[ovirt-users] Re: Ovirt 4.4.10 - Admin account locked after password change

[Martin Perina]

Hi Andy,

have you updated the admin user password after the change also in
ovirt-provider-ovn configuration?

https://www.ovirt.org/documentation/administration_guide/index.html#sect-Administering_User_Tasks_From_the_commandline

Regards,
Martin


On Mon, Feb 19, 2024 at 2:51 AM Andy Lau  wrote:

> Hi Nicolas,
>
> Thanks for your reply.
>
> Does Ovirt has some default maintenance tasks?  Or, I can identify them on
> somewhere?
>
> Because I don't have any script to put into Ovirt after new installation
> on Nov 2023.
>
>
>
>
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/SJJMRSNI7P7MTBD4EGDSZ4JGDF4U2NGB/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NG622GPF5KPNNYMX6KT5MIV3O5M2IJY6/

[ovirt-users] Re: ovirt-engine - developer mode installation

[Martin Perina]

Hi,

could you please share the whole log file
/home/yongsheng/f419/var/log/ovirt-engine/setup/ovirt-engine-setup-20230418170928-1v6iod.log
?
The lines you were showing are just a consequence of stopping the setup due
to previous error. The real error is earlier in the log (you can search for
lines with "ERROR" levels)

Regards,
Martin


On Tue, Apr 18, 2023 at 12:05 PM  wrote:

> From the setup log:
>
> 2023-04-18 17:51:34,736+0800 DEBUG otopi.context
> context._executeMethod:127 Stage pre-terminate METHOD
> otopi.plugins.otopi.dialog.cli.Plugin._pre_terminate
> 2023-04-18 17:51:34,736+0800 DEBUG otopi.context
> context._executeMethod:136
> otopi.plugins.otopi.dialog.cli.Plugin._pre_terminate condition False
> 2023-04-18 17:51:34,742+0800 INFO otopi.context context.runSequence:616
> Stage: Termination
> 2023-04-18 17:51:34,742+0800 DEBUG otopi.context context.runSequence:620
> STAGE terminate
> 2023-04-18 17:51:34,746+0800 DEBUG otopi.context
> context._executeMethod:127 Stage terminate METHOD
> otopi.plugins.ovirt_**FILTERED**_common.base.core.misc.Plugin._terminate
> 2023-04-18 17:51:34,747+0800 ERROR
> otopi.plugins.ovirt_**FILTERED**_common.base.core.misc misc._terminate:153
> Execution of setup failed
> 2023-04-18 17:51:34,754+0800 DEBUG otopi.context
> context._executeMethod:127 Stage terminate METHOD
> otopi.plugins.otopi.dialog.human.Plugin._terminate
> 2023-04-18 17:51:34,769+0800 DEBUG otopi.context
> context._executeMethod:127 Stage terminate METHOD
> otopi.plugins.otopi.dialog.machine.Plugin._terminate
> 2023-04-18 17:51:34,770+0800 DEBUG otopi.context
> context._executeMethod:136
> otopi.plugins.otopi.dialog.machine.Plugin._terminate condition False
> 2023-04-18 17:51:34,780+0800 DEBUG otopi.context
> context._executeMethod:127 Stage terminate METHOD
> otopi.plugins.otopi.core.log.Plugin._terminate
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/J2ZPLO6T22WCZC7ST3DYWMH7NIT3FDXR/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NTYKRN43QI5LBS2OURMI6RQOHIGA4WWW/

[ovirt-users] Re: ovirt-engine - developer mode installation

[Martin Perina]

Hi,

On Mon, Apr 17, 2023 at 11:54 AM  wrote:

> Hi Martin,
>
> Sorry I have to grab you for more help.
>
> I'm checking the developer mode documentation and just installed the
> packages listed under prerequisites. Now I come this line:
>
> Note on Java versions
> The project is built and run using java 11. 4.3 branches and earlier are
> excluded.
>
>
> The java version in my CS8 is as :
> java-1.8.0-openjdk-headless-1.8.0.352.b08-2.el8.x86_64
>

That's OK OpenJDK 1.8 is the default version for CS8, it cannot be removed

> java-11-openjdk-11.0.17.0.8-2.el8.x86_64
> java-11-openjdk-headless-11.0.17.0.8-2.el8.x86_64
> java-11-openjdk-devel-11.0.17.0.8-2.el8.x86_64
>

That's OK, OpenJDK 11 is required for oVirt. The easiest way to force using
OpenJDK 11 is to set JAVA_HOME in $HOME/.bash_profile:

JAVA_HOME=/usr/lib/jvm/java-11
PATH=$JAVA_HOME/bin:$PATH

export JAVA_HOME PATH

That way you will ensure that you are using OpenJDK 11

Regards,
Martin


> Should I change/upgrade java? Any easy way to do it like `dnf module
> switch-to`?
>
> Sincerely,
> Yongsheng
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/23T46V242K6KABDMI6KKWPTC45NLHDSS/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DKJAOU6WZFSWU2BGE7SX6NBBGCU5ESKA/

[ovirt-users] Re: ovirt-engine - developer mode installation

[Martin Perina]

Hi,

have you check the developer mode documentation?

https://github.com/ovirt/ovirt-engine/#developer-mode-installation

As mentioned there you need postgresql 12 or higher, so in CentOS Stream 8
you need to enable the correct dnf module, which provides the right
postgresql version:

dnf module -y enable postgresql:12

There are also other dnf modules which you will need to enable on CS8, more
or less you will need the same modules as in production installation:

https://www.ovirt.org/documentation/installing_ovirt_as_a_standalone_manager_with_local_databases/index.html#Enabling_the_Red_Hat_Virtualization_Manager_Repositories_install_RHVM

Regards,
Martin




On Mon, Apr 17, 2023 at 9:29 AM  wrote:

> Hello ,
>
> I'm doing a developer mode installation for ovirt-engine.  I'd like to
> install it based on CentOS 8 Stream, but no matched version of postgresql
> packages are provided.  Which CentOS version should I start this work?
>
> Sincerely,
> Yongsheng
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/KN4TZA4QXTCA353GW4K22XPIHI6D7TLQ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WCLKX7KXVLBOYKZSO6QFMVZ62LYWBXEZ/

[ovirt-users] Re: ovirtsdk4 python - global maintenance

[Martin Perina]

Hi,

To enable global maintenance using Python SDK you need to fetch hosted
engine VM and then call maintenance method on it:

https://ovirt.github.io/python-ovirt-engine-sdk4/4.5/services.m.html#ovirtsdk4.services.VmService.maintenance

Regards,
Martin


On Fri, Jan 20, 2023 at 6:27 AM  wrote:

> Hi!
>
> I know how to set global maintenance mode using python SDK, something like
>
> vms_service.vm_service(vm.id).maintenance(maintenance_enabled=True)
>
> on HostedEngine.
>
> But now I try to find if global maintenance is enabled.
> And I'm going to give up - I can't find how to do it in documentation...
>
> Is there a way to get this info?
>
> Regards!
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/U4RVWMBDCWECKPTKFJY2XLJZ6AW2DY6P/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CNEBNRTMAA3T2REMGVWDEFCA2N6QYSHB/

[ovirt-users] Re: engine-config -s UserSessionTimeOutInterval=X problem

[Martin Perina]

Hi Dana,

could you please take a look at it? It smells like a regression caused by
changes from https://bugzilla.redhat.com/show_bug.cgi?id=2089299

Thanks,
Martin


On Mon, Jan 2, 2023 at 2:28 PM marek  wrote:

> ovirt 4.5.4, standalone engine, centos 8 stream
>
> [root@ovirt ~]# engine-config -g UserSessionTimeOutInterval
> Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false
> UserSessionTimeOutInterval: 30 version: general
>
> [root@ovirt ~]# engine-config -s UserSessionTimeOutInterval=60
> Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false
> Cannot set value 60 to key UserSessionTimeOutInterval.
>
> any ideas where is the problem?
>
> Marek
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/OPH7BHGBGWMECQKRXY6GW3YGZR73JK2D/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TBMG77BLCNXBLV5WODRZ2ILP5MLZVFXE/

[ovirt-users] Re: how to alaert "VM_SET_TO_UNKNOWN_STATUS" to mail ?

[Martin Perina]

Hi,

feel free to create PR for https://github.com/ovirt/ovirt-engine/
Once this PR would be merged, the new event will be included in the closest
oVirt release after the merge.

Martin


On Thu, Dec 15, 2022 at 9:13 AM rakkim 2  wrote:

> thank you
>
> Is there any way to add an event other than that list? (e.g. VM unknown
> status)
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PPG5CVQMDFOLSYQR25RSWZVL46IX7XBS/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OFJYMC3K3YFTGCKR77HAPMK7IK65IK25/

[ovirt-users] Re: how to alaert "VM_SET_TO_UNKNOWN_STATUS" to mail ?

[Martin Perina]

Hi,

not all existing events can be passed to notifier, the supported events are
listed in:

http://ovirt.github.io/ovirt-engine-api-model/4.5/#types/notifiable_event

Regards,
Martin


On Mon, Dec 12, 2022 at 9:14 AM Sandro Bonazzola 
wrote:

> Il giorno dom 11 dic 2022 alle ore 17:56  ha scritto:
>
>> version : ovirt 4.3.6
>>
>
> Please note 4.3 reached End of Life a long time ago, please upgrade to the
> latest release as soon as practical.
>
> @Martin Perina , any suggestions?
>
>
>>
>> hello
>>
>> I am receiving email notifications of events via ovirt-engine-notifier.
>> If the host is shut down unexpectedly, the VM in the host becomes unknown
>> status.
>> Event: VM {VM} was set to the Unknown status.
>>
>> However, if the VM is in unknown status even though all event
>> notification items are selected, mail alarms do not come.
>>
>> Is there a way to make that notification come on?
>> (e.g. filtering or specifying)
>> I need to know which VM is Unknown Status by mail.
>>
>> 
>> audit type : VM_SET_TO_UNKNOWN_STATUS(142, AuditLogSeverity.WARNING)
>>
>> ref:
>>
>> https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules/common/src/main/java/org/ovirt/engine/core/common/AuditLogType.java
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/RB6MXZN3QSCZTVKYUPWWGAAACAQ7Z5ML/
>>
>
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING - Red Hat In-Vehicle Operating System
>
> Red Hat EMEA <https://www.redhat.com/>
>
> sbona...@redhat.com
> <https://www.redhat.com/>
>
> *Red Hat respects your work life balance. Therefore there is no need to
> answer this email out of your office hours.*
>
>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XJWI6LWOVGIJXMBZBQ7AJIKAJSPY5LA2/

[ovirt-users] Re: ovirt local storage getConnectedStoragePoolsList empty result problem

[Martin Perina]

On Mon, Dec 12, 2022 at 5:36 PM Sandro Bonazzola 
wrote:

>
>
> Il giorno lun 12 dic 2022 alle ore 17:12 marek  ha
> scritto:
>
>> additional info
>>
>>
>> # vdsm-client Host getConnectedStoragePools
>> []
>>
>> 2022-12-12 16:04:12,613+0100 ERROR (jsonrpc/4) [jsonrpc.JsonRpcServer]
>> Internal server error (__init__:354)
>> Traceback (most recent call last):
>>   File "/usr/lib/python3.6/site-packages/yajsonrpc/__init__.py", line
>> 349, in _handle_request
>> res = method(**params)
>>   File "/usr/lib/python3.6/site-packages/vdsm/rpc/Bridge.py", line 180,
>> in _dynamicMethod
>> api = self._get_api_instance(className, argobj)
>>   File "/usr/lib/python3.6/site-packages/vdsm/rpc/Bridge.py", line 165,
>> in _get_api_instance
>> return apiObj(*ctorArgs)
>> TypeError: __init__() missing 1 required positional argument: 'UUID'
>>
>>
>> @sandro
>>
>> you mean that ovirt engine (4.4.10 on centos8 stream) vs (ovirt host
>> 4.4.10 on rocky 8.7) can be problem?
>>
>
4.4.10 has been tested only on CS8 (around the time when CS8 contained
packages for upcoming 8.6 release ) or 8.6.
When you have upgraded to the latest 8.7 you should also upgrade o 4.5.4.
When using CentOS Stream you should
really always use latest engine, we are still trying to react on any
breakages comming from stream and fixed them
in latest oVirt releases


> For the specific issue in the above traceback, no I don't think it's due
> to 8.7/Stream. Looks like something related to the bridge. @Martin Perina
>  ?
>

Albert, do you know of any fixes around getConnectedStoragePools between
4.4.10 and 4.5.4?

>
> But in general, if you upgrade to recent CentOS Stream or to EL 8.7 you
> should upgrade ovirt as well as the underlying OS has some changes which
> require alignment within ovirt code.
>
>
>
>>
>> Dne 12/12/2022 v 17:01 Sandro Bonazzola napsal(a):
>>
>>
>>
>> Il giorno lun 12 dic 2022 alle ore 16:50 marek  ha
>> scritto:
>>
>>> hi,
>>>
>>> ovirt 4.4.10
>>>
>>> one host become unresponsive (no known change)
>>>
>>> host rocky linux 8.6 (upgraded to 8.7 now) + local storage  (/vm)
>>>
>>
>> Please note 8.7 support has been introduced in oVirt 4.5.4.
>> Please upgrade as soon as practical.
>>
>>
>>
>>
>>>
>>> host vdsm.log
>>>
>>> 2022-12-12 16:37:59,063+0100 INFO  (vmrecovery) [vdsm.api] START
>>> getConnectedStoragePoolsList() from=internal,
>>> task_id=29b1d9a6-b0b4-4050-a4fd-061b34468354 (api:48)
>>> 2022-12-12 16:37:59,063+0100 INFO  (vmrecovery) [vdsm.api] FINISH
>>> getConnectedStoragePoolsList return={'poollist': []} from=internal,
>>> task_id=29b1d9a6-b0b4-4050-a4fd-061b34468354 (api:54)
>>> 2022-12-12 16:37:59,063+0100 INFO  (vmrecovery) [vds] recovery: waiting
>>> for storage pool to go up (clientIF:735)
>>>
>>>
>>> any tips howto debug StoragePool?
>>>
>>> Marek
>>>
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/B5CFF2SPZEQCUG2U24CJXWL2DLBUOYQD/
>>>
>>
>>
>> --
>>
>> Sandro Bonazzola
>>
>> MANAGER, SOFTWARE ENGINEERING - Red Hat In-Vehicle Operating System
>>
>> Red Hat EMEA <https://www.redhat.com/>
>>
>> sbona...@redhat.com
>> <https://www.redhat.com/>
>>
>> *Red Hat respects your work life balance. Therefore there is no need to
>> answer this email out of your office hours. *
>>
>>
>>
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING - Red Hat In-Vehicle Operating System
>
> Red Hat EMEA <https://www.redhat.com/>
>
> sbona...@redhat.com
> <https://www.redhat.com/>
>
> *Red Hat respects your work life balance. Therefore there is no need to
> answer this email out of your office hours.*
>
>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/I5JLOR5XTBOTCOZPDJM6UERU3J7UXIRM/

[ovirt-users] Re: oVirt Update Errors

[Martin Perina]

Hi,

unfortunately I made a mistake during the release,
ovirt-hosted-engine-setup-2.7.0 was not included in the release:

https://cbs.centos.org/koji/packageinfo?packageID=1976

But now it's on the way to mirrors ...

Sorry for the mess.
Martin


On Tue, Dec 6, 2022 at 9:39 AM Matthew J Black 
wrote:

> Yeah, that's what I'm trying to do - I was under the impression that when
> doing a Cluster Update this is what would happen (go to the latest version
> of oVirt) - or am I missing something?
>
> Cheers
>
> Dulux-Oz
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YIM5VNWLNZBADTV4PL4YWSY7QKLHC5TZ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VSCDZPBUXO2TBYQZN6UI7CIZIWUYQRKO/

[ovirt-users] Re: oVirt Update Errors

[Martin Perina]

Hi,

Please upgrade to oVirt 4.5.4 released yesterday, it supports
ansible-core-2.13 from EL8.7 or CS8.

Martin


On Tue, 6 Dec 2022, 08:11 Matthew J Black,  wrote:

> Hi Guys,
>
> Attempting to do a Cluster update via the oVirt GUI and I'm getting the
> following errors (taken from the logs) which I've confirmed via a straight
> `dnf update`:
>
> Problem 1: package ovirt-hosted-engine-setup-2.6.6-1.el8.noarch conflicts
> with ansible-core >= 2.13 provided by ansible-core-2.13.3-1.el8.x86_64
>   - cannot install the best update candidate for package
> ovirt-hosted-engine-setup-2.6.6-1.el8.noarch
>   - cannot install the best update candidate for package
> ansible-core-2.12.7-1.el8.x86_64
>  Problem 2: problem with installed package
> ovirt-hosted-engine-setup-2.6.6-1.el8.noarch
>   - package ovirt-hosted-engine-setup-2.6.6-1.el8.noarch conflicts with
> ansible-core >= 2.13 provided by ansible-core-2.13.3-1.el8.x86_64
>   - package ovirt-ansible-collection-3.0.0-1.el8.noarch requires
> ansible-core >= 2.13.0, but none of the providers can be installed
>   - cannot install the best update candidate for package
> ovirt-ansible-collection-2.3.0-1.el8.noarch
>
> Is it OK to do a `dnf update --nobest` or a `dnf update --allowerasing` on
> each host, or is there some other solution that I'm missing?
>
> Cheers
>
> Dulux-Oz
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/IECKJBPJKV5IBJMQRPBTUHQW5QDZ45P2/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7BVX2U5QUU6J4DL5HL5VEPPHX32GDHGI/

[ovirt-users] Re: Failed to execute stage 'Closing up': Command '/usr/share/ovirt-engine-keycloak/bin/kk_cli.sh' failed to execute

[Martin Perina]

configuration
> [ INFO  ] Creating/refreshing Engine 'internal' domain database schema
> [ INFO  ] Creating default mac pool range
> [ INFO  ] Adding default OVN provider to database
> [ INFO  ] Adding OVN provider secret to database
> [ INFO  ] Setting a password for internal user admin
> [ INFO  ] Creating initial Keycloak admin user
> [ INFO  ] Generating post install configuration file
> '/etc/ovirt-engine-setup.conf.d/20-setup-ovirt-post.conf'
> [ INFO  ] Stage: Transaction commit
> [ INFO  ] Stage: Closing up
>
>   --== SUMMARY ==--
>
> [ INFO  ] No need to restart fapolicyd because it is not running.
> [ INFO  ] Starting dwh service
> [ INFO  ] Starting Grafana service
> [ INFO  ] Restarting ovirt-vmconsole proxy service
>   To login to oVirt using Keycloak SSO, enter 'admin@ovirt' as
> username and the password provided during Setup
>   To login to Keycloak Administration Console enter 'admin' as
> username and the password provided during Setup
>   Web access for Keycloak Administration Console is enabled at:
>   https://pm.local/ovirt-engine-auth/admin
>   Web access is enabled at:
>   http://pm.local:80/ovirt-engine
>   https://pm.local:443/ovirt-engine
>   Internal CA fingerprint: SHA256:
> F6:6C:CF:41:58:64:D1:84:25:10:A6:6B:4D:96:8B:EB:F5:F2:DA:FB:BD:CF:B4:2C:02:62:0B:0A:B3:15:14:33
>   SSH fingerprint:
> SHA256:Xnov0hwwe6/DN5udn3MypHx9EU5CelG6eYMHlaUZJFQ
> [ INFO  ] Starting engine service
> [WARNING] Less than 16384MB of memory is available
>   Web access for grafana is enabled at:
>   https://pm.local/ovirt-engine-grafana/
>   Please run the following command on the engine machine pm.local,
> for SSO to work:
>   systemctl restart ovirt-engine
>
>   --== END OF SUMMARY ==--
>
> [ INFO  ] Restarting httpd
> [ INFO  ] Start with setting up Keycloak for Ovirt Engine
> [ ERROR ] Failed to execute stage 'Closing up': Command
> '/usr/share/ovirt-engine-keycloak/bin/kk_cli.sh' failed to execute
> [ INFO  ] Stage: Clean up
>   Log file is located at
> /var/log/ovirt-engine/setup/ovirt-engine-setup-20221204031123-60y1er.log
> [ INFO  ] Generating answer file
> '/var/lib/ovirt-engine/setup/answers/20221204031509-setup.conf'
> [ INFO  ] Stage: Pre-termination
> [ INFO  ] Stage: Termination
> [ ERROR ] Execution of setup failed
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YJRB2Q5CITGNC7TGVAAKETOYFDGPWVEH/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YO4P446IP7KAMSOMCSGAX2D64J3RIJCG/

[ovirt-users] Re: TR: Re: [IMPORTANT] Upgrade to postgresql-jdbc-42.2.14-1 breaks oVirt Engine 4.4/4.5

[Martin Perina]

Hi,

why do you need to version lock postgresql-jdbc? The issue around
incompatibility with the latest version of postgresql-jdbc has already been
resolved in oVirt 4.5.0:

https://bugzilla.redhat.com/show_bug.cgi?id=2077794

So I suggest you to remove any postgresql-jdbc version lock and upgrade to
latest oVirt 4.5.

Regards,
Martin



On Mon, Nov 21, 2022 at 6:30 PM  wrote:

> I use RockyLinux for the engine. I had to use and versionlock this:
> https://vault.centos.org/centos/8/AppStream/aarch64/os/Packages/postgresql-jdbc-42.2.3-3.el8_2.noarch.rpm
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/KP2XRDOZI5M3EYTUVZ3BCNBVYWO4VSIH/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XSX4U5BMXLIZSJBOQ7TR7Y4PYRYESUV3/

[ovirt-users] Re: oVirt v4.5 - Error updating oVirt hosts for ovirt-hosted-engine-setup-2.6.6-1.el8.noarch

[Martin Perina]

Hi Erkan,

It kas already been mentioned several times here in the list, oVirt 4.5.3
is not compatible with ansible-core-2.13+, you need to downgrade it to
ansible-core-2.12 and then proceed.

Regards,
Martin

On Thu, Nov 17, 2022 at 8:06 PM Erkan E via Users  wrote:

> Hello,
>
> Upgrading oVirt hosts fails via the ovirt Compute -> Hosts -> Installation
> ->  Upgrade menu. I get the dependency error message below, when trying to
> upgrade my oVirt hosts running on Rocky Linux 8.7.  Its oVirt repo version
> is centos-release-ovirt45-8.7-3.el8s.noarch. I have no chance to try it
> with RHEL or CentOS Stream.
>
> "msg" : "Depsolve Error occurred: \n
> Problem: package ovirt-hosted-engine-setup-2.6.6-1.el8.noarch conflicts
> with ansible-core >= 2.13 provided by ansible-core-2.13.3-1.el8.x86_64\n
>   - cannot install the best update candidate for package
> ovirt-hosted-engine-setup-2.6.5-1.el8.noarch\n
>   - cannot install the best update candidate for package
> ansible-core-2.12.2-4.el8_6.rocky.0.1.x86_64",
>
> Thank you.
> Erkan E
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MSY2TFY64Q7U4PWR2QIPEII3FSHSXK6W/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/F6OT2FB5MD6W2ZMW3JF5ZEWC7TTJXLBO/

[ovirt-users] Re: mom-vdsm service is failing after update to 4.5.3.2-1.el8

[Martin Perina]

Hi,

below error should be fixed in mom-0.6.4, which was included in last week's
oVirt 4.5.3 async release:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/TCGC54KIG7XIYNBO44WKKLCNZJQITWMO/

Regards,
Martin


On Fri, Oct 28, 2022 at 2:07 PM Jirka Simon  wrote:

> Hello there,
>
> we just updated oVirt engine to 4.5.3.2-1.el8 which was smooth, but then
> when we start to update all nodes, after restart mom-vdsm service is
> failing to start
>
> mom-vdsm
>
> rpm -q vdsm
> vdsm-4.50.3.4-1.el8.x86_64 (VDSM was updated from 4.50.2.2-1.el8 )
>
> rpm -q mom
> mom-0.6.3-1.el8.noarch  (MOM was not updated duting tha last update)
>
> here is error from  /var/log/vdsm/mom.log
>
> 2022-10-28 13:17:18,105 - mom - INFO - MOM starting
> 2022-10-28 13:17:18,138 - mom.HostMonitor - INFO - Host Monitor starting
> 2022-10-28 13:17:18,138 - mom - INFO - hypervisor interface
> vdsmjsonrpcclient
> 2022-10-28 13:17:18,179 - mom.HostMonitor - INFO - HostMonitor is ready
> 2022-10-28 13:17:18,242 - mom.GuestManager - INFO - Guest Manager
> starting: multi-thread
> 2022-10-28 13:17:18,247 - mom.Policy - INFO - Loaded policy '00-defines'
> 2022-10-28 13:17:18,247 - mom - ERROR - Failed to initialize MOM threads
> Traceback (most recent call last):
>  File "/usr/lib/python3.6/site-packages/mom/__init__.py", line 35, in run
>host_monitor, guest_manager)
>  File "/usr/lib/python3.6/site-packages/mom/PolicyEngine.py", line 42, in
> __init__
>self.load_policy()
>  File "/usr/lib/python3.6/site-packages/mom/PolicyEngine.py", line 71, in
> load_policy
>read_policy(fname, name.split('.policy')[0])
>  File "/usr/lib/python3.6/site-packages/mom/PolicyEngine.py", line 53, in
> read_policy
>return self.policy.set_policy(policy_name, policyStr)
>  File "/usr/lib/python3.6/site-packages/mom/Policy/Policy.py", line 64, in
> set_policy
>self.code = get_code(Evaluator(), self._cat_policies())
>  File "/usr/lib/python3.6/site-packages/mom/Policy/Parser.py", line 543,
> in get_code
>tokens = scanner.tokenize(string)
>  File "/usr/lib/python3.6/site-packages/mom/Policy/Parser.py", line 72, in
> tokenize
>GenericScanner.tokenize(self, input)
>  File "/usr/lib/python3.6/site-packages/mom/Policy/spark.py", line 78, in
> tokenize
>add_lines = self.index2func[i](groups[i], line)
> TypeError: t_default() takes 2 positional arguments but 3 were given
>
>
> any tip what could be the reason ?
>
> Thaak you
>
> Jirka
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3QATBEY4A7ZJ7UMJM2KGZ6GCKVF5U23D/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/25RYUUUPF4RFRKFXHGWLRANZBMGAZ7KV/

[ovirt-users] Re: RPM issues updating Ovirt 4.5.2 to 4.5.3

[Martin Perina]

ython3-openvswitch2.15-2.15.0-117.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-22.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-23.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-24.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-27.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-30.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-32.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-35.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-37.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-39.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-41.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-47.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-48.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-51.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-52.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-53.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-54.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-56.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-6.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-72.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-75.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-80.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-81.el8s.x86_64
>
>   - package python3-rdo-openvswitch-2:2.17-3.el8.noarch obsoletes
> python3-openvswitch2.15 < 2.17 provided by
> python3-openvswitch2.15-2.15.0-88.el8s.x86_64
>
>   - cannot install the best update candidate for package
> python3-openvswitch2.15-2.15.0-119.el8s.x86_64
>
>   - cannot install the best update candidate for package
> ovirt-python-openvswitch-2.15-4.el8.noarch
>
> (try to add '--allowerasing' to command line to replace conflicting
> packages or '--skip-broken' to skip uninstallable packages or '--nobest' to
> use not only best candidate packages)
>
>
>
> *From:* Martin Perina 
> *Sent:* Friday, October 21, 2022 10:13 AM
> *To:* Latchezar Filtchev 
> *Cc:* David Johnson ; Milan Zamazal <
> mzama...@redhat.com>; users 
> *Subject:* Re: [ovirt-users] Re: RPM issues updating Ovirt 4.5.2 to 4.5.3
>
>
>
> Hi Latchezar,
>
>
>
> yesterday we have released an async oVirt 4.5.3.1 version, which is fixi

[ovirt-users] Re: After failed upgrade from 4.5.1 to 4.5.3, upgrades do not show up anymore

[Martin Perina]

Hi Gianluca,

In the Events view in webadmin there should be a message announcing that
host upgrade failed and more information could be found within specific log
file on oVirt Engine machine. Could you please share this log file?

Thanks,
Martin


On Thu, Oct 20, 2022 at 10:49 AM Gianluca Amato 
wrote:

> Hi all,
> I recently tried to upgrade an oVirt node from 4.5.1 to 4.5.3. The upgrade
> failed (I have no idea idea why... how can I access the installation
> logs?). The node is still working fine running the old 4.5.1 release, but
> now the oVirt web console says that it is up to date and it does not let me
> retry the upgrade. However, I am still on version 4.5.1, as witnessed by
> the result of "nodectl info":
>
> 
> bootloader:
>   default: ovirt-node-ng-4.5.1-0.20220623.0 (4.18.0-394.el8.x86_64)
>   entries:
> ovirt-node-ng-4.5.1-0.20220623.0 (4.18.0-394.el8.x86_64):
>   index: 0
>   kernel:
> /boot//ovirt-node-ng-4.5.1-0.20220623.0+1/vmlinuz-4.18.0-394.el8.x86_64
>   args: crashkernel=auto resume=/dev/mapper/onn_ovirt--clai1-swap
> rd.lvm.lv=onn_ovirt-clai1/ovirt-node-ng-4.5.1-0.20220623.0+1 
> rd.lvm.lv=onn_ovirt-clai1/swap
> rhgb quiet boot=UUID=9d44cf2a-38bb-477d-b542-4bfc30463d1f rootflags=discard
> img.bootid=ovirt-node-ng-4.5.1-0.20220623.0+1 intel_iommu=on
> modprobe.blacklist=nouveau transparent_hugepage=never hugepagesz=1G
> hugepages=256 default_hugepagesz=1G
>   root: /dev/onn_ovirt-clai1/ovirt-node-ng-4.5.1-0.20220623.0+1
>   initrd:
> /boot//ovirt-node-ng-4.5.1-0.20220623.0+1/initramfs-4.18.0-394.el8.x86_64.img
>   title: ovirt-node-ng-4.5.1-0.20220623.0 (4.18.0-394.el8.x86_64)
>   blsid: ovirt-node-ng-4.5.1-0.20220623.0+1-4.18.0-394.el8.x86_64
> layers:
>   ovirt-node-ng-4.5.1-0.20220623.0:
> ovirt-node-ng-4.5.1-0.20220623.0+1
> current_layer: ovirt-node-ng-4.5.1-0.20220623.0+1
> --
>
> Comparing the situation with other hosts in the same data center, it seems
> that the problem is that the package ovirt-node-ng-image-update-placeholder
> is not installed anymore, hence "dnf upgrade" has nothing to do. My idea
> was to manually download and install the 4.5.1 version of
> ovirt-node-ng-image-update-placeholder and attempt installation again.
>
> Is it a correct way to proceed ?
>
> Thanks for any help.
>
> --gianluca amato
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/C2VS5Q56URFSVO2DQGRAGQ4XCI6Q7W7W/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/A4WLHY6Q7K6JNA6U6DTUSFTFAR3ZRXDQ/

[ovirt-users] Re: RPM issues updating Ovirt 4.5.2 to 4.5.3

[Martin Perina]

Hi Latchezar,

yesterday we have released an async oVirt 4.5.3.1 version, which is fixing
this repository issue, so once you upgrade your ovirt-release45 package,
you should no longer need to do any manual actions. More info in
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LXCTQGKBF2UBENE2I27TVJSEZFNBUSGC/

Regards,
Martin


On Fri, Oct 21, 2022 at 9:02 AM Latchezar Filtchev  wrote:

> Dear David,
>
>
>
> Can you point where is this official workaround? May be I am missing
> responses you are talking about.
>
>
>
> Thank you!
>
> Best,
>
> Latcho
>
>
>
>
>
> *From:* David Johnson 
> *Sent:* Wednesday, October 19, 2022 4:42 PM
> *To:* Milan Zamazal 
> *Cc:* users 
> *Subject:* [ovirt-users] Re: RPM issues updating Ovirt 4.5.2 to 4.5.3
>
>
>
> Thank you Milan,
>
>
>
> This is also the official workaround, based on other responses.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/ADW64DEAZAKM3MH4GJ2DHPZ4BDPO2SSZ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BEJTMLXZHHHWFH4XK2YAHDCHO2M5G3MK/

[ovirt-users] Re: How to configure HA virtual machine on hosts without IPMI

[Martin Perina]

On Tue, Oct 11, 2022 at 1:42 PM Klaas Demter  wrote:

> Don't storage leases solve that problem?
>

Not entirely, you are not able to kill a VM via storage lease, you can only
detect that even though we lost connection from engine to host (and this
means also VMs), then we can check if host/VM leases are refresh and if so,
we are not trying to restart VM on a different host

> I seem to recall a HA VM also works when (gets restarted on other node) a
> hypervisor completely loses power, ie there is no response on the fencing
> device. I'd expect it to work the same without a fencing device.
>

So if that happens, it's not a completely correct setup. If you want
reliable power management, then your power management network should be
independent on your data network, so if there is an issue with data
network, you should be able to use power management network to check power
status and perform reboot if needed. Of course if both networks are down,
then you have a problem, but that should be a rare case.


> Greetings
>
> Klaas
>
>
> On 10/11/22 11:46, Martin Perina wrote:
>
> Hi,
>
> there is no other way how to provide reliable HA VMs in oVirt wihout any
> hardware power management. If your servers don't provide any HW power
> management (such as IPMI, ILO, DRAC, ...), then the only option is to
> attach their power supply inputs through UPS with remote access and use apc
> fencing driver to restart servers using UPS.
>
> Martin
>
>
> On Tue, Oct 11, 2022 at 9:41 AM samuel@horebdata.cn <
> samuel@horebdata.cn> wrote:
>
>> Dear Ovirt folks,
>>
>> I am thinking of deploly an experimental Ovirt 3-node Cluster on servers
>> without IPMI. As far i know, Ovirts needs each host to have fence agent
>> working for any HA virtual machine. My question is, are there any other
>> ways in Ovirt to support fencing without using IPMI?
>>
>> thanks a lot,
>>
>> Samuel
>>
>>
>> --
>> Do Right Thing (做正确的事) / Pursue Excellence (追求卓越) / Help Others Succeed
>> (成就他人)
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EXOTNSY5DMLFYEGCPB4QDX4QUBVETCIJ/
>>
>
>
> --
> Martin Perina
> Manager, Software Engineering
> Red Hat Czech s.r.o.
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PS6PVOKZX5AUEW7ZI4PSI45V4NBIOJHS/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/RQI3IGEM3FEZC4MRWC7PPBX6UL6SC2U3/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VEF254EOOTFHPTGFNCMVIHXKRY2JZ6BA/

[ovirt-users] Re: How to configure HA virtual machine on hosts without IPMI

[Martin Perina]

Hi,

there is no other way how to provide reliable HA VMs in oVirt wihout any
hardware power management. If your servers don't provide any HW power
management (such as IPMI, ILO, DRAC, ...), then the only option is to
attach their power supply inputs through UPS with remote access and use apc
fencing driver to restart servers using UPS.

Martin


On Tue, Oct 11, 2022 at 9:41 AM samuel@horebdata.cn <
samuel@horebdata.cn> wrote:

> Dear Ovirt folks,
>
> I am thinking of deploly an experimental Ovirt 3-node Cluster on servers
> without IPMI. As far i know, Ovirts needs each host to have fence agent
> working for any HA virtual machine. My question is, are there any other
> ways in Ovirt to support fencing without using IPMI?
>
> thanks a lot,
>
> Samuel
>
>
> --
> Do Right Thing (做正确的事) / Pursue Excellence (追求卓越) / Help Others Succeed
> (成就他人)
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EXOTNSY5DMLFYEGCPB4QDX4QUBVETCIJ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PS6PVOKZX5AUEW7ZI4PSI45V4NBIOJHS/

[ovirt-users] Re: OVS Task Error when Add EL Host

[Martin Perina]

Hi,

please try to downgrade ansible-core-2.13 to 2.12, oVirt doesn't support
2.13 on EL8 yet.

Regards,
Martin


On Thu, Oct 6, 2022 at 3:23 PM Nur Imam Febrianto 
wrote:

> Hi,
>
>
>
> Getting strange error when adding EL Host (Using CentOS Stream 8) :
>
> The conditional check 'cluster_switch == \\\"ovs\\\" or (ovn_central is
> defined and ovn_central | ipaddr)' failed. The error was: The ipaddr filter
> requires python's netaddr be installed on the ansible controller\\n\\nThe
> error appears to be in
> '/usr/share/ovirt-engine/ansible-runner-service-project/project/roles/ovirt-provider-ovn-driver/tasks/configure.yml':
> line 3, column 5, but may\\nbe elsewhere in the file depending on the exact
> syntax problem.\\n\\nThe offending line appears to be:\\n\\n- block:\\n  -
> name: Install ovs\\n^ here\\n\"}",
>
>   "msg" : "The conditional check 'cluster_switch == \"ovs\" or
> (ovn_central is defined and ovn_central | ipaddr)' failed. The error was:
> The ipaddr filter requires python's netaddr be installed on the ansible
> controller\n\nThe error appears to be in
> '/usr/share/ovirt-engine/ansible-runner-service-project/project/roles/ovirt-provider-ovn-driver/tasks/configure.yml':
> line 3, column 5, but may\nbe elsewhere in the file depending on the exact
> syntax problem.\n\nThe offending line appears to be:\n\n- block:\n  - name:
> Install ovs\n^ here\n"
>
>
>
> Already checking the python-netaddr and its already installed on the
> system (both python3-netaddr and python38-netaddr).
>
> Using oVirt 4.5. Anybody getting this same issue ?
>
>
>
> Thanks before.
>
> Regards,
>
> Nur Imam Febrianto
>
>
>
> Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for
> Windows
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EGVQEKGAA6O2X3O6WQJIZSCALNZJ4AEF/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NIANNOHGJHC6BFVUBRVMBWSDOGNQ6C4C/

[ovirt-users] Re: Unable to change the admin passsword on oVirt 4.5.2.5

[Martin Perina]

Hi,

the answer depends if you selected Keycloak integration during engine-setup
or not. If you are not sure, you can check using following:

1. What is your username when connecting to webadmin?
- If it's "admin@ovirt", the you are using Keycloak integration
- If it's "admin" and profile "internal" then you are using AAA.

2. Please take a look at the file
/etc/ovirt-engine/engine.conf.d/12-setup-keycloak:
- If the file exists and it contains "KEYCLOAK_BUNDLED=true", then you
are using Keycloak integration
- If the file doesn't exists or it contains "KEYCLOAK_BUNDLED=false",
then you are using AAA.

If you selected Keycloak inetgration, the you need to login to Keycloak
administration console and change admin@ovirt password there. More
information can be found at
https://www.keycloak.org/archive/documentation-15.0.html

If you selected AAA, then the steps you posted below are correct.

Unfortunately we don't have yet proper documentation about Keycloak
integration, which was introduced in oVirt 4.5.1.

Regards,
Martin


On Fri, Sep 16, 2022 at 3:42 PM Ayansh Rocks 
wrote:

> Hi All,
>
> Any idea hot to change password of admin user on oVirt 4.5.2.5 ?
>
> Below is not working -
>
> [root@ovirt]# ovirt-aaa-jdbc-tool user password-reset admin
> Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false
> Password:
> Reenter password:
> updating user admin...
> user updated successfully
> [root@delhi-test-ovirtm-02 ~]#
>
> Above shows successful but password not changed.
>
> Thanks
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YYEHEQU3HIHAJSQI4PPSQP5Y2SZEE6MX/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FSTUVBLQJKUZFGKZGYE4WQDYWABF3GC5/

[ovirt-users] Re: Q: Engione 4.4.10 and New Host on CentOS Stream 9

[Martin Perina]

Hi,

As mentioned to run oVirt Engine 4.5 you need at least on EL8.6 or CS8
machine. Then you can create DataCenter with compatibility level 4.2, where
you can create 4.2 cluster.

Martin

On Wed, 31 Aug 2022, 14:41 Jirka Simon,  wrote:

> Hi Martin,
>
> then I'm a bit confused :D in ovirt doc is  written.
>
> see
> https://www.ovirt.org/documentation/upgrade_guide/#Upgrading_the_Manager_to_4-5_4-4_local_db
> and when I have a fresh oVirt4.5 installation there is cluster
> compatibility version 4.2 not available.
>
> Jirka
>
> On 8/29/22 16:27, Martin Perina wrote:
>
> Hi,
>
> you are mixing 2 unrelated versioning parts:
>
> 1. Supported cluster levels
> - oVirt Engine 4.5 supports cluster level 4.2 - 4.7
>
> https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules/compat/src/main/java/org/ovirt/engine/core/compat/Version.java#L22
> - This means that both EL7 based (4.2 and 4.3) and EL8 based (4.4-4.7)
> hosts can be successfully managed by oVirtEngine 4.5
>
> 2. OS requirements of oVirt Engine 4.5
> - oVirt Engine 4.5 is supported only on EL 8.6+ and CS8 stream
> - This means that:
> - for standalone engine you need to have a machine with EL8.6 or
> CS8
> - for hosted engine you need to have a cluster with EL8.6 or CS8
> hosts, where hosted engine VM based on E8.6 or CS8 can run
>
> So specifically for your use case you need:
>
> 1. Standalone engine 4.5 running on EL8.6 or CS8, which can manage 4.2
> hosts in 4.2 cluster
> 2. Hosted engine 4.5 running on cluster of EL8.6 or CS8 hosts with
> additional (different) 4.2 cluster, where your 4.2 hosts reside
>
> Regards,
> Martin
>
>
> On Mon, Aug 29, 2022 at 2:43 PM Jirka Simon  wrote:
>
>> Hi Andrei,
>>
>> ovirt 4.4+ has to run with centos/ rhel 8, I would not recommend mix
>> versions of ovirt node version within one cluster. (there couldbe / will
>> be a problem with vdsm version on each node)
>>
>> And yes cluster compatibility version number doesn't match  ovirt version.
>>
>> I would recommend to try to remove the oldest node from the cluster (if
>> upu have some spare nodes) and try to reinstall it to centos 8 or 9 with
>> standalone engine for test if it works or not.
>>
>> Jirka
>>
>> On 8/29/22 14:26, Andrei Verovski wrote:
>> > Hi,
>> >
>> > My oldest nodes are version 4.2 on CentOS 7.6.
>> > What is the latest cluster compatibility level they support?
>> > Looks like oVirt Engine version and cluster compatibility level do not
>> match number to number, e.g. my oVirt engine 4.4.10 seems can set cluster
>> compatibility level up to 4.6.
>> >
>> > Someone from Red Hat, please clarify.
>> > Thanks in advance.
>> >
>> >
>> >> On 29 Aug 2022, at 15:09, Jirka Simon  wrote:
>> >>
>> >> Hi Andrei,
>> >>
>> >> as I know,  you need to have to have your cluster with at least 4.3
>> version to migrate to 4.5. I was facing the same  problem with (not so) old
>> hardware. and i started to do step by step migration.
>> >>
>> >> it means i created new cluster with fresh configuration with ovirt
>> 4.5  and cluster compatibility version 4.7 next to old one with 4.4.   Iit
>> is a good opportunity to prepare whole cluster configuration in ansible for
>> me :D
>> >>
>> >> Then I migrate VMs one by one from old cluster to the new one. When is
>> one node free on old cluster I reinstall it and add to new cluster.
>> >>
>> >> Maybe it is not the fastest solution, but i can arrange maintenance
>> for each VM.
>> >>
>> >> Jirka
>> >>
>> >> On 8/29/22 10:13, Andrei Verovski wrote:
>> >>> Hi,
>> >>>
>> >>> I have cluster compatibility version 4.2, due to some old nodes.
>> >>>  From what I remember in oVirt 4.5 release notes (correct please, may
>> be wrong here), oVirt engine 4.5 requires cluster compatibility version >=
>> 4.3.
>> >>> Please clarify. Thanks.
>> >>>
>> >>>
>> >>>>> On 28. 8. 2022, at 18:52, Andrei Verovski 
>> wrote:
>> >>>>>
>> >>>>> Hi,
>> >>>>>
>> >>>>> I have engine version 4.4.10.7-1.el8, is it possible to set up new
>> node host on CentOS Stream 9, or I need to upgrade engine to version 4.5
>> first (which is not right now possible because of some quite old nodes) ?
>> >>>> yes, you generally need the lat

[ovirt-users] Re: Q: Engione 4.4.10 and New Host on CentOS Stream 9

[Martin Perina]

gt; >>> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> >>> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/SZCOBNKBBSFUPNDWOIXRLVZ5OOJXHA7D/
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/C643UFIPQVG5MSFAR7PWYSHP4XUEZADR/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/ASMNUVQLVUQI6QEMNGZST43ERBU3LBVY/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6HNVNWMEZWQWSS2O4JC46SX34W4LEXXM/

[ovirt-users] Re: User login issues - version 4.5.1

[Martin Perina]

Hi,

as mentioned in https://bugzilla.redhat.com/show_bug.cgi?id=2021497 from
oVirt 4.5.1 for new installations we are configuring internal instance of
Keycloak to provide authentication for oVirt engine.
oVirt AAA providers has been deprecated and even though they continue to
work and there are no plans at the moment to remove them, it's advised to
plan the switch to Keycloak. So here are possible scenarios:

1. New oVirt 4.5.1+ deployments -> it's advised use either internal or
external Keycloak to provide authentication
2. New oVirt 4.5.1+ deployment with AAA -> it's possible during
engine-setup phase of installation process to choose to use AAA instead of
Keycloak
3. Upgrade of older oVirt releases to 4.5.1+
a. If old installation used AAA, then during upgrade nothing changes
and upgraded setup will continue to use AAA
b. If old installation used Keycloak, then during upgrade nothing
changes and upgraded setup will continue to use Keycloak
4. If administrators wants to switch from AAA to internal Keycloak in oVirt
4.5.1+, there is automated way to do it using engine-setup
https://github.com/oVirt/ovirt-engine-keycloak/blob/master/keycloak_usage.md#reconfiguration-from-ovirt-451-and-above
5. If administrators wants to switcht from AAA to external Keycloak, there
is manual procedure described in
https://www.ovirt.org/documentation/administration_guide/index.html#Configuring_Red_Hat_SSO
and
https://blogs.ovirt.org/2019/01/federate-ovirt-engine-authentication-to-openid-connect-infrastructure/

For now the documentation around internal Keycloak instance is available at
https://github.com/oVirt/ovirt-engine-keycloak/blob/master/keycloak_usage.md
and in the near future it will be incorporated into official oVirt
documentation at https://www.ovirt.org/documentation/

For Keycloak related documentation please refer to
https://www.keycloak.org/documentation

Regards,
Martin


On Tue, Aug 2, 2022 at 11:21 AM r greg  wrote:

> Someone has provided me the answer, by login on to keycloak (
> https://engine./ovirt-engine-auth/)
>
> https://github.com/oVirt/ovirt-engine-keycloak/blob/master/keycloak_usage.md
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/253WIFTLQLTGVVGXH4ZWE236GZCZPESB/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UMG3BB5I4T5AGPWY2XABNFJUOQVBIIGV/

[ovirt-users]Re: 回复: login error via active directory

[Martin Perina]

Hi,

if you want to expose your LDAP server to keycloak you need to login
keycloak admin console https://ENGINE_FQDN/ovirt-engine-auth/admin and
login as admin user with password specified in engine-setup.
If you are not familiar with Keycloak, please take a look at Keycloak
documentation https://www.keycloak.org/documentation
and especially at Keycloak Administration Guide on LDAP configuration:
https://www.keycloak.org/docs/latest/server_admin/index.html#_ldap

Regards,
Martin


On Tue, Aug 2, 2022 at 9:07 AM  wrote:

> Ok. I understand. This question is equivalent to:
>
> How to add active directory via Keycloak?
>
> No document on ovirt.org.
>
>
>
> *发件人:* adam...@adagene.com.cn 
> *发送时间:* 2022年8月2日 13:50
> *收件人:* users@ovirt.org
> *主题:* [ovirt-users] login error via active directory
>
>
>
> Hi Ovirt list,
>
> I have a fresh installed ovirt cluster. Version 4.5.1.3
>
> And I ran " ovirt-engine-extension-aaa-ldap-setup” to attach an AD
> successfully.
>
> First question is:
>
> When I click “Administration Portal”, the login page jumped to
> https://engine.example.com/ovirt-engine-auth/realms/ovirt-internal/protocol/openid-connect/auth?response_type=code=openid_id=ovirt-engine-internal=pWm6gymCKh9eW-pq1P5PSdvSeUY_uri=https%3A%2F%2Fengine.adagene.cn%2Fovirt-engine%2Fcallback=Rnx6mYrKjBLP0bEnPEUKAjE0jQ96IaJIz6IY7j8a4b0
>
> Not the https://engine.example.com/ovirt-engine/sso/login.html page.
>
> I removed the httpd conf file /etc/httpd/conf.d/internalsso-openidc.conf
>  and restart httpd. This time, it jumped to
> https://engine.example.com/ovirt-engine/sso/login.html
>
>
>
> The second question:
>
> When I try to login via Active Directory accounts, it said：
>
> server_error: Missing parameter: 'params'
>
>
>
> here’s some logs in engine.log
>
> 2022-08-02 13:43:54,686+08 INFO
> [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand]
> (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-8)
> [38f1f346] Lock freed to object
> 'EngineLock:{exclusiveLocks='[7ae0fbd3-c2fb-4a82-8d36-6c88c5bce900=PROVIDER]',
> sharedLocks=''}'
>
> 2022-08-02 13:46:47,451+08 ERROR
> [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
> task-3) [] Internal Server Error: Missing parameter: 'params'
>
> 2022-08-02 13:46:47,451+08 ERROR
> [org.ovirt.engine.core.sso.service.SsoService] (default task-3) [] Missing
> parameter: 'params'
>
> 2022-08-02 13:46:47,632+08 ERROR
> [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-3) []
> server_error: Missing parameter: 'params'
>
> 2022-08-02 13:47:18,747+08 ERROR
> [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
> task-3) [] Internal Server Error: Missing parameter: 'params'
>
> 2022-08-02 13:47:18,747+08 ERROR
> [org.ovirt.engine.core.sso.service.SsoService] (default task-3) [] Missing
> parameter: 'params'
>
> 2022-08-02 13:47:46,550+08 INFO
> [org.ovirt.engine.core.bll.utils.ThreadPoolMonitoringService]
> (EE-ManagedScheduledExecutorService-engineThreadMonitoringThreadPool-Thread-1)
> [] Thread pool 'default' is using 0 threads out of 1, 5 threads waiting for
> tasks.
>
>
>
> I need your help.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/STKB6SLQBSPDJE3ATU5RHCRZV54CKXE6/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RYQYCJ6PO7QNPQYSTEENNJVYOXEYZVNR/

[ovirt-users] Re: Grafana - Origin Not Allowed

[Martin Perina]

Hi,

this should already be fixed by https://github.com/oVirt/ovirt-dwh/pull/38
included in ovirt-engine-dwh-4.5.3,
which should be part of upcoming oVirt 4.5.1 release.

Regards,
Martin


On Tue, Jun 14, 2022 at 1:20 PM Igor Davidoff 
wrote:

> according to grafana:
>
>
> https://grafana.com/blog/2022/02/08/grafana-7.5.15-and-8.3.5-released-with-moderate-severity-security-fixes/
>
> it was the security fix CSRF (CVE-2022-21703) for version 7.5.15 and 8.3.5.
> As ovirt engine uses httpd as reverse proxy and the grafana V. 7.5.15:
> **
> # grafana-server -v
> Version 7.5.15 (commit: NA, branch: master)
> **
> the described configuration of "ProxyPreserveHost" for Host header is
> needed!
>
> Can the dev. team take this configuration to
> /etc/httpd/conf.d/ovirt-engine-grafana-proxy.conf
> for the next update?
>
> It is not the option to change the default config after every update.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HBVS4U2NK5XWPGCNOHCZLMUL544ZZI36/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XY7XAPUQJ2ATPZBHLYA2O3B456V4JVFG/

[ovirt-users] Re: ClassNotFoundException after upgrade to 4.5

[Martin Perina]

On Tue, Jun 7, 2022 at 10:11 AM Alireza Eskandari 
wrote:

> Thank you for your reply.
> I have found the root cause.
> There was a manually created file in the
> "/etc/ovirt-engine/engine-conf.d/" that inserts a path on top of the
> "ENGINE_JAVA_MODULEPATH" variable.
> I removed the file and fixed the problem.
> Thanks
>

Great to hear!

Regards,
Martin

>
> On Mon, Jun 6, 2022 at 9:53 AM Martin Perina  wrote:
>
>> Hi,
>>
>> have you followed the upgrade guide? Especially the part to upgrade
>> engine setup packages and then run engine-setup to upgrade the rest of
>> engine?
>>
>>
>> https://www.ovirt.org/documentation/upgrade_guide/index.html#Updating_the_Red_Hat_Virtualization_Manager_4-4_local_db
>>
>> If so, could you please provide output of following commands:
>>
>> rpm -q ovirt-engine
>> rpm -q apache-sshd
>>
>> Thanks,
>> Martin
>>
>>
>> On Sat, Jun 4, 2022 at 7:01 PM  wrote:
>>
>>> Hi all,
>>> I tried to upgrade my ovirt engine from 4.3.10 to 4.5.0. After restore
>>> backup, everything seems ok. I can login to admin panel.
>>> But when I want to add new host, I get this exception:
>>>
>>> 2022-06-01 12:13:04,987-04 ERROR [org.jboss.as.ejb3.invocation] (default
>>> task-32) WFLYEJB0034: Jakarta Enterprise Beans Invocation failed on
>>> component Backend for method public abstract
>>> org.ovirt.engine.core.common.queries.QueryReturnValue
>>> org.ovirt.engine.core.common.interfaces.BackendLocal.runQuery(org.ovirt.engine.core.common.queries.QueryType,org.ovirt.engine.core.common.queries.QueryParametersBase):
>>> javax.ejb.EJBException: WFLYEJB0442: Unexpected Error
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:234)
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.tx.CMTTxInterceptor.supports(CMTTxInterceptor.java:446)
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:164)
>>> at org.jboss.invocation@1.6.0.
>>> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
>>> at org.jboss.invocation@1.6.0.
>>> Final//org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:509)
>>> at org.jboss.weld.core@3.1.7.SP1
>>> //org.jboss.weld.module.ejb.AbstractEJBRequestScopeActivationInterceptor.aroundInvoke(AbstractEJBRequestScopeActivationInterceptor.java:81)
>>> at org.jboss.as.weld.common@24.0.1.Final
>>> //org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:89)
>>> at org.jboss.invocation@1.6.0.
>>> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
>>> at org.jboss.invocation@1.6.0.
>>> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.component.invocationmetrics.WaitTimeInterceptor.processInvocation(WaitTimeInterceptor.java:47)
>>> at org.jboss.invocation@1.6.0.
>>> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(SecurityContextInterceptor.java:100)
>>> at org.jboss.invocation@1.6.0.
>>> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.deployment.processors.StartupAwaitInterceptor.processInvocation(StartupAwaitInterceptor.java:22)
>>> at org.jboss.invocation@1.6.0.
>>> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:64)
>>> at org.jboss.invocation@1.6.0.
>>> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
>>> at org.jboss.as.ejb3@24.0.1.Final
>>> //org.jboss.as.ejb3.component.interce

[ovirt-users] Re: ClassNotFoundException after upgrade to 4.5

[Martin Perina]

at org.jboss.weld.core@3.1.7.SP1
> //org.jboss.weld.bean.InterceptorImpl.intercept(InterceptorImpl.java:105)
> at org.jboss.as.weld.ejb@24.0.1.
> Final//org.jboss.as.weld.ejb.DelegatingInterceptorInvocationContext.proceed(DelegatingInterceptorInvocationContext.java:82)
> at org.jboss.as.weld.ejb@24.0.1.
> Final//org.jboss.as.weld.interceptors.EjbComponentInterceptorSupport.delegateInterception(EjbComponentInterceptorSupport.java:60)
> at org.jboss.as.weld.common@24.0.1.Final
> //org.jboss.as.weld.interceptors.Jsr299BindingsInterceptor.delegateInterception(Jsr299BindingsInterceptor.java:77)
> at org.jboss.as.weld.common@24.0.1.Final
> //org.jboss.as.weld.interceptors.Jsr299BindingsInterceptor.doMethodInterception(Jsr299BindingsInterceptor.java:89)
> at org.jboss.as.weld.common@24.0.1.Final
> //org.jboss.as.weld.interceptors.Jsr299BindingsInterceptor.processInvocation(Jsr299BindingsInterceptor.java:102)
> at org.jboss.as.ee@24.0.1.Final
> //org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:63)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:509)
> at
> deployment.engine.ear.bll.jar//org.ovirt.engine.core.bll.interceptors.CorrelationIdTrackerInterceptor.aroundInvoke(CorrelationIdTrackerInterceptor.java:13)
> at jdk.internal.reflect.GeneratedMethodAccessor67.invoke(Unknown
> Source)
> at
> java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.base/java.lang.reflect.Method.invoke(Method.java:566)
> at org.jboss.as.ee@24.0.1.Final
> //org.jboss.as.ee.component.ManagedReferenceLifecycleMethodInterceptor.processInvocation(ManagedReferenceLifecycleMethodInterceptor.java:89)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.component.invocationmetrics.ExecutionTimeInterceptor.processInvocation(ExecutionTimeInterceptor.java:43)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ee@24.0.1.Final
> //org.jboss.as.ee.concurrent.ConcurrentContextInterceptor.processInvocation(ConcurrentContextInterceptor.java:45)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:40)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:53)
> at org.jboss.as.ee@24.0.1.Final
> //org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:52)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.component.singleton.SingletonComponentInstanceAssociationInterceptor.processInvocation(SingletonComponentInstanceAssociationInterceptor.java:53)
> at org.jboss.invocation@1.6.0.
> Final//org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:422)
> at org.jboss.as.ejb3@24.0.1.Final
> //org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:232)
> ... 103 more
> Caused by: java.lang.ClassNotFoundException:
> org.apache.sshd.common.util.io.output.SecureByteArrayOutputStream from
> [Module "org.ovirt.engine.core.uutils" from local module loader @172b013
> (finder: local module finder @56673b2c (roots:
> /usr/share/ovirt-engine-wildfly-overlay/modules,/usr/share/ovirt-engine-wildfly/modules/system/layers/base,/usr/share/ovirt-engine/modules/common,/usr/share/ovirt-engine-extension-aaa-jdbc/modules,/usr/share/ovirt-engine-wildfly/modules,/usr/share/ovirt-engine-wildfly/modules/system/layers/base))]
> at
> org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:255)
> at
> org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:410)
> at
> org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398)
> at
> org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:116)
> ... 153 more
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GWIM6FMPFTMWEPAL4IMCKFWDSQI3ZZP6/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TWYSAYPJDE6DT5IWLGKWJBF3J5YJNFNQ/

[ovirt-users] Re: [IMPORTANT] Upgrade to postgresql-jdbc-42.2.14-1 breaks oVirt Engine 4.4/4.5

[Martin Perina]

On Thu, May 12, 2022 at 7:39 AM Yedidyah Bar David  wrote:

> On Wed, May 11, 2022 at 10:18 PM Martin Perina  wrote:
> >
> > Hi,
> >
> > as mentioned in 4.5.0.8 announcement and Doc Text of
> https://bugzilla.redhat.com/show_bug.cgi?id=2077794 postgresql-jdbc >=
> 42.2.14 is required for ovirt-engine to work properly.
> >
> > So please remove the exclude, update postgresql-jdbc to the latest and
> restart ovirt-engine service.
>
> Perhaps we should have updated the spec file to Require: the correct
> version.
>
> This would have caused engine-setup (upgrade), if the new version was
> excluded/blocked/whatever, to fail - rather early and safely, IMO.
>

Right, unfortunately we have somehow missed that 
It should be fixed in oVirt 4.5.1:
https://github.com/oVirt/ovirt-engine/pull/373

>
> Best regards,
>
> >
> > Martin
> >
> > On Wed, May 11, 2022 at 4:52 PM Maton, Brett 
> wrote:
> >>
> >> Probably worth pointing out that if you (as I did) update to 4.5.0.8
> and exclude the postgresql-jdbc update you'll wind up with
> >>
> >> 500 - Internal Server Error
> >>
> >> When you try to login to the admin console again.
> >>
> >> On Wed, 11 May 2022 at 13:43, Martin Perina  wrote:
> >>>
> >>> Hi,
> >>>
> >>> oVirt 4.5.0.8 async release has fixed the issue with postgresql-jdbc
> drivers:
> >>>
> >>>
> https://lists.ovirt.org/archives/list/users@ovirt.org/thread/GAENJ2DPZSDCC276KM5QKUAZE5XPWTRG/
> >>>
> >>> So for oVirt 4.5.0.8 you no longer need to exclude postgresql-jdbc >=
> 42.2.14 package during installation/upgrade.
> >>>
> >>> Regards,
> >>> Martin
> >>>
> >>>
> >>> On Fri, Apr 22, 2022 at 5:35 PM Martin Perina 
> wrote:
> >>>>
> >>>> Hi,
> >>>> Unfortunately we have just found that latest release of
> postgresql-jdbc-42.2.14-1 breaks existing oVirt Engine 4.4 and 4.5
> installations running on CentOS Stream.
> >>>> The workaround is to downgrade to previous version, for example
> postgresql-jdbc-42.2.3-3 should work fine.
> >>>>
> >>>> Here are detailed instructions:
> >>>>
> >>>> 1. If you have already upgraded to postgresql-jdbc-42.2.14-1, please
> downgrade to previous version:
> >>>>
> >>>> $ dnf downgrade postgresql-jdbc
> >>>> $ systemctl restart ovirt-engine
> >>>>
> >>>> 2. If you are going to upgrade your oVirt Engine machine, please
> exclude postgresql-jdbc package from upgrades:
> >>>>
> >>>> $ dnf update -x postgresql-jdbc
> >>>>
> >>>> We have created https://bugzilla.redhat.com/2077794 to track this
> issue, but unfortunately we don't have a fix yet.
> >>>>
> >>>> Regards,
> >>>> Martin
> >>>>
> >>>> --
> >>>> Martin Perina
> >>>> Manager, Software Engineering
> >>>> Red Hat Czech s.r.o.
> >>>
> >>>
> >>>
> >>> --
> >>> Martin Perina
> >>> Manager, Software Engineering
> >>> Red Hat Czech s.r.o.
> >>> ___
> >>> Users mailing list -- users@ovirt.org
> >>> To unsubscribe send an email to users-le...@ovirt.org
> >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> >>> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> >>> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GVFSXYLTQKRAVAVXY5ONBN4NRI24ED55/
> >
> >
> >
> > --
> > Martin Perina
> > Manager, Software Engineering
> > Red Hat Czech s.r.o.
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DKWQJMDQVQRLKYPQTBIPVJM4WZHY2FAY/
>
>
>
> --
> Didi
>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KKMGGCID2BPGMCTPHZVDYNJSNNH7Q4F5/

[ovirt-users] Re: [IMPORTANT] Upgrade to postgresql-jdbc-42.2.14-1 breaks oVirt Engine 4.4/4.5

[Martin Perina]

Hi,

as mentioned in 4.5.0.8 announcement and Doc Text of
https://bugzilla.redhat.com/show_bug.cgi?id=2077794 postgresql-jdbc >=
42.2.14 is required for ovirt-engine to work properly.

So please remove the exclude, update postgresql-jdbc to the latest and
restart ovirt-engine service.

Martin

On Wed, May 11, 2022 at 4:52 PM Maton, Brett 
wrote:

> Probably worth pointing out that if you (as I did) update to 4.5.0.8 and
> exclude the postgresql-jdbc update you'll wind up with
>
> 500 - Internal Server Error
>
> When you try to login to the admin console again.
>
> On Wed, 11 May 2022 at 13:43, Martin Perina  wrote:
>
>> Hi,
>>
>> oVirt 4.5.0.8 async release has fixed the issue with postgresql-jdbc
>> drivers:
>>
>>
>> https://lists.ovirt.org/archives/list/users@ovirt.org/thread/GAENJ2DPZSDCC276KM5QKUAZE5XPWTRG/
>>
>> So for oVirt 4.5.0.8 you no longer need to exclude postgresql-jdbc >=
>> 42.2.14 package during installation/upgrade.
>>
>> Regards,
>> Martin
>>
>>
>> On Fri, Apr 22, 2022 at 5:35 PM Martin Perina  wrote:
>>
>>> Hi,
>>> Unfortunately we have just found that latest release of
>>> postgresql-jdbc-42.2.14-1 breaks existing oVirt Engine 4.4 and 4.5
>>> installations running on CentOS Stream.
>>> The workaround is to downgrade to previous version, for example
>>> postgresql-jdbc-42.2.3-3 should work fine.
>>>
>>> Here are detailed instructions:
>>>
>>> 1. If you have already upgraded to postgresql-jdbc-42.2.14-1, please
>>> downgrade to previous version:
>>>
>>> $ dnf downgrade postgresql-jdbc
>>> $ systemctl restart ovirt-engine
>>>
>>> 2. If you are going to upgrade your oVirt Engine machine, please exclude
>>> postgresql-jdbc package from upgrades:
>>>
>>> $ dnf update -x postgresql-jdbc
>>>
>>> We have created https://bugzilla.redhat.com/2077794 to track this
>>> issue, but unfortunately we don't have a fix yet.
>>>
>>> Regards,
>>> Martin
>>>
>>> --
>>> Martin Perina
>>> Manager, Software Engineering
>>> Red Hat Czech s.r.o.
>>>
>>
>>
>> --
>> Martin Perina
>> Manager, Software Engineering
>> Red Hat Czech s.r.o.
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GVFSXYLTQKRAVAVXY5ONBN4NRI24ED55/
>>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DKWQJMDQVQRLKYPQTBIPVJM4WZHY2FAY/

[ovirt-users] Re: [IMPORTANT] Upgrade to postgresql-jdbc-42.2.14-1 breaks oVirt Engine 4.4/4.5

[Martin Perina]

Hi,

oVirt 4.5.0.8 async release has fixed the issue with postgresql-jdbc
drivers:

https://lists.ovirt.org/archives/list/users@ovirt.org/thread/GAENJ2DPZSDCC276KM5QKUAZE5XPWTRG/

So for oVirt 4.5.0.8 you no longer need to exclude postgresql-jdbc >=
42.2.14 package during installation/upgrade.

Regards,
Martin


On Fri, Apr 22, 2022 at 5:35 PM Martin Perina  wrote:

> Hi,
> Unfortunately we have just found that latest release of
> postgresql-jdbc-42.2.14-1 breaks existing oVirt Engine 4.4 and 4.5
> installations running on CentOS Stream.
> The workaround is to downgrade to previous version, for example
> postgresql-jdbc-42.2.3-3 should work fine.
>
> Here are detailed instructions:
>
> 1. If you have already upgraded to postgresql-jdbc-42.2.14-1, please
> downgrade to previous version:
>
> $ dnf downgrade postgresql-jdbc
> $ systemctl restart ovirt-engine
>
> 2. If you are going to upgrade your oVirt Engine machine, please exclude
> postgresql-jdbc package from upgrades:
>
> $ dnf update -x postgresql-jdbc
>
> We have created https://bugzilla.redhat.com/2077794 to track this issue,
> but unfortunately we don't have a fix yet.
>
> Regards,
> Martin
>
> --
> Martin Perina
> Manager, Software Engineering
> Red Hat Czech s.r.o.
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GVFSXYLTQKRAVAVXY5ONBN4NRI24ED55/

[ovirt-users] Re: upgrade ovirt-engine 4.3 to 4.4. engine.ear problems?

[Martin Perina]

On Wed, Apr 27, 2022 at 8:52 AM Yedidyah Bar David  wrote:

> On Wed, Apr 27, 2022 at 9:31 AM Martin Perina  wrote:
> >
> > Hi Ingvar,
> > according to the logs your 4.4 installation doesn't work because you hit
> postgresql-jdbc issue:
> >
> >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/SBCWNXLFLJBKTA3TFJARE7QCYZQ6QMMH/
>
> Thanks, Martin. Can you please clarify how you understand this, and
> more importantly, add relevant possible errors/warnings/whatever to
> the bug, so that people will find it when searching for them? Thanks.
>

It was just a guess from below error:

2022-04-26 13:52:42,220+02 ERROR [org.jboss.msc.service.fail]
(ServerService Thread Pool -- 51) MSC01: Failed to start service
jboss.deployment.subunit."engine.ear"."bll.jar".component.Backend.START:
org.jboss.msc.service.StartException in service
jboss.deployment.subunit."engine.ear"."bll.jar".component.Backend.START:
java.lang.IllegalStateException: WFLYEE0042: Failed to construct component
instance
2022-04-26 13:52:42,231+02 ERROR
[org.jboss.as.controller.management-operation] (Controller Boot Thread)
WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" =>
"engine.ear")]) - failure description: {"WFLYCTL0080: Failed services" =>
{"jboss.deployment.subunit.\"engine.ear\".\"bll.jar

and a fact that they tried to upgrade to 4.4 now when there is this
postgresql-jdbc issue.

>
> Also, while we are working on fixing this, perhaps we can temporarily
> make the engine require an older version?
>
> E.g.: https://github.com/oVirt/ovirt-engine/pull/316
>
> Didn't test it.
>

We are still investigating the issue, once we have a complete picture we
will address it


> Best regards,
> --
> Didi
>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JYYVGLDCDREJQY7COYFQKQBF2754AB2J/

[ovirt-users] Re: upgrade ovirt-engine 4.3 to 4.4. engine.ear problems?

[Martin Perina]

gine.ear")
> > 2022-04-26 13:52:42,254+02 INFO  [org.jboss.as.controller] (Controller
> Boot Thread) WFLYCTL0183: Service status report
> > 2022-04-26 13:52:42,564+02 INFO  [org.jboss.as.server] (Controller Boot
> Thread) WFLYSRV0212: Resuming server
> > 2022-04-26 13:52:42,568+02 ERROR [org.jboss.as] (Controller Boot
> Thread) WFLYSRV0026: WildFly Full 23.0.2.Final (WildFly Core 15.0.1.Final)
> started (with errors) in 24096ms - Started 1668 of 1888 services (6
> services failed or missing dependencies, 393 services are lazy, passive or
> on-demand)
> > 2022-04-26 13:52:42,574+02 INFO  [org.jboss.as] (Controller Boot
> Thread) WFLYSRV0060: Http management interface listening on
> http://127.0.0.1:8706/management
> > 2022-04-26 13:52:42,575+02 INFO  [org.jboss.as] (Controller Boot
> Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:8706
>
> I quickly skimmed through the above log snippet, and do not know why
> it fails. Some of your errors/warnings do appear in google. Did you
> try that? Not sure any I noticed are relevant to your case, though.
>
> Please note that oVirt 4.5.0 was released recently and 4.4 is EOL.
>
> Please try again with 4.5.
>
> It should be possible to upgrade via backup/restore directly from 4.3
> to 4.5, no need to go through 4.4:
>
> https://github.com/oVirt/ovirt-engine/pull/244
>
> Last but not least, thanks for a great report, including all relevant
> details right on the start.
>
> Best regards,
> --
> Didi
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/6DZLI2ATFH3GKDD2EW7V5Y5C6MW3SO5G/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/G3GBGXSUSC4N3LM6WXX772A5AO4CYUIK/

[ovirt-users] Re: Notified that Engine's certification is about to expire but no documentation to renew it

[Martin Perina]

Hi Guillaume,

to renew host certificates you need to perform following actions in
webadmin or RESTAPI:

1. Move the host to Maintenance status
2. Execute Enroll Certificates for the host
3. Watch Events on the host to see if Enroll Certificates finished
successfully
4. Execute Activate for the host

Regards,
Martin

On Mon, Apr 25, 2022 at 1:46 PM Guillaume Pavese <
guillaume.pav...@interactiv-group.com> wrote:

> Hello
>
> We are receiving the following notifications from our ovirt manager  :
>
> Message:Engine's certification is about to expire at 2022-05-03. Please
> renew the engine's certification.
> Severity:WARNING
>
>
> Effectively :
>
> # openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer -startdate
> -enddate -noout
> notBefore=Mar 30 04:48:15 2021 GMT
> notAfter=May  3 04:48:15 2022 GMT
>
>
> However I can not find any documentation on how to renew this certificate.
> The following doc only convers changing apache-ca.pem & apache.cer, and
> not engine.cer
>
> Doc oVirt :
> https://ovirt.org/documentation/administration_guide/index.html#Replacing_the_Manager_CA_Certificate
> Doc RHV :
> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/administration_guide/index#Replacing_the_Manager_CA_Certificate
>
>
> Any help ?
>
> Guillaume Pavese
> Ingénieur Système et Réseau
> Interactiv-Group
>
> Ce message et toutes les pièces jointes (ci-après le “message”) sont
> établis à l’intention exclusive de ses destinataires et sont confidentiels.
> Si vous recevez ce message par erreur, merci de le détruire et d’en avertir
> immédiatement l’expéditeur. Toute utilisation de ce message non conforme a
> sa destination, toute diffusion ou toute publication, totale ou partielle,
> est interdite, sauf autorisation expresse. L’internet ne permettant pas
> d’assurer l’intégrité de ce message . Interactiv-group (et ses filiales)
> décline(nt) toute responsabilité au titre de ce message, dans l’hypothèse
> ou il aurait été modifié. IT, ES, UK.
> <https://interactiv-group.com/disclaimer.html>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HWHBRHZDCHKRTMV7SK63URREVPHIZQTI/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ROJDGIDLQRMQ6E7HQINUVATYDPLR65QI/

[ovirt-users] Re: Error 500 on Hosted Engine admin portal!!!

[Martin Perina]

Hi Patrick,

Most probably you hit postgresl-jdbc version problem:

https://lists.ovirt.org/archives/list/users@ovirt.org/thread/SBCWNXLFLJBKTA3TFJARE7QCYZQ6QMMH/

Please let us know if above workaround won't help.

Thanks,
Martin


On Sat, 23 Apr 2022, 22:32 Patrick Lomakin, 
wrote:

> Hi everyone! Did the oVirt team check the 4.5 update before release? I've
> update my production latest 4.4.10 version and get Error 500 on admin page.
> Clean installation on another bare-metal node using Ovirt Node 4.5 and
> hosted-engine console setup (installing through the web installer several
> versions of Ovirt traditionally makes the connection break and disconnects
> access to the host by means of the IP address) get an error 500 after
> healthcheck. What I will do in this situation?
> Httpd log:
> [Sat Apr 23 15:54:59.826076 2022] [core:notice] [pid 1526:tid
> 140201844767040] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
> [Sat Apr 23 15:55:05.685872 2022] [proxy:error] [pid 2125:tid
> 140201102243584] (111)Connection refused: AH00957: AJP: attempt to connect
> to 127.0.0.1:8702 (127.0.0.1) failed
> [Sat Apr 23 15:55:05.685924 2022] [proxy_ajp:error] [pid 2125:tid
> 140201102243584] [client 192.168.0.14:43194] AH00896: failed to make
> connection to backend: 127.0.0.1
> [Sat Apr 23 15:55:15.831754 2022] [proxy:error] [pid 2125:tid
> 140201110636288] (111)Connection refused: AH00957: AJP: attempt to connect
> to 127.0.0.1:8702 (127.0.0.1) failed
> [Sat Apr 23 15:55:15.831811 2022] [proxy_ajp:error] [pid 2125:tid
> 140201110636288] [client 192.168.0.14:43196] AH00896: failed to make
> connection to backend: 127.0.0.1
> [Sat Apr 23 16:21:57.720678 2022] [proxy:error] [pid 7761:tid
> 140200894203648] (111)Connection refused: AH00957: AJP: attempt to connect
> to 127.0.0.1:8702 (127.0.0.1) failed
> [Sat Apr 23 16:21:57.720745 2022] [proxy_ajp:error] [pid 7761:tid
> 140200894203648] [client 192.168.0.14:43516] AH00896: failed to make
> connection to backend: 127.0.0.1
> [Sat Apr 23 16:30:57.738971 2022] [proxy:error] [pid 7761:tid
> 140200877418240] (111)Connection refused: AH00957: AJP: attempt to connect
> to 127.0.0.1:8702 (127.0.0.1) failed
> [Sat Apr 23 16:30:57.739043 2022] [proxy_ajp:error] [pid 7761:tid
> 140200877418240] [client 192.168.0.14:43640] AH00896: failed to make
> connection to backend: 127.0.0.1
> [Sat Apr 23 16:32:27.838795 2022] [proxy:error] [pid 7761:tid
> 140200978130688] (111)Connection refused: AH00957: AJP: attempt to connect
> to 127.0.0.1:8702 (127.0.0.1) failed
> [Sat Apr 23 16:32:27.838881 2022] [proxy_ajp:error] [pid 7761:tid
> 140200978130688] [client 192.168.0.14:43658] AH00896: failed to make
> connection to backend: 127.0.0.1
> [Sat Apr 23 16:37:49.357585 2022] [core:notice] [pid 1497:tid
> 139855753558336] SELinux policy enabled; httpd running as context
> system_u:system_r:httpd_t:s0
> [Sat Apr 23 16:37:49.361573 2022] [suexec:notice] [pid 1497:tid
> 139855753558336] AH01232: suEXEC mechanism enabled (wrapper:
> /usr/sbin/suexec)
> [Sat Apr 23 16:37:49.388188 2022] [so:warn] [pid 1497:tid 139855753558336]
> AH01574: module proxy_module is already loaded, skipping
> [Sat Apr 23 16:37:49.391763 2022] [lbmethod_heartbeat:notice] [pid
> 1497:tid 139855753558336] AH02282: No slotmem from mod_heartmonitor
> [Sat Apr 23 16:37:49.399281 2022] [mpm_event:notice] [pid 1497:tid
> 139855753558336] AH00489: Apache/2.4.37 (centos) OpenSSL/1.1.1k
> mod_auth_gssapi/1.6.1 mod_wsgi/4.6.4 Python/3.6 configured -- resuming
> normal operations
> [Sat Apr 23 16:37:49.399320 2022] [core:notice] [pid 1497:tid
> 139855753558336] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
> [Sat Apr 23 23:20:37.254289 2022] [proxy:error] [pid 6183:tid
> 139854109198080] (111)Connection refused: AH00957: AJP: attempt to connect
> to 127.0.0.1:8702 (127.0.0.1) failed
> [Sat Apr 23 23:20:37.254354 2022] [proxy_ajp:error] [pid 6183:tid
> 139854109198080] [client 192.168.0.13:52982] AH00896: failed to make
> connection to backend: 127.0.0.1
>
> server.log:
> 2022-04-23 16:38:20,655+03 ERROR
> [org.jboss.as.controller.management-operation] (Controller Boot Thread)
> WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" =>
> "engine.ear")]) - failure description: {"WFLYCTL0080: Failed services" =>
> {"jboss.deployment.subunit.\"engine.ear\".\"bll.jar\".component.Backend.START"
> => "java.lang.IllegalStateException: WFLYEE0042: Failed to construct
> component instance
> 2022-04-23 16:38:20,752+03 ERROR [org.jboss.as] (Controller Boot Thread)
> WFLYSRV0026: WildFly Full 24.0.1.Final (WildFly Core 16.0.1.Final) started
> (with errors) in 22155ms - Started 1670 of 1890 services (6 services failed
> or missing dependencies, 393 services are lazy, passive or on-demand)
> 2022-04-23 23:20:50,622+03 ERROR [org.jboss.msc.service.fail]
> (ServerService Thread Pool -- 47) MSC01: Failed to start service
> jboss.deployment.subunit."engine.ear"."bll.jar".component.Backend.START:
> 

[ovirt-users] Re: Deployment suddenly fails at engine check

[Martin Perina]

Hi,

Could you please check if you are not hit by the new postgresql-jdbc
package issue?

https://lists.ovirt.org/archives/list/users@ovirt.org/thread/SBCWNXLFLJBKTA3TFJARE7QCYZQ6QMMH/

Thanks,
Martin


On Fri, Apr 22, 2022 at 7:38 PM Harry O  wrote:

> Hi,
> After the new update, my deployment fails at engine check.
> What can I do to debug?
>
> [ INFO ] skipping: [localhost]
> [ INFO ] TASK [ovirt.ovirt.engine_setup : Check if Engine health page is
> up]
> [ ERROR ] fatal: [localhost -> 192.168.222.12]: FAILED! => {"attempts":
> 30, "changed": false, "connection": "close", "content":
> "Error500 - Internal Server
> Error", "content_encoding": "identity", "content_length":
> "86", "content_type": "text/html; charset=UTF-8", "date": "Fri, 22 Apr 2022
> 16:02:04 GMT", "elapsed": 0, "msg": "Status code was 500 and not [200]:
> HTTP Error 500: Internal Server Error", "redirected": false, "server":
> "Apache/2.4.37 (centos) OpenSSL/1.1.1k mod_auth_gssapi/1.6.1 mod_wsgi/4.6.4
> Python/3.6", "status": 500, "url": "
> http://localhost/ovirt-engine/services/health"}
> [ INFO ] TASK [ovirt.ovirt.engine_setup : Clean temporary files]
> [ INFO ] changed: [localhost -> 192.168.222.12]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Sync on engine machine]
> [ INFO ] changed: [localhost -> 192.168.222.12]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Set destination directory
> path]
> [ INFO ] ok: [localhost]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Create destination
> directory]
> [ INFO ] changed: [localhost]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : include_tasks]
> [ INFO ] ok: [localhost]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Find the local appliance
> image]
> [ INFO ] ok: [localhost]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Set local_vm_disk_path]
> [ INFO ] ok: [localhost]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Give the vm time to flush
> dirty buffers]
> [ INFO ] ok: [localhost]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Copy engine logs]
> [ INFO ] changed: [localhost]
> [ INFO ] TASK [ovirt.ovirt.hosted_engine_setup : Notify the user about a
> failure]
> [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "There
> was a failure deploying the engine on the local engine VM. The system may
> not be provisioned according to the playbook results: please check the logs
> for the issue, fix accordingly or re-deploy from scratch.\n"}
> _______
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MDMO5CPVXFBXJPQYIL3FFNB4FVNSCLYJ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2DFJKFRTU2DXOXDBUM32KLQJEXGQQ6EZ/

[ovirt-users] [IMPORTANT] Upgrade to postgresql-jdbc-42.2.14-1 breaks oVirt Engine 4.4/4.5

[Martin Perina]

Hi,
Unfortunately we have just found that latest release of
postgresql-jdbc-42.2.14-1 breaks existing oVirt Engine 4.4 and 4.5
installations running on CentOS Stream.
The workaround is to downgrade to previous version, for example
postgresql-jdbc-42.2.3-3 should work fine.

Here are detailed instructions:

1. If you have already upgraded to postgresql-jdbc-42.2.14-1, please
downgrade to previous version:

$ dnf downgrade postgresql-jdbc
$ systemctl restart ovirt-engine

2. If you are going to upgrade your oVirt Engine machine, please exclude
postgresql-jdbc package from upgrades:

$ dnf update -x postgresql-jdbc

We have created https://bugzilla.redhat.com/2077794 to track this issue,
but unfortunately we don't have a fix yet.

Regards,
Martin

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SBCWNXLFLJBKTA3TFJARE7QCYZQ6QMMH/

[ovirt-users] Re: vdsm hook after node upgrade

[Martin Perina]

Hi,

I'm not aware of any changes regarding hooks in 4.4.9. The last significant
change has been done in 4.4.7, where VDSM hooks are no longer included in
node by default and if really needed they could be installed manually:

https://bugzilla.redhat.com/show_bug.cgi?id=1947450
https://www.ovirt.org/release/4.4.7/

So are your hosts oVirt Node based or standard EL8 based hosts (for example
CentOS Stream 8)?

Regards,
Martin


On Wed, Apr 13, 2022 at 7:58 AM Nathanaël Blanchet  wrote:

> I've opened an issue on GitHub, but is it the new official way to declare
> issues against bugzilla?
> Le 12 avr. 2022 16:16, Nir Soffer a écrit :
>
>
> On Tue, Apr 12, 2022 at 5:06 PM Nathanaël Blanchet 
> wrote:
> > I've upgraded my hosts from 4.4.9 to 4.4.10 and none of my vdsm hooks
> > are present anymore... i believed those additionnal personnal data were
> > persistent across update...
>
> If you think this is a bug, please file a vdsm bug for this:
> https://github.com/oVirt/vdsm/issues
>
> Nir
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/UN77CSHAWDL5BS5LKU6MJHCOOUTMMMZZ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NDKIODYGGOFFCMCJ3UGZCSIQERBXKUEP/

[ovirt-users] Re: Enroll Host Certificate

[Martin Perina]

On Tue, Mar 29, 2022 at 5:43 AM dlotarev--- via Users 
wrote:

> Hi there! I have a problem to enroll host certificate.
>

Hi,

Enroll certificate function re-enrolls certificates only hosts. If your
engine certificate is going to expire, then you need to run engine-setup to
renew engine certificate.

Regards,
Martin


> The steps that I took:
> 1) Move host to maintenance mode (all VMs transferred to another host
> including HE VM)
> 2) Enroll certificate via web interface without errors
> 3) Exit from maintenance mode (transferred all VMs back including HE VM)
> 4) Restart ovirt-engine service
>
> But my problem that after 6 hours i get message from oVirt engine notifier
> that my certificate expired soon.
> I know that my oVirt installation is old (4.1.9), but what can i do with
> that? Maybe i missed something. I didn't reboot the host after renewing the
> certificate
>
> Thank you for any advice!
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/RJYOYBINZYBMJMIZMWKP5PKMIYBWT6WL/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/E7PHLH3452ZMQHJU5FSZ5ZAEZL5RVHA5/

[ovirt-users] Re: dnf update fails with oVirt 4.4 on centos 8 stream due to ansible package conflicts.

[Martin Perina]

e-core > 2.11.0 provided by
> >>>ansible-core-2.12.2-2.el8.x86_64
> >>>  - package ansible-core-2.12.2-2.el8.x86_64
> >>>obsoletes ansible < 2.10.0 provided by
> >>>ansible-2.9.27-2.el8.noarch
> >>>  - package ansible-core-2.12.2-2.el8.x86_64
> >>>obsoletes ansible < 2.10.0 provided by
> >>>ansible-2.9.27-1.el8.noarch
> >>>  - package ansible-core-2.12.2-2.el8.x86_64
> >>>obsoletes ansible < 2.10.0 provided by
> >>>ansible-2.9.17-1.el8.noarch
> >>>  - package ansible-core-2.12.2-2.el8.x86_64
> >>>obsoletes ansible < 2.10.0 provided by
> >>>ansible-2.9.18-2.el8.noarch
> >>>  - package ansible-core-2.12.2-2.el8.x86_64
> >>>obsoletes ansible < 2.10.0 provided by
> >>>ansible-2.9.20-2.el8.noarch
> >>>  - package ansible-core-2.12.2-2.el8.x86_64
> >>>obsoletes ansible < 2.10.0 provided by
> >>>ansible-2.9.21-2.el8.noarch
> >>>  - package ansible-core-2.12.2-2.el8.x86_64
> >>>obsoletes ansible < 2.10.0 provided by
> >>>ansible-2.9.23-2.el8.noarch
> >>>  - package ansible-core-2.12.2-2.el8.x86_64
> >>>obsoletes ansible < 2.10.0 provided by
> >>>ansible-2.9.24-2.el8.noarch
> >>>  - cannot install the best update candidate for
> >>>package cockpit-ovirt-dashboard-0.15.1-1.el8.noarch
> >>>  - cannot install the best update candidate for
> >>>package ansible-2.9.27-2.el8.noarch
> >>>  - package ansible-2.9.20-1.el8.noarch is filtered
> >>>out by exclude filtering
> >>>  - package ansible-2.9.16-1.el8.noarch is filtered
> >>>out by exclude filtering
> >>>  - package ansible-2.9.19-1.el8.noarch is filtered
> >>>out by exclude filtering
> >>>  - package ansible-2.9.23-1.el8.noarch is filtered
> >>>out by exclude filtering
> >>>(try to add '--allowerasing' to command line to
> >>>replace conflicting packages or '--skip-broken' to
> >>>skip uninstallable packages or '--nobest' to use not
> >>>only best candidate packages)
> >>>
> >>>cockpit-ovirt-dashboard.noarch is at 0.15.1-1.el8,
> >>>and it looks like that conflicting ansible-core
> >>>package was added to the 8-stream repo two days ago.
> >>>That's when I first noticed the issue, but I it
> >>>might be older. When the eariler issues with the
> >>>centos 8 deprecation happened, I had swapped out the
> >>>repos on some of these hosts for the new ones, and
> >>>have since added new hosts as well, using the
> >>>updated repos. Both hosts that had been moved from
> >>>the old repos, and ones created with the new repos
> >>>are experienceing this issue.
> >>>
> >>>ansible-core is being pulled from the centos 8
> >>>stream AppStream repo, and the ansible package that
> >>>cockpit-ovirt-dashboard.noarch is trying to use as a
> >>>dependency is comming from ovirt-4.4-centos-ovirt44
> >>>
> >>>I'm tempted to blacklist ansible-core in my dnf
> >>>conf, but that seems like a hacky work-around and
> >>>not the actual fix here.
> >>>Thanks,
> >>>Dan
> >>>___
> >>>Users mailing list -- users@ovirt.org
> >>>To unsubscribe send an email to
> >>>users-le...@ovirt.org
> >>>Privacy Statement:
> >>>https://www.ovirt.org/privacy-policy.html
> >>>oVirt Code of Conduct:
> >>> https://www.ovirt.org/community/about/community-guidelines/
> >>>List
> >>> Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3N4ZO6LXNOQNQ
> >>>    U5HHDGNOZHDSO4IBGFF/
> >>>
> >>>
> >>>  ___
> >>>  Users mailing list -- users@ovirt.org
> >>>  To unsubscribe send an email to users-le...@ovirt.org
> >>

[ovirt-users] Re: Cluster and datacenter compatibility levels

[Martin Perina]

Hi Colin,

you can take a look at below archived message if you are interested in
features bound to specific cluster level:

https://lists.ovirt.org/archives/list/de...@ovirt.org/message/QJRYA4FKX64DMIF4VPW5VU4APN3KULX5/

Regards,
Martin

On Tue, Feb 15, 2022 at 1:02 AM Colin Coe  wrote:

> Hi all
>
> I'm looking for a definitive answer on what each compatibility level means.
>
> Specifically, I'm looking for:
> - new features
> - deprecated features
> - removed features
>
> We're on 4.3 so I'm looking for the info above on 4.4, 4.5 and 4.6
>
> My main motivation is to ensure we don't lose SPICE support.
>
> We actually use RHV and I logged a case with Red Hat GSS but couldn't get
> the info I was after.
>
> Thanks
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/XFBSQGS6G4J432MQ53SHTD2K4ZCC5IC5/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KY6XETEADPLFJBIMNLM2QP4BVFBQJI4Z/

[ovirt-users] Re: Cannot log into oVirt Manager - certificate issue

[Martin Perina]

On Mon, Feb 7, 2022 at 3:09 PM Gilboa Davara  wrote:

>
>
> On Mon, Feb 7, 2022 at 4:03 PM Martin Perina  wrote:
>
>>
>>
>> On Mon, Feb 7, 2022 at 12:33 PM Gilboa Davara  wrote:
>>
>>> Hello,
>>>
>>> On Mon, Feb 7, 2022 at 8:45 AM Yedidyah Bar David 
>>> wrote:
>>>
>>>> On Sun, Feb 6, 2022 at 5:09 PM Gilboa Davara  wrote:
>>>> >
>>>> > Unlike my predecessor, I not only lost my vmengine, I also lost the
>>>> vdsm services on all hosts.
>>>> > All seem to be hitting the same issue - read, the certs under
>>>> /etc/pki/vdsm/certs and /etc/pki/ovirt* all expired a couple of days ago.
>>>> > As such, the hosted engine cannot go into global maintenance mode,
>>>>
>>>> What do you mean by that? What happens if you 'hosted-engine
>>>> --set-maintenance --mode=global'?
>>>>
>>>
>>> Failed, stating the cluster is not in global maintenance mode.
>>> (Understandable, given two of 3 hosts were offline due to certificate
>>> issues...)
>>>
>>>
>>>
>>>>
>>>> > preventing engine-setup --offline from running.
>>>>
>>>> Actually just a few days ago I pushed a patch for:
>>>>
>>>> https://bugzilla.redhat.com/show_bug.cgi?id=1700460
>>>>
>>>> But:
>>>>
>>>> If you really have a problem that you can't set global maintenance,
>>>> using this is a risk - HA might intervene in the middle and shutdown
>>>> the VM. So either make sure global maintenance does work, or stop
>>>> all HA services on all hosts.
>>>>
>>>> > Two questions:
>>>> > 1. Is there any automated method to renew the vdsm certificates?
>>>>
>>>> You mean, without an engine?
>>>>
>>>> I think that if you have a functional engine one way or another,
>>>> you can automate this somehow, didn't check. Try checking e.g. the
>>>> python sdk examples - there might be there something you can base
>>>> on.
>>>>
>>>> > 2. Assuming the previous answer is "no", assuming I'm somewhat versed
>>>> in using openssl, how can I manually renew them?
>>>>
>>>> I'd rather not try to invent from memory how this is supposed to work,
>>>> and doing this methodically and verifying before replying is quite
>>>> an effort.
>>>>
>>>> If this is really what you want, I suggest something like:
>>>>
>>>> 1. Set up a test env with an engine and one host
>>>> 2. Backup (or use git on) /etc on both
>>>> 3. Renew the host cert from the UI
>>>> 4. Check what changed
>>>>
>>>> You should find, IMO, that the key(s) on the host didn't
>>>> change. I guess you might also find CSRs on one or both of them.
>>>> So basically it should be something like:
>>>> 1. Create a CSR on the host for the existing key (one or more,
>>>> not sure).
>>>> 2. Copy and sign this on the engine using pki-enroll-request.sh
>>>> (I think you can find examples for it scattered around, perhaps
>>>> even in the main guides)
>>>> 3. Copy back the generated certs to the host
>>>> 4. Perhaps restart one or more services there (vdsm, imageio?,
>>>> ovn, etc.)
>>>>
>>>> You can check the code in
>>>> /usr/share/ovirt-engine/ansible-runner-service-project/project
>>>> to see how it's done when initiated from the UI.
>>>>
>>>> Good luck and best regards,
>>>>
>>>
>>> I more of less found a document stating the above somewhere in the
>>> middle of the night.
>>> Tried it.
>>> Got the WebUI working again.
>>> However, for the life of me I couldn't get the hosts to work to talk to
>>> the engine. (Even though I could use openssl s_client -showcerts -connect
>>> host and got valid certs).
>>> In the end, @around ~4am, I decided to take the brute force route, clean
>>> the hosts, upgrade them to -streams, and redeploy the engine again (3'rd
>>> attempt, after sufficient amount of coffee reminded me the qemu-6.1 is
>>> broken, and needed to be downgraded before trying to deploy the HE...).
>>> Either way, when I finish importing the VMs, I'll open a RFE to add
>>> BIG-WARNING-IN-BOLD-LETTERS in the WebUI to notify the admin that the
>>> certifica

[ovirt-users] Re: Cannot log into oVirt Manager - certificate issue

[Martin Perina]

On Mon, Feb 7, 2022 at 12:33 PM Gilboa Davara  wrote:

> Hello,
>
> On Mon, Feb 7, 2022 at 8:45 AM Yedidyah Bar David  wrote:
>
>> On Sun, Feb 6, 2022 at 5:09 PM Gilboa Davara  wrote:
>> >
>> > Unlike my predecessor, I not only lost my vmengine, I also lost the
>> vdsm services on all hosts.
>> > All seem to be hitting the same issue - read, the certs under
>> /etc/pki/vdsm/certs and /etc/pki/ovirt* all expired a couple of days ago.
>> > As such, the hosted engine cannot go into global maintenance mode,
>>
>> What do you mean by that? What happens if you 'hosted-engine
>> --set-maintenance --mode=global'?
>>
>
> Failed, stating the cluster is not in global maintenance mode.
> (Understandable, given two of 3 hosts were offline due to certificate
> issues...)
>
>
>
>>
>> > preventing engine-setup --offline from running.
>>
>> Actually just a few days ago I pushed a patch for:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1700460
>>
>> But:
>>
>> If you really have a problem that you can't set global maintenance,
>> using this is a risk - HA might intervene in the middle and shutdown
>> the VM. So either make sure global maintenance does work, or stop
>> all HA services on all hosts.
>>
>> > Two questions:
>> > 1. Is there any automated method to renew the vdsm certificates?
>>
>> You mean, without an engine?
>>
>> I think that if you have a functional engine one way or another,
>> you can automate this somehow, didn't check. Try checking e.g. the
>> python sdk examples - there might be there something you can base
>> on.
>>
>> > 2. Assuming the previous answer is "no", assuming I'm somewhat versed
>> in using openssl, how can I manually renew them?
>>
>> I'd rather not try to invent from memory how this is supposed to work,
>> and doing this methodically and verifying before replying is quite
>> an effort.
>>
>> If this is really what you want, I suggest something like:
>>
>> 1. Set up a test env with an engine and one host
>> 2. Backup (or use git on) /etc on both
>> 3. Renew the host cert from the UI
>> 4. Check what changed
>>
>> You should find, IMO, that the key(s) on the host didn't
>> change. I guess you might also find CSRs on one or both of them.
>> So basically it should be something like:
>> 1. Create a CSR on the host for the existing key (one or more,
>> not sure).
>> 2. Copy and sign this on the engine using pki-enroll-request.sh
>> (I think you can find examples for it scattered around, perhaps
>> even in the main guides)
>> 3. Copy back the generated certs to the host
>> 4. Perhaps restart one or more services there (vdsm, imageio?,
>> ovn, etc.)
>>
>> You can check the code in
>> /usr/share/ovirt-engine/ansible-runner-service-project/project
>> to see how it's done when initiated from the UI.
>>
>> Good luck and best regards,
>>
>
> I more of less found a document stating the above somewhere in the middle
> of the night.
> Tried it.
> Got the WebUI working again.
> However, for the life of me I couldn't get the hosts to work to talk to
> the engine. (Even though I could use openssl s_client -showcerts -connect
> host and got valid certs).
> In the end, @around ~4am, I decided to take the brute force route, clean
> the hosts, upgrade them to -streams, and redeploy the engine again (3'rd
> attempt, after sufficient amount of coffee reminded me the qemu-6.1 is
> broken, and needed to be downgraded before trying to deploy the HE...).
> Either way, when I finish importing the VMs, I'll open a RFE to add
> BIG-WARNING-IN-BOLD-LETTERS in the WebUI to notify the admin that the
> certificates are about to expire.
>

We already have quite a lot of warnings/alters about certificates which are
going to expire soon:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/TMJVAJMH5MKUVRTSZG2BB46QKXYI6M2D/

So what exactly are you missing here?

>
> Thanks for the help!
>
> - Gilboa
>
>
>
>> --
>> Didi
>>
>> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CGSAB7NPWWOYON6WXIRJXPZASVWCPQJT/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NIADZITDXMMR2IZFP4ZAEICOZESPDDFI/

[ovirt-users] Re: Ignore CPU_TYPE_UNSUPPORTED_IN_THIS_CLUSTER_VERSION ?

[Martin Perina]

On Wed, Feb 2, 2022 at 12:11 PM Richard W.M. Jones 
wrote:

> On Wed, Feb 02, 2022 at 11:07:21AM +0100, Martin Perina wrote:
> > You cannot mix AMD and Intel processors in a cluster. So if you have an
> AMD
> > based host, then you need to add it to AMD cluster only
>
> I have two VMs - one for engine and one for node.  They are both
> running on the same physical host (using KVM).
>
> > AMD EPYC support is available from 4.3 cluster level, so it should
> definitely
> > be available in the latest 4.6 CL
>
> I'm more confused here.  I'm running what I believe to be the latest
> oVirt engine (4.4.10.6-1.el8).
>
> There are no AMD CPUs offered for cluster CPU type, only Intel CPUs:
>
> Intel Nehalem Family
> Secure Intel Nehalem Family
> Intel Westmere Family
> Secure Intel Westmere Family
> Intel Sandybridge Family
>
> (that's the complete list)
>

Lucia, any ideas?

>
> Rich.
>
> --
> Richard Jones, Virtualization Group, Red Hat
> http://people.redhat.com/~rjones
> Read my programming and virtualization blog: http://rwmj.wordpress.com
> virt-p2v converts physical machines to virtual machines.  Boot with a
> live CD or over the network (PXE) and turn machines into KVM guests.
> http://libguestfs.org/virt-v2v
>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZDX2SW4WP3CWPZ7T7LUTO7MZ22Z6BABL/

[ovirt-users] Re: Ignore CPU_TYPE_UNSUPPORTED_IN_THIS_CLUSTER_VERSION ?

[Martin Perina]

You cannot mix AMD and Intel processors in a cluster. So if you have an AMD
based host, then you need to add it to AMD cluster only

AMD EPYC support is available from 4.3 cluster level, so it should
definitely be available in the latest 4.6 CL

On Wed, Feb 2, 2022 at 10:24 AM Richard W.M. Jones 
wrote:

> On Tue, Feb 01, 2022 at 08:45:51PM +0100, Martin Perina wrote:
> >
> >
> > On Tue, Feb 1, 2022 at 8:27 PM Richard W.M. Jones 
> wrote:
> >
> >
> > 2022-02-01 19:05:01,952Z ERROR
> >
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> >
>  (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-19)
> > [330886aa] EVENT_ID:
> CPU_TYPE_UNSUPPORTED_IN_THIS_CLUSTER_VERSION(156),
> > Host ovirt4410-host moved to Non-Operational state as host CPU type
> is not
> > supported in this cluster compatibility version or is not supported
> at all
> >
> > The host is a nested VM running on old hardware.  I don't care that
> > it's not supported - this is just for testing copying and it'll
> > literally never even need to run a VM.
> >
> > Is there a way to ignore this and continue?
> >
> >
> > Hi,
> >
> > You need to create a custom DC and a cluster with lower
> > compatibility level to be able to use older CPUs.
> >
> > You can take a look at supported CPUs for each cluster level using
> > ServerCPUList config option:
> >
> >
> https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/upgrade/pre_upgrade/_config.sql#L1125
>
> OK that operation is underway.  I selected CPU type "Nehalem", that
> being an ancient Intel CPU.  The hardware is AMD and there were no AMD
> options.  I'll see if it installs anyway.
>
> > What is your hypervisor CPU?
>
> The oVirt host is a VM with an interesting choice of guest CPU now I
> look at it:
>
> processor : 0
> vendor_id : AuthenticAMD
> cpu family  : 23
> model : 49
> model name: AMD EPYC-Rome Processor
> stepping  : 0
> microcode : 0x165
> cpu MHz : 3792.872
> cache size  : 512 KB
> physical id : 0
> siblings : 1
> core id: 0
> cpu cores  : 1
> apicid   : 0
> initial apicid : 0
> fpu: yes
> fpu_exception  : yes
> cpuid level: 13
> wp : yes
> flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
> mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx mmxext fxsr_opt
> pdpe1gb rdtscp lm rep_good nopl cpuid extd_apicid tsc_known_freq pni
> pclmulqdq ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt
> tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm cmp_legacy
> cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw topoext perfctr_core
> ssbd ibpb stibp vmmcall fsgsbase tsc_adjust bmi1 avx2 smep bmi2 rdseed adx
> smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves clzero
> xsaveerptr wbnoinvd arat umip rdpid arch_capabilities
> bugs   : sysret_ss_attrs spectre_v1 spectre_v2
> spec_store_bypass
> bogomips   : 7585.74
> TLB size   : 1024 4K pages
> clflush size   : 64
> cache_alignment: 64
> address sizes  : 40 bits physical, 48 bits virtual
> power management:
>
> --- and hypervisor CPU:
>
> processor  : 23
> vendor_id  : AuthenticAMD
> cpu family : 23
> model: 113
> model name   : AMD Ryzen 9 3900X 12-Core Processor
> stepping : 0
> microcode: 0x8701013
> cpu MHz: 2200.000
> cache size : 512 KB
> physical id: 0
> siblings : 24
> core id: 14
> cpu cores  : 12
> apicid   : 29
> initial apicid : 29
> fpu: yes
> fpu_exception  : yes
> cpuid level: 16
> wp : yes
> flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
> mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt
> pdpe1gb rdtscp lm constant_tsc rep_good nopl nonstop_tsc cpuid extd_apicid
> aperfmperf rapl pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 movbe
> popcnt aes xsave avx f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy
> abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt tce topoext
> perfctr_core perfctr_nb bpext perfctr_llc mwaitx cpb cat_l3 cdp_l3
> hw_pstate ssbd mba ibpb stibp vmmcall fsgsbase bmi1 avx2 smep bmi2 cqm
> rdt_a rdseed adx smap clflushopt clwb sha_ni xsaveopt xsavec xgetbv1 xsaves
> cqm_llc cqm_occup_llc cqm_mbm_total cqm_mbm_local clzero irperf xsaveerptr
> rdpru wbnoinvd arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean
> flushbyasid decodeassists pausefilter pfthre

[ovirt-users] Re: Ignore CPU_TYPE_UNSUPPORTED_IN_THIS_CLUSTER_VERSION ?

[Martin Perina]

On Tue, Feb 1, 2022 at 8:27 PM Richard W.M. Jones  wrote:

>
> 2022-02-01 19:05:01,952Z ERROR
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-19)
> [330886aa] EVENT_ID: CPU_TYPE_UNSUPPORTED_IN_THIS_CLUSTER_VERSION(156),
> Host ovirt4410-host moved to Non-Operational state as host CPU type is not
> supported in this cluster compatibility version or is not supported at all
>
> The host is a nested VM running on old hardware.  I don't care that
> it's not supported - this is just for testing copying and it'll
> literally never even need to run a VM.
>
> Is there a way to ignore this and continue?
>

Hi,
You need to create a custom DC and a cluster with lower compatibility level
to be able to use older CPUs.
You can take a look at supported CPUs for each cluster level using
ServerCPUList config option:

https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/upgrade/pre_upgrade/_config.sql#L1125

What is your hypervisor CPU?

Regards,
Martin


> Rich.
>
> --
> Richard Jones, Virtualization Group, Red Hat
> http://people.redhat.com/~rjones
> Read my programming and virtualization blog: http://rwmj.wordpress.com
> libguestfs lets you edit virtual machines.  Supports shell scripting,
> bindings from many languages.  http://libguestfs.org
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NOLWZUDPZMEAJYMNOV75QKQ42BQRQV4B/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LJLXTRLNBG5ER6BSHZKZRMVY26LLN5DI/

[ovirt-users] Re: how to search event not matching a user

[Martin Perina]

On Mon, Jan 31, 2022 at 2:00 PM Gianluca Cecchi 
wrote:

> Hello,
> every event in Advanced view has a field "User".
> I'm trying to compose a search in web admin of events with user different
> from myuser@internal
> It seems I'm not able to get what I want.
>
> I also tried to base attempts on an old 2019 thread (on 4.3.6) where this
> queries worked:
>
> Disks: name=engine* or name=host*
> Disks: alias=engine* or alias=host*
>
> but now on 4.4.8 gives nothing even if matched.
> Any hint and also documentation reference about the correct syntax to use
> in 4.4.x?
>

Eli, could you please take a look?

>
> Thanks,
> Gianluca
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HIEPT4HR7AUP5TKBUPOVLI6IPAZIECS2/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7IYYPHQEQBBNBKZCCE47JW6UDAR7J4I7/

[ovirt-users] Re: How-to get oVirt host certificated date

[Martin Perina]

On Thu, Jan 13, 2022 at 4:53 PM Sandro Bonazzola 
wrote:

>
>
> Il giorno gio 13 gen 2022 alle ore 15:34 Konstantin Shalygin <
> k0...@k0ste.ru> ha scritto:
>
>> > It's possible to get, may be from Postgres, the host certificate date?
>> > Engine run this check sometimes, but trigger this check seems impossible
>>
>> Anybody?
>> @Sandro please help
>>
>> engine make check once per day and print to logs
>> How can we run a manual check or see info in PostgreSQL database? This is
>> required because the days until the end of the certificate's life expire,
>> waiting for the next day in order to understand the result of deploying a
>> new certificate is a strange situation
>>
>
> Maybe @Martin Perina  can assist?
>
> Hi,

host certificates are not saved anywhere in the engine database, you need
to go to the host itself to find out the expiration date. There are 2
options:

1. Directly on the host after connecting via SSH you can run below
# openssl x509 -text -noout -in /etc/pki/vdsm/certs/vdsmcert.pem | grep
-A2 Validity

2. Remotely using openssl you can run below
# openssl s_client -showcerts -connect :54321 | openssl x509
-text -noout | grep -A2 Validity


ovirt-engine performs certificate checks every day (can be configured using
engine-config option CertificationValidityCheckTimeInHours) and it checks
not only hosts certificates, but also the engine certificate and the engine
CA certificate. This check produces following records in ovirt-engine audit
log:

1. If the certificate has already expired then below audit log ALERT is
created depending on the type of certificate
- *Host ${VdsName} certification has expired at ${ExpirationDate}.
Please renew the host's certification.*
- *Engine's certification has expired at ${ExpirationDate}. Please
renew the engine's certification.*
- *Engine's CA certification has expired at ${ExpirationDate}.*

2. If the certificate is going to expire in less than 7 days, then below
audit log ALERT is created depending on the type of certificate
- *Host ${VdsName} certification is about to expire at
${ExpirationDate}. Please renew the host's certification.*
- *Engine's certification is about to expire at ${ExpirationDate}.
Please renew the engine's certification.*
- *Engine's CA certification is about to expire at ${ExpirationDate}.*

3. If the certificate is going to expire in less than 30 days, then below
audit log WARNING is created depending on the type of certificate
- *Host ${VdsName} certification is about to expire at
${ExpirationDate}. Please renew the host's certification.*
- *Engine's certification is about to expire at ${ExpirationDate}.
Please renew the engine's certification.*
- *Engine's CA certification is about to expire at ${ExpirationDate}.*

Regards,
Martin


>
>>
>>
>> Thanks,
>> k
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3WK5CJYL3PXXCJJQKLEQCQJG5X2YA3XV/
>>
>
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R RHV
>
> Red Hat EMEA <https://www.redhat.com/>
>
> sbona...@redhat.com
> <https://www.redhat.com/>
>
> *Red Hat respects your work life balance. Therefore there is no need to
> answer this email out of your office hours.*
>
>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TMJVAJMH5MKUVRTSZG2BB46QKXYI6M2D/

[ovirt-users] Re: OVIRT mirrors

[Martin Perina]

Hi,

I've created CPDEVOPS-434 <https://issues.redhat.com/browse/CPDEVOPS-434>
ticket to track that issue.

Martin


On Mon, Jan 3, 2022 at 1:41 AM Andy via Users  wrote:

> Not optimal but yep the work around is working.  Thanks for the info
> On Sunday, January 2, 2022, 07:22:35 PM EST, Jillian Morgan <
> jillian.mor...@primordial.ca> wrote:
>
>
> I ran into the same problem this evening. It looks like the Let's Encrypt
> certificate for resources.ovirt.org expired early this morning. Who knows
> why their auto-renewal automation has failed. This might also be the reason
> why the main mirrorlist site (used by default in the dnf repo files) is
> failing.
>
> NON-RECOMMENDED TEMPORARY WORKAROUND: If you wish to be _unsafe_ and
> accept that their cert just expired, you can add "sslverify=0" to the
> ovirt-4.4.repo file, comment out the mirrorlist, enable the baseurl, and
> then a retry will succeed.
>
> --
> Jillian Morgan (she/her)
> Systems & Networking Specialist
> Primordial Software Group & I.T. Consultancy
> https://www.primordial.ca
>
>
> On Sun, 2 Jan 2022 at 14:19, Andy via Users  wrote:
>
> Are the OVERT mirrors down?  I am receiving the following error trying to
> update some of my systems.
>
> Errors during downloading metadata for repository 'ovirt-4.4':
>   - Status code: 500 for
> https://mirrorlist.ovirt.org/mirrorlist-ovirt-4.4-el8 (IP: 8.43.85.224)
> Error: Failed to download metadata for repo 'ovirt-4.4': Cannot prepare
> internal mirrorlist: Status code: 500 for
> https://mirrorlist.ovirt.org/mirrorlist-ovirt-4.4-el8 (IP: 8.43.85.224)
>
>
> Going to the link:
>
> https://mirrorlist.ovirt.org/mirrorlist-ovirt-4.4-el8
>
> Proxy Error The proxy server could not handle the request *GET 
> /mirrorlist-ovirt-4.4-el8
> <https://mirrorlist.ovirt.org/mirrorlist-ovirt-4.4-el8>*.
>
> Reason: *Error during SSL Handshake with remote server*
>
> thanks
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZHKFTD5TE5PO7Z7JQTKDY3VYFATAOMEV/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PVHEE5TPX6ZAMNINLEO6LFZ5D443PXNE/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UL6PZPDWLMOHFBCZJHJBLLCWTA3TWLHZ/

[ovirt-users] Re: oVirt and log4j vulnerability

[Martin Perina]

On Mon, Dec 13, 2021 at 2:46 PM Derek Atkins  wrote:

>
> On Mon, December 13, 2021 8:04 am, Gianluca Cecchi wrote:
> >>
> > If I understood correctly reading here:
> >
> https://blog.qualys.com/vulnerabilities-threat-research/2021/12/10/apache-log4j2-zero-day-exploited-in-the-wild-log4shell
> >
> > you are protected by the RCE if java is 1.8 and greater than 1.8.121
> > (released on 2017)
>
> Do you mean 1.8.0.121?  For example, my system has:
>
> java-1.8.0-openjdk-headless-1.8.0.252.b09-2.el7_8.x86_64
>

If you are still on oVirt 4.3, which is using OpenJDK 1.8, then you should
have installed java-1.8.0-openjdk-1.8.0.312.b07-1.el7_9.x86_64.

If you are on oVirt 4.4, which is using OpenJDK 11, then you should have
installed java-11-openjdk-headless-11.0.13.0.8-3.el8_5.x86_64


> -derek
>
> --
>Derek Atkins 617-623-3745
>de...@ihtfp.com www.ihtfp.com
>Computer and Internet Security Consultant
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/32PPOVQZRSIMCQMPVKZAKRZITIGGZ774/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NRHOYBOOEQV2GKHS5WZ4ZQNAFCZZQQKT/

[ovirt-users] Re: upgrade dependency issues

[Martin Perina]

Hi,

you will need to switch to CentOS Stream 8 now to finish the upgrade (or
wait for CentOS 8.5 + AV 8.5 release), which is going to include version
rhel-system-roles 1.7.3:

https://pkgs.org/download/rhel-system-roles

Regards,
Martin


On Mon, Oct 25, 2021 at 9:34 PM John Florian  wrote:

> On the engine:
>
> repo id repo name
> appstream CentOS Linux 8 - AppStream
> baseos CentOS Linux 8 - BaseOS
> doubledog doubledog on EL 8 - released
> epel Extra Packages for Enterprise Linux 8 - x86_64
> epel-modular Extra Packages for Enterprise Linux Modular 8 - x86_64
> extras CentOS Linux 8 - Extras
> local-AppStream doubledog mirror of CentOS-8 - AppStream
> local-BaseOS doubledog mirror of CentOS-8 - Base
> local-extras doubledog mirror of CentOS-8 - Extras
> ovirt-4.4 Latest oVirt 4.4 Release
> ovirt-4.4-advanced-virtualization Advanced Virtualization packages for
> x86_64
> ovirt-4.4-centos-ceph-pacific Ceph packages for x86_64
> ovirt-4.4-centos-gluster8 CentOS-8 - Gluster 8
> ovirt-4.4-centos-nfv-openvswitch CentOS-8 - NFV OpenvSwitch
> ovirt-4.4-centos-opstools CentOS-8 - OpsTools - collectd
> ovirt-4.4-centos-ovirt44 CentOS-8 - oVirt 4.4
> ovirt-4.4-copr:copr.fedorainfracloud.org:sac:gluster-ansible Copr repo
> for gluster-ansible owned by sac
> ovirt-4.4-copr:copr.fedorainfracloud.org:sbonazzo:EL8_collection Copr
> repo for EL8_collection owned by sbonazzo
> ovirt-4.4-epel Extra Packages for Enterprise Linux 8 - x86_64
> ovirt-4.4-openstack-victoria OpenStack Victoria Repository
> ovirt-4.4-virtio-win-latest virtio-win builds roughly matching what will
> be shipped in upcoming RHEL
> powertools CentOS Linux 8 - PowerTools
>
> and on one of the hosts:
>
> repo id repo name
> appstream CentOS Linux 8 - AppStream
> baseos CentOS Linux 8 - BaseOS
> dell-system-update_dependent dell-system-update_dependent
> dell-system-update_independent dell-system-update_independent
> extras CentOS Linux 8 - Extras
> local-AppStream doubledog mirror of CentOS-8 - AppStream
> local-BaseOS doubledog mirror of CentOS-8 - Base
> local-extras doubledog mirror of CentOS-8 - Extras
> ovirt-4.4 Latest oVirt 4.4 Release
> ovirt-4.4-advanced-virtualization Advanced Virtualization packages for
> x86_64
> ovirt-4.4-centos-ceph-pacific Ceph packages for x86_64
> ovirt-4.4-centos-gluster8 CentOS-8 - Gluster 8
> ovirt-4.4-centos-nfv-openvswitch CentOS-8 - NFV OpenvSwitch
> ovirt-4.4-centos-opstools CentOS-8 - OpsTools - collectd
> ovirt-4.4-centos-ovirt44 CentOS-8 - oVirt 4.4
> ovirt-4.4-copr:copr.fedorainfracloud.org:sac:gluster-ansible Copr repo
> for gluster-ansible owned by sac
> ovirt-4.4-copr:copr.fedorainfracloud.org:sbonazzo:EL8_collection Copr
> repo for EL8_collection owned by sbonazzo
> ovirt-4.4-epel Extra Packages for Enterprise Linux 8 - x86_64
> ovirt-4.4-openstack-victoria OpenStack Victoria Repository
> ovirt-4.4-virtio-win-latest virtio-win builds roughly matching what will
> be shipped in upcoming RHEL
> powertools CentOS Linux 8 - PowerTools
>
>
> The local-* repos are on-site mirrors.  I've tried disabling them just
> to rule them out, but it made no difference.
>
> John Florian
>
> On 2021-10-25 15:07, Strahil Nikolov wrote:
> > Hi,
> >
> > what is the output from:
> > 'yum repolist' ?
> >
> > Best Regards,
> > Strahil Nikolov
> >
> >
> >
> >
> >
> > В понеделник, 25 октомври 2021 г., 17:12:58 ч. Гринуич+3, John Florian <
> jflor...@doubledog.org> написа:
> >
> >
> >
> >
> >
> >
> >
> > I recently upgrade my engine to 4.4.9 following the usual engine-setup
> procedure.  Once that was done, I tried to do a dnf upgrade to get
> everything else and found:
> >
> > Error: Problem: cannot install the best update candidate for package
> ovirt-engine-metrics-1.4.3-1.el8.noarch  - nothing provides
> rhel-system-roles >= 1.7.2-1 needed by
> ovirt-engine-metrics-1.4.4-1.el8.noarch(try to add '--skip-broken' to skip
> uninstallable packages or '--nobest' to use not only best candidate
> packages)
> >
> >
> >
> > I was also trying to update my hosts thru the GUI and that was failing
> also.  I couldn't find the right log with good details as to why, so I just
> tried to dnf upgrade from the shell to see what got reported and found:
> >
> > Error:  Problem 1: cannot install the best update candidate for package
> ovirt-host-dependencies-4.4.8-1.el8.x86_64  - nothing provides
> rsyslog-openssl needed by
> ovirt-host-dependencies-4.4.9-2.el8.x86_64 Problem 2: cannot install the
> best update candidate for package
> ovirt-hosted-engine-setup-2.5.3-1.el8.noarch  - nothing provides ovirt-host
> >= 4.5.0 needed by ovirt-hosted-engine-setup-2.5.4-1.el8.noarch  - nothing
> provides vdsm-python >= 4.50 needed by
> ovirt-hosted-engine-setup-2.5.4-1.el8.noarch Problem 3: cannot install the
> best update candidate for package vdsm-4.40.80.5-1.el8.x86_64  - nothing
> provides libvirt-daemon-kvm >= 7.6.0-2 needed by
> vdsm-4.40.90.3-1.el8.x86_64 Problem 4: package
> ovirt-host-4.4.9-2.el8.x86_64 requires ovirt-host-dependencies =
> 

[ovirt-users] Re: Hosted Engine ansible runner artifacts cleanup

[Martin Perina]

On Wed, Oct 6, 2021 at 7:50 AM Yedidyah Bar David  wrote:

> On Tue, Oct 5, 2021 at 8:50 PM Erez Zarum  wrote:
> >
> > Hey,
> > No, i am talking about the ansible-runner artifacts, when the
> ovirt-engine runs a playbook (which is a task in the webui for example), it
> creates a folder in /usr/share/ovirt-engine/ansible-runner/artifacts for
> each run.
>
> Thanks for the clarification. I don't have
> /usr/share/ovirt-engine/ansible-runner/artifacts on my engine machine.
> Which version do you use? Perhaps file a bug in bugzilla and attach a
> sosreport.
>

Periodic artifact clean up has been added to ansible-runner-service 1.0.6:

https://github.com/ansible/ansible-runner-service/releases

But I highly recommend to upgrade to the latest version 1.0.7

>
> >
> > There's a config.yml in /etc/ansible-runner-service but for some reason
> it does not affect anything.
>
> What do you mean by that? Did you try changing it and saw that this
> does not affect it at all? Or a specific setting? Something else?
>
> Thanks and best regards,
> --
> Didi
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/RUTJT53TQWJD4CCMCVWXXFQHCKKSLIQN/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3LUCZOXMZWRJHZNUIE2FX4ISX7AGAYIZ/

[ovirt-users] Re: Inquiries regarding missing data in the calendar table created/inserted into the ovirt_engine_history DB.

[Martin Perina]

On Mon, Jun 28, 2021 at 7:15 AM  wrote:

> I recently discovered that the spark-line chart is not displayed in the
> dashboard of the ovirt admin page. As a result of looking up the code and
> query, the data of the calendar table in the ovirt_engine_history DB of
> ovirt-dwh was only available until 2021-01-01 00:00:00, so a query
> statement (
> https://github.com/oVirt/ovirt-engine/blob/master/frontend/webadmin/modules/frontend/src/main/resources/org/ovirt/engine/ui/frontend/server/dashboard/dao/HostDwhDAO.
> RIGHT OUTER JOIN of properties) was not getting the correct data. First,
> the existing "generate_series('2011-01-01 00:00'::timestamp, '2021-01-01
> 00:00', '1 hours')" part was temporarily modified and applied until 2051. ,
> it was confirmed that the spark-line chart was displayed normally.
>
> For this, is there a way I can directly edit the file (
> https://github.com/oVirt/ovirt-dwh/blob/master/packaging/dbscripts/upgrade/03_05_0060_updated_insert_calendar_table_values_script.sql)
> to commit or request a correction? I would like to know.
>

Hi,
You should not modify existing upgrade scripts, because:

1. They are overwritten on RPM package upgrade
2. They are not applied to the database, because we track which upgrade
scripts were already applied and perform only those new scripts which were
not yet applied during engine-setup

Could you please file a oVirt bug in https://bugzilla.redhat.com/ ?

Thanks,
Martin

___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/IDA2OUW4AYTYAAVI6WZFNC7ZLUBXYS3F/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RJDYZO54WZ7JBXWXDZWPSD5POFJ7PEQI/

[ovirt-users] Re: IPv6 Support

[Martin Perina]

On Mon, Jun 28, 2021 at 7:20 AM Ales Musil  wrote:

>
>
> On Sun, Jun 27, 2021 at 12:48 PM David White via Users 
> wrote:
>
>> Hello,
>>
>
> Hi,
>
>
>> Reading
>> https://www.ovirt.org/documentation/administration_guide/index.html#IPv6-networking-support-labels,
>> I see this tidbit:
>>
>>- Dual-stack addressing, IPv4 *and* IPv6, is not supported
>>- Switching clusters from IPv4 to IPv6 is not supported.
>>
>> If I'm understanding this correctly... does that mean I cannot run some
>> VMs with IPv4, and other VMs with IPv6, in the same cluster?
>>
>
> This applies mostly to host networking, there are cases when host
> networking dual stack works fine, the issue is that it has many quirks.
> oVirt cannot ensure that those quirks won't happen which might break your
> connection.
> In VM networks oVirt cares only for L2, with OVN it can also care for L3.
> So configuration on your VM networks is up to you.
> I can imagine that you could safely mix IPv4 and IPv6 for VM networks
> without breaking any hosts, but I did not try that personally.
>
>
>> If so, that's incredibly disappointing and frustrating.
>>
>> Is Dual-stack addressing a possible feature request?
>>
>
> You can fill RFE but I am afraid that it won't get far due to lack of
> manpower.
>

As mentioned above there are many things in dual stack which could be setup
incorrectly and thus breaking the whole oVirt. And it's almost impossible
to mention all possible corner cases into the documentation. So in general
dual stack should work, but due to above it just cannot be marked as
supported.

But if you encounter some issue when running dual stack feel free to file a
bug, so we can investigate.

>
>
>> IPv4 addresses are expensive... and I have a couple of customers who only
>> needs IPv6, so would really prefer to avoid having to pay for IPv4
>> addresses for them.
>>
>> Sent with ProtonMail <https://protonmail.com/> Secure Email.
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/X2UCDQGR2ZBVHOTTJW6TSGJZ5XFDN5TZ/
>>
>
> Regards,
> Ales
>
>
> --
>
> Ales Musil
>
> Software Engineer - RHV Network
>
> Red Hat EMEA <https://www.redhat.com>
>
> amu...@redhat.comIM: amusil
> <https://red.ht/sig>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BJLNRQSB23XKGOKZQJP75XIQPPWILFBJ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XPEV5MOJMF4JFWWDAXY3QOMNRV6F2VGT/

[ovirt-users] Re: Requirements to put to cluster version 4.6

[Martin Perina]

On Tue, Jun 8, 2021 at 4:10 PM Gianluca Cecchi 
wrote:

> On Tue, Jun 8, 2021 at 3:53 PM Martin Perina  wrote:
>
>> Hi Gianluca,
>>
>> As mentioned in below RFE, EL 8.4 is not enough, you also need Advanced
>> Virtualization 8.4 (libvirt >= 7.0.0) and AFAIK this has not been released
>> upstream:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1933974
>>
>> So right now you can use 4.6 cluster level only on hosts running on
>> CentOS Stream.
>>
>> Also the error message tells you that all your Up hosts need to provide
>> EL + AV 8.4 features before you upgrade cluster level. But of course you
>> can upgrade them one by one, it's not required to put all hosts into
>> Maintenance before upgrade.
>>
>> Regards,
>> Martin
>>
>>
> OK, thanks for the note.
> Inside Doc Text of the bugzilla above there is:
> "
> New features available in compatibility 4.6 are tracked as separate bugs
> depending on this bug.
> "
> Have you the id of the bugs related to these new features provided in
> 4.4.6?
>

Relevant bugs are linked in Blocks field in Bugzilla:

*1669178* <https://bugzilla.redhat.com/show_bug.cgi?id=1669178> - [RFE] Q35
SecureBoot - Add ability to preserve variable store certificates
*1688177* <https://bugzilla.redhat.com/show_bug.cgi?id=1688177> - [RFE]
[SR-IOV] [Tech Preview RHV 4.4.6] Migration should not require downtime as
of today
*1821199* <https://bugzilla.redhat.com/show_bug.cgi?id=1821199> - HP VM
fails to migrate between identical hosts (the same cpu flags) not
supporting TSC
*1834250* <https://bugzilla.redhat.com/show_bug.cgi?id=1834250> - CPU
hotplug on UEFI VM causes VM reboot
*1892800* <https://bugzilla.redhat.com/show_bug.cgi?id=1892800> - NVDIMM:
VM hangs in wait for launch for more than 7 minutes before VM is up
*1906074* <https://bugzilla.redhat.com/show_bug.cgi?id=1906074> - [RFE]
Support disks copy between regular and managed block storage domains
*1927718* <https://bugzilla.redhat.com/show_bug.cgi?id=1927718> - [RFE]
Provide Reset option for VMs
*1936163* <https://bugzilla.redhat.com/show_bug.cgi?id=1936163> - Enable
bochs-display for UEFI guests by default
*1936164* <https://bugzilla.redhat.com/show_bug.cgi?id=1936164> - Enable
KVM Software TPM by default
*1950752* <https://bugzilla.redhat.com/show_bug.cgi?id=1950752> - [RFE][CBT]
redefine only the checkpoint that the backup is taken from and not the
entire chain



> BTW [OT]: is RHV-H 4.4.6 host image ready for cluster level 4.6 or not yet?
>

Yes, oVirt Node 4.4.6 is based CentOS Stream:

*1907833* <https://bugzilla.redhat.com/show_bug.cgi?id=1907833> - Rebase
oVirt Node on CentOS Stream 8


> Gianluca
>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QK24H4PKJQV7DLA6AYNVDPXQQEDTRMPC/

[ovirt-users] Re: Requirements to put to cluster version 4.6

[Martin Perina]

Hi Gianluca,

As mentioned in below RFE, EL 8.4 is not enough, you also need Advanced
Virtualization 8.4 (libvirt >= 7.0.0) and AFAIK this has not been released
upstream:

https://bugzilla.redhat.com/show_bug.cgi?id=1933974

So right now you can use 4.6 cluster level only on hosts running on CentOS
Stream.

Also the error message tells you that all your Up hosts need to provide EL
+ AV 8.4 features before you upgrade cluster level. But of course you can
upgrade them one by one, it's not required to put all hosts into
Maintenance before upgrade.

Regards,
Martin


On Tue, Jun 8, 2021 at 3:40 PM Gianluca Cecchi 
wrote:

> Hello,
> I updated all my 3 CentOS 4.4.5 hosts to 4.4.6.
> Or at least upgrading them from the GUI I see now they are on CentOS 8.4
> and:
> [root@ov200 ~]# rpm -qa| grep 4.4.6
> ovirt-release44-4.4.6.3-1.el8.noarch
> ovirt-host-4.4.6-1.el8.x86_64
> ovirt-host-dependencies-4.4.6-1.el8.x86_64
> [root@ov200 ~]#
>
> How to see from the webadmin GUI or from the Host Console that they are
> indeed 4.4.6?
>
> If I try to set cluster compatibility version to 4.6 I get:
>
> Error while executing action: Cannot change Cluster Compatibility Version
> to higher version when there are active Hosts with lower version.
> -Please move Host ov300, ov301, ov200 with lower version to maintenance
> first.
>
> I don't remember the need of giving downtime to get new cluster version...
>
> Or what are further requirements (and benefits) to upgrade to 4.6?
>
> Thanks,
> Gianluca
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MKF7J6M2DC2H5YBDIDH455WAYBRBPPV6/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OFMND74PLYSNI5PY6ANBA3KHVM6DVYT5/

[ovirt-users] Re: How to create new users other than admin

[Martin Perina]

On Wed, May 19, 2021 at 2:05 PM Klaas Demter  wrote:

> Hi,
>
> I would recommend to use ansible, that way you can have your configuration
> as code.
>
>
> https://docs.ansible.com/ansible/latest/collections/ovirt/ovirt/ovirt_user_module.html#ansible-collections-ovirt-ovirt-ovirt-user-module
>

This only registers existing user provided by aaa-ldap or aaa-jdbc into
oVirt Engine, it cannot create new user.

>
> Greetings
>
> Klaas
>
>
> On 5/19/21 1:01 PM, Martin Perina wrote:
>
> Hi,
>
> ovirt-engine-extension-aaa-jdbc package is installed automatically as a
> part of oVirt Engine, so in order to use it, you need to SSH to oVirt
> Engine host/VM and execute ovirt-aaa-jdbc-tool locally:
>
>
> https://www.ovirt.org/documentation/administration_guide/index.html#sect-Administering_User_Tasks_From_the_commandline
>
> Anyway aaa-jdbc extension is useful mostl for small installations within
> organizations which don't have their users/groups provided on LDAP server.
> If your organization has LDAP server, then I suggest to use aaa-ldap
> extension:
>
>
> https://www.ovirt.org/documentation/administration_guide/index.html#Introduction_to_Directory_Servers
>
> Regards,
> Martin
>
>
> On Wed, May 19, 2021 at 12:30 PM  wrote:
>
>> Thank you Lucie,
>>
>> So if I understand correctly, we need to install the AAA JDBC tool as an
>> additional package on the server running the hosted engine?
>>
>> The link you sent me suggests that we have to run engine-setup? What
>> exactly does this mean and seems rather complicated for adding a new user.
>>
>> Anyways, I ran the command "ovirt-hosted-engine-setup" after googling a
>> bit and it prompted me to create a new VM with hosted engine. I followed
>> through by providing a FQDN from our DNS server. However, this procedure
>> failed to create the VM.
>>
>> Am I doing something wrong? Could you please elaborate what would be the
>> right steps here?
>>
>> Thank you
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3PSOYTK7PWUUJPSVIKAEEUQY4D4PYJYV/
>>
>
>
> --
> Martin Perina
> Manager, Software Engineering
> Red Hat Czech s.r.o.
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/UPKFCVTLZEV3ZQ3AQ7DSMVFXF744UVGC/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CLHZCOPAQP3TFAYLDBS5J54DRUDVOQDI/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QBFRP4CL2TJMU5LZ5GE52QX7T7NH7IQZ/

[ovirt-users] Re: How to create new users other than admin

[Martin Perina]

Hi,

ovirt-engine-extension-aaa-jdbc package is installed automatically as a
part of oVirt Engine, so in order to use it, you need to SSH to oVirt
Engine host/VM and execute ovirt-aaa-jdbc-tool locally:

https://www.ovirt.org/documentation/administration_guide/index.html#sect-Administering_User_Tasks_From_the_commandline

Anyway aaa-jdbc extension is useful mostl for small installations within
organizations which don't have their users/groups provided on LDAP server.
If your organization has LDAP server, then I suggest to use aaa-ldap
extension:

https://www.ovirt.org/documentation/administration_guide/index.html#Introduction_to_Directory_Servers

Regards,
Martin


On Wed, May 19, 2021 at 12:30 PM  wrote:

> Thank you Lucie,
>
> So if I understand correctly, we need to install the AAA JDBC tool as an
> additional package on the server running the hosted engine?
>
> The link you sent me suggests that we have to run engine-setup? What
> exactly does this mean and seems rather complicated for adding a new user.
>
> Anyways, I ran the command "ovirt-hosted-engine-setup" after googling a
> bit and it prompted me to create a new VM with hosted engine. I followed
> through by providing a FQDN from our DNS server. However, this procedure
> failed to create the VM.
>
> Am I doing something wrong? Could you please elaborate what would be the
> right steps here?
>
> Thank you
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3PSOYTK7PWUUJPSVIKAEEUQY4D4PYJYV/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UPKFCVTLZEV3ZQ3AQ7DSMVFXF744UVGC/

[ovirt-users] Re: Ovirt 4.4.6 - Automate disable of default reboot of host add

[Martin Perina]

Hi Don,

Python SDK is backward compatible, so if you upgrade it to 4.4, you can use
it for older oVirt engines from 4.0.

Martin


On Wed, 5 May 2021, 17:06 Don Dupuis,  wrote:

> Martin
>
> That was my problem. While the engine and my host had the correct version
> of sdk4, the server that I run my automation scripts from had a too old
> version.
>
> Thanks
> Don
>
> On Wed, May 5, 2021 at 4:20 AM Martin Perina  wrote:
>
>> Hi,
>>
>> unfortunately we have an issue around generating Python SDK
>> documentation, so reboot parameter is not mentioned there yet:
>>
>>
>> http://ovirt.github.io/ovirt-engine-sdk/4.4/services.m.html#ovirtsdk4.services.HostsService.add
>>
>> Below code snippet looks good, but please make sure that you are using
>> python-ovirt-engine-sdk4 >= 4.4.10, which added support for reboot
>> parameter.
>>
>> Regards,
>> Martin
>>
>>
>> On Wed, May 5, 2021 at 4:17 AM Don Dupuis  wrote:
>>
>>> Below is my Add_host routine with reboot=False and my host will still
>>> reboot on install. What am I doing wrong? It is not giving me errors.
>>>
>>> def Add_host():
>>> hosts_service = connection.system_service().hosts_service()
>>>
>>> # Add the host:
>>> host = hosts_service.add(
>>> types.Host(
>>> name='%s' % HOSTNAME,
>>> description='%s A Hypervisor' % HOSTNAME,
>>> address='%s.%s' % (HOSTNAME, DOMAINNAME),
>>> root_password='password',
>>> cluster=types.Cluster(
>>> name='%s-Locall' % HOSTNAME,
>>> ),
>>> ),
>>> reboot=False,
>>> )
>>>
>>
>>
>>> host_service = hosts_service.host_service(host.id)
>>> while True:
>>> time.sleep(5)
>>> host = host_service.get()
>>> if host.status == types.HostStatus.UP:
>>> break
>>>
>>>
>>>
>>> On Tue, May 4, 2021 at 12:15 AM Yedidyah Bar David 
>>> wrote:
>>>
>>>> On Mon, May 3, 2021 at 6:52 PM Don Dupuis  wrote:
>>>> >
>>>> > Can you tell me where the default of reboot on install is set as this
>>>> wasn't this way in 4.3? I don't see an option in engine-config for this and
>>>> I have looked through the ansible files on my engine vm.
>>>>
>>>> Not sure it's possible to change the default. Adding Dana.
>>>>
>>>> See also:
>>>>
>>>> https://bugzilla.redhat.com/show_bug.cgi?id=1853906
>>>>
>>>> Best regards,
>>>> --
>>>> Didi
>>>>
>>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QUBDPSF2UNVCLMY5E6DKJYFCI5VBI6KY/
>>>
>>
>>
>> --
>> Martin Perina
>> Manager, Software Engineering
>> Red Hat Czech s.r.o.
>>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IIGJTRD5JQAT3TKPH2VV7RXUWEVV66DB/

[ovirt-users] Re: Ovirt 4.4.6 - Automate disable of default reboot of host add

[Martin Perina]

Hi,

unfortunately we have an issue around generating Python SDK documentation,
so reboot parameter is not mentioned there yet:

http://ovirt.github.io/ovirt-engine-sdk/4.4/services.m.html#ovirtsdk4.services.HostsService.add

Below code snippet looks good, but please make sure that you are using
python-ovirt-engine-sdk4 >= 4.4.10, which added support for reboot
parameter.

Regards,
Martin


On Wed, May 5, 2021 at 4:17 AM Don Dupuis  wrote:

> Below is my Add_host routine with reboot=False and my host will still
> reboot on install. What am I doing wrong? It is not giving me errors.
>
> def Add_host():
> hosts_service = connection.system_service().hosts_service()
>
> # Add the host:
> host = hosts_service.add(
> types.Host(
> name='%s' % HOSTNAME,
> description='%s A Hypervisor' % HOSTNAME,
> address='%s.%s' % (HOSTNAME, DOMAINNAME),
> root_password='password',
> cluster=types.Cluster(
> name='%s-Locall' % HOSTNAME,
> ),
> ),
> reboot=False,
> )
>


> host_service = hosts_service.host_service(host.id)
> while True:
> time.sleep(5)
> host = host_service.get()
> if host.status == types.HostStatus.UP:
> break
>
>
>
> On Tue, May 4, 2021 at 12:15 AM Yedidyah Bar David 
> wrote:
>
>> On Mon, May 3, 2021 at 6:52 PM Don Dupuis  wrote:
>> >
>> > Can you tell me where the default of reboot on install is set as this
>> wasn't this way in 4.3? I don't see an option in engine-config for this and
>> I have looked through the ansible files on my engine vm.
>>
>> Not sure it's possible to change the default. Adding Dana.
>>
>> See also:
>>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1853906
>>
>> Best regards,
>> --
>> Didi
>>
>> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QUBDPSF2UNVCLMY5E6DKJYFCI5VBI6KY/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ERXDH3ZBC5BTQK6ZF36SH6OG24D4NRVF/

[ovirt-users] Re: How to update ovirt-sdk

[Martin Perina]

On Wed, Apr 21, 2021 at 6:51 PM Miguel Garcia 
wrote:

> The command you describe above seems to be for CentOS8 while the system we
> use is CentOS7.
>

On CentOS 7 you need to use 'yum' instead of 'dnf', but the rest is the
same.

>
> Is python3-ovirt-engie-sdk4 is supported for centos7?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/JVBW4SYMBMJZMXIKZXONHMUZ5DDMJNH2/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JXG7GB2JR57CPFONCVXGV65KVY7I5SLS/

[ovirt-users] Re: Ansible ovirt.ovirt_vm nics

[Martin Perina]

Hi Matthew,

Could you please share with us your playbook? Which ansible version are you
using? Are you using ovirt_vm module from oVirt Ansible Collection which
contains newer versions than the ovirt_vm module included in Ansible 2.9?

https://docs.ansible.com/ansible/latest/collections/ovirt/ovirt/ovirt_vm_module.html

Thanks,
Martin


On Thu, Apr 22, 2021 at 9:28 AM matthew.st...@fujitsu.com <
matthew.st...@fujitsu.com> wrote:

> The ‘nics’ section of ovirt_vm is vague and with nearly no examples.
>
>
>
> My playbook is based upon
> https://blogs.oracle.com/scoter/ansible-with-oracle-linux-virtualization-manager-olvm
>
>
>
> I’ve made several modifications, (more default) and added a few lines,
> which I believe is supposed to assign vnic profiles to the primary vnic
> (nic1), based upon the definition of ‘vm_nic1_profile’ defined in an
> included ‘ini’ file. (the profile defaulting to blank if it is not defined
> in the ini file.)
>
>
>
> It isn’t doing its job.
>
>
>
>   nics:
>
> -   name: “nic1”
>
> profile_name: "{{ hostvars[item]['vm_nic1_profile'] | default('') }}”
>
>
>
>
>
> The playbook runs without complaint.  If I run it with option ‘-vvv’ part
> of the output lists the variables, but the ‘nics’ variable is an empty list
> (nics[])
>
>
>
> Any hints on what I’m doing wrong?   I’ve checked the forum, but it tends
> to strip leading spaces, which is bad for indent sensitive code.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MEZLXGSSRCRJRSMME7J3Y5XQ2AGYUWI4/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QMSHJMWEBMBHKTBL4GQJYBFOZXILSVUB/

[ovirt-users] Re: How to update ovirt-sdk

[Martin Perina]

Hi,

According to the packages below you are using Python SDK v3, which has been
deprecated in oVirt 4.0. You need to install Python SDK v4 using below:

dnf install python3-ovirt-engine-sdk4

Regards,
Martin


On Tue, Apr 20, 2021 at 5:27 PM Miguel Garcia 
wrote:

> We integrate jenkins to launch vms dynamically to run smoketest from our
> builds but now we receive the following problem:
>
> "msg": "ovirtsdk4 version 4.3.0 or higher is required for this module"
>
> I had installed following packages in CentOs7
> ovirt-engine-sdk-java.noarch  3.6.10.0-1.el7   epel
> ovirt-engine-sdk-java-javadoc.noarch  3.6.10.0-1.el7   epel
> ovirt-engine-sdk-python.noarch3.6.9.1-1.el7epel
>
> I tired to use yum upgrade but did not report more recent version from
> ovirt-sdk.
>
> How can I upgrade/install ovirt-sdk to version 4.3?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/JHCE5VSXQI7KTCOM72DGQ4GZ4HXC34PJ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/G6LVJC7LAE67N63ICPCBAK2IVVE4XCCA/

[ovirt-users] Re: oVirt 4.4.4 not dislaying Sign-on Screen

[Martin Perina]

Hi,

Could you please create a bug for the oVirt project on
https://bugzilla.redhat.com and attach logs from your oVirt Engine using
sos logcollector?

https://www.ovirt.org/documentation/administration_guide/#sect-The_Log_Collector_Tool

Thanks,
Martin


On Thu, Mar 11, 2021 at 11:40 PM  wrote:

> I've re-installed oVirt 4.4.4 without capital letter, I continue to get
> the same results.   Do you have any idea of where to start looking for a
> solution?  What could the error message "Internal Server Error" be coming
> from, "oVirt", "FireFox Browser" or "Apache Server".  Where do I start
> looking?  Nothing seems to be working at this point, my OS is "RHEL 8.3"
> with all security patches and fixes applied.
>
> Can you think anything or a place to start working towards a solution?
>
> Thanks
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4VIE4ZHHHUZKBEPJH55BSU6JEUEKE6WD/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XISLCUMZK25RZYGMLC4HFKUWMA5I3IG4/

[ovirt-users] Re: How to configure Power Management Fence Protocol for Libvirtd VM ?

[Martin Perina]

st
>
> Id   Name   State
>
> --
>
> 26   3.ohost1   running
>
> 27   3.ohost2   running
>
> 28   3.ohost3   running
>
>
>
> *The ooengh1 and ooengh2 are configured for hosted-engine, and ohst1
> ohost2 ohost3 are configured for KVM server.*
>
>
>
> *Now, I want to test the Power Management service using my test env, how
> can I choose the fence protocol ?*
>
>
>
>
>
>
>
>
>
>
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NKGEEQYZQU4IUP3SB6BDKEDOVHEFJ7FJ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/73LFMPHUU47IC6BQC7MMIB2DOJPFWA6D/

[ovirt-users] Re: OVirt rest api 4.3. How do you get the job id started by the async parameter

[Martin Perina]

Hi Ori,

could you please take a look?

Thanks,
Martin

On Thu, Jan 21, 2021 at 9:52 PM  wrote:

> I am using the rest api to create a VM, because the VM is cloned from the
> template and it takes a long time, I am also passing the async parameters
> hoping to receive back a job id, which I could then query
>
> https://x/ovirt-engine/api/vms?async=true=true
>
> however I get the new VM record which is fine but then I have no way of
> knowing the job id I should query to know when it is finished. And looking
> at all jobs there is no reference back to the VM execept for the description
>
>
>   id="d17125c7-6668-4b6c-ad22-95121cb66a31">
> 
>href="/ovirt-engine/api/jobs/d17125c7-6668-4b6c-ad22-95121cb66a31/clear"
> rel="clear"/>
>href="/ovirt-engine/api/jobs/d17125c7-6668-4b6c-ad22-95121cb66a31/end"
> rel="end"/>
> 
> Creating VM DEMO-PCC-4 from Template
> MASTER-W10-20H2-CDrive in Cluster d1-c2
>  href="/ovirt-engine/api/jobs/d17125c7-6668-4b6c-ad22-95121cb66a31/steps"
> rel="steps"/>
> true
> false
> 2021-01-21T12:49:06.700-08:00
> 2021-01-21T12:48:59.453-08:00
> started
>  href="/ovirt-engine/api/users/0f2291fa-872a-11e9-b13c-00163e449339"
> id="0f2291fa-872a-11e9-b13c-00163e449339"/>
>   
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/TGZQLI55EFZOSEBNEU5CCBDZ2EDXMINQ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SETMGF2ZNYGU6OJKJAY7WRPKTWUQGF7F/

[ovirt-users] Re: Ovirt and Vagrant

[Martin Perina]

On Tue, Jan 5, 2021 at 7:56 PM Strahil Nikolov via Users 
wrote:

> В 10:41 -0400 на 05.01.2021 (вт), Gervais de Montbrun написа:
>
> Thanks for the feedback. Are you using ansible to launch the vm from the
> template, or to provision the template once it is up?
>
> I was cloning VMs from a template, but as I'm still on oVirt 4.3 - I
> cannot use this approach with EL8 (only oVirt 4.4 can seal EL8 Templates).
> I'm now building VMs and creating snapshots, as I can easily revert back
> any changes and start new stuff.
>
>
> I think Ansible is the most popular and supported choice for managing oVirt. 
> Yet, I like the idea for Terraform.
>
>
We also have oVirt Terraform provider
https://github.com/oVirt/terraform-provider-ovirt
It doesn't yet have the coverage of oVirt Ansible Collection, so any
contribution is welcome.

>
> Best Regards,
>
> Strahil Nikolov
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFM6DESX7CHTCHG37PIHJBSLPT46XAOX/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7ZCNHGG3MWHW4HCBSRXI2VXPYUW6VSXN/

[ovirt-users] Re: Ovirt and Vagrant

[Martin Perina]

Hi Gervais,

Have you checked examples for the ovirt_vm module?

https://docs.ansible.com/ansible/latest/collections/ovirt/ovirt/ovirt_vm_module.html

Or if you need something more "high level" there is also vm_infra role:

https://github.com/oVirt/ovirt-ansible-collection/tree/master/roles/vm_infra

Both are provided by oVirt Ansible Collection, which is a preferred and
supported solution for automated management of oVirt installations.

Regards,
Martin


On Tue, Jan 5, 2021 at 4:06 PM Gervais de Montbrun 
wrote:

> Thanks for the feedback. Are you using ansible to launch the vm from the
> template, or to provision the template once it is up?
>
> We have 15+ developers bringing up vm's for a variety of different
> environments (like 80) for different, custom configurations of client
> environments. Vagrant is really just to stand up (suspend, destroy) the vms
> and then puppet runs on them to apply custom configuration.
>
> I noticed Terraform support. I suspect that it would be a ton of work for
> us to switch to it.
>
> Cheers,
> Gervais
>
>
>
> On Jan 5, 2021, at 12:33 AM, Strahil Nikolov via Users 
> wrote:
>
>
> I wonder what other folks are using or if someone has any suggestions to
> offer.
>
>
> I'm using Ansible do deploy some stuff from templates.
> I think that terraform is also used with oVirt, so you can give it a try.
>
> Best Regards,
> Strahil Nikolov
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MUM7MMOZTU54HSGAEOME7PDW4FMA7QQW/
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/WSBBX7K6MUWA44KOR35FHFDI2PL6OM3Q/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7WK44KUE6SGUTWU7MYESZEVWGA3STOVV/

[ovirt-users] Re: Cannot upgrade cluster to v4.5 (All hosts are CentOS 8.3.2011)

[Martin Perina]

On Wed, Dec 16, 2020 at 4:59 PM Gilboa Davara  wrote:

> Thanks for the prompt reply.
> I assume I can safely ignore the "Upgrade cluster compatibility" warning
> until libvirt 6.6 gets pushed to CentOS 8.3?
>

We are working on releasing AV 8.3, hopefully it will be available soon,
but until that happen you have no way how to upgrade to CL 4.5 and you just
need to stay in 4.4

>
> - Gilboa
>
> On Wed, Dec 16, 2020 at 5:56 PM Martin Perina  wrote:
>
>>
>>
>> On Wed, Dec 16, 2020 at 2:25 PM Gilboa Davara  wrote:
>>
>>> Shani,
>>>
>>> 1. I created a new 4.5 cluster with the same CPU (Secure Intel
>>> Cascadelake Server Family) and platform type (Q35/BIOS).
>>> 2. All 3 hosts are 8.3, but report 4.4 compatibility.
>>> 3. The only reason I attempted to upgrade the cluster was simple: The
>>> cluster state kept on dropping down to "unavailable" (even though all 3
>>> hosts are up) and I was offered to upgrade the cluster to v4.5.
>>>
>>> - Gilboa
>>>
>>> On Wed, Dec 16, 2020 at 1:28 PM Shani Leviim  wrote:
>>>
>>>> Hi Gilboa,
>>>>
>>>> Here are some guidelines/checks:
>>>> - Are you able to create a 4.5 DC/cluster?
>>>> - Host can be Up in the 4.5 clusters only when it reports 4.5 level
>>>> compatibility (it's based on RHEL 8.3).
>>>>   Can you make sure that on all 3 hosts?
>>>> - You can upgrade the 4.4 clusters to 4.5 only when all
>>>> Up/NonOperational hosts are reporting 4.5 level
>>>> - You can upgrade 4.4 DC to 4.5 only when all clusters inside are on
>>>> the 4.5 level
>>>> - A 4.5 host-based on RHEL 8.3 should be fully functional in
>>>> 4.2/4.3/4.4 clusters
>>>>
>>>>
>>>>
>>>> *Regards,*
>>>>
>>>> *Shani Leviim*
>>>>
>>>>
>>>> On Wed, Dec 16, 2020 at 12:53 PM Gilboa Davara 
>>>> wrote:
>>>>
>>>>> Hello all,
>>>>>
>>>>> I'm more-or-less finished building a new ovirt over glusterfs cluster
>>>>> with 3 fairly beefy servers.
>>>>> Nodes were fully upgraded to CentOS Linux release 8.3.2011 before they
>>>>> joined the cluster.
>>>>> Looking at the cluster view in the WebUI, I get an exclamation mark
>>>>> with the following message: "Upgrade cluster compatibility level".
>>>>> When I try to upgrade the cluster, 2 of the 3 hosts go into
>>>>> maintenance and reboot, but once the procedure is complete, the cluster
>>>>> version remains the same.
>>>>> Looking at the host vdsm logs, I see that once the engine refreshes
>>>>> their capabilities, all hosts return 4.2-4.4 and not 4.5.
>>>>>
>>>>> E.g.
>>>>>  'supportedENGINEs': ['4.2', '4.3', '4.4'], 'clusterLevels': ['4.2',
>>>>> '4.3', '4.4']
>>>>> I assume I should be seeing 4.5 after the upgrade, no?
>>>>>
>>>>> AmI missing something?
>>>>>
>>>>
>> EL 8.3 is not enough, you also need Advanced Virtualization 8.3 (in
>> particular libvirt 6.6)
>>
>>>
>>>>> Thanks,
>>>>> - Gilboa
>>>>> _______
>>>>> Users mailing list -- users@ovirt.org
>>>>> To unsubscribe send an email to users-le...@ovirt.org
>>>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>>>> oVirt Code of Conduct:
>>>>> https://www.ovirt.org/community/about/community-guidelines/
>>>>> List Archives:
>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7CCUHPEGVZD3BBLBDTOCHG5J6EEG5DE2/
>>>>>
>>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/RMZ3S64FFIOFTRBQOWVTTLCRJJA65EMJ/
>>>
>>
>>
>> --
>> Martin Perina
>> Manager, Software Engineering
>> Red Hat Czech s.r.o.
>>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EEMTSO56TO2SX5HMTQCLYOZBBXCSAI2O/

[ovirt-users] Re: Cannot upgrade cluster to v4.5 (All hosts are CentOS 8.3.2011)

[Martin Perina]

On Wed, Dec 16, 2020 at 2:25 PM Gilboa Davara  wrote:

> Shani,
>
> 1. I created a new 4.5 cluster with the same CPU (Secure Intel Cascadelake
> Server Family) and platform type (Q35/BIOS).
> 2. All 3 hosts are 8.3, but report 4.4 compatibility.
> 3. The only reason I attempted to upgrade the cluster was simple: The
> cluster state kept on dropping down to "unavailable" (even though all 3
> hosts are up) and I was offered to upgrade the cluster to v4.5.
>
> - Gilboa
>
> On Wed, Dec 16, 2020 at 1:28 PM Shani Leviim  wrote:
>
>> Hi Gilboa,
>>
>> Here are some guidelines/checks:
>> - Are you able to create a 4.5 DC/cluster?
>> - Host can be Up in the 4.5 clusters only when it reports 4.5 level
>> compatibility (it's based on RHEL 8.3).
>>   Can you make sure that on all 3 hosts?
>> - You can upgrade the 4.4 clusters to 4.5 only when all Up/NonOperational
>> hosts are reporting 4.5 level
>> - You can upgrade 4.4 DC to 4.5 only when all clusters inside are on the
>> 4.5 level
>> - A 4.5 host-based on RHEL 8.3 should be fully functional in 4.2/4.3/4.4
>> clusters
>>
>>
>>
>> *Regards,*
>>
>> *Shani Leviim*
>>
>>
>> On Wed, Dec 16, 2020 at 12:53 PM Gilboa Davara  wrote:
>>
>>> Hello all,
>>>
>>> I'm more-or-less finished building a new ovirt over glusterfs cluster
>>> with 3 fairly beefy servers.
>>> Nodes were fully upgraded to CentOS Linux release 8.3.2011 before they
>>> joined the cluster.
>>> Looking at the cluster view in the WebUI, I get an exclamation mark with
>>> the following message: "Upgrade cluster compatibility level".
>>> When I try to upgrade the cluster, 2 of the 3 hosts go into maintenance
>>> and reboot, but once the procedure is complete, the cluster version remains
>>> the same.
>>> Looking at the host vdsm logs, I see that once the engine refreshes
>>> their capabilities, all hosts return 4.2-4.4 and not 4.5.
>>>
>>> E.g.
>>>  'supportedENGINEs': ['4.2', '4.3', '4.4'], 'clusterLevels': ['4.2',
>>> '4.3', '4.4']
>>> I assume I should be seeing 4.5 after the upgrade, no?
>>>
>>> AmI missing something?
>>>
>>
EL 8.3 is not enough, you also need Advanced Virtualization 8.3 (in
particular libvirt 6.6)

>
>>> Thanks,
>>> - Gilboa
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7CCUHPEGVZD3BBLBDTOCHG5J6EEG5DE2/
>>>
>> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/RMZ3S64FFIOFTRBQOWVTTLCRJJA65EMJ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YIYBNDNOR4RKDQFBUVKTDSIFAZBTLLK3/

[ovirt-users] Re: fence_xvm for testing

[Martin Perina]

On Tue, Dec 15, 2020 at 12:59 PM Alex K  wrote:

>
>
> On Tue, Dec 15, 2020 at 1:43 PM emesika  wrote:
>
>> The problem is that the custom fencing configuration is not defined well
>>
>> Please follow [1] and retry
>>
>> [1]
>> https://www.ovirt.org/develop/developer-guide/engine/custom-fencing.html
>>
> Yes, I followed that.
> I cannot see what I am missing:
>
> [root@manager ~]# engine-config -g CustomVdsFenceType
> CustomVdsFenceType: fence_xvm version: general
> [root@manager ~]# engine-config -g CustomFenceAgentMapping
> CustomFenceAgentMapping: fence_xvm=xvm version: general
> [root@manager ~]# engine-config -g CustomVdsFenceOptionMapping
> CustomVdsFenceOptionMapping: fence_xvm: version: general
>
>
>>
>> On Tue, Dec 15, 2020 at 12:56 PM Alex K  wrote:
>>
>>>
>>>
>>> On Tue, Dec 15, 2020 at 12:34 PM Martin Perina 
>>> wrote:
>>>
>>>>
>>>>
>>>> On Tue, Dec 15, 2020 at 11:18 AM Alex K 
>>>> wrote:
>>>>
>>>>>
>>>>>
>>>>> On Tue, Dec 15, 2020 at 11:59 AM Martin Perina 
>>>>> wrote:
>>>>>
>>>>>> Hi,
>>>>>>
>>>>>> could you please provide engine.log? And also vdsm.log from a host
>>>>>> which was acting as a fence proxy?
>>>>>>
>>>>>
>>>>> At proxy host (kvm1) I see the following vdsm.log:
>>>>>
>>>>> 2020-12-15 10:13:03,933+ INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer]
>>>>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>>>>> 2020-12-15 10:13:04,376+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer]
>>>>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>>>>>
>>>>
>>>> Isn't there stdout and stderr content of fence_xvm execution a few
>>>> lines above, which should reveal the exact error? If not, then could you
>>>> please turn on debug logging using below command:
>>>>
>>>> vdsm-client Host setLogLevel level=DEBUG
>>>>
>>>> This should be executed on the host which acts as a fence proxy (if you 
>>>> have multiple hosts, then you would need to turn on debug on all, because 
>>>> the fence proxy is selected randomly).
>>>>
>>>> Once we will have vdsm.log with fence_xvm execution details, then you can 
>>>> change log level to INFO again by running:
>>>>
>>>> I had to set engine-config -s CustomFenceAgentMapping="fence_xvm=xvm"
>>> at engine, as it seems the host prepends fence_.
>>> After that I got the following at the proxy host with DEBUG enabled:
>>>
>>> 2020-12-15 10:51:57,891+ DEBUG (jsonrpc/7) [jsonrpc.JsonRpcServer]
>>> Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
>>> u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
>>> u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
>>> 2020-12-15 10:51:57,892+ DEBUG (jsonrpc/7) [root] /usr/bin/taskset
>>> --cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
>>> 2020-12-15 10:51:57,911+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer]
>>> RPC call Host.fenceNode failed (error 1) in 0.02 seconds (__init__:312)
>>> 2020-12-15 10:51:58,339+ DEBUG (jsonrpc/5) [jsonrpc.JsonRpcServer]
>>> Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
>>> u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
>>> u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
>>>
>>
Yes, that's the most probable issue. Eli, do we have a way to prevent
passing default port value 0 for custom fence agent?

> 2020-12-15 10:51:58,340+ DEBUG (jsonrpc/5) [root] /usr/bin/taskset
>>> --cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
>>> 2020-12-15 10:51:58,356+ INFO  (jsonrpc/5) [jsonrpc.JsonRpcServer]
>>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312
>>>
>>> while at engine at got:
>>> 2020-12-15 10:51:57,873Z INFO
>>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>>> (default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
>>> FENCE_OPERATION_USING_AGENT_AND_PROXY_STARTED(9,020), Executing power
>>> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
>>> and Fence Agent xvm:225.0.0.1

[ovirt-users] Re: fence_xvm for testing

[Martin Perina]

On Tue, Dec 15, 2020 at 11:18 AM Alex K  wrote:

>
>
> On Tue, Dec 15, 2020 at 11:59 AM Martin Perina  wrote:
>
>> Hi,
>>
>> could you please provide engine.log? And also vdsm.log from a host which
>> was acting as a fence proxy?
>>
>
> At proxy host (kvm1) I see the following vdsm.log:
>
> 2020-12-15 10:13:03,933+ INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer] RPC
> call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
> 2020-12-15 10:13:04,376+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer] RPC
> call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>

Isn't there stdout and stderr content of fence_xvm execution a few lines
above, which should reveal the exact error? If not, then could you please
turn on debug logging using below command:

vdsm-client Host setLogLevel level=DEBUG

This should be executed on the host which acts as a fence proxy (if
you have multiple hosts, then you would need to turn on debug on all,
because the fence proxy is selected randomly).

Once we will have vdsm.log with fence_xvm execution details, then you
can change log level to INFO again by running:

vdsm-client Host setLogLevel level=INFO

Thanks,

Martin

2020-12-15 10:13:06,722+ INFO  (jsonrpc/4) [api.host] FINISH getStats
> return={'status': {'message': 'Done', 'code': 0}, 'info': {'cpuStatistics':
> {'1': {'cpuUser': '2.33', 'nodeIndex': 0, 'cpuSys': '1.13', 'cpuIdle':
> '96.54'}, '0': {'cpuUser': '1.66', 'nodeIndex': 0, 'cpuSys': '0.47',
> 'cpuIdle': '97.87'}, '3': {'cpuUser': '0.73', 'nodeIndex': 0, 'cpuSys':
> '0.60', 'cpuIdle': '98.67'}, '2': {'cpuUser': '1.20', 'nodeIndex': 0,
> 'cpuSys': '0.40', 'cpuIdle': '98.40'}}, 'numaNodeMemFree': {'0':
> {'memPercent': 14, 'memFree': '8531'}}, 'memShared': 0, 'haScore': 3400,
> 'thpState': 'always', 'ksmMergeAcrossNodes': True, 'vmCount': 0, 'memUsed':
> '8', 'storageDomains': {u'b4d25e5e-7806-464f-b2e1-4d4ab5a54dee': {'code':
> 0, 'actual': True, 'version': 5, 'acquired': True, 'delay': '0.0027973',
> 'lastCheck': '2.7', 'valid': True},
> u'dc4d507b-954f-4da6-bcc3-b4f2633d0fa1': {'code': 0, 'actual': True,
> 'version': 5, 'acquired': True, 'delay': '0.00285824', 'lastCheck': '5.7',
> 'valid': True}}, 'incomingVmMigrations': 0, 'network': {'ovirtmgmt':
> {'rxErrors': '0', 'txErrors': '0', 'speed': '1000', 'rxDropped': '149',
> 'name': 'ovirtmgmt', 'tx': '2980375', 'txDropped': '0', 'duplex':
> 'unknown', 'sampleTime': 1608027186.703727, 'rx': '27524740', 'state':
> 'up'}, 'lo': {'rxErrors': '0', 'txErrors': '0', 'speed': '1000',
> 'rxDropped': '0', 'name': 'lo', 'tx': '1085188922', 'txDropped': '0',
> 'duplex': 'unknown', 'sampleTime': 1608027186.703727, 'rx': '1085188922',
> 'state': 'up'}, 'ovs-system': {'rxErrors': '0', 'txErrors': '0', 'speed':
> '1000', 'rxDropped': '0', 'name': 'ovs-system', 'tx': '0', 'txDropped':
> '0', 'duplex': 'unknown', 'sampleTime': 1608027186.703727, 'rx': '0',
> 'state': 'down'}, ';vdsmdummy;': {'rxErrors': '0', 'txErrors': '0',
> 'speed': '1000', 'rxDropped': '0', 'name': ';vdsmdummy;', 'tx': '0',
> 'txDropped': '0', 'duplex': 'unknown', 'sampleTime': 1608027186.703727,
> 'rx': '0', 'state': 'down'}, 'br-int': {'rxErrors': '0', 'txErrors': '0',
> 'speed': '1000', 'rxDropped': '0', 'name': 'br-int', 'tx': '0',
> 'txDropped': '0', 'duplex': 'unknown', 'sampleTime': 1608027186.703727,
> 'rx': '0', 'state': 'down'}, 'eth1': {'rxErrors': '0', 'txErrors': '0',
> 'speed': '1000', 'rxDropped': '0', 'name': 'eth1', 'tx': '83685154',
> 'txDropped': '0', 'duplex': 'unknown', 'sampleTime': 1608027186.703727,
> 'rx': '300648288', 'state': 'up'}, 'eth0': {'rxErrors': '0', 'txErrors':
> '0', 'speed': '1000', 'rxDropped': '0', 'name': 'eth0', 'tx': '2980933',
> 'txDropped': '0', 'duplex': 'unknown', 'sampleTime': 1608027186.703727,
> 'rx': '28271472', 'state': 'up'}}, 'txDropped': '149', 'anonHugePages':
> '182', 'ksmPages': 100, 'elapsedTime': '5717.99', 'cpuLoad': '0.42',
> 'cpuSys': '0.63', 'diskStats': {'/var/log': {'free': '16444'},
> '/var/run/vdsm/': {'free': '4909'}, '/tmp': {'free': '16444'}},
> 'cpuUserVdsmd': '1.33', 'netConfigDirty': 'False', 'memCommitted': 0,
> 'ksmState': False, 'vmMigrating': 0, 'ksmCpu': 0, 'memAvailable': 9402,
> 'bootTime': '1608021428', 'haStats': {'active': True, 'configured': True,
> 'score': 3400, 'localMaintenance': False, 'globalMaintenance': True},
> 'momStatus': 'active', 'multipathHealth': {}, 'rxDropped': '0',
> 'outgoingVmMigrations': 0, 'swapTotal': 6015, 'swapFree': 6015,
> 'hugepages': defaultdict(, {1048576: {'resv_hugepages': 0,
> 'free_hugepages': 0, 'nr_overcommit_hugepages': 0, 'surplus_hugepages': 0,
> 'vm.free_hugepages': 0, 'nr_hugepages': 0, 'nr_hugepages_mempolicy': 0},
> 2048: {'resv_hugepages': 0, 'free_hugepages': 0, 'nr_overcommit_hugepages':
>

[ovirt-users] Re: fence_xvm for testing

[Martin Perina]

1495d75759] EVENT_ID:
>>> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
>>> kvm0.lab.local.Internal JSON-RPC error
>>> 2020-12-14 08:53:48,582Z INFO
>>>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
>>> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
>>> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
>>> message='Internal JSON-RPC error'}, log id: 8607bc9
>>> 2020-12-14 08:53:48,637Z WARN
>>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
>>> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
>>> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
>>> and Fence Agent fence_xvm:225.0.0.12 failed.
>>>
>>>
>>> Any idea?
>>>
>>> Thanx,
>>> Alex
>>>
>>>
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/B7IHC4MYY5LJFJMEJMLRRFSTMD7IK23I/
>>>
>> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MV3RI22LE4C57R6TUQR5BG3LVZUVWRNX/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HMDTM5EKBU3KCA5SB7HOZEPSX7LABM4M/

[ovirt-users] Re: sshd_config AuthorizedKeysFile

[Martin Perina]

Hi,

could you please try if ssh-copy-id works with your non-standard sshd
configuration? Because last time I've checked I haven't noticed that
behavior and keys were always added to $HOME/.ssh/authorized_keys

So feel free to create a bug for that, but up until now you are the first
user using this non-standard configuration ...

Regards,
Martin

On Thu, Nov 12, 2020 at 9:00 AM Angus Clarke  wrote:

> Hello
>
> Sharing for anyone who needs it, this was carried out on OL7, they use
> ovirt 4.3
>
> In short: both the hosted-engine deployment routine and the host add to
> cluster routine distribute public ssh keys to /root/.ssh/authorized_keys
> regardless of the AuthorizedKeysFile setting in /etc/ssh/sshd_config. Both
> routines fail if AuthorizedKeysfile is not default.
>
>
> The hosted-engine setup assumes AuthorizedKeysFile to be default
> (~/.ssh/authorized_keys) and creates a public key there, instead of
> following the sshd_config directive. The setup fails on the back of this.
>
> Once I commented this out of sshd_config file (assumes default) and
> restarted sshd on the KVM host that was running the hosted-engine
> deployment, the hosted-engine setup completed successfully.
>
>
> Similarly, I could not deploy a second KVM host to the compute cluster
> until I had altered this setting on that 2nd KVM host - presumably that
> process has some similar routine that unwittingly writes keys to
> ~/.ssh/authorized_keys.
>
> HTH
> Angus
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/UMJ4Y622RALUU6QKPNREYS43BP324ODT/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SLVELKKOY5C5LWTP3FD6CI3VPRHNC226/

[ovirt-users] Re: Dependencies failure when upgrading from version 4.4.2 to 4.4.3

[Martin Perina]

Hi,

We already have https://bugzilla.redhat.com/show_bug.cgi?id=1896799 open to
track this issue. Could you please to upgrade your standalone engine using
below steps?

  # dnf update ovirt\*setup\* --nobest
  # engine-setup
  # dnf update --nobest
  # reboot

If engine upgrade is successful, could you please upgrade yours hosts from
webadmin using below steps?

1. Move the host to Maintenance
2. Execute Check for Update
3. Execute Upgrade

Manual upgrade of host using command line has been deprecated, because
manual steps are missing important parts (for example renewal of
certificates close to expiration date)

Thanks,
Martin



On Wed, Nov 11, 2020 at 7:47 PM  wrote:

> When I update the Engine and Host, many dependencies are missing, as shown
> by the host error log:
>
> Error:
>  Problem 1: package ovirt-hosted-engine-setup-2.4.6-1.el8.noarch requires
> ovirt-ansible-engine-setup >= 1.1.9, but none of the providers can be
> installed
>   - package ovirt-ansible-collection-1.2.1-1.el8.noarch obsoletes
> ovirt-ansible-engine-setup provided by
> ovirt-ansible-engine-setup-1.2.4-1.el8.noarch
>   - cannot install the best update candidate for package
> ovirt-hosted-engine-setup-2.4.6-1.el8.noarch
>   - cannot install the best update candidate for package
> ovirt-ansible-engine-setup-1.2.4-1.el8.noarch
>  Problem 2: package ovirt-host-4.4.1-4.el8.x86_64 requires
> ovirt-hosted-engine-setup, but none of the providers can be installed
>   - package ovirt-hosted-engine-setup-2.4.6-1.el8.noarch requires
> ovirt-ansible-hosted-engine-setup >= 1.0.34, but none of the providers can
> be installed
>   - package ovirt-ansible-collection-1.2.1-1.el8.noarch obsoletes
> ovirt-ansible-hosted-engine-setup provided by
> ovirt-ansible-hosted-engine-setup-1.1.8-1.el8.noarch
>   - cannot install the best update candidate for package
> ovirt-host-4.4.1-4.el8.x86_64
>   - cannot install the best update candidate for package
> ovirt-ansible-hosted-engine-setup-1.1.8-1.el8.noarch
>   - package ovirt-ansible-hosted-engine-setup-1.1.4-1.el8.noarch is
> filtered out by exclude filtering
>   - package ovirt-ansible-hosted-engine-setup-1.1.5-1.el8.noarch is
> filtered out by exclude filtering
>   - package ovirt-ansible-hosted-engine-setup-1.1.6-1.el8.noarch is
> filtered out by exclude filtering
>   - package ovirt-ansible-hosted-engine-setup-1.1.7-1.el8.noarch is
> filtered out by exclude filtering
>   - package ovirt-hosted-engine-setup-2.4.4-1.el8.noarch is filtered out
> by exclude filtering
>   - package ovirt-hosted-engine-setup-2.4.5-1.el8.noarch is filtered out
> by exclude filtering
>   - package ovirt-hosted-engine-setup-2.4.7-1.el8.noarch is filtered out
> by exclude filtering
>   - package ovirt-hosted-engine-setup-2.4.8-1.el8.noarch is filtered out
> by exclude filtering
> (try to add '--skip-broken' to skip uninstallable packages or '--nobest'
> to use not only best candidate packages)
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/W4MLIPGT7CJQVZRFRE2MPJ7VTIZAYYEH/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RHO2UEP573D2AXGQKBPI4CRZBFEX4QPZ/

[ovirt-users] Re: Engine update error from 4.4.2 to 4.4.3

[Martin Perina]

Hi,
Could you please try to upgrade from 4.4.2 to 4.4.3 using below steps:

  # dnf update ovirt\*setup\* --nobest
  # engine-setup
  # dnf update --nobest
  # reboot

Thanks,
Martin

On Wed, Nov 11, 2020 at 4:32 PM Gianluca Cecchi 
wrote:

> On Wed, Nov 11, 2020 at 4:12 PM shadow emy  wrote:
>
>> Hello
>>
>> I have updated only the engine first using bellow command and could
>> proceed with the update.
>>
>> dnf update ovirt-engine-setup ovirt-engine-setup-plugin-websocket-proxy
>> ovirt-engine-dwh-setup ovirt-engine-dwh-grafana-integration-setup
>>
>> engine-setup
>>
>>
>> "  yum update ovirt\*setup\* "   --  did not work and had the same error
>> as you
>>
>>
> Thanks for the info.
> Were you then able to run "yum update" on engine without dependency errors?
>
> Can you please add the info into the bugzilla link I provided for this,
> thanks
>
> Gianluca
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EH4HUAO6SCZCBYF3FEAAYULFHSXU22EI/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/URVPDRH6MR25DONZQ7IFM722SSS7X2QN/

[ovirt-users] Re: Engine update error from 4.4.2 to 4.4.3

[Martin Perina]

Hi Gianluca,

could you please file a bug for that? No idea how we could miss such a
blocker :-(

Thanks,
Martin


On Wed, Nov 11, 2020 at 2:46 PM Gianluca Cecchi 
wrote:

> On Wed, Nov 11, 2020 at 2:02 PM Gilboa Davara  wrote:
> [snip]
>
>
>> $ yum update ovirt\*setup\*
>> Last metadata expiration check: 1:50:00 ago on Wed 11 Nov 2020 01:03:00
>> PM IST.
>>
>>
> ??
> Does it mean you too or what?
> Please, words are (still) free so you can use some more... ;-)
>
> Gianluca
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/P433UJQSTT3X2R7AG3SM345XY2WXE6VN/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QNUU3GVYLO47KC6GGSDV4VWJTCTRHHGU/

[ovirt-users] Re: problems installing standard Linux as nodes in 4.4

[Martin Perina]

Hi Gianluca,

happy to hear that your issue was fixed!

Just please be aware that iptables support for hosts has been deprecated
and it's completely unsupported for cluster levels 4.4 and up. So unless
you switch your cluster to firewalld, you will not be able to upgrade your
cluster to 4.4 version. You can take a look at documentation how to prepare
custom firewall rules for firewalld:

https://www.ovirt.org/documentation/administration_guide/#Configuring_Host_Firewall_Rules

Regards,
Martin


On Mon, Oct 26, 2020 at 7:22 PM Gianluca Cecchi 
wrote:

> On Thu, Oct 15, 2020 at 12:25 PM Gianluca Cecchi <
> gianluca.cec...@gmail.com> wrote:
>
>> On Thu, Oct 15, 2020 at 10:41 AM Gianluca Cecchi <
>> gianluca.cec...@gmail.com> wrote:
>>
>>>
>>>
>>> Any feedback on my latest comments?
>>> In the meantime here:
>>>
>>> https://drive.google.com/file/d/1iN37znRtCo2vgyGTH_ymLhBJfs-2pWDr/view?usp=sharing
>>> you can find inside the sosreport in tar.gz format, where I have
>>> modified some file names and context in respect of hostnames.
>>> The only file I have not put inside is the dump of the database, but I
>>> can run any query you like in case.
>>>
>>> Gianluca
>>>
>>>
>>
>> I have also tried to put debug into the engine.
>>
>>
> So after huge debugging work with Dana Elfassy and Martin Necas (thank you
> very much to both!) and coordination of Sandro we found the culprit!
>
> Inside firewall custom rules of my engine I had this (note the double
> quotes for the comment about Nagios):
>
> [root@ovmgr1 ovirt-engine]# engine-config -g IPTablesConfigSiteCustom
> IPTablesConfigSiteCustom: -A INPUT -p tcp --dport 5666 -s 10.4.5.99/32 -m
> comment --comment "Nagios NRPE daemon" -j ACCEPT version: general
> [root@ovmgr1 ovirt-engine]#
>
> So those double quotes  caused a wrong formatted json block that
> ansible-runner-service was not able to manage in the http post phase
>
> After changing with single quotes, with this command:
>
> engine-config -s IPTablesConfigSiteCustom="-A INPUT -p tcp --dport 5666 -s
> 10.4.5.99/32 -m comment --comment 'Nagios NRPE daemon' -j ACCEPT"
>
> and restarting the engine so that now I have
>
> [root@ovmgr1 ovirt-engine]# engine-config -g IPTablesConfigSiteCustom
> IPTablesConfigSiteCustom: -A INPUT -p tcp --dport 5666 -s 10.4.5.99/32 -m
> comment --comment 'Nagios NRPE daemon' -j ACCEPT version: general
> [root@ovmgr1 ovirt-engine]#
>
> I was able to add the CentOS 8.2 host.
> So mind if you have the double quotes in any engine-config key before
> upgrading from 4.3 to 4.4.
>
> What a nasty thing to detect...
> Thanks again guys for your help
>
> Gianluca
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QJI6BLUQ43N7RYGEUAPVWKXYOSKY4AVZ/

[ovirt-users] Re: problems installing standard Linux as nodes in 4.4

[Martin Perina]

On Sat, 10 Oct 2020, 01:24 Gianluca Cecchi, 
wrote:

> On Fri, Oct 9, 2020 at 7:12 PM Martin Perina  wrote:
>
>>
>>
>> Could you please share with us all logs from engine gathered by
>> logcollector? We will try to find out any clue what's wrong in your env ...
>>
>> Thanks,
>> Martin
>>
>>
> I will try to collect.
> In the mean time I've found that SSH could be in some way involved
>
> When I add the host and get the immediate failure and apparently nothing
> happens at all,  I see these two lines in /var/log/ovirt-engine/server.log
>
> 2020-10-09 18:15:09,369+02 WARN
>  [org.apache.sshd.client.session.ClientConnectionService]
> (sshd-SshClient[7cb54873]-nio2-thread-1)
> globalRequest(ClientConnectionService[ClientSessionImpl[root@ov200
> /10.4.192.32:22]])[hostkeys...@openssh.com, want-reply=false] failed
> (SshException) to process: EdDSA provider not supported
> 2020-10-09 18:15:09,699+02 WARN
>  [org.apache.sshd.client.session.ClientConnectionService]
> (sshd-SshClient[2cbceeab]-nio2-thread-1)
> globalRequest(ClientConnectionService[ClientSessionImpl[root@ov200
> /10.4.192.32:22]])[hostkeys...@openssh.com, want-reply=false] failed
> (SshException) to process: EdDSA provider not supported
>

This harmless, AFAIK EdDSA is not supported by default in OpenJDK 11 and
engine uses only ssh-rsa and ssh-rsa2 anyway


> could it be that the ssh client embedded is not able to connect to the
> CentOS 8.2 for some reason?
>

If that's the case we should see an error either in engine.log or
ansible-runner-service.log


> On host at the moment when I try to add it I see again two sessions opened
> and immediately closed (tried several times), eg in the timeframe above I
> have:
>
> Oct  9 18:15:09 ov200 systemd-logind[1237]: New session 41 of user root.
> Oct  9 18:15:09 ov200 systemd[1]: Started Session 41 of user root.
> Oct  9 18:15:09 ov200 systemd-logind[1237]: Session 41 logged out. Waiting
> for processes to exit.
> Oct  9 18:15:09 ov200 systemd-logind[1237]: Removed session 41.
> Oct  9 18:15:09 ov200 systemd-logind[1237]: New session 42 of user root.
> Oct  9 18:15:09 ov200 systemd[1]: Started Session 42 of user root.
> Oct  9 18:15:09 ov200 systemd-logind[1237]: Session 42 logged out. Waiting
> for processes to exit.
> Oct  9 18:15:09 ov200 systemd-logind[1237]: Removed session 42.
>
> anyway at sshd service level it seems it is ok om the host:
>
> journalctl -u sshd.service has
>
> Oct 09 18:15:09 ov200 sshd[13379]: Accepted password for root from
> 10.4.192.43 port 46008 ssh2
> Oct 09 18:15:09 ov200 sshd[13379]: pam_unix(sshd:session): session opened
> for user root by (uid=0)
> Oct 09 18:15:09 ov200 sshd[13379]: pam_unix(sshd:session): session closed
> for user root
> Oct 09 18:15:09 ov200 sshd[13398]: Accepted password for root from
> 10.4.192.43 port 46014 ssh2
> Oct 09 18:15:09 ov200 sshd[13398]: pam_unix(sshd:session): session opened
> for user root by (uid=0)
> Oct 09 18:15:09 ov200 sshd[13398]: pam_unix(sshd:session): session closed
> for user root
>
> On the host I have not customized anything ssh related:
>
> [root@ov200 ssh]# ps -ef|grep sshd
> root1274   1  0 Oct08 ?00:00:00 /usr/sbin/sshd -D
> -oCiphers=aes256-...@openssh.com,chacha20-poly1...@openssh.com
> ,aes256-ctr,aes256-cbc,aes128-...@openssh.com,aes128-ctr,aes128-cbc
> -oMACs=hmac-sha2-256-...@openssh.com,hmac-sha1-...@openssh.com,
> umac-128-...@openssh.com,hmac-sha2-512-...@openssh.com
> ,hmac-sha2-256,hmac-sha1,umac-...@openssh.com,hmac-sha2-512
> -oGSSAPIKexAlgorithms=gss-gex-sha1-,gss-group14-sha1-
> -oKexAlgorithms=curve25519-sha256,curve25519-sha...@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
> -oHostKeyAlgorithms=rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com
> ,ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-...@openssh.com
> ,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-...@openssh.com
> ,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com,ecdsa-sha2-nistp521,
> ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519,
> ssh-ed25519-cert-...@openssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com
> -oPubkeyAcceptedKeyTypes=rsa-sha2-256,rsa-sha2-256-cert-...@openssh.com
> ,ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-...@openssh.com
> ,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-...@openssh.com
> ,rsa-sha2-512,rsa-sha2-512-cert-...@openssh.com,ecdsa-sha2-nistp521,
> ecdsa-sha2-nistp521-cert-...@openssh.com,ssh-ed25519,
> ssh-ed25519-cert-...@openssh.com,ssh-rsa,ssh-rsa-cert-...@openssh.com
> -oCASignatureAlgorithms=r

[ovirt-users] Re: problems installing standard Linux as nodes in 4.4

[Martin Perina]

On Fri, Oct 9, 2020 at 6:47 PM Gianluca Cecchi 
wrote:

>
>
> On Fri, Oct 9, 2020 at 6:29 PM Martin Perina  wrote:
>
>>
>>
>> On Fri, Oct 9, 2020 at 5:54 PM Gianluca Cecchi 
>> wrote:
>>
>>> On Fri, Oct 9, 2020 at 4:58 PM Martin Perina  wrote:
>>>
>>>> Hi Gianluca,
>>>>
>>>> could you please check selinux context of
>>>> /var/log/ovirt-engine/ansible-runner-service.log to see if you are not
>>>> affected by https://bugzilla.redhat.com/show_bug.cgi?id=1880171#c5 ?
>>>>
>>>> Thanks,
>>>> Martin
>>>>
>>>
>>> Thanks for answering.
>>> It seems ok. On the engine:
>>> [root@ovmgr1 ~]# ls -Z /var/log/ovirt-engine/ansible-runner-service.log
>>> system_u:object_r:httpd_log_t:s0
>>> /var/log/ovirt-engine/ansible-runner-service.log
>>> [root@ovmgr1 ~]#
>>>
>>> Gianluca
>>>
>>
>> OK, so could you please apply the workaround mentioned in
>> https://bugzilla.redhat.com/show_bug.cgi?id=1880171#c5 to resolve the
>> issue until oVirt 4.4.3 is released?
>>
>>
> Sorry, but isn't it already ok? The SELinux security context for the file
> is already httpd_log_t, so I don't have to apply anything.
> I also applied the more brutal workaround described in
> https://bugzilla.redhat.com/show_bug.cgi?id=1880171#c4 without any
> effect, so I'm not in this bugzilla context.
> Do I have to apply also for the directory /var/log/ovirt-engine itself,
> that currently has a context of var_log_t? I don't think so...
>

Ahh, sorry, I've misunderstood your reply, I thought you replied you are
affected.

Could you please share with us all logs from engine gathered by
logcollector? We will try to find out any clue what's wrong in your env ...

Thanks,
Martin


> Gianluca
>
>
>

-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FM4AGM2OYTXAJCBZLGYJ7MAL7J2IKGCB/

[ovirt-users] Re: problems installing standard Linux as nodes in 4.4

[Martin Perina]

On Fri, Oct 9, 2020 at 5:54 PM Gianluca Cecchi 
wrote:

> On Fri, Oct 9, 2020 at 4:58 PM Martin Perina  wrote:
>
>> Hi Gianluca,
>>
>> could you please check selinux context of
>> /var/log/ovirt-engine/ansible-runner-service.log to see if you are not
>> affected by https://bugzilla.redhat.com/show_bug.cgi?id=1880171#c5 ?
>>
>> Thanks,
>> Martin
>>
>
> Thanks for answering.
> It seems ok. On the engine:
> [root@ovmgr1 ~]# ls -Z /var/log/ovirt-engine/ansible-runner-service.log
> system_u:object_r:httpd_log_t:s0
> /var/log/ovirt-engine/ansible-runner-service.log
> [root@ovmgr1 ~]#
>
> Gianluca
>

OK, so could you please apply the workaround mentioned in
https://bugzilla.redhat.com/show_bug.cgi?id=1880171#c5 to resolve the issue
until oVirt 4.4.3 is released?


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7EKVKRO3CPQLHYI6FEC6BTAVJWNYRZZ2/

[ovirt-users] Re: problems installing standard Linux as nodes in 4.4

[Martin Perina]

Hi Gianluca,

could you please check selinux context of
/var/log/ovirt-engine/ansible-runner-service.log to see if you are not
affected by https://bugzilla.redhat.com/show_bug.cgi?id=1880171#c5 ?

Thanks,
Martin


On Fri, Oct 9, 2020 at 4:45 PM Gianluca Cecchi 
wrote:

> On Thu, Oct 8, 2020 at 5:13 PM Gianluca Cecchi 
> wrote:
>
>>
>>
>> On Thu, Oct 8, 2020 at 5:08 PM Gianluca Cecchi 
>> wrote:
>>
>>> On Thu, Oct 8, 2020 at 4:59 PM Dana Elfassy  wrote:
>>>
>>>> And also please attach the content of the file found at:
>>>> /etc/ansible-runner-service/config.yaml
>>>>
>>>> On Thu, Oct 8, 2020 at 5:55 PM Dana Elfassy 
>>>> wrote:
>>>>
>>>>> Hi Gianluca,
>>>>> Please execute the following command on your engine, save the output
>>>>> into a file and attach it:
>>>>> sudo journalctl -u ansible-runner-service
>>>>> Dana
>>>>>
>>>>>
>>> Thanks for answering, Dana.
>>>
>>>  [root@ovmgr1 ansible-runner-service]# sudo journalctl -u
>>> ansible-runner-service
>>> -- Logs begin at Tue 2020-10-06 11:12:46 CEST, end at Thu 2020-10-08
>>> 17:02:25 CEST. --
>>> -- No entries --
>>> [root@ovmgr1 ansible-runner-service]#
>>>
>>>
>>> [root@ovmgr1 ansible-runner-service]# cat
>>> /etc/ansible-runner-service/config.yaml
>>>
>>> version: 1
>>> playbooks_root_dir:
>>> '/usr/share/ovirt-engine/ansible-runner-service-project'
>>> ssh_private_key: '/etc/pki/ovirt-engine/keys/engine_id_rsa'
>>> port: 50001
>>> target_user: root
>>> log_path: '/var/log/ovirt-engine'
>>> [root@ovmgr1 ansible-runner-service]#
>>>
>>> I noticed that both on engine and on host the "ansible-runner" package
>>> is not installed. Is it correct and only ansible-runner-service package to
>>> be installed only on the engine?
>>> Also, does the "service" in the name imply that I should have any
>>> systemd or other kind of related service on engine?
>>> Finally, I have to use a proxy for dnf/yum.
>>> To be able to run "engine-setup" on engine I had to set http_proxy and
>>> https_proxy eng variables inside the shell session, because it seems that
>>> engine-setup was not able to leverage the global configuration. Could it be
>>> something similar due to the host having to use a proxy too (that I already
>>> setup in /etc/dnf/dnf.conf)? Just a guess.
>>>
>>> Gianluca
>>>
>>
>> Also, the host already existed in 4.3. I upgraded the standalone engine
>> from 4.3.10 to 4.4.2 following the guide.
>> Now to update my hosts I put a host into maintenance, removed the host
>> from the gui, reinstalled the server in CentOS 8.2 with same network
>> parameters, and then add new host with the same name/hostname as before.
>> Could it be a problem to reuse the host?
>>
>> Gianluca
>>
>
> Any other thing to check to be able to provision a node in 4.4.2 using
> plain CentOS 8.2 host?
> Thanks,
> Gianluca
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/AJN3ENCAXNCTGWD4AXGCXQQEE6KOSXDN/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FSCB3N3KZLBV2RGWEOXAJZBMBK3A2RTY/

[ovirt-users] Re: Upgrade oVirt from 4.3.10 to 4.4.2 and AD users

[Martin Perina]

Hi Gianluca,

There is a bug in the documentation. Configuration of all oVirt engine
extensions is included in 4.3 backup, these configuration files are
properly restored and upgraded during engine-setup execution:
https://bugzilla.redhat.com/show_bug.cgi?id=1814212
So further action around extension configuration is needed.

Regards,
Martin

On Tue, Oct 6, 2020 at 3:17 PM Gianluca Cecchi 
wrote:

> Hello,
> I'm upgrading a standalone engine with local database and with 3 hosts
> from oVirt 4.3.10 to 4.4.2 and I'm cross checking both oVirt and RHV
> documents.
> In my oVirt environment I have integration with AD for web admin access.
>
> Inside RHV upgrade guide docs there is this statement regarding manager
> upgrade:
> "
> Install optional extension packages if they were installed on the Red Hat
> Virtualization Manager 4.3 machine.
> # yum install ovirt-engine-extension-aaa-ldap
> ovirt-engine-extension-aaa-misc ovirt-engine-extension-logger-log4j
> NOTE
> The configuration for these package extensions must be manually reapplied
> because they are not migrated as part of the backup and restore process.
> "
>
> In my case I had ovirt-engine-extension-aaa-ldap and
> ovirt-engine-extension-aaa-misc installed on 4.3.10.
> So after "engine-backup --mode=restore " command I executed:
>
> [root@ovmgr1 ~]# yum install ovirt-engine-extension-aaa-ldap
> ovirt-engine-extension-aaa-misc
> Last metadata expiration check: 0:01:11 ago on Tue 06 Oct 2020 11:23:04 AM
> CEST.
> Dependencies resolved.
>
> ==
>  Package  ArchVersion Repository
>   Size
>
> ==
> Installing:
>  ovirt-engine-extension-aaa-ldap  noarch  1.4.1-1.el8 ovirt-4.4
>   127 k
>  ovirt-engine-extension-aaa-misc  noarch  1.1.0-1.el8 ovirt-4.4
>37 k
> Installing dependencies:
>  unboundid-ldapsdknoarch  4.0.14-2.el8
>  ovirt-4.4-centos-ovirt44  4.0 M
>
> Transaction Summary
>
> ==
> Install  3 Packages
>
> Total download size: 4.2 M
> Installed size: 4.5 M
>
> and followed the next upgrade flow steps.
> After finishing the engine upgrade with the "engine-setup" step, it seems
> actually that I can still connect to my engine with my AD accounts, so that
> I don't have to do any manual step described...
>
> Does it match any one other experience?
>
> Gianluca
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/WBQDOZM4PUWJJQ4TBRU33OSLPWVKXDLQ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SOLX5Y4GMUZZX56UNDEAYLXQFHOSOVER/

[ovirt-users] Re: oVirt Node 4.4.2 is now generally available

[Martin Perina]

Hi Gianluca,

please see my replies inline

On Tue, Oct 6, 2020 at 11:37 AM Gianluca Cecchi 
wrote:

> On Tue, Oct 6, 2020 at 11:25 AM Martin Perina  wrote:
>
>>
>>> You say to drive a command form the engine that is a VM that runs inside
>>> the host, but ask to shutdown VMs running on host before...
>>> This is a self hosted engine composed by only one single host.
>>> Normally I would use the procedure from the engine web admin gui, one
>>> host at a time, but with single host it is not possible.
>>>
>>
>> We have said several times, that it doesn't make sense to use oVirt on a
>> single host system. So you either need to attach 2nd host to your setup
>> (preferred) or shutdown all VMS and run manual upgrade of your host OS
>>
>>
> We who
>

So I've spent the past hour deeply investigating our upstream documentation
and you are right, we don't have any clear requirements about the minimal
number of hosts in upstream oVirt documentation.
But here are the facts:

1. To be able to upgrade a host either from UI/RESTAPI or manually using
SSH, the host always needs to be in Maintenance:

https://www.ovirt.org/documentation/administration_guide/#Updating_a_host_between_minor_releases

2. To perform Reinstall or Enroll certificate of a host, the host needs to
be in Maintenance mode

https://www.ovirt.org/documentation/administration_guide/#Reinstalling_Hosts_admin

3. When host is in Maintenance mode, there are no oVirt managed VMs running
on it

https://www.ovirt.org/documentation/administration_guide/#Moving_a_host_to_maintenance_mode

4. When engine is not running (either stopped or crashed), VMs running on
hypervisor hosts are unaffected (meaning they are running independently on
engine), but they are pretty much "pinned to the host they are running on"
(for example VMs cannot be migrated or started/stopped (of course you can
stop this VM from within) without running engine)

So just using above facts here are logical conclusions:

1. Standalone engine installation with only one hypervisor host
- this means that engine runs on bare metal hosts (for example
engine.domain.com) and single hypervisor host is managed by it (for example
host1.domain.com)
- in this case scenario administrator is able to perform all
maintenance task (even though at the cost that VMs running on hypervisor
need to be stopped before switching to Maintenance mode),
  because engine is running independently on hypervisor

2. Hosted engine installation with one hypervisor hosts
- this means that engine runs as a VM (for example engine.domain.com)
inside a single hypervisor host, which is managed by it (for example
host1.domain.com)
- in this scenario maintenance of the host is very limited:
- you cannot move the host to Maintenance, because hosted engine VM
cannot be migrated outside a host
- you can perform global Maintenance and the probably manually stop
hosted engine VM, but then you don't have engine to be able to perform
maintenance tasks (for example, Upgrade, Reinstall or Enroll certificates)

But in both above use cases you cannot use the biggest oVirt advantage and
that's a shared storage among hypervisor hosts, which allows you to perform
live migration of VMs. And thanks to that feature you can perform
maintenance tasks on the host(s) without interruption in providing VM
services.

*From the above it's obvious that we need to really clearly state that in a
production environment oVirt requires to have at least 2 hypervisor hosts
for full functionality.*

In old times there was the all-in-one setup that was substituted from
> single host HCI
>

All-in-one feature has been deprecated in oVirt 3.6 and fully removed in
oVirt 4.0

> ... developers also put extra efforts to setup the wizard comprising the
> single host scenario.
>

Yes, you are right, you can initially set up oVirt with just a single host,
but it's expected that you are going to add an additional host(s) soon.

Obviously it is aimed at test bed / devel / home environments, not
> production ones.
>

Of course, for development use whatever your want, but for production you
care about your setup, because you want the services your offer to run
smoothly

> Do you want me to send you the list of bugzilla contributed by users using
> single host environments that helped Red Hat to have a better working RHV
> too?
>

It's clearly stated that at least 2 hypervisors are required for hosted
engine or standalone RHV installation:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/planning_and_prerequisites_guide/rhv_architecture
But as I mentioned above, we have a bug in oVirt documentation, that such
an important requirement is not clearly stated. And this is not a fault of
a community, this is a fault of oVirt maintainers, that we have forgotten
to me

[ovirt-users] Re: ovirt-engine and host certification is expired in ovirt4.0

[Martin Perina]

Hi,

we have mentioned several times that it doesn't make sense to oVirt on a
single host setup. So you really need to add 2nd host to your setup, move
the 1st host to Maintenance and execute Enroll certificates.

Regards,
Martin

On Sun, Oct 4, 2020 at 5:30 PM  wrote:

> From what I observed (but it's not something I try often), if you try to
> enable maintenance on a host and have VMs on it, it will try migrating the
> VMs first, which is a copy-first, state-transfer-afterwards process. So if
> there is no migration target available or if the copying and state-transfer
> fail, the VM will simply continue to run on the original host... and the
> host will refuse to go into maintenance.
>
> It doesn't solve your problem, but the loss of service you fear shouldn't
> happen either... except sometimes oVirt seems to have bugs or the resulting
> network activity cause confusion.
>
> Ah, perhaps this is important: I've only ever tried that by setting a host
> into maintenance (typically for patch updates) via the GUI. I am far less
> convinced that VM migration would also be triggered if you use the
> 'hosted-engine --set-maintenance --mode=local' variant on the host that
> runs the HostedEngine VM. That might just make it unavailable for newly
> started VMs.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7D6XC4YHIKMWSCJWZC2TJFMMD27PT4LD/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QWKO2IMWKJSEMRYKMTURNZBHEERKU2WW/

[ovirt-users] Re: oVirt Node 4.4.2 is now generally available

[Martin Perina]

On Mon, Oct 5, 2020 at 3:25 PM Gianluca Cecchi 
wrote:

>
>
> On Mon, Oct 5, 2020 at 3:13 PM Dana Elfassy  wrote:
>
>> Can you shutdown the vms just for the upgrade process?
>>
>> On Mon, Oct 5, 2020 at 1:57 PM Gianluca Cecchi 
>> wrote:
>>
>>> On Mon, Oct 5, 2020 at 12:52 PM Dana Elfassy 
>>> wrote:
>>>
>>>> In order to run the playbooks you would also need the parameters that
>>>> they use - some are set on the engine side
>>>> Why can't you upgrade the host from the engine admin portal?
>>>>
>>>>
>>> Because when you upgrade a host you put it into maintenance before.
>>> And this implies no VMs in execution on it.
>>> But if you are in a single host composed environment you cannot
>>>
>>> Gianluca
>>>
>>
> we are talking about chicken-egg problem.
>
> You say to drive a command form the engine that is a VM that runs inside
> the host, but ask to shutdown VMs running on host before...
> This is a self hosted engine composed by only one single host.
> Normally I would use the procedure from the engine web admin gui, one host
> at a time, but with single host it is not possible.
>

We have said several times, that it doesn't make sense to use oVirt on a
single host system. So you either need to attach 2nd host to your setup
(preferred) or shutdown all VMS and run manual upgrade of your host OS


> Gianluca
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3ZU43KQXYJO43CWTDDT733H4YZS4JA2U/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7EATX7RPVUOAQWKLHYOTSTRVJG4M2O6Q/

[ovirt-users] Re: ldap auth problem after upgrade from 4.4.1 to 4.4.2

[Martin Perina]

On Thu, Oct 1, 2020 at 3:18 PM Jiří Sléžka  wrote:

> Hi,
>
> On 10/1/20 2:53 PM, Martin Perina wrote:
> > Hi,
> >
> > it seems that you are affected by
> > https://bugzilla.redhat.com/show_bug.cgi?id=1880149
> > Could you please try the workaround mentioned there?
>
> bingo! Thanks a lot!
>
> It is interesting behavior as my engine has no public ipv6 address (ipv6
> is set to ignore in nm).
>
> also
>
> [root@ovirt ~]# ping6 google.com
> connect: Network is unreachable
>
> but ok, problem is solved :-)
>

Most probably your LDAP server can be resolved to both IPv4 and IPv6
addresses and we choose a random resolved address in aaa-ldap when
connecting. Enabling IPv6 by default was introduced in
https://bugzilla.redhat.com/1726189 but unfortunately we have missed this
scenario (engine IPv4, LDAP dual IPv4/IPv6) during testing ...


> Jiri
>
>
> >
> > Thanks,
> > Martin
> >
> >
> > On Thu, Oct 1, 2020 at 11:17 AM Jiří Sléžka  > <mailto:jiri.sle...@slu.cz>> wrote:
> >
> > Hi,
> >
> > I just upgraded my HE to 4.4.2 but now I cannot login using my ldap
> aaa
> > profile anymore.
> >
> > We are using Novell/NetIQ E-directory (load ballanced by haproxy,
> > probably not important...)
> >
> > In 4.4.1 I was hit by removed TLSv1 (which is the newest protocol
> > supported by our edir) from default crypto policies but I was able
> > revert it by
> >
> > update-crypto-policies --set LEGACY
> >
> > after upgrade to 4.4.2 the error is
> >
> > server_error: An error occurred while attempting to connect to server
> > ldap1.slu.cz:389 <http://ldap1.slu.cz:389>:
> > IOException(LDAPException(resultCode=91 (connect
> > error), errorMessage='An error occurred while attempting to
> establish a
> > connection to server ldap1.slu.cz/193.84.206.212:389
> > <http://ldap1.slu.cz/193.84.206.212:389>:
> > SocketException(Network is unreachable (connect failed)),
> > ldapSDKVersion=4.0.14,
> > revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb'))
> >
> > but our ldap server is reachable from ovirt, I tested it via (also
> ldaps
> > and startls variants are working)
> >
> > ldapsearch -H ldap://ldap1.slu.cz <http://ldap1.slu.cz> -x -D
> > cn=*,ou=**,o=su -w
> > '' -b 'o=su'
> >
> > As a workaround I tried to set plain ldap protocol in profile
> >
> > cat /etc/ovirt-engine/aaa/CRO.properties
> >
> >
> > include = 
> >
> > vars.server = ldap1.slu.cz <http://ldap1.slu.cz>
> > vars.port = 389
> > vars.user = cn=*,ou=**,o=su
> > vars.password = **
> >
> > pool.default.serverset.single.server = ${global:vars.server}
> > pool.default.serverset.single.port = ${global:vars.port}
> > pool.default.auth.simple.bindDN = ${global:vars.user}
> > pool.default.auth.simple.password = ${global:vars.password}
> >
> > pool.default.ssl.startTLS = false
> > pool.default.ssl.enable = false
> > #pool.default.ssl.protocol = TLSv1
> > #pool.default.ssl.startTLSProtocol = TLSv1
> > #pool.default.ssl.insecure = true
> >
> > sequence-init.init.100-my-edir-init-vars = my-edir-init-vars
> > sequence.my-edir-init-vars.010.description = set baseDN
> > sequence.my-edir-init-vars.010.type = var-set
> > sequence.my-edir-init-vars.010.var-set.variable = simple_baseDN
> > sequence.my-edir-init-vars.010.var-set.value = o=su
> >
> > #search.default.search-request.derefPolicy = ALWAYS
> >
> >
> > but the error is the same...
> >
> > ovirt-engine-extensions-tool aaa login-user --profile=CRO
> > --user-name=my_user
> >
> > 
> > WARNING:
> [ovirt-engine-extension-aaa-ldap.authn::SU-LDAP-authentication]
> > TLS/SSL insecure mode
> > ...
> > WARNING: [ovirt-engine-extension-aaa-ldap.authn::auth.CRO.slu.cz
> > <http://auth.CRO.slu.cz>] Cannot
> > initialize LDAP framework, deferring initialization. Error: An error
> > occurred while attempting to connect to server ldap1.slu.cz:389
> > <http://ldap1.slu.cz:389>:
> > IOException(LDAPException(resultCode=91 (connect error),
> > errorMessage='An error occurred while attempting to establish a
> > connection to server ldap1.slu.cz/193.84.206.212:389
> > <http://ldap1.slu

[ovirt-users] Re: ldap auth problem after upgrade from 4.4.1 to 4.4.2

[Martin Perina]

Hi,

it seems that you are affected by
https://bugzilla.redhat.com/show_bug.cgi?id=1880149
Could you please try the workaround mentioned there?

Thanks,
Martin


On Thu, Oct 1, 2020 at 11:17 AM Jiří Sléžka  wrote:

> Hi,
>
> I just upgraded my HE to 4.4.2 but now I cannot login using my ldap aaa
> profile anymore.
>
> We are using Novell/NetIQ E-directory (load ballanced by haproxy,
> probably not important...)
>
> In 4.4.1 I was hit by removed TLSv1 (which is the newest protocol
> supported by our edir) from default crypto policies but I was able
> revert it by
>
> update-crypto-policies --set LEGACY
>
> after upgrade to 4.4.2 the error is
>
> server_error: An error occurred while attempting to connect to server
> ldap1.slu.cz:389: IOException(LDAPException(resultCode=91 (connect
> error), errorMessage='An error occurred while attempting to establish a
> connection to server ldap1.slu.cz/193.84.206.212:389:
> SocketException(Network is unreachable (connect failed)),
> ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb'))
>
> but our ldap server is reachable from ovirt, I tested it via (also ldaps
> and startls variants are working)
>
> ldapsearch -H ldap://ldap1.slu.cz -x -D cn=*,ou=**,o=su -w
> '' -b 'o=su'
>
> As a workaround I tried to set plain ldap protocol in profile
>
> cat /etc/ovirt-engine/aaa/CRO.properties
>
>
> include = 
>
> vars.server = ldap1.slu.cz
> vars.port = 389
> vars.user = cn=*,ou=**,o=su
> vars.password = **
>
> pool.default.serverset.single.server = ${global:vars.server}
> pool.default.serverset.single.port = ${global:vars.port}
> pool.default.auth.simple.bindDN = ${global:vars.user}
> pool.default.auth.simple.password = ${global:vars.password}
>
> pool.default.ssl.startTLS = false
> pool.default.ssl.enable = false
> #pool.default.ssl.protocol = TLSv1
> #pool.default.ssl.startTLSProtocol = TLSv1
> #pool.default.ssl.insecure = true
>
> sequence-init.init.100-my-edir-init-vars = my-edir-init-vars
> sequence.my-edir-init-vars.010.description = set baseDN
> sequence.my-edir-init-vars.010.type = var-set
> sequence.my-edir-init-vars.010.var-set.variable = simple_baseDN
> sequence.my-edir-init-vars.010.var-set.value = o=su
>
> #search.default.search-request.derefPolicy = ALWAYS
>
>
> but the error is the same...
>
> ovirt-engine-extensions-tool aaa login-user --profile=CRO
> --user-name=my_user
>
> 
> WARNING: [ovirt-engine-extension-aaa-ldap.authn::SU-LDAP-authentication]
> TLS/SSL insecure mode
> ...
> WARNING: [ovirt-engine-extension-aaa-ldap.authn::auth.CRO.slu.cz] Cannot
> initialize LDAP framework, deferring initialization. Error: An error
> occurred while attempting to connect to server ldap1.slu.cz:389:
> IOException(LDAPException(resultCode=91 (connect error),
> errorMessage='An error occurred while attempting to establish a
> connection to server ldap1.slu.cz/193.84.206.212:389:
> SocketException(Network is unreachable (connect failed)),
> ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb'))
> ...
> INFO: API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS
> profile='CRO' user='my_user'
> Password:
> ...
> WARNING: [ovirt-engine-extension-aaa-ldap.authn::auth.CRO.slu.cz] Cannot
> initialize LDAP framework, deferring initialization. Error: An error
> occurred while attempting to connect to server ldap1.slu.cz:389:
> IOException(LDAPException(resultCode=91 (connect error),
> errorMessage='An error occurred while attempting to establish a
> connection to server ldap1.slu.cz/193.84.206.212:389:
> SocketException(Network is unreachable (connect failed)),
> ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb'))
> Oct 01, 2020 10:57:37 AM
> org.ovirt.engine.exttool.core.ExtensionsToolExecutor main
> SEVERE: An error occurred while attempting to connect to server
> ldap1.slu.cz:389:  IOException(LDAPException(resultCode=91 (connect
> error), errorMessage='An error occurred while attempting to establish a
> connection to server ldap1.slu.cz/193.84.206.212:389:
> SocketException(Network is unreachable (connect failed)),
> ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb'))
>
> debug with tcpdump reveals only that connection is made and there are
> only "bindRequest" and "bindResponse success" messages visible (with
> correct tcp handshake and close) and nothing more
>
> any help would be appreciated
>
> Cheers,
>
> Jiri
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https

[ovirt-users] Re: Adding host fails with Ansible host-deploy role: Internal server error.

[Martin Perina]

On Thu, Sep 24, 2020 at 11:38 AM Andrey Andrey via Users 
wrote:

> It all worked. Thank you very much.
>

Hi Andrey,
It looks like https://bugzilla.redhat.com/show_bug.cgi?id=1880171
Have you fixed the problem using the workaround mentioned in the above bug?
Or was it a different issue?

Thanks,
Martin


___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/5WUFJDPPPW5ERK2VJ3FEWY3UVXORMYLR/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NVKG4Y7FBITI3UEQ7BNXGJAP4SA5ZW5O/

[ovirt-users] Re: Upgrade 4.3 to 4.4 node to manager communication error

[Martin Perina]

On Thu, Sep 3, 2020 at 2:56 PM Pierre pit  wrote:

> I have a communication problem between all the nodes and the manager
> following the upgrade from 4.3 to 4.4. I followed the procedure of update
> 4.3 to 4.4 everything worked correctly, according to the import export
> scripts as well as the installation setup on the new manager in 4.4, all is
> ok. Only after connection to the manager, all the nodes are in a down
> state, there is no more communication between the manager newly installed
> in 4.4 and the nodes still in production in 4.3.
>
> In the manager I have this message for all the nodes:
> ` VDSM virtdell8 command Get Host Capabilities failed: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: Algorithm
> constraints check failed on signature algorithm: SHA256withRSA`
>

Hi Pierre,

Hmm, the following error is a bit misleading, but it gives a clue to me.
Could you please check the key size of your ovirt-engine CA key?

openssl x509 -text -noout -in /etc/pki/ovirt-engine/ca.pem | grep 'RSA
Public-Key'

If your key size is less than 2048 bits, then you need to change crypto
policy of your CentOS 8 to LEGACY using below steps:

1. Execute 'update-crypto-policies --set LEGACY'
2. Reboot the machine

That should mitigate the issue, but I'm really curious, this should not
happen unless your engine was installed in oVirt 3.0 era and then
continuously upgraded up to 4.4, because we have switched to 2048 bits in
2012:

https://gerrit.ovirt.org/4389

Is this your case?


Regards,
Martin


> And on the nodes:
> ` 2020-09-01 17:38:13,083+0200 ERROR (Reactor thread)
> [ProtocolDetector.SSLHandshakeDispatcher] ssl handshake: SSLError, address:
> :::XXX.XXX.XXX.XXX (sslutils:264)
>  vdsm[4400]: ERROR ssl handshake: SSLError, address:
> :::XXX.XXX.XXX.XXX`
>
> After a search on the forums I found a similar error on version 4.2 only
> the solution of comment `ssl_excludes` in the `/etc/vdsm/vdsm.conf` file
> but does not apply to my problem.
>
> I unfortunately had to backtrack because it was no longer possible to
> control ovirt and use the manager for our production. the new machine with
> the manager in 4.4 is offline while a solution is found
>
> Do you know where should I look in order to solve this problem?
>
> thank you in advance
> Pierre
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CE34HLTRN54HVOJNK3ZCNXH66CIYFSQS/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7HGFTJMMZYUUGW2O3IMP27RKABRISTLD/

[ovirt-users] Re: ovirt4.4 and ldap auth with starttls

[Martin Perina]

Hi,

legacy ciphers and protocols are disabled on EL8 by default, for more
information please take a look at crypto-policies:

https://access.redhat.com/articles/3666211
https://access.redhat.com/articles/3642912

So in theory if you switch to LEGACY crypto-policy on ovirt-engine machine,
you could be able to use TLSv1, but we have never tested it and we highly
recommend to use only TLSv1.2 or newer.

Regards,
Martin


On Fri, Aug 7, 2020 at 2:11 PM Jiří Sléžka  wrote:

> Hello,
>
> better start new thread...
>
> it looks like tls1.0 is not supported anymore in
> ovirt-engine-extension-aaa-ldap
>
> I just migrated engine from 4.3 to 4.4 and cannot use my ldap profile
> because
>
> server_error: The connection reader was unable to successfully complete
> TLS negotiation: SSLHandshakeException(The server selected protocol
> version TLS10 is not accepted by client preferences [TLS12]),
> ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb
>
> but when I try to force tls 1.0 by setting
>
> ...
> pool.default.ssl.startTLS = true
> pool.default.ssl.startTLSProtocol = TLSv1
> ...
>
> I got
>
> server_error: The connection reader was unable to successfully complete
> TLS negotiation: SSLHandshakeException(No appropriate protocol (protocol
> is disabled or cipher suites are inappropriate)), ldapSDKVersion=4.0.14,
> revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb
>
> I can't switch to something better on server side, is it possible to
> allow weak ciphers/protocols on client side?
>
> Thanks in advance,
>
> Jiri
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CBVIAEO3R4BQNJ5453O2D5NJH7FQ7YGR/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IOMG3R7W3RTGWNEIDRYEVHSWLUGCFZMJ/

[ovirt-users] Re: Unassigned hosts

[Martin Perina]

t;>>>> Artur
>>>>>
>>>>>
>>>>>
>>>>> On Thu, Aug 6, 2020 at 8:01 AM Nardus Geldenhuys 
>>>>> wrote:
>>>>>
>>>>>> Also see this in engine:
>>>>>>
>>>>>> Aug 6, 2020, 7:37:17 AM
>>>>>> VDSM someserver command Get Host Capabilities failed: Message timeout
>>>>>> which can be caused by communication issues
>>>>>>
>>>>>> On Thu, 6 Aug 2020 at 07:09, Strahil Nikolov 
>>>>>> wrote:
>>>>>>
>>>>>>> Can you fheck for errors on the affected host. Most probably you
>>>>>>> need the vdsm logs.
>>>>>>>
>>>>>>> Best Regards,
>>>>>>> Strahil Nikolov
>>>>>>>
>>>>>>> На 6 август 2020 г. 7:40:23 GMT+03:00, Nardus Geldenhuys <
>>>>>>> nard...@gmail.com> написа:
>>>>>>> >Hi Strahil
>>>>>>> >
>>>>>>> >Hope you are well. I get the following error when I tried to confirm
>>>>>>> >reboot:
>>>>>>> >
>>>>>>> >Error while executing action: Cannot confirm 'Host has been
>>>>>>> rebooted'
>>>>>>> >Host.
>>>>>>> >Valid Host statuses are "Non operational", "Maintenance" or
>>>>>>> >"Connecting".
>>>>>>> >
>>>>>>> >And I can't put it in maintenance, only option is "restart" or
>>>>>>> "stop".
>>>>>>> >
>>>>>>> >Regards
>>>>>>> >
>>>>>>> >Nar
>>>>>>> >
>>>>>>> >On Thu, 6 Aug 2020 at 06:16, Strahil Nikolov >>>>>> >
>>>>>>> >wrote:
>>>>>>> >
>>>>>>> >> After rebooting the node, have you "marked" it that it was
>>>>>>> rebooted ?
>>>>>>> >>
>>>>>>> >> Best Regards,
>>>>>>> >> Strahil Nikolov
>>>>>>> >>
>>>>>>> >> На 5 август 2020 г. 21:29:04 GMT+03:00, Nardus Geldenhuys <
>>>>>>> >> nard...@gmail.com> написа:
>>>>>>> >> >Hi oVirt land
>>>>>>> >> >
>>>>>>> >> >Hope you are well. Got a bit of an issue, actually a big issue.
>>>>>>> We
>>>>>>> >had
>>>>>>> >> >some
>>>>>>> >> >sort of dip of some sort. All the VM's is still running, but
>>>>>>> some of
>>>>>>> >> >the
>>>>>>> >> >hosts is show "Unassigned" or "NonResponsive". So all the hosts
>>>>>>> was
>>>>>>> >> >showing
>>>>>>> >> >UP and was fine before our dip. So I did increase
>>>>>>> >vdsHeartbeatInSecond
>>>>>>> >> >to
>>>>>>> >> >240, no luck.
>>>>>>> >> >
>>>>>>> >> >I still get a timeout on the engine lock even thou I can connect
>>>>>>> to
>>>>>>> >> >that
>>>>>>> >> >host from the engine using nc to test to port 54321. I also did
>>>>>>> >restart
>>>>>>> >> >vdsmd and also rebooted the host with no luck.
>>>>>>> >> >
>>>>>>> >> > nc -v someserver 54321
>>>>>>> >> >Ncat: Version 7.50 ( https://nmap.org/ncat )
>>>>>>> >> >Ncat: Connected to 172.40.2.172:54321.
>>>>>>> >> >
>>>>>>> >> >2020-08-05 20:20:34,256+02 ERROR
>>>>>>> >>
>>>>>>>
>>>>>>> >>[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>>>>>>> >> >(EE-ManagedThreadFactory-engineScheduled-Thread-70) [] EVENT_ID:
>>>>>>> >> >VDS_BROKER_COMMAND_FAILURE(10,802), VDSM someserver command Get
>>>>>>> Host
>>>>>>> >> >Capabilities failed: Message timeout which can be caused by
>>>>>>> >> >communication
>>>>>>> >> >issues
>>>>>>> >> >
>>>>>>> >> >Any troubleshoot ideas will be gladly appreciated.
>>>>>>> >> >
>>>>>>> >> >Regards
>>>>>>> >> >
>>>>>>> >> >Nar
>>>>>>> >>
>>>>>>>
>>>>>> ___
>>>>>> Users mailing list -- users@ovirt.org
>>>>>> To unsubscribe send an email to users-le...@ovirt.org
>>>>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>>>>> oVirt Code of Conduct:
>>>>>> https://www.ovirt.org/community/about/community-guidelines/
>>>>>> List Archives:
>>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/C4HB2J3MH76FI2325Z4AV4VCCEKH4M3S/
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Artur Socha
>>>>> Senior Software Engineer, RHV
>>>>> Red Hat
>>>>>
>>>>
>>>
>>> --
>>> Artur Socha
>>> Senior Software Engineer, RHV
>>> Red Hat
>>>
>>
>
> --
> Artur Socha
> Senior Software Engineer, RHV
> Red Hat
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FVUGIAOAM6FGPNJO4BHDVNNZ4JZ7ZBIA/

[ovirt-users] Re: ovirt 4.4.1.1 hci and problems with ansible 2.9.10 and/or missing python2

[Martin Perina]

I've reverified that install new host, check for upgrades, upgrade host and
enroll certificates work fine even with ansible 2.9.10 on standalone engine
installation. So there is some issue inside HCI installer, which doesn't
handle python interpreter correctly.

Gianluca, could you please create a bug for that?

Thanks,
Martin


On Fri, Jul 17, 2020 at 11:36 AM Gianluca Cecchi 
wrote:

>
>
> On Fri, Jul 17, 2020 at 11:25 AM Gianluca Cecchi <
> gianluca.cec...@gmail.com> wrote:
>
>> On Fri, Jul 17, 2020 at 11:04 AM Gianluca Cecchi <
>> gianluca.cec...@gmail.com> wrote:
>>
>>> On Fri, Jul 17, 2020 at 10:58 AM Gianluca Cecchi <
>>> gianluca.cec...@gmail.com> wrote:
>>>
>>>> On Fri, Jul 17, 2020 at 10:54 AM Martin Perina 
>>>> wrote:
>>>>
>>>>> Hi Gianluca,
>>>>>
>>>>> that's very strange error, because I'm 100% sure we are using yum
>>>>> module with Python3 in several other roles including adding host to engine
>>>>> or upgrading host and so far I haven't heard any issue with ansible 2.9.10
>>>>> and yum module.
>>>>>
>>>>> Gobinda, wouldn't enforcing python interpreter version help there?
>>>>>
>>>>>
>>>>> https://github.com/oVirt/ovirt-engine/blob/master/packaging/ansible-runner-service-project/project/roles/ovirt-host-deploy-facts/tasks/main.yml#L28
>>>>>
>>>>> Regards,
>>>>> Martin
>>>>>
>>>>>
>>>> I have a very clean install from 4.1.1.1 node ng iso anf I'm the third
>>>> to notice that with this release.
>>>> The engine deployment is going on. Not finished yet, but to have ti go
>>>> I had to modify, with the same strategy ("use: dnf" with package module and
>>>> use "package" instead of "yum" and also specifying "use: dnf") in these
>>>> files under /usr/share/ansible/roles:
>>>>
>>>> ovirt.engine-setup/tasks/engine_setup.yml
>>>> ovirt.engine-setup/tasks/install_packages.yml
>>>> ovirt.hosted_engine_setup/tasks/install_packages.yml
>>>>
>>>> ovirt.hosted_engine_setup/tasks/create_target_vm/03_hosted_engine_final_tasks.yml
>>>> ovirt.hosted_engine_setup/tasks/install_appliance.yml
>>>>
>>>> Gianluca
>>>>
>>>
>>> The installation from the iso was with all default values.
>>> The only "non standard" thing, if we want it to call this way is that
>>> before running the wizard, on the host I pre-installed the appliance
>>> package, to shorten the deploy phase hereafter.
>>> And to do it I executed, because of habit:
>>> yum install ovirt-engine-appliance
>>>
>>> instead of "dnf install...", but I think this doesn't influence ansible
>>> autodetect when using "package" module or the error about python2 when
>>> using "yum" module...
>>>
>>> Gianluca
>>>
>>
>> The engine deployment failed in the phase where it tries to add the host
>> and waits for the host to be up and if I go into the logs in
>>
>> /var/log/ovirt-hosted-engine-setup/engine-logs-2020-07-17T08:30:48Z/ovirt-engine/host-deploy/
>>
>> the file
>> ovirt-host-deploy-ansible-20200717104103-novirt2.example.net-3a710f0c.log
>> contains
>>
>> 020-07-17 10:41:17 CEST - fatal: [novirt2.example.net]: FAILED! =>
>> {"changed": false, "module_stderr": "/bin/sh: /usr/bin
>> /python2: No such file or directory\n", "module_stdout": "", "msg": "The
>> module failed to execute correctly, you probably
>> need to set the interpreter.\nSee stdout/stderr for the exact error",
>> "rc": 127}
>> 2020-07-17 10:41:17 CEST - {
>>   "status" : "OK",
>>   "msg" : "",
>>   "data" : {
>> "uuid" : "00f4c6a8-8423-4a2a-bfd5-f38c34f56ecf",
>> "counter" : 53,
>> "stdout" : "fatal: [novirt2.example.net]: FAILED! => {\"changed\":
>> false, \"module_stderr\": \"/bin/sh: /usr/bin/pytho
>> n2: No such file or directory\\n\", \"module_stdout\": \"\", \"msg\":
>> \"The module failed to execute correctly, you probab
>> ly need to set the interpreter.\\nSee stdout/stderr for the exact
>> error\", \"rc\": 127}"

[ovirt-users] Re: ovirt 4.4.1.1 hci and problems with ansible 2.9.10 and/or missing python2

[Martin Perina]

Hi Gianluca,

that's very strange error, because I'm 100% sure we are using yum module
with Python3 in several other roles including adding host to engine or
upgrading host and so far I haven't heard any issue with ansible 2.9.10 and
yum module.

Gobinda, wouldn't enforcing python interpreter version help there?

https://github.com/oVirt/ovirt-engine/blob/master/packaging/ansible-runner-service-project/project/roles/ovirt-host-deploy-facts/tasks/main.yml#L28

Regards,
Martin


On Fri, Jul 17, 2020 at 10:22 AM Gianluca Cecchi 
wrote:

> Same problem for the next stage
>
> [ INFO ] TASK [ovirt.hosted_engine_setup : Install oVirt Hosted Engine
> packages]
> [ ERROR ] fatal: [localhost]: FAILED! => {"attempts": 10, "changed":
> false, "msg": "The Python 2 yum module is needed for this module. If you
> require Python 3 support use the `dnf` Ansible module instead."}
>
> I think this is a major problem for new installations.
> How can I get back python2 to see if it works without having to go through
> all yaml files?
>
> Gianluca
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QJ54NVDAGWXXPCT7AHEJIQYQR5IZ5IZU/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EY6SIF3FFRQ6PVMRNH3TJJUZAXABCKCD/

[ovirt-users] Re: What permission do I need to get API access

[Martin Perina]

Hi Miguel,

So could you please share your playbook with us and the exact error you are
getting during its execution?

On Tue, Jul 14, 2020 at 4:08 PM  wrote:

> We are trying to create vm using ansible scripts. However, also tried to
> log into the API web https://master-server/ovirt-engine/api with
> authentication error messages. I think the problem is authentication method
> since we are using LDAP accounts, to access vm portal or api web URL we use
> email address too.
>

There should be no difference in usernames provided into UI or
RESTAPI/SDK/Ansible modules. The only thing which differs is how to provide
it:

1. In UI you are providing username and the select a profile (for example
username can be 'admin' and profile 'internal')
2. For RESTAPI/SDK/Ansible you are entering in the format of
username@profile (for example 'admin@internal')

Thanks,
Martin

___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/AIHD5BVBI2V4BLM7IEDRJLJZBMJQY4OY/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HS2OQQYGBJQ3IAWCVGPLLBDWX6ACJ4TE/

[ovirt-users] Re: What permission do I need to get API access

[Martin Perina]

On Mon, Jul 13, 2020 at 4:37 PM Sandro Bonazzola 
wrote:

> +Martin Perina  can you help here?
>
> Il giorno mar 7 lug 2020 alle ore 19:30  ha
> scritto:
>
>> We use LDAP authentication to login to ovirt cluster, actually, admin and
>> another user account have to access API with no problem. My account does
>> cannot access to API despite that had SuperUser privileges than those
>> accounts that already access API.
>>
>> Every time I tried to access API I get next message:
>> Error during SSO authentication access_denied: Cannot authenticate user '
>> diagsbuil...@ralntdom.rtptgcs.com':
>> No valid profile found in credentials..
>>
>
What part of RESTAPI action are you calling? Do you get the error while
obtaining authentication token or when accessing RESTAPI URL with the token?

http://ovirt.github.io/ovirt-engine-api-model/4.4/#_authentication


>> The account does exist and permissions to enter to portal vms
>>
>
For VM portal you don't need to have administrator permissions, user
permissions are enough

>
>> What do need to do to grant access to API?
>>
>
As mentioned above it depends on the action you want to call using RESTAPI

> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/XFIRPSPCNYTACGWMYKRI275MGREPGTGX/
>>
>
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R RHV
>
> Red Hat EMEA <https://www.redhat.com/>
>
> sbona...@redhat.com
> <https://www.redhat.com/>
>
> *Red Hat respects your work life balance. Therefore there is no need to
> answer this email out of your office hours.
> <https://mojo.redhat.com/docs/DOC-1199578>*
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HB36VHL4ZAEPZKS2U7YQO673EN3LSPEY/

[ovirt-users] Re: Admin portal will not load after installing updates

[Martin Perina]

On Thu, Jul 9, 2020 at 7:07 PM Strahil Nikolov via Users 
wrote:

> If you have access to the HE, can you check the rpm status (rpm -Va) for
> issues.
> Configuration files  could be changed ,  but libraries/binaries  not.
>
> What is the output of hosted-engine --vm-status ?I had a similar issue and
> it was an addon in my browser (as I used profile, the situation was the
> same on Windows and Linux :D )
>
> Best Regards,
> Strahil Nikolov
>
> На 9 юли 2020 г. 18:32:39 GMT+03:00, Michael Watters 
> написа:
> >After installing updates on our ovirt-engine running CentOS 7.8 the
> >administration portal will no longer load.  The engine.log shows an
> >error as follows.
> >
> >2020-07-09 11:26:27,094-04 ERROR
> >[org.ovirt.engine.core.bll.GetConfigurationValuesQuery] (default
> >task-2)
> >[d97ed384-f919-412b-94e2-7ec04a56ea9c] Query
> >'GetConfigurationValuesQuery' failed: null
> >2020-07-09 11:26:27,095-04 ERROR
> >[org.ovirt.engine.core.bll.GetConfigurationValuesQuery] (default
> >task-2)
> >[d97ed384-f919-412b-94e2-7ec04a56ea9c] Exception:
> >java.lang.NullPointerException
> >
> >Does anybody know what would cause this or how to fix it?
>

Hi Michael,

>From and to which oVirt version have you tried to upgrade? Have you
upgraded your oVirt engine according to the upgrade guide?

https://www.ovirt.org/documentation/upgrade_guide/

Because the above error seems to me like an issue when you haven't run
engine-setup after updating setup packages.

Regards,
Martin

> >
> >___
> >Users mailing list -- users@ovirt.org
> >To unsubscribe send an email to users-le...@ovirt.org
> >Privacy Statement: https://www.ovirt.org/privacy-policy.html
> >oVirt Code of Conduct:
> >https://www.ovirt.org/community/about/community-guidelines/
> >List Archives:
> >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QYGA242ZB4R4SG6ZPXJQGRQX6MJSEBV3/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/5Y6X5OBCCDWVEYJF2FLXP4VDZWT5KVDZ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/773Q5EFBRXRGIYRJ5OWAD75UJOIGBHIP/

[ovirt-users] Re: Some nodes periodically display as Non Responsive

[Martin Perina]

Hi Anton,

to diagnose the issue we would need to have logs from both engine and
affected host.

Regards,
Martin


On Wed, Jul 1, 2020 at 6:51 AM Anton Louw via Users  wrote:

>
>
> Hi Everybody,
>
>
>
> I am got some strange things happening. I have got two data centers, DC1
> and DC2, in DC1, some of my nodes (Not all the time and not all the nodes)
> go into a “not responding” state. I can still ping the hosts, and I can
> still access the VMs on the hosts. My Engine sits in DC2, and this does not
> happen to any of the hosts in DC2.
>
>
>
> It seems like the Engine loses connectivity to the hosts in DC1, and then
> cannot re-establish the connection.
>
>
>
> Is there anywhere I can check to get more insight into what is actually
> happening?
>
>
>
> Thanks
>
>
>
> *Anton Louw*
> *Cloud Engineer: Storage and Virtualization* at *Vox*
> --
> *T:*  087 805  | *D:* 087 805 1572
> *M:* N/A
> *E:* anton.l...@voxtelecom.co.za
> *A:* Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
> www.vox.co.za
>
> [image: F] <https://www.facebook.com/voxtelecomZA>
> [image: T] <https://www.twitter.com/voxtelecom>
> [image: I] <https://www.instagram.com/voxtelecomza/>
> [image: L] <https://www.linkedin.com/company/voxtelecom>
> [image: Y] <https://www.youtube.com/user/VoxTelecom>
>
> [image: #VoxBrand]
> <https://www.vox.co.za/fibre/fibre-to-the-home/?prod=HOME>
> *Disclaimer*
>
> The contents of this email are confidential to the sender and the intended
> recipient. Unless the contents are clearly and entirely of a personal
> nature, they are subject to copyright in favour of the holding company of
> the Vox group of companies. Any recipient who receives this email in error
> should immediately report the error to the sender and permanently delete
> this email from all storage devices.
>
> This email has been scanned for viruses and malware, and may have been
> automatically archived by *Mimecast Ltd*, an innovator in Software as a
> Service (SaaS) for business. Providing a *safer* and *more useful* place
> for your human generated data. Specializing in; Security, archiving and
> compliance. To find out more Click Here
> <https://www.voxtelecom.co.za/security/mimecast/?prod=Enterprise>.
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/TRMWV4Q6AFHG5PIXOJGVM4LKWWI6F6XZ/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FKPLXTTV5RYWOAKQTN3USZWDXSUMMZGM/

[ovirt-users] Re: New fenceType in oVirt code for IBM OpenBMC

[Martin Perina]

On Wed, Jul 1, 2020 at 1:57 AM Vinícius Ferrão via Users 
wrote:

> Hello,
>
> After some days scratching my head I found that oVirt is probably missing
> fenceTypes for IBM’s implementation of OpenBMC in the Power Management
> section. The host machine is an OpenPOWER AC922 (ppc64le).
>
> The BMC basically is an “ipmilan” device but the ciphers must be defined
> as 3 or 17 by default:
>
> [root@h01 ~]# ipmitool -I lanplus -H 10.20.10.2 root -P 0penBmc -L
> operator -C 3 channel getciphers ipmi
> ID   IANAAuth AlgIntegrity Alg   Confidentiality Alg
> 3N/A hmac_sha1   hmac_sha1_96aes_cbc_128
> 17   N/A hmac_sha256 sha256_128  aes_cbc_128
>
> The default ipmilan connector forces the option cipher=1 which breaks the
> communication.
>

Hi,

have you tried to overwrite the default by adding cipher=3 into Options
field when adding/updating fence agent configuration for specific host?

Eli, looking at
https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/ipmi-second-gen-interface-spec-v2-rev1-1.pdf
I'm not sure our defaults make sense, because by default we enable IPMIv2
(lanplus=1), but we set IPMIv1 cipher support (cipher=1). Or am I missing
something?

Regards,
Martin

>
> So I was reading the code and found this “fenceType” class, but I wasn't
> able to found where to define those classes. So I can create another one
> called something like openbmc to set cipher=17 by default.
>
> Another question is how bad the output is, it only returns a JSON-RPC
> generic error. But I don’t know how to suggest a fix for this.
>
> Thanks,
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BP33DZ3AET53DGS7TAD6L765WKQIOW7B/
>


-- 
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5PKQNM3GUAMYDU4R2PVKS5YGPJZHBOP6/