, then let the engine provision it. Same
 problem with multipath.conf being overwritten with the default oVirt setup.

 So I tried to be slick about it. I made the multipath.conf immutable.
 That prevented the engine from being able to activate the node. It would
 fail on a vds command that gets the nodes capabilities and part of what
 it does is reads then overwrites multipath.conf.

 How do I safely update multipath.conf?

In the second line of your multipath conf, add:
# RHEV PRIVATE

Then, host deploy will ignore it and never change it.




 To verify that your devices match this, you can check the devices vendor and 
 procut
 strings in the output of multipath -ll. I would like to see the output of 
 this
 command.

 multipath -ll (default setup) can be seen here.
 http://paste.linux-help.org/view/430c7538

 Another platform issue is bad default SCSI 
 node.session.timeo.replacement_timeout
 value, which is set to 120 seconds. This setting mean that the SCSI layer 
 will
 wait 120 seconds for io to complete on one path, before failing the io 
 request.
 So you may have one bad path, causing 120 second delay, while you could 
 complete
 the request using another path.

 Multipath is trying to set this value to 5 seconds, but this value is 
 reverting
 to the default 120 seconds after a device has trouble. There is an open bug 
 about
 this which we hope to get fixed in the rhel/centos 7.2.
 https://bugzilla.redhat.com/1139038

 This issue together with no_path_retry queue is a very bad mix for ovirt.

 You can fix this timeout by setting:

 # /etc/iscsi/iscsid.conf
 node.session.timeo.replacement_timeout = 5

 I'll see if that's possible with persist. Will this change survive node
 upgrades?

 Thanks for the reply and the suggestions.
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Configuring ilo2 PM; passing ssh options

2015-05-21 Thread Daniel Helgenberger


On 12.05.2015 09:16, Martin Perina wrote:
 Hi Daniel,
Hello Martin,

sorry for answering that late. And thanks for pointing me to the man 
page! I always seem to forget that.

 options defined in PM tab are used to pass custom settings
 of specific fence agent. In you case please take a look
 at man page for fence_ilo2. I looked there briefly and
 I'm afraid that your parameter is not supported.

Ok, this command runs fine and uses XML:
fence_ilo2 -a 10.11.0.212 --username=ovirt -p secret -v -o status 
--ssl-insecure --tls1.0

However, using options --tls1.0 and --ssl-insecure does not work in the 
engine. What puzzles me: the fence agent seems to use an SSL connection 
and XML; while the GUI wants an SSH port form me?

There I get the error:
Unknown options ..

now I only get
Test succeeded - unknown (witch actually is not successful)


Thanks!

 I see that fence_ilo3_ssh and fence_ilo4_ssh should support
 passing that option for SSH connection, so you could try them
 if they work with you fence device.

 Martin Perina


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: users@ovirt.org
 Sent: Monday, May 11, 2015 5:53:10 PM
 Subject: [ovirt-users] Configuring ilo2 PM; passing ssh options

 Hello,

 to make this short - i need to pass ssh options to get the connection to
 ilo2 working (MACs=hmac-sha1) [1].

 How can this be done? I think the 'options' field is clearly for
 something else?

 Using this option in .ssh/config works btw.

 Thanks!
 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Configuring ilo2 PM; passing ssh options

2015-05-21 Thread Daniel Helgenberger


On 21.05.2015 21:07, Martin Perina wrote:
 Hi Daniel,

 I'm cc'ing Eli as we are currently facing issue with fence agents
 regression for passing boolean flags to fence agents.
Thanks for getting back to me so quickly.

 I looked at man page of fence_ilo2 again and I haven't found
 --tls1.0 option at all.
Strange? FYI I am running CentOS7.1 hosts; installed fence:
fence-agents-ilo2-4.0.11-11.el7_1.x86_64

Here, clearly I have this option. The fence agent itself seems to use 
gnutls successfully:

# fence_ilo2 -a 10.11.0.212 --username=ovirt -p ** -v -o status 
--ssl-insecure --tls1.0

Running command: /usr/bin/gnutls-cli --priority 
NORMAL:-VERS-TLS1.2:-VERS-TLS1.1:+VERS-TLS1.0:%LATEST_RECORD_VERSION 
--insecure --crlf -p 443 10.11.0.212

I put the whole command output below [1]


  To specify --ssl-insecure please add following
 into options in Power Management tab of the host:

ssl_insecure=1
Thanks for pointing out how to actually use these options.


 Martin Perina

 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: Martin Perina mper...@redhat.com
 Cc: users@ovirt.org
 Sent: Thursday, May 21, 2015 8:11:40 PM
 Subject: Re: [ovirt-users] Configuring ilo2 PM; passing ssh options



 On 12.05.2015 09:16, Martin Perina wrote:
 Hi Daniel,
 Hello Martin,

 sorry for answering that late. And thanks for pointing me to the man
 page! I always seem to forget that.

 options defined in PM tab are used to pass custom settings
 of specific fence agent. In you case please take a look
 at man page for fence_ilo2. I looked there briefly and
 I'm afraid that your parameter is not supported.

 Ok, this command runs fine and uses XML:
 fence_ilo2 -a 10.11.0.212 --username=ovirt -p secret -v -o status
 --ssl-insecure --tls1.0

 However, using options --tls1.0 and --ssl-insecure does not work in the
 engine. What puzzles me: the fence agent seems to use an SSL connection
 and XML; while the GUI wants an SSH port form me?

 There I get the error:
 Unknown options ..

 now I only get
 Test succeeded - unknown (witch actually is not successful)


 Thanks!

 I see that fence_ilo3_ssh and fence_ilo4_ssh should support
 passing that option for SSH connection, so you could try them
 if they work with you fence device.

 Martin Perina


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: users@ovirt.org
 Sent: Monday, May 11, 2015 5:53:10 PM
 Subject: [ovirt-users] Configuring ilo2 PM; passing ssh options

 Hello,

 to make this short - i need to pass ssh options to get the connection to
 ilo2 working (MACs=hmac-sha1) [1].

 How can this be done? I think the 'options' field is clearly for
 something else?

 Using this option in .ssh/config works btw.

 Thanks!
 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767



[1]

Sent: ?xml version=1.0?

Received: ?xml version=1.0?

Processed 0 CA certificate(s).
Resolving '10.11.0.212'...
Connecting to '10.11.0.212:443'...
- Certificate type: X.509
- Got a certificate list of 1 certificates.
- Certificate[0] info:
  - subject `C=US,ST=Texas,L=Houston,O=Hewlett-Packard 
Company,OU=ISS,CN=hv02', issuer 
`C=US,ST=Texas,L=Houston,O=Hewlett-Packard Company,OU=ISS,CN=hv02', RSA 
key 1024 bits, signed using RSA-MD5 (broken!), activated `2002-12-05 
20:25:26 UTC', expires `2022-12-05 20:25:26 UTC', SHA-1 fingerprint 
`4db06bc1a74fe2894068d89ea76c0622b3e76bc1'
Public Key ID:
428f85bc360c8778eb550e4b8ef1c65b111d7108
Public key's random art:
+--[ RSA 1024]+
|Eoo+.|
|   . o . .o. |
|  . = B +|
|   .  X .   |
|o # S|
|   . + = |
|. .  |
| |
| |
+-+

- Status: The certificate is NOT trusted. The certificate issuer is 
unknown. The name in the certificate does not match the expected.
*** PKI verification of server certificate failed...
- Description: (TLS1.0)-(RSA)-(AES-128-CBC)-(SHA1)
- Session ID: 
AA:C9:08:8C:F5:E7:E6:19:7D:BC:20:D4:A0:C0:DA:E4:0E:C1:C0:2A:BC:93:8E:B3:5F:20:B0:38:67:F2:01:5C
- Version: TLS1.0
- Key Exchange: RSA
- Cipher: AES-128-CBC
- MAC: SHA1
- Compression

Re: [ovirt-users] Adding FCP - Request for comments

2015-05-20 Thread Daniel Helgenberger


On 20.05.2015 20:10, Fábio Coelho wrote:
 Hi Daniel,

 Thank you for your comments!

 Let me clarify some points:

 About LUN:

 IMHO you need to initialize the lun with a partition table at least
 (parted). dd will do also.
 So, the lun, which I was provided with, it was too much blank?
Hehe - I only found writing to them once helps in general. Call it 
superstitous - its the first thing I do with a new lun in case there are 
some 'leftovers'. But indeed it should work without it.


 About multipathd:
 I think this is not ovirts part but rather dm-multipath. My best guess
 would be a configuration error on your part?

 I'm really sorry, I failed to point that my nodes are ovirt-node-iso 
 installations, not generic SO installations with ovirt added to them.
Sorry, I did not use node very much (it lacked some drivers I needed) 
and - because of things like this where I need a persistant change 
(multipath.conf).

 I was able to manually configure the nodes - the question is: this is the 
 expected behavior (manual configuration)?
I'll add Fabian for this question; persistant changes to nodes from 
node.iso are his area of expertise.

 Some of my nodes I just restarted and then they were able to see the LUN 
 correctly without any manual configuration. As oVirt provide an iso for node 
 installation, maybe it is important to point such behavior in the oVirt 
 documentation.
As I said - multipathd should be running by default. If this is the 
case, pathes to the same LUN are detected at statup and mapped 
correctly; no intervention necessary.
In the end you might need some special settings depending on your 
storage, though.

 Cheers!

 by qoelheX


 Aviso Legal

 A informação contida neste e-mail e em seus anexos pode ser restrita, sendo o 
 emitente deste responsável por seu conteúdo e endereçamento. Se você não for 
 a pessoa autorizada a receber esta mensagem e tendo recebido a mesma por 
 engano, favor apagá-la imediatamente. A JFSC considera opiniões, conclusões e 
 outras informações não oficiais de responsabilidade do usuário deste serviço.


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Adding FCP - Request for comments

2015-05-20 Thread Daniel Helgenberger


On 20.05.2015 19:10, Fábio Coelho wrote:
Hello Fabio,
 Thoughts about Adding Storage Luns

 As I am new here, I would appreciate some advice about some actions that I
 intend to perform, please read.

 I have added a LUN to my cluster and, for that task, I had to restart every 
 node
 of it. There was no LUNs before, multipathd was stopped and multipath.conf
 inexisted. I was able to log in and manually configure multipath.conf, a 
 simple
 multipathd start was not enough.
In theory this should have been enough. What puzzles me: Until now 
host-deploy always activated multipathd and writes a multipath.conf.

Here I strongly recommend to blacklist everything and then only white 
listing your vendors. Otherwise your error logs fill up and you cannot 
connect any USB stick to the host any more ;)

Then, add RHEV PRIVATE to the second line otherwise it will be 
overwritten on every host deploy run.
# RHEV PRIVATE

blacklist {
 device {
 vendor *
 product *
 }
}



After activating multipathd and editing multipath.conf to your needs you 
would actually need to run the 'multipath' command to create the paths. [1]

Sometimes you need to rescan the LUNs, though, esp. if you changed sizes 
after activating them.

 If this wasn't enough, my double NetAPP ( through an Hitachi ) provided me 
 with
 a not so empty brand new LUN, and the task to add the FCP failed to point 
 this.
 Trusting my double, I spent some precious time searching for different 
 problems,
 until receiving some guidance and do a simple dd if=/dev/zero to the initial
 blocks of the LUN.
IMHO you need to initialize the lun with a partition table at least 
(parted). dd will do also.


 Consulting the documentation
 ( http://www.ovirt.org/OVirt_Administration_Guide#Adding_FCP_Storage ) for 
 this
 matters, was not of any help.

 So, my questions:

 This is the intended behavior? Should I open a ticket?

 Should I add a note to documentation to point such behavior? ( i'm about to )

I think this is not ovirts part but rather dm-multipath. My best guess 
would be a configuration error on your part?

[1] 
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/DM_Multipath/#mpio_setup

 Cheers,

 by qoelheX


 Aviso Legal

 A informação contida neste e-mail e em seus anexos pode ser restrita, sendo o
 emitente deste responsável por seu conteúdo e endereçamento. Se você não for a
 pessoa autorizada a receber esta mensagem e tendo recebido a mesma por engano,
 favor apagá-la imediatamente. A JFSC considera opiniões, conclusões e outras
 informações não oficiais de responsabilidade do usuário deste serviço.


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] HE setup failing: Cannot set temporary password for console connection

2015-05-13 Thread Daniel Helgenberger
Hello Didi,
this is a clean install of the first host. (I am trying a disaster scenario and 
will later restore the backup)

--
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22tel:+49/30/2408781-22
F: +49/30/2408781-10tel:+49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.dehttp://www.m-box.de www.monkeymen.tvhttp://www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767




On Wed, May 13, 2015 at 12:22 AM -0700, Yedidyah Bar David 
d...@redhat.commailto:d...@redhat.com wrote:

- Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: users@ovirt.org
 Sent: Tuesday, May 12, 2015 8:48:42 PM
 Subject: [ovirt-users] HE setup failing: Cannot set temporary password for 
 console connection

 Hello,

 a week ago I set up a HE (3.5.2) with no problems; now this fails.

You mean you re-deploy the same host (clean setup), or adding another host?

 I
 suspect storage trouble but cannot pinpoint it. Did someth. change there
 with the recent async release?

 The storage domain is NFS3 via a 1G link to a ZFS storage appliance. The
 export is working quite fast; tested with iozone running for over 24h
 without problems.

 It starts with the Verifying sanlock lockspace initialization phase;
 which lasts about 7min (!).

 In the end it seems sanlock is locking the domain down. I can only get
 it back by stopping sanlock and vdsm.

 Attached is the full vdsm lock.


 Thanks!

 vdsm:

 Thread-27::ERROR::2015-05-12
 19:17:51,470::domainMonitor::256::Storage.DomainMonitorThread::(_monitorDomain)
 Error while collecting domain 2f83ea82-e110-465d-a2a6-ac30534a9f6a
 monitoring information
 Traceback (most recent call last):
   File /usr/share/vdsm/storage/domainMonitor.py, line 232, in
   _monitorDomain
 self.domain.selftest()
   File /usr/share/vdsm/storage/sdc.py, line 49, in __getattr__
 return getattr(self.getRealDomain(), attrName)
   File /usr/share/vdsm/storage/sdc.py, line 52, in getRealDomain
 return self._cache._realProduce(self._sdUUID)
   File /usr/share/vdsm/storage/sdc.py, line 122, in _realProduce
 domain = self._findDomain(sdUUID)
   File /usr/share/vdsm/storage/sdc.py, line 141, in _findDomain
 dom = findMethod(sdUUID)
   File /usr/share/vdsm/storage/nfsSD.py, line 122, in findDomain
 return NfsStorageDomain(NfsStorageDomain.findDomainPath(sdUUID))
   File /usr/share/vdsm/storage/nfsSD.py, line 112, in findDomainPath
 raise se.StorageDomainDoesNotExist(sdUUID)
 StorageDomainDoesNotExist: Storage domain does not exist:
 ('2f83ea82-e110-465d-a2a6-ac30534a9f6a',)


 Detector thread::DEBUG::2015-05-12
 19:24:33,163::BindingXMLRPC::1173::XmlDetector::(handleSocket) xml over http
 detected from ('127.0.0.1', 47076)
 Thread-93::DEBUG::2015-05-12
 19:24:33,166::BindingXMLRPC::1133::vds::(wrapper) client [127.0.0.1]::call
 vmSetTicket with ('e3d350c5-6254-4908-99e9-d60ca2e046f7', '5435uOVP',
 '10800', 'disconnect', {}) {}
 Thread-93::ERROR::2015-05-12
 19:24:33,166::BindingXMLRPC::1152::vds::(wrapper) unexpected error
 Traceback (most recent call last):
   File /usr/share/vdsm/rpc/BindingXMLRPC.py, line 1136, in wrapper
 res = f(*args, **kwargs)
   File /usr/share/vdsm/rpc/BindingXMLRPC.py, line 383, in vmSetTicket
 return vm.setTicket(password, ttl, existingConnAction, params)
   File /usr/share/vdsm/API.py, line 642, in setTicket
 return v.setTicket(password, ttl, existingConnAction, params)
   File /usr/share/vdsm/virt/vm.py, line 4834, in setTicket
 graphics = _domParseStr(self._dom.XMLDesc(0)).childNodes[0]. \
 AttributeError: 'NoneType' object has no attribute 'XMLDesc'

 and:

 Thread-91::DEBUG::2015-05-12
 19:25:15,152::libvirtconnection::143::root::(wrapper) Unknown libvirterror:
 ecode: 38 edom: 42 level: 2 message: Failed to acquire lock: No space left
 on device
 Thread-91::DEBUG::2015-05-12
 19:25:15,154::vm::2294::vm.Vm::(_startUnderlyingVm)
 vmId=`e3d350c5-6254-4908-99e9-d60ca2e046f7`::_ongoingCreations released
 Thread-91::ERROR::2015-05-12
 19:25:15,154::vm::2331::vm.Vm::(_startUnderlyingVm)
 vmId=`e3d350c5-6254-4908-99e9-d60ca2e046f7`::The vm start process failed
 Traceback (most recent call last):
   File /usr/share/vdsm/virt/vm.py, line 2271, in _startUnderlyingVm
 self._run()
   File /usr/share/vdsm/virt/vm.py, line 3335, in _run
 self._connection.createXML(domxml, flags),
   File /usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py, line
   111, in wrapper
 ret = f(*args, **kwargs)
   File /usr/lib64/python2.7/site-packages/libvirt.py, line 3427, in
   createXML
 if ret is None:raise libvirtError('virDomainCreateXML() failed',
 conn=self)
 libvirtError: Failed to acquire lock: No space left on device

 sanlock:
 2015-05-12 19:11:27+0200 4338 [708]: s2 lockspace
 2f83ea82-e110-465d-a2a6-ac30534a9f6a:1:/rhev/data-center/mnt/10.11.0.30:_volumes_ovirt_engine/2f83ea82-e110-465d-a2a6-ac30534a9f6a/dom_md

[ovirt-users] HE setup failing: Cannot set temporary password for console connection

2015-05-12 Thread Daniel Helgenberger
 
found -1 failed 0 name 2f83ea82-e110-465d-a2a6-ac30534a9f6a

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767


vdsm.log.gz
Description: vdsm.log.gz
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] HE: changing engine storage connection's interface

2015-05-11 Thread Daniel Helgenberger
Hello,

I have just deployed my new hosted engine (3.5.2). Now, after some basic
infra is running, I want to change the NFS connection vdsm is using for
HE's vm.

Please advice me on this procedure:

 1. set global maint.
 2. shutdown HE and all VMs
 3. stop engine-ha
 4. stop vdsm
 5. unmount engine domain
 6. hosted-engine.conf storage= stection
 7. start vdsm
 8. start engine-ha
 9. reconnect storage
10. -- repeat step 3 - 9 for all ha hosts


Thanks!


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] simple virtual disk moving

2015-05-11 Thread Daniel Helgenberger
Hello Pavel,

On Mo, 2015-05-11 at 16:12 +0200, p...@email.cz wrote:
 hello, would I explicitly define interface for only disk moving ??
IMHO the disk move is done by the SPM host using dd or qemu-img (ovirt
3.5+). This process uses the storage connections it has configured. 

 
 Move process takes the first interface from list  ( VM assigned ), but 
 any  interface for moving virtuals ( explicitly defined ).
 
 eg.
 VM moving from A to B - it takes interface defined for moving ( 
 movingLAN )
 but
 moving only simple disk of VM from A to B - it takes default interface 
 from list of assigned LANs
 
 any idea ??
 regs.
 Pavel
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] multiple OVF_STORE disks?

2015-05-11 Thread Daniel Helgenberger
On Mo, 2015-05-11 at 15:53 +0200, Rik Theys wrote:
 Hi,
 
 I'm still on 3.5.2 and noticed that I have two OVF_STORE disks. Is this 
 normal, or am I hitting the bug described in the recent announcement?
I think there is one OVF_STORE disk per storage domain; counting any
type...

 
 This might have been caused by one of my tests that made my storage 
 domain unavailable. When I activated the storage domain again I noticed 
 that a lot of VM's I created as part of a pool suddenly reappeared  and 
 I had to delete them again.
 
 Now that I have two OVF_STORE disks, how do I know which one I can remove?
 
 When I list the virtual machines tab on the disks, they both show an 
 empty list.
 
 Regards,
 
 Rik
 
 On 05/11/2015 03:28 PM, Sandro Bonazzola wrote:
  [1] https://bugzilla.redhat.com/1214408 - Importing storage domains into an 
  uninitialized datacenter leads to
  duplicate OVF_STORE disks being created, and can cause catastrophic loss of 
  VM configuration data
 
 

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Gluster command [UNKNOWN] failed on server

2015-05-11 Thread Daniel Helgenberger


On Mo, 2015-05-11 at 16:05 +0100, supo...@logicworks.pt wrote:
 Hi, 
 
 I just restart it again, and now start the gluster service before starting 
 the hosted engine, but still gets the same error message. 
 
 Any more ideas? 
I just had the same problem. 
My unknown error indeed to the fact that glusterd / glusterfsd were
not running.

After starting them it turned out the host setup did not automatically
add the iptables rules for gluster. I added to iptables:

# gluster
-A INPUT -p tcp --dport 24007:24011 -j ACCEPT
-A INPUT -p tcp --dport 38465:38485 -j ACCEPT

Afterwards 'gluster peer status' worked and my host was operational
again.

Hint: Sometimes this is do to gluster itself. Restaring glusterd works
most of the time to fix this.

 
 Thanks 
 
 Jose 
 
 # hosted-engine --vm-status 
 
 --== Host 1 status ==-- 
 
 Status up-to-date : True 
 Hostname : ovserver1.domain.com 
 Host ID : 1 
 Engine status : {health: good, vm: up, detail: up} 
 Score : 2400 
 Local maintenance : False 
 Host timestamp : 4998 
 Extra metadata (valid at timestamp): 
 metadata_parse_version=1 
 metadata_feature_version=1 
 timestamp=4998 (Mon May 11 16:03:48 2015) 
 host-id=1 
 score=2400 
 maintenance=False 
 state=EngineUp 
 
 
 # service glusterd status 
 Redirecting to /bin/systemctl status glusterd.service 
 glusterd.service - GlusterFS, a clustered file-system server 
 Loaded: loaded (/usr/lib/systemd/system/glusterd.service; enabled) 
 Active: active (running) since Mon 2015-05-11 14:37:14 WEST; 1h 27min ago 
 Process: 3060 ExecStart=/usr/sbin/glusterd -p /var/run/glusterd.pid 
 (code=exited, status=0/SUCCESS) 
 Main PID: 3061 (glusterd) 
 CGroup: /system.slice/glusterd.service 
 ââ3061 /usr/sbin/glusterd -p /var/run/glusterd.pid 
 ââ3202 /usr/sbin/glusterfsd -s ovserver2.acloud.pt --volfile-id gv... 
 
 May 11 14:37:11 ovserver2.domain.com systemd[1]: Starting GlusterFS, a 
 cluste 
 May 11 14:37:14 ovserver2.domain.com systemd[1]: Started GlusterFS, a 
 cluster 
 Hint: Some lines were ellipsized, use -l to show in full. 
 
 
 - Mensagem original -
 
 De: supo...@logicworks.pt 
 Para: knarra kna...@redhat.com 
 Cc: Users@ovirt.org 
 Enviadas: Segunda-feira, 11 De Maio de 2015 13:15:14 
 Assunto: Re: [ovirt-users] Gluster command [UNKNOWN] failed on server 
 
 Hi, 
 
 I have 2 nodes, but only one is working with glusterfs. 
 
 But you were right, glusterfs was not running, I just start the service - I 
 didn't check it :( : 
 # service glusterd status 
 Redirecting to /bin/systemctl status glusterd.service 
 glusterd.service - GlusterFS, a clustered file-system server 
 Loaded: loaded (/usr/lib/systemd/system/glusterd.service; enabled) 
 Active: active (running) since Mon 2015-05-11 13:06:24 WEST; 3s ago 
 Process: 4482 ExecStart=/usr/sbin/glusterd -p /var/run/glusterd.pid 
 (code=exited, status=0/SUCCESS) 
 Main PID: 4483 (glusterd) 
 CGroup: /system.slice/glusterd.service 
 ââ4483 /usr/sbin/glusterd -p /var/run/glusterd.pid 
 ââ4618 /usr/sbin/glusterfsd -s ovserver2.acloud.pt --volfile-id gv... 
 
 May 11 13:06:22 ovserver2.domain.com systemd[1]: Starting GlusterFS, a 
 cluste 
 May 11 13:06:24 ovserver2.domain.com systemd[1]: Started GlusterFS, a 
 cluster 
 Hint: Some lines were ellipsized, use -l to show in full. 
 
 But still the problem remains 
 
 Should I first start the glusterfs before the hosted engine? 
 
 Thanks 
 
 - Mensagem original -
 
 De: knarra kna...@redhat.com 
 Para: supo...@logicworks.pt, Users@ovirt.org 
 Enviadas: Segunda-feira, 11 De Maio de 2015 12:45:19 
 Assunto: Re: [ovirt-users] Gluster command [UNKNOWN] failed on server 
 
 On 05/11/2015 05:00 PM, supo...@logicworks.pt wrote: 
 
 
 
 Hi, 
 
 I'm testing ovirt 3.5.1, with hosted engine, using centos7.1. Have installed 
 some VMs, no problem. I needed to shutdown the computer machines (follow this 
 procedure: http://lists.ovirt.org/pipermail/users/2014-April/023861.html ), 
 after rebooting could not get it 
 working again, when trying to activate the hosts this message come up: 
 Gluster command [UNKNOWN] failed on server 
 I have tried a lot of things, including update it to Version 
 3.5.2-1.el7.centos, but no success. 
 Gluster version: 
 glusterfs-3.6.3-1.el7.x86_64 
 glusterfs-libs-3.6.3-1.el7.x86_64 
 glusterfs-fuse-3.6.3-1.el7.x86_64 
 glusterfs-cli-3.6.3-1.el7.x86_64 
 glusterfs-rdma-3.6.3-1.el7.x86_64 
 glusterfs-api-3.6.3-1.el7.x86_64 
 
 Any help? 
 
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Configuring ilo2 PM; passing ssh options

2015-05-11 Thread Daniel Helgenberger
Hello,

to make this short - i need to pass ssh options to get the connection to
ilo2 working (MACs=hmac-sha1) [1].

How can this be done? I think the 'options' field is clearly for
something else?

Using this option in .ssh/config works btw.

Thanks!
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Integrated process for import VMs from VMware!

2015-04-14 Thread Daniel Helgenberger
This looks really impressing!


On Di, 2015-04-14 at 14:34 +0200, Sven Kieske wrote:
 
 On 14/04/15 13:58, Arik Hadas wrote:
  Hi All,
  
  We are working these days on implementing an integrated process for import 
  virtual machines from different sources, other than oVirt's export/data 
  domains, that will be introduced in oVirt 3.6.
  A glimpse on how you can use it to import a VM from VMware into oVirt is 
  available at:
  https://www.youtube.com/watch?v=QSss__Nl5rU
 
 Is it possible to use a higher resolution than 360p ? I can't see
 anything in this video.
This might be on your end Sven? I can play the video @720p..
 

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] VDSM memory consumption

2015-03-26 Thread Daniel Helgenberger
Hello Everyone,

I did create the original BZ on this. In the mean time, lab system I
used is dismantled and the production system is yet to deploy.

As I wrote in BZ1147148 [1], I experienced two different issues. One,
one big mem leak of about 15MiB/h and a smaller one, ~300KiB. These seem
unrelated.

The larger leak was indeed related to SSL in some way; not necessarily
M2Crypto. However, after disabling SSL this was gone leaving the smaller
leak.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1147148
On Mo, 2015-03-09 at 23:49 +0100, Matt . wrote:
 Hi,
 
 I also see this on the latest 3.5 version, I'm thinking about setting
 up a cronjob to restart vdsm every night.
I did the same thing. In general, it seems to be a bad idea as it
compromised system stability on the long run. While VMs seem to be fine,
engine does not like this very much.

 I cannot believe that people say they don't have this issue.
This was hard for me to accept as well. I know of Markus Stockhausen and
Seven Kieske, both confirmed the small leak. This might also be some
special other service; though I started out with a minimal install of
Centos 6.
 
 Can someone of the devs dive in maybe ?
 
 Thanks!
 
 Matt
 
 
 
 2015-03-09 23:29 GMT+01:00 Dan Kenigsberg dan...@redhat.com:
  On Mon, Mar 09, 2015 at 10:40:51AM -0500, Darrell Budic wrote:
   On Mar 9, 2015, at 4:51 AM, Dan Kenigsberg dan...@redhat.com wrote:
  
   On Fri, Mar 06, 2015 at 10:58:53AM -0600, Darrell Budic wrote:
   I believe the supervdsm leak was fixed, but 3.5.1 versions of vdsmd 
   still leaks slowly, ~300k/hr, yes.
  
   https://bugzilla.redhat.com/show_bug.cgi?id=1158108
  
  
   On Mar 6, 2015, at 10:23 AM, Chris Adams c...@cmadams.net wrote:
  
   Once upon a time, Federico Alberto Sayd fs...@uncu.edu.ar said:
   I am experiencing troubles with VDSM memory consuption.
  
   I am running
  
   Engine: ovirt 3.5.1
  
   Nodes:
  
   Centos 6.6
   VDSM 4.16.10-8
   Libvirt: libvirt-0.10.2-46
   Kernel: 2.6.32
  
   When the host boots, memory consuption is normal, but after 2 or 3
   days running, VDSM memory consuption grows and it consumes more
   memory that all vm's running in the host. If I restart the vdsm
   service, memory consuption normalizes, but then it start growing
   again.
  
   I have seen some BZ about vdsm and supervdsm about memory leaks, but
   I don't know if VDSM 4.6.10.8 is still affected by a related bug.
  
   Can't help, but I see the same thing with CentOS 7 nodes and the same
   version of vdsm.
   --
   Chris Adams c...@cmadams.net
   ___
   Users mailing list
   Users@ovirt.org
   http://lists.ovirt.org/mailman/listinfo/users
  
   I'm afraid that we are yet to find a solution for this issue, which is
   completly different from the horrible leak of supervdsm  4.16.7.
  
   Could you corroborate the claim of
  Bug 1147148 - M2Crypto usage in vdsm leaks memory
   ? Does the leak disappear once you start using plaintext transport?
  
   Regards,
   Dan.
 
  I don’t think this is crypto related, but I could try that if you still 
  need some confirmation (and point me at a quick doc on switching to 
  plaintext?).
 
  This is from #ovirt around November 18th I think, Saggi thought he’d found 
  something related:
 
  9:58:43 AM saggi: YamakasY: Found the leak
  9:58:48 AM saggi: YamakasY: Or at least the flow
  9:58:57 AM saggi: YamakasY: The good news is that I can reproduce
  9:59:20 AM YamakasY: saggi: that's kewl!
  9:59:25 AM YamakasY: saggi: what happens ?
  9:59:41 AM YamakasY: I know from Telsin (ping ping!) that he sees it going 
  faster on gluster usage
  tdosek left the room (quit: Ping timeout: 480 seconds). (10:00:02 AM)
  djasa left the room (quit: Quit: Leaving). (10:00:24 AM)
  mlipchuk left the room (quit: Quit: Leaving.). (10:00:29 AM)
  laravot left the room (quit: Quit: Leaving.). (10:01:19 AM)
  10:01:54 AM saggi: YamakasY: it's in getCapabilities(). Here is the RSS 
  graph. The flatlines are when I stopped calling it and called other verbs. 
  http://i.imgur.com/CLm0Q75.png
 
  I do recall what is the issue Saggi and YamakasY were dicussing (CCing
  the pair), or if it reached fruition as a patch. It is certainly
  something other than Bug 1158108, as the latter speak about a leak in a
  normal working state, with no getCapabilities calls.
 
 
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] qcow2 as default disk format

2015-02-04 Thread Daniel Helgenberger
Hello,

AFAIK cow images are currently not configurable via GUI and cannot be 
set as default disk format. IIRC the reason being RAW and sparse are 
providing better performance (until you try to copy a larger disk image...).

However, you can add qcow - disks with ovirt shell and use these images:

$ add disk \
--vm-identifier vm_name \
--provisioned_size size_in_bytes \
--interface virtio \
--name disk_name \
--format cow \
--sparse true \
--storage_domains-storage_domain 
storage_domain.name=storage_domain_name


On 04.02.2015 18:56, shimano wrote:
 Hi,

 Is it possible to set qcow2 as default format of disk image in oVirt 3.5.1?


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] [ANN] oVirt 3.5.1 Final Release is now available

2015-01-21 Thread Daniel Helgenberger
Cool! Finally!
... and thank you!

On 21.01.2015 17:10, Sandro Bonazzola wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 The oVirt team is pleased to announce that the oVirt 3.5.1 Final Release is 
 now available as of Jan 21st 2015.

 The release candidate is available now for Fedora 20, Red Hat Enterprise 
 Linux 6.6, CentOS 6.6, (or similar) and Red Hat Enterprise Linux 7, CentOS
 7 (or similar).

 This release of oVirt includes numerous bug fixes. See the release notes [1] 
 for a list of the new features and bugs fixed.

 Please refer to release notes [1] for Installation / Upgrade instructions.

 A new oVirt Live and oVirt Node ISO will be available soon as well[2].

 Please note that mirrors[3] may need usually one day before being 
 synchronized.

 Please refer to the release notes for known issues in this release.

 [1] http://www.ovirt.org/OVirt_3.5.1_Release_Notes
 [2] http://resources.ovirt.org/pub/ovirt-3.5/iso/
 [3] http://www.ovirt.org/Repository_mirrors#Current_mirrors

 - --
 Sandro Bonazzola
 Better technology. Faster innovation. Powered by community collaboration.
 See how it works at redhat.com
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1

 iQIcBAEBAgAGBQJUv89CAAoJEHw3u57E4QAOE5EP/iREEVWYXRt2u2yEZAIopat9
 HTTb5ipHn6tc1he3V6pKzbM1LhFM5k0kx57X+EHw7eq2rYaOcmtEKPy8kEXEtXDt
 jFeWEI6vfi1ZebzZ5W4SkMQWuY6/iX5PUnDHyLDC9/wV/mucHLHsUe67W6Fr0SV+
 c78xrv2/kfSITjHTZmZG1NnZRfYiB1MHOMrUxT65jSR/fwHN8+I1SQJbg+ntIUiW
 XRD9CvnPyy3OGphEeZP0RiqK24A/cUOXv2qeMd7l8jI3aHB5z/JEz7ODPk2pSrUR
 B4xkBVa60axzPtg4xcTFaN/klzegs4x3RPr0lHTdwipL0r17JA0/hoCJR0N4lZDN
 CtO41kjcyBKfAcYGM/ODoTmD//symYQdXEwi88c1HOvr/lepHiup6mDQt0fvXngD
 qvjVAx9r50UkQi3a+HiEw2jqOnwXDyubpC/HwjUl62wZ0uK7e6x5b5GQTAmY/USl
 Xa2wUNmh9xG81f0BeYcjXOnx/CVRu9gfamtagtb2i+P0sFhI7LnNqYc556cXdz7s
 rIgfmDO4QjMLiE6b8jYmiRaOb1mK0mBq1s5WHroikRH+JqNtUp7CX0U9OY0rCeaf
 hj3TCEe/6BT378lb30KZ1ELkgBCs1050xXBozx0W9vfj4PwFEj4vzenpHtpE/A8H
 2xPTHrUW0uiQaqlohxeQ
 =nGaB
 -END PGP SIGNATURE-
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] When will ovirt add GPU/vGPU support in the admin portal ?

2015-01-19 Thread Daniel Helgenberger


On 19.01.2015 12:24, Martin Polednik wrote:


 - Original Message -
 From: Jorick Astrego j.astr...@netbulae.eu
 To: users@ovirt.org
 Sent: Monday, January 19, 2015 10:14:35 AM
 Subject: Re: [ovirt-users] When will ovirt add GPU/vGPU support in the admin 
 portal ?


 On 01/19/2015 02:33 AM, lof yer wrote:

 Since I recently saw cloudstack have add this(
 https://cwiki.apache.org/confluence/display/CLOUDSTACK/GPU+and+vGPU+support+for+CloudStack+Guest+VMs
 ).
 And iGVT(
 https://01.org/zh/xen/blogs/wangbo85/2014/intel-gvt-gxengt-pubic-release?langredirect=1)
 is released.
 If ovirt add this, it'll be very competitive for ovirt in VDI platforms.

 See below the response I got about 1 year ago, I don't know the current
 plans/status...

  Forwarded Message 
 Subject:Re: [Spice-devel] [Users] desktop virtualization and GPU
 support
 Date:   Wed, 16 Oct 2013 14:08:47 +0200
 From:   David Jaša dj...@redhat.com
 Reply-To:   spice-de...@lists.freedesktop.org, users users@ovirt.org
 CC: spice-de...@lists.freedesktop.org, users users@ovirt.org



 Hi,

 I'm afraid that none of these cards will work. IIRC it was explained for
 nVidia approach that it would be necessary to add their closed-source
 code to qemu which is not going to happen.
 You might have better luck with AMD card passthrough approach but I'm
 not sure if GPUs can be passed through qemu/kvm and if so, how the
 GPU-rendered image then gets displayed. So YMMV and don't expect much.

 There is a WIP effort for qemu though that is hardware vendor agnostic -
 it's based on creation of virtual GPU in qemu called Virgil that passes
 3D drawing commands to GPU on host. The project is in initial stage
 though so it won't be ready even for testing for quite some time. FWIW,
 there has been discussion about it on spice-devel in recent days and it
 will be presented on upcoming KVM forum so you can get pretty clear
 picture about its status from these sources.

 HTH,

 David

 Hello,

 There is quite active effort to implement device passthrough (including GPU,
 nics, usb etc.)[1].Physical GPU passthrough can be considered generic PCI
 passthrough
IMHO not quite in case of GPUs. I tested that recently with a 
combination of EL7's new default VFIO support [1]. Two things could be 
concluded working with Windows 7 guests and ATI Fire Pro GPUs:
- 'Old' PCI passthough unstable
- VFIO working and performing better (tested with Cinebench OpenGL [2], 
about 98% of the bare metal performance)

As for the stability, the results with VFIO where better in this case. 
The tricky part seems to be the driver installation in the guest, there 
the mandatory device probe in the installer. While PCI passthough 
resulted in Blue Screens, VFIO went though.

[1] 
https://access.redhat.com/sites/default/files/pages/attachments/rhel_whatsnewrhel7beta_techoverview_.pdf
[2] http://www.maxon.net/products/cinebench/overview.html


which should be ready for oVirt 3.6. As for the vGPU, that will
 depend on technology used - SR-IOV would be supported along PCI passthrough,
 anything else might need additional work on our side.

 [1] http://www.ovirt.org/Features/hostdev_passthrough

 mpolednik

 Met vriendelijke groet, With kind regards,

 Jorick Astrego

 Netbulae Virtualization Experts

 

  Tel: 053 20 30 270  i...@netbulae.euStaalsteden 4-3A
 KvK 08198180
  Fax: 053 20 30 271  www.netbulae.eu 7547 TA Enschede
 BTW NL821234584B01

 


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Low cost fencing/stonith devices

2015-01-16 Thread Daniel Helgenberger
Hello Mario,

great you ask that, I am pretty interested myself.

On 16.01.2015 12:31, Mario Giammarco wrote:
 Hello,
 I ask this question again to see if there are some improvements.

 I am searching for a low cost stonith/fencing device for servers or hardware
 that has no ipmi/ilo on board.

 I see that there are some interesting products on the market like ubnt/mfi
 mpower that are controllable power outlets but there is no driver for them.

 In my use case WOL support will be enough (using it with ssh or shared storage
 fencing) but as far as I know WOL is not yet supported in ovirt.

Please see [1] - I enclose Martin: What is the status of the Future 
Enhancements WOL; or better what needs to be done and how can we help?

I think we need a custom fence agent here, WOL in python is easily done 
[3] and the MAC filed could be mapped to one of the configurable items.

Though I find it harder working with the fence_agent concept itself. 
Atm, I did not have time to persue this subjct any futher.


 So is there some fencing device supported in 100/200$ price range?

One option would be networked PDU's [2] (here in Germany, they are 
around 200 Euro), maybe you can get some used ones. I think there is a 
list with supported devices though I cannot find it ATM.

If I get it correctly the idea would be to define the outlet as Power 
Management, and switch it on via PMP. Configure the hosts to boot at 
power restore. The host would be shutdown via SSH anyway; the PM device 
only used for start up.


[1] http://www.ovirt.org/Features/HostPowerManagementPolicy
[2] 
http://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=AP7920
[3] https://pypi.python.org/pypi/wakeonlan/0.2.2

 Thanks,
 Mario


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] supervdsmServer consumes 30% of host memory

2014-12-03 Thread Daniel Helgenberger


On 02.12.2014 22:16, Dan Kenigsberg wrote:
 On Tue, Dec 02, 2014 at 08:28:55PM +0100, Demeter Tibor wrote:
 Hi,

 We have a productive ovirt 3.5 cluster with 3 nodes.

 The first node has 40 gb of memory and running only one VM that use 8 gb of 
 ram.
 But the supervdsmserver consumes 20% of host memory.
 On the second node has 32 GB of memory with 5 VMs. On this node the 
 supervdsmserver using 30%(!) of memory!
 On the node3 there are 6 VMs with 72 GB of memory. But the supervdsm server 
 use only 1.7% of memory.

 Does anyone know why?

 most probably

  Bug 1142647 - supervdsm leaks memory when using glusterfs

 which would be fixed in ovirt-3.5.1. Unfortunately, it won't be released
 today - the released date has been postponed to Dec 9th.

 Since the two glusterfs issues (memleak and segfault) repeat so often,
 I've tagged vdsm-4.16.8 as a release candidate for ovirt-3.5.1.

 Sandro, could you help in building it and placing it somewhere for
 people to try it out? After all, it has 87 (!) patches since 3.5.0, so
 testing is due.
Good to know! Giving it a shot, upgrading went smoothly so far. I'll 
report back if something comes up.


 Regards,
 Dan.
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Auto start VM after host boots

2014-11-21 Thread Daniel Helgenberger


On 21.11.2014 12:41, Sven Kieske wrote:


 On 20/11/14 11:21, Daniel Helgenberger wrote:
 Hello,

 that feature would relate to 'High Availability' [1] - it is to be set
 on per VM - basis.

 [1]
 http://www.ovirt.org/OVirt_Administration_Guide#Virtual_Machine_High_Availability_Settings_Explained

 On 20.11.2014 10:04, mad Engineer wrote:
 Hi all i am trying ovirt 3.4.
 How can i auto start all vms once the host is up similar to setting 
 symlinks in
 /etc/libvirt/autostart

 Thanks



 Sadly this doesn't work for local storage, while /etc/libvirt/autostart
 would work.

 I know nobody likes local storage, but I guess it would be
 relatively easy to implement. Would it be worth to create an RFE for it?
+1
Never run into the THAT, but would have later on for sure. Thanks for 
raising the issue. Mind to post the RFE link here once you opened it?

Thanks!




-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Gluster command[UNKNOWN] failed on server ovhost1

2014-11-20 Thread Daniel Helgenberger


On 19.11.2014 15:58, Fumihide Tani wrote:
 Please help!

 I'm hosting an oVirt3.5 Engine server (CentOS6.5) and oVirt3.5 Host servers 
 (CentOS 7.0).

 Today, I have stopped all oVirt services (ovirt-engine and vdsmd) and updated 
 oVirt3.5 Engine server and ovirt3.5 Host server by yum update.
Just a guess since you do not mention this step; after an engine update 
it is *required* to run 'engine-setup'. See [1] for more info about 
upgrading oVirt engine.

[1] http://www.ovirt.org/OVirt_3.5_Release_Notes#Fedora_.2F_CentOS_.2F_RHEL

 While update, some new Gluster components were installed.

 After update, I tried to reboot ovirt3.5 Engine and Node servers, but oVirt 
 is not working.
 Portal's Events shows that:
 - Status of host ovhost1 was set to NonOperational.
 - Gluster command[UNKNOWN] failed on server ovhost1.

 My oVirt servers and VMs are not operational now.

 How to resolve?

 Many thanks,
 Fumihide Tani

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Auto start VM after host boots

2014-11-20 Thread Daniel Helgenberger
Hello,

that feature would relate to 'High Availability' [1] - it is to be set 
on per VM - basis.

[1] 
http://www.ovirt.org/OVirt_Administration_Guide#Virtual_Machine_High_Availability_Settings_Explained

On 20.11.2014 10:04, mad Engineer wrote:
 Hi all i am trying ovirt 3.4.
 How can i auto start all vms once the host is up similar to setting symlinks 
 in
 /etc/libvirt/autostart

 Thanks


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] VMs guest with Mac OS X on board

2014-11-19 Thread Daniel Helgenberger
This is an interesting topic, witch might prove not interoperable with 
the oVirt project's approach on things (free software).

So, the short answer here is: No, does not work and might take a (long) 
while to work out of the box in oVirt (if ever).
While it is possible with kernel 3.15 and very new qemu versions, I 
consider it as highly experimental and there are numerous issues [1].
These range from technical (UEFI, SMC...) to licensing issues here. You 
are only allowed to run MacOS on Apple hardware.

IIRC only VM ware has some propitiatory setup witch enables MacOS 
visualization, done (partly) with some support of Apple.


On 19.11.2014 12:39, Grzegorz Szypa wrote:
 Hi Expert.

 Is it possible to install virtual machines running Mac OS X on board.

 I trying booting VM with mac os x ISO but it is ending with failed:
 Boot failed: could not read the boot disk
MacOS requires UEFI: Booting it with standard SeaBios is not possible. 
Also, the qemu version you use is likely to old, you need at least 2.1
Then, you need at least two things:
- a patched sea bios version
- to integrate chamelion in some way [2].

If you can manage this, I would be interested in how you got it working!

I would start to try this with standard fedora 20 and kvm.




 --
 G.Sz.


[1] http://www.contrib.andrew.cmu.edu/~somlo/OSXKVM/
[2] http://chameleon.osx86.hu/
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Engine: Get guest XML dump

2014-11-19 Thread Daniel Helgenberger
Hello,

after working with Foreman for a while come to love the yaml dump 
feature for hosts as it proved invaluable for debugging and setups [1].

After some questions on the list here if for instance libgfapi is being 
used I think such a feature also might prove useful in oVirt.
Right now, I log into the host running the vm and to this with virsh 
dumpxml.
I imagine something like - right click on a guest and choose 'XML 
dump'; or a XML tap in the VM edit window.

If somebody else thinks this is useful too, I will open a RFE.

Cheers,

[1] https://www.youtube.com/watch?v=Ksr0tilbmcc#t=78

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Power Management - but no LO?

2014-11-19 Thread Daniel Helgenberger
Hello Eli,

thanks for getting back to me. Sadly the matter does not seem quite 
clear for me right now; at least I have to read deeper into fence agents.

On 19.11.2014 10:26, Eli Mesika wrote:


 - Original Message -
 From: Daniel Helgenberger daniel.helgenber...@m-box.de
 To: users@ovirt.org
 Sent: Tuesday, November 18, 2014 5:46:07 PM
 Subject: [ovirt-users] Power Management - but no LO?

 Hello,

 I am toying an idea involving using oVirt's PM capabilities (esp. the
 cluster power_saving policy) in conjuration with some consumer grate
 hosts for raw compute applications.

 Now, these hosts do not have any lights out or BMC capabilities.
 However, they could be started with WOL packets.

 Is there a way how this can be done in oVirt? Shutting down hosts with
 ssh and starting them with WOL?

 Yes, but you will have to write your own custom fencing script for that and 
 configure it as explain in
 http://www.ovirt.org/Custom_Fencing (look in the oVirt 3.5 section)
Is there any more documentation available? I found some older docs [1], 
are they still valid?
I struggle with how the mapping is done from parameters in the PM tab to 
functions in my fence agent, how it is passed to it and how it gets 
called in the end.
As I understood so far, oVirt needs to proxy PM/fencing operations and 
is using one host of the cluster for fencing; and PM the appropriate 
device. Also, I can use engine-config register the fence agent as well 
as to map some generic fields.


 If you need any details, please ask but mainly you should look on the scripts 
 in the fence-agents package (/usr/sbin/fence_*) and write something that 
 supports the common flags used by those scripts
Some basic design concepts I thought of so far:
I assume the virsh fence agent could work for me. It ssh's to the host. 
I would call shutdown in this case I think?
Further, while compiling the appropriate WOL packet seems trivial in 
python, I need to map an NIC MAC address witch I could get from a 
parameter in the PM setup. But in this case, any host could be used 
execute the script; preferring the engine in this case? Or is this a bad 
approach for some reason? (Assuming the NIC is part of ovirt management 
net).

I think I can manage to do this once I have figured out the basic stuff. 
Strangely, though I found posts by people who also tried to attempt a 
WOL fence agent this as not been accomplished it seems. Can you think of 
a reason? (I can think of shutdown, witch needs ssh to be done).

Thanks for any help on the issue.

[1] http://www.ovirt.org/Features/HostPMProxyPreferences



 Thanks!

 --
 Daniel Helgenberger
 m box bewegtbild GmbH

 P: +49/30/2408781-22
 F: +49/30/2408781-10

 ACKERSTR. 19
 D-10115 BERLIN


 www.m-box.de  www.monkeymen.tv

 Geschäftsführer: Martin Retschitzegger / Michaela Göllner
 Handeslregister: Amtsgericht Charlottenburg / HRB 112767
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Power Management - but no LO?

2014-11-18 Thread Daniel Helgenberger
Hello,

I am toying an idea involving using oVirt's PM capabilities (esp. the 
cluster power_saving policy) in conjuration with some consumer grate 
hosts for raw compute applications.

Now, these hosts do not have any lights out or BMC capabilities. 
However, they could be started with WOL packets.

Is there a way how this can be done in oVirt? Shutting down hosts with 
ssh and starting them with WOL?

Thanks!

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Which machine provides the computing power for the clients?

2014-11-17 Thread Daniel Helgenberger
On 17.11.2014 09:46, Harald Wolf wrote:
 Hi, im not sure if understand the oVirt concept right. Is the oVirt node
 hypervisor the machine that provides the computing power for the client 
 consoles
 (User Applications)? Is the VM running on the node Hypervisor?
 Can i use 1 PC for the complete oVirt environment + the consoles?

I strongly suggest you read the admin guide prior to deploying oVirt to 
get familiar with the concepts. The introduction holds all the answers 
already [1]. If something is unclear, please get back here or file a RFE 
[2] if you find any errors/unclear things. I also wrote a brief 
breakdown answering your first mail [3].

Cheers!

[1] http://www.ovirt.org/OVirt_Administration_Guide#oVirt_Architecture
[2] https://bugzilla.redhat.com
[3] https://www.mail-archive.com/users%40ovirt.org/msg22615.html

 --
 Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Status libgfapi support in oVirt

2014-11-17 Thread Daniel Helgenberger
Hello Joop,

thanks for raising the issue as it is one of the things I assumed are 
already implemented and working.

Sadly I cannot provide any answer ...

On 17.11.2014 09:39, Joop wrote:
 I have been trying to use libgfapi glusterfs support in oVirt but can't
 get it to work. After talks on IRC it seems I should apply a patch
 (http://gerrit.ovirt.org/33768) to enable libgf BUT I can't get it to
 work. Systems used:
 - hosts Centos7 or Fedora20 (so upto date qemu/libvirt/oVirt(3.5))
 - glusterfs-3.6.1
 - vdsm-4.16.0-524.gitbc618a4.el7.x86_64 (snapshot master 14-nov)
 - vdsm-4.16.7-1.gitdb83943.el7.x86_64 (official ovirt-3.5 vdsm, seems
 newer than master snapshot?? )

 Just adding the patch to vdsm-4.16.7-1.gitdb83943.el7.x86_64 doesn't
 work, vdsm doesn't start anymore due to an error in virt/vm.py.

 Q1: what is de exact status of libgf and oVirt.
 Q2: how do I test that patch?

 Joop


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Latest ovirt-node release/installation

2014-11-14 Thread Daniel Helgenberger


On 13.11.2014 20:58, Christopher Young wrote:
 I sincerely hope that this is not answered elsewhere as I've done several
 searches and have yet to find a solid answer.  I have three (what I believe to
 be) basic questions (with perhaps some subs there):

 1)  What is the latest oVirt-node release and where would one download it (I
 appear to only see 3.4 -based releases of the ISO available)?  It is 3.5-based
 and/or is there an upgrade path?  Which glusterfs release is currently 
 included
 with oVirt-node?

I take the liberty to add Fabian to this thread.
Here is the link to the most current node release:

http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ovirt-node-iso-3.5.0.ovirt35.20140912.el6.iso
see [1]


 2) As I understand it, newer releases of oVirt-node allow you to do an
 installation of the self-hosted engine at this time.  Is that correct?
Be aware, this is not a stable release ATM but provides HE features. 
This works quite cleverly by fetching an OVF offline engine install.


 3) Is there any functionality that one would be losing out on by deploying 
 oVirt
 via oVirt-node vs. using full-OS installation?  Which is the more recommended?
Here I go along with Sven's notes for most of the part. The node project 
is quite ambitious. You might have some troubles with special hardware. 
Esp. SELinux is a real challenge, also EL7 with systemd. But if you want 
(many) lightweight hosts witch standard hardware and an easy deployment 
cycle, node is for you. Give it a try and see if it suits your needs and 
share your experience...



 Again, I apologize if these questions are covered somewhere, but I felt like
 asking them in a direct fashion so as to clear up my own ignorance.  I
 appreciate any feedback and information that you could share.

 Thanks,

 Chris



[1] Fabian's announcement
Hey,

to be able to give Node a go on the oVirt 3.5 TestDay, we provide a 
fresh build of Node including the 3.5rc2 package here:

http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ovirt-node-iso-3.5.0.ovirt35.20140912.el6.iso

We did not see any SELinux denials, but if you experience any problems, 
please try to install Node in permissive mode by appending
  enfcoring=0
during the installation.

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Node hypervisor

2014-11-14 Thread Daniel Helgenberger
Hello Harald,
welcome to the ovirt mailing list!

On 14.11.2014 14:35, Harald Wolf wrote:
 Hi,
 I am a oVirt newbie. I have installed oVirt Engine using Fedora 20 and the 
 Qick
 Start Guide it runs fine and manage it per web interface. Now is stuck at 
 2.2.1
Where exactly is the issue there? Please point to the exact doc you are 
refeffing to.
There are several versions and flavors of ovirt (3.4 branch plus minor 
version, 3.5 branch , nightlies; AllInOne, Hosted Engine, 'Normal' 
Engine). For future posts, it is quite helpful if you supply this.

Also, be aware of some general oVirt terminology:
- The (oVirt) Engine is the controller and data collector for your guests,
- A 'Host' is generally a physical machine used to run guests on,
- Hosts are grouped together in clusters of similar hardware providing 
migration and other capabilities,
- A Datacenter is a logical entity of clusters (hosts) and storage 
connections, networks, disks, ect. shared between them;
- VDSM is the daemon running on the hosts to make this all happen; 
imagine it as a super process for qemu processes.

 Install oVirt Node. I have installed the node hypervisor and it is working.
 BUT what is it good for?
 Whats the purpose of it?
The above said, you basically need a psychical or virtual machine for 
the Engine and some additional hosts to run your guests (not true for 
AllInOne; witch should IMHO only used for demo/lab purposes.

Imagine oVirt Node as something similar to EXi hypervisor; it is an imae 
containing all the stuff you need to add a machine as host to ovirt. The 
same can be achived by installing ovirt from the repos on a (preferring 
minimal) CentOS, RHEL, Fedora install.

 Is a ¨node¨ a end user machine that uses a virtual machine?
 Finally i want a Windows 7 virtualistion.
There is no problem with that and Windows is very well supported as 
guest OS.
For all of those, have a look on the excellent ovirt admin Guide [1]. 
This is still for oVirt 3.4 - but most of the stuff is true for 3.5 as well.

Have fun with oVirt!
 --
 Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.


[1]
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Node hypervisor

2014-11-14 Thread Daniel Helgenberger
Sorry, forgot the link in [1]:
http://www.ovirt.org/OVirt_Administration_Guide

On 14.11.2014 15:11, Daniel Helgenberger wrote:
 Hello Harald,
 welcome to the ovirt mailing list!

 On 14.11.2014 14:35, Harald Wolf wrote:
 Hi,
 I am a oVirt newbie. I have installed oVirt Engine using Fedora 20 and the 
 Qick
 Start Guide it runs fine and manage it per web interface. Now is stuck at 
 2.2.1
 Where exactly is the issue there? Please point to the exact doc you are
 refeffing to.
 There are several versions and flavors of ovirt (3.4 branch plus minor
 version, 3.5 branch , nightlies; AllInOne, Hosted Engine, 'Normal'
 Engine). For future posts, it is quite helpful if you supply this.

 Also, be aware of some general oVirt terminology:
 - The (oVirt) Engine is the controller and data collector for your guests,
 - A 'Host' is generally a physical machine used to run guests on,
 - Hosts are grouped together in clusters of similar hardware providing
 migration and other capabilities,
 - A Datacenter is a logical entity of clusters (hosts) and storage
 connections, networks, disks, ect. shared between them;
 - VDSM is the daemon running on the hosts to make this all happen;
 imagine it as a super process for qemu processes.

 Install oVirt Node. I have installed the node hypervisor and it is working.
 BUT what is it good for?
 Whats the purpose of it?
 The above said, you basically need a psychical or virtual machine for
 the Engine and some additional hosts to run your guests (not true for
 AllInOne; witch should IMHO only used for demo/lab purposes.

 Imagine oVirt Node as something similar to EXi hypervisor; it is an imae
 containing all the stuff you need to add a machine as host to ovirt. The
 same can be achived by installing ovirt from the repos on a (preferring
 minimal) CentOS, RHEL, Fedora install.

 Is a ¨node¨ a end user machine that uses a virtual machine?
 Finally i want a Windows 7 virtualistion.
 There is no problem with that and Windows is very well supported as
 guest OS.
 For all of those, have a look on the excellent ovirt admin Guide [1].
 This is still for oVirt 3.4 - but most of the stuff is true for 3.5 as well.

 Have fun with oVirt!
 --
 Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.


 [1]


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Balloon driver unavailable

2014-11-12 Thread Daniel Helgenberger
On 12.11.2014 08:59, Karli Sjöberg wrote:
 On Wed, 2014-11-12 at 08:35 +0100, Demeter Tibor wrote:
 Hi,


 I have a lot of centos 6 based vms and I have install ovirt guest
 agent for those vms.
 But two vm always say The balloon driver on xxxvm on hostX is
 requested but unavailable
 I did check the virtio_balloon module are loaded on vms.


 Anybody can me help?


 Thanks in advance


 Tibor

 I see that too, but only on Windows 2008 R2 guests... No one else ever
 said anything about it, so I thought it was just me:)
Hehe, just the same here.
I see this only on VM startup, though.

I thought this might be because the balloon driver needs the guest agent 
to work and obviously this is not loaded yet. I assume further 
ballooning resumes normal operation later on?






-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] http://www.ovirt.org/Features/ForemanIntegration

2014-11-11 Thread Daniel Helgenberger
Hello Yaniv,

thank you!

On 10.11.2014 10:04, ybronhei wrote:
 For those who interested, I merged the pages ForemanIntegration and
 AdvancedForemanIntegration to ease the search.

 The page includes full description about the current integration we have
 with foreman [aka satellite\katello], the future plans, how to setup
 environment for testing and production and more illustrations to make it
 easier to follow

 feel free to comment about that (directly to me or to the list) and you
 more than welcome to try that at home :)
I think there might be still the issue I ran into:

A prerequisite to adding Foreman external provider in oVirt is (at least 
for me) that Foreman has *ruby193-rubygem-ovirt_provision_plugin* rpm 
installed. Otherwise the test will fail with:
Failed with error PROVIDER_FAILURE and code 5050

Sp, on the foreman host one needs to do:
yum install ruby193-rubygem-ovirt_provision_plugin

Also, please note there is an issue users might run into at this step, 
so it may be worth noting.
Foreman integration will fail altogether on Engines running = El6.5 
because of an too old jdk version not supporting DH keys larger then 
1024 byte [1].
This is not an issue in oVirt and will never be resolved. Luckily, 
upgrading to the latest openjdk 
(java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el6.x86_64) solves the issue (on 
the ENGINE!)

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749

 Thanks


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] http://www.ovirt.org/Features/ForemanIntegration

2014-11-11 Thread Daniel Helgenberger


On 11.11.2014 13:46, ybronhei wrote:
 Hey Daniel,
 Thanks for your comments.
 First, I do mention the requirement for having ovirt_provision_plugin
 installed in bullet 2:
 Add oVirt Provision Plugin: yum install
 ruby193-rubygem-ovirt_provision_plugin \ foreman-installer
 --enable-foreman-plugin-ovirt-provision (Not available yet)
 
Indeed, I read that. My reasoning at this point it might be too late in 
the text. Users (me included) already have tried this at this point 
using the pictured guide and failing because of the missing provider.

This is the point witch was entirely unclear for me in my first attempt 
and it took me a while to find out.

While the discovery plugin is needed (only) for Bare-Metal Provisioning, 
the ovirt provider is always needed for the integration to succeed.

I did think about a hint early on describing the workflow briefly in the 
detailed description section:
- Make sure Foreman is running at version X
- Install RPMs in Foreman (see Bare-Metal Provisioning)
- Go to engine, Adding foreman provider



 next foreman build foreman-installer will include the
 --enable-foreman-plugin-ovirt-provision option which will make it
 easier. its already merged.
This is great to know!


 Second, about the openjdk issue, I don't think it worth to mention. I'll
 add to the Current Status section that the integration is supported
 over rhel6.6 and above.
This will do here.


 Yaniv Bronhaim.

 On 11/11/2014 02:38 PM, Daniel Helgenberger wrote:
 Hello Yaniv,

 thank you!

 On 10.11.2014 10:04, ybronhei wrote:
 For those who interested, I merged the pages ForemanIntegration and
 AdvancedForemanIntegration to ease the search.

 The page includes full description about the current integration we have
 with foreman [aka satellite\katello], the future plans, how to setup
 environment for testing and production and more illustrations to make it
 easier to follow

 feel free to comment about that (directly to me or to the list) and you
 more than welcome to try that at home :)
 I think there might be still the issue I ran into:

 A prerequisite to adding Foreman external provider in oVirt is (at least
 for me) that Foreman has *ruby193-rubygem-ovirt_provision_plugin* rpm
 installed. Otherwise the test will fail with:
 Failed with error PROVIDER_FAILURE and code 5050

 Sp, on the foreman host one needs to do:
 yum install ruby193-rubygem-ovirt_provision_plugin

 Also, please note there is an issue users might run into at this step,
 so it may be worth noting.
 Foreman integration will fail altogether on Engines running = El6.5
 because of an too old jdk version not supporting DH keys larger then
 1024 byte [1].
 This is not an issue in oVirt and will never be resolved. Luckily,
 upgrading to the latest openjdk
 (java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el6.x86_64) solves the issue (on
 the ENGINE!)

 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749

 Thanks





-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] http://www.ovirt.org/Features/ForemanIntegration

2014-11-11 Thread Daniel Helgenberger


On 11.11.2014 16:09, ybronhei wrote:
 On 11/11/2014 03:25 PM, Daniel Helgenberger wrote:


 On 11.11.2014 13:46, ybronhei wrote:
 Hey Daniel,
 Thanks for your comments.
 First, I do mention the requirement for having ovirt_provision_plugin
 installed in bullet 2:
 Add oVirt Provision Plugin: yum install
 ruby193-rubygem-ovirt_provision_plugin \ foreman-installer
 --enable-foreman-plugin-ovirt-provision (Not available yet)
 
 Indeed, I read that. My reasoning at this point it might be too late in
 the text. Users (me included) already have tried this at this point
 using the pictured guide and failing because of the missing provider.

 This is the point witch was entirely unclear for me in my first attempt
 and it took me a while to find out.

 While the discovery plugin is needed (only) for Bare-Metal Provisioning,
 the ovirt provider is always needed for the integration to succeed.

 I did think about a hint early on describing the workflow briefly in the
 detailed description section:
 - Make sure Foreman is running at version X
 - Install RPMs in Foreman (see Bare-Metal Provisioning)
 - Go to engine, Adding foreman provider
 I don't see why the current way we arrange the page is misleading.
Sorry if this is unclear. But:

For the Test button in Add external provider in Engine GUI to work, 
one *needs* do this on the Foreman host:
# yum install ruby193-rubygem-ovirt_provision_plugin

If this this assumption is true (it was for me reproducible) 
Foreman/oVirt communication will fail.
Therefore I am still convinced it is reasonable to put this as the first 
step before ever trying to add the provider in oVirt.*

The other things, like bare metal prov. and so on are optional.
Installing the oVirt - provider on the Foreman host is not.


 We have under Detailed Description 3 levels which have different
 prerequisites -
 Adding installed Foreman hosts as oVirt hosts - which just requires
 foreman setup,
To make this clear, this is not correct since the default foreman setup 
does not have the oVirt provider module installed. There are some use 
cases where Foreman is added because of oVirt, and some will have 
Foreman already runningin their infra. In this case, foreman-installer 
was already run.


* At least I was struggling with this requirement. Truth be told, 
Foreman was one point on a (very long) check list of mine; so I might 
not have paid proper attention to the details. OTOH the document 
suggested a strait forward approach with nice details and icons on how 
to do it oVirt. For instance, when I got to the section Bare Metal 
Provisioning I looked briefly over the requirements and decided to do 
this later on. Wrong here, since there is what I need to get it running 
in the first place!
The other issue, having two different (one obsolete) ForemanIntegration 
docs, is solved now.

 Bare-Metal Provisioning - which requires many things. starts with the
 ovirt plugin, discovery plugin, configuration of hostgroups
 computeresource medias and ends with setting the provisioning templates
 accordingly for node installation.

 and last - Future Plans: VM provisioning which still in declaration phase.



 next foreman build foreman-installer will include the
 --enable-foreman-plugin-ovirt-provision option which will make it
 easier. its already merged.
 This is great to know!


 Second, about the openjdk issue, I don't think it worth to mention. I'll
 add to the Current Status section that the integration is supported
 over rhel6.6 and above.
 This will do here.


 Yaniv Bronhaim.

 On 11/11/2014 02:38 PM, Daniel Helgenberger wrote:
 Hello Yaniv,

 thank you!

 On 10.11.2014 10:04, ybronhei wrote:
 For those who interested, I merged the pages ForemanIntegration and
 AdvancedForemanIntegration to ease the search.

 The page includes full description about the current integration we have
 with foreman [aka satellite\katello], the future plans, how to setup
 environment for testing and production and more illustrations to make it
 easier to follow

 feel free to comment about that (directly to me or to the list) and you
 more than welcome to try that at home :)
 I think there might be still the issue I ran into:

 A prerequisite to adding Foreman external provider in oVirt is (at least
 for me) that Foreman has *ruby193-rubygem-ovirt_provision_plugin* rpm
 installed. Otherwise the test will fail with:
 Failed with error PROVIDER_FAILURE and code 5050

 Sp, on the foreman host one needs to do:
 yum install ruby193-rubygem-ovirt_provision_plugin

 Also, please note there is an issue users might run into at this step,
 so it may be worth noting.
 Foreman integration will fail altogether on Engines running = El6.5
 because of an too old jdk version not supporting DH keys larger then
 1024 byte [1].
 This is not an issue in oVirt and will never be resolved. Luckily,
 upgrading to the latest openjdk
 (java-1.7.0-openjdk-1.7.0.71-2.5.3.1.el6.x86_64) solves the issue (on
 the ENGINE!)

 [1] https

Re: [ovirt-users] replace ovirt engine host

2014-11-07 Thread Daniel Helgenberger

Daniel Helgenberger
m box bewegtbild GmbH

ACKERSTR. 19 P:  +49/30/2408781-22
D-10115 BERLIN F:  +49/30/2408781-10

www.m-box.dehttp://www.m-box.de
www.monkeymen.tvhttp://www.monkeymen.tv

Gesch?ftsf?hrer: Martin Retschitzegger / Michaela G?llner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
On 07.11.2014, at 15:24, Koen Vanoppen 
vanoppen.k...@gmail.commailto:vanoppen.k...@gmail.com wrote:

Hi,

We had a consulting partner who did the same for our company. This is his 
procedure and worked great:

How to migrate ovirt management engine
Packages
Ensure you have the same packages  versions installed on the destination 
hostas on the source, using 'rpm -qa | grep ovirt'. Make sure versions are 
100%identical.
Default setup

Run 'engine-setup' on the destination host after installing the packages. Use
the following configuration:
1.Backup existing configuration
2.On the source host, do:
You might want your consultant take a look on [1]...
Steps a-3d:
engine-backup mode=backup --file=~/ovirt-engine-source --log=backup.log

a.service ovirt-engine stop
b.service ovirt-engine-dwhd stop
c.mkdir ~/backup
d.tar -C /etc/pki/ovirt-engine -czpf ~/backup/ovirt-engine-pki.tar.gz .
e.tar -C /etc/ovirt-engine -czpf ~/backup/ovirt-engine-conf.tar.gz .
f.cd /usr/share/ovirt-engine/dbscripts
g../backup.sh
h.mv engine_*.sql ~/backup/engine.sql
3.You may also want to backup dwh  reports:
a.cd /usr/share/ovirt-engine/bin/
b../engine-backup.sh --mode=backup --scope=db --db-user=engine 
--db-password=XXX --file=/usr/tmp/rhevm-backups/engine-backup 
--log=/tmp/engine-backup.log
c../engine-backup.sh --mode=backup --scope=dwhdb --db-user=engine 
--db-password=XXX --file=/usr/tmp/rhevm-backups/dwh-backup 
--log=/tmp/engine-backup.log
d../engine-backup.sh --mode=backup --scope=reportsdb --db-user=engine 
--db-password=XXX --file=/usr/tmp/rhevm-backups/reports-backup 
--log=/tmp/engine-backup.log
4.Download these backup files, and copy them to the destination host.
Restore configuration
1.On the destination host, do:
Again, steps a-h, basically
engine-setup
engine-cleanup
engine-backup mode=restore --file=~/ovirt-engine-source --log=backup.log

also, I would run a second
engine-setup
After that, you should be good to go..

Of course, depending on your previous engine setup this could be a little more 
complicated. Still, quite strait forward.
[1] http://www.ovirt.org/Ovirt-engine-backup
a.service ovirt-engine stop
b.service ovirt-engine-dwhd stop
c.cd backup
d.tar -C /etc/pki/ovirt-engine -xzpf ovirt-engine-pki.tar.gz
e. tar -C /etc/ovirt-engine -xzpf ovirt-engine-conf.tar.gz
f. tar -xvjf engine-backup
g. tar -xvjf dwh-backup
h. tar -xvjf reports-backup
 
Restore Database
1.On the destination host do:
a.su - postgres -c psql -d template1 -c 'drop database engine;'
b. su - postgres -c psql -d template1 -c 'create database engine owner 
engine;'
c. su - postgres
d. psql
e.  \c engine
f.  \i /path/to/backup/engine.sql
NOTE: in case you have issues logging in to the database, add the following
  line to the pg_hba.conf file:

   hostallengine127.0.0.1/32http://127.0.0.1/32trust

2.Fix engine password:
a.su - postgres
b. psql
c.alter user engine with password 'XXX';
Change ovirt hostname
On the destination host, run:

 /usr/share/ovirt-engine/setup/bin/ovirt-engine-rename








NB:
Restoring the dwh/reports database is similar to steps 5-7, but omitted from
this document due to problems starting the reporting service.


2014-11-07 10:28 GMT+01:00 Sven Kieske 
s.kie...@mittwald.demailto:s.kie...@mittwald.de:


On 07/11/14 10:10, Ml Ml wrote:
 anyone? :)

 Or are you only doing backups, no restore? :-P

gladly I just had to test disaster recovery and not actually
 perform it (yet) :D

To be honest: I never  have restored ovirt-engine with running vdsm
hosts connected to it, sounds like a lot of fun, I see if I can
grab some time and try this out myself :)

By your description I guess you have nfs/iso domain on your engine host?
why don't you just seperate it, so no need for remounts
if your engine is destroyed.

HTH

--
Mit freundlichen Gr??en / Regards

Sven Kieske

Systemadministrator
Mittwald CM Service GmbH  Co. KG
K?nigsberger Stra?e 6
32339 Espelkamp
T: +49-5772-293-100tel:%2B49-5772-293-100
F: +49-5772-293-333tel:%2B49-5772-293-333
https://www.mittwald.de
Gesch?ftsf?hrer: Robert Meyer
St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen
Komplement?rin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
___
Users mailing list
Users@ovirt.orgmailto:Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.orgmailto:Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Foreman: Add external provider (Failed with error PROVIDER_FAILURE and code 5050)

2014-11-06 Thread Daniel Helgenberger


On 06.11.2014 05:47, Oved Ourfali wrote:
 These steps are also in the feature page
Thanks Oved for pointing to the doc; my bad. I was using the foreman 
integration document [1]. Maybe the pages should be merged?

 , but it would be nice if you review them to see nothing is missing.

 http://www.ovirt.org/Features/AdvancedForemanIntegration
With foreman 1.6 (at least) there is no need to enable the nightly 
builds any more as rb-ovirt is resolved by yum.

Lastly, I think you need to enable foreman_discovery with the foreman 
installer to work and download images:

# foreman-installer --enable-foreman-plugin-discovery 
--foreman-plugin-discovery-install-images=true

You have that already listed in the testing env setup; but this needs to 
be put in context with installing foreman-ovirt on the foreman host.

 Thanks
 Oved

[1] http://www.ovirt.org/Features/ForemanIntegration

 On Nov 6, 2014 12:40 AM, Daniel Helgenberger daniel.helgenber...@m-box.de 
 wrote:

 Answering my own question; and maybe a very obvious cause for the
 failing provider: the missiAnswering my own question; and maybe a very 
 obvious cause for the
 failing provider: the missing provider plugin in forman!
 So one needs to do:

 yum install ruby193-rubygem-ovirt_provision_plugin

 on the foreman host.

 After that, the connection test in the engine comes up positive. Sadly,
 this is not documented anywhere; only on the GitHub repo readme [1].
 This is also a little bit outdated, as the rbovirt dependency is
 resolved now automatically.

 Also, but I am not sure, the porvider lugin needs the foreman_discovery
 plugin to work:

 yum install ruby193-rubygem-foreman_discovery

 [1]
 https://github.com/theforeman/ovirt_provision_plugin/blob/master/README.md

 On 29.10.2014 00:36, Daniel Helgenberger wrote:
 Hello,

 did anyone actually get this working in oVirt 3.5 / EL6 - Engine? I am
 trying this for two days now.

 Setup:
 Engine; EL6.5
 Foreman; EL6.5

 Foreman seems to do it's as I can use it to deploy hosts and also smart
 proxies are running fine.

 I have opened a BZ [1]; because this really can not work out of the box
 with EL6 plain vanilla packages. I wonder if this was ever tested... ?
 Java 7 used i n EL6 [4] does only support DH keys up to 1024byte. This
 is known issue in Foreman [2] as longer DH keys are now used by default
 in Foreman / PuppetCA.
 A dirty fix confirmed working is adding default DH parameters to the
 foreman cert; effectively disabling it [3].

 So I got SSL working and I get beyond the authentication (entering wrong
 data gets me auth errors)- however, I am still not able to add the
 external provider. Pressing 'test' results in
 (Failed with error PROVIDER_FAILURE and code 5050)

 Sample engine.log
 2014-10-28 23:49:40,860 ERROR
 [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand]
 (ajp--127.0.0.1-8702-1) [6a3da4e7] Command
 org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand throw
 Vdc Bll exception. With error message VdcBLLException: PROVIDER_FAILURE
 (Failed with error PROVIDER_FAILURE and code 5050)

 I can't find any more hints in oVirt; access logs in Foreman are telling
 me API queries by the engine. Did I miss a crucial step in the foreman
 setup? How can I debug this issue?

 I am willing to upgrade openjdk; provided this does not break my engine...

 Thanks!

 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749
 [2] https://tickets.puppetlabs.com/browse/SERVER-17
 [3] http://httpd.apache.org/docs/current/ssl/ssl_faq.html#javadh
 [4] java-1.7.0-openjdk-1.7.0.65-2.5.1.2.el6_5.x86_64



-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Can some one share the use cases for the local storage?

2014-11-06 Thread Daniel Helgenberger


On 06.11.2014 09:44, Sven Kieske wrote:


 On 06/11/14 09:15, Arman Khalatyan wrote:
 Hi,
 I would like to understand the local storage purpose.
 I was wondered are there any production systems using local storage?
 Or in another way, how to use effectively the local hosts disks?
 My ovirt purpose is so serve HA-VM LAMPs.

 Well yes there is local storage in production at various sites.
 For real HA you inevitable need a shared storage solution.
An example and 'real' use case to Svens answer:
The term 'local' might indeed a bit misleading. The posix file system 
option basically lets you use anything posix compliant. For instance I 
am using a cluster file system called StorNext in our company - witch is 
very well suited for use with oVirt. Without POSIX, I could not have 
used it.


 You could try to utilize local disks by using gluster ceph
 or any other software defined storage system.

 Gluster is the most integrated withing ovirt, but here are some
 caveats:

 It's not encouraged to run vms on the hosts which are part of the
 gluster cluster (but it works, at least this is what you can read on
 this very ML).

 It's not supported to run hosted-engine on top of gluster, at least
 not without a replica count of at least 3.
Posix enables usage of GlusterFuseFS. However, it might be the case the 
replica 3 is only needed when using FuseFS [1], independent from the 
fact of using Gluster and Compute on the same host.



 HTH

[1] http://www.mail-archive.com/users@ovirt.org/msg22416.html
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] [RFI] oVirt 3.6 Planning

2014-11-05 Thread Daniel Helgenberger


On 04.11.2014 09:47, Fabian Deutsch wrote:
 - Original Message -
 On Sun, Sep 14, 2014 at 03:17:39PM +0300, Itamar Heim wrote:
 On 09/12/2014 03:22 PM, Itamar Heim wrote:
 With oVirt 3.5 nearing GA, time to ask for what do you want to see in
 oVirt 3.6?


 Even the short list of items mentions so far are big features we would need
 to do justice with.
 this means probably a slightly longer cycle than the 6 months we currently
 do.

 We're not so good in keeping up with deadlines - our recent 3.5 version
 slipped for 2.5 months past the original plan. With longer cycles, this
 is even harder to control.

 Can we instead break the heavier features to smaller phases, that are
 easier to maintain, and deliver the complete feature in 3.7?

 Hey,

 yep, I think this is a good idea to get control over the big features.

 - fabian
Me too, for that matter. I think json rpc was a major thing to do witch 
went well; but maybe drew resources from other features and testing.

But maybe new features do not need to be scrubbed but implemented later 
on for upgrades? For instance, some software vendors allow new features 
for X.0 releases only for new installations. Only after they are 
confirmed working regression - free a X.1 version is released witch 
enables upgrades from X-1 (existing customers).

Bottom line, I hope for planned 3.6 features like SR-IOV and pci 
passthrough/vfio will not be postponed :)


 with many of the features requiring way newer versions of some of the
 components, I think we should plan for 3.6 cluster to require an .el7
 host
 (expecting even 7.1 to be out before we release oVirt 3.6).

 so i want us to plan for:
 - oVirt 3.6 supports .el6 and .el7 hosts in 3.5 cluster (and for fedora
- fc20?)
 - oVirt 3.6 supports .el7 in 3.6 cluster (and for fedora - fc21?)
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Protecting the storage of the self hosted engine

2014-11-05 Thread Daniel Helgenberger


On 05.11.2014 15:30, wodel youchi wrote:
 Hi, I am new on oirt.
Hello and welcome!


 I want to know the best way to protect the storage of the hosted-engine?
IHMO reliable hardware and contingency plans.


 In Ovirt3.5, only NFS and iSCSI are supported for the engine VM, so this means
 that the NFS server or the iSCSI volume become the weak link.
First we need to define 'weak link'. IMOH this can be Network and / or 
storage hardware like controllers and spindles (SSDs). As the later 
tends to be reliable I think your mean indeed the data link layer as 
'weak link'?

Gluster can be the same weak link for instance, as it needs a network 
layer. If you use iSCSI together with some storage appliance maybe with 
redundant controllers, this setup is quite reliable and engine storage 
is protected if you use iSCSI Multipath (and the paths are indeed 
separate hardware switches).

You could call NFS a weak link; but even there are quite reliable setups 
available witch support fail over, replicated storage and IPMP.


 I've read two articles, one using GlsuterFS+NFS and CTDB for High availability
 of the engine storage,: oVirt 3.4, Glusterized
I have to warn you at this point. This setup seems quite tempting; even 
using localhost addresses with gluster's build in NFS. This was tried 
before (myself included) but it is far from stable.

You would at least need repica 3 gluster volumes to avoid split brains. 
These seem to happen quite often. I include Martin here, we talked about 
this at the ovirt workshop in Düsseldorf; maybe he can provide a better 
explanation.

AFAIK gluster will be supported as engine storage in the future; but 
this is not the case right now. Of course, you are welcome to try!

That said, and because you are new to ovirt, the main thing you need to 
protect is not the engine storage, but your production data domains.

The VMs will run fine and continue to run with the engine down or not 
available. In case of a real disaster, you will be able to import these 
storage domains along with their VMs to a new engine.

For me, I tend to have my engine backed up using engine-backup [1] and 
put the result to a different storage. From that data you can recreate 
the whole engine.

 http://community.redhat.com/blog/2014/05/ovirt-3-4-glusterized/,

   
 image http://community.redhat.com/blog/2014/05/ovirt-3-4-glusterized/
   
   
   
   
   
 oVirt 3.4, Glusterized
 http://community.redhat.com/blog/2014/05/ovirt-3-4-glusterized/
 oVirt's Hosted Engine feature, introduced in the project's 3.4 release, 
 enables
 the open source virtualization system to host its own management server, which
 means...
 Afficher sur community.redha...
 http://community.redhat.com/blog/2014/05/ovirt-3-4-glusterized/
   
 Aperçu par Yahoo


 And another using GluserFS+NFS and KeepAlive: How to workaround through the 
 maze
 and reach the goal of the new amazing oVirt Hosted Engine with 3.4.0 Beta |
 http://www.andrewklau.com/ovirt-hosted-engine-with-3-4-0-nightly/
   
   
   
   
 How to workaround through the maze and reach the goal of the new amazing oVirt
 Hosted Engine with 3
 http://www.andrewklau.com/ovirt-hosted-engine-with-3-4-0-nightly/
 andrewklau - My Small World of Rants, Excitement, Snippets and Tuts How to
 workaround through the maze and reach the goal of the new amazing oVirt Hosted
 Engine with 3.4.0 Beta
 Afficher sur www.andrewklau.com
 http://www.andrewklau.com/ovirt-hosted-engine-with-3-4-0-nightly/
   
 Aperçu par Yahoo


 Is there a better way to achieve this goal?

 Thanks

HTH

[1] http://www.ovirt.org/Ovirt-engine-backup

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] [ovirt-devel] [SCALE][RFC] ksmd bound to one core

2014-11-05 Thread Daniel Helgenberger


On 05.11.2014 21:07, Adam Litke wrote:
 On 04/11/14 13:11 +0100, Sven Kieske wrote:
 Hi,

 currently ksmd is a single process
 and is thus bound to one core.

 This leads to some scaling problems such as:

 If you got a lot of vms on one host with huge amounts
 of ram you can observe that the cpu usage by ksmd
 goes easily to 100%.
I wonder what would be the benefit here... I think spending CPU cycles 
on something like memory compression is not what (most) users would do. 
Already I think this is an annoyance; maybe thats why the process is 
niced to +5. A multi process daemon would require careful confining 
(with cgroups).
To my understanding the for KSM to really work well is to have many 
(idle / high mem) guests which are quite similar?


 I wonder if ksmd could not be split up
 in child/worker threads, thus enabling higher density
 of vms on one host.

 It's likely going to be trickier than you imagine with the added
 locking that would be required to synchronize the ksmd threads.
Actually I was refraining to answer Svens question since I lack some 
knowledge here. But I guessed synchronization was the reason for the 
single threadted design.
Some serous work needs to be done on KSM do achieve this goal. I was 
thinking about some map/reduce aglo to do that... OTOH mangeling with 
mem pages of guests very requires special care.


 or can this just be tweaked by altering values in
 /etc/ksmtuned.conf ?

 I don't think it can.

 What do you think?

 Interesting idea.


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Foreman: Add external provider (Failed with error PROVIDER_FAILURE and code 5050)

2014-11-05 Thread Daniel Helgenberger
Answering my own question; and maybe a very obvious cause for the 
failing provider: the missing provider plugin in forman!
So one needs to do:

yum install ruby193-rubygem-ovirt_provision_plugin

on the foreman host.

After that, the connection test in the engine comes up positive. Sadly, 
this is not documented anywhere; only on the GitHub repo readme [1]. 
This is also a little bit outdated, as the rbovirt dependency is 
resolved now automatically.

Also, but I am not sure, the porvider lugin needs the foreman_discovery 
plugin to work:

yum install ruby193-rubygem-foreman_discovery

[1] 
https://github.com/theforeman/ovirt_provision_plugin/blob/master/README.md

On 29.10.2014 00:36, Daniel Helgenberger wrote:
 Hello,

 did anyone actually get this working in oVirt 3.5 / EL6 - Engine? I am
 trying this for two days now.

 Setup:
 Engine; EL6.5
 Foreman; EL6.5

 Foreman seems to do it's as I can use it to deploy hosts and also smart
 proxies are running fine.

 I have opened a BZ [1]; because this really can not work out of the box
 with EL6 plain vanilla packages. I wonder if this was ever tested... ?
 Java 7 used i n EL6 [4] does only support DH keys up to 1024byte. This
 is known issue in Foreman [2] as longer DH keys are now used by default
 in Foreman / PuppetCA.
 A dirty fix confirmed working is adding default DH parameters to the
 foreman cert; effectively disabling it [3].

 So I got SSL working and I get beyond the authentication (entering wrong
 data gets me auth errors)- however, I am still not able to add the
 external provider. Pressing 'test' results in
 (Failed with error PROVIDER_FAILURE and code 5050)

 Sample engine.log
 2014-10-28 23:49:40,860 ERROR
 [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand]
 (ajp--127.0.0.1-8702-1) [6a3da4e7] Command
 org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand throw
 Vdc Bll exception. With error message VdcBLLException: PROVIDER_FAILURE
 (Failed with error PROVIDER_FAILURE and code 5050)

 I can't find any more hints in oVirt; access logs in Foreman are telling
 me API queries by the engine. Did I miss a crucial step in the foreman
 setup? How can I debug this issue?

 I am willing to upgrade openjdk; provided this does not break my engine...

 Thanks!

 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749
 [2] https://tickets.puppetlabs.com/browse/SERVER-17
 [3] http://httpd.apache.org/docs/current/ssl/ssl_faq.html#javadh
 [4] java-1.7.0-openjdk-1.7.0.65-2.5.1.2.el6_5.x86_64


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] OVF_STORE?

2014-11-04 Thread Daniel Helgenberger
Hello,

out of curiosity: After my DC was upgraded to 3.5 I have two disk images 
called OVF_STORE on every data domain. What is their purpose?

Thanks
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Please add BZ to known issues of 3.5?

2014-11-03 Thread Daniel Helgenberger
Hello Sandro,

maybe worth adding to Release notes, known issues:

https://bugzilla.redhat.com/show_bug.cgi?id=1157749#c15

Bottom line:
Foreman integration requires min. EL6.6+ engine because of open-jdk 
version. This is not an oVirt - issue but java.

Cheers
-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Upgrade order 3.4.2 - 3.5.x

2014-10-31 Thread Daniel Helgenberger


On 31.10.2014 12:02, Markus Stockhausen wrote:
 Hi,

 maybe a stupid one. Just want to make sure that nothing goes wrong. We
 plan to make a rolling upgrade of our landscape going to 3.5.1 in december.
 So we always need some hypervisor nodes up and running during the
 process.
This went fairly well with me. I did not loose a single machine and the 
process was transparent for them (I even had a script running lots of 
queries against a web server in one vm).

 Looking at older posts I assume that upgrading the engine should be
 sufficient, while hypervisor nodes with vdsm 4.14.17 (from 3.4 repos) and
 the active VMs keep on running. The start of the engine after the upgrade
 should catch up and resync all states.
The Engine and VDSM are fully backward compatible to each other [1]. So 
you should not see any problems there; only missing some features maybe.

 Afterwards I clean hypervisor hosts one by one and clean/reinstall it into
 the cluster?
This what I have done; remember you need to add the 3.5 repos otherwise 
VDSM will be (re)installed from the latest 3.4 repos and not upgraded to 
the '3.5' version. Also, this process went like a charm without any 
issues (let alone loosing guest)

 Thanks in advance.
Please keep in mind, upgrading your datacenter(s) to 3.5 might lead to 
some issues, some of them already fixed for 3.5.1 (I had some more 
severe ones). I would be careful with this setting in a production env. 
Also, some featues are available on cluster versions only; not requiring 
the more invasive datacenter upgrade [2].

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1154620#c3
[2] http://www.mail-archive.com/users@ovirt.org/msg22249.html

-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] [QE][ACTION NEEDED] oVirt 3.5.1 RC status

2014-10-29 Thread Daniel Helgenberger


On 29.10.2014 10:53, Sandro Bonazzola wrote:
 Il 29/10/2014 10:51, Sandro Bonazzola ha scritto:
 Hi,
 We're going to start composing oVirt 3.5.1 RC on *2014-11-25 08:00 UTC* from 
 3.5 branch.
 Maintainers:
 - Please be sure that 3.5 snapshot allow to create VMs before *2014-11-24 
 15:00 UTC*
 - Please be sure that no pending patches are going to block the release 
 before *2014-11-24 15:00 UTC*
 - If any patch must block the RC release please raise the issue as soon as 
 possible.

 A bug tracker [1] has been opened and shows no open blockers.

 Sorry, it shows 4 blockers:
 Bug IDWhiteboard  Status  Summary
 1157185   infra   POSTvdsm does not set selinux booleans 
 during installation when selinux disabled
 1153999   integration NEW missing storage info in answer file
 1142710   integration NEW Volume creation failed while deploying 
 Hosted Engine on iSCSI
 1145241   sla NEW Upgrading a DC to 3.5 does not create 
 default storage profiles
I took the liberty to add [1] to 3.5.1 blockers as well - feel free to 
remove It again if this was a wrong ;)

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1157149




 There are still 193 bugs [2] targeted to 3.5.1.
 Excluding node and documentation bugs we still have 164 bugs [3] targeted to 
 3.5.1.

 Maintainers / Assignee:
 - Please add the bugs to the tracker if you think that 3.5.1 should not be 
 released without them fixed.
 - Please update the target to 3.5.2 or later for bugs that won't be in 3.5.1:
it will ease gathering the blocking bugs for next releases.
 - Please fill release notes, the page has been created here [4]

 Community:
 - If you're testing oVirt 3.5 nightly snapshot, please add yourself to the 
 test page [5]


 [1] http://bugzilla.redhat.com/1155170
 [2] http://goo.gl/7G0PDV
 [3] http://goo.gl/6gUbVr
 [4] http://www.ovirt.org/OVirt_3.5.1_Release_Notes
 [5] http://www.ovirt.org/Testing/oVirt_3.5.1_Testing




-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Ovirt VM Performance abd CPU times

2014-10-29 Thread Daniel Helgenberger


On 29.10.2014 10:21, Xavier Naveira wrote:
 Hi,

 We are migrating our ifrastructure from kvm+libvirt hypervisors to ovirt.

 Everything is working fine but we're noticing that all the qemu-kvm
 processes in the hypervisors take a lot of CPU.
Without further details of the workload this is hard tell. One Reason I 
can think of might be KSM [1]. Is it enabled on your cluster(s)? What is 
your mem over-commitment setting?

Note, IIRC the KSM policy is currently hard coded; it will start at 80% 
host mem usage.

[1] http://www.ovirt.org/Sla/host-mom-policy

 The typical example is an idle machine, running top from the machine
 itself it reports cpu use percentages below 10% and loads (with 2
 processors) of 0.0x. The process running that machine in the hypervisor
 rports cpu uses in the order of the 80-100%.

 Should the values look like this? Why are the idle machines eating up so
 much CPU time?

 Thank you.
 Xavier

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Ovirt VM Performance abd CPU times

2014-10-29 Thread Daniel Helgenberger
On 29.10.2014 11:48, Xavier Naveira wrote:
 On 10/29/2014 11:47 AM, Xavier Naveira wrote:
 On 10/29/2014 11:40 AM, Daniel Helgenberger wrote:


 On 29.10.2014 10:21, Xavier Naveira wrote:
 Hi,

 We are migrating our ifrastructure from kvm+libvirt hypervisors to
 ovirt.

 Everything is working fine but we're noticing that all the qemu-kvm
 processes in the hypervisors take a lot of CPU.
 Without further details of the workload this is hard tell. One Reason I
 can think of might be KSM [1]. Is it enabled on your cluster(s)? What is
 your mem over-commitment setting?

 Note, IIRC the KSM policy is currently hard coded; it will start at 80%
 host mem usage.

 [1] http://www.ovirt.org/Sla/host-mom-policy

 The typical example is an idle machine, running top from the machine
 itself it reports cpu use percentages below 10% and loads (with 2
 processors) of 0.0x. The process running that machine in the hypervisor
 rports cpu uses in the order of the 80-100%.

 Should the values look like this? Why are the idle machines eating up so
 much CPU time?

 Thank you.
 Xavier

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



 Hi, thank you for the answer.

 I've been trying to work out some pattern and realized that the VMs
 using that much cpu all are Redhat 5.x, the Readhat 6.x doesn't exhibit
 this kind of high cpu use. (we run only redhat/centos 5.x/6.x on the
 cluster)
What OS are the hosts running? In case of EL6, make sure you have
tuned-0.2.19-13.el6.noarch installed [1].

To further investigate please post Engine, VDSM, libvirt and kernel
versions from the hosts.

[1] https://access.redhat.com/solutions/358033

 I'll take a look to the KSM config.

 Cheers,

 Xavier


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Ovirt VM Performance abd CPU times

2014-10-29 Thread Daniel Helgenberger


On 29.10.2014 15:57, Xavier Naveira wrote:
 On 10/29/2014 03:07 PM, Xavier Naveira wrote:
 On 10/29/2014 01:26 PM, Daniel Helgenberger wrote:
 On 29.10.2014 11:48, Xavier Naveira wrote:
 On 10/29/2014 11:47 AM, Xavier Naveira wrote:
 On 10/29/2014 11:40 AM, Daniel Helgenberger wrote:


 On 29.10.2014 10:21, Xavier Naveira wrote:
 Hi,

 We are migrating our ifrastructure from kvm+libvirt hypervisors to
 ovirt.

 Everything is working fine but we're noticing that all the qemu-kvm
 processes in the hypervisors take a lot of CPU.
 Without further details of the workload this is hard tell. One
 Reason I
 can think of might be KSM [1]. Is it enabled on your cluster(s)?
 What is
 your mem over-commitment setting?

 Note, IIRC the KSM policy is currently hard coded; it will start at
 80%
 host mem usage.

 [1] http://www.ovirt.org/Sla/host-mom-policy

 The typical example is an idle machine, running top from the machine
 itself it reports cpu use percentages below 10% and loads (with 2
 processors) of 0.0x. The process running that machine in the
 hypervisor
 rports cpu uses in the order of the 80-100%.

 Should the values look like this? Why are the idle machines eating
 up so
 much CPU time?

 Thank you.
 Xavier

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users



 Hi, thank you for the answer.

 I've been trying to work out some pattern and realized that the VMs
 using that much cpu all are Redhat 5.x, the Readhat 6.x doesn't exhibit
 this kind of high cpu use. (we run only redhat/centos 5.x/6.x on the
 cluster)
 What OS are the hosts running? In case of EL6, make sure you have
 tuned-0.2.19-13.el6.noarch installed [1].

 That's exactly the version we've in the hypervisors.


 To further investigate please post Engine, VDSM, libvirt and kernel
 versions from the hosts.

 vdsm-xmlrpc-4.14.11.2-0.el6.noarch
 vdsm-cli-4.14.11.2-0.el6.noarch
 vdsm-python-4.14.11.2-0.el6.x86_64
 vdsm-4.14.11.2-0.el6.x86_64
 vdsm-python-zombiereaper-4.14.11.2-0.el6.noarch

 libvirt-client-0.10.2-29.el6_5.12.x86_64
 libvirt-0.10.2-29.el6_5.12.x86_64
 libvirt-lock-sanlock-0.10.2-29.el6_5.12.x86_64
 libvirt-python-0.10.2-29.el6_5.12.x86_64

 2.6.32-431.23.3.el6.x86_64 #1 SMP Wed Jul 16 06:12:23 EDT 2014 x86_64
 x86_64 x86_64 GNU/Linux



 [1] https://access.redhat.com/solutions/358033

 I'll take a look to the KSM config.

 Cheers,

 Xavier




 Actually, this seems to be it. But I'm already at a newer kernel:
 https://bugzilla.redhat.com/show_bug.cgi?id=705082
Well, I do not have such hardware so I never run into the issue. You 
could disable HT as I suspect your physical cores are less then 64?

Your workload might differ but my VMs usually do not benefit from 
'threaded' cores and I want HT disabled anyway. Also, you can check 
cluster settings and disable 'count threads as cores' if enabled. But I 
think this might not make any difference.


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Centos 6.5 or 7 for host os?

2014-10-29 Thread Daniel Helgenberger


On 29.10.2014 17:17, Sven Kieske wrote:


 On 29/10/14 09:01, Doron Fediuck wrote:
 One more thing you want to consider is updates from Centos
 for el6. Unsure what happens to 6.5 in a year or so.
Sorry for hijacking the thread; but I am also very much interested in 
this matter.
Sven, maybe you can share how you handle the matter @Mittwald? As I 
understood it you have a quite large oVirt production environment there. 
Are you running oVirt on RHEL? Do you have some kind of rule of thump 
(like, always stay one minor version behind point release in oVirt).
Thanks


 CentOS just supports the latest point release for a given
 release.
 So atm you are just running a supported CentOS if you upgrade
 from 6.5 to 6.6 which was just released.
 There will be no updates for 6.5 anymore.

 HTH


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Proposing fix for EL6 m2crypto memory leak

2014-10-28 Thread Daniel Helgenberger


On 28.10.2014 11:55, Sandro Bonazzola wrote:
 Il 28/10/2014 11:07, Daniel Helgenberger ha scritto:
 Hello Sandro,

 I just updated BZ [1] that m2crypto-0.21.1 from FC20 fixes the severe
 mem leak issue in VDSM for me on EL6 with Engine 3.4 and 3.5.

 As I have seen no side effects, I propose adding a newer m2crypto to the
 ovirt EL6 repos; with fixes the issue immediately (well, you need to
 restart vdsmd).

 Should I open an RFE or will this mail to the list suffice? For
 convenience, I added the rpm I am using as well as the SRPM I used to
 compile this version [2].

 Let me see if I've understood.
 Fedora 20 already have m2crypto-0.21.1-13.fc20
 Fedora 19 has m2crypto-0.21.1-11

 Looking at the RPM changelog [1], 0.21.1-11 on F19 and your 0.21.1-12 on F20 
 are just mass rebuild so no update needed on Fedora.
I also think that EL7's version might be fine, too. I just used the 
version from fc20 because it was a known working one confirmed by 
Markus, see BZ (I confess I did not read through the changelogs but was 
only interested in solving the issue :)


 CentOS 7 has m2crypto-0.21.1-15 and don't need an update.

 CentOS 6.6 has m2crypto-0.20.2-9 (yes, centos 6.6 is out 
 http://isoredirect.centos.org/centos/6.6/)
 which looks the same on 6.5.
 Are you really sure that the issue is on m2crypto side and not on vdsm side?
Not quite. The issue is fixed however. It can still be a bug in VDSM 
with some special call or something. But I clearly lack knowledge here.

My reasoning is, however, finding the root cause might be a time 
consuming process and the outcome in the end only be of academical value 
since the issue is not there with newer versions of m2crypto.

 If so, a bug against m2crytpo should be opened and quickly fixed on 
 RHEL/CentOS.
Thats what I am asking in the BZ. I am happy to open the issue in RHEL 
(CentOS is downstream...) but I have no subscription and cannot confirm 
the version RHEL is using. Also I need someone who can answer whatever 
this is an issue of m2crypto or VDSM (see above).


 I don't think that just rebuilding m2crypto from F20 is a long term solution.
Me neither. But it is a short term solution until the issue is fixed or 
El6 obsoleted (well, this might be quite soon for a protect like oVirt?)
Also, the new m2cypto version might be requirement of the VDSM rpm in 
the future; I think there are few people witch run VDSM apart from being 
an oVirt / RHEV host. This way the impact and possible side effects are 
minimized (if there are any).


 Dan?

 [1] http://koji.fedoraproject.org/koji/buildinfo?buildID=485699





 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1147148
 [2]
 ftp://rpmfind.net/linux/fedora-secondary/development/rawhide/source/SRPMS/m/m2crypto-0.21.1-12.fc20.src.rpm




-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Proposing fix for EL6 m2crypto memory leak

2014-10-28 Thread Daniel Helgenberger


On 28.10.2014 11:51, Sven Kieske wrote:


 On 28/10/14 11:07, Daniel Helgenberger wrote:
 As I have seen no side effects, I propose adding a newer m2crypto to the
 ovirt EL6 repos; with fixes the issue immediately (well, you need to
 restart vdsmd

 This package is provided and installed from the base repo on el6.
 I really would discourage to blow the ovir repo up by
 yet-another-package.

 imho this should get fixed/backported in el6 base repo.
I very much agree this is the best solution. But this might take a lot 
of time as we fist need to find the root cause (see below).

I reasoned therefore adding m2crypto to oVirt EL6 repos should be a 
temporary measure.
I think everybody running EL6 hosts is suffering from this bug.
However, usually there are large amounts of RAM available in production 
hosts and VDSM might be restarted once in a while so this leak may as 
well be unnoticed - until the host is loaded and fails because of 
endless swapping.

Further, it is totally unclear to me whatever this is a bug in VDSM or 
m2crypto. If this is more clear, I am happy to open a BZ against 
m2crypto EL6.



 just my 2 cents of course, but if ovirt ships this package
 you also need to maintain it.

I would volunteer to provide the RPMs for oVirt for the time being; as I 
did already. I have to build them anyway and if this makes any sense 
(OTOH, changes in this package are very rare it seems).


PS: May remark about EL6 being obsoleted was not meant seriously ;)


-- 
Daniel Helgenberger
m box bewegtbild GmbH

P: +49/30/2408781-22
F: +49/30/2408781-10

ACKERSTR. 19
D-10115 BERLIN


www.m-box.de  www.monkeymen.tv

Geschäftsführer: Martin Retschitzegger / Michaela Göllner
Handeslregister: Amtsgericht Charlottenburg / HRB 112767
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


  1   2   3   >